Function at 0x10008170
Capabilities:
Get common file path
Get program files directory
Get startup folder
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10042cce
mov eax, dword fs:[0]
push eax
sub esp, 0x2c8
mov eax, dword [0x1005a690]
xor eax, esp
mov dword [esp + 0x2c0], eax
push ebx
push esi
push edi
mov eax, dword [0x1005a690]
xor eax, esp
push eax
lea eax, [esp + 0x2d8]
mov dword fs:[0], eax
mov dword [esp + 0x20], ecx
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x18], edi
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x2e0], 0
movq xmm0, qword [str._homedrive_]
mov ax, word [0x100496fc]
movq qword [esp + 0xc4], xmm0
movq xmm0, qword [0x100496ec]
push 0x1ee
mov word [esp + 0xe0], ax
movq qword [esp + 0xd0], xmm0
movq xmm0, qword [0x100496f4]
lea eax, [esp + 0xe2]
push 0
push eax
movq qword [esp + 0xe0], xmm0
call sub.MSVCR110.dll_memset
add esp, 0xc
lea ecx, [esp + 0xc4]
call fcn.10013f90
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008267
xor ecx, ecx
jmp 0x10008280
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008271
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 1
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
mov ebx, dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
jb 0x100082c4
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 8
mov edx, 0x82
push str._temp_
push ecx
lea ecx, [esp + 0xd0]
call fcn.10001700
lea ecx, [esp + 0xc4]
call fcn.10013f90
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008323
xor ecx, ecx
jmp 0x1000833f
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008330
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 2
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x1000837d
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0
push eax
push 0
call esi
test eax, eax
je 0x100084af
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x100083d7
xor ecx, ecx
jmp 0x100083f0
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100083e1
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 3
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x1000842e
push dword [esp + 0x28]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008453
xor ecx, ecx
jmp 0x1000846f
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008460
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2e4], 4
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x100084af
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x1a
push eax
push 0
call esi
test eax, eax
je 0x100085b3
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008503
xor ecx, ecx
jmp 0x1000851f
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008510
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 5
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x1000855d
push dword [esp + 0x28]
call ebx
add esp, 4
push str.MicrosoftInternet_Explorer
lea eax, [esp + 0xc8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x100085b3
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2e4], 6
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x100085b3
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 2
push eax
push 0
call esi
test eax, eax
je 0x1000865e
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008607
xor ecx, ecx
jmp 0x10008620
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008611
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 7
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x1000865e
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 7
push eax
push 0
call esi
test eax, eax
je 0x1000870d
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x100086b2
xor ecx, ecx
jmp 0x100086cf
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100086c0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 8
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x1000870d
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x26
push eax
push 0
call esi
test eax, eax
je 0x100087bd
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008761
xor ecx, ecx
jmp 0x1000877f
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
jmp 0x10008770
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008770
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 9
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x100087bd
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x2b
push eax
push 0
call esi
test eax, eax
je 0x1000886d
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008811
xor ecx, ecx
jmp 0x1000882f
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
jmp 0x10008820
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008820
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0xa
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x1000886d
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x24
push eax
push 0
call esi
test eax, eax
je 0x10008914
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x100088bd
xor ecx, ecx
jmp 0x100088d6
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100088c7
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0xb
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008914
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x25
push eax
push 0
call esi
test eax, eax
je 0x100089bd
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008964
xor ecx, ecx
jmp 0x1000897f
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008970
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0xc
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x100089bd
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x1c
push eax
push 0
call esi
test eax, eax
je 0x10008a64
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008a0d
xor ecx, ecx
jmp 0x10008a26
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008a17
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0xd
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008a64
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0xb
push eax
push 0
call esi
test eax, eax
je 0x10008b8f
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008ab8
xor ecx, ecx
jmp 0x10008ad1
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008ac2
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0xe
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008b0f
push dword [esp + 0x28]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008b34
xor ecx, ecx
jmp 0x10008b4f
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008b40
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2e4], 0xf
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008b8f
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 5
push eax
push 0
call esi
test eax, eax
je 0x10008c3d
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008be3
xor ecx, ecx
jmp 0x10008bff
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008bf0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x10
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008c3d
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x28
push eax
push 0
call esi
test eax, eax
je 0x10008d41
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008c91
xor ecx, ecx
jmp 0x10008caf
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
jmp 0x10008ca0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008ca0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x11
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008ced
push dword [esp + 0x28]
call ebx
add esp, 4
push str.AppDataLocalLow
lea eax, [esp + 0xc8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x10008d41
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x12
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008d41
push dword [esp + 0x28]
call ebx
add esp, 4
call fcn.1001b350
test al, al
je 0x10008db2
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x29
push eax
push 0
call esi
test eax, eax
je 0x10008db2
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x13
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008db2
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x16
push eax
push 0
call esi
test eax, eax
je 0x10008e9c
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [esp + 0xc4], ax
jne 0x10008e06
xor ecx, ecx
jmp 0x10008e1f
lea ecx, [esp + 0xc4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10008e10
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x30]
call fcn.1000aac0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x14
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008e5d
push dword [esp + 0x28]
call ebx
add esp, 4
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2e4], 0x15
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008e9c
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x17
push eax
push 0
call esi
test eax, eax
je 0x10008f04
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x16
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008f04
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x18
push eax
push 0
call esi
test eax, eax
je 0x10008f6c
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x17
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008f6c
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x19
push eax
push 0
call esi
test eax, eax
je 0x10009017
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x18
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10008fd8
push dword [esp + 0x28]
call ebx
add esp, 4
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2e4], 0x19
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x10009017
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x23
push eax
push 0
call esi
test eax, eax
je 0x1000907f
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x1a
call fcn.1000a280
mov byte [esp + 0x2e0], 0
cmp dword [esp + 0x3c], 8
jb 0x1000907f
push dword [esp + 0x28]
call ebx
add esp, 4
push 0x208
lea eax, [esp + 0xc8]
push 0
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [esp + 0xc4]
push 0
push 0x2e
push eax
push 0
call esi
test eax, eax
je 0x100090df
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x2c]
call fcn.10009fd0
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov byte [esp + 0x2e4], 0x1b
call fcn.1000a280
cmp dword [esp + 0x3c], 8
jb 0x100090df
push dword [esp + 0x28]
call ebx
add esp, 4
xor edi, edi
mov dword [esp + 0x7c], edi
mov dword [esp + 0x80], edi
mov dword [esp + 0x84], edi
xor esi, esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
xor eax, eax
mov dword [esp + 0xa8], 7
mov dword [esp + 0xa4], esi
mov word [esp + 0x94], ax
lea ecx, [esp + 0x94]
mov byte [esp + 0x2e0], 0x1e
call fcn.1001b3e0
test al, al
je 0x10009528
mov eax, dword [ebp + 8]
mov ebx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x24], eax
cmp ebx, eax
je 0x10009522
lea ebx, [ebx]
xor eax, eax
push 0xffffffffffffffff
push eax
push ebx
lea ecx, [esp + 0xb8]
mov dword [esp + 0xcc], 7
mov dword [esp + 0xc8], 0
mov word [esp + 0xb8], ax
call fcn.1000a9a0
mov byte [esp + 0x2e0], 0x1f
cmp dword [esp + 0xc0], 8
push dword [esp + 0xbc]
lea eax, [esp + 0xb0]
cmovae eax, dword [esp + 0xb0]
push eax
push dword [esp + 0xac]
lea ecx, [esp + 0xa0]
push 0
call fcn.1000c780
test eax, eax
je 0x100094e4
mov eax, dword [esp + 0x18]
mov esi, dword [eax]
mov edi, dword [eax + 4]
cmp esi, edi
je 0x1000935d
xor eax, eax
push 0xffffffffffffffff
push eax
push esi
lea ecx, [esp + 0x34]
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
call fcn.1000a9a0
xor eax, eax
mov byte [esp + 0x2e0], 0x20
push 0xffffffffffffffff
push eax
mov word [esp + 0x54], ax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], 0
call fcn.1000a9a0
sub esp, 0x18
mov ecx, esp
mov byte [esp + 0x2f8], 0x21
mov dword [esp + 0x2c], esp
xor eax, eax
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [esp + 0xcc]
push eax
call fcn.1000a9a0
sub esp, 0x18
mov ecx, esp
mov byte [esp + 0x310], 0x22
xor eax, eax
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [esp + 0xcc]
push eax
call fcn.1000a9a0
lea edx, [esp + 0x58]
lea ecx, [esp + 0x94]
mov byte [esp + 0x310], 0x21
call fcn.10025f90
add esp, 0x30
mov byte [esp + 0x2e0], 0x23
cmp dword [esp + 0x60], 8
push dword [esp + 0x5c]
lea eax, [esp + 0x50]
cmovae eax, dword [esp + 0x50]
push eax
push dword [esp + 0x7c]
lea ecx, [esp + 0x70]
push 0
call fcn.1000c780
test eax, eax
je 0x100092f7
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x80]
call fcn.1000a380
cmp dword [esp + 0x78], 8
jb 0x1000930b
push dword [esp + 0x64]
call dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
cmp dword [esp + 0x60], 8
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
jb 0x10009336
push dword [esp + 0x4c]
call dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [esp + 0x2e0], 0x1f
cmp dword [esp + 0x3c], 8
jb 0x10009352
push dword [esp + 0x28]
call dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
add esp, 4
add esi, 0x18
cmp esi, edi
jne 0x100091e5
mov esi, dword [esp + 0x40]
cmp esi, dword [esp + 0x44]
je 0x100094e4
jmp 0x10009370
xor eax, eax
push 0xffffffffffffffff
push eax
push esi
lea ecx, [esp + 0x34]
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
call fcn.1000a9a0
xor eax, eax
mov byte [esp + 0x2e0], 0x24
push 0xffffffffffffffff
push eax
mov word [esp + 0x54], ax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], 0
call fcn.1000a9a0
sub esp, 0x18
mov ecx, esp
mov byte [esp + 0x2f8], 0x25
mov dword [esp + 0x34], esp
xor eax, eax
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [esp + 0xcc]
push eax
call fcn.1000a9a0
sub esp, 0x18
mov ecx, esp
mov byte [esp + 0x310], 0x26
xor eax, eax
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [esp + 0xcc]
push eax
call fcn.1000a9a0
lea edx, [esp + 0x58]
lea ecx, [esp + 0x94]
mov byte [esp + 0x310], 0x25
call fcn.10025f90
add esp, 0x30
mov byte [esp + 0x2e0], 0x27
cmp dword [esp + 0x60], 8
push dword [esp + 0x5c]
lea eax, [esp + 0x50]
cmovae eax, dword [esp + 0x50]
push eax
push dword [esp + 0x7c]
lea ecx, [esp + 0x70]
push 0
call fcn.1000c780
test eax, eax
je 0x10009482
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x8c]
call fcn.1000a380
cmp dword [esp + 0x78], 8
mov edi, dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
jb 0x10009498
push dword [esp + 0x64]
call edi
add esp, 4
xor eax, eax
cmp dword [esp + 0x60], 8
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
jb 0x100094bf
push dword [esp + 0x4c]
call edi
add esp, 4
mov byte [esp + 0x2e0], 0x1f
cmp dword [esp + 0x3c], 8
jb 0x100094d7
push dword [esp + 0x28]
call edi
add esp, 4
add esi, 0x18
cmp esi, dword [esp + 0x44]
jne 0x10009370
mov byte [esp + 0x2e0], 0x1e
cmp dword [esp + 0xc0], 8
jb 0x10009506
push dword [esp + 0xac]
call dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
add esp, 4
add ebx, 0x18
cmp ebx, dword [esp + 0x24]
jne 0x10009160
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], esi
mov ebx, dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
cmp edi, dword [esp + 0x80]
je 0x10009595
mov esi, dword [esp + 0x18]
xor eax, eax
push 0xffffffffffffffff
push eax
push edi
lea ecx, [esp + 0x34]
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
call fcn.1000a9a0
lea eax, [esp + 0x28]
push eax
mov ecx, esi
mov byte [esp + 0x2e4], 0x28
call fcn.1000a380
mov byte [esp + 0x2e0], 0x1e
cmp dword [esp + 0x3c], 8
jb 0x10009585
push dword [esp + 0x28]
call ebx
add esp, 4
add edi, 0x18
cmp edi, dword [esp + 0x80]
jne 0x10009535
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x8c]
cmp esi, edi
je 0x100095f9
xor eax, eax
push 0xffffffffffffffff
push eax
push esi
lea ecx, [esp + 0x34]
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
call fcn.1000a9a0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2e4], 0x29
call fcn.1000a380
mov byte [esp + 0x2e0], 0x1e
cmp dword [esp + 0x3c], 8
jb 0x100095f2
push dword [esp + 0x28]
call ebx
add esp, 4
add esi, 0x18
cmp esi, edi
jne 0x100095a0
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x40]
push eax
push 3
add ecx, 0x10
call fcn.10010560
cmp dword [esp + 0xa8], 8
jb 0x10009622
push dword [esp + 0x94]
call ebx
add esp, 4
xor eax, eax
lea ecx, [esp + 0x88]
mov dword [esp + 0xa8], 7
mov dword [esp + 0xa4], 0
mov word [esp + 0x94], ax
call fcn.1000a300
lea ecx, [esp + 0x7c]
call fcn.1000a300
lea ecx, [esp + 0x40]
call fcn.1000a300
mov ecx, dword [esp + 0x2d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2c0]
xor ecx, esp
call fcn.1003e328
mov esp, ebp
pop ebp
ret 8