Function at 0x4ad920
Capabilities:
Encode data using xor
Encrypt data using speck

Disassembly:
sub esp, 0x34
cmp dword [esp + 0x4c], 0
mov ecx, dword [esp + 0x48]
push ebx
push ebp
mov ebp, dword [esp + 0x40]
mov ebx, 1
push esi
push edi
mov edi, dword [esp + 0x4c]
lea esi, [ebp + 8]
mov edx, dword [edi]
mov dword [esp + 0x24], edx
je 0x4ad958
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebp + 0x108]
mov dword [ecx], eax
mov ecx, dword [esp + 0x58]
cmp dword [ebp + 0x5c], 0
jge 0x4ad968
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x34
ret
mov eax, dword [esp + 0x54]
mov eax, dword [eax]
test eax, eax
je 0x4ad991
test ecx, ecx
je 0x4ad97b
cmp dword [ecx], 0
jne 0x4ad991
sub edx, dword [edi]
push edx
push 0xffffffffffffffec
push ebp
call fcn.004b2f60
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret
xor edx, edx
test eax, eax
mov eax, dword [ebp + 0x30]
cmovne edx, ecx
mov dword [esp + 0x20], edx
test eax, eax
jne 0x4ad9ef
mov ecx, dword [esp + 0x50]
mov eax, dword [edi]
mov ecx, dword [ecx]
mov dword [esi + 8], ecx
test eax, eax
jne 0x4ad9c6
lea eax, [esi + 0x10]
mov dword [eax], ecx
mov dword [esp + 0x10], eax
lea eax, [esi + 0xc]
mov dword [esp + 0x14], eax
mov dword [eax], ecx
jmp case.default.0x4adb36
lea edi, [esi + 0x10]
lea edx, [ecx + eax]
mov dword [esp + 0x10], edi
lea edi, [esi + 0xc]
mov dword [esi + 0x10], edx
inc eax
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x4c]
cmp eax, 0x1c
jbe 0x4ada31
mov eax, dword [esp + 0x14]
lea ecx, [edx - 0x1b]
mov dword [eax], ecx
jmp case.default.0x4adb36
lea ecx, [ebp + 0x28]
mov ebx, 2
lea edi, [esi + 0x10]
mov dword [esi + 8], ecx
lea edx, [ecx + eax]
mov dword [esp + 0x10], edi
lea edi, [esi + 0xc]
mov dword [esi + 0x10], edx
inc eax
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x4c]
cmp eax, 0x1c
jbe 0x4ada23
mov eax, dword [esp + 0x14]
lea ecx, [edx - 0x1b]
mov dword [eax], ecx
jmp case.default.0x4adb36
lea eax, [esi + 0xc]
mov dword [esp + 0x14], eax
lea eax, [esi + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
jmp case.default.0x4adb36
mov ebx, 2
nop
mov edi, dword [esp + 0x4c]
cmp ebx, 1
je 0x4adb2a
cmp ebx, 2
jne 0x4ae8cb
cmp dword [ebp + 0x64], 0
je 0x4ada7b
push 1
push dword [esp + 0x60]
push dword [esp + 0x28]
push dword [esp + 0x60]
push ebp
call fcn.004b3130
add esp, 0x14
test eax, eax
js 0x4ae89d
mov ecx, dword [ebp + 0x30]
mov eax, dword [esi + 8]
test ecx, ecx
je 0x4ae8a1
mov edx, dword [esp + 0x10]
cmp eax, dword [edx]
jne 0x4adad5
mov ecx, dword [esp + 0x50]
mov ebx, 1
mov dword [ebp + 0x30], 0
mov eax, dword [edi]
mov ecx, dword [ecx]
mov dword [esi + 8], ecx
test eax, eax
jne 0x4adab6
mov eax, dword [esp + 0x14]
mov dword [edx], ecx
mov dword [eax], ecx
jmp 0x4adb2a
mov ebp, dword [esp + 0x10]
lea edx, [ecx + eax]
inc eax
mov dword [ebp], edx
mov ebp, dword [esp + 0x48]
cmp eax, 0x1c
jbe 0x4adacd
lea ecx, [edx - 0x1b]
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
jmp 0x4adb2a
cmp dword [edi], 0
je 0x4ae884
mov eax, dword [esp + 0x50]
lea edi, [ebp + 0x28]
mov ebx, 1
mov eax, dword [eax]
mov al, byte [eax]
mov byte [ecx + ebp + 0x28], al
mov eax, edi
add dword [ebp + 0x30], ebx
mov edx, dword [ebp + 0x30]
mov dword [esi + 8], edi
mov esi, dword [esp + 0x10]
lea ecx, [edi + edx]
cmovne eax, ecx
add ecx, 0xffffffe5
mov dword [esi], eax
lea eax, [edx + 1]
cmp eax, 0x1c
lea esi, [ebp + 8]
mov eax, dword [esp + 0x14]
cmovbe ecx, edi
mov edi, dword [esp + 0x4c]
mov dword [eax], ecx
mov eax, dword [esp + 0x50]
inc dword [eax]
dec dword [edi]
mov eax, dword [ebp]
cmp eax, 0x1a
ja case.default.0x4adb36
jmp dword [eax*4 + 0x4ae968]
push esi
call fcn.004b3360
add esp, 4
test eax, eax
jne 0x4adb52
lea ebx, [eax + 2]
jmp case.default.0x4adb36
mov ebx, dword [ebp + 0x24c]
mov eax, ebx
and eax, 0xffffffdf
mov dword [ebp + 0x24c], eax
mov edx, dword [esi]
mov ecx, edx
and ecx, dword [0x52353c]
mov eax, dword [esi + 4]
dec eax
shr edx, 1
mov dword [esi + 4], eax
mov dword [esi], edx
test ecx, ecx
jne 0x4adb93
mov ecx, dword [ebp + 0x24c]
and ecx, 0xfffff43f
or ecx, 0x400
jmp 0x4adc37
mov ecx, edx
add eax, 0xfffffffd
and ecx, dword [0x523544]
shr edx, 3
mov dword [esi + 4], eax
mov dword [esi], edx
test ecx, ecx
je 0x4adbc2
mov eax, dword [ebp + 0x24c]
add ecx, 0x11
shl ecx, 6
xor ecx, eax
and ecx, 0xfc0
xor ecx, eax
jmp 0x4adc37
mov ecx, edx
add eax, 0xfffffffd
and ecx, dword [0x523544]
shr edx, 3
mov dword [esi + 4], eax
mov dword [esi], edx
cmp ecx, 1
jne 0x4adc0d
test bl, 0x20
je 0x4adbf4
mov ecx, edx
dec eax
and ecx, dword [0x52353c]
shr edx, 1
mov dword [esi + 4], eax
mov dword [esi], edx
cmp ecx, 1
jne 0x4adbfe
mov ebx, 0xfffffff3
jmp case.default.0x4adb36
or dword [ebp + 0x24c], 0x20
mov ecx, dword [ebp + 0x24c]
jmp 0x4adc3d
mov eax, dword [ebp + 0x24c]
test ecx, ecx
je 0x4adc29
add ecx, 8
shl ecx, 6
xor ecx, eax
and ecx, 0xfc0
xor ecx, eax
jmp 0x4adc37
mov ecx, eax
and ecx, 0xfffff47f
or ecx, 0x440
mov dword [ebp + 0x24c], ecx
and cl, 0x20
mov ebx, 1
movzx eax, cl
neg eax
sbb eax, eax
add eax, 2
mov dword [ebp], eax
jmp case.default.0x4adb36
mov edi, dword [esi + 4]
cmp edi, 6
jae 0x4adc8a
mov eax, dword [esp + 0x10]
mov ebx, dword [eax]
mov edx, dword [esi + 8]
cmp edx, ebx
je 0x4ada39
movzx eax, byte [edx]
mov ecx, edi
shl eax, cl
add edi, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
cmp edi, 6
jb 0x4adc65
mov ecx, dword [esi]
lea eax, [edi - 6]
mov edx, ecx
shr ecx, 6
and edx, dword [0x523550]
mov dword [esi], ecx
mov ecx, edx
shl ecx, 6
and edx, 0x3f
mov dword [esi + 4], eax
sub edx, 0xa
mov eax, dword [ebp + 0x24c]
xor ecx, eax
and ecx, 0xfc0
xor ecx, eax
mov dword [ebp + 0x24c], ecx
cmp edx, 0x14
ja 0x4add0b
mov edi, dword [esp + 0x4c]
mov dword [ebp], 2
mov ecx, dword [ebp + 0x24c]
mov eax, 1
shr ecx, 6
and ecx, 0x3f
shl eax, cl
sub eax, 0x10
push 0x3030
push dword [ebp + 0x24]
mov dword [ebp + 0x38], eax
mov eax, dword [ebp + 0x1c]
call eax
add esp, 8
mov dword [ebp + 0xac], eax
test eax, eax
jne 0x4add15
lea ebx, [eax - 0x1e]
jmp case.default.0x4adb36
mov ebx, 0xfffffff3
jmp 0x4ada40
add eax, 0x1da0
mov dword [ebp], 3
mov dword [ebp + 0xb0], eax
push ebp
call fcn.004b3f00
add esp, 4
mov dword [ebp], 4
push esi
push ebp
call fcn.004af850
mov ebx, eax
add esp, 8
cmp ebx, 1
jne 0x4ada4d
test byte [ebp + 0x24c], 6
lea edi, [ebp + 0x24c]
je 0x4addbf
mov edx, dword [esi + 4]
mov ecx, edx
mov dword [esp + 0x28], 0
and ecx, 7
je 0x4add95
mov ebp, dword [ecx*4 + 0x523538]
sub edx, ecx
mov eax, dword [esi]
and ebp, eax
mov dword [esp + 0x28], ebp
mov ebp, dword [esp + 0x48]
shr eax, cl
mov dword [esi], eax
mov dword [esi + 4], edx
lea eax, [ebp + 0x24c]
mov dword [esp + 0x2c], eax
jmp 0x4add99
mov dword [esp + 0x2c], edi
cmp edx, 0x20
jae 0x4addae
mov edi, dword [esp + 0x2c]
mov eax, 1
mov ecx, edx
shl eax, cl
dec eax
and dword [esi], eax
cmp dword [esp + 0x28], 0
je 0x4addbf
mov ebx, 0xfffffff2
jmp 0x4ada40
test byte [edi], 4
je 0x4addf0
mov eax, dword [ebp + 0x220]
mov edi, dword [esp + 0x4c]
mov dword [ebp], 0xc
test eax, eax
je case.default.0x4adb36
push dword [ebp + 0x60]
push dword [ebp + 0x228]
call eax
add esp, 8
jmp case.default.0x4adb36
cmp dword [ebp + 0x60], 0
jne 0x4ade02
mov dword [ebp], 0xe
jmp 0x4ada40
push ebp
call fcn.004ad830
add esp, 4
test byte [edi], 2
mov edi, dword [esp + 0x4c]
je case.0x4adb36.17
mov dword [ebp], 0xb
jmp case.default.0x4adb36
mov dword [ebp + 4], 0
lea eax, [ebp + 0x34c]
mov dword [ebp + 0x290], 0
mov dword [ebp + 0x328], eax
mov dword [ebp + 0x28c], 0
mov dword [ebp + 0x284], 0
mov dword [ebp + 0x288], 0
mov dword [ebp], 0x12
mov eax, dword [ebp + 4]
cmp eax, 3
jl 0x4ade76
mov dword [ebp], 5
jmp case.default.0x4adb36
lea eax, [eax*4 + 0xcc]
add eax, ebp
push eax
push esi
push ebp
call fcn.004afdf0
mov ebx, eax
add esp, 0xc
cmp ebx, 1
jne 0x4ada4d
mov eax, dword [ebp + 4]
inc dword [ebp + eax*4 + 0xcc]
mov eax, dword [ebp + 4]
cmp dword [ebp + eax*4 + 0xcc], 2
jae 0x4adeb5
inc eax
mov dword [ebp + 4], eax
jmp case.default.0x4adb36
mov dword [ebp], 0x13
mov eax, dword [ebp + 4]
push ebp
push 0
mov ecx, dword [ebp + eax*4 + 0xcc]
imul eax, eax, 0x9e0
add ecx, 2
add eax, dword [ebp + 0xac]
push eax
push ecx
push ecx
call fcn.004b0ed0
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x4ada4d
mov dword [ebp], 0x14
imul eax, dword [ebp + 4], 0x630
push ebp
push 0
add eax, dword [ebp + 0xb0]
push eax
push 0x1a
push 0x1a
call fcn.004b0ed0
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x4ada4d
mov dword [ebp], 0x15
mov eax, dword [ebp + 4]
imul ecx, eax, 0x630
lea eax, [eax*4 + 0xbc]
add eax, ebp
add ecx, dword [ebp + 0xb0]
cmp dword [ebp + 0x244], 0
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], eax
jne 0x4adff8
mov edi, dword [esi + 4]
cmp edi, 0xf
jae 0x4adf85
nop dword [eax]
mov eax, dword [esp + 0x10]
mov edx, dword [esi + 8]
cmp edx, dword [eax]
je 0x4adfd7
movzx eax, byte [edx]
mov ecx, edi
shl eax, cl
add edi, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
cmp edi, 0xf
jb 0x4adf60
mov ecx, dword [0x523574]
and ecx, dword [esi]
mov edx, dword [esp + 0x2c]
movzx eax, cl
lea edx, [edx + eax*4]
mov al, byte [edx]
cmp al, 8
jbe 0x4adfc7
shr dword [esi], 8
add edi, 0xfffffff8
movzx eax, al
shr ecx, 8
mov dword [esi + 4], edi
mov dword [esp + 0x30], ecx
mov ecx, dword [eax*4 + 0x523518]
movzx eax, word [edx + 2]
and ecx, dword [esp + 0x30]
add ecx, eax
mov al, byte [edx + ecx*4]
lea edx, [edx + ecx*4]
movzx ecx, al
sub edi, ecx
shr dword [esi], cl
mov dword [esi + 4], edi
movzx eax, word [edx + 2]
jmp 0x4adffe
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x18]
push eax
push esi
push edx
call fcn.004b1f60
add esp, 0xc
test eax, eax
je 0x4ada39
mov eax, dword [esp + 0x18]
jmp 0x4ae002
mov eax, dword [ebp + 0xc8]
mov dword [esp + 0x18], eax
movzx edi, byte [eax*4 + 0x5273d2]
movzx eax, word [eax*4 + 0x5273d0]
mov ecx, dword [esi + 4]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], eax
cmp ecx, edi
jae 0x4ae04b
mov eax, dword [esp + 0x10]
mov edi, dword [eax]
mov edx, dword [esi + 8]
cmp edx, edi
je 0x4ae084
movzx eax, byte [edx]
shl eax, cl
add ecx, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
cmp ecx, dword [esp + 0x2c]
jb 0x4ae027
mov edi, dword [esp + 0x2c]
mov eax, dword [edi*4 + 0x523538]
sub ecx, edi
mov edx, dword [esi]
and eax, edx
add eax, dword [esp + 0x30]
mov dword [esi + 4], ecx
mov ecx, edi
shr edx, cl
mov ecx, dword [esp + 0x28]
mov dword [esi], edx
mov dword [ecx], eax
inc dword [ebp + 4]
mov dword [ebp + 0x244], 0
mov dword [ebp], 0x12
jmp 0x4ada40
mov eax, dword [esp + 0x18]
mov dword [ebp + 0xc8], eax
mov dword [ebp + 0x244], 1
jmp 0x4ada39
push ebp
push dword [esp + 0x60]
push dword [esp + 0x28]
push dword [esp + 0x60]
call fcn.004aeb70
add esp, 0x10
mov ebx, eax
cmp ebx, 1
jne 0x4ada4d
mov dword [ebp], 0xe
jmp case.default.0x4adb36
push ebp
call fcn.004b2fc0
add esp, 4
jmp 0x4ae0b2
mov edi, dword [esi + 4]
cmp edi, 6
jae 0x4ae107
mov eax, dword [esp + 0x10]
mov ebx, dword [eax]
mov edx, dword [esi + 8]
cmp edx, ebx
je 0x4ada39
movzx eax, byte [edx]
mov ecx, edi
shl eax, cl
add edi, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
cmp edi, 6
jb 0x4ae0e2
mov ecx, dword [esi]
lea eax, [edi - 6]
mov edx, ecx
shr ecx, 6
and edx, dword [0x523550]
mov dword [esi], ecx
mov ecx, edx
mov dword [esi + 4], eax
and ecx, dword [0x523540]
mov eax, dword [ebp + 0x1c]
shr edx, 2
shl edx, cl
mov dword [ebp + 0xf0], ecx
mov dword [ebp + 0xf4], edx
push dword [ebp + 0xcc]
push dword [ebp + 0x24]
call eax
add esp, 8
mov dword [ebp + 0x258], eax
test eax, eax
jne 0x4ae158
lea ebx, [eax - 0x15]
jmp 0x4ada40
mov dword [ebp + 4], 0
mov dword [ebp], 6
mov eax, dword [ebp + 4]
mov dword [esp + 0x1c], eax
cmp eax, dword [ebp + 0xcc]
jge 0x4ae1d4
mov edi, dword [esi + 4]
cmp edi, 2
jae 0x4ae1a5
mov ebx, dword [esi + 0x10]
mov edx, dword [esi + 8]
cmp edx, ebx
je 0x4ae30f
movzx eax, byte [edx]
mov ecx, edi
shl eax, cl
add edi, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
cmp edi, 2
jb 0x4ae180
mov ecx, dword [esi]
lea eax, [edi - 2]
mov edx, ecx
shr ecx, 2
and edx, dword [0x523540]
mov dword [esi], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esi + 4], eax
mov eax, dword [ebp + 0x258]
mov byte [ecx + eax], dl
inc ecx
mov dword [esp + 0x1c], ecx
cmp ecx, dword [ebp + 0xcc]
jl 0x4ae175
mov dword [ebp], 0x16
push ebp
lea edi, [ebp + 0x254]
push edi
lea eax, [ebp + 0x250]
push eax
mov eax, dword [ebp + 0xcc]
shl eax, 6
push eax
call fcn.004aef10
mov ebx, eax
add esp, 0x10
cmp ebx, 1
jne 0x4ada40
xorps xmm0, xmm0
xor ebx, ebx
movups xmmword [ebp + 0x264], xmm0
mov dword [esp + 0x1c], ebx
movups xmmword [ebp + 0x274], xmm0
cmp dword [ebp + 0xcc], ebx
jbe 0x4ae2c0
nop word [eax + eax]
mov eax, dword [edi]
mov ecx, ebx
shl ecx, 6
xor esi, esi
lea edi, [eax + 2]
mov bl, byte [ecx + eax]
lea ebp, [esi + 0x10]
add edi, ecx
movzx edx, byte [edi - 2]
lea edi, [edi + 4]
movzx ecx, byte [edi - 5]
movzx eax, bl
xor edx, eax
movzx eax, bl
xor ecx, eax
movzx eax, bl
or edx, ecx
movzx ecx, byte [edi - 3]
xor ecx, eax
movzx eax, byte [edi - 4]
or edx, ecx
movzx ecx, bl
xor ecx, eax
or edx, ecx
or esi, edx
sub ebp, 1
jne 0x4ae244
mov ebp, dword [esp + 0x48]
mov ebx, dword [esp + 0x1c]
test esi, esi
jne 0x4ae2a6
mov eax, ebx
mov ecx, ebx
shr eax, 5
and ecx, 0x1f
lea edx, [eax*4]
mov eax, dword [edx + ebp + 0x264]
bts eax, ecx
mov dword [edx + ebp + 0x264], eax
inc ebx
lea edi, [ebp + 0x254]
mov dword [esp + 0x1c], ebx
cmp ebx, dword [ebp + 0xcc]
jb 0x4ae230
lea esi, [ebp + 8]
mov dword [ebp], 0x17
mov ecx, dword [ebp + 0xf0]
mov eax, 0x18
mov ebx, dword [ebp + 0xf4]
lea ecx, [ecx + 1]
shl eax, cl
lea edi, [ebx + 0x10]
add edi, eax
test byte [ebp + 0x24c], 0x20
mov dword [esp + 0x2c], edi
mov dword [esp + 0x1c], edi
je 0x4ae37f
mov ecx, dword [ebp + 0xf0]
cmp ebx, 0x7ffffffc
jb 0x4ae31b
mov dword [esp + 0x1c], ntohs
jmp 0x4ae36e
mov eax, dword [esp + 0x1c]
mov dword [ebp + 4], eax
jmp 0x4ada39
mov edx, 0x7ffffffc
mov edi, 1
sub edx, ebx
shl edi, cl
shr edx, cl
xor eax, eax
add edx, 4
dec edi
mov ecx, edx
shr ecx, 1
je 0x4ae33c
inc eax
shr ecx, 1
jne 0x4ae337
lea ecx, [eax - 1]
shr edx, cl
lea eax, [eax*2 - 4]
mov ecx, dword [ebp + 0xf0]
and edx, 1
or edx, eax
jne 0x4ae35e
lea edx, [ebx + 0x10]
mov dword [esp + 0x1c], edx
jmp 0x4ae36e
lea eax, [edx - 1]
shl eax, cl
or eax, edi
add eax, 0x11
add eax, ebx
mov dword [esp + 0x1c], eax
inc ecx
mov eax, 0x3e
shl eax, cl
add eax, 0x10
add eax, ebx
mov dword [esp + 0x2c], eax
push ebp
lea eax, [ebp + 0xfc]
push eax
mov eax, dword [ebp + 0xd4]
lea ecx, [ebp + 0xf8]
push ecx
shl eax, 2
push eax
call fcn.004aef10
mov edi, dword [esp + 0x5c]
mov ebx, eax
add esp, 0x10
cmp ebx, 1
jne 0x4ada4d
push dword [ebp + 0x250]
lea eax, [ebp + 0x7c]
push 0x100
push 0x100
push eax
push ebp
call fcn.004b3b30
push dword [ebp + 0xd0]
lea ecx, [ebp + 0x8c]
mov edi, eax
push 0x2c0
push 0x2c0
push ecx
push ebp
call fcn.004b3b30
push dword [ebp + 0xf8]
lea ecx, [ebp + 0x9c]
mov ebx, eax
push dword [esp + 0x48]
and ebx, edi
push dword [esp + 0x5c]
push ecx
push ebp
call fcn.004b3b30
and eax, ebx
add esp, 0x3c
test al, 1
je 0x4ae930
mov edi, dword [esp + 0x4c]
mov dword [ebp + 4], 0
mov dword [ebp], 0x18
mov eax, dword [ebp + 4]
sub eax, 0
je 0x4ae44a
sub eax, 1
je 0x4ae443
sub eax, 1
jne 0x4ae94e
mov edx, 0x9c
jmp 0x4ae44f
mov edx, 0x8c
jmp 0x4ae44f
mov edx, 0x7c
cmp dword [ebp + 0x284], 1
lea ecx, [ebp + 0x980]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x2c], ecx
je 0x4ae482
mov eax, dword [edx + ebp + 4]
mov dword [ebp + 0x984], eax
mov dword [ecx], 0
mov dword [ebp + 0x284], 1
jmp 0x4ae486
mov dword [esp + 0x2c], ecx
movzx eax, word [edx + ebp + 0xc]
cmp dword [ecx], eax
jge 0x4ae4ed
nop
push ebp
lea eax, [esp + 0x38]
push eax
push dword [ebp + 0x984]
movzx eax, word [edx + ebp + 0xa]
push eax
movzx eax, word [edx + ebp + 8]
push eax
call fcn.004b0ed0
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x4ada40
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ebp + 0x984]
mov edx, dword [ebx]
mov ecx, dword [ecx + ebp]
mov dword [ecx + edx*4], eax
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x1c]
inc dword [ebx]
shl eax, 2
add dword [ebp + 0x984], eax
movzx eax, word [edx + ebp + 0xc]
cmp dword [ebx], eax
jl 0x4ae490
mov edi, dword [esp + 0x4c]
mov ebx, 1
mov dword [ebp + 0x284], 0
inc dword [ebp + 4]
cmp dword [ebp + 4], 3
jl case.default.0x4adb36
mov dword [ebp], 0x19
mov edi, dword [ebp + 0xdc]
mov edx, edi
mov eax, edi
shl edx, 6
add edx, dword [ebp + 0x254]
mov ecx, edi
shr eax, 5
and ecx, 0x1f
mov dword [ebp + 0x74], edx
push ebp
mov eax, dword [ebp + eax*4 + 0x264]
shr eax, cl
and eax, 1
mov dword [ebp + 0xb4], eax
movzx ecx, byte [edx]
mov eax, dword [ebp + 0x7c]
mov eax, dword [eax + ecx*4]
mov dword [ebp + 0x100], eax
mov eax, dword [ebp + 0x258]
movzx eax, byte [eax + edi]
and eax, 3
shl eax, 9
add eax, 0x527438
mov dword [ebp + 0x70], eax
mov eax, dword [ebp + 0xfc]
mov dword [ebp + 0x78], eax
mov eax, dword [ebp + 0x8c]
mov eax, dword [eax]
mov dword [ebp + 0x6c], eax
call fcn.004aea20
add esp, 4
test eax, eax
jne 0x4ae594
lea ebx, [eax - 0x1b]
jmp 0x4ada40
mov ecx, dword [ebp + 0xf4]
lea eax, [ebp + 0x284]
mov ebx, dword [ebp + 0xf0]
mov edx, 1
mov dword [esp + 0x1c], ecx
movzx ecx, word [ebp + 0xa6]
mov dword [esp + 0x30], ecx
mov ecx, ebx
mov dword [esp + 0x40], ebx
mov ebx, 1
shl edx, cl
xor ecx, ecx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x28], edx
lea edi, [ebx + 0xf]
mov dword [esp + 0x2c], ecx
cmp dword [esp + 0x1c], ecx
jbe 0x4ae621
mov esi, 0xfffffff1
lea ecx, [eax + 0x10]
sub esi, eax
lea edx, [eax + 0x260]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x38], esi
mov esi, eax
mov ebp, dword [esp + 0x38]
lea edi, [eax + 0x10]
nop
mov byte [ecx], 0
lea eax, [ecx + ebp]
mov dword [edx], eax
lea edx, [edx + 4]
lea ecx, [ecx + 1]
sub esi, ebx
jne 0x4ae600
mov ebp, dword [esp + 0x48]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
lea esi, [ebp + 8]
cmp edi, dword [esp + 0x30]
jae 0x4ae687
mov ebp, dword [esp + 0x3c]
nop dword [eax + eax]
mov esi, dword [esp + 0x1c]
lea eax, [ecx + 2]
mov ecx, ebx
inc esi
shl eax, cl
mov ecx, dword [esp + 0x40]
sub eax, 4
shl eax, cl
xor ecx, ecx
add esi, eax
test edx, edx
je 0x4ae66d
lea edx, [ebp + 0x220]
lea edx, [edx + edi*4]
lea eax, [esi + ecx]
mov byte [edi + ebp], bl
inc ecx
mov dword [edx], eax
inc edi
lea edx, [edx + 4]
cmp ecx, dword [esp + 0x28]
jb 0x4ae656
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
add ebx, ecx
xor ecx, 1
mov dword [esp + 0x2c], ecx
cmp edi, dword [esp + 0x30]
jb 0x4ae630
mov ebp, dword [esp + 0x48]
lea esi, [ebp + 8]
mov edi, dword [esp + 0x4c]
mov dword [ebp], 7
push ebp
call fcn.004b0110
mov ebx, eax
add esp, 4
cmp ebx, 2
jne case.default.0x4adb36
push ebp
call fcn.004b1ff0
add esp, 4
mov ebx, eax
jmp case.default.0x4adb36
push 0
push dword [esp + 0x60]
push dword [esp + 0x28]
push dword [esp + 0x60]
push ebp
call fcn.004b3130
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x4ada4d
push ebp
call fcn.004b3100
mov ecx, dword [ebp + 0x24c]
mov eax, ebx
shr ecx, 6
add esp, 4
and ecx, 0x3f
shl eax, cl
cmp dword [ebp + 0x40], eax
jne 0x4ae6fc
mov eax, dword [ebp + 0x38]
mov dword [ebp + 0x3c], eax
mov eax, dword [ebp]
cmp eax, 0xf
jne 0x4ae74a
mov ecx, dword [ebp + 0x260]
test ecx, ecx
je 0x4ae731
mov eax, dword [ecx + 0x10]
cmp eax, dword [ecx + 0x14]
je 0x4ae731
push dword [ebp + 0x34]
push ebp
call fcn.004aeab0
add dword [ebp + 0x34], eax
add esp, 8
mov eax, dword [ebp + 0x34]
cmp eax, dword [ebp + 0x40]
jge case.default.0x4adb36
cmp dword [ebp + 0x60], 0
mov eax, 0xe
mov ecx, 7
cmovne eax, ecx
mov dword [ebp], eax
jmp case.default.0x4adb36
cmp eax, 0x10
jne 0x4ae75c
mov eax, 0xa
mov dword [ebp], eax
jmp case.default.0x4adb36
cmp dword [ebp + 4], 0
jne 0x4ae77b
cmp dword [ebp + 0x60], 0
mov eax, 0xe
mov ecx, 9
cmovne eax, ecx
mov dword [ebp], eax
jmp case.default.0x4adb36
mov eax, 8
mov dword [ebp], eax
jmp case.default.0x4adb36
cmp dword [ebp + 0x60], 0
jge 0x4ae798
mov ebx, 0xfffffff6
jmp case.default.0x4adb36
push ebp
call fcn.004b3c80
add esp, 4
test byte [ebp + 0x24c], 1
jne 0x4ae7b6
mov dword [ebp], 3
jmp case.default.0x4adb36
mov edi, dword [esi + 4]
mov edx, 0
mov ecx, edi
and ecx, 7
je 0x4ae7d9
mov edx, dword [ecx*4 + 0x523538]
sub edi, ecx
mov eax, dword [esi]
and edx, eax
shr eax, cl
mov dword [esi + 4], edi
mov dword [esi], eax
cmp edi, 0x20
jae 0x4ae7ea
mov eax, 1
mov ecx, edi
shl eax, cl
dec eax
and dword [esi], eax
test edx, edx
je 0x4ae7f8
mov ebx, 0xfffffff1
jmp 0x4ada40
cmp dword [ebp + 0x30], 0
jne 0x4ae851
mov eax, dword [esi + 8]
mov ecx, edi
shr ecx, 3
sub eax, ecx
test ecx, ecx
lea edx, [ecx*8]
mov ecx, dword [esi + 8]
cmovne ecx, eax
sub edi, edx
mov dword [esp + 0x2c], ecx
mov dword [esi + 8], ecx
mov dword [esi + 4], edi
cmp edi, 0x20
jae 0x4ae838
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x2c]
dec eax
and dword [esi], eax
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x4c]
mov eax, dword [eax]
sub eax, ecx
mov ecx, dword [esp + 0x50]
mov dword [edi], eax
mov eax, dword [esi + 8]
mov dword [ecx], eax
jmp 0x4ae855
mov edi, dword [esp + 0x4c]
mov dword [ebp], 0x1a
cmp dword [ebp + 0x64], 0
je 0x4ae884
push 1
push dword [esp + 0x60]
push dword [esp + 0x28]
push dword [esp + 0x60]
push ebp
call fcn.004b3130
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x4ada4d
mov ecx, dword [esp + 0x24]
sub ecx, dword [edi]
push ecx
push ebx
push ebp
call fcn.004b2f60
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret
mov ebx, eax
jmp 0x4ae884
mov edx, dword [esp + 0x50]
mov dword [edx], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
sub eax, dword [esi + 8]
mov dword [edi], eax
je 0x4ae884
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov al, byte [eax]
mov byte [ecx + ebp + 0x28], al
inc dword [ebp + 0x30]
inc dword [edx]
add dword [edi], 0xffffffff
jne 0x4ae8b4
jmp 0x4ae884
cmp dword [ebp + 0x30], 0
je 0x4ae8da
mov dword [ebp + 0x30], 0
jmp 0x4ae884
mov edi, dword [esi + 4]
mov ecx, edi
mov eax, dword [esi + 8]
shr ecx, 3
sub eax, ecx
test ecx, ecx
lea edx, [ecx*8]
mov ecx, dword [esi + 8]
cmovne ecx, eax
sub edi, edx
mov dword [esp + 0x48], ecx
mov dword [esi + 8], ecx
mov dword [esi + 4], edi
cmp edi, 0x20
jae 0x4ae917
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x48]
dec eax
and dword [esi], eax
mov eax, dword [esi + 0x10]
mov edi, dword [esp + 0x4c]
sub eax, ecx
mov ecx, dword [esp + 0x50]
mov dword [edi], eax
mov eax, dword [esi + 8]
mov dword [ecx], eax
jmp 0x4ae884
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x24]
sub ecx, dword [eax]
push ecx
push 0xffffffffffffffea
push ebp
call fcn.004b2f60
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret
mov ecx, dword [esp + 0x24]
sub ecx, dword [edi]
push ecx
push 0xffffffffffffffe1
push ebp
call fcn.004b2f60
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret