Function at 0x100ee5b0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd4c
mov eax, dword [0x10125a94]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
cmp dword [ebp + 0x1c], 4
jl 0x100ee5e3
push str.________main_sort_initialise_..._n
push 2
call fcn.100beb34
add esp, 4
push eax
call fcn.10019860
add esp, 8
mov dword [ebp - 0xd0c], 0x10000
jmp 0x100ee5fe
mov eax, dword [ebp - 0xd0c]
sub eax, 1
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 0
jl 0x100ee619
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0x14]
mov dword [edx + ecx*4], 0
jmp 0x100ee5ef
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp + 0xc]
movzx eax, byte [edx + ecx]
shl eax, 8
mov dword [ebp - 0xd08], eax
mov ecx, dword [ebp + 0x18]
sub ecx, 1
mov dword [ebp - 0xd0c], ecx
jmp 0x100ee64e
mov edx, dword [ebp - 0xd0c]
sub edx, 4
mov dword [ebp - 0xd0c], edx
cmp dword [ebp - 0xd0c], 3
jl 0x100ee78e
xor eax, eax
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0x10]
mov word [edx + ecx*2], ax
mov eax, dword [ebp - 0xd08]
sar eax, 8
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0xd0c]
movzx edx, byte [ecx]
shl edx, 8
or eax, edx
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4]
add edx, 1
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + eax*4], edx
xor edx, edx
mov eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp + 0x10]
mov word [ecx + eax*2 - 2], dx
mov edx, dword [ebp - 0xd08]
sar edx, 8
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0xd0c]
movzx ecx, byte [eax - 1]
shl ecx, 8
or edx, ecx
mov dword [ebp - 0xd08], edx
mov edx, dword [ebp - 0xd08]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
add ecx, 1
mov edx, dword [ebp - 0xd08]
mov eax, dword [ebp + 0x14]
mov dword [eax + edx*4], ecx
xor ecx, ecx
mov edx, dword [ebp - 0xd0c]
mov eax, dword [ebp + 0x10]
mov word [eax + edx*2 - 4], cx
mov ecx, dword [ebp - 0xd08]
sar ecx, 8
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd0c]
movzx eax, byte [edx - 2]
shl eax, 8
or ecx, eax
mov dword [ebp - 0xd08], ecx
mov ecx, dword [ebp - 0xd08]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
add eax, 1
mov ecx, dword [ebp - 0xd08]
mov edx, dword [ebp + 0x14]
mov dword [edx + ecx*4], eax
xor eax, eax
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0x10]
mov word [edx + ecx*2 - 6], ax
mov eax, dword [ebp - 0xd08]
sar eax, 8
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0xd0c]
movzx edx, byte [ecx - 3]
shl edx, 8
or eax, edx
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4]
add edx, 1
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + eax*4], edx
jmp 0x100ee63f
jmp 0x100ee79f
mov edx, dword [ebp - 0xd0c]
sub edx, 1
mov dword [ebp - 0xd0c], edx
cmp dword [ebp - 0xd0c], 0
jl 0x100ee7f4
xor eax, eax
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0x10]
mov word [edx + ecx*2], ax
mov eax, dword [ebp - 0xd08]
sar eax, 8
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0xd0c]
movzx edx, byte [ecx]
shl edx, 8
or eax, edx
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4]
add edx, 1
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + eax*4], edx
jmp 0x100ee790
mov dword [ebp - 0xd0c], 0
jmp 0x100ee80f
mov edx, dword [ebp - 0xd0c]
add edx, 1
mov dword [ebp - 0xd0c], edx
cmp dword [ebp - 0xd0c], 0x22
jge 0x100ee846
mov eax, dword [ebp + 0x18]
add eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0xc]
mov cl, byte [ecx]
mov byte [edx + eax], cl
mov edx, dword [ebp + 0x18]
add edx, dword [ebp - 0xd0c]
xor eax, eax
mov ecx, dword [ebp + 0x10]
mov word [ecx + edx*2], ax
jmp 0x100ee800
cmp dword [ebp + 0x1c], 4
jl 0x100ee864
push str.________bucket_sorting_..._n
push 2
call fcn.100beb34
add esp, 4
push eax
call fcn.10019860
add esp, 8
mov dword [ebp - 0xd0c], 1
jmp 0x100ee87f
mov edx, dword [ebp - 0xd0c]
add edx, 1
mov dword [ebp - 0xd0c], edx
cmp dword [ebp - 0xd0c], 0x10000
jg 0x100ee8b2
mov eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp + 0x14]
add edx, dword [ecx + eax*4 - 4]
mov eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + eax*4], edx
jmp 0x100ee870
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp + 0xc]
movzx edx, byte [ecx + eax]
shl edx, 8
mov word [ebp - 0xd10], dx
mov eax, dword [ebp + 0x18]
sub eax, 1
mov dword [ebp - 0xd0c], eax
jmp 0x100ee8e8
mov ecx, dword [ebp - 0xd0c]
sub ecx, 4
mov dword [ebp - 0xd0c], ecx
cmp dword [ebp - 0xd0c], 3
jl 0x100eea7a
movzx edx, word [ebp - 0xd10]
sar edx, 8
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0xd0c]
movzx ecx, byte [eax]
shl ecx, 8
or edx, ecx
mov word [ebp - 0xd10], dx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
sub ecx, 1
mov dword [ebp - 0xd08], ecx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0xd08]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0xd08]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xd0c]
mov dword [eax + edx*4], ecx
movzx edx, word [ebp - 0xd10]
sar edx, 8
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0xd0c]
movzx ecx, byte [eax - 1]
shl ecx, 8
or edx, ecx
mov word [ebp - 0xd10], dx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
sub ecx, 1
mov dword [ebp - 0xd08], ecx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0xd08]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0xd0c]
sub edx, 1
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 8]
mov dword [ecx + eax*4], edx
movzx edx, word [ebp - 0xd10]
sar edx, 8
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0xd0c]
movzx ecx, byte [eax - 2]
shl ecx, 8
or edx, ecx
mov word [ebp - 0xd10], dx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
sub ecx, 1
mov dword [ebp - 0xd08], ecx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0xd08]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0xd0c]
sub edx, 2
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 8]
mov dword [ecx + eax*4], edx
movzx edx, word [ebp - 0xd10]
sar edx, 8
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0xd0c]
movzx ecx, byte [eax - 3]
shl ecx, 8
or edx, ecx
mov word [ebp - 0xd10], dx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
sub ecx, 1
mov dword [ebp - 0xd08], ecx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0xd08]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0xd0c]
sub edx, 3
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 8]
mov dword [ecx + eax*4], edx
jmp 0x100ee8d9
jmp 0x100eea8b
mov edx, dword [ebp - 0xd0c]
sub edx, 1
mov dword [ebp - 0xd0c], edx
cmp dword [ebp - 0xd0c], 0
jl 0x100eeaf3
movzx eax, word [ebp - 0xd10]
sar eax, 8
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0xd0c]
movzx edx, byte [ecx]
shl edx, 8
or eax, edx
mov word [ebp - 0xd10], ax
movzx eax, word [ebp - 0xd10]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4]
sub edx, 1
mov dword [ebp - 0xd08], edx
movzx eax, word [ebp - 0xd10]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 0xd08]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0xd0c]
mov dword [ecx + eax*4], edx
jmp 0x100eea7c
mov dword [ebp - 0xd0c], 0
jmp 0x100eeb0e
mov eax, dword [ebp - 0xd0c]
add eax, 1
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 0xff
jg 0x100eeb5c
mov ecx, dword [ebp - 0xd0c]
mov dword [ebp - 0xd48], ecx
cmp dword [ebp - 0xd48], 0x100
jae 0x100eeb34
jmp 0x100eeb39
call fcn.100af24f
mov edx, dword [ebp - 0xd48]
mov byte [ebp + edx - 0x104], 0
mov eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp - 0xd0c]
mov dword [ebp + eax*4 - 0x504], ecx
jmp 0x100eeaff
mov dword [ebp - 0xd1c], 1
imul edx, dword [ebp - 0xd1c], 3
add edx, 1
mov dword [ebp - 0xd1c], edx
cmp dword [ebp - 0xd1c], 0x100
jle 0x100eeb66
mov eax, dword [ebp - 0xd1c]
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0xd1c], eax
mov edx, dword [ebp - 0xd1c]
mov dword [ebp - 0xd0c], edx
jmp 0x100eebb3
mov eax, dword [ebp - 0xd0c]
add eax, 1
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 0xff
jg 0x100eeca4
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + ecx*4 - 0x504]
mov dword [ebp - 0xd3c], edx
mov eax, dword [ebp - 0xd0c]
mov dword [ebp - 0xd08], eax
mov ecx, dword [ebp - 0xd08]
sub ecx, dword [ebp - 0xd1c]
mov edx, dword [ebp + ecx*4 - 0x504]
add edx, 1
shl edx, 8
mov eax, dword [ebp - 0xd08]
sub eax, dword [ebp - 0xd1c]
mov ecx, dword [ebp + eax*4 - 0x504]
shl ecx, 8
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp + 0x14]
mov edx, dword [eax + edx*4]
sub edx, dword [esi + ecx*4]
mov eax, dword [ebp - 0xd3c]
add eax, 1
shl eax, 8
mov ecx, dword [ebp - 0xd3c]
shl ecx, 8
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0x14]
mov eax, dword [esi + eax*4]
sub eax, dword [edi + ecx*4]
cmp edx, eax
jbe 0x100eec8c
mov ecx, dword [ebp - 0xd08]
sub ecx, dword [ebp - 0xd1c]
mov edx, dword [ebp - 0xd08]
mov eax, dword [ebp + ecx*4 - 0x504]
mov dword [ebp + edx*4 - 0x504], eax
mov ecx, dword [ebp - 0xd08]
sub ecx, dword [ebp - 0xd1c]
mov dword [ebp - 0xd08], ecx
mov edx, dword [ebp - 0xd1c]
sub edx, 1
cmp dword [ebp - 0xd08], edx
jg 0x100eec87
jmp 0x100eec8c
jmp 0x100eebe2
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp - 0xd3c]
mov dword [ebp + eax*4 - 0x504], ecx
jmp 0x100eeba4
cmp dword [ebp - 0xd1c], 1
jne 0x100eeb82
mov dword [ebp - 0xd30], 0
mov dword [ebp - 0xd0c], 0
jmp 0x100eecd6
mov edx, dword [ebp - 0xd0c]
add edx, 1
mov dword [ebp - 0xd0c], edx
cmp dword [ebp - 0xd0c], 0xff
jg 0x100ef28d
mov eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp + eax*4 - 0x504]
mov dword [ebp - 0xd18], ecx
mov dword [ebp - 0xd08], 0
jmp 0x100eed14
mov edx, dword [ebp - 0xd08]
add edx, 1
mov dword [ebp - 0xd08], edx
cmp dword [ebp - 0xd08], 0xff
jg 0x100eee64
mov eax, dword [ebp - 0xd08]
cmp eax, dword [ebp - 0xd18]
je 0x100eee5f
mov ecx, dword [ebp - 0xd18]
shl ecx, 8
add ecx, dword [ebp - 0xd08]
mov dword [ebp - 0xd28], ecx
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0x200000
jne 0x100eee41
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0xffdfffff
mov dword [ebp - 0xd38], ecx
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4 + 4]
and ecx, 0xffdfffff
sub ecx, 1
mov dword [ebp - 0xd34], ecx
mov edx, dword [ebp - 0xd34]
cmp edx, dword [ebp - 0xd38]
jle 0x100eee41
cmp dword [ebp + 0x1c], 4
jl 0x100eedec
mov eax, dword [ebp - 0xd34]
sub eax, dword [ebp - 0xd38]
add eax, 1
push eax
mov ecx, dword [ebp - 0xd30]
push ecx
mov edx, dword [ebp - 0xd08]
push edx
mov eax, dword [ebp - 0xd18]
push eax
push str.________qsort__0x_x__0x_x____done__d___this__d_n
push 2
call fcn.100beb34
add esp, 4
push eax
call fcn.10019860
add esp, 0x18
mov ecx, dword [ebp + 0x20]
push ecx
push 2
mov edx, dword [ebp - 0xd34]
push edx
mov eax, dword [ebp - 0xd38]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.100edaf0
add esp, 0x20
mov edx, dword [ebp - 0xd34]
sub edx, dword [ebp - 0xd38]
mov eax, dword [ebp - 0xd30]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0xd30], ecx
mov edx, dword [ebp + 0x20]
cmp dword [edx], 0
jge 0x100eee41
jmp 0x100ef2c0
mov eax, dword [ebp - 0xd28]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4]
or edx, 0x200000
mov eax, dword [ebp - 0xd28]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + eax*4], edx
jmp 0x100eed05
mov edx, dword [ebp - 0xd18]
movzx eax, byte [ebp + edx - 0x104]
test eax, eax
je 0x100eee83
push 0x3ee
call fcn.100e0a60
add esp, 4
mov dword [ebp - 0xd08], 0
jmp 0x100eee9e
mov ecx, dword [ebp - 0xd08]
add ecx, 1
mov dword [ebp - 0xd08], ecx
cmp dword [ebp - 0xd08], 0xff
jg 0x100eef00
mov edx, dword [ebp - 0xd08]
shl edx, 8
add edx, dword [ebp - 0xd18]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0xffdfffff
mov edx, dword [ebp - 0xd08]
mov dword [ebp + edx*4 - 0x904], ecx
mov eax, dword [ebp - 0xd08]
shl eax, 8
add eax, dword [ebp - 0xd18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4 + 4]
and edx, 0xffdfffff
sub edx, 1
mov eax, dword [ebp - 0xd08]
mov dword [ebp + eax*4 - 0xd04], edx
jmp 0x100eee8f
mov ecx, dword [ebp - 0xd18]
shl ecx, 8
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
and eax, 0xffdfffff
mov dword [ebp - 0xd08], eax
jmp 0x100eef2b
mov ecx, dword [ebp - 0xd08]
add ecx, 1
mov dword [ebp - 0xd08], ecx
mov edx, dword [ebp - 0xd18]
mov eax, dword [ebp - 0xd08]
cmp eax, dword [ebp + edx*4 - 0x904]
jge 0x100eefcc
mov ecx, dword [ebp - 0xd08]
mov edx, dword [ebp + 8]
mov eax, dword [edx + ecx*4]
sub eax, 1
mov dword [ebp - 0xd20], eax
jns 0x100eef6a
mov ecx, dword [ebp - 0xd20]
add ecx, dword [ebp + 0x18]
mov dword [ebp - 0xd20], ecx
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd20]
mov al, byte [edx]
mov byte [ebp - 0xd11], al
movzx ecx, byte [ebp - 0xd11]
movzx edx, byte [ebp + ecx - 0x104]
test edx, edx
jne 0x100eefc7
movzx eax, byte [ebp - 0xd11]
mov ecx, dword [ebp + eax*4 - 0x904]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0xd20]
mov dword [edx + ecx*4], eax
movzx ecx, byte [ebp - 0xd11]
mov edx, dword [ebp + ecx*4 - 0x904]
add edx, 1
movzx eax, byte [ebp - 0xd11]
mov dword [ebp + eax*4 - 0x904], edx
jmp 0x100eef1c
mov ecx, dword [ebp - 0xd18]
add ecx, 1
shl ecx, 8
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
and eax, 0xffdfffff
sub eax, 1
mov dword [ebp - 0xd08], eax
jmp 0x100eeffd
mov ecx, dword [ebp - 0xd08]
sub ecx, 1
mov dword [ebp - 0xd08], ecx
mov edx, dword [ebp - 0xd18]
mov eax, dword [ebp - 0xd08]
cmp eax, dword [ebp + edx*4 - 0xd04]
jle 0x100ef09e
mov ecx, dword [ebp - 0xd08]
mov edx, dword [ebp + 8]
mov eax, dword [edx + ecx*4]
sub eax, 1
mov dword [ebp - 0xd20], eax
jns 0x100ef03c
mov ecx, dword [ebp - 0xd20]
add ecx, dword [ebp + 0x18]
mov dword [ebp - 0xd20], ecx
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd20]
mov al, byte [edx]
mov byte [ebp - 0xd11], al
movzx ecx, byte [ebp - 0xd11]
movzx edx, byte [ebp + ecx - 0x104]
test edx, edx
jne 0x100ef099
movzx eax, byte [ebp - 0xd11]
mov ecx, dword [ebp + eax*4 - 0xd04]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0xd20]
mov dword [edx + ecx*4], eax
movzx ecx, byte [ebp - 0xd11]
mov edx, dword [ebp + ecx*4 - 0xd04]
sub edx, 1
movzx eax, byte [ebp - 0xd11]
mov dword [ebp + eax*4 - 0xd04], edx
jmp 0x100eefee
mov ecx, dword [ebp - 0xd18]
mov edx, dword [ebp + ecx*4 - 0x904]
sub edx, 1
mov eax, dword [ebp - 0xd18]
cmp edx, dword [ebp + eax*4 - 0xd04]
je 0x100ef0ef
mov ecx, dword [ebp - 0xd18]
cmp dword [ebp + ecx*4 - 0x904], 0
jne 0x100ef0e2
mov edx, dword [ebp + 0x18]
sub edx, 1
mov eax, dword [ebp - 0xd18]
cmp dword [ebp + eax*4 - 0xd04], edx
je 0x100ef0ef
push 0x3ef
call fcn.100e0a60
add esp, 4
mov dword [ebp - 0xd08], 0
jmp 0x100ef10a
mov ecx, dword [ebp - 0xd08]
add ecx, 1
mov dword [ebp - 0xd08], ecx
cmp dword [ebp - 0xd08], 0xff
jg 0x100ef148
mov edx, dword [ebp - 0xd08]
shl edx, 8
add edx, dword [ebp - 0xd18]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
or ecx, 0x200000
mov edx, dword [ebp - 0xd08]
shl edx, 8
add edx, dword [ebp - 0xd18]
mov eax, dword [ebp + 0x14]
mov dword [eax + edx*4], ecx
jmp 0x100ef0fb
mov ecx, dword [ebp - 0xd18]
mov byte [ebp + ecx - 0x104], 1
cmp dword [ebp - 0xd0c], 0xff
jge 0x100ef288
mov edx, dword [ebp - 0xd18]
shl edx, 8
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0xffdfffff
mov dword [ebp - 0xd4c], ecx
mov edx, dword [ebp - 0xd18]
add edx, 1
shl edx, 8
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0xffdfffff
sub ecx, dword [ebp - 0xd4c]
mov dword [ebp - 0xd44], ecx
mov dword [ebp - 0xd2c], 0
mov edx, dword [ebp - 0xd44]
mov ecx, dword [ebp - 0xd2c]
sar edx, cl
cmp edx, 0xfffe
jle 0x100ef1d6
mov eax, dword [ebp - 0xd2c]
add eax, 1
mov dword [ebp - 0xd2c], eax
jmp 0x100ef1af
mov ecx, dword [ebp - 0xd44]
sub ecx, 1
mov dword [ebp - 0xd08], ecx
jmp 0x100ef1f6
mov edx, dword [ebp - 0xd08]
sub edx, 1
mov dword [ebp - 0xd08], edx
cmp dword [ebp - 0xd08], 0
jl 0x100ef262
mov eax, dword [ebp - 0xd4c]
add eax, dword [ebp - 0xd08]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0xd40], edx
mov eax, dword [ebp - 0xd08]
mov ecx, dword [ebp - 0xd2c]
sar eax, cl
mov word [ebp - 0xd24], ax
mov ecx, dword [ebp - 0xd40]
mov edx, dword [ebp + 0x10]
mov ax, word [ebp - 0xd24]
mov word [edx + ecx*2], ax
cmp dword [ebp - 0xd40], 0x22
jge 0x100ef260
mov ecx, dword [ebp - 0xd40]
add ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x10]
mov ax, word [ebp - 0xd24]
mov word [edx + ecx*2], ax
jmp 0x100ef1e7
mov edx, dword [ebp - 0xd44]
sub edx, 1
mov ecx, dword [ebp - 0xd2c]
sar edx, cl
cmp edx, 0xffff
jle 0x100ef288
push 0x3ea
call fcn.100e0a60
add esp, 4
jmp 0x100eecc7
cmp dword [ebp + 0x1c], 4
jl 0x100ef2c0
mov eax, dword [ebp + 0x18]
sub eax, dword [ebp - 0xd30]
push eax
mov ecx, dword [ebp - 0xd30]
push ecx
mov edx, dword [ebp + 0x18]
push edx
push str._________d_pointers___d_sorted___d_scanned_n
push 2
call fcn.100beb34
add esp, 4
push eax
call fcn.10019860
add esp, 0x14
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100aebeb
mov esp, ebp
pop ebp
ret