Function at 0x4cf49d
Capabilities:
Encrypt data using speck

Disassembly:
call 0x4cf502
pushal
jmp 0x4d03c4
mov byte [edx + 2], cl
jmp 0x4ce4f4
call fcn.004cfd87
out dx, al
stc
fdivr dword [ebx]
rcl dword [eax], cl
xchg byte [edi], ch
mov cl, 9
jmp 0x498a96
call 0x4cfc39
sub esp, 0xb
lea esp, [esp + 3]
jmp 0x4cfc0c
push ecx
mov dword [esp], ebp
call 0x4cfb69
sbb dh, byte [ebp + 0x64]
xchg edi, eax
xor ebx, dword [esi]
pushal
je 0x498a9a
sub dword [ebx], ecx
mov ch, byte [edi]
cmp dl, 0x30
jmp 0x4cfb47
xor al, 4
pop ebp
or dl, bh
or dl, bh
xchg edi, eax
xlatb
test byte [eax], 0xe8
hlt
call 0x4cfc99
and bl, byte [ebp - 0x54]
mov edi, 0xe7eace44
and byte [eax + 0x2231670d], 0x5d
lodsb al, byte [esi]
mov edi, 0x7112e80a
add eax, dword [eax]
call 0x4cfbce
xchg byte [ecx], dh
xor byte [ebx], dh
loop 0x498b1f
xchg ebp, eax
dec esp
arpl word [eax], ax
popfd
daa
xor dword [ebp - reloc.mscoree.dll__CorExeMain], ebp
add dword [ecx + 3], esi
add byte [edx], ch
inc ebp
hlt
jmp 0x4cfbd3
jmp 0x4d0525
call 0x4d0545
test byte [edi], dh
push ds
imul ecx, dword [ecx - reloc.mscoree.dll__CorExeMain], 0xa898ca5d
mov ch, 0xa4
xlatb
notrack jmp 0x4d0484
cmp edx, 0x34
jae 0x498bbd
jb 0x4d0552
int3
jmp 0x4d063c
xor ecx, ecx
jmp 0x4d0611
pop esi
pushal
jmp 0x4d07e0
pushal
jmp 0x4d0593
jmp 0x4d068e
mov byte [edi + 3], cl
ret
jmp 0x4d0623
jmp 0x4d05e8
push di
lea esp, [esp + 2]
jmp 0x4ced9f
and al, 0xe9
xchg edx, eax
add byte [eax], al
add byte [edx - 2], dh
insb byte es:[edi], dx
or eax, dword [esi]
mov bl, 0x40
rol dword [ebx + 0x26], cl
aad 0x64
salc
cmp dword [ebp + 0xc], 3
jne 0x4cef2a
je 0x4cfb1e
inc esi
fimul word [ebx + ebp - 0x1a]
push edi
scasd eax, dword es:[edi]
mov dh, 0xa1
loopne 0x4ce4d3
cmp cl, 0x5a
jmp 0x4ced5e
movzx ecx, cl
jmp 0x4cedc2
sub ecx, 0x47
jmp 0x4ce5b0
ja 0x4ce47e
sub ecx, 0x41
jmp 0x4ce5b0
pushal
jmp 0x4cf646
jmp 0x4cf69e
lea esp, [esp + 8]
cmp dword [ebp + 0xc], 2
lea edx, [edi*4]
jmp 0x4cf4be
push word [esp + 1]
push word [esp]
jmp 0x4cf486
sete dl
mov edx, dword [ebp + 8]
call 0x4cf4a8
lea esp, [esp + 4]
jb 0x498930
cmc
jmp 0x4cf518
cmp edi, 0x1a
jae 0x49891a
lea ecx, [edi + 0x41]
jmp 0x498981
push dword [esp + 9]
push word [esp + 0x19]
lea esp, [esp + 2]
lea esp, [esp + 0x24]
mov byte [edx + 3], 0x3d
jmp 0x4cef9c
pop esi
setae bh
mov bx, word [esp]
pop ebx
jmp 0x4cf682
lea ebp, reloc.mscoree.dll__CorExeMain
lea ebp, [esi*4]
jmp 0x4cf6c0
pushal
lea esp, [esp + 0x20]
pop edi
not bh
bswap esi
jmp 0x4cf673
pushfd
mov dword [esp], edx
jmp 0x4cfc52
pop ebp
ret
pushfd
jmp 0x4cfe03
push edx
lea esp, [esp + 4]
jmp 0x4cf6e3
cmp cl, 0x61
jb 0x4cf724
cmp cl, 0x7a
jmp 0x4cfcf7
pushal
jmp 0x4cfd31
push ebp
jmp 0x4cfce1
call fcn.004cfe7f
jmp [edi - 1]
pushfd
jmp 0x4cfe11
cmp al, 0x2f
jmp 0x4cff3a
cmp dl, 0x5a
sub esp, 9
lea esp, [esp + 1]
lea esp, [esp + 8]
cmp ebx, 0x1a
call fcn.004cfa9e
cmp dl, 0x39
jmp 0x4cfb5d
push ecx
push word [esp + 3]
lea esp, [esp + 2]
lea esp, [esp + 4]
jb 0x498a74
jae 0x4cfb31
jbe 0x498a43
ja 0x498a74
lea esp, [esp + 8]
jmp 0x4cfccc
cmp dl, 0x2f
jmp 0x4cfc68
cmp bl, 0x5a
call fcn.004cfb97
lea esp, [esp + 4]
cmp bl, 0x61
jmp 0x4cfbe9
invalid
cmp bl, 0x30
pushal
jmp 0x4cfc1b
jb 0x498acd
cmp bl, 0x7a
jbe 0x498aa0
ja 0x498acd
pop esp
les ebx, [edx + 0x3d]
int3
lea esp, [esp + 8]
cmp bl, 0x41
jb 0x498ab7
jmp 0x4cfbb0
lea esp, [esp + 0x20]
jb 0x4cf6aa
call 0x4cfc49
imul byte [eax - 2]
cdq
push 0x158518d8
jl 0x4cfbc4
dec edi
mov ah, 0xa7
into
lea esp, [esp + 2]
lea esp, [esp + 2]
mov bl, byte [ecx + 2]
jmp 0x498a48
mov dword [esp], ebx
lea esp, [esp + 4]
jmp 0x4cfc8a
lea esp, [esp + 4]
cmp bl, 0x2b
jmp 0x4cfc74
jne 0x498a13
je 0x498a43
je 0x498aa0
jne 0x4cfcaf
sal byte [eax - 0x1a], cl
xor dword [eax - 9], 0x84fd6ded
ja 0x4cfc49
cld
iretd
cmp bl, 0x39
jbe 0x498aa0
ja 0x4cf6aa
lea esp, [esp + 4]
jmp 0x4cfd79
cmp bl, 0x2f
jne 0x498a13
je 0x498aa0
inc eax
invalid
cmp dl, 0x2b
je 0x498a43
sub esp, 0x1c
lea esp, [esp + 0x1c]
jmp 0x4cfb72
lea esp, [esp + 4]
cmp cl, 0x30
pushfd
lea esp, [esp + 3]
lea esp, [esp + 1]
jmp 0x4cfd03
jbe 0x4cf6c2
ja 0x4cf724
jb 0x4cf70e
cmp cl, 0x39
pushfd
jmp 0x4cfd47
cmp cl, 0x5a
jbe 0x4cf6c2
ja 0x4cf6d8
lea esp, [esp + 0x20]
cmp cl, 0x2b
jmp 0x4cfd57
lea esp, [esp + 4]
jbe 0x4cf6c2
ja 0x4cf70e
je 0x4cf6c2
push ax
lea esp, [esp + 2]
cmp cl, 0x2f
jmp 0x4cfd9d
mov cl, byte [ecx + 3]
cmp cl, 0x41
jb 0x4cf6d8
jmp 0x4cfd22
je 0x4cf6c2
jne 0x498a13
mov ebx, dword [esp + 0x24]
jmp 0x4cffe9
push 0x3e
jmp 0x4cf750
lea esp, [esp + 4]
cmp al, 0x2b
jne 0x4cf80d
jmp 0x4cfded
lea esp, [esp + 4]
pop eax
jmp fcn.004cf77c
jne 0x4cf73a
call 0x4cfe41
push si
mov byte [esp], ah
lea esp, [esp + 2]
jmp 0x4cff7e
lea esp, [esp + 3]
jmp 0x4cff97
ja 0x4cf975
sub esp, 0x1b
mov dword [esp + 0xa], ebx
pop word [esp + 0xa]
push word [esp + 0xe]
jmp 0x4cff68
lea esp, [esp + 0x18]
add esi, 4
jmp 0x4cf823
lea esp, [esp + 0x28]
lea esp, [esp + 0x20]
mov byte [edx + 2], 0x3d
jmp 0x4ce4f4
cmp ecx, 0x3e
push ax
lea esp, [esp + 2]
jae 0x498b17
mov ebx, 0xa2844c4b
jmp 0x4d0575
mov byte [edi], bl
call 0x4d050f
jae 0x498b43
mov cl, byte [esp]
jmp 0x4d054a
lea ecx, [edx + 0x41]
jmp 0x498c44
mov ch, byte [esp]
mov ecx, edi
mov cx, word [esp]
lea ecx, [edx + 0x47]
jmp 0x498c44
lea ebx, [ecx - 4]
jmp 0x498aeb
cmp edx, 0x3e
jmp 0x4d05aa
pop word [esp + 0x1a]
mov dword [esp + 0x12], eax
push dword [esp + 0x11]
lea esp, [esp + 2]
lea esp, [esp + 0x20]
jmp 0x4d057d
jae 0x498b8d
lea ecx, [edx - 4]
jmp 0x498c44
lea esp, [esp + 4]
jae 0x498b77
mov cl, byte [esp]
jmp 0x4d05f1
mov byte [edi + 1], cl
cmp esi, 0x1a
push edi
jmp 0x4d05d2
mov cx, word [esp]
bswap ecx
mov cx, word [esp]
lea ecx, [esi + 0x41]
jmp 0x498ba3
cmp edx, 0x3e
setne cl
lea ecx, [ecx*4 + 0x2b]
jmp 0x498c44
cmp esi, 0x3e
jae 0x498be9
call fcn.004d064d
xchg edx, eax
or bl, byte [eax + 0x2bbb0aff]
inc edx
std
int3
cmp esi, 0x34
jae 0x498c18
lea ecx, [esi + 0x47]
jmp 0x498ba3
push ax
push word [esp + 1]
xor ecx, ecx
call fcn.004d0678
pushal
lea esp, [esp + 0x28]
cmp esi, 0x3e
call fcn.004d0b82
pop ebx
jmp [edi + 0xa]
cmp eax, 0x1a
call 0x4d0730
cmp eax, 0x3e
pushal
lea esp, [esp + 0x15]
pop dword [esp]
lea esp, [esp + 3]
jmp 0x4d07c3
lea ecx, [ecx*4 + 0x2b]
jmp 0x498bff
lea esp, [esp + 4]
setne cl
push sp
mov word [esp], bp
lea esp, [esp + 2]
jmp 0x4d07ad
lea esp, [esp + 0x20]
mov byte [edi + 2], cl
stc
pop ebx
jmp 0x4d0784