Function at 0x4d035b
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x26
push 0
push 0
dec ecx
jne 0x4cf771
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov ebx, dword [ebp + 0xc]
xor eax, eax
push ebp
push 0x4d0aaa
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x3c]
call fcn.00403ccc
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 4]
mov edx, ebx
call fcn.00406280
call fcn.004027e4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c66b8
movzx eax, ax
add ebx, 2
mov dword [ebp - 0x14], ebx
dec eax
test eax, eax
jl 0x4d0633
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x18]
shl edx, 2
lea edx, [edx + edx*2]
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00406280
call fcn.004027e4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c66b8
movzx eax, ax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c66b8
movzx ebx, ax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6710
mov esi, eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6710
mov edi, eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0x1e
ja case.default.0x4cf851
jmp dword [eax*4 + 0x4cf858]
lea eax, [ebp - 0x30]
mov edx, 0x4d0ac4
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0ae0
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0af4
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0b08
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0b1c
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0b30
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0b44
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0b58
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0b70
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0b90
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0ba8
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0bc0
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0bd8
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0bec
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0c00
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0c18
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0c30
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0c50
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0c6c
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0c7c
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0c98
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0cb4
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0cd0
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0cec
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0d08
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0d20
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0d40
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0d5c
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0d70
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0d84
call fcn.00403d64
jmp 0x4cfaf5
lea eax, [ebp - 0x30]
mov edx, 0x4d0d9c
call fcn.00403d64
jmp 0x4cfaf5
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
call fcn.004c6848
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x30]
call fcn.00403d64
mov eax, ebx
call fcn.004c6eac
mov edx, esi
imul edx, eax
cmp edx, 4
jg 0x4cfb23
mov edi, dword [ebp - 0x18]
shl edi, 2
lea edi, [edi + edi*2]
add edi, dword [ebp - 0x14]
add edi, 8
sub edi, dword [ebp - 0xc]
lea eax, [ebp - 0x30]
call fcn.00403ccc
mov edx, dword [ebp - 0xc]
add edx, edi
mov eax, dword [ebp - 4]
call fcn.00406280
call fcn.004027e4
xor eax, eax
push ebp
push 0x4d05c4
push dword fs:[eax]
mov dword fs:[eax], esp
cmp ebx, 1
jne 0x4cfc02
mov eax, dword [ebp - 4]
call fcn.004c669c
and eax, 0xff
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
sub eax, 5
jne 0x4cfbaa
mov eax, dword [ebp - 0x20]
sub eax, 1
jae 0x4cfb83
lea eax, [ebp - 0x30]
mov edx, 0x4d0db0
call fcn.00403d64
jmp 0x4cfc02
push 0x4d0dc4
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 0x20]
call fcn.00408cac
push dword [ebp - 0x74]
push 0x4d0dd4
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040400c
jmp 0x4cfc02
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x20]
call fcn.00408cac
cmp esi, 1
jle 0x4cfc02
mov edi, esi
sub edi, 2
jl 0x4cfc02
inc edi
mov dword [ebp - 0x24], 2
mov eax, dword [ebp - 4]
call fcn.004c669c
and eax, 0xff
mov dword [ebp - 0x20], eax
push dword [ebp - 0x30]
push 0x4d0de0
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 0x20]
call fcn.00408cac
push dword [ebp - 0x78]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040400c
inc dword [ebp - 0x24]
dec edi
jne 0x4cfbc9
cmp ebx, 2
jne 0x4cfccc
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 4]
mov edx, esi
call fcn.004c6920
mov eax, dword [ebp - 0x1c]
cmp eax, 0x17
ja case.0x4cfc2a.0
mov al, byte [eax + 0x4cfc31]
jmp dword [eax*4 + 0x4cfc49]
mov edx, dword [ebp - 0x30]
mov eax, 0x4d0dec
call fcn.00404238
test eax, eax
je 0x4cfc79
lea eax, [ebp - 0x30]
mov edx, 0x4d0df8
call fcn.00403d64
jmp case.0x4cfc2a.0
mov edx, dword [ebp - 0x30]
mov eax, 0x4d0e08
call fcn.00404238
test eax, eax
je case.0x4cfc2a.0
lea eax, [ebp - 0x30]
mov edx, 0x4d0e14
call fcn.00403d64
jmp case.0x4cfc2a.0
mov eax, dword [ebp + 8]
add eax, 0x4d8
mov edx, dword [ebp - 0x30]
call fcn.00403d20
jmp case.0x4cfc2a.0
mov eax, dword [ebp + 8]
add eax, 0x4e8
mov edx, dword [ebp - 0x30]
call fcn.00403d20
cmp dword [ebp - 0x1c], 0x12
jne 0x4cfccc
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x30]
call fcn.00403d64
cmp ebx, 3
jne 0x4cfced
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c66b8
movzx eax, ax
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x20]
call fcn.00408cac
cmp ebx, 4
jne 0x4cfd0b
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6710
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x20]
call fcn.00408cac
cmp ebx, 5
jne 0x4d047b
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6754
mov eax, dword [ebp - 0x1c]
cmp eax, 0x18
ja case.0x4cfd38.0
mov al, byte [eax + 0x4cfd3f]
jmp dword [eax*4 + 0x4cfd58]
lea eax, [ebp - 0x30]
push eax
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
call fcn.00402a68
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], edx
lea eax, [ebp - 0x88]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 0x10
lea edx, [ebp - 0x80]
xor ecx, ecx
mov eax, 0x4d0e24
call fcn.00409a84
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6754
push dword [ebp - 0x30]
push 0x4d0e34
lea eax, [ebp - 0x8c]
push eax
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
call fcn.00402a68
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], edx
lea eax, [ebp - 0x88]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 0x10
lea edx, [ebp - 0x80]
xor ecx, ecx
mov eax, 0x4d0e24
call fcn.00409a84
push dword [ebp - 0x8c]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040400c
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6754
push dword [ebp - 0x30]
push 0x4d0e34
lea eax, [ebp - 0x90]
push eax
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
call fcn.00402a68
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], edx
lea eax, [ebp - 0x88]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 0x10
lea edx, [ebp - 0x80]
xor ecx, ecx
mov eax, 0x4d0e24
call fcn.00409a84
push dword [ebp - 0x90]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040400c
jmp 0x4d047b
cmp dword [ebp - 0x24], 0
jne 0x4cfe9b
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x30]
call fcn.00409b60
jmp 0x4cfeb2
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x30]
call fcn.00409b60
cmp dword [ebp - 0x1c], 2
jne 0x4cfee5
mov eax, dword [ebp + 8]
add eax, 0x4dc
mov edx, dword [ebp - 0x30]
call fcn.00403d20
cmp dword [ebp - 0x24], 0
jne 0x4cfed7
fild dword [ebp - 0x20]
fstp qword [ebp - 0x50]
wait
jmp 0x4cff10
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
fstp qword [ebp - 0x50]
wait
jmp 0x4cff10
mov eax, dword [ebp + 8]
add eax, 0x4ec
mov edx, dword [ebp - 0x30]
call fcn.00403d20
cmp dword [ebp - 0x24], 0
jne 0x4cff04
fild dword [ebp - 0x20]
fstp qword [ebp - 0x48]
wait
jmp 0x4cff10
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
fstp qword [ebp - 0x48]
wait
lea eax, [ebp - 0x34]
mov ecx, 0x4d0e40
mov edx, dword [ebp - 0x30]
call fcn.00403f98
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6754
cmp dword [ebp - 0x2c], 0
je 0x4d0005
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x94]
call fcn.00409b60
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00403f98
cmp dword [ebp - 0x1c], 2
jne 0x4cff9a
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x98]
call fcn.00409b60
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp + 8]
add eax, 0x4e0
call fcn.00403d20
cmp dword [ebp - 0x1c], 4
jne 0x4cffcd
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x9c]
call fcn.00409b60
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp + 8]
add eax, 0x4f0
call fcn.00403d20
cmp dword [ebp - 0x1c], 2
jne 0x4cffe8
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
fdiv dword [0x4d0e44]
fadd qword [ebp - 0x50]
fstp qword [ebp - 0x50]
wait
cmp dword [ebp - 0x1c], 4
jne 0x4d0015
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
fdiv dword [0x4d0e44]
fadd qword [ebp - 0x48]
fstp qword [ebp - 0x48]
wait
jmp 0x4d0015
xor eax, eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6754
mov eax, dword [ebp - 4]
mov cl, 4
mov edx, dword [ebp - 8]
call fcn.004c6640
cmp dword [ebp - 0x20], 0
je 0x4d015b
cmp dword [ebp - 0x1c], 2
jne 0x4d0071
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0xa0]
call fcn.00409b60
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp + 8]
add eax, 0x4e4
call fcn.00403d20
cmp dword [ebp - 0x1c], 4
jne 0x4d00a4
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0xa4]
call fcn.00409b60
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp + 8]
add eax, 0x4f4
call fcn.00403d20
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
fcomp dword [0x4d0e48]
fnstsw ax
sahf
jae 0x4d00c4
lea eax, [ebp - 0x30]
mov edx, 0x4d0e54
call fcn.00403f54
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
fcomp dword [0x4d0e58]
fnstsw ax
sahf
jb 0x4d00e4
lea eax, [ebp - 0x30]
mov edx, 0x4d0e54
call fcn.00403f54
push dword [ebp - 0x30]
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0xa8]
call fcn.00409b60
push dword [ebp - 0xa8]
push 0x4d0e64
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040400c
cmp dword [ebp - 0x1c], 2
jne 0x4d0134
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
fdiv dword [0x4d0e6c]
fadd qword [ebp - 0x50]
fstp qword [ebp - 0x50]
wait
cmp dword [ebp - 0x1c], 4
jne 0x4d014f
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
fdiv dword [0x4d0e6c]
fadd qword [ebp - 0x48]
fstp qword [ebp - 0x48]
wait
mov dword [ebp - 0x6c], 0xffffffff
jmp 0x4d047b
cmp dword [ebp - 0x2c], 0
je 0x4d047b
push dword [ebp - 0x34]
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
call fcn.00402a74
push edx
push eax
lea eax, [ebp - 0xac]
call fcn.00408cdc
push dword [ebp - 0xac]
push 0x4d0e78
lea eax, [ebp - 0xb0]
push eax
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
call fcn.00402a4c
fmul dword [0x4d0e44]
fstp xword [ebp - 0xbc]
wait
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 3
lea edx, [ebp - 0x80]
xor ecx, ecx
mov eax, 0x4d0e84
call fcn.00409a84
push dword [ebp - 0xb0]
push 0x4d0e94
lea eax, [ebp - 0x34]
mov edx, 5
call fcn.0040400c
cmp dword [ebp - 0x1c], 2
jne 0x4d0294
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
call fcn.00402a4c
fmul dword [0x4d0e58]
fdiv dword [0x4d0e44]
fdiv dword [0x4d0e6c]
fadd qword [ebp - 0x50]
fstp qword [ebp - 0x50]
wait
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
call fcn.00402a74
push edx
push eax
lea eax, [ebp - 0xc0]
call fcn.00408cdc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp + 8]
add eax, 0x4e0
call fcn.00403d20
lea eax, [ebp - 0xc4]
push eax
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
call fcn.00402a4c
fmul dword [0x4d0e44]
fstp xword [ebp - 0xbc]
wait
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 3
lea edx, [ebp - 0x80]
xor ecx, ecx
mov eax, 0x4d0ea4
call fcn.00409a84
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp + 8]
add eax, 0x4e4
call fcn.00403d20
jmp 0x4d0337
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
call fcn.00402a4c
fmul dword [0x4d0e58]
fdiv dword [0x4d0e44]
fdiv dword [0x4d0e6c]
fadd qword [ebp - 0x48]
fstp qword [ebp - 0x48]
wait
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
call fcn.00402a74
push edx
push eax
lea eax, [ebp - 0xc8]
call fcn.00408cdc
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp + 8]
add eax, 0x4f0
call fcn.00403d20
lea eax, [ebp - 0xcc]
push eax
fild dword [ebp - 0x28]
fild dword [ebp - 0x2c]
fdivp st(1)
call fcn.00402a4c
fmul dword [0x4d0e44]
fstp xword [ebp - 0xbc]
wait
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 3
lea edx, [ebp - 0x80]
xor ecx, ecx
mov eax, 0x4d0ea4
call fcn.00409a84
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp + 8]
add eax, 0x4f4
call fcn.00403d20
push dword [ebp - 0x30]
push 0x4d0eb4
push dword [ebp - 0x34]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040400c
mov dword [ebp - 0x6c], 0xffffffff
jmp 0x4d047b
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0x20]
call fcn.00408cac
push dword [ebp - 0xd0]
push 0x4d0ec8
lea edx, [ebp - 0xd4]
mov eax, dword [ebp - 0x24]
call fcn.00408cac
push dword [ebp - 0xd4]
push 0x4d0ed4
lea eax, [ebp - 0x30]
mov edx, 4
call fcn.0040400c
jmp 0x4d047b
lea eax, [ebp - 0x30]
push eax
fild dword [ebp - 0x20]
fild dword [ebp - 0x24]
fdivp st(1)
fstp xword [ebp - 0xbc]
wait
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 3
lea edx, [ebp - 0x80]
xor ecx, ecx
mov eax, 0x4d0ee8
call fcn.00409a84
jmp 0x4d047b
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x20]
call fcn.00408cac
push dword [ebp - 0xd8]
push 0x4d0ec8
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0x24]
call fcn.00408cac
push dword [ebp - 0xdc]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040400c
cmp esi, 1
jle 0x4d047b
mov edi, esi
sub edi, 2
jl 0x4d047b
inc edi
mov dword [ebp - 0x24], 2
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6754
push dword [ebp - 0x30]
push 0x4d0de0
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 0x20]
call fcn.00408cac
push dword [ebp - 0xe0]
push 0x4d0ec8
lea edx, [ebp - 0xe4]
mov eax, dword [ebp - 0x28]
call fcn.00408cac
push dword [ebp - 0xe4]
lea eax, [ebp - 0x30]
mov edx, 5
call fcn.0040400c
inc dword [ebp - 0x24]
dec edi
jne 0x4d0421
cmp ebx, 7
jne 0x4d055f
lea edx, [ebp - 0xe8]
mov eax, esi
call fcn.00408cac
mov edx, dword [ebp - 0xe8]
lea eax, [ebp - 0x30]
mov ecx, 0x4d0ef8
call fcn.00403f98
cmp dword [ebp - 0x1c], 0x1b
jne 0x4d055f
cmp esi, 8
jle 0x4d055f
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 4]
mov edx, 8
call fcn.004c6b74
mov edx, dword [ebp - 0x30]
mov eax, 0x4d0f08
call fcn.00404238
test eax, eax
je 0x4d04ea
lea ecx, [ebp - 0x30]
mov edx, esi
sub edx, 8
mov eax, dword [ebp - 4]
call fcn.004c6b74
jmp 0x4d055f
mov edx, dword [ebp - 0x30]
mov eax, 0x4d0f14
call fcn.00404238
test eax, eax
je 0x4d052c
mov eax, dword [ebp - 8]
neg eax
sbb eax, eax
neg eax
test al, al
jne 0x4d051a
lea ecx, [ebp - 0x30]
mov edx, esi
sub edx, 8
mov eax, dword [ebp - 4]
call fcn.004c6c20
jmp 0x4d055f
lea ecx, [ebp - 0x30]
mov edx, esi
sub edx, 8
mov eax, dword [ebp - 4]
call fcn.004c6ba4
jmp 0x4d055f
mov edx, dword [ebp - 0x30]
mov eax, 0x4d0f24
call fcn.00404238
test eax, eax
je 0x4d054f
lea ecx, [ebp - 0x30]
mov edx, esi
sub edx, 8
mov eax, dword [ebp - 4]
call fcn.004c6b74
jmp 0x4d055f
lea ecx, [ebp - 0x30]
mov edx, esi
sub edx, 8
mov eax, dword [ebp - 4]
call fcn.004c6920
cmp ebx, 0xa
jne 0x4d05ba
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6710
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004c6710
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 0x20]
call fcn.00408cac
push dword [ebp - 0xec]
push 0x4d0ec8
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 0x24]
call fcn.00408cac
push dword [ebp - 0xf0]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040400c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d05d6
mov eax, dword [ebp + 8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x1c]
mov dword [edx + eax*4 + 4], ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov edx, dword [ebp + 8]
lea eax, [edx + eax*4 + 8]
mov edx, dword [ebp - 0x38]
call fcn.00403d20
mov eax, dword [ebp + 8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov edx, dword [ebp + 8]
lea eax, [edx + eax*4 + 0xc]
mov edx, dword [ebp - 0x30]
call fcn.00403d20
mov eax, dword [ebp + 8]
inc dword [eax]
mov eax, dword [ebp + 8]
cmp dword [eax], 0x64
je 0x4d0a42
inc dword [ebp - 0x18]
dec dword [ebp - 0x70]
jne 0x4cf7f3
mov eax, dword [ebp - 0x3c]
mov edx, 0x4d0f34
call fcn.0040405c
je 0x4d0655
mov eax, dword [ebp - 0x3c]
mov edx, 0x4d0f44
call fcn.0040405c
jne 0x4d09da
mov eax, dword [ebp - 0x6c]
neg eax
sbb eax, eax
neg eax
cmp al, 1
jne 0x4d09da
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push 0
push 0
lea ecx, [ebp - 0x68]
lea edx, [ebp - 0x58]
lea eax, [ebp - 0x60]
call fcn.004cf5c4
mov eax, dword [ebp + 8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov edx, dword [ebp + 8]
xor ecx, ecx
mov dword [edx + eax*4 + 4], ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov edx, dword [ebp + 8]
lea eax, [edx + eax*4 + 8]
mov edx, 0x4d0f54
call fcn.00403d20
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
lea eax, [ebp - 0xf4]
call fcn.004cf66c
mov edx, dword [ebp - 0xf4]
mov eax, dword [ebp + 8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [ebp + 8]
lea eax, [ecx + eax*4 + 0xc]
call fcn.00403d20
mov eax, dword [ebp + 8]
inc dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov edx, dword [ebp + 8]
xor ecx, ecx
mov dword [edx + eax*4 + 4], ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov edx, dword [ebp + 8]
lea eax, [edx + eax*4 + 8]
mov edx, 0x4d0f70
call fcn.00403d20
push dword [ebp - 0x54]
push dword [ebp - 0x58]
lea eax, [ebp - 0xf8]
call fcn.004cf66c
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp + 8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [ebp + 8]
lea eax, [ecx + eax*4 + 0xc]
call fcn.00403d20
mov eax, dword [ebp + 8]
inc dword [eax]
fld qword [ebp - 0x60]
fmul dword [0x4d0f84]
call fcn.00402a68
mov ebx, eax
fld qword [ebp - 0x60]
fmul dword [0x4d0e6c]
fmul dword [0x4d0f88]
call fcn.00402a68
push edx
push eax
lea eax, [ebp - 0xfc]
call fcn.00408cdc
mov edx, dword [ebp - 0xfc]
mov eax, dword [ebp + 8]
add eax, 0x4fc
call fcn.00403d20
push 0
push 0x3c
mov dword [ebp - 0x100], ebx
fild dword [ebp - 0x100]
fdiv dword [0x4d0f8c]
call fcn.00402a74
call fcn.00406839
mov esi, eax
push 0
push 0x3c
mov dword [ebp - 0x100], ebx
fild dword [ebp - 0x100]
fdiv dword [0x4d0f90]
call fcn.00402a74
call fcn.00406839
mov edi, eax
mov dword [ebp - 0x100], ebx
fild dword [ebp - 0x100]
fdiv dword [0x4d0f84]
call fcn.00402a74
mov dword [ebp - 0x10], eax
mov eax, ebx
mov ecx, 0x3e8
cdq
idiv ecx
mov ebx, edx
fild dword [ebp - 0x10]
call fcn.00402a74
push edx
push eax
lea eax, [ebp - 0x104]
call fcn.00408cdc
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp + 8]
add eax, 0x4dc
call fcn.00403d20
mov dword [ebp - 0x100], edi
fild dword [ebp - 0x100]
call fcn.00402a74
push edx
push eax
lea eax, [ebp - 0x108]
call fcn.00408cdc
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp + 8]
add eax, 0x4e0
call fcn.00403d20
lea eax, [ebp - 0x10c]
push eax
mov dword [ebp - 0x11c], esi
mov byte [ebp - 0x118], 0
mov dword [ebp - 0x114], ebx
mov byte [ebp - 0x110], 0
lea edx, [ebp - 0x11c]
mov ecx, 1
mov eax, 0x4d0f9c
call fcn.00409a84
mov edx, dword [ebp - 0x10c]
mov eax, dword [ebp + 8]
add eax, 0x4e4
call fcn.00403d20
fld qword [ebp - 0x58]
fmul dword [0x4d0f84]
call fcn.00402a68
mov ebx, eax
fld qword [ebp - 0x58]
fmul dword [0x4d0e6c]
fmul dword [0x4d0f88]
call fcn.00402a68
push edx
push eax
lea eax, [ebp - 0x120]
call fcn.00408cdc
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp + 8]
add eax, 0x4f8
call fcn.00403d20
push 0
push 0x3c
mov dword [ebp - 0x100], ebx
fild dword [ebp - 0x100]
fdiv dword [0x4d0f8c]
call fcn.00402a74
call fcn.00406839
mov esi, eax
push 0
push 0x3c
mov dword [ebp - 0x100], ebx
fild dword [ebp - 0x100]
fdiv dword [0x4d0f90]
call fcn.00402a74
call fcn.00406839
mov edi, eax
mov dword [ebp - 0x100], ebx
fild dword [ebp - 0x100]
fdiv dword [0x4d0f84]
call fcn.00402a74
mov dword [ebp - 0x10], eax
mov eax, ebx
mov ecx, 0x3e8
cdq
idiv ecx
mov ebx, edx
fild dword [ebp - 0x10]
call fcn.00402a74
push edx
push eax
lea eax, [ebp - 0x124]
call fcn.00408cdc
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp + 8]
add eax, 0x4ec
call fcn.00403d20
mov dword [ebp - 0x100], edi
fild dword [ebp - 0x100]
call fcn.00402a74
push edx
push eax
lea eax, [ebp - 0x128]
call fcn.00408cdc
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp + 8]
add eax, 0x4f0
call fcn.00403d20
lea eax, [ebp - 0x12c]
push eax
mov dword [ebp - 0x11c], esi
mov byte [ebp - 0x118], 0
mov dword [ebp - 0x114], ebx
mov byte [ebp - 0x110], 0
lea edx, [ebp - 0x11c]
mov ecx, 1
mov eax, 0x4d0f9c
call fcn.00409a84
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp + 8]
add eax, 0x4f4
call fcn.00403d20
jmp 0x4d0a42
fld qword [ebp - 0x48]
fmul dword [0x4d0e6c]
fmul dword [0x4d0f88]
call fcn.00402a68
push edx
push eax
lea eax, [ebp - 0x130]
call fcn.00408cdc
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp + 8]
add eax, 0x4f8
call fcn.00403d20
fld qword [ebp - 0x50]
fmul dword [0x4d0e6c]
fmul dword [0x4d0f88]
call fcn.00402a68
push edx
push eax
lea eax, [ebp - 0x134]
call fcn.00408cdc
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp + 8]
add eax, 0x4fc
call fcn.00403d20
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d0ab1
lea eax, [ebp - 0x134]
mov edx, 6
call fcn.00403cf0
lea eax, [ebp - 0x10c]
mov edx, 3
call fcn.00403cf0
lea eax, [ebp - 0xfc]
mov edx, 0x10
call fcn.00403cf0
lea eax, [ebp - 0xb0]
mov edx, 0xa
call fcn.00403cf0
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.00403cf0
lea eax, [ebp - 0x3c]
mov edx, 4
call fcn.00403cf0
ret