Function at 0x466180
Capabilities:
Get geographical location

Disassembly:
sub esp, 0x1c8
xor eax, eax
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov ecx, 0x10
lea edi, [esp + 0x28]
mov bp, word [esi + 0x114c]
rep stosd dword es:[edi], eax
mov ecx, 0x10
lea edi, [esp + 0x68]
rep stosd dword es:[edi], eax
mov ecx, 0x10
lea edi, [esp + 0xa8]
mov bx, word [esi + 0x114e]
rep stosd dword es:[edi], eax
movsx eax, byte [esi + 0x11d6]
cmp eax, 5
ja case.default.0x4661d0
jmp dword [eax*4 + 0x4673d0]
mov ecx, dword [esi + 0x3616c]
test ecx, ecx
je 0x4661f7
mov eax, dword [esi + 0x4dd34]
push eax
push 5
movsx edx, bx
movsx eax, bp
push edx
push eax
call fcn.00488ff0
mov eax, dword [esi + 0x110c]
add eax, 0xfffffff1
cmp eax, 0xb
ja case.0x466209.16
jmp dword [eax*4 + 0x4673e8]
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x17
push 0x4ab3e8
add ecx, 0x21
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ab3e8
jmp 0x4663be
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x17
push 0x4ab3b8
add ecx, 0x21
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ab3b8
jmp 0x4663be
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x17
push 0x4ab3a4
add ecx, 0x21
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ab3a4
jmp 0x4663be
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x17
push 0x4ab37c
add ecx, 0x21
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ab37c
jmp 0x4663be
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x17
push 0x4ab368
add ecx, 0x21
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ab368
jmp 0x4663be
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x17
push 0x4ab354
add ecx, 0x21
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ab354
movsx eax, bx
add eax, 0x16
mov ecx, edi
push eax
movsx eax, bp
add eax, 0x20
push eax
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov eax, dword [esi + 0x110c]
cmp eax, 0x19
jne 0x4664b5
movsx ecx, word [esp + 0x1dc]
movsx eax, bp
mov dword [esp + 0x14], eax
lea edx, [eax + 0x19]
cmp ecx, edx
jle 0x466467
add eax, 0x64
cmp ecx, eax
jge 0x466467
movsx ecx, word [esp + 0x1e0]
movsx eax, bx
mov dword [esp + 0x10], eax
lea ebp, [eax + 0x37]
cmp ecx, ebp
jle 0x466467
add eax, 0x46
cmp ecx, eax
jge 0x466467
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
mov ebx, dword [esp + 0x14]
push 0xffffff
push 0x4ad298
push ebp
lea eax, [ebx + 0x1c]
mov ecx, edi
push eax
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad298
jmp 0x466637
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx ebp, bx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x10], ebp
add ebp, 0x37
push 0x320004
push 0x4ad298
lea ecx, [ebx + 0x1c]
push ebp
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad298
jmp 0x466637
movsx ecx, word [esp + 0x1dc]
cmp eax, 0x14
movsx eax, bp
mov dword [esp + 0x14], eax
lea edx, [eax + 0x19]
jne 0x46658a
cmp ecx, edx
jle 0x46653c
add eax, 0x64
cmp ecx, eax
jge 0x46653c
movsx ecx, word [esp + 0x1e0]
movsx eax, bx
mov dword [esp + 0x10], eax
lea ebp, [eax + 0x37]
cmp ecx, ebp
jle 0x46653c
add eax, 0x46
cmp ecx, eax
jge 0x46653c
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
mov ebx, dword [esp + 0x14]
push 0xffffff
push 0x4ad28c
push ebp
lea eax, [ebx + 0x1c]
mov ecx, edi
push eax
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad28c
jmp 0x466637
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx ebp, bx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x10], ebp
add ebp, 0x37
push 0x320004
push 0x4ad28c
lea ecx, [ebx + 0x1c]
push ebp
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad28c
jmp 0x466637
cmp ecx, edx
jle 0x4665ee
add eax, 0x64
cmp ecx, eax
jge 0x4665ee
movsx ecx, word [esp + 0x1e0]
movsx eax, bx
mov dword [esp + 0x10], eax
lea ebp, [eax + 0x37]
cmp ecx, ebp
jle 0x4665ee
add eax, 0x46
cmp ecx, eax
jge 0x4665ee
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
mov ebx, dword [esp + 0x14]
push 0xffffff
push 0x4ad284
push ebp
lea eax, [ebx + 0x1c]
mov ecx, edi
push eax
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
jmp 0x466632
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx ebp, bx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x10], ebp
add ebp, 0x37
push 0x320004
push 0x4ad284
lea ecx, [ebx + 0x1c]
push ebp
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad284
add ebx, 0x1d
push ebp
push ebx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
lea ecx, [esi + 0x4e388]
call fcn.00491a60
test eax, eax
jne case.default.0x4661d0
mov ebx, dword [esp + 0x14]
movsx eax, word [esp + 0x1dc]
lea esi, [ebx + 0x7d]
cmp eax, esi
jle 0x4666cc
lea edx, [ebx + 0xb4]
cmp eax, edx
jge 0x4666cc
movsx eax, word [esp + 0x1e0]
cmp eax, ebp
jle 0x4666cc
mov ecx, dword [esp + 0x10]
add ecx, 0x46
cmp eax, ecx
jge 0x4666cc
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad27c
push ebp
push esi
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad27c
push ebp
add ebx, 0x7e
jmp 0x4673b1
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad27c
push ebp
push esi
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad27c
push ebp
add ebx, 0x7e
jmp 0x4673b1
mov ecx, dword [esi + 0x3616c]
test ecx, ecx
je 0x466727
mov edx, dword [esi + 0x4dd34]
push edx
push 6
movsx eax, bx
movsx edx, bp
push eax
push edx
call fcn.00488ff0
mov eax, dword [esi + 0x1104]
lea ecx, [esp + 0xa8]
lea edx, [esp + 0x68]
push ecx
mov eax, dword [esi + eax*4 + 0x4b038]
push edx
lea ecx, [esp + 0x30]
mov edx, dword [eax + 0x48]
push ecx
add eax, 4
push edx
push eax
mov ecx, esi
call fcn.00454500
mov ecx, dword [esi + 0x110c]
mov edi, dword [sym.imp.user32.dll_wsprintfA]
lea eax, [esp + 0x28]
lea edx, [esp + 0xe8]
push eax
push ecx
push 0x4ad270
push edx
call edi
add esp, 0x10
lea eax, [esi + 0x1156]
lea ecx, [esp + 0x160]
push eax
push 0x4a7454
push ecx
call edi
add esi, 0x6004
add esp, 0xc
mov ecx, esi
call fcn.00402250
movsx ebx, bx
movsx edi, bp
lea edx, [esp + 0xe8]
push 0x19192d
lea eax, [ebx + 0x19]
lea ebp, [edi + 0x18]
push edx
push eax
push ebp
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
lea ecx, [esp + 0x160]
push 0x19192d
lea edx, [ebx + 0x28]
push ecx
push edx
push ebp
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
movsx eax, word [esp + 0x1dc]
lea ecx, [edi + 0x19]
cmp eax, ecx
jle 0x46685f
movsx eax, word [esp + 0x1dc]
lea edx, [edi + 0x64]
cmp eax, edx
jge 0x46685f
movsx eax, word [esp + 0x1e0]
lea ebp, [ebx + 0x37]
cmp eax, ebp
jle 0x46685f
lea ecx, [ebx + 0x46]
cmp eax, ecx
jge 0x46685f
mov ecx, esi
call fcn.00402250
push 0xffffff
push 0x4ad268
lea edx, [edi + 0x1c]
push ebp
push edx
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
push 0xffffff
push 0x4ad268
lea eax, [edi + 0x1d]
push ebp
push eax
jmp 0x46689c
mov ecx, esi
call fcn.00402250
lea ebp, [ebx + 0x37]
push 0x320004
push 0x4ad268
lea ecx, [edi + 0x1c]
push ebp
push ecx
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
push 0x320004
push 0x4ad268
lea edx, [edi + 0x1d]
push ebp
push edx
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
movsx eax, word [esp + 0x1dc]
lea ecx, [edi + 0x9b]
cmp eax, ecx
jle 0x466934
lea ecx, [edi + 0xd2]
cmp eax, ecx
jge 0x466934
movsx eax, word [esp + 0x1e0]
cmp eax, ebp
jle 0x466934
add ebx, 0x46
cmp eax, ebx
jge 0x466934
mov ecx, esi
call fcn.00402250
push 0xffffff
push 0x4ac2f0
lea eax, [edi + 0x9b]
push ebp
push eax
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
push 0xffffff
push 0x4ac2f0
add edi, 0x9c
push ebp
push edi
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c8
ret 8
mov ecx, esi
call fcn.00402250
push 0x320004
push 0x4ac2f0
lea eax, [edi + 0x9b]
push ebp
push eax
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
push 0x320004
push 0x4ac2f0
add edi, 0x9c
push ebp
push edi
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c8
ret 8
mov ecx, dword [esi + 0x3616c]
test ecx, ecx
je 0x4669af
mov edx, dword [esi + 0x4dd34]
push edx
push 5
movsx eax, bx
movsx edx, bp
push eax
push edx
call fcn.00488ff0
mov eax, dword [esi + 0x1104]
lea ecx, [esp + 0xa8]
lea edx, [esp + 0x68]
push ecx
mov eax, dword [esi + eax*4 + 0x4b038]
push edx
lea ecx, [esp + 0x30]
mov edx, dword [eax + 0x48]
push ecx
add eax, 4
push edx
push eax
mov ecx, esi
call fcn.00454500
mov ecx, dword [esi + 0x110c]
mov edi, dword [sym.imp.user32.dll_wsprintfA]
lea eax, [esp + 0x28]
lea edx, [esp + 0xe8]
push eax
push ecx
push 0x4ad270
push edx
call edi
add esp, 0x10
lea eax, [esi + 0x1156]
lea ecx, [esp + 0x160]
push eax
push 0x4a7454
push ecx
call edi
lea edi, [esi + 0x6004]
add esp, 0xc
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ebp, bp
mov dword [esp + 0x10], eax
lea edx, [esp + 0xe8]
push 0x19192d
add eax, 0x14
lea ebx, [ebp + 0x18]
push edx
push eax
push ebx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x160]
push 0x19192d
add ecx, 0x23
push eax
push ecx
push ebx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
movsx eax, word [esp + 0x1dc]
lea edx, [ebp + 0x19]
cmp eax, edx
jle 0x466ae9
movsx eax, word [esp + 0x1dc]
lea ecx, [ebp + 0x64]
cmp eax, ecx
jge 0x466ae9
mov ecx, dword [esp + 0x10]
movsx eax, word [esp + 0x1e0]
lea ebx, [ecx + 0x37]
cmp eax, ebx
jle 0x466ae9
add ecx, 0x46
cmp eax, ecx
jge 0x466ae9
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad260
lea edx, [ebp + 0x1c]
push ebx
push edx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
jmp 0x466b20
mov ecx, edi
call fcn.00402250
mov ecx, dword [esp + 0x10]
push 0x320004
push 0x4ad260
lea edx, [ebp + 0x1c]
lea ebx, [ecx + 0x37]
mov ecx, edi
push ebx
push edx
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad260
lea eax, [ebp + 0x1d]
push ebx
push eax
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, dword [esi + 0x1104]
mov edx, dword [esi + ecx*4 + 0x4b038]
mov al, byte [edx + 0x19]
cmp al, 5
je case.default.0x4661d0
cmp al, 6
je case.default.0x4661d0
movsx eax, word [esp + 0x1dc]
lea esi, [ebp + 0x7d]
cmp eax, esi
jle 0x466bc4
lea ecx, [ebp + 0xb4]
cmp eax, ecx
jge 0x466bc4
movsx eax, word [esp + 0x1e0]
cmp eax, ebx
jle 0x466bc4
mov edx, dword [esp + 0x10]
add edx, 0x46
cmp eax, edx
jge 0x466bc4
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad258
push ebx
push esi
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad258
add ebp, 0x7e
push ebx
push ebp
jmp 0x4673b2
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad258
push ebx
push esi
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad258
add ebp, 0x7e
push ebx
push ebp
jmp 0x4673b2
mov ecx, dword [esi + 0x3616c]
test ecx, ecx
je 0x466c20
mov eax, dword [esi + 0x4dd34]
push eax
push 6
movsx edx, bx
movsx eax, bp
push edx
push eax
call fcn.00488ff0
mov ecx, dword [esi + 0x1104]
lea edx, [esp + 0xa8]
push edx
lea edx, [esp + 0x2c]
mov eax, dword [esi + ecx*4 + 0x4b038]
lea ecx, [esp + 0x6c]
push ecx
push edx
mov ecx, dword [eax + 0x48]
add eax, 4
push ecx
push eax
mov ecx, esi
call fcn.00454500
mov eax, dword [esi + 0x110c]
mov edi, dword [sym.imp.user32.dll_wsprintfA]
lea edx, [esp + 0x28]
lea ecx, [esp + 0xe8]
push edx
push eax
push 0x4ad270
push ecx
call edi
add esp, 0x10
lea edx, [esi + 0x1156]
lea eax, [esp + 0x160]
push edx
push 0x4a7454
push eax
call edi
add esi, 0x6004
add esp, 0xc
mov ecx, esi
movsx ebx, bx
call fcn.00402250
movsx edi, bp
lea eax, [ebx + 0x14]
lea edx, [esp + 0x18]
lea ebp, [edi + 0xf0]
lea ecx, [eax + 0xf]
push ecx
push ebp
push eax
push edi
push edx
call dword [sym.imp.user32.dll_SetRect]
lea eax, [esp + 0xe8]
push 0x19192d
lea ecx, [esp + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004022b0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
lea eax, [ebx + 0x23]
lea edx, [eax + 0xf]
push edx
push ebp
push eax
lea eax, [esp + 0x24]
push edi
push eax
call dword [sym.imp.user32.dll_SetRect]
lea ecx, [esp + 0x160]
push 0x19192d
lea edx, [esp + 0x1c]
push ecx
push edx
mov ecx, esi
call fcn.004022b0
mov ecx, esi
call fcn.00402290
movsx eax, word [esp + 0x1dc]
lea ecx, [edi + 0x19]
cmp eax, ecx
jle 0x466d96
lea edx, [edi + 0x64]
cmp eax, edx
jge 0x466d96
movsx eax, word [esp + 0x1e0]
lea ebp, [ebx + 0x37]
cmp eax, ebp
jle 0x466d96
lea ecx, [ebx + 0x46]
cmp eax, ecx
jge 0x466d96
mov ecx, esi
call fcn.00402250
push 0xffffff
push 0x4ad250
lea edx, [edi + 0x1c]
push ebp
push edx
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
push 0xffffff
push 0x4ad250
add edi, 0x1d
push ebp
push edi
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c8
ret 8
mov ecx, esi
call fcn.00402250
add ebx, 0x37
push 0x320004
push 0x4ad250
lea eax, [edi + 0x1c]
push ebx
push eax
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
push 0x320004
push 0x4ad250
add edi, 0x1d
push ebx
push edi
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c8
ret 8
mov ecx, dword [esi + 0x3616c]
test ecx, ecx
je 0x466e0e
mov edx, dword [esi + 0x4dd34]
push edx
push 5
movsx eax, bx
movsx edx, bp
push eax
push edx
call fcn.00488ff0
mov eax, dword [esi + 0x110c]
add eax, 0xffffffeb
cmp eax, 0x30
ja case.0x466e28.26
xor ecx, ecx
mov cl, byte [eax + 0x467430]
jmp dword [ecx*4 + 0x467418]
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x19
push 0x4a6c74
add ecx, 0x23
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4a6c74
jmp 0x466f94
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x19
push 0x4a6c30
add ecx, 0x23
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4a6c30
jmp 0x466f94
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x19
push 0x4ab134
add ecx, 0x23
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ab134
jmp 0x466f94
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x19
push 0x4a6ad4
add ecx, 0x23
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4a6ad4
jmp 0x466f94
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x19
push 0x4a6acc
add ecx, 0x23
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4a6acc
movsx eax, bx
add eax, 0x18
mov ecx, edi
push eax
movsx eax, bp
add eax, 0x22
push eax
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
lea ecx, [esi + 0x4e388]
call fcn.00491a60
test eax, eax
jne case.default.0x4661d0
movsx eax, word [esp + 0x1dc]
movsx ebp, bp
lea ecx, [ebp + 0x7d]
cmp eax, ecx
jle 0x467030
lea edx, [ebp + 0xb4]
cmp eax, edx
jge 0x467030
movsx ecx, word [esp + 0x1e0]
movsx eax, bx
lea edi, [eax + 0x37]
cmp ecx, edi
jle 0x467030
add eax, 0x46
cmp ecx, eax
jge 0x467030
add esi, 0x6004
mov ecx, esi
call fcn.00402250
push 0xffffff
push 0x4ad27c
lea eax, [ebp + 0x7d]
push edi
push eax
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
push 0xffffff
jmp 0x46706c
add esi, 0x6004
mov ecx, esi
call fcn.00402250
movsx edi, bx
add edi, 0x37
push 0x320004
push 0x4ad27c
lea eax, [ebp + 0x7d]
push edi
push eax
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
mov ecx, esi
call fcn.00402250
push 0x320004
push 0x4ad27c
add ebp, 0x7e
push edi
push ebp
mov ecx, esi
call fcn.00401ef0
mov ecx, esi
call fcn.00402290
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c8
ret 8
mov ecx, dword [esi + 0x3616c]
test ecx, ecx
je 0x4670b1
mov eax, dword [esi + 0x4dd34]
push eax
push 6
movsx edx, bx
movsx eax, bp
push edx
push eax
call fcn.00488ff0
mov eax, dword [esi + 0x110c]
cmp eax, 0xf
je 0x46710b
cmp eax, 0x18
jne 0x46716b
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x17
push 0x4ab37c
add ecx, 0x21
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ab37c
jmp 0x46714f
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx eax, bx
movsx ecx, bp
push 0x19192d
add eax, 0x17
push 0x4ab3e8
add ecx, 0x21
push eax
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ab3e8
movsx eax, bx
add eax, 0x16
mov ecx, edi
push eax
movsx eax, bp
add eax, 0x20
push eax
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
movsx ecx, word [esp + 0x1dc]
movsx eax, bp
mov dword [esp + 0x14], eax
lea edx, [eax + 0x19]
cmp ecx, edx
jle 0x4671f9
add eax, 0x64
cmp ecx, eax
jge 0x4671f9
movsx ecx, word [esp + 0x1e0]
movsx eax, bx
mov dword [esp + 0x10], eax
lea ebp, [eax + 0x37]
cmp ecx, ebp
jle 0x4671f9
add eax, 0x46
cmp ecx, eax
jge 0x4671f9
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
mov ebx, dword [esp + 0x14]
push 0xffffff
push 0x4ad284
push ebp
lea eax, [ebx + 0x1c]
mov ecx, edi
push eax
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad284
lea ecx, [ebx + 0x1d]
push ebp
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
jmp 0x467259
lea edi, [esi + 0x6004]
mov ecx, edi
call fcn.00402250
movsx ebp, bx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x10], ebp
add ebp, 0x37
push 0x320004
push 0x4ad284
lea edx, [ebx + 0x1c]
push ebp
push edx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad284
add ebx, 0x1d
push ebp
push ebx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ebx, dword [esp + 0x14]
movsx eax, word [esp + 0x1dc]
lea ecx, [ebx + 0x68]
cmp eax, ecx
jle 0x4672bb
lea ecx, [ebx + 0x9b]
cmp eax, ecx
jge 0x4672bb
movsx eax, word [esp + 0x1e0]
cmp eax, ebp
jle 0x4672bb
mov edx, dword [esp + 0x10]
add edx, 0x46
cmp eax, edx
jge 0x4672bb
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad260
lea eax, [ebx + 0x67]
push ebp
push eax
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
jmp 0x4672eb
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad260
lea ecx, [ebx + 0x67]
push ebp
push ecx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad260
lea eax, [ebx + 0x68]
push ebp
push eax
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
lea ecx, [esi + 0x4e388]
call fcn.00491a60
test eax, eax
jne case.default.0x4661d0
movsx eax, word [esp + 0x1dc]
lea esi, [ebx + 0x9b]
cmp eax, esi
jle 0x467378
lea edx, [ebx + 0xd2]
cmp eax, edx
jge 0x467378
movsx eax, word [esp + 0x1e0]
cmp eax, ebp
jle 0x467378
mov ecx, dword [esp + 0x10]
add ecx, 0x46
cmp eax, ecx
jge 0x467378
mov ecx, edi
call fcn.00402250
push 0xffffff
push 0x4ad27c
push ebp
push esi
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0xffffff
jmp 0x4673a5
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad27c
push ebp
push esi
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
mov ecx, edi
call fcn.00402250
push 0x320004
push 0x4ad27c
push ebp
add ebx, 0x9c
push ebx
mov ecx, edi
call fcn.00401ef0
mov ecx, edi
call fcn.00402290
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c8
ret 8