Function at 0x650be0
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x30
mov eax, dword [ecx + 0x230]
push ebx
push ebp
push esi
test eax, eax
mov dword [esp + 0xc], ecx
je 0x6518f1
mov eax, dword [ecx + 0x60]
mov ecx, dword [eax + 0x50]
test ecx, ecx
jne 0x6518f1
mov eax, dword [0x93cbf0]
push edi
mov ebx, dword [eax + 0x28]
mov ebp, dword [eax + 0x24]
mov edi, dword [eax + 0x20]
mov esi, dword [eax + 0x1c]
mov ecx, ebx
mov edx, ebp
push ecx
push edx
mov ecx, edi
mov edx, esi
push ecx
mov ecx, dword [esp + 0x1c]
push edx
call fcn.0066e870
test byte [esp + 0x44], 0x40
je 0x650c41
mov ecx, dword [esp + 0x10]
push ebx
push ebp
push edi
push esi
call fcn.00670c60
mov eax, dword [esp + 0x44]
test ah, 1
je 0x650c57
mov ecx, dword [esp + 0x10]
push ebx
push ebp
push edi
push esi
call fcn.00671490
mov eax, dword [esp + 0x44]
test ah, 8
je 0x650c7b
mov eax, dword [0x93cc04]
mov cl, byte [eax + 0xc8]
test cl, cl
jne 0x650c7b
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x70]
call fcn.004f71d0
test byte [esp + 0x44], 1
je 0x650c8f
mov ecx, dword [esp + 0x10]
push ebx
push ebp
push edi
push esi
call fcn.0066ed70
mov eax, dword [esp + 0x44]
and eax, 4
mov dword [esp + 0x18], eax
je 0x650ca9
mov ecx, dword [esp + 0x10]
push ebx
push ebp
push edi
push esi
call fcn.0066ff70
test byte [esp + 0x44], 2
je 0x650ceb
mov eax, dword [0x93c98c]
mov cl, byte [eax + 0xb1c]
test cl, cl
je 0x650cc9
mov dword [eax + 0x33c], 0
mov ecx, dword [0x93cbf0]
mov al, byte [ecx + 0x7d]
test al, al
je 0x650ce0
push 0xc8
call fcn.00651900
mov edx, dword [esp + 0x10]
mov byte [edx + 0x268], 0
mov eax, dword [esp + 0x44]
test ah, 2
je 0x650d01
mov ecx, dword [esp + 0x10]
push ebx
push ebp
push edi
push esi
call fcn.0066eb00
test byte [esp + 0x44], 0x10
je 0x650d16
mov eax, dword [esp + 0x10]
mov dword [eax + 0x2cc], 0
test esi, esi
mov dword [esp + 0x44], 0
mov dword [esp + 0x14], 0
jne 0x650d34
mov dword [esp + 0x44], 0xc0000000
jmp 0x650d47
mov ecx, dword [0x805764]
dec ecx
cmp ecx, esi
jne 0x650d47
mov dword [esp + 0x44], 0x40000000
test edi, edi
jne 0x650d55
mov dword [esp + 0x14], 0xbf800000
jmp 0x650d68
mov edx, dword [0x805768]
dec edx
cmp edx, edi
jne 0x650d68
mov dword [esp + 0x14], 0x3f800000
fld dword [esp + 0x44]
fcomp dword [0x765614]
mov ebp, 3
fnstsw ax
test ah, 0x40
jne 0x650da8
mov ecx, dword [0x93cbfc]
cmp dword [ecx + 0x1c8], ebp
jne 0x650d98
mov eax, dword [esp + 0x44]
push eax
call fcn.006efd00
jmp 0x650da8
mov ecx, dword [esp + 0x44]
push ecx
mov ecx, dword [0x93c98c]
call fcn.00472d20
fld dword [esp + 0x14]
fcomp dword [0x765614]
fnstsw ax
test ah, 0x40
jne 0x650dd1
mov ecx, dword [0x93cbfc]
cmp dword [ecx + 0x1c8], ebp
je 0x650dd1
mov edx, dword [esp + 0x14]
push edx
call fcn.006efba0
mov ecx, dword [0x93cbf0]
xor ebx, ebx
cmp dword [ecx + 0x274], ebx
je 0x650de5
xor eax, eax
jmp 0x650e49
cmp dword [ecx + 0x278], ebx
je 0x650df4
mov eax, 1
jmp 0x650e49
cmp dword [ecx + 0x27c], ebx
je 0x650e03
mov eax, 2
jmp 0x650e49
cmp dword [ecx + 0x280], ebx
je 0x650e0f
mov eax, ebp
jmp 0x650e49
cmp dword [ecx + 0x284], ebx
je 0x650e1e
mov eax, 4
jmp 0x650e49
cmp dword [ecx + 0x288], ebx
je 0x650e2d
mov eax, 5
jmp 0x650e49
cmp dword [ecx + 0x28c], ebx
je 0x650e3c
mov eax, 6
jmp 0x650e49
cmp dword [ecx + 0x290], ebx
je 0x650e7f
mov eax, 7
mov edx, dword [0x7c4d80]
mov esi, dword [esp + 0x10]
cmp edx, ebx
jne 0x650e83
mov edx, dword [esi + 0x60]
cmp dword [edx + 0x50], ebx
jne 0x650e83
mov ecx, dword [esi + 0x70]
push eax
call fcn.004f5c70
mov ecx, dword [esi + 0x14c]
cmp ecx, ebx
je 0x650e77
call fcn.00594990
mov ecx, dword [0x93cbf0]
jmp 0x650e83
mov esi, dword [esp + 0x10]
cmp dword [ecx + 0x378], ebx
je 0x650ee5
mov eax, dword [0x93cbfc]
cmp dword [eax + 0x1c8], ebp
jne 0x650ed2
mov eax, dword [0x93c98c]
mov cl, byte [eax + 0xb1c]
test cl, cl
je 0x650ed2
mov byte [eax + 0xae8], 0
mov ecx, dword [0x93c98c]
mov byte [ecx + 0xb1c], 0
mov edx, dword [0x93c98c]
mov al, byte [edx + 0x45c]
test al, al
jne 0x650ed2
mov ecx, esi
call fcn.00662d50
mov ecx, dword [0x93cbfc]
push 0xffffffffffffffff
call fcn.006efb50
mov ecx, dword [0x93cbf0]
mov eax, dword [0x93cbfc]
cmp dword [eax + 0x1c8], ebp
jne 0x650f2c
cmp dword [0x7c4d80], ebx
jne 0x650f2c
mov dl, byte [ecx + 0x133]
test dl, dl
je 0x650f0e
mov dword [esp + 0x44], 0x3f490fdb
jmp 0x650f20
mov dl, byte [ecx + 0x13b]
test dl, dl
je 0x650f2c
mov dword [esp + 0x44], 0xbf490fdb
mov ecx, dword [esp + 0x44]
push ecx
mov ecx, eax
call fcn.006efba0
call fcn.006fc4d0
test al, al
jne 0x6517ac
cmp dword [0x7c4d80], ebx
jne 0x6517ac
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x590], ebx
je 0x650f5c
mov ecx, dword [esi + 0x70]
call fcn.004f5b60
jmp 0x650f6c
cmp dword [eax + 0x5b0], ebx
je 0x650f6c
mov ecx, dword [esi + 0x70]
call fcn.004f5b80
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x294], ebx
je 0x650f83
mov ecx, dword [esi + 0x44]
call fcn.00561090
jmp 0x650f93
cmp dword [eax + 0x298], ebx
je 0x650f93
mov ecx, dword [esi + 0x48]
call fcn.0053cfa0
mov ecx, dword [0x93c98c]
mov eax, dword [ecx + 0x4a4]
cmp eax, ebx
je 0x650faa
cmp eax, 0xfa
jne 0x650fd0
mov edx, dword [0x93cbf0]
mov al, byte [edx + 0x7c]
test al, al
je 0x650fc9
cmp dword [ecx + 0x7f8], 5
jge 0x650fc9
mov byte [ecx + 0xb04], 1
jmp 0x650fd0
mov byte [ecx + 0xb04], 0
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x2cc], ebx
je 0x650fee
mov cl, byte [0x7a47e8]
test cl, cl
sete cl
mov byte [0x7a47e8], cl
cmp dword [eax + 0x2b8], ebx
je 0x651068
mov ecx, dword [0x93c98c]
mov eax, dword [ecx + 0x4ac]
cmp eax, 0x753a
je 0x651068
cmp eax, 0x7558
je 0x651068
cmp eax, 0x7562
je 0x651068
cmp eax, 0x756c
je 0x651068
cmp eax, 0x756d
je 0x651068
call fcn.00474b10
test al, al
jne 0x651068
mov ecx, dword [0x93c98c]
push ebx
call fcn.00469970
cmp eax, ebx
je 0x65104e
mov ecx, dword [eax + 0x2fc]
cmp ecx, 4
je 0x651068
cmp ecx, 5
je 0x651068
mov edx, dword [0x93c98c]
push eax
mov ecx, esi
mov al, byte [edx + 0xae9]
test al, al
sete al
push eax
call fcn.006631a0
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x2bc], ebx
je 0x6510aa
mov ecx, dword [0x93c98c]
mov eax, dword [ecx + 0x4ac]
cmp eax, 0x753a
je 0x6510aa
cmp eax, 0x7558
je 0x6510aa
cmp eax, 0x7562
je 0x6510aa
cmp eax, 0x756c
je 0x6510aa
cmp eax, 0x756d
je 0x6510aa
call fcn.00472670
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x31c], ebx
je 0x6510ed
mov eax, dword [0x93c98c]
mov eax, dword [eax + 0x4ac]
cmp eax, 0x753a
je 0x6510ed
cmp eax, 0x7558
je 0x6510ed
cmp eax, 0x7562
je 0x6510ed
cmp eax, 0x756c
je 0x6510ed
cmp eax, 0x756d
je 0x6510ed
mov ecx, esi
call fcn.006660a0
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x350], ebx
je 0x6511d9
mov ecx, dword [0x93c98c]
mov eax, dword [ecx + 0x4ac]
cmp eax, 0x753a
je 0x6511d9
cmp eax, 0x7558
je 0x6511d9
cmp eax, 0x7562
je 0x6511d9
cmp eax, 0x756c
je 0x6511d9
cmp eax, 0x756d
je 0x6511d9
add ecx, 0x98
mov edx, dword [ecx]
mov dword [esp + 0x1c], edx
lea edx, [esp + 0x1c]
mov eax, dword [ecx + 4]
push edx
mov dword [esp + 0x24], eax
mov ecx, dword [ecx + 8]
mov dword [esp + 0x28], ecx
mov ecx, dword [0x93c988]
call fcn.0047ea80
mov edi, eax
cmp edi, ebx
je 0x6511d9
mov eax, dword [0x93c98c]
add eax, 0x98
mov ecx, dword [eax]
mov dword [esp + 0x28], ecx
lea ecx, [edi + 0x98]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], edx
mov edx, dword [ecx]
mov eax, dword [eax + 8]
mov dword [esp + 0x34], edx
mov dword [esp + 0x30], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0x38], eax
lea edx, [esp + 0x28]
mov ecx, dword [ecx + 8]
lea eax, [esp + 0x1c]
mov dword [esp + 0x3c], ecx
push edx
push eax
lea ecx, [esp + 0x3c]
call fcn.00424c30
mov ecx, eax
call fcn.00424500
fcomp dword [0x76d468]
fnstsw ax
test ah, 1
je 0x6511d9
push edi
mov ecx, esi
call fcn.006521c0
mov ecx, dword [esi + 0x5c]
cmp ecx, ebx
je 0x65127d
mov al, byte [ecx + 0xa8]
test al, al
je 0x65127d
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x388], ebx
je 0x651207
push 0x47
call fcn.004ea9d0
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x38c], ebx
je 0x65121e
mov ecx, dword [esi + 0x5c]
push 0x48
call fcn.004ea9d0
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x398], ebx
je 0x651236
mov ecx, dword [esi + 0x5c]
push 0x4b
call fcn.004ea9d0
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x39c], ebx
je 0x65124e
mov ecx, dword [esi + 0x5c]
push 0x4c
call fcn.004ea9d0
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x3a8], ebx
je 0x651265
mov ecx, dword [esi + 0x5c]
push 0x4f
call fcn.004ea9d0
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x3ac], ebx
je 0x65127d
mov ecx, dword [esi + 0x5c]
push 0x50
call fcn.004ea9d0
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x320], ebx
je 0x651292
mov ecx, esi
call fcn.006661b0
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x32c], ebx
je 0x6512a6
mov ecx, esi
call fcn.006662b0
mov eax, dword [0x93cbf0]
mov cl, byte [eax + 0x8a]
test cl, cl
jne 0x6512bf
mov cl, byte [eax + 0x137]
test cl, cl
je 0x6512f1
mov ecx, dword [0x93c98c]
mov eax, dword [ecx + 0x2fc]
cmp eax, 4
je 0x6512df
cmp eax, 5
je 0x6512df
push 0xbf860a92
call fcn.00472d20
mov ecx, dword [esi + 0x5c]
mov al, byte [ecx + 0xa8]
test al, al
je 0x6512f1
call fcn.004e8a80
mov eax, dword [0x93cbf0]
mov cl, byte [eax + 0x8c]
test cl, cl
jne 0x65130a
mov cl, byte [eax + 0x139]
test cl, cl
je 0x65133c
mov ecx, dword [0x93c98c]
mov eax, dword [ecx + 0x2fc]
cmp eax, 4
je 0x65132a
cmp eax, 5
je 0x65132a
push 0x3f860a92
call fcn.00472d20
mov ecx, dword [esi + 0x5c]
mov al, byte [ecx + 0xa8]
test al, al
je 0x65133c
call fcn.004e8a80
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x2b0], ebx
jne 0x651351
cmp dword [eax + 0x58c], ebx
je 0x65135d
mov ecx, dword [0x93c98c]
mov dword [ecx + 0x33c], ebx
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x2b4], ebx
je 0x651380
mov eax, dword [0x93c98c]
mov cl, byte [eax + 0x45c]
test cl, cl
jne 0x651380
mov dword [eax + 0x33c], ebx
mov eax, dword [0x93cbf0]
mov cl, byte [eax + 0x7d]
test cl, cl
jne 0x6514a7
mov cl, byte [eax + 0x134]
test cl, cl
jne 0x6514a7
mov cl, byte [eax + 0x8b]
test cl, cl
jne 0x65143e
mov cl, byte [eax + 0x13c]
test cl, cl
jne 0x65143e
cmp dword [eax + 0x2b4], ebx
je 0x65150b
mov ecx, dword [0x93c98c]
mov al, byte [ecx + 0x45c]
test al, al
jne 0x65150b
cmp dword [esp + 0x18], ebx
jne 0x65150b
cmp dword [ecx + 0x4ac], 0x756d
je 0x65150b
mov al, byte [ecx + 0xaf8]
test al, al
jne 0x65150b
mov eax, dword [ecx + 0x2fc]
cmp eax, 4
je 0x65150b
cmp eax, 5
je 0x65150b
cmp byte [ecx + 0xaea], 1
jne 0x65142e
push 1
push ebx
push ebx
mov ecx, esi
call fcn.00665f00
mov ecx, dword [0x93c98c]
call fcn.004726f0
jmp 0x65150b
cmp dword [esp + 0x18], ebx
jne 0x65150b
mov ecx, dword [eax + 0x2e8]
mov byte [esp + 0x44], 0
cmp ecx, ebx
jne 0x65145f
cmp dword [eax + 0x5ac], ebx
je 0x65149e
mov eax, dword [0x93cbfc]
cmp dword [eax + 0x1c8], ebp
jne 0x651499
mov eax, dword [0x93c98c]
mov cl, byte [eax + 0xb1c]
test cl, cl
jne 0x651480
mov byte [esp + 0x44], 1
push ebx
push ebx
mov ecx, esi
mov byte [eax + 0xb1c], 0
call fcn.006631a0
mov ecx, dword [esp + 0x44]
push ecx
push 2
jmp 0x651504
mov byte [esp + 0x44], 1
mov ecx, dword [esp + 0x44]
push ecx
push 2
jmp 0x651504
cmp dword [esp + 0x18], ebx
jne 0x65150b
mov ecx, dword [eax + 0x2b0]
mov byte [esp + 0x44], 0
cmp ecx, ebx
jne 0x6514c4
cmp dword [eax + 0x58c], ebx
je 0x6514fd
mov edx, dword [0x93cbfc]
cmp dword [edx + 0x1c8], ebp
jne 0x6514f8
mov eax, dword [0x93c98c]
mov cl, byte [eax + 0xb1c]
test cl, cl
jne 0x6514e6
mov byte [esp + 0x44], 1
push ebx
push ebx
mov ecx, esi
mov byte [eax + 0xb1c], 0
call fcn.006631a0
jmp 0x6514fd
mov byte [esp + 0x44], 1
mov eax, dword [esp + 0x44]
push eax
push 1
mov ecx, esi
call fcn.00662da0
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x6b0], ebx
jne 0x651530
cmp dword [eax + 0x98c], ebx
jne 0x651530
cmp dword [eax + 0x6e8], ebx
jne 0x651530
cmp dword [eax + 0x9ac], ebx
je 0x651540
cmp dword [esp + 0x18], ebx
jne 0x651540
push 1
push ebx
mov ecx, esi
call fcn.00662da0
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x2c8], ebx
je 0x651555
mov ecx, esi
call fcn.00663590
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x2c4], ebx
je 0x65158b
mov ecx, dword [esi + 0x40]
mov al, byte [ecx + 0xa8]
test al, al
jne 0x651586
push ecx
mov ecx, dword [0x93cc04]
call fcn.005fed10
mov ecx, dword [esi + 0x40]
call fcn.0058d2e0
jmp 0x65158b
call fcn.0058d340
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x300], ebx
je 0x65159f
mov ecx, esi
call fcn.00663650
mov ecx, dword [0x93cbf0]
mov eax, dword [ecx + 0x324]
cmp eax, ebx
je 0x65164c
mov dl, byte [ecx + 0x96]
test dl, dl
je 0x65161d
mov ecx, dword [esi + 0x200]
cmp ecx, ebx
je 0x6515d0
call fcn.0059c860
test al, al
jne 0x65164c
mov ecx, dword [0x93cc04]
mov al, byte [ecx + 0xd8]
test al, al
jne 0x651603
push ebx
call fcn.005fed10
mov ecx, dword [esi + 0x128]
cmp ecx, ebx
je 0x6515f6
push ebx
call fcn.0056dba0
mov ecx, dword [0x93cc04]
call fcn.005ff0f0
jmp 0x65164c
mov ecx, dword [esi + 0x128]
cmp ecx, ebx
je 0x651614
push 1
call fcn.0056dba0
mov ecx, esi
call fcn.00678550
jmp 0x65164c
cmp eax, ebx
je 0x65164c
mov ecx, dword [0x93c98c]
mov eax, dword [ecx + 0x224]
cmp eax, 0xb
je 0x65164c
cmp eax, 0xd
je 0x65164c
mov al, byte [ecx + 0xaea]
push ebx
test al, al
sete cl
push ecx
push ebx
mov ecx, esi
call fcn.00665f00
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x37c], ebx
je 0x651685
mov ecx, dword [esi + 0x188]
mov al, byte [ecx + 0xa8]
test al, al
je 0x65167e
mov eax, dword [ecx]
push ebx
call dword [eax + 0x44]
mov ecx, dword [esi + 0x188]
mov dword [ecx + 0x318], ebx
jmp 0x651685
mov edx, dword [ecx]
push 1
call dword [edx + 0x44]
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x334], ebx
je 0x6516c8
mov ecx, dword [esi + 0x200]
cmp ecx, ebx
je 0x6516a9
call fcn.0059c860
test al, al
jne 0x6516a9
push 1
jmp 0x6516bd
mov ecx, dword [esi + 0x200]
cmp ecx, ebx
je 0x6516c8
call fcn.0059c860
test al, al
je 0x6516c8
push ebx
mov ecx, dword [esi + 0x200]
call fcn.0059c790
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x330], ebx
je 0x6516f2
mov ecx, dword [esi + 0x1c0]
mov al, byte [ecx + 0xa8]
test al, al
je 0x6516ed
call fcn.005f67a0
jmp 0x6516f2
call fcn.005f67e0
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x2f8], ebx
je 0x65173a
mov eax, dword [esi + 0x60]
cmp dword [eax + 0x50], ebx
jne 0x65173a
mov ecx, dword [esi + 0xd0]
cmp ecx, ebx
je 0x65173a
mov al, byte [ecx + 0xa8]
test al, al
je 0x651723
call fcn.0056c820
jmp 0x65173a
push ecx
mov ecx, dword [0x93cc04]
call fcn.005fed10
mov ecx, dword [esi + 0xd0]
call fcn.0056c7f0
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x304], ebx
je 0x651781
mov ecx, dword [esi + 0x40]
mov al, byte [ecx + 0xa8]
test al, al
je 0x65175a
call fcn.0058d340
mov ecx, dword [esi + 0x17c]
cmp ecx, ebx
je 0x651781
mov al, byte [ecx + 0xa8]
test al, al
jne 0x651777
mov edx, dword [ecx]
push 1
call dword [edx + 0x44]
jmp 0x651781
cmp al, 1
jne 0x651781
mov eax, dword [ecx]
push ebx
call dword [eax + 0x44]
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x2a8], ebx
je 0x6517ac
mov ecx, dword [esi + 0x68]
cmp ecx, ebx
je 0x6517ac
cmp dword [ecx + 0x1a8], 2
jl 0x6517ac
mov edx, dword [ecx + 0x1ac]
inc edx
push edx
call fcn.0052c190
mov eax, dword [0x93cbf0]
pop edi
cmp dword [eax + 0x270], ebx
je 0x651824
mov ecx, dword [0x93cc28]
mov eax, dword [ecx + 0x1cc]
mov cl, byte [eax + 0x1a4]
test cl, cl
je 0x6517fc
mov byte [eax + 0x1a4], 0
mov edx, dword [0x93c98c]
mov eax, dword [edx + 0x490]
cmp eax, 2
mov eax, dword [0x93cc58]
je 0x6517f2
mov eax, dword [0x93cc54]
push ebx
push eax
call fcn.006fa950
add esp, 8
mov eax, dword [0x93cc04]
cmp byte [eax + 0xd8], 1
jne 0x651824
mov ecx, dword [esi + 0x200]
cmp ecx, ebx
je 0x651824
call fcn.0059c860
test al, al
jne 0x651824
mov ecx, esi
call fcn.00678550
push 0x12
call dword [sym.imp.user32.dll_GetAsyncKeyState]
test ax, ax
jne 0x6518f1
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x358], ebx
je 0x65184c
mov ecx, dword [esi + 0x70]
push ebx
call fcn.004f5ba0
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x35c], ebx
je 0x651864
mov ecx, dword [esi + 0x70]
push 1
call fcn.004f5ba0
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x360], ebx
je 0x65187b
mov ecx, dword [esi + 0x70]
push 2
call fcn.004f5ba0
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x364], ebx
je 0x651892
mov ecx, dword [esi + 0x70]
push ebp
call fcn.004f5ba0
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x368], ebx
je 0x6518aa
mov ecx, dword [esi + 0x70]
push 4
call fcn.004f5ba0
mov eax, dword [0x93cbf0]
cmp dword [eax + 0x36c], ebx
je 0x6518c1
mov ecx, dword [esi + 0x70]
push 5
call fcn.004f5ba0
mov ecx, dword [0x93cbf0]
cmp dword [ecx + 0x370], ebx
je 0x6518d9
mov ecx, dword [esi + 0x70]
push 6
call fcn.004f5ba0
mov edx, dword [0x93cbf0]
cmp dword [edx + 0x374], ebx
je 0x6518f1
mov ecx, dword [esi + 0x70]
push 7
call fcn.004f5ba0
pop esi
pop ebp
pop ebx
add esp, 0x30
ret 4