Function at 0x4186c4
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x50
push 0
push 0
dec ecx
jne 0x4186cc
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00403980
xor eax, eax
push ebp
push 0x41985e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x48]
call fcn.004034e4
mov byte [ebp - 0x52], 0
mov byte [ebp - 0x51], 0
lea eax, [ebp - 0x58]
mov edx, 0x41987c
call fcn.0040357c
call fcn.00405668
lea eax, [ebp - 0x130]
call fcn.00407de0
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x134]
call fcn.00406ce8
mov edx, dword [ebp - 0x134]
pop eax
call fcn.00403798
mov eax, dword [ebp - 0x130]
call fcn.00403990
push eax
push 0
push 0
mov eax, dword [0x41b39c]
mov eax, dword [eax]
call eax
mov dword [ebp - 0x6c], eax
mov eax, dword [0x41b12c]
mov eax, dword [eax]
call eax
cmp eax, 0xb7
je 0x41965c
lea eax, [ebp - 0xc]
mov edx, 0x419888
call fcn.0040357c
lea eax, [ebp - 0xc]
mov ecx, 0x80000
mov edx, 0x419928
call fcn.00416dd4
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0xc]
call fcn.004069a8
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0xc]
call fcn.0040357c
lea eax, [ebp - 0x140]
call fcn.00406ce8
mov eax, dword [ebp - 0x140]
lea edx, [ebp - 0x13c]
call fcn.00406834
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x20]
mov edx, 0x419934
call fcn.004037dc
lea eax, [ebp - 0x20]
mov ecx, 0x80000
mov edx, dword [ebp - 0x58]
call fcn.00416dd4
lea eax, [ebp - 0x10]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.00417d84
lea eax, [ebp - 0x10]
mov ecx, 0x80000
mov edx, dword [ebp - 0x58]
call fcn.00416dd4
mov eax, dword [ebp - 0x10]
call fcn.00403790
cmp eax, 0x2710
jl 0x41965c
mov eax, dword [ebp - 0x10]
mov edx, 0x419940
call fcn.004038dc
je 0x41965c
lea eax, [ebp - 0x144]
push eax
mov ecx, 0x419950
mov edx, dword [ebp - 0x10]
mov eax, 0x419960
call fcn.004074e8
mov eax, dword [ebp - 0x144]
lea edx, [ebp - 0x24]
call fcn.004069a8
lea eax, [ebp - 0x148]
push eax
mov ecx, 0x41996c
mov edx, dword [ebp - 0x10]
mov eax, 0x41997c
call fcn.004074e8
mov eax, dword [ebp - 0x148]
lea edx, [ebp - 0x28]
call fcn.00406b08
lea ecx, [ebp - 0x2c]
mov edx, dword [ebp - 0x24]
mov eax, 0x419988
call fcn.00407a18
lea eax, [ebp - 0x150]
push eax
mov ecx, 0x419994
mov edx, dword [ebp - 0x10]
mov eax, 0x4199a4
call fcn.004074e8
mov eax, dword [ebp - 0x150]
lea edx, [ebp - 0x14c]
call fcn.004069a8
mov eax, dword [ebp - 0x14c]
call fcn.00408180
mov eax, dword [ebp - 0x28]
call fcn.00409668
xor eax, eax
call fcn.0040e630
mov eax, dword [ebp - 0x2c]
call fcn.00404648
mov edi, eax
dec edi
test edi, edi
jl 0x418fb5
inc edi
xor ebx, ebx
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
call fcn.00403790
cmp eax, 5
jl 0x418fad
test ebx, ebx
jne 0x418b3e
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 1], 0x2b
jne 0x41892b
call fcn.0040e1dc
lea eax, [ebp - 0x154]
call fcn.00405424
mov eax, dword [ebp - 0x154]
mov edx, 0x4199b0
call fcn.0040e6d4
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 2], 0x2b
jne 0x41895a
call fcn.00413bb4
lea eax, [ebp - 0x158]
call fcn.00405574
mov eax, dword [ebp - 0x158]
mov edx, dword [0x41b2fc]
mov edx, dword [edx]
call fcn.0040e6d4
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 9], 0x2b
jne 0x41896b
call fcn.00413be8
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 3], 0x2b
jne 0x418a98
mov eax, 0x4199c8
call fcn.00414de8
push 0
push 0x7d0
push 1
push 0
push 0
mov ecx, 0x4199d8
mov edx, 0x4199fc
mov eax, 0x419a04
call fcn.00413f58
mov edx, dword [0x41b2c4]
add dword [edx], eax
push 0
push 0x7d0
push 1
push 0
push 0
mov ecx, 0x419a40
mov edx, 0x4199fc
mov eax, 0x419a6c
call fcn.00413f58
mov edx, dword [0x41b2c4]
add dword [edx], eax
push 0
push 0x1388
push 1
push 0
push 0
mov ecx, 0x419ab0
mov edx, 0x419ad4
mov eax, 0x419ae4
call fcn.00413f58
mov edx, dword [0x41b2c4]
add dword [edx], eax
push 0
push 0x1388
push 1
push 0
push 0
mov ecx, 0x419b24
mov edx, 0x419b44
mov eax, 0x419b64
call fcn.00413f58
test eax, eax
jle 0x418a2c
mov eax, dword [0x41b2c4]
inc dword [eax]
push 0
push 0x1388
push 1
push 0
push 0
mov ecx, 0x419b8c
mov edx, 0x4199fc
mov eax, 0x419bc4
call fcn.00413f58
test eax, eax
jle 0x418a58
mov eax, dword [0x41b2c4]
inc dword [eax]
push 0
push 0x1388
push 1
push 0
push 0
mov ecx, 0x419c04
mov edx, 0x419c2c
mov eax, 0x419ca4
call fcn.00413f58
test eax, eax
jle 0x418a84
mov eax, dword [0x41b2c4]
inc dword [eax]
mov eax, dword [0x41b2c4]
cmp dword [eax], 0
jle 0x418a98
mov eax, 0x419cd8
call fcn.00405114
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 4], 0x2b
jne 0x418aae
mov eax, 0x419ce0
call fcn.00414808
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 5], 0x2b
jne 0x418adb
push 0
push 0x3e8
push 1
push 0
push 0
mov ecx, 0x419cf0
mov edx, 0x419d08
mov eax, 0x419d30
call fcn.00413f58
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 6], 0x2b
jne 0x418af1
mov eax, 0x419d78
call fcn.00414a90
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 7], 0x2b
jne 0x418b2e
push 0
push 0x32
push 0x419d84
lea eax, [ebp - 0x40]
push eax
push 1
call sub.user32.dll_GetSystemMetrics
push eax
push 0
call sub.user32.dll_GetSystemMetrics
xor ecx, ecx
pop edx
call fcn.00416fb0
mov edx, 0x419da4
mov eax, dword [ebp - 0x40]
call fcn.0040e6d4
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 8], 0x2b
jne 0x418b3e
mov byte [ebp - 0x52], 1
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax], 0x46
jne 0x418ed1
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + ebx*4]
mov eax, 0x419db4
call fcn.00407a18
lea eax, [ebp - 0x5c]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 8]
call fcn.0040357c
mov edx, dword [ebp - 0x5c]
mov eax, 0x419dc0
call fcn.00403ad4
dec eax
jne 0x418dee
lea eax, [ebp - 0x68]
push eax
mov ecx, 0x419dd0
mov edx, dword [ebp - 0x5c]
mov eax, 0x419dc0
call fcn.004074e8
lea eax, [ebp - 0xed]
push eax
push 0x81
mov eax, dword [0x41b240]
mov eax, dword [eax]
call eax
test eax, eax
je 0x41965c
lea esi, [ebp - 0xed]
jmp 0x418de0
push esi
mov eax, dword [0x41b114]
mov eax, dword [eax]
call eax
lea edx, [ebp - 0x160]
call fcn.0040709c
mov edx, dword [ebp - 0x160]
lea eax, [ebp - 0x15c]
call fcn.0040377c
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x68]
call fcn.00403ad4
test eax, eax
je 0x418ddd
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x168]
mov edx, esi
call fcn.00403cf4
mov eax, dword [ebp - 0x168]
push eax
push 0x419dc0
push dword [ebp - 0x68]
push 0x419ddc
lea eax, [ebp - 0x170]
mov edx, 3
call fcn.00403850
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x16c]
call fcn.00403d88
mov eax, dword [ebp - 0x16c]
push eax
lea eax, [ebp - 0x174]
mov edx, dword [ebp - 0x5c]
call fcn.00403d88
mov eax, dword [ebp - 0x174]
pop edx
pop ecx
call fcn.0040717c
mov edx, dword [ebp - 0x164]
lea eax, [ebp - 0x64]
call fcn.0040377c
lea eax, [ebp - 0x60]
call fcn.004034e4
mov eax, dword [ebp - 0x30]
push dword [eax + 4]
push 0x419de8
push dword [ebp - 0x64]
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00403850
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x60]
call fcn.00403d88
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov edx, 0x419df0
call fcn.0040717c
lea eax, [ebp - 0x178]
mov edx, 0x419df8
call fcn.00403db4
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x60]
call fcn.0040377c
lea eax, [ebp - 0x184]
mov edx, dword [ebp - 0x60]
call fcn.00403d88
mov eax, dword [ebp - 0x184]
lea edx, [ebp - 0x180]
call fcn.004078d8
mov edx, dword [ebp - 0x180]
lea eax, [ebp - 0x60]
call fcn.0040377c
lea eax, [ebp - 0x188]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0x1c]
call fcn.00403d88
mov eax, dword [ebp - 0x188]
push eax
lea eax, [ebp - 0x18c]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0x10]
call fcn.00403d88
mov eax, dword [ebp - 0x18c]
call fcn.00407108
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x14]
mov edx, 0x419e04
call fcn.004038dc
sete al
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x18]
mov edx, 0x419e04
call fcn.004038dc
sete al
push eax
push 1
lea eax, [ebp - 0x194]
mov ecx, dword [ebp - 0x60]
mov edx, 0x419e10
call fcn.004037dc
mov edx, dword [ebp - 0x194]
lea eax, [ebp - 0x190]
call fcn.00403d88
mov eax, dword [ebp - 0x190]
push eax
lea eax, [ebp - 0x198]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0xc]
call fcn.00403d88
mov eax, dword [ebp - 0x198]
push eax
lea eax, [ebp - 0x1a0]
mov ecx, 0x419de8
mov edx, dword [ebp - 0x64]
call fcn.004037dc
mov edx, dword [ebp - 0x1a0]
lea eax, [ebp - 0x19c]
call fcn.00403d88
mov eax, dword [ebp - 0x19c]
pop edx
pop ecx
call fcn.00413f58
add esi, 4
cmp byte [esi], 0
jne 0x418bc0
jmp 0x418ed1
lea eax, [ebp - 0x1a4]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0x1c]
call fcn.00403d88
mov eax, dword [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1a8]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0x10]
call fcn.00403d88
mov eax, dword [ebp - 0x1a8]
call fcn.00407108
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x14]
mov edx, 0x419e04
call fcn.004038dc
sete al
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x18]
mov edx, 0x419e04
call fcn.004038dc
sete al
push eax
push 1
push 0x419e10
mov eax, dword [ebp - 0x30]
push dword [eax + 4]
push 0x419de8
lea eax, [ebp - 0x1b0]
mov edx, 3
call fcn.00403850
mov edx, dword [ebp - 0x1b0]
lea eax, [ebp - 0x1ac]
call fcn.00403d88
mov eax, dword [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x1b4]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0xc]
call fcn.00403d88
mov eax, dword [ebp - 0x1b4]
push eax
mov eax, dword [ebp - 0x30]
mov edx, dword [eax + 8]
lea eax, [ebp - 0x1bc]
mov ecx, 0x419de8
call fcn.004037dc
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1b8]
call fcn.00403d88
mov eax, dword [ebp - 0x1b8]
pop edx
pop ecx
call fcn.00413f58
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax], 0x4c
jne 0x418ef7
push dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
push dword [eax + ebx*4]
push 0x419988
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.00403850
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax], 0x49
jne 0x418fad
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + ebx*4]
mov eax, 0x419db4
call fcn.00407a18
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov edx, 0x419e20
call fcn.004038dc
jne 0x418f9d
mov byte [ebp - 0x51], 1
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x419e2c
xor edx, edx
mov eax, 0x419e38
call fcn.00417d84
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x419e58
mov edx, dword [ebp - 0x1c]
mov eax, 0x419e64
call fcn.004074e8
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x419e58
mov edx, dword [ebp - 0x1c]
mov eax, 0x419e78
call fcn.004074e8
push dword [ebp - 0x4c]
push 0x419e90
push dword [ebp - 0x50]
lea eax, [ebp - 0x1c0]
mov edx, 3
call fcn.00403850
mov eax, dword [ebp - 0x1c0]
mov edx, 0x419e9c
call fcn.0040e6d4
jmp 0x418fad
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov edx, 0x419e9c
call fcn.0040e6d4
inc ebx
dec edi
jne 0x4188e3
push dword [ebp - 4]
push 0x419988
lea eax, [ebp - 0x1c8]
call fcn.0041698c
push dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
mov edx, 3
call fcn.00403850
mov eax, dword [ebp - 0x1c4]
mov edx, 0x419eac
call fcn.0040e6d4
lea eax, [ebp - 0x1d0]
call fcn.00406ce8
mov eax, dword [ebp - 0x1d0]
lea edx, [ebp - 0x1cc]
call fcn.00406834
push dword [ebp - 0x1cc]
push 0x419ec0
lea eax, [ebp - 0x1d8]
call fcn.00407b08
mov eax, dword [ebp - 0x1d8]
lea edx, [ebp - 0x1d4]
call fcn.00406834
push dword [ebp - 0x1d4]
push 0x419ec0
lea eax, [ebp - 0x1e4]
call fcn.00406bd8
mov edx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x1e0]
call fcn.0040377c
mov eax, dword [ebp - 0x1e0]
lea edx, [ebp - 0x1dc]
call fcn.00406834
push dword [ebp - 0x1dc]
push 0x419ec0
lea eax, [ebp - 0x1f0]
call fcn.004066e4
mov edx, dword [ebp - 0x1f0]
lea eax, [ebp - 0x1ec]
call fcn.0040377c
mov eax, dword [ebp - 0x1ec]
lea edx, [ebp - 0x1e8]
call fcn.00406834
push dword [ebp - 0x1e8]
push 0x419ec0
lea eax, [ebp - 0x1fc]
call fcn.00406634
mov edx, dword [ebp - 0x1fc]
lea eax, [ebp - 0x1f8]
call fcn.0040377c
mov eax, dword [ebp - 0x1f8]
lea edx, [ebp - 0x1f4]
call fcn.00406834
push dword [ebp - 0x1f4]
push 0x419ec0
lea eax, [ebp - 0x208]
call fcn.004065f0
mov edx, dword [ebp - 0x208]
lea eax, [ebp - 0x204]
call fcn.0040377c
mov eax, dword [ebp - 0x204]
lea edx, [ebp - 0x200]
call fcn.00406834
push dword [ebp - 0x200]
push 0x419ec0
lea edx, [ebp - 0x214]
mov eax, dword [0x41b2a8]
mov eax, dword [eax]
call fcn.0040709c
mov edx, dword [ebp - 0x214]
lea eax, [ebp - 0x210]
call fcn.0040377c
mov eax, dword [ebp - 0x210]
lea edx, [ebp - 0x20c]
call fcn.00406834
push dword [ebp - 0x20c]
push 0x419ec0
lea edx, [ebp - 0x220]
mov eax, dword [0x41b2c4]
mov eax, dword [eax]
call fcn.0040709c
mov edx, dword [ebp - 0x220]
lea eax, [ebp - 0x21c]
call fcn.0040377c
mov eax, dword [ebp - 0x21c]
lea edx, [ebp - 0x218]
call fcn.00406834
push dword [ebp - 0x218]
push 0x419ec0
lea edx, [ebp - 0x22c]
mov eax, dword [0x41b1cc]
mov eax, dword [eax]
call fcn.0040709c
mov edx, dword [ebp - 0x22c]
lea eax, [ebp - 0x228]
call fcn.0040377c
mov eax, dword [ebp - 0x228]
lea edx, [ebp - 0x224]
call fcn.00406834
push dword [ebp - 0x224]
push 0x419ec0
lea edx, [ebp - 0x238]
mov eax, dword [0x41b3f8]
mov eax, dword [eax]
call fcn.0040709c
mov edx, dword [ebp - 0x238]
lea eax, [ebp - 0x234]
call fcn.0040377c
mov eax, dword [ebp - 0x234]
lea edx, [ebp - 0x230]
call fcn.00406834
push dword [ebp - 0x230]
push 0x419ec0
lea edx, [ebp - 0x23c]
mov eax, dword [ebp - 4]
call fcn.00406834
push dword [ebp - 0x23c]
push 0x419ec0
lea eax, [ebp - 0x244]
call fcn.00407de0
mov eax, dword [ebp - 0x244]
lea edx, [ebp - 0x240]
call fcn.00406834
push dword [ebp - 0x240]
lea eax, [ebp - 0x18]
mov edx, 0x17
call fcn.00403850
push 0x419ecc
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
push dword [ebp - 0x18]
push 0x419ee8
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
push 0x419988
push 0x419ef8
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
lea eax, [ebp - 0x248]
call fcn.004063c8
push dword [ebp - 0x248]
push 0x419f08
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
push 0x419988
push 0x419f18
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
lea eax, [ebp - 0x24c]
call fcn.00406560
push dword [ebp - 0x24c]
push 0x419f28
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
push 0x419988
push 0x419f38
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
lea eax, [ebp - 0x250]
call fcn.0040e8d0
push dword [ebp - 0x250]
push 0x419f48
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
push 0x419988
lea eax, [ebp - 0x14]
mov edx, 0x20
call fcn.00403850
cmp byte [ebp - 0x51], 1
jne 0x419387
push dword [ebp - 0x14]
push 0x419f58
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
push dword [ebp - 0x4c]
push 0x419e90
push dword [ebp - 0x50]
push 0x419f64
mov eax, dword [0x41b350]
push dword [eax]
push 0x419edc
push 0x419988
lea eax, [ebp - 0x14]
mov edx, 0xb
call fcn.00403850
lea eax, [ebp - 0x14]
mov ecx, 0x80000
mov edx, dword [ebp - 0x58]
call fcn.00416dd4
lea eax, [ebp - 0x254]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.00417d84
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [0x41b3a0]
mov eax, dword [eax]
call eax
mov eax, 0x419f74
call fcn.00405114
mov eax, dword [ebp - 0x48]
call fcn.00403790
cmp eax, 3
jle 0x4194dd
lea ecx, [ebp - 0x34]
mov edx, dword [ebp - 0x48]
mov eax, 0x419988
call fcn.00407a18
mov eax, dword [ebp - 0x34]
call fcn.00404648
mov edi, eax
dec edi
test edi, edi
jl 0x4194dd
inc edi
xor ebx, ebx
push 0
lea eax, [ebp - 0x38]
mov ecx, 1
mov edx, dword [0x405f50]
call fcn.00404804
add esp, 4
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov edx, dword [eax + ebx*4]
mov eax, 0x419db4
call fcn.00407a18
mov eax, dword [ebp - 0x38]
call fcn.00404648
cmp eax, 4
jne 0x4194d5
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov edx, 0x419f80
call fcn.004038dc
jne 0x4194d5
lea ecx, [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov edx, dword [eax + 0xc]
mov eax, 0x419f8c
call fcn.00407a18
mov byte [ebp - 0x53], 0
mov eax, dword [ebp - 0x3c]
call fcn.00404648
mov esi, eax
dec esi
test esi, esi
jl 0x4194b1
inc esi
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
mov eax, dword [eax + edx*4]
lea edx, [ebp - 0x258]
call fcn.0040633c
mov eax, dword [ebp - 0x258]
mov edx, dword [0x41b154]
mov edx, dword [edx]
call fcn.00403ad4
test eax, eax
setne byte [ebp - 0x53]
cmp byte [ebp - 0x53], 1
je 0x4194b1
inc dword [ebp - 0x44]
dec esi
jne 0x419478
cmp byte [ebp - 0x53], 1
jne 0x4194d5
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 8]
mov edx, 0x419f98
call fcn.004038dc
sete dl
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 4]
call fcn.0041841c
inc ebx
dec edi
jne 0x4193f9
call fcn.004099c0
lea eax, [ebp - 0x25c]
call fcn.00407de0
mov eax, dword [ebp - 0x25c]
mov edx, 0x419fa4
call fcn.004038dc
jne 0x419518
mov eax, dword [ebp - 4]
mov edx, 0x419fb0
call fcn.004038dc
jne 0x419518
call fcn.00407e90
jmp 0x41965c
mov eax, dword [ebp - 4]
mov edx, 0x419fb0
call fcn.004038dc
jne 0x41965c
cmp byte [ebp - 0x52], 1
jne 0x41965c
lea eax, [ebp - 0x12c]
xor ecx, ecx
mov edx, 0x3c
call fcn.004028e0
mov dword [ebp - 0x12c], 0x3c
mov dword [ebp - 0x128], 0x1c0
xor eax, eax
mov dword [ebp - 0x124], eax
xor eax, eax
mov dword [ebp - 0x120], eax
lea edx, [ebp - 0x260]
mov eax, 0x419fb8
call fcn.004062fc
mov eax, dword [ebp - 0x260]
call fcn.00403d98
mov dword [ebp - 0x11c], eax
lea edx, [ebp - 0x268]
mov eax, 0x419fd0
call fcn.004062fc
push dword [ebp - 0x268]
lea edx, [ebp - 0x274]
xor eax, eax
call fcn.00402754
mov edx, dword [ebp - 0x274]
lea eax, [ebp - 0x270]
call fcn.00403d88
mov eax, dword [ebp - 0x270]
lea edx, [ebp - 0x26c]
call fcn.004077c8
push dword [ebp - 0x26c]
push 0x41a02c
lea eax, [ebp - 0x264]
mov edx, 3
call fcn.00403e78
mov eax, dword [ebp - 0x264]
call fcn.00403d98
mov dword [ebp - 0x118], eax
lea edx, [ebp - 0x280]
xor eax, eax
call fcn.00402754
mov edx, dword [ebp - 0x280]
lea eax, [ebp - 0x27c]
call fcn.00403d88
mov eax, dword [ebp - 0x27c]
lea edx, [ebp - 0x278]
call fcn.00407854
mov eax, dword [ebp - 0x278]
call fcn.00403d98
mov dword [ebp - 0x114], eax
xor eax, eax
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [0x41b150]
mov eax, dword [eax]
call eax
push 0
call sub.kernel32.dll_ExitProcess_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x419868
lea eax, [ebp - 0x280]
call fcn.004034e4
lea eax, [ebp - 0x27c]
mov edx, 2
call fcn.00403bf4
lea eax, [ebp - 0x274]
call fcn.004034e4
lea eax, [ebp - 0x270]
mov edx, 5
call fcn.00403bf4
lea eax, [ebp - 0x25c]
mov edx, 9
call fcn.00403508
lea eax, [ebp - 0x238]
call fcn.00403bdc
lea eax, [ebp - 0x234]
mov edx, 2
call fcn.00403508
lea eax, [ebp - 0x22c]
call fcn.00403bdc
lea eax, [ebp - 0x228]
mov edx, 2
call fcn.00403508
lea eax, [ebp - 0x220]
call fcn.00403bdc
lea eax, [ebp - 0x21c]
mov edx, 2
call fcn.00403508
lea eax, [ebp - 0x214]
call fcn.00403bdc
lea eax, [ebp - 0x210]
mov edx, 2
call fcn.00403508
lea eax, [ebp - 0x208]
call fcn.00403bdc
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.00403508
lea eax, [ebp - 0x1fc]
call fcn.00403bdc
lea eax, [ebp - 0x1f8]
mov edx, 2
call fcn.00403508
lea eax, [ebp - 0x1f0]
call fcn.00403bdc
lea eax, [ebp - 0x1ec]
mov edx, 2
call fcn.00403508
lea eax, [ebp - 0x1e4]
call fcn.00403bdc
lea eax, [ebp - 0x1e0]
mov edx, 0xa
call fcn.00403508
lea eax, [ebp - 0x1b8]
mov edx, 2
call fcn.00403bf4
lea eax, [ebp - 0x1b0]
call fcn.004034e4
lea eax, [ebp - 0x1ac]
mov edx, 3
call fcn.00403bf4
lea eax, [ebp - 0x1a0]
call fcn.004034e4
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.00403bf4
lea eax, [ebp - 0x194]
call fcn.004034e4
lea eax, [ebp - 0x190]
mov edx, 8
call fcn.00403bf4
lea eax, [ebp - 0x170]
call fcn.004034e4
lea eax, [ebp - 0x16c]
mov edx, 4
call fcn.00403bf4
lea eax, [ebp - 0x15c]
mov edx, 0xc
call fcn.00403508
lea eax, [ebp - 0x40]
call fcn.004034e4
lea eax, [ebp - 0x3c]
mov edx, dword [0x405f50]
mov ecx, 5
call fcn.00404280
lea eax, [ebp - 0x28]
mov edx, 8
call fcn.00403508
lea eax, [ebp - 4]
call fcn.004034e4
lea eax, [ebp - 0x68]
mov edx, 5
call fcn.00403508
lea eax, [ebp - 0x50]
mov edx, 3
call fcn.00403508
ret