Function at 0x794850
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x1a8
mov eax, dword [0x94bd40]
xor eax, esp
mov dword [esp + 0x1a4], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x74], ecx
mov ecx, dword [esi + 0x5c]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x14], ecx
mov ecx, dword [esi + 0x24]
push edi
mov dword [esp + 0x3c], eax
mov edi, 1
mov dword [esp + 0x44], ecx
mov ecx, dword [esi + 4]
sub eax, ecx
mov dword [esp + 0x68], edx
add edx, ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x38], ecx
mov ecx, dword [esi + 0xb8]
mov dword [esp + 0x7c], edx
mov edx, edi
shl edx, cl
mov ecx, dword [esi + 0x10]
sub eax, ecx
mov dword [esp + 0x34], esi
mov esi, dword [esp + 0x28]
sub esi, edx
mov dword [esp + 0x2c], 3
cmp eax, edx
mov eax, esi
mov esi, dword [esp + 0x34]
cmovbe eax, ecx
push 0xcf1bbcdc
push 0xbb000000
cmp dword [esi + 0x18], 0
mov edx, dword [esi + 0x54]
cmovne eax, ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
mov ecx, 6
mov eax, dword [esi + 0xc4]
cmp eax, ecx
mov dword [esp + 0x9c], edx
cmovb ecx, eax
mov eax, dword [esi + 0x50]
mov dword [esp + 0x58], eax
mov dword [esp + 0x98], eax
mov eax, dword [esi + 0xb4]
shl edi, cl
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], eax
mov edi, dword [eax + 0x5c]
mov esi, dword [eax + 0x28]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x2c], edi
push dword [eax + 4]
push dword [eax]
call fcn.007bcf30
mov edi, dword [esp + 0x64]
mov ecx, 0x38
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], edx
sub ecx, dword [edi + 0x24]
call fcn.007bcf90
mov edi, dword [esp + 0x24]
mov dword [esp + 0x54], eax
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x24], 0x3f
lea ecx, [eax + esi]
mov esi, dword [esp + 0x34]
lea eax, [edi + eax*4]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], eax
cmp dword [esi + 0xdc], 0
jne 0x794c7a
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x28]
mov edx, dword [esi + 0x1c]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x40], eax
mov eax, edi
sub eax, edx
mov dword [esp + 0x14], edx
mov dword [esp + 0x58], ecx
cmp eax, 0x180
jbe 0x794b7e
lea eax, [edx + 0x60]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x1c], eax
cmp edx, dword [esp + 0x40]
jae 0x794ab3
mov eax, 0x38
sub eax, dword [esp + 0x44]
mov edi, eax
nop dword [eax]
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + ecx + 0xc]
push dword [edx + ecx + 8]
call fcn.007bcf30
xor eax, dword [esi + 0x50]
mov ecx, edi
xor edx, dword [esi + 0x54]
call fcn.007bcf90
mov ecx, eax
mov eax, dword [esp + 0x14]
and eax, 7
mov edx, dword [esi + eax*4 + 0x2c]
mov dword [esi + eax*4 + 0x2c], ecx
mov eax, edx
mov ecx, dword [esp + 0x20]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x18]
add edx, eax
lea esi, [ecx + eax*4]
mov eax, 0
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x24]
add ecx, eax
mov eax, dword [esp + 0x1c]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x14]
mov dword [esi + ecx*4], edx
inc edx
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x14], edx
cmp edx, dword [esp + 0x40]
jb 0x794a10
mov eax, dword [esi + 0x5c]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x58], eax
mov eax, dword [esi + 0x24]
lea edx, [edi - 0x20]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x38]
add eax, edx
mov dword [esp + 0x14], edx
lea ecx, [edi + 1]
mov dword [esp + 0x90], edx
cmp eax, ecx
mov eax, dword [esp + 0x38]
jbe 0x794ae1
xor ecx, ecx
jmp 0x794ae6
sub ecx, eax
sub ecx, edx
inc ecx
cmp ecx, 8
mov dword [esp + 0x6c], 8
cmova ecx, dword [esp + 0x6c]
add ecx, edx
mov dword [esp + 0x80], ecx
cmp edx, ecx
jae 0x794b82
mov edi, dword [esp + 0x90]
mov ecx, 0x38
sub ecx, dword [esp + 0x40]
mov dword [esp + 0x6c], ecx
nop word [eax + eax]
push 0xcf1bbcdc
push 0xbb000000
push dword [edi + eax + 4]
push dword [edi + eax]
call fcn.007bcf30
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x6c]
call fcn.007bcf90
mov ecx, eax
mov eax, edi
and eax, 7
inc edi
mov dword [esi + eax*4 + 0x2c], ecx
mov eax, dword [esp + 0x38]
cmp edi, dword [esp + 0x80]
jb 0x794b20
mov eax, dword [esi + 0x5c]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x58], eax
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x28]
cmp edx, eax
jae 0x794c39
mov edi, dword [esp + 0x58]
mov eax, 0x38
sub eax, dword [esp + 0x40]
mov dword [esp + 0x80], eax
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + edi + 0xc]
push dword [edx + edi + 8]
call fcn.007bcf30
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x80]
call fcn.007bcf90
mov ecx, eax
mov eax, dword [esp + 0x14]
and eax, 7
mov edx, dword [esi + eax*4 + 0x2c]
mov dword [esi + eax*4 + 0x2c], ecx
mov eax, edx
mov ecx, dword [esp + 0x5c]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x90], edx
mov edx, dword [esp + 0x1c]
add edx, eax
lea esi, [ecx + eax*4]
mov eax, 0
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x24]
add ecx, eax
mov eax, dword [esp + 0x90]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov dword [esi + ecx*4], edx
inc edx
mov esi, dword [esp + 0x34]
mov dword [esp + 0x14], edx
cmp edx, eax
jb 0x794ba2
mov edi, dword [esp + 0x3c]
push 0xcf1bbcdc
push 0xbb000000
mov dword [esi + 0x1c], eax
push dword [edi + 0xc]
push dword [edi + 8]
call fcn.007bcf30
xor eax, dword [esp + 0x50]
mov ecx, 0x38
xor edx, dword [esp + 0x48]
sub ecx, dword [esp + 0x44]
call fcn.007bcf90
mov ecx, eax
mov eax, dword [esp + 0x28]
and eax, 7
mov edx, dword [esi + eax*4 + 0x2c]
mov dword [esi + eax*4 + 0x2c], ecx
jmp 0x794cab
movq xmm0, qword [esp + 0x90]
mov eax, 0x38
sub eax, dword [esp + 0x44]
movq xmm1, qword [esp + 0x80]
xorps xmm1, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x28]
psrlq xmm1, xmm0
mov dword [esi + 0x1c], eax
movd edx, xmm1
mov ecx, dword [esp + 0x20]
mov eax, edx
mov edi, dword [esp + 0x18]
add dword [esi + 0x58], edx
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x44], edx
add edi, eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x80], edi
mov dword [esp + 0x1c], 0
lea ecx, [ecx + eax*4]
movsx eax, dl
movzx esi, byte [edi]
mov edx, edi
mov dword [esp + 0x20], ecx
xor ecx, ecx
mov dword [esp + 0x18], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x90], xmm0
nop
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x90], eax
inc ecx
cmp ecx, 4
jl 0x794d10
mov eax, dword [esp + 0x9c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x98]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x94]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x90]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x24], ecx
or edi, eax
mov edx, dword [esp + 0x24]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.007bcf70
mov dword [esp + 0x48], eax
mov ecx, esi
mov dword [esp + 0x50], edx
mov eax, edi
mov edx, dword [esp + 0x24]
call fcn.007bcf90
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x50]
or esi, eax
or edi, edx
ja 0x794db0
test esi, esi
je 0x794e08
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x794e08
test esi, esi
jne 0x794dc4
bsf eax, edi
add eax, 0x20
jmp 0x794dc7
bsf eax, esi
add eax, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
and eax, 0x3f
mov edx, dword [edx + eax*4]
je 0x794df2
cmp edx, dword [esp + 0x4c]
jb 0x794e08
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0xa8], edx
inc eax
dec ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x60], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x794db0
jb 0x794e08
test esi, esi
jne 0x794db0
mov ecx, dword [esp + 0x18]
mov edx, 0x3f
mov esi, dword [esp + 0x34]
dec ecx
and ecx, 0x3f
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x80]
add ecx, eax
mov eax, dword [esp + 0x44]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x20]
mov eax, dword [esi + 0x1c]
mov dword [edx + ecx*4], eax
inc dword [esi + 0x1c]
cmp dword [esp + 0x14], 0
jbe 0x794f24
mov esi, dword [esp + 0x3c]
mov edi, 3
mov ecx, dword [esp + 0x14]
xor eax, eax
nop word [eax + eax]
mov eax, dword [esp + eax*4 + 0xa8]
mov edx, dword [esp + 0x38]
add edx, eax
mov dword [esp + 0x48], eax
mov eax, dword [edx + edi - 3]
cmp eax, dword [edi + esi - 3]
jne 0x794f13
mov edi, dword [esp + 0x30]
mov eax, esi
add edi, 0xfffffffd
cmp esi, edi
jae 0x794ec4
mov eax, dword [edx]
xor eax, dword [esi]
je 0x794e9e
mov edi, dword [esp + 0x30]
bsf eax, eax
shr eax, 3
jmp 0x794eea
lea eax, [esi + 4]
add edx, 4
cmp eax, edi
jae 0x794ec4
nop dword [eax + eax]
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x795038
add eax, 4
add edx, 4
cmp eax, edi
jb 0x794eb0
mov edi, dword [esp + 0x30]
lea ecx, [edi - 1]
cmp eax, ecx
jae 0x794edd
mov cx, word [edx]
cmp cx, word [eax]
jne 0x794edd
add eax, 2
add edx, 2
cmp eax, edi
jae 0x794ee8
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x794ee8
inc eax
sub eax, esi
cmp eax, dword [esp + 0x2c]
jbe 0x794f0b
mov ecx, dword [esp + 0x28]
sub ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x78]
add ecx, 3
mov dword [esp + 0x2c], eax
add eax, esi
mov dword [edx], ecx
cmp eax, edi
je 0x794f24
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, ecx
jb 0x794e60
mov edx, dword [esp + 0x64]
mov dword [esp + 0x18], 0
mov dword [esp + 0x20], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x4c], eax
sub eax, ecx
sub dword [esp + 0x68], eax
mov eax, dword [esp + 0x54]
movzx esi, byte [edx]
movsx eax, al
mov dword [esp + 0x50], ecx
xor ecx, ecx
mov dword [esp + 0x48], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
nop dword [eax + eax]
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 4
jl 0x794f80
mov eax, dword [esp + 0x8c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x88]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x84]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x80]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x24], ecx
or edi, eax
mov edx, dword [esp + 0x24]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.007bcf70
mov dword [esp + 0x54], eax
mov ecx, esi
mov dword [esp + 0x70], edx
mov eax, edi
mov edx, dword [esp + 0x24]
call fcn.007bcf90
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x70]
or esi, eax
or edi, edx
ja 0x795024
test esi, esi
je 0x795168
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x795090
test esi, esi
jne 0x795049
bsf eax, edi
add eax, 0x20
jmp 0x79504c
mov edi, dword [esp + 0x30]
bsf ecx, ecx
shr ecx, 3
add eax, ecx
jmp 0x794ee8
bsf eax, esi
add eax, dword [esp + 0x48]
mov edx, dword [esp + 0x74]
and eax, 0x3f
mov edx, dword [edx + eax*4]
je 0x79507a
mov eax, dword [esp + 0x64]
cmp edx, dword [eax + 0xc]
jb 0x795090
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0xa8], edx
inc eax
dec ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x60], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x795024
jb 0x795090
test esi, esi
jne 0x795024
cmp dword [esp + 0x18], 0
jbe 0x795168
mov edi, dword [esp + 0x3c]
xor eax, eax
mov eax, dword [esp + eax*4 + 0xa8]
mov esi, dword [esp + 0x50]
add esi, eax
mov dword [esp + 0x54], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x79513b
mov ecx, dword [esp + 0x30]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
add eax, dword [esp + 0x4c]
cmp eax, ecx
cmovb ecx, eax
lea eax, [edi + 4]
push ecx
push esi
push eax
call fcn.00782bc0
add esp, 0xc
mov dword [esp + 0x74], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x4c]
jne 0x79510a
mov esi, dword [esp + 0x30]
add eax, 4
push esi
push dword [esp + 0x80]
add eax, edi
push eax
call fcn.00782bc0
add esp, 0xc
add eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x2c]
lea edx, [eax + 4]
cmp edx, ecx
jbe 0x79513f
mov eax, dword [esp + 0x28]
mov ecx, edx
sub eax, dword [esp + 0x54]
sub eax, dword [esp + 0x68]
mov esi, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x2c], ecx
mov dword [esi], eax
lea eax, [edx + edi]
cmp eax, dword [esp + 0x30]
je 0x795152
jmp 0x79513f
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x18]
jb 0x7950a1
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x1a4]
xor ecx, esp
call fcn.007bcf1e
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x1ac]
mov eax, dword [esp + 0x2c]
pop edi
pop esi
xor ecx, esp
call fcn.007bcf1e
mov esp, ebp
pop ebp
ret