Function at 0x43b130
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x8f4
push ebx
push esi
push edi
mov dword [esp + 0xec], 0x9e24984
mov dword [esp + 0xdc], 0x605c0d6b
mov dword [esp + 0xb0], 0x79d487f8
mov dword [esp + 0x7c], 0x700adbd
mov dword [esp + 0x38], 0x56dc2325
mov dword [esp + 0x30], 0x276cfd6f
mov dword [esp + 0xa8], 0x55a2adfe
mov dword [esp + 0x5c], 0x3d315910
mov dword [esp + 0xb4], 0x4a686f5e
mov dword [esp + 0xc8], 0xdf675fc
mov dword [esp + 0xac], 0x201863b6
mov dword [esp + 0xe0], 0x371562dd
mov dword [esp + 0xa0], 0x7c7dff6c
mov dword [esp + 0x8c], 0x3ae343a3
mov dword [esp + 0xc0], 0x65d93e56
mov dword [esp + 0xf0], 0x6396d69f
mov dword [esp + 0x3c], 0x59167d5b
mov dword [esp + 0xf8], 0x1acfab1c
mov dword [esp + 0x68], 0x5912e71
mov dword [esp + 0x78], 0x20514617
mov dword [esp + 0x54], 0x6f457a3f
mov dword [esp + 0xd8], 0xd98702b
mov dword [esp + 0x98], 0x3e97ce8
mov dword [esp + 0x60], 0x23e0448a
mov dword [esp + 0x6c], 0x67cdf288
mov dword [esp + 0x70], 0x15a6d92f
mov dword [esp + 0x4c], 0x66ad0fed
mov dword [esp + 0x34], 0x2866f99
mov dword [esp + 0x64], 0x65f0e51e
mov dword [esp + 0x90], 0x2a35faba
mov dword [esp + 0xa4], 0x5a4ba7ca
mov dword [esp + 0xcc], 0x1a9fe55d
mov dword [esp + 0x80], 0x698040f4
mov dword [esp + 0xc4], 0x25c84033
mov dword [esp + 0x9c], 0x6dcd1780
mov dword [esp + 0x50], 0xaaaa6aa
mov dword [esp + 0xbc], 0xcda62bb
mov dword [esp + 0x84], 0x4714bd5b
mov dword [esp + 0xd4], 0x16dca5c8
mov dword [esp + 0xb8], 0x2761d781
mov dword [esp + 0xfc], 0x7e4c758b
mov dword [esp + 0x48], 0x68b9c79e
mov dword [esp + 0x88], 0x556e336b
mov dword [esp + 0x74], 0x7a1b6897
mov dword [esp + 0x40], 0x5888ff89
mov dword [esp + 0x94], 0x538cdad4
mov dword [esp + 0x58], 0x66731e49
mov dword [esp + 0xe8], 0x56677530
mov dword [esp + 0xe4], 0x1c71d9c8
mov dword [esp + 0xd0], 0x27bdf4e
mov dword [esp + 0x44], 0xf8c37ce
mov dword [esp + 0xf4], 0x52400e13
sub dword [esp + 0xec], 0x77cdb709
add dword [esp + 0xec], 0x773d8149
add dword [esp + 0xec], 0x589e67ca
mov eax, 0x418dcac7
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
sub dword [esp + 0xec], 0x7e73abbf
mov eax, 0x3712cbed
mul dword [esp + 0xdc]
mov eax, dword [esp + 0xdc]
add dword [esp + 0xdc], 0x399fe126
mov eax, 0xc958898
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
add dword [esp + 0xdc], 0x3f224681
sub dword [esp + 0xdc], 0x405dd1cb
add dword [esp + 0xb0], 0x5a32d31a
mov eax, 0x44e615a4
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
sub dword [esp + 0xdc], 0x426f6649
mov eax, 0x41685797
mul dword [esp + 0xa8]
mov eax, dword [esp + 0xa8]
mov eax, 0x3953315a
mul dword [esp + 0xa8]
mov eax, dword [esp + 0xa8]
add dword [esp + 0x7c], 0x46b2d0b9
mov eax, 0x28a9dbcc
mul dword [esp + 0x30]
mov eax, dword [esp + 0x30]
add dword [esp + 0x5c], 0x29e3897a
add dword [esp + 0x38], 0x6ff8190a
sub dword [esp + 0xac], 0x28fca3d9
sub dword [esp + 0x38], 0xc34a876
add dword [esp + 0x30], 0x1b6ad6c1
add dword [esp + 0x5c], 0x5668cf2d
add dword [esp + 0x7c], 0xd023556
mov eax, 0x1cdf3a70
mul dword [esp + 0xb0]
mov eax, dword [esp + 0xb0]
mov eax, 0x348ecc0
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
mov eax, 0x5983a092
mul dword [esp + 0xc8]
mov eax, dword [esp + 0xc8]
sub dword [esp + 0x7c], 0x3587206a
sub dword [esp + 0xdc], 0xb8e74ec
sub dword [esp + 0x38], 0x644d0468
mov eax, 0x4519b9eb
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
add dword [esp + 0x7c], 0x6789320e
sub dword [esp + 0x38], 0x251287b5
mov eax, 0x69d77f80
mul dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
add dword [esp + 0xec], 0x736aa185
mov eax, 0x45ef14cb
mul dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
mov eax, 0x1d9579b2
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
mov eax, 0x762caa56
mul dword [esp + 0xa0]
mov eax, dword [esp + 0xa0]
add dword [esp + 0xdc], 0x8dc8bf8
sub dword [esp + 0xe0], 0x1ff93d0c
sub dword [esp + 0x8c], 0x73e92624
mov eax, 0x2018162c
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
add dword [esp + 0x38], 0x61822220
mov eax, 0x7eea3770
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
sub dword [esp + 0xc0], 0x50206763
mov eax, 0x5c45851e
mul dword [esp + 0x60]
mov eax, dword [esp + 0x60]
mov eax, 0xadfbd75
mul dword [esp + 0x60]
mov eax, dword [esp + 0x60]
sub dword [esp + 0x7c], 0x47babb50
sub dword [esp + 0x3c], 0x2b3b482f
sub dword [esp + 0x98], 0xb5f8baf
add dword [esp + 0x30], 0x67076b92
mov eax, 0x396b41f6
mul dword [esp + 0xc8]
mov eax, dword [esp + 0xc8]
add dword [esp + 0xf0], 0x4882621e
sub dword [esp + 0xb4], 0x43373a43
mov eax, 0x1c4cd9ed
mul dword [esp + 0xc0]
mov eax, dword [esp + 0xc0]
sub dword [esp + 0x98], 0x52132a96
add dword [esp + 0xec], 0x23248a67
sub dword [esp + 0x78], 0x1c9810
sub dword [esp + 0xb4], 0x49c7d72a
mov eax, 0x4c223ca0
mul dword [esp + 0xa4]
mov eax, dword [esp + 0xa4]
sub dword [esp + 0xa4], 0x5b2508c0
add dword [esp + 0x50], 0x2f2db2c3
sub dword [esp + 0xfc], 0x3fd04540
add dword [esp + 0x50], 0x7711edcc
add dword [esp + 0xcc], 0x2daa49a3
add dword [esp + 0x90], 0x3167ab9a
add dword [esp + 0x84], 0x588b1b7b
sub dword [esp + 0x50], 0xb5a25b4
mov eax, 0x26d62c7f
mul dword [esp + 0xc8]
mov eax, dword [esp + 0xc8]
sub dword [esp + 0xf0], 0x3c9e3821
add dword [esp + 0x50], 0x6d46d1b9
sub dword [esp + 0xf0], 0x57f6f0
sub dword [esp + 0xdc], 0x3940646b
add dword [esp + 0x68], 0x55596761
mov eax, 0x5db31a87
mul dword [esp + 0xc0]
mov eax, dword [esp + 0xc0]
sub dword [esp + 0x3c], 0x147f2ed1
sub dword [esp + 0xfc], 0x42f89e39
add dword [esp + 0x74], 0x726af7eb
add dword [esp + 0xb0], 0x4e7cab1f
mov eax, 0x4a29a8fa
mul dword [esp + 0x64]
mov eax, dword [esp + 0x64]
add dword [esp + 0xcc], 0x4bfd45be
sub dword [esp + 0xd8], 0x4846257c
add dword [esp + 0xb4], 0x491b8f2f
sub dword [esp + 0x74], 0x796a432
mov eax, 0x12daff2
mul dword [esp + 0x34]
mov eax, dword [esp + 0x34]
sub dword [esp + 0x9c], 0x505d05ef
sub dword [esp + 0xbc], 0x20ac9e6f
add dword [esp + 0x38], 0x64347ace
add dword [esp + 0xec], 0x1933b117
mov eax, 0x6d57c640
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
add dword [esp + 0xe4], 0x44e1bf93
mov eax, 0x611a48db
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
add dword [esp + 0xf0], 0xdca512
mov eax, 0x687a3618
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
add dword [esp + 0xc8], 0x6b8709aa
mov eax, 0x1b90675f
mul dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
mov eax, 0x557b034c
mul dword [esp + 0x88]
mov eax, dword [esp + 0x88]
sub dword [esp + 0xc8], 0x753207c8
cmp dword [0x45a9f4], 0x400
jne 0x43b862
xor esi, esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll__hread]
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetCalendarInfoW]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
lea eax, [esp + 0x104]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_DefineDosDeviceA]
push esi
call fcn.0043c3fb
add esp, 4
push esi
push esi
call fcn.0043c950
push esi
push esi
push esi
call fcn.0043cbf5
add esp, 0xc
mov eax, esp
mov dword [eax], esi
mov dword [eax + 4], esi
sub esp, 8
mov eax, esp
mov dword [eax], esi
mov dword [eax + 4], esi
call fcn.0043c0f0
fstp st(0)
add esp, 0x10
mov edi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor esi, esi
mov ecx, dword [esp + 0x30]
push 0
push 0
push ecx
push 0
call edi
call ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, 0x12e8a06
jg 0x43b896
inc esi
cmp esi, 0x30375
jl 0x43b870
mov edi, dword [sym.imp.GDI32.dll_GetCharWidthI]
xor esi, esi
mov edi, edi
cmp esi, 0xa16
jge 0x43b8b4
push 0
push 0
push 0
push 0
push 0
call edi
cmp esi, 0x166c480
jg 0x43b8c5
inc esi
cmp esi, 0x37e3fd1
jl 0x43b8a0
mov edx, dword [0x44edbc]
mov dword [0x45a9f4], edx
call fcn.0043ada0
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov edi, 0x2ec37
mov ebx, 0x51f
cmp dword [0x45a9f4], ebx
jne 0x43b8fa
lea eax, [esp + 0x100]
push eax
push 0
call esi
sub edi, 1
jne 0x43b8e6
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10