Function at 0x1003dd87
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc8
push ebx
push edi
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 4], edi
cmp dword [edi + 0xcb4], ebx
je 0x1003dda8
xor eax, eax
jmp 0x1003e7dd
cmp dword [ebp + 0x1c], ebx
push esi
push 6
mov dword [ebp - 0x34], ebx
pop eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x14], ebx
je 0x1003dde7
push dword [ebp + 0x1c]
lea ecx, [ebp - 0x3c]
call fcn.10032606
push dword [ebp + 8]
lea ecx, [ebp - 0x2c]
call fcn.10032606
push 1
pop esi
jmp 0x1003de3f
mov eax, dword [ebp + 0x10]
cmp byte [eax], 0
jne 0x1003de04
push dword [ebp + 8]
lea ecx, [ebp - 0x3c]
call fcn.10032606
lea ecx, [ebp - 0x2c]
call fcn.10032412
jmp 0x1003dde2
cmp dword [ebp + 8], ebx
push dword [ebp + 0x20]
je 0x1003de2a
lea ecx, [ebp - 0x3c]
push ecx
push eax
push dword [ebp + 8]
mov ecx, edi
call fcn.10036706
push dword [ebp + 8]
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.10032606
jmp 0x1003de3f
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x3c]
push ecx
push eax
push dword [ebp + 0xc]
mov ecx, edi
call fcn.10036c9c
mov esi, eax
mov eax, pe_nt_image_headers32
cmp dword [edi + 0xb64], eax
jge 0x1003de54
cmp dword [edi + 0xd0c], eax
jl 0x1003de60
mov dword [edi + 0xcb4], 1
xor esi, esi
cmp dword [edi + 0xcb4], ebx
je 0x1003de6a
xor esi, esi
cmp esi, ebx
je 0x1003e771
cmp dword [ebp - 0x3c], 3
jne 0x1003e771
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0xc8]
mov dword [ebp + 0x10], eax
push dword [eax + 0xa0]
push edi
call fcn.10071b92
and byte [ebp + 0x23], 0
cmp dword [ebp + 0x10], ebx
je 0x1003df45
mov ecx, dword [ebp + 0x10]
call fcn.100330e6
test eax, eax
je 0x1003df45
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xbc], 6
mov dword [ebp - 0xb8], ebx
call fcn.100330e6
mov esi, eax
mov ecx, esi
call fcn.100330e6
test eax, eax
jne 0x1003dee5
mov ecx, esi
call fcn.10031a32
mov esi, eax
cmp esi, ebx
je 0x1003df3a
lea eax, [ebp - 0xbc]
push ebx
push eax
push str.__constructor__
push esi
mov ecx, edi
call fcn.10036706
test eax, eax
je 0x1003df3a
cmp dword [ebp - 0xbc], 3
jne 0x1003df3a
lea eax, [ebp - 0x3c]
push 1
push eax
lea ecx, [ebp - 0x2c]
call fcn.10032733
mov eax, dword [ebp + 0x10]
push 1
mov dword [ebp + 8], eax
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp + 0x23], 1
call fcn.10032733
mov eax, dword [ebp - 0x34]
mov dword [ebp + 0x10], eax
lea ecx, [ebp - 0xbc]
call fcn.10032412
cmp dword [ebp + 0x18], ebx
je 0x1003dfc5
cmp dword [ebp + 0x1c], ebx
jne 0x1003df58
push edi
lea ecx, [ebp - 0x2c]
call fcn.100326c6
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
call fcn.1003ea5d
mov esi, eax
cmp esi, ebx
je 0x1003dfc5
mov ecx, dword [ebp + 0x10]
push str.prototype
call fcn.10031637
cmp eax, ebx
je 0x1003df83
push ebx
push eax
mov ecx, esi
call fcn.10031a6c
cmp dword [edi + 0xcc4], ebx
je 0x1003df96
mov ecx, edi
call fcn.100316f6
test eax, eax
je 0x1003dfac
push 0x101
lea eax, [ebp - 0x3c]
push ebx
push eax
push str.constructor
mov ecx, esi
call fcn.10031a9d
push 0x81
lea eax, [ebp - 0x3c]
push ebx
push eax
push str.__constructor__
mov ecx, esi
call fcn.10031a9d
mov dword [ebp + 8], esi
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 0x64]
cmp eax, ebx
mov dword [ebp + 0x1c], eax
je 0x1003e13a
lea ecx, [ebp - 0x7c]
call fcn.1003e7e3
mov edi, dword [ebp + 0x14]
mov eax, edi
shl eax, 4
add eax, 4
push eax
call fcn.1005bf24
cmp eax, ebx
pop ecx
je 0x1003e01a
lea ecx, [edi - 1]
lea edx, [eax + 4]
mov dword [eax], edi
cmp ecx, ebx
mov eax, edx
jl 0x1003e015
inc ecx
mov dword [eax + 8], ebx
mov dword [eax], 6
mov dword [eax + 4], ebx
add eax, 0x10
dec ecx
jne 0x1003e003
mov dword [ebp - 0x70], edx
jmp 0x1003e01d
mov dword [ebp - 0x70], ebx
cmp dword [ebp - 0x70], ebx
je 0x1003e125
mov eax, dword [ebp - 4]
cmp byte [ebp + 0x23], 0
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edi
jne 0x1003e043
cmp dword [ebp + 0x18], ebx
mov dword [ebp - 0x6c], ebx
je 0x1003e04a
mov dword [ebp - 0x6c], 1
lea eax, [ebp - 0x2c]
push 1
push eax
lea ecx, [ebp - 0x54]
call fcn.10032733
lea eax, [ebp - 0x2c]
push 1
push eax
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x8c], 6
mov dword [ebp - 0x88], ebx
call fcn.10032733
mov ecx, dword [ebp + 8]
cmp ecx, ebx
je 0x1003e0ac
call fcn.100330e6
test eax, eax
je 0x1003e0ac
mov ecx, dword [ebp + 8]
mov esi, ecx
call fcn.100330e6
cmp eax, ebx
je 0x1003e0a3
mov esi, eax
mov ecx, eax
jmp 0x1003e094
push esi
lea ecx, [ebp - 0x54]
call fcn.10032606
mov eax, dword [ebp + 0x10]
cmp edi, ebx
mov eax, dword [eax + 0x6c]
mov dword [ebp - 0x44], eax
je 0x1003e0d8
mov edi, dword [ebp + 0x14]
xor esi, esi
mov dword [ebp + 0x14], ebx
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 4]
add eax, esi
push eax
call fcn.1003c3ce
add esi, 0x10
dec edi
jne 0x1003e0c1
mov edi, dword [ebp + 0x14]
mov eax, dword [ebp - 4]
inc dword [eax + 0xd0c]
lea esi, [eax + 0xd0c]
lea eax, [ebp - 0x7c]
push eax
call dword [ebp + 0x1c]
dec dword [esi]
cmp dword [ebp - 0x6c], ebx
pop ecx
lea eax, [ebp - 0x54]
jne 0x1003e0fc
lea eax, [ebp - 0x64]
mov ecx, dword [ebp - 4]
push eax
call fcn.1003c265
mov ecx, dword [ebp - 0x70]
cmp ecx, ebx
je 0x1003e113
push 3
call fcn.100141d8
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0xc], 1
call fcn.10032412
lea ecx, [ebp - 0x54]
call fcn.10032412
lea ecx, [ebp - 0x64]
call fcn.10032412
jmp 0x1003e764
cmp dword [ecx + 0x5c], ebx
je 0x1003e761
push 0xc
call fcn.1005bf24
cmp eax, ebx
pop ecx
je 0x1003e15b
mov ecx, eax
call fcn.10024580
mov dword [ebp - 0x1c], eax
jmp 0x1003e15e
mov dword [ebp - 0x1c], ebx
mov edi, dword [ebp + 0x14]
mov eax, edi
shl eax, 4
add eax, 4
push eax
call fcn.1005bf24
cmp eax, ebx
pop ecx
je 0x1003e19a
lea ecx, [edi - 1]
lea edx, [eax + 4]
mov dword [eax], edi
cmp ecx, ebx
mov eax, edx
jl 0x1003e195
inc ecx
mov dword [eax + 8], ebx
mov dword [eax], 6
mov dword [eax + 4], ebx
add eax, 0x10
dec ecx
jne 0x1003e183
mov dword [ebp - 0x18], edx
jmp 0x1003e19d
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x1c], ebx
je 0x1003e764
cmp dword [ebp - 0x18], ebx
je 0x1003e764
mov esi, dword [ebp + 0x10]
mov eax, dword [esi + 0x10]
cmp eax, ebx
je 0x1003e1c3
mov ecx, dword [eax + 0x34]
call fcn.1002f4a8
jmp 0x1003e1cb
mov ecx, dword [ebp - 4]
call fcn.10041023
cmp eax, 6
mov dword [ebp - 0xc], eax
jl 0x1003e1ec
mov ecx, dword [esi + 0x74]
cmp ecx, ebx
je 0x1003e1e2
call fcn.100330b2
mov dword [ebp + 0x20], eax
cmp dword [ebp + 0x20], ebx
jne 0x1003e21b
mov eax, dword [ebp + 0xc]
jmp 0x1003e218
mov eax, dword [ebp + 0xc]
cmp dword [ebp - 0x2c], 4
mov dword [ebp + 0x20], eax
jne 0x1003e207
lea ecx, [ebp - 0x2c]
call fcn.100325a7
cmp eax, ebx
je 0x1003e207
mov dword [ebp + 0x20], eax
cmp dword [ebp + 0x20], ebx
jne 0x1003e21b
mov ecx, dword [esi + 0x74]
cmp ecx, ebx
je 0x1003e21b
call fcn.100330b2
mov dword [ebp + 0x20], eax
push 0x4c
call fcn.1005bf24
cmp eax, ebx
pop ecx
je 0x1003e235
push dword [ebp - 4]
mov ecx, eax
call fcn.10024a28
mov esi, eax
jmp 0x1003e237
xor esi, esi
mov eax, dword [ebp - 0x1c]
mov ecx, esi
mov dword [esi + 4], eax
call fcn.10024a6f
cmp dword [ebp - 0xc], 6
push 0x48
jl 0x1003e273
call fcn.1005bf24
cmp eax, ebx
pop ecx
je 0x1003e265
mov ecx, dword [ebp + 0x10]
push dword [ecx + 0x74]
mov ecx, eax
call fcn.10032f77
jmp 0x1003e267
xor eax, eax
push 1
mov dword [esi + 0x2c], eax
push dword [esi + 0x1c]
mov ecx, eax
jmp 0x1003e2c1
call fcn.1005bf24
cmp eax, ebx
pop ecx
je 0x1003e289
push dword [ebp - 4]
mov ecx, eax
call fcn.10032f68
jmp 0x1003e28b
xor eax, eax
mov ecx, dword [ebp - 4]
push ebx
push 1
mov dword [esi + 0x2c], eax
call fcn.1003dbbf
mov ecx, dword [esi + 0x2c]
push eax
call fcn.10032fba
cmp dword [ebp + 0x20], ebx
je 0x1003e2b9
mov eax, dword [ebp + 0x20]
mov ecx, dword [esi + 0x2c]
add eax, 0x148
push ebx
push eax
call fcn.10032fba
mov ecx, dword [esi + 0x2c]
push 1
push dword [esi + 0x1c]
call fcn.10032fba
mov eax, dword [ebp - 4]
push esi
lea ecx, [eax + 0x5c0]
call fcn.10024b7b
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x60]
cmp eax, ebx
mov dword [esi + 0x20], eax
je 0x1003e2e5
inc dword [eax + 8]
mov edx, dword [ebp + 0x10]
or dword [ebp - 0x44], 0xffffffff
mov edi, SysReAllocString
mov dword [ebp - 0x60], ebx
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x5c], ebx
cmp eax, ebx
mov dword [ebp - 0x40], edi
je 0x1003e31a
mov ecx, dword [eax + 0x34]
call fcn.1002f4a8
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x44], eax
mov ecx, dword [ecx + 0x5c]
mov dword [ebp - 0x60], ecx
jmp 0x1003e354
mov ecx, dword [edx + 0xc]
cmp ecx, ebx
je 0x1003e344
mov eax, dword [ebp + 0x10]
mov ebx, dword [eax + 0x5c]
call fcn.10041023
and dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x4c], 0x20000000
xor ebx, ebx
jmp 0x1003e35e
mov eax, dword [edx + 0x5c]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x4c], 0x20000000
lea ecx, [ebp - 0x60]
call fcn.100017f2
movzx eax, ax
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp + 0x1c], ebx
mov al, byte [eax + 0x78]
test al, al
mov byte [ebp + 0xf], al
je 0x1003e3d9
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
mov al, byte [ecx + eax]
inc dword [ebp - 0x5c]
lea ecx, [ebp - 0x60]
mov byte [esi + 0x44], al
call fcn.100017f2
mov dword [ebp + 0x1c], eax
mov al, byte [esi + 0x44]
test al, al
je 0x1003e3d9
movzx edi, al
mov eax, edi
shl eax, 4
add eax, 4
push eax
call fcn.1005bf24
cmp eax, ebx
pop ecx
je 0x1003e3d4
mov dword [eax], edi
dec edi
lea ecx, [eax + 4]
cmp edi, ebx
mov eax, ecx
jl 0x1003e3d6
inc edi
mov dword [eax + 8], ebx
mov dword [eax], 6
mov dword [eax + 4], ebx
add eax, 0x10
dec edi
jne 0x1003e3c0
jmp 0x1003e3d6
xor ecx, ecx
mov dword [esi + 0x48], ecx
test byte [ebp + 0x1c], 2
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x8c], 6
mov dword [ebp - 0x88], ebx
jne 0x1003e453
lea eax, [ebp - 0x2c]
push 1
push eax
lea ecx, [ebp - 0x8c]
call fcn.10032733
mov ecx, dword [ebp + 8]
cmp ecx, ebx
je 0x1003e436
call fcn.100330e6
test eax, eax
je 0x1003e436
mov ecx, dword [ebp + 8]
mov edi, ecx
call fcn.100330e6
cmp eax, ebx
je 0x1003e42a
mov edi, eax
mov ecx, eax
jmp 0x1003e41b
push edi
lea ecx, [ebp - 0x8c]
call fcn.10032606
test byte [ebp + 0x1c], 1
jne 0x1003e453
mov ecx, dword [esi + 0x1c]
push 3
lea eax, [ebp - 0x8c]
push ebx
push eax
push str.this
call fcn.10031a9d
mov ecx, dword [ebp - 0x34]
mov dword [esi + 0x24], ecx
call fcn.100313f3
test byte [ebp + 0x1c], 8
jne 0x1003e47e
test byte [ebp + 0x1c], 4
jne 0x1003e472
mov ecx, dword [esi + 0x1c]
call fcn.10032254
mov eax, dword [ebp - 0x18]
mov dword [esi + 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x3c], eax
cmp dword [ebp + 0x14], ebx
mov dword [ebp - 0x10], ebx
jle 0x1003e512
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp - 4]
push edi
call fcn.1003c3ce
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x10], eax
jge 0x1003e500
cmp byte [ebp + 0xf], 0
je 0x1003e4b2
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
mov bl, byte [ecx + eax]
inc dword [ebp - 0x5c]
jmp 0x1003e4b4
xor bl, bl
lea ecx, [ebp - 0x60]
call fcn.1002af63
test bl, bl
mov dword [ebp - 0x14], eax
je 0x1003e4e1
mov eax, dword [esi + 0x48]
test eax, eax
je 0x1003e4f1
cmp bl, byte [esi + 0x44]
jae 0x1003e4f1
movzx ecx, bl
shl ecx, 4
push 1
push edi
add ecx, eax
call fcn.10032733
jmp 0x1003e4f1
mov ecx, dword [esi + 0x1c]
push 0
push 0
push edi
push dword [ebp - 0x14]
call fcn.10031a9d
push dword [ebp - 0x14]
mov ecx, 0x100b4348
call fcn.100137e9
xor ebx, ebx
inc dword [ebp - 0x10]
add edi, 0x10
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp + 0x14]
jl 0x1003e48d
mov eax, dword [ebp - 8]
mov dword [ebp + 0x14], ebx
cmp dword [ebp - 0x10], eax
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x9c], 6
mov dword [ebp - 0x98], ebx
jge 0x1003e583
sub eax, dword [ebp - 0x10]
mov dword [ebp - 8], eax
cmp byte [ebp + 0xf], 0
je 0x1003e54f
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
mov al, byte [ecx + eax]
inc dword [ebp - 0x5c]
mov bl, al
jmp 0x1003e551
xor bl, bl
lea ecx, [ebp - 0x60]
call fcn.1002af3f
test bl, bl
mov edi, eax
jne 0x1003e573
mov ecx, dword [esi + 0x1c]
push 0
lea eax, [ebp - 0x9c]
push 0
push eax
push edi
call fcn.10031a9d
push edi
mov ecx, 0x100b4348
call fcn.100137e9
dec dword [ebp - 8]
jne 0x1003e539
push 6
xor edi, edi
test byte [ebp + 0x1c], 0x20
pop eax
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], edi
jne 0x1003e5e3
cmp dword [ebp - 0xc], eax
jl 0x1003e5e3
cmp dword [ebp + 8], edi
je 0x1003e5e3
push dword [ebp - 4]
lea ecx, [ebp - 0xac]
call fcn.100326c6
push dword [ebp + 8]
mov ecx, dword [ebp - 0xa4]
call fcn.1003310c
test byte [ebp + 0x1c], 0x10
jne 0x1003e5e3
mov ecx, dword [esi + 0x1c]
push 3
lea eax, [ebp - 0xac]
push edi
push eax
push str.super
call fcn.10031a9d
mov eax, dword [esi + 0x48]
cmp eax, edi
je 0x1003e6ed
mov bl, 1
test byte [ebp + 0x1c], bl
je 0x1003e608
lea ecx, [eax + 0x10]
lea eax, [ebp - 0x8c]
push 1
push eax
inc bl
call fcn.10032733
test byte [ebp + 0x1c], 4
je 0x1003e626
movzx eax, bl
shl eax, 4
add eax, dword [esi + 0x48]
inc bl
push eax
push esi
push dword [ebp - 4]
call fcn.1003dcbd
add esp, 0xc
test byte [ebp + 0x1c], 0x10
je 0x1003e645
movzx ecx, bl
shl ecx, 4
add ecx, dword [esi + 0x48]
lea eax, [ebp - 0xac]
push 1
push eax
inc bl
call fcn.10032733
test byte [ebp + 0x1c], 0x40
mov edi, dword [ebp + 0x20]
je 0x1003e693
test edi, edi
je 0x1003e657
mov eax, dword [edi + 0x74]
jmp 0x1003e659
xor eax, eax
test eax, eax
je 0x1003e693
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1003e67a
mov edx, dword [ebp - 4]
add edx, 0x5f0
cmp ecx, edx
je 0x1003e67a
mov eax, ecx
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x1003e66d
mov eax, dword [eax + 0x20]
movzx ecx, bl
shl ecx, 4
add ecx, dword [esi + 0x48]
add eax, 0x148
push eax
inc bl
call fcn.10032606
test byte [ebp + 0x1c], 0x80
je 0x1003e6cc
test edi, edi
je 0x1003e6a9
mov eax, dword [edi + 0x74]
test eax, eax
je 0x1003e6a9
mov eax, dword [eax + 4]
jmp 0x1003e6ab
xor eax, eax
test eax, eax
je 0x1003e6cc
mov eax, dword [eax + 0x20]
test eax, eax
je 0x1003e6cc
movzx ecx, bl
shl ecx, 4
add ecx, dword [esi + 0x48]
add eax, 0x148
push eax
inc bl
call fcn.10032606
test byte [ebp + 0x1d], 1
je 0x1003e6ed
mov ecx, dword [ebp - 4]
push 1
movzx edi, bl
shl edi, 4
add edi, dword [esi + 0x48]
call fcn.1003dbbf
push eax
mov ecx, edi
call fcn.10032606
lea ecx, [ebp - 0x60]
call fcn.100017f2
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x5c]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x60]
add ecx, eax
push 0xffffffffffffffff
push dword [ebp + 0x20]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.100246d3
mov eax, dword [ebp + 0x18]
xor ecx, ecx
test eax, eax
setne cl
inc ecx
cmp dword [esi + 0x38], 0
push 1
mov dword [esi + 0x18], ecx
pop ecx
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xc], ecx
jne 0x1003e73e
mov ecx, dword [ebp - 0x18]
push 3
call fcn.100141d8
lea ecx, [ebp - 0xac]
call fcn.10032412
lea ecx, [ebp - 0x9c]
call fcn.10032412
lea ecx, [ebp - 0x8c]
call fcn.10032412
xor ebx, ebx
mov edi, dword [ebp + 0x14]
lea ecx, [ebp - 0xc8]
call fcn.10071c2a
jmp 0x1003e774
mov edi, dword [ebp + 0x14]
cmp edi, ebx
pop esi
je 0x1003e784
mov ecx, dword [ebp - 4]
call fcn.1003c364
dec edi
jne 0x1003e779
cmp dword [ebp - 8], ebx
je 0x1003e795
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x2c]
push eax
call fcn.1003c265
cmp dword [ebp - 0xc], ebx
jne 0x1003e7ca
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x9c], 6
mov dword [ebp - 0x98], ebx
call fcn.1003c265
lea ecx, [ebp - 0x9c]
call fcn.10032412
lea ecx, [ebp - 0x2c]
call fcn.10032412
lea ecx, [ebp - 0x3c]
call fcn.10032412
mov eax, dword [ebp - 0x14]
pop edi
pop ebx
leave
ret 0x1c