Function at 0x420477
Capabilities:
Get geographical location
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
push 0xc
call fcn.00444c9f
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x533f7a
push ebx
add ebx, 4
push ebx
push 8
call fcn.00444c9f
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x53239a
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
add ebx, 4
push ebx
push 8
call fcn.00444c9f
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x53239a
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop ebx
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
push 8
call fcn.00444c9f
add esp, 4
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, 0x53239a
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
push 0x1000e
push 0x160189ca
push 0x520130b1
push 1
mov ebx, 0x447fa0
call fcn.00444c99
add esp, 0x10
push 0xffffffffffffffff
push 0x13
push 0x160189c8
push 0x520130b1
call fcn.00444cc3
add esp, 0x10
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x4205bc
mov ebx, 6
call fcn.004013e7
push 0x80000301
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x53423a
push 4
mov ebx, 0x447310
call fcn.00444c99
add esp, 0x34
jmp 0x4212e0
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.app.crv.com.cn
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.Host
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4205fe
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x42060e
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.keep_alive
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.Connection
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420650
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420660
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.zh_CN
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.language
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4206a2
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4206b2
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.file:___data_data_com.crv.wanjia_app_2.9.2_index.html_modals_selfMentionSelectCities
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.appHref
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4206f4
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420704
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.Mozilla_5.0__Linux__Android_5.1.1__SM_N960F_Build_JLS36C__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_74.0.3729.136_Mobile_Safari_537.36
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.User_Agent
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420746
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420756
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.application_json__text_plain___
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.Accept
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420798
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4207a8
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.5.1.1
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.osVersion
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4207ea
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4207fa
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, 0x53236e
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.addressId
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x42083c
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x42084c
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.1044647
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.userId
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x42088e
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x42089e
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.wifi
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.networkType
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4208e0
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4208f0
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.android_704d7b2a0e8d6441
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, 0x533d92
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420932
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420942
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.6F8FCB87F47B0ED60D505CA800E270A2
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.userSession
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420984
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420994
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, 0x534380
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.subsiteId
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4209d6
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4209e6
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.mobile
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.channel
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420a28
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420a38
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.android
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, 0x533dc2
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420a7a
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420a8a
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.ef1fc57c13007e33
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.appkey
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420acc
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420adc
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.3.1.7
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.appVersion
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420b1e
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420b2e
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.zh_CN_zh_q0.9_en_US_q0.8_en_q0.7
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.Accept_Language
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420b70
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420b80
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.com.crv.wanjia
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.X_Requested_With
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420bc2
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x420bd2
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x420c03
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0xffffffffffffffff
push 0x13
push 0x160189c8
push 0x520130b1
call fcn.00444cc3
add esp, 0x10
push 0x80000301
push 0
push eax
push 0x1000e
push 0x160189c8
push 0x520130b1
push 2
mov ebx, 0x447df0
call fcn.00444c99
add esp, 0x1c
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push dword [ebp - 0xc]
push 1
mov ebx, 0x4465f0
call fcn.00444c99
add esp, 0x10
mov dword [ebp - 0x2c], eax
push str._2C_22ruleId_22_3A_22118_22_7D
push dword [ebp - 0x2c]
push str.https:__app.crv.com.cn_app_timelimit_v1_dc_timelimit_presale_findPreSaleStore_param_7B_22cityId_22_3A
mov ecx, 3
call fcn.004012ee
add esp, 0xc
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x420c95
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x420ca9
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0xffffffffffffffff
push 8
push 0x160131a2
push 0x520130b1
call fcn.00444cc3
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00409e56
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x420dd9
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x420de9
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x420df9
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x420e09
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x420e19
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x420e29
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x420e39
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x420e49
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x420e59
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x420e69
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x420e79
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x420e89
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420e99
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x420eb0
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x420ec7
mov eax, 0x53236e
push eax
push 1
mov ebx, 0x446190
call fcn.00444c99
add esp, 0x10
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00414869
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x420ef9
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x420f0d
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.cityId
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x420f36
mov eax, 0x53236e
push eax
push 3
mov ebx, 0x446000
call fcn.00444c99
add esp, 0x28
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x420f6e
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x420f6a
imul eax, dword [ebx]
jmp 0x420f5f
mov ecx, eax
test ecx, ecx
je 0x420f8d
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x420f86
push ebx
push eax
call fcn.00444ca5
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x420f74
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x18]
call fcn.00401fb1
xor ecx, ecx
push eax
lea eax, [ebp - 0x1c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4212c0
mov ebx, dword [ebp - 0x18]
call fcn.0040163c
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x420fdf
push 0x89d
push 0x4015df3
push 4
call fcn.00444cab
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x420ffc
push 0x89d
push 0x4015df3
push 1
call fcn.00444cab
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov eax, 0x532555
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, str.cityName_:_
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x2c]
call fcn.0040e4a2
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x42104f
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x42105f
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x421073
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x18]
call fcn.0040163c
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x42109e
push 0x911
push 0x4015df3
push 4
call fcn.00444cab
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4210bb
push 0x911
push 0x4015df3
push 1
call fcn.00444cab
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov eax, 0x532555
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, str.storeName_:_
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x2c]
call fcn.0040e4a2
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x42110e
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x42111e
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x421132
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
call fcn.0040163c
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x42115d
push 0x986
push 0x4015df3
push 4
call fcn.00444cab
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x42117a
push 0x986
push 0x4015df3
push 1
call fcn.00444cab
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov eax, 0x532555
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, str.code_:_
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x2c]
call fcn.0040e4a2
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4211cd
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4211dd
push ebx
call fcn.00444ca5
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4211f1
push ebx
call fcn.00444ca5
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0x53236e
push dword [ebp - 0x28]
call fcn.0040134a
add esp, 8
cmp eax, 0
je 0x421296
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fsub qword [0x53254d]
fstp qword [ebp - 0x38]
push dword [ebp - 0x28]
push 0x534461
push dword [ebp - 0x24]
mov ecx, 3
call fcn.004012ee
add esp, 0xc
mov dword [ebp - 0x3c], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x421254
mov eax, 0x53236e
push eax
fld qword [ebp - 0x38]
call fcn.004013ef
push 0x80000301
push 0
push eax
push 0x1000e
push 0x160189ca
push 0x520130b1
push 4
mov ebx, 0x447f30
call fcn.00444c99
add esp, 0x34
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x421296
push ebx
call fcn.00444ca5
add esp, 4
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 1
push 0xa
call fcn.00414bc7
pop eax
pop ebx
pop ecx
jmp 0x420faa
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 0x13
push 0x160189ca
push 0x520130b1
call fcn.00444cc9
add esp, 0x18
mov ebx, dword [ebp - 4]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x421300
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x421310
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x421320
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42133e
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42133a
imul eax, dword [ebx]
jmp 0x42132f
mov ecx, eax
test ecx, ecx
je 0x42135d
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x421356
push ebx
push eax
call fcn.00444ca5
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x421344
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x421375
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x421385
push ebx
call fcn.00444ca5
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x421395
push ebx
call fcn.00444ca5
add esp, 4
mov esp, ebp
pop ebp
ret