Function at 0x437850
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b3928
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1bb0
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x68], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x4378a6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xb
jge 0x4378b9
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43789d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4378cd
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4378e3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x24], 0
jmp 0x4378f5
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1c
jge 0x437908
mov eax, dword [ebp - 0x24]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4378ec
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43791c
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x437932
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x28], 0
jmp 0x43794b
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 8
jge 0x43798f
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x437965
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x437975
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43798d
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43798d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x437942
mov dword [ebp - 4], 0xfffffffe
call fcn.0043799d
jmp 0x4379ac
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], 0
jmp 0x4379c5
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 9
jge 0x4379f6
mov edx, dword [ebp - 0x2c]
and edx, 0x80000001
jns 0x4379db
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x4379eb
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4379f4
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4379bc
mov dword [ebp - 4], 0xfffffffe
call fcn.00437a04
jmp 0x437a22
mov dword [ebp - 4], 2
mov dword [ebp - 0x30], 0
jmp 0x437a3b
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0xf
jge 0x437a6d
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x437a61
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x437a68
and eax, 0xbc614e
jmp 0x437a6b
mov dword [ebp - 0x1c], eax
jmp 0x437a32
mov dword [ebp - 4], 0xfffffffe
call fcn.00437a7b
jmp 0x437a83
mov dword [ebp - 4], 3
mov dword [ebp - 0x34], 0
jmp 0x437a9c
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 4
jge 0x437ace
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x437ac2
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x437ac9
and eax, 0xbc614e
jmp 0x437acc
mov dword [ebp - 0x1c], eax
jmp 0x437a93
mov dword [ebp - 4], 0xfffffffe
call fcn.00437adc
jmp 0x437ae4
mov dword [ebp - 4], 4
mov dword [ebp - 0x38], 0
jmp 0x437afd
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 8
jge 0x437b33
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x437b23
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x437b2e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x437b31
mov dword [ebp - 0x1c], eax
jmp 0x437af4
mov dword [ebp - 4], 0xfffffffe
call fcn.00437b41
jmp 0x437b49
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
jmp 0x437b77
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0xa
jge 0x437b9d
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x437b6e
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x58], 2
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
jmp 0x437bd4
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0
jge 0x437bfa
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
jmp 0x437bcb
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x64], 0
jmp 0x437c12
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 0xa
jge 0x437c50
cmp dword [ebp - 0x1c], 0
jge 0x437c26
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x437c3c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x260]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x437c09
mov dword [ebp - 0x264], 0
jmp 0x437c6b
mov eax, dword [ebp - 0x264]
add eax, 1
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 6
jge 0x437c84
mov ecx, dword [ebp - 0x264]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x437c5c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x437c98
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x437cae
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x268], 0
jmp 0x437cc9
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 0xc
jge 0x437d0a
cmp dword [ebp - 0x1c], 0
jge 0x437ce0
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x437cf6
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x437cba
mov dword [ebp - 4], 5
mov dword [ebp - 0x464], 0
jmp 0x437d2c
mov eax, dword [ebp - 0x464]
add eax, 1
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 1
jge 0x437d63
mov ecx, dword [ebp - 0x464]
and ecx, 0x80000001
jns 0x437d48
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x437d58
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x437d61
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x437d1d
mov dword [ebp - 4], 0xfffffffe
call fcn.00437d71
jmp 0x437d8f
mov dword [ebp - 4], 6
mov dword [ebp - 0x468], 0
jmp 0x437db1
mov eax, dword [ebp - 0x468]
add eax, 1
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 7
jge 0x437df0
mov eax, dword [ebp - 0x468]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x437de0
mov eax, dword [ebp - 0x468]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x437deb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x437dee
mov dword [ebp - 0x1c], eax
jmp 0x437da2
mov dword [ebp - 4], 0xfffffffe
call fcn.00437dfe
jmp 0x437e06
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x474], 2
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x47c], 0
jmp 0x437e49
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
cmp dword [ebp - 0x47c], 0xc
jge 0x437e8a
mov eax, dword [ebp - 0x46c]
add eax, dword [ebp - 0x470]
mov dword [ebp - 0x474], eax
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x46c], ecx
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x470], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x474]
mov dword [ebp - 0x1c], eax
jmp 0x437e3a
mov ecx, dword [ebp - 0x1c]
add ecx, 0xc
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x480], 0
jmp 0x437eae
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 4
jge 0x437eef
cmp dword [ebp - 0x1c], 0
jge 0x437ec5
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x437edb
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x678]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x437e9f
mov dword [ebp - 4], 7
mov dword [ebp - 0x67c], 0
jmp 0x437f11
mov eax, dword [ebp - 0x67c]
add eax, 1
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 0xd
jge 0x437f58
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x437f2e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x437f3e
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x437f56
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x437f56
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x437f02
mov dword [ebp - 4], 0xfffffffe
call fcn.00437f66
jmp 0x437f75
mov dword [ebp - 4], 8
mov dword [ebp - 0x680], 0
jmp 0x437f97
mov ecx, dword [ebp - 0x680]
add ecx, 1
mov dword [ebp - 0x680], ecx
cmp dword [ebp - 0x680], 1
jge 0x437fd6
mov eax, dword [ebp - 0x680]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x437fc6
mov eax, dword [ebp - 0x680]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x437fd1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x437fd4
mov dword [ebp - 0x1c], eax
jmp 0x437f88
mov dword [ebp - 4], 0xfffffffe
call fcn.00437fe4
jmp 0x437fec
mov dword [ebp - 4], 9
mov dword [ebp - 0x684], 0
jmp 0x43800e
mov edx, dword [ebp - 0x684]
add edx, 1
mov dword [ebp - 0x684], edx
cmp dword [ebp - 0x684], 3
jge 0x438049
mov eax, dword [ebp - 0x684]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43803d
mov eax, dword [ebp - 0x684]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x438044
and eax, 0xbc614e
jmp 0x438047
mov dword [ebp - 0x1c], eax
jmp 0x437fff
mov dword [ebp - 4], 0xfffffffe
call fcn.00438057
jmp 0x43805f
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x688], 0
jmp 0x438081
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 4
jge 0x4380c0
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4380b0
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4380bb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4380be
mov dword [ebp - 0x1c], eax
jmp 0x438072
mov dword [ebp - 4], 0xfffffffe
call fcn.004380ce
jmp 0x4380d6
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x68c], 0
jmp 0x4380f8
mov edx, dword [ebp - 0x68c]
add edx, 1
mov dword [ebp - 0x68c], edx
cmp dword [ebp - 0x68c], 1
jge 0x43813f
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x438115
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x438125
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43813d
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43813d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4380e9
mov dword [ebp - 4], 0xfffffffe
call fcn.0043814d
jmp 0x43815c
mov dword [ebp - 0x690], 1
mov dword [ebp - 0x694], 1
mov dword [ebp - 0x698], 2
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x6a0], 0
jmp 0x43819f
mov ecx, dword [ebp - 0x6a0]
add ecx, 1
mov dword [ebp - 0x6a0], ecx
cmp dword [ebp - 0x6a0], 8
jge 0x4381e0
mov edx, dword [ebp - 0x690]
add edx, dword [ebp - 0x694]
mov dword [ebp - 0x698], edx
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x690], eax
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 0x694], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x698]
mov dword [ebp - 0x1c], edx
jmp 0x438190
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x6a4], 0
jmp 0x43820b
mov ecx, dword [ebp - 0x6a4]
add ecx, 1
mov dword [ebp - 0x6a4], ecx
cmp dword [ebp - 0x6a4], 3
jge 0x438246
mov eax, dword [ebp - 0x6a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43823a
mov eax, dword [ebp - 0x6a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x438241
and eax, 0xbc614e
jmp 0x438244
mov dword [ebp - 0x1c], eax
jmp 0x4381fc
mov dword [ebp - 4], 0xfffffffe
call fcn.00438254
jmp 0x43825c
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x6a8], 0
jmp 0x43827e
mov edx, dword [ebp - 0x6a8]
add edx, 1
mov dword [ebp - 0x6a8], edx
cmp dword [ebp - 0x6a8], 3
jge 0x4382c5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43829b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4382ab
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4382c3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4382c3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43826f
mov dword [ebp - 4], 0xfffffffe
call fcn.004382d3
jmp 0x4382e2
mov dword [ebp - 0x6ac], 0
jmp 0x4382fd
mov ecx, dword [ebp - 0x6ac]
add ecx, 1
mov dword [ebp - 0x6ac], ecx
cmp dword [ebp - 0x6ac], 5
jge 0x438316
mov edx, dword [ebp - 0x6ac]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4382ee
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43832a
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x438340
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x6b0], 0
jmp 0x438362
mov edx, dword [ebp - 0x6b0]
add edx, 1
mov dword [ebp - 0x6b0], edx
cmp dword [ebp - 0x6b0], 3
jge 0x438398
mov eax, dword [ebp - 0x6b0]
and eax, 0x80000001
jns 0x43837d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43838d
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x438396
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x438353
mov dword [ebp - 4], 0xfffffffe
call fcn.004383a6
jmp 0x4383c3
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x6b4], 0
jmp 0x4383e5
mov edx, dword [ebp - 0x6b4]
add edx, 1
mov dword [ebp - 0x6b4], edx
cmp dword [ebp - 0x6b4], 2
jge 0x438420
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x438414
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43841b
and eax, 0xbc614e
jmp 0x43841e
mov dword [ebp - 0x1c], eax
jmp 0x4383d6
mov dword [ebp - 4], 0xfffffffe
call fcn.0043842e
jmp 0x438436
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x6b8], 0
jmp 0x438458
mov edx, dword [ebp - 0x6b8]
add edx, 1
mov dword [ebp - 0x6b8], edx
cmp dword [ebp - 0x6b8], 7
jge 0x43849f
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x438475
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x438485
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43849d
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43849d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x438449
mov dword [ebp - 4], 0xfffffffe
call fcn.004384ad
jmp 0x4384bc
mov dword [ebp - 0x6bc], 0
jmp 0x4384d7
mov ecx, dword [ebp - 0x6bc]
add ecx, 1
mov dword [ebp - 0x6bc], ecx
cmp dword [ebp - 0x6bc], 7
jge 0x438518
cmp dword [ebp - 0x1c], 0
jge 0x4384ee
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x438504
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4384c8
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8bc], 0
jmp 0x43853a
mov eax, dword [ebp - 0x8bc]
add eax, 1
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x8bc], 6
jge 0x438571
mov ecx, dword [ebp - 0x8bc]
and ecx, 0x80000001
jns 0x438556
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x438566
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43856f
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43852b
mov dword [ebp - 4], 0xfffffffe
call fcn.0043857f
jmp 0x43859d
mov dword [ebp - 0x8c0], 0
jmp 0x4385b8
mov eax, dword [ebp - 0x8c0]
add eax, 1
mov dword [ebp - 0x8c0], eax
cmp dword [ebp - 0x8c0], 8
jge 0x4385f9
cmp dword [ebp - 0x1c], 0
jge 0x4385cf
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4385e5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xab8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4385a9
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xabc], 0
jmp 0x43861b
mov eax, dword [ebp - 0xabc]
add eax, 1
mov dword [ebp - 0xabc], eax
cmp dword [ebp - 0xabc], 1
jge 0x438652
mov ecx, dword [ebp - 0xabc]
and ecx, 0x80000001
jns 0x438637
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x438647
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x438650
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43860c
mov dword [ebp - 4], 0xfffffffe
call fcn.00438660
jmp 0x43867e
mov dword [ebp - 0xac0], 0
jmp 0x438699
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
cmp dword [ebp - 0xac0], 0
jge 0x4386da
cmp dword [ebp - 0x1c], 0
jge 0x4386b0
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4386c6
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcb8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43868a
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xcbc], 0
jmp 0x4386fc
mov eax, dword [ebp - 0xcbc]
add eax, 1
mov dword [ebp - 0xcbc], eax
cmp dword [ebp - 0xcbc], 6
jge 0x438733
mov ecx, dword [ebp - 0xcbc]
and ecx, 0x80000001
jns 0x438718
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x438728
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x438731
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4386ed
mov dword [ebp - 4], 0xfffffffe
call fcn.00438741
jmp 0x43875f
mov dword [ebp - 0xcc0], 0
jmp 0x43877a
mov eax, dword [ebp - 0xcc0]
add eax, 1
mov dword [ebp - 0xcc0], eax
cmp dword [ebp - 0xcc0], 7
jge 0x438793
mov ecx, dword [ebp - 0xcc0]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43876b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4387a7
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4387bd
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xcc4], 0
jmp 0x4387df
mov edx, dword [ebp - 0xcc4]
add edx, 1
mov dword [ebp - 0xcc4], edx
cmp dword [ebp - 0xcc4], 4
jge 0x438826
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4387fc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43880c
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x438824
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x438824
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4387d0
mov dword [ebp - 4], 0xfffffffe
call fcn.00438834
jmp 0x438843
mov dword [ebp - 0xcc8], 0
jmp 0x43885e
mov ecx, dword [ebp - 0xcc8]
add ecx, 1
mov dword [ebp - 0xcc8], ecx
cmp dword [ebp - 0xcc8], 8
jge 0x43889f
cmp dword [ebp - 0x1c], 0
jge 0x438875
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43888b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xec0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43884f
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xec4], 0
jmp 0x4388c1
mov eax, dword [ebp - 0xec4]
add eax, 1
mov dword [ebp - 0xec4], eax
cmp dword [ebp - 0xec4], 7
jge 0x438908
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4388de
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4388ee
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x438906
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x438906
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4388b2
mov dword [ebp - 4], 0xfffffffe
call fcn.00438916
jmp 0x438925
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xec8], 0
jmp 0x438947
mov ecx, dword [ebp - 0xec8]
add ecx, 1
mov dword [ebp - 0xec8], ecx
cmp dword [ebp - 0xec8], 5
jge 0x43898e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x438964
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x438974
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43898c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43898c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x438938
mov dword [ebp - 4], 0xfffffffe
call fcn.0043899c
jmp 0x4389ab
mov dword [ebp - 0xecc], 0
jmp 0x4389c6
mov ecx, dword [ebp - 0xecc]
add ecx, 1
mov dword [ebp - 0xecc], ecx
cmp dword [ebp - 0xecc], 7
jge 0x4389df
mov edx, dword [ebp - 0xecc]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4389b7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4389f3
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x438a09
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xed0], 0
jmp 0x438a2b
mov edx, dword [ebp - 0xed0]
add edx, 1
mov dword [ebp - 0xed0], edx
cmp dword [ebp - 0xed0], 4
jge 0x438a66
mov eax, dword [ebp - 0xed0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x438a5a
mov eax, dword [ebp - 0xed0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x438a61
and eax, 0xbc614e
jmp 0x438a64
mov dword [ebp - 0x1c], eax
jmp 0x438a1c
mov dword [ebp - 4], 0xfffffffe
call fcn.00438a74
jmp 0x438a7c
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xed4], 0
jmp 0x438a9e
mov edx, dword [ebp - 0xed4]
add edx, 1
mov dword [ebp - 0xed4], edx
cmp dword [ebp - 0xed4], 5
jge 0x438add
mov eax, dword [ebp - 0xed4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x438acd
mov eax, dword [ebp - 0xed4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x438ad8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x438adb
mov dword [ebp - 0x1c], eax
jmp 0x438a8f
mov dword [ebp - 4], 0xfffffffe
call fcn.00438aeb
jmp 0x438af3
mov dword [ebp - 0xed8], 1
mov dword [ebp - 0xedc], 1
mov dword [ebp - 0xee0], 2
mov dword [ebp - 0xee4], 0
mov dword [ebp - 0xee8], 0
jmp 0x438b36
mov edx, dword [ebp - 0xee8]
add edx, 1
mov dword [ebp - 0xee8], edx
cmp dword [ebp - 0xee8], 4
jge 0x438b77
mov eax, dword [ebp - 0xed8]
add eax, dword [ebp - 0xedc]
mov dword [ebp - 0xee0], eax
mov ecx, dword [ebp - 0xedc]
mov dword [ebp - 0xed8], ecx
mov edx, dword [ebp - 0xee0]
mov dword [ebp - 0xedc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xee0]
mov dword [ebp - 0x1c], eax
jmp 0x438b27
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xeec], 0
jmp 0x438ba2
cmp dword [ebp - 0xeec], 0
jge 0x438be9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x438bbf
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x438bcf
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x438be7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x438be7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x438b93
mov dword [ebp - 4], 0xfffffffe
call fcn.00438bf7
jmp 0x438c06
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xef0], 0
jmp 0x438c28
cmp dword [ebp - 0xef0], 8
jge 0x438c67
mov eax, dword [ebp - 0xef0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x438c57
mov dword [ebp - 4], 0xfffffffe
call fcn.00438c75
jmp 0x438c7d