Function at 0x1000951a
Capabilities:
Get geographical location

Disassembly:
invalid
push ebp
mov ebp, esp
sub esp, 0x78c
mov eax, dword [0x100230f4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6ec], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x6b4], ecx
jmp 0x1000946c
mov edx, dword [ebp - 0x6b4]
sub edx, 1
mov dword [ebp - 0x6b4], edx
mov eax, dword [ebp + 0xc]
sub eax, 0x12
cmp dword [ebp - 0x6b4], eax
jbe 0x1000975b
mov ecx, dword [ebp - 0x6b4]
mov dword [ebp - 0x6b8], ecx
mov edx, dword [ebp - 0x6b8]
sub edx, 0x75
mov dword [ebp - 0x6b8], edx
cmp dword [ebp - 0x6b8], 0x3e
ja case.0x100094b3.6
mov eax, dword [ebp - 0x6b8]
movzx ecx, byte [eax + 0x1000a68c]
jmp dword [ecx*4 + 0x1000a640]
push 2
push 0x1001a4a4
lea edx, [ebp - 0x1d]
push edx
call fcn.1000bac0
add esp, 0xc
jmp case.0x100094b3.6
xor eax, eax
mov word [ebp - 0x5e], ax
jmp case.0x100094b3.6
mov byte [ebp - 0x12], 0
lea eax, [ebp - 8]
push eax
push 0xf0019
push 0
push 0x1000a47a
push DrawStatusTextA
call fcn.10001790
test eax, eax
jmp case.0x100094b3.6
push 3
push 0x1001a508
lea ecx, [ebp - 0x6a]
push ecx
call fcn.1000d4ad
add esp, 0xc
jmp case.0x100094b3.6
mov dword [0x100238f8], 0
xor edx, edx
mov dword [ebp - 0x784], edx
mov dword [ebp - 0x780], edx
mov dword [ebp - 0x77c], edx
mov dword [ebp - 0x778], edx
mov dword [ebp - 0x774], edx
mov dword [ebp - 0x770], edx
mov dword [ebp - 0x76c], edx
mov dword [ebp - 0x768], edx
mov dword [ebp - 0x764], edx
mov dword [ebp - 0x760], edx
jmp case.0x100094b3.6
aad 0xf2
inc esp
cmp al, 0x19
add esp, 0xfffffee0
push ebx
push esi
mov dword [ebp - 4], eax
push 0x105
lea eax, [ebp - 0x11d]
push eax
push 0
call int.10008f90
jmp case.0x100094b3.6
je case.0x100094b3.1
jmp case.0x100094b3.6
test eax, 0xbcd4b5bc
test eax, eax
je case.0x10009f97.46
lea eax, [ebp - 8]
push eax
push 0xf0019
push 0
push case.0x10009f97.0
jmp case.0x100094b3.6
xor eax, eax
mov word [ebp - 0x64], ax
mov ecx, 0x1001a580
mov edx, dword [ecx]
mov dword [ebp - 0x64], edx
mov ax, word [ecx + 4]
mov word [ebp - 0x60], ax
jmp case.0x100094b3.6
call fcn.10008be0
jmp case.0x100094b3.6
lea eax, [ebp - 8]
push eax
push 0xf0019
push 0
push case.0x10009f97.1
push reloc.COMCTL32.dll_MenuHelp
jmp case.0x100094b3.6
xorps xmm0, xmm0
movlpd qword [0x10023900], xmm0
jmp case.0x100094b3.6
mov cx, word [0x1001a58c]
mov word [ebp - 0x30], cx
push 4
push 0x1001a590
lea edx, [ebp - 0x2f]
push edx
call fcn.1000bac0
add esp, 0xc
jmp case.0x100094b3.6
mov ax, word [0x1001a5c8]
mov word [ebp - 0x6c], ax
xor ecx, ecx
mov word [ebp - 0x6a], cx
jmp case.0x100094b3.6
mov dword [ebp - 0x754], 2
mov dword [ebp - 0x750], 0
mov edx, dword [ebp - 0x754]
mov dword [ebp - 0x694], edx
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x690], eax
jmp case.0x100094b3.6
lea ecx, [ebp - 0x30]
add ecx, 0xffffffff
mov dword [ebp - 0x6bc], ecx
mov edx, dword [ebp - 0x6bc]
mov al, byte [edx + 1]
mov byte [ebp - 0x6a2], al
add dword [ebp - 0x6bc], 1
cmp byte [ebp - 0x6a2], 0
jne 0x1000967e
mov edi, dword [ebp - 0x6bc]
mov ecx, dword [0x1001a5fc]
mov dword [edi], ecx
mov edx, dword [str.entD]
mov dword [ebp - 0x29], edx
mov al, byte [0x1001a604]
mov byte [ebp - 0x25], al
mov cx, word [0x1001a608]
mov word [ebp - 0x25], cx
jmp case.0x100094b3.6
mov dword [ebp - 0x784], 0x28
lea edx, [ebp - 0x784]
push edx
call dword [sym.imp.COMDLG32.dll_FindTextW]
jmp case.0x100094b3.6
mov ax, word [0x1001a42c]
mov word [ebp - 0x24], ax
lea ecx, [ebp - 0x30]
add ecx, 0xffffffff
mov dword [ebp - 0x6c0], ecx
mov edx, dword [ebp - 0x6c0]
mov al, byte [edx + 1]
mov byte [ebp - 0x69d], al
add dword [ebp - 0x6c0], 1
cmp byte [ebp - 0x69d], 0
jne 0x100096fb
mov edi, dword [ebp - 0x6c0]
mov cx, word [0x1001a60c]
mov word [edi], cx
mov dl, byte [0x1001a60e]
mov byte [edi + 2], dl
push 0x1001a610
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov cx, word [0x1001a614]
mov word [ebp - 0x1f], cx
mov dl, byte [0x1001a616]
mov byte [ebp - 0x1d], dl
jmp 0x1000945d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6c4], eax
jmp 0x10009775
mov ecx, dword [ebp - 0x6c4]
add ecx, 1
mov dword [ebp - 0x6c4], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x12
cmp dword [ebp - 0x6c4], edx
jae 0x10009a88
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x6c8], eax
mov ecx, dword [ebp - 0x6c8]
sub ecx, 0x7a
mov dword [ebp - 0x6c8], ecx
cmp dword [ebp - 0x6c8], 0x3e
ja case.0x100097bc.8
mov edx, dword [ebp - 0x6c8]
movzx eax, byte [edx + 0x1000a718]
jmp dword [eax*4 + 0x1000a6cc]
mov ecx, dword [ebp - 0x69c]
or ecx, 0x96
mov dword [ebp - 0x69c], ecx
jmp case.0x100097bc.8
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x12]
push eax
push 0
push 0
push 0x1000a027
mov eax, dword [ebp - 8]
push eax
call fcn.10009430
test eax, eax
jmp case.0x100097bc.8
pop ecx
mov dword fs:[eax], edx
push 0x1000a0f6
mov eax, dword [ebp - 8]
push eax
call fcn.10005030
jmp case.0x100097bc.8
jmp 0x10009855
push 0
lea eax, [ebp - 0x11d]
push eax
mov eax, dword [ebp - 8]
inc ebp
clc
push eax
call fcn.10005030
jmp case.0x100097bc.8
xor edx, edx
mov word [ebp - 0x54], dx
mov ax, word [0x1001a58c]
mov word [ebp - 0x40], ax
mov ecx, dword [str.trin]
mov dword [ebp - 0x3f], ecx
mov dl, byte [0x1001a61c]
mov byte [ebp - 0x3b], dl
jmp case.0x100097bc.8
aam 0xdf
adc cl, byte [ebp - 0x7e]
mov byte [ebp - 0x12], 0
mov byte [ebp - 0xe], 0
xor eax, eax
pop edx
pop ecx
jmp case.0x100097bc.8
mov eax, dword [ebp - 0x694]
mov edx, dword [ebp - 0x690]
mov cl, 8
call fcn.1000ac60
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], edx
mov eax, dword [ebp - 0x694]
or eax, 0x10
mov ecx, dword [ebp - 0x690]
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], ecx
mov eax, dword [ebp - 0x694]
mov edx, dword [ebp - 0x690]
mov cl, 8
call fcn.1000ac60
push dword [ecx + 0x1374e808]
add byte [eax], al
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], edx
jmp case.0x100097bc.8
mov edx, dword [ebp - 0x69c]
shl edx, 8
mov dword [ebp - 0x69c], edx
mov eax, dword [ebp - 0x69c]
or eax, 0x80
mov dword [ebp - 0x69c], eax
jmp case.0x100097bc.8
jno 0x100098e4
xchg ebx, eax
test byte [eax], bh
test eax, eax
je 0x1000988e
jmp case.0x100097bc.8
mov ecx, dword [ebp - 0x694]
or ecx, 0x91
mov edx, dword [ebp - 0x690]
mov dword [ebp - 0x694], ecx
mov dword [ebp - 0x690], edx
mov eax, dword [ebp - 0x694]
mov edx, dword [ebp - 0x690]
mov cl, 8
call fcn.1000ac60
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], edx
mov dword [ebp - 0x734], 0x98
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x69c], eax
mov ecx, dword [ebp - 0x69c]
shl ecx, 8
mov dword [ebp - 0x69c], ecx
jmp case.0x100097bc.8
xorps xmm0, xmm0
movlpd qword [0x10023908], xmm0
jmp case.0x100097bc.8
cmp eax, 0x50
push 0xe0840fa5
add al, byte [eax]
add cl, ch
enter 0, 0
push 1
push 0x1001a642
lea edx, [ebp - 0x6c]
push edx
call fcn.1000d468
add esp, 0xc
push 3
push 0x1001a6d4
lea eax, [ebp - 0x5c]
push eax
call fcn.1000d4ad
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x56], cx
mov dx, word [0x1001a75c]
mov word [ebp - 0x56], dx
jmp case.0x100097bc.8
push DrawStatusTextA
call fcn.10008be0
test eax, eax
jne 0x1000a2f8
jmp case.0x100097bc.8
mov eax, dword [ebp - 0x694]
mov edx, dword [ebp - 0x690]
mov cl, 8
call fcn.1000ac60
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], edx
mov eax, dword [ebp - 0x694]
or eax, 0xb6
mov ecx, dword [ebp - 0x690]
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], ecx
jmp case.0x100097bc.8
lea edx, [ebp - 0x75c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
jmp case.0x100097bc.8
push 0x1001a790
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov cx, word [0x1001a418]
mov word [ebp - 0x39], cx
mov edx, dword [str.code]
mov dword [ebp - 0x38], edx
mov al, byte [0x1001a798]
mov byte [ebp - 0x34], al
jmp 0x10009766
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x6cc], ecx
jmp 0x10009aa3
imul edx, dword [ebp + 0xc], 0x26
add edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x6cc], edx
imul eax, dword [ebp + 0xc], 0x13
imul ecx, eax, 0x26
cmp dword [ebp - 0x6cc], ecx
ja 0x10009f36
mov edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x68c], edx
cmp dword [ebp - 0x68c], 0x36ce
ja 0x10009bb0
cmp dword [ebp - 0x68c], 0x36ce
je 0x10009d69
cmp dword [ebp - 0x68c], 0x1860
ja 0x10009b5a
cmp dword [ebp - 0x68c], 0x1860
je 0x10009d41
cmp dword [ebp - 0x68c], 0xb3
ja 0x10009b45
cmp dword [ebp - 0x68c], 0xb3
je 0x10009d0a
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x6a8], eax
sub dword [ebp - 0x6a8], 0x7a
je 0x10009e4e
sub dword [ebp - 0x6a8], 0x26
je 0x10009ee6
jmp 0x10009f31
cmp dword [ebp - 0x68c], 0x1296
je 0x10009c78
jmp 0x10009f31
cmp dword [ebp - 0x68c], 0x3020
ja 0x10009b9b
cmp dword [ebp - 0x68c], 0x3020
je 0x10009dd1
cmp dword [ebp - 0x68c], 0x1b45
je 0x10009dfc
cmp dword [ebp - 0x68c], 0x24b2
je 0x10009de1
jmp 0x10009f31
cmp dword [ebp - 0x68c], 0x35d7
je 0x10009d7a
jmp 0x10009f31
cmp dword [ebp - 0x68c], 0x5fa0
ja 0x10009c22
cmp dword [ebp - 0x68c], 0x5fa0
je 0x10009cdf
cmp dword [ebp - 0x68c], 0x5069
ja 0x10009c0d
cmp dword [ebp - 0x68c], 0x5069
je 0x10009e63
cmp dword [ebp - 0x68c], 0x47e0
je 0x10009c96
cmp dword [ebp - 0x68c], 0x48ea
je 0x10009ec4
jmp 0x10009f31
cmp dword [ebp - 0x68c], 0x5b06
je 0x10009f25
jmp 0x10009f31
cmp dword [ebp - 0x68c], 0x7f3e
ja 0x10009c63
cmp dword [ebp - 0x68c], 0x7f3e
je 0x10009f2b
cmp dword [ebp - 0x68c], 0x6d22
je 0x10009d1b
cmp dword [ebp - 0x68c], 0x7760
je 0x10009e8c
jmp 0x10009f31
cmp dword [ebp - 0x68c], 0x8f20
je 0x10009da3
jmp 0x10009f31
dec ebp
invalid
mov cx, word [0x1001a608]
mov word [ebp - 0xe], cx
mov dx, word [0x1001a430]
mov word [ebp - 0xd], dx
mov al, byte [0x1001a432]
mov byte [ebp - 0xb], al
push 2
push 0x1001a79c
lea ecx, [ebp - 0xb]
push ecx
call fcn.1000bac0
add esp, 0xc
push 3
push 0x1001a610
lea edx, [ebp - 0xa]
push edx
call fcn.1000bac0
add esp, 0xc
jmp 0x10009f31
mov ax, word [0x1001a614]
mov word [ebp - 8], ax
mov cl, byte [0x1001a616]
mov byte [ebp - 6], cl
push 2
push 0x1001a4a4
lea edx, [ebp - 6]
push edx
call fcn.1000bac0
add esp, 0xc
jmp 0x10009f31
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x728], eax
jmp 0x10009f31
cli
push cs
lodsd eax, dword [esi]
loopne 0x10009d30
je case.0x100094b3.2
lea eax, [ebp - 0x11d]
cmp ebx, eax
jne case.0x10009f97.11
in al, 8
add byte [eax], al
lea eax, [ebp - 0x11d]
cmp ebx, eax
jmp 0x10009f31
mov cx, word [0x1001a7a0]
mov word [ebp - 0x15], cx
mov dl, byte [0x1001a7a2]
mov byte [ebp - 0x13], dl
push str.stem
lea eax, [ebp - 0x13]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x10009f31
jne case.0x100094b3.39
cmp byte [ebp - 0x12], 0
je 0x10009d69
jmp 0x10009f31
mov ecx, dword [ebp - 0x6e8]
sub ecx, dword [ebp - 0x694]
mov edx, dword [ebp - 0x6e4]
sbb edx, dword [ebp - 0x690]
mov dword [ebp - 0x6e8], ecx
mov dword [ebp - 0x6e4], edx
jmp 0x10009f31
xor eax, eax
mov word [ebp - 0x78], ax
push 3
push 0x1001a7e8
lea ecx, [ebp - 0x78]
push ecx
call fcn.1000d4ad
add esp, 0xc
xor edx, edx
mov word [ebp - 0x72], dx
mov ax, word [0x1001a89c]
mov word [ebp - 0x72], ax
jmp 0x10009f31
mov cx, word [0x1001a8e8]
mov word [ebp - 0xf], cx
jmp 0x10009f31
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
xor esi, esi
cmp byte [ebp - 0x11d], 0
je 0x10009dd1
cmp byte [ebp - 0xd], 0
jmp 0x10009f31
mov edx, dword [ebp - 0x758]
mov dword [ebp - 0x724], edx
mov eax, dword [ebp - 0x69c]
xor ecx, ecx
push ecx
push eax
mov edx, dword [ebp - 0x724]
push edx
mov eax, dword [ebp - 0x728]
push eax
call fcn.1000abb0
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], edx
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x6e8], ecx
mov edx, dword [ebp - 0x72c]
mov dword [ebp - 0x6e4], edx
jmp 0x10009f31
ret
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x6fc], eax
mov ecx, dword [ebp - 0x6e4]
mov dword [ebp - 0x6f8], ecx
mov eax, dword [ebp - 0x6fc]
mov edx, dword [ebp - 0x6f8]
jmp 0x1000a62e
mov edx, 0x1001a8fe
mov eax, dword [edx]
mov dword [ebp - 0x88], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x84], ecx
mov dx, word [edx + 8]
mov word [ebp - 0x80], dx
xor eax, eax
mov word [ebp - 0x7e], ax
mov ecx, 0x1001aa0c
mov edx, dword [ecx]
mov dword [ebp - 0x7e], edx
mov ax, word [ecx + 4]
mov word [ebp - 0x7a], ax
jmp 0x10009f31
adc cl, bh
insd dword es:[edi], dx
and al, 0x16
lea eax, [ebp - 0x11d]
push eax
call fcn.100084e0
mov ebx, eax
lea eax, [ebp - 0x11d]
add ebx, eax
jmp 0x10009d69
mov byte [ebp - 0x18], 0
lea ecx, [ebp - 0x18]
add ecx, 0xffffffff
mov dword [ebp - 0x6d0], ecx
mov edx, dword [ebp - 0x6d0]
mov al, byte [edx + 1]
mov byte [ebp - 0x69e], al
add dword [ebp - 0x6d0], 1
cmp byte [ebp - 0x69e], 0
jne 0x10009ef6
mov edi, dword [ebp - 0x6d0]
mov ecx, dword [0x1001aa44]
mov dword [edi], ecx
jmp 0x10009f31
dec ebx
cmp byte [ebx], 0x2e
jmp 0x10009f31
je case.0x100097bc.19
jmp 0x10009a93
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x6d4], edx
jmp 0x10009f50
mov eax, dword [ebp - 0x6d4]
sub eax, 1
mov dword [ebp - 0x6d4], eax
mov ecx, dword [ebp + 0xc]
sub ecx, 0x12
cmp dword [ebp - 0x6d4], ecx
jbe 0x1000a622
mov edx, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d8], edx
mov eax, dword [ebp - 0x6d8]
sub eax, 0x6f
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 0x31
ja case.0x10009f97.12
mov ecx, dword [ebp - 0x6d8]
movzx edx, byte [ecx + 0x1000a7a4]
jmp dword [edx*4 + 0x1000a758]
lea eax, [ebp - 0x6f0]
push eax
lea ecx, [ebp - 0x748]
push ecx
lea edx, [ebp - 0x6f4]
push edx
call sub.RPCRT4.dll_MesEncodeDynBufferHandleCreate
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x714], eax
mov ecx, dword [ebp - 0x6ec]
push ecx
lea edx, [ebp - 0x688]
push edx
call dword [ebp - 0x740]
lea eax, [ebp - 0x688]
push eax
call dword [ebp - 0x700]
cmp dword [ebp - 0x714], 0
je 0x10009ffb
mov byte [ebp - 0x695], 0
jmp case.0x10009f97.12
push ebx
outsd dx, dword [esi]
je 0x1000a07c
popal
jb 0x1000a06d
pop esp
inc edx
outsd dx, dword [esi]
jb 0x1000a079
popal
outsb dx, byte [esi]
pop esp
inc esp
insb byte es:[edi], dx
jo 0x1000a07e
imul ebx, dword [esp + ecx*2 + 0x6f], 0x656c6163
jae 0x1000a020
jmp 0x100080e3
sbb esp, dword [ecx + 0x420028]
mov eax, dword [eax]
mov dword [0x420028], eax
mov edx, 8
add byte [edx + 8], bh
add byte [eax], al
add byte [ebx - 0x355a173a], cl
invalid
mov eax, esi
call 0x10006b2b
pop esi
pop ebx
ret
xor ecx, ecx
mov word [ebp - 0x70], cx
mov byte [ebp - 0x69f], 1
mov dl, byte [ebp - 0x69f]
mov byte [ebp - 0x695], dl
lea eax, [ebp - 0x6c]
push eax
push 0xa7
lea ecx, [ebp - 0x30]
push ecx
push 0
push 0
push 0
call fcn.10005030
add esp, 0x18
mov dword [ebp - 0x738], eax
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x700], edx
jmp case.0x10009f97.12
mov dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x788], 0x400
mov dword [ebp - 0x6ec], 0x400
mov dword [ebp - 0x744], 0
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x6f0], ecx
mov edx, dword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [ebp - 0x720], edx
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x73c], eax
jmp case.0x10009f97.12
pop ss
xor esi, dword [ebp + 0x54]
int 0xe8
pop edi
int1
invalid
pop eax
cli
pop esp
stosd dword es:[edi], eax
mov ecx, 0xff6c850f
invalid
jne case.0x10009f97.46
cmp byte [ebp - 0xd], 0
jmp case.0x10009f97.12
mov dword [ebp - 0x6dc], 0x88
jmp 0x1000a325
mov ecx, dword [ebp - 0x6dc]
add ecx, 0x58b8
mov dword [ebp - 0x6dc], ecx
cmp dword [ebp - 0x6dc], 0x1bb98
ja 0x1000a457
mov edx, dword [ebp - 0x6dc]
mov dword [ebp - 0x6ac], edx
cmp dword [ebp - 0x6ac], 0xb1f8
ja 0x1000a37a
cmp dword [ebp - 0x6ac], 0xb1f8
je 0x1000a436
cmp dword [ebp - 0x6ac], 0x88
je 0x1000a3da
cmp dword [ebp - 0x6ac], 0x5940
je 0x1000a3c5
jmp 0x1000a452
cmp dword [ebp - 0x6ac], 0x10ab0
je 0x1000a3b6
cmp dword [ebp - 0x6ac], 0x16368
je 0x1000a397
jmp 0x1000a452
mov eax, dword [ebp - 0x73c]
push eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x288]
push edx
call fcn.1000aae0
add esp, 0xc
jmp 0x1000a452
mov ax, word [str._noC]
mov word [ebp - 0x43], ax
jmp 0x1000a452
push 1
push 0x1001aa4c
lea ecx, [ebp - 0x50]
push ecx
call fcn.1000d4f0
add esp, 0xc
jmp 0x1000a452
mov byte [ebp - 0x50], 0
push 1
push 0x1001aa50
lea edx, [ebp - 0x50]
push edx
call fcn.1000d4f0
add esp, 0xc
lea eax, [ebp - 0x50]
add eax, 0xffffffff
mov dword [ebp - 0x6e0], eax
mov ecx, dword [ebp - 0x6e0]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x6a0], dl
add dword [ebp - 0x6e0], 1
cmp byte [ebp - 0x6a0], 0
jne 0x1000a3fd
mov edi, dword [ebp - 0x6e0]
mov ax, word [0x1001aa54]
mov word [edi], ax
mov cl, byte [0x1001aa56]
mov byte [edi + 2], cl
jmp 0x1000a452
mov edx, dword [0x1001aa58]
mov dword [ebp - 0x4c], edx
mov eax, dword [str.nt__p]
mov dword [ebp - 0x48], eax
mov cx, word [0x1001aa60]
mov word [ebp - 0x44], cx
jmp 0x1000a313
movzx edx, byte [ebp - 0x695]
test edx, edx
je 0x1000a46e
mov eax, dword [ebp - 0x6f0]
push eax
call sub.RPCRT4.dll_MesHandleFree
call fcn.10003650
jmp case.0x10009f97.12
pop ebp
ret
lea eax, [ebp - 0x12]
push eax
push ebx
call fcn.10005030
push 2
push 0
lea eax, [ebp - 0x11d]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov esi, eax
test esi, esi
jmp case.0x10009f97.12
fldenv [edi - 0x61]
test edx, edx
je 0x10009e4e
mov edx, ebx
sub edx, eax
mov eax, 0x105
sub eax, edx
push eax
jmp case.0x10009f97.12
out 0x5f, al
out dx, al
inc ebp
sub ecx, dword [edi]
test bl, ch
clc
invalid
call fcn.10003e40
push 2
push 0
lea eax, [ebp - 0x11d]
push eax
jmp case.0x10009f97.12
sub eax, edx
push eax
lea eax, [ebp - 0xd]
push eax
push ebx
call fcn.10006150
push 2
push 0
lea eax, [ebp - 0x11d]
push eax
call fcn.10009430
jmp case.0x10009f97.12
lahf
inc edx
mov dword [edi + esi*4 - 0x39740f75], esp
pop esi
pop ebx
mov esp, ebp
jmp case.0x10009f97.12
push ebx
outsd dx, dword [esi]
je 0x1000a5c7
popal
jb 0x1000a5b8
pop esp
inc edx
outsd dx, dword [esi]
jb 0x1000a5c4
popal
outsb dx, byte [esi]
pop esp
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
jae 0x1000a564
add byte [eax], al
add cl, ch
mov cl, 0
add byte [eax], al
lea ecx, [ebp - 0x88]
push ecx
push 0xa7
lea edx, [ebp - 0x18]
push edx
push 0
push 0
push 0
call fcn.10005030
add esp, 0x18
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x740], eax
jmp case.0x10009f97.12
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x704], ecx
mov edx, dword [ebp - 0x704]
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x6b0], eax
mov ecx, dword [ebp - 0x6b0]
add ecx, 1
mov dword [ebp - 0x708], ecx
dec dword [ecx - 0x6af7b]
dec dword [ebx - 0x6af73]
inc dword [ebx - 0x7276fe3f]
clc
clc
invalid
add dword [ecx - 0x70773], ecx
dec dword [ebx - 0x6af6b]
dec dword [edx + 0x5f858802]
stc
invalid
mov edx, dword [ebp - 0x6b0]
mov al, byte [edx]
mov byte [ebp - 0x6a1], al
add dword [ebp - 0x6b0], 1
cmp byte [ebp - 0x6a1], 0
jne 0x1000a5ce
mov ecx, dword [ebp - 0x6b0]
sub ecx, dword [ebp - 0x708]
mov dword [ebp - 0x70c], ecx
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x710], edx
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x78c], eax
jmp case.0x10009f97.12
inc ebx
cmp byte [ebp - 0x12], 0
jmp 0x10009f41
mov eax, dword [ebp - 0x6fc]
mov edx, dword [ebp - 0x6f8]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000ab99
mov esp, ebp
pop ebp
ret