Function at 0x1006d140
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x84
mov eax, dword [ebp + 8]
xor ecx, ecx
push ebx
mov ebx, dword [eax + 8]
push esi
mov esi, dword [ebp + 0xc]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x40], ecx
mov ecx, dword [eax]
push edi
mov eax, ebx
mov dword [esp + 0x10], ecx
call fcn.1003e6e0
mov dword [esp + 0x20], eax
mov eax, ebx
call fcn.1003e6e0
mov edx, dword [esi + 0x3c]
mov dword [esp + 0x3c], eax
movzx eax, byte [esi + 4]
mov esi, dword [esi + 0x38]
mov edi, dword [esi]
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x28], edi
cmp eax, 0x71
je 0x1006d282
mov eax, dword [esp + 0x10]
cmp byte [eax + 0x38], 0
mov edx, 1
mov dword [esp + 0x14], edx
jne 0x1006d282
lea eax, [edi + edi*2]
add eax, eax
add eax, eax
add eax, eax
mov dword [esp + 0x50], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
cmp edx, dword [eax]
jg 0x1006d27a
mov ecx, dword [esi + 8]
xor eax, eax
test edi, edi
jle 0x1006d1f9
add ecx, 0x14
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x38]
movzx ecx, word [ecx]
cmp ecx, edx
je 0x1006d1f9
add dword [esp + 0x38], 0x18
inc eax
cmp eax, edi
jl 0x1006d1e4
cmp eax, edi
jne 0x1006d267
mov edx, dword [esp + 0x10]
xor eax, eax
push eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
push 0x81
push edx
lea eax, [esp + 0x74]
call fcn.1004ce20
add esp, 0xc
test eax, eax
je 0x1006d344
mov edx, dword [esp + 0x14]
mov ecx, 0x400
or word [eax + 2], cx
mov dword [eax + 4], edx
push eax
mov eax, dword [ebp + 8]
mov ecx, esi
call fcn.1004ddd0
mov esi, eax
add esp, 4
test esi, esi
je 0x1006d263
mov eax, dword [esp + 0x50]
mov ecx, dword [esi + 8]
mov dx, word [esp + 0x14]
mov word [ecx + eax + 0x14], dx
inc edi
add eax, 0x18
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
inc edx
cmp byte [eax + 0x38], 0
mov dword [esp + 0x14], edx
je 0x1006d1c7
mov dword [esp + 0x1c], esi
mov dword [esp + 0x28], edi
mov esi, dword [esp + 0x10]
lea ecx, [edi*4]
call fcn.100240e0
mov dword [esp + 0x50], eax
test eax, eax
je 0x1006d449
mov edx, dword [esp + 0x1c]
mov edx, dword [edx + 8]
xor ecx, ecx
test edi, edi
jle 0x1006d2bf
add edx, 0x14
mov edi, edi
movzx esi, word [edx]
dec esi
mov dword [eax + ecx*4], esi
inc ecx
add edx, 0x18
cmp ecx, edi
jl 0x1006d2b0
mov esi, dword [esp + 0x10]
lea ecx, [edi + edi*4 + 0x10]
call fcn.100240e0
mov dword [esp + 0x2c], eax
test eax, eax
je 0x1006d451
mov edi, dword [esp + 0x28]
lea ecx, [eax + edi*4 + 0xc]
mov dword [eax + 8], ecx
mov word [eax + 6], di
mov edx, esi
mov ecx, dword [edx + 0x10]
mov edx, dword [ecx + 0xc]
mov cl, byte [edx + 0x4d]
mov byte [eax + 4], cl
mov dword [esp + 0x14], 0
test edi, edi
jle 0x1006d451
mov edx, eax
add edx, 0xc
mov dword [esp + 0x34], 0
mov dword [esp + 0x48], edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x34]
mov eax, dword [edx + ecx]
mov ecx, 0x100
mov dword [esp + 0x38], eax
test word [eax + 2], cx
je 0x1006d354
mov edi, dword [ebp + 8]
mov ecx, eax
call fcn.1004c950
mov esi, eax
jmp 0x1006d407
mov dword [esp + 0x28], edi
mov eax, 7
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x50]
mov esi, dword [ebp + 0xc]
mov edi, dword [edx + eax*4]
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006d3ad
mov ecx, dword [ebp + 8]
push edi
push eax
push ecx
call fcn.1006c220
add esp, 0xc
test eax, eax
jne 0x1006d392
mov ecx, dword [esi]
cmp edi, dword [ecx]
jge 0x1006d392
mov eax, dword [ecx + 8]
lea edx, [edi + edi*2]
mov ecx, dword [eax + edx*8]
mov edi, dword [ebp + 8]
call fcn.1004c950
mov esi, eax
test eax, eax
jne 0x1006d39f
mov ecx, dword [esp + 0x10]
mov esi, dword [ecx + 8]
mov ecx, dword [esi]
mov dword [esp + 0x68], ecx
mov eax, ecx
test ecx, ecx
jne 0x1006d3b1
jmp 0x1006d3c3
xor eax, eax
jmp 0x1006d37b
cmp byte [ecx], 0
je 0x1006d3bc
inc eax
cmp byte [eax], 0
jne 0x1006d3b6
sub eax, ecx
and eax, 0x3fffffff
mov edi, dword [esp + 0x38]
mov dword [esp + 0x6c], eax
test eax, eax
jbe 0x1006d3f9
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push 1
push 0x5c
push eax
lea eax, [esp + 0x74]
call fcn.1004ce20
add esp, 0xc
test eax, eax
je 0x1006d3f9
mov ecx, edi
mov edx, 0x100
or word [eax + 2], dx
mov dword [eax + 8], ecx
mov edi, eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x34]
mov dword [edx + ecx], edi
mov edi, dword [esp + 0x48]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x2c]
mov dword [edi], esi
mov ecx, dword [eax + 8]
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
mov cl, byte [ecx + esi + 0xc]
mov edx, dword [edx + 8]
mov byte [eax + edx], cl
inc eax
add edi, 4
add esi, 0x18
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
mov dword [esp + 0x48], edi
mov dword [esp + 0x34], esi
jl 0x1006d316
jmp 0x1006d451
mov dword [esp + 0x2c], 0
mov eax, dword [esp + 0x1c]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
push 0
mov dword [edi + 0x38], eax
mov edx, dword [esi]
push eax
push edx
call fcn.1004d7e0
mov ecx, dword [esp + 0x30]
add esp, 0xc
cmp dword [esp + 0x18], 0x71
mov dword [ecx + 0x38], eax
jne 0x1006d489
mov dword [esp + 0x38], 0
mov esi, edi
jmp 0x1006d5a6
mov edx, dword [edi]
mov eax, dword [esi + 0x4c]
mov ecx, dword [edx]
lea edx, [eax + 1]
lea eax, [eax + ecx + 1]
mov dword [esi + 0x4c], eax
mov esi, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], esi
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], edx
jg 0x1006d4b5
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006d4dd
mov edx, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov edx, dword [esp + 0x38]
xor ecx, ecx
mov byte [eax], 7
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0x10]
lea ecx, [eax + eax*4 + 0x10]
mov dword [esp + 0x58], ecx
call fcn.100240e0
mov edi, eax
mov dword [esp + 0x54], edi
test edi, edi
je 0x1006d50c
mov eax, dword [esp + 0x58]
push eax
push 0
push edi
call fcn.1012a6a0
add esp, 0xc
mov dword [esp + 0x44], edi
test edi, edi
je 0x1006d5a3
mov eax, dword [esp + 0x30]
lea ecx, [edi + eax*4 + 0xc]
mov dword [edi + 8], ecx
mov word [edi + 6], ax
mov edx, dword [esi + 0x10]
mov ecx, dword [edx + 0xc]
mov dl, byte [ecx + 0x4d]
xor esi, esi
mov byte [edi + 4], dl
test eax, eax
jle 0x1006d5a3
lea eax, [edi + 0xc]
mov dword [esp + 0x34], esi
mov dword [esp + 0x48], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x3c]
test eax, eax
je 0x1006d620
mov edx, dword [ebp + 8]
push esi
push eax
push edx
call fcn.1006c220
add esp, 0xc
test eax, eax
jne 0x1006d583
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx]
cmp esi, dword [ecx]
jge 0x1006d583
mov edx, dword [ecx + 8]
mov eax, dword [esp + 0x34]
mov ecx, dword [edx + eax]
mov edi, dword [ebp + 8]
call fcn.1004c950
mov edi, dword [esp + 0x54]
mov ecx, dword [esp + 0x48]
add dword [esp + 0x34], 0x18
mov dword [ecx], eax
mov edx, dword [edi + 8]
mov byte [esi + edx], 0
inc esi
add ecx, 4
cmp esi, dword [esp + 0x30]
mov dword [esp + 0x48], ecx
jl 0x1006d544
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov eax, dword [esi + 0x38]
push str.ORDER
push esi
push edi
mov dword [esi + 0x3c], 0
call fcn.1004c170
mov eax, dword [esp + 0x30]
add esp, 0xc
cmp dword [eax + 0x3c], 0
jne 0x1006d5de
push str.ORDER
push eax
mov eax, dword [eax + 0x38]
push edi
call fcn.1004c170
add esp, 0xc
mov eax, dword [esp + 0x20]
push eax
push esi
push edi
call fcn.1006bfa0
add esp, 0xc
cmp dword [esi + 8], 0
je 0x1006d6af
cmp dword [esp + 0x18], 0x71
jne 0x1006d6af
mov eax, dword [edi + 0x4c]
inc eax
mov dword [esp + 0x34], eax
inc eax
mov dword [edi + 0x4c], eax
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0xc]
test eax, eax
je 0x1006d627
inc eax
mov dword [esp + 0x48], eax
jmp 0x1006d62e
xor eax, eax
jmp 0x1006d564
mov ecx, dword [esi + 8]
mov dword [esp + 0x48], ecx
mov esi, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], esi
jg 0x1006d641
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006d66d
mov eax, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x48]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x34]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax], 0xe
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov esi, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], esi
jg 0x1006d680
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006d6b9
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov edx, dword [esp + 0x34]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x40]
xor esi, esi
mov byte [eax], 0xe
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
jmp 0x1006d6bb
xor eax, eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x34], eax
xor esi, esi
mov edi, dword [ebp + 0xc]
mov edx, dword [edi + 0x48]
mov eax, dword [esp + 0x10]
push edx
push eax
call fcn.1004d3e0
mov ecx, dword [edi + 0x4c]
mov edx, dword [esp + 0x18]
push ecx
push edx
mov dword [edi + 0x48], esi
call fcn.1004d3e0
mov dword [edi + 0x4c], esi
mov edi, dword [ebp + 8]
mov eax, dword [edi + 0x4c]
inc eax
lea ecx, [eax + 1]
mov dword [esp + 0x24], ecx
inc ecx
lea edx, [ecx + 1]
mov dword [esp + 0x2c], edx
add edx, 2
mov dword [edi + 0x4c], edx
mov dword [esp + 0x58], edx
mov dl, 0xa
mov byte [esp + 0x90], dl
mov dword [esp + 0x94], eax
mov byte [esp + 0x91], 0
mov dword [esp + 0x98], esi
mov dword [esp + 0x9c], esi
mov byte [esp + 0x80], dl
mov dword [esp + 0x84], ecx
mov byte [esp + 0x81], 0
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], esi
mov ecx, dword [ebx + 0x1c]
add esp, 0x10
cmp dword [ebx + 0x20], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x58], ecx
jg 0x1006d776
mov edi, ebx
call fcn.1003e3d0
test eax, eax
je 0x1006d772
mov dword [esp + 0x58], 1
jmp 0x1006d79d
mov ecx, dword [esp + 0x58]
mov edx, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea eax, [ecx + ecx*4]
lea eax, [edx + eax*4]
mov byte [eax], 1
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov dword [esp + 0x58], ecx
mov eax, dword [ebx + 0x1c]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x34]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp + 8]
mov dword [ecx + 8], edx
mov edx, dword [eax + 0x1e8]
mov dword [esp + 0x68], edx
lea edx, [esp + 0x80]
push edx
push ecx
push eax
call fcn.100702b0
mov eax, dword [ebx + 0x1c]
add esp, 0xc
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x54], eax
jg 0x1006d7e9
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006d815
mov eax, dword [esp + 0x54]
mov edx, dword [ebx + 4]
mov ecx, 1
add dword [ebx + 0x1c], ecx
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x14]
mov byte [eax], 7
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x54], eax
jg 0x1006d830
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006d857
mov eax, dword [esp + 0x54]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x30]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov byte [eax], 4
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov edx, dword [ebx + 0x1c]
mov edi, dword [ebp + 0xc]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0xc]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x40]
mov dword [edi + 8], edx
lea edx, [esp + 0x70]
push edx
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x38], ecx
mov dword [edi + 0xc], esi
mov ecx, dword [eax + 0x1e8]
push edi
push eax
mov dword [esp + 0x70], ecx
call fcn.100702b0
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov eax, dword [ebx + 0x1c]
add esp, 0xc
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x54], eax
jg 0x1006d8c1
mov edi, ebx
call fcn.1003e3d0
mov edi, dword [ebp + 0xc]
test eax, eax
jne 0x1006d8ed
mov eax, dword [esp + 0x54]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov ecx, 1
add dword [ebx + 0x1c], ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x1c]
mov byte [eax], 7
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x54], eax
jg 0x1006d90b
mov edi, ebx
call fcn.1003e3d0
mov edi, dword [ebp + 0xc]
test eax, eax
jne 0x1006d933
mov eax, dword [esp + 0x54]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
inc ecx
mov byte [eax], 4
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x1c]
push ecx
push 0xfffffffffffffff0
push edx
mov edx, dword [ebp + 8]
inc eax
push eax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [esp + 0x4c]
lea ecx, [esp + 0x94]
push ecx
push edi
push edx
call fcn.1006ccd0
add esp, 0x20
cmp dword [esp + 0x18], 0x71
mov dword [esp + 0x54], eax
je 0x1006d976
mov eax, dword [esp + 0x18]
cmp eax, 0x70
jne 0x1006d9ac
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [ebp + 0x10]
push 0xffffffffffffffef
push ecx
push edx
mov edx, dword [ebp + 8]
push eax
mov eax, dword [esp + 0x4c]
lea ecx, [esp + 0x84]
push ecx
push edi
push edx
call fcn.1006ccd0
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x38]
add esp, 0x20
cmp eax, 0x72
je 0x1006daf7
cmp eax, 0x73
je 0x1006daf7
mov ecx, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], ecx
mov dword [esp + 0x44], ecx
jg 0x1006d9e3
mov edi, ebx
call fcn.1003e3d0
test eax, eax
je 0x1006d9df
mov dword [esp + 0x44], 1
jmp 0x1006da12
mov ecx, dword [esp + 0x44]
mov edx, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea eax, [ecx + ecx*4]
lea eax, [edx + eax*4]
mov edx, dword [esp + 0x1c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x20]
mov byte [eax], 0x1b
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x44]
mov dword [esp + 0x34], eax
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x40], eax
jg 0x1006da35
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006da60
mov eax, dword [esp + 0x40]
mov edx, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov byte [eax], 2
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x40], eax
jg 0x1006da7b
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006daa3
mov eax, dword [esp + 0x40]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x14]
inc ecx
mov byte [eax], 4
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x40], eax
jg 0x1006dabe
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006dae5
mov eax, dword [esp + 0x40]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x44]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov byte [eax], 1
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov edx, dword [esp + 0x24]
fld qword [edx + 0x20]
mov ecx, dword [ebp + 0xc]
fadd qword [ecx + 0x20]
fstp qword [ecx + 0x20]
jmp 0x1006db4b
mov ecx, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], ecx
mov dword [esp + 0x44], ecx
jg 0x1006db19
mov edi, ebx
call fcn.1003e3d0
test eax, eax
je 0x1006db15
mov ecx, 1
jmp 0x1006db40
mov ecx, dword [esp + 0x44]
mov eax, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x20]
mov byte [eax], 1
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov edx, dword [esp + 0x24]
mov dword [esp + 0x34], ecx
mov ecx, dword [ebp + 0xc]
cmp dword [esp + 0x18], 0x73
jne 0x1006db76
fld qword [edx + 0x20]
mov eax, dword [esp + 0x34]
fcomp qword [ecx + 0x20]
mov dword [esp + 0x40], eax
fnstsw ax
test ah, 5
jp 0x1006dc9d
fld qword [edx + 0x20]
fstp qword [ecx + 0x20]
jmp 0x1006dc9d
mov ecx, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], ecx
mov dword [esp + 0x44], ecx
jg 0x1006db9b
mov edi, ebx
call fcn.1003e3d0
test eax, eax
je 0x1006db97
mov dword [esp + 0x44], 1
jmp 0x1006dbca
mov ecx, dword [esp + 0x44]
mov eax, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x14]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x20]
mov byte [eax], 0x1b
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x44]
mov dword [esp + 0x40], eax
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x38], eax
jg 0x1006dbed
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006dc19
mov eax, dword [esp + 0x38]
mov edx, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x1c]
inc ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x54]
mov byte [eax], 2
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x38], eax
jg 0x1006dc34
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006dc5b
mov eax, dword [esp + 0x38]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x30]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov byte [eax], 4
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x38], eax
jg 0x1006dc76
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006dc9d
mov eax, dword [esp + 0x38]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x44]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov byte [eax], 1
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov ecx, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], ecx
mov dword [esp + 0x44], ecx
jg 0x1006dcc2
mov edi, ebx
call fcn.1003e3d0
test eax, eax
je 0x1006dcbe
mov dword [esp + 0x38], 1
jmp 0x1006dcf2
mov ecx, dword [esp + 0x44]
mov eax, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x1c]
inc edx
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
mov byte [eax], 2
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x54], eax
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x44], eax
jg 0x1006dd15
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006dd3c
mov eax, dword [esp + 0x44]
mov edx, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x30]
mov byte [eax], 4
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x44], eax
jg 0x1006dd57
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006dd82
mov eax, dword [esp + 0x44]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x34]
mov byte [eax], 0x1b
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x44], eax
jg 0x1006dd9d
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006ddc4
mov eax, dword [esp + 0x44]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov edx, dword [esp + 0x3c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov byte [eax], 1
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov ecx, dword [esp + 0x18]
cmp ecx, 0x71
jne 0x1006ddda
mov eax, dword [esp + 0x38]
mov dword [esp + 0x44], eax
jmp 0x1006deca
cmp ecx, 0x73
jne 0x1006ddf1
mov eax, dword [esp + 0x38]
mov dword [esp + 0x44], eax
inc eax
mov dword [esp + 0x54], eax
jmp 0x1006deca
mov ecx, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], ecx
mov dword [esp + 0x44], ecx
jg 0x1006de13
mov edi, ebx
call fcn.1003e3d0
test eax, eax
je 0x1006de0f
mov ecx, 1
jmp 0x1006de3a
mov ecx, dword [esp + 0x44]
mov eax, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x30]
mov byte [eax], 4
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x44], ecx
mov dword [esp + 0x38], eax
jg 0x1006de59
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006de84
mov eax, dword [esp + 0x38]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov edx, dword [esp + 0x14]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x34]
mov byte [eax], 0x1b
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x38], eax
jg 0x1006de9f
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006dec6
mov eax, dword [esp + 0x38]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x3c]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov byte [eax], 1
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov ecx, dword [esp + 0x18]
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x18], eax
cmp ecx, 0x71
je 0x1006dedf
cmp ecx, 0x70
jne 0x1006df1e
cmp dword [ebx + 0x20], eax
jg 0x1006def3
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006df1e
mov eax, dword [esp + 0x38]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x48]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x4c]
mov byte [eax], 2
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x4c], eax
jg 0x1006df39
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006df61
mov eax, dword [esp + 0x4c]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x14]
inc ecx
mov byte [eax], 4
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x4c], eax
jg 0x1006df7c
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006dfa7
mov eax, dword [esp + 0x4c]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x40]
mov byte [eax], 0x1b
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x4c], eax
jg 0x1006dfc2
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006dfe9
mov eax, dword [esp + 0x4c]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov edx, dword [esp + 0x3c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov byte [eax], 1
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [esp + 0x58]
cmp eax, esi
jl 0x1006e002
mov ecx, dword [ebx + 0x1c]
cmp ecx, eax
jbe 0x1006e002
mov edx, dword [ebx + 4]
lea eax, [eax + eax*4]
mov dword [edx + eax*4 + 8], ecx
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x58], eax
jg 0x1006e01d
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006e044
mov eax, dword [esp + 0x58]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov edx, dword [esp + 0x14]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov byte [eax], 7
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x58], eax
jg 0x1006e05f
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006e086
mov eax, dword [esp + 0x58]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov edx, dword [esp + 0x1c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov byte [eax], 7
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x58], eax
jg 0x1006e0a1
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006e0cc
mov eax, dword [esp + 0x58]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov edx, dword [esp + 0x30]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x5c]
mov byte [eax], 2
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x5c], eax
jg 0x1006e0e7
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006e113
mov eax, dword [esp + 0x5c]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
inc ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x60]
mov byte [eax], 2
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x60], eax
jg 0x1006e12e
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006e159
mov eax, dword [esp + 0x60]
inc dword [ebx + 0x1c]
mov ecx, dword [esp + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x34]
mov byte [eax], 0x1b
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x60], eax
jg 0x1006e174
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006e19f
mov eax, dword [esp + 0x60]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov edx, dword [esp + 0x1c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x40]
mov byte [eax], 0x1b
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x28]
cmp eax, esi
je 0x1006e1b8
mov edx, dword [esp + 0x3c]
lea ecx, [edx*4 + 4]
mov edx, dword [ebx + 0x1c]
sub eax, ecx
mov dword [eax], edx
mov ecx, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], ecx
mov dword [esp + 0x60], ecx
jg 0x1006e1da
mov edi, ebx
call fcn.1003e3d0
test eax, eax
je 0x1006e1d6
mov eax, 1
jmp 0x1006e1ff
mov ecx, dword [esp + 0x60]
mov edx, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea eax, [ecx + ecx*4]
lea eax, [edx + eax*4]
mov byte [eax], 0x17
mov byte [eax + 3], 0
mov dword [eax + 4], esi
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, ecx
mov ecx, dword [ebx + 4]
mov edi, dword [ebx]
cmp ecx, esi
je 0x1006e260
cmp byte [edi + 0x38], 0
jne 0x1006e260
cmp eax, esi
jge 0x1006e216
mov eax, dword [ebx + 0x1c]
dec eax
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*4]
movsx eax, byte [ecx + 1]
mov dword [esp + 0x4c], ecx
mov ecx, dword [ecx + 0x10]
call fcn.1003e980
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x10], esi
cmp eax, esi
jne 0x1006e246
mov eax, ecx
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
jmp 0x1006e26e
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x10], eax
mov byte [ecx + 1], 0xf1
jmp 0x1006e26e
mov ecx, dword [esp + 0x50]
mov eax, 0xfffffff1
call fcn.1003e980
mov ecx, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], ecx
mov edx, dword [esp + 0x78]
mov eax, dword [esp + 0x88]
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
jg 0x1006e2a3
mov edi, ebx
call fcn.1003e3d0
test eax, eax
je 0x1006e29f
mov eax, 1
jmp 0x1006e2d4
mov ecx, dword [esp + 0x60]
mov eax, dword [ebx + 4]
inc dword [ebx + 0x1c]
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x5c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x58]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x28]
mov byte [eax], 0x18
mov byte [eax + 3], 0
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, ecx
mov ecx, dword [ebx + 4]
mov edi, dword [ebx]
cmp ecx, esi
je 0x1006e330
cmp byte [edi + 0x38], 0
jne 0x1006e330
cmp eax, esi
jge 0x1006e2eb
mov eax, dword [ebx + 0x1c]
dec eax
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*4]
movsx eax, byte [ecx + 1]
mov dword [esp + 0x50], ecx
mov ecx, dword [ecx + 0x10]
call fcn.1003e980
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x50]
mov dword [ecx + 0x10], esi
cmp eax, esi
jne 0x1006e31b
mov eax, ecx
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
jmp 0x1006e33e
mov ecx, dword [esp + 0x50]
mov dword [ecx + 0x10], eax
mov byte [ecx + 1], 0xfa
jmp 0x1006e33e
mov ecx, dword [esp + 0x2c]
mov eax, 0xfffffff0
call fcn.1003e980
mov ecx, dword [ebx + 4]
cmp ecx, esi
je 0x1006e350
mov eax, dword [ebx + 0x1c]
lea edx, [eax + eax*4]
mov byte [ecx + edx*4 - 0x11], 1
mov eax, dword [ebx + 0x1c]
cmp dword [ebx + 0x20], eax
mov dword [esp + 0x60], eax
jg 0x1006e36b
mov edi, ebx
call fcn.1003e3d0
test eax, eax
jne 0x1006e39a
mov eax, dword [esp + 0x60]
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x1c]
mov edx, dword [esp + 0x54]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x18]
mov byte [eax], 0x19
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0
mov eax, dword [ebx + 0x28]
cmp eax, esi
je 0x1006e3b3
mov ecx, dword [esp + 0x20]
lea edx, [ecx*4 + 4]
mov ecx, dword [ebx + 0x1c]
sub eax, edx
mov dword [eax], ecx
mov edx, dword [ebp + 0x10]
cmp byte [edx], 5
jne 0x1006e3df
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 0x3c]
cmp eax, esi
je 0x1006e3cf
mov ecx, eax
mov eax, dword [ecx + 0x3c]
cmp eax, esi
jne 0x1006e3c6
mov eax, dword [ecx]
mov ecx, dword [ebp + 8]
push eax
push esi
push ecx
call fcn.1006b8e0
add esp, 0xc
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebx + 0x3c]
cmp edi, esi
je 0x1006e402
mov edx, dword [esp + 0x10]
push edi
push edx
call fcn.10069900
mov ecx, dword [esp + 0x18]
add esp, 8
mov eax, edi
call fcn.10023eb0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x68]
push esi
mov dword [ebx + 0x3c], eax
movzx eax, byte [ebx + 4]
push ecx
mov ecx, dword [ebp + 8]
push edx
call fcn.1006ae00
add esp, 0xc
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret