Function at 0x4ac760
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x494
mov eax, dword [0x64e2c0]
xor eax, esp
mov dword [esp + 0x490], eax
mov eax, dword [esp + 0x49c]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x4a0]
push ebx
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x4a8]
push ebp
push esi
mov esi, dword [esp + 0x4a4]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x4b4]
mov dword [esp + 0x68], eax
lea eax, [esp + 0x28]
push edi
push eax
push esi
mov dword [esp + 0x20], 0
mov dword [esp + 0x50], 0xff
call fcn.004ad420
add esp, 8
test eax, eax
je 0x4ad3fe
mov eax, dword [esi + 4]
mov ebp, dword [esp + 0x30]
mov dword [esp + 0x90], eax
cdq
mov edi, eax
mov eax, dword [esp + 0x48]
xor edi, edx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x34]
sub edi, edx
mov dword [esi + 4], edi
cmp eax, 0xc
jne 0x4ac81d
cmp dword [esp + 0x2c], 0x18
jge 0x4ac830
lea ecx, [ebp - 0x26]
mov eax, 0x55555556
imul ecx
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
jmp 0x4ac82c
cmp dword [esp + 0x2c], 0x10
jge 0x4ac830
sub ebp, eax
sub ebp, 0xe
sar ebp, 2
mov dword [esp + 0x18], ebp
mov eax, dword [esp + 0x6c]
xor ebx, ebx
cmp dword [esp + 0x44], ebx
setne bl
add ebx, 3
mov dword [esp + 0x20], ebx
mov dword [esi + 8], ebx
test eax, eax
je 0x4ac856
cmp eax, 3
jl 0x4ac856
mov ebx, eax
mov dword [esp + 0x20], ebx
mov ecx, dword [esi]
mov ebp, ecx
mov dword [esp + 0x1c], edi
test ebp, ebp
js 0x4ad3f4
je 0x4ac878
mov eax, Ordinal_1
cdq
idiv ebp
cmp ebx, eax
jg 0x4ad3f4
imul ebp, ebx
test ebp, ebp
js 0x4ad3f4
mov eax, edi
test eax, eax
js 0x4ad3f4
je 0x4ac8a1
mov eax, Ordinal_1
cdq
idiv dword [esp + 0x1c]
cmp ebp, eax
jg 0x4ad3f4
test ebx, ebx
js 0x4ad3e8
test ecx, ecx
jne 0x4ac8b4
mov ebp, ecx
imul ebp, ebx
jmp 0x4ac8c9
mov eax, Ordinal_1
cdq
idiv ecx
cmp ebx, eax
jg 0x4ad3e8
mov ebp, ebx
imul ebp, ecx
test edi, edi
je 0x4ac8dd
mov eax, Ordinal_1
cdq
idiv edi
cmp ebp, eax
jg 0x4ad3e8
imul ecx, edi
imul ecx, ebx
push ecx
call fcn.005b7d4f
mov ebp, eax
add esp, 4
mov dword [esp + 0x68], ebp
test ebp, ebp
je 0x4ad3e8
xor edi, edi
cmp dword [esp + 0x2c], 0x10
jge 0x4ace19
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4ace01
cmp eax, 0x100
jg 0x4ace01
mov dword [esp + 0x14], edi
test eax, eax
jle 0x4aca68
mov eax, dword [esp + 0x20]
lea ebx, [esi + 0x20]
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x10], eax
nop dword [eax]
mov eax, dword [esi + 0xa8]
lea edi, [esp + 0xa2]
cmp eax, dword [esi + 0xac]
jae 0x4ac960
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ac985
cmp dword [esi + 0x20], 0
lea ebx, [esi + 0x20]
je 0x4ac983
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ac985
xor cl, cl
mov edx, dword [esp + 0x14]
mov dword [esp + 0x24], ebx
mov byte [edi + edx*4], cl
cmp eax, dword [esi + 0xac]
jae 0x4ac9a3
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ac9c8
cmp dword [ebx], 0
je 0x4ac9c6
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov edx, dword [esp + 0x14]
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ac9c8
xor cl, cl
mov byte [esp + edx*4 + 0xa1], cl
cmp eax, dword [esi + 0xac]
jae 0x4ac9e5
mov cl, byte [eax]
lea ebx, [esi + 0x20]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4aca0a
cmp dword [ebx], 0
je 0x4aca08
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov edx, dword [esp + 0x14]
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4aca0a
xor cl, cl
cmp dword [esp + 0x34], 0xc
lea edi, [esp + 0xa0]
mov byte [edi + edx*4], cl
lea edi, [esp + 0xa3]
je 0x4aca4b
cmp eax, dword [esi + 0xac]
jae 0x4aca33
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4aca4b
mov eax, dword [esp + 0x24]
cmp dword [eax], 0
je 0x4aca4b
push esi
call fcn.004b7f40
add esp, 4
inc dword [esi + 0xa8]
mov ecx, dword [esp + 0x14]
mov byte [edi + ecx*4], 0xff
inc ecx
mov dword [esp + 0x14], ecx
cmp ecx, ebp
jl 0x4ac940
mov ebp, dword [esp + 0x68]
xor edi, edi
jmp 0x4aca6c
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x30]
xor eax, eax
cmp dword [esp + 0x34], 0xc
setne al
add eax, 3
imul eax, dword [esp + 0x18]
sub ecx, eax
sub ecx, dword [esp + 0x34]
sub ecx, 0xe
push ecx
push esi
call fcn.004b8580
mov eax, dword [esp + 0x34]
add esp, 8
cmp eax, 1
jne 0x4acaa8
mov edx, dword [esi]
add edx, 7
shr edx, 3
jmp 0x4acabf
cmp eax, 4
jne 0x4acab4
mov edx, dword [esi]
inc edx
shr edx, 1
jmp 0x4acabf
cmp eax, 8
jne 0x4acde9
mov edx, dword [esi]
mov ecx, dword [esi + 4]
neg edx
and edx, 3
mov dword [esp + 0x18], edx
cmp eax, 1
jne 0x4acc47
mov dword [esp + 0x20], 0
test ecx, ecx
jle 0x4ad2de
mov eax, dword [esi + 0xa8]
mov ebx, 7
cmp eax, dword [esi + 0xac]
jae 0x4acb02
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4acb24
cmp dword [esi + 0x20], 0
je 0x4acb22
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4acb24
xor cl, cl
cmp dword [esi], 0
movzx eax, cl
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], 0
jle 0x4acbf6
nop dword [eax]
mov edx, eax
mov ecx, ebx
sar edx, cl
and edx, 1
movzx eax, byte [esp + edx*4 + 0xa0]
mov byte [edi + ebp], al
movzx eax, byte [esp + edx*4 + 0xa1]
mov byte [edi + ebp + 1], al
movzx eax, byte [esp + edx*4 + 0xa2]
mov byte [edi + ebp + 2], al
add edi, 3
cmp dword [esp + 0x10], 4
jne 0x4acb7b
mov byte [edi + ebp], 0xff
inc edi
mov eax, dword [esp + 0x14]
inc eax
mov edx, eax
mov dword [esp + 0x14], edx
cmp eax, dword [esi]
je 0x4acbf6
sub ebx, 1
jns 0x4acbea
mov eax, dword [esi + 0xa8]
mov ebx, 7
cmp eax, dword [esi + 0xac]
jae 0x4acbb4
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
movzx eax, cl
mov dword [esp + 0x1c], eax
jmp 0x4acbee
cmp dword [esi + 0x20], 0
je 0x4acbdf
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov edx, dword [esp + 0x14]
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
movzx eax, cl
mov dword [esp + 0x1c], eax
jmp 0x4acbee
xor cl, cl
movzx eax, cl
mov dword [esp + 0x1c], eax
jmp 0x4acbee
mov eax, dword [esp + 0x1c]
cmp edx, dword [esi]
jl 0x4acb40
cmp dword [esi + 0x10], 0
mov edx, dword [esp + 0x18]
je 0x4acc28
mov eax, dword [esi + 0xac]
mov ecx, eax
sub ecx, dword [esi + 0xa8]
cmp ecx, edx
jge 0x4acc28
sub edx, ecx
mov dword [esi + 0xa8], eax
mov eax, dword [esi + 0x14]
push edx
push dword [esi + 0x1c]
call eax
add esp, 8
jmp 0x4acc2e
add dword [esi + 0xa8], edx
mov edx, dword [esp + 0x20]
mov ecx, dword [esi + 4]
inc edx
mov dword [esp + 0x20], edx
cmp edx, ecx
jl 0x4acae4
jmp 0x4ad2de
xor ebx, ebx
mov dword [esp + 0x1c], ebx
test ecx, ecx
jle 0x4ad2de
cmp dword [esi], 0
mov dword [esp + 0x14], 0
jle 0x4acd96
nop word [eax + eax]
mov ecx, dword [esi + 0xa8]
cmp ecx, dword [esi + 0xac]
jae 0x4acc89
mov dl, byte [ecx]
inc ecx
mov dword [esi + 0xa8], ecx
jmp 0x4accb1
cmp dword [esi + 0x20], 0
je 0x4accaf
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov dl, byte [eax]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x2c]
mov dword [esi + 0xa8], ecx
jmp 0x4accb1
xor dl, dl
xor ebx, ebx
movzx edx, dl
cmp eax, 4
jne 0x4accc3
mov ebx, edx
and ebx, 0xf
shr edx, 4
movzx eax, byte [esp + edx*4 + 0xa0]
mov byte [edi + ebp], al
movzx eax, byte [esp + edx*4 + 0xa1]
mov byte [edi + ebp + 1], al
movzx eax, byte [esp + edx*4 + 0xa2]
mov byte [edi + ebp + 2], al
add edi, 3
cmp dword [esp + 0x10], 4
jne 0x4accf5
mov byte [edi + ebp], 0xff
inc edi
mov edx, dword [esp + 0x14]
lea eax, [edx + 1]
cmp eax, dword [esi]
je 0x4acd8e
cmp dword [esp + 0x2c], 8
jne 0x4acd49
cmp ecx, dword [esi + 0xac]
jae 0x4acd20
mov dl, byte [ecx]
lea eax, [ecx + 1]
mov dword [esi + 0xa8], eax
jmp 0x4acd42
cmp dword [esi + 0x20], 0
je 0x4acd40
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov dl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4acd42
xor dl, dl
movzx ebx, dl
mov edx, dword [esp + 0x14]
movzx eax, byte [esp + ebx*4 + 0xa0]
mov byte [edi + ebp], al
movzx eax, byte [esp + ebx*4 + 0xa1]
mov byte [edi + ebp + 1], al
movzx eax, byte [esp + ebx*4 + 0xa2]
mov byte [edi + ebp + 2], al
add edi, 3
cmp dword [esp + 0x10], 4
jne 0x4acd7b
mov byte [edi + ebp], 0xff
inc edi
mov eax, dword [esp + 0x2c]
add edx, 2
mov dword [esp + 0x14], edx
cmp edx, dword [esi]
jl 0x4acc70
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
cmp dword [esi + 0x10], 0
je 0x4acdca
mov eax, dword [esi + 0xac]
mov ecx, eax
sub ecx, dword [esi + 0xa8]
cmp ecx, edx
jge 0x4acdca
mov dword [esi + 0xa8], eax
mov eax, edx
sub eax, ecx
push eax
push dword [esi + 0x1c]
mov eax, dword [esi + 0x14]
call eax
mov edx, dword [esp + 0x20]
add esp, 8
jmp 0x4acdd0
add dword [esi + 0xa8], edx
mov ecx, dword [esi + 4]
inc ebx
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], ebx
cmp ebx, ecx
jl 0x4acc55
jmp 0x4ad2de
push ebp
call fcn.005b7d34
add esp, 4
mov dword [0x655470], 0x5fab80
jmp 0x4ad3fe
push ebp
call fcn.005b7d34
add esp, 4
mov dword [0x655470], 0x5fab78
jmp 0x4ad3fe
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x34]
sub eax, 0xe
mov dword [esp + 0x4c], 0
push eax
push esi
mov dword [esp + 0x5c], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], edi
call fcn.004b8580
mov edx, dword [esp + 0x34]
add esp, 8
cmp edx, 0x18
jne 0x4ace86
mov eax, dword [esi]
lea eax, [eax + eax*2]
jmp 0x4ace93
cmp edx, 0x10
jne 0x4ace91
mov eax, dword [esi]
add eax, eax
jmp 0x4ace93
xor eax, eax
mov ecx, dword [esp + 0x40]
neg eax
and eax, 3
mov dword [esp + 0x10], ebx
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x38]
cmp edx, 0x18
jne 0x4acebc
mov dword [esp + 0x14], 1
xor ebx, ebx
jmp 0x4acf96
cmp edx, 0x20
jne 0x4acf07
mov dword [esp + 0x10], ebx
cmp ecx, 0xff
jne 0x4acf07
cmp dword [esp + 0x3c], 0xff00
mov dword [esp + 0x10], ebx
jne 0x4acf07
mov dword [esp + 0x10], ebx
cmp eax, 0xff0000
jne 0x4acf07
cmp dword [esp + 0x44], 0xff000000
mov dword [esp + 0x10], ebx
jne 0x4acf07
mov dword [esp + 0x10], ebx
xor ebx, ebx
mov dword [esp + 0x14], 2
jmp 0x4acf96
test eax, eax
je 0x4ad3d3
mov ebx, dword [esp + 0x3c]
test ebx, ebx
je 0x4ad3d3
test ecx, ecx
je 0x4ad3d3
push eax
call fcn.004b17b0
push dword [esp + 0x3c]
sub eax, 7
mov dword [esp + 0x54], eax
call fcn.004ac710
push ebx
mov dword [esp + 0x5c], eax
call fcn.004b17b0
sub eax, 7
push ebx
mov dword [esp + 0x64], eax
call fcn.004ac710
mov ebx, dword [esp + 0x50]
push ebx
mov dword [esp + 0x6c], eax
call fcn.004b17b0
sub eax, 7
push ebx
mov dword [esp + 0x74], eax
call fcn.004ac710
push dword [esp + 0x5c]
mov dword [esp + 0x3c], eax
call fcn.004b17b0
push dword [esp + 0x60]
lea ebx, [eax - 7]
mov dword [esp + 0x80], ebx
call fcn.004ac710
mov edx, dword [esp + 0x4c]
add esp, 0x20
mov dword [esp + 0x1c], eax
mov ecx, dword [esi + 4]
mov dword [esp + 0x24], edi
test ecx, ecx
jle 0x4ad2de
mov eax, dword [esp + 0x4c]
neg eax
mov dword [esp + 0x70], eax
mov eax, 8
sub eax, dword [esp + 0x50]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x54]
neg eax
mov dword [esp + 0x78], eax
mov eax, 8
sub eax, dword [esp + 0x58]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x5c]
neg eax
mov dword [esp + 0x80], eax
mov eax, 8
sub eax, dword [esp + 0x20]
mov dword [esp + 0x84], eax
mov eax, ebx
neg eax
mov dword [esp + 0x88], eax
mov eax, 8
sub eax, dword [esp + 0x1c]
mov dword [esp + 0x8c], eax
nop dword [eax + eax]
mov eax, dword [esi]
xor ebx, ebx
cmp dword [esp + 0x14], ebx
je 0x4ad148
test eax, eax
jle 0x4ad28e
nop word [eax + eax]
mov eax, dword [esi + 0xa8]
cmp eax, dword [esi + 0xac]
jae 0x4ad049
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ad06b
cmp dword [esi + 0x20], 0
je 0x4ad069
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ad06b
xor cl, cl
mov byte [edi + ebp + 2], cl
cmp eax, dword [esi + 0xac]
jae 0x4ad082
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ad0a4
cmp dword [esi + 0x20], 0
je 0x4ad0a2
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ad0a4
xor cl, cl
mov byte [edi + ebp + 1], cl
cmp eax, dword [esi + 0xac]
jae 0x4ad0bb
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ad0dd
cmp dword [esi + 0x20], 0
je 0x4ad0db
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ad0dd
xor cl, cl
mov byte [edi + ebp], cl
add edi, 3
cmp dword [esp + 0x14], 2
jne 0x4ad121
cmp eax, dword [esi + 0xac]
jae 0x4ad0fd
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ad124
cmp dword [esi + 0x20], 0
je 0x4ad11d
push esi
call fcn.004b7f40
mov eax, dword [esi + 0xa8]
add esp, 4
mov cl, byte [eax]
inc eax
mov dword [esi + 0xa8], eax
jmp 0x4ad124
xor cl, cl
jmp 0x4ad124
or cl, 0xff
movzx eax, cl
or dword [esp + 0x28], eax
cmp dword [esp + 0x10], 4
jne 0x4ad136
mov byte [edi + ebp], cl
inc edi
inc ebx
cmp ebx, dword [esi]
jl 0x4ad030
mov dword [esp + 0x18], edi
jmp 0x4ad28e
test eax, eax
jle 0x4ad28e
push esi
cmp edx, 0x10
jne 0x4ad160
call fcn.004afc50
add esp, 4
jmp 0x4ad179
call fcn.004afc50
push esi
mov edi, eax
call fcn.004afc50
shl eax, 0x10
add esp, 8
add eax, edi
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x4c]
mov edx, eax
and edx, dword [esp + 0x38]
test ecx, ecx
jns 0x4ad18f
mov ecx, dword [esp + 0x70]
shl edx, cl
jmp 0x4ad191
shr edx, cl
mov ecx, dword [esp + 0x74]
shr edx, cl
mov ecx, dword [esp + 0x50]
imul edx, dword [ecx*4 + 0x64d090]
mov ecx, dword [ecx*4 + 0x64d0b4]
sar edx, cl
mov ecx, dword [esp + 0x54]
mov byte [edi + ebp], dl
mov edx, eax
and edx, dword [esp + 0x3c]
test ecx, ecx
jns 0x4ad1c5
mov ecx, dword [esp + 0x78]
shl edx, cl
jmp 0x4ad1c7
shr edx, cl
mov ecx, dword [esp + 0x7c]
shr edx, cl
mov ecx, dword [esp + 0x58]
imul edx, dword [ecx*4 + 0x64d090]
mov ecx, dword [ecx*4 + 0x64d0b4]
sar edx, cl
mov ecx, dword [esp + 0x5c]
mov byte [edi + ebp + 1], dl
mov edx, eax
and edx, dword [esp + 0x40]
test ecx, ecx
jns 0x4ad1ff
mov ecx, dword [esp + 0x80]
shl edx, cl
jmp 0x4ad201
shr edx, cl
mov ecx, dword [esp + 0x84]
shr edx, cl
mov ecx, dword [esp + 0x20]
imul edx, dword [ecx*4 + 0x64d090]
mov ecx, dword [ecx*4 + 0x64d0b4]
sar edx, cl
mov ecx, dword [esp + 0x44]
mov byte [edi + ebp + 2], dl
add edi, 3
mov dword [esp + 0x18], edi
test ecx, ecx
je 0x4ad269
and eax, ecx
mov ecx, dword [esp + 0x60]
test ecx, ecx
jns 0x4ad247
mov ecx, dword [esp + 0x88]
shl eax, cl
jmp 0x4ad249
shr eax, cl
mov ecx, dword [esp + 0x8c]
shr eax, cl
mov ecx, dword [esp + 0x1c]
imul eax, dword [ecx*4 + 0x64d090]
mov ecx, dword [ecx*4 + 0x64d0b4]
sar eax, cl
jmp 0x4ad26e
mov eax, 0xff
or dword [esp + 0x28], eax
cmp dword [esp + 0x10], 4
jne 0x4ad281
mov byte [edi + ebp], al
inc edi
mov dword [esp + 0x18], edi
mov edx, dword [esp + 0x2c]
inc ebx
cmp ebx, dword [esi]
jl 0x4ad150
cmp dword [esi + 0x10], 0
mov edx, dword [esp + 0x64]
je 0x4ad2c0
mov eax, dword [esi + 0xac]
mov ecx, eax
sub ecx, dword [esi + 0xa8]
cmp ecx, edx
jge 0x4ad2c0
sub edx, ecx
mov dword [esi + 0xa8], eax
mov eax, dword [esi + 0x14]
push edx
push dword [esi + 0x1c]
call eax
add esp, 8
jmp 0x4ad2c6
add dword [esi + 0xa8], edx
mov eax, dword [esp + 0x24]
mov ecx, dword [esi + 4]
inc eax
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
cmp eax, ecx
jl 0x4ad010
mov edi, dword [esp + 0x10]
cmp edi, 4
jne 0x4ad309
cmp dword [esp + 0x28], 0
jne 0x4ad309
mov eax, dword [esi]
imul eax, ecx
lea eax, [eax*4 - 1]
test eax, eax
js 0x4ad309
nop
mov byte [eax + ebp], 0xff
sub eax, 4
jns 0x4ad300
cmp dword [esp + 0x90], 0
jle 0x4ad386
mov ecx, dword [esi + 4]
xor edx, edx
mov dword [esp + 0x24], edx
test ecx, 0xfffffffe
jle 0x4ad386
mov eax, dword [esi]
sub ecx, edx
dec ecx
mov ebx, eax
imul ecx, eax
imul eax, dword [esp + 0x10]
imul ebx, edx
imul ecx, edi
imul ebx, edi
xor edi, edi
lea edx, [ecx + ebp]
test eax, eax
jle 0x4ad36e
mov ebp, dword [esp + 0x10]
sub ebx, ecx
nop dword [eax + eax]
mov al, byte [edx]
lea edx, [edx + 1]
mov cl, byte [ebx + edx - 1]
inc edi
mov byte [ebx + edx - 1], al
mov byte [edx - 1], cl
mov eax, dword [esi]
imul eax, ebp
cmp edi, eax
jl 0x4ad350
mov ebp, dword [esp + 0x68]
mov edx, dword [esp + 0x24]
mov ecx, dword [esi + 4]
inc edx
mov edi, dword [esp + 0x10]
mov eax, ecx
sar eax, 1
mov dword [esp + 0x24], edx
cmp edx, eax
jl 0x4ad324
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4ad3a8
cmp eax, edi
je 0x4ad3a8
push dword [esi + 4]
push dword [esi]
push eax
push edi
push ebp
call fcn.004adf90
mov ebp, eax
add esp, 0x14
test ebp, ebp
je 0x4ad3fe
mov ecx, dword [esp + 0x94]
mov eax, dword [esi]
mov dword [ecx], eax
mov ecx, dword [esp + 0x98]
mov eax, dword [esi + 4]
mov dword [ecx], eax
mov ecx, dword [esp + 0x9c]
test ecx, ecx
je 0x4ad3cf
mov eax, dword [esi + 8]
mov dword [ecx], eax
mov eax, ebp
jmp 0x4ad400
push ebp
call fcn.005b7d34
add esp, 4
mov dword [0x655470], 0x5fab88
jmp 0x4ad3fe
mov dword [0x655470], str.outofmem
jmp 0x4ad3fe
mov dword [0x655470], str.too_large
xor eax, eax
mov ecx, dword [esp + 0x4a0]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005b26e6
add esp, 0x494
ret