Function at 0x986c4
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x50
push 0
push 0
dec ecx
jne 0x986cc
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00083980
xor eax, eax
push ebp
push 0x9985e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x48]
call fcn.000834e4
mov byte [ebp - 0x52], 0
mov byte [ebp - 0x51], 0
lea eax, [ebp - 0x58]
mov edx, 0x9987c
call fcn.0008357c
call fcn.00085668
lea eax, [ebp - 0x130]
call fcn.00087de0
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x134]
call fcn.00086ce8
mov edx, dword [ebp - 0x134]
pop eax
call fcn.00083798
mov eax, dword [ebp - 0x130]
call fcn.00083990
push eax
push 0
push 0
mov eax, dword [0x9b39c]
mov eax, dword [eax]
call eax
mov dword [ebp - 0x6c], eax
mov eax, dword [0x9b12c]
mov eax, dword [eax]
call eax
cmp eax, 0xb7
je 0x9965c
lea eax, [ebp - 0xc]
mov edx, 0x99888
call fcn.0008357c
lea eax, [ebp - 0xc]
mov ecx, 0x80000
mov edx, 0x99928
call fcn.00096dd4
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0xc]
call fcn.000869a8
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0xc]
call fcn.0008357c
lea eax, [ebp - 0x140]
call fcn.00086ce8
mov eax, dword [ebp - 0x140]
lea edx, [ebp - 0x13c]
call fcn.00086834
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x20]
mov edx, 0x99934
call fcn.000837dc
lea eax, [ebp - 0x20]
mov ecx, 0x80000
mov edx, dword [ebp - 0x58]
call fcn.00096dd4
lea eax, [ebp - 0x10]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.00097d84
lea eax, [ebp - 0x10]
mov ecx, 0x80000
mov edx, dword [ebp - 0x58]
call fcn.00096dd4
mov eax, dword [ebp - 0x10]
call fcn.00083790
cmp eax, 0x2710
jl 0x9965c
mov eax, dword [ebp - 0x10]
mov edx, 0x99940
call fcn.000838dc
je 0x9965c
lea eax, [ebp - 0x144]
push eax
mov ecx, 0x99950
mov edx, dword [ebp - 0x10]
mov eax, 0x99960
call fcn.000874e8
mov eax, dword [ebp - 0x144]
lea edx, [ebp - 0x24]
call fcn.000869a8
lea eax, [ebp - 0x148]
push eax
mov ecx, 0x9996c
mov edx, dword [ebp - 0x10]
mov eax, 0x9997c
call fcn.000874e8
mov eax, dword [ebp - 0x148]
lea edx, [ebp - 0x28]
call fcn.00086b08
lea ecx, [ebp - 0x2c]
mov edx, dword [ebp - 0x24]
mov eax, 0x99988
call fcn.00087a18
lea eax, [ebp - 0x150]
push eax
mov ecx, 0x99994
mov edx, dword [ebp - 0x10]
mov eax, 0x999a4
call fcn.000874e8
mov eax, dword [ebp - 0x150]
lea edx, [ebp - 0x14c]
call fcn.000869a8
mov eax, dword [ebp - 0x14c]
call fcn.00088180
mov eax, dword [ebp - 0x28]
call fcn.00089668
xor eax, eax
call fcn.0008e630
mov eax, dword [ebp - 0x2c]
call fcn.00084648
mov edi, eax
dec edi
test edi, edi
jl 0x98fb5
inc edi
xor ebx, ebx
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
call fcn.00083790
cmp eax, 5
jl 0x98fad
test ebx, ebx
jne 0x98b3e
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 1], 0x2b
jne 0x9892b
call fcn.0008e1dc
lea eax, [ebp - 0x154]
call fcn.00085424
mov eax, dword [ebp - 0x154]
mov edx, 0x999b0
call fcn.0008e6d4
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 2], 0x2b
jne 0x9895a
call fcn.00093bb4
lea eax, [ebp - 0x158]
call fcn.00085574
mov eax, dword [ebp - 0x158]
mov edx, dword [0x9b2fc]
mov edx, dword [edx]
call fcn.0008e6d4
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 9], 0x2b
jne 0x9896b
call fcn.00093be8
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 3], 0x2b
jne 0x98a98
mov eax, 0x999c8
call fcn.00094de8
push 0
push 0x7d0
push 1
push 0
push 0
mov ecx, 0x999d8
mov edx, 0x999fc
mov eax, 0x99a04
call fcn.00093f58
mov edx, dword [0x9b2c4]
add dword [edx], eax
push 0
push 0x7d0
push 1
push 0
push 0
mov ecx, 0x99a40
mov edx, 0x999fc
mov eax, 0x99a6c
call fcn.00093f58
mov edx, dword [0x9b2c4]
add dword [edx], eax
push 0
push 0x1388
push 1
push 0
push 0
mov ecx, 0x99ab0
mov edx, 0x99ad4
mov eax, 0x99ae4
call fcn.00093f58
mov edx, dword [0x9b2c4]
add dword [edx], eax
push 0
push 0x1388
push 1
push 0
push 0
mov ecx, 0x99b24
mov edx, 0x99b44
mov eax, 0x99b64
call fcn.00093f58
test eax, eax
jle 0x98a2c
mov eax, dword [0x9b2c4]
inc dword [eax]
push 0
push 0x1388
push 1
push 0
push 0
mov ecx, 0x99b8c
mov edx, 0x999fc
mov eax, 0x99bc4
call fcn.00093f58
test eax, eax
jle 0x98a58
mov eax, dword [0x9b2c4]
inc dword [eax]
push 0
push 0x1388
push 1
push 0
push 0
mov ecx, 0x99c04
mov edx, 0x99c2c
mov eax, 0x99ca4
call fcn.00093f58
test eax, eax
jle 0x98a84
mov eax, dword [0x9b2c4]
inc dword [eax]
mov eax, dword [0x9b2c4]
cmp dword [eax], 0
jle 0x98a98
mov eax, 0x99cd8
call fcn.00085114
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 4], 0x2b
jne 0x98aae
mov eax, 0x99ce0
call fcn.00094808
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 5], 0x2b
jne 0x98adb
push 0
push 0x3e8
push 1
push 0
push 0
mov ecx, 0x99cf0
mov edx, 0x99d08
mov eax, 0x99d30
call fcn.00093f58
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 6], 0x2b
jne 0x98af1
mov eax, 0x99d78
call fcn.00094a90
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 7], 0x2b
jne 0x98b2e
push 0
push 0x32
push 0x99d84
lea eax, [ebp - 0x40]
push eax
push 1
call fcn.00084f30
push eax
push 0
call fcn.00084f30
xor ecx, ecx
pop edx
call fcn.00096fb0
mov edx, 0x99da4
mov eax, dword [ebp - 0x40]
call fcn.0008e6d4
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax + 8], 0x2b
jne 0x98b3e
mov byte [ebp - 0x52], 1
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax], 0x46
jne 0x98ed1
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + ebx*4]
mov eax, 0x99db4
call fcn.00087a18
lea eax, [ebp - 0x5c]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 8]
call fcn.0008357c
mov edx, dword [ebp - 0x5c]
mov eax, 0x99dc0
call fcn.00083ad4
dec eax
jne 0x98dee
lea eax, [ebp - 0x68]
push eax
mov ecx, 0x99dd0
mov edx, dword [ebp - 0x5c]
mov eax, 0x99dc0
call fcn.000874e8
lea eax, [ebp - 0xed]
push eax
push 0x81
mov eax, dword [0x9b240]
mov eax, dword [eax]
call eax
test eax, eax
je 0x9965c
lea esi, [ebp - 0xed]
jmp 0x98de0
push esi
mov eax, dword [0x9b114]
mov eax, dword [eax]
call eax
lea edx, [ebp - 0x160]
call fcn.0008709c
mov edx, dword [ebp - 0x160]
lea eax, [ebp - 0x15c]
call fcn.0008377c
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x68]
call fcn.00083ad4
test eax, eax
je 0x98ddd
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x168]
mov edx, esi
call fcn.00083cf4
mov eax, dword [ebp - 0x168]
push eax
push 0x99dc0
push dword [ebp - 0x68]
push 0x99ddc
lea eax, [ebp - 0x170]
mov edx, 3
call fcn.00083850
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x16c]
call fcn.00083d88
mov eax, dword [ebp - 0x16c]
push eax
lea eax, [ebp - 0x174]
mov edx, dword [ebp - 0x5c]
call fcn.00083d88
mov eax, dword [ebp - 0x174]
pop edx
pop ecx
call fcn.0008717c
mov edx, dword [ebp - 0x164]
lea eax, [ebp - 0x64]
call fcn.0008377c
lea eax, [ebp - 0x60]
call fcn.000834e4
mov eax, dword [ebp - 0x30]
push dword [eax + 4]
push 0x99de8
push dword [ebp - 0x64]
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00083850
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x60]
call fcn.00083d88
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov edx, 0x99df0
call fcn.0008717c
lea eax, [ebp - 0x178]
mov edx, 0x99df8
call fcn.00083db4
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x60]
call fcn.0008377c
lea eax, [ebp - 0x184]
mov edx, dword [ebp - 0x60]
call fcn.00083d88
mov eax, dword [ebp - 0x184]
lea edx, [ebp - 0x180]
call fcn.000878d8
mov edx, dword [ebp - 0x180]
lea eax, [ebp - 0x60]
call fcn.0008377c
lea eax, [ebp - 0x188]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0x1c]
call fcn.00083d88
mov eax, dword [ebp - 0x188]
push eax
lea eax, [ebp - 0x18c]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0x10]
call fcn.00083d88
mov eax, dword [ebp - 0x18c]
call fcn.00087108
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x14]
mov edx, 0x99e04
call fcn.000838dc
sete al
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x18]
mov edx, 0x99e04
call fcn.000838dc
sete al
push eax
push 1
lea eax, [ebp - 0x194]
mov ecx, dword [ebp - 0x60]
mov edx, 0x99e10
call fcn.000837dc
mov edx, dword [ebp - 0x194]
lea eax, [ebp - 0x190]
call fcn.00083d88
mov eax, dword [ebp - 0x190]
push eax
lea eax, [ebp - 0x198]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0xc]
call fcn.00083d88
mov eax, dword [ebp - 0x198]
push eax
lea eax, [ebp - 0x1a0]
mov ecx, 0x99de8
mov edx, dword [ebp - 0x64]
call fcn.000837dc
mov edx, dword [ebp - 0x1a0]
lea eax, [ebp - 0x19c]
call fcn.00083d88
mov eax, dword [ebp - 0x19c]
pop edx
pop ecx
call fcn.00093f58
add esi, 4
cmp byte [esi], 0
jne 0x98bc0
jmp 0x98ed1
lea eax, [ebp - 0x1a4]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0x1c]
call fcn.00083d88
mov eax, dword [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1a8]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0x10]
call fcn.00083d88
mov eax, dword [ebp - 0x1a8]
call fcn.00087108
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x14]
mov edx, 0x99e04
call fcn.000838dc
sete al
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x18]
mov edx, 0x99e04
call fcn.000838dc
sete al
push eax
push 1
push 0x99e10
mov eax, dword [ebp - 0x30]
push dword [eax + 4]
push 0x99de8
lea eax, [ebp - 0x1b0]
mov edx, 3
call fcn.00083850
mov edx, dword [ebp - 0x1b0]
lea eax, [ebp - 0x1ac]
call fcn.00083d88
mov eax, dword [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x1b4]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0xc]
call fcn.00083d88
mov eax, dword [ebp - 0x1b4]
push eax
mov eax, dword [ebp - 0x30]
mov edx, dword [eax + 8]
lea eax, [ebp - 0x1bc]
mov ecx, 0x99de8
call fcn.000837dc
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1b8]
call fcn.00083d88
mov eax, dword [ebp - 0x1b8]
pop edx
pop ecx
call fcn.00093f58
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax], 0x4c
jne 0x98ef7
push dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
push dword [eax + ebx*4]
push 0x99988
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.00083850
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + ebx*4]
cmp byte [eax], 0x49
jne 0x98fad
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + ebx*4]
mov eax, 0x99db4
call fcn.00087a18
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov edx, 0x99e20
call fcn.000838dc
jne 0x98f9d
mov byte [ebp - 0x51], 1
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x99e2c
xor edx, edx
mov eax, 0x99e38
call fcn.00097d84
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x99e58
mov edx, dword [ebp - 0x1c]
mov eax, 0x99e64
call fcn.000874e8
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x99e58
mov edx, dword [ebp - 0x1c]
mov eax, 0x99e78
call fcn.000874e8
push dword [ebp - 0x4c]
push 0x99e90
push dword [ebp - 0x50]
lea eax, [ebp - 0x1c0]
mov edx, 3
call fcn.00083850
mov eax, dword [ebp - 0x1c0]
mov edx, 0x99e9c
call fcn.0008e6d4
jmp 0x98fad
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov edx, 0x99e9c
call fcn.0008e6d4
inc ebx
dec edi
jne 0x988e3
push dword [ebp - 4]
push 0x99988
lea eax, [ebp - 0x1c8]
call fcn.0009698c
push dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
mov edx, 3
call fcn.00083850
mov eax, dword [ebp - 0x1c4]
mov edx, 0x99eac
call fcn.0008e6d4
lea eax, [ebp - 0x1d0]
call fcn.00086ce8
mov eax, dword [ebp - 0x1d0]
lea edx, [ebp - 0x1cc]
call fcn.00086834
push dword [ebp - 0x1cc]
push 0x99ec0
lea eax, [ebp - 0x1d8]
call fcn.00087b08
mov eax, dword [ebp - 0x1d8]
lea edx, [ebp - 0x1d4]
call fcn.00086834
push dword [ebp - 0x1d4]
push 0x99ec0
lea eax, [ebp - 0x1e4]
call fcn.00086bd8
mov edx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x1e0]
call fcn.0008377c
mov eax, dword [ebp - 0x1e0]
lea edx, [ebp - 0x1dc]
call fcn.00086834
push dword [ebp - 0x1dc]
push 0x99ec0
lea eax, [ebp - 0x1f0]
call fcn.000866e4
mov edx, dword [ebp - 0x1f0]
lea eax, [ebp - 0x1ec]
call fcn.0008377c
mov eax, dword [ebp - 0x1ec]
lea edx, [ebp - 0x1e8]
call fcn.00086834
push dword [ebp - 0x1e8]
push 0x99ec0
lea eax, [ebp - 0x1fc]
call fcn.00086634
mov edx, dword [ebp - 0x1fc]
lea eax, [ebp - 0x1f8]
call fcn.0008377c
mov eax, dword [ebp - 0x1f8]
lea edx, [ebp - 0x1f4]
call fcn.00086834
push dword [ebp - 0x1f4]
push 0x99ec0
lea eax, [ebp - 0x208]
call fcn.000865f0
mov edx, dword [ebp - 0x208]
lea eax, [ebp - 0x204]
call fcn.0008377c
mov eax, dword [ebp - 0x204]
lea edx, [ebp - 0x200]
call fcn.00086834
push dword [ebp - 0x200]
push 0x99ec0
lea edx, [ebp - 0x214]
mov eax, dword [0x9b2a8]
mov eax, dword [eax]
call fcn.0008709c
mov edx, dword [ebp - 0x214]
lea eax, [ebp - 0x210]
call fcn.0008377c
mov eax, dword [ebp - 0x210]
lea edx, [ebp - 0x20c]
call fcn.00086834
push dword [ebp - 0x20c]
push 0x99ec0
lea edx, [ebp - 0x220]
mov eax, dword [0x9b2c4]
mov eax, dword [eax]
call fcn.0008709c
mov edx, dword [ebp - 0x220]
lea eax, [ebp - 0x21c]
call fcn.0008377c
mov eax, dword [ebp - 0x21c]
lea edx, [ebp - 0x218]
call fcn.00086834
push dword [ebp - 0x218]
push 0x99ec0
lea edx, [ebp - 0x22c]
mov eax, dword [0x9b1cc]
mov eax, dword [eax]
call fcn.0008709c
mov edx, dword [ebp - 0x22c]
lea eax, [ebp - 0x228]
call fcn.0008377c
mov eax, dword [ebp - 0x228]
lea edx, [ebp - 0x224]
call fcn.00086834
push dword [ebp - 0x224]
push 0x99ec0
lea edx, [ebp - 0x238]
mov eax, dword [0x9b3f8]
mov eax, dword [eax]
call fcn.0008709c
mov edx, dword [ebp - 0x238]
lea eax, [ebp - 0x234]
call fcn.0008377c
mov eax, dword [ebp - 0x234]
lea edx, [ebp - 0x230]
call fcn.00086834
push dword [ebp - 0x230]
push 0x99ec0
lea edx, [ebp - 0x23c]
mov eax, dword [ebp - 4]
call fcn.00086834
push dword [ebp - 0x23c]
push 0x99ec0
lea eax, [ebp - 0x244]
call fcn.00087de0
mov eax, dword [ebp - 0x244]
lea edx, [ebp - 0x240]
call fcn.00086834
push dword [ebp - 0x240]
lea eax, [ebp - 0x18]
mov edx, 0x17
call fcn.00083850
push 0x99ecc
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
push dword [ebp - 0x18]
push 0x99ee8
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
push 0x99988
push 0x99ef8
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
lea eax, [ebp - 0x248]
call fcn.000863c8
push dword [ebp - 0x248]
push 0x99f08
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
push 0x99988
push 0x99f18
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
lea eax, [ebp - 0x24c]
call fcn.00086560
push dword [ebp - 0x24c]
push 0x99f28
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
push 0x99988
push 0x99f38
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
lea eax, [ebp - 0x250]
call fcn.0008e8d0
push dword [ebp - 0x250]
push 0x99f48
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
push 0x99988
lea eax, [ebp - 0x14]
mov edx, 0x20
call fcn.00083850
cmp byte [ebp - 0x51], 1
jne 0x99387
push dword [ebp - 0x14]
push 0x99f58
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
push dword [ebp - 0x4c]
push 0x99e90
push dword [ebp - 0x50]
push 0x99f64
mov eax, dword [0x9b350]
push dword [eax]
push 0x99edc
push 0x99988
lea eax, [ebp - 0x14]
mov edx, 0xb
call fcn.00083850
lea eax, [ebp - 0x14]
mov ecx, 0x80000
mov edx, dword [ebp - 0x58]
call fcn.00096dd4
lea eax, [ebp - 0x254]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.00097d84
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [0x9b3a0]
mov eax, dword [eax]
call eax
mov eax, 0x99f74
call fcn.00085114
mov eax, dword [ebp - 0x48]
call fcn.00083790
cmp eax, 3
jle 0x994dd
lea ecx, [ebp - 0x34]
mov edx, dword [ebp - 0x48]
mov eax, 0x99988
call fcn.00087a18
mov eax, dword [ebp - 0x34]
call fcn.00084648
mov edi, eax
dec edi
test edi, edi
jl 0x994dd
inc edi
xor ebx, ebx
push 0
lea eax, [ebp - 0x38]
mov ecx, 1
mov edx, dword [0x85f50]
call fcn.00084804
add esp, 4
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov edx, dword [eax + ebx*4]
mov eax, 0x99db4
call fcn.00087a18
mov eax, dword [ebp - 0x38]
call fcn.00084648
cmp eax, 4
jne 0x994d5
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov edx, 0x99f80
call fcn.000838dc
jne 0x994d5
lea ecx, [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov edx, dword [eax + 0xc]
mov eax, 0x99f8c
call fcn.00087a18
mov byte [ebp - 0x53], 0
mov eax, dword [ebp - 0x3c]
call fcn.00084648
mov esi, eax
dec esi
test esi, esi
jl 0x994b1
inc esi
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
mov eax, dword [eax + edx*4]
lea edx, [ebp - 0x258]
call fcn.0008633c
mov eax, dword [ebp - 0x258]
mov edx, dword [0x9b154]
mov edx, dword [edx]
call fcn.00083ad4
test eax, eax
setne byte [ebp - 0x53]
cmp byte [ebp - 0x53], 1
je 0x994b1
inc dword [ebp - 0x44]
dec esi
jne 0x99478
cmp byte [ebp - 0x53], 1
jne 0x994d5
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 8]
mov edx, 0x99f98
call fcn.000838dc
sete dl
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 4]
call fcn.0009841c
inc ebx
dec edi
jne 0x993f9
call fcn.000899c0
lea eax, [ebp - 0x25c]
call fcn.00087de0
mov eax, dword [ebp - 0x25c]
mov edx, 0x99fa4
call fcn.000838dc
jne 0x99518
mov eax, dword [ebp - 4]
mov edx, 0x99fb0
call fcn.000838dc
jne 0x99518
call fcn.00087e90
jmp 0x9965c
mov eax, dword [ebp - 4]
mov edx, 0x99fb0
call fcn.000838dc
jne 0x9965c
cmp byte [ebp - 0x52], 1
jne 0x9965c
lea eax, [ebp - 0x12c]
xor ecx, ecx
mov edx, 0x3c
call fcn.000828e0
mov dword [ebp - 0x12c], 0x3c
mov dword [ebp - 0x128], 0x1c0
xor eax, eax
mov dword [ebp - 0x124], eax
xor eax, eax
mov dword [ebp - 0x120], eax
lea edx, [ebp - 0x260]
mov eax, 0x99fb8
call fcn.000862fc
mov eax, dword [ebp - 0x260]
call fcn.00083d98
mov dword [ebp - 0x11c], eax
lea edx, [ebp - 0x268]
mov eax, 0x99fd0
call fcn.000862fc
push dword [ebp - 0x268]
lea edx, [ebp - 0x274]
xor eax, eax
call fcn.00082754
mov edx, dword [ebp - 0x274]
lea eax, [ebp - 0x270]
call fcn.00083d88
mov eax, dword [ebp - 0x270]
lea edx, [ebp - 0x26c]
call fcn.000877c8
push dword [ebp - 0x26c]
push 0x9a02c
lea eax, [ebp - 0x264]
mov edx, 3
call fcn.00083e78
mov eax, dword [ebp - 0x264]
call fcn.00083d98
mov dword [ebp - 0x118], eax
lea edx, [ebp - 0x280]
xor eax, eax
call fcn.00082754
mov edx, dword [ebp - 0x280]
lea eax, [ebp - 0x27c]
call fcn.00083d88
mov eax, dword [ebp - 0x27c]
lea edx, [ebp - 0x278]
call fcn.00087854
mov eax, dword [ebp - 0x278]
call fcn.00083d98
mov dword [ebp - 0x114], eax
xor eax, eax
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [0x9b150]
mov eax, dword [eax]
call eax
push 0
call fcn.00084e40
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x99868
lea eax, [ebp - 0x280]
call fcn.000834e4
lea eax, [ebp - 0x27c]
mov edx, 2
call fcn.00083bf4
lea eax, [ebp - 0x274]
call fcn.000834e4
lea eax, [ebp - 0x270]
mov edx, 5
call fcn.00083bf4
lea eax, [ebp - 0x25c]
mov edx, 9
call fcn.00083508
lea eax, [ebp - 0x238]
call fcn.00083bdc
lea eax, [ebp - 0x234]
mov edx, 2
call fcn.00083508
lea eax, [ebp - 0x22c]
call fcn.00083bdc
lea eax, [ebp - 0x228]
mov edx, 2
call fcn.00083508
lea eax, [ebp - 0x220]
call fcn.00083bdc
lea eax, [ebp - 0x21c]
mov edx, 2
call fcn.00083508
lea eax, [ebp - 0x214]
call fcn.00083bdc
lea eax, [ebp - 0x210]
mov edx, 2
call fcn.00083508
lea eax, [ebp - 0x208]
call fcn.00083bdc
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.00083508
lea eax, [ebp - 0x1fc]
call fcn.00083bdc
lea eax, [ebp - 0x1f8]
mov edx, 2
call fcn.00083508
lea eax, [ebp - 0x1f0]
call fcn.00083bdc
lea eax, [ebp - 0x1ec]
mov edx, 2
call fcn.00083508
lea eax, [ebp - 0x1e4]
call fcn.00083bdc
lea eax, [ebp - 0x1e0]
mov edx, 0xa
call fcn.00083508
lea eax, [ebp - 0x1b8]
mov edx, 2
call fcn.00083bf4
lea eax, [ebp - 0x1b0]
call fcn.000834e4
lea eax, [ebp - 0x1ac]
mov edx, 3
call fcn.00083bf4
lea eax, [ebp - 0x1a0]
call fcn.000834e4
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.00083bf4
lea eax, [ebp - 0x194]
call fcn.000834e4
lea eax, [ebp - 0x190]
mov edx, 8
call fcn.00083bf4
lea eax, [ebp - 0x170]
call fcn.000834e4
lea eax, [ebp - 0x16c]
mov edx, 4
call fcn.00083bf4
lea eax, [ebp - 0x15c]
mov edx, 0xc
call fcn.00083508
lea eax, [ebp - 0x40]
call fcn.000834e4
lea eax, [ebp - 0x3c]
mov edx, dword [0x85f50]
mov ecx, 5
call fcn.00084280
lea eax, [ebp - 0x28]
mov edx, 8
call fcn.00083508
lea eax, [ebp - 4]
call fcn.000834e4
lea eax, [ebp - 0x68]
mov edx, 5
call fcn.00083508
lea eax, [ebp - 0x50]
mov edx, 3
call fcn.00083508
ret