Function at 0x523504
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov esi, dword [0x5d31a4]
xor eax, eax
push ebp
push 0x525189
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d314c]
mov eax, dword [eax]
mov ebx, dword [eax + 0xb4]
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5251a0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251b4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251c8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
cmp dword [ebp - 8], 0
je 0x5238a8
mov edx, 0x5251f4
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov edx, dword [ebp - 0x10]
pop eax
call fcn.00404084
jne 0x5236b9
mov edx, 0x52520c
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x570]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov edx, dword [ebp - 0x10]
pop eax
call fcn.00404084
jne 0x5236b9
mov edx, 0x525220
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov edx, dword [ebp - 0x10]
pop eax
call fcn.00404084
je 0x5238a8
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x5238a8
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525234
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525250
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525288
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525298
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
cmp dword [ebp - 8], 0
je 0x523768
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov edx, 0x5252b4
call fcn.00404084
jne 0x52377a
mov eax, dword [esi]
mov eax, dword [eax + 0x580]
mov edx, 0x5252c0
call fcn.00434264
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252cc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x570]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252d8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
cmp dword [ebp - 8], 0
je 0x523858
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov edx, 0x5252b4
call fcn.00404084
jne 0x523870
mov edx, 0x5252e4
mov eax, ebx
call fcn.004a2550
mov edx, 0x5252c0
call fcn.00489c34
jmp 0x5238a1
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252e4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, dword [esi]
mov eax, dword [eax + 0x2c8]
call fcn.00439f54
cmp al, 1
jne 0x524510
mov eax, dword [esi]
mov eax, dword [eax + 0xbe4]
mov edx, 0x5252c0
call fcn.00404084
jne 0x5239aa
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5251a0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5252f0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525304
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525324
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x30c]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x314]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 4]
call fcn.00408fb8
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x523bad
mov eax, dword [esi]
mov eax, dword [eax + 0x490]
mov edx, 0x5252c0
call fcn.00434264
jmp 0x523bad
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5251a0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5252f0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525360
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x30c]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x314]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 4]
call fcn.00408fb8
mov edx, 0x525380
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x304]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov edx, dword [ebp - 0x10]
pop eax
call fcn.00404084
jne 0x523acc
mov edx, 0x525394
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00408fb8
mov edx, dword [ebp - 0x10]
pop eax
call fcn.00404084
je 0x523bad
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x523bad
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5253a4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5253c0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525288
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5253e8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x30c]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x304]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252cc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x5252d8
mov eax, ebx
call fcn.004a2550
mov edx, dword [ebp - 4]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525400
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5252c0
call fcn.00404084
jne 0x523bf5
mov edx, 0x52541c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x523c05
mov edx, 0x5254b8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
call fcn.00403f74
cmp eax, 0xe
jne 0x523c6d
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 8]
mov edx, 0x525548
call fcn.00404084
je 0x523c7d
mov edx, 0x525558
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi]
cmp dword [eax + 0x8ec], 1
jne 0x523c98
mov edx, 0x525574
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x52558c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525288
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525598
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5252c0
call fcn.00404084
jne 0x523cee
mov edx, 0x5255d8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x523cfe
mov edx, 0x525614
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
call fcn.00403f74
cmp eax, 0xe
jne 0x523d66
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 8]
mov edx, 0x525548
call fcn.00404084
je 0x523d76
mov edx, 0x52564c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi]
cmp dword [eax + 0x8ec], 1
jne 0x523d91
mov edx, 0x52565c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x52558c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252e4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x584]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x52566c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x578]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252cc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi]
mov eax, dword [eax + 0x10f8]
mov edx, 0x5252c0
call fcn.00404084
jne 0x523edf
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
call fcn.00403f74
cmp eax, 0xe
jne 0x523edf
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov ecx, 8
mov edx, 1
call fcn.00404178
lea eax, [ebp - 8]
mov edx, 0x525548
call fcn.00403f7c
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252d8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x523f10
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252d8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x574]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525678
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x2f8]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525684
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi]
mov eax, dword [eax + 0xbe4]
mov edx, 0x5252c0
call fcn.00404084
jne 0x523fb9
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x490]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525690
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x523fea
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x30c]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525690
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x308]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x52569c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x3dc]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
mov edx, 0x5256a8
call fcn.00404084
jne 0x52405d
mov edx, 0x5256b8
mov eax, ebx
call fcn.004a2550
mov edx, 0x5256c4
call fcn.00489c34
jmp 0x52408e
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x3dc]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5256b8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x588]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
mov edx, 0x5256a8
call fcn.00404084
jne 0x5240e9
call fcn.0040a874
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 8]
mov eax, 0x5256d8
call fcn.0040b474
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5256ec
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x52411a
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x588]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5256ec
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x314]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5256f8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5252c0
call fcn.00404084
jne 0x524190
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x304]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525704
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
call fcn.00403f74
cmp eax, 0xe
jne 0x5241f8
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 8]
mov edx, 0x525548
call fcn.00404084
je 0x524229
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x864]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525710
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi]
cmp dword [eax + 0x8ec], 1
jne 0x524265
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x8cc]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x52571c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525728
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov edx, 0x525784
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 8]
mov eax, dword [esi]
add eax, 0x910
call fcn.00403d4c
mov eax, dword [esi]
mov dword [eax + 0x91c], 2
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525798
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
push 0x5257d0
mov eax, dword [esi]
push dword [eax + 0x910]
push 0x525804
lea eax, [ebp - 8]
mov edx, 3
call fcn.00404034
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525820
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525860
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525878
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525898
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5258b0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5258cc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5258e8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x62434]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x5252cc
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x910]
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x57c]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252d8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x578]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252e4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x2f8]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525678
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
jmp 0x52515e
mov eax, dword [esi]
mov eax, dword [eax + 0xbe4]
mov edx, 0x5252c0
call fcn.00404084
jne 0x5245fd
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5251a0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5252f0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525304
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525324
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x494]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x394]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 4]
call fcn.00408fb8
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x524800
mov eax, dword [esi]
mov eax, dword [eax + 0x494]
mov edx, 0x5252c0
call fcn.00434264
jmp 0x524800
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5251a0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5252f0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525360
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x38c]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x394]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 4]
call fcn.00408fb8
mov edx, 0x525380
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x384]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov edx, dword [ebp - 0x10]
pop eax
call fcn.00404084
jne 0x52471f
mov edx, 0x525394
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00408fb8
mov edx, dword [ebp - 0x10]
pop eax
call fcn.00404084
je 0x524800
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x524800
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5253a4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5253c0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525288
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5253e8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x38c]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x384]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252cc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x5252d8
mov eax, ebx
call fcn.004a2550
mov edx, dword [ebp - 4]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525400
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5252c0
call fcn.00404084
jne 0x524848
mov edx, 0x52541c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x524858
mov edx, 0x5254b8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
call fcn.00403f74
cmp eax, 0xe
jne 0x5248c0
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 8]
mov edx, 0x525548
call fcn.00404084
je 0x5248d0
mov edx, 0x525558
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi]
cmp dword [eax + 0x8ec], 1
jne 0x5248eb
mov edx, 0x525574
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x52558c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525288
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525598
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5252c0
call fcn.00404084
jne 0x524941
mov edx, 0x5255d8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x524951
mov edx, 0x525614
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
call fcn.00403f74
cmp eax, 0xe
jne 0x5249b9
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 8]
mov edx, 0x525548
call fcn.00404084
je 0x5249c9
mov edx, 0x52564c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi]
cmp dword [eax + 0x8ec], 1
jne 0x5249e4
mov edx, 0x52565c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x52558c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252e4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x584]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x52566c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x578]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252cc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi]
mov eax, dword [eax + 0x10f8]
mov edx, 0x5252c0
call fcn.00404084
jne 0x524b32
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
call fcn.00403f74
cmp eax, 0xe
jne 0x524b32
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov ecx, 8
mov edx, 1
call fcn.00404178
lea eax, [ebp - 8]
mov edx, 0x525548
call fcn.00403f7c
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252d8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x524b63
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252d8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x574]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525678
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x378]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525684
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi]
mov eax, dword [eax + 0xbe4]
mov edx, 0x5252c0
call fcn.00404084
jne 0x524c0c
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x494]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525690
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x524c3d
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x38c]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525690
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x388]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x52569c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x3dc]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
mov edx, 0x5256a8
call fcn.00404084
jne 0x524cb0
mov edx, 0x5256b8
mov eax, ebx
call fcn.004a2550
mov edx, 0x5256c4
call fcn.00489c34
jmp 0x524ce1
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x3dc]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5256b8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x588]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
mov edx, 0x5256a8
call fcn.00404084
jne 0x524d3c
call fcn.0040a874
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 8]
mov eax, 0x5256d8
call fcn.0040b474
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5256ec
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x524d6d
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x588]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5256ec
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x394]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5256f8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5252c0
call fcn.00404084
jne 0x524de3
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x384]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525704
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
call fcn.00403f74
cmp eax, 0xe
jne 0x524e4b
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
call fcn.00408fb8
mov eax, dword [ebp - 0x10]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 8]
mov edx, 0x525548
call fcn.00404084
je 0x524e7c
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x864]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525710
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi]
cmp dword [eax + 0x8ec], 1
jne 0x524eb8
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x8cc]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x52571c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525728
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov edx, 0x525784
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 8]
mov eax, dword [esi]
add eax, 0x910
call fcn.00403d4c
mov eax, dword [esi]
mov dword [eax + 0x91c], 2
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525798
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
push 0x5257d0
mov eax, dword [esi]
push dword [eax + 0x910]
push 0x525804
lea eax, [ebp - 8]
mov edx, 3
call fcn.00404034
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525820
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x525908
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525878
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x525898
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5258b0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5258cc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5258e8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x62438]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5251e8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x5252cc
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi]
mov edx, dword [edx + 0x910]
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x57c]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252d8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0xc]
mov eax, dword [esi]
mov eax, dword [eax + 0x578]
call fcn.00434234
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x5252e4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x10]
mov eax, dword [esi]
mov eax, dword [eax + 0x378]
call fcn.00470af8
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.00408fb8
mov eax, dword [ebp - 8]
push eax
mov edx, 0x525678
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x525190
lea eax, [ebp - 0x10]
call fcn.00403cf8
lea eax, [ebp - 0xc]
call fcn.00403cf8
lea eax, [ebp - 8]
mov edx, 2
call fcn.00403d1c
ret