Function at 0x4c156f
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x88
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402da0
mov dword [ebp - 0x8c], 0x40a6cc
mov dword [ebp - 0x94], 8
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x44]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xcc
jne 0x4c1796
mov dword [ebp - 0x8c], 0x40f7a8
mov dword [ebp - 0x94], 8
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x4c1964
mov word [0x5210dc], ax
lea eax, [ebp - 0x64]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
lea ecx, [ebp - 0x64]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x8c], al
mov dword [ebp - 0x94], 0x11
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x94], 0x8002
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4c1764
mov dword [ebp - 0x8c], 0x40bf4c
mov dword [ebp - 0x94], 8
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x4c1964
mov word [0x5210dc], ax
lea eax, [ebp - 0x64]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
lea ecx, [ebp - 0x64]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x8c], al
mov dword [ebp - 0x94], 0x11
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x54]
call fcn.004048d4
jmp 0x4c1689
mov dword [ebp - 0x8c], 0x40bffc
mov dword [ebp - 0x94], 8
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
mov dword [ebp - 0x8c], 0x40a6cc
mov dword [ebp - 0x94], 8
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x24]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xcd
jne 0x4c187f
mov dword [ebp - 0x8c], 0x40f638
mov dword [ebp - 0x94], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x4c1964
mov word [0x5210dc], ax
lea eax, [ebp - 0x64]
push eax
call fcn.00444aa2
mov dword [ebp - 0x8c], 0x40bffc
mov dword [ebp - 0x94], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x64]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xea
jne 0x4c18b2
mov ax, word [0x5210dc]
add ax, 1
jo 0x4c1964
mov word [0x5210dc], ax
mov dword [ebp - 0x8c], 0x4109ac
mov dword [ebp - 0x94], 8
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x34]
call fcn.004048d4
lea ecx, [ebp - 0x64]
call fcn.00404844
push 0x4c1946
jmp 0x4c192d
lea ecx, [ebp - 0x24]
call fcn.00404844
lea ecx, [ebp - 0x44]
call fcn.00404844
lea ecx, [ebp - 0x54]
call fcn.00404844
ret
call fcn.0040477e