Function at 0x4f6171
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x18
call fcn.005be443
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 6
rep stosd dword es:[edi], eax
add ebx, 8
push ebx
push 0x10
call fcn.005be443
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
pop ebx
add ebx, 0xc
push ebx
push 0x28
call fcn.005be443
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x2f8d9
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0x24
call fcn.005be443
add esp, 4
mov dword [ebp - 0x10], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 9
rep stosd dword es:[edi], eax
add ebx, 0x1c
push ebx
push 0x10
call fcn.005be443
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
pop ebx
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push 0xc
call fcn.005be443
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
cmp dword [ebp + 0xc], 0x18
jne 0x4f6416
cmp dword [ebp + 0x10], 1
jne 0x4f6411
mov dword [ebp - 0x20], esp
push 0x2ec12
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f62bf
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [ebp - 0x24]
mov eax, 0x44
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f62f0
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 0x2f811
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6317
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], esp
push 0x2f7c6
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6341
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 8], eax
mov ebx, dword [0xc4]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 4]
dec eax
jns 0x4f6364
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f6377
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x11c]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x4f639e
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f63b1
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x4f63e1
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.004f7b7d
mov dword [ebp - 0x20], esp
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
mov eax, 0x45
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f640c
push 6
call fcn.005be449
add esp, 4
jmp 0x4f7b21
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 3
jne 0x4f65c2
mov dword [ebp - 0x20], esp
push 0x2f811
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6447
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], esp
push 0x2f7c6
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6471
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 8], eax
mov ebx, dword [0xc4]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 4]
dec eax
jns 0x4f6494
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f64a7
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x11c]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x4f64ce
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f64e1
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x4f6587
mov ebx, dword [0xc4]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 4]
dec eax
jns 0x4f651a
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f652d
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x11c]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x4f6554
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f6567
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
cmp byte [ebx], 0xff
je 0x4f6587
mov eax, 1
jmp 0x4f6589
xor eax, eax
test eax, eax
je 0x4f65bd
mov dword [ebp - 0x20], esp
push 0
push 0
push dword [ebp + 8]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f65bd
push 6
call fcn.005be449
add esp, 4
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0xf
jne 0x4f6a57
mov dword [ebp - 0x20], esp
push 0x2f811
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f65f3
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], esp
push 0x2f7c6
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f661d
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 8], eax
mov ebx, dword [0xc4]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 4]
dec eax
jns 0x4f6640
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f6653
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x11c]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x4f667a
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f668d
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x4f6a52
mov dword [ebp - 0x20], esp
mov eax, dword [ebp - 0xc]
push eax
push 0x40
call fcn.005be443
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x20
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push dword [ebp + 8]
mov eax, 0x48
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6750
push 6
call fcn.005be449
add esp, 4
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov edi, dword [ebp - 0x28]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x10
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.005be437
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4f67e6
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4f67e4
imul eax, dword [edi]
jmp 0x4f67d9
mov ecx, eax
cmp ecx, 0x20
jle 0x4f67f0
mov ecx, 0x20
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x20
call fcn.005be43d
add esp, 4
pop eax
mov ebx, dword [0xc4]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 4]
dec eax
jns 0x4f6825
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f6838
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x11c]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x4f685f
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f6872
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x4f6a07
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ebx
push 1
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.004f7b7d
mov dword [ebp - 0x20], esp
mov eax, dword [ebp - 0xc]
push eax
push 0x40
call fcn.005be443
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x20
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push dword [ebp + 8]
mov eax, 0x49
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f694d
push 6
call fcn.005be449
add esp, 4
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov edi, dword [ebp - 0x28]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x10
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.005be437
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4f69e3
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4f69e1
imul eax, dword [edi]
jmp 0x4f69d6
mov ecx, eax
cmp ecx, 0x20
jle 0x4f69ed
mov ecx, 0x20
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x20
call fcn.005be43d
add esp, 4
pop eax
jmp 0x4f6a22
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ebx
push 1
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push dword [ebp + 8]
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.004fad56
mov dword [ebp - 0x20], esp
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
mov eax, 0x45
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6a4d
push 6
call fcn.005be449
add esp, 4
jmp 0x4f7b21
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0x14
jne 0x4f6b71
mov dword [ebp - 0x20], esp
push 0x2f811
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6a88
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], esp
push 0x2f7c6
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6ab2
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 8], eax
mov ebx, dword [0xc4]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 4]
dec eax
jns 0x4f6ad5
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f6ae8
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x11c]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x4f6b0f
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f6b22
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x4f6b6c
mov dword [ebp - 0x20], esp
push 1
push dword [ebp + 0x10]
mov eax, 0x46
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6b62
push 6
call fcn.005be449
add esp, 4
mov eax, 1
jmp 0x4f7b21
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0x2b
jne 0x4f6d63
mov dword [ebp - 0x20], esp
push 0x2f811
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6ba2
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], esp
push 0x2f7c6
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6bcc
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0x20], esp
mov eax, 0x66
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6bee
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push 0
push 0x30
mov eax, dword [ebp - 0x10]
push eax
push 0x30
call fcn.005be443
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp + 0x14]
push dword [ebp - 0x24]
mov eax, 0x67
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f6cba
push 6
call fcn.005be449
add esp, 4
push eax
mov ebx, dword [ebp - 0x2c]
push ebx
mov edi, dword [ebp - 0x30]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x10
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.005be43d
add esp, 4
pop eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
call fcn.004fb476
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0x133
jne 0x4f6f9d
mov dword [ebp - 0x20], esp
push dword [ebp + 0x14]
mov eax, 0x4e
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6d92
push 6
call fcn.005be449
add esp, 4
push eax
call fcn.004c8770
mov dword [ebp - 0x28], eax
push 0x31895
push dword [ebp - 0x28]
call fcn.004c0933
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4f6dc9
push ebx
call fcn.005be43d
add esp, 4
cmp dword [ebp - 0x2c], 0
je 0x4f6df4
cmp dword [0x84], 0
je 0x4f6df4
cmp dword [0xcc], 0
je 0x4f6df4
mov eax, 1
jmp 0x4f6df6
xor eax, eax
test eax, eax
je 0x4f6f98
mov dword [ebp - 0x20], esp
push 0x2f8d1
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6e25
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
push dword [ebp + 0x10]
mov eax, 0x47
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f6e4d
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 1
push dword [ebp + 0x10]
mov eax, 0x46
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6e74
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 0x3189e
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6e9b
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
mov eax, 0x38
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f6ec0
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 0x318a6
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6ee7
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
mov eax, 0x38
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f6f0c
push 6
call fcn.005be449
add esp, 4
push dword [ebp + 0x14]
call fcn.004e05a8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], esp
push dword [ebp - 0x14]
mov eax, 0x57
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6f39
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], esp
push dword [ebp - 0x18]
push 0x3189e
push dword [ebp + 0x14]
mov eax, 0x3b
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6f66
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push dword [ebp - 0x14]
push 0x318a6
push dword [ebp + 0x14]
mov eax, 0x3b
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6f90
push 6
call fcn.005be449
add esp, 4
mov eax, dword [ebp - 0x18]
jmp 0x4f7b21
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0x138
jne 0x4f7174
cmp dword [0x84], 0
je 0x4f6fcb
cmp dword [0xcc], 0
je 0x4f6fcb
mov eax, 1
jmp 0x4f6fcd
xor eax, eax
test eax, eax
je 0x4f716f
mov dword [ebp - 0x20], esp
push 0x2f8d1
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f6ffc
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
push dword [ebp + 0x10]
mov eax, 0x47
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f7024
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 1
push dword [ebp + 0x10]
mov eax, 0x46
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f704b
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 0x3189e
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7072
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
mov eax, 0x38
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f7097
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 0x318a6
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f70be
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
mov eax, 0x38
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f70e3
push 6
call fcn.005be449
add esp, 4
push dword [ebp + 0x14]
call fcn.004e05a8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], esp
push dword [ebp - 0x14]
mov eax, 0x57
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7110
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], esp
push dword [ebp - 0x18]
push 0x3189e
push dword [ebp + 0x14]
mov eax, 0x3b
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f713d
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push dword [ebp - 0x14]
push 0x318a6
push dword [ebp + 0x14]
mov eax, 0x3b
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7167
push 6
call fcn.005be449
add esp, 4
mov eax, dword [ebp - 0x18]
jmp 0x4f7b21
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0x134
jne 0x4f7324
cmp dword [0x84], 0
je 0x4f71fa
push dword [ebp + 0x14]
call fcn.004c8770
mov dword [ebp - 0x20], eax
push 0x319a3
push dword [ebp - 0x20]
call fcn.004c0933
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4f71c7
push ebx
call fcn.005be43d
add esp, 4
cmp dword [ebp - 0x24], 0
je 0x4f71fa
push dword [ebp + 0x14]
call fcn.004ea42a
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x4f71fa
cmp dword [0xcc], 0
je 0x4f71fa
mov eax, 1
jmp 0x4f71fc
xor eax, eax
test eax, eax
je 0x4f731f
mov dword [ebp - 0x20], esp
push 0x2f8d1
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f722b
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
push dword [ebp + 0x10]
mov eax, 0x47
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f7253
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 1
push dword [ebp + 0x10]
mov eax, 0x46
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f727a
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 0x3189e
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f72a1
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
mov eax, 0x38
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f72c6
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 5
mov eax, 0x68
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f72ea
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], esp
push dword [ebp - 0x18]
push 0x3189e
push dword [ebp + 0x14]
mov eax, 0x3b
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7317
push 6
call fcn.005be449
add esp, 4
mov eax, dword [ebp - 0x18]
jmp 0x4f7b21
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0x135
jne 0x4f747c
cmp dword [0x84], 0
je 0x4f7352
cmp dword [0xcc], 0
je 0x4f7352
mov eax, 1
jmp 0x4f7354
xor eax, eax
test eax, eax
je 0x4f7477
mov dword [ebp - 0x20], esp
push 0x2f8d1
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7383
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
push dword [ebp + 0x10]
mov eax, 0x47
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f73ab
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 1
push dword [ebp + 0x10]
mov eax, 0x46
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f73d2
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 0x3189e
push dword [ebp + 0x14]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f73f9
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp - 0x24]
mov eax, 0x38
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f741e
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 5
mov eax, 0x68
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7442
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], esp
push dword [ebp - 0x18]
push 0x3189e
push dword [ebp + 0x14]
mov eax, 0x3b
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f746f
push 6
call fcn.005be449
add esp, 4
mov eax, dword [ebp - 0x18]
jmp 0x4f7b21
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 5
jne 0x4f756d
mov dword [ebp - 0x20], esp
push 0x2f811
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f74ad
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], esp
push 0x2f7c6
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f74d7
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 8], eax
mov ebx, dword [0xc4]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 4]
dec eax
jns 0x4f74fa
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f750d
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x11c]
call fcn.004c0a97
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x4f7534
push 4
call fcn.005be449
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f7547
push 1
call fcn.005be449
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
mov dword [ebx], 1
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.004fb8d9
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0x85
jne 0x4f757f
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0x111
jne 0x4f79bc
cmp dword [0xcc], 0
je 0x4f75ad
cmp dword [0x84], 0
je 0x4f75ad
mov eax, 1
jmp 0x4f75af
xor eax, eax
test eax, eax
je 0x4f79b7
push dword [ebp + 0x14]
call fcn.004c8770
mov dword [ebp - 0x20], eax
push 0x31890
push dword [ebp - 0x20]
call fcn.004c0933
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4f75f0
push ebx
call fcn.005be43d
add esp, 4
cmp dword [ebp - 0x24], 0
je 0x4f779e
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp + 0x10]
push 2
mov ebx, 0x9fc
call fcn.005be455
add esp, 0x1c
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x602
jne 0x4f7663
mov dword [ebp - 0x20], esp
push 1
push 0
push dword [ebp + 0x14]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f765e
push 6
call fcn.005be449
add esp, 4
jmp 0x4f7799
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp + 0x10]
push 2
mov ebx, 0x9fc
call fcn.005be455
add esp, 0x1c
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x601
jne 0x4f76cc
mov dword [ebp - 0x20], esp
push 1
push 0
push dword [ebp + 0x14]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f76c7
push 6
call fcn.005be449
add esp, 4
jmp 0x4f7799
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp + 0x10]
push 2
mov ebx, 0x9fc
call fcn.005be455
add esp, 0x1c
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x300
jne 0x4f7735
mov dword [ebp - 0x20], esp
push 1
push 0
push dword [ebp + 0x14]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7730
push 6
call fcn.005be449
add esp, 4
jmp 0x4f7799
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp + 0x10]
push 2
mov ebx, 0x9fc
call fcn.005be455
add esp, 0x1c
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x400
jne 0x4f7799
mov dword [ebp - 0x20], esp
push 1
push 0
push dword [ebp + 0x14]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7799
push 6
call fcn.005be449
add esp, 4
jmp 0x4f79b7
push dword [ebp + 0x14]
call fcn.004c8770
mov dword [ebp - 0x20], eax
push 0x319a3
push dword [ebp - 0x20]
call fcn.004c0933
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4f77d7
push ebx
call fcn.005be43d
add esp, 4
cmp dword [ebp - 0x24], 0
je 0x4f78ad
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp + 0x10]
push 2
mov ebx, 0x9fc
call fcn.005be455
add esp, 0x1c
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jne 0x4f7847
mov dword [ebp - 0x20], esp
push 1
push 0
push dword [ebp + 0x14]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7842
push 6
call fcn.005be449
add esp, 4
jmp 0x4f78a8
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp + 0x10]
push 2
mov ebx, 0x9fc
call fcn.005be455
add esp, 0x1c
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jne 0x4f78a8
mov dword [ebp - 0x20], esp
push 1
push 0
push dword [ebp + 0x14]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f78a8
push 6
call fcn.005be449
add esp, 4
jmp 0x4f79b7
push dword [ebp + 0x14]
call fcn.004c8770
mov dword [ebp - 0x20], eax
push 0x31895
push dword [ebp - 0x20]
call fcn.004c0933
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4f78e6
push ebx
call fcn.005be43d
add esp, 4
cmp dword [ebp - 0x24], 0
je 0x4f79b7
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp + 0x10]
push 2
mov ebx, 0x9fc
call fcn.005be455
add esp, 0x1c
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jne 0x4f7956
mov dword [ebp - 0x20], esp
push 1
push 0
push dword [ebp + 0x14]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7951
push 6
call fcn.005be449
add esp, 4
jmp 0x4f79b7
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp + 0x10]
push 2
mov ebx, 0x9fc
call fcn.005be455
add esp, 0x1c
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jne 0x4f79b7
mov dword [ebp - 0x20], esp
push 1
push 0
push dword [ebp + 0x14]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f79b7
push 6
call fcn.005be449
add esp, 4
jmp 0x4f7ac4
cmp dword [ebp + 0xc], 0x4e
jne 0x4f7ac4
mov dword [ebp - 0x20], esp
mov eax, 0x69
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f79e5
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push 0
push 0xc
push dword [ebp - 0x1c]
push dword [ebp + 0x14]
push dword [ebp - 0x24]
mov eax, 0x6a
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f7a1a
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x4f7ac4
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0xfffffe6a
jne 0x4f7a78
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], esp
push 1
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x24], esp
je 0x4f7a73
push 6
call fcn.005be449
add esp, 4
jmp 0x4f7ac4
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
cmp dword [ebx], 0xfffffe6b
jne 0x4f7ac4
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], esp
push 1
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
mov eax, 0x43
call fcn.005be44f
cmp dword [ebp - 0x24], esp
je 0x4f7ac4
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x20], esp
push 0x2ec12
push dword [ebp + 8]
mov eax, 0x31
call fcn.005be44f
cmp dword [ebp - 0x20], esp
je 0x4f7aeb
push 6
call fcn.005be449
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esp
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [ebp - 0x24]
mov eax, 0x44
call fcn.005be44f
cmp dword [ebp - 0x28], esp
je 0x4f7b1c
push 6
call fcn.005be449
add esp, 4
jmp 0x4f7b21
push eax
mov ebx, dword [ebp - 0xc]
push ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.005be43d
add esp, 4
pop ebx
add ebx, 0xc
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.005be43d
add esp, 4
pop ebx
call fcn.005be43d
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
add ebx, 0x1c
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.005be43d
add esp, 4
pop ebx
call fcn.005be43d
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.005be43d
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10