Function at 0x60518c
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x13
push 0
push 0
dec ecx
jne 0x605194
push ebx
xor eax, eax
push ebp
push 0x605c6d
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
mov word [ebp - 0x26], 0
call fcn.0049c968
mov edx, 0x2710
mov eax, 0x2710
call fcn.0049cc90
mov dl, 1
mov eax, dword [0x41ab08]
call fcn.00403c64
mov dword [ebp - 8], eax
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x14]
lea edx, [ebp - 0x44]
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.0049975c
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
call fcn.0040aed4
lea eax, [ebp - 0x40]
mov edx, 0x605c84
call fcn.00404dbc
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 8]
call fcn.00420ed8
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx]
mov word [ebp - 0x12], ax
call fcn.0049cc08
call fcn.0049cc4c
mov eax, dword [0x668f00]
mov byte [eax], 0x30
mov eax, dword [0x668f00]
inc eax
mov dx, word [ebp - 0x12]
mov word [eax], dx
mov eax, 3
call fcn.0049c908
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x60526e
cmp eax, 0x10000
jbe 0x60535a
jmp 0x605274
jle 0x60535a
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
test eax, eax
jns 0x60528a
add eax, 0xffff
sar eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
and eax, 0x8000ffff
jns 0x6052a1
dec eax
or eax, 0xffff0000
inc eax
test eax, eax
jle 0x6052a8
inc dword [ebp - 0x1c]
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov dword [ebp - 0x24], 0x10000
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0x1c]
dec eax
test eax, eax
jl 0x60537d
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 0
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0x1c]
dec eax
cmp eax, dword [ebp - 0x20]
jne 0x60532b
cmp dword [ebp - 0x1c], 1
jle 0x60532b
mov eax, dword [ebp - 0x18]
and eax, 0x8000ffff
jns 0x60530a
dec eax
or eax, 0xffff0000
inc eax
test eax, eax
jle 0x605324
mov eax, dword [ebp - 0x18]
and eax, 0x8000ffff
jns 0x60531f
dec eax
or eax, 0xffff0000
inc eax
mov dword [ebp - 0x24], eax
jmp 0x60532b
mov dword [ebp - 0x24], 0x10000
mov edx, dword [0x668f00]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
call fcn.00420704
mov eax, dword [ebp - 0x24]
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
inc dword [ebp - 0x20]
dec dword [ebp - 0x2c]
jne 0x6052de
jmp 0x60537d
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx]
mov ecx, eax
mov edx, dword [0x668f00]
mov eax, dword [ebp - 8]
call fcn.00420704
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx]
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 0xc8
call fcn.005965d8
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x668f00]
mov byte [eax], 0xfe
mov eax, 1
call fcn.0049c908
mov eax, 1
call fcn.0049c8a0
mov eax, dword [0x669488]
cmp byte [eax], 1
je 0x6053e3
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov edx, 0x605ca4
call fcn.0052fa8c
mov eax, dword [ebp - 8]
call fcn.00403c94
jmp 0x605c41
lea edx, [ebp - 0x4c]
mov eax, dword [0x669488]
mov al, byte [eax]
call fcn.0049b9a0
mov ecx, dword [ebp - 0x4c]
lea eax, [ebp - 0x48]
mov edx, 0x605cd4
call fcn.00404e00
mov edx, dword [ebp - 0x48]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, 1
call fcn.0049c8a0
mov eax, dword [ebp - 8]
call fcn.00403c94
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
call fcn.0049cc08
call fcn.0049cc4c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
push 0x64
call sub.KERNEL32.DLL_Sleep_1
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x668f00]
mov byte [eax], 0xb4
mov eax, dword [0x668f00]
mov byte [eax + 1], 1
mov eax, dword [0x668f00]
mov byte [eax + 2], 2
mov eax, dword [0x668f00]
mov byte [eax + 3], 0
mov eax, 4
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov edx, 0x605ce8
mov eax, 0x605cf8
call fcn.0058e6d0
test al, al
je 0x6054db
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov edx, 0x605d08
call fcn.0052fa8c
call fcn.0049c968
mov eax, dword [0x669648]
mov dword [eax], 0xe1000
call fcn.0049c9ac
call fcn.0049c968
call fcn.0049cc08
call fcn.0049cc4c
jmp 0x6054eb
mov eax, dword [0x669648]
mov dword [eax], 0xe1000
call fcn.0049c9ac
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x669488]
xor ecx, ecx
mov edx, 0xc8
call fcn.00408374
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 1
call fcn.0049c8a0
mov eax, dword [0x669488]
cmp byte [eax], 1
jne 0x605c41
mov eax, dword [0x6693ec]
call fcn.00404ae4
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 0x93
call fcn.0049c8a0
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
lea ecx, [ebp - 0x50]
mov eax, dword [0x669488]
mov edx, 0x93
call fcn.0049b85c
mov ecx, dword [ebp - 0x50]
mov eax, dword [0x6693ec]
mov edx, 0x605d20
call fcn.00404e00
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
lea ecx, [ebp - 0x5c]
mov eax, dword [0x669488]
add eax, 0x17
mov edx, 0xf
call fcn.0049b85c
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
call fcn.0049b9c4
mov ecx, dword [ebp - 0x58]
lea eax, [ebp - 0x54]
mov edx, 0x605d2c
call fcn.00404e00
mov edx, dword [ebp - 0x54]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov dl, 1
mov eax, dword [0x41ab08]
call fcn.00403c64
mov dword [ebp - 0xc], eax
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
lea edx, [ebp - 0x64]
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.0049975c
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x60]
call fcn.0040aed4
lea eax, [ebp - 0x60]
mov edx, 0x605d3c
call fcn.00404dbc
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0xc]
call fcn.00420ed8
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx]
mov word [ebp - 0x12], ax
mov eax, dword [0x668f00]
mov dx, word [ebp - 0x12]
mov word [eax], dx
mov eax, 2
call fcn.0049c908
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x605672
cmp eax, 0xa000
jbe 0x605748
jmp 0x605678
jle 0x605748
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, 0xa000
cdq
idiv ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov ecx, 0xa000
cdq
idiv ecx
test edx, edx
jle 0x6056a2
inc dword [ebp - 0x1c]
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov dword [ebp - 0x24], 0xa000
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0x1c]
dec eax
test eax, eax
jl 0x60576b
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 0
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0x1c]
dec eax
cmp eax, dword [ebp - 0x20]
jne 0x605719
cmp dword [ebp - 0x1c], 1
jle 0x605719
mov eax, dword [ebp - 0x18]
mov ecx, 0xa000
cdq
idiv ecx
test edx, edx
jle 0x605712
mov eax, dword [ebp - 0x18]
mov ecx, 0xa000
cdq
idiv ecx
mov dword [ebp - 0x24], edx
jmp 0x605719
mov dword [ebp - 0x24], 0xa000
mov edx, dword [0x668f00]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
call fcn.00420704
mov eax, dword [ebp - 0x24]
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
inc dword [ebp - 0x20]
dec dword [ebp - 0x2c]
jne 0x6056d8
jmp 0x60576b
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx]
mov ecx, eax
mov edx, dword [0x668f00]
mov eax, dword [ebp - 8]
call fcn.00420704
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx]
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 0x64
call fcn.005965d8
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x668f00]
mov byte [eax], 0x8e
mov eax, 1
call fcn.0049c908
mov eax, 1
call fcn.0049c8a0
mov eax, dword [0x669488]
cmp byte [eax], 0xff
je 0x6057bd
mov eax, dword [0x669488]
cmp byte [eax], 1
je 0x6057e7
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov edx, 0x605d5c
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0xc]
call fcn.00403c94
jmp 0x605c41
lea edx, [ebp - 0x6c]
mov eax, dword [0x669488]
mov al, byte [eax]
call fcn.0049b9a0
mov ecx, dword [ebp - 0x6c]
lea eax, [ebp - 0x68]
mov edx, 0x605d8c
call fcn.00404e00
mov edx, dword [ebp - 0x68]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0xc]
call fcn.00403c94
mov eax, 0x4c
call fcn.0049c8a0
mov eax, dword [0x669488]
cmp byte [eax], 0xcc
je 0x605886
push 0x605da0
lea edx, [ebp - 0x74]
mov eax, dword [0x669488]
mov al, byte [eax]
call fcn.0049b9a0
push dword [ebp - 0x74]
push 0x605dcc
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.00404e74
mov edx, dword [ebp - 0x70]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
jmp 0x605c41
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov edx, 0x605dd8
call fcn.0052fa8c
lea ecx, [ebp - 0x80]
mov eax, dword [0x669488]
add eax, 0xc
mov edx, 0x16
call fcn.0049b85c
mov eax, dword [ebp - 0x80]
lea edx, [ebp - 0x7c]
call fcn.0049b9c4
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x78]
mov edx, 0x605dec
call fcn.00404e00
mov edx, dword [ebp - 0x78]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov edx, dword [0x668f00]
add edx, 6
mov eax, dword [0x669488]
mov ecx, 0x48
call fcn.0049b428
mov eax, dword [0x668f00]
mov byte [eax], 2
mov eax, dword [0x668f00]
mov byte [eax + 1], 0
mov eax, dword [0x668f00]
add eax, 2
mov word [eax], 0x86
mov eax, dword [0x668f00]
add eax, 4
mov word [eax], 0x48
mov word [ebp - 0x26], 0xce
mov eax, dword [0x668f00]
mov byte [eax + 0x36], 0
mov eax, dword [0x668f00]
mov byte [eax + 0x37], 0
mov dword [ebp - 0x10], 6
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x10]
movzx eax, byte [eax + edx]
add word [ebp - 0x26], ax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x4e
jne 0x605944
mov eax, dword [0x668f00]
add eax, 0x4e
mov dx, word [ebp - 0x26]
mov word [eax], dx
mov eax, dword [0x668f00]
add eax, 0x50
mov word [eax], 3
mov eax, dword [0x668f00]
add eax, 0x51
mov word [eax], 0
mov eax, 0x52
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 0xc
call fcn.0049c8a0
mov edx, dword [0x668f00]
mov eax, dword [0x669914]
mov ecx, 0xe
call fcn.0049b428
mov eax, 0xe
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 0xe
call fcn.0049c8a0
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov edx, dword [0x669488]
mov eax, dword [0x669914]
mov ecx, 0xe
call fcn.0049b740
test al, al
jne 0x605a58
push 0x605dfc
lea ecx, [ebp - 0x88]
mov eax, dword [0x669488]
mov edx, 4
call fcn.0049b85c
push dword [ebp - 0x88]
push 0x605dcc
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.00404e74
mov edx, dword [ebp - 0x84]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
jmp 0x605c41
mov eax, dword [0x668f00]
mov byte [eax], 2
mov eax, dword [0x668f00]
mov byte [eax + 1], 0
mov eax, dword [0x668f00]
mov byte [eax + 2], 1
mov eax, dword [0x668f00]
mov byte [eax + 3], 8
mov eax, dword [0x668f00]
mov byte [eax + 4], 0
mov eax, dword [0x668f00]
mov byte [eax + 5], 0
mov eax, dword [0x668f00]
mov byte [eax + 6], 1
mov eax, dword [0x668f00]
mov byte [eax + 7], 8
mov eax, dword [0x668f00]
mov byte [eax + 8], 3
mov eax, dword [0x668f00]
mov byte [eax + 9], 0
mov eax, 0xa
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 0xc
call fcn.0049c8a0
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
call fcn.0049cc08
call fcn.0049cc4c
mov edx, dword [0x668f00]
mov eax, dword [0x66937c]
mov ecx, 0xc
call fcn.0049b428
mov eax, 0xc
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 0x10a
call fcn.0049c8a0
mov eax, dword [0x669488]
cmp byte [eax + 2], 0x84
je 0x605b7f
push 0x605e28
lea ecx, [ebp - 0x90]
mov eax, dword [0x669488]
mov edx, 8
call fcn.0049b85c
push dword [ebp - 0x90]
push 0x605dcc
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.00404e74
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
jmp 0x605c41
mov edx, dword [0x668f00]
mov eax, dword [0x669488]
mov ecx, 0x10a
call fcn.0049b428
mov eax, dword [0x668f00]
mov byte [eax + 2], 0x85
mov eax, dword [0x668f00]
inc byte [eax + 0x107]
mov eax, 0x10a
call fcn.0049c908
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 0xc
call fcn.0049c8a0
mov eax, dword [0x669488]
cmp byte [eax], 2
je 0x605c3d
mov eax, dword [0x669488]
cmp byte [eax + 2], 0x85
je 0x605c3d
mov eax, dword [0x669488]
cmp byte [eax + 6], 0xff
je 0x605c3d
push 0x605dfc
lea ecx, [ebp - 0x98]
mov eax, dword [0x669488]
mov edx, 4
call fcn.0049b85c
push dword [ebp - 0x98]
push 0x605dcc
lea eax, [ebp - 0x94]
mov edx, 3
call fcn.00404e74
mov edx, dword [ebp - 0x94]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
jmp 0x605c41
mov byte [ebp - 1], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x605c74
lea eax, [ebp - 0x98]
mov edx, 0x18
call fcn.00404b08
lea eax, [ebp - 0x34]
mov edx, dword [0x60516c]
call fcn.004064cc
ret