Function at 0x425a40
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b2830
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1558
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x30], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x425a96
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x38
jge 0x425aa9
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x425a8d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x425abd
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x425ad3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x425aec
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0xb
jge 0x425b1c
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x425b01
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x425b11
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x425b1a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x425ae3
mov dword [ebp - 4], 0xfffffffe
call fcn.00425b2a
jmp 0x425b47
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x425b60
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x37
jge 0x425b96
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x425b86
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x425b91
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x425b94
mov dword [ebp - 0x1c], eax
jmp 0x425b57
mov dword [ebp - 4], 0xfffffffe
call fcn.00425ba4
jmp 0x425bac
mov dword [ebp - 0x2c], 0
jmp 0x425bbe
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 1
jge 0x425bfc
cmp dword [ebp - 0x1c], 0
jge 0x425bd2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x425be8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x425bb5
mov dword [ebp - 4], 2
mov dword [ebp - 0x22c], 0
jmp 0x425c1e
mov eax, dword [ebp - 0x22c]
add eax, 1
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x1b
jge 0x425c5d
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x425c4d
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x425c58
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x425c5b
mov dword [ebp - 0x1c], eax
jmp 0x425c0f
mov dword [ebp - 4], 0xfffffffe
call fcn.00425c6b
jmp 0x425c73
mov dword [ebp - 4], 3
mov dword [ebp - 0x230], 0
jmp 0x425c95
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 0
jge 0x425cd0
mov eax, dword [ebp - 0x230]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x425cc4
mov eax, dword [ebp - 0x230]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x425ccb
and eax, 0xbc614e
jmp 0x425cce
mov dword [ebp - 0x1c], eax
jmp 0x425c86
mov dword [ebp - 4], 0xfffffffe
call fcn.00425cde
jmp 0x425ce6
mov dword [ebp - 4], 4
mov dword [ebp - 0x234], 0
jmp 0x425d08
mov edx, dword [ebp - 0x234]
add edx, 1
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 0x1d
jge 0x425d3e
mov eax, dword [ebp - 0x234]
and eax, 0x80000001
jns 0x425d23
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x425d33
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x425d3c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x425cf9
mov dword [ebp - 4], 0xfffffffe
call fcn.00425d4c
jmp 0x425d69
mov dword [ebp - 4], 5
mov dword [ebp - 0x238], 0
jmp 0x425d8b
mov edx, dword [ebp - 0x238]
add edx, 1
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0x1e
jge 0x425dd2
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x425da8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x425db8
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x425dd0
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x425dd0
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x425d7c
mov dword [ebp - 4], 0xfffffffe
call fcn.00425de0
jmp 0x425def
mov dword [ebp - 0x23c], 0
jmp 0x425e0a
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
cmp dword [ebp - 0x23c], 1
jge 0x425e4b
cmp dword [ebp - 0x1c], 0
jge 0x425e21
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x425e37
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x438]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x425dfb
mov dword [ebp - 0x43c], 0
jmp 0x425e66
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 9
jge 0x425ea7
cmp dword [ebp - 0x1c], 0
jge 0x425e7d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x425e93
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x638]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x425e57
mov dword [ebp - 4], 6
mov dword [ebp - 0x63c], 0
jmp 0x425ec9
mov eax, dword [ebp - 0x63c]
add eax, 1
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 0xb
jge 0x425f08
mov eax, dword [ebp - 0x63c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x425ef8
mov eax, dword [ebp - 0x63c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x425f03
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x425f06
mov dword [ebp - 0x1c], eax
jmp 0x425eba
mov dword [ebp - 4], 0xfffffffe
call fcn.00425f16
jmp 0x425f1e
mov dword [ebp - 4], 7
mov dword [ebp - 0x640], 0
jmp 0x425f40
mov edx, dword [ebp - 0x640]
add edx, 1
mov dword [ebp - 0x640], edx
cmp dword [ebp - 0x640], 4
jge 0x425f7f
mov eax, dword [ebp - 0x640]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x425f6f
mov eax, dword [ebp - 0x640]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x425f7a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x425f7d
mov dword [ebp - 0x1c], eax
jmp 0x425f31
mov dword [ebp - 4], 0xfffffffe
call fcn.00425f8d
jmp 0x425f95
mov dword [ebp - 0x644], 0
jmp 0x425fb0
mov edx, dword [ebp - 0x644]
add edx, 1
mov dword [ebp - 0x644], edx
cmp dword [ebp - 0x644], 5
jge 0x425fc9
mov eax, dword [ebp - 0x644]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x425fa1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x425fdd
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x425ff3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x648], 0
jmp 0x426015
mov edx, dword [ebp - 0x648]
add edx, 1
mov dword [ebp - 0x648], edx
cmp dword [ebp - 0x648], 0
jge 0x426050
mov eax, dword [ebp - 0x648]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x426044
mov eax, dword [ebp - 0x648]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42604b
and eax, 0xbc614e
jmp 0x42604e
mov dword [ebp - 0x1c], eax
jmp 0x426006
mov dword [ebp - 4], 0xfffffffe
call fcn.0042605e
jmp 0x426066
mov dword [ebp - 4], 9
mov dword [ebp - 0x64c], 0
jmp 0x426088
mov edx, dword [ebp - 0x64c]
add edx, 1
mov dword [ebp - 0x64c], edx
cmp dword [ebp - 0x64c], 0xe
jge 0x4260c3
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4260b7
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4260be
and eax, 0xbc614e
jmp 0x4260c1
mov dword [ebp - 0x1c], eax
jmp 0x426079
mov dword [ebp - 4], 0xfffffffe
call fcn.004260d1
jmp 0x4260d9
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x650], 0
jmp 0x4260fb
mov edx, dword [ebp - 0x650]
add edx, 1
mov dword [ebp - 0x650], edx
cmp dword [ebp - 0x650], 2
jge 0x426136
mov eax, dword [ebp - 0x650]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42612a
mov eax, dword [ebp - 0x650]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x426131
and eax, 0xbc614e
jmp 0x426134
mov dword [ebp - 0x1c], eax
jmp 0x4260ec
mov dword [ebp - 4], 0xfffffffe
call fcn.00426144
jmp 0x42614c
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x654], 0
jmp 0x42616e
mov edx, dword [ebp - 0x654]
add edx, 1
mov dword [ebp - 0x654], edx
cmp dword [ebp - 0x654], 3
jge 0x4261b5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42618b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42619b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4261b3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4261b3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42615f
mov dword [ebp - 4], 0xfffffffe
call fcn.004261c3
jmp 0x4261d2
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x658], 0
jmp 0x4261f4
mov ecx, dword [ebp - 0x658]
add ecx, 1
mov dword [ebp - 0x658], ecx
cmp dword [ebp - 0x658], 4
jge 0x426233
mov eax, dword [ebp - 0x658]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x426223
mov eax, dword [ebp - 0x658]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42622e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x426231
mov dword [ebp - 0x1c], eax
jmp 0x4261e5
mov dword [ebp - 4], 0xfffffffe
call fcn.00426241
jmp 0x426249
mov dword [ebp - 0x65c], 0
jmp 0x426264
mov edx, dword [ebp - 0x65c]
add edx, 1
mov dword [ebp - 0x65c], edx
cmp dword [ebp - 0x65c], 3
jge 0x4262a5
cmp dword [ebp - 0x1c], 0
jge 0x42627b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x426291
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x858]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x426255
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x85c], 0
jmp 0x4262c7
mov eax, dword [ebp - 0x85c]
add eax, 1
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 4
jge 0x426302
mov eax, dword [ebp - 0x85c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4262f6
mov eax, dword [ebp - 0x85c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4262fd
and eax, 0xbc614e
jmp 0x426300
mov dword [ebp - 0x1c], eax
jmp 0x4262b8
mov dword [ebp - 4], 0xfffffffe
call fcn.00426310
jmp 0x426318
mov dword [ebp - 0x860], 0
jmp 0x426333
mov edx, dword [ebp - 0x860]
add edx, 1
mov dword [ebp - 0x860], edx
cmp dword [ebp - 0x860], 1
jge 0x42634c
mov eax, dword [ebp - 0x860]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x426324
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x426360
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426376
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x864], 0
jmp 0x426391
mov edx, dword [ebp - 0x864]
add edx, 1
mov dword [ebp - 0x864], edx
cmp dword [ebp - 0x864], 3
jge 0x4263aa
mov eax, dword [ebp - 0x864]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x426382
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4263be
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4263d4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x868], 0
jmp 0x4263f6
mov edx, dword [ebp - 0x868]
add edx, 1
mov dword [ebp - 0x868], edx
cmp dword [ebp - 0x868], 3
jge 0x426435
mov eax, dword [ebp - 0x868]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x426425
mov eax, dword [ebp - 0x868]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x426430
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x426433
mov dword [ebp - 0x1c], eax
jmp 0x4263e7
mov dword [ebp - 4], 0xfffffffe
call fcn.00426443
jmp 0x42644b
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x86c], 0
jmp 0x42646d
mov edx, dword [ebp - 0x86c]
add edx, 1
mov dword [ebp - 0x86c], edx
cmp dword [ebp - 0x86c], 3
jge 0x4264ac
mov eax, dword [ebp - 0x86c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42649c
mov eax, dword [ebp - 0x86c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4264a7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4264aa
mov dword [ebp - 0x1c], eax
jmp 0x42645e
mov dword [ebp - 4], 0xfffffffe
call fcn.004264ba
jmp 0x4264c2
mov dword [ebp - 0x870], 0
jmp 0x4264dd
mov edx, dword [ebp - 0x870]
add edx, 1
mov dword [ebp - 0x870], edx
cmp dword [ebp - 0x870], 1
jge 0x42651e
cmp dword [ebp - 0x1c], 0
jge 0x4264f4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42650a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa68]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4264ce
mov dword [ebp - 0xa6c], 0
jmp 0x426539
mov eax, dword [ebp - 0xa6c]
add eax, 1
mov dword [ebp - 0xa6c], eax
cmp dword [ebp - 0xa6c], 2
jge 0x426552
mov ecx, dword [ebp - 0xa6c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x42652a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x426566
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42657c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xa70], 0
jmp 0x426597
mov edx, dword [ebp - 0xa70]
add edx, 1
mov dword [ebp - 0xa70], edx
cmp dword [ebp - 0xa70], 0
jge 0x4265b0
mov eax, dword [ebp - 0xa70]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x426588
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4265c4
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4265da
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xa74], 0
jmp 0x4265fc
mov edx, dword [ebp - 0xa74]
add edx, 1
mov dword [ebp - 0xa74], edx
cmp dword [ebp - 0xa74], 3
jge 0x42663b
mov eax, dword [ebp - 0xa74]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42662b
mov eax, dword [ebp - 0xa74]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x426636
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x426639
mov dword [ebp - 0x1c], eax
jmp 0x4265ed
mov dword [ebp - 4], 0xfffffffe
call fcn.00426649
jmp 0x426651
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xa78], 0
jmp 0x426673
mov edx, dword [ebp - 0xa78]
add edx, 1
mov dword [ebp - 0xa78], edx
cmp dword [ebp - 0xa78], 3
jge 0x4266b2
mov eax, dword [ebp - 0xa78]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4266a2
mov eax, dword [ebp - 0xa78]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4266ad
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4266b0
mov dword [ebp - 0x1c], eax
jmp 0x426664
mov dword [ebp - 4], 0xfffffffe
call fcn.004266c0
jmp 0x4266c8
mov dword [ebp - 0xa7c], 0
jmp 0x4266e3
mov edx, dword [ebp - 0xa7c]
add edx, 1
mov dword [ebp - 0xa7c], edx
cmp dword [ebp - 0xa7c], 2
jge 0x4266fc
mov eax, dword [ebp - 0xa7c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4266d4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x426710
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426726
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xa80], 0
jmp 0x426748
mov edx, dword [ebp - 0xa80]
add edx, 1
mov dword [ebp - 0xa80], edx
cmp dword [ebp - 0xa80], 2
jge 0x42677e
mov eax, dword [ebp - 0xa80]
and eax, 0x80000001
jns 0x426763
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x426773
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42677c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x426739
mov dword [ebp - 4], 0xfffffffe
call fcn.0042678c
jmp 0x4267a9
mov dword [ebp - 0xa84], 1
mov dword [ebp - 0xa88], 1
mov dword [ebp - 0xa8c], 2
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa94], 0
jmp 0x4267ec
mov edx, dword [ebp - 0xa94]
add edx, 1
mov dword [ebp - 0xa94], edx
cmp dword [ebp - 0xa94], 1
jge 0x42682d
mov eax, dword [ebp - 0xa84]
add eax, dword [ebp - 0xa88]
mov dword [ebp - 0xa8c], eax
mov ecx, dword [ebp - 0xa88]
mov dword [ebp - 0xa84], ecx
mov edx, dword [ebp - 0xa8c]
mov dword [ebp - 0xa88], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xa8c]
mov dword [ebp - 0x1c], eax
jmp 0x4267dd
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xa98], 0
jmp 0x426858
mov edx, dword [ebp - 0xa98]
add edx, 1
mov dword [ebp - 0xa98], edx
cmp dword [ebp - 0xa98], 4
jge 0x42688e
mov eax, dword [ebp - 0xa98]
and eax, 0x80000001
jns 0x426873
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x426883
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42688c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x426849
mov dword [ebp - 4], 0xfffffffe
call fcn.0042689c
jmp 0x4268b9
mov dword [ebp - 0xa9c], 0
jmp 0x4268d4
mov edx, dword [ebp - 0xa9c]
add edx, 1
mov dword [ebp - 0xa9c], edx
cmp dword [ebp - 0xa9c], 2
jge 0x4268ed
mov eax, dword [ebp - 0xa9c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4268c5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x426901
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426917
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xaa0], 0
jmp 0x426932
mov edx, dword [ebp - 0xaa0]
add edx, 1
mov dword [ebp - 0xaa0], edx
cmp dword [ebp - 0xaa0], 1
jge 0x426973
cmp dword [ebp - 0x1c], 0
jge 0x426949
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42695f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc98]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x426923
mov dword [ebp - 0xc9c], 0
jmp 0x42698e
mov eax, dword [ebp - 0xc9c]
add eax, 1
mov dword [ebp - 0xc9c], eax
cmp dword [ebp - 0xc9c], 4
jge 0x4269a7
mov ecx, dword [ebp - 0xc9c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x42697f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4269bb
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4269d1
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xca0], 0
jmp 0x4269f3
mov edx, dword [ebp - 0xca0]
add edx, 1
mov dword [ebp - 0xca0], edx
cmp dword [ebp - 0xca0], 2
jge 0x426a3a
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x426a10
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x426a20
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x426a38
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426a38
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4269e4
mov dword [ebp - 4], 0xfffffffe
call fcn.00426a48
jmp 0x426a57
mov dword [ebp - 0xca4], 0
jmp 0x426a72
mov ecx, dword [ebp - 0xca4]
add ecx, 1
mov dword [ebp - 0xca4], ecx
cmp dword [ebp - 0xca4], 1
jge 0x426ab3
cmp dword [ebp - 0x1c], 0
jge 0x426a89
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x426a9f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xea0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x426a63
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xea4], 0
jmp 0x426ad5
mov eax, dword [ebp - 0xea4]
add eax, 1
mov dword [ebp - 0xea4], eax
cmp dword [ebp - 0xea4], 2
jge 0x426b0c
mov ecx, dword [ebp - 0xea4]
and ecx, 0x80000001
jns 0x426af1
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x426b01
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x426b0a
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x426ac6
mov dword [ebp - 4], 0xfffffffe
call fcn.00426b1a
jmp 0x426b38
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xea8], 0
jmp 0x426b5a
mov eax, dword [ebp - 0xea8]
add eax, 1
mov dword [ebp - 0xea8], eax
cmp dword [ebp - 0xea8], 3
jge 0x426b95
mov eax, dword [ebp - 0xea8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x426b89
mov eax, dword [ebp - 0xea8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x426b90
and eax, 0xbc614e
jmp 0x426b93
mov dword [ebp - 0x1c], eax
jmp 0x426b4b
mov dword [ebp - 4], 0xfffffffe
call fcn.00426ba3
jmp 0x426bab
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xeac], 0
jmp 0x426bcd
mov edx, dword [ebp - 0xeac]
add edx, 1
mov dword [ebp - 0xeac], edx
cmp dword [ebp - 0xeac], 0
jge 0x426c14
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x426bea
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x426bfa
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x426c12
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426c12
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x426bbe
mov dword [ebp - 4], 0xfffffffe
call fcn.00426c22
jmp 0x426c31
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xeb0], 0
jmp 0x426c53
cmp dword [ebp - 0xeb0], 0
jge 0x426c92
mov eax, dword [ebp - 0xeb0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x426c82
mov eax, dword [ebp - 0xeb0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x426c8d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x426c90
mov dword [ebp - 0x1c], eax
jmp 0x426c44
mov dword [ebp - 4], 0xfffffffe
call fcn.00426ca0
jmp 0x426ca8
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xeb4], 0
jmp 0x426cca
cmp dword [ebp - 0xeb4], 1
jge 0x426d05