Function at 0x1000daac
Capabilities:
Get geographical location

Disassembly:
mov eax, 0x1005b2a8
call fcn.1005a790
sub esp, 0x124
mov eax, edx
mov dword [ebp - 0x84], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
test cl, cl
je 0x1000db03
cmp byte [ebp + 0x10], 0
je 0x1000daf1
mov byte [ebp - 0x21], 0
cmp byte [ebp - 0x21], 0
je 0x1000e454
mov edx, 0xd7f
call fcn.1000e465
jmp 0x1000e454
push 0x2653
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
jmp 0x1000e454
cmp byte [ebp + 8], 0
je 0x1000db2a
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x1000e454
push 0xa14
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
jmp 0x1000e454
mov dword [ebp - 0x4c], eax
xor ebx, ebx
mov dword [ebp - 0x1c], 0x2250
cmp dword [ebp - 0x1c], 0x2607
jle 0x1000dbac
push 1
push ebx
push 0x1cd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], 0x1f40
mov ecx, esi
lea eax, [ebx + edi]
sar eax, cl
mov ecx, 0x10073e78
cdq
push edx
push eax
call fcn.1000383a
dec esi
dec dword [ebp - 0x28]
jne 0x1000db6b
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x122d
jl 0x1000db61
inc ebx
push 0
mov dword [ebp - 0x28], ebx
cmp ebx, 0x5bca
pop ebx
jl 0x1000db59
inc edi
cmp edi, 0x3bc9
jl 0x1000db56
mov dword [ebp - 0x14], 0x1c1ec2db
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x1c], 0x2170
jge 0x1000dbce
mov edx, str.qzqmlvj_dydeqjvss_hvo_livf_qudq_sthyomsii_mkirbnf
mov ecx, 0x10073e78
call fcn.100059c3
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 0xcd50997
mov eax, 0x4a7d2ae8
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x28], 0x2c32
cmp dword [ebp - 0x28], 0x2d53
jle 0x1000dc54
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x108]
or eax, esi
cdq
push edx
push eax
call fcn.10001aa4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000dc2d
mov eax, dword [eax]
push eax
call fcn.10043cef
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x108]
call fcn.10003c79
inc edi
cmp edi, 0x52c3
jl 0x1000dc11
inc esi
cmp esi, 0x411f
jl 0x1000dc0f
cmp dword [ebp - 0x28], 0x2b0f
jge 0x1000dc68
push str.mrnajg_wsmk_xrxp_hunporwwm_sod_scabam_hhhloyda_ksd_oefthm_znpirawt_zhbdpjehx_uahrsvsp_bvwmvq_noonz
call fcn.10043cef
pop ecx
or esi, 0xffffffff
mov dword [ebp - 4], esi
mov dword [ebp - 0x18], ebx
jmp 0x1000dca9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x98], 0xa049fe38
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1000dc98
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 3
jg 0x1000dd7b
push 5
pop edi
mov dword [ebp - 0x28], 0x870a3267
mov dword [ebp - 0x18], 0x35d56974
mov dword [ebp - 0x18], ebx
jmp 0x1000dce3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd0], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000dcd2
lea ecx, [ebp - 0x2c]
call fcn.1000d589
mov dword [ebp - 0x2c], 3
cmp dword [ebp - 0x2c], ebx
jl 0x1000dd6e
mov dword [ebp - 0x50], 0xbf90350d
xor ebx, ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x98]
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x94]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setne bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x14]
setg cl
cmp edi, ecx
mov eax, dword [ebp + eax*4 - 0x98]
sbb ecx, ecx
xor dl, dl
inc ecx
sub ecx, eax
mov dword [ebp - 0xcc], ecx
mov eax, dword [ebp - 0x90]
sub ecx, eax
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x50]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x50], eax
call fcn.1000e736
dec dword [ebp - 0x2c]
jns 0x1000dcfd
xor ebx, ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x1000dcbf
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
dec dword [ebp - 0xa0]
test eax, eax
jg 0x1000ddb1
xor eax, eax
inc eax
jmp 0x1000ddb3
mov eax, ebx
push 0xfffffffffffffffe
pop ecx
cmp ecx, eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 1
setge al
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x14], 0x29bf
cmp dword [ebp - 0x14], 0x2b33
jle 0x1000de40
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
mov eax, edi
cdq
idiv ecx
lea ecx, [ebp - 0x12c]
mov eax, edx
cdq
push edx
push eax
call fcn.10001aa4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000de16
mov eax, dword [eax]
push eax
call fcn.10043cef
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12c]
call fcn.10003c79
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x270d
jl 0x1000ddf7
inc edi
cmp edi, 0x75
jl 0x1000ddf2
mov dword [ebp - 0x28], 0x41b6ba00
cmp dword [ebp - 0x14], 0x2948
jge 0x1000de5b
push str.heyqrces_crg_sokowd_tkmgwcvim_eebd_gqxr_hnxu_ykvkp_finz_qvaghmzf_vyoz_nmdja_tyh_aviqmkwvo
call fcn.10043cef
pop ecx
mov dword [ebp - 4], esi
push 0xfffffffffffffff7
mov dword [ebp - 0x1c], 0x2ce3
pop edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], ebx
jmp 0x1000de7e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3c], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000de70
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
add ecx, dword [ebp - 0x38]
neg ecx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0xe6b6
je 0x1000dec8
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp ecx, eax
setle dl
cmp edx, 0xcaa8e55a
jne 0x1000def2
push ebx
push ebx
mov dl, 1
mov ecx, 0x229c
call fcn.1000e5e0
pop ecx
pop ecx
jmp 0x1000dfb3
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1000df0f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x60], 0xfa1a8f1e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000df01
mov eax, dword [ebp - 0x28]
sub eax, 0xfb96f37d
neg eax
sbb eax, eax
inc eax
cmp eax, 0xf1bd
jl 0x1000df31
cmp dword [ebp - 0x20], ebx
je 0x1000df31
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x38]
xor edx, edx
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0x4ed3
setg dl
sub edx, ecx
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, ebx
mov edx, 0x6fda4f2a
setge al
xor ecx, ecx
cmp eax, 0x44381826
setne cl
imul ecx, dword [ebp - 0x18]
sub ecx, 0x55a
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x5c]
cmp eax, 1
mov eax, dword [ebp - 0x1c]
setge cl
sub edx, ecx
sub edx, eax
xor eax, eax
add edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x5c]
cmp edx, 6
setge al
xor ebx, ebx
cmp eax, 0xfffffff9
mov eax, dword [ebp - 0x38]
setge bl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setl dl
xor ecx, ecx
cmp edx, ebx
setne cl
imul eax, ecx
dec eax
xor ebx, ebx
mov dword [ebp - 0x5c], eax
xor edx, edx
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x1000e039
mov dword [ebp - 0x34], 0x546d79c1
mov dword [ebp - 0x20], 0xfd7f9b64
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x3c], ebx
je 0x1000e01b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3c]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp eax, dword [ebp - 0x38]
jle 0x1000e014
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x1c]
imul ecx, dword [ebp + eax*4 - 0x3c]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc4], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x1000dfbb
mov eax, dword [ebp - 0x84]
movzx eax, word [eax]
mov dword [ebp - 0x54], eax
mov eax, 0xfffd
mov dword [ebp - 0x34], 0x4f01
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x34], 0xffff
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x14], 0xa3d88101
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], ebx
jmp 0x1000e08d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x48], 0x3fa75c19
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000e07f
inc dword [ebp - 0x44]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x44]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x6c]
setne dl
sub edx, eax
cmp edx, 0x7030
je 0x1000e1ba
xor ecx, ecx
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x14], ebx
inc ecx
jmp 0x1000e0e1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x88], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000e0d4
cmp dword [ebp - 0x18], ebx
je 0x1000e157
mov dword [ebp - 0x20], 0x3876
push ecx
mov dword [ebp - 0x28], esi
lea ecx, [ebp - 0x3d]
mov byte [ebp - 0x3d], bl
call fcn.1000bd43
mov dword [ebp - 0x1c], 1
pop ecx
cmp dword [ebp - 0x1c], ebx
jl 0x1000e233
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x68], ebx
jne 0x1000e11e
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setl dl
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp + eax*4 - 0x70], 0xa9c
sub eax, 0xb26d8f9c
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
dec dword [ebp - 0x1c]
jns 0x1000e112
jmp 0x1000e233
mov dword [ebp - 0x18], 0x1c
jmp 0x1000e1b2
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ecx
jg 0x1000e1af
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ebx
xor ebx, ebx
mov eax, dword [ebp - 0x14]
push 0
mov ecx, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x48]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setl bl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x48]
cmp ebx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp eax, edx
pop ebx
setle cl
mov dword [ebp - 0x88], ecx
xor ecx, ecx
inc dword [ebp - 0x14]
inc ecx
cmp dword [ebp - 0x14], ecx
jle 0x1000e168
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x16
jg 0x1000e160
jmp 0x1000e233
mov dword [ebp - 0x18], 0xd226f84b
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1000e1cf
call fcn.1000ec1d
mov dword [ebp - 0x1c], ebx
jmp 0x1000e22d
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x48], ebx
jne 0x1000e1e7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x48], ecx
mov dword [ebp - 0x20], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jle 0x1000e1d4
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x4c]
call fcn.1000ef89
pop ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x14], ebx
jmp 0x1000e259
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7c], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000e24b
mov dword [ebp - 0x14], ebx
jmp 0x1000e26e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000e264
mov dword [ebp - 0x30], 2
cmp dword [ebp - 0x30], ebx
jl 0x1000e371
push 3
pop edi
mov dword [ebp - 0x20], 0x329b3a00
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xd54b
mov dword [ebp - 0x18], ebx
jmp 0x1000e2a9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf0], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1000e29c
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x7c], ebx
jne 0x1000e2c1
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
cmp esi, ecx
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp + eax*4 - 0x7c]
sbb eax, eax
neg eax
cmp eax, edx
jl 0x1000e363
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x14], ebx
jmp 0x1000e309
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x114], 0xf803
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1000e2f8
mov dword [ebp - 0x14], ebx
jmp 0x1000e324
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe4], 0x584502e4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1000e313
mov dword [ebp - 0x20], ebx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setne dl
add edx, 0xe165
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jg 0x1000e368
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x20]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1000e352
jmp 0x1000e368
call fcn.1000bd9e
dec dword [ebp - 0x30]
jns 0x1000e286
lea eax, [ebp - 0x30]
mov ecx, 0x2cc
push ebx
push eax
call fcn.1000b826
mov edi, dword [ebp - 0x4c]
add esp, 8
mov esi, ebx
push ecx
xor cl, cl
call fcn.1000d400
pop ecx
mov cl, byte [esi + edi]
mov dl, 0x84
call fcn.1001354f
mov byte [esi + edi], al
inc esi
cmp esi, 2
jb 0x1000e388
mov dword [ebp - 0x1c], 0x17571177
mov dword [ebp - 0x18], ebx
jmp 0x1000e3c1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd8], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000e3b0
mov dword [ebp - 0x1c], ebx
jmp 0x1000e444
mov dword [ebp - 0x14], 0xe1e2c0d3
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x14], ebx
jl 0x1000e44a
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1000e3f8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000e3e7
mov dword [ebp - 0xb4], 1
cmp dword [ebp - 0xb4], ebx
jl 0x1000e428
push ecx
push ecx
xor dl, dl
mov ecx, 0x6d7b
call fcn.1000ba04
dec dword [ebp - 0xb4]
pop ecx
pop ecx
jns 0x1000e410
lea eax, [ebp - 0x80]
mov ecx, 0x23d5
push eax
call fcn.1000c2d0
dec dword [ebp - 0x14]
pop ecx
jns 0x1000e3df
cmp dword [ebp - 0x14], ebx
jne 0x1000e44a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xe
jl 0x1000e3cc
mov ecx, dword [ebp + 0xc]
mov ax, word [ebp - 0x54]
mov word [ecx], ax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret