Function at 0x653658
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x13
push 0
push 0
dec ecx
jne 0x653660
push ebx
push esi
push edi
mov dword [ebp - 4], edx
mov esi, eax
mov eax, dword [ebp - 4]
call fcn.00404f9c
xor eax, eax
push ebp
push 0x654701
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [0x6aa1e9], 1
mov edx, dword [ebp - 4]
mov eax, 0x654718
call fcn.004050f0
test eax, eax
jle 0x6536da
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x654718
call fcn.004050f0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040500c
mov edx, dword [ebp - 4]
mov eax, 0x654718
call fcn.004050f0
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.0040504c
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x654724
call fcn.004050f0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040500c
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.00404b84
mov edx, dword [ebp - 4]
mov eax, 0x654724
call fcn.004050f0
mov ecx, eax
inc ecx
lea eax, [ebp - 0x10]
mov edx, 1
call fcn.0040504c
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
call fcn.004c2d20
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
call fcn.004db058
push eax
push 0x654730
push dword [ebp - 0xc]
push 0x654824
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.00404e6c
mov edx, dword [ebp - 0x48]
pop eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
call fcn.004c2d14
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x654830
call fcn.004c3d24
lea edx, [ebp - 0x4c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xa8c
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x654840
call fcn.004c3d24
lea edx, [ebp - 0x50]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x50]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xab0
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xa48]
push 0x654718
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x654850
call fcn.004c3d24
lea edx, [ebp - 0x54]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push dword [ebp - 0x54]
push 0x654868
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xa94
mov edx, 4
call fcn.00404e6c
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x654850
call fcn.004c3d24
lea edx, [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x58]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xa98
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x654878
call fcn.004c3d24
lea edx, [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x3c]
mov eax, 0x654890
call fcn.004050f0
test eax, eax
jle 0x6538f0
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xa9c
push eax
mov edx, dword [ebp - 0x3c]
mov eax, 0x654890
call fcn.004050f0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x3c]
call fcn.0040500c
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xaa0
push eax
mov edx, dword [ebp - 0x3c]
mov eax, 0x654890
call fcn.004050f0
inc eax
push eax
mov eax, dword [ebp - 0x3c]
call fcn.00404dac
mov ecx, eax
mov eax, dword [ebp - 0x3c]
pop edx
call fcn.0040500c
jmp 0x653915
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xa9c
mov edx, dword [ebp - 0x3c]
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xaa0
call fcn.00404aec
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x65489c
call fcn.004c3d24
lea edx, [ebp - 0x5c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xaa4
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x6548b8
call fcn.004c3d24
lea edx, [ebp - 0x60]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x60]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xaa8
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x6548dc
call fcn.004c3d24
lea edx, [ebp - 0x64]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x64]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xaac
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x6548fc
call fcn.004c3d24
lea edx, [ebp - 0x68]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x68]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xab8
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x654910
call fcn.004c3d24
lea edx, [ebp - 0x6c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x6c]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xabc
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x654924
call fcn.004c3d24
lea edx, [ebp - 0x70]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x70]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xab4
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x65493c
call fcn.004c3d24
lea edx, [ebp - 0x74]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x74]
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xa90
call fcn.00404b40
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
mov edx, 0x654950
call fcn.004c3d24
push eax
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov edx, dword [eax + 0xa54]
lea eax, [ebp - 0x78]
mov ecx, 0x654968
call fcn.00404df8
mov edx, dword [ebp - 0x78]
pop eax
call fcn.004be3e4
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x408]
call fcn.004c2d20
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0xab0]
mov edx, 0x654980
call fcn.00404ef8
jne 0x653b39
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xa48]
push 0x654718
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xab0]
push 0x654868
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xa94
mov edx, 4
call fcn.00404e6c
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
add eax, 0xa98
mov edx, dword [0x6a42c8]
mov edx, dword [edx]
mov edx, dword [edx + 0xab0]
call fcn.00404b40
mov edx, 0x654990
mov eax, dword [esi + 0x660]
call fcn.00486254
mov dl, 1
mov eax, dword [esi + 0x65c]
call fcn.00486144
mov eax, dword [esi + 0x65c]
mov edx, dword [eax]
call dword [edx + 0x80]
xor eax, eax
mov dword [0x6aa1dc], eax
xor eax, eax
mov dword [0x6aa1e0], eax
mov dl, 1
mov eax, dword [esi + 0x5a8]
call fcn.00486144
mov dl, 1
mov eax, dword [esi + 0x378]
call fcn.00486144
mov dl, 1
mov eax, dword [esi + 0x374]
call fcn.00486144
mov dl, 1
mov eax, dword [esi + 0x37c]
call fcn.00486144
mov dl, 1
mov eax, dword [esi + 0x2fc]
call fcn.00498920
mov dl, 1
mov eax, dword [esi + 0x488]
call fcn.00498920
mov dl, 1
mov eax, dword [esi + 0x328]
call fcn.00486144
mov dl, 1
mov eax, dword [esi + 0x324]
call fcn.00486144
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov edx, dword [eax + 0xa54]
lea eax, [ebp - 0x7c]
mov ecx, 0x654968
call fcn.00404df8
mov edx, dword [ebp - 0x7c]
mov eax, dword [esi + 0x654]
call fcn.0045ff44
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
call fcn.0045d08c
dec eax
test eax, eax
jl 0x653d55
inc eax
mov dword [ebp - 0x40], eax
xor ebx, ebx
lea eax, [ebp - 0x38]
call fcn.00404aec
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
mov edx, ebx
call fcn.0045d450
call fcn.0045c594
test eax, eax
je 0x653c69
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
mov edx, ebx
call fcn.0045d450
call fcn.0045c594
mov edx, dword [eax + 8]
lea eax, [ebp - 0x38]
call fcn.00404b84
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xa44]
push 0x6549b0
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xa64]
push 0x654718
push dword [ebp - 0x38]
push 0x654718
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xab4]
push 0x654724
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
mov edx, ebx
call fcn.0045d450
push dword [eax + 8]
push 0x654868
lea eax, [ebp - 0x34]
mov edx, 0xa
call fcn.00404e6c
mov eax, dword [ebp - 0x34]
call fcn.0040a46c
test al, al
je 0x653d17
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
mov edx, ebx
call fcn.0045d450
mov edx, 2
call fcn.0045c070
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
mov edx, ebx
call fcn.0045d450
mov edx, 3
call fcn.0045c0c8
jmp 0x653d4b
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
mov edx, ebx
call fcn.0045d450
xor edx, edx
call fcn.0045c070
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
mov edx, ebx
call fcn.0045d450
xor edx, edx
call fcn.0045c0c8
inc ebx
dec dword [ebp - 0x40]
jne 0x653c22
xor edx, edx
mov eax, esi
call fcn.006209ec
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
call fcn.0045d08c
test eax, eax
jne 0x653e33
mov eax, dword [0x6aa1bc]
add eax, 0x78c
mov edx, dword [0x6a42c8]
mov edx, dword [edx]
mov edx, dword [edx + 0xa94]
call fcn.00404b40
mov edx, dword [esi + 0x78c]
mov eax, esi
call fcn.006202dc
push 0
mov eax, dword [esi + 0x3c4]
call fcn.0048cc2c
push eax
call sub.user32.dll_EnableWindow
mov eax, dword [esi + 0x378]
mov edx, dword [eax + 0x40]
mov ecx, dword [eax + 0x48]
sar ecx, 1
jns 0x653dc7
adc ecx, 0
add edx, ecx
mov dword [ebp - 0x30], edx
mov edx, dword [eax + 0x44]
mov eax, dword [eax + 0x4c]
sar eax, 1
jns 0x653dd9
adc eax, 0
add edx, eax
mov dword [ebp - 0x2c], edx
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0x30]
mov eax, esi
call fcn.00485d3c
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x34]
mov ebx, dword [esi + 0x378]
mov edx, dword [ebx + 0x80]
call fcn.00404b84
lea eax, [ebx + 0x80]
mov edx, 0x6549c0
call fcn.00404b40
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x30]
push eax
call sub.user32.dll_SetCursorPos
jmp 0x654060
push 0xffffffffffffffff
mov eax, dword [esi + 0x3c4]
call fcn.0048cc2c
push eax
call sub.user32.dll_EnableWindow
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
call fcn.0045d08c
test eax, eax
jle 0x653eb9
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
call fcn.0045d08c
dec eax
test eax, eax
jl 0x653eb9
inc eax
mov dword [ebp - 0x40], eax
xor ebx, ebx
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
mov edx, ebx
call fcn.0045d450
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x10]
call fcn.00404ef8
jne 0x653eb3
mov eax, dword [esi + 0x654]
mov eax, dword [eax + 0x26c]
mov edx, ebx
call fcn.0045d450
mov dl, 1
call fcn.0045c3d0
jmp 0x653eb9
inc ebx
dec dword [ebp - 0x40]
jne 0x653e77
mov eax, dword [esi + 0x654]
call fcn.0045ed78
cmp dword [eax + 0x14], 0
jne 0x653eec
mov edx, 0x654a04
mov eax, dword [esi + 0x4a4]
call fcn.00486254
xor edx, edx
mov eax, dword [esi + 0x3c4]
call fcn.00486144
jmp 0x654060
mov eax, dword [esi + 0x654]
call fcn.0045ed78
call fcn.0045c594
test eax, eax
je 0x653fc6
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xa44]
push 0x6549b0
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xa64]
push 0x654718
mov eax, dword [esi + 0x654]
call fcn.0045ed78
call fcn.0045c594
push dword [eax + 8]
push 0x654718
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xab4]
push 0x654724
mov eax, dword [esi + 0x654]
call fcn.0045ed78
push dword [eax + 8]
push 0x654868
mov eax, dword [0x6aa1bc]
add eax, 0x78c
mov edx, 0xa
call fcn.00404e6c
mov eax, dword [esi + 0x654]
call fcn.0045ed78
call fcn.0045c594
push dword [eax + 8]
push 0x654718
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xab4]
push 0x654724
mov eax, dword [esi + 0x654]
call fcn.0045ed78
push dword [eax + 8]
lea eax, [esi + 0x790]
mov edx, 5
call fcn.00404e6c
jmp 0x654053
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xa44]
push 0x6549b0
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xa64]
push 0x654718
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xab4]
push 0x654724
mov eax, dword [esi + 0x654]
call fcn.0045ed78
push dword [eax + 8]
push 0x654868
mov eax, dword [0x6aa1bc]
add eax, 0x78c
mov edx, 8
call fcn.00404e6c
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
push dword [eax + 0xab4]
push 0x654724
mov eax, dword [esi + 0x654]
call fcn.0045ed78
push dword [eax + 8]
lea eax, [esi + 0x790]
mov edx, 3
call fcn.00404e6c
mov edx, dword [esi + 0x78c]
mov eax, esi
call fcn.006202dc
mov eax, dword [0x6a4920]
mov eax, dword [eax]
call fcn.004a4dfc
cmp eax, 0x3e8
jge 0x654088
mov edx, 0x64
mov eax, dword [esi + 0x324]
call fcn.004859b8
jmp 0x65410a
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
push 0
push 0
mov ecx, 1
mov edx, 1
mov eax, dword [esi + 0x3c4]
call fcn.0051e7ac
mov ebx, dword [ebp - 0x1c]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
push 0
push 0
xor edx, edx
mov edi, dword [esi + 0x3c4]
mov eax, edi
call fcn.0051b838
mov edx, eax
mov ecx, 1
mov eax, edi
call fcn.0051e7ac
mov eax, dword [ebp - 0x24]
sub eax, ebx
mov ebx, eax
mov eax, dword [0x6a4920]
mov eax, dword [eax]
call fcn.004a4dfc
mov edx, eax
sub edx, ebx
sub edx, 0x32
mov eax, dword [esi + 0x324]
call fcn.004859b8
mov eax, dword [esi + 0x324]
cmp dword [eax + 0x48], 0x96
jge 0x654123
mov edx, 0x96
call fcn.004859b8
mov dl, 1
mov eax, dword [esi + 0x324]
call fcn.00486144
mov edx, 0x654a1c
mov eax, dword [esi + 0x5a8]
call fcn.00486254
mov eax, dword [esi + 0x5a8]
add eax, 0x80
mov edx, 0x654a2c
call fcn.00404b40
mov edx, 0x1d
mov eax, dword [esi + 0x5a8]
call fcn.0046a908
mov dl, 1
mov eax, dword [esi + 0x328]
call fcn.00486144
mov byte [0x6aa1e7], 0
mov eax, dword [esi + 0x3dc]
mov eax, dword [eax + 0x23c]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x6a4920]
mov eax, dword [eax]
call fcn.004a5a3c
mov edx, eax
mov eax, dword [esi + 0x3dc]
mov ecx, dword [eax]
call dword [ecx + 0x10c]
mov ebx, dword [esi + 0x3dc]
mov eax, dword [ebx + 0x23c]
mov edx, 0x654a48
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, eax
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0xd0]
xor ecx, ecx
xor edx, edx
mov al, 0xff
call fcn.00408440
mov dword [0x6aa1d8], eax
mov cl, 0x80
mov dl, 0xff
mov al, 0x80
call fcn.00408440
mov dword [esi + 0x7f4], eax
mov cl, 0xf0
mov dl, 0xca
mov al, 0xa6
call fcn.00408440
mov dword [esi + 0x7f8], eax
mov cl, 0xff
mov dl, 0xc8
mov al, 0xff
call fcn.00408440
mov dword [esi + 0x7fc], eax
mov cl, 0x96
mov dl, 0xc8
mov al, 0xff
call fcn.00408440
mov dword [esi + 0x800], eax
xor ecx, ecx
xor edx, edx
mov al, 0xff
call fcn.00408440
mov dword [esi + 0x804], eax
mov cl, 0x80
mov dl, 0xff
mov al, 0xff
call fcn.00408440
mov dword [esi + 0x808], eax
mov eax, dword [0x6aa1bc]
mov dword [eax + 0x838], 2
mov eax, dword [0x6aa1bc]
mov dword [eax + 0x83c], 2
mov eax, dword [0x6aa1bc]
xor ebx, ebx
mov dword [eax + 0x840], ebx
push ebx
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [0x6aa1bc]
mov ecx, dword [eax + 0x83c]
mov eax, dword [0x6aa1bc]
mov edx, dword [eax + 0x838]
mov eax, dword [esi + 0x3c4]
call fcn.0051d504
mov edx, dword [ebp - 0x8c]
lea eax, [ebp - 0x88]
call fcn.00404d74
mov edx, dword [ebp - 0x88]
mov eax, dword [esi + 0x4c0]
call fcn.00486254
mov eax, dword [esi + 0x4d0]
mov eax, dword [eax + 0x218]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [esi + 0x4c0]
mov eax, dword [eax + 0x220]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jle 0x65434c
mov dword [ebp - 0x40], eax
mov ebx, 1
push 0x654a5c
lea edx, [ebp - 0x94]
mov eax, ebx
call fcn.00409e80
push dword [ebp - 0x94]
push 0x654a68
lea ecx, [ebp - 0x98]
mov eax, dword [esi + 0x4c0]
mov eax, dword [eax + 0x220]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x98]
lea eax, [ebp - 0x90]
mov edx, 4
call fcn.00404e6c
mov edx, dword [ebp - 0x90]
mov eax, dword [esi + 0x4d0]
mov eax, dword [eax + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec dword [ebp - 0x40]
jne 0x6542e3
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0xab0]
mov edx, 0x654a74
call fcn.00404ef8
je 0x6543cd
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov edx, dword [eax + 0xa90]
mov eax, 0x654a74
call fcn.004050f0
test eax, eax
jle 0x654399
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0xab0]
mov edx, 0x654a84
call fcn.00404ef8
je 0x6543cd
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov edx, dword [eax + 0xa90]
mov eax, 0x654a94
call fcn.004050f0
test eax, eax
jle 0x6543f6
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0xab0]
mov edx, 0x654a84
call fcn.00404ef8
jne 0x6543f6
mov dl, 1
mov eax, dword [esi + 0x488]
call fcn.00498920
mov dl, 1
mov eax, dword [esi + 0x4ac]
call fcn.00486144
mov dl, 1
mov eax, dword [esi + 0x490]
call fcn.00486144
jmp 0x65441d
xor edx, edx
mov eax, dword [esi + 0x488]
call fcn.00498920
xor edx, edx
mov eax, dword [esi + 0x4ac]
call fcn.00486144
xor edx, edx
mov eax, dword [esi + 0x490]
call fcn.00486144
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov eax, dword [eax + 0x494]
call fcn.0045ed78
cmp dword [eax + 0x14], 8
jne 0x654444
mov dl, 1
mov eax, dword [esi + 0x568]
call fcn.00486144
jmp 0x654451
xor edx, edx
mov eax, dword [esi + 0x568]
call fcn.00486144
xor edx, edx
mov eax, dword [esi + 0x5b8]
call fcn.00498920
mov eax, dword [esi + 0x3c4]
call fcn.0051d3bc
dec eax
test eax, eax
jl 0x654509
inc eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x18]
mov eax, dword [esi + 0x3c4]
call fcn.0051b3a8
test eax, eax
jle 0x6544f1
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x14], 1
mov edx, dword [ebp - 0x18]
mov eax, dword [esi + 0x3c4]
call fcn.0051b838
mov ebx, eax
test ebx, ebx
jle 0x6544dd
mov edi, 1
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, edi
mov eax, dword [esi + 0x3c4]
call fcn.0051bd84
test eax, eax
jle 0x6544d9
mov dl, 1
mov eax, dword [esi + 0x5b8]
call fcn.00498920
jmp 0x6544dd
inc edi
dec ebx
jne 0x6544b2
mov eax, dword [esi + 0x5b8]
cmp byte [eax + 0x3e], 0
jne 0x6544f1
inc dword [ebp - 0x14]
dec dword [ebp - 0x44]
jne 0x654499
mov eax, dword [esi + 0x5b8]
cmp byte [eax + 0x3e], 0
jne 0x654509
inc dword [ebp - 0x18]
dec dword [ebp - 0x40]
jne 0x65447d
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x448]
call fcn.00486144
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x3c8]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x3a8]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x438]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x3e8]
call fcn.00486144
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x5bc]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x494]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x4a0]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x49c]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x4b4]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x4b8]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x3c0]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x498]
call fcn.00498920
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x5f0]
call fcn.00486144
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x530]
call fcn.00486144
mov eax, dword [0x6a42c8]
mov eax, dword [eax]
mov dl, byte [eax + 0xa85]
mov eax, dword [esi + 0x5bc]
call fcn.00498920
xor edx, edx
mov eax, dword [esi + 0x65c]
call fcn.00486144
mov edx, 0x654aa4
mov eax, dword [esi + 0x660]
call fcn.00486254
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x654708
lea eax, [ebp - 0x98]
mov edx, 3
call fcn.00404b10
lea eax, [ebp - 0x8c]
call fcn.004051f8
lea eax, [ebp - 0x88]
call fcn.00404aec
lea eax, [ebp - 0x7c]
mov edx, 0xe
call fcn.00404b10
lea eax, [ebp - 0x3c]
mov edx, 3
call fcn.00404b10
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00404b10
ret