Function at 0x403624
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffc0c
mov eax, 0x404d3c
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0x198fc
mov dword [ebp - 0x14], 0x1e60e
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
je 0x403678
mov dword [0x7f6110], ecx
mov byte [0x7f6084], 0x19
and dword [0x7f6088], edi
mov dword [0x7f609c], edi
mov ebx, 0x9f
mov dword [0x7f6073], edx
mov dword [0x7f6046], edi
mov eax, 0x404d5c
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0x17008
mov dword [ebp - 0x28], 0x18598
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
je 0x4036d0
sub esi, dword [0x7f6079]
mov edi, ecx
dec esi
mov byte [ebp - 0x2b9], 0
mov dword [0x7f6053], 0x17e9b
mov dword [0x7f60dd], edx
mov byte [0x7f608c], 0xa1
mov dword [0x7f60fc], esi
and dword [0x7f60a6], ebx
mov dword [ebp - 0x30], 0x1031e
mov eax, 0x404d68
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0x1234e
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
call sub.kernel32.dll_GetLocaleInfoA
test eax, eax
jne 0x403732
mov dword [0x7f6081], ecx
dec esi
mov ecx, eax
call fcn.004029b8
cmp byte [0x7f6061], 0
jle 0x40375c
mov dword [0x7f60c8], edi
add dword [0x7f6092], eax
mov dword [0x7f6094], edi
mov byte [0x7f608e], 0xe6
inc esi
jmp 0x40375d
inc ecx
mov dword [0x7f603e], edi
mov dword [0x7f605f], esi
mov dword [0x7f60de], 0x11a77
inc byte [ebp - 0x2b9]
cmp byte [ebp - 0x2b9], 2
jne 0x4036d7
mov dword [0x7f6078], eax
test ebx, ebx
jne 0x4037a1
mov word [0x7f60c8], 0xce2a
mov dword [0x7f60fb], ecx
jmp 0x4037b3
mov dword [0x7f60df], eax
mov dword [0x7f605d], esi
mov dword [0x7f60e0], ecx
mov word [0x7f60a9], 0x651f
mov eax, 0x404d74
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], 0x1f162
mov dword [ebp - 0x4c], 0x1a660
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 0x3c]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
je 0x403813
sub dword [0x7f60aa], eax
cmp ecx, 0xffffffff
jle 0x403807
mov dword [0x7f6056], eax
jmp 0x40380d
and esi, dword [0x7f6021]
mov edx, dword [0x7f608f]
and eax, esi
mov byte [0x7f6067], 0xd5
mov dword [0x7f60d7], 0x11c8b
xor eax, eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], 0x191ba
mov dword [ebp - 0x5c], 0x175a7
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x2d4]
push eax
mov eax, dword [ebp - 0x58]
push eax
lea eax, [ebp - 0x2c8]
push eax
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 0x50]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
je 0x403870
xchg dword [0x7f6095], esi
mov dword [0x7f607c], edi
mov dword [esp - 0xc], ebx
call fcn.004029b8
mov dword [esp - 0x18], edx
and dword [0x7f610e], esi
mov dword [0x7f60ab], ecx
mov dword [0x7f60ff], 0x14978
mov eax, 0x404d84
mov dword [ebp - 0x60], eax
xor eax, eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x6c], 0x1c71e
mov dword [ebp - 0x70], 0x17b13
lea eax, [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x60]
push eax
call sub.advapi32.dll_GetFileSecurityW
cmp byte [0x7f6061], 0
jle 0x4038e8
mov dword [0x7f60c8], edi
add dword [0x7f6092], eax
mov dword [0x7f6094], edi
mov byte [0x7f608e], 0xe6
inc esi
jmp 0x4038e9
inc ecx
mov dword [0x7f603e], edi
mov dword [0x7f605f], esi
mov dword [0x7f60de], 0x11a77
mov dword [0x7f610e], 0x1064c
mov dword [0x7f6094], 0x162f8
mov dword [0x7f60be], ebx
mov dword [0x7f602b], esi
mov dword [ebp - 0x78], 0x1d982
mov eax, 0x404d9c
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], 0x15614
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x74]
push eax
call sub.kernel32.dll_GetLocaleInfoA
test eax, eax
je 0x403964
mov dword [0x7f6045], eax
mov dword [0x7f6043], ebx
mov dword [0x7f609d], 0x15ae7
dec ebx
sub dword [0x7f60b6], eax
mov dword [0x7f6023], ebx
mov dword [0x7f6062], eax
mov dword [0x7f60bd], eax
mov edx, dword [esp + 0x10]
mov dword [0x7f604d], esi
mov dword [ebp - 0x88], 0x11702
mov eax, 0x404da8
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x90], 0x1922d
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x84]
push eax
call sub.kernel32.dll_GetLocaleInfoA
call fcn.004029b8
call fcn.00401498
mov byte [ebp - 0x2b9], 0
mov eax, 0x404db4
mov dword [ebp - 0x94], eax
xor eax, eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], 0x1114d
mov dword [ebp - 0xa4], 0x1266b
lea eax, [ebp - 0xa4]
push eax
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
je 0x403a45
add dword [0x7f6109], ecx
mov dword [0x7f6036], edx
mov dword [0x7f6017], ecx
mov dword [0x7f60d9], edx
mov eax, esi
call fcn.00406bf4
mov dword [esp - 0x18], edx
and dword [0x7f610e], esi
mov dword [0x7f60ab], ecx
mov dword [0x7f60ff], 0x14978
inc byte [ebp - 0x2b9]
cmp byte [ebp - 0x2b9], 3
jne 0x4039d8
call fcn.00401498
xor eax, eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb0], 0x11a11
mov dword [ebp - 0xb4], 0x1f02c
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x2ec]
push eax
mov eax, dword [ebp - 0xb0]
push eax
lea eax, [ebp - 0x2e0]
push eax
mov eax, dword [ebp - 0xac]
push eax
mov eax, dword [ebp - 0xa8]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
jne 0x403af0
test ah, ah
je 0x403ad8
mov byte [0x7f6016], 0xd4
jmp 0x403ae7
mov word [0x7f6018], 0xfbd4
mov dword [0x7f601e], edi
mov ebx, 0x14a
mov dword [esp - 0x24], esi
mov dword [0x7f6060], 0x14f87
mov eax, 0x1ac
cmp byte [0x7f6065], 0
jge 0x403b1d
lea ebx, [0x7f6090]
mov dword [ebx + 0xc], 0xb2
mov dword [0x7f607b], edi
jmp 0x403b2f
mov dword [0x7f6102], ebx
xchg dword [0x7f60f3], ecx
mov dword [0x7f60b7], edi
mov eax, 0xfe
mov dword [0x7f60a1], 0x110a4
mov dword [ebp - 0xbc], 0x18440
mov eax, 0x404dbc
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc4], 0x1156e
mov eax, dword [ebp - 0xc4]
push eax
mov eax, dword [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0xb8]
push eax
call sub.kernel32.dll_GetLocaleInfoA
test eax, eax
je 0x403ba8
mov dword [0x7f60b2], ebx
mov dword [0x7f60bb], 0x14059
mov dword [0x7f6042], 0x14375
mov dword [0x7f605c], ecx
mov dword [0x7f6081], esi
mov byte [ebp - 0x2b9], 0
mov word [0x7f60b8], 0x76b8
mov dword [0x7f60c0], edi
mov byte [0x7f60c2], 0x42
mov word [0x7f606b], 0x2922
mov word [0x7f610b], 0xca49
mov eax, 0x404dd0
mov dword [ebp - 0xc8], eax
xor eax, eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd4], 0x1d336
mov dword [ebp - 0xd8], 0x1de65
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
mov eax, dword [ebp - 0xd0]
push eax
mov eax, dword [ebp - 0xcc]
push eax
mov eax, dword [ebp - 0xc8]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
jne 0x403c50
mov esi, dword [0x7f6096]
mov dword [0x7f6062], ecx
test edx, edx
je 0x403c42
mov ecx, esi
mov dword [0x7f60a3], edi
and dword [0x7f6107], ecx
mov esi, edx
mov dword [0x7f60fa], edi
inc byte [ebp - 0x2b9]
cmp byte [ebp - 0x2b9], 2
jne 0x403baf
push 1
push eax
push ecx
call fcn.00404f2c
mov eax, 0x404de0
mov dword [ebp - 0xdc], eax
xor eax, eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe8], 0x1b1df
mov dword [ebp - 0xec], 0x1b77c
lea eax, [ebp - 0xec]
push eax
mov eax, dword [ebp - 0xe8]
push eax
mov eax, dword [ebp - 0xe4]
push eax
mov eax, dword [ebp - 0xe0]
push eax
mov eax, dword [ebp - 0xdc]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
jne 0x403cd7
mov dword [0x7f606a], 0x11ea5
mov dword [0x7f60c8], 0x171f9
mov dword [esp - 0x28], edx
add esi, eax
cmp eax, 0x22
jg 0x403cf7
dec ebx
mov dword [0x7f602f], eax
lea ecx, [0x7f60b2]
mov dword [ecx], 0x5d
mov dword [0x7f605c], edx
mov dword [0x7f609f], eax
mov ebx, esi
mov word [0x7f6038], 0x504
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0xf8], 0x1f211
mov dword [ebp - 0xfc], 0x192e1
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x304]
push eax
mov eax, dword [ebp - 0xf8]
push eax
lea eax, [ebp - 0x2f8]
push eax
mov eax, dword [ebp - 0xf4]
push eax
mov eax, dword [ebp - 0xf0]
push eax
call sub.advapi32.dll_AdjustTokenGroups
call fcn.00406bf4
mov dword [esp - 0x12], eax
mov dword [0x7f60e4], edx
mov eax, edi
xchg dword [esp - 0xc], edi
mov dword [ebp - 0x104], 0x19d91
mov eax, 0x404e04
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x10c], 0x18324
mov eax, dword [ebp - 0x10c]
push eax
mov eax, dword [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x104]
push eax
mov eax, dword [ebp - 0x100]
push eax
call sub.kernel32.dll_GetLocaleInfoA
test eax, eax
jne 0x403de0
mov dword [0x7f60ba], ecx
mov word [0x7f606f], 0x1907
cmp word [0x7f602e], 0
jle 0x403dcd
mov dword [esp - 0x18], esi
jmp 0x403dda
mov byte [0x7f60a2], 0xe7
add dword [0x7f6014], ecx
mov dword [0x7f60e4], ebx
mov dword [ebp - 0x114], 0x1a9ee
mov eax, 0x404e10
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x11c], 0x1654c
mov eax, dword [ebp - 0x11c]
push eax
mov eax, dword [ebp - 0x118]
push eax
mov eax, dword [ebp - 0x114]
push eax
mov eax, dword [ebp - 0x110]
push eax
call sub.kernel32.dll_GetLocaleInfoA
test eax, eax
je 0x403e5b
mov dword [0x7f6027], edx
mov dword [0x7f6015], ecx
test esi, esi
je 0x403e45
mov dword [esp - 0x1c], edx
mov dword [0x7f6063], 0x165e6
sub ebx, 5
mov dword [0x7f60e5], ecx
sub dword [0x7f6074], eax
mov dword [0x7f60c2], 0x17296
call fcn.00402ca4
push esi
push ecx
call fcn.00401498
mov byte [ebp - 0x2b9], 0
xor eax, eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x128], 0x17697
mov dword [ebp - 0x12c], 0x12c03
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x31c]
push eax
mov eax, dword [ebp - 0x128]
push eax
lea eax, [ebp - 0x310]
push eax
mov eax, dword [ebp - 0x124]
push eax
mov eax, dword [ebp - 0x120]
push eax
call sub.advapi32.dll_AdjustTokenGroups
inc byte [ebp - 0x2b9]
cmp byte [ebp - 0x2b9], 2
jne 0x403e6e
xor eax, eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x138], 0x1c786
mov dword [ebp - 0x13c], 0x1638f
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x334]
push eax
mov eax, dword [ebp - 0x138]
push eax
lea eax, [ebp - 0x328]
push eax
mov eax, dword [ebp - 0x134]
push eax
mov eax, dword [ebp - 0x130]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
je 0x403f41
cmp di, word [esp + 0x24]
jle 0x403f2a
mov dword [0x7f6090], ecx
mov dword [0x7f607c], edi
mov dword [0x7f610c], 0x104b4
sub esi, dword [0x7f60fd]
dec edx
mov dword [0x7f6109], ecx
mov dword [esp - 8], ebx
mov dword [0x7f6066], edx
mov dword [0x7f601d], esi
cmp dword [0x7f606b], 0
jl 0x403f7f
mov ebx, 0x189
mov dword [0x7f6062], eax
mov ecx, 0xa5
sub edx, 0xb5
mov byte [0x7f6032], 0x46
mov dword [0x7f6027], ecx
jmp 0x403fa4
mov dword [0x7f60c6], ebx
mov dword [0x7f6065], esi
and edi, dword [0x7f6104]
mov word [0x7f610c], 0xcbb8
mov dword [0x7f6032], 0x17155
mov dword [0x7f603a], eax
cmp esi, dword [0x7f6028]
jl 0x403fd8
mov dword [esp - 0x1c], eax
and ebx, 0x97
mov dword [0x7f6043], 0x1757f
lea ecx, [0x7f6081]
sub dword [ecx], 0x94
add dword [0x7f60c8], ebx
mov dword [0x7f60b3], ecx
mov word [0x7f60c3], 0x41f4
mov dword [0x7f60fe], eax
mov dword [ebp - 0x144], 0xffffffff
mov dword [ebp - 0x148], 0x13f9f
mov dword [ebp - 0x14c], 0x19b16
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x34c]
push eax
mov eax, dword [ebp - 0x148]
push eax
lea eax, [ebp - 0x340]
push eax
mov eax, dword [ebp - 0x144]
push eax
mov eax, dword [ebp - 0x140]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
jne 0x404057
mov dword [0x7f610a], ebx
mov dword [0x7f60f8], esi
mov dword [0x7f60e5], edi
mov dword [0x7f604d], edx
inc eax
mov dword [ebp - 0x154], 0x1801c
mov eax, 0x404e20
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x15c], 0x1d7c0
mov eax, dword [ebp - 0x15c]
push eax
mov eax, dword [ebp - 0x158]
push eax
mov eax, dword [ebp - 0x154]
push eax
mov eax, dword [ebp - 0x150]
push eax
call sub.kernel32.dll_GetLocaleInfoA
mov dword [0x7f601c], ecx
xchg dword [0x7f6063], esi
mov dword [0x7f60f8], 0x12acb
add dword [0x7f60da], ebx
mov dword [0x7f609c], edi
mov ebx, 0x9f
mov dword [0x7f6073], edx
mov dword [0x7f6046], edi
mov dword [ebp - 0x164], 0x1e5ec
mov eax, 0x404e28
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x16c], 0x15774
mov eax, dword [ebp - 0x16c]
push eax
mov eax, dword [ebp - 0x168]
push eax
mov eax, dword [ebp - 0x164]
push eax
mov eax, dword [ebp - 0x160]
push eax
call sub.kernel32.dll_GetLocaleInfoA
test eax, eax
jne 0x404121
and dword [0x7f60c5], eax
mov dword [0x7f601d], esi
mov byte [0x7f60f9], 0xd
call fcn.004029b8
mov dword [esp - 0x18], edi
mov dword [0x7f60e6], ebx
mov byte [0x7f60f1], 0x37
cmp edi, 0xffffffff
jge 0x404152
inc ebx
mov word [0x7f6069], 0x3630
dec edi
mov dword [0x7f603c], esi
mov ecx, 0x1d3
sub dword [0x7f6055], esi
mov dword [0x7f60e7], 0x17ca2
mov dword [0x7f6045], edi
mov eax, 0x404e30
mov dword [ebp - 0x170], eax
xor eax, eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x17c], 0x10323
mov dword [ebp - 0x180], 0x13194
lea eax, [ebp - 0x180]
push eax
mov eax, dword [ebp - 0x17c]
push eax
mov eax, dword [ebp - 0x178]
push eax
mov eax, dword [ebp - 0x174]
push eax
mov eax, dword [ebp - 0x170]
push eax
call sub.advapi32.dll_GetFileSecurityW
call fcn.00402ca4
mov byte [ebp - 0x2b9], 0
add dword [0x7f6054], ebx
add dword [0x7f60d4], edx
mov dword [0x7f6104], eax
mov eax, 0x404e3c
mov dword [ebp - 0x184], eax
xor eax, eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x190], 0x1e462
mov dword [ebp - 0x194], 0x17ec6
lea eax, [ebp - 0x194]
push eax
mov eax, dword [ebp - 0x190]
push eax
mov eax, dword [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x188]
push eax
mov eax, dword [ebp - 0x184]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
jne 0x404241
mov dword [0x7f60dc], edx
mov dword [0x7f6098], esi
mov dword [esp - 0xc], edi
mov word [0x7f60c6], 0x5c67
inc byte [ebp - 0x2b9]
cmp byte [ebp - 0x2b9], 1
jne 0x4041c3
mov dword [0x7f60ee], 0x13921
mov dword [0x7f6097], 0x14afe
cmp dword [esp + 4], ebx
je 0x404286
mov dword [0x7f60fe], 0x16521
and dword [0x7f6047], esi
xchg dword [0x7f60ea], ecx
jmp 0x404296
lea esi, [0x7f6074]
add dword [esi + 0x1c], 0x56
mov dword [0x7f60e3], ebx
xchg dword [0x7f607a], edx
mov dword [ebp - 0x19c], 0x1b77f
mov eax, 0x404e5c
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a4], 0x1d078
mov eax, dword [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 0x1a0]
push eax
mov eax, dword [ebp - 0x19c]
push eax
mov eax, dword [ebp - 0x198]
push eax
call sub.kernel32.dll_GetLocaleInfoA
test eax, eax
je 0x4042f6
sub dword [0x7f6069], ebx
mov dword [0x7f603b], 0x12912
and edi, 0xe4
mov dword [esp - 8], ebx
mov dword [0x7f6066], edx
mov dword [0x7f601d], esi
call fcn.00404f2c
mov dword [0x7f60aa], ecx
mov dword [0x7f60f1], esi
mov dword [0x7f6022], eax
and dword [0x7f6065], ebx
mov dword [0x7f6083], 0x119f2
call fcn.00401498
mov byte [ebp - 0x2b9], 0
lea edx, [0x7f60e4]
mov dword [edx + 8], 0x9d
mov dword [0x7f607b], eax
sub ebx, esi
xor eax, eax
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1b0], 0x1048d
mov dword [ebp - 0x1b4], 0x10a78
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x364]
push eax
mov eax, dword [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x358]
push eax
mov eax, dword [ebp - 0x1ac]
push eax
mov eax, dword [ebp - 0x1a8]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
jne 0x4043bb
mov dword [0x7f6014], 0x12cd2
sub dword [0x7f60c2], ecx
mov esi, dword [esp + 0x1c]
mov dword [0x7f6030], 0x1400f
inc byte [ebp - 0x2b9]
cmp byte [ebp - 0x2b9], 1
jne 0x404339
mov byte [ebp - 0x2b9], 0
mov eax, 0x404e70
mov dword [ebp - 0x1b8], eax
xor eax, eax
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c4], 0x10308
mov dword [ebp - 0x1c8], 0x19ba2
lea eax, [ebp - 0x1c8]
push eax
mov eax, dword [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x1c0]
push eax
mov eax, dword [ebp - 0x1bc]
push eax
mov eax, dword [ebp - 0x1b8]
push eax
call sub.advapi32.dll_GetFileSecurityW
call fcn.004029b8
sub dword [0x7f6102], edx
add dword [0x7f60e9], esi
mov dword [0x7f60da], edx
mov byte [0x7f609f], 0x4f
dec ebx
inc byte [ebp - 0x2b9]
cmp byte [ebp - 0x2b9], 2
jne 0x4043d5
mov dword [0x7f609c], edi
mov ebx, 0x9f
mov dword [0x7f6073], edx
mov dword [0x7f6046], edi
mov eax, 0x7f60b9
mov ecx, 0x7f60ad
call fcn.00404f2c
mov dword [ebp - 0x1d0], 0x19eaf
mov eax, 0x404e88
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d8], 0x156da
mov eax, dword [ebp - 0x1d8]
push eax
mov eax, dword [ebp - 0x1d4]
push eax
mov eax, dword [ebp - 0x1d0]
push eax
mov eax, dword [ebp - 0x1cc]
push eax
call sub.kernel32.dll_GetLocaleInfoA
test eax, eax
jne 0x4044d2
xchg dword [0x7f60bc], esi
sub dword [0x7f6015], ebx
mov dword [0x7f6029], 0x15dbd
mov dword [0x7f60aa], ecx
mov dword [0x7f60f1], esi
mov dword [0x7f6022], eax
and dword [0x7f6065], ebx
mov dword [0x7f6083], 0x119f2
mov dword [0x7f607d], ebx
sub dword [0x7f60c9], eax
cmp word [0x7f6058], 0
jge 0x40450b
inc edi
xchg dword [0x7f60a7], eax
mov dword [0x7f6025], ebx
mov dword [esp - 0x12], ecx
mov dword [0x7f6016], eax
call fcn.00401498
inc ecx
dec edx
mov byte [0x7f6106], 0x52
mov dword [ebp - 0x1e0], 0x1e031
mov eax, 0x404e90
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e8], 0x12ac6
mov eax, dword [ebp - 0x1e8]
push eax
mov eax, dword [ebp - 0x1e4]
push eax
mov eax, dword [ebp - 0x1e0]
push eax
mov eax, dword [ebp - 0x1dc]
push eax
call sub.kernel32.dll_GetLocaleInfoA
test eax, eax
jne 0x404588
mov word [0x7f6015], 0x5174
mov dword [0x7f60c7], esi
mov dword [0x7f60ad], edx
test cl, cl
jne 0x40458d
inc ebx
mov dword [0x7f6027], 0x1771c
mov edx, eax
mov dword [0x7f60f4], ecx
cmp dword [0x7f60ec], 0
jne 0x4045c0
mov dword [0x7f60b3], ecx
mov word [0x7f60df], 0x48af
mov word [0x7f6112], 0x86b6
mov dword [0x7f60f9], ebx
mov dword [0x7f6018], ecx
cmp byte [0x7f602b], 0
jg 0x4045e4
mov esi, edx
mov byte [0x7f6061], 0x6e
mov dword [0x7f60fc], ebx
mov esi, dword [0x7f601b]
mov dword [0x7f60cd], 0x141cc
xor eax, eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1f4], 0x1f87c
mov dword [ebp - 0x1f8], 0x1b20a
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x37c]
push eax
mov eax, dword [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x370]
push eax
mov eax, dword [ebp - 0x1f0]
push eax
mov eax, dword [ebp - 0x1ec]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
je 0x40464e
mov dword [esp - 8], edi
sub dword [0x7f606a], esi
inc eax
call fcn.00404f2c
mov eax, 0x404ea4
mov dword [ebp - 0x1fc], eax
xor eax, eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x208], 0x10932
mov dword [ebp - 0x20c], 0x10181
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [ebp - 0x208]
push eax
mov eax, dword [ebp - 0x204]
push eax
mov eax, dword [ebp - 0x200]
push eax
mov eax, dword [ebp - 0x1fc]
push eax
call sub.advapi32.dll_GetFileSecurityW
dec ebx
sub dword [0x7f60b6], eax
mov dword [0x7f6023], ebx
mov dword [0x7f6062], eax
dec ebx
sub dword [0x7f60b6], eax
mov dword [0x7f6023], ebx
mov dword [0x7f6062], eax
call fcn.00404f2c
mov dword [esp - 0xc], edi
cmp ecx, 0xffffffff
jl 0x404700
mov esi, 0x13c
mov dword [0x7f6034], 0x11066
mov word [0x7f606a], 0x2c67
mov dword [0x7f6050], 0x16e58
mov dword [0x7f60c6], ebx
jmp 0x404718
mov edx, 0x54
inc ecx
mov dword [0x7f60d6], edi
mov dword [0x7f6028], eax
mov dword [0x7f6024], ecx
mov dword [0x7f60a0], 0x15445
mov dword [0x7f6060], eax
mov dword [0x7f6085], edi
mov dword [ebp - 0x214], 0x1b86d
mov eax, 0x404eb8
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x21c], 0x1879d
mov eax, dword [ebp - 0x21c]
push eax
mov eax, dword [ebp - 0x218]
push eax
mov eax, dword [ebp - 0x214]
push eax
mov eax, dword [ebp - 0x210]
push eax
call sub.kernel32.dll_GetLocaleInfoA
call fcn.00406bf4
dec ebx
sub dword [0x7f60b6], eax
mov dword [0x7f6023], ebx
mov dword [0x7f6062], eax
push esi
call fcn.00404f2c
mov eax, 0x404ec8
mov dword [ebp - 0x220], eax
xor eax, eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x22c], 0x15d22
mov dword [ebp - 0x230], 0x1a3d3
lea eax, [ebp - 0x230]
push eax
mov eax, dword [ebp - 0x22c]
push eax
mov eax, dword [ebp - 0x228]
push eax
mov eax, dword [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x220]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
jne 0x4047f9
mov dword [0x7f6049], edx
mov dword [0x7f6039], 0x1128b
mov dword [0x7f60b5], 0x16733
call fcn.00403464
mov byte [ebp - 0x2b9], 0
mov dword [0x7f6080], eax
mov dword [0x7f603e], ebx
mov edi, dword [esp + 0x20]
mov dword [0x7f606a], esi
mov dword [0x7f60f4], edx
mov eax, 0x404ee4
mov dword [ebp - 0x234], eax
xor eax, eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x240], 0x1c92d
mov dword [ebp - 0x244], 0x15657
lea eax, [ebp - 0x244]
push eax
mov eax, dword [ebp - 0x240]
push eax
mov eax, dword [ebp - 0x23c]
push eax
mov eax, dword [ebp - 0x238]
push eax
mov eax, dword [ebp - 0x234]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
jne 0x40488a
mov dword [0x7f60d9], 0x103c4
mov dword [0x7f60d2], edx
mov dword [0x7f60e7], ecx
inc byte [ebp - 0x2b9]
cmp byte [ebp - 0x2b9], 3
jne 0x404805
mov dword [0x7f60aa], ecx
mov dword [0x7f60f1], esi
mov dword [0x7f6022], eax
and dword [0x7f6065], ebx
mov dword [0x7f6083], 0x119f2
mov eax, 0x7f60d7
mov eax, 0x7f6082
push ecx
call fcn.00404f2c
mov dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x250], 0x1a5eb
mov dword [ebp - 0x254], 0x12f1b
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x394]
push eax
mov eax, dword [ebp - 0x250]
push eax
lea eax, [ebp - 0x388]
push eax
mov eax, dword [ebp - 0x24c]
push eax
mov eax, dword [ebp - 0x248]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
jne 0x40493e
mov dword [0x7f6104], ebx
xchg dword [0x7f60ad], eax
mov dword [0x7f605e], ebx
mov dword [0x7f60c4], ecx
mov dword [0x7f6097], esi
mov dword [0x7f607d], ebx
sub dword [0x7f60c9], eax
cmp word [0x7f6058], 0
jge 0x404955
inc edi
xchg dword [0x7f60a7], eax
mov dword [0x7f6025], ebx
mov dword [esp - 0x12], ecx
mov dword [0x7f6016], eax
xor eax, eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x260], 0x170e5
mov dword [ebp - 0x264], 0x1fab6
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x3ac]
push eax
mov eax, dword [ebp - 0x260]
push eax
lea eax, [ebp - 0x3a0]
push eax
mov eax, dword [ebp - 0x25c]
push eax
mov eax, dword [ebp - 0x258]
push eax
call sub.advapi32.dll_AdjustTokenGroups
mov dword [0x7f6016], eax
mov dword [0x7f60e9], 0x1636b
mov dword [0x7f609e], edi
mov dword [esp - 0x18], edx
and dword [0x7f610e], esi
mov dword [0x7f60ab], ecx
mov dword [0x7f60ff], 0x14978
mov dword [esp - 8], esi
cmp ebx, dword [0x7f60cd]
jl 0x404a04
mov dword [0x7f609f], 0x17a43
mov dword [0x7f607a], ebx
jmp 0x404a24
mov dword [0x7f60d6], esi
mov dword [0x7f609d], 0x1095a
mov dword [0x7f60ab], eax
mov dword [0x7f6044], 0x15af7
mov dword [0x7f6068], ecx
sub dword [0x7f6016], edi
xor eax, eax
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x270], 0x19dc1
mov dword [ebp - 0x274], 0x1bada
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x3c4]
push eax
mov eax, dword [ebp - 0x270]
push eax
lea eax, [ebp - 0x3b8]
push eax
mov eax, dword [ebp - 0x26c]
push eax
mov eax, dword [ebp - 0x268]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
je 0x404aa0
mov dword [0x7f6077], edx
mov dword [0x7f6081], esi
mov dword [0x7f60ed], 0x1584c
mov dword [0x7f6026], 0x17c27
dec edi
cmp eax, 0xffffffff
jle 0x404abe
add ebx, 0x2b
mov dword [0x7f60f1], 0x10a03
mov dword [esp - 4], edx
mov dword [0x7f6102], eax
jmp 0x404ae2
mov dword [0x7f6090], esi
mov dword [0x7f60c3], ebx
mov edx, eax
mov dword [0x7f605c], 0x12940
lea edx, [0x7f605f]
mov dword [edx], 0x20
mov byte [0x7f60ef], 0xc3
mov dword [0x7f60d3], esi
mov dword [0x7f6029], ecx
mov dword [ebp - 0x27c], 0xffffffff
mov dword [ebp - 0x280], 0x151e4
mov dword [ebp - 0x284], 0x16cd0
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x3dc]
push eax
mov eax, dword [ebp - 0x280]
push eax
lea eax, [ebp - 0x3d0]
push eax
mov eax, dword [ebp - 0x27c]
push eax
mov eax, dword [ebp - 0x278]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
je 0x404b68
mov dword [0x7f610f], esi
mov dword [0x7f60f4], ebx
test esi, esi
je 0x404b5c
xchg dword [0x7f60a0], ecx
mov dword [0x7f605c], eax
xchg dword [0x7f6027], ecx
mov dword [0x7f609c], edi
mov ebx, 0x9f
mov dword [0x7f6073], edx
mov dword [0x7f6046], edi
call fcn.00401498
mov dword [ebp - 0x28c], 0x195a0
mov eax, 0x404f08
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x294], 0x1ed5f
mov eax, dword [ebp - 0x294]
push eax
mov eax, dword [ebp - 0x290]
push eax
mov eax, dword [ebp - 0x28c]
push eax
mov eax, dword [ebp - 0x288]
push eax
call sub.kernel32.dll_GetLocaleInfoA
lea eax, [0x7f6077]
mov dword [eax + 0xc], 0xe9
sub edi, dword [0x7f60a5]
mov dword [0x7f602a], ebx
mov dword [0x7f6037], 0x17aba
mov word [0x7f60c9], 0xa9f4
cmp byte [0x7f6061], 0
jle 0x404c15
mov dword [0x7f60c8], edi
add dword [0x7f6092], eax
mov dword [0x7f6094], edi
mov byte [0x7f608e], 0xe6
inc esi
jmp 0x404c16
inc ecx
mov dword [0x7f603e], edi
mov dword [0x7f605f], esi
mov dword [0x7f60de], 0x11a77
push eax
push edi
call fcn.00404f2c
mov eax, 0x404f14
mov dword [ebp - 0x298], eax
xor eax, eax
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x2a4], 0x18630
mov dword [ebp - 0x2a8], 0x1bb6a
lea eax, [ebp - 0x2a8]
push eax
mov eax, dword [ebp - 0x2a4]
push eax
mov eax, dword [ebp - 0x2a0]
push eax
mov eax, dword [ebp - 0x29c]
push eax
mov eax, dword [ebp - 0x298]
push eax
call sub.advapi32.dll_GetFileSecurityW
test eax, eax
jne 0x404c98
mov dword [0x7f6015], ebx
sub dword [0x7f6074], ecx
xchg dword [0x7f60ed], edi
call fcn.00403464
mov byte [0x7f6094], 0xf
mov esi, eax
mov dword [0x7f6111], ebx
mov dword [0x7f6112], esi
xor eax, eax
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2b4], 0x13e20
mov dword [ebp - 0x2b8], 0x1c32b
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x3f4]
push eax
mov eax, dword [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x3e8]
push eax
mov eax, dword [ebp - 0x2b0]
push eax
mov eax, dword [ebp - 0x2ac]
push eax
call sub.advapi32.dll_AdjustTokenGroups
test eax, eax
jne 0x404d25
test eax, eax
jne 0x404d0d
mov dword [0x7f60c7], edx
jmp 0x404d18
mov dword [0x7f6024], eax
mov ecx, 0xd8
mov dword [0x7f6027], esi
mov byte [0x7f604e], 0x67
dec ebx
sub dword [0x7f60b6], eax
mov dword [0x7f6023], ebx
mov dword [0x7f6062], eax
mov esp, ebp
pop ebp
ret