Function at 0x40f95c
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd58
push ebx
mov dword [ebp - 0x20c], eax
mov eax, 0x7ce40c
call fcn.007b7c14
mov edx, dword [0x7d2640]
mov byte [edx + 0x31], 0
mov ecx, dword [0x7d2640]
mov byte [ecx + 0x32], 0
mov eax, dword [0x7d2640]
mov byte [eax + 0x33], 0
mov edx, dword [0x7d2640]
mov byte [edx + 0x35], 0
mov edx, 0x7cd4aa
lea eax, [ebp - 8]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
lea eax, [ebp - 8]
inc dword [ebp - 0x1ec]
push dword [eax]
mov word [ebp - 0x1f8], 0xc
mov edx, 0x7cd495
lea eax, [ebp - 4]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
lea edx, [ebp - 4]
inc dword [ebp - 0x1ec]
push dword [edx]
call fcn.0040361c
xor ecx, ecx
pop edx
call fcn.00439a54
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.00402554
mov word [ebp - 0x1f8], 0x18
mov edx, 0x7cd4bd
lea eax, [ebp - 0xc]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x424]
call fcn.005466b0
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.007c633c
mov word [ebp - 0x1f8], 0x24
lea eax, [ebp - 0x10]
call fcn.00402e20
inc dword [ebp - 0x1ec]
lea ecx, [ebp - 0x10]
inc dword [ebp - 0x1ec]
mov edx, dword [0x7d2640]
add edx, 0x20
mov eax, 0x7cd4cd
call fcn.0040b3a4
lea edx, [ebp - 0x10]
push dword [edx]
push 0x7e9794
call fcn.00405fe4
pop ecx
mov ecx, dword [ebp - 0x20c]
mov edx, dword [ecx + 0x434]
pop ecx
call fcn.0040b6b0
push eax
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00402554
pop eax
test al, al
je 0x40fbc3
mov ecx, dword [ebp - 0x20c]
mov ecx, dword [ecx + 0x434]
mov dl, 1
mov eax, dword [0x588198]
call fcn.00599d2c
mov dword [ebp - 0x210], eax
mov word [ebp - 0x1f8], 0x30
mov edx, 0x7cd4ef
lea eax, [ebp - 0x14]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x434]
call fcn.005a24dc
mov dword [ebp - 0x210], eax
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.007c633c
mov ecx, dword [ebp - 0x20c]
mov eax, dword [ecx + 0x438]
mov edx, dword [eax]
call dword [edx + 0x48]
mov dword [ebp - 0x214], eax
mov edx, dword [ebp - 0x210]
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax]
call dword [ecx + 8]
mov word [ebp - 0x1f8], 0x3c
mov edx, 0x7cd4f4
lea eax, [ebp - 0x18]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x434]
call fcn.005a24dc
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov edx, dword [eax]
call dword [edx + 0x64]
cmp eax, 2
sete cl
and ecx, 1
mov ebx, dword [0x7d2640]
mov byte [ebx + 0x30], cl
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.007c633c
mov dl, 1
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x438]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov edx, dword [ebp - 0x20c]
add edx, 0x43c
mov dword [ebp - 0x21c], edx
mov word [ebp - 0x1f8], 0x48
xor eax, eax
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x1c]
inc dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x20c]
mov eax, dword [ecx + 0x438]
mov ecx, dword [eax]
call dword [ecx + 0x18]
cmp dword [ebp - 0x1c], 0
je 0x40fc1f
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [edx]
call dword [eax + 4]
mov edx, dword [ebp - 0x21c]
cmp dword [edx], 0
je 0x40fc38
mov ecx, dword [ebp - 0x21c]
mov eax, dword [ecx]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov ecx, dword [ebp - 0x21c]
mov ebx, dword [ebp - 0x1c]
mov dword [ecx], ebx
dec dword [ebp - 0x1ec]
cmp dword [ebp - 0x1c], 0
je 0x40fc5d
mov eax, dword [ebp - 0x1c]
push eax
mov edx, dword [eax]
call dword [edx + 8]
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
mov word [ebp - 0x1f8], 0x54
xor eax, eax
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x20]
inc dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x20c]
mov eax, dword [ecx + 0x43c]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x220], edx
mov eax, dword [ebp - 0x220]
mov edx, dword [eax]
call dword [edx + 0xc]
test eax, eax
setg cl
and ecx, 1
push ecx
dec dword [ebp - 0x1ec]
cmp dword [ebp - 0x20], 0
je 0x40fcbc
mov eax, dword [ebp - 0x20]
push eax
mov edx, dword [eax]
call dword [edx + 8]
xor ecx, ecx
mov dword [ebp - 0x20], ecx
pop eax
test al, al
je 0x4108ca
xor edx, edx
mov dword [ebp - 0x224], edx
jmp 0x41085e
mov ecx, dword [ebp - 0x20c]
add ecx, 0x440
mov dword [ebp - 0x22c], ecx
mov word [ebp - 0x1f8], 0x6c
xor eax, eax
mov dword [ebp - 0x2c], eax
lea edx, [ebp - 0x2c]
inc dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x20c]
mov eax, dword [ecx + 0x43c]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x230], edx
xor eax, eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x30]
inc dword [ebp - 0x1ec]
mov edx, dword [ebp - 0x224]
mov eax, dword [ebp - 0x230]
mov ebx, dword [eax]
call dword [ebx + 0x48]
cmp dword [ebp - 0x30], 0
je 0x40fd43
mov eax, dword [ebp - 0x30]
push eax
mov edx, dword [eax]
call dword [edx + 4]
mov ecx, dword [ebp - 0x22c]
cmp dword [ecx], 0
je 0x40fd5c
mov eax, dword [ebp - 0x22c]
mov edx, dword [eax]
push edx
mov ecx, dword [edx]
call dword [ecx + 8]
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x30]
mov dword [eax], edx
dec dword [ebp - 0x1ec]
cmp dword [ebp - 0x30], 0
je 0x40fd81
mov ecx, dword [ebp - 0x30]
push ecx
mov eax, dword [ecx]
call dword [eax + 8]
xor edx, edx
mov dword [ebp - 0x30], edx
dec dword [ebp - 0x1ec]
cmp dword [ebp - 0x2c], 0
je 0x40fd9b
mov ecx, dword [ebp - 0x2c]
push ecx
mov eax, dword [ecx]
call dword [eax + 8]
xor edx, edx
mov dword [ebp - 0x2c], edx
mov word [ebp - 0x1f8], 0x84
mov edx, 0x7cd4f9
lea eax, [ebp - 0x28]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
mov word [ebp - 0x1f8], 0x78
mov word [ebp - 0x1f8], 0x90
mov edx, 0x7cd4fa
lea eax, [ebp - 0x34]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x88]
push eax
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.007c633c
pop ecx
test cl, cl
je 0x40fec6
mov word [ebp - 0x1f8], 0x9c
lea eax, [ebp - 0x48]
call fcn.007c5ad4
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x48]
push edx
inc dword [ebp - 0x1ec]
mov edx, 0x7cd503
lea eax, [ebp - 0x38]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x440]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
call fcn.00402e20
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x4c]
inc dword [ebp - 0x1ec]
pop eax
call fcn.007c5bbc
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x28]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.007c633c
mov word [ebp - 0x1f8], 0xa8
mov edx, 0x7cd50c
lea eax, [ebp - 0x50]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x28]
call fcn.007c5550
push eax
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.00402554
pop ecx
test cl, cl
je 0x41083b
mov word [ebp - 0x1f8], 0xc0
xor eax, eax
mov dword [ebp - 0x58], eax
lea edx, [ebp - 0x58]
inc dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x20c]
mov eax, dword [ecx + 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x58]
lea eax, [ebp - 0x54]
xor ecx, ecx
call fcn.007c53c4
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.007c633c
mov word [ebp - 0x1f8], 0xb4
push 1
lea ecx, [ebp - 0x54]
push ecx
call fcn.007c5190
add esp, 8
lea eax, [ebp - 0x54]
call fcn.0040be3c
mov edx, dword [ebp - 0x54]
movsx ecx, byte [edx]
cmp ecx, 0x52
jne 0x410502
mov word [ebp - 0x1f8], 0xd8
lea eax, [ebp - 0x70]
call fcn.007c5ad4
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x70]
push edx
inc dword [ebp - 0x1ec]
mov edx, 0x7cd511
lea eax, [ebp - 0x60]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x440]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x5c]
call fcn.00402e20
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x5c]
inc dword [ebp - 0x1ec]
pop eax
call fcn.007c5bbc
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.007c633c
mov word [ebp - 0x1f8], 0xcc
mov word [ebp - 0x1f8], 0xe4
cmp dword [ebp - 0x5c], 0
jne 0x410044
mov ecx, 0x7cd519
jmp 0x410047
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x234], ecx
add esp, 0xfffffff8
push esp
call fcn.00404764
pop ecx
lea eax, [ebp - 0x98]
push eax
call fcn.00404788
add esp, 0xc
push 0
push 0
lea edx, [ebp - 0x98]
push edx
call fcn.00404640
add esp, 0xc
push dword [ebp - 0x234]
lea eax, [ebp - 0x98]
push eax
call fcn.004047bc
add esp, 8
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x98]
push edx
mov ecx, dword [0x7d2640]
add ecx, 0x38
push ecx
lea eax, [ebp - 0x298]
push eax
call fcn.0041179c
add esp, 0xc
dec dword [ebp - 0x1ec]
push 0
push 1
lea edx, [ebp - 0x98]
push edx
call fcn.00404640
add esp, 0xc
mov word [ebp - 0x1f8], 0xf0
lea eax, [ebp - 0xac]
call fcn.007c5ad4
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0xac]
push edx
inc dword [ebp - 0x1ec]
mov edx, 0x7cd51a
lea eax, [ebp - 0x9c]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x440]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, 0x7cd522
lea eax, [ebp - 0xb0]
call fcn.007c5f74
mov edx, eax
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0xc0]
call fcn.00409d38
add dword [ebp - 0x1ec], 2
lea edx, [ebp - 0xc0]
lea eax, [ebp - 0xac]
call fcn.00409d74
push eax
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.007c5fb4
pop ecx
push ecx
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.007c633c
pop ecx
test cl, cl
je 0x4101c9
mov eax, dword [0x7d2640]
mov byte [eax + 0x31], 1
jmp 0x4104b8
mov word [ebp - 0x1f8], 0xfc
lea eax, [ebp - 0xd4]
call fcn.007c5ad4
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0xd4]
push edx
inc dword [ebp - 0x1ec]
mov edx, 0x7cd52b
lea eax, [ebp - 0xc4]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x440]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, 0x7cd533
lea eax, [ebp - 0xd8]
call fcn.007c5f74
mov edx, eax
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0xe8]
call fcn.00409d38
add dword [ebp - 0x1ec], 2
lea edx, [ebp - 0xe8]
lea eax, [ebp - 0xd4]
call fcn.00409d74
push eax
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.007c5fb4
pop ecx
push ecx
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.007c633c
pop ecx
test cl, cl
je 0x4102c5
mov eax, dword [0x7d2640]
mov byte [eax + 0x32], 1
jmp 0x4104b8
mov word [ebp - 0x1f8], 0x108
lea eax, [ebp - 0xfc]
call fcn.007c5ad4
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0xfc]
push edx
inc dword [ebp - 0x1ec]
mov edx, 0x7cd53a
lea eax, [ebp - 0xec]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x440]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, 0x7cd542
lea eax, [ebp - 0x100]
call fcn.007c5f74
mov edx, eax
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0x110]
call fcn.00409d38
add dword [ebp - 0x1ec], 2
lea edx, [ebp - 0x110]
lea eax, [ebp - 0xfc]
call fcn.00409d74
push eax
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.007c5fb4
pop ecx
push ecx
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.007c633c
pop ecx
test cl, cl
je 0x4103c1
mov eax, dword [0x7d2640]
mov byte [eax + 0x33], 1
jmp 0x4104b8
mov word [ebp - 0x1f8], 0x114
lea eax, [ebp - 0x124]
call fcn.007c5ad4
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x124]
push edx
inc dword [ebp - 0x1ec]
mov edx, 0x7cd549
lea eax, [ebp - 0x114]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x440]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, 0x7cd551
lea eax, [ebp - 0x128]
call fcn.007c5f74
mov edx, eax
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0x138]
call fcn.00409d38
add dword [ebp - 0x1ec], 2
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x124]
call fcn.00409d74
push eax
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.007c5fb4
pop ecx
push ecx
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.00409ce4
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.007c633c
pop ecx
test cl, cl
je 0x4104b8
mov eax, dword [0x7d2640]
mov byte [eax + 0x35], 1
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00402554
jmp 0x410858
mov word [ebp - 0x1f8], 0x120
lea eax, [ebp - 0x13c]
call fcn.00402e20
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x13c]
push edx
inc dword [ebp - 0x1ec]
cmp dword [ebp - 0x54], 0
je 0x41053e
lea ecx, [ebp - 0x54]
push ecx
call fcn.0040420c
pop ecx
mov ecx, dword [eax + 8]
jmp 0x410540
xor ecx, ecx
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.00403cf8
lea eax, [ebp - 0x13c]
call fcn.007c57b4
mov dword [ebp - 0x238], eax
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.00402554
mov word [ebp - 0x1f8], 0xb4
mov eax, dword [ebp - 0x20c]
call fcn.0046f808
mov dword [ebp - 0x23c], eax
xor edx, edx
mov dword [ebp - 0x240], edx
mov word [ebp - 0x1f8], 0xb4
mov ecx, dword [ebp - 0x240]
cmp ecx, dword [ebp - 0x23c]
jge 0x41081e
mov word [ebp - 0x1f8], 0x12c
mov edx, 0x7cd55a
lea eax, [ebp - 0x140]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
push dword [eax]
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x20c]
call fcn.0046f7dc
mov eax, dword [eax]
pop edx
call fcn.004bf6a0
push eax
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.007c633c
pop ecx
test cl, cl
je 0x410806
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x20c]
call fcn.0046f7dc
mov ecx, dword [eax + 0xc]
cmp ecx, dword [ebp - 0x238]
jne 0x410806
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x20c]
call fcn.0046f7dc
mov dl, 1
call fcn.00546598
mov word [ebp - 0x1f8], 0x144
xor eax, eax
mov dword [ebp - 0x148], eax
lea ecx, [ebp - 0x148]
push ecx
inc dword [ebp - 0x1ec]
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x20c]
call fcn.0046f7dc
add eax, 8
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
cmp dword [ecx], 0
je 0x410698
push dword [ebp - 0x244]
call fcn.0040be74
pop ecx
mov eax, dword [eax + 8]
jmp 0x41069a
xor eax, eax
add eax, 0xfffffffe
push eax
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x20c]
call fcn.0046f7dc
add eax, 8
mov edx, 1
pop ecx
call fcn.007c6538
lea edx, [ebp - 0x148]
lea eax, [ebp - 0x144]
xor ecx, ecx
call fcn.007c53c4
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.007c633c
mov word [ebp - 0x1f8], 0x138
mov word [ebp - 0x1f8], 0x150
mov edx, 0x7cd561
lea eax, [ebp - 0x14c]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x150]
call fcn.00402e20
inc dword [ebp - 0x1ec]
lea ecx, [ebp - 0x150]
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0x144]
pop edx
call fcn.00402e50
xor ecx, ecx
mov dword [ebp - 0x154], ecx
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x154]
call fcn.0044987c
lea ecx, [ebp - 0x154]
inc dword [ebp - 0x1ec]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x20c]
call fcn.0046f570
mov dword [ebp - 0x248], eax
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.007c633c
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.00402554
mov word [ebp - 0x1f8], 0x138
xor edx, edx
mov eax, dword [ebp - 0x248]
call fcn.00546598
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.00402554
jmp 0x41081e
inc dword [ebp - 0x240]
mov ecx, dword [ebp - 0x240]
cmp ecx, dword [ebp - 0x23c]
jl 0x4105b2
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.00402554
mov word [ebp - 0x1f8], 0x78
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00402554
mov word [ebp - 0x1f8], 0
inc dword [ebp - 0x224]
mov word [ebp - 0x1f8], 0x60
xor ecx, ecx
mov dword [ebp - 0x24], ecx
lea edx, [ebp - 0x24]
inc dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x43c]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x228], edx
mov eax, dword [ebp - 0x228]
mov edx, dword [eax]
call dword [edx + 0xc]
cmp eax, dword [ebp - 0x224]
setg cl
and ecx, 1
push ecx
dec dword [ebp - 0x1ec]
cmp dword [ebp - 0x24], 0
je 0x4108c1
mov eax, dword [ebp - 0x24]
push eax
mov edx, dword [eax]
call dword [edx + 8]
xor ecx, ecx
mov dword [ebp - 0x24], ecx
pop eax
test eax, eax
jne 0x40fcd2
mov edx, dword [ebp - 0x20c]
cmp byte [edx + 0x451], 0
jne 0x4108f3
mov ecx, dword [sym.KDEMR.exe__F_PtMain]
mov eax, dword [ecx]
call fcn.0042c848
mov edx, dword [ebp - 0x20c]
mov byte [edx + 0x451], 1
mov ecx, dword [sym.KDEMR.exe__F_PtMain]
mov eax, dword [ecx]
call fcn.0042b9d4
mov edx, dword [sym.KDEMR.exe__F_PtMain]
mov ecx, dword [edx]
mov eax, dword [ecx + 0x38c]
mov eax, dword [eax + 0x294]
call fcn.0046361c
mov edx, eax
mov ecx, dword [ebp - 0x20c]
mov eax, dword [ecx + 0x41c]
mov ecx, dword [eax]
call dword [ecx + 0x128]
xor edx, edx
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x41c]
mov ecx, dword [eax]
call dword [ecx + 0x118]
mov dword [ebp - 0x250], 0xffffffff
xor edx, edx
mov dword [ebp - 0x254], edx
jmp 0x41170d
mov eax, dword [sym.KDEMR.exe__F_PtMain]
mov edx, dword [eax]
mov ecx, dword [edx + 0x38c]
mov eax, dword [ecx + 0x294]
mov edx, dword [ebp - 0x254]
call fcn.00670398
mov ecx, dword [eax + 0x1c]
mov dword [ebp - 0x24c], ecx
mov edx, dword [ebp - 0x254]
inc edx
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x41c]
mov ecx, dword [eax]
call dword [ecx + 0x118]
mov word [ebp - 0x1f8], 0x15c
lea eax, [ebp - 0x158]
call fcn.00402e20
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
mov word [ebp - 0x1f8], 0x168
mov word [ebp - 0x1f8], 0x174
mov edx, 0x7cd566
lea eax, [ebp - 0x15c]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x15c]
push edx
lea eax, [ebp - 0x160]
call fcn.00402e20
inc dword [ebp - 0x1ec]
lea ecx, [ebp - 0x160]
inc dword [ebp - 0x1ec]
mov eax, 0x7e9938
pop edx
call fcn.00402e50
lea edx, [ebp - 0x160]
lea eax, [ebp - 0x158]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x160]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x15c]
mov edx, 2
call fcn.00402554
push 0x1c
call fcn.007ae9f0
pop ecx
mov dword [ebp - 0x164], eax
test eax, eax
je 0x410aa4
mov word [ebp - 0x1f8], 0x198
mov eax, dword [ebp - 0x164]
add eax, 4
call fcn.00404318
add dword [ebp - 0x1ec], 2
add dword [ebp - 0x1ec], 0xfffffffe
mov word [ebp - 0x1f8], 0x180
mov edx, dword [ebp - 0x164]
jmp 0x410aaa
mov edx, dword [ebp - 0x164]
mov dword [ebp - 0x258], edx
mov word [ebp - 0x1f8], 0x168
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0x24c]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x24c]
cmp eax, 0x1f4
jg 0x410b00
je 0x410df3
sub eax, 0x64
je 0x410b2b
dec eax
je 0x410bdd
sub eax, 0xc7
je 0x410c8f
sub eax, 0x64
je 0x410d41
jmp 0x411168
sub eax, 0x258
je 0x410ea5
sub eax, 0x64
je 0x410f57
sub eax, 0x64
je 0x411009
sub eax, 0x64
je 0x4110bb
jmp 0x411168
mov word [ebp - 0x1f8], 0x1a4
mov edx, str.UniDoctor.dll
lea eax, [ebp - 0x168]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x158]
call fcn.007c5508
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x168]
mov edx, 2
call fcn.00402554
mov ecx, dword [ebp - 0x258]
add ecx, 4
mov dword [ebp - 0x25c], ecx
mov word [ebp - 0x1f8], 0x1b0
mov edx, 0x7cd57d
lea eax, [ebp - 0x16c]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 0x25c]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.00402554
jmp 0x411168
mov word [ebp - 0x1f8], 0x1bc
mov edx, str.UniNurse.dll
lea eax, [ebp - 0x170]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x170]
lea eax, [ebp - 0x158]
call fcn.007c5508
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x170]
mov edx, 2
call fcn.00402554
mov ecx, dword [ebp - 0x258]
add ecx, 4
mov dword [ebp - 0x260], ecx
mov word [ebp - 0x1f8], 0x1c8
mov edx, 0x7cd595
lea eax, [ebp - 0x174]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x174]
mov eax, dword [ebp - 0x260]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x174]
mov edx, 2
call fcn.00402554
jmp 0x411168
mov word [ebp - 0x1f8], 0x1d4
mov edx, str.UResources.dll
lea eax, [ebp - 0x178]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x178]
lea eax, [ebp - 0x158]
call fcn.007c5508
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x178]
mov edx, 2
call fcn.00402554
mov ecx, dword [ebp - 0x258]
add ecx, 4
mov dword [ebp - 0x264], ecx
mov word [ebp - 0x1f8], 0x1e0
mov edx, 0x7cd5af
lea eax, [ebp - 0x17c]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x17c]
mov eax, dword [ebp - 0x264]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x17c]
mov edx, 2
call fcn.00402554
jmp 0x411168
mov word [ebp - 0x1f8], 0x1ec
mov edx, str.URights.dll
lea eax, [ebp - 0x180]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x180]
lea eax, [ebp - 0x158]
call fcn.007c5508
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x180]
mov edx, 2
call fcn.00402554
mov ecx, dword [ebp - 0x258]
add ecx, 4
mov dword [ebp - 0x268], ecx
mov word [ebp - 0x1f8], 0x1f8
mov edx, 0x7cd5ca
lea eax, [ebp - 0x184]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x184]
mov eax, dword [ebp - 0x268]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x184]
mov edx, 2
call fcn.00402554
jmp 0x411168
mov word [ebp - 0x1f8], 0x204
mov edx, str.UniReports.dll
lea eax, [ebp - 0x188]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x188]
lea eax, [ebp - 0x158]
call fcn.007c5508
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x188]
mov edx, 2
call fcn.00402554
mov ecx, dword [ebp - 0x258]
add ecx, 4
mov dword [ebp - 0x26c], ecx
mov word [ebp - 0x1f8], 0x210
mov edx, 0x7cd5e8
lea eax, [ebp - 0x18c]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x18c]
mov eax, dword [ebp - 0x26c]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x18c]
mov edx, 2
call fcn.00402554
jmp 0x411168
mov word [ebp - 0x1f8], 0x21c
mov edx, str.UniQc.dll
lea eax, [ebp - 0x190]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x158]
call fcn.007c5508
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x190]
mov edx, 2
call fcn.00402554
mov ecx, dword [ebp - 0x258]
add ecx, 4
mov dword [ebp - 0x270], ecx
mov word [ebp - 0x1f8], 0x228
mov edx, 0x7cd601
lea eax, [ebp - 0x194]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x194]
mov eax, dword [ebp - 0x270]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x194]
mov edx, 2
call fcn.00402554
jmp 0x411168
mov word [ebp - 0x1f8], 0x234
mov edx, str.UniClcPath.dll
lea eax, [ebp - 0x198]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x158]
call fcn.007c5508
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x198]
mov edx, 2
call fcn.00402554
mov ecx, dword [ebp - 0x258]
add ecx, 4
mov dword [ebp - 0x274], ecx
mov word [ebp - 0x1f8], 0x240
mov edx, 0x7cd61b
lea eax, [ebp - 0x19c]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x19c]
mov eax, dword [ebp - 0x274]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.00402554
jmp 0x411168
mov word [ebp - 0x1f8], 0x24c
mov edx, str.UniCResearch.dll
lea eax, [ebp - 0x1a0]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x158]
call fcn.007c5508
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1a0]
mov edx, 2
call fcn.00402554
mov ecx, dword [ebp - 0x258]
add ecx, 4
mov dword [ebp - 0x278], ecx
mov word [ebp - 0x1f8], 0x258
mov edx, 0x7cd637
lea eax, [ebp - 0x1a4]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x278]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1a4]
mov edx, 2
call fcn.00402554
jmp 0x411168
mov word [ebp - 0x1f8], 0x264
mov edx, str.DoLinkCloud.dll
lea eax, [ebp - 0x1a8]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x1a8]
lea eax, [ebp - 0x158]
call fcn.007c5508
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1a8]
mov edx, 2
call fcn.00402554
mov ecx, dword [ebp - 0x258]
add ecx, 4
mov dword [ebp - 0x27c], ecx
mov word [ebp - 0x1f8], 0x270
mov edx, 0x7cd656
lea eax, [ebp - 0x1ac]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x1ac]
mov eax, dword [ebp - 0x27c]
call fcn.007c54f4
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1ac]
mov edx, 2
call fcn.00402554
mov word [ebp - 0x1f8], 0x27c
mov edx, 0x7cd65f
lea eax, [ebp - 0x1b0]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1b4]
call fcn.00402e20
inc dword [ebp - 0x1ec]
lea ecx, [ebp - 0x1b4]
inc dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x258]
add eax, 4
pop edx
call fcn.00402e50
xor ecx, ecx
mov dword [ebp - 0x1b8], ecx
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x1b8]
call fcn.0044987c
lea ecx, [ebp - 0x1b8]
inc dword [ebp - 0x1ec]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax + 0x424]
call fcn.005466b0
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x1b8]
mov edx, 2
call fcn.007c633c
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1b4]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1b0]
mov edx, 2
call fcn.00402554
mov word [ebp - 0x1f8], 0x288
xor ecx, ecx
mov dword [ebp - 0x1bc], ecx
lea edx, [ebp - 0x158]
lea eax, [ebp - 0x1bc]
call fcn.0044987c
lea ecx, [ebp - 0x1bc]
inc dword [ebp - 0x1ec]
mov eax, dword [ecx]
mov dl, 1
call fcn.004a3c5c
xor ecx, ecx
mov cl, al
cmp ecx, 1
sbb eax, eax
neg eax
push eax
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x1bc]
mov edx, 2
call fcn.007c633c
pop ecx
test cl, cl
je 0x4113be
mov edx, 0x7cd67e
lea eax, [ebp - 0x1c4]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1c8]
call fcn.00402e20
inc dword [ebp - 0x1ec]
lea ecx, [ebp - 0x1c8]
inc dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x258]
add eax, 4
pop edx
call fcn.00402e50
lea ecx, [ebp - 0x1c8]
push dword [ecx]
mov word [ebp - 0x1f8], 0x294
mov edx, 0x7cd669
lea eax, [ebp - 0x1c0]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0x1c0]
inc dword [ebp - 0x1ec]
push dword [eax]
call fcn.0040361c
mov ecx, 1
pop edx
call fcn.00439a54
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1c8]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1c4]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1c0]
mov edx, 2
call fcn.00402554
mov ecx, dword [sym.KDEMR.exe__F_PtMain]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38c]
mov eax, dword [edx + 0x294]
mov edx, dword [ebp - 0x254]
call fcn.006702f4
dec dword [ebp - 0x254]
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.00402554
jmp 0x411707
cmp dword [ebp - 0x158], 0
jne 0x4113ce
mov ecx, 0x7cd68c
jmp 0x4113d4
mov ecx, dword [ebp - 0x158]
push ecx
call sub.KERNEL32.DLL_LoadLibraryA
mov edx, dword [ebp - 0x258]
mov dword [edx], eax
push str.ShowChildWind
mov eax, dword [ebp - 0x258]
push dword [eax]
call sub.KERNEL32.DLL_GetProcAddress
mov edx, dword [ebp - 0x258]
mov dword [edx + 0x10], eax
push str.SetPrefix
mov eax, dword [ebp - 0x258]
push dword [eax]
call sub.KERNEL32.DLL_GetProcAddress
mov ecx, dword [ebp - 0x258]
mov dword [ecx + 0x14], eax
push str.SetChildSize
mov eax, dword [ebp - 0x258]
push dword [eax]
call sub.KERNEL32.DLL_GetProcAddress
mov edx, dword [ebp - 0x258]
mov dword [edx + 0x18], eax
mov ecx, dword [ebp - 0x258]
cmp dword [ecx + 0x10], 0
je 0x41144f
mov eax, dword [ebp - 0x258]
cmp dword [eax + 0x14], 0
jne 0x41156d
mov edx, 0x7cd6c7
lea eax, [ebp - 0x1d0]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x1d0]
push edx
lea eax, [ebp - 0x1d4]
call fcn.00402e20
inc dword [ebp - 0x1ec]
lea ecx, [ebp - 0x1d4]
inc dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x258]
add eax, 4
pop edx
call fcn.00402e50
lea ecx, [ebp - 0x1d4]
push dword [ecx]
mov word [ebp - 0x1f8], 0x2a0
mov edx, 0x7cd6b2
lea eax, [ebp - 0x1cc]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0x1cc]
inc dword [ebp - 0x1ec]
push dword [eax]
call fcn.0040361c
mov ecx, 1
pop edx
call fcn.00439a54
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1d4]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1d0]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1cc]
mov edx, 2
call fcn.00402554
mov ecx, dword [sym.KDEMR.exe__F_PtMain]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38c]
mov eax, dword [edx + 0x294]
mov edx, dword [ebp - 0x254]
call fcn.006702f4
dec dword [ebp - 0x254]
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.00402554
jmp 0x411707
cmp dword [0x7d2650], 0
jne 0x41157d
mov ecx, 0x7cd6d7
jmp 0x411583
mov ecx, dword [0x7d2650]
push ecx
mov eax, dword [ebp - 0x258]
call dword [eax + 0x14]
mov edx, dword [sym.KDEMR.exe__F_PtMain]
mov eax, dword [edx]
add eax, 0x488
mov dword [ebp - 0x280], eax
push dword [ebp - 0x280]
call fcn.00411968
pop ecx
mov ebx, eax
push dword [ebp - 0x280]
call fcn.00411990
pop ecx
cmp ebx, eax
jae 0x4115e9
lea eax, [ebp - 0x258]
push eax
push 1
mov edx, dword [ebp - 0x280]
push dword [edx + 0x14]
push dword [ebp - 0x280]
call fcn.004119b8
add esp, 0x10
mov ecx, dword [ebp - 0x280]
mov dword [ecx + 0x14], eax
jmp 0x41161b
lea eax, [ebp - 0x258]
push eax
add esp, 0xfffffff0
push dword [ebp - 0x280]
lea edx, [esp + 4]
push edx
call fcn.00411a18
add esp, 8
push dword [ebp - 0x280]
lea ecx, [ebp - 0x2a8]
push ecx
call fcn.00411a3c
add esp, 0x1c
xor eax, eax
mov dword [ebp - 0x1dc], eax
lea edx, [ebp - 0x1dc]
inc dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x20c]
mov eax, dword [ecx + 0x424]
call fcn.00546678
lea edx, [ebp - 0x1dc]
lea eax, [ebp - 0x1e0]
xor ecx, ecx
call fcn.007c53c4
inc dword [ebp - 0x1ec]
lea edx, [ebp - 0x1e0]
inc dword [ebp - 0x1ec]
push dword [edx]
mov word [ebp - 0x1f8], 0x2ac
mov edx, str.TF_LoginOn::TunOnIco
lea eax, [ebp - 0x1d8]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x1ec]
lea eax, [ebp - 0x1d8]
inc dword [ebp - 0x1ec]
push dword [eax]
call fcn.0040361c
xor ecx, ecx
pop edx
call fcn.00439a54
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1e0]
mov edx, 2
call fcn.00402554
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x1dc]
mov edx, 2
call fcn.007c633c
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x1d8]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x1ec], 2
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.00402554
mov word [ebp - 0x1f8], 0
inc dword [ebp - 0x254]
mov ecx, dword [sym.KDEMR.exe__F_PtMain]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38c]
mov eax, dword [edx + 0x294]
call fcn.0046361c
cmp eax, dword [ebp - 0x254]
jg 0x41095c
mov word [ebp - 0x1f8], 0x2b8
mov edx, 0x7cd6ed
lea eax, [ebp - 0x1e4]
call fcn.007c61ac
inc dword [ebp - 0x1ec]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x20c]
mov eax, dword [ecx + 0x424]
call fcn.005466b0
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x1e4]
mov edx, 2
call fcn.007c633c
mov ecx, dword [sym.KDEMR.exe__F_PtMain]
mov eax, dword [ecx]
mov dl, 2
call fcn.00521d0c
mov ecx, dword [ebp - 0x208]
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret