Function at 0x4ca524
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffee8
push ebx
push esi
push edi
mov esi, edx
lea edi, [ebp - 0x114]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, eax
lea edi, [ebp - 0x104]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], ecx
mov edi, dword [ebp + 0x18]
cmp dword [ebp + 0x1c], 0
je 0x4cb477
mov dl, 7
mov eax, dword [ebp + 0x1c]
call fcn.0042c0d4
lea eax, [ebp - 0x104]
mov dl, 1
call fcn.004e3c84
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x114]
mov dl, 1
call fcn.004e3c84
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x50]
jge 0x4ca592
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
jmp 0x4ca598
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0x100]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x58]
jge 0x4ca5bf
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], eax
jmp 0x4ca5c5
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0x110]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x60]
jge 0x4ca5ec
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x64], eax
jmp 0x4ca5f2
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x4cb477
lea eax, [ebp - 0x104]
mov dl, 1
call fcn.004e3c70
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x114]
mov dl, 1
call fcn.004e3c70
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x6c]
jge 0x4ca633
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x70], eax
jmp 0x4ca639
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x104]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x74]
jge 0x4ca660
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x78], eax
jmp 0x4ca666
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x114]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x7c]
jge 0x4ca68d
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x80], eax
jmp 0x4ca693
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x4cb477
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x104]
jle 0x4ca721
cmp dword [ebp - 0x104], 0
jge 0x4ca78b
mov eax, dword [ebp - 0x104]
neg eax
add dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x104]
neg eax
sub dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x114]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x84]
jge 0x4ca709
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x88], eax
jmp 0x4ca715
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x18], eax
jmp 0x4ca78b
cmp dword [ebp - 0x114], 0
jge 0x4ca78b
mov eax, dword [ebp - 0x114]
neg eax
add dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x114]
neg eax
sub dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x104]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x8c]
jge 0x4ca775
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x90], eax
jmp 0x4ca781
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x100]
jle 0x4ca809
cmp dword [ebp - 0x100], 0
jge 0x4ca873
mov eax, dword [ebp - 0x100]
neg eax
add dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x100]
neg eax
sub dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0x110]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x94]
jge 0x4ca7f1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x98], eax
jmp 0x4ca7fd
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x14], eax
jmp 0x4ca873
cmp dword [ebp - 0x110], 0
jge 0x4ca873
mov eax, dword [ebp - 0x110]
neg eax
add dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x110]
neg eax
sub dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0x100]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x9c]
jge 0x4ca85d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa0], eax
jmp 0x4ca869
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x104]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0xa4]
jge 0x4ca89d
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa8], eax
jmp 0x4ca8a9
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x114]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0xac]
jge 0x4ca8dc
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xb0], eax
jmp 0x4ca8e8
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp + 0x10], 0x1fffffff
je 0x4cab3a
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x24], eax
movzx eax, byte [ebp - 0x24]
mov dword [ebp - 0x118], eax
fild dword [ebp - 0x118]
fdiv dword [0x4cb480]
fstp qword [ebp - 0x30]
wait
movzx eax, byte [ebp - 0x23]
mov dword [ebp - 0x118], eax
fild dword [ebp - 0x118]
fdiv dword [0x4cb480]
fstp qword [ebp - 0x38]
wait
movzx eax, byte [ebp - 0x22]
mov dword [ebp - 0x118], eax
fild dword [ebp - 0x118]
fdiv dword [0x4cb480]
fstp qword [ebp - 0x40]
wait
mov eax, dword [ebp - 0x14]
test eax, eax
jl 0x4cab3a
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x110]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0x1c]
call fcn.0042b254
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x18]
test eax, eax
jl 0x4cab2e
inc eax
mov dword [ebp - 0x48], eax
xor esi, esi
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + esi*4]
mov dword [ebp - 0x28], eax
mov eax, dword [0x4f8618]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x28]
je 0x4cab24
movzx eax, byte [ebp - 0x26]
movzx edx, byte [ebp - 0x27]
add eax, edx
movzx edx, byte [ebp - 0x28]
add eax, edx
mov ecx, 3
xor edx, edx
div ecx
mov ebx, eax
movzx eax, bl
mov dword [ebp - 0x118], eax
fild dword [ebp - 0x118]
fmul qword [ebp - 0x30]
call fcn.00403450
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 0
jne 0x4ca9fc
cmp dword [ebp - 0xb8], 0xff
jae 0x4caa18
jmp 0x4ca9fe
jge 0x4caa18
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbc], eax
jmp 0x4caa2c
mov dword [ebp - 0xc0], 0xff
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
mov byte [ebp - 0x26], al
movzx eax, bl
mov dword [ebp - 0x118], eax
fild dword [ebp - 0x118]
fmul qword [ebp - 0x38]
call fcn.00403450
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 0
jne 0x4caa6f
cmp dword [ebp - 0xc8], 0xff
jae 0x4caa8b
jmp 0x4caa71
jge 0x4caa8b
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
jmp 0x4caa9f
mov dword [ebp - 0xd0], 0xff
mov dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xd0]
mov byte [ebp - 0x27], al
movzx eax, bl
mov dword [ebp - 0x118], eax
fild dword [ebp - 0x118]
fmul qword [ebp - 0x40]
call fcn.00403450
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
cmp dword [ebp - 0xd4], 0
jne 0x4caae2
cmp dword [ebp - 0xd8], 0xff
jae 0x4caafe
jmp 0x4caae4
jge 0x4caafe
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xdc], eax
jmp 0x4cab12
mov dword [ebp - 0xe0], 0xff
mov dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xe0]
mov byte [ebp - 0x28], al
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x28]
mov dword [eax + esi*4], edx
inc esi
dec dword [ebp - 0x48]
jne 0x4ca98e
inc dword [ebp - 0x10]
dec dword [ebp - 0x44]
jne 0x4ca969
cmp dword [ebp + 0xc], 0
je 0x4cae7c
cmp byte [edi + 0x10], 0
jne 0x4cac85
mov eax, dword [ebp - 0x14]
test eax, eax
jl 0x4cb1fa
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x100]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0042b254
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x110]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0x1c]
call fcn.0042b254
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x18]
test eax, eax
jl 0x4cac74
inc eax
mov dword [ebp - 0x48], eax
xor esi, esi
mov eax, dword [ebp - 0x104]
add eax, esi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x114]
add eax, esi
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x28], eax
movzx eax, byte [ebp - 0x25]
mov edx, 0x64
sub edx, dword [ebp + 0xc]
imul edx
mov ecx, 0x64
cdq
idiv ecx
mov ebx, eax
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax + 2]
movzx ecx, byte [ebp - 0x26]
sub ecx, edx
movzx edx, bl
imul ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + edx*2]
mov edi, dword [ebp - 8]
movzx edx, byte [edi + edx + 2]
shl edx, 8
add ecx, edx
shr ecx, 8
and cl, 0xff
mov edx, dword [ebp - 8]
mov byte [edx + eax + 2], cl
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax + 1]
movzx ecx, byte [ebp - 0x27]
sub ecx, edx
movzx edx, bl
imul ecx, edx
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax + 1]
shl edx, 8
add ecx, edx
shr ecx, 8
and cl, 0xff
mov edx, dword [ebp - 8]
mov byte [edx + eax + 1], cl
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax]
movzx ecx, byte [ebp - 0x28]
sub ecx, edx
movzx edx, bl
imul ecx, edx
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax]
shl edx, 8
add ecx, edx
shr ecx, 8
and cl, 0xff
mov edx, dword [ebp - 8]
mov byte [edx + eax], cl
inc esi
dec dword [ebp - 0x48]
jne 0x4cab9d
inc dword [ebp - 0x10]
dec dword [ebp - 0x44]
jne 0x4cab64
jmp 0x4cb1fa
mov eax, dword [ebp - 0x14]
test eax, eax
jl 0x4cb1fa
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x100]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0042b254
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x110]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0x1c]
call fcn.0042b254
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
test eax, eax
jl 0x4cae6b
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xff00ff
je 0x4cadb9
movzx eax, byte [ebp - 0x25]
mov edx, 0x64
sub edx, dword [ebp + 0xc]
imul edx
mov ecx, 0x64
cdq
idiv ecx
mov ebx, eax
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax + 2]
movzx ecx, byte [ebp - 0x26]
sub ecx, edx
movzx edx, bl
imul ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + edx*2]
mov esi, dword [ebp - 8]
movzx edx, byte [esi + edx + 2]
shl edx, 8
add ecx, edx
shr ecx, 8
and cl, 0xff
mov edx, dword [ebp - 8]
mov byte [edx + eax + 2], cl
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax + 1]
movzx ecx, byte [ebp - 0x27]
sub ecx, edx
movzx edx, bl
imul ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + edx*2]
mov esi, dword [ebp - 8]
movzx edx, byte [esi + edx + 1]
shl edx, 8
add ecx, edx
shr ecx, 8
and cl, 0xff
mov edx, dword [ebp - 8]
mov byte [edx + eax + 1], cl
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax]
movzx ecx, byte [ebp - 0x28]
sub ecx, edx
movzx edx, bl
imul ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + edx*2]
mov ebx, dword [ebp - 8]
movzx edx, byte [ebx + edx]
shl edx, 8
add ecx, edx
shr ecx, 8
and cl, 0xff
mov edx, dword [ebp - 8]
mov byte [edx + eax], cl
jmp 0x4cae5c
cmp byte [ebp + 0x14], 0
je 0x4cae5c
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, dword [edi + 8]
add edx, dword [ebp - 0x100]
add edx, dword [ebp - 0x10]
cmp eax, edx
jle 0x4cae62
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, dword [edi + 4]
add edx, dword [ebp - 0x1c]
cmp eax, edx
jle 0x4cae6b
mov eax, dword [edi + 8]
add eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x10]
test eax, eax
jl 0x4cae6b
mov eax, dword [edi + 4]
add eax, dword [ebp - 0x1c]
test eax, eax
jl 0x4cae62
mov eax, dword [edi]
call fcn.0042b0e4
mov ecx, dword [edi + 8]
add ecx, dword [ebp - 0x100]
add ecx, dword [ebp - 0x10]
mov edx, dword [edi + 4]
add edx, dword [ebp - 0x1c]
call fcn.00426ad8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 8]
movzx ecx, byte [ebp - 0x24]
mov byte [edx + eax + 2], cl
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 8]
movzx ecx, byte [ebp - 0x23]
mov byte [edx + eax + 1], cl
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 8]
movzx ecx, byte [ebp - 0x22]
mov byte [edx + eax], cl
inc dword [ebp - 0x1c]
inc dword [ebp - 0x20]
dec dword [ebp - 0x48]
jne 0x4cace4
inc dword [ebp - 0x10]
dec dword [ebp - 0x44]
jne 0x4cac9b
jmp 0x4cb1fa
cmp byte [edi + 0x10], 0
jne 0x4cafe8
mov eax, dword [ebp - 0x14]
test eax, eax
jl 0x4cb1fa
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x100]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0042b254
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x110]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0x1c]
call fcn.0042b254
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
test eax, eax
jl 0x4cafd7
inc eax
mov dword [ebp - 0x48], eax
xor ecx, ecx
push ebp
push 0x4caf3e
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x20]
movzx ecx, byte [ecx + ebx*4 + 2]
mov edx, dword [ebp - 0x1c]
lea edx, [edx + edx*2]
mov eax, dword [ebp - 8]
movzx eax, byte [eax + edx + 2]
movzx ebx, al
sub ecx, ebx
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 0x20]
movzx ebx, byte [ebx + esi*4 + 3]
imul ecx, ebx
movzx eax, al
shl eax, 8
add ecx, eax
shr ecx, 8
and cl, 0xff
mov eax, dword [ebp - 8]
mov byte [eax + edx + 2], cl
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4caf48
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x20]
movzx ecx, byte [ecx + ebx*4 + 1]
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax + 1]
movzx ebx, dl
sub ecx, ebx
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 0x20]
movzx ebx, byte [ebx + esi*4 + 3]
imul ecx, ebx
movzx edx, dl
shl edx, 8
add ecx, edx
shr ecx, 8
and cl, 0xff
mov edx, dword [ebp - 8]
mov byte [edx + eax + 1], cl
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
movzx edx, byte [edx + ecx*4]
mov ecx, dword [ebp - 8]
movzx ecx, byte [ecx + eax]
sub edx, ecx
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x20]
movzx ecx, byte [ecx + ebx*4 + 3]
imul edx, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + ecx*2]
mov ebx, dword [ebp - 8]
movzx ecx, byte [ebx + ecx]
shl ecx, 8
add edx, ecx
shr edx, 8
and dl, 0xff
mov ecx, dword [ebp - 8]
mov byte [ecx + eax], dl
inc dword [ebp - 0x1c]
inc dword [ebp - 0x20]
dec dword [ebp - 0x48]
jne 0x4caee5
inc dword [ebp - 0x10]
dec dword [ebp - 0x44]
jne 0x4cae9c
jmp 0x4cb1fa
mov eax, dword [ebp - 0x14]
test eax, eax
jl 0x4cb1fa
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x100]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0042b254
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x110]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0x1c]
call fcn.0042b254
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
test eax, eax
jl 0x4cb1ee
inc eax
mov dword [ebp - 0x48], eax
xor esi, esi
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xff00ff
je 0x4cb132
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
movzx edx, byte [edx + ecx*4 + 2]
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov ecx, dword [ebp - 8]
movzx ecx, byte [ecx + eax + 2]
sub edx, ecx
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x20]
movzx ecx, byte [ecx + ebx*4 + 3]
imul edx, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + ecx*2]
mov ebx, dword [ebp - 8]
movzx ecx, byte [ebx + ecx + 2]
shl ecx, 8
add edx, ecx
shr edx, 8
and dl, 0xff
mov ecx, dword [ebp - 8]
mov byte [ecx + eax + 2], dl
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
movzx edx, byte [edx + ecx*4 + 1]
mov ecx, dword [ebp - 8]
movzx ecx, byte [ecx + eax + 1]
sub edx, ecx
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x20]
movzx ecx, byte [ecx + ebx*4 + 3]
imul edx, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + ecx*2]
mov ebx, dword [ebp - 8]
movzx ecx, byte [ebx + ecx + 1]
shl ecx, 8
add edx, ecx
shr edx, 8
and dl, 0xff
mov ecx, dword [ebp - 8]
mov byte [ecx + eax + 1], dl
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
movzx edx, byte [edx + ecx*4]
mov ecx, dword [ebp - 8]
movzx ecx, byte [ecx + eax]
sub edx, ecx
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x20]
movzx ecx, byte [ecx + ebx*4 + 3]
imul edx, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + ecx*2]
mov ebx, dword [ebp - 8]
movzx ecx, byte [ebx + ecx]
shl ecx, 8
add edx, ecx
shr edx, 8
and dl, 0xff
mov ecx, dword [ebp - 8]
mov byte [ecx + eax], dl
jmp 0x4cb1de
cmp byte [ebp + 0x14], 0
je 0x4cb1de
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, dword [edi + 8]
add edx, dword [ebp - 0x100]
add edx, dword [ebp - 0x10]
cmp eax, edx
jle 0x4cb1e4
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, dword [edi + 4]
add edx, dword [ebp - 0x1c]
cmp eax, edx
jle 0x4cb1ee
mov eax, dword [edi + 8]
add eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x10]
test eax, eax
jl 0x4cb1ee
mov eax, dword [edi + 4]
add eax, dword [ebp - 0x1c]
test eax, eax
jl 0x4cb1e4
mov eax, dword [edi]
call fcn.0042b0e4
mov ecx, dword [edi + 8]
add ecx, dword [ebp - 0x100]
add ecx, dword [ebp - 0x10]
mov edx, dword [edi + 4]
add edx, dword [ebp - 0x104]
add edx, esi
call fcn.00426ad8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 8]
movzx ecx, byte [ebp - 0x24]
mov byte [edx + eax + 2], cl
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 8]
movzx ecx, byte [ebp - 0x23]
mov byte [edx + eax + 1], cl
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 8]
movzx ecx, byte [ebp - 0x22]
mov byte [edx + eax], cl
inc dword [ebp - 0x1c]
inc dword [ebp - 0x20]
inc esi
dec dword [ebp - 0x48]
jne 0x4cb049
inc dword [ebp - 0x10]
dec dword [ebp - 0x44]
jne 0x4caffe
cmp byte [ebp + 8], 0
je 0x4cb477
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax]
call dword [edx + 0x20]
sar eax, 1
jns 0x4cb213
adc eax, 0
dec eax
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xe8]
jge 0x4cb24b
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xec], eax
jmp 0x4cb257
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax]
call dword [edx + 0x20]
sar eax, 1
jns 0x4cb26f
adc eax, 0
push eax
mov eax, 0xff
pop edx
mov ecx, edx
cdq
idiv ecx
mov byte [ebp - 0x21], al
mov byte [ebp - 0x24], 0xff
mov eax, dword [ebp - 0x14]
test eax, eax
jle 0x4cb477
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 1
mov edx, dword [ebp - 0xf8]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0042b254
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x108]
sub edx, dword [ebp - 0x10]
dec edx
mov eax, dword [ebp + 0x1c]
call fcn.0042b254
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
test eax, eax
jl 0x4cb464
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xff00ff
je 0x4cb455
cmp dword [ebp + 0xc], 0
jne 0x4cb354
movzx eax, byte [ebp - 0x25]
mov ecx, 3
xor edx, edx
div ecx
movzx edx, byte [ebp - 0x24]
imul edx
mov ecx, 0xff
xor edx, edx
div ecx
test eax, eax
jle 0x4cb344
movzx eax, byte [ebp - 0x25]
mov ecx, 3
xor edx, edx
div ecx
movzx edx, byte [ebp - 0x24]
imul edx
mov ecx, 0xff
xor edx, edx
div ecx
mov dword [ebp - 0xf0], eax
jmp 0x4cb34c
xor eax, eax
mov dword [ebp - 0xf0], eax
mov ebx, dword [ebp - 0xf0]
jmp 0x4cb3b6
movzx eax, byte [ebp - 0x25]
mov edx, 0x64
sub edx, dword [ebp + 0xc]
imul edx
mov ecx, 0x12c
cdq
idiv ecx
movzx edx, byte [ebp - 0x24]
imul edx
mov ecx, 0xff
cdq
idiv ecx
test eax, eax
jle 0x4cb3a8
movzx eax, byte [ebp - 0x25]
mov edx, 0x64
sub edx, dword [ebp + 0xc]
imul edx
mov ecx, 0x12c
cdq
idiv ecx
movzx edx, byte [ebp - 0x24]
imul edx
mov ecx, 0xff
cdq
idiv ecx
mov dword [ebp - 0xf4], eax
jmp 0x4cb3b0
xor eax, eax
mov dword [ebp - 0xf4], eax
mov ebx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x1c]
lea eax, [eax + eax*2]
mov ecx, dword [ebp - 8]
movzx ecx, byte [ecx + eax + 2]
push ecx
movzx ecx, byte [ebp - 0x26]
pop esi
sub ecx, esi
movzx edx, bl
imul ecx, edx
mov esi, dword [ebp - 0x1c]
lea esi, [esi + esi*2]
mov edi, dword [ebp - 8]
movzx esi, byte [edi + esi + 2]
shl esi, 8
add ecx, esi
shr ecx, 8
and cl, 0xff
mov esi, dword [ebp - 8]
mov byte [esi + eax + 2], cl
mov ecx, dword [ebp - 8]
movzx ecx, byte [ecx + eax + 1]
push ecx
movzx ecx, byte [ebp - 0x27]
pop esi
sub ecx, esi
imul ecx, edx
mov esi, dword [ebp - 0x1c]
lea esi, [esi + esi*2]
mov edi, dword [ebp - 8]
movzx esi, byte [edi + esi + 1]
shl esi, 8
add ecx, esi
shr ecx, 8
and cl, 0xff
mov esi, dword [ebp - 8]
mov byte [esi + eax + 1], cl
mov ecx, dword [ebp - 8]
movzx ecx, byte [ecx + eax]
push ecx
movzx ecx, byte [ebp - 0x28]
pop esi
sub ecx, esi
imul ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + edx*2]
mov ebx, dword [ebp - 8]
movzx edx, byte [ebx + edx]
shl edx, 8
add ecx, edx
shr ecx, 8
and cl, 0xff
mov edx, dword [ebp - 8]
mov byte [edx + eax], cl
inc dword [ebp - 0x1c]
inc dword [ebp - 0x20]
dec dword [ebp - 0x48]
jne 0x4cb2e1
movzx eax, byte [ebp - 0x21]
sub byte [ebp - 0x24], al
inc dword [ebp - 0x10]
dec dword [ebp - 0x44]
jne 0x4cb297
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18