Function at 0x4e27d8
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff54
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x4e491f
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x68], eax
xor eax, eax
mov dword [ebp - 0x6c], eax
cmp word [ebx + 0x1e], 1
jne 0x4e2845
mov eax, dword [ebx + 8]
imul dword [ebp + 0x10]
mov dword [ebp - 0xa4], eax
fild dword [ebp - 0xa4]
fild dword [ebx + 0xc]
fdiv dword [0x4e4930]
fmulp st(1)
call fcn.00403008
mov dword [ebp - 0x3c], eax
jmp 0x4e285b
fild dword [ebp + 0x10]
fild dword [ebx + 0xc]
fdiv dword [0x4e4930]
fmulp st(1)
call fcn.00403008
mov dword [ebp - 0x3c], eax
cmp dword [ebx + 0xc], 4
jne 0x4e2867
test byte [ebp + 0x10], 1
jne 0x4e2880
cmp dword [ebx + 0xc], 1
jne 0x4e2883
mov eax, dword [ebp + 0x10]
and eax, 0x80000007
jns 0x4e287c
dec eax
or eax, 0xfffffff8
inc eax
test eax, eax
je 0x4e2883
inc dword [ebp - 0x3c]
xor eax, eax
mov dword [ebp - 0x48], eax
cmp word [ebx + 0x22], 7
jne 0x4e2a27
cmp dword [ebx + 0x6c], 0
jne 0x4e2a27
mov dl, 1
mov eax, dword [0x41f018]
call fcn.00403dfc
mov dword [ebp - 0x50], eax
mov edx, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x50]
mov esi, dword [eax]
call dword [esi + 0xc]
push 0
push 0
mov eax, dword [ebp - 0x50]
call fcn.0042451c
mov dl, 1
mov eax, dword [0x62a81c]
call fcn.00632eb8
mov dword [ebp - 0x58], eax
push 5
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x58]
mov esi, dword [eax]
call dword [esi + 0x24]
cmp dword [ebx + 0x28], 1
je 0x4e28f1
cmp dword [ebx + 0x38], 1
jne 0x4e2905
mov eax, dword [ebp + 8]
mov esi, eax
lea edi, [ebp - 0xa0]
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
jmp 0x4e294d
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e2936
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x20]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
xor eax, eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x78], eax
mov byte [ebp - 0x59], 0
mov eax, dword [ebx + 0x178]
mov esi, dword [eax + 0x1c]
mov edi, dword [eax + 0x20]
lea eax, [ebx + 0x178]
push eax
lea eax, [ebp - 0xa0]
push eax
push 0
mov al, byte [ebp - 0x59]
push eax
push 0
push 1
push 0
push 1
mov ecx, dword [ebp - 0x58]
xor edx, edx
mov eax, dword [ebp - 0x50]
call fcn.004c4568
mov eax, dword [ebx + 0x178]
mov edx, esi
call fcn.00604b28
mov eax, dword [ebx + 0x178]
mov edx, edi
call fcn.00604b58
mov eax, dword [ebp - 0x78]
cmp byte [eax], 0
jne 0x4e2a12
cmp byte [ebp - 0x59], 0
je 0x4e29eb
mov eax, dword [ebp - 0x58]
mov edx, dword [eax]
call dword [edx + 8]
dec eax
test eax, eax
jl 0x4e29eb
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x58]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, eax
mov eax, esi
call fcn.005dd1d8
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e29c6
push 0
mov eax, dword [ebp + 0x1c]
mov ecx, 3
cdq
idiv ecx
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push eax
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x58]
call fcn.00636e04
mov eax, dword [ebp - 0x58]
call fcn.00403e2c
mov eax, dword [ebp - 0x50]
call fcn.00403e2c
jmp 0x4e48df
cmp word [ebx + 0x22], 7
jne 0x4e2bd2
cmp dword [ebx + 0x6c], 0
je 0x4e2bd2
mov dl, 1
mov eax, dword [0x41f018]
call fcn.00403dfc
mov dword [ebp - 0x50], eax
mov edx, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x50]
mov esi, dword [eax]
call dword [esi + 0xc]
push 0
push 0
mov eax, dword [ebp - 0x50]
call fcn.0042451c
mov dl, 1
mov eax, dword [0x41f018]
call fcn.00403dfc
mov dword [ebp - 0x54], eax
mov ecx, dword [ebx + 0x70]
mov edx, dword [ebx + 0x6c]
mov eax, dword [ebp - 0x54]
mov esi, dword [eax]
call dword [esi + 0xc]
push 0
push 0
mov eax, dword [ebp - 0x54]
call fcn.0042451c
mov dl, 1
mov eax, dword [0x62a81c]
call fcn.00632eb8
mov dword [ebp - 0x58], eax
push 5
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x58]
mov esi, dword [eax]
call dword [esi + 0x24]
cmp dword [ebx + 0x28], 1
je 0x4e2ab9
cmp dword [ebx + 0x38], 1
jne 0x4e2acd
mov eax, dword [ebp + 8]
mov esi, eax
lea edi, [ebp - 0xa0]
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
jmp 0x4e2b15
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e2afe
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x20]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
xor eax, eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x78], eax
mov byte [ebp - 0x59], 0
lea eax, [ebx + 0x178]
push eax
lea eax, [ebp - 0xa0]
push eax
push 0
mov al, byte [ebp - 0x59]
push eax
push 0
push 1
push 0
push 1
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
call fcn.004c4568
mov eax, dword [ebp - 0x78]
cmp byte [eax], 0
jne 0x4e2bb5
cmp byte [ebp - 0x59], 0
je 0x4e2b8e
mov eax, dword [ebp - 0x58]
mov edx, dword [eax]
call dword [edx + 8]
dec eax
test eax, eax
jl 0x4e2b8e
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x58]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, eax
mov eax, esi
call fcn.005dd1d8
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e2b69
push 0
mov eax, dword [ebp + 0x1c]
mov ecx, 3
cdq
idiv ecx
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push eax
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x58]
call fcn.00636e04
mov eax, dword [ebp - 0x58]
call fcn.00403e2c
mov eax, dword [ebp - 0x50]
call fcn.00403e2c
mov eax, dword [ebp - 0x54]
call fcn.00403e2c
jmp 0x4e48df
cmp word [ebx + 0x1c], 2
jne 0x4e2da8
cmp dword [ebx + 8], 3
je 0x4e2bed
cmp dword [ebx + 8], 4
jne 0x4e2da8
cmp dword [ebx + 0xc], 8
jne 0x4e2da8
cmp dword [ebx + 8], 4
jne 0x4e2c06
cmp dword [ebx + 0x184], 2
je 0x4e2c13
cmp dword [ebx + 8], 4
jne 0x4e2c1c
cmp word [ebx + 0x1c], 2
jne 0x4e2c1c
cmp byte [ebx + 0x180], 0
je 0x4e2c20
xor eax, eax
jmp 0x4e2c22
mov al, 1
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x4e2c35
mov eax, dword [ebx + 0x17c]
mov byte [eax + 0x68], 0
cmp word [ebx + 0x22], 1
je 0x4e2c4a
mov eax, dword [ebx + 8]
imul dword [ebp + 0x10]
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e2d90
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e2d79
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
cmp byte [ebp - 0x49], 0
je 0x4e2d1d
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e2d3b
inc edi
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x24]
mov dx, word [eax]
mov word [esi], dx
mov dl, byte [eax + 2]
mov byte [esi + 2], dl
mov edx, esi
lea eax, [esi + 2]
call fcn.005cf56c
add dword [ebp - 0x24], 3
mov eax, dword [ebp - 0x24]
movzx eax, byte [eax]
push eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov eax, dword [ebx + 0x17c]
mov edx, dword [ebp - 0x10]
call fcn.0062dd5c
inc dword [ebp - 0x24]
add esi, 3
inc dword [ebp - 0x10]
dec edi
jne 0x4e2cd7
jmp 0x4e2d3b
push 1
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebx + 0x178]
push eax
mov edi, dword [0x98a150]
mov edi, dword [edi]
mov ecx, esi
xor edx, edx
mov eax, dword [ebp - 0x24]
call edi
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e2d6c
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e2d90
jmp 0x4e2d84
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e2d90
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e2c61
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 2
jne 0x4e3048
cmp dword [ebx + 8], 3
je 0x4e2dc3
cmp dword [ebx + 8], 4
jne 0x4e3048
cmp dword [ebx + 0xc], 0x10
jne 0x4e3048
cmp word [ebx + 0x22], 1
je 0x4e2de4
mov eax, dword [ebx + 8]
imul dword [ebp + 0x10]
add eax, eax
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e3030
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e3019
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 8
jne 0x4e2f38
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0x1c]
cdq
idiv dword [ebx + 8]
add eax, eax
lea eax, [eax + eax*2]
add dword [ebp - 0x64], eax
cmp byte [ebx + 0x174], 0
je 0x4e2ed4
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e2fdb
inc edi
mov eax, dword [ebp - 0x1c]
mov ax, word [eax]
mov edx, dword [ebp - 0x64]
mov word [edx], ax
add dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x1c]
mov ax, word [eax]
mov edx, dword [ebp - 0x64]
mov word [edx + 2], ax
add dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x1c]
mov ax, word [eax]
mov edx, dword [ebp - 0x64]
mov word [edx + 4], ax
add dword [ebp - 0x1c], 2
cmp dword [ebx + 8], 4
jne 0x4e2ec8
add dword [ebp - 0x1c], 2
add dword [ebp - 0x64], 6
dec edi
jne 0x4e2e8c
jmp 0x4e2fdb
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e2fdb
inc edi
mov eax, dword [ebp - 0x1c]
mov ax, word [eax]
call fcn.0062ba50
mov edx, dword [ebp - 0x64]
mov word [edx], ax
add dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x1c]
mov ax, word [eax]
call fcn.0062ba50
mov edx, dword [ebp - 0x64]
mov word [edx + 2], ax
add dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x1c]
mov ax, word [eax]
call fcn.0062ba50
mov edx, dword [ebp - 0x64]
mov word [edx + 4], ax
add dword [ebp - 0x1c], 2
cmp dword [ebx + 8], 4
jne 0x4e2f2c
add dword [ebp - 0x1c], 2
add dword [ebp - 0x64], 6
dec edi
jne 0x4e2ee1
jmp 0x4e2fdb
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
cmp dword [ebx + 8], 4
jne 0x4e2f94
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e2f94
inc edi
mov dx, word [eax]
mov ecx, dword [ebp - 0x64]
mov word [ecx], dx
add eax, 2
mov dx, word [eax]
mov ecx, dword [ebp - 0x64]
mov word [ecx + 2], dx
add eax, 2
mov dx, word [eax]
mov ecx, dword [ebp - 0x64]
mov word [ecx + 4], dx
add eax, 2
add eax, 2
add dword [ebp - 0x64], 6
dec edi
jne 0x4e2f64
cmp byte [ebx + 0x174], 0
jne 0x4e2fbd
push 1
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebx + 0x178]
push eax
mov edi, dword [0x98a150]
mov edi, dword [edi]
mov ecx, esi
mov dl, 7
mov eax, dword [ebp - 0x1c]
call edi
jmp 0x4e2fdb
push 1
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebx + 0x178]
push eax
mov edi, dword [0x98a150]
mov edi, dword [edi]
mov ecx, esi
mov dl, 6
mov eax, dword [ebp - 0x1c]
call edi
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e300c
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e3030
jmp 0x4e3024
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e3030
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e2dfb
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 2
jne 0x4e319f
cmp dword [ebx + 8], 1
jne 0x4e319f
cmp dword [ebx + 0xc], 0x10
jne 0x4e319f
cmp word [ebx + 0x22], 1
je 0x4e307c
mov eax, dword [ebx + 8]
imul dword [ebp + 0x10]
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e3187
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e3170
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3132
inc edi
mov eax, dword [ebp - 0x24]
movzx eax, word [eax]
shr eax, 0xa
shl eax, 3
mov byte [esi + 2], al
mov eax, dword [ebp - 0x24]
movzx eax, word [eax]
shr eax, 5
and al, 0x1f
shl eax, 3
mov byte [esi + 1], al
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
and al, 0x1f
shl eax, 3
mov byte [esi], al
add dword [ebp - 0x24], 2
add esi, 3
dec edi
jne 0x4e30fc
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e3163
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e3187
jmp 0x4e317b
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e3187
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e3093
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 3
jne 0x4e3323
cmp dword [ebx + 0xc], 1
jne 0x4e3323
cmp dword [ebx + 8], 1
jne 0x4e3323
mov eax, dword [ebp + 0x10]
add eax, eax
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e3316
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e32ff
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 2
jne 0x4e3278
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e32c1
inc edi
mov dword [ebp - 0x14], 0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
call fcn.005db330
test eax, eax
je 0x4e326c
mov byte [esi], 1
jmp 0x4e326f
mov byte [esi], 0
inc esi
inc dword [ebp - 0x14]
dec edi
jne 0x4e3258
jmp 0x4e32c1
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e32c1
inc edi
mov dword [ebp - 0x14], 0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
call fcn.005db330
test eax, eax
je 0x4e32a9
mov eax, dword [ebx + 0x44]
mov dx, word [eax + 3]
mov word [esi], dx
mov dl, byte [eax + 5]
mov byte [esi + 2], dl
jmp 0x4e32b8
mov eax, dword [ebx + 0x44]
mov dx, word [eax]
mov word [esi], dx
mov dl, byte [eax + 2]
mov byte [esi + 2], dl
add esi, 3
inc dword [ebp - 0x14]
dec edi
jne 0x4e3288
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e32f2
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e3316
jmp 0x4e330a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e3316
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e31e2
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 3
jne 0x4e35f4
cmp dword [ebx + 0xc], 8
jg 0x4e35f4
cmp dword [ebx + 8], 2
jne 0x4e349f
cmp dword [ebx + 0xc], 8
jne 0x4e349f
cmp word [ebx + 0x22], 1
je 0x4e3360
mov eax, dword [ebp + 0x10]
add eax, eax
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e3487
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e3470
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3432
inc edi
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x24]
movzx eax, byte [eax]
lea eax, [eax + eax*2]
mov edx, dword [ebx + 0x44]
mov cx, word [edx + eax]
mov word [esi], cx
mov cl, byte [edx + eax + 2]
mov byte [esi + 2], cl
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
movzx eax, byte [eax]
mov edx, 0xff
sub edx, eax
push edx
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov eax, dword [ebx + 0x17c]
mov edx, dword [ebp - 0x14]
call fcn.0062dd5c
inc dword [ebp - 0x24]
add esi, 3
inc dword [ebp - 0x14]
dec edi
jne 0x4e33e7
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e3463
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e3487
jmp 0x4e347b
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e3487
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e3377
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x22], 1
jne 0x4e34ac
cmp dword [ebx + 0xc], 8
jge 0x4e34b9
mov eax, dword [ebp + 0x10]
add eax, eax
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e35d6
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e35bf
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 2
jne 0x4e3555
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3581
inc edi
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
mov byte [esi], al
inc dword [ebp - 0x24]
inc esi
dec edi
jne 0x4e3545
jmp 0x4e3581
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3581
inc edi
mov eax, dword [ebp - 0x24]
movzx eax, byte [eax]
lea eax, [eax + eax*2]
mov edx, dword [ebx + 0x44]
mov cx, word [edx + eax]
mov word [esi], cx
mov cl, byte [edx + eax + 2]
mov byte [esi + 2], cl
inc dword [ebp - 0x24]
add esi, 3
dec edi
jne 0x4e355e
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e35b2
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e35d6
jmp 0x4e35ca
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e35d6
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e34d0
cmp word [ebx + 0x22], 1
jne 0x4e35e7
cmp dword [ebx + 0xc], 8
jge 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 1
ja 0x4e37a8
cmp dword [ebx + 8], 1
jne 0x4e37a8
cmp dword [ebx + 0xc], 8
je 0x4e3619
cmp dword [ebx + 0xc], 4
jne 0x4e37a8
cmp word [ebx + 0x22], 1
jne 0x4e3626
cmp dword [ebx + 0xc], 4
jne 0x4e3634
mov eax, dword [ebp + 0x10]
add eax, 4
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e378a
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e3773
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 3
jne 0x4e36d0
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3735
inc edi
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
mov byte [esi], al
inc dword [ebp - 0x24]
inc esi
dec edi
jne 0x4e36c0
jmp 0x4e3735
cmp word [ebx + 0x1c], 0
jne 0x4e370c
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3735
inc edi
mov eax, dword [ebp - 0x24]
movzx eax, byte [eax]
mov edx, 0xff
sub edx, eax
mov dword [ebp - 0x14], edx
mov al, byte [ebp - 0x14]
mov byte [esi + 2], al
mov al, byte [ebp - 0x14]
mov byte [esi + 1], al
mov al, byte [ebp - 0x14]
mov byte [esi], al
inc dword [ebp - 0x24]
add esi, 3
dec edi
jne 0x4e36e0
jmp 0x4e3735
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3735
inc edi
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
mov byte [esi + 2], al
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
mov byte [esi + 1], al
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
mov byte [esi], al
inc dword [ebp - 0x24]
add esi, 3
dec edi
jne 0x4e3715
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e3766
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e378a
jmp 0x4e377e
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e378a
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e364b
cmp word [ebx + 0x22], 1
jne 0x4e379b
cmp dword [ebx + 0xc], 4
jne 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 1
ja 0x4e39b1
cmp dword [ebx + 8], 2
jne 0x4e39b1
cmp dword [ebx + 0xc], 8
jne 0x4e39b1
mov al, byte [ebx + 0x180]
xor al, 1
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x4e37e2
mov eax, dword [ebx + 0x17c]
mov byte [eax + 0x68], 0
cmp word [ebx + 0x22], 1
je 0x4e37f6
mov eax, dword [ebp + 0x10]
add eax, eax
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e3993
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e397c
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
cmp word [ebx + 0x1c], 0
jne 0x4e38e1
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e393e
inc edi
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x24]
movzx eax, byte [eax]
mov edx, 0xff
sub edx, eax
mov dword [ebp - 0x14], edx
mov al, byte [ebp - 0x14]
mov byte [esi + 2], al
mov al, byte [ebp - 0x14]
mov byte [esi + 1], al
mov al, byte [ebp - 0x14]
mov byte [esi], al
cmp byte [ebp - 0x49], 0
je 0x4e38d2
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
movzx eax, byte [eax]
push eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov eax, dword [ebx + 0x17c]
mov edx, dword [ebp - 0x10]
call fcn.0062dd5c
inc dword [ebp - 0x24]
jmp 0x4e38d6
add dword [ebp - 0x24], 2
add esi, 3
inc dword [ebp - 0x10]
dec edi
jne 0x4e3888
jmp 0x4e393e
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e393e
inc edi
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
mov byte [esi + 2], al
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
mov byte [esi + 1], al
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
mov byte [esi], al
cmp byte [ebp - 0x49], 0
je 0x4e3931
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
movzx eax, byte [eax]
push eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov eax, dword [ebx + 0x17c]
mov edx, dword [ebp - 0x10]
call fcn.0062dd5c
inc dword [ebp - 0x24]
jmp 0x4e3935
add dword [ebp - 0x24], 2
add esi, 3
inc dword [ebp - 0x10]
dec edi
jne 0x4e38f1
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e396f
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e3993
jmp 0x4e3987
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e3993
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e380d
cmp word [ebx + 0x22], 1
jne 0x4e39a4
cmp dword [ebx + 0xc], 4
jne 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 1
ja 0x4e3c4b
cmp dword [ebx + 8], 1
jne 0x4e3c4b
cmp dword [ebx + 0xc], 0x10
jne 0x4e3c4b
cmp word [ebx + 0x22], 1
je 0x4e39e4
mov eax, dword [ebp + 0x10]
add eax, eax
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e3c33
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e3c1c
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xa8]
push eax
mov eax, dword [ebx + 0xa4]
mov ecx, 0xf
mov edx, 1
call fcn.0040519c
mov eax, dword [ebp - 0xa8]
mov edx, 0x4e493c
call fcn.00405088
jne 0x4e3a92
mov dword [ebp - 0x18], 4
jmp 0x4e3a99
mov dword [ebp - 0x18], 8
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 4
jne 0x4e3b32
cmp word [ebx + 0x1c], 0
jne 0x4e3af3
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3bde
inc edi
mov dl, byte [ebx + 0x174]
xor dl, 1
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
call fcn.00642290
mov edx, dword [ebp - 0x38]
mov word [edx], ax
mov eax, dword [ebp - 0x38]
mov dx, 0xffff
sub dx, word [eax]
mov word [esi], dx
add dword [ebp - 0x38], 2
add esi, 2
dec edi
jne 0x4e3abd
jmp 0x4e3bde
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3bde
inc edi
mov dl, byte [ebx + 0x174]
xor dl, 1
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
call fcn.00642290
mov edx, dword [ebp - 0x38]
mov word [edx], ax
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
mov word [esi], ax
add dword [ebp - 0x38], 2
add esi, 2
dec edi
jne 0x4e3b00
jmp 0x4e3bde
cmp word [ebx + 0x1c], 0
jne 0x4e3b92
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3bde
inc edi
mov dl, byte [ebx + 0x174]
xor dl, 1
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
call fcn.00642290
mov edx, dword [ebp - 0x38]
mov word [edx], ax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax]
mov edx, 0xffff
sub edx, eax
shr edx, cl
mov dword [ebp - 0x14], edx
mov al, byte [ebp - 0x14]
mov byte [esi + 2], al
mov al, byte [ebp - 0x14]
mov byte [esi + 1], al
mov al, byte [ebp - 0x14]
mov byte [esi], al
add dword [ebp - 0x38], 2
add esi, 3
dec edi
jne 0x4e3b46
jmp 0x4e3bde
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3bde
inc edi
mov dl, byte [ebx + 0x174]
xor dl, 1
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
call fcn.00642290
mov edx, dword [ebp - 0x38]
mov word [edx], ax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax]
shr eax, cl
mov dword [ebp - 0x14], eax
mov al, byte [ebp - 0x14]
mov byte [esi + 2], al
mov al, byte [ebp - 0x14]
mov byte [esi + 1], al
mov al, byte [ebp - 0x14]
mov byte [esi], al
add dword [ebp - 0x38], 2
add esi, 3
dec edi
jne 0x4e3b9b
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e3c0f
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e3c33
jmp 0x4e3c27
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e3c33
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e39fb
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 1
ja 0x4e3ef6
cmp dword [ebx + 8], 2
jne 0x4e3ef6
cmp dword [ebx + 0xc], 0x10
jne 0x4e3ef6
cmp word [ebx + 0x22], 1
je 0x4e3c7f
mov eax, dword [ebp + 0x10]
shl eax, 2
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e3ede
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e3ec7
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xac]
push eax
mov eax, dword [ebx + 0xa4]
mov ecx, 0xf
mov edx, 1
call fcn.0040519c
mov eax, dword [ebp - 0xac]
mov edx, 0x4e493c
call fcn.00405088
jne 0x4e3d2d
mov dword [ebp - 0x18], 4
jmp 0x4e3d34
mov dword [ebp - 0x18], 8
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 4
jne 0x4e3dd5
cmp word [ebx + 0x1c], 0
jne 0x4e3d92
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3e89
inc edi
mov dl, byte [ebx + 0x174]
xor dl, 1
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
call fcn.00642290
mov edx, dword [ebp - 0x38]
mov word [edx], ax
mov eax, dword [ebp - 0x38]
mov dx, 0xffff
sub dx, word [eax]
mov word [esi], dx
add dword [ebp - 0x38], 2
add dword [ebp - 0x38], 2
add esi, 2
dec edi
jne 0x4e3d58
jmp 0x4e3e89
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3e89
inc edi
mov dl, byte [ebx + 0x174]
xor dl, 1
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
call fcn.00642290
mov edx, dword [ebp - 0x38]
mov word [edx], ax
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
mov word [esi], ax
add dword [ebp - 0x38], 2
add dword [ebp - 0x38], 2
add esi, 2
dec edi
jne 0x4e3d9f
jmp 0x4e3e89
cmp word [ebx + 0x1c], 0
jne 0x4e3e39
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3e89
inc edi
mov dl, byte [ebx + 0x174]
xor dl, 1
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
call fcn.00642290
mov edx, dword [ebp - 0x38]
mov word [edx], ax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax]
mov edx, 0xffff
sub edx, eax
shr edx, cl
mov dword [ebp - 0x14], edx
mov al, byte [ebp - 0x14]
mov byte [esi + 2], al
mov al, byte [ebp - 0x14]
mov byte [esi + 1], al
mov al, byte [ebp - 0x14]
mov byte [esi], al
add dword [ebp - 0x38], 2
add dword [ebp - 0x38], 2
add esi, 3
dec edi
jne 0x4e3de9
jmp 0x4e3e89
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e3e89
inc edi
mov dl, byte [ebx + 0x174]
xor dl, 1
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
call fcn.00642290
mov edx, dword [ebp - 0x38]
mov word [edx], ax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax]
shr eax, cl
mov dword [ebp - 0x14], eax
mov al, byte [ebp - 0x14]
mov byte [esi + 2], al
mov al, byte [ebp - 0x14]
mov byte [esi + 1], al
mov al, byte [ebp - 0x14]
mov byte [esi], al
add dword [ebp - 0x38], 2
add dword [ebp - 0x38], 2
add esi, 3
dec edi
jne 0x4e3e42
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e3eba
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e3ede
jmp 0x4e3ed2
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e3ede
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e3c96
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 1
ja 0x4e408c
cmp dword [ebx + 8], 1
jne 0x4e408c
cmp dword [ebx + 0xc], 1
jne 0x4e408c
mov eax, dword [ebp + 0x10]
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3c]
call fcn.00402ab4
mov dword [ebp - 0x28], eax
mov cl, 0xff
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
call fcn.00408a2c
xor eax, eax
mov dword [ebp - 0x40], eax
cmp word [ebx + 0x1c], 0
jne 0x4e3f52
cmp word [ebx + 0x22], 1
je 0x4e3f67
cmp word [ebx + 0x22], 5
jae 0x4e3f67
cmp word [ebx + 0x1c], 1
jne 0x4e3f6d
cmp word [ebx + 0x22], 3
je 0x4e3f67
cmp word [ebx + 0x22], 4
jne 0x4e3f6d
mov byte [ebp - 0x41], 1
jmp 0x4e3f71
mov byte [ebp - 0x41], 0
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e4077
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e4060
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], esi
mov al, byte [ebp - 0x41]
sub al, 1
jb 0x4e4014
jne 0x4e4022
mov edi, dword [ebp - 0x3c]
dec edi
test edi, edi
jl 0x4e4022
inc edi
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
not al
mov edx, dword [ebp - 0x2c]
mov byte [edx], al
inc dword [ebp - 0x24]
inc dword [ebp - 0x2c]
dec edi
jne 0x4e3ffd
jmp 0x4e4022
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
call fcn.00408a24
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e4053
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e4077
jmp 0x4e406b
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e4077
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e3f88
mov eax, dword [ebp - 0x28]
call fcn.00402ad4
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 5
jne 0x4e4258
cmp dword [ebx + 8], 4
jne 0x4e4258
cmp dword [ebx + 0xc], 8
jne 0x4e4258
cmp word [ebx + 0x22], 1
je 0x4e40c0
mov eax, dword [ebp + 0x10]
shl eax, 2
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e4240
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e4229
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 7
jne 0x4e418e
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x1c]
mov ecx, 3
cdq
idiv ecx
shl eax, 2
add dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e41eb
inc edi
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 1], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 2], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 3], dl
inc eax
add dword [ebp - 0x60], 4
dec edi
jne 0x4e415a
jmp 0x4e41eb
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e41cd
inc edi
mov dl, 0xff
sub dl, byte [eax]
mov byte [eax], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov byte [eax], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov byte [eax], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov byte [eax], dl
inc eax
dec edi
jne 0x4e41ae
push 1
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebx + 0x178]
push eax
mov edi, dword [0x98a150]
mov edi, dword [edi]
mov ecx, esi
mov dl, 2
mov eax, dword [ebp - 0x20]
call edi
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e421c
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e4240
jmp 0x4e4234
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e4240
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e40d7
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 5
jne 0x4e454d
cmp dword [ebx + 8], 5
jl 0x4e454d
cmp dword [ebx + 0xc], 8
jne 0x4e454d
cmp dword [ebx + 8], 4
jle 0x4e428f
cmp dword [ebx + 0x184], 0
jle 0x4e428f
cmp byte [ebx + 0x180], 0
je 0x4e4293
xor eax, eax
jmp 0x4e4295
mov al, 1
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x4e42a8
mov eax, dword [ebx + 0x17c]
mov byte [eax + 0x68], 0
cmp word [ebx + 0x22], 1
je 0x4e42bd
mov eax, dword [ebx + 8]
imul dword [ebp + 0x10]
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e4535
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e451e
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 7
jne 0x4e43fe
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x1c]
mov ecx, 3
cdq
idiv ecx
shl eax, 2
add dword [ebp - 0x60], eax
cmp byte [ebp - 0x49], 0
je 0x4e436d
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebx + 0x17c]
call fcn.0062fa3c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x1c]
add dword [ebp - 0x34], eax
jmp 0x4e4372
xor eax, eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e44e0
inc edi
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 1], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 2], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 3], dl
inc eax
cmp byte [ebp - 0x49], 0
je 0x4e43da
mov dl, byte [eax]
mov ecx, dword [ebp - 0x34]
mov byte [ecx], dl
inc dword [ebp - 0x34]
inc eax
mov edx, dword [ebx + 8]
sub edx, 4
sub edx, 2
jl 0x4e43f2
inc edx
mov dword [ebp - 0x18], 2
inc eax
inc dword [ebp - 0x18]
dec edx
jne 0x4e43d1
jmp 0x4e43f2
mov edx, dword [ebx + 8]
sub edx, 4
test edx, edx
jle 0x4e43f2
mov dword [ebp - 0x18], 1
inc eax
inc dword [ebp - 0x18]
dec edx
jne 0x4e43eb
add dword [ebp - 0x60], 4
dec edi
jne 0x4e4382
jmp 0x4e44e0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
cmp byte [ebp - 0x49], 0
je 0x4e4434
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebx + 0x17c]
call fcn.0062fa3c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x1c]
add dword [ebp - 0x34], eax
jmp 0x4e4439
xor eax, eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x60], edx
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e44c2
inc edi
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 1], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 2], dl
inc eax
mov dl, 0xff
sub dl, byte [eax]
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 3], dl
inc eax
cmp byte [ebp - 0x49], 0
je 0x4e44a3
mov dl, byte [eax]
mov ecx, dword [ebp - 0x34]
mov byte [ecx], dl
inc dword [ebp - 0x34]
inc eax
mov edx, dword [ebx + 8]
sub edx, 4
sub edx, 2
jl 0x4e44bb
inc edx
mov dword [ebp - 0x18], 2
inc eax
inc dword [ebp - 0x18]
dec edx
jne 0x4e449a
jmp 0x4e44bb
mov edx, dword [ebx + 8]
sub edx, 4
test edx, edx
jle 0x4e44bb
mov dword [ebp - 0x18], 1
inc eax
inc dword [ebp - 0x18]
dec edx
jne 0x4e44b4
add dword [ebp - 0x60], 4
dec edi
jne 0x4e444b
push 1
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebx + 0x178]
push eax
mov edi, dword [0x98a150]
mov edi, dword [edi]
mov ecx, esi
mov dl, 2
mov eax, dword [ebp - 0x20]
call edi
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e4511
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e4535
jmp 0x4e4529
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e4535
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e42d4
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 5
jne 0x4e47bc
cmp dword [ebx + 8], 4
jne 0x4e47bc
cmp dword [ebx + 0xc], 0x10
jne 0x4e47bc
cmp word [ebx + 0x22], 1
je 0x4e4581
mov eax, dword [ebp + 0x10]
shl eax, 3
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e47a4
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e478d
cmp byte [ebx + 0x174], 0
jne 0x4e45e6
mov edx, dword [ebp + 0x10]
shl edx, 2
mov eax, dword [ebp - 0x20]
call fcn.004e27a4
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 7
jne 0x4e46a2
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x1c]
test eax, eax
jns 0x4e461f
add eax, 3
sar eax, 2
shl eax, 2
add dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e474f
inc edi
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax]
shr eax, 8
mov dl, 0xff
sub dl, al
mov eax, dword [ebp - 0x60]
mov byte [eax], dl
add dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax]
shr eax, 8
mov dl, 0xff
sub dl, al
mov eax, dword [ebp - 0x60]
mov byte [eax + 1], dl
add dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax]
shr eax, 8
mov dl, 0xff
sub dl, al
mov eax, dword [ebp - 0x60]
mov byte [eax + 2], dl
add dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax]
shr eax, 8
mov dl, 0xff
sub dl, al
mov eax, dword [ebp - 0x60]
mov byte [eax + 3], dl
add dword [ebp - 0x1c], 2
add dword [ebp - 0x60], 4
dec edi
jne 0x4e463b
jmp 0x4e474f
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x10]
shl eax, 2
call fcn.00402ab4
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp + 0x10]
dec edi
test edi, edi
jl 0x4e4729
inc edi
mov edx, dword [ebp - 0x1c]
movzx edx, word [edx]
shr edx, 8
mov cl, 0xff
sub cl, dl
mov byte [eax], cl
inc eax
add dword [ebp - 0x1c], 2
mov edx, dword [ebp - 0x1c]
movzx edx, word [edx]
shr edx, 8
mov cl, 0xff
sub cl, dl
mov byte [eax], cl
inc eax
add dword [ebp - 0x1c], 2
mov edx, dword [ebp - 0x1c]
movzx edx, word [edx]
shr edx, 8
mov cl, 0xff
sub cl, dl
mov byte [eax], cl
inc eax
add dword [ebp - 0x1c], 2
mov edx, dword [ebp - 0x1c]
movzx edx, word [edx]
shr edx, 8
mov cl, 0xff
sub cl, dl
mov byte [eax], cl
inc eax
add dword [ebp - 0x1c], 2
dec edi
jne 0x4e46d6
push 1
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebx + 0x178]
push eax
mov edi, dword [0x98a150]
mov edi, dword [edi]
mov ecx, esi
mov dl, 2
mov eax, dword [ebp - 0x30]
call edi
mov eax, dword [ebp - 0x30]
call fcn.00402ad4
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e4780
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e47a4
jmp 0x4e4798
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e47a4
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e4598
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
jmp 0x4e48df
cmp word [ebx + 0x1c], 8
jne 0x4e48df
cmp dword [ebx + 8], 3
jne 0x4e48df
cmp dword [ebx + 0xc], 8
jne 0x4e48df
cmp word [ebx + 0x22], 1
je 0x4e47f0
mov eax, dword [ebp + 0x10]
lea eax, [eax + eax*2]
call fcn.00402ab4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
dec eax
test eax, eax
jl 0x4e48d0
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0x14]
push eax
push ebx
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x18]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.004e1fb0
test al, al
je 0x4e48b9
push 0
mov eax, ebx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.004e23f0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
mov eax, dword [ebp + 0x1c]
add esi, eax
push 1
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebx + 0x178]
push eax
mov edi, dword [0x98a150]
mov edi, dword [edi]
mov ecx, esi
mov dl, 4
mov eax, dword [ebp - 0x20]
call edi
mov eax, dword [ebp + 8]
inc dword [eax + 0xc]
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0
je 0x4e48ac
mov eax, dword [ebp + 8]
fild dword [eax + 0xc]
mov eax, dword [ebp + 8]
fmul qword [eax + 0x18]
call fcn.00403008
mov ecx, eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov eax, dword [esi + 4]
call dword [esi]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x4e48d0
jmp 0x4e48c4
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x4e48d0
inc dword [ebp - 0xc]
dec dword [ebp - 0x70]
jne 0x4e4807
cmp word [ebx + 0x22], 1
je 0x4e48df
mov eax, dword [ebp - 0x20]
call fcn.00402ad4
cmp word [ebx + 0x22], 5
jne 0x4e48f3
lea ecx, [ebp - 0x48]
xor edx, edx
xor eax, eax
call dword [ebx + 0x170]
cmp dword [ebp - 0x68], 0
je 0x4e4901
mov eax, dword [ebp - 0x68]
call fcn.00402ad4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e4926
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.00404ca0
ret