Function at 0x439ea0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b3b78
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1b94
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x30], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x439ef6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x37
jge 0x439f09
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x439eed
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x439f1d
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439f33
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x439f4c
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x22
jge 0x439f7c
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x439f61
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x439f71
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x439f7a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x439f43
mov dword [ebp - 4], 0xfffffffe
call fcn.00439f8a
jmp 0x439fa7
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x439fc0
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 7
jge 0x439ff2
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x439fe6
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x439fed
and eax, 0xbc614e
jmp 0x439ff0
mov dword [ebp - 0x1c], eax
jmp 0x439fb7
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a000
jmp 0x43a008
mov dword [ebp - 0x2c], 0
jmp 0x43a01a
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x1a
jge 0x43a058
cmp dword [ebp - 0x1c], 0
jge 0x43a02e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a044
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43a011
mov dword [ebp - 4], 2
mov dword [ebp - 0x22c], 0
jmp 0x43a07a
mov eax, dword [ebp - 0x22c]
add eax, 1
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x1f
jge 0x43a0b5
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a0a9
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a0b0
and eax, 0xbc614e
jmp 0x43a0b3
mov dword [ebp - 0x1c], eax
jmp 0x43a06b
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a0c3
jmp 0x43a0cb
mov dword [ebp - 0x230], 0
jmp 0x43a0e6
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 5
jge 0x43a127
cmp dword [ebp - 0x1c], 0
jge 0x43a0fd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a113
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43a0d7
mov dword [ebp - 0x42c], 0
jmp 0x43a142
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 7
jge 0x43a15b
mov ecx, dword [ebp - 0x42c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43a133
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a16f
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43a185
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x430], 1
mov dword [ebp - 0x434], 1
mov dword [ebp - 0x438], 2
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x440], 0
jmp 0x43a1c8
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 9
jge 0x43a209
mov eax, dword [ebp - 0x430]
add eax, dword [ebp - 0x434]
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x434]
mov dword [ebp - 0x430], ecx
mov edx, dword [ebp - 0x438]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x438]
mov dword [ebp - 0x1c], eax
jmp 0x43a1b9
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x444], 0
jmp 0x43a22d
mov edx, dword [ebp - 0x444]
add edx, 1
mov dword [ebp - 0x444], edx
cmp dword [ebp - 0x444], 0x17
jge 0x43a26e
cmp dword [ebp - 0x1c], 0
jge 0x43a244
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a25a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x640]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43a21e
mov dword [ebp - 4], 3
mov dword [ebp - 0x644], 0
jmp 0x43a290
mov eax, dword [ebp - 0x644]
add eax, 1
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 0
jge 0x43a2cb
mov eax, dword [ebp - 0x644]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a2bf
mov eax, dword [ebp - 0x644]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a2c6
and eax, 0xbc614e
jmp 0x43a2c9
mov dword [ebp - 0x1c], eax
jmp 0x43a281
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a2d9
jmp 0x43a2e1
mov dword [ebp - 0x648], 1
mov dword [ebp - 0x64c], 1
mov dword [ebp - 0x650], 2
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x658], 0
jmp 0x43a324
mov edx, dword [ebp - 0x658]
add edx, 1
mov dword [ebp - 0x658], edx
cmp dword [ebp - 0x658], 0xf
jge 0x43a365
mov eax, dword [ebp - 0x648]
add eax, dword [ebp - 0x64c]
mov dword [ebp - 0x650], eax
mov ecx, dword [ebp - 0x64c]
mov dword [ebp - 0x648], ecx
mov edx, dword [ebp - 0x650]
mov dword [ebp - 0x64c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x650]
mov dword [ebp - 0x1c], eax
jmp 0x43a315
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x65c], 0
jmp 0x43a389
mov edx, dword [ebp - 0x65c]
add edx, 1
mov dword [ebp - 0x65c], edx
cmp dword [ebp - 0x65c], 0xd
jge 0x43a3a2
mov eax, dword [ebp - 0x65c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43a37a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a3b6
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43a3cc
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x660], 0
jmp 0x43a3e7
mov edx, dword [ebp - 0x660]
add edx, 1
mov dword [ebp - 0x660], edx
cmp dword [ebp - 0x660], 0xc
jge 0x43a400
mov eax, dword [ebp - 0x660]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43a3d8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a414
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43a42a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 4
mov dword [ebp - 0x664], 0
jmp 0x43a44c
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x664], edx
cmp dword [ebp - 0x664], 8
jge 0x43a487
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a47b
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a482
and eax, 0xbc614e
jmp 0x43a485
mov dword [ebp - 0x1c], eax
jmp 0x43a43d
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a495
jmp 0x43a49d
mov dword [ebp - 0x668], 1
mov dword [ebp - 0x66c], 1
mov dword [ebp - 0x670], 2
mov dword [ebp - 0x674], 0
mov dword [ebp - 0x678], 0
jmp 0x43a4e0
mov edx, dword [ebp - 0x678]
add edx, 1
mov dword [ebp - 0x678], edx
cmp dword [ebp - 0x678], 0
jge 0x43a521
mov eax, dword [ebp - 0x668]
add eax, dword [ebp - 0x66c]
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x66c]
mov dword [ebp - 0x668], ecx
mov edx, dword [ebp - 0x670]
mov dword [ebp - 0x66c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x670]
mov dword [ebp - 0x1c], eax
jmp 0x43a4d1
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x67c], 0
jmp 0x43a549
mov edx, dword [ebp - 0x67c]
add edx, 1
mov dword [ebp - 0x67c], edx
cmp dword [ebp - 0x67c], 8
jge 0x43a590
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43a566
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43a576
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43a58e
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43a58e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43a53a
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a59e
jmp 0x43a5ad
mov dword [ebp - 4], 6
mov dword [ebp - 0x680], 0
jmp 0x43a5cf
mov ecx, dword [ebp - 0x680]
add ecx, 1
mov dword [ebp - 0x680], ecx
cmp dword [ebp - 0x680], 3
jge 0x43a60a
mov eax, dword [ebp - 0x680]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a5fe
mov eax, dword [ebp - 0x680]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a605
and eax, 0xbc614e
jmp 0x43a608
mov dword [ebp - 0x1c], eax
jmp 0x43a5c0
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a618
jmp 0x43a620
mov dword [ebp - 0x684], 0
jmp 0x43a63b
mov edx, dword [ebp - 0x684]
add edx, 1
mov dword [ebp - 0x684], edx
cmp dword [ebp - 0x684], 0
jge 0x43a654
mov eax, dword [ebp - 0x684]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43a62c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a668
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43a67e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 7
mov dword [ebp - 0x688], 0
jmp 0x43a6a0
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 0xf
jge 0x43a6db
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a6cf
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a6d6
and eax, 0xbc614e
jmp 0x43a6d9
mov dword [ebp - 0x1c], eax
jmp 0x43a691
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a6e9
jmp 0x43a6f1
mov dword [ebp - 4], 8
mov dword [ebp - 0x68c], 0
jmp 0x43a713
mov edx, dword [ebp - 0x68c]
add edx, 1
mov dword [ebp - 0x68c], edx
cmp dword [ebp - 0x68c], 7
jge 0x43a749
mov eax, dword [ebp - 0x68c]
and eax, 0x80000001
jns 0x43a72e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43a73e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43a747
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43a704
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a757
jmp 0x43a774
mov dword [ebp - 0x690], 1
mov dword [ebp - 0x694], 1
mov dword [ebp - 0x698], 2
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x6a0], 0
jmp 0x43a7b7
mov edx, dword [ebp - 0x6a0]
add edx, 1
mov dword [ebp - 0x6a0], edx
cmp dword [ebp - 0x6a0], 5
jge 0x43a7f8
mov eax, dword [ebp - 0x690]
add eax, dword [ebp - 0x694]
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x694]
mov dword [ebp - 0x690], ecx
mov edx, dword [ebp - 0x698]
mov dword [ebp - 0x694], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x698]
mov dword [ebp - 0x1c], eax
jmp 0x43a7a8
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x6a4], 0
jmp 0x43a823
mov edx, dword [ebp - 0x6a4]
add edx, 1
mov dword [ebp - 0x6a4], edx
cmp dword [ebp - 0x6a4], 0
jge 0x43a85e
mov eax, dword [ebp - 0x6a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a852
mov eax, dword [ebp - 0x6a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a859
and eax, 0xbc614e
jmp 0x43a85c
mov dword [ebp - 0x1c], eax
jmp 0x43a814
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a86c
jmp 0x43a874
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x6a8], 0
jmp 0x43a896
mov edx, dword [ebp - 0x6a8]
add edx, 1
mov dword [ebp - 0x6a8], edx
cmp dword [ebp - 0x6a8], 4
jge 0x43a8d1
mov eax, dword [ebp - 0x6a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a8c5
mov eax, dword [ebp - 0x6a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a8cc
and eax, 0xbc614e
jmp 0x43a8cf
mov dword [ebp - 0x1c], eax
jmp 0x43a887
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a8df
jmp 0x43a8e7
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x6ac], 0
jmp 0x43a909
mov edx, dword [ebp - 0x6ac]
add edx, 1
mov dword [ebp - 0x6ac], edx
cmp dword [ebp - 0x6ac], 5
jge 0x43a93f
mov eax, dword [ebp - 0x6ac]
and eax, 0x80000001
jns 0x43a924
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43a934
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43a93d
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43a8fa
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a94d
jmp 0x43a96a
mov dword [ebp - 0x6b0], 0
jmp 0x43a985
mov edx, dword [ebp - 0x6b0]
add edx, 1
mov dword [ebp - 0x6b0], edx
cmp dword [ebp - 0x6b0], 7
jge 0x43a9c6
cmp dword [ebp - 0x1c], 0
jge 0x43a99c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a9b2
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43a976
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x8ac], 0
jmp 0x43a9e8
mov eax, dword [ebp - 0x8ac]
add eax, 1
mov dword [ebp - 0x8ac], eax
cmp dword [ebp - 0x8ac], 0
jge 0x43aa23
mov eax, dword [ebp - 0x8ac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43aa17
mov eax, dword [ebp - 0x8ac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43aa1e
and eax, 0xbc614e
jmp 0x43aa21
mov dword [ebp - 0x1c], eax
jmp 0x43a9d9
mov dword [ebp - 4], 0xfffffffe
call fcn.0043aa31
jmp 0x43aa39
mov dword [ebp - 0x8b0], 0
jmp 0x43aa54
mov edx, dword [ebp - 0x8b0]
add edx, 1
mov dword [ebp - 0x8b0], edx
cmp dword [ebp - 0x8b0], 6
jge 0x43aa95
cmp dword [ebp - 0x1c], 0
jge 0x43aa6b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43aa81
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xaa8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43aa45
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xaac], 0
jmp 0x43aab7
mov eax, dword [ebp - 0xaac]
add eax, 1
mov dword [ebp - 0xaac], eax
cmp dword [ebp - 0xaac], 4
jge 0x43aafe
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43aad4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43aae4
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43aafc
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43aafc
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43aaa8
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ab0c
jmp 0x43ab1b
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xab0], 0
jmp 0x43ab3d
mov ecx, dword [ebp - 0xab0]
add ecx, 1
mov dword [ebp - 0xab0], ecx
cmp dword [ebp - 0xab0], 4
jge 0x43ab7c
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ab6c
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ab77
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43ab7a
mov dword [ebp - 0x1c], eax
jmp 0x43ab2e
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ab8a
jmp 0x43ab92
mov dword [ebp - 0xab4], 0
jmp 0x43abad
mov edx, dword [ebp - 0xab4]
add edx, 1
mov dword [ebp - 0xab4], edx
cmp dword [ebp - 0xab4], 2
jge 0x43abee
cmp dword [ebp - 0x1c], 0
jge 0x43abc4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43abda
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcb0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43ab9e
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xcb4], 0
jmp 0x43ac10
mov eax, dword [ebp - 0xcb4]
add eax, 1
mov dword [ebp - 0xcb4], eax
cmp dword [ebp - 0xcb4], 8
jge 0x43ac47
mov ecx, dword [ebp - 0xcb4]
and ecx, 0x80000001
jns 0x43ac2c
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x43ac3c
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43ac45
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43ac01
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ac55
jmp 0x43ac73
mov dword [ebp - 0xcb8], 0
jmp 0x43ac8e
mov eax, dword [ebp - 0xcb8]
add eax, 1
mov dword [ebp - 0xcb8], eax
cmp dword [ebp - 0xcb8], 0
jge 0x43aca7
mov ecx, dword [ebp - 0xcb8]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43ac7f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43acbb
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43acd1
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xcbc], 0
jmp 0x43acf3
mov edx, dword [ebp - 0xcbc]
add edx, 1
mov dword [ebp - 0xcbc], edx
cmp dword [ebp - 0xcbc], 8
jge 0x43ad32
mov eax, dword [ebp - 0xcbc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ad22
mov eax, dword [ebp - 0xcbc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ad2d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43ad30
mov dword [ebp - 0x1c], eax
jmp 0x43ace4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ad40
jmp 0x43ad48
mov dword [ebp - 0xcc0], 0
jmp 0x43ad63
mov edx, dword [ebp - 0xcc0]
add edx, 1
mov dword [ebp - 0xcc0], edx
cmp dword [ebp - 0xcc0], 6
jge 0x43ada4
cmp dword [ebp - 0x1c], 0
jge 0x43ad7a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43ad90
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xeb8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43ad54
mov dword [ebp - 0xebc], 0
jmp 0x43adbf
mov eax, dword [ebp - 0xebc]
add eax, 1
mov dword [ebp - 0xebc], eax
cmp dword [ebp - 0xebc], 5
jge 0x43add8
mov ecx, dword [ebp - 0xebc]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43adb0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43adec
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43ae02
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xec0], 1
mov dword [ebp - 0xec4], 1
mov dword [ebp - 0xec8], 2
mov dword [ebp - 0xecc], 0
mov dword [ebp - 0xed0], 0
jmp 0x43ae45
mov edx, dword [ebp - 0xed0]
add edx, 1
mov dword [ebp - 0xed0], edx
cmp dword [ebp - 0xed0], 0
jge 0x43ae86
mov eax, dword [ebp - 0xec0]
add eax, dword [ebp - 0xec4]
mov dword [ebp - 0xec8], eax
mov ecx, dword [ebp - 0xec4]
mov dword [ebp - 0xec0], ecx
mov edx, dword [ebp - 0xec8]
mov dword [ebp - 0xec4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xec8]
mov dword [ebp - 0x1c], eax
jmp 0x43ae36
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xed4], 0
jmp 0x43aeae
mov edx, dword [ebp - 0xed4]
add edx, 1
mov dword [ebp - 0xed4], edx
cmp dword [ebp - 0xed4], 3
jge 0x43aee4
mov eax, dword [ebp - 0xed4]
and eax, 0x80000001
jns 0x43aec9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43aed9
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43aee2
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43ae9f
mov dword [ebp - 4], 0xfffffffe
call fcn.0043aef2
jmp 0x43af0f
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xed8], 0
jmp 0x43af31
mov edx, dword [ebp - 0xed8]
add edx, 1
mov dword [ebp - 0xed8], edx
cmp dword [ebp - 0xed8], 2
jge 0x43af6c
mov eax, dword [ebp - 0xed8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43af60
mov eax, dword [ebp - 0xed8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43af67
and eax, 0xbc614e
jmp 0x43af6a
mov dword [ebp - 0x1c], eax
jmp 0x43af22
mov dword [ebp - 4], 0xfffffffe
call fcn.0043af7a
jmp 0x43af82
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xedc], 0
jmp 0x43afa4
mov edx, dword [ebp - 0xedc]
add edx, 1
mov dword [ebp - 0xedc], edx
cmp dword [ebp - 0xedc], 1
jge 0x43afe3
mov eax, dword [ebp - 0xedc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43afd3
mov eax, dword [ebp - 0xedc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43afde
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43afe1
mov dword [ebp - 0x1c], eax
jmp 0x43af95
mov dword [ebp - 4], 0xfffffffe
call fcn.0043aff1
jmp 0x43aff9
mov dword [ebp - 0xee0], 0
jmp 0x43b014
mov edx, dword [ebp - 0xee0]
add edx, 1
mov dword [ebp - 0xee0], edx
cmp dword [ebp - 0xee0], 2
jge 0x43b055
cmp dword [ebp - 0x1c], 0
jge 0x43b02b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43b041
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43b005
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x10dc], 0
jmp 0x43b077
mov eax, dword [ebp - 0x10dc]
add eax, 1
mov dword [ebp - 0x10dc], eax
cmp dword [ebp - 0x10dc], 1
jge 0x43b0b2
mov eax, dword [ebp - 0x10dc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b0a6
mov eax, dword [ebp - 0x10dc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b0ad
and eax, 0xbc614e
jmp 0x43b0b0
mov dword [ebp - 0x1c], eax
jmp 0x43b068
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b0c0
jmp 0x43b0c8
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x10e0], 0
jmp 0x43b0ea
mov edx, dword [ebp - 0x10e0]
add edx, 1
mov dword [ebp - 0x10e0], edx
cmp dword [ebp - 0x10e0], 3
jge 0x43b129
mov eax, dword [ebp - 0x10e0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b119
mov eax, dword [ebp - 0x10e0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b124
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43b127
mov dword [ebp - 0x1c], eax
jmp 0x43b0db
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b137
jmp 0x43b13f
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x10e4], 0
jmp 0x43b161
mov edx, dword [ebp - 0x10e4]
add edx, 1
mov dword [ebp - 0x10e4], edx
cmp dword [ebp - 0x10e4], 4
jge 0x43b19c
mov eax, dword [ebp - 0x10e4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b190
mov eax, dword [ebp - 0x10e4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b197
and eax, 0xbc614e
jmp 0x43b19a
mov dword [ebp - 0x1c], eax
jmp 0x43b152
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b1aa
jmp 0x43b1b2
mov dword [ebp - 0x10e8], 0
jmp 0x43b1cd
mov edx, dword [ebp - 0x10e8]
add edx, 1
mov dword [ebp - 0x10e8], edx
cmp dword [ebp - 0x10e8], 2
jge 0x43b1e6
mov eax, dword [ebp - 0x10e8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43b1be
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43b1fa
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43b210
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x10ec], 0
jmp 0x43b232
cmp dword [ebp - 0x10ec], 0
jge 0x43b26d