Function at 0x4e3caf
Capabilities:
Encrypt data using rc4 ksa
Enumerate pe sections

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x8c
mov eax, dword [esp + 0xb4]
imul eax, dword [esp + 0xb0]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xac]
mov edi, dword [eax]
cmp edi, 3
je 0x4e4032
mov edx, dword [esp + 0xac]
mov eax, dword [esp + 0xa8]
call fcn.004da77c
test eax, eax
jne 0x4e3f0e
mov eax, dword [esp + 0xa8]
mov esi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x14], eax
cmp esi, 3
je 0x4e3f6c
mov eax, dword [esp + 0xac]
mov ebx, dword [eax + 4]
cmp ebx, 0x10
je 0x4e411f
cmp dword [esp + 0x14], 8
je 0x4e4238
mov byte [esp + 0x34], 0
mov byte [esp + 0x36], 0
mov byte [esp + 0x38], 0
mov byte [esp + 0x3a], 0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4e3e20
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x24], eax
mov edi, eax
xor ebx, ebx
lea eax, [esp + 0x38]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x36]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x18], eax
lea ebp, [esp + 0x3a]
mov dword [esp + 0x28], ebp
mov ebp, dword [esp + 0xa8]
mov eax, dword [esp + 0xac]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
call fcn.004dc366
movzx eax, byte [esp + 0x3a]
mov byte [esp + 0x14], al
movzx eax, byte [esp + 0x38]
movzx ecx, byte [esp + 0x36]
movzx edx, byte [esp + 0x34]
mov esi, dword [ebp]
cmp esi, 6
ja case.0x4e3dd8.1
jmp dword [esi*4 + 0x4f7100]
cmp dword [ebp + 4], 8
je 0x4e40b0
mov byte [edi + 1], dl
mov byte [edi], dl
mov byte [edi + 3], cl
mov byte [edi + 2], cl
mov byte [edi + 5], al
mov byte [edi + 4], al
add ebx, 1
add dword [esp + 0x24], 3
add edi, 6
cmp dword [esp + 0x10], ebx
jne 0x4e3d86
mov eax, dword [esp + 0xa8]
mov esi, dword [eax]
mov dword [esp + 0x10], 0
cmp esi, 3
je 0x4e4834
mov eax, dword [esp + 0x10]
add esp, 0x8c
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [esp + 0xa0]
cmp dword [ebp + 4], 8
je 0x4e4097
mov byte [esi + ebx*8 + 1], dl
mov byte [esi + ebx*8], dl
mov byte [esi + ebx*8 + 3], cl
mov byte [esi + ebx*8 + 2], cl
mov byte [esi + ebx*8 + 5], al
mov byte [esi + ebx*8 + 4], al
movzx eax, byte [esp + 0x14]
mov byte [esi + ebx*8 + 7], al
mov byte [esi + ebx*8 + 6], al
jmp case.0x4e3dd8.1
mov eax, dword [ebp + 4]
cmp eax, 8
je 0x4e407d
cmp eax, 0x10
jne case.0x4e3dd8.1
mov eax, dword [esp + 0xa0]
mov byte [eax + ebx*4 + 1], dl
mov byte [eax + ebx*4], dl
mov esi, eax
movzx eax, byte [esp + 0x14]
mov byte [esi + ebx*4 + 3], al
mov byte [esi + ebx*4 + 2], al
jmp case.0x4e3dd8.1
mov dword [esp + 0x2c], edx
movzx edx, byte [esp + 0x14]
mov dword [esp + 4], edx
mov dword [esp], eax
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x3c]
call fcn.004d98ad
test eax, eax
js 0x4e428b
mov ecx, dword [ebp + 4]
cmp ecx, 8
jne 0x4e4058
mov esi, dword [esp + 0xa0]
mov byte [esi + ebx], al
jmp case.0x4e3dd8.1
mov eax, dword [ebp + 4]
cmp eax, 8
je 0x4e406e
cmp eax, 0x10
jne 0x4e40c1
mov eax, dword [esp + 0xa0]
mov byte [eax + ebx*2 + 1], dl
mov byte [eax + ebx*2], dl
jmp case.0x4e3dd8.1
cmp edi, 6
ja case.0x4e4536.1
mov eax, dword [esp + 0xac]
mov edx, dword [eax + 4]
imul edx, dword [edi*4 + 0x4f8770]
mov edi, dword [esp + 0x10]
mov eax, edi
and eax, 7
imul eax, edx
add eax, 7
shr eax, 3
shr edi, 3
imul edx, edi
add eax, edx
je case.0x4e4536.1
mov dword [esp + 8], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.004f0ad4
mov dword [esp + 0x10], 0
jmp 0x4e3e29
mov eax, dword [esp + 0xa8]
mov eax, dword [eax + 0xc]
mov edx, 1
movzx ecx, byte [esp + 0x14]
shl edx, cl
test eax, eax
jne 0x4e40f2
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0xac]
mov ebp, dword [ecx + 8]
cmp edi, 3
je 0x4e44ea
cmp edx, eax
cmovbe eax, edx
mov edx, eax
lea edi, [esp + 0x3c]
mov dword [esp + 0x18], edi
mov ecx, 0x10
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [esp + 0x7c], 0xffffffff
test edx, edx
je 0x4e425e
xor ebx, ebx
mov edi, edx
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 0x18]
jmp 0x4e3fe8
add ebx, 1
cmp ebx, edi
je 0x4e425a
movzx ecx, byte [ebp + ebx*4 + 1]
movzx edx, byte [ebp + ebx*4]
mov dword [esp + 8], ebx
movzx eax, byte [ebp + ebx*4 + 3]
mov dword [esp + 4], eax
movzx eax, byte [ebp + ebx*4 + 2]
mov dword [esp], eax
mov eax, esi
call fcn.004d9feb
test eax, eax
je 0x4e3fdd
mov dword [esp + 0x10], 0x53
mov eax, dword [esp + 0x18]
call fcn.004dc10e
mov eax, dword [esp + 0x10]
add esp, 0x8c
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebp, dword [eax + 8]
test ebp, ebp
je 0x4e4520
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.004da77c
test eax, eax
je 0x4e3cf9
jmp 0x4e3f13
mov dword [esp], eax
mov edx, ebx
mov eax, dword [esp + 0xa0]
call fcn.004d985c
jmp case.0x4e3dd8.1
mov eax, dword [esp + 0xa0]
mov byte [eax + ebx], dl
jmp case.0x4e3dd8.1
mov eax, dword [esp + 0xa0]
mov byte [eax + ebx*2], dl
mov esi, eax
movzx eax, byte [esp + 0x14]
mov byte [esi + ebx*2 + 1], al
jmp case.0x4e3dd8.1
mov byte [esi + ebx*4], dl
mov byte [esi + ebx*4 + 1], cl
mov byte [esi + ebx*4 + 2], al
movzx eax, byte [esp + 0x14]
mov byte [esi + ebx*4 + 3], al
jmp case.0x4e3dd8.1
mov esi, dword [esp + 0x24]
mov byte [esi], dl
mov byte [esi + 1], cl
mov byte [esi + 2], al
jmp case.0x4e3dd8.1
mov ecx, 8
sub ecx, eax
shr edx, cl
mov esi, 0xffffffff
mov ecx, eax
shl esi, cl
not esi
and edx, esi
movzx edx, dl
mov dword [esp], edx
mov ecx, eax
mov edx, ebx
mov eax, dword [esp + 0xa0]
call fcn.004d985c
jmp case.0x4e3dd8.1
mov edi, dword [esp + 0xa8]
mov ebp, dword [edi + 8]
cmp eax, edx
cmovbe edx, eax
lea edi, [esp + 0x3c]
mov dword [esp + 0x18], edi
mov ecx, 0x10
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [esp + 0x7c], 0xffffffff
jmp 0x4e3fcf
cmp dword [esp + 0x14], 0x10
jne 0x4e3d25
mov edi, dword [esp + 0x10]
test edi, edi
je case.0x4e4536.1
mov edi, dword [esp + 0xa0]
xor ebx, ebx
lea eax, [esp + 0x38]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x36]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x18], eax
lea ebp, [esp + 0x3a]
mov esi, ebp
mov ebp, edi
jmp 0x4e4179
mov byte [ebp + ebx*2], dh
mov byte [ebp + ebx*2 + 1], dl
add ebx, 1
add edi, 6
cmp dword [esp + 0x10], ebx
je 0x4e3e0f
mov word [esp + 0x34], 0
mov word [esp + 0x36], 0
mov word [esp + 0x38], 0
mov word [esp + 0x3a], 0
mov eax, dword [esp + 0xac]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp], esi
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
call fcn.004d9950
movzx edx, word [esp + 0x34]
mov eax, dword [esp + 0xa8]
mov eax, dword [eax]
test eax, eax
je 0x4e4161
movzx ecx, word [esp + 0x38]
mov word [esp + 0x14], cx
movzx ecx, word [esp + 0x36]
mov word [esp + 0x24], cx
cmp eax, 2
je 0x4e44ba
movzx ecx, word [esp + 0x3a]
cmp eax, 4
je 0x4e44d5
cmp eax, 6
jne 0x4e4169
mov byte [ebp + ebx*8], dh
mov byte [ebp + ebx*8 + 1], dl
movzx eax, word [esp + 0x24]
mov byte [ebp + ebx*8 + 2], ah
mov byte [ebp + ebx*8 + 3], al
movzx eax, word [esp + 0x14]
mov byte [ebp + ebx*8 + 4], ah
mov byte [ebp + ebx*8 + 5], al
mov byte [ebp + ebx*8 + 6], ch
mov byte [ebp + ebx*8 + 7], cl
jmp 0x4e4169
cmp esi, 6
je 0x4e452d
cmp esi, 2
jne 0x4e3d30
cmp edi, 6
ja case.0x4e4536.1
jmp dword [edi*4 + 0x4f711c]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0xac]
cmp dword [eax + 4], 0x10
jne 0x4e3d30
cmp dword [esp + 0x14], 0x10
jne 0x4e3d30
mov esi, dword [esp + 0x10]
test esi, esi
jne 0x4e4136
jmp 0x4e401a
mov dword [esp + 0x10], 0x52
jmp 0x4e3e20
cmp ebx, 8
je 0x4e4b2b
mov edx, dword [esp + 0x10]
test edx, edx
je case.0x4e4536.1
mov eax, dword [esp + 0xa4]
mov edi, dword [esp + 0x10]
lea edx, [edi + edi]
add edx, edi
add edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa0]
movzx ebx, byte [eax]
mov byte [ecx], bl
movzx ebx, byte [eax + 2]
mov byte [ecx + 1], bl
movzx ebx, byte [eax + 4]
mov byte [ecx + 2], bl
add ecx, 3
add eax, 8
cmp ecx, edx
jne 0x4e42cb
jmp 0x4e3e0f
cmp ebx, 8
je 0x4e4b74
mov ecx, dword [esp + 0x10]
test ecx, ecx
je case.0x4e4536.1
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0x10]
lea ecx, [eax + eax]
add ecx, eax
add ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0xa0]
movzx ebx, byte [edx]
mov byte [eax + 2], bl
mov byte [eax + 1], bl
mov byte [eax], bl
add eax, 3
add edx, 4
cmp eax, ecx
jne 0x4e4320
jmp 0x4e3e0f
cmp ebx, 8
je 0x4e4a8b
mov ebx, dword [esp + 0x10]
test ebx, ebx
je case.0x4e4536.1
mov edi, dword [esp + 0x10]
lea eax, [edi + edi]
add eax, edi
add eax, dword [esp + 0xa0]
xor ebx, ebx
mov dword [esp + 0x10], eax
mov edi, dword [esp + 0xa0]
mov esi, dword [esp + 0xa4]
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 4]
test eax, eax
je 0x4e43c4
lea ebp, [eax + ebx]
xor eax, eax
jmp 0x4e43a0
add eax, eax
mov edx, ebx
shr edx, 3
movzx edx, byte [esi + edx]
mov ecx, ebx
not ecx
and ecx, 7
sar edx, cl
add ebx, 1
and edx, 1
or eax, edx
cmp ebx, ebp
jne 0x4e43a0
add eax, eax
add eax, eax
mov dword [esp + 8], 3
mov ecx, dword [esp + 0xac]
add eax, dword [ecx + 8]
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.004f0ad4
add edi, 3
mov eax, dword [esp + 0x10]
cmp edi, eax
jne 0x4e4373
jmp 0x4e3e0f
cmp ebx, 8
je 0x4e4add
mov esi, dword [esp + 0x10]
test esi, esi
je case.0x4e4536.1
mov eax, dword [esp + 0xa4]
mov edi, dword [esp + 0x10]
lea edx, [edi + edi]
add edx, edi
add edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa0]
movzx ebx, byte [eax]
mov byte [ecx], bl
movzx ebx, byte [eax + 2]
mov byte [ecx + 1], bl
movzx ebx, byte [eax + 4]
mov byte [ecx + 2], bl
add ecx, 3
add eax, 6
cmp ecx, edx
jne 0x4e4425
jmp 0x4e3e0f
cmp ebx, 8
je 0x4e4af3
cmp ebx, 0x10
je 0x4e4c1f
mov eax, 1
mov ecx, ebx
shl eax, cl
sub eax, 1
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0x10]
test ebp, ebp
je case.0x4e4536.1
mov esi, dword [esp + 0x10]
lea eax, [esi + esi]
add eax, esi
add eax, dword [esp + 0xa0]
mov ebp, eax
test ebx, ebx
jne 0x4e4a0f
mov eax, dword [esp + 0xa0]
mov byte [eax + 2], 0
mov byte [eax + 1], 0
mov byte [eax], 0
add eax, 3
cmp eax, ebp
jne 0x4e4496
mov eax, dword [esp + 0xa8]
mov esi, dword [eax]
mov dword [esp + 0x10], edi
jmp 0x4e3e20
mov byte [edi], dh
mov byte [edi + 1], dl
mov byte [edi + 2], ch
mov byte [edi + 3], cl
movzx eax, word [esp + 0x14]
mov byte [edi + 4], ah
mov byte [edi + 5], al
jmp 0x4e4169
mov byte [ebp + ebx*4], dh
mov byte [ebp + ebx*4 + 1], dl
mov byte [ebp + ebx*4 + 2], ch
mov byte [ebp + ebx*4 + 3], cl
jmp 0x4e4169
mov ecx, dword [ecx + 4]
mov edi, dword [esp + 0x14]
cmp ecx, edi
jne 0x4e3fa7
mov edi, dword [esp + 0x10]
mov eax, edi
and eax, 7
imul eax, ecx
add eax, 7
shr eax, 3
shr edi, 3
mov edx, edi
imul edx, ecx
add eax, edx
jne 0x4e3f41
jmp case.0x4e4536.1
mov dword [esp + 0x10], 0x6b
jmp 0x4e3e29
cmp edi, 6
ja case.0x4e4536.1
jmp dword [edi*4 + 0x4f7138]
cmp ebx, 8
je 0x4e49d7
mov eax, dword [esp + 0x10]
test eax, eax
je case.0x4e4536.1
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0x10]
add edx, edx
add edx, edx
add edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa0]
movzx ebx, byte [eax]
mov byte [ecx], bl
movzx ebx, byte [eax + 2]
mov byte [ecx + 1], bl
movzx ebx, byte [eax + 4]
mov byte [ecx + 2], bl
movzx ebx, byte [eax + 6]
mov byte [ecx + 3], bl
add ecx, 4
add eax, 8
cmp ecx, edx
jne 0x4e456f
jmp 0x4e3e0f
cmp ebx, 8
je 0x4e48f6
mov eax, dword [esp + 0x10]
test eax, eax
je case.0x4e4536.1
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x10]
add ecx, ecx
add ecx, ecx
add ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa0]
movzx ebx, byte [eax]
mov byte [edx + 2], bl
mov byte [edx + 1], bl
mov byte [edx], bl
movzx ebx, byte [eax + 2]
mov byte [edx + 3], bl
add edx, 4
add eax, 4
cmp edx, ecx
jne 0x4e45ca
jmp 0x4e3e0f
cmp ebx, 8
je 0x4e4935
mov eax, dword [esp + 0x10]
test eax, eax
je case.0x4e4536.1
mov eax, dword [esp + 0xac]
mov ebp, dword [eax + 0x10]
mov edi, dword [esp + 0xa4]
mov esi, dword [esp + 0x10]
lea eax, [esi + esi]
add eax, esi
add eax, eax
lea esi, [edi + eax]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0xa0]
jmp 0x4e4645
mov ecx, esi
mov byte [eax + 3], cl
add eax, 4
add edi, 6
cmp dword [esp + 0x14], edi
je 0x4e3e0f
movzx edx, byte [edi]
mov byte [eax], dl
movzx ebx, byte [edi + 2]
mov byte [eax + 1], bl
movzx ecx, byte [edi + 4]
mov byte [eax + 2], cl
mov esi, 0xffffffff
mov ebp, dword [esp + 0x10]
test ebp, ebp
je 0x4e4630
shl edx, 8
movzx ebp, byte [edi + 1]
add edx, ebp
mov ebp, dword [esp + 0xac]
cmp edx, dword [ebp + 0x14]
jne 0x4e4630
movzx edx, bl
shl edx, 8
movzx ebx, byte [edi + 3]
add edx, ebx
cmp edx, dword [ebp + 0x18]
jne 0x4e4630
movzx edx, cl
shl edx, 8
movzx ecx, byte [edi + 5]
add edx, ecx
cmp edx, dword [ebp + 0x1c]
setne dl
neg edx
mov esi, edx
jmp 0x4e4630
cmp ebx, 8
je 0x4e48b7
xor edx, edx
xor ebx, ebx
mov eax, dword [esp + 0x10]
test eax, eax
je case.0x4e4536.1
mov ebp, dword [esp + 0xa4]
mov ecx, dword [esp + 0xac]
mov eax, dword [ecx + 4]
test eax, eax
je 0x4e472b
lea edi, [eax + edx]
xor eax, eax
mov dword [esp + 0x14], ebx
mov esi, ecx
jmp 0x4e4700
add eax, eax
mov ecx, edx
shr ecx, 3
movzx ebx, byte [ebp + ecx]
mov ecx, edx
not ecx
and ecx, 7
sar ebx, cl
add edx, 1
and ebx, 1
or eax, ebx
cmp edx, edi
jne 0x4e4700
mov ebx, dword [esp + 0x14]
mov ecx, esi
add eax, eax
add eax, eax
mov esi, dword [ecx + 8]
mov eax, dword [esi + eax]
mov edi, dword [esp + 0xa0]
mov dword [edi + ebx*4], eax
add ebx, 1
cmp dword [esp + 0x10], ebx
jne 0x4e46ca
jmp 0x4e3e0f
cmp ebx, 8
je 0x4e4841
cmp ebx, 0x10
je 0x4e4bb4
mov eax, 1
mov ecx, ebx
shl eax, cl
sub eax, 1
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x10]
test ecx, ecx
je case.0x4e4536.1
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x1c], eax
mov esi, edi
mov ebp, edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x20], ebx
mov edi, dword [esp + 0xa0]
mov ebx, dword [esp + 0xa4]
mov eax, dword [esp + 0x20]
lea edx, [eax + esi]
mov ecx, dword [esp + 0x18]
test eax, eax
je 0x4e4a08
mov dword [esp + 0x14], ebp
mov ebp, ecx
lea esi, [esi]
add ebp, ebp
mov eax, esi
shr eax, 3
movzx eax, byte [ebx + eax]
mov ecx, esi
not ecx
and ecx, 7
sar eax, cl
add esi, 1
and eax, 1
or ebp, eax
cmp edx, esi
jne 0x4e47c0
mov ecx, ebp
mov ebp, dword [esp + 0x14]
mov eax, ecx
shl eax, 8
sub eax, ecx
xor edx, edx
div dword [esp + 0x24]
mov byte [edi + ebp*4 + 2], al
mov byte [edi + ebp*4 + 1], al
mov byte [edi + ebp*4], al
mov eax, 0xffffffff
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x4e481a
mov eax, dword [esp + 0xac]
cmp dword [eax + 0x14], ecx
setne al
neg eax
mov byte [edi + ebp*4 + 3], al
add ebp, 1
cmp dword [esp + 0x10], ebp
jne 0x4e47a3
mov edi, dword [esp + 0x18]
jmp 0x4e44a8
lea eax, [esp + 0x3c]
mov dword [esp + 0x18], eax
jmp 0x4e401a
mov esi, dword [esp + 0x10]
test esi, esi
je case.0x4e4536.1
mov eax, dword [esp + 0xa4]
lea ebx, [eax + esi]
mov ecx, dword [esp + 0xa0]
movzx edx, byte [eax]
mov byte [ecx + 2], dl
mov byte [ecx + 1], dl
mov byte [ecx], dl
mov byte [ecx + 3], 0xff
add ecx, 4
add eax, 1
cmp eax, ebx
jne 0x4e485e
mov eax, dword [esp + 0xac]
mov ebx, dword [eax + 0x10]
test ebx, ebx
je 0x4e3e0f
mov edx, dword [esp + 0xa0]
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x14]
mov eax, edi
movzx ebx, byte [edx + eax*4]
cmp ebx, ecx
jne 0x4e48a9
mov byte [edx + eax*4 + 3], 0
add eax, 1
cmp dword [esp + 0x10], eax
jne 0x4e489c
jmp 0x4e44a8
mov edi, dword [esp + 0x10]
test edi, edi
je case.0x4e4536.1
mov eax, dword [esp + 0xa4]
add edi, eax
mov ecx, edi
mov edx, dword [esp + 0xa0]
mov edi, dword [esp + 0xac]
movzx esi, byte [eax]
mov ebx, dword [edi + 8]
mov ebx, dword [ebx + esi*4]
mov dword [edx], ebx
add edx, 4
add eax, 1
cmp eax, ecx
jne 0x4e48dc
jmp 0x4e3e0f
mov ecx, dword [esp + 0x10]
test ecx, ecx
je case.0x4e4536.1
mov eax, dword [esp + 0xa4]
add ecx, ecx
add ecx, eax
mov edx, dword [esp + 0xa0]
movzx ebx, byte [eax]
mov byte [edx + 2], bl
mov byte [edx + 1], bl
mov byte [edx], bl
movzx ebx, byte [eax + 1]
mov byte [edx + 3], bl
add edx, 4
add eax, 2
cmp eax, ecx
jne 0x4e4914
jmp 0x4e3e0f
mov edi, dword [esp + 0x10]
test edi, edi
je case.0x4e4536.1
mov ebx, dword [esp + 0xa4]
lea eax, [edi + edi]
add eax, edi
lea edi, [ebx + eax]
mov esi, dword [esp + 0xa0]
mov dword [esp + 8], 3
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004f0ad4
mov byte [esi + 3], 0xff
add esi, 4
add ebx, 3
cmp ebx, edi
jne 0x4e4957
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4e3e0f
mov edx, dword [esp + 0xa0]
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x14]
xor eax, eax
mov ebx, dword [esp + 0xac]
jmp 0x4e49b4
add eax, 1
cmp dword [esp + 0x10], eax
je 0x4e3e0f
movzx esi, byte [edx + eax*4]
cmp esi, ecx
jne 0x4e49a7
movzx esi, byte [edx + eax*4 + 1]
cmp esi, dword [ebx + 0x18]
jne 0x4e49a7
movzx esi, byte [edx + eax*4 + 2]
cmp esi, dword [ebx + 0x1c]
jne 0x4e49a7
mov byte [edx + eax*4 + 3], 0
jmp 0x4e49a7
mov eax, dword [esp + 0x10]
add eax, eax
add eax, eax
je case.0x4e4536.1
mov dword [esp + 8], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.004f0ad4
jmp 0x4e3e0f
xor ecx, ecx
jmp 0x4e47f3
mov esi, edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebx
mov edi, dword [esp + 0xa0]
mov ebx, dword [esp + 0xa4]
mov edx, esi
mov eax, dword [esp + 0x1c]
add esi, eax
mov eax, dword [esp + 0x10]
lea esi, cs:[esi]
nop
add eax, eax
mov ecx, edx
shr ecx, 3
movzx ebp, byte [ebx + ecx]
mov ecx, edx
not ecx
and ecx, 7
sar ebp, cl
add edx, 1
and ebp, 1
or eax, ebp
cmp edx, esi
jne 0x4e4a40
mov edx, eax
shl edx, 8
sub edx, eax
mov eax, edx
xor edx, edx
div dword [esp + 0x14]
mov byte [edi + 2], al
mov byte [edi + 1], al
mov byte [edi], al
add edi, 3
mov eax, dword [esp + 0x18]
cmp edi, eax
jne 0x4e4a2b
mov edi, dword [esp + 0x10]
jmp 0x4e44a8
mov eax, dword [esp + 0x10]
test eax, eax
je case.0x4e4536.1
mov esi, dword [esp + 0xa4]
add eax, esi
mov ebx, eax
mov ebp, dword [esp + 0xa0]
mov edi, dword [esp + 0xac]
mov dword [esp + 8], 3
movzx eax, byte [esi]
add eax, eax
add eax, eax
add eax, dword [edi + 8]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.004f0ad4
add ebp, 3
add esi, 1
cmp esi, ebx
jne 0x4e4ab0
jmp 0x4e3e0f
mov edi, dword [esp + 0x10]
test edi, edi
je case.0x4e4536.1
lea eax, [edi + edi]
add eax, edi
jmp 0x4e49e5
mov esi, dword [esp + 0x10]
test esi, esi
je case.0x4e4536.1
mov eax, dword [esp + 0xa4]
add esi, eax
mov ecx, esi
mov edx, dword [esp + 0xa0]
movzx ebx, byte [eax]
mov byte [edx + 2], bl
mov byte [edx + 1], bl
mov byte [edx], bl
add edx, 3
add eax, 1
cmp eax, ecx
jne 0x4e4b11
jmp 0x4e44a8
mov eax, dword [esp + 0x10]
test eax, eax
je case.0x4e4536.1
mov ebx, dword [esp + 0xa4]
lea esi, [eax + eax]
add esi, eax
add esi, dword [esp + 0xa0]
mov edi, dword [esp + 0xa0]
mov dword [esp + 8], 3
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.004f0ad4
add edi, 3
add ebx, 4
cmp edi, esi
jne 0x4e4b51
jmp 0x4e3e0f
mov eax, dword [esp + 0x10]
test eax, eax
je case.0x4e4536.1
mov edx, dword [esp + 0xa4]
lea ecx, [eax + eax]
add ecx, eax
add ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0xa0]
movzx ebx, byte [edx]
mov byte [eax + 2], bl
mov byte [eax + 1], bl
mov byte [eax], bl
add eax, 3
add edx, 2
cmp eax, ecx
jne 0x4e4b9a
jmp 0x4e3e0f
mov eax, dword [esp + 0x10]
test eax, eax
je case.0x4e4536.1
mov esi, dword [esp + 0xac]
mov ebx, dword [esi + 0x10]
mov edx, dword [esp + 0xa4]
add eax, eax
lea esi, [edx + eax]
mov ecx, dword [esp + 0xa0]
movzx eax, byte [edx]
mov byte [ecx + 2], al
mov byte [ecx + 1], al
mov byte [ecx], al
mov ebp, 0xffffffff
test ebx, ebx
je 0x4e4c0b
shl eax, 8
movzx ebp, byte [edx + 1]
add eax, ebp
mov ebp, dword [esp + 0xac]
cmp eax, dword [ebp + 0x14]
setne al
neg eax
mov ebp, eax
mov eax, ebp
mov byte [ecx + 3], al
add ecx, 4
add edx, 2
cmp edx, esi
jne 0x4e4bdd
jmp 0x4e44a8
mov eax, dword [esp + 0x10]
test eax, eax
je case.0x4e4536.1
mov edx, dword [esp + 0xa4]
lea ecx, [eax + eax*2]
add ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0xa0]
movzx ebx, byte [edx]
mov byte [eax + 2], bl
mov byte [eax + 1], bl
mov byte [eax], bl
add eax, 3
add edx, 2
cmp eax, ecx
jne 0x4e4c43
jmp 0x4e44a8