Function at 0x42d2f0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b2fe0
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff328
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x42d33f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x18
jge 0x42d37d
cmp dword [ebp - 0x1c], 0
jge 0x42d353
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42d369
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42d336
mov dword [ebp - 4], 0
mov dword [ebp - 0x224], 0
jmp 0x42d39f
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x38
jge 0x42d3de
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42d3ce
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42d3d9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42d3dc
mov dword [ebp - 0x1c], eax
jmp 0x42d390
mov dword [ebp - 4], 0xfffffffe
call fcn.0042d3ec
jmp 0x42d3f4
mov dword [ebp - 0x228], 0
jmp 0x42d40f
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0xa
jge 0x42d450
cmp dword [ebp - 0x1c], 0
jge 0x42d426
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42d43c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42d400
mov dword [ebp - 4], 1
mov dword [ebp - 0x424], 0
jmp 0x42d472
mov eax, dword [ebp - 0x424]
add eax, 1
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 7
jge 0x42d4b9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42d48f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42d49f
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x42d4b7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42d4b7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42d463
mov dword [ebp - 4], 0xfffffffe
call fcn.0042d4c7
jmp 0x42d4d6
mov dword [ebp - 0x428], 0
jmp 0x42d4f1
mov ecx, dword [ebp - 0x428]
add ecx, 1
mov dword [ebp - 0x428], ecx
cmp dword [ebp - 0x428], 0xc
jge 0x42d50a
mov edx, dword [ebp - 0x428]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42d4e2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42d51e
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42d534
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x42c], 0
jmp 0x42d54f
mov edx, dword [ebp - 0x42c]
add edx, 1
mov dword [ebp - 0x42c], edx
cmp dword [ebp - 0x42c], 0xf
jge 0x42d568
mov eax, dword [ebp - 0x42c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42d540
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42d57c
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42d592
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x430], 0
jmp 0x42d5b4
mov edx, dword [ebp - 0x430]
add edx, 1
mov dword [ebp - 0x430], edx
cmp dword [ebp - 0x430], 6
jge 0x42d5ef
mov eax, dword [ebp - 0x430]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42d5e3
mov eax, dword [ebp - 0x430]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42d5ea
and eax, 0xbc614e
jmp 0x42d5ed
mov dword [ebp - 0x1c], eax
jmp 0x42d5a5
mov dword [ebp - 4], 0xfffffffe
call fcn.0042d5fd
jmp 0x42d605
mov dword [ebp - 0x434], 0
jmp 0x42d620
mov edx, dword [ebp - 0x434]
add edx, 1
mov dword [ebp - 0x434], edx
cmp dword [ebp - 0x434], 0xe
jge 0x42d639
mov eax, dword [ebp - 0x434]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42d611
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42d64d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42d663
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 3
mov dword [ebp - 0x438], 0
jmp 0x42d685
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 7
jge 0x42d6c0
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42d6b4
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42d6bb
and eax, 0xbc614e
jmp 0x42d6be
mov dword [ebp - 0x1c], eax
jmp 0x42d676
mov dword [ebp - 4], 0xfffffffe
call fcn.0042d6ce
jmp 0x42d6d6
mov dword [ebp - 0x43c], 0
jmp 0x42d6f1
mov edx, dword [ebp - 0x43c]
add edx, 1
mov dword [ebp - 0x43c], edx
cmp dword [ebp - 0x43c], 8
jge 0x42d70a
mov eax, dword [ebp - 0x43c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42d6e2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42d71e
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42d734
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x440], 1
mov dword [ebp - 0x444], 1
mov dword [ebp - 0x448], 2
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x450], 0
jmp 0x42d777
mov edx, dword [ebp - 0x450]
add edx, 1
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x450], 1
jge 0x42d7b8
mov eax, dword [ebp - 0x440]
add eax, dword [ebp - 0x444]
mov dword [ebp - 0x448], eax
mov ecx, dword [ebp - 0x444]
mov dword [ebp - 0x440], ecx
mov edx, dword [ebp - 0x448]
mov dword [ebp - 0x444], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x448]
mov dword [ebp - 0x1c], eax
jmp 0x42d768
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x454], 0
jmp 0x42d7dc
mov edx, dword [ebp - 0x454]
add edx, 1
mov dword [ebp - 0x454], edx
cmp dword [ebp - 0x454], 7
jge 0x42d7f5
mov eax, dword [ebp - 0x454]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42d7cd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42d809
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42d81f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 4
mov dword [ebp - 0x458], 0
jmp 0x42d841
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 2
jge 0x42d877
mov eax, dword [ebp - 0x458]
and eax, 0x80000001
jns 0x42d85c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42d86c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42d875
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42d832
mov dword [ebp - 4], 0xfffffffe
call fcn.0042d885
jmp 0x42d8a2
mov dword [ebp - 4], 5
mov dword [ebp - 0x45c], 0
jmp 0x42d8c4
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 1
jge 0x42d8ff
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42d8f3
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42d8fa
and eax, 0xbc614e
jmp 0x42d8fd
mov dword [ebp - 0x1c], eax
jmp 0x42d8b5
mov dword [ebp - 4], 0xfffffffe
call fcn.0042d90d
jmp 0x42d915
mov dword [ebp - 0x460], 0
jmp 0x42d930
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 1
jge 0x42d949
mov eax, dword [ebp - 0x460]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42d921
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42d95d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42d973
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x464], 0
jmp 0x42d98e
mov edx, dword [ebp - 0x464]
add edx, 1
mov dword [ebp - 0x464], edx
cmp dword [ebp - 0x464], 5
jge 0x42d9a7
mov eax, dword [ebp - 0x464]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42d97f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42d9bb
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42d9d1
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x468], 0
jmp 0x42d9ec
mov edx, dword [ebp - 0x468]
add edx, 1
mov dword [ebp - 0x468], edx
cmp dword [ebp - 0x468], 5
jge 0x42da05
mov eax, dword [ebp - 0x468]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42d9dd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42da19
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42da2f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x46c], 0
jmp 0x42da51
mov edx, dword [ebp - 0x46c]
add edx, 1
mov dword [ebp - 0x46c], edx
cmp dword [ebp - 0x46c], 5
jge 0x42da90
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42da80
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42da8b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42da8e
mov dword [ebp - 0x1c], eax
jmp 0x42da42
mov dword [ebp - 4], 0xfffffffe
call fcn.0042da9e
jmp 0x42daa6
mov dword [ebp - 4], 7
mov dword [ebp - 0x470], 0
jmp 0x42dac8
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 8
jge 0x42db07
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42daf7
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42db02
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42db05
mov dword [ebp - 0x1c], eax
jmp 0x42dab9
mov dword [ebp - 4], 0xfffffffe
call fcn.0042db15
jmp 0x42db1d
mov dword [ebp - 0x474], 0
jmp 0x42db38
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 4
jge 0x42db51
mov eax, dword [ebp - 0x474]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42db29
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42db65
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42db7b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x478], 0
jmp 0x42db9d
mov edx, dword [ebp - 0x478]
add edx, 1
mov dword [ebp - 0x478], edx
cmp dword [ebp - 0x478], 7
jge 0x42dbdc
mov eax, dword [ebp - 0x478]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42dbcc
mov eax, dword [ebp - 0x478]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42dbd7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42dbda
mov dword [ebp - 0x1c], eax
jmp 0x42db8e
mov dword [ebp - 4], 0xfffffffe
call fcn.0042dbea
jmp 0x42dbf2
mov dword [ebp - 4], 9
mov dword [ebp - 0x47c], 0
jmp 0x42dc14
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
cmp dword [ebp - 0x47c], 0
jge 0x42dc4a
mov eax, dword [ebp - 0x47c]
and eax, 0x80000001
jns 0x42dc2f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42dc3f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42dc48
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42dc05
mov dword [ebp - 4], 0xfffffffe
call fcn.0042dc58
jmp 0x42dc75
mov dword [ebp - 0x480], 0
jmp 0x42dc90
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 5
jge 0x42dca9
mov eax, dword [ebp - 0x480]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42dc81
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42dcbd
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42dcd3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x484], 0
jmp 0x42dcf5
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 0
jge 0x42dd2b
mov eax, dword [ebp - 0x484]
and eax, 0x80000001
jns 0x42dd10
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42dd20
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42dd29
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42dce6
mov dword [ebp - 4], 0xfffffffe
call fcn.0042dd39
jmp 0x42dd56
mov dword [ebp - 0x488], 0
jmp 0x42dd71
mov edx, dword [ebp - 0x488]
add edx, 1
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 4
jge 0x42dd8a
mov eax, dword [ebp - 0x488]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42dd62
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42dd9e
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ddb4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x48c], 0
jmp 0x42ddcf
mov edx, dword [ebp - 0x48c]
add edx, 1
mov dword [ebp - 0x48c], edx
cmp dword [ebp - 0x48c], 8
jge 0x42de10
cmp dword [ebp - 0x1c], 0
jge 0x42dde6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42ddfc
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x688]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42ddc0
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x68c], 0
jmp 0x42de32
mov eax, dword [ebp - 0x68c]
add eax, 1
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 3
jge 0x42de79
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42de4f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42de5f
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x42de77
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42de77
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42de23
mov dword [ebp - 4], 0xfffffffe
call fcn.0042de87
jmp 0x42de96
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x690], 0
jmp 0x42deb8
mov ecx, dword [ebp - 0x690]
add ecx, 1
mov dword [ebp - 0x690], ecx
cmp dword [ebp - 0x690], 5
jge 0x42def3
mov eax, dword [ebp - 0x690]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42dee7
mov eax, dword [ebp - 0x690]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42deee
and eax, 0xbc614e
jmp 0x42def1
mov dword [ebp - 0x1c], eax
jmp 0x42dea9
mov dword [ebp - 4], 0xfffffffe
call fcn.0042df01
jmp 0x42df09
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x694], 0
jmp 0x42df2b
mov edx, dword [ebp - 0x694]
add edx, 1
mov dword [ebp - 0x694], edx
cmp dword [ebp - 0x694], 1
jge 0x42df61
mov eax, dword [ebp - 0x694]
and eax, 0x80000001
jns 0x42df46
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42df56
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42df5f
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42df1c
mov dword [ebp - 4], 0xfffffffe
call fcn.0042df6f
jmp 0x42df8c
mov dword [ebp - 0x698], 1
mov dword [ebp - 0x69c], 1
mov dword [ebp - 0x6a0], 2
mov dword [ebp - 0x6a4], 0
mov dword [ebp - 0x6a8], 0
jmp 0x42dfcf
mov edx, dword [ebp - 0x6a8]
add edx, 1
mov dword [ebp - 0x6a8], edx
cmp dword [ebp - 0x6a8], 7
jge 0x42e010
mov eax, dword [ebp - 0x698]
add eax, dword [ebp - 0x69c]
mov dword [ebp - 0x6a0], eax
mov ecx, dword [ebp - 0x69c]
mov dword [ebp - 0x698], ecx
mov edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x69c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x1c], eax
jmp 0x42dfc0
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6ac], 0
jmp 0x42e034
mov edx, dword [ebp - 0x6ac]
add edx, 1
mov dword [ebp - 0x6ac], edx
cmp dword [ebp - 0x6ac], 7
jge 0x42e04d
mov eax, dword [ebp - 0x6ac]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42e025
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42e061
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42e077
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x6b0], 0
jmp 0x42e099
mov edx, dword [ebp - 0x6b0]
add edx, 1
mov dword [ebp - 0x6b0], edx
cmp dword [ebp - 0x6b0], 6
jge 0x42e0e0
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42e0b6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42e0c6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42e0de
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42e0de
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42e08a
mov dword [ebp - 4], 0xfffffffe
call fcn.0042e0ee
jmp 0x42e0fd
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x6b4], 0
jmp 0x42e11f
mov ecx, dword [ebp - 0x6b4]
add ecx, 1
mov dword [ebp - 0x6b4], ecx
cmp dword [ebp - 0x6b4], 8
jge 0x42e156
mov edx, dword [ebp - 0x6b4]
and edx, 0x80000001
jns 0x42e13b
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x42e14b
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x42e154
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42e110
mov dword [ebp - 4], 0xfffffffe
call fcn.0042e164
jmp 0x42e182
mov dword [ebp - 0x6b8], 0
jmp 0x42e19d
mov ecx, dword [ebp - 0x6b8]
add ecx, 1
mov dword [ebp - 0x6b8], ecx
cmp dword [ebp - 0x6b8], 3
jge 0x42e1de
cmp dword [ebp - 0x1c], 0
jge 0x42e1b4
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42e1ca
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42e18e
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8b4], 0
jmp 0x42e200
mov eax, dword [ebp - 0x8b4]
add eax, 1
mov dword [ebp - 0x8b4], eax
cmp dword [ebp - 0x8b4], 3
jge 0x42e23b
mov eax, dword [ebp - 0x8b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42e22f
mov eax, dword [ebp - 0x8b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42e236
and eax, 0xbc614e
jmp 0x42e239
mov dword [ebp - 0x1c], eax
jmp 0x42e1f1
mov dword [ebp - 4], 0xfffffffe
call fcn.0042e249
jmp 0x42e251
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x8bc], 1
mov dword [ebp - 0x8c0], 2
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0x8c8], 0
jmp 0x42e294
mov edx, dword [ebp - 0x8c8]
add edx, 1
mov dword [ebp - 0x8c8], edx
cmp dword [ebp - 0x8c8], 4
jge 0x42e2d5
mov eax, dword [ebp - 0x8b8]
add eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c0], eax
mov ecx, dword [ebp - 0x8bc]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x8c0]
mov dword [ebp - 0x8bc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x1c], eax
jmp 0x42e285
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8cc], 0
jmp 0x42e300
mov edx, dword [ebp - 0x8cc]
add edx, 1
mov dword [ebp - 0x8cc], edx
cmp dword [ebp - 0x8cc], 7
jge 0x42e347
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42e31d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42e32d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42e345
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42e345
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42e2f1
mov dword [ebp - 4], 0xfffffffe
call fcn.0042e355
jmp 0x42e364
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x8d0], 0
jmp 0x42e386
mov ecx, dword [ebp - 0x8d0]
add ecx, 1
mov dword [ebp - 0x8d0], ecx
cmp dword [ebp - 0x8d0], 0
jge 0x42e3c5
mov eax, dword [ebp - 0x8d0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42e3b5
mov eax, dword [ebp - 0x8d0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42e3c0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42e3c3
mov dword [ebp - 0x1c], eax
jmp 0x42e377
mov dword [ebp - 4], 0xfffffffe
call fcn.0042e3d3
jmp 0x42e3db
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x8d4], 0
jmp 0x42e3fd
mov edx, dword [ebp - 0x8d4]
add edx, 1
mov dword [ebp - 0x8d4], edx
cmp dword [ebp - 0x8d4], 0
jge 0x42e438
mov eax, dword [ebp - 0x8d4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42e42c
mov eax, dword [ebp - 0x8d4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42e433
and eax, 0xbc614e
jmp 0x42e436
mov dword [ebp - 0x1c], eax
jmp 0x42e3ee
mov dword [ebp - 4], 0xfffffffe
call fcn.0042e446
jmp 0x42e44e
mov dword [ebp - 0x8d8], 0
jmp 0x42e469
mov edx, dword [ebp - 0x8d8]
add edx, 1
mov dword [ebp - 0x8d8], edx
cmp dword [ebp - 0x8d8], 0
jge 0x42e4aa
cmp dword [ebp - 0x1c], 0
jge 0x42e480
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42e496
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xad0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42e45a
mov dword [ebp - 0xad4], 0
jmp 0x42e4c5
cmp dword [ebp - 0xad4], 1
jge 0x42e506
cmp dword [ebp - 0x1c], 0
jge 0x42e4dc
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42e4f2
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcd0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42e4b6
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xcd4], 0
jmp 0x42e528
cmp dword [ebp - 0xcd4], 4
jge 0x42e563
mov eax, dword [ebp - 0xcd4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42e557
mov dword [ebp - 4], 0xfffffffe
call fcn.0042e571
jmp 0x42e579