Function at 0xb88204
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xe
push 0
push 0
dec ecx
jne 0xb8820c
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0xb88e90
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
mov edx, dword [eax]
call dword [edx + 0x14c]
test eax, eax
je 0xb882a8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
call fcn.004e51c4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
mov edx, 0xb88ea8
call fcn.004e481c
mov edx, dword [eax]
call dword [edx + 0x58]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.004faa10
dec eax
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x348]
sub eax, dword [edx + 0x228]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x344]
call fcn.004603c4
mov dword [0xba95a8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x344]
mov eax, dword [eax + 0x26c]
call fcn.0045f13c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0xb88345
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x20], 2
jne 0xb882ee
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.0045de08
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0xffffffff
jne 0xb88311
or edx, 0xffffffff
mov eax, dword [ebp - 0x14]
call fcn.0045de08
mov edx, 4
mov eax, dword [ebp - 0x14]
call fcn.0045de08
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0xfffffffe
jne 0xb88334
or edx, 0xffffffff
mov eax, dword [ebp - 0x14]
call fcn.0045de08
mov edx, 3
mov eax, dword [ebp - 0x14]
call fcn.0045de08
mov eax, dword [ebp - 0x14]
call fcn.0045e3dc
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0xb882d8
cmp dword [0xba95a8], 0
je 0xb88377
mov eax, dword [0xba95a8]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0xffffffff
je 0xb88377
mov eax, dword [0xba95a8]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0xfffffffe
je 0xb88377
mov edx, 2
mov eax, dword [0xba95a8]
call fcn.0045de08
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.006928a0
test al, al
je 0xb88397
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax]
call dword [edx + 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax]
call dword [edx + 0x38]
cmp dword [0xba95a8], 0
je 0xb8870a
mov eax, dword [0xba95a8]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0xffffffff
jne 0xb88665
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.00488adc
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x1c]
call fcn.0040a5f0
cmp dword [ebp - 0x1c], 0
je 0xb883f6
mov edx, dword [ebp - 0x1c]
mov eax, 0xb88ec0
call fcn.004057f0
test eax, eax
jle 0xb88433
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
mov edx, 0xb88ecc
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 0xb88ea8
call fcn.00652db0
xor edx, edx
call fcn.00682cb8
jmp 0xb88665
xor eax, eax
push ebp
push 0xb8845d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1c]
call fcn.0040ccc8
fmul dword [0xb88f0c]
fistp qword [ebp - 0x28]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xb88475
fild qword [ebp - 0x28]
fcomp dword [0xb88f10]
fnstsw ax
sahf
jne 0xb885c1
mov ecx, 0xb88f1c
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x6f00bc]
call fcn.006f0118
mov dword [ebp - 0x2c], eax
push 0xb88f28
lea ecx, [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x38]
push 0xb88f7c
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.0040556c
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jle 0xb8850d
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 1
push dword [ebp - 0x20]
push 0xb88f1c
lea ecx, [ebp - 0x3c]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x3c]
push 0xb88f7c
lea eax, [ebp - 0x20]
mov edx, 4
call fcn.0040556c
inc dword [ebp - 0x18]
dec dword [ebp - 0x30]
jne 0xb884da
push dword [ebp - 0x20]
push 0xb88ec0
push 0xb88f88
lea ecx, [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x40]
push 0xb88f7c
lea eax, [ebp - 0x20]
mov edx, 5
call fcn.0040556c
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jle 0xb88586
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 1
push dword [ebp - 0x20]
push 0xb88f1c
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x44]
push 0xb88f7c
lea eax, [ebp - 0x20]
mov edx, 4
call fcn.0040556c
inc dword [ebp - 0x18]
dec dword [ebp - 0x30]
jne 0xb88553
push dword [ebp - 0x20]
push 0xb88ec0
push 0xb88fc8
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.0040556c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
mov edx, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
jmp 0xb88665
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
mov edx, 0xb88fd4
mov ecx, dword [eax]
call dword [ecx + 0x2c]
fild qword [ebp - 0x28]
fdiv dword [0xb88f0c]
call fcn.0040315c
push edx
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 0xb890b0
call fcn.00652db0
call fcn.00682a78
fild qword [ebp - 0x28]
fdiv dword [0xb88f0c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 0xb890c4
call fcn.00652db0
call fcn.00682c20
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 0xb890d8
call fcn.00652db0
mov edx, dword [ebp - 0x1c]
call fcn.0068332c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 0xb890ec
call fcn.00652db0
mov edx, dword [ebp - 0x1c]
call fcn.0068332c
mov eax, dword [0xba95a8]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0xfffffffe
jne 0xb886ad
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
mov edx, 0xb89104
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 0xb89148
call fcn.00652db0
mov edx, 1
call fcn.00682cb8
mov eax, dword [0xba95a8]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0xffffffff
je 0xb88728
mov eax, dword [0xba95a8]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0xfffffffe
je 0xb88728
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
mov edx, 0xb89160
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 0xb891a4
call fcn.00652db0
mov edx, dword [0xba95a8]
mov edx, dword [edx + 0xc]
mov edx, dword [edx]
call fcn.00682cb8
jmp 0xb88728
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
mov edx, 0xb891bc
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
lea edx, [ebp - 0x4c]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
push dword [ebp - 0x4c]
push 0xb891f4
push 0xb890d8
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0xba16c4]
mov eax, dword [eax]
mov ecx, 0xb89208
mov edx, 0xb89220
mov ebx, dword [eax]
call dword [ebx]
push dword [ebp - 0x50]
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.0040556c
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
push 0xb89230
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0xba16c4]
mov eax, dword [eax]
mov ecx, 0xb89240
mov edx, 0xb89220
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x54]
mov edx, 0xb89230
call fcn.004055f8
jne 0xb8880c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
lea edx, [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
lea eax, [ebp - 0x58]
mov edx, 0xb8925c
call fcn.004054b4
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov eax, dword [eax + 0x38c]
call fcn.00695ce0
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
call fcn.004e35a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e35b0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e35a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e51c4
jmp 0xb88927
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e6200
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov eax, dword [eax + 0x30]
call fcn.004da194
dec eax
test eax, eax
jl 0xb888eb
inc eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov eax, dword [eax + 0x30]
mov edx, dword [ebp - 0x18]
call fcn.004da15c
mov edx, dword [eax + 0x38]
lea eax, [ebp - 0x1c]
call fcn.00405284
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, dword [ebp - 0x1c]
call fcn.004e48a4
test eax, eax
je 0xb888e3
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, dword [ebp - 0x1c]
call fcn.004e481c
lea edx, [ebp - 0x5c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x5c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, dword [ebp - 0x1c]
call fcn.004e481c
pop edx
mov ecx, dword [eax]
call dword [ecx + 0xb0]
inc dword [ebp - 0x18]
dec dword [ebp - 0x30]
jne 0xb88878
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb8926c
call fcn.004e481c
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, dword [eax]
call dword [edx + 0x24c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
call fcn.004e5fbc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
cmp byte [eax + 0xa1], 0
je 0xb88849
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e5ca0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a4]
mov edx, dword [eax]
call dword [edx + 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.00652ce4
mov edx, 0xb89280
mov ecx, dword [eax]
call dword [ecx + 0x2c]
cmp dword [0xba95a8], 0
je 0xb88989
mov eax, dword [0xba95a8]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov dword [ebp - 8], eax
jmp 0xb8898e
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
mov edx, 0xb892d8
call fcn.00652db0
mov edx, dword [ebp - 8]
call fcn.00682cb8
cmp dword [ebp - 8], 0
jne 0xb88aaf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e6144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb88ea8
call fcn.004e481c
mov edx, 0xfffffffe
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb890d8
call fcn.004e481c
mov edx, 0xb892ec
mov ecx, dword [eax]
call dword [ecx + 0xb0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb8926c
call fcn.004e481c
mov edx, 4
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, dword [eax]
call dword [edx + 0x24c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e6144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb88ea8
call fcn.004e481c
or edx, 0xffffffff
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb890d8
call fcn.004e481c
mov edx, 0xb89308
mov ecx, dword [eax]
call dword [ecx + 0xb0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb8926c
call fcn.004e481c
mov edx, 3
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, dword [eax]
call dword [edx + 0x24c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.004e35a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.004e5d78
jmp 0xb88b91
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e6144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
mov edx, 0xb89324
call fcn.004e481c
mov edx, dword [eax]
call dword [edx + 0x58]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb88ea8
call fcn.004e481c
mov edx, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
mov edx, 0xb8933c
call fcn.004e481c
lea edx, [ebp - 0x60]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x60]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb890d8
call fcn.004e481c
pop edx
mov ecx, dword [eax]
call dword [ecx + 0xb0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb8926c
call fcn.004e481c
mov edx, 1
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, dword [eax]
call dword [edx + 0x24c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.004e5fe4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
cmp byte [eax + 0xa0], 0
je 0xb88ad0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.004e35b0
cmp dword [0xba95a8], 0
je 0xb88cb1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.00652ce4
mov edx, 0xb89354
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
mov edx, 0xb89324
call fcn.00652db0
mov edx, dword [0xba95a8]
mov edx, dword [edx + 0xc]
mov edx, dword [edx]
call fcn.00682cb8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.004e35a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e6144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
mov edx, 0xb892d8
call fcn.004e481c
mov edx, dword [eax]
call dword [edx + 0x58]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb88ea8
call fcn.004e481c
mov edx, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb890d8
call fcn.004e481c
mov edx, 0xb8939c
mov ecx, dword [eax]
call dword [ecx + 0xb0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0xb8926c
call fcn.004e481c
mov edx, 2
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, dword [eax]
call dword [edx + 0x24c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.004e35b0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a4]
mov edx, dword [eax]
call dword [edx + 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
call fcn.004e35b0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e5ca0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.004e51e4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
mov edx, dword [eax]
call dword [edx + 0x14c]
test eax, eax
je 0xb88d85
mov al, byte [0xb893a0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 0x10]
mov cl, 0xfc
call fcn.00417620
lea ecx, [ebp - 0x70]
mov edx, 0xb88ea8
pop eax
mov ebx, dword [eax]
call dword [ebx + 0x244]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
mov edx, dword [ebp - 0xc]
call fcn.004e5e14
neg eax
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
pop edx
call fcn.004e5e14
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
call fcn.004e51e4
mov eax, dword [0xba95a8]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
call fcn.004051ec
cmp dword [ebp - 0x14], 0
je 0xb88dc7
push 0xb893ac
mov eax, dword [ebp - 0x14]
push dword [eax + 8]
push dword [ebp - 0x1c]
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.0040556c
mov eax, dword [ebp - 0x14]
call fcn.0045e234
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0xb88d9b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.0045cb84
mov edx, dword [ebp - 0x1c]
call fcn.0045cae0
mov eax, dword [0xba1b18]
cmp byte [eax], 0
je 0xb88e1b
mov eax, dword [ebp - 4]
call fcn.00b8aaec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
mov edx, dword [ebp - 4]
mov dword [eax + 0x13c], edx
mov dword [eax + 0x138], 0xb8b850
mov eax, dword [ebp - 4]
push eax
push 0xb8b8b4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
mov edx, dword [eax]
call dword [edx + 0x19c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.005d6ba8
mov eax, dword [eax + 0x30]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x190]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xb88e97
lea eax, [ebp - 0x70]
call fcn.00413110
lea eax, [ebp - 0x60]
mov edx, 0xb
call fcn.00405210
lea eax, [ebp - 0x34]
call fcn.004051ec
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00405210
ret