Function at 0x45d7e0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x492b8b
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
push ebx
push esi
push edi
mov eax, dword [0x4bd910]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
call fcn.0045e6c0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x50
call fcn.0045bb90
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x10], ecx
push 4
push str.fSG
mov edx, dword [ebp - 0x10]
push edx
call fcn.004755fe
add esp, 0xc
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x45e210
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 4]
sub ecx, 8
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x10]
add edx, 8
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0
jle 0x45d905
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add eax, dword [edx + 4]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ecx + 4]
mov dword [ebp - 0x2c], edx
push 4
push str.cRGB
mov eax, dword [ebp - 0x10]
push eax
call fcn.004755fe
add esp, 0xc
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jne 0x45d8ce
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x22]
cmp edx, 0x18
jl 0x45d8ce
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x1c]
mov dword [edx], ecx
jmp 0x45d8f7
push 4
push str.cJPG
mov eax, dword [ebp - 0x10]
push eax
call fcn.004755fe
add esp, 0xc
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x45d8f7
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x1c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x10], ecx
jmp 0x45d86c
mov edx, dword [ebp - 0x1c]
cmp dword [edx], 0
jne 0x45d91a
mov ecx, dword [ebp - 0x1c]
call fcn.0045e6c0
jmp 0x45e210
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov dword [ebp - 0x58], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x58]
mov edx, 0x48
mul edx
seto cl
neg ecx
or ecx, eax
xor eax, eax
add ecx, 4
setb al
neg eax
or eax, ecx
push eax
call fcn.00472c49
add esp, 4
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x54], 0
je 0x45d989
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x58]
mov dword [ecx], edx
push fcn.0045bb20
push fcn.0045bae0
mov eax, dword [ebp - 0x58]
push eax
push 0x48
mov ecx, dword [ebp - 0x54]
add ecx, 4
push ecx
call fcn.004723dd
mov edx, dword [ebp - 0x54]
add edx, 4
mov dword [ebp - 0x68], edx
jmp 0x45d990
mov dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x84]
mov dword [ecx + 4], edx
mov dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0
jle 0x45e210
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add eax, dword [edx + 4]
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ecx + 4]
mov dword [ebp - 0x2c], edx
push 4
push str.cRGB
mov eax, dword [ebp - 0x10]
push eax
call fcn.004755fe
add esp, 0xc
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x45e0ba
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x22]
cmp edx, 0x18
jl 0x45e0ba
imul eax, dword [ebp - 0x40], 0x48
mov ecx, dword [ebp - 0x1c]
add eax, dword [ecx + 4]
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax + 0x22]
xor edx, edx
cmp ecx, 0x18
setg dl
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1c], edx
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x18]
mov eax, dword [ebp - 0x14]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x1a]
mov eax, dword [ebp - 0x14]
mov dword [eax + 8], edx
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x1c]
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x1e]
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x10], edx
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x14], edx
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x16]
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], edx
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x2c], 0x10
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x28], 0x10
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xc], 0
jle 0x45e0b5
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x10], 0
jle 0x45e0b5
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + 0x10]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
ja case.default.0x45dad2
mov ecx, dword [ebp - 0x64]
jmp dword [ecx*4 + 0x45e224]
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x20], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0xc]
imul edx, dword [ecx + 0x10]
shl edx, 2
push edx
push 0x40
call dword [0x49408c]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [0x494090]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x24], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x24]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
add edx, dword [ecx + 8]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
shl edx, 2
push edx
call fcn.00473f45
add esp, 4
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax + 0x10]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0
je 0x45db70
sub dword [ebp - 0x3c], 1
je 0x45dbdb
jmp 0x45dcc4
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x1c], 0
je 0x45dbba
pushf
cld
mov esi, dword [ebp - 0x50]
mov edi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x28]
mov al, byte [esi + 3]
mul byte [esi]
mov dl, 0xff
div dl
stosb byte es:[edi], al
mov al, byte [esi + 3]
mul byte [esi + 1]
mov dl, 0xff
div dl
stosb byte es:[edi], al
mov al, byte [esi + 3]
mul byte [esi + 2]
mov dl, 0xff
div dl
stosb byte es:[edi], al
mov al, 0xff
sub al, byte [esi + 3]
stosb byte es:[edi], al
add esi, 4
loop 0x45db88
dec ebx
jne 0x45db85
popf
jmp 0x45dbd6
pushf
cld
mov esi, dword [ebp - 0x50]
mov edi, dword [ebp - 0x48]
mov edx, dword [ebp - 0x34]
xor eax, eax
mov ecx, dword [ebp - 0x28]
movsb byte es:[edi], byte [esi]
movsb byte es:[edi], byte [esi]
movsb byte es:[edi], byte [esi]
stosb byte es:[edi], al
loop 0x45dbcb
dec edx
jne 0x45dbc8
popf
jmp 0x45dcc4
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x1c], 0
je 0x45dc61
pushf
cld
mov esi, dword [ebp - 0x50]
mov edi, dword [ebp - 0x48]
push edi
mov edi, dword [ebp - 0x38]
mov edx, 4
mov ebx, dword [ebp - 0x28]
xor ecx, ecx
lodsb al, byte [esi]
mov ah, al
mov cl, al
and cl, 0x3f
test ah, 0x40
je 0x45dc0d
mov ch, cl
lodsb al, byte [esi]
mov cl, al
sub ebx, ecx
test ah, 0x80
je 0x45dc19
lodsb al, byte [esi]
rep stosb byte es:[edi], al
jmp 0x45dc1b
rep movsb byte es:[edi], byte [esi]
cmp ebx, 0
jg 0x45dbf9
dec edx
jne 0x45dbf6
pop edi
push esi
mov esi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x28]
add esi, ebx
add ebx, ebx
add ebx, esi
mov esi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x28]
push ecx
push esi
mov ecx, 3
mov al, byte [esi]
mul byte [ebx]
mov dl, 0xff
div dl
stosb byte es:[edi], al
add esi, dword [ebp - 0x28]
loop 0x45dc3e
mov al, 0xff
sub al, byte [ebx]
stosb byte es:[edi], al
pop esi
pop ecx
inc esi
inc ebx
loop 0x45dc37
pop esi
dec dword [ebp - 0x34]
jne 0x45dbed
popf
jmp 0x45dcc4
pushf
cld
mov esi, dword [ebp - 0x50]
mov edi, dword [ebp - 0x48]
push edi
mov edi, dword [ebp - 0x38]
mov edx, 3
mov ebx, dword [ebp - 0x28]
xor ecx, ecx
lodsb al, byte [esi]
mov ah, al
mov cl, al
and cl, 0x3f
test ah, 0x40
je 0x45dc8a
mov ch, cl
lodsb al, byte [esi]
mov cl, al
sub ebx, ecx
test ah, 0x80
je 0x45dc96
lodsb al, byte [esi]
rep stosb byte es:[edi], al
jmp 0x45dc98
rep movsb byte es:[edi], byte [esi]
cmp ebx, 0
jg 0x45dc76
dec edx
jne 0x45dc73
pop edi
push esi
mov esi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x28]
push esi
mov ecx, 3
mov al, byte [esi]
stosb byte es:[edi], al
add esi, dword [ebp - 0x28]
loop 0x45dcae
inc edi
pop esi
inc esi
dec ebx
jne 0x45dca8
pop esi
dec dword [ebp - 0x34]
jne 0x45dc6a
popf
mov edx, dword [ebp - 0x38]
push edx
call fcn.00473f0d
add esp, 4
jmp case.default.0x45dad2
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x20], 1
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0xc]
add edx, 3
push edx
push 0x40
call dword [0x49408c]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [0x494090]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
add edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x24]
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x50
push edx
call fcn.004638b0
add esp, 0x10
jmp case.default.0x45dad2
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x20], 4
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0xc]
add edx, 3
push edx
push 0x40
call dword [0x49408c]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [0x494090]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
add edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x24]
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x50
push edx
call fcn.004638b0
add esp, 0x10
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0045bd10
jmp case.default.0x45dad2
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x20], 3
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xc]
add eax, 3
push eax
push 0x40
call dword [0x49408c]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [0x494090]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
add edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x24]
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x50
push edx
call fcn.004638b0
add esp, 0x10
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x10]
mov ecx, dword [ebp - 0x6c]
lea edx, [ecx + eax*4]
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x1c], 0
je case.default.0x45dad2
mov dword [ebp - 0x4c], 0
jmp 0x45de40
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4c]
cmp eax, dword [edx + 0x10]
jge case.default.0x45dad2
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x88]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x5c]
cmp edx, dword [ecx + 0xc]
jge 0x45e09c
mov eax, dword [ebp - 0x18]
movzx cx, byte [eax]
mov word [ebp - 0x30], cx
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
movzx eax, word [ebp - 0x30]
and eax, 0x3f
mov word [ebp - 0x24], ax
movzx ecx, word [ebp - 0x30]
and ecx, 0x40
je 0x45debb
movzx edx, word [ebp - 0x24]
shl edx, 8
mov eax, dword [ebp - 0x18]
movzx ecx, byte [eax]
or edx, ecx
mov word [ebp - 0x24], dx
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
movzx eax, word [ebp - 0x24]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x5c], eax
movzx ecx, word [ebp - 0x30]
and ecx, 0x80
je 0x45dfaa
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 0x18]
movzx eax, byte [ecx + eax]
mov edx, 1
imul ecx, edx, 3
mov edx, dword [ebp - 0x18]
movzx ecx, byte [edx + ecx]
imul eax, ecx
cdq
mov ecx, 0xff
idiv ecx
mov edx, 1
imul ecx, edx, 0
mov edx, dword [ebp - 0x18]
mov byte [edx + ecx], al
mov eax, 1
shl eax, 0
mov ecx, dword [ebp - 0x18]
movzx eax, byte [ecx + eax]
mov edx, 1
imul ecx, edx, 3
mov edx, dword [ebp - 0x18]
movzx ecx, byte [edx + ecx]
imul eax, ecx
cdq
mov ecx, 0xff
idiv ecx
mov edx, 1
shl edx, 0
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edx], al
mov edx, 1
shl edx, 1
mov eax, dword [ebp - 0x18]
movzx eax, byte [eax + edx]
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x18]
movzx edx, byte [ecx + edx]
imul eax, edx
cdq
mov ecx, 0xff
idiv ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edx], al
mov edx, 1
imul eax, edx, 3
mov ecx, dword [ebp - 0x18]
movzx edx, byte [ecx + eax]
mov eax, 0xff
sub eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edx], al
mov edx, dword [ebp - 0x18]
add edx, 4
mov dword [ebp - 0x18], edx
jmp 0x45e097
movzx eax, word [ebp - 0x24]
mov cx, word [ebp - 0x24]
sub cx, 1
mov word [ebp - 0x24], cx
test eax, eax
je 0x45e097
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 0x18]
movzx eax, byte [ecx + eax]
mov edx, 1
imul ecx, edx, 3
mov edx, dword [ebp - 0x18]
movzx ecx, byte [edx + ecx]
imul eax, ecx
cdq
mov ecx, 0xff
idiv ecx
mov edx, 1
imul ecx, edx, 0
mov edx, dword [ebp - 0x18]
mov byte [edx + ecx], al
mov eax, 1
shl eax, 0
mov ecx, dword [ebp - 0x18]
movzx eax, byte [ecx + eax]
mov edx, 1
imul ecx, edx, 3
mov edx, dword [ebp - 0x18]
movzx ecx, byte [edx + ecx]
imul eax, ecx
cdq
mov ecx, 0xff
idiv ecx
mov edx, 1
shl edx, 0
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edx], al
mov edx, 1
shl edx, 1
mov eax, dword [ebp - 0x18]
movzx eax, byte [eax + edx]
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x18]
movzx edx, byte [ecx + edx]
imul eax, edx
cdq
mov ecx, 0xff
idiv ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edx], al
mov edx, 1
imul eax, edx, 3
mov ecx, dword [ebp - 0x18]
movzx edx, byte [ecx + eax]
mov eax, 0xff
sub eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edx], al
mov edx, dword [ebp - 0x18]
add edx, 4
mov dword [ebp - 0x18], edx
jmp 0x45dfaa
jmp 0x45de68
jmp 0x45de37
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x10]
push edx
call fcn.0045bdf0
add esp, 8
jmp 0x45e202
push 4
push str.cJPG
mov eax, dword [ebp - 0x10]
push eax
call fcn.004755fe
add esp, 0xc
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x45e202
imul ecx, dword [ebp - 0x40], 0x48
mov edx, dword [ebp - 0x1c]
add ecx, dword [edx + 4]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 0x1c], 0
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + 0x14]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + 0x16]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 8], eax
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + 0x18]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + 0x1a]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + 0x10]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 0x14], eax
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + 0x12]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 0x18], eax
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [edx + 0xc]
imul ecx, dword [eax + 0x10]
shl ecx, 2
push ecx
push 0x40
call dword [0x49408c]
mov edx, dword [ebp - 0x20]
mov dword [edx], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push ecx
call dword [0x494090]
mov edx, dword [ebp - 0x20]
mov dword [edx + 0x24], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.00473f45
add esp, 4
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
add edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x50
push ecx
call fcn.004638b0
add esp, 0x10
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x44]
push eax
call fcn.004625c0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 0x24]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0xc]
push eax
call fcn.00463b60
add esp, 0x14
mov ecx, dword [ebp - 0x44]
push ecx
call fcn.00473f0d
add esp, 4
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x10], edx
jmp 0x45d9bf
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8