Function at 0x10026bd0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov eax, 0x1573
mov word [ebp - 8], ax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
movzx ecx, byte [0x1007f004]
imul edx, ecx, 0x24
mov eax, dword [ebp + 8]
sub eax, edx
mov dword [ebp - 0xc], eax
mov ecx, 4
imul edx, ecx, 0x11
mov eax, 4
imul ecx, eax, 3
mov edx, dword [edx + 0x1007f028]
add edx, dword [ecx + 0x1007f028]
cmp edx, 0x309
jne 0x10026c5e
movzx eax, word [0x1007f008]
sub eax, 0x43
movzx ecx, word [0x1007f008]
sub eax, ecx
movzx edx, word [0x1007f008]
add edx, eax
mov word [0x1007f008], dx
movzx eax, word [0x1007f008]
add eax, 1
sub eax, dword [0x1007f024]
mov word [0x1007f008], ax
jmp 0x10026ca7
movzx ecx, word [0x1007f008]
imul edx, ecx, 0x28fd
mov eax, dword [0x1007f024]
sub eax, edx
mov word [0x1007f008], ax
movzx ecx, word [0x1007f008]
sub ecx, 0x15c65
movzx edx, word [0x1007f008]
sub ecx, edx
movzx eax, word [0x1007f008]
add ecx, eax
movzx edx, word [0x1007f008]
add edx, ecx
mov word [0x1007f008], dx
mov eax, 1
imul ecx, eax, 0x11
movzx edx, byte [ecx + 0x1007f00c]
mov eax, 1
imul ecx, eax, 3
movzx eax, byte [ecx + 0x1007f00c]
add edx, eax
cmp edx, 0x309
jne 0x10026cff
movzx ecx, byte [0x1007f004]
sub ecx, 0x43
movzx edx, byte [0x1007f004]
sub ecx, edx
movzx eax, word [ebp - 8]
add eax, ecx
mov word [ebp - 8], ax
movzx ecx, byte [0x1007f004]
add ecx, 1
sub ecx, dword [ebp + 8]
mov word [ebp - 8], cx
jmp 0x10026d3d
movzx edx, byte [0x1007f004]
imul eax, edx, 0x28fd
mov ecx, dword [ebp + 8]
sub ecx, eax
mov byte [0x1007f004], cl
movzx edx, byte [0x1007f004]
sub edx, 0x15c65
movzx eax, byte [0x1007f004]
sub edx, eax
movzx ecx, word [ebp - 8]
add edx, ecx
movzx eax, word [ebp - 8]
add eax, edx
mov word [ebp - 8], ax
imul ecx, dword [0x1007f024], 0x28fd
mov edx, dword [ebp - 0xc]
sub edx, ecx
mov dword [0x1007f024], edx
mov dword [ebp - 0x10], 0x27
jmp 0x10026d64
mov eax, dword [ebp - 0x10]
sub eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jle 0x10026dcb
movzx ecx, word [0x1007f008]
mov edx, 4
imul eax, edx, 5
cmp ecx, dword [eax + 0x1007f028]
jne 0x10026d83
jmp 0x10026dcb
movzx ecx, word [0x1007f008]
sub ecx, 9
sub ecx, dword [section..data]
mov dword [0x1007f024], ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx*4 + 0x1007f028]
add eax, dword [section..data]
mov ecx, dword [ebp - 0x10]
mov dword [ecx*4 + 0x1007f028], eax
movzx edx, word [0x1007f008]
sub edx, 9
sub edx, dword [section..data]
mov dword [0x1007f024], edx
jmp 0x10026d5b
mov dword [0x1007fc10], 0x10080c50
movzx eax, word [0x1007f008]
sub eax, 9
sub eax, dword [ebp + 8]
mov word [ebp - 8], ax
mov ecx, dword [ebp - 0xc]
sub ecx, 9
movzx edx, word [0x1007f008]
sub ecx, edx
mov byte [0x1007f004], cl
mov eax, dword [ebp - 0xc]
push eax
call fcn.10020ef0
add esp, 4
mov word [ebp - 8], ax
mov ecx, 4
shl ecx, 1
mov edx, dword [ecx + 0x1007f028]
cmp edx, dword [section..data]
ja 0x10026e90
mov eax, 4
imul ecx, eax, 6
mov edx, dword [0x1007f024]
mov dword [ecx + 0x1007f028], edx
movzx eax, word [0x1007f008]
sub eax, 9
sub eax, dword [section..data]
mov dword [0x1007f024], eax
mov ecx, dword [section..data]
sub ecx, 0x15c65
sub ecx, dword [0x1007f024]
movzx edx, word [0x1007f008]
add ecx, edx
movzx eax, word [0x1007f008]
add eax, ecx
mov word [0x1007f008], ax
imul ecx, dword [0x1007f024], 0x25
add ecx, dword [section..data]
movzx edx, word [0x1007f008]
sub edx, ecx
mov word [0x1007f008], dx
movzx eax, word [0x1007f008]
movzx ecx, word [0x1007f008]
add eax, dword [0x1007f024]
add ecx, eax
mov word [0x1007f008], cx
mov dword [ebp - 0x2c], 0x1005f288
movzx edx, byte [0x1007f004]
sub edx, 0x43
movzx eax, word [0x1007f008]
sub edx, eax
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
movzx ecx, byte [0x1007f004]
add ecx, dword [ebp - 0xc]
movzx edx, word [0x1007f008]
add ecx, edx
mov byte [0x1007f004], cl
mov eax, 4
shl eax, 1
movzx ecx, word [ebp - 8]
cmp dword [eax + 0x1007f028], ecx
ja 0x10026f4d
mov edx, 4
imul eax, edx, 6
mov ecx, dword [0x1007f024]
mov dword [eax + 0x1007f028], ecx
mov edx, dword [ebp - 0xc]
sub edx, 9
movzx eax, word [ebp - 8]
sub edx, eax
mov dword [0x1007f024], edx
movzx ecx, word [ebp - 8]
sub ecx, 0x15c65
sub ecx, dword [0x1007f024]
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
movzx edx, word [ebp - 8]
imul eax, dword [0x1007f024], 0x25
add edx, eax
mov ecx, dword [ebp - 0xc]
sub ecx, edx
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.10020ef0
add esp, 4
mov word [ebp - 8], ax
movzx eax, byte [0x1007f004]
sub eax, 0x43
movzx ecx, word [0x1007f008]
sub eax, ecx
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov edx, 4
imul eax, edx, 0x11
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [eax + 0x1007f028]
add eax, dword [edx + 0x1007f028]
cmp eax, 0x309
jne 0x10026fc2
mov ecx, dword [0x1007f024]
sub ecx, 0x43
sub ecx, dword [0x1007f024]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [0x1007f024]
add edx, 1
movzx eax, word [ebp - 8]
sub edx, eax
mov dword [ebp - 0xc], edx
jmp 0x10026ff1
movzx ecx, word [ebp - 8]
imul edx, dword [0x1007f024], 0x28fd
sub ecx, edx
mov dword [0x1007f024], ecx
mov eax, dword [0x1007f024]
sub eax, 0x15c65
sub eax, dword [0x1007f024]
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
push 0xf20
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [0x1007fc10]
push edx
movzx eax, word [ebp - 8]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10020ae0
add esp, 0x14
movzx edx, word [0x1007f008]
movzx eax, byte [0x1007f004]
imul ecx, eax, 0x24
sub edx, ecx
mov dword [ebp - 0xc], edx
mov edx, 4
shl edx, 1
mov eax, dword [edx + 0x1007f028]
cmp eax, dword [section..data]
ja 0x100270ad
mov ecx, 4
imul edx, ecx, 6
mov eax, dword [0x1007f024]
mov dword [edx + 0x1007f028], eax
movzx ecx, word [0x1007f008]
sub ecx, 9
sub ecx, dword [section..data]
mov dword [0x1007f024], ecx
mov edx, dword [section..data]
sub edx, 0x15c65
sub edx, dword [0x1007f024]
movzx eax, word [0x1007f008]
add edx, eax
movzx ecx, word [0x1007f008]
add ecx, edx
mov word [0x1007f008], cx
imul edx, dword [0x1007f024], 0x25
add edx, dword [section..data]
movzx eax, word [0x1007f008]
sub eax, edx
mov word [0x1007f008], ax
movzx ecx, word [0x1007f008]
movzx edx, word [0x1007f008]
add ecx, dword [0x1007f024]
add edx, ecx
mov word [0x1007f008], dx
mov dword [ebp - 0x18], 0x1393742
mov eax, dword [ebp - 0xc]
cmp eax, dword [0x1007f024]
jb 0x10027121
mov ecx, dword [ebp - 0xc]
sub ecx, 0x45
movzx edx, word [ebp - 8]
sub ecx, edx
mov dword [0x1007f024], ecx
mov eax, 4
imul ecx, eax, 7
movzx edx, word [ebp - 8]
imul edx, dword [ecx + 0x1007f028]
mov eax, 4
imul ecx, eax, 7
mov dword [ecx + 0x1007f028], edx
mov edx, dword [ebp - 0xc]
sub edx, 9
movzx eax, word [ebp - 8]
sub edx, eax
mov dword [0x1007f024], edx
movzx ecx, word [0x1007f008]
sub ecx, 0x15c65
movzx edx, byte [0x1007f004]
sub ecx, edx
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov eax, 4
imul ecx, eax, 0xf
mov edx, dword [ecx + 0x1007f028]
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0
je 0x10027159
jmp 0x10027179
mov eax, dword [section..data]
sub eax, 0x43
sub eax, dword [0x1007f024]
movzx ecx, word [0x1007f008]
add ecx, eax
mov word [0x1007f008], cx
jmp 0x100271a0
mov edx, dword [section..data]
sub edx, 0x15c65
movzx eax, word [0x1007f008]
sub edx, eax
add edx, dword [0x1007f024]
add edx, dword [0x1007f024]
mov dword [0x1007f024], edx
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.100208d0
add esp, 4
mov word [ebp - 8], ax
mov edx, dword [0x1007f024]
sub edx, 0x15c65
movzx eax, word [0x1007f008]
sub edx, eax
movzx ecx, word [0x1007f008]
add edx, ecx
movzx eax, word [0x1007f008]
add eax, edx
mov word [0x1007f008], ax
movzx ecx, word [0x1007f008]
sub ecx, 0x15c65
movzx edx, byte [0x1007f004]
sub ecx, edx
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x24], 0x10
mov dword [ebp - 0x20], 0x9c
movzx eax, byte [0x1007f004]
sub eax, 0x43
movzx ecx, word [0x1007f008]
sub eax, ecx
add eax, dword [section..data]
mov dword [section..data], eax
mov dword [ebp - 0x10], 3
jmp 0x1002723a
mov edx, dword [ebp - 0x10]
add edx, 2
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], 0x1a
jge 0x100272a8
mov eax, 4
shl eax, 1
mov ecx, dword [0x1007f024]
cmp ecx, dword [eax + 0x1007f028]
jne 0x10027257
jmp 0x100272a8
movzx edx, word [0x1007f008]
mov eax, dword [ebp - 0x10]
sub edx, dword [eax*4 + 0x1007f028]
mov word [0x1007f008], dx
mov ecx, dword [0x1007f024]
sub ecx, 0x43
sub ecx, dword [section..data]
movzx edx, word [0x1007f008]
add edx, ecx
mov word [0x1007f008], dx
mov eax, 4
imul ecx, eax, 9
mov edx, dword [0x1007f024]
cmp edx, dword [ecx + 0x1007f028]
jne 0x100272a6
jmp 0x100272a8
jmp 0x10027231
movzx eax, word [0x1007f008]
sub eax, 0x43
sub eax, dword [0x1007f024]
movzx ecx, word [0x1007f008]
add ecx, eax
mov word [0x1007f008], cx
mov dword [ebp - 0x14], 0xa4
mov edx, dword [0x1007f024]
sub edx, 0x15c65
movzx eax, word [0x1007f008]
sub edx, eax
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], 0
mov ecx, 4
shl ecx, 4
cmp dword [ecx + 0x1007f028], 0x1c72
jne 0x10027335
mov edx, 4
shl edx, 1
mov eax, dword [0x1007f024]
add eax, dword [edx + 0x1007f028]
mov dword [0x1007f024], eax
imul ecx, dword [0x1007f024], 0x24
mov edx, dword [0x1007f024]
sub edx, ecx
mov word [0x1007f008], dx
mov eax, dword [0x1007f024]
sub eax, 0x15c65
movzx ecx, word [0x1007f008]
sub eax, ecx
movzx edx, word [0x1007f008]
add eax, edx
movzx ecx, word [0x1007f008]
add ecx, eax
mov word [0x1007f008], cx
mov edx, 4
imul eax, edx, 0xf
mov ecx, dword [eax + 0x1007f028]
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 0
je 0x1002737a
jmp 0x10027397
movzx edx, word [ebp - 8]
sub edx, 0x43
sub edx, dword [0x1007f024]
movzx eax, byte [0x1007f004]
add eax, edx
mov byte [0x1007f004], al
jmp 0x100273bc
movzx ecx, word [ebp - 8]
sub ecx, 0x15c65
movzx edx, byte [0x1007f004]
sub ecx, edx
add ecx, dword [0x1007f024]
add ecx, dword [0x1007f024]
mov dword [0x1007f024], ecx
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x10], 3
jmp 0x100273d5
mov eax, dword [ebp - 0x10]
add eax, 2
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x1a
jge 0x10027440
mov ecx, 4
shl ecx, 1
mov edx, dword [0x1007f024]
cmp edx, dword [ecx + 0x1007f028]
jne 0x100273f2
jmp 0x10027440
movzx eax, word [0x1007f008]
mov ecx, dword [ebp - 0x10]
sub eax, dword [ecx*4 + 0x1007f028]
mov word [0x1007f008], ax
mov edx, dword [0x1007f024]
sub edx, 0x43
sub edx, dword [section..data]
movzx eax, word [0x1007f008]
add eax, edx
mov word [0x1007f008], ax
mov ecx, 4
imul edx, ecx, 9
mov eax, dword [0x1007f024]
cmp eax, dword [edx + 0x1007f028]
jne 0x1002743e
jmp 0x10027440
jmp 0x100273cc
movzx ecx, word [0x1007f008]
add ecx, 1
sub ecx, dword [0x1007f024]
mov word [0x1007f008], cx
mov edx, 4
shl edx, 1
movzx eax, word [ebp - 8]
cmp dword [edx + 0x1007f028], eax
ja 0x100274d6
mov ecx, 4
imul edx, ecx, 6
mov eax, dword [0x1007f024]
mov dword [edx + 0x1007f028], eax
movzx ecx, byte [0x1007f004]
sub ecx, 9
movzx edx, word [ebp - 8]
sub ecx, edx
mov dword [0x1007f024], ecx
movzx eax, word [ebp - 8]
sub eax, 0x15c65
sub eax, dword [0x1007f024]
movzx ecx, byte [0x1007f004]
add eax, ecx
movzx edx, byte [0x1007f004]
add edx, eax
mov byte [0x1007f004], dl
movzx eax, word [ebp - 8]
imul ecx, dword [0x1007f024], 0x25
add eax, ecx
movzx edx, byte [0x1007f004]
sub edx, eax
mov byte [0x1007f004], dl
mov byte [ebp - 1], 1
mov dword [ebp - 0x10], 0x27
jmp 0x100274ec
mov eax, dword [ebp - 0x10]
sub eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jle 0x10027553
movzx ecx, word [0x1007f008]
mov edx, 4
imul eax, edx, 5
cmp ecx, dword [eax + 0x1007f028]
jne 0x1002750b
jmp 0x10027553
movzx ecx, word [0x1007f008]
sub ecx, 9
sub ecx, dword [section..data]
mov dword [0x1007f024], ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx*4 + 0x1007f028]
add eax, dword [section..data]
mov ecx, dword [ebp - 0x10]
mov dword [ecx*4 + 0x1007f028], eax
movzx edx, word [0x1007f008]
sub edx, 9
sub edx, dword [section..data]
mov dword [0x1007f024], edx
jmp 0x100274e3
movzx eax, word [0x1007f008]
imul ecx, eax, 0x28fd
mov edx, dword [0x1007f024]
sub edx, ecx
mov word [0x1007f008], dx
mov eax, 4
shl eax, 4
cmp dword [eax + 0x1007f028], 0x1c72
jne 0x100275b1
mov ecx, 4
shl ecx, 1
mov edx, dword [0x1007f024]
add edx, dword [ecx + 0x1007f028]
mov dword [0x1007f024], edx
imul eax, dword [0x1007f024], 0x24
mov ecx, dword [0x1007f024]
sub ecx, eax
mov byte [0x1007f004], cl
mov edx, 1
test edx, edx
je 0x10027ba3
mov eax, dword [ebp - 0xc]
sub eax, 0x45
movzx ecx, word [0x1007f008]
sub eax, ecx
mov byte [0x1007f004], al
mov edx, 4
shl edx, 4
cmp dword [edx + 0x1007f028], 0x1c72
jne 0x10027612
mov eax, 4
shl eax, 1
mov ecx, dword [0x1007f024]
add ecx, dword [eax + 0x1007f028]
mov dword [0x1007f024], ecx
imul edx, dword [0x1007f024], 0x24
mov eax, dword [0x1007f024]
sub eax, edx
mov byte [0x1007f004], al
movzx ecx, word [0x1007f008]
imul edx, ecx, 0x25
add edx, dword [0x1007f024]
movzx eax, word [0x1007f008]
sub eax, edx
mov word [0x1007f008], ax
mov ecx, 4
imul edx, ecx, 0x11
mov eax, 4
imul ecx, eax, 3
mov edx, dword [edx + 0x1007f028]
add edx, dword [ecx + 0x1007f028]
cmp edx, 0x309
jne 0x10027683
movzx eax, word [0x1007f008]
sub eax, 0x43
movzx ecx, word [0x1007f008]
sub eax, ecx
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
movzx edx, word [0x1007f008]
add edx, 1
sub edx, dword [0x1007f024]
mov dword [ebp - 0xc], edx
jmp 0x100276bd
movzx eax, word [0x1007f008]
imul ecx, eax, 0x28fd
mov edx, dword [0x1007f024]
sub edx, ecx
mov word [0x1007f008], dx
movzx eax, word [0x1007f008]
sub eax, 0x15c65
movzx ecx, word [0x1007f008]
sub eax, ecx
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
movzx edx, word [0x1007f008]
movzx eax, word [ebp - 8]
cmp edx, eax
jle 0x1002779a
movzx ecx, word [0x1007f008]
sub ecx, 9
sub ecx, dword [0x1007f024]
mov dword [section..data], ecx
movzx edx, word [0x1007f008]
imul eax, edx, 0x28fd
mov ecx, dword [0x1007f024]
sub ecx, eax
mov word [0x1007f008], cx
movzx edx, word [0x1007f008]
sub edx, 0x15c65
movzx eax, byte [0x1007f004]
sub edx, eax
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
movzx ecx, word [ebp - 8]
test ecx, ecx
jne 0x10027732
mov dword [ebp - 0x28], 1
jmp 0x10027739
mov dword [ebp - 0x28], 0
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x1002779a
movzx eax, word [0x1007f008]
movzx ecx, byte [0x1007f004]
imul edx, ecx, 0x24
sub eax, edx
mov dword [ebp - 0xc], eax
mov eax, 4
shl eax, 4
cmp dword [eax + 0x1007f028], 0x1c72
jne 0x1002779a
mov ecx, 4
shl ecx, 1
mov edx, dword [section..data]
add edx, dword [ecx + 0x1007f028]
mov dword [section..data], edx
imul eax, dword [section..data], 0x24
mov ecx, dword [section..data]
sub ecx, eax
mov dword [ebp - 0xc], ecx
movzx edx, word [0x1007f008]
imul eax, edx, 0x28fd
mov ecx, dword [0x1007f024]
sub ecx, eax
mov word [0x1007f008], cx
movzx edx, word [0x1007f008]
movzx eax, byte [0x1007f004]
imul ecx, eax, 0x24
sub edx, ecx
mov dword [ebp - 0xc], edx
movzx edx, word [0x1007f008]
cmp dword [ebp - 0xc], edx
jae 0x10027821
movzx eax, word [0x1007f008]
movzx ecx, byte [0x1007f004]
imul edx, ecx, 0x28fd
sub eax, edx
mov byte [0x1007f004], al
movzx eax, word [0x1007f008]
add eax, 1
sub eax, dword [0x1007f024]
mov word [0x1007f008], ax
movzx ecx, byte [0x1007f004]
add ecx, 1
movzx edx, word [0x1007f008]
sub ecx, edx
mov dword [ebp - 0xc], ecx
jmp 0x10027871
mov eax, dword [ebp - 0xc]
cmp eax, dword [0x1007f024]
jb 0x10027871
mov ecx, dword [ebp - 0xc]
sub ecx, 0x45
movzx edx, word [ebp - 8]
sub ecx, edx
mov dword [0x1007f024], ecx
mov eax, 4
imul ecx, eax, 7
movzx edx, word [ebp - 8]
imul edx, dword [ecx + 0x1007f028]
mov eax, 4
imul ecx, eax, 7
mov dword [ecx + 0x1007f028], edx
mov edx, dword [ebp - 0xc]
sub edx, 9
movzx eax, word [ebp - 8]
sub edx, eax
mov dword [0x1007f024], edx
cmp dword [ebp - 0x18], 1
jae 0x10027a43
movzx ecx, byte [0x1007f004]
cmp dword [ebp - 0xc], ecx
jb 0x100278d4
mov edx, dword [ebp - 0xc]
sub edx, 0x45
movzx eax, word [0x1007f008]
sub edx, eax
mov byte [0x1007f004], dl
mov ecx, 4
imul edx, ecx, 7
movzx eax, word [0x1007f008]
imul eax, dword [edx + 0x1007f028]
mov ecx, 4
imul edx, ecx, 7
mov dword [edx + 0x1007f028], eax
mov eax, dword [ebp - 0xc]
sub eax, 9
movzx ecx, word [0x1007f008]
sub eax, ecx
mov byte [0x1007f004], al
movzx edx, byte [0x1007f004]
sub edx, 0x43
movzx eax, word [0x1007f008]
sub edx, eax
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
movzx ecx, word [0x1007f008]
cmp dword [ebp - 0xc], ecx
jbe 0x100279c3
mov edx, dword [ebp - 0xc]
sub edx, 9
movzx eax, word [0x1007f008]
sub edx, eax
mov byte [0x1007f004], dl
movzx ecx, word [0x1007f008]
imul edx, ecx, 0x25
add edx, dword [0x1007f024]
movzx eax, word [0x1007f008]
sub eax, edx
mov word [0x1007f008], ax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x45
movzx edx, word [0x1007f008]
sub ecx, edx
mov byte [0x1007f004], cl
mov eax, 4
imul ecx, eax, 0x11
mov edx, 4
imul eax, edx, 3
mov ecx, dword [ecx + 0x1007f028]
add ecx, dword [eax + 0x1007f028]
cmp ecx, 0x309
jne 0x10027992
mov edx, dword [section..data]
sub edx, 0x43
sub edx, dword [section..data]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov eax, dword [section..data]
add eax, 1
sub eax, dword [0x1007f024]
mov dword [ebp - 0xc], eax
jmp 0x100279c3
imul ecx, dword [section..data], 0x28fd
mov edx, dword [0x1007f024]
sub edx, ecx
mov dword [section..data], edx
mov eax, dword [section..data]
sub eax, 0x15c65
sub eax, dword [section..data]
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
movzx ecx, word [0x1007f008]
cmp ecx, dword [0x1007f024]
jb 0x10027a21
movzx edx, word [0x1007f008]
sub edx, 0x45
sub edx, dword [section..data]
mov dword [0x1007f024], edx
mov eax, 4
imul ecx, eax, 7
mov edx, dword [ecx + 0x1007f028]
imul edx, dword [section..data]
mov eax, 4
imul ecx, eax, 7
mov dword [ecx + 0x1007f028], edx
movzx edx, word [0x1007f008]
sub edx, 9
sub edx, dword [section..data]
mov dword [0x1007f024], edx
movzx eax, word [0x1007f008]
movzx ecx, word [0x1007f008]
add eax, dword [0x1007f024]
add ecx, eax
mov word [0x1007f008], cx
jmp 0x10027ba3
movzx edx, word [0x1007f008]
imul eax, edx, 0x28fd
mov ecx, dword [0x1007f024]
sub ecx, eax
mov word [0x1007f008], cx
movzx edx, word [0x1007f008]
movzx eax, byte [0x1007f004]
imul ecx, eax, 0x28fd
sub edx, ecx
mov byte [0x1007f004], dl
call fcn.10026890
mov edx, 4
imul eax, edx, 0xf
mov ecx, dword [eax + 0x1007f028]
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0
je 0x10027a99
jmp 0x10027ab4
movzx edx, word [0x1007f008]
sub edx, 0x43
movzx eax, byte [0x1007f004]
sub edx, eax
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
jmp 0x10027adb
movzx ecx, word [0x1007f008]
sub ecx, 0x15c65
sub ecx, dword [ebp - 0xc]
movzx edx, byte [0x1007f004]
add ecx, edx
movzx eax, byte [0x1007f004]
add eax, ecx
mov byte [0x1007f004], al
movzx ecx, word [0x1007f008]
add ecx, 1
sub ecx, dword [0x1007f024]
mov word [0x1007f008], cx
movzx edx, word [0x1007f008]
movzx eax, byte [0x1007f004]
imul ecx, eax, 0x28fd
sub edx, ecx
mov byte [0x1007f004], dl
mov edx, dword [ebp - 0x18]
sub edx, 1
mov dword [ebp - 0x18], edx
movzx eax, word [ebp - 8]
add eax, 1
sub eax, dword [section..data]
mov dword [ebp - 0xc], eax
mov ecx, dword [0x1007f024]
sub ecx, 0x15c65
movzx edx, word [ebp - 8]
sub ecx, edx
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov eax, 4
imul ecx, eax, 0xf
mov edx, dword [ecx + 0x1007f028]
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0
je 0x10027b5b
jmp 0x10027b76
movzx eax, word [0x1007f008]
sub eax, 0x43
movzx ecx, byte [0x1007f004]
sub eax, ecx
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
jmp 0x10027b9e
movzx edx, word [0x1007f008]
sub edx, 0x15c65
sub edx, dword [ebp - 0xc]
movzx eax, byte [0x1007f004]
add edx, eax
movzx ecx, byte [0x1007f004]
add ecx, edx
mov byte [0x1007f004], cl
jmp 0x100275b1
movzx edx, word [ebp - 8]
imul eax, edx, 0x25
add eax, dword [0x1007f024]
mov ecx, dword [ebp - 0xc]
sub ecx, eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x18], 0x1393742
movzx edx, word [0x1007f008]
imul eax, dword [0x1007f024], 0x25
add edx, eax
mov ecx, dword [ebp - 0xc]
sub ecx, edx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], 0x27
jmp 0x10027be9
mov edx, dword [ebp - 0x10]
sub edx, 1
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], 2
jle 0x10027c51
movzx eax, word [0x1007f008]
mov ecx, 1
imul edx, ecx, 5
movzx ecx, byte [edx + 0x1007f00c]
cmp eax, ecx
jne 0x10027c0b
jmp 0x10027c51
movzx edx, word [0x1007f008]
sub edx, 9
sub edx, dword [section..data]
mov byte [0x1007f004], dl
mov eax, dword [ebp - 0x10]
movzx ecx, byte [eax + 0x1007f00c]
add ecx, dword [section..data]
mov edx, dword [ebp - 0x10]
mov byte [edx + 0x1007f00c], cl
movzx eax, word [0x1007f008]
sub eax, 9
sub eax, dword [section..data]
mov byte [0x1007f004], al
jmp 0x10027be0
movzx ecx, word [ebp - 8]
cmp dword [0x1007f024], ecx
jb 0x10027c9d
mov edx, dword [0x1007f024]
sub edx, 0x45
sub edx, dword [ebp - 0xc]
mov word [ebp - 8], dx
mov eax, 4
imul ecx, eax, 7
mov edx, dword [ecx + 0x1007f028]
imul edx, dword [ebp - 0xc]
mov eax, 4
imul ecx, eax, 7
mov dword [ecx + 0x1007f028], edx
mov edx, dword [0x1007f024]
sub edx, 9
sub edx, dword [ebp - 0xc]
mov word [ebp - 8], dx
movzx eax, word [0x1007f008]
movzx ecx, byte [0x1007f004]
cmp eax, ecx
jl 0x10027cf6
movzx edx, word [0x1007f008]
sub edx, 0x45
sub edx, dword [ebp - 0xc]
mov byte [0x1007f004], dl
mov eax, 1
imul ecx, eax, 7
movzx edx, byte [ecx + 0x1007f00c]
imul edx, dword [ebp - 0xc]
mov eax, 1
imul ecx, eax, 7
mov byte [ecx + 0x1007f00c], dl
movzx edx, word [0x1007f008]
sub edx, 9
sub edx, dword [ebp - 0xc]
mov byte [0x1007f004], dl
mov eax, 0x10073f08
sub eax, 0x10097138
add eax, 0x1005f288
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
movzx ecx, word [0x1007f008]
movzx edx, byte [0x1007f004]
imul eax, edx, 0x28fd
sub ecx, eax
mov byte [0x1007f004], cl
movzx ecx, byte [0x1007f004]
cmp dword [ebp - 0xc], ecx
jb 0x10027d84
mov edx, dword [ebp - 0xc]
sub edx, 0x45
movzx eax, word [0x1007f008]
sub edx, eax
mov byte [0x1007f004], dl
mov ecx, 1
imul edx, ecx, 7
movzx eax, word [0x1007f008]
movzx ecx, byte [edx + 0x1007f00c]
imul ecx, eax
mov edx, 1
imul eax, edx, 7
mov byte [eax + 0x1007f00c], cl
mov ecx, dword [ebp - 0xc]
sub ecx, 9
movzx edx, word [0x1007f008]
sub ecx, edx
mov byte [0x1007f004], cl
mov eax, 1
test eax, eax
je 0x1002883f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, dword [0x1007f024]
sub edx, 0x15c65
movzx eax, word [ebp - 8]
sub edx, eax
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov ecx, 4
shl ecx, 1
movzx edx, word [0x1007f008]
cmp dword [ecx + 0x1007f028], edx
ja 0x10027e2e
movzx eax, byte [0x1007f004]
mov ecx, 4
imul edx, ecx, 6
mov dword [edx + 0x1007f028], eax
mov eax, dword [ebp - 0xc]
sub eax, 9
movzx ecx, word [0x1007f008]
sub eax, ecx
mov byte [0x1007f004], al
movzx edx, word [0x1007f008]
sub edx, 0x15c65
movzx eax, byte [0x1007f004]
sub edx, eax
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
movzx ecx, word [0x1007f008]
movzx edx, byte [0x1007f004]
imul eax, edx, 0x25
add ecx, eax
mov edx, dword [ebp - 0xc]
sub edx, ecx
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0x13b73
jbe 0x10027e91
movzx eax, word [ebp - 8]
imul ecx, eax, 0x28fd
mov edx, dword [0x1007f024]
sub edx, ecx
mov word [ebp - 8], dx
mov eax, 4
shl eax, 4
cmp dword [eax + 0x1007f028], 0x1c72
jne 0x10027e91
mov ecx, 4
shl ecx, 1
movzx edx, byte [0x1007f004]
add edx, dword [ecx + 0x1007f028]
mov byte [0x1007f004], dl
movzx eax, byte [0x1007f004]
movzx ecx, byte [0x1007f004]
imul edx, ecx, 0x24
sub eax, edx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x1c], 0x59
jge 0x10027f87
movzx eax, word [ebp - 8]
add eax, 1
sub eax, dword [0x1007f024]
mov dword [ebp - 0xc], eax
movzx ecx, word [0x1007f008]
movzx edx, byte [0x1007f004]
cmp ecx, edx
jl 0x10027f01
movzx eax, word [0x1007f008]
sub eax, 0x45
sub eax, dword [ebp - 0x1c]
mov byte [0x1007f004], al
mov ecx, 4
imul edx, ecx, 7
mov eax, dword [edx + 0x1007f028]
imul eax, dword [ebp - 0x1c]
mov ecx, 4
imul edx, ecx, 7
mov dword [edx + 0x1007f028], eax
movzx eax, word [0x1007f008]
sub eax, 9
sub eax, dword [ebp - 0x1c]
mov byte [0x1007f004], al
push 0x100801e0
push 0x57a
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 9
sub ecx, dword [0x1007f024]
mov word [ebp - 8], cx
mov edx, 4
imul eax, edx, 0xf
mov ecx, dword [eax + 0x1007f028]
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0
je 0x10027f3d
jmp 0x10027f5e
mov edx, dword [ebp - 0x1c]
sub edx, 0x43
movzx eax, byte [0x1007f004]
sub edx, eax
movzx ecx, word [0x1007f008]
add ecx, edx
mov word [0x1007f008], cx
jmp 0x10027f87
mov edx, dword [ebp - 0x1c]
sub edx, 0x15c65
movzx eax, word [0x1007f008]
sub edx, eax
movzx ecx, byte [0x1007f004]
add edx, ecx
movzx eax, byte [0x1007f004]
add eax, edx
mov byte [0x1007f004], al
mov ecx, 4
imul edx, ecx, 0x11
mov eax, 4
imul ecx, eax, 3
mov edx, dword [edx + 0x1007f028]
add edx, dword [ecx + 0x1007f028]
cmp edx, 0x309
jne 0x10027fd3
mov eax, dword [section..data]
sub eax, 0x43
sub eax, dword [section..data]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [section..data]
add ecx, 1
sub ecx, dword [0x1007f024]
mov dword [ebp - 0xc], ecx
jmp 0x10028004
imul edx, dword [section..data], 0x28fd
mov eax, dword [0x1007f024]
sub eax, edx
mov dword [section..data], eax
mov ecx, dword [section..data]
sub ecx, 0x15c65
sub ecx, dword [section..data]
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
movzx edx, word [ebp - 8]
sub edx, 0x43
sub edx, dword [0x1007f024]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
movzx eax, byte [0x1007f004]
cmp dword [ebp - 0xc], eax
jb 0x10028071
mov ecx, dword [ebp - 0xc]
sub ecx, 0x45
movzx edx, word [0x1007f008]
sub ecx, edx
mov byte [0x1007f004], cl
mov eax, 4
imul ecx, eax, 7
movzx edx, word [0x1007f008]
imul edx, dword [ecx + 0x1007f028]
mov eax, 4
imul ecx, eax, 7
mov dword [ecx + 0x1007f028], edx
mov edx, dword [ebp - 0xc]
sub edx, 9
movzx eax, word [0x1007f008]
sub edx, eax
mov byte [0x1007f004], dl
cmp dword [ebp - 0x20], 4
jae 0x1002809f
movzx ecx, word [ebp - 8]
add ecx, 1
sub ecx, dword [0x1007f024]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x20]
sub edx, 1
mov dword [ebp - 0x20], edx
mov eax, dword [section..data]
sub eax, 9
sub eax, dword [ebp - 0x20]
mov word [ebp - 8], ax
mov ecx, 4
shl ecx, 4
cmp dword [ecx + 0x1007f028], 0x1c72
jne 0x100280e2
mov edx, 4
shl edx, 1
movzx eax, byte [0x1007f004]
add eax, dword [edx + 0x1007f028]
mov byte [0x1007f004], al
movzx ecx, byte [0x1007f004]
movzx edx, byte [0x1007f004]
imul eax, edx, 0x24
sub ecx, eax
mov dword [ebp - 0xc], ecx
mov ecx, 4
imul edx, ecx, 0xf
mov eax, dword [edx + 0x1007f028]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x100280fb
jmp 0x10028115
mov ecx, dword [0x1007f024]
sub ecx, 0x43
movzx edx, word [0x1007f008]
sub ecx, edx
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
jmp 0x1002813b
mov eax, dword [0x1007f024]
sub eax, 0x15c65
sub eax, dword [ebp - 0xc]
movzx ecx, word [0x1007f008]
add eax, ecx
movzx edx, word [0x1007f008]
add edx, eax
mov word [0x1007f008], dx
movzx eax, word [ebp - 8]
cmp eax, 0x23c
jle 0x100282e1
movzx ecx, word [ebp - 8]
imul edx, ecx, 0x24
mov eax, dword [0x1007f024]
sub eax, edx
mov dword [ebp - 0xc], eax
movzx ecx, word [0x1007f008]
cmp dword [section..data], ecx
jne 0x1002826e
mov edx, 4
shl edx, 1
movzx eax, word [0x1007f008]
cmp dword [edx + 0x1007f028], eax
ja 0x100281e7
movzx ecx, byte [0x1007f004]
mov edx, 4
imul eax, edx, 6
mov dword [eax + 0x1007f028], ecx
mov ecx, dword [ebp - 0xc]
sub ecx, 9
movzx edx, word [0x1007f008]
sub ecx, edx
mov byte [0x1007f004], cl
movzx eax, word [0x1007f008]
sub eax, 0x15c65
movzx ecx, byte [0x1007f004]
sub eax, ecx
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
movzx edx, word [0x1007f008]
movzx eax, byte [0x1007f004]
imul ecx, eax, 0x25
add edx, ecx
mov eax, dword [ebp - 0xc]
sub eax, edx
mov dword [ebp - 0xc], eax
movzx ecx, word [ebp - 8]
push ecx
call fcn.100208d0
add esp, 4
mov dword [ebp - 0xc], eax
movzx edx, word [0x1007f008]
cmp dword [0x1007f024], edx
jb 0x1002825a
mov eax, dword [0x1007f024]
sub eax, 0x45
movzx ecx, byte [0x1007f004]
sub eax, ecx
mov word [0x1007f008], ax
mov edx, 4
imul eax, edx, 7
movzx ecx, byte [0x1007f004]
imul ecx, dword [eax + 0x1007f028]
mov edx, 4
imul eax, edx, 7
mov dword [eax + 0x1007f028], ecx
mov ecx, dword [0x1007f024]
sub ecx, 9
movzx edx, byte [0x1007f004]
sub ecx, edx
mov word [0x1007f008], cx
mov eax, dword [ebp - 0xc]
sub eax, 0x45
movzx ecx, word [0x1007f008]
sub eax, ecx
mov byte [0x1007f004], al
mov edx, 4
shl edx, 1
mov eax, dword [edx + 0x1007f028]
cmp eax, dword [0x1007f024]
ja 0x100282e1
movzx ecx, word [0x1007f008]
mov edx, 4
imul eax, edx, 6
mov dword [eax + 0x1007f028], ecx
mov ecx, dword [ebp - 0xc]
sub ecx, 9
sub ecx, dword [0x1007f024]
mov word [0x1007f008], cx
mov edx, dword [0x1007f024]
sub edx, 0x15c65
movzx eax, word [0x1007f008]
sub edx, eax
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
movzx ecx, word [0x1007f008]
imul edx, ecx, 0x25
add edx, dword [0x1007f024]
mov eax, dword [ebp - 0xc]
sub eax, edx
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [0x1007f024]
jb 0x10028330
mov edx, dword [ebp - 0xc]
sub edx, 0x45
movzx eax, word [ebp - 8]
sub edx, eax
mov dword [0x1007f024], edx
mov ecx, 4
imul edx, ecx, 7
movzx eax, word [ebp - 8]
imul eax, dword [edx + 0x1007f028]
mov ecx, 4
imul edx, ecx, 7
mov dword [edx + 0x1007f028], eax
mov eax, dword [ebp - 0xc]
sub eax, 9
movzx ecx, word [ebp - 8]
sub eax, ecx
mov dword [0x1007f024], eax
cmp dword [ebp - 0x14], 0xb
jae 0x1002841e
mov edx, 4
imul eax, edx, 0xf
mov ecx, dword [eax + 0x1007f028]
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 0
je 0x10028353
jmp 0x1002836a
mov edx, dword [0x1007f024]
sub edx, 0x43
movzx eax, word [ebp - 8]
sub edx, eax
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
jmp 0x10028389
mov ecx, dword [0x1007f024]
sub ecx, 0x15c65
sub ecx, dword [ebp - 0xc]
movzx edx, word [ebp - 8]
add ecx, edx
movzx eax, word [ebp - 8]
add eax, ecx
mov word [ebp - 8], ax
mov ecx, 4
shl ecx, 4
cmp dword [ecx + 0x1007f028], 0x1c72
jne 0x100283c9
mov edx, 4
shl edx, 1
mov eax, dword [0x1007f024]
add eax, dword [edx + 0x1007f028]
mov dword [0x1007f024], eax
imul ecx, dword [0x1007f024], 0x24
mov edx, dword [0x1007f024]
sub edx, ecx
mov dword [section..data], edx
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x14], eax
movzx ecx, word [ebp - 8]
cmp dword [section..data], ecx
jb 0x1002841e
mov edx, dword [section..data]
sub edx, 0x45
sub edx, dword [ebp - 0x14]
mov word [ebp - 8], dx
mov eax, 4
imul ecx, eax, 7
mov edx, dword [ecx + 0x1007f028]
imul edx, dword [ebp - 0x14]
mov eax, 4
imul ecx, eax, 7
mov dword [ecx + 0x1007f028], edx
mov edx, dword [section..data]
sub edx, 9
sub edx, dword [ebp - 0x14]
mov word [ebp - 8], dx
movzx eax, word [0x1007f008]
movzx ecx, word [ebp - 8]
cmp eax, ecx
jl 0x1002847f
movzx edx, word [0x1007f008]
sub edx, 0x45
movzx eax, byte [0x1007f004]
sub edx, eax
mov word [ebp - 8], dx
mov ecx, 4
imul edx, ecx, 7
movzx eax, byte [0x1007f004]
imul eax, dword [edx + 0x1007f028]
mov ecx, 4
imul edx, ecx, 7
mov dword [edx + 0x1007f028], eax
movzx eax, word [0x1007f008]
sub eax, 9
movzx ecx, byte [0x1007f004]
sub eax, ecx
mov word [ebp - 8], ax
mov edx, 4
imul eax, edx, 0xf
mov ecx, dword [eax + 0x1007f028]
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0
je 0x10028498
jmp 0x100284b2
mov edx, dword [0x1007f024]
sub edx, 0x43
movzx eax, word [0x1007f008]
sub edx, eax
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
jmp 0x100284d9
mov ecx, dword [0x1007f024]
sub ecx, 0x15c65
sub ecx, dword [ebp - 0xc]
movzx edx, word [0x1007f008]
add ecx, edx
movzx eax, word [0x1007f008]
add eax, ecx
mov word [0x1007f008], ax
cmp dword [ebp - 0x18], 0
ja 0x100285af
movzx ecx, word [ebp - 8]
imul edx, ecx, 0x24
mov eax, dword [0x1007f024]
sub eax, edx
mov dword [ebp - 0xc], eax
movzx ecx, word [ebp - 8]
movzx edx, word [0x1007f008]
add ecx, dword [ebp + 8]
add edx, ecx
mov word [0x1007f008], dx
mov eax, 4
imul ecx, eax, 0x11
mov edx, 4
imul eax, edx, 3
mov ecx, dword [ecx + 0x1007f028]
add ecx, dword [eax + 0x1007f028]
cmp ecx, 0x309
jne 0x10028569
movzx edx, byte [0x1007f004]
sub edx, 0x43
movzx eax, byte [0x1007f004]
sub edx, eax
add edx, dword [0x1007f024]
mov dword [0x1007f024], edx
movzx ecx, byte [0x1007f004]
add ecx, 1
movzx edx, word [0x1007f008]
sub ecx, edx
mov dword [0x1007f024], ecx
jmp 0x100285aa
movzx eax, word [0x1007f008]
movzx ecx, byte [0x1007f004]
imul edx, ecx, 0x28fd
sub eax, edx
mov byte [0x1007f004], al
movzx eax, byte [0x1007f004]
sub eax, 0x15c65
movzx ecx, byte [0x1007f004]
sub eax, ecx
add eax, dword [0x1007f024]
add eax, dword [0x1007f024]
mov dword [0x1007f024], eax
jmp 0x1002883f
mov edx, dword [ebp - 0x18]
sub edx, 0x15c65
sub edx, dword [section..data]
add edx, dword [0x1007f024]
add edx, dword [0x1007f024]
mov dword [0x1007f024], edx
call fcn.10026890
mov eax, 4
imul ecx, eax, 0x11
mov edx, 4
imul eax, edx, 3
mov ecx, dword [ecx + 0x1007f028]
add ecx, dword [eax + 0x1007f028]
cmp ecx, 0x309
jne 0x1002862f
mov edx, dword [0x1007f024]
sub edx, 0x43
sub edx, dword [0x1007f024]
movzx eax, word [0x1007f008]
add eax, edx
mov word [0x1007f008], ax
mov ecx, dword [0x1007f024]
add ecx, 1
movzx edx, word [ebp - 8]
sub ecx, edx
mov word [0x1007f008], cx
jmp 0x1002866f
movzx eax, word [ebp - 8]
imul ecx, dword [0x1007f024], 0x28fd
sub eax, ecx
mov dword [0x1007f024], eax
mov edx, dword [0x1007f024]
sub edx, 0x15c65
sub edx, dword [0x1007f024]
movzx eax, word [0x1007f008]
add edx, eax
movzx ecx, word [0x1007f008]
add ecx, edx
mov word [0x1007f008], cx
movzx edx, word [0x1007f008]
sub edx, 0x43
sub edx, dword [0x1007f024]
movzx eax, word [0x1007f008]
add eax, edx
mov word [0x1007f008], ax
mov ecx, dword [ebp - 0x18]
sub ecx, 1
mov dword [ebp - 0x18], ecx
movzx edx, word [0x1007f008]
add edx, dword [section..data]
add edx, dword [ebp - 0x24]
mov word [0x1007f008], dx
cmp dword [ebp - 0x24], 6
jae 0x100287c5
mov eax, 4
imul ecx, eax, 0x11
mov edx, 4
imul eax, edx, 3
mov ecx, dword [ecx + 0x1007f028]
add ecx, dword [eax + 0x1007f028]
cmp ecx, 0x309
jne 0x10028701
movzx edx, word [ebp - 8]
sub edx, 0x43
movzx eax, word [ebp - 8]
sub edx, eax
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
movzx ecx, word [ebp - 8]
add ecx, 1
sub ecx, dword [0x1007f024]
mov dword [ebp - 0xc], ecx
jmp 0x10028730
movzx edx, word [ebp - 8]
imul eax, edx, 0x28fd
mov ecx, dword [0x1007f024]
sub ecx, eax
mov word [ebp - 8], cx
movzx edx, word [ebp - 8]
sub edx, 0x15c65
movzx eax, word [ebp - 8]
sub edx, eax
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, 4
imul eax, edx, 0x11
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [eax + 0x1007f028]
add eax, dword [edx + 0x1007f028]
cmp eax, 0x309
jne 0x1002878a
movzx ecx, word [0x1007f008]
sub ecx, 0x43
movzx edx, word [0x1007f008]
sub ecx, edx
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
movzx eax, word [0x1007f008]
add eax, 1
sub eax, dword [0x1007f024]
mov dword [ebp - 0xc], eax
jmp 0x100287c3
movzx ecx, word [0x1007f008]
imul edx, ecx, 0x28fd
mov eax, dword [0x1007f024]
sub eax, edx
mov word [0x1007f008], ax
movzx ecx, word [0x1007f008]
sub ecx, 0x15c65
movzx edx, word [0x1007f008]
sub ecx, edx
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
jmp 0x1002882a
mov eax, 4
shl eax, 1
mov ecx, dword [eax + 0x1007f028]
cmp ecx, dword [ebp - 0x14]
ja 0x1002882a
movzx edx, byte [0x1007f004]
mov eax, 4
imul ecx, eax, 6
mov dword [ecx + 0x1007f028], edx
mov edx, dword [ebp - 0xc]
sub edx, 9
sub edx, dword [ebp - 0x14]
mov byte [0x1007f004], dl
mov eax, dword [ebp - 0x14]
sub eax, 0x15c65
movzx ecx, byte [0x1007f004]
sub eax, ecx
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
movzx edx, byte [0x1007f004]
imul eax, edx, 0x25
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
sub ecx, eax
mov dword [ebp - 0xc], ecx
movzx edx, word [0x1007f008]
sub edx, 1
mov dword [0x1007f024], edx
jmp 0x10027d84
movzx eax, word [0x1007f008]
imul ecx, eax, 0x28fd
mov edx, dword [ebp + 8]
sub edx, ecx
mov word [0x1007f008], dx
movzx eax, word [0x1007f008]
imul ecx, dword [0x1007f024], 0x24
sub eax, ecx
mov dword [ebp - 0xc], eax
mov edx, 0x708
mov word [0x1007f008], dx
mov eax, dword [0x1007f024]
sub eax, 0x43
movzx ecx, word [0x1007f008]
sub eax, ecx
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
sub edx, 0x43
sub edx, dword [0x1007f024]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
movzx eax, word [0x1007f008]
imul ecx, eax, 0x28fd
mov edx, dword [ebp - 0xc]
sub edx, ecx
mov word [0x1007f008], dx
movzx eax, word [ebp - 8]
sub eax, 0x45
sub eax, dword [ebp - 0xc]
mov word [0x1007f008], ax
movzx ecx, word [ebp - 8]
sub ecx, 9
sub ecx, dword [ebp - 0xc]
mov word [0x1007f008], cx
mov edx, 4
imul eax, edx, 0x11
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [eax + 0x1007f028]
add eax, dword [edx + 0x1007f028]
cmp eax, 0x309
jne 0x10028932
mov ecx, dword [0x1007f024]
sub ecx, 0x43
sub ecx, dword [0x1007f024]
movzx edx, word [0x1007f008]
add edx, ecx
mov word [0x1007f008], dx
mov eax, dword [0x1007f024]
add eax, 1
movzx ecx, word [ebp - 8]
sub eax, ecx
mov word [0x1007f008], ax
jmp 0x10028972
movzx edx, word [ebp - 8]
imul eax, dword [0x1007f024], 0x28fd
sub edx, eax
mov dword [0x1007f024], edx
mov ecx, dword [0x1007f024]
sub ecx, 0x15c65
sub ecx, dword [0x1007f024]
movzx edx, word [0x1007f008]
add ecx, edx
movzx eax, word [0x1007f008]
add eax, ecx
mov word [0x1007f008], ax
movzx ecx, word [0x1007f008]
movzx edx, byte [0x1007f004]
cmp ecx, edx
jl 0x100289c9
movzx eax, word [0x1007f008]
sub eax, 0x45
sub eax, dword [ebp - 0xc]
mov byte [0x1007f004], al
mov ecx, 1
imul edx, ecx, 7
movzx eax, byte [edx + 0x1007f00c]
imul eax, dword [ebp - 0xc]
mov ecx, 1
imul edx, ecx, 7
mov byte [edx + 0x1007f00c], al
movzx eax, word [0x1007f008]
sub eax, 9
sub eax, dword [ebp - 0xc]
mov byte [0x1007f004], al
mov ecx, dword [0x1007fc10]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.10002010
add esp, 8
mov dword [0x1007f024], eax
inc ecx
xchg ebp, eax
or al, 0x73
movzx eax, word [0x1007f008]
imul ecx, eax, 0x25
add ecx, dword [ebp - 0xc]
movzx edx, word [ebp - 8]
sub edx, ecx
mov word [ebp - 8], dx
mov eax, 4
imul ecx, eax, 0x11
mov edx, 4
imul eax, edx, 3
mov ecx, dword [ecx + 0x1007f028]
add ecx, dword [eax + 0x1007f028]
cmp ecx, 0x309
jne 0x10028a56
mov edx, dword [0x1007f024]
sub edx, 0x43
sub edx, dword [0x1007f024]
movzx eax, word [0x1007f008]
add eax, edx
mov word [0x1007f008], ax
mov ecx, dword [0x1007f024]
add ecx, 1
movzx edx, word [ebp - 8]
sub ecx, edx
mov word [0x1007f008], cx
jmp 0x10028a96
movzx eax, word [ebp - 8]
imul ecx, dword [0x1007f024], 0x28fd
sub eax, ecx
mov dword [0x1007f024], eax
mov edx, dword [0x1007f024]
sub edx, 0x15c65
sub edx, dword [0x1007f024]
movzx eax, word [0x1007f008]
add edx, eax
movzx ecx, word [0x1007f008]
add ecx, edx
mov word [0x1007f008], cx
movzx edx, word [0x1007f008]
imul eax, edx, 0x28fd
mov ecx, dword [ebp - 0xc]
sub ecx, eax
mov word [0x1007f008], cx
mov edx, 4
imul eax, edx, 0x11
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [eax + 0x1007f028]
add eax, dword [edx + 0x1007f028]
cmp eax, 0x309
jne 0x10028b07
mov ecx, dword [0x1007f024]
sub ecx, 0x43
sub ecx, dword [0x1007f024]
movzx edx, word [0x1007f008]
add edx, ecx
mov word [0x1007f008], dx
mov eax, dword [0x1007f024]
add eax, 1
movzx ecx, word [ebp - 8]
sub eax, ecx
mov word [0x1007f008], ax
jmp 0x10028b47
movzx edx, word [ebp - 8]
imul eax, dword [0x1007f024], 0x28fd
sub edx, eax
mov dword [0x1007f024], edx
mov ecx, dword [0x1007f024]
sub ecx, 0x15c65
sub ecx, dword [0x1007f024]
movzx edx, word [0x1007f008]
add ecx, edx
movzx eax, word [0x1007f008]
add eax, ecx
mov word [0x1007f008], ax
movzx ecx, word [0x1007f008]
imul edx, ecx, 0x24
mov eax, dword [ebp - 0xc]
sub eax, edx
mov word [ebp - 8], ax
mov ecx, 4
imul edx, ecx, 0xf
mov eax, dword [edx + 0x1007f028]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x10028b73
jmp 0x10028b92
movzx ecx, word [ebp - 8]
sub ecx, 0x43
sub ecx, dword [0x1007f024]
movzx edx, word [0x1007f008]
add edx, ecx
mov word [0x1007f008], dx
jmp 0x10028bb5
movzx eax, word [ebp - 8]
sub eax, 0x15c65
movzx ecx, word [0x1007f008]
sub eax, ecx
add eax, dword [0x1007f024]
add eax, dword [0x1007f024]
mov dword [0x1007f024], eax
movzx eax, byte [0x1007f004]
mov esp, ebp
pop ebp
ret