Function at 0x10009080
Capabilities:
Get common file path
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001b434
mov eax, dword fs:[0]
push eax
sub esp, 0x2b8
mov eax, dword [0x10026008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
push 0x104
lea eax, [ebp - 0x218]
mov dword [ebx], 0
push eax
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x280], 0
lea edx, [ecx + 2]
mov dword [ebp - 0x27c], 0
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10009100
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x290]
call fcn.10005d00
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x230]
push 0
push 0x1001d9f3
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
call fcn.100017e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x248]
push 0
push 0x1001d9f3
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
call fcn.100017e0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x260]
push 0
push 0x1001d9f3
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
call fcn.100017e0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x278]
push 0
push 0x1001d9f3
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0
call fcn.100017e0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x1000922a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x76
jmp 0x10009245
push 0x76
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009276
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x73
jmp 0x10009291
push 0x73
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100092c2
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x63
jmp 0x100092dd
push 0x63
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x1000930e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x6f
jmp 0x10009329
push 0x6f
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x1000935a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x64
jmp 0x10009375
push 0x64
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100093a6
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x65
jmp 0x100093c1
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100093f2
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x75
jmp 0x1000940d
push 0x75
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x1000943e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x70
jmp 0x10009459
push 0x70
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x1000948a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x64
jmp 0x100094a5
push 0x64
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100094d6
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x61
jmp 0x100094f1
push 0x61
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009522
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x74
jmp 0x1000953d
push 0x74
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x1000956e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x65
jmp 0x10009589
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100095ba
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x72
jmp 0x100095d5
push 0x72
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009606
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x2e
jmp 0x10009621
push 0x2e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009652
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x61
jmp 0x1000966d
push 0x61
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x1000969e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x7a
jmp 0x100096b9
push 0x7a
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100096ea
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x75
jmp 0x10009705
push 0x75
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009736
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x72
jmp 0x10009751
push 0x72
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009782
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x65
jmp 0x1000979d
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100097ce
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x77
jmp 0x100097e9
push 0x77
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x1000981a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x65
jmp 0x10009835
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009866
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x62
jmp 0x10009881
push 0x62
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100098b2
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x73
jmp 0x100098cd
push 0x73
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100098fe
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x69
jmp 0x10009919
push 0x69
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x1000994a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x74
jmp 0x10009965
push 0x74
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009996
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x65
jmp 0x100099b1
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x100099e2
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x73
jmp 0x100099fd
push 0x73
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009a2e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x2e
jmp 0x10009a49
push 0x2e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009a7a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x6e
jmp 0x10009a95
push 0x6e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009ac6
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x65
jmp 0x10009ae1
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x21c]
cmp ecx, edx
jae 0x10009b12
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx], 0x74
jmp 0x10009b2d
push 0x74
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009b5e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [ecx + eax], 0x63
jmp 0x10009b79
push 0x63
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009baa
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x61
jmp 0x10009bc5
push 0x61
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009bf6
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x73
jmp 0x10009c11
push 0x73
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009c42
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x68
jmp 0x10009c5d
push 0x68
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009c8e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x63
jmp 0x10009ca9
push 0x63
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009cda
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x6c
jmp 0x10009cf5
push 0x6c
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009d26
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x6f
jmp 0x10009d41
push 0x6f
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009d72
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x75
jmp 0x10009d8d
push 0x75
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009dbe
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x64
jmp 0x10009dd9
push 0x64
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009e0a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x73
jmp 0x10009e25
push 0x73
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009e56
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x65
jmp 0x10009e71
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009ea2
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x72
jmp 0x10009ebd
push 0x72
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009eee
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x76
jmp 0x10009f09
push 0x76
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009f3a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x69
jmp 0x10009f55
push 0x69
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009f86
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x63
jmp 0x10009fa1
push 0x63
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x10009fd2
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x65
jmp 0x10009fed
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x1000a01e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x73
jmp 0x1000a039
push 0x73
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x1000a06a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x2e
jmp 0x1000a085
push 0x2e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x1000a0b6
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x63
jmp 0x1000a0d1
push 0x63
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x1000a102
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x6f
jmp 0x1000a11d
push 0x6f
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
cmp ecx, edx
jae 0x1000a14e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
mov word [eax + ecx], 0x6d
jmp 0x1000a169
push 0x6d
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a19a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x78
jmp 0x1000a1b5
push 0x78
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a1e6
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x62
jmp 0x1000a201
push 0x62
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a232
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x6f
jmp 0x1000a24d
push 0x6f
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a27e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x78
jmp 0x1000a299
push 0x78
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a2ca
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x70
jmp 0x1000a2e5
push 0x70
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a316
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x6c
jmp 0x1000a331
push 0x6c
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a362
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x61
jmp 0x1000a37d
push 0x61
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a3ae
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x79
jmp 0x1000a3c9
push 0x79
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a3fa
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x73
jmp 0x1000a415
push 0x73
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a446
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x65
jmp 0x1000a461
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a492
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x72
jmp 0x1000a4ad
push 0x72
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a4de
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x76
jmp 0x1000a4f9
push 0x76
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a52a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x69
jmp 0x1000a545
push 0x69
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a576
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x63
jmp 0x1000a591
push 0x63
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a5c2
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x65
jmp 0x1000a5dd
push 0x65
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a60e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x2e
jmp 0x1000a629
push 0x2e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a65a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x63
jmp 0x1000a675
push 0x63
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a6a6
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x6f
jmp 0x1000a6c1
push 0x6f
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x24c]
cmp ecx, edx
jae 0x1000a6f2
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
mov word [eax + ecx], 0x6d
jmp 0x1000a70d
push 0x6d
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a73e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x38
jmp 0x1000a759
push 0x38
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a78a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x38
jmp 0x1000a7a5
push 0x38
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a7d6
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x2e
jmp 0x1000a7f1
push 0x2e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a822
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [ecx + eax], 0x31
jmp 0x1000a83d
push 0x31
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a86e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x31
jmp 0x1000a889
push 0x31
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a8ba
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x39
jmp 0x1000a8d5
push 0x39
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a906
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x2e
jmp 0x1000a921
push 0x2e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a952
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x31
jmp 0x1000a96d
push 0x31
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a99e
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x37
jmp 0x1000a9b9
push 0x37
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000a9ea
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x34
jmp 0x1000aa05
push 0x34
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000aa36
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x2e
jmp 0x1000aa51
push 0x2e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000aa82
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x31
jmp 0x1000aa9d
push 0x31
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000aace
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x30
jmp 0x1000aae9
push 0x30
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
cmp ecx, edx
jae 0x1000ab1a
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
mov word [eax + ecx], 0x32
jmp 0x1000ab35
push 0x32
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x278]
call fcn.100061e0
mov eax, dword [0x10026d30]
lea ecx, [ebp - 0x230]
push ecx
cmp eax, dword [0x10026d34]
je 0x1000ab5f
mov ecx, eax
call fcn.10005430
mov eax, dword [0x10026d30]
add eax, 0x18
mov dword [0x10026d30], eax
jmp 0x1000ab6f
push eax
mov ecx, 0x10026d2c
call fcn.1000b680
mov eax, dword [0x10026d30]
lea ecx, [ebp - 0x248]
push ecx
cmp eax, dword [0x10026d34]
je 0x1000ab94
mov ecx, eax
call fcn.10005430
mov eax, dword [0x10026d30]
add eax, 0x18
mov dword [0x10026d30], eax
jmp 0x1000aba4
push eax
mov ecx, 0x10026d2c
call fcn.1000b680
mov eax, dword [0x10026d30]
lea ecx, [ebp - 0x260]
push ecx
cmp eax, dword [0x10026d34]
je 0x1000abc9
mov ecx, eax
call fcn.10005430
mov eax, dword [0x10026d30]
add eax, 0x18
mov dword [0x10026d30], eax
jmp 0x1000abd9
push eax
mov ecx, 0x10026d2c
call fcn.1000b680
mov eax, dword [0x10026d30]
cmp eax, dword [0x10026d34]
je 0x1000abf8
lea ecx, [ebp - 0x278]
push ecx
mov ecx, eax
call fcn.10005430
add dword [0x10026d30], 0x18
jmp 0x1000ac0a
lea edx, [ebp - 0x278]
mov ecx, 0x10026d2c
push edx
push eax
call fcn.1000b680
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000ac3c
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x5c
jmp 0x1000ac57
push 0x5c
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000ac89
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x77
jmp 0x1000aca4
push 0x77
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000acd6
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x69
jmp 0x1000acf1
push 0x69
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000ad23
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x6e
jmp 0x1000ad3e
push 0x6e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000ad70
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x68
jmp 0x1000ad8b
push 0x68
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000adbd
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x74
jmp 0x1000add8
push 0x74
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000ae0a
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x74
jmp 0x1000ae25
push 0x74
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000ae57
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x70
jmp 0x1000ae72
push 0x70
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000aea4
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x2e
jmp 0x1000aebf
push 0x2e
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000aef1
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x64
jmp 0x1000af0c
push 0x64
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000af3e
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x6c
jmp 0x1000af59
push 0x6c
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x27c]
cmp ecx, edx
jae 0x1000af8b
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
mov dword [eax + ecx*2], 0x6c
jmp 0x1000afa6
push 0x6c
mov byte [ebp - 0x2c4], 0
push dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x290]
call fcn.10005a10
push 4
call fcn.10019920
mov edi, eax
add esp, 4
mov dword [ebp - 0x2c4], edi
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x2a8]
mov dword [edi], 0
call fcn.100050c0
cmp dword [ebp - 0x294], 8
lea eax, [ebp - 0x2a8]
cmovae eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1001db60
push eax
mov dword [edi], eax
call esi
push str.WinHttpSendRequest
push dword [edi]
mov dword [0x10026c28], eax
call esi
push str.WinHttpOpenRequest
push dword [edi]
mov dword [0x10026c48], eax
call esi
push str.WinHttpAddRequestHeaders
push dword [edi]
mov dword [0x10026c38], eax
call esi
push str.WinHttpSetOption
push dword [edi]
mov dword [0x10026c50], eax
call esi
push str.WinHttpQueryDataAvailable
push dword [edi]
call esi
push str.WinHttpReadData
push dword [edi]
mov dword [0x10026c3c], eax
call esi
push str.WinHttpCloseHandle
push dword [edi]
mov dword [0x10026c4c], eax
call esi
push str.WinHttpSetStatusCallback
push dword [edi]
mov dword [0x10026c34], eax
call esi
push str.WinHttpConnect
push dword [edi]
call esi
push str.WinHttpOpen
push dword [edi]
mov dword [0x10026c24], eax
call esi
push str.WinHttpSetTimeouts
push dword [edi]
mov dword [0x10026c40], eax
call esi
push str.WinHttpWriteData
push dword [edi]
mov dword [0x10026c30], eax
call esi
push str.WinHttpReceiveResponse
push dword [edi]
call esi
mov ecx, dword [ebp - 0x294]
mov dword [0x10026c2c], eax
cmp ecx, 8
jb 0x1000b0ed
mov edx, dword [ebp - 0x2a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b0e3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000b0e3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10019c6a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 7
mov word [ebp - 0x2a8], ax
mov dword [0x10026c20], edi
cmp dword [edi], eax
je 0x1000b24b
push eax
push eax
push eax
push eax
push 0x1001da80
call dword [0x10026c40]
mov dword [ebx + 4], eax
test eax, eax
je 0x1000b24e
mov eax, dword [0x10026c1c]
lea ecx, [eax + eax*2]
mov eax, dword [0x10026d2c]
lea eax, [eax + ecx*8]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.10005430
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c0]
cmp dword [ebp - 0x2ac], 0x10
mov eax, dword [ebp - 0x2b0]
jb 0x1000b175
mov ecx, dword [ebp - 0x2c0]
add eax, ecx
jmp 0x1000b17d
add eax, ecx
lea ecx, [ebp - 0x2c0]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x2a8]
call fcn.1000b450
mov byte [ebp - 4], 7
lea eax, [ebp - 0x2a8]
cmp dword [ebp - 0x294], 8
mov edx, dword [ebx + 4]
cmovae eax, dword [ebp - 0x2a8]
push ecx
push 0x1bb
push eax
call fcn.1000ba50
mov ecx, dword [ebp - 0x294]
mov dword [ebx], eax
cmp ecx, 8
jb 0x1000b1f0
mov edx, dword [ebp - 0x2a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b1e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b239
push ecx
push edx
call fcn.10019c6a
add esp, 8
mov ecx, dword [ebp - 0x2ac]
xor eax, eax
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 7
mov word [ebp - 0x2a8], ax
cmp ecx, 0x10
jb 0x1000b24e
mov edx, dword [ebp - 0x2c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b23f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000b23f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10019c6a
add esp, 8
jmp 0x1000b24e
mov dword [ebx + 4], eax
mov ecx, dword [ebp - 0x264]
cmp ecx, 0x10
jb 0x1000b288
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b27e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b360
push ecx
push edx
call fcn.10019c6a
add esp, 8
mov ecx, dword [ebp - 0x24c]
cmp ecx, 0x10
jb 0x1000b2c2
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b2b8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b360
push ecx
push edx
call fcn.10019c6a
add esp, 8
mov ecx, dword [ebp - 0x234]
cmp ecx, 0x10
jb 0x1000b2f8
mov edx, dword [ebp - 0x248]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b2ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b360
push ecx
push edx
call fcn.10019c6a
add esp, 8
mov ecx, dword [ebp - 0x21c]
cmp ecx, 0x10
jb 0x1000b32e
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b324
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b360
push ecx
push edx
call fcn.10019c6a
add esp, 8
mov ecx, dword [ebp - 0x27c]
cmp ecx, 8
jb 0x1000b370
mov edx, dword [ebp - 0x290]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b366
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000b366
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10019c6a
add esp, 8
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10019709
mov esp, ebp
pop ebp
ret