Function at 0x540cac
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x26
push 0
push 0
dec ecx
jne 0x540cb5
push ecx
xchg dword [ebp - 4], ecx
push ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00406264
mov eax, dword [ebp - 8]
call fcn.00406264
mov eax, dword [ebp - 0xc]
call fcn.00406264
xor eax, eax
push ebp
push 0x541df0
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x55bf7c], 0
jne 0x540d18
lea eax, [ebp - 0x40]
push eax
mov cl, 1
mov edx, 0x541e0c
xor eax, eax
call fcn.005435c8
mov edx, dword [ebp - 0x40]
mov eax, 0x55bf7c
call fcn.0040627c
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 4]
call fcn.0040c79c
mov edx, dword [ebp - 0x44]
mov eax, 0x541e28
call fcn.00406d40
test eax, eax
jle 0x541d8d
xor eax, eax
mov dword [ebp - 0x34], eax
xor edx, edx
push ebp
push 0x541d86
push dword fs:[edx]
mov dword fs:[edx], esp
lea edx, [ebp - 0x4c]
xor eax, eax
call fcn.004033e8
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x48]
call fcn.0040e2bc
mov edx, dword [ebp - 0x48]
mov eax, 0x541e48
call fcn.0040ca78
test al, al
jne 0x540d8f
mov dl, 1
mov eax, dword [0x440c24]
call fcn.00440e88
mov dword [ebp - 0x34], eax
xor ecx, ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [0x4cdeac]
call fcn.004cea54
cmp dword [0x55bf84], 0xffffffff
jne 0x540dae
xor ecx, ecx
mov edx, 0x541e6c
mov eax, 0x541e88
call fcn.00542ff4
mov dword [0x55bf84], eax
cmp dword [0x55bf84], 1
jne 0x540de5
movzx eax, byte [0x541e98]
push eax
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x541ea8
mov edx, 0x541efc
mov eax, dword [ebp - 4]
call fcn.00416898
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 4]
call fcn.004062d0
jmp 0x540e6e
cmp dword [0x55bee4], 0
je 0x540dfe
lea eax, [ebp - 0x18]
mov edx, dword [0x55bee4]
call fcn.004062d0
jmp 0x540e27
cmp dword [ebp - 0x34], 0
je 0x540e1d
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x541f4c
mov edx, 0x541f70
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx]
jmp 0x540e27
lea eax, [ebp - 0x18]
xor edx, edx
call fcn.004062d0
cmp dword [ebp - 0x18], 0
je 0x540e6e
movzx eax, byte [0x541e98]
push eax
lea eax, [ebp - 0x54]
push eax
push 0x541f88
push dword [ebp - 0x18]
push 0x541fa8
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.00406834
mov ecx, dword [ebp - 0x58]
mov edx, 0x541efc
mov eax, dword [ebp - 4]
call fcn.00416898
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 4]
call fcn.004062d0
mov edx, dword [ebp - 4]
mov eax, 0x541fc8
call fcn.00406d40
mov ebx, eax
test ebx, ebx
jle 0x541d6a
cmp dword [0x55bf80], 0
jne 0x540ea2
push 0x541fcc
push 0x541fe4
call sub.user32.dll_FindWindowW
mov dword [0x55bf80], eax
mov dl, 1
mov eax, dword [0x4231e0]
call fcn.00428c28
mov dword [ebp - 0x30], eax
xor edx, edx
push ebp
push 0x541d63
push dword fs:[edx]
mov dword fs:[edx], esp
mov dx, 0x26
mov eax, dword [ebp - 0x30]
call fcn.004280d4
lea eax, [ebp - 0x5c]
push eax
lea edx, [ebx + 1]
mov ecx, 0x7fffffff
mov eax, dword [ebp - 4]
call fcn.00406a28
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x30]
call fcn.00427e98
lea eax, [ebp - 4]
push eax
mov ecx, ebx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00406a28
cmp dword [ebp - 8], 0
je 0x540f13
mov ecx, dword [ebp - 8]
mov edx, 0x542008
mov eax, dword [ebp - 0x30]
call fcn.00427d60
cmp dword [ebp - 0x34], 0
jne 0x540f37
mov dl, 1
mov eax, dword [0x440c24]
call fcn.00440e88
mov dword [ebp - 0x34], eax
xor ecx, ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [0x4cdeac]
call fcn.004cea54
push 0
mov ecx, 0x54201c
mov edx, 0x542040
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
je 0x540f6b
lea edx, [ebp - 0x60]
mov eax, ebx
call fcn.0040d350
mov ecx, dword [ebp - 0x60]
mov edx, 0x542058
mov eax, dword [ebp - 0x30]
call fcn.00427d60
lea ecx, [ebp - 0x64]
mov edx, 0x542008
mov eax, dword [ebp - 0x30]
call fcn.00427408
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x1c]
call fcn.0040c79c
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.0053fa10
test al, al
je 0x540fe5
cmp dword [ebp - 0x34], 0
jne 0x540fb8
mov dl, 1
mov eax, dword [0x440c24]
call fcn.00440e88
mov dword [ebp - 0x34], eax
xor ecx, ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [0x4cdeac]
call fcn.004cea54
call fcn.00542be0
add esp, 0xfffffff8
fstp qword [esp]
wait
mov ecx, 0x54206c
mov edx, 0x542040
mov eax, dword [ebp - 0x34]
call fcn.00440fa8
xor ecx, ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [0x4cdeac]
call fcn.004ced88
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.0053fa10
test al, al
je 0x54115e
call fcn.0053dd60
test al, al
je 0x54115e
lea eax, [ebp - 0x6c]
call fcn.0053d428
push dword [ebp - 0x6c]
push 0x542098
push 0x5420b4
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.00406834
mov ecx, dword [ebp - 0x68]
mov dl, 1
mov eax, dword [0x4cdeac]
call fcn.004ce968
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x541157
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x5420d8
mov edx, 0x5420f8
mov eax, dword [ebp - 0x3c]
call fcn.004ced14
cmp dword [ebp - 0x34], 0
jne 0x541082
mov dl, 1
mov eax, dword [0x440c24]
call fcn.00440e88
mov dword [ebp - 0x34], eax
xor ecx, ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [0x4cdeac]
call fcn.004cea54
push 0
lea eax, [ebp - 0x24]
push eax
mov edx, 0x541f70
mov ecx, 0x542114
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx]
cmp dword [ebp - 0x24], 0
je 0x541136
push 0x542148
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 0x20]
call fcn.0040c6d4
push dword [ebp - 0x74]
push 0x542148
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.00406834
mov eax, dword [ebp - 0x70]
push eax
push 0x542148
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 0x24]
call fcn.0040c6d4
push dword [ebp - 0x7c]
push 0x542148
lea eax, [ebp - 0x78]
mov edx, 3
call fcn.00406834
mov eax, dword [ebp - 0x78]
pop edx
call fcn.00406d40
test eax, eax
jle 0x541136
cmp byte [ebp + 0xc], 0
je 0x541126
lea eax, [ebp - 0x80]
mov ecx, 0x542158
mov edx, dword [ebp - 0x1c]
call fcn.00406750
mov ecx, dword [ebp - 0x80]
mov edx, 0x542008
mov eax, dword [ebp - 0x30]
call fcn.00427d60
jmp 0x541136
mov ecx, dword [ebp - 0x1c]
mov edx, 0x542008
mov eax, dword [ebp - 0x30]
call fcn.00427d60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54115e
cmp dword [ebp - 0x3c], 0
je 0x541156
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov dword [ebp - 0x3c], edx
call fcn.00403dbc
ret
cmp dword [ebp - 0xc], 0
je 0x541174
mov ecx, dword [ebp - 0xc]
mov edx, 0x542170
mov eax, dword [ebp - 0x30]
call fcn.00427d60
mov edx, 0x542184
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x5411a1
lea ecx, [ebp - 0x84]
mov edx, 0x542184
mov eax, dword [ebp - 0x30]
call fcn.00427408
cmp dword [ebp - 0x84], 0
jne 0x5411b3
mov ecx, 0x5421a0
mov edx, 0x542184
mov eax, dword [ebp - 0x30]
call fcn.00427d60
lea eax, [ebp - 0x10]
call fcn.0053efc8
lea ecx, [ebp - 0x88]
mov edx, 0x542170
mov eax, dword [ebp - 0x30]
call fcn.00427408
cmp dword [ebp - 0x88], 0
je 0x541224
call fcn.005407dc
test al, al
je 0x541224
lea ecx, [ebp - 0x90]
mov edx, 0x542170
mov eax, dword [ebp - 0x30]
call fcn.00427408
push dword [ebp - 0x90]
push 0x5421b4
push dword [ebp - 0x10]
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.00406834
mov ecx, dword [ebp - 0x8c]
mov edx, 0x542170
mov eax, dword [ebp - 0x30]
call fcn.00427d60
cmp byte [0x55beec], 0
je 0x541265
lea ecx, [ebp - 0x94]
mov edx, 0x542170
mov eax, dword [ebp - 0x30]
call fcn.00427408
lea eax, [ebp - 0x94]
mov edx, 0x5421c4
call fcn.00406690
mov ecx, dword [ebp - 0x94]
mov edx, 0x542170
mov eax, dword [ebp - 0x30]
call fcn.00427d60
jmp 0x5412a4
cmp byte [0x55bee8], 0
je 0x5412a4
lea ecx, [ebp - 0x98]
mov edx, 0x542170
mov eax, dword [ebp - 0x30]
call fcn.00427408
lea eax, [ebp - 0x98]
mov edx, 0x5421dc
call fcn.00406690
mov ecx, dword [ebp - 0x98]
mov edx, 0x542170
mov eax, dword [ebp - 0x30]
call fcn.00427d60
lea ecx, [ebp - 0x9c]
mov edx, 0x5421f4
mov eax, dword [ebp - 0x30]
call fcn.00427408
cmp dword [ebp - 0x9c], 0
je 0x5412e7
lea ecx, [ebp - 0xa0]
mov edx, 0x5421f4
mov eax, dword [ebp - 0x30]
call fcn.00427408
mov eax, dword [ebp - 0xa0]
mov edx, 0x542208
call fcn.0040ca78
test al, al
je 0x54130f
lea eax, [ebp - 0xa4]
push eax
mov cl, 1
mov edx, 0x541e0c
xor eax, eax
call fcn.005435c8
mov ecx, dword [ebp - 0xa4]
mov edx, 0x5421f4
mov eax, dword [ebp - 0x30]
call fcn.00427d60
lea ecx, [ebp - 0xa8]
mov edx, 0x54221c
mov eax, dword [ebp - 0x30]
call fcn.00427408
cmp dword [ebp - 0xa8], 0
je 0x541352
lea ecx, [ebp - 0xac]
mov edx, 0x54221c
mov eax, dword [ebp - 0x30]
call fcn.00427408
mov eax, dword [ebp - 0xac]
mov edx, 0x542208
call fcn.0040ca78
test al, al
je 0x5413bb
lea edx, [ebp - 0xb0]
mov al, 1
call fcn.005429c0
cmp dword [ebp - 0xb0], 0
je 0x54138a
lea edx, [ebp - 0xb4]
mov al, 1
call fcn.005429c0
mov ecx, dword [ebp - 0xb4]
mov edx, 0x54221c
mov eax, dword [ebp - 0x30]
call fcn.00427d60
jmp 0x5413bb
mov edx, 0x54221c
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov ebx, eax
test ebx, ebx
jl 0x5413ae
mov ecx, 0x542230
mov edx, ebx
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 0x20]
jmp 0x5413bb
mov edx, 0x542230
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x38]
call fcn.00542cbc
test al, al
je 0x541434
cmp dword [0x55bedc], 0
je 0x541434
mov edx, 0x542248
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x541421
lea ecx, [ebp - 0xb8]
mov edx, 0x542248
mov eax, dword [ebp - 0x30]
call fcn.00427408
cmp dword [ebp - 0xb8], 0
je 0x541421
lea ecx, [ebp - 0xbc]
mov edx, 0x542248
mov eax, dword [ebp - 0x30]
call fcn.00427408
mov eax, dword [ebp - 0xbc]
mov edx, 0x542208
call fcn.0040ca78
test al, al
je 0x541434
mov ecx, dword [0x55bedc]
mov edx, 0x542248
mov eax, dword [ebp - 0x30]
call fcn.00427d60
cmp dword [0x55bed8], 0
jne 0x541518
cmp dword [ebp - 0x34], 0
je 0x541518
push 0
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x54225c
mov edx, 0x542284
mov eax, dword [ebp - 0x34]
call fcn.0053d8e4
push 0
lea eax, [ebp - 0x2c]
push eax
mov edx, 0x542284
mov ecx, 0x54229c
mov eax, dword [ebp - 0x34]
call fcn.0053d8e4
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 0x28]
call fcn.0040cd5c
mov eax, dword [ebp - 0xc0]
push eax
lea edx, [ebp - 0xc8]
mov al, 1
call fcn.004ce02c
mov eax, dword [ebp - 0xc8]
lea edx, [ebp - 0xc4]
call fcn.0040cd5c
mov edx, dword [ebp - 0xc4]
pop eax
call fcn.00406a20
jne 0x5414dc
cmp dword [ebp - 0x2c], 0
je 0x5414dc
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x54229c
mov edx, 0x542284
mov eax, dword [ebp - 0x34]
call fcn.0053d8e4
jmp 0x5414f4
push 0
lea eax, [ebp - 0x14]
push eax
mov edx, 0x542284
mov ecx, 0x5422b8
mov eax, dword [ebp - 0x34]
call fcn.0053d8e4
cmp dword [ebp - 0x14], 0
je 0x541518
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 0x14]
call fcn.0053d280
mov edx, dword [ebp - 0xcc]
mov eax, 0x55bed8
call fcn.0040627c
cmp dword [ebp - 0x34], 0
jne 0x54153c
mov dl, 1
mov eax, dword [0x440c24]
call fcn.00440e88
mov dword [ebp - 0x34], eax
xor ecx, ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [0x4cdeac]
call fcn.004cea54
push 0
lea eax, [ebp - 0xd0]
push eax
mov edx, 0x542284
mov ecx, 0x5422d8
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx]
cmp dword [ebp - 0xd0], 0
je 0x5415d7
push 0
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x5422b8
mov edx, 0x542284
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx]
cmp dword [ebp - 0xd4], 0
je 0x5415a5
push 0
lea eax, [ebp - 0xd8]
push eax
mov edx, 0x542284
mov ecx, 0x5422f4
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx]
cmp dword [ebp - 0xd8], 0
jne 0x5415d7
push 0
lea eax, [ebp - 0xdc]
push eax
mov ecx, 0x5422d8
mov edx, 0x542284
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx]
mov ecx, dword [ebp - 0xdc]
mov edx, 0x542314
mov eax, dword [ebp - 0x30]
call fcn.00427d60
jmp 0x54166a
call fcn.00542e88
test al, al
je 0x5415f1
xor ecx, ecx
mov edx, 0x54232c
mov eax, dword [ebp - 0x30]
call fcn.00427d60
jmp 0x54166a
call fcn.00542eac
test al, al
jne 0x54166a
cmp dword [0x55bed8], 0
je 0x54166a
mov edx, 0x54232c
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x541657
lea ecx, [ebp - 0xe0]
mov edx, 0x54232c
mov eax, dword [ebp - 0x30]
call fcn.00427408
cmp dword [ebp - 0xe0], 0
je 0x541657
lea ecx, [ebp - 0xe4]
mov edx, 0x54232c
mov eax, dword [ebp - 0x30]
call fcn.00427408
mov eax, dword [ebp - 0xe4]
mov edx, 0x542208
call fcn.0040ca78
test al, al
je 0x54166a
mov ecx, dword [0x55bed8]
mov edx, 0x54232c
mov eax, dword [ebp - 0x30]
call fcn.00427d60
call fcn.00542cf0
test al, al
je 0x541752
call fcn.00542e88
test al, al
jne 0x541752
mov edx, 0x542340
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x5416d8
lea ecx, [ebp - 0xe8]
mov edx, 0x542340
mov eax, dword [ebp - 0x30]
call fcn.00427408
cmp dword [ebp - 0xe8], 0
je 0x5416d8
lea ecx, [ebp - 0xec]
mov edx, 0x542340
mov eax, dword [ebp - 0x30]
call fcn.00427408
mov eax, dword [ebp - 0xec]
mov edx, 0x542208
call fcn.0040ca78
test al, al
je 0x541752
lea edx, [ebp - 0xf4]
xor eax, eax
call fcn.004033e8
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xf0]
call fcn.0040e2bc
mov edx, dword [ebp - 0xf0]
mov eax, 0x541e48
call fcn.0040ca78
test al, al
je 0x54172f
lea edx, [ebp - 0xf8]
mov eax, dword [0x55bed4]
call fcn.0040d350
mov ecx, dword [ebp - 0xf8]
mov edx, 0x542340
mov eax, dword [ebp - 0x30]
call fcn.00427d60
jmp 0x541752
call fcn.0053f244
lea edx, [ebp - 0xfc]
call fcn.0040d350
mov ecx, dword [ebp - 0xfc]
mov edx, 0x542340
mov eax, dword [ebp - 0x30]
call fcn.00427d60
cmp dword [0x55bee0], 0
je 0x5417c2
mov edx, 0x542358
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x5417af
lea ecx, [ebp - 0x100]
mov edx, 0x542358
mov eax, dword [ebp - 0x30]
call fcn.00427408
cmp dword [ebp - 0x100], 0
je 0x5417af
lea ecx, [ebp - 0x104]
mov edx, 0x542358
mov eax, dword [ebp - 0x30]
call fcn.00427408
mov eax, dword [ebp - 0x104]
mov edx, 0x542208
call fcn.0040ca78
test al, al
je 0x5417c2
mov ecx, dword [0x55bee0]
mov edx, 0x542358
mov eax, dword [ebp - 0x30]
call fcn.00427d60
call fcn.00542e88
test al, al
je 0x5417f0
lea edx, [ebp - 0x108]
mov eax, 0xa
call fcn.0040d350
mov ecx, dword [ebp - 0x108]
mov edx, 0x54236c
mov eax, dword [ebp - 0x30]
call fcn.00427d60
jmp 0x541813
call fcn.0053f138
lea edx, [ebp - 0x10c]
call fcn.0040d350
mov ecx, dword [ebp - 0x10c]
mov edx, 0x54236c
mov eax, dword [ebp - 0x30]
call fcn.00427d60
mov edx, 0x542388
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x541840
lea ecx, [ebp - 0x110]
mov edx, 0x542388
mov eax, dword [ebp - 0x30]
call fcn.00427408
cmp dword [ebp - 0x110], 0
jne 0x541867
call fcn.00542eac
test al, al
je 0x541867
lea eax, [ebp - 0x114]
call fcn.0054090c
mov ecx, dword [ebp - 0x114]
mov edx, 0x542388
mov eax, dword [ebp - 0x30]
call fcn.00427d60
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 0x30]
call fcn.00426f48
mov edx, dword [ebp - 0x118]
lea eax, [ebp - 4]
call fcn.00406690
mov edx, 0x5423a8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x5418ba
push dword [ebp - 4]
push 0x5423c4
lea eax, [ebp - 0x11c]
call fcn.0053eb2c
push dword [ebp - 0x11c]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00406834
mov edx, 0x5423e4
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x5418e3
push dword [ebp - 4]
push 0x5423fc
push dword [ebp - 0x10]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00406834
mov edx, 0x54221c
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x541901
lea eax, [ebp - 4]
mov edx, 0x542418
call fcn.00406690
mov edx, 0x542284
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x54193f
push dword [ebp - 4]
push 0x542430
xor eax, eax
call fcn.0053f350
lea edx, [ebp - 0x120]
call fcn.0040d350
push dword [ebp - 0x120]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00406834
call fcn.00543350
test al, al
je 0x541961
lea eax, [ebp - 0x124]
call fcn.00540b6c
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 4]
call fcn.00406690
mov edx, 0x54244c
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x541c84
mov cl, 1
mov dl, 1
mov eax, dword [0x48fc44]
call fcn.00490bdc
mov dword [ebp - 0x38], eax
xor edx, edx
push ebp
push 0x541c7d
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, 0x542464
call fcn.005404fc
test al, al
je 0x5419c1
mov eax, 0x5424a0
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x5424c0
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x5419d4
push 0
push 0xa
mov cl, 1
mov edx, 0x5424c0
mov eax, dword [ebp - 0x38]
call fcn.004907d8
mov eax, 0x5424d4
call fcn.005404fc
test al, al
je 0x541a00
mov eax, 0x542508
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x542540
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x541a13
push 0
push 0xa
mov cl, 1
mov edx, 0x542540
mov eax, dword [ebp - 0x38]
call fcn.004907d8
mov eax, 0x542554
call fcn.005404fc
test al, al
je 0x541a3f
mov eax, 0x542594
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x5425d8
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x541a52
push 0
push 0xa
mov cl, 1
mov edx, 0x5425d8
mov eax, dword [ebp - 0x38]
call fcn.004907d8
mov eax, 0x5425ec
call fcn.005404fc
test al, al
je 0x541a7e
mov eax, 0x542618
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x542648
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x541a91
push 0
push 0xa
mov cl, 1
mov edx, 0x542648
mov eax, dword [ebp - 0x38]
call fcn.004907d8
mov eax, 0x54265c
call fcn.005404fc
test al, al
je 0x541abd
mov eax, 0x54268c
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x5426c0
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x541ad0
push 0
push 0xa
mov cl, 1
mov edx, 0x5426c0
mov eax, dword [ebp - 0x38]
call fcn.004907d8
mov eax, 0x5426d4
call fcn.005404fc
test al, al
je 0x541afc
mov eax, 0x542718
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x542760
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x541b0f
push 0
push 0xa
mov cl, 1
mov edx, 0x542760
mov eax, dword [ebp - 0x38]
call fcn.004907d8
mov eax, 0x542774
call fcn.005404fc
test al, al
je 0x541b3b
mov eax, 0x5427c4
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x5427e8
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x541b4e
push 0
push 0xa
mov cl, 1
mov edx, 0x5427e8
mov eax, dword [ebp - 0x38]
call fcn.004907d8
mov eax, 0x5427fc
call fcn.005404fc
test al, al
jne 0x541b6a
mov eax, 0x54283c
call fcn.005404fc
test al, al
je 0x541bb4
mov eax, 0x54283c
call fcn.005404fc
test al, al
je 0x541b96
mov eax, 0x54287c
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x5428b4
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x541bc7
mov eax, 0x5428c8
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x5428b4
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x541bc7
push 0
push 0xa
mov cl, 1
mov edx, 0x5428b4
mov eax, dword [ebp - 0x38]
call fcn.004907d8
mov eax, 0x542908
call fcn.005404fc
test al, al
je 0x541bf3
mov eax, 0x542944
call fcn.0054065c
cdq
push edx
push eax
mov cl, 1
mov edx, 0x542978
mov eax, dword [ebp - 0x38]
call fcn.004907d8
jmp 0x541c06
push 0
push 0xa
mov cl, 1
mov edx, 0x542978
mov eax, dword [ebp - 0x38]
call fcn.004907d8
push dword [ebp - 4]
push 0x54298c
lea eax, [ebp - 0x130]
push eax
mov ecx, 0x3e8
mov edx, dword [ebp - 0x38]
mov eax, dword [0x48fcec]
call fcn.00491498
mov eax, dword [ebp - 0x130]
lea edx, [ebp - 0x12c]
call fcn.0040cd5c
mov eax, dword [ebp - 0x12c]
lea edx, [ebp - 0x128]
call fcn.0053d280
push dword [ebp - 0x128]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00406834
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x541c84
cmp dword [ebp - 0x38], 0
je 0x541c7c
mov eax, dword [ebp - 0x38]
xor edx, edx
mov dword [ebp - 0x38], edx
call fcn.00403dbc
ret
cmp byte [ebp + 0x10], 0
je 0x541d4d
lea ecx, [ebp - 0x134]
mov edx, 0x542008
mov eax, dword [ebp - 0x30]
call fcn.00427408
mov eax, dword [ebp - 0x134]
mov edx, 0x5429a8
call fcn.00406a20
jne 0x541ce5
cmp dword [0x55bf80], 0
je 0x541cd2
push 0
push 1
push 0x520
mov eax, dword [0x55bf80]
push eax
call sub.user32.dll_PostMessageW
jmp 0x541d39
push 0
xor ecx, ecx
or edx, 0xffffffff
mov eax, 0x201
call fcn.0053bcbc
jmp 0x541d39
lea ecx, [ebp - 0x138]
mov edx, 0x542008
mov eax, dword [ebp - 0x30]
call fcn.00427408
mov eax, dword [ebp - 0x138]
xor edx, edx
call fcn.0053fa10
test al, al
je 0x541d39
cmp dword [0x55bf80], 0
je 0x541d28
push 0
push 2
push 0x520
mov eax, dword [0x55bf80]
push eax
call sub.user32.dll_PostMessageW
jmp 0x541d39
push 0
xor ecx, ecx
or edx, 0xffffffff
mov eax, 0x200
call fcn.0053bcbc
push 0
push 0
push 0x520
mov eax, dword [0x55bf80]
push eax
call sub.user32.dll_PostMessageW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x541d6a
mov eax, dword [ebp - 0x30]
call fcn.00403dbc
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x541d8d
cmp dword [ebp - 0x34], 0
je 0x541d85
mov eax, dword [ebp - 0x34]
call fcn.00403dbc
ret
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 4]
call fcn.0040627c
cmp byte [ebp + 0x10], 0
je 0x541dc5
push 0
push 0
push 1
mov eax, dword [ebp - 4]
call fcn.00406308
mov ecx, eax
mov edx, 0x5429b4
mov eax, dword [0x55c934]
mov eax, dword [eax]
mov eax, dword [eax + 0x170]
call fcn.0053e4d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x541df7
lea eax, [ebp - 0x138]
mov edx, 0x3f
call fcn.00406274
lea eax, [ebp - 0x2c]
mov edx, 0xb
call fcn.00406274
ret