Function at 0x10002b50
Capabilities:
Get geographical location

Disassembly:
sub esp, 0x100
push ebx
push ebp
push esi
mov esi, ecx
lea eax, [esp + 0x28]
push edi
lea ecx, [esp + 0x28]
push eax
lea edx, [esp + 0x24]
push ecx
or ebx, 0xffffffff
push edx
push 3
mov ecx, esi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], ebx
call fcn.10003b50
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
push 1
push eax
push ecx
push str.MSysObjects
push edx
push 3
mov ecx, esi
call fcn.10003fe0
test eax, eax
jne 0x10003b35
push eax
push eax
push 2
push 0x100141d0
push 1
push eax
push 4
push 4
push eax
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 8
push str.ParentId
push 1
push 4
push 4
push 4
push 1
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 4
push str.Type
push 1
push 8
push 2
push 3
push 2
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xa
push str.DateCreate
push 1
push 0xa
push 8
push 8
push 3
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xa
push str.DateUpdate
push 1
push 0x12
push 8
push 8
push 4
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 7
push str.CbFixed
push 1
push 0x1a
push 1
push 2
push 5
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 6
push str.CFixed
push 1
push 0x1b
push 1
push 2
push 6
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 4
push str.CVar
push 1
push 0x1c
push 1
push 2
push 7
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 5
push str.Flags
push 1
push 0x1d
push 4
push 4
push 8
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 4
push str.Name
push 0
push 0
push 0xff
push 0xa
push 0xff
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 3
push 0x1001450c
push 0
push 1
push 0xff
push 9
push 0xfe
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 2
push 0x100140e4
push 0
push 2
push 0xff
push 0xb
push 0xfd
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 5
push str.Owner
push 0
push 3
push 0xff
push 9
push 0xfc
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 8
push str.Database
push 0
push 4
push 0xff
push 0xc
push 0xfb
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 7
push str.Connect
push 0
push 5
push 0xff
push 0xc
push 0xfa
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xb
push str.ForeignName
push 0
push 6
push 0xff
push 0xa
push 0xf9
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xc
push str.RmtInfoShort
push 0
push 7
push 0xff
push 9
push 0xf8
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xb
push str.RmtInfoLong
push 0
push 8
push 0xff
push 0xb
push 0xf7
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 7
push str.LvExtra
push 0
push 9
push 0xff
push 0xb
push 0xf6
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xb
push str.Description
push 0
push 0xa
push 0xff
push 0xc
push 0xf5
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 8
push str.LvModule
push 0
push 0xb
push 0xff
push 0xb
push 0xf4
push 3
mov ecx, esi
call fcn.10004190
push 0
push 0
push 6
push str.LvProp
push 0
push 0xc
push 0xff
push 0xb
push 0xf3
push 3
mov ecx, esi
call fcn.10004190
push 3
mov ecx, esi
call fcn.10003d20
mov edi, eax
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x28]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
push 4
mov ecx, esi
call fcn.10003b50
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
push 1
push eax
push ecx
push str.MSysColumns
push edx
push 4
mov ecx, esi
call fcn.10003fe0
test eax, eax
jne 0x10003405
push eax
push eax
push 8
push str.ObjectId
push 1
push eax
push 4
push 4
push eax
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 7
push str.HColumn
push 1
push 4
push 4
push 4
push 1
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 6
push str.ColTyp
push 1
push 8
push 1
push 2
push 2
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xe
push str.FAutoIncrement
push 1
push 9
push 0
push 1
push 3
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xd
push str.FDisallowNull
push 1
push 9
push 0
push 1
push 4
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 8
push str.FVersion
push 1
push 9
push 0
push 1
push 5
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 8
push str.CodePage
push 1
push 9
push 2
push 3
push 6
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xa
push str.LanguageId
push 1
push 0xb
push 2
push 3
push 7
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 7
push str.Country
push 1
push 0xd
push 2
push 3
push 8
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xb
push str.FRestricted
push 1
push 0xf
push 0
push 1
push 9
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0x11
push str.PresentationOrder
push 1
push 0xf
push 2
push 3
push 0xa
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 4
push str.Name
push 0
push 0
push 0xff
push 0xa
push 0xff
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xc
push str.RmtInfoShort
push 0
push 1
push 0xff
push 9
push 0xfe
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xb
push str.RmtInfoLong
push 0
push 2
push 0xff
push 0xb
push 0xfd
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 7
push str.LvExtra
push 0
push 3
push 0xff
push 0xb
push 0xfc
push 4
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xb
push str.Description
push 0
push 4
push 0xff
push 0xc
push 0xfb
push 4
mov ecx, esi
call fcn.10004190
push 4
mov ecx, esi
call fcn.10003d20
mov dword [esp + 0x30], eax
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x28]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
push 5
mov ecx, esi
call fcn.10003b50
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
push 1
push eax
push ecx
push str.MSysIndexes
push edx
push 5
mov ecx, esi
call fcn.10003fe0
test eax, eax
jne 0x10003405
push eax
push eax
push 8
push str.ObjectId
push 1
push eax
push 4
push 4
push eax
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 5
push str.Idxid
push 1
push 4
push 2
push 3
push 1
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 9
push str.Operation
push 1
push 6
push 1
push 2
push 2
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 7
push str.FUnique
push 1
push 7
push 0
push 1
push 3
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 8
push str.FPrimary
push 1
push 7
push 0
push 1
push 4
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0x10
push str.FDisallowAnyNull
push 1
push 7
push 0
push 1
push 5
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xf
push str.FExcludeAllNull
push 1
push 7
push 0
push 1
push 6
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xa
push str.FClustered
push 1
push 7
push 0
push 1
push 7
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 9
push str.MatchType
push 1
push 7
push 1
push 2
push 8
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xc
push str.UpdateAction
push 1
push 8
push 1
push 2
push 9
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xc
push str.DeleteAction
push 1
push 9
push 1
push 2
push 0xa
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0x11
push str.ObjectIdReference
push 1
push 0xa
push 4
push 4
push 0xb
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xe
push str.IdxidReference
push 1
push 0xe
push 2
push 3
push 0xc
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xc
push str.FDontEnforce
push 1
push 0x10
push 0
push 1
push 0xd
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 4
push str.Name
push 0
push 0
push 0xff
push 0xa
push 0xff
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 6
push str.Rgkeyd
push 0
push 1
push 0xff
push 9
push 0xfe
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 8
push str.Rglocale
push 0
push 2
push 0xff
push 9
push 0xfd
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xf
push str.RgkeydReference
push 0
push 3
push 0xff
push 9
push 0xfc
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0x11
push str.RglocaleReference
push 0
push 4
push 0xff
push 9
push 0xfb
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xc
push str.RmtInfoShort
push 0
push 5
push 0xff
push 9
push 0xfa
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xb
push str.RmtInfoLong
push 0
push 6
push 0xff
push 0xb
push 0xf9
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 7
push str.LvExtra
push 0
push 7
push 0xff
push 0xb
push 0xf8
push 5
mov ecx, esi
call fcn.10004190
push 0
push 0
push 0xb
push str.Description
push 0
push 8
push 0xff
push 0xc
push 0xf7
push 5
mov ecx, esi
call fcn.10004190
push 5
mov ecx, esi
call fcn.10003d20
mov dword [esp + 0x38], eax
cmp edi, ebx
je 0x10003623
push edi
mov ecx, esi
call fcn.10001310
mov ebp, eax
test ebp, ebp
je 0x10003623
mov eax, dword [ebp + 4]
push 0
push eax
mov ecx, esi
call fcn.10003d50
mov ebx, eax
mov eax, dword [ebp + 4]
push 2
push eax
mov ecx, esi
mov dword [esp + 0x3c], ebx
call fcn.10003d50
mov edi, eax
mov eax, dword [ebp + 4]
push 8
push eax
mov ecx, esi
mov dword [esp + 0x24], edi
call fcn.10003d50
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 4]
push 0xff
push eax
mov ecx, esi
call fcn.10003d50
cmp ebx, 0xffffffff
mov dword [esp + 0x18], eax
je 0x10003613
cmp edi, 0xffffffff
je 0x10003613
cmp dword [esp + 0x24], 0xffffffff
je 0x10003613
cmp eax, 0xffffffff
je 0x10003613
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x14], 0
test eax, eax
jbe 0x10003613
mov eax, dword [esp + 0x14]
mov ecx, ebp
push eax
call fcn.10009b20
mov edi, eax
test edi, edi
je 0x100035f8
lea ecx, [esp + 0x10]
push ecx
push 0
push ebx
mov ecx, edi
call fcn.10008860
push eax
push ebx
mov ecx, edi
call fcn.100088b0
test eax, eax
jne 0x100035e8
mov eax, dword [esp + 0x10]
and eax, 0xfffffff
cmp eax, 5
mov dword [esp + 0x10], eax
jbe 0x100035e8
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x3e]
push edx
push 0
push eax
mov ecx, edi
call fcn.10008860
mov ecx, dword [esp + 0x24]
push eax
push ecx
mov ecx, edi
call fcn.100088b0
test eax, eax
jne 0x100035e8
cmp word [esp + 0x3e], 1
jne 0x100035e8
mov ebx, dword [esp + 0x18]
mov ecx, edi
push ebx
call fcn.10008860
cmp eax, 0x41
jae 0x1000357d
lea edx, [esp + 0x48]
mov ecx, edi
push edx
push 0
push ebx
call fcn.10008860
push eax
push ebx
mov ecx, edi
call fcn.100088b0
test eax, eax
jne 0x1000357d
push ebx
mov ecx, edi
call fcn.10008860
push ebx
mov ecx, edi
mov byte [esp + eax + 0x4c], 0
call fcn.10008860
push eax
lea eax, [esp + 0x90]
lea ecx, [esp + 0x4c]
push eax
push ecx
call fcn.10003bc0
add esp, 0xc
jmp 0x10003587
mov word [esp + 0x8c], 0
push 4
lea edx, [esp + 0x90]
push str.MSys
push edx
call fcn.1000adcd
add esp, 0xc
mov ebx, eax
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x28]
neg ebx
push eax
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x24]
push ecx
sbb ebx, ebx
push edx
push eax
mov ecx, esi
inc ebx
call fcn.10003b50
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2c]
push ebx
push ecx
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x94]
push edx
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
mov ecx, esi
call fcn.10003fe0
mov ebx, dword [esp + 0x34]
mov ecx, edi
call fcn.10008710
push edi
call fcn.10009e79
add esp, 4
mov ecx, ebp
call fcn.10009b00
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 0x1c]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jb 0x100034a3
mov ecx, ebp
call fcn.10009ad0
push ebp
call fcn.10009e79
add esp, 4
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffff
je 0x100038ca
push eax
mov ecx, esi
call fcn.10001310
mov ebx, eax
test ebx, ebx
je 0x100038ca
mov eax, dword [ebx + 4]
push 0
push eax
mov ecx, esi
call fcn.10003d50
mov edi, eax
mov eax, dword [ebx + 4]
push 1
push eax
mov ecx, esi
mov dword [esp + 0x2c], edi
call fcn.10003d50
mov dword [esp + 0x18], eax
mov eax, dword [ebx + 4]
push 2
push eax
mov ecx, esi
call fcn.10003d50
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 4]
push 0xff
push eax
mov ecx, esi
call fcn.10003d50
mov ebp, eax
or eax, 0xffffffff
cmp edi, eax
mov dword [esp + 0x34], ebp
je 0x100038ba
cmp dword [esp + 0x18], eax
je 0x100038ba
cmp dword [esp + 0x30], eax
je 0x100038ba
cmp ebp, eax
je 0x100038ba
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x14], 0
test eax, eax
jbe 0x100038ba
mov eax, dword [esp + 0x14]
mov ecx, ebx
push eax
call fcn.10009b20
mov edi, eax
test edi, edi
je 0x100038a6
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push ecx
push 0
push edx
mov ecx, edi
call fcn.10008860
push eax
mov eax, dword [esp + 0x30]
push eax
mov ecx, edi
call fcn.100088b0
test eax, eax
jne 0x10003896
mov eax, dword [esp + 0x10]
and eax, 0xfffffff
cmp eax, 5
mov dword [esp + 0x10], eax
jbe 0x10003896
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x40]
push ecx
push 0
push edx
mov ecx, edi
call fcn.10008860
push eax
mov eax, dword [esp + 0x24]
push eax
mov ecx, edi
call fcn.100088b0
test eax, eax
jne 0x10003896
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x1c]
push ecx
push eax
push edx
mov ecx, edi
call fcn.10008860
push eax
mov eax, dword [esp + 0x3c]
push eax
mov ecx, edi
call fcn.100088b0
test eax, eax
jne 0x10003896
push ebp
mov ecx, edi
call fcn.10008860
cmp eax, 0x41
jae 0x100037c0
lea ecx, [esp + 0x48]
push ecx
push 0
push ebp
mov ecx, edi
call fcn.10008860
push eax
push ebp
mov ecx, edi
call fcn.100088b0
test eax, eax
jne 0x100037c0
push ebp
mov ecx, edi
call fcn.10008860
push ebp
mov ecx, edi
mov byte [esp + eax + 0x4c], 0
call fcn.10008860
push eax
lea edx, [esp + 0x90]
lea eax, [esp + 0x4c]
push edx
push eax
call fcn.10003bc0
add esp, 0xc
jmp 0x100037ca
mov word [esp + 0x8c], 0
mov ecx, dword [esp + 0x1c]
and ecx, 0xff
push ecx
call fcn.10004a00
add esp, 4
test eax, eax
je 0x1000383f
push 0
lea edx, [esp + 0x90]
push 0
push edx
call fcn.1000adb0
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x4f]
add esp, 4
and ecx, 0xffff
sub ecx, 0x7d5
and edx, 0xff
push eax
lea eax, [esp + 0x98]
push eax
mov eax, dword [esp + 0x2c]
push 1
push ecx
mov ecx, dword [esp + 0x5a]
and eax, 0xff
push edx
mov edx, dword [esp + 0x2c]
and ecx, 0xff
push eax
push ecx
push edx
mov ecx, esi
call fcn.10004190
jmp 0x10003896
mov ebp, dword [esp + 0x42]
push 0
lea eax, [esp + 0x90]
push 0
push eax
and ebp, 0xff
call fcn.1000adb0
add esp, 4
lea ecx, [esp + 0x94]
mov edx, 0xff
push eax
mov eax, dword [esp + 0x4f]
push ecx
mov ecx, dword [esp + 0x2c]
sub edx, ebp
push 0
and eax, 0xff
push edx
mov edx, dword [esp + 0x28]
and ecx, 0xff
push eax
push ecx
push ebp
push edx
mov ecx, esi
call fcn.10004190
mov ebp, dword [esp + 0x34]
mov ecx, edi
call fcn.10008710
push edi
call fcn.10009e79
add esp, 4
mov eax, dword [esp + 0x14]
mov ecx, dword [ebx + 0x1c]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jb 0x100036c7
mov ecx, ebx
call fcn.10009ad0
push ebx
call fcn.10009e79
add esp, 4
mov eax, dword [esp + 0x38]
cmp eax, 0xffffffff
je 0x10003b35
push eax
mov ecx, esi
call fcn.10001310
mov edi, eax
test edi, edi
mov dword [esp + 0x24], edi
je 0x10003b35
mov eax, dword [edi + 4]
push 0
push eax
mov ecx, esi
call fcn.10003d50
mov ebp, eax
mov eax, dword [edi + 4]
push 0xfe
push eax
mov ecx, esi
mov dword [esp + 0x40], ebp
call fcn.10003d50
mov dword [esp + 0x18], eax
mov eax, dword [edi + 4]
push 0xff
push eax
mov ecx, esi
call fcn.10003d50
mov ebx, eax
cmp ebp, 0xffffffff
mov dword [esp + 0x1c], ebx
je 0x10003b25
cmp dword [esp + 0x18], 0xffffffff
je 0x10003b25
cmp ebx, 0xffffffff
je 0x10003b25
mov eax, dword [edi + 0x1c]
mov dword [esp + 0x14], 0
test eax, eax
jbe 0x10003b25
mov eax, dword [esp + 0x14]
mov ecx, edi
push eax
call fcn.10009b20
mov ebp, eax
test ebp, ebp
mov dword [esp + 0x34], ebp
je 0x10003b11
mov edx, dword [esp + 0x38]
lea ecx, [esp + 0x10]
push ecx
push 0
push edx
mov ecx, ebp
call fcn.10008860
push eax
mov eax, dword [esp + 0x44]
push eax
mov ecx, ebp
call fcn.100088b0
test eax, eax
jne 0x10003b01
mov eax, dword [esp + 0x10]
push ebx
and eax, 0xfffffff
mov ecx, ebp
mov dword [esp + 0x14], eax
call fcn.10008860
cmp eax, 0x41
jae 0x100039ff
lea ecx, [esp + 0x48]
push ecx
push 0
push ebx
mov ecx, ebp
call fcn.10008860
push eax
push ebx
mov ecx, ebp
call fcn.100088b0
test eax, eax
jne 0x100039ff
push ebx
mov ecx, ebp
call fcn.10008860
push ebx
mov ecx, ebp
mov byte [esp + eax + 0x4c], 0
call fcn.10008860
push eax
lea edx, [esp + 0x90]
lea eax, [esp + 0x4c]
push edx
push eax
call fcn.10003bc0
add esp, 0xc
jmp 0x10003a09
mov word [esp + 0x8c], 0
lea ecx, [esp + 0x8c]
push str.PrimaryKey
push ecx
call fcn.1000a266
add esp, 8
test eax, eax
jne 0x10003b01
mov edx, dword [esp + 0x18]
mov ecx, ebp
push edx
call fcn.10008860
cmp eax, 0x41
jae 0x10003b01
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x48]
push eax
push 0
push ecx
mov ecx, ebp
call fcn.10008860
mov edx, dword [esp + 0x20]
push eax
push edx
mov ecx, ebp
call fcn.100088b0
test eax, eax
jne 0x10003b01
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
call fcn.10008860
mov ecx, dword [esp + 0x10]
mov ebx, eax
push ecx
mov ecx, esi
shr ebx, 3
call fcn.10003d20
cmp eax, dword [esi + 0x20]
jae 0x10003afd
lea ecx, [eax*8]
sub ecx, eax
test ebx, ebx
lea edx, [ecx + ecx*2]
mov ecx, dword [esi + 0x24]
lea eax, [eax + edx*2]
lea edi, [ecx + eax*4]
jbe 0x10003af9
lea ebp, [esp + 0x4c]
xor edx, edx
mov ecx, esi
mov dl, byte [ebp - 2]
push edx
push edi
call fcn.10003d50
cmp eax, dword [edi + 0x94]
jae 0x10003aef
mov ecx, dword [edi + 0x98]
lea eax, [eax + eax*4]
shl eax, 5
mov edx, dword [ecx + eax + 0x18]
lea ecx, [ecx + eax + 0x18]
or edx, 1
mov dword [ecx], edx
mov ecx, dword [ebp]
test ecx, 0x80000000
jne 0x10003aef
mov edx, dword [edi + 0x98]
mov ecx, dword [edx + eax + 0x18]
lea eax, [edx + eax + 0x18]
or ecx, 2
mov dword [eax], ecx
add ebp, 8
dec ebx
jne 0x10003aa2
mov ebp, dword [esp + 0x34]
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x1c]
mov ecx, ebp
call fcn.10008710
push ebp
call fcn.10009e79
add esp, 4
mov eax, dword [esp + 0x14]
mov ecx, dword [edi + 0x1c]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jb 0x1000395a
mov ecx, edi
call fcn.10009ad0
push edi
call fcn.10009e79
add esp, 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret