Function at 0x10020980
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x10023de1
mov eax, dword fs:[0]
push eax
sub esp, 0x3c4
mov eax, dword [0x1002c150]
xor eax, esp
mov dword [esp + 0x3c0], eax
push ebx
push esi
push edi
mov eax, dword [0x1002c150]
xor eax, esp
push eax
lea eax, [esp + 0x3d4]
mov dword fs:[0], eax
mov al, 0x36
mov dl, 0x32
mov bl, 0x35
mov esi, ecx
mov cl, 0x37
mov byte [esp + 0x2db], 0x66
mov byte [esp + 0x2d2], cl
mov byte [esp + 0x2df], 0x65
mov byte [esp + 0x2d8], al
mov byte [esp + 0x2e2], al
mov byte [esp + 0x2e4], al
mov byte [esp + 0x2dc], al
mov byte [esp + 0x2e0], al
mov byte [esp + 0x2e3], 0x63
mov byte [esp + 0x2da], al
mov byte [esp + 0x2dd], cl
mov byte [esp + 0x2d6], bl
mov byte [esp + 0x2d1], 0x31
mov byte [esp + 0x2de], dl
mov byte [esp + 0x2d5], 0x39
mov byte [esp + 0x2e6], 0
mov byte [esp + 0x2d9], 0x63
mov byte [esp + 0x2d0], al
mov byte [esp + 0x2e1], 0x34
mov byte [esp + 0x2e5], 0x63
mov byte [esp + 0x2d3], 0x30
mov byte [esp + 0x2d4], al
mov byte [esp + 0x2d7], 0x66
mov byte [esp + 0x388], al
mov byte [esp + 0x39c], al
mov byte [esp + 0x390], cl
mov byte [esp + 0x397], 0x33
mov byte [esp + 0x399], 0x38
mov byte [esp + 0x394], cl
mov byte [esp + 0x39f], 0x63
mov byte [esp + 0x395], 0x34
mov byte [esp + 0x38d], dl
mov byte [esp + 0x396], al
mov byte [esp + 0x39d], 0x34
mov byte [esp + 0x39b], 0x65
mov byte [esp + 0x39a], dl
mov byte [esp + 0x38b], 0x39
mov byte [esp + 0x392], al
mov byte [esp + 0x3a2], 0
mov byte [esp + 0x393], 0x31
mov byte [esp + 0x389], 0x34
mov byte [esp + 0x38e], bl
mov byte [esp + 0x398], al
mov byte [esp + 0x3a1], 0x63
mov byte [esp + 0x3a0], al
mov byte [esp + 0x38c], cl
mov byte [esp + 0x38a], al
mov byte [esp + 0x38f], 0x66
mov byte [esp + 0x391], cl
mov byte [esp + 0x39e], al
mov byte [esp + 0x300], cl
mov byte [esp + 0x306], al
mov byte [esp + 0x316], 0
mov byte [esp + 0x302], cl
mov byte [esp + 0x304], cl
mov byte [esp + 0x30f], 0x65
mov byte [esp + 0x303], 0x33
mov byte [esp + 0x301], 0x30
mov byte [esp + 0x30c], al
mov byte [esp + 0x310], al
mov byte [esp + 0x313], 0x63
mov byte [esp + 0x309], dl
mov byte [esp + 0x308], cl
mov byte [esp + 0x305], 0x34
mov byte [esp + 0x30a], al
mov byte [esp + 0x30b], bl
mov byte [esp + 0x30d], 0x33
mov byte [esp + 0x307], 0x66
mov byte [esp + 0x315], 0x63
mov byte [esp + 0x314], al
mov byte [esp + 0x312], al
mov byte [esp + 0x30e], dl
mov byte [esp + 0x311], 0x34
mov byte [esp + 0x3b7], dl
mov byte [esp + 0x3a8], bl
mov byte [esp + 0x3c5], dl
mov byte [esp + 0x3c7], 0x34
mov byte [esp + 0x3b6], 0x34
mov byte [esp + 0x3c1], 0x65
mov byte [esp + 0x3b2], bl
mov byte [esp + 0x3ad], 0x63
mov byte [esp + 0x3c4], bl
mov byte [esp + 0x3cc], 0x34
mov byte [esp + 0x3c9], dl
mov byte [esp + 0x3bf], 0x39
mov byte [esp + 0x3cd], 0x65
mov byte [esp + 0x3c0], al
mov byte [esp + 0x3a6], bl
mov byte [esp + 0x3a9], 0x63
mov byte [esp + 0x3a4], dl
mov byte [esp + 0x3af], 0x65
mov byte [esp + 0x3c6], al
mov byte [esp + 0x3b5], al
mov byte [esp + 0x3aa], bl
mov byte [esp + 0x3b3], 0x63
mov byte [esp + 0x3c8], cl
mov byte [esp + 0x3bc], 0x34
mov byte [esp + 0x3a5], 0x30
mov byte [esp + 0x3a7], 0x63
mov byte [esp + 0x3ac], bl
mov byte [esp + 0x3c2], al
mov byte [esp + 0x3ba], cl
mov byte [esp + 0x3c3], 0x39
mov byte [esp + 0x3ae], dl
mov byte [esp + 0x3b9], 0x66
mov byte [esp + 0x3ca], 0x34
mov byte [esp + 0x3b8], al
mov byte [esp + 0x3bb], 0x38
mov byte [esp + 0x3cb], 0x34
mov byte [esp + 0x3ce], 0
mov byte [esp + 0x3be], al
mov byte [esp + 0x3b4], bl
mov byte [esp + 0x3b1], 0x63
mov byte [esp + 0x3b0], bl
mov byte [esp + 0x3ab], 0x63
mov byte [esp + 0x3bd], 0x64
mov byte [esp + 0x323], bl
mov byte [esp + 0x31e], al
mov byte [esp + 0x31c], cl
mov byte [esp + 0x32e], dl
mov byte [esp + 0x329], 0x63
mov byte [esp + 0x324], cl
mov byte [esp + 0x32c], dl
mov byte [esp + 0x320], cl
mov byte [esp + 0x322], al
mov byte [esp + 0x327], 0x33
mov byte [esp + 0x326], cl
mov byte [esp + 0x31a], al
mov byte [esp + 0x319], 0x63
mov byte [esp + 0x31b], 0x34
mov byte [esp + 0x321], al
mov byte [esp + 0x318], bl
mov byte [esp + 0x32f], 0x61
mov byte [esp + 0x31d], dl
mov byte [esp + 0x328], bl
mov byte [esp + 0x325], dl
mov byte [esp + 0x330], 0
mov byte [esp + 0x32b], 0x61
mov byte [esp + 0x32a], dl
mov byte [esp + 0x31f], 0x39
mov byte [esp + 0x32d], 0x65
mov byte [esp + 0x2ae], cl
mov byte [esp + 0x2ac], dl
mov byte [esp + 0x2a4], al
mov byte [esp + 0x2ad], 0x65
mov byte [esp + 0x2b4], 0
mov byte [esp + 0x2a1], 0x30
mov byte [esp + 0x2a7], bl
mov byte [esp + 0x2b2], cl
mov byte [esp + 0x2b1], 0x39
mov byte [esp + 0x2a8], cl
mov byte [esp + 0x2a6], al
mov byte [esp + 0x2a3], dl
mov byte [esp + 0x2b3], 0x33
mov byte [esp + 0x2ab], 0x38
mov byte [esp + 0x2b0], cl
mov byte [esp + 0x2af], 0x33
mov byte [esp + 0x2a0], cl
mov byte [esp + 0x2a5], 0x63
mov byte [esp + 0x2aa], al
mov byte [esp + 0x2a2], cl
mov byte [esp + 0x2a9], 0x34
mov byte [esp + 0x371], 0x63
mov byte [esp + 0x381], 0x39
mov byte [esp + 0x37f], 0x33
mov byte [esp + 0x37c], dl
mov byte [esp + 0x380], cl
mov byte [esp + 0x375], 0x66
mov byte [esp + 0x37e], cl
mov byte [esp + 0x372], al
mov byte [esp + 0x378], cl
mov byte [esp + 0x36d], 0x30
mov byte [esp + 0x382], cl
mov byte [esp + 0x373], 0x64
mov byte [esp + 0x374], al
mov byte [esp + 0x370], al
mov byte [esp + 0x36e], cl
mov byte [esp + 0x36c], cl
mov byte [esp + 0x37b], bl
mov byte [esp + 0x384], 0
mov byte [esp + 0x377], bl
mov byte [esp + 0x36f], dl
mov byte [esp + 0x37d], 0x65
mov byte [esp + 0x383], 0x33
mov byte [esp + 0x379], 0x33
mov byte [esp + 0x376], cl
mov byte [esp + 0x37a], al
mov byte [esp + 0x338], al
mov byte [esp + 0x337], dl
mov byte [esp + 0x33a], cl
mov byte [esp + 0x33e], al
mov byte [esp + 0x342], al
mov byte [esp + 0x340], al
mov byte [esp + 0x339], 0x63
mov byte [esp + 0x34b], 0x33
mov byte [esp + 0x34a], cl
mov byte [esp + 0x349], 0x39
mov byte [esp + 0x348], cl
mov byte [esp + 0x343], 0x66
mov byte [esp + 0x334], cl
mov byte [esp + 0x336], cl
mov byte [esp + 0x33c], al
mov byte [esp + 0x33b], al
mov byte [esp + 0x347], 0x33
mov byte [esp + 0x346], cl
mov byte [esp + 0x341], bl
mov byte [esp + 0x33f], 0x34
mov byte [esp + 0x345], 0x65
mov byte [esp + 0x34c], 0
mov byte [esp + 0x335], 0x30
mov byte [esp + 0x33d], 0x39
mov byte [esp + 0x344], dl
mov byte [esp + 0x354], al
mov byte [esp + 0x352], cl
mov byte [esp + 0x366], cl
mov byte [esp + 0x362], cl
mov byte [esp + 0x368], 0
mov byte [esp + 0x35c], 0x33
mov byte [esp + 0x367], 0x33
mov byte [esp + 0x355], 0x63
mov byte [esp + 0x356], bl
mov byte [esp + 0x361], 0x65
mov byte [esp + 0x359], 0x30
mov byte [esp + 0x35e], 0x33
mov byte [esp + 0x365], 0x39
mov byte [esp + 0x360], dl
mov byte [esp + 0x351], 0x30
mov byte [esp + 0x358], cl
mov byte [esp + 0x35a], cl
mov byte [esp + 0x363], 0x33
mov byte [esp + 0x35f], dl
mov byte [esp + 0x350], cl
mov byte [esp + 0x364], cl
mov byte [esp + 0x357], 0x66
mov byte [esp + 0x35d], 0x33
mov byte [esp + 0x35b], al
mov byte [esp + 0x353], dl
mov byte [esp + 0x28c], al
mov byte [esp + 0x288], cl
mov byte [esp + 0x297], 0x33
mov byte [esp + 0x290], cl
mov byte [esp + 0x29b], 0x33
mov byte [esp + 0x294], dl
mov byte [esp + 0x295], 0x65
mov byte [esp + 0x291], 0x33
mov byte [esp + 0x29a], cl
mov byte [esp + 0x299], 0x39
mov byte [esp + 0x28a], cl
mov byte [esp + 0x28d], 0x33
mov byte [esp + 0x28e], dl
mov byte [esp + 0x28f], 0x64
mov byte [esp + 0x289], al
mov byte [esp + 0x292], 0x33
mov byte [esp + 0x29c], 0
mov byte [esp + 0x28b], 0x30
mov byte [esp + 0x298], cl
mov byte [esp + 0x296], cl
mov byte [esp + 0x293], 0x33
mov byte [esp + 0x268], al
mov byte [esp + 0x269], 0x65
mov byte [esp + 0x26d], dl
mov byte [esp + 0x272], 0
mov byte [esp + 0x266], al
mov byte [esp + 0x26a], al
mov byte [esp + 0x267], 0x31
mov byte [esp + 0x26b], 0x34
mov byte [esp + 0x26f], 0x66
mov byte [esp + 0x265], 0x33
mov byte [esp + 0x270], cl
mov byte [esp + 0x26e], al
mov byte [esp + 0x26c], al
mov byte [esp + 0x271], 0x38
mov byte [esp + 0x264], cl
mov byte [esp + 0x242], al
mov byte [esp + 0x244], cl
mov byte [esp + 0x23e], al
mov byte [esp + 0x245], 0x39
mov byte [esp + 0x246], 0
mov byte [esp + 0x23c], al
mov byte [esp + 0x243], bl
mov byte [esp + 0x240], al
mov byte [esp + 0x23d], 0x38
mov byte [esp + 0x241], 0x65
mov byte [esp + 0x23f], 0x66
mov byte [esp + 0x254], cl
mov byte [esp + 0x25e], al
mov byte [esp + 0x25f], bl
mov byte [esp + 0x25d], dl
mov byte [esp + 0x25c], cl
mov byte [esp + 0x260], 0
mov byte [esp + 0x255], al
mov byte [esp + 0x25b], 0x31
mov byte [esp + 0x258], cl
mov byte [esp + 0x25a], al
mov byte [esp + 0x256], al
mov byte [esp + 0x257], 0x64
mov byte [esp + 0x259], cl
mov byte [esp + 0x282], al
mov byte [esp + 0x285], 0x33
mov byte [esp + 0x27b], bl
mov byte [esp + 0x283], bl
mov byte [esp + 0x284], cl
mov byte [esp + 0x27c], al
mov byte [esp + 0x27a], al
mov byte [esp + 0x27e], cl
mov byte [esp + 0x286], 0
mov byte [esp + 0x27d], 0x65
mov byte [esp + 0x280], al
mov byte [esp + 0x27f], 0x34
mov byte [esp + 0x274], al
mov byte [esp + 0x276], al
mov byte [esp + 0x275], 0x65
mov byte [esp + 0x281], 0x38
mov byte [esp + 0x277], bl
mov byte [esp + 0x278], cl
mov byte [esp + 0x279], 0x30
mov byte [esp + 0x252], 0
mov byte [esp + 0x249], 0x33
mov byte [esp + 0x24e], cl
mov byte [esp + 0x2f1], bl
mov byte [esp + 0x2bf], bl
mov byte [esp + 0x2b8], bl
mov ebx, dword [esp + 0x3e4]
mov byte [esp + 0x24a], al
mov byte [esp + 0x248], cl
mov byte [esp + 0x24f], dl
mov byte [esp + 0x24d], 0x66
mov byte [esp + 0x24c], al
mov byte [esp + 0x250], cl
mov byte [esp + 0x251], 0x34
mov byte [esp + 0x24b], 0x65
mov byte [esp + 0x2fd], 0x63
mov byte [esp + 0x2f8], al
mov byte [esp + 0x2f9], 0x34
mov byte [esp + 0x2f0], al
mov byte [esp + 0x2f2], al
mov byte [esp + 0x2f7], 0x65
mov byte [esp + 0x2ef], 0x38
mov byte [esp + 0x2f6], dl
mov byte [esp + 0x2fa], al
mov byte [esp + 0x2f3], 0x63
mov byte [esp + 0x2fe], 0
mov byte [esp + 0x2fb], 0x63
mov byte [esp + 0x2ea], al
mov byte [esp + 0x2ec], al
mov byte [esp + 0x2ed], cl
mov byte [esp + 0x2eb], dl
mov byte [esp + 0x2fc], al
mov byte [esp + 0x2e8], al
mov byte [esp + 0x2f5], 0x30
mov byte [esp + 0x2f4], cl
mov byte [esp + 0x2e9], 0x34
mov byte [esp + 0x2ee], al
mov byte [esp + 0x2cc], al
mov byte [esp + 0x2c9], 0x34
mov byte [esp + 0x2c5], 0x63
mov byte [esp + 0x2ca], al
mov byte [esp + 0x2c1], 0x34
mov byte [esp + 0x2be], al
mov byte [esp + 0x2c3], 0x63
mov byte [esp + 0x2bb], dl
mov byte [esp + 0x2c4], al
mov byte [esp + 0x2c2], al
mov byte [esp + 0x2ce], 0
mov byte [esp + 0x2c6], dl
mov byte [esp + 0x2cd], 0x63
mov byte [esp + 0x2bd], 0x39
mov byte [esp + 0x2c7], 0x65
mov byte [esp + 0x2ba], al
mov byte [esp + 0x2c0], 0x34
mov byte [esp + 0x2c8], al
mov byte [esp + 0x2b9], 0x33
mov byte [esp + 0x2cb], 0x63
mov byte [esp + 0x2bc], al
mov byte [esp + 0x232], al
mov byte [esp + 0x235], 0x34
mov byte [esp + 0x233], 0x65
mov byte [esp + 0x230], al
mov byte [esp + 0x234], al
mov byte [esp + 0x231], 0x31
mov byte [esp + 0x238], 0
mov byte [esp + 0x237], 0x39
mov byte [esp + 0x236], cl
mov byte [esp + 0x229], dl
mov byte [esp + 0x228], cl
mov byte [esp + 0x22d], 0x66
mov byte [esp + 0x22e], 0
mov byte [esp + 0x22c], al
mov byte [esp + 0x22b], 0x66
mov byte [esp + 0x22a], al
cmp ebx, 0x13
ja case.0x10021522.8
jmp dword [ebx*4 + 0x10021ba4]
sub esp, 0x1c
lea eax, [esp + 0x304]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.10003d80
lea ecx, [esp + 0x30]
push ecx
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0
mov ecx, esi
mov dword [esp + 0x3e0], 0
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x14]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x2d4]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 1
mov ecx, esi
mov dword [esp + 0x3e0], 1
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x30]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x2ec]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0xa0]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 2
mov ecx, esi
mov dword [esp + 0x3e0], 2
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x84]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x3a4]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x1d4]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 3
mov ecx, esi
mov dword [esp + 0x3e0], 3
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x1b8]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x31c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0xf4]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 4
mov ecx, esi
mov dword [esp + 0x3e0], 4
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0xd8]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x3c0]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x19c]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 5
mov ecx, esi
mov dword [esp + 0x3e0], 5
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x180]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x334]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x12c]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 6
mov ecx, esi
mov dword [esp + 0x3e0], 6
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x110]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x2bc]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x20c]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 7
mov ecx, esi
mov dword [esp + 0x3e0], 7
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x1f0]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x388]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x68]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 9
mov ecx, esi
mov dword [esp + 0x3e0], 8
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x4c]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x350]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x84]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0xa
mov ecx, esi
mov dword [esp + 0x3e0], 9
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x68]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x36c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0xd8]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0xb
mov ecx, esi
mov dword [esp + 0x3e0], 0xa
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0xbc]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x2a4]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x110]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0xc
mov ecx, esi
mov dword [esp + 0x3e0], 0xb
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0xf4]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x280]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x148]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0xd
mov ecx, esi
mov dword [esp + 0x3e0], 0xc
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x12c]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x258]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x180]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0xe
mov ecx, esi
mov dword [esp + 0x3e0], 0xd
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x164]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x270]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x1b8]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0xf
mov ecx, esi
mov dword [esp + 0x3e0], 0xe
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x19c]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x290]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x1f0]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0x10
mov ecx, esi
mov dword [esp + 0x3e0], 0xf
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x1d4]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x264]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x228]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0x11
mov ecx, esi
mov dword [esp + 0x3e0], 0x10
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x20c]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x24c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0xbc]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0x12
mov ecx, esi
mov dword [esp + 0x3e0], 0x11
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0xa0]
jmp 0x10021b35
sub esp, 0x1c
lea edx, [esp + 0x244]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.10003d80
lea eax, [esp + 0x164]
push eax
mov ecx, esi
call fcn.10022a10
mov edi, eax
push 0x13
mov ecx, esi
mov dword [esp + 0x3e0], 0x12
call fcn.10004df0
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.10003660
lea ecx, [esp + 0x148]
call fcn.10002fa0
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebx, ecx
jb 0x10021b5c
call fcn.10007d7d
mov eax, dword [esi + 0xc]
lea edx, [ebx*8]
sub edx, ebx
cmp dword [eax + edx*4 + 0x18], 0x10
lea eax, [eax + edx*4]
jb 0x10021b77
mov eax, dword [eax + 4]
jmp 0x10021b7a
add eax, 4
mov ecx, dword [esp + 0x3d4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c0]
xor ecx, esp
call fcn.100079bb
add esp, 0x3d0
ret 4