Function at 0x4299b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b2c38
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff4d4
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x4299ff
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 9
jge 0x429a3d
cmp dword [ebp - 0x1c], 0
jge 0x429a13
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x429a29
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4299f6
mov dword [ebp - 0x224], 0
jmp 0x429a58
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x10
jge 0x429a71
mov ecx, dword [ebp - 0x224]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x429a49
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x429a85
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429a9b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x228], 0
jmp 0x429abd
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0xb
jge 0x429b04
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x429ada
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x429aea
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x429b02
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429b02
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x429aae
mov dword [ebp - 4], 0xfffffffe
call fcn.00429b12
jmp 0x429b21
mov dword [ebp - 0x22c], 0
jmp 0x429b3c
mov ecx, dword [ebp - 0x22c]
add ecx, 1
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x22c], 0xa
jge 0x429b55
mov edx, dword [ebp - 0x22c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x429b2d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x429b69
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429b7f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x230], 0
jmp 0x429b9a
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 0xe
jge 0x429bdb
cmp dword [ebp - 0x1c], 0
jge 0x429bb1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x429bc7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x429b8b
mov dword [ebp - 4], 1
mov dword [ebp - 0x42c], 0
jmp 0x429bfd
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0xf
jge 0x429c44
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x429c1a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x429c2a
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x429c42
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429c42
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x429bee
mov dword [ebp - 4], 0xfffffffe
call fcn.00429c52
jmp 0x429c61
mov dword [ebp - 0x430], 0
jmp 0x429c7c
mov ecx, dword [ebp - 0x430]
add ecx, 1
mov dword [ebp - 0x430], ecx
cmp dword [ebp - 0x430], 5
jge 0x429c95
mov edx, dword [ebp - 0x430]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x429c6d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x429ca9
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429cbf
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x434], 1
mov dword [ebp - 0x438], 1
mov dword [ebp - 0x43c], 2
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x444], 0
jmp 0x429d02
mov edx, dword [ebp - 0x444]
add edx, 1
mov dword [ebp - 0x444], edx
cmp dword [ebp - 0x444], 6
jge 0x429d43
mov eax, dword [ebp - 0x434]
add eax, dword [ebp - 0x438]
mov dword [ebp - 0x43c], eax
mov ecx, dword [ebp - 0x438]
mov dword [ebp - 0x434], ecx
mov edx, dword [ebp - 0x43c]
mov dword [ebp - 0x438], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x43c]
mov dword [ebp - 0x1c], eax
jmp 0x429cf3
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x448], 0
jmp 0x429d6e
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 3
jge 0x429da4
mov eax, dword [ebp - 0x448]
and eax, 0x80000001
jns 0x429d89
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x429d99
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x429da2
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x429d5f
mov dword [ebp - 4], 0xfffffffe
call fcn.00429db2
jmp 0x429dcf
mov dword [ebp - 4], 3
mov dword [ebp - 0x44c], 0
jmp 0x429df1
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 0xe
jge 0x429e2c
mov eax, dword [ebp - 0x44c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x429e20
mov eax, dword [ebp - 0x44c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x429e27
and eax, 0xbc614e
jmp 0x429e2a
mov dword [ebp - 0x1c], eax
jmp 0x429de2
mov dword [ebp - 4], 0xfffffffe
call fcn.00429e3a
jmp 0x429e42
mov dword [ebp - 4], 4
mov dword [ebp - 0x450], 0
jmp 0x429e64
mov edx, dword [ebp - 0x450]
add edx, 1
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x450], 5
jge 0x429e9a
mov eax, dword [ebp - 0x450]
and eax, 0x80000001
jns 0x429e7f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x429e8f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x429e98
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x429e55
mov dword [ebp - 4], 0xfffffffe
call fcn.00429ea8
jmp 0x429ec5
mov dword [ebp - 4], 5
mov dword [ebp - 0x454], 0
jmp 0x429ee7
mov edx, dword [ebp - 0x454]
add edx, 1
mov dword [ebp - 0x454], edx
cmp dword [ebp - 0x454], 0xb
jge 0x429f22
mov eax, dword [ebp - 0x454]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x429f16
mov eax, dword [ebp - 0x454]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x429f1d
and eax, 0xbc614e
jmp 0x429f20
mov dword [ebp - 0x1c], eax
jmp 0x429ed8
mov dword [ebp - 4], 0xfffffffe
call fcn.00429f30
jmp 0x429f38
mov dword [ebp - 0x458], 0
jmp 0x429f53
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 5
jge 0x429f6c
mov eax, dword [ebp - 0x458]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x429f44
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x429f80
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429f96
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x45c], 0
jmp 0x429fb8
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 0x10
jge 0x429fee
mov eax, dword [ebp - 0x45c]
and eax, 0x80000001
jns 0x429fd3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x429fe3
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x429fec
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x429fa9
mov dword [ebp - 4], 0xfffffffe
call fcn.00429ffc
jmp 0x42a019
mov dword [ebp - 4], 7
mov dword [ebp - 0x460], 0
jmp 0x42a03b
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 4
jge 0x42a076
mov eax, dword [ebp - 0x460]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42a06a
mov eax, dword [ebp - 0x460]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42a071
and eax, 0xbc614e
jmp 0x42a074
mov dword [ebp - 0x1c], eax
jmp 0x42a02c
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a084
jmp 0x42a08c
mov dword [ebp - 0x464], 0
jmp 0x42a0a7
mov edx, dword [ebp - 0x464]
add edx, 1
mov dword [ebp - 0x464], edx
cmp dword [ebp - 0x464], 0
jge 0x42a0e8
cmp dword [ebp - 0x1c], 0
jge 0x42a0be
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42a0d4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42a098
mov dword [ebp - 4], 8
mov dword [ebp - 0x664], 0
jmp 0x42a10a
mov eax, dword [ebp - 0x664]
add eax, 1
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 8
jge 0x42a145
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42a139
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42a140
and eax, 0xbc614e
jmp 0x42a143
mov dword [ebp - 0x1c], eax
jmp 0x42a0fb
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a153
jmp 0x42a15b
mov dword [ebp - 0x668], 0
jmp 0x42a176
mov edx, dword [ebp - 0x668]
add edx, 1
mov dword [ebp - 0x668], edx
cmp dword [ebp - 0x668], 8
jge 0x42a1b7
cmp dword [ebp - 0x1c], 0
jge 0x42a18d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42a1a3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x860]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42a167
mov dword [ebp - 4], 9
mov dword [ebp - 0x864], 0
jmp 0x42a1d9
mov eax, dword [ebp - 0x864]
add eax, 1
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x864], 0
jge 0x42a210
mov ecx, dword [ebp - 0x864]
and ecx, 0x80000001
jns 0x42a1f5
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x42a205
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42a20e
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x42a1ca
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a21e
jmp 0x42a23c
mov dword [ebp - 0x868], 1
mov dword [ebp - 0x86c], 1
mov dword [ebp - 0x870], 2
mov dword [ebp - 0x874], 0
mov dword [ebp - 0x878], 0
jmp 0x42a27f
mov eax, dword [ebp - 0x878]
add eax, 1
mov dword [ebp - 0x878], eax
cmp dword [ebp - 0x878], 7
jge 0x42a2c0
mov ecx, dword [ebp - 0x868]
add ecx, dword [ebp - 0x86c]
mov dword [ebp - 0x870], ecx
mov edx, dword [ebp - 0x86c]
mov dword [ebp - 0x868], edx
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x86c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x870]
mov dword [ebp - 0x1c], ecx
jmp 0x42a270
mov edx, dword [ebp - 0x1c]
add edx, 7
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x87c], 0
jmp 0x42a2eb
mov eax, dword [ebp - 0x87c]
add eax, 1
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 7
jge 0x42a32a
mov eax, dword [ebp - 0x87c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42a31a
mov eax, dword [ebp - 0x87c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42a325
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42a328
mov dword [ebp - 0x1c], eax
jmp 0x42a2dc
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a338
jmp 0x42a340
mov dword [ebp - 0x880], 0
jmp 0x42a35b
mov edx, dword [ebp - 0x880]
add edx, 1
mov dword [ebp - 0x880], edx
cmp dword [ebp - 0x880], 7
jge 0x42a374
mov eax, dword [ebp - 0x880]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42a34c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42a388
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a39e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x884], 0
jmp 0x42a3c0
mov edx, dword [ebp - 0x884]
add edx, 1
mov dword [ebp - 0x884], edx
cmp dword [ebp - 0x884], 0
jge 0x42a407
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42a3dd
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42a3ed
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42a405
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a405
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42a3b1
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a415
jmp 0x42a424
mov dword [ebp - 0x888], 0
jmp 0x42a43f
mov ecx, dword [ebp - 0x888]
add ecx, 1
mov dword [ebp - 0x888], ecx
cmp dword [ebp - 0x888], 6
jge 0x42a458
mov edx, dword [ebp - 0x888]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42a430
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42a46c
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a482
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x88c], 1
mov dword [ebp - 0x890], 1
mov dword [ebp - 0x894], 2
mov dword [ebp - 0x898], 0
mov dword [ebp - 0x89c], 0
jmp 0x42a4c5
mov edx, dword [ebp - 0x89c]
add edx, 1
mov dword [ebp - 0x89c], edx
cmp dword [ebp - 0x89c], 0
jge 0x42a506
mov eax, dword [ebp - 0x88c]
add eax, dword [ebp - 0x890]
mov dword [ebp - 0x894], eax
mov ecx, dword [ebp - 0x890]
mov dword [ebp - 0x88c], ecx
mov edx, dword [ebp - 0x894]
mov dword [ebp - 0x890], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x894]
mov dword [ebp - 0x1c], eax
jmp 0x42a4b6
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8a0], 0
jmp 0x42a527
mov edx, dword [ebp - 0x8a0]
add edx, 1
mov dword [ebp - 0x8a0], edx
cmp dword [ebp - 0x8a0], 2
jge 0x42a540
mov eax, dword [ebp - 0x8a0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42a518
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42a554
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a56a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x8a4], 0
jmp 0x42a58c
mov edx, dword [ebp - 0x8a4]
add edx, 1
mov dword [ebp - 0x8a4], edx
cmp dword [ebp - 0x8a4], 4
jge 0x42a5c2
mov eax, dword [ebp - 0x8a4]
and eax, 0x80000001
jns 0x42a5a7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42a5b7
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42a5c0
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42a57d
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a5d0
jmp 0x42a5ed
mov dword [ebp - 0x8a8], 0
jmp 0x42a608
mov edx, dword [ebp - 0x8a8]
add edx, 1
mov dword [ebp - 0x8a8], edx
cmp dword [ebp - 0x8a8], 1
jge 0x42a621
mov eax, dword [ebp - 0x8a8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42a5f9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42a635
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a64b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x8ac], 0
jmp 0x42a66d
mov edx, dword [ebp - 0x8ac]
add edx, 1
mov dword [ebp - 0x8ac], edx
cmp dword [ebp - 0x8ac], 1
jge 0x42a6ac
mov eax, dword [ebp - 0x8ac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42a69c
mov eax, dword [ebp - 0x8ac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42a6a7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42a6aa
mov dword [ebp - 0x1c], eax
jmp 0x42a65e
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a6ba
jmp 0x42a6c2
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x8b0], 0
jmp 0x42a6e4
mov edx, dword [ebp - 0x8b0]
add edx, 1
mov dword [ebp - 0x8b0], edx
cmp dword [ebp - 0x8b0], 3
jge 0x42a71f
mov eax, dword [ebp - 0x8b0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42a713
mov eax, dword [ebp - 0x8b0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42a71a
and eax, 0xbc614e
jmp 0x42a71d
mov dword [ebp - 0x1c], eax
jmp 0x42a6d5
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a72d
jmp 0x42a735
mov dword [ebp - 0x8b4], 0
jmp 0x42a750
mov edx, dword [ebp - 0x8b4]
add edx, 1
mov dword [ebp - 0x8b4], edx
cmp dword [ebp - 0x8b4], 0
jge 0x42a769
mov eax, dword [ebp - 0x8b4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42a741
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42a77d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a793
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x8bc], 1
mov dword [ebp - 0x8c0], 2
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0x8c8], 0
jmp 0x42a7d6
mov edx, dword [ebp - 0x8c8]
add edx, 1
mov dword [ebp - 0x8c8], edx
cmp dword [ebp - 0x8c8], 6
jge 0x42a817
mov eax, dword [ebp - 0x8b8]
add eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c0], eax
mov ecx, dword [ebp - 0x8bc]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x8c0]
mov dword [ebp - 0x8bc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x1c], eax
jmp 0x42a7c7
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x8cc], 0
jmp 0x42a842
mov edx, dword [ebp - 0x8cc]
add edx, 1
mov dword [ebp - 0x8cc], edx
cmp dword [ebp - 0x8cc], 4
jge 0x42a881
mov eax, dword [ebp - 0x8cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42a871
mov eax, dword [ebp - 0x8cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42a87c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42a87f
mov dword [ebp - 0x1c], eax
jmp 0x42a833
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a88f
jmp 0x42a897
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8d0], 0
jmp 0x42a8b9
mov edx, dword [ebp - 0x8d0]
add edx, 1
mov dword [ebp - 0x8d0], edx
cmp dword [ebp - 0x8d0], 4
jge 0x42a8ef
mov eax, dword [ebp - 0x8d0]
and eax, 0x80000001
jns 0x42a8d4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42a8e4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42a8ed
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42a8aa
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a8fd
jmp 0x42a91a
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8d4], 0
jmp 0x42a93c
mov edx, dword [ebp - 0x8d4]
add edx, 1
mov dword [ebp - 0x8d4], edx
cmp dword [ebp - 0x8d4], 3
jge 0x42a977
mov eax, dword [ebp - 0x8d4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42a96b
mov eax, dword [ebp - 0x8d4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42a972
and eax, 0xbc614e
jmp 0x42a975
mov dword [ebp - 0x1c], eax
jmp 0x42a92d
mov dword [ebp - 4], 0xfffffffe
call fcn.0042a985
jmp 0x42a98d
mov dword [ebp - 0x8d8], 0
jmp 0x42a9a8
mov edx, dword [ebp - 0x8d8]
add edx, 1
mov dword [ebp - 0x8d8], edx
cmp dword [ebp - 0x8d8], 6
jge 0x42a9e9
cmp dword [ebp - 0x1c], 0
jge 0x42a9bf
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42a9d5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xad0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42a999
mov dword [ebp - 0xad4], 1
mov dword [ebp - 0xad8], 1
mov dword [ebp - 0xadc], 2
mov dword [ebp - 0xae0], 0
mov dword [ebp - 0xae4], 0
jmp 0x42aa2c
mov eax, dword [ebp - 0xae4]
add eax, 1
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0xae4], 1
jge 0x42aa6d
mov ecx, dword [ebp - 0xad4]
add ecx, dword [ebp - 0xad8]
mov dword [ebp - 0xadc], ecx
mov edx, dword [ebp - 0xad8]
mov dword [ebp - 0xad4], edx
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0xad8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xadc]
mov dword [ebp - 0x1c], ecx
jmp 0x42aa1d
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0xae8], 0
jmp 0x42aa91
mov eax, dword [ebp - 0xae8]
add eax, 1
mov dword [ebp - 0xae8], eax
cmp dword [ebp - 0xae8], 3
jge 0x42aaaa
mov ecx, dword [ebp - 0xae8]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x42aa82
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42aabe
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42aad4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xaec], 0
jmp 0x42aaf6
mov edx, dword [ebp - 0xaec]
add edx, 1
mov dword [ebp - 0xaec], edx
cmp dword [ebp - 0xaec], 1
jge 0x42ab31
mov eax, dword [ebp - 0xaec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42ab25
mov eax, dword [ebp - 0xaec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42ab2c
and eax, 0xbc614e
jmp 0x42ab2f
mov dword [ebp - 0x1c], eax
jmp 0x42aae7
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ab3f
jmp 0x42ab47
mov dword [ebp - 0xaf0], 0
jmp 0x42ab62
mov edx, dword [ebp - 0xaf0]
add edx, 1
mov dword [ebp - 0xaf0], edx
cmp dword [ebp - 0xaf0], 1
jge 0x42ab7b
mov eax, dword [ebp - 0xaf0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42ab53
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42ab8f
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42aba5
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xaf4], 0
jmp 0x42abc7
mov edx, dword [ebp - 0xaf4]
add edx, 1
mov dword [ebp - 0xaf4], edx
cmp dword [ebp - 0xaf4], 6
jge 0x42ac06
mov eax, dword [ebp - 0xaf4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42abf6
mov eax, dword [ebp - 0xaf4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42ac01
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42ac04
mov dword [ebp - 0x1c], eax
jmp 0x42abb8
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ac14
jmp 0x42ac1c
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xaf8], 0
jmp 0x42ac3e
cmp dword [ebp - 0xaf8], 0
jge 0x42ac74
mov eax, dword [ebp - 0xaf8]
and eax, 0x80000001
jns 0x42ac59
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42ac69
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42ac72
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42ac2f
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ac82
jmp 0x42ac9f
mov dword [ebp - 0xafc], 0
jmp 0x42acba
cmp dword [ebp - 0xafc], 5
jge 0x42acd3