Function at 0x421829
Capabilities:
Get geographical location
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 0xc
call fcn.00444c9f
add esp, 4
mov dword [ebp - 0x10], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x533f7a
push ebx
add ebx, 4
push ebx
push 8
call fcn.00444c9f
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x53239a
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
add ebx, 4
push ebx
push 8
call fcn.00444c9f
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x53239a
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop ebx
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push 8
call fcn.00444c9f
add esp, 4
mov dword [ebp - 0x1c], eax
mov edi, eax
mov esi, 0x53239a
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
push 0x1000e
push 0x160189c8
push 0x520130b1
push 1
mov ebx, 0x447dc0
call fcn.00444c99
add esp, 0x10
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x421958
mov ebx, 6
call fcn.004013e7
push 0x80000301
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x534464
push 4
mov ebx, 0x447310
call fcn.00444c99
add esp, 0x34
jmp 0x422532
mov eax, str.https:__app.crv.com.cn_app_timelimit_v1_dc_timelimit_presale_findPreSaleCity_param_7B_22ruleId_22_3A_22118_22_7D
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x42196e
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
mov eax, str.Cookie:_JSESSIONID8F670048454745489481ABDA52D84E64
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x42198f
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.app.crv.com.cn
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.Host
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4219d5
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4219e5
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.keep_alive
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.Connection
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421a27
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421a37
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.zh_CN
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.language
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421a79
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421a89
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.file:___data_data_com.crv.wanjia_app_2.9.2_index.html_tabs_appIndex_preSaleSelfMentionTwo_preSaleRuleId118title53_E5_BA_A6500ml_E9_A3_9E_E5_A4_A9_E8_8C_85_E5_8F_B0_E9_85_92_E9_A2_84_E5_94_AE__E6_8A_BD_E7_AD_BE
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.appHref
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421acb
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421adb
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.Mozilla_5.0__Linux__Android_5.1.1__SM_N960F_Build_JLS36C__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_74.0.3729.136_Mobile_Safari_537.36
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.User_Agent
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421b1d
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421b2d
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.application_json__text_plain___
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.Accept
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421b6f
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421b7f
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.5.1.1
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.osVersion
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421bc1
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421bd1
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, 0x53236e
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.addressId
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421c13
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421c23
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.1044647
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.userId
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421c65
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421c75
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.wifi
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.networkType
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421cb7
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421cc7
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.android_704d7b2a0e8d6441
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, 0x533d92
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421d09
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421d19
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.6F8FCB87F47B0ED60D505CA800E270A2
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.userSession
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421d5b
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421d6b
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, 0x534380
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.subsiteId
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421dad
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421dbd
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.mobile
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.channel
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421dff
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421e0f
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.android
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, 0x533dc2
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421e51
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421e61
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.ef1fc57c13007e33
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.appkey
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421ea3
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421eb3
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.3.1.7
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.appVersion
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421ef5
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421f05
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.zh_CN_zh_q0.9_en_US_q0.8_en_q0.7
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.Accept_Language
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421f47
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421f57
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.com.crv.wanjia
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.X_Requested_With
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421f99
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x421fa9
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x421fda
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push 0xffffffffffffffff
push 8
push 0x160131a2
push 0x520130b1
call fcn.00444cc3
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 0xc]
push eax
push 1
push dword [ebp - 8]
lea eax, [ebp - 4]
push eax
call fcn.00409e56
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4220f5
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x422105
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x422115
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x422125
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x422135
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x422145
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x422155
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x422165
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x422175
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x422185
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x422195
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4221a5
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4221b9
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x4221d0
mov eax, 0x53236e
push eax
push 1
mov ebx, 0x446190
call fcn.00444c99
add esp, 0x10
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00414869
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x422202
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x422216
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.cityId
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x42223f
mov eax, 0x53236e
push eax
push 3
mov ebx, 0x446000
call fcn.00444c99
add esp, 0x28
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x422277
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x422273
imul eax, dword [ebx]
jmp 0x422268
mov ecx, eax
test ecx, ecx
je 0x422296
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x42228f
push ebx
push eax
call fcn.00444ca5
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x42227d
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x1c]
call fcn.00401fb1
xor ecx, ecx
push eax
lea eax, [ebp - 0x20]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x422512
mov ebx, dword [ebp - 0x1c]
call fcn.0040163c
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x4222e8
push 0x8ec
push 0x4015df1
push 4
call fcn.00444cab
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x422305
push 0x8ec
push 0x4015df1
push 1
call fcn.00444cab
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov eax, 0x532555
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, str.cityName_:_
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x2c]
call fcn.0040e4a2
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x422358
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x422368
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x42237c
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
call fcn.0040163c
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x4223a7
push 0x960
push 0x4015df1
push 4
call fcn.00444cab
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4223c4
push 0x960
push 0x4015df1
push 1
call fcn.00444cab
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov eax, str.__cityName
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, 0x5345f8
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x2c]
call fcn.0040e4a2
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x422417
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x422427
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x42243b
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0x53236e
push dword [ebp - 0x24]
call fcn.0040134a
add esp, 8
cmp eax, 0
je 0x422478
push 0x53236e
push dword [ebp - 0x28]
call fcn.0040134a
add esp, 8
cmp eax, 0
je 0x422478
mov eax, 1
jmp 0x42247d
mov eax, 0
test eax, eax
je 0x42250a
fild dword [ebp - 0x20]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fsub qword [0x53254d]
fstp qword [ebp - 0x38]
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4224aa
mov eax, 0x53236e
push eax
push 1
mov ebx, 0x445ad0
call fcn.00444c99
add esp, 0x10
push 0x80000301
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x4224d8
mov eax, 0x53236e
push eax
fld qword [ebp - 0x38]
call fcn.004013ef
push 0x80000301
push 0
push eax
push 0x1000e
push 0x160189c8
push 0x520130b1
push 4
mov ebx, 0x447f30
call fcn.00444c99
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x4222b3
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 0x13
push 0x160189c8
push 0x520130b1
call fcn.00444cc9
add esp, 0x18
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x422542
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x422552
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x422572
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x422582
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4225a0
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42259c
imul eax, dword [ebx]
jmp 0x422591
mov ecx, eax
test ecx, ecx
je 0x4225bf
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4225b8
push ebx
push eax
call fcn.00444ca5
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4225a6
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4225d7
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4225e7
push ebx
call fcn.00444ca5
add esp, 4
mov esp, ebp
pop ebp
ret