Function at 0x4bf000
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push eax
push ecx
push edx
push ebx
push ebp
push esi
push edi
call 0x4bf00c
pop edx
sub edx, 0x8c20c
push 0
pop ecx
push edx
sub dword [edx + 0x1ac], 0x4f4e280f
add dword [edx + 0x9c], 0x23e16ea8
sub dword [edx + 0xcc], 0x6afc7cf1
not dword [edx + 0xc0]
not dword [edx + 0x350]
add dword [edx + 0x298], 0x6b2e74ab
add dword [edx + 0x284], 0x6f8e0877
not dword [edx + 0x300]
add dword [edx + 0x310], 0x184d6dd8
add dword [edx + 0x148], 0x2afc2786
sub dword [edx + 0xfc], 0x519c1773
add dword [edx + 0x238], 0x592652c3
sub dword [edx + 0x3b0], 0x2bcf52b9
add dword [edx + 0x228], 0x33e7586a
xor dword [edx + 0x2e8], 0x35ea6b1b
sub dword [edx + 0x60], 0xf581701
add dword [edx + 0x128], 0x5fa758ce
not dword [edx + 0x304]
sub dword [edx + 0x1cc], 0x654c300b
add dword [edx + 0x37c], 0x427449cd
sub dword [edx + 0x35c], 0x448b38a2
sub dword [edx], 0x758e462c
add dword [edx + 0x2c4], 0x18402ec9
xor dword [edx + 0x39c], 0x3abe3f78
not dword [edx + 0x2c0]
sub dword [edx + 0xb8], 0x23b01f99
add dword [edx + 0x394], 0x60e4213a
sub dword [edx + 0x3dc], 0x333f5f64
not dword [edx + 0x2a0]
not dword [edx + 0x28c]
sub dword [edx + 0x290], 0x536757da
not dword [edx + 0x24]
add dword [edx + 0x27c], 0x3301782e
xor dword [edx + 0x10], 0x4ef220d0
add dword [edx + 0x368], 0x71e52b8a
sub dword [edx + 0x2a4], 0x13b20266
add dword [edx + 0xdc], 0x21a553e8
xor dword [edx + 0x23c], 0x2d9c2096
add dword [edx + 0x22c], 0x2a564d2
sub dword [edx + 0x244], 0x508509f3
xor dword [edx + 0x26c], 0x121a22e3
sub dword [edx + 4], 0x529d1ac4
add dword [edx + 0x2b8], 0x6429235d
xor dword [edx + 0xf4], 0xae11331
xor dword [edx + 0xac], 0x49dc4060
add dword [edx + 0x1e8], 0x5f073f20
sub dword [edx + 0x88], 0x392f3220
xor dword [edx + 0x74], 0xa32b14
not dword [edx + 0x240]
not dword [edx + 0x84]
add dword [edx + 0x118], 0x186744c
add dword [edx + 0x21c], 0x2ebf0b35
not dword [edx + 0x3a8]
xor dword [edx + 0x48], 0x3581071e
sub dword [edx + 0x2bc], 0x9f67470
add dword [edx + 0x18c], 0x433f2d25
sub dword [edx + 0x138], 0x4ba17ff9
not dword [edx + 0x3e8]
not dword [edx + 0x3ec]
not dword [edx + 0x15c]
xor dword [edx + 0x380], 0x46662c8b
xor dword [edx + 0x254], 0x5322633b
add dword [edx + 0x140], 0x5eb10c9f
not dword [edx + 0x204]
not dword [edx + 0x318]
not dword [edx + 0x110]
add dword [edx + 0x208], 0xe1e026a
not dword [edx + 0x36c]
xor dword [edx + 0x3b8], 0x1e4a5473
xor dword [edx + 0x40], 0x5a963e85
sub dword [edx + 0x134], 0x4e826ac6
xor dword [edx + 0x2cc], 0x47f9235c
xor dword [edx + 0x2f8], 0x55645fea
xor dword [edx + 0x268], 0x39b35c7f
add dword [edx + 0x200], 0x75571f5b
add dword [edx + 0x3f8], 0x6e101a1
xor dword [edx + 0x2d4], 0x15260165
add dword [edx + 0x3b4], 0x227e1f33
not dword [edx + 0x370]
xor dword [edx + 0x378], 0x4a9d1712
xor dword [edx + 0x264], 0x78071e6b
sub dword [edx + 0x344], 0x1acb116e
sub dword [edx + 0x360], 0x7ac83991
not dword [edx + 0x158]
xor dword [edx + 0x64], 0x31d54b97
add dword [edx + 0x384], 0x46da6fb0
not dword [edx + 0x358]
xor dword [edx + 0x184], 0x33d1730f
not dword [edx + 0x11c]
not dword [edx + 0x94]
xor dword [edx + 0x258], 0x466f59f2
xor dword [edx + 0x108], 0x280657a1
sub dword [edx + 0x5c], 0x38072d4a
sub dword [edx + 0x234], 0x77676732
xor dword [edx + 0x32c], 0x65073207
not dword [edx + 0x1f4]
sub dword [edx + 0x348], 0x3dce2562
add dword [edx + 0x248], 0x452b3807
add dword [edx + 0x278], 0x87c7111
add dword [edx + 0x19c], 0x72e77ecb
not dword [edx + 0xf0]
not dword [edx + 0x194]
sub dword [edx + 0x280], 0x1c7d2ff5
sub dword [edx + 0x1f8], 0x92f7370
add dword [edx + 0x1a8], 0x7bec21b0
sub dword [edx + 0x340], 0x28326566
not dword [edx + 0x12c]
sub dword [edx + 0xf8], 0x5c825373
xor dword [edx + 0x44], 0x68d5125e
sub dword [edx + 0x3d8], 0x55aa7640
add dword [edx + 0x29c], 0x164665d0
sub dword [edx + 0x3a0], 0x6a892aff
sub dword [edx + 0x54], 0x77eb51c8
not dword [edx + 0x270]
sub dword [edx + 0x2dc], 0x6e02213e
xor dword [edx + 0x374], 0x355a5293
sub dword [edx + 0x2e4], 0x35ba33f3
xor dword [edx + 0x20c], 0x344f6a25
sub dword [edx + 0x68], 0x2615747c
xor dword [edx + 0x324], 0x75fd09c7
xor dword [edx + 0x1a4], 0x25714874
add dword [edx + 0x2ac], 0x1285137d
sub dword [edx + 0xc4], 0x4dc17d24
xor dword [edx + 0x338], 0x51a36e3b
xor dword [edx + 0x1d8], 0x78136f1b
sub dword [edx + 0x3c8], 0x5117685c
not dword [edx + 0x124]
add dword [edx + 0xd8], 0x52014c0
xor dword [edx + 8], 0x223273c1
add dword [edx + 0x1e0], 0x2e593cfc
xor dword [edx + 0x130], 0x36430f87
xor dword [edx + 0x25c], 0x720b0dbd
not dword [edx + 0x70]
xor dword [edx + 0x98], 0x44c429f7
xor dword [edx + 0xd0], 0x124a69bf
xor dword [edx + 0x2f4], 0x18e02d75
not dword [edx + 0xec]
sub dword [edx + 0x1d4], 0x55581e68
not dword [edx + 0xbc]
not dword [edx + 0x13c]
xor dword [edx + 0x294], 0xedf76ba
xor dword [edx + 0x14], 0x7ad60041
xor dword [edx + 0xb4], 0x3cfa5262
sub dword [edx + 0x3ac], 0x74416268
not dword [edx + 0x398]
sub dword [edx + 0x50], 0x556d389f
not dword [edx + 0x90]
add dword [edx + 0x2ec], 0x11481b7e
xor dword [edx + 0x80], 0x4b85482b
not dword [edx + 0x1fc]
not dword [edx + 0x38c]
not dword [edx + 0x1e4]
xor dword [edx + 0x7c], 0x1560782f
not dword [edx + 0x388]
add dword [edx + 0x24c], 0x388b6cb1
add dword [edx + 0x220], 0x593d6b13
sub dword [edx + 0x17c], 0x25904e3a
add dword [edx + 0x3f4], 0x71b50526
add dword [edx + 0x3d0], 0x5a52164d
add dword [edx + 0x4c], 0x31bb4c8c
add dword [edx + 0x154], 0x48712eb4
not dword [edx + 0x114]
not dword [edx + 0x250]
sub dword [edx + 0x164], 0x45b25c95
not dword [edx + 0x3f0]
sub dword [edx + 0xc], 0x15f248af
not dword [edx + 0x274]
xor dword [edx + 0x6c], 0x34878aa
sub dword [edx + 0x3c4], 0xfe199b
xor dword [edx + 0xa8], 0xae24f2d
sub dword [edx + 0x1b0], 0x54d65650
xor dword [edx + 0x150], 0x2832d81
not dword [edx + 0x170]
sub dword [edx + 0x1ec], 0x700216ab
xor dword [edx + 0xc8], 0x3cc4739b
xor dword [edx + 0x16c], 0x4ee74adf
not dword [edx + 0x1d0]
add dword [edx + 0x100], 0x48d44cce
add dword [edx + 0x120], 0x55257bd7
sub dword [edx + 0x314], 0x42825864
not dword [edx + 0x2b0]
sub dword [edx + 0x31c], 0x69134414
sub dword [edx + 0x3bc], 0x74274490
xor dword [edx + 0x33c], 0x4e9d74f1
xor dword [edx + 0xb0], 0x64050062
not dword [edx + 0x34c]
add dword [edx + 0xe0], 0x6cea31f2
xor dword [edx + 0xa0], 0x4d3a49cf
xor dword [edx + 0x2b4], 0x27742da9
add dword [edx + 0x30c], 0x39f15d39
not dword [edx + 0x160]
not dword [edx + 0x174]
not dword [edx + 0x2e0]
add dword [edx + 0x2c8], 0x7f924fcd
xor dword [edx + 0x1dc], 0x670f56aa
add dword [edx + 0x308], 0x7e3a10dc
not dword [edx + 0x38]
add dword [edx + 0x190], 0x529e6eca
not dword [edx + 0x3c0]
xor dword [edx + 0x330], 0x313a50f1
not dword [edx + 0x3cc]
xor dword [edx + 0x354], 0x62be011f
sub dword [edx + 0xa4], 0xf5816ca
xor dword [edx + 0x3e0], 0x118b6548
sub dword [edx + 0x224], 0x16206d88
xor dword [edx + 0x1c8], 0x41610277
sub dword [edx + 0x390], 0x322a1b42
not dword [edx + 0x2c]
sub dword [edx + 0x3c], 0x5f4f0a51
sub dword [edx + 0x364], 0x679306d9
add dword [edx + 0x144], 0x521d2ed9
not dword [edx + 0x1f0]
not dword [edx + 0x1c0]
add dword [edx + 0x18], 0x4f09305f
add dword [edx + 0x3a4], 0x48da4a61
sub dword [edx + 0x320], 0x6aca34d3
add dword [edx + 0x188], 0x2ded19dc
not dword [edx + 0x1b8]
not dword [edx + 0x2a8]
sub dword [edx + 0x10c], 0x5b3a0b37
xor dword [edx + 0x28], 0x2d632a33
xor dword [edx + 0x3e4], 0x336a7fd5
add dword [edx + 0x260], 0x582755c3
sub dword [edx + 0x218], 0x43037f8e
add dword [edx + 0x34], 0x8f0183f
not dword [edx + 0x2f0]
not dword [edx + 0x214]
not dword [edx + 0x3fc]
add dword [edx + 0x1c], 0x358473ff
xor dword [edx + 0x1b4], 0x5bde4ca3
not dword [edx + 0x30]
not dword [edx + 0xd4]
sub dword [edx + 0x1a0], 0x4d7e2ad1
not dword [edx + 0xe4]
not dword [edx + 0x168]
sub dword [edx + 0x58], 0x119050d
xor dword [edx + 0x198], 0x71090b76
add dword [edx + 0x178], 0x40c323ee
add dword [edx + 0x180], 0x7372476b
add dword [edx + 0x2d0], 0x2ffb1b01
sub dword [edx + 0x288], 0xfcf6ee2
not dword [edx + 0xe8]
sub dword [edx + 0x3d4], 0x77406e9f
xor dword [edx + 0x14c], 0x67241a73
add dword [edx + 0x20], 0x36c5745f
sub dword [edx + 0x8c], 0x73286762
sub dword [edx + 0x78], 0x4db366e8
not dword [edx + 0x104]
add dword [edx + 0x230], 0x53354394
xor dword [edx + 0x1bc], 0x14f73aeb
xor dword [edx + 0x328], 0x5be46dc6
add dword [edx + 0x334], 0x665f1741
add dword [edx + 0x210], 0xcff2b73
not dword [edx + 0x2d8]
not dword [edx + 0x2fc]
sub dword [edx + 0x1c4], 0x4ec17f36
add ecx, 0x400
add edx, 0x400
cmp ecx, 0x8c000
jne 0x4bf017
call fcn.0047cd54
pop edi
pop esi
pop ebp
pop ebx
pop edx
pop ecx
pop eax
push ebp
mov ebp, esp
sub esp, 0x3e
fcmove st(0), st(4)
fst st(5)
fst st(4)
fmul st(4)
fst st(1)
fcmove st(0), st(3)
fst st(2)
fadd st(1)
fst st(6)
fst st(0)
fsub st(1)
fcmove st(0), st(7)
fst st(0)
fst st(1)
fmul st(2)
fcmovb st(0), st(0)
fst st(3)
fst st(2)
mov cx, bx
push 0x4b
push 0x1e
mov sp, sp
lea edx, [0x4000e4]
test esp, eax
jne 0x4bf8f5
test eax, ecx
jne 0x4bf900
add bl, 0xd3
lea edx, [0x401a16]
lea edi, [0x401542]
test ebp, edx
jne 0x4bf8f7
test ecx, edx
jne 0x4bf8fa
mov ecx, ecx
add dh, 0x97
add eax, 0xfffffff2
add eax, 0x621b
test edx, esp
jne 0x4bf90b
call fcn.004bfb50
call fcn.004bfcad
mov bp, si
call fcn.004bfc51
call 0x4bf8c6
add eax, 0x7bc0
push 0x1f63
add al, 0xb5
test esi, ebp
jne 0x4bf948
lea ebx, [0x4007cc]
sub ecx, 0x3491
test ecx, ecx
jne 0x4bf948
add dh, 0x7b
call fcn.004bfc47
call fcn.004bf99c
call 0x4bf8c6
fst st(2)
call fcn.004bfb50
fst st(6)
fmul st(0)
fcmovbe st(0), st(7)
fst st(6)
fst st(7)
fcom st(1)
fadd st(1)
fadd st(7)
add ecx, 0x4e97
mov esp, ebp
pop ebp
ret