Function at 0x42e800
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b3120
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x15e8
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x7c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x42e856
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xa
jge 0x42e869
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x42e84d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42e87d
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42e893
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x42e8ac
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0xb
jge 0x42e8dc
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x42e8c1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42e8d1
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42e8da
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42e8a3
mov dword [ebp - 4], 0xfffffffe
call fcn.0042e8ea
jmp 0x42e907
mov dword [ebp - 0x28], 0
jmp 0x42e919
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x13
jge 0x42e92c
mov eax, dword [ebp - 0x28]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42e910
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42e940
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42e956
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], 0
jmp 0x42e96f
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 6
jge 0x42e9b3
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42e989
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42e999
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42e9b1
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42e9b1
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42e966
mov dword [ebp - 4], 0xfffffffe
call fcn.0042e9c1
jmp 0x42e9d0
mov dword [ebp - 4], 2
mov dword [ebp - 0x30], 0
jmp 0x42e9e9
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x16
jge 0x42ea2d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42ea03
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42ea13
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42ea2b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ea2b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42e9e0
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ea3b
jmp 0x42ea4a
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
jmp 0x42ea78
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0x18
jge 0x42ea9e
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
jmp 0x42ea6f
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x50], 2
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
jmp 0x42ead5
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 0x58], 8
jge 0x42eafb
mov edx, dword [ebp - 0x48]
add edx, dword [ebp - 0x4c]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], edx
jmp 0x42eacc
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x5c], 0
jmp 0x42eb1d
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x5c], 0xa
jge 0x42eb53
mov eax, dword [ebp - 0x5c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42eb43
mov eax, dword [ebp - 0x5c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42eb4e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42eb51
mov dword [ebp - 0x1c], eax
jmp 0x42eb14
mov dword [ebp - 4], 0xfffffffe
call fcn.0042eb61
jmp 0x42eb69
mov dword [ebp - 4], 4
mov dword [ebp - 0x60], 0
jmp 0x42eb82
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0xd
jge 0x42ebb2
mov eax, dword [ebp - 0x60]
and eax, 0x80000001
jns 0x42eb97
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42eba7
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42ebb0
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42eb79
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ebc0
jmp 0x42ebdd
mov dword [ebp - 0x64], 0
jmp 0x42ebef
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 0xa
jge 0x42ec02
mov eax, dword [ebp - 0x64]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42ebe6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42ec16
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ec2c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 5
mov dword [ebp - 0x68], 0
jmp 0x42ec45
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 3
jge 0x42ec75
mov eax, dword [ebp - 0x68]
and eax, 0x80000001
jns 0x42ec5a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42ec6a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42ec73
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42ec3c
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ec83
jmp 0x42eca0
mov dword [ebp - 4], 6
mov dword [ebp - 0x6c], 0
jmp 0x42ecb9
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 0
jge 0x42ecfd
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42ecd3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42ece3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42ecfb
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ecfb
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42ecb0
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ed0b
jmp 0x42ed1a
mov dword [ebp - 4], 7
mov dword [ebp - 0x70], 0
jmp 0x42ed33
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 9
jge 0x42ed64
mov edx, dword [ebp - 0x70]
and edx, 0x80000001
jns 0x42ed49
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x42ed59
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x42ed62
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42ed2a
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ed72
jmp 0x42ed90
mov dword [ebp - 0x74], 0
jmp 0x42eda2
mov ecx, dword [ebp - 0x74]
add ecx, 1
mov dword [ebp - 0x74], ecx
cmp dword [ebp - 0x74], 1
jge 0x42edb5
mov edx, dword [ebp - 0x74]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42ed99
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42edc9
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42eddf
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x78], 0
jmp 0x42edf1
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0
jge 0x42ee2f
cmp dword [ebp - 0x1c], 0
jge 0x42ee05
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42ee1b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x278]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42ede8
mov dword [ebp - 4], 8
mov dword [ebp - 0x27c], 0
jmp 0x42ee51
mov eax, dword [ebp - 0x27c]
add eax, 1
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
jge 0x42ee88
mov ecx, dword [ebp - 0x27c]
and ecx, 0x80000001
jns 0x42ee6d
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x42ee7d
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42ee86
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x42ee42
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ee96
jmp 0x42eeb4
mov dword [ebp - 0x280], 0
jmp 0x42eecf
mov eax, dword [ebp - 0x280]
add eax, 1
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 7
jge 0x42eee8
mov ecx, dword [ebp - 0x280]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x42eec0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42eefc
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ef12
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x28c], 2
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x294], 0
jmp 0x42ef55
mov edx, dword [ebp - 0x294]
add edx, 1
mov dword [ebp - 0x294], edx
cmp dword [ebp - 0x294], 0
jge 0x42ef96
mov eax, dword [ebp - 0x284]
add eax, dword [ebp - 0x288]
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0x288]
mov dword [ebp - 0x284], ecx
mov edx, dword [ebp - 0x28c]
mov dword [ebp - 0x288], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x28c]
mov dword [ebp - 0x1c], eax
jmp 0x42ef46
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x2a0], 2
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2a8], 0
jmp 0x42efdf
mov edx, dword [ebp - 0x2a8]
add edx, 1
mov dword [ebp - 0x2a8], edx
cmp dword [ebp - 0x2a8], 7
jge 0x42f020
mov eax, dword [ebp - 0x298]
add eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0x298], ecx
mov edx, dword [ebp - 0x2a0]
mov dword [ebp - 0x29c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x1c], eax
jmp 0x42efd0
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x2ac], 0
jmp 0x42f04b
mov edx, dword [ebp - 0x2ac]
add edx, 1
mov dword [ebp - 0x2ac], edx
cmp dword [ebp - 0x2ac], 8
jge 0x42f081
mov eax, dword [ebp - 0x2ac]
and eax, 0x80000001
jns 0x42f066
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42f076
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42f07f
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42f03c
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f08f
jmp 0x42f0ac
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x2b0], 0
jmp 0x42f0ce
mov edx, dword [ebp - 0x2b0]
add edx, 1
mov dword [ebp - 0x2b0], edx
cmp dword [ebp - 0x2b0], 1
jge 0x42f115
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42f0eb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42f0fb
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42f113
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42f113
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42f0bf
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f123
jmp 0x42f132
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x2bc], 2
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2c4], 0
jmp 0x42f175
mov ecx, dword [ebp - 0x2c4]
add ecx, 1
mov dword [ebp - 0x2c4], ecx
cmp dword [ebp - 0x2c4], 1
jge 0x42f1b6
mov edx, dword [ebp - 0x2b4]
add edx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2bc], edx
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp - 0x2b8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2bc]
mov dword [ebp - 0x1c], edx
jmp 0x42f166
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c8], 0
jmp 0x42f1da
mov ecx, dword [ebp - 0x2c8]
add ecx, 1
mov dword [ebp - 0x2c8], ecx
cmp dword [ebp - 0x2c8], 0
jge 0x42f21b
cmp dword [ebp - 0x1c], 0
jge 0x42f1f1
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42f207
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x4c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42f1cb
mov dword [ebp - 0x4c4], 1
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x4cc], 2
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x4d4], 0
jmp 0x42f25e
mov eax, dword [ebp - 0x4d4]
add eax, 1
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 8
jge 0x42f29f
mov ecx, dword [ebp - 0x4c4]
add ecx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4cc], ecx
mov edx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x4c8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0x1c], ecx
jmp 0x42f24f
mov edx, dword [ebp - 0x1c]
add edx, 8
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x4d8], 0
jmp 0x42f2ca
mov eax, dword [ebp - 0x4d8]
add eax, 1
mov dword [ebp - 0x4d8], eax
cmp dword [ebp - 0x4d8], 1
jge 0x42f305
mov eax, dword [ebp - 0x4d8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42f2f9
mov eax, dword [ebp - 0x4d8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42f300
and eax, 0xbc614e
jmp 0x42f303
mov dword [ebp - 0x1c], eax
jmp 0x42f2bb
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f313
jmp 0x42f31b
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x4dc], 0
jmp 0x42f33d
mov edx, dword [ebp - 0x4dc]
add edx, 1
mov dword [ebp - 0x4dc], edx
cmp dword [ebp - 0x4dc], 4
jge 0x42f373
mov eax, dword [ebp - 0x4dc]
and eax, 0x80000001
jns 0x42f358
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42f368
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42f371
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42f32e
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f381
jmp 0x42f39e
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x4e0], 0
jmp 0x42f3c0
mov edx, dword [ebp - 0x4e0]
add edx, 1
mov dword [ebp - 0x4e0], edx
cmp dword [ebp - 0x4e0], 6
jge 0x42f3f6
mov eax, dword [ebp - 0x4e0]
and eax, 0x80000001
jns 0x42f3db
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42f3eb
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42f3f4
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42f3b1
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f404
jmp 0x42f421
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x4e4], 0
jmp 0x42f443
mov edx, dword [ebp - 0x4e4]
add edx, 1
mov dword [ebp - 0x4e4], edx
cmp dword [ebp - 0x4e4], 7
jge 0x42f482
mov eax, dword [ebp - 0x4e4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42f472
mov eax, dword [ebp - 0x4e4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42f47d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42f480
mov dword [ebp - 0x1c], eax
jmp 0x42f434
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f490
jmp 0x42f498
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x4e8], 0
jmp 0x42f4ba
mov edx, dword [ebp - 0x4e8]
add edx, 1
mov dword [ebp - 0x4e8], edx
cmp dword [ebp - 0x4e8], 3
jge 0x42f4f5
mov eax, dword [ebp - 0x4e8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42f4e9
mov eax, dword [ebp - 0x4e8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42f4f0
and eax, 0xbc614e
jmp 0x42f4f3
mov dword [ebp - 0x1c], eax
jmp 0x42f4ab
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f503
jmp 0x42f50b
mov dword [ebp - 0x4ec], 0
jmp 0x42f526
mov edx, dword [ebp - 0x4ec]
add edx, 1
mov dword [ebp - 0x4ec], edx
cmp dword [ebp - 0x4ec], 5
jge 0x42f567
cmp dword [ebp - 0x1c], 0
jge 0x42f53d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42f553
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6e8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42f517
mov dword [ebp - 0x6ec], 0
jmp 0x42f582
mov eax, dword [ebp - 0x6ec]
add eax, 1
mov dword [ebp - 0x6ec], eax
cmp dword [ebp - 0x6ec], 6
jge 0x42f59b
mov ecx, dword [ebp - 0x6ec]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x42f573
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42f5af
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42f5c5
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x6f0], 0
jmp 0x42f5e7
mov edx, dword [ebp - 0x6f0]
add edx, 1
mov dword [ebp - 0x6f0], edx
cmp dword [ebp - 0x6f0], 7
jge 0x42f622
mov eax, dword [ebp - 0x6f0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42f616
mov eax, dword [ebp - 0x6f0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42f61d
and eax, 0xbc614e
jmp 0x42f620
mov dword [ebp - 0x1c], eax
jmp 0x42f5d8
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f630
jmp 0x42f638
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x6f4], 0
jmp 0x42f65a
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
cmp dword [ebp - 0x6f4], 8
jge 0x42f699
mov eax, dword [ebp - 0x6f4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42f689
mov eax, dword [ebp - 0x6f4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42f694
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42f697
mov dword [ebp - 0x1c], eax
jmp 0x42f64b
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f6a7
jmp 0x42f6af
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x6f8], 0
jmp 0x42f6d1
mov edx, dword [ebp - 0x6f8]
add edx, 1
mov dword [ebp - 0x6f8], edx
cmp dword [ebp - 0x6f8], 3
jge 0x42f710
mov eax, dword [ebp - 0x6f8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42f700
mov eax, dword [ebp - 0x6f8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42f70b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42f70e
mov dword [ebp - 0x1c], eax
jmp 0x42f6c2
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f71e
jmp 0x42f726
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x6fc], 0
jmp 0x42f748
mov edx, dword [ebp - 0x6fc]
add edx, 1
mov dword [ebp - 0x6fc], edx
cmp dword [ebp - 0x6fc], 7
jge 0x42f77e
mov eax, dword [ebp - 0x6fc]
and eax, 0x80000001
jns 0x42f763
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42f773
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42f77c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42f739
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f78c
jmp 0x42f7a9
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x700], 0
jmp 0x42f7cb
mov edx, dword [ebp - 0x700]
add edx, 1
mov dword [ebp - 0x700], edx
cmp dword [ebp - 0x700], 8
jge 0x42f812
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42f7e8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42f7f8
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42f810
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42f810
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42f7bc
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f820
jmp 0x42f82f
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x704], 0
jmp 0x42f851
mov ecx, dword [ebp - 0x704]
add ecx, 1
mov dword [ebp - 0x704], ecx
cmp dword [ebp - 0x704], 3
jge 0x42f890
mov eax, dword [ebp - 0x704]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42f880
mov eax, dword [ebp - 0x704]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42f88b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42f88e
mov dword [ebp - 0x1c], eax
jmp 0x42f842
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f89e
jmp 0x42f8a6
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x708], 0
jmp 0x42f8c8
mov edx, dword [ebp - 0x708]
add edx, 1
mov dword [ebp - 0x708], edx
cmp dword [ebp - 0x708], 5
jge 0x42f8fe
mov eax, dword [ebp - 0x708]
and eax, 0x80000001
jns 0x42f8e3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42f8f3
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42f8fc
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x42f8b9
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f90c
jmp 0x42f929
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0x710], 1
mov dword [ebp - 0x714], 2
mov dword [ebp - 0x718], 0
mov dword [ebp - 0x71c], 0
jmp 0x42f96c
mov edx, dword [ebp - 0x71c]
add edx, 1
mov dword [ebp - 0x71c], edx
cmp dword [ebp - 0x71c], 6
jge 0x42f9ad
mov eax, dword [ebp - 0x70c]
add eax, dword [ebp - 0x710]
mov dword [ebp - 0x714], eax
mov ecx, dword [ebp - 0x710]
mov dword [ebp - 0x70c], ecx
mov edx, dword [ebp - 0x714]
mov dword [ebp - 0x710], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x714]
mov dword [ebp - 0x1c], eax
jmp 0x42f95d
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x720], 0
jmp 0x42f9d8
mov edx, dword [ebp - 0x720]
add edx, 1
mov dword [ebp - 0x720], edx
cmp dword [ebp - 0x720], 3
jge 0x42fa13
mov eax, dword [ebp - 0x720]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42fa07
mov eax, dword [ebp - 0x720]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42fa0e
and eax, 0xbc614e
jmp 0x42fa11
mov dword [ebp - 0x1c], eax
jmp 0x42f9c9
mov dword [ebp - 4], 0xfffffffe
call fcn.0042fa21
jmp 0x42fa29
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x724], 0
jmp 0x42fa4b
mov edx, dword [ebp - 0x724]
add edx, 1
mov dword [ebp - 0x724], edx
cmp dword [ebp - 0x724], 0
jge 0x42fa86
mov eax, dword [ebp - 0x724]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42fa7a
mov eax, dword [ebp - 0x724]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42fa81
and eax, 0xbc614e
jmp 0x42fa84
mov dword [ebp - 0x1c], eax
jmp 0x42fa3c
mov dword [ebp - 4], 0xfffffffe
call fcn.0042fa94
jmp 0x42fa9c
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x728], 0
jmp 0x42fabe
mov edx, dword [ebp - 0x728]
add edx, 1
mov dword [ebp - 0x728], edx
cmp dword [ebp - 0x728], 0
jge 0x42fb05
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42fadb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42faeb
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x42fb03
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42fb03
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x42faaf
mov dword [ebp - 4], 0xfffffffe
call fcn.0042fb13
jmp 0x42fb22
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x72c], 0
jmp 0x42fb44
mov ecx, dword [ebp - 0x72c]
add ecx, 1
mov dword [ebp - 0x72c], ecx
cmp dword [ebp - 0x72c], 2
jge 0x42fb7f
mov eax, dword [ebp - 0x72c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42fb73
mov eax, dword [ebp - 0x72c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42fb7a
and eax, 0xbc614e
jmp 0x42fb7d
mov dword [ebp - 0x1c], eax
jmp 0x42fb35
mov dword [ebp - 4], 0xfffffffe
call fcn.0042fb8d
jmp 0x42fb95
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x730], 0
jmp 0x42fbb7
cmp dword [ebp - 0x730], 7
jge 0x42fbfe
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x42fbd4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42fbe4
mov dword [ebp - 4], 0xfffffffe
call fcn.0042fc0c
jmp 0x42fc1b
mov dword [ebp - 0x734], 0
jmp 0x42fc36