Function at 0x4cfa54
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x11
push 0
push 0
dec ecx
jne 0x4cfa5d
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 0xc]
call fcn.00404f04
mov eax, dword [ebp + 0xc]
call fcn.00404f04
xor eax, eax
push ebp
push 0x4d08b9
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x38]
push eax
xor ecx, ecx
mov cl, byte [ebx + 0x4fc213]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x43f5a4]
call fcn.0043f98c
mov eax, dword [ebp - 0x38]
mov edx, 0x4d08d4
call fcn.00404e60
sete byte [ebp - 0xd]
push 0
lea eax, [ebp - 0x18]
push eax
xor ecx, ecx
mov cl, byte [ebx + 0x4fc217]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x43f5a4]
call fcn.0043f98c
push 0
lea eax, [ebp - 0x1c]
push eax
xor ecx, ecx
mov cl, byte [ebx + 0x4fc21b]
mov edx, dword [ebp + 0xc]
mov eax, dword [0x43f5a4]
call fcn.0043f98c
push 0
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov cl, byte [ebx + 0x4fc21f]
mov edx, dword [ebp + 0xc]
mov eax, dword [0x43f5a4]
call fcn.0043f98c
push 0
lea eax, [ebp - 0x24]
push eax
xor ecx, ecx
mov cl, byte [ebx + 0x4fc223]
mov edx, dword [ebp + 0xc]
mov eax, dword [0x43f5a4]
call fcn.0043f98c
mov eax, dword [ebp - 0x18]
call fcn.004cc6c8
mov esi, eax
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004bc904
mov eax, dword [ebp - 0x28]
cmp byte [eax], 0x30
sete al
push eax
push 1
lea eax, [ebp - 0x3c]
push eax
mov cl, 1
mov edx, 0x4d08e0
mov eax, dword [ebp - 0x1c]
call fcn.004a049c
mov edx, dword [ebp - 0x3c]
lea eax, [ebp - 0x1c]
call fcn.00404aec
mov eax, dword [ebp - 0x28]
cmp byte [eax + 1], 0x30
sete al
push eax
push 1
lea eax, [ebp - 0x40]
push eax
mov cl, 1
mov edx, 0x4d08e0
mov eax, dword [ebp - 0x24]
call fcn.004a049c
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0x24]
call fcn.00404aec
xor ebx, ebx
mov eax, esi
call fcn.004bc78c
mov edi, eax
mov eax, edi
cmp eax, 0x25a
jg 0x4cfd39
je 0x4d02cc
cmp eax, 0x136
jg 0x4cfc62
je 0x4d0160
cmp eax, 0xcc
jg 0x4cfc29
je 0x4cffca
cmp eax, 0x6a
jg 0x4cfc04
je 0x4cff5b
add eax, 0xffffff9b
cmp eax, 4
ja case.0x4cfe63.808
jmp dword [eax*4 + 0x4cfbf0]
sub eax, 0x6b
je 0x4cff6d
sub eax, 0x5e
je 0x4cff7c
dec eax
je 0x4cff93
dec eax
je 0x4cffaa
jmp case.0x4cfe63.808
add eax, 0xfffffed3
cmp eax, 8
ja case.0x4cfe63.808
jmp dword [eax*4 + 0x4cfc3e]
cmp eax, 0x1f5
jg 0x4cfce0
je 0x4d0227
cmp eax, 0x192
jg 0x4cfcb9
je 0x4d01c3
cmp eax, 0x139
jg 0x4cfca0
je 0x4d0193
sub eax, 0x137
je 0x4d0175
dec eax
je 0x4d0181
jmp case.0x4cfe63.808
sub eax, 0x13a
je 0x4d01a2
sub eax, 0x57
je 0x4d01b4
jmp case.0x4cfe63.808
sub eax, 0x193
je 0x4d01d5
sub eax, 8
je 0x4d01ea
dec eax
je 0x4d01f9
dec eax
je 0x4d0210
jmp case.0x4cfe63.808
cmp eax, 0x209
jg 0x4cfd12
je 0x4d0284
sub eax, 0x1f6
je 0x4d0239
dec eax
je 0x4d024b
dec eax
je 0x4d025d
dec eax
je 0x4d026f
jmp case.0x4cfe63.808
sub eax, 0x20a
je 0x4d0290
sub eax, 0x4d
je 0x4d029c
dec eax
je 0x4d02ae
dec eax
je 0x4d02bd
jmp case.0x4cfe63.808
cmp eax, 0x2bf
jg 0x4cfded
je 0x4d04ae
cmp eax, 0x265
jg 0x4cfd94
je 0x4d0383
add eax, 0xfffffda5
cmp eax, 9
ja case.0x4cfe63.808
jmp dword [eax*4 + 0x4cfd6c]
cmp eax, 0x26a
jg 0x4cfdc6
je 0x4d03dd
sub eax, 0x266
je 0x4d0395
dec eax
je 0x4d03a7
dec eax
je 0x4d03b9
dec eax
je 0x4d03cb
jmp case.0x4cfe63.808
sub eax, 0x26b
je 0x4d03ef
dec eax
je 0x4d0401
sub eax, 0x51
je 0x4d0410
dec eax
je 0x4d0460
jmp case.0x4cfe63.808
cmp eax, 0x322
jg 0x4cfe55
je 0x4d05f6
cmp eax, 0x2cd
jg 0x4cfe2e
je 0x4d0526
sub eax, 0x2c0
je 0x4d04bd
dec eax
je 0x4d04cc
dec eax
je 0x4d04d8
sub eax, 0xa
je 0x4d0500
jmp case.0x4cfe63.808
sub eax, 0x2ce
je 0x4d054c
dec eax
je 0x4d05b6
dec eax
je 0x4d05cf
sub eax, 0x51
je 0x4d05e1
jmp case.0x4cfe63.808
add eax, 0xfffffcdd
cmp eax, 0x1f
ja case.0x4cfe63.808
jmp dword [eax*4 + 0x4cfe6a]
mov eax, dword [ebp - 0x1c]
call fcn.00409d68
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.0048ed58
mov ebx, eax
jmp case.0x4cfe63.808
lea eax, [ebp - 0x44]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00404f74
lea eax, [ebp - 0x44]
mov edx, 0x4d08ec
call fcn.00404d1c
mov eax, dword [ebp - 0x44]
call fcn.0048ed58
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.004cd0cc
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004b9db8
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.004cd234
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004383ac
mov ebx, eax
jmp case.0x4cfe63.808
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 0x1c]
call fcn.00498808
cmp dword [ebp - 0x48], 0
setne bl
jmp case.0x4cfe63.808
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x1c]
call fcn.004988e0
cmp dword [ebp - 0x4c], 0
setne bl
jmp case.0x4cfe63.808
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 0x1c]
call fcn.00498808
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
call fcn.004cc9f0
mov ebx, eax
jmp case.0x4cfe63.808
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
call fcn.00498808
mov eax, dword [ebp - 0x54]
call fcn.0043d2d4
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.0043d2d4
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004ca444
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004ca3c4
mov ebx, eax
jmp case.0x4cfe63.808
push 0x4d08f8
lea edx, [ebp - 0x5c]
xor eax, eax
call fcn.00433284
push dword [ebp - 0x5c]
push 0x4d08f8
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.00404dd4
mov eax, dword [ebp - 0x58]
push eax
push 0x4d08f8
push dword [ebp - 0x1c]
push 0x4d08f8
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00404dd4
mov edx, dword [ebp - 0x60]
pop eax
call fcn.00405058
test eax, eax
setg bl
jmp case.0x4cfe63.808
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004cc9f0
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.004cce50
mov ebx, eax
jmp case.0x4cfe63.808
push 0x4d08f8
push dword [ebp - 0x1c]
push 0x4d08f8
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.00404dd4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x4fdf58]
mov eax, dword [eax]
call fcn.004cb524
test al, al
jne 0x4d00ef
push 0x4d08f8
push dword [ebp - 0x1c]
push 0x4d08f8
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.00404dd4
mov edx, dword [ebp - 0x68]
mov eax, dword [0x4fdf58]
mov eax, dword [eax + 4]
call fcn.004cb524
test al, al
jne 0x4d00ef
xor ebx, ebx
jmp case.0x4cfe63.808
mov bl, 1
jmp case.0x4cfe63.808
push 0x4d08f8
lea edx, [ebp - 0x70]
xor eax, eax
call fcn.004aae1c
push dword [ebp - 0x70]
push 0x4d08f8
lea eax, [ebp - 0x6c]
mov edx, 3
call fcn.00404dd4
mov eax, dword [ebp - 0x6c]
push eax
push 0x4d08f8
push dword [ebp - 0x1c]
push 0x4d08f8
lea eax, [ebp - 0x74]
mov edx, 3
call fcn.00404dd4
mov edx, dword [ebp - 0x74]
pop eax
call fcn.004313e0
test eax, eax
setg bl
jmp case.0x4cfe63.808
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004cca98
mov ebx, eax
jmp case.0x4cfe63.808
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004ccb44
mov ebx, eax
jmp case.0x4cfe63.808
call fcn.004b9b38
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ccddc
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004c5e60
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.0049c454
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.00498b8c
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.00498be0
mov ebx, eax
jmp case.0x4cfe63.808
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004cc754
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004cc990
mov ebx, eax
jmp case.0x4cfe63.808
push 0
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004cc8c4
mov ebx, eax
jmp case.0x4cfe63.808
push 1
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004cc8c4
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cd62c
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cd5b8
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cd73c
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cd988
mov ebx, eax
jmp case.0x4cfe63.808
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004cd6a0
mov ebx, eax
jmp case.0x4cfe63.808
call fcn.00432a14
mov ebx, eax
jmp case.0x4cfe63.808
call fcn.0042f398
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cdad8
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.0043482c
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004cf008
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ce0d4
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cf1ec
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cea54
mov ebx, eax
jmp case.0x4cfe63.808
call fcn.004c27e4
mov ebx, eax
jmp case.0x4cfe63.808
call fcn.004cf28c
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ce7d0
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ced1c
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cedbc
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cee5c
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004cdd3c
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cdc00
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ceefc
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ce928
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ce588
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004cde94
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ce2d4
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ce350
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004ce4e8
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.00497220
mov ebx, eax
jmp case.0x4cfe63.808
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x4d0904
mov edx, 0x4d0904
mov eax, 0x4d0914
call fcn.004aaed0
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x4d0924
mov edx, 0x4d095c
mov eax, 0x4d0914
call fcn.004aaed0
mov eax, dword [ebp - 0x30]
push eax
call fcn.004aae0c
push eax
push 0
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x1c]
xor eax, eax
call fcn.0043120c
mov ebx, eax
jmp case.0x4cfe63.808
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x4d0904
mov edx, 0x4d0904
mov eax, 0x4d0914
call fcn.004aaed0
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x4d0924
mov edx, 0x4d095c
mov eax, 0x4d0914
call fcn.004aaed0
mov eax, dword [ebp - 0x30]
push eax
call fcn.004aae0c
push eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x1c]
xor eax, eax
call fcn.004312ac
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004cf370
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004cf420
mov ebx, eax
jmp case.0x4cfe63.808
call fcn.004a20f0
mov ebx, eax
jmp case.0x4cfe63.808
push 0
lea eax, [ebp - 0x78]
push eax
xor ecx, ecx
xor edx, edx
mov eax, 0x4d096c
call fcn.004cb724
mov eax, dword [ebp - 0x78]
mov edx, 0x4d0988
call fcn.00431348
mov ebx, eax
jmp case.0x4cfe63.808
push 0
lea eax, [ebp - 0x7c]
push eax
xor ecx, ecx
xor edx, edx
mov eax, 0x4d0998
call fcn.004cb724
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x1c]
call fcn.00431348
mov ebx, eax
jmp case.0x4cfe63.808
push 0
lea eax, [ebp - 0x80]
push eax
xor ecx, ecx
xor edx, edx
mov eax, 0x4d09ac
call fcn.004cb724
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1c]
call fcn.00431348
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, 0x4d09c0
mov eax, dword [ebp - 0x24]
call fcn.00431348
test al, al
je 0x4d058a
push 0
lea eax, [ebp - 0x84]
push eax
xor ecx, ecx
xor edx, edx
mov eax, 0x4d09d8
call fcn.004cb724
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x1c]
call fcn.00404e60
sete bl
jmp case.0x4cfe63.808
push 0
lea eax, [ebp - 0x88]
push eax
xor ecx, ecx
xor edx, edx
mov eax, 0x4d09d8
call fcn.004cb724
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x1c]
call fcn.00431348
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, 0x4d0988
mov eax, dword [ebp - 0x1c]
call fcn.00431348
call fcn.0049c0d0
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.004cf4d0
mov ebx, eax
jmp case.0x4cfe63.808
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004cc2c0
mov ebx, eax
jmp case.0x4cfe63.808
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004cc350
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.004cc3fc
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.004cc484
mov ebx, eax
jmp case.0x4cfe63.808
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
call fcn.004cc50c
mov ebx, eax
jmp case.0x4cfe63.808
mov eax, dword [ebp - 0x1c]
call fcn.004cc5b0
mov ebx, eax
jmp case.0x4cfe63.808
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004cc628
mov ebx, eax
jmp case.0x4cfe63.808
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4d09ec
mov edx, dword [ebp - 0x1c]
mov eax, 0x4d09fc
call fcn.004cb724
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
call fcn.004cba60
mov ebx, eax
jmp case.0x4cfe63.808
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4d09ec
mov edx, dword [ebp - 0x1c]
mov eax, 0x4d09fc
call fcn.004cb724
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 0x14]
call fcn.00409500
cmp dword [ebp - 0x8c], 0
sete bl
jmp case.0x4cfe63.808
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4d0a1c
mov edx, dword [ebp - 0x1c]
mov eax, 0x4d09fc
call fcn.004cb724
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.00409998
cdq
push edx
push eax
xor edx, edx
mov eax, dword [ebp - 0x24]
call fcn.00409998
cdq
push edx
push eax
mov eax, dword [ebp - 0x20]
call fcn.004cbcd4
mov ebx, eax
jmp case.0x4cfe63.808
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4d0a30
mov edx, dword [ebp - 0x1c]
mov eax, 0x4d09fc
call fcn.004cb724
mov edx, 0x4d0a40
mov eax, dword [ebp - 0x14]
call fcn.00431348
mov ebx, eax
inc edi
jne 0x4d073e
cmp dword [ebp - 8], 0
je 0x4d073e
mov eax, dword [ebp - 8]
call fcn.004b1774
test al, al
jne 0x4d0742
xor eax, eax
jmp 0x4d0744
mov al, 1
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x4d076b
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.004b206c
mov ebx, eax
cmp byte [ebp - 0xd], 0
je 0x4d0774
xor bl, 1
cmp byte [ebp - 0x31], 0
jne 0x4d07b3
mov eax, esi
call fcn.004bc8a0
test al, al
jne 0x4d078d
lea eax, [ebp - 0x1c]
call fcn.00404a54
mov eax, esi
call fcn.004bc8ac
test al, al
jne 0x4d07a0
lea eax, [ebp - 0x20]
call fcn.00404a54
mov eax, esi
call fcn.004bc8b8
test al, al
jne 0x4d07b3
lea eax, [ebp - 0x24]
call fcn.00404a54
lea eax, [ebp - 0x14]
mov edx, 0x4d0a50
call fcn.00404aec
cmp byte [ebp - 0xd], 0
je 0x4d07d3
lea eax, [ebp - 0x14]
mov edx, 0x4d0a60
call fcn.00404d1c
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push 0x4d0a70
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404dd4
cmp dword [ebp - 0x1c], 0
je 0x4d0809
push dword [ebp - 0x14]
push dword [ebp - 0x1c]
push 0x4d0a7c
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404dd4
cmp dword [ebp - 0x20], 0
je 0x4d0827
push dword [ebp - 0x14]
push dword [ebp - 0x20]
push 0x4d0a7c
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404dd4
cmp dword [ebp - 0x24], 0
je 0x4d0845
push dword [ebp - 0x14]
push dword [ebp - 0x24]
push 0x4d0a7c
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404dd4
push dword [ebp - 0x14]
push 0x4d0a88
lea edx, [ebp - 0x90]
cmp bl, 1
cmc
sbb eax, eax
call fcn.00431f44
push dword [ebp - 0x90]
push 0x4d0a94
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.00404dd4
mov eax, dword [ebp - 0x14]
call fcn.004cb870
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d08c0
lea eax, [ebp - 0x90]
mov edx, 0x17
call fcn.00404a78
lea eax, [ebp - 0x30]
mov edx, 8
call fcn.00404a78
lea eax, [ebp - 0xc]
call fcn.00404a54
lea eax, [ebp + 0xc]
call fcn.00404a54
ret