Function at 0x54f1c0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd4c
mov eax, dword [0x6b1dec]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dword [ebp - 0xd0c], 0x10000
jmp 0x54f1f0
mov eax, dword [ebp - 0xd0c]
sub eax, 1
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 0
jl 0x54f20b
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0x14]
mov dword [edx + ecx*4], 0
jmp 0x54f1e1
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax]
shl ecx, 8
mov dword [ebp - 0xd28], ecx
mov edx, dword [ebp + 0x18]
sub edx, 1
mov dword [ebp - 0xd0c], edx
jmp 0x54f237
mov eax, dword [ebp - 0xd0c]
sub eax, 4
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 3
jl 0x54f377
xor ecx, ecx
mov edx, dword [ebp - 0xd0c]
mov eax, dword [ebp + 0x10]
mov word [eax + edx*2], cx
mov ecx, dword [ebp - 0xd28]
sar ecx, 8
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd0c]
movzx eax, byte [edx]
shl eax, 8
or ecx, eax
mov dword [ebp - 0xd28], ecx
mov ecx, dword [ebp - 0xd28]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
add eax, 1
mov ecx, dword [ebp - 0xd28]
mov edx, dword [ebp + 0x14]
mov dword [edx + ecx*4], eax
xor eax, eax
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0x10]
mov word [edx + ecx*2 - 2], ax
mov eax, dword [ebp - 0xd28]
sar eax, 8
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0xd0c]
movzx edx, byte [ecx - 1]
shl edx, 8
or eax, edx
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0xd28]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4]
add edx, 1
mov eax, dword [ebp - 0xd28]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + eax*4], edx
xor edx, edx
mov eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp + 0x10]
mov word [ecx + eax*2 - 4], dx
mov edx, dword [ebp - 0xd28]
sar edx, 8
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0xd0c]
movzx ecx, byte [eax - 2]
shl ecx, 8
or edx, ecx
mov dword [ebp - 0xd28], edx
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
add ecx, 1
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + 0x14]
mov dword [eax + edx*4], ecx
xor ecx, ecx
mov edx, dword [ebp - 0xd0c]
mov eax, dword [ebp + 0x10]
mov word [eax + edx*2 - 6], cx
mov ecx, dword [ebp - 0xd28]
sar ecx, 8
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd0c]
movzx eax, byte [edx - 3]
shl eax, 8
or ecx, eax
mov dword [ebp - 0xd28], ecx
mov ecx, dword [ebp - 0xd28]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
add eax, 1
mov ecx, dword [ebp - 0xd28]
mov edx, dword [ebp + 0x14]
mov dword [edx + ecx*4], eax
jmp 0x54f228
jmp 0x54f388
mov eax, dword [ebp - 0xd0c]
sub eax, 1
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 0
jl 0x54f3dd
xor ecx, ecx
mov edx, dword [ebp - 0xd0c]
mov eax, dword [ebp + 0x10]
mov word [eax + edx*2], cx
mov ecx, dword [ebp - 0xd28]
sar ecx, 8
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd0c]
movzx eax, byte [edx]
shl eax, 8
or ecx, eax
mov dword [ebp - 0xd28], ecx
mov ecx, dword [ebp - 0xd28]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
add eax, 1
mov ecx, dword [ebp - 0xd28]
mov edx, dword [ebp + 0x14]
mov dword [edx + ecx*4], eax
jmp 0x54f379
mov dword [ebp - 0xd0c], 0
jmp 0x54f3f8
mov eax, dword [ebp - 0xd0c]
add eax, 1
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 0x22
jge 0x54f42f
mov ecx, dword [ebp + 0x18]
add ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd0c]
mov eax, dword [ebp + 0xc]
mov dl, byte [edx]
mov byte [eax + ecx], dl
mov eax, dword [ebp + 0x18]
add eax, dword [ebp - 0xd0c]
xor ecx, ecx
mov edx, dword [ebp + 0x10]
mov word [edx + eax*2], cx
jmp 0x54f3e9
mov dword [ebp - 0xd0c], 1
jmp 0x54f44a
mov eax, dword [ebp - 0xd0c]
add eax, 1
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 0x10000
jg 0x54f47d
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0x14]
add eax, dword [edx + ecx*4 - 4]
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + 0x14]
mov dword [edx + ecx*4], eax
jmp 0x54f43b
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax]
shl ecx, 8
mov word [ebp - 0xd10], cx
mov edx, dword [ebp + 0x18]
sub edx, 1
mov dword [ebp - 0xd0c], edx
jmp 0x54f4aa
mov eax, dword [ebp - 0xd0c]
sub eax, 4
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 3
jl 0x54f63c
movzx ecx, word [ebp - 0xd10]
sar ecx, 8
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd0c]
movzx eax, byte [edx]
shl eax, 8
or ecx, eax
mov word [ebp - 0xd10], cx
movzx ecx, word [ebp - 0xd10]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
sub eax, 1
mov dword [ebp - 0xd28], eax
movzx ecx, word [ebp - 0xd10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0xd28]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0xd28]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0xd0c]
mov dword [edx + ecx*4], eax
movzx ecx, word [ebp - 0xd10]
sar ecx, 8
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd0c]
movzx eax, byte [edx - 1]
shl eax, 8
or ecx, eax
mov word [ebp - 0xd10], cx
movzx ecx, word [ebp - 0xd10]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
sub eax, 1
mov dword [ebp - 0xd28], eax
movzx ecx, word [ebp - 0xd10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0xd28]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0xd0c]
sub ecx, 1
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + 8]
mov dword [eax + edx*4], ecx
movzx ecx, word [ebp - 0xd10]
sar ecx, 8
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd0c]
movzx eax, byte [edx - 2]
shl eax, 8
or ecx, eax
mov word [ebp - 0xd10], cx
movzx ecx, word [ebp - 0xd10]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
sub eax, 1
mov dword [ebp - 0xd28], eax
movzx ecx, word [ebp - 0xd10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0xd28]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0xd0c]
sub ecx, 2
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + 8]
mov dword [eax + edx*4], ecx
movzx ecx, word [ebp - 0xd10]
sar ecx, 8
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd0c]
movzx eax, byte [edx - 3]
shl eax, 8
or ecx, eax
mov word [ebp - 0xd10], cx
movzx ecx, word [ebp - 0xd10]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
sub eax, 1
mov dword [ebp - 0xd28], eax
movzx ecx, word [ebp - 0xd10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0xd28]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0xd0c]
sub ecx, 3
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + 8]
mov dword [eax + edx*4], ecx
jmp 0x54f49b
jmp 0x54f64d
mov ecx, dword [ebp - 0xd0c]
sub ecx, 1
mov dword [ebp - 0xd0c], ecx
cmp dword [ebp - 0xd0c], 0
jl 0x54f6b5
movzx edx, word [ebp - 0xd10]
sar edx, 8
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0xd0c]
movzx ecx, byte [eax]
shl ecx, 8
or edx, ecx
mov word [ebp - 0xd10], dx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
sub ecx, 1
mov dword [ebp - 0xd28], ecx
movzx edx, word [ebp - 0xd10]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0xd28]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xd0c]
mov dword [eax + edx*4], ecx
jmp 0x54f63e
mov dword [ebp - 0xd0c], 0
jmp 0x54f6d0
mov edx, dword [ebp - 0xd0c]
add edx, 1
mov dword [ebp - 0xd0c], edx
cmp dword [ebp - 0xd0c], 0xff
jg 0x54f6ff
mov eax, dword [ebp - 0xd0c]
mov byte [ebp + eax - 0x108], 0
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp - 0xd0c]
mov dword [ebp + ecx*4 - 0x508], edx
jmp 0x54f6c1
mov dword [ebp - 0xd2c], 1
mov eax, dword [ebp - 0xd2c]
imul eax, eax, 3
add eax, 1
mov dword [ebp - 0xd2c], eax
cmp dword [ebp - 0xd2c], 0x100
jle 0x54f709
mov eax, dword [ebp - 0xd2c]
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0xd2c], eax
mov edx, dword [ebp - 0xd2c]
mov dword [ebp - 0xd0c], edx
jmp 0x54f758
mov eax, dword [ebp - 0xd0c]
add eax, 1
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 0xff
jg 0x54f84b
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ebp + ecx*4 - 0x508]
mov dword [ebp - 0xd30], edx
mov eax, dword [ebp - 0xd0c]
mov dword [ebp - 0xd28], eax
mov ecx, dword [ebp - 0xd28]
sub ecx, dword [ebp - 0xd2c]
mov edx, dword [ebp + ecx*4 - 0x508]
add edx, 1
shl edx, 8
mov eax, dword [ebp - 0xd28]
sub eax, dword [ebp - 0xd2c]
mov ecx, dword [ebp + eax*4 - 0x508]
shl ecx, 8
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp + 0x14]
mov edx, dword [eax + edx*4]
sub edx, dword [esi + ecx*4]
mov eax, dword [ebp - 0xd30]
add eax, 1
shl eax, 8
mov ecx, dword [ebp - 0xd30]
shl ecx, 8
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0x14]
mov eax, dword [esi + eax*4]
sub eax, dword [edi + ecx*4]
cmp edx, eax
jbe 0x54f833
mov ecx, dword [ebp - 0xd28]
sub ecx, dword [ebp - 0xd2c]
mov edx, dword [ebp - 0xd28]
mov eax, dword [ebp + ecx*4 - 0x508]
mov dword [ebp + edx*4 - 0x508], eax
mov ecx, dword [ebp - 0xd28]
sub ecx, dword [ebp - 0xd2c]
mov dword [ebp - 0xd28], ecx
mov edx, dword [ebp - 0xd2c]
sub edx, 1
cmp dword [ebp - 0xd28], edx
jg 0x54f82e
jmp 0x54f833
jmp 0x54f787
mov eax, dword [ebp - 0xd28]
mov ecx, dword [ebp - 0xd30]
mov dword [ebp + eax*4 - 0x508], ecx
jmp 0x54f749
cmp dword [ebp - 0xd2c], 1
jne 0x54f727
mov dword [ebp - 0xd14], 0
mov dword [ebp - 0xd0c], 0
jmp 0x54f87d
mov edx, dword [ebp - 0xd0c]
add edx, 1
mov dword [ebp - 0xd0c], edx
cmp dword [ebp - 0xd0c], 0xff
jg 0x54fd57
mov eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp + eax*4 - 0x508]
mov dword [ebp - 0xd24], ecx
mov dword [ebp - 0xd28], 0
jmp 0x54f8bb
mov edx, dword [ebp - 0xd28]
add edx, 1
mov dword [ebp - 0xd28], edx
cmp dword [ebp - 0xd28], 0xff
jg 0x54f9c4
mov eax, dword [ebp - 0xd28]
cmp eax, dword [ebp - 0xd24]
je 0x54f9bf
mov ecx, dword [ebp - 0xd24]
shl ecx, 8
add ecx, dword [ebp - 0xd28]
mov dword [ebp - 0xd18], ecx
mov edx, dword [ebp - 0xd18]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0x200000
jne 0x54f9a1
mov edx, dword [ebp - 0xd18]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0xffdfffff
mov dword [ebp - 0xd34], ecx
mov edx, dword [ebp - 0xd18]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4 + 4]
and ecx, 0xffdfffff
sub ecx, 1
mov dword [ebp - 0xd38], ecx
mov edx, dword [ebp - 0xd38]
cmp edx, dword [ebp - 0xd34]
jle 0x54f9a1
mov eax, dword [ebp + 0x20]
push eax
push 2
mov ecx, dword [ebp - 0xd38]
push ecx
mov edx, dword [ebp - 0xd34]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0054fd70
add esp, 0x20
mov ecx, dword [ebp - 0xd38]
sub ecx, dword [ebp - 0xd34]
mov edx, dword [ebp - 0xd14]
lea eax, [edx + ecx + 1]
mov dword [ebp - 0xd14], eax
mov ecx, dword [ebp + 0x20]
cmp dword [ecx], 0
jge 0x54f9a1
jmp 0x54fd57
mov edx, dword [ebp - 0xd18]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
or ecx, 0x200000
mov edx, dword [ebp - 0xd18]
mov eax, dword [ebp + 0x14]
mov dword [eax + edx*4], ecx
jmp 0x54f8ac
mov dword [ebp - 0xd28], 0
jmp 0x54f9df
mov ecx, dword [ebp - 0xd28]
add ecx, 1
mov dword [ebp - 0xd28], ecx
cmp dword [ebp - 0xd28], 0xff
jg 0x54fa41
mov edx, dword [ebp - 0xd28]
shl edx, 8
add edx, dword [ebp - 0xd24]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0xffdfffff
mov edx, dword [ebp - 0xd28]
mov dword [ebp + edx*4 - 0xd08], ecx
mov eax, dword [ebp - 0xd28]
shl eax, 8
add eax, dword [ebp - 0xd24]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4 + 4]
and edx, 0xffdfffff
sub edx, 1
mov eax, dword [ebp - 0xd28]
mov dword [ebp + eax*4 - 0x908], edx
jmp 0x54f9d0
mov ecx, dword [ebp - 0xd24]
shl ecx, 8
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
and eax, 0xffdfffff
mov dword [ebp - 0xd28], eax
jmp 0x54fa6c
mov ecx, dword [ebp - 0xd28]
add ecx, 1
mov dword [ebp - 0xd28], ecx
mov edx, dword [ebp - 0xd24]
mov eax, dword [ebp - 0xd28]
cmp eax, dword [ebp + edx*4 - 0xd08]
jge 0x54fb0d
mov ecx, dword [ebp - 0xd28]
mov edx, dword [ebp + 8]
mov eax, dword [edx + ecx*4]
sub eax, 1
mov dword [ebp - 0xd20], eax
jns 0x54faab
mov ecx, dword [ebp - 0xd20]
add ecx, dword [ebp + 0x18]
mov dword [ebp - 0xd20], ecx
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd20]
mov al, byte [edx]
mov byte [ebp - 0xd19], al
movzx ecx, byte [ebp - 0xd19]
movzx edx, byte [ebp + ecx - 0x108]
test edx, edx
jne 0x54fb08
movzx eax, byte [ebp - 0xd19]
mov ecx, dword [ebp + eax*4 - 0xd08]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0xd20]
mov dword [edx + ecx*4], eax
movzx ecx, byte [ebp - 0xd19]
mov edx, dword [ebp + ecx*4 - 0xd08]
add edx, 1
movzx eax, byte [ebp - 0xd19]
mov dword [ebp + eax*4 - 0xd08], edx
jmp 0x54fa5d
mov ecx, dword [ebp - 0xd24]
add ecx, 1
shl ecx, 8
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + ecx*4]
and eax, 0xffdfffff
sub eax, 1
mov dword [ebp - 0xd28], eax
jmp 0x54fb3e
mov ecx, dword [ebp - 0xd28]
sub ecx, 1
mov dword [ebp - 0xd28], ecx
mov edx, dword [ebp - 0xd24]
mov eax, dword [ebp - 0xd28]
cmp eax, dword [ebp + edx*4 - 0x908]
jle 0x54fbdf
mov ecx, dword [ebp - 0xd28]
mov edx, dword [ebp + 8]
mov eax, dword [edx + ecx*4]
sub eax, 1
mov dword [ebp - 0xd20], eax
jns 0x54fb7d
mov ecx, dword [ebp - 0xd20]
add ecx, dword [ebp + 0x18]
mov dword [ebp - 0xd20], ecx
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0xd20]
mov al, byte [edx]
mov byte [ebp - 0xd19], al
movzx ecx, byte [ebp - 0xd19]
movzx edx, byte [ebp + ecx - 0x108]
test edx, edx
jne 0x54fbda
movzx eax, byte [ebp - 0xd19]
mov ecx, dword [ebp + eax*4 - 0x908]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0xd20]
mov dword [edx + ecx*4], eax
movzx ecx, byte [ebp - 0xd19]
mov edx, dword [ebp + ecx*4 - 0x908]
sub edx, 1
movzx eax, byte [ebp - 0xd19]
mov dword [ebp + eax*4 - 0x908], edx
jmp 0x54fb2f
mov dword [ebp - 0xd28], 0
jmp 0x54fbfa
mov ecx, dword [ebp - 0xd28]
add ecx, 1
mov dword [ebp - 0xd28], ecx
cmp dword [ebp - 0xd28], 0xff
jg 0x54fc38
mov edx, dword [ebp - 0xd28]
shl edx, 8
add edx, dword [ebp - 0xd24]
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
or ecx, 0x200000
mov edx, dword [ebp - 0xd28]
shl edx, 8
add edx, dword [ebp - 0xd24]
mov eax, dword [ebp + 0x14]
mov dword [eax + edx*4], ecx
jmp 0x54fbeb
mov ecx, dword [ebp - 0xd24]
mov byte [ebp + ecx - 0x108], 1
cmp dword [ebp - 0xd0c], 0xff
jge 0x54fd52
mov edx, dword [ebp - 0xd24]
shl edx, 8
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0xffdfffff
mov dword [ebp - 0xd40], ecx
mov edx, dword [ebp - 0xd24]
add edx, 1
shl edx, 8
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + edx*4]
and ecx, 0xffdfffff
sub ecx, dword [ebp - 0xd40]
mov dword [ebp - 0xd44], ecx
mov dword [ebp - 0xd3c], 0
mov edx, dword [ebp - 0xd44]
mov ecx, dword [ebp - 0xd3c]
sar edx, cl
cmp edx, 0xfffe
jle 0x54fcc6
mov eax, dword [ebp - 0xd3c]
add eax, 1
mov dword [ebp - 0xd3c], eax
jmp 0x54fc9f
mov ecx, dword [ebp - 0xd44]
sub ecx, 1
mov dword [ebp - 0xd28], ecx
jmp 0x54fce6
mov edx, dword [ebp - 0xd28]
sub edx, 1
mov dword [ebp - 0xd28], edx
cmp dword [ebp - 0xd28], 0
jl 0x54fd52
mov eax, dword [ebp - 0xd40]
add eax, dword [ebp - 0xd28]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0xd4c], edx
mov eax, dword [ebp - 0xd28]
mov ecx, dword [ebp - 0xd3c]
sar eax, cl
mov word [ebp - 0xd48], ax
mov ecx, dword [ebp - 0xd4c]
mov edx, dword [ebp + 0x10]
mov ax, word [ebp - 0xd48]
mov word [edx + ecx*2], ax
cmp dword [ebp - 0xd4c], 0x22
jge 0x54fd50
mov ecx, dword [ebp - 0xd4c]
add ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x10]
mov ax, word [ebp - 0xd48]
mov word [edx + ecx*2], ax
jmp 0x54fcd7
jmp 0x54f86e
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00591437
mov esp, ebp
pop ebp
ret