Function at 0x1006e9ab
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov ecx, dword [ebp + 8]
push ebx
push esi
push edi
mov ebx, dword [ecx + 0x66c94]
mov eax, dword [ecx + 0xc10]
mov edi, dword [ecx + 0x66c70]
mov edx, dword [ecx + 0x66c74]
mov ecx, dword [ecx + 0xea4]
mov eax, dword [eax + ebx*4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 8]
push 0x10
pop esi
sar esi, cl
xor ecx, ecx
cmp dword [eax + 0x13f8], 2
mov eax, dword [eax + 0xe98]
sete cl
imul eax, edx
mov dword [ebp - 0x34], ecx
imul esi, edx
push 4
lea eax, [eax + edi*2]
shl eax, 4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 8]
mov edx, eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [eax + 0x608]
mov eax, edi
imul esi, dword [edx + 0xe9c]
and edi, 3
mov dword [ebp - 0xc], ecx
mov ecx, dword [edx + 0x60c]
shl eax, 4
add ecx, eax
add ecx, esi
mov dword [ebp - 0x20], ecx
mov ecx, dword [edx + 0x610]
add ecx, eax
mov eax, dword [ebp - 0xc]
add ecx, esi
mov esi, edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [edx + 0xe98]
imul edi, ecx
push ecx
lea eax, [eax + edi*4]
sub eax, 0xffffff80
push eax
call dword [esi + 0x20c]
mov edi, dword [ebp - 0x20]
push 2
pop eax
push eax
mov eax, dword [ebp - 0x18]
sub eax, edi
push eax
mov eax, dword [esi + 0x66c70]
and eax, 7
imul eax, dword [esi + 0xe9c]
sub eax, 0xffffff80
add eax, edi
push eax
call dword [esi + 0x20c]
mov ecx, dword [esi + 0x30708]
add esp, 0x18
mov al, byte [esi + 0x30704]
mov byte [ebx + ecx], al
mov eax, dword [ebp - 0x2c]
mov ebx, dword [esi + 0xe98]
and eax, 7
mov edx, dword [esi + 0xe9c]
mov dword [ebp - 0x24], ebx
mov dword [esi + 0x13e0], ebx
mov dword [ebp - 0x28], edx
mov dword [esi + 0x13e4], edx
mov dword [ebp - 0x38], eax
je 0x1006f340
mov eax, dword [esi + 0x66c9c]
test eax, eax
je 0x1006ede2
cmp eax, 2
jne 0x1006eb04
mov ecx, dword [esi + 0x66c94]
sub ecx, dword [esi + 0x66c8c]
mov eax, dword [esi + 0x2afb0]
movzx ebx, word [eax + ecx*2 - 2]
sub ebx, dword [esi + 0x2afac]
mov ecx, dword [esi + 0xef0]
neg ebx
sbb ebx, ebx
inc ebx
jmp 0x1006eb25
xor ebx, ebx
cmp dword [esi + 0x66c70], ebx
setg bl
xor eax, eax
cmp dword [esi + 0x2afc4], eax
setne al
xor ecx, ecx
cmp dword [esi + 0x66c74], eax
setg cl
mov edi, dword [ebp - 0xc]
sub edi, dword [ebp - 0x24]
push 2
pop eax
sub edi, eax
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x20]
sub eax, edx
mov dword [ebp - 0x1c], edi
sub eax, 2
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, edx
mov edx, dword [esi + 0x1034]
sub eax, 2
mov dword [ebp - 8], edx
mov dword [ebp - 0x14], eax
imul eax, dword [esi + 0x66c70], 0x60
mov dword [ebp - 4], eax
test ecx, ecx
je 0x1006edd9
test ebx, ebx
je 0x1006ebb1
mov ecx, dword [eax + edx - 0x50]
mov edx, dword [eax + edx - 0x4c]
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 8]
mov eax, dword [edi - 0xe]
mov dword [esi + ebx - 0x50], eax
mov eax, dword [edi - 0xa]
mov dword [esi + ebx - 0x4c], eax
mov eax, esi
mov dword [edi - 0xe], ecx
mov dword [edi - 0xa], edx
mov edx, ebx
mov ecx, dword [eax + edx - 0x48]
mov edx, dword [eax + edx - 0x44]
mov eax, dword [edi - 6]
mov dword [esi + ebx - 0x48], eax
mov eax, dword [edi - 2]
mov dword [esi + ebx - 0x44], eax
mov eax, esi
mov dword [edi - 6], ecx
mov dword [edi - 2], edx
mov edx, ebx
mov ecx, dword [eax + edx]
mov edx, dword [eax + edx + 4]
mov eax, dword [edi + 2]
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 8]
mov dword [esi + ebx], eax
mov eax, dword [edi + 6]
mov dword [esi + ebx + 4], eax
mov eax, esi
mov dword [edi + 2], ecx
mov dword [edi + 6], edx
mov edx, ebx
mov ecx, dword [eax + edx + 8]
mov edx, dword [eax + edx + 0xc]
mov eax, dword [edi + 0xa]
mov dword [esi + ebx + 8], eax
mov eax, dword [edi + 0xe]
mov dword [esi + ebx + 0xc], eax
mov eax, esi
mov dword [edi + 0xa], ecx
mov dword [edi + 0xe], edx
mov edx, ebx
mov ecx, dword [eax + edx + 0x10]
mov edx, dword [eax + edx + 0x14]
mov eax, dword [edi + 0x12]
mov dword [esi + ebx + 0x10], eax
mov eax, dword [edi + 0x16]
mov dword [esi + ebx + 0x14], eax
mov eax, esi
mov dword [edi + 0x12], ecx
mov dword [edi + 0x16], edx
mov edx, ebx
mov ecx, dword [eax + edx + 0x18]
mov edx, dword [eax + edx + 0x1c]
mov eax, dword [edi + 0x1a]
mov dword [esi + ebx + 0x18], eax
mov eax, dword [edi + 0x1e]
mov dword [esi + ebx + 0x1c], eax
mov esi, dword [ebp + 8]
mov ebx, dword [ebp - 0x30]
mov dword [edi + 0x1a], ecx
mov dword [edi + 0x1e], edx
mov ecx, dword [esi + 0x66c70]
lea eax, [ecx + 1]
cmp eax, dword [esi + 0x66c88]
jge 0x1006ecaf
lea eax, [ecx + 1]
mov ecx, dword [esi + 0x1034]
imul edi, eax, 0x60
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x22]
mov edx, dword [edi + ecx]
mov esi, dword [edi + ecx + 4]
mov dword [edi + ecx], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x26]
mov dword [edi + ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x22], edx
mov dword [eax + 0x26], esi
mov eax, dword [ebp + 8]
imul edi, dword [eax + 0x66c70], 0x60
mov ecx, dword [eax + 0x1034]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x2a]
mov esi, dword [edi + ecx + 0x6c]
mov edx, dword [edi + ecx + 0x68]
mov dword [edi + ecx + 0x68], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x2e]
mov dword [edi + ecx + 0x6c], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x2a], edx
mov dword [eax + 0x2e], esi
mov esi, dword [ebp + 8]
mov edi, dword [ebp - 8]
test ebx, ebx
mov ebx, dword [ebp - 4]
je 0x1006ed4b
mov ecx, dword [ebx + edi - 0x40]
mov edx, dword [ebx + edi - 0x3c]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xe]
mov dword [ebx + edi - 0x40], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xa]
mov dword [ebx + edi - 0x3c], eax
mov eax, dword [ebp - 0x10]
mov dword [eax - 0xe], ecx
mov dword [eax - 0xa], edx
mov eax, dword [eax - 6]
mov ecx, dword [ebx + edi - 0x38]
mov edx, dword [ebx + edi - 0x34]
mov dword [ebx + edi - 0x38], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 2]
mov dword [ebx + edi - 0x34], eax
mov eax, dword [ebp - 0x10]
mov dword [eax - 6], ecx
mov dword [eax - 2], edx
mov ecx, dword [ebx + edi - 0x30]
mov edx, dword [ebx + edi - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 0xe]
mov dword [ebx + edi - 0x30], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 0xa]
mov dword [ebx + edi - 0x2c], eax
mov eax, dword [ebp - 0x14]
mov dword [eax - 0xe], ecx
mov dword [eax - 0xa], edx
mov eax, dword [eax - 6]
mov ecx, dword [ebx + edi - 0x28]
mov edx, dword [ebx + edi - 0x24]
mov dword [ebx + edi - 0x28], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 2]
mov dword [ebx + edi - 0x24], eax
mov eax, dword [ebp - 0x14]
mov dword [eax - 6], ecx
mov dword [eax - 2], edx
mov ecx, dword [ebx + edi + 0x20]
mov edx, dword [ebx + edi + 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 2]
mov dword [ebx + edi + 0x20], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 6]
mov dword [ebx + edi + 0x24], eax
mov eax, dword [ebp - 0x10]
mov dword [eax + 2], ecx
mov dword [eax + 6], edx
mov eax, dword [eax + 0xa]
mov ecx, dword [ebx + edi + 0x28]
mov edx, dword [ebx + edi + 0x2c]
mov dword [ebx + edi + 0x28], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xe]
mov dword [ebx + edi + 0x2c], eax
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xa], ecx
mov dword [eax + 0xe], edx
mov ecx, dword [ebx + edi + 0x30]
mov edx, dword [ebx + edi + 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 2]
mov dword [ebx + edi + 0x30], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 6]
mov dword [ebx + edi + 0x34], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 2], ecx
mov dword [eax + 6], edx
mov eax, dword [eax + 0xa]
mov ecx, dword [ebx + edi + 0x38]
mov edx, dword [ebx + edi + 0x3c]
mov dword [ebx + edi + 0x38], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xe]
mov dword [ebx + edi + 0x3c], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xa], ecx
mov dword [eax + 0xe], edx
mov edx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x24]
mov eax, dword [esi + 0xed0]
push edx
push edi
call dword [esi + eax*4 + 0xfa0]
push dword [ebp - 0x28]
mov eax, dword [esi + 0xed0]
push dword [ebp - 0x18]
call dword [esi + eax*4 + 0xfa0]
mov eax, dword [esi + 0xea8]
add esp, 0x10
mov edi, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
test al, 1
je 0x1006efd9
test eax, 0x1000000
je 0x1006eee2
mov eax, dword [esi + 0x270]
xor ecx, ecx
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x268]
mov dword [ebp - 4], eax
lea eax, [esi + 0x65450]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + ecx*4 + 0x1254]
add eax, edi
mov dword [ebp - 0x14], eax
movzx eax, byte [ecx + 0x1013dbe0]
push ebx
movsx edx, byte [eax + esi + 0xf08]
movzx eax, byte [eax + esi + 0x1038]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x1028]
shl eax, cl
and eax, 0x4000
push eax
mov eax, dword [esi + 0x1020]
shl eax, cl
and eax, 0x8000
push eax
push dword [ebp - 0x14]
call dword [esi + edx*4 + 0xf70]
mov eax, dword [ebp - 0x10]
add esp, 0x10
test eax, eax
je 0x1006eec4
xor ecx, ecx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
jne 0x1006eeb9
cmp dword [eax], 0
je 0x1006eeb9
push ebx
push eax
push dword [ebp - 0x14]
call dword [ebp - 8]
jmp 0x1006eec1
push ebx
push eax
push dword [ebp - 0x14]
call dword [ebp - 4]
add esp, 0xc
mov ecx, dword [ebp - 0x30]
add dword [ebp - 0x1c], 0x100
add ecx, 4
mov dword [ebp - 0x30], ecx
cmp ecx, 0x10
jl 0x1006ee49
jmp 0x1006f019
mov eax, dword [esi + 0x26c]
lea ecx, [esi + 0x65450]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x264]
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
mov edx, dword [esi + eax*4 + 0x1254]
movzx eax, byte [eax + 0x1013dbe0]
add edx, edi
mov dword [ebp - 0x1c], edx
movsx eax, byte [eax + esi + 0xf08]
mov dword [ebp - 0x30], eax
cmp eax, 3
je 0x1006ef2e
cmp eax, 7
je 0x1006ef2e
xor eax, eax
jmp 0x1006ef77
mov eax, dword [esi + 0x1028]
mov ecx, dword [ebp - 0x14]
shl eax, cl
test eax, 0x8000
jne 0x1006ef70
push 3
mov eax, ebx
cdq
sub eax, edx
pop ecx
sar eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + ecx*2]
mov ecx, 0x10001
push ecx
cdq
push ecx
push edx
push eax
call fcn.10116f10
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x1c]
jmp 0x1006ef77
mov eax, edx
sub eax, ebx
add eax, 8
push ebx
push eax
mov eax, dword [ebp - 0x30]
push edx
call dword [esi + eax*4 + 0xf34]
mov eax, dword [ebp - 0x14]
add esp, 0xc
movzx eax, byte [eax + 0x1013dbe0]
movzx eax, byte [eax + esi + 0x1038]
test eax, eax
je 0x1006efc3
xor ecx, ecx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
jne 0x1006efb7
cmp dword [eax], 0
je 0x1006efb7
push ebx
push eax
mov eax, dword [ebp - 0x1c]
push eax
call dword [ebp - 8]
jmp 0x1006efc0
push ebx
push eax
mov eax, dword [ebp - 0x1c]
push eax
call dword [ebp - 4]
add esp, 0xc
mov eax, dword [ebp - 0x14]
add dword [ebp - 0x10], 0x40
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x10
jl 0x1006ef02
jmp 0x1006f019
mov eax, dword [esi + 0xed4]
push ebx
push edi
call dword [esi + eax*4 + 0xfcc]
cmp byte [esi + 0x1038], 0
pop ecx
pop ecx
je 0x1006f019
mov ecx, dword [ebp - 0x30]
mov eax, dword [esi + 0x2af7c]
shl ecx, 6
push dword [ecx + eax]
lea eax, [esi + 0x66050]
push eax
lea eax, [esi + 0x65450]
push eax
call dword [esi + 0x284]
add esp, 0xc
mov eax, dword [esi + 0x66c9c]
test eax, eax
je 0x1006f30f
cmp eax, 2
jne 0x1006f059
mov ecx, dword [esi + 0x66c94]
sub ecx, dword [esi + 0x66c8c]
mov eax, dword [esi + 0x2afb0]
movzx edx, word [eax + ecx*2 - 2]
sub edx, dword [esi + 0x2afac]
mov eax, dword [esi + 0xef0]
neg edx
mov dword [ebp - 0x30], eax
sbb edx, edx
inc edx
jmp 0x1006f07d
xor edx, edx
cmp dword [esi + 0x66c70], edx
setg dl
xor eax, eax
cmp dword [esi + 0x2afc4], eax
setne al
xor ecx, ecx
cmp dword [esi + 0x66c74], eax
setg cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x20]
mov ecx, edi
sub eax, dword [ebp - 0x28]
sub ecx, ebx
imul ebx, dword [esi + 0x66c70], 0x60
push 2
pop edi
sub eax, edi
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x14], eax
sub ecx, edi
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x28]
sub eax, edi
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x30], 0
mov edi, dword [esi + 0x1034]
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], edi
je 0x1006f30c
test edx, edx
je 0x1006f109
mov ecx, dword [ebx + edi - 0x50]
mov edx, dword [ebx + edi - 0x4c]
mov eax, dword [ebp - 4]
mov eax, dword [eax - 0xe]
mov dword [ebx + edi - 0x50], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax - 0xa]
mov dword [ebx + edi - 0x4c], eax
mov eax, dword [ebp - 4]
mov dword [eax - 0xe], ecx
mov dword [eax - 0xa], edx
mov eax, dword [eax - 6]
mov ecx, dword [ebx + edi - 0x48]
mov edx, dword [ebx + edi - 0x44]
mov dword [ebx + edi - 0x48], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax - 2]
mov dword [ebx + edi - 0x44], eax
mov eax, dword [ebp - 4]
mov dword [eax - 6], ecx
mov ecx, eax
mov dword [ecx - 2], edx
mov eax, dword [ebx + edi]
mov dword [ecx + 2], eax
mov eax, dword [ebx + edi + 4]
mov dword [ecx + 6], eax
mov eax, dword [ebx + edi + 8]
mov dword [ecx + 0xa], eax
mov eax, dword [ebx + edi + 0xc]
mov dword [ecx + 0xe], eax
mov ecx, dword [ebx + edi + 0x10]
mov edx, dword [ebx + edi + 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x12]
mov dword [ebx + edi + 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x16]
mov dword [ebx + edi + 0x14], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x12], ecx
mov dword [eax + 0x16], edx
mov eax, dword [eax + 0x1a]
mov ecx, dword [ebx + edi + 0x18]
mov edx, dword [ebx + edi + 0x1c]
mov dword [ebx + edi + 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e]
mov dword [ebx + edi + 0x1c], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x1a], ecx
mov dword [eax + 0x1e], edx
mov ecx, dword [esi + 0x66c70]
lea eax, [ecx + 1]
cmp eax, dword [esi + 0x66c88]
jge 0x1006f1e6
lea eax, [ecx + 1]
mov ecx, dword [esi + 0x1034]
imul edi, eax, 0x60
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22]
mov edx, dword [edi + ecx]
mov esi, dword [edi + ecx + 4]
mov dword [edi + ecx], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26]
mov dword [edi + ecx + 4], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x22], edx
mov dword [eax + 0x26], esi
mov eax, dword [ebp + 8]
imul edi, dword [eax + 0x66c70], 0x60
mov ecx, dword [eax + 0x1034]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2a]
mov esi, dword [edi + ecx + 0x6c]
mov edx, dword [edi + ecx + 0x68]
mov dword [edi + ecx + 0x68], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2e]
mov dword [edi + ecx + 0x6c], eax
mov eax, dword [ebp - 4]
mov edi, dword [ebp - 8]
mov dword [eax + 0x2a], edx
mov dword [eax + 0x2e], esi
mov esi, dword [ebp + 8]
cmp dword [ebp - 0x1c], 0
je 0x1006f27e
mov ecx, dword [ebx + edi - 0x40]
mov edx, dword [ebx + edi - 0x3c]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 0xe]
mov dword [ebx + edi - 0x40], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 0xa]
mov dword [ebx + edi - 0x3c], eax
mov eax, dword [ebp - 0x14]
mov dword [eax - 0xe], ecx
mov dword [eax - 0xa], edx
mov eax, dword [eax - 6]
mov ecx, dword [ebx + edi - 0x38]
mov edx, dword [ebx + edi - 0x34]
mov dword [ebx + edi - 0x38], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 2]
mov dword [ebx + edi - 0x34], eax
mov eax, dword [ebp - 0x14]
mov dword [eax - 6], ecx
mov dword [eax - 2], edx
mov ecx, dword [ebx + edi - 0x30]
mov edx, dword [ebx + edi - 0x2c]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xe]
mov dword [ebx + edi - 0x30], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xa]
mov dword [ebx + edi - 0x2c], eax
mov eax, dword [ebp - 0x10]
mov dword [eax - 0xe], ecx
mov dword [eax - 0xa], edx
mov eax, dword [eax - 6]
mov ecx, dword [ebx + edi - 0x28]
mov edx, dword [ebx + edi - 0x24]
mov dword [ebx + edi - 0x28], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 2]
mov dword [ebx + edi - 0x24], eax
mov eax, dword [ebp - 0x10]
mov dword [eax - 6], ecx
mov dword [eax - 2], edx
mov ecx, dword [ebx + edi + 0x20]
mov edx, dword [ebx + edi + 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 2]
mov dword [ebx + edi + 0x20], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 6]
mov dword [ebx + edi + 0x24], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 2], ecx
mov dword [eax + 6], edx
mov eax, dword [eax + 0xa]
mov ecx, dword [ebx + edi + 0x28]
mov edx, dword [ebx + edi + 0x2c]
mov dword [ebx + edi + 0x28], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xe]
mov dword [ebx + edi + 0x2c], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xa], ecx
mov dword [eax + 0xe], edx
mov ecx, dword [ebx + edi + 0x30]
mov edx, dword [ebx + edi + 0x34]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 2]
mov dword [ebx + edi + 0x30], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 6]
mov dword [ebx + edi + 0x34], eax
mov eax, dword [ebp - 0x10]
mov dword [eax + 2], ecx
mov dword [eax + 6], edx
mov eax, dword [eax + 0xa]
mov ecx, dword [ebx + edi + 0x38]
mov edx, dword [ebx + edi + 0x3c]
mov dword [ebx + edi + 0x38], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xe]
mov dword [ebx + edi + 0x3c], eax
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xa], ecx
mov dword [eax + 0xe], edx
mov ebx, dword [ebp - 0x24]
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
test al, 1
jne 0x1006f3c2
test al, 2
je 0x1006f388
lea eax, [esi + 0x1038]
push eax
push ebx
lea eax, [esi + 0x65450]
push eax
lea ebx, [esi + 0x1254]
push ebx
push edi
call dword [esi + 0x280]
jmp 0x1006f3b5
cmp dword [ebp - 0x34], 0
lea eax, [esi + 0x220]
push eax
lea eax, [esi + 0x210]
push eax
lea eax, [esi + 0x2a8]
push eax
push dword [esi + 0x89640]
lea eax, [esi + 0x298]
push eax
push dword [esi + 0x8963c]
push dword [ebp - 0x18]
push edi
mov edi, dword [ebp - 0xc]
push edi
push esi
je 0x1006f381
call fcn.1007155d
add esp, 0x28
jmp 0x1006f312
call fcn.1007034a
jmp 0x1006f37c
test byte [esi + 0x66944], 0xf
je 0x1006f3c2
test eax, 0x1000000
lea eax, [esi + 0x1038]
push eax
push ebx
lea eax, [esi + 0x65450]
push eax
lea ebx, [esi + 0x1254]
push ebx
push edi
je 0x1006f3ba
call dword [esi + 0x278]
add esp, 0x14
jmp 0x1006f3c8
call dword [esi + 0x274]
jmp 0x1006f3b5
lea ebx, [esi + 0x1254]
test byte [esi + 0x66944], 0x30
je 0x1006f47c
cmp dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [esi + 0xe84]
mov edi, dword [esi + 0xe88]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
je 0x1006f3f9
add ecx, 3
add edi, 3
cmp byte [esi + 0x1060], 0
je 0x1006f42b
cmp dword [ebp - 0x38], 0
push 4
pop eax
push 1
pop edx
cmovne eax, edx
shl ecx, 6
mov eax, dword [esi + eax*4 + 0x2af7c]
push dword [eax + ecx]
lea eax, [esi + 0x65850]
push eax
call dword [esi + 0x288]
pop ecx
pop ecx
cmp byte [esi + 0x1088], 0
je 0x1006f45d
cmp dword [ebp - 0x38], 0
push 5
pop eax
push 2
pop ecx
cmovne eax, ecx
shl edi, 6
mov eax, dword [esi + eax*4 + 0x2af7c]
push dword [eax + edi]
lea eax, [esi + 0x65c50]
push eax
call dword [esi + 0x288]
pop ecx
pop ecx
lea eax, [esi + 0x1038]
push eax
push dword [ebp - 0x28]
lea eax, [esi + 0x65450]
push eax
lea eax, [ebp - 0x40]
push ebx
push eax
call dword [esi + 0x27c]
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret