Function at 0x1006a4f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d184d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x50
push esi
push edi
mov eax, dword [0x100e400c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x65766f6d
mov dword [ebp - 0x18], 0x746e656d
lea edx, [ecx + 1]
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a557
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 0
cmp esi, eax
je 0x1006a58e
cmp dword [ebp - 0x30], 0x10
mov ecx, esi
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006a5c9
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a5bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0x706f6862
lea edi, [esi + 0x30]
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x4c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a5f0
sub ecx, edx
lea eax, [ebp - 0x18]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
mov dword [ebp - 4], 1
xor eax, eax
mov dword [ebp - 0x24], 0xddc6c7d3
mov dword [ebp - 0x20], 0xdbc6d3df
mov dword [ebp - 0x1c], 0xc7d892d1
mov word [ebp - 0x18], 0xc2df
mov byte [ebp - 0x16], 0xb2
nop
xor byte [ebp + eax - 0x24], 0xb2
inc eax
cmp eax, 0xf
jb 0x1006a630
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a653
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
lea ecx, [esi + 0x68]
mov byte [ebp - 4], 2
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006a688
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
lea ecx, [esi + 0xa0]
mov byte [esi + 0x99], 1
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006a6ad
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x30]
mov byte [esi + 0x9c], 0
cmp edx, 0x10
jb 0x1006a6ec
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a6e2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x1006a727
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a71d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [edi + 0x18], 0
mov dword [edi + 4], 0x14
mov dword [edi + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [edi + 0x1c], eax
mov ecx, dword [esi + 0x1c]
mov dword [ebp - 0x18], edi
cmp ecx, dword [esi + 0x20]
je 0x1006a758
lea eax, [esi + 0x30]
mov dword [ecx], eax
add dword [esi + 0x1c], 4
jmp 0x1006a765
lea eax, [ebp - 0x18]
push eax
push ecx
lea ecx, [esi + 0x18]
call fcn.10021210
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x64726961
mov dword [ebp - 0x18], 0x6b6375
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a790
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
mov dword [ebp - 4], 3
xor eax, eax
mov dword [ebp - 0x20], 0xd9d1c7d6
mov dword [ebp - 0x1c], 0x92dcdb92
mov dword [ebp - 0x18], 0xb2c0dbd3
xor byte [ebp + eax - 0x20], 0xb2
inc eax
cmp eax, 0xc
jb 0x1006a7c4
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x5c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a7e7
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
lea ecx, [esi + 0xf0]
mov byte [ebp - 4], 4
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006a81f
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
lea ecx, [esi + 0x128]
mov byte [esi + 0x121], 1
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006a844
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x48]
mov byte [esi + 0x124], 0
cmp edx, 0x10
jb 0x1006a883
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a879
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006a8be
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a8b4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0xb8]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006a8f2
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006a8ff
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
mov dword [ebp - 0x20], 0xddc6c7d3
xor eax, eax
mov dword [ebp - 0x1c], 0xd3c0c6c1
mov word [ebp - 0x18], 0xd7d4
mov byte [ebp - 0x16], 0xb2
nop dword [eax]
xor byte [ebp + eax - 0x20], 0xb2
inc eax
cmp eax, 0xb
jb 0x1006a920
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a943
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x24]
movaps xmm0, xmmword [0x100d9a30]
lea edx, [ecx + 1]
pxor xmm0, xmmword [0x100d9ec0]
movups xmmword [ebp - 0x24], xmm0
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a990
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
lea ecx, [esi + 0x178]
mov byte [ebp - 4], 6
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006a9c8
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
lea ecx, [esi + 0x1b0]
mov byte [esi + 0x1a9], 1
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006a9ed
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x48]
mov byte [esi + 0x1ac], 0
cmp edx, 0x10
jb 0x1006aa2c
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006aa22
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006aa67
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006aa5d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0x140]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006aa9b
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006aaa8
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x72747363
mov dword [ebp - 0x18], 0x656661
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006aad0
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x74732d63
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 0x65666172
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ab17
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
lea ecx, [esi + 0x238]
mov byte [ebp - 4], 8
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006ab4f
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
lea ecx, [esi + 0x200]
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006ab6d
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x48]
mov dword [esi + 0x234], 0xffffffff
cmp edx, 0x10
jb 0x1006abaf
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006aba5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006abea
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006abe0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0x1c8]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006ac1e
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006ac2b
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x72747361
mov dword [ebp - 0x18], 0x656661
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ac51
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x74732d61
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 0x65666172
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ac98
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
lea ecx, [esi + 0x2c8]
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006acd0
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
lea ecx, [esi + 0x290]
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006acee
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x48]
mov dword [esi + 0x2c4], 0xffffffff
cmp edx, 0x10
jb 0x1006ad30
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006ad26
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006ad6b
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006ad61
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0x258]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006ad9f
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006adac
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x7274737a
mov dword [ebp - 0x18], 0x656661
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006add2
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x74732d7a
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 0x65666172
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ae20
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
lea ecx, [esi + 0x358]
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006ae58
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
lea ecx, [esi + 0x320]
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006ae76
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x48]
mov dword [esi + 0x354], 0xffffffff
cmp edx, 0x10
jb 0x1006aeb8
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006aeae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006aef3
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006aee9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0x2e8]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006af27
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006af34
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
xor eax, eax
mov dword [ebp - 0x1c], 0x7a0068
lea ecx, [ebp - 0x1c]
mov word [ebp - 0x18], ax
mov dword [ebp - 0x34], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1006af55
sub ecx, edx
lea eax, [ebp - 0x1c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10040fb0
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x72665f7a
lea edx, [ecx + 1]
mov word [ebp - 0x18], 0x7165
mov byte [ebp - 0x16], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006afa1
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2c]
push 0
push 0x100d750d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.10020d70
lea ecx, [esi + 0x3b0]
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006affe
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
lea ecx, [esi + 0x418]
mov byte [esi + 0x3e1], 0
lea eax, [ebp - 0x44]
mov dword [esi + 0x430], 0
mov dword [esi + 0x388], 8
mov dword [esi + 0x38c], 8
mov dword [esi + 0x3ec], 0x3f800000
mov dword [esi + 0x3f0], 0x42c80000
mov dword [esi + 0x3e8], 0x42480000
mov dword [esi + 0x3fc], 0
mov dword [esi + 0x3f4], 0x3f000000
cmp ecx, eax
je 0x1006b073
cmp dword [ebp - 0x30], 8
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10040fb0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x1006b0ab
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b0a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x1006b0e3
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b0d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x1006b124
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b11a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0x378]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006b158
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006b165
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
xor eax, eax
mov dword [ebp - 0x18], 0x25
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
lea edx, [ecx + 2]
mov word [ebp - 0x44], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1006b186
sub ecx, edx
lea eax, [ebp - 0x18]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10040fb0
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x69645f7a
lea edx, [ecx + 1]
mov word [ebp - 0x18], 0x7473
mov byte [ebp - 0x16], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b1d2
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2c]
push 0
push 0x100d750d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.10020d70
lea ecx, [esi + 0x46c]
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006b22f
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
lea ecx, [esi + 0x4d4]
mov byte [esi + 0x49d], 0
lea eax, [ebp - 0x44]
mov dword [esi + 0x4ec], 0
mov dword [esi + 0x444], 8
mov dword [esi + 0x448], 8
mov dword [esi + 0x4a8], 0x3f800000
mov dword [esi + 0x4ac], 0x42c80000
mov dword [esi + 0x4a4], 0x41a00000
mov dword [esi + 0x4b8], 0
mov dword [esi + 0x4b0], 0x3f000000
cmp ecx, eax
je 0x1006b2a4
cmp dword [ebp - 0x30], 8
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10040fb0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x1006b2dc
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b2d2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x1006b314
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b30a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x1006b355
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b34b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0x434]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006b389
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006b396
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x656b6166
mov dword [ebp - 0x18], 0x6b6c6177
lea edx, [ecx + 1]
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b3c0
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x656b6166
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x6c61772d
mov word [ebp - 0x18], 0x6b
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b410
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
lea ecx, [esi + 0x560]
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006b448
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
lea ecx, [esi + 0x528]
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006b466
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x48]
mov dword [esi + 0x55c], 0xffffffff
cmp edx, 0x10
jb 0x1006b4a8
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b49e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006b4e3
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b4d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0x4f0]
mov dword [ecx + 0x18], 1
mov dword [ecx + 4], 0xff
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006b517
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006b524
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x6f747561
mov dword [ebp - 0x18], 0x6b656570
lea edx, [ecx + 1]
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b550
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
mov dword [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x24], 0xddc6c7d3
mov dword [ebp - 0x20], 0xdbc6d3df
mov dword [ebp - 0x1c], 0xd7c292d1
mov word [ebp - 0x18], 0xd9d7
mov byte [ebp - 0x16], 0xb2
nop
xor byte [ebp + eax - 0x24], 0xb2
inc eax
cmp eax, 0xf
jb 0x1006b590
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x5c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b5b3
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
lea ecx, [esi + 0x5f0]
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006b5eb
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
lea ecx, [esi + 0x5b8]
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006b609
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x48]
mov dword [esi + 0x5ec], 0xffffffff
cmp edx, 0x10
jb 0x1006b64b
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b641
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006b686
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b67c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0x580]
mov dword [ecx + 0x18], 1
mov dword [ecx + 4], 0xff
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006b6ba
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006b6c7
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
movaps xmm0, xmmword [0x100d9a30]
lea ecx, [ebp - 0x24]
pxor xmm0, xmmword [0x100d9c30]
lea edx, [ecx + 1]
movups xmmword [ebp - 0x24], xmm0
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b6f6
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
mov dword [ebp - 4], 0x17
mov eax, 0x10
movaps xmm0, xmmword [0x100d9a30]
pxor xmm0, xmmword [0x100d9d60]
mov dword [ebp - 0x1c], 0xcbd3c5de
mov dword [ebp - 0x18], 0xdcdd92c1
mov byte [ebp - 0x14], 0xb2
movups xmmword [ebp - 0x2c], xmm0
nop dword [eax]
xor byte [ebp + eax - 0x2c], 0xb2
inc eax
cmp eax, 0x19
jb 0x1006b740
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x5c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b763
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
lea ecx, [esi + 0x6d8]
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006b79b
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
lea ecx, [esi + 0x710]
mov byte [esi + 0x709], 1
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006b7c0
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x48]
mov byte [esi + 0x70c], 0
cmp edx, 0x10
jb 0x1006b7ff
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b7f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006b83a
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b830
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
lea ecx, [esi + 0x6a0]
mov dword [ecx + 0x18], 1
mov dword [ecx + 4], 0xff
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006b86e
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x1006b87b
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x6f747561
mov dword [ebp - 0x18], 0x706f7473
lea edx, [ecx + 1]
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b8a5
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10020d70
mov dword [ebp - 4], 0x19
xor eax, eax
mov dword [ebp - 0x24], 0xddc6c7d3
mov dword [ebp - 0x20], 0xdbc6d3df
mov dword [ebp - 0x1c], 0xc6c192d1
mov word [ebp - 0x18], 0xc2dd
mov byte [ebp - 0x16], 0xb2
xor byte [ebp + eax - 0x24], 0xb2
inc eax
cmp eax, 0xf
jb 0x1006b8e3
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x5c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b906
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10020d70
lea ecx, [esi + 0x680]
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x5c]
cmp ecx, eax
je 0x1006b93e
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10020d70
lea ecx, [esi + 0x648]
lea eax, [ebp - 0x44]
cmp ecx, eax
je 0x1006b95c
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.10020d70
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x48]
mov dword [esi + 0x67c], 0xffffffff
cmp edx, 0x10
jb 0x1006b99a
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b990
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b9c7
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x1006b9d7
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b9cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006b9cd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100cb8a7
add esp, 8
mov eax, dword [esi + 0x66c]
lea ecx, [esi + 0x668]
mov dword [ebp - 0x18], 0x10024920
cmp eax, dword [ecx + 8]
je 0x1006b9fb
mov dword [eax], 0x10024920
add dword [ecx + 4], 4
jmp 0x1006ba05
lea edx, [ebp - 0x18]
push edx
push eax
call fcn.10021210
lea ecx, [esi + 0x610]
mov dword [ecx + 0x18], 1
mov dword [ecx + 4], 0xff
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x1006ba4b
mov dword [eax], ecx
add dword [esi + 0x1c], 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.10021210
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret