Function at 0x496058
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x45
push 0
push 0
dec ecx
jne 0x496061
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 4], edx
mov ebx, eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.00404990
xor eax, eax
push ebp
push 0x497ad8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
call fcn.004047a0
mov ecx, eax
mov edx, 0x11
mov eax, dword [ebp - 4]
call fcn.00404a00
mov edx, dword [ebp - 8]
mov eax, 0x497af4
call fcn.00404ae4
push eax
mov eax, dword [ebp - 8]
call fcn.004047a0
mov ecx, eax
lea eax, [ebp - 8]
pop edx
call fcn.00404a40
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 8]
call fcn.004066bc
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 8]
call fcn.00404768
lea edx, [ebp - 0x180]
mov eax, dword [ebp - 8]
call fcn.00408aec
mov ecx, dword [ebp - 0x180]
lea eax, [ebp - 0x17c]
mov edx, 0x497b00
call fcn.004047ec
mov eax, dword [ebp - 0x17c]
push eax
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.0048bf40
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.00477d0c
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
xor edx, edx
call fcn.0046e31c
lea edx, [ebp - 0x54]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 1
call fcn.0046e31c
lea edx, [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.00477d18
mov eax, dword [ebp - 0x54]
call fcn.004047a0
test eax, eax
jle 0x497898
mov edx, dword [ebp - 4]
mov eax, 0x497b34
call fcn.00404ae4
test eax, eax
jne 0x497761
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 8]
call fcn.00408aec
mov ecx, dword [ebp - 0x188]
lea eax, [ebp - 0x184]
mov edx, 0x497b50
call fcn.004047ec
mov eax, dword [ebp - 0x184]
push eax
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.0048bf40
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.00477d0c
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
xor edx, edx
call fcn.0046e31c
lea edx, [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 1
call fcn.0046e31c
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 2
call fcn.0046e31c
lea edx, [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 3
call fcn.0046e31c
lea edx, [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 4
call fcn.0046e31c
lea edx, [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 5
call fcn.0046e31c
lea edx, [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 6
call fcn.0046e31c
lea edx, [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 7
call fcn.0046e31c
lea edx, [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 8
call fcn.0046e31c
lea edx, [ebp - 0x2c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 9
call fcn.0046e31c
lea edx, [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xa
call fcn.0046e31c
lea edx, [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xb
call fcn.0046e31c
lea edx, [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xc
call fcn.0046e31c
lea edx, [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xd
call fcn.0046e31c
lea edx, [ebp - 0x40]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xe
call fcn.0046e31c
lea edx, [ebp - 0x50]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xf
call fcn.0046e31c
lea edx, [ebp - 0x54]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x10
call fcn.0046e31c
lea edx, [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x11
call fcn.0046e31c
lea edx, [ebp - 0x5c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x12
call fcn.0046e31c
lea edx, [ebp - 0x60]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x13
call fcn.0046e31c
lea edx, [ebp - 0x64]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x14
call fcn.0046e31c
lea edx, [ebp - 0x68]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x15
call fcn.0046e31c
lea edx, [ebp - 0x6c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x16
call fcn.0046e31c
lea edx, [ebp - 0x70]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x17
call fcn.0046e31c
lea edx, [ebp - 0x74]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x18
call fcn.0046e31c
lea edx, [ebp - 0x78]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x19
call fcn.0046e31c
lea edx, [ebp - 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1a
call fcn.0046e31c
lea edx, [ebp - 0x80]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1b
call fcn.0046e31c
lea edx, [ebp - 0x8c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1c
call fcn.0046e31c
lea edx, [ebp - 0x90]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1d
call fcn.0046e31c
lea edx, [ebp - 0x94]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1e
call fcn.0046e31c
lea edx, [ebp - 0x98]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1f
call fcn.0046e31c
lea edx, [ebp - 0x9c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x20
call fcn.0046e31c
lea edx, [ebp - 0xa0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x21
call fcn.0046e31c
lea edx, [ebp - 0x190]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x190]
lea eax, [ebp - 0x18c]
call fcn.00404d68
mov eax, dword [ebp - 0x18c]
lea edx, [ebp - 0xa4]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x22
call fcn.0046e31c
lea edx, [ebp - 0x198]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x198]
lea eax, [ebp - 0x194]
call fcn.00404d68
mov eax, dword [ebp - 0x194]
lea edx, [ebp - 0xa8]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x23
call fcn.0046e31c
lea edx, [ebp - 0xb0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x24
call fcn.0046e31c
lea edx, [ebp - 0xb4]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x25
call fcn.0046e31c
lea edx, [ebp - 0xb8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x26
call fcn.0046e31c
lea edx, [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x27
call fcn.0046e31c
lea edx, [ebp - 0x44]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x28
call fcn.0046e31c
lea edx, [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x29
call fcn.0046e31c
lea edx, [ebp - 0x4c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x2a
call fcn.0046e31c
lea edx, [ebp - 0xc0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x2b
call fcn.0046e31c
lea edx, [ebp - 0x84]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x2c
call fcn.0046e31c
lea edx, [ebp - 0x88]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x2d
call fcn.0046e31c
lea edx, [ebp - 0xc8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x2e
call fcn.0046e31c
lea edx, [ebp - 0x1a0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1a0]
lea eax, [ebp - 0x19c]
call fcn.00404d68
mov eax, dword [ebp - 0x19c]
lea edx, [ebp - 0xcc]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x2f
call fcn.0046e31c
lea edx, [ebp - 0x1a8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1a8]
lea eax, [ebp - 0x1a4]
call fcn.00404d68
mov eax, dword [ebp - 0x1a4]
lea edx, [ebp - 0xd0]
call fcn.00406610
lea eax, [ebp - 0xc4]
mov edx, 0x497c80
call fcn.00404578
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.00477d18
cmp dword [ebp - 0xc0], 0
je 0x49744f
lea eax, [ebp - 0x174]
call fcn.004044e0
jmp 0x497442
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 0xc0]
mov eax, 0x497c98
call fcn.00404ae4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc0]
call fcn.00404a00
mov edx, dword [ebp - 0xc0]
mov eax, 0x497c98
call fcn.00404ae4
mov ecx, eax
lea eax, [ebp - 0xc0]
mov edx, 1
call fcn.00404a40
lea edx, [ebp - 0x1b0]
mov eax, dword [ebp - 4]
call fcn.00408aec
mov ecx, dword [ebp - 0x1b0]
lea eax, [ebp - 0x1ac]
mov edx, 0x497ca4
call fcn.004047ec
mov eax, dword [ebp - 0x1ac]
push eax
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.0048bf40
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.00477d0c
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
xor edx, edx
call fcn.0046e31c
lea edx, [ebp - 0xd8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 1
call fcn.0046e31c
lea edx, [ebp - 0xdc]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 2
call fcn.0046e31c
lea edx, [ebp - 0x1b8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1b8]
lea eax, [ebp - 0x1b4]
call fcn.00404d68
mov eax, dword [ebp - 0x1b4]
lea edx, [ebp - 0xe0]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 3
call fcn.0046e31c
lea edx, [ebp - 0xe4]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 4
call fcn.0046e31c
lea edx, [ebp - 0xe8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 5
call fcn.0046e31c
lea edx, [ebp - 0xec]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 7
call fcn.0046e31c
lea edx, [ebp - 0xf0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 8
call fcn.0046e31c
lea edx, [ebp - 0xf4]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 9
call fcn.0046e31c
lea edx, [ebp - 0xf8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xa
call fcn.0046e31c
lea edx, [ebp - 0xfc]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xb
call fcn.0046e31c
lea edx, [ebp - 0x100]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xc
call fcn.0046e31c
lea edx, [ebp - 0x104]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xd
call fcn.0046e31c
lea edx, [ebp - 0x108]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xe
call fcn.0046e31c
lea edx, [ebp - 0x10c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0xf
call fcn.0046e31c
lea edx, [ebp - 0x110]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x10
call fcn.0046e31c
lea edx, [ebp - 0x114]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x11
call fcn.0046e31c
lea edx, [ebp - 0x118]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x12
call fcn.0046e31c
lea edx, [ebp - 0x1c0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1c0]
lea eax, [ebp - 0x1bc]
call fcn.00404d68
mov eax, dword [ebp - 0x1bc]
lea edx, [ebp - 0x11c]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x13
call fcn.0046e31c
lea edx, [ebp - 0x120]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x14
call fcn.0046e31c
lea edx, [ebp - 0x124]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x15
call fcn.0046e31c
lea edx, [ebp - 0x128]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x16
call fcn.0046e31c
lea edx, [ebp - 0x12c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x17
call fcn.0046e31c
lea edx, [ebp - 0x130]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x18
call fcn.0046e31c
lea edx, [ebp - 0x134]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x19
call fcn.0046e31c
lea edx, [ebp - 0x138]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1a
call fcn.0046e31c
lea edx, [ebp - 0x1c8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
call fcn.00404d68
mov eax, dword [ebp - 0x1c4]
lea edx, [ebp - 0x13c]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1b
call fcn.0046e31c
lea edx, [ebp - 0x1d0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1d0]
lea eax, [ebp - 0x1cc]
call fcn.00404d68
mov eax, dword [ebp - 0x1cc]
lea edx, [ebp - 0x140]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1c
call fcn.0046e31c
lea edx, [ebp - 0x1d8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1d8]
lea eax, [ebp - 0x1d4]
call fcn.00404d68
mov eax, dword [ebp - 0x1d4]
lea edx, [ebp - 0x144]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1d
call fcn.0046e31c
lea edx, [ebp - 0x1e0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x1dc]
call fcn.00404d68
mov eax, dword [ebp - 0x1dc]
lea edx, [ebp - 0x148]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1e
call fcn.0046e31c
lea edx, [ebp - 0x14c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x1f
call fcn.0046e31c
lea edx, [ebp - 0x150]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x20
call fcn.0046e31c
lea edx, [ebp - 0x154]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x21
call fcn.0046e31c
lea edx, [ebp - 0x1e8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1e8]
lea eax, [ebp - 0x1e4]
call fcn.00404d68
mov eax, dword [ebp - 0x1e4]
lea edx, [ebp - 0x158]
call fcn.00406610
lea edx, [ebp - 0xd4]
mov eax, 0x497dc0
call fcn.0048e128
mov al, byte [0x497dc4]
push eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1f0]
mov edx, dword [ebp - 0xd4]
mov dl, byte [edx]
call fcn.004046c8
mov ecx, dword [ebp - 0x1f0]
mov edx, 0x497dd0
mov eax, dword [ebp - 0x158]
call fcn.0040df18
mov edx, dword [ebp - 0x1ec]
lea eax, [ebp - 0x158]
call fcn.00404578
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x22
call fcn.0046e31c
lea edx, [ebp - 0x15c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x23
call fcn.0046e31c
lea edx, [ebp - 0x160]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x24
call fcn.0046e31c
lea edx, [ebp - 0x164]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x25
call fcn.0046e31c
lea edx, [ebp - 0x1f8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x1f8]
lea eax, [ebp - 0x1f4]
call fcn.00404d68
mov eax, dword [ebp - 0x1f4]
lea edx, [ebp - 0x168]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x26
call fcn.0046e31c
lea edx, [ebp - 0x200]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x200]
lea eax, [ebp - 0x1fc]
call fcn.00404d68
mov eax, dword [ebp - 0x1fc]
lea edx, [ebp - 0x16c]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
mov edx, 0x27
call fcn.0046e31c
lea edx, [ebp - 0x170]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.00477d18
push dword [ebp - 0x174]
push 0x497ddc
push dword [ebp - 4]
push 0x497dec
push dword [ebp - 0xdc]
push 0x497e00
push dword [ebp - 0xe0]
push 0x497e10
push dword [ebp - 0xe8]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 0xa
call fcn.00404860
cmp dword [ebp - 0xe4], 0
je 0x496e3c
push dword [ebp - 0x174]
push 0x497e30
push dword [ebp - 0xe4]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0xec], 0
je 0x496e6b
push dword [ebp - 0x174]
push 0x497e40
push dword [ebp - 0xec]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0xf0], 0
je 0x496e9a
push dword [ebp - 0x174]
push 0x497e50
push dword [ebp - 0xf0]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0xf4], 0
je 0x496ec9
push dword [ebp - 0x174]
push 0x497e64
push dword [ebp - 0xf4]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0xfc], 0
je 0x496ef8
push dword [ebp - 0x174]
push 0x497e78
push dword [ebp - 0xfc]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x100], 0
je 0x496f27
push dword [ebp - 0x174]
push 0x497e88
push dword [ebp - 0x100]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x104], 0
je 0x496f56
push dword [ebp - 0x174]
push 0x497e9c
push dword [ebp - 0x104]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x108], 0
je 0x496f85
push dword [ebp - 0x174]
push 0x497eb0
push dword [ebp - 0x108]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x10c], 0
je 0x496fb4
push dword [ebp - 0x174]
push 0x497ec0
push dword [ebp - 0x10c]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x110], 0
je 0x496fe3
push dword [ebp - 0x174]
push 0x497ed0
push dword [ebp - 0x110]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x114], 0
je 0x497012
push dword [ebp - 0x174]
push 0x497ee4
push dword [ebp - 0x114]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x118], 0
je 0x497041
push dword [ebp - 0x174]
push 0x497ef4
push dword [ebp - 0x118]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x11c], 0
je 0x497070
push dword [ebp - 0x174]
push 0x497f08
push dword [ebp - 0x11c]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x120], 0
je 0x49709f
push dword [ebp - 0x174]
push 0x497f20
push dword [ebp - 0x120]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x124], 0
je 0x4970ce
push dword [ebp - 0x174]
push 0x497f34
push dword [ebp - 0x124]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x128], 0
je 0x4970fd
push dword [ebp - 0x174]
push 0x497f4c
push dword [ebp - 0x128]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x12c], 0
je 0x49712c
push dword [ebp - 0x174]
push 0x497f5c
push dword [ebp - 0x12c]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x130], 0
je 0x49715b
push dword [ebp - 0x174]
push 0x497f6c
push dword [ebp - 0x130]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x138], 0
je 0x49718a
push dword [ebp - 0x174]
push 0x497f7c
push dword [ebp - 0x138]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x13c], 0
je 0x4971b9
push dword [ebp - 0x174]
push 0x497f8c
push dword [ebp - 0x13c]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x140], 0
je 0x4971e8
push dword [ebp - 0x174]
push 0x497f9c
push dword [ebp - 0x140]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x144], 0
je 0x497217
push dword [ebp - 0x174]
push 0x497fac
push dword [ebp - 0x144]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x148], 0
je 0x497246
push dword [ebp - 0x174]
push 0x497fbc
push dword [ebp - 0x148]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x14c], 0
je 0x497275
push dword [ebp - 0x174]
push 0x497fcc
push dword [ebp - 0x14c]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x150], 0
je 0x4972a4
push dword [ebp - 0x174]
push 0x497fdc
push dword [ebp - 0x150]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x154], 0
je 0x4972d3
push dword [ebp - 0x174]
push 0x497ff0
push dword [ebp - 0x154]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x158], 0
je 0x497302
push dword [ebp - 0x174]
push 0x498000
push dword [ebp - 0x158]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x15c], 0
je 0x497331
push dword [ebp - 0x174]
push 0x498010
push dword [ebp - 0x15c]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x160], 0
je 0x497360
push dword [ebp - 0x174]
push 0x498024
push dword [ebp - 0x160]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x164], 0
je 0x49738f
push dword [ebp - 0x174]
push 0x498038
push dword [ebp - 0x164]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x168], 0
je 0x4973be
push dword [ebp - 0x174]
push 0x498048
push dword [ebp - 0x168]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x16c], 0
je 0x4973ed
push dword [ebp - 0x174]
push 0x498058
push dword [ebp - 0x16c]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0x170], 0
je 0x49741c
push dword [ebp - 0x174]
push 0x498068
push dword [ebp - 0x170]
push 0x497e24
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
push dword [ebp - 0x174]
push 0x498078
push dword [ebp - 0xf8]
push 0x498088
lea eax, [ebp - 0x174]
mov edx, 4
call fcn.00404860
cmp dword [ebp - 0xc0], 0
jne 0x49676a
lea eax, [ebp - 0x204]
mov edx, dword [ebp - 8]
call fcn.00404d68
mov eax, dword [ebp - 0x204]
lea edx, [ebp - 8]
call fcn.00406610
mov eax, dword [ebp - 0x84]
mov edx, 0x498094
call fcn.004048ec
je 0x4974bc
mov eax, dword [ebp - 0x88]
mov edx, 0x498094
call fcn.004048ec
jne 0x4974bc
push 0x4980a0
push dword [ebp - 0xb4]
push 0x4980bc
push dword [ebp - 0xb8]
push 0x497e24
lea eax, [ebp - 0x84]
mov edx, 5
call fcn.00404860
jmp 0x497523
mov eax, dword [ebp - 0x84]
mov edx, 0x498094
call fcn.004048ec
je 0x497518
mov eax, dword [ebp - 0x88]
mov edx, 0x498094
call fcn.004048ec
je 0x497518
push 0x4980cc
push dword [ebp - 0x88]
push 0x4980e0
push dword [ebp - 0xb4]
push 0x4980bc
push dword [ebp - 0xb8]
push 0x497e24
lea eax, [ebp - 0x84]
mov edx, 7
call fcn.00404860
jmp 0x497523
lea eax, [ebp - 0x84]
call fcn.004044e0
push 0x4980f0
push dword [ebp - 8]
push 0x49810c
push dword [ebp - 0xc]
push 0x497e24
push 0x498120
push dword [ebp - 0x10]
push 0x498130
push dword [ebp - 0x14]
push 0x498140
push dword [ebp - 0x18]
push 0x498150
push dword [ebp - 0x1c]
push 0x498160
push dword [ebp - 0x20]
push 0x498170
push dword [ebp - 0x24]
push 0x497e24
push 0x498184
push dword [ebp - 0x28]
push 0x498194
push dword [ebp - 0x30]
push 0x4981a4
push dword [ebp - 0x38]
push 0x4981b4
push dword [ebp - 0x40]
push 0x497e24
push 0x4981c8
push dword [ebp - 0x2c]
push 0x4981d8
push dword [ebp - 0x34]
push 0x4981ec
push dword [ebp - 0x3c]
push 0x497e24
push 0x498200
push dword [ebp - 0x50]
push 0x498210
push dword [ebp - 0x58]
push 0x498220
push dword [ebp - 0x5c]
push 0x498234
push dword [ebp - 0x60]
push 0x497e24
push 0x49824c
push dword [ebp - 0x64]
push 0x498260
push dword [ebp - 0x68]
push 0x498274
push dword [ebp - 0x6c]
push 0x498284
push dword [ebp - 0x70]
push 0x497e24
push 0x498294
push dword [ebp - 0x74]
push 0x4982a8
push dword [ebp - 0x78]
push 0x4982c0
push dword [ebp - 0x7c]
push 0x497e24
push 0x4982d4
push dword [ebp - 0x54]
push 0x4982e4
push dword [ebp - 0x80]
push 0x497e24
push 0x4982f8
push dword [ebp - 0x8c]
push 0x498310
push dword [ebp - 0x90]
push 0x497e24
push 0x498328
push dword [ebp - 0x94]
push 0x498338
push dword [ebp - 0x98]
push 0x498348
push dword [ebp - 0x9c]
push 0x49835c
push dword [ebp - 0xa0]
push 0x497e24
push 0x498370
push dword [ebp - 0x44]
push 0x498380
push dword [ebp - 0x48]
push 0x498394
push dword [ebp - 0x4c]
push 0x497e24
push 0x4983a8
push dword [ebp - 0xc8]
push 0x4983b8
push dword [ebp - 0xcc]
push 0x4983cc
push dword [ebp - 0xd0]
push 0x497e24
push 0x4983e0
push dword [ebp - 0xa4]
push 0x4983f0
push dword [ebp - 0xa8]
push 0x498404
push dword [ebp - 0xb0]
push 0x497e24
push dword [ebp - 0x84]
push 0x498418
push dword [ebp - 0xc4]
push 0x49842c
push dword [ebp - 0xbc]
push 0x498440
lea edx, [ebp - 0x20c]
mov eax, 0x49844c
call fcn.0048e128
push dword [ebp - 0x20c]
push dword [ebp - 0x174]
push 0x498458
push 0x498470
lea eax, [ebp - 0x208]
mov edx, 0x6d
call fcn.00404860
mov eax, dword [ebp - 0x208]
push eax
mov eax, dword [0x50584c]
mov eax, dword [eax + 0x2f8]
mov eax, dword [eax + 0x90]
mov edx, edi
call fcn.0045e93c
pop edx
call fcn.0045deb4
jmp 0x497871
lea edx, [ebp - 0x214]
mov eax, dword [ebp - 8]
call fcn.00408aec
mov ecx, dword [ebp - 0x214]
lea eax, [ebp - 0x210]
mov edx, 0x49847c
call fcn.004047ec
mov eax, dword [ebp - 0x210]
push eax
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.0048bf40
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.00477d0c
mov eax, dword [ebx + esi*4 + 0x40]
mov eax, dword [eax + 0x30]
xor edx, edx
call fcn.0046e31c
lea edx, [ebp - 0x21c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
call fcn.00404d68
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0xac]
call fcn.00406610
mov eax, dword [ebx + esi*4 + 0x40]
call fcn.00477d18
lea eax, [ebp - 0x220]
mov edx, dword [ebp - 8]
call fcn.00404d68
mov eax, dword [ebp - 0x220]
lea edx, [ebp - 8]
call fcn.00406610
push 0x4980f0
push dword [ebp - 8]
push 0x4984ac
push dword [ebp - 0xac]
push 0x4984c0
lea edx, [ebp - 0x228]
mov eax, 0x49844c
call fcn.0048e128
push dword [ebp - 0x228]
push 0x498458
push 0x4984d8
lea eax, [ebp - 0x224]
mov edx, 8
call fcn.00404860
mov eax, dword [ebp - 0x224]
push eax
mov eax, dword [0x50584c]
mov eax, dword [eax + 0x2f8]
mov eax, dword [eax + 0x90]
mov edx, edi
call fcn.0045e93c
pop edx
call fcn.0045deb4
mov eax, dword [0x50584c]
mov eax, dword [eax + 0x2f8]
mov eax, dword [eax + 0x90]
mov edx, edi
call fcn.0045e93c
mov edx, 0x4984e4
call fcn.0045deb4
jmp 0x49791b
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
call fcn.004047a0
mov ecx, eax
mov edx, 0x11
mov eax, dword [ebp - 4]
call fcn.00404a00
mov edx, dword [ebp - 8]
mov eax, 0x497af4
call fcn.00404ae4
push eax
mov eax, dword [ebp - 8]
call fcn.004047a0
mov ecx, eax
lea eax, [ebp - 8]
pop edx
call fcn.00404a40
mov eax, dword [0x50584c]
mov eax, dword [eax + 0x2f8]
mov eax, dword [eax + 0x90]
mov edx, edi
call fcn.0045e93c
push eax
push 0x498628
push dword [ebp - 8]
push 0x498088
push 0x498470
lea eax, [ebp - 0x22c]
mov edx, 4
call fcn.00404860
mov edx, dword [ebp - 0x22c]
pop eax
call fcn.0045deb4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x497ae2
lea eax, [ebp - 0x22c]
mov edx, 3
call fcn.00404504
lea eax, [ebp - 0x220]
call fcn.00404bec
lea eax, [ebp - 0x21c]
call fcn.004044e0
lea eax, [ebp - 0x218]
call fcn.00404bec
lea eax, [ebp - 0x214]
mov edx, 4
call fcn.00404504
lea eax, [ebp - 0x204]
call fcn.00404bec
lea eax, [ebp - 0x200]
call fcn.004044e0
lea eax, [ebp - 0x1fc]
call fcn.00404bec
lea eax, [ebp - 0x1f8]
call fcn.004044e0
lea eax, [ebp - 0x1f4]
call fcn.00404bec
lea eax, [ebp - 0x1f0]
mov edx, 3
call fcn.00404504
lea eax, [ebp - 0x1e4]
call fcn.00404bec
lea eax, [ebp - 0x1e0]
call fcn.004044e0
lea eax, [ebp - 0x1dc]
call fcn.00404bec
lea eax, [ebp - 0x1d8]
call fcn.004044e0
lea eax, [ebp - 0x1d4]
call fcn.00404bec
lea eax, [ebp - 0x1d0]
call fcn.004044e0
lea eax, [ebp - 0x1cc]
call fcn.00404bec
lea eax, [ebp - 0x1c8]
call fcn.004044e0
lea eax, [ebp - 0x1c4]
call fcn.00404bec
lea eax, [ebp - 0x1c0]
call fcn.004044e0
lea eax, [ebp - 0x1bc]
call fcn.00404bec
lea eax, [ebp - 0x1b8]
call fcn.004044e0
lea eax, [ebp - 0x1b4]
call fcn.00404bec
lea eax, [ebp - 0x1b0]
mov edx, 3
call fcn.00404504
lea eax, [ebp - 0x1a4]
call fcn.00404bec
lea eax, [ebp - 0x1a0]
call fcn.004044e0
lea eax, [ebp - 0x19c]
call fcn.00404bec
lea eax, [ebp - 0x198]
call fcn.004044e0
lea eax, [ebp - 0x194]
call fcn.00404bec
lea eax, [ebp - 0x190]
call fcn.004044e0
lea eax, [ebp - 0x18c]
call fcn.00404bec
lea eax, [ebp - 0x188]
mov edx, 4
call fcn.00404504
lea eax, [ebp - 0x178]
call fcn.00404bec
lea eax, [ebp - 0xd8]
mov edx, 0x36
call fcn.00404504
lea eax, [ebp - 0x174]
mov edx, 0x27
call fcn.00404504
ret