Function at 0x433600
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b35c8
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1774
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x3c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x433656
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x40
jge 0x433669
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43364d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43367d
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433693
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x4336c1
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x33
jge 0x4336e7
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x4336b8
mov ecx, dword [ebp - 0x1c]
add ecx, 0x33
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38], 0
jmp 0x433702
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x1b
jge 0x433740
cmp dword [ebp - 0x1c], 0
jge 0x433716
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43372c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x238]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4336f9
mov dword [ebp - 4], 0
mov dword [ebp - 0x23c], 0
jmp 0x433762
mov eax, dword [ebp - 0x23c]
add eax, 1
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xa
jge 0x4337a1
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433791
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43379c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43379f
mov dword [ebp - 0x1c], eax
jmp 0x433753
mov dword [ebp - 4], 0xfffffffe
call fcn.004337af
jmp 0x4337b7
mov dword [ebp - 0x240], 0
jmp 0x4337d2
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0x1c
jge 0x433813
cmp dword [ebp - 0x1c], 0
jge 0x4337e9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4337ff
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x438]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4337c3
mov dword [ebp - 4], 1
mov dword [ebp - 0x43c], 0
jmp 0x433835
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0x17
jge 0x433870
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433864
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43386b
and eax, 0xbc614e
jmp 0x43386e
mov dword [ebp - 0x1c], eax
jmp 0x433826
mov dword [ebp - 4], 0xfffffffe
call fcn.0043387e
jmp 0x433886
mov dword [ebp - 4], 2
mov dword [ebp - 0x440], 0
jmp 0x4338a8
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 8
jge 0x4338ef
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4338c5
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4338d5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4338ed
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4338ed
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x433899
mov dword [ebp - 4], 0xfffffffe
call fcn.004338fd
jmp 0x43390c
mov dword [ebp - 0x444], 0
jmp 0x433927
mov ecx, dword [ebp - 0x444]
add ecx, 1
mov dword [ebp - 0x444], ecx
cmp dword [ebp - 0x444], 5
jge 0x433968
cmp dword [ebp - 0x1c], 0
jge 0x43393e
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x433954
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x640]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x433918
mov dword [ebp - 4], 3
mov dword [ebp - 0x644], 0
jmp 0x43398a
mov eax, dword [ebp - 0x644]
add eax, 1
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 0xa
jge 0x4339d1
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4339a7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4339b7
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4339cf
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4339cf
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43397b
mov dword [ebp - 4], 0xfffffffe
call fcn.004339df
jmp 0x4339ee
mov dword [ebp - 0x648], 0
jmp 0x433a09
mov ecx, dword [ebp - 0x648]
add ecx, 1
mov dword [ebp - 0x648], ecx
cmp dword [ebp - 0x648], 8
jge 0x433a22
mov edx, dword [ebp - 0x648]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4339fa
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x433a36
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433a4c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 4
mov dword [ebp - 0x64c], 0
jmp 0x433a6e
mov edx, dword [ebp - 0x64c]
add edx, 1
mov dword [ebp - 0x64c], edx
cmp dword [ebp - 0x64c], 6
jge 0x433aa9
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433a9d
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433aa4
and eax, 0xbc614e
jmp 0x433aa7
mov dword [ebp - 0x1c], eax
jmp 0x433a5f
mov dword [ebp - 4], 0xfffffffe
call fcn.00433ab7
jmp 0x433abf
mov dword [ebp - 4], 5
mov dword [ebp - 0x650], 0
jmp 0x433ae1
mov edx, dword [ebp - 0x650]
add edx, 1
mov dword [ebp - 0x650], edx
cmp dword [ebp - 0x650], 8
jge 0x433b1c
mov eax, dword [ebp - 0x650]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433b10
mov eax, dword [ebp - 0x650]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433b17
and eax, 0xbc614e
jmp 0x433b1a
mov dword [ebp - 0x1c], eax
jmp 0x433ad2
mov dword [ebp - 4], 0xfffffffe
call fcn.00433b2a
jmp 0x433b32
mov dword [ebp - 0x654], 0
jmp 0x433b4d
mov edx, dword [ebp - 0x654]
add edx, 1
mov dword [ebp - 0x654], edx
cmp dword [ebp - 0x654], 8
jge 0x433b8e
cmp dword [ebp - 0x1c], 0
jge 0x433b64
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x433b7a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x850]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x433b3e
mov dword [ebp - 4], 6
mov dword [ebp - 0x854], 0
jmp 0x433bb0
mov eax, dword [ebp - 0x854]
add eax, 1
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 3
jge 0x433bef
mov eax, dword [ebp - 0x854]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433bdf
mov eax, dword [ebp - 0x854]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433bea
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x433bed
mov dword [ebp - 0x1c], eax
jmp 0x433ba1
mov dword [ebp - 4], 0xfffffffe
call fcn.00433bfd
jmp 0x433c05
mov dword [ebp - 4], 7
mov dword [ebp - 0x858], 0
jmp 0x433c27
mov edx, dword [ebp - 0x858]
add edx, 1
mov dword [ebp - 0x858], edx
cmp dword [ebp - 0x858], 0xe
jge 0x433c66
mov eax, dword [ebp - 0x858]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433c56
mov eax, dword [ebp - 0x858]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433c61
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x433c64
mov dword [ebp - 0x1c], eax
jmp 0x433c18
mov dword [ebp - 4], 0xfffffffe
call fcn.00433c74
jmp 0x433c7c
mov dword [ebp - 4], 8
mov dword [ebp - 0x85c], 0
jmp 0x433c9e
mov edx, dword [ebp - 0x85c]
add edx, 1
mov dword [ebp - 0x85c], edx
cmp dword [ebp - 0x85c], 1
jge 0x433cdd
mov eax, dword [ebp - 0x85c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433ccd
mov eax, dword [ebp - 0x85c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433cd8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x433cdb
mov dword [ebp - 0x1c], eax
jmp 0x433c8f
mov dword [ebp - 4], 0xfffffffe
call fcn.00433ceb
jmp 0x433cf3
mov dword [ebp - 4], 9
mov dword [ebp - 0x860], 0
jmp 0x433d15
mov edx, dword [ebp - 0x860]
add edx, 1
mov dword [ebp - 0x860], edx
cmp dword [ebp - 0x860], 0xa
jge 0x433d50
mov eax, dword [ebp - 0x860]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433d44
mov eax, dword [ebp - 0x860]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433d4b
and eax, 0xbc614e
jmp 0x433d4e
mov dword [ebp - 0x1c], eax
jmp 0x433d06
mov dword [ebp - 4], 0xfffffffe
call fcn.00433d5e
jmp 0x433d66
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x864], 0
jmp 0x433d88
mov edx, dword [ebp - 0x864]
add edx, 1
mov dword [ebp - 0x864], edx
cmp dword [ebp - 0x864], 0xa
jge 0x433dc7
mov eax, dword [ebp - 0x864]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433db7
mov eax, dword [ebp - 0x864]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433dc2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x433dc5
mov dword [ebp - 0x1c], eax
jmp 0x433d79
mov dword [ebp - 4], 0xfffffffe
call fcn.00433dd5
jmp 0x433ddd
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x868], 0
jmp 0x433dff
mov edx, dword [ebp - 0x868]
add edx, 1
mov dword [ebp - 0x868], edx
cmp dword [ebp - 0x868], 0xb
jge 0x433e3a
mov eax, dword [ebp - 0x868]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433e2e
mov eax, dword [ebp - 0x868]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433e35
and eax, 0xbc614e
jmp 0x433e38
mov dword [ebp - 0x1c], eax
jmp 0x433df0
mov dword [ebp - 4], 0xfffffffe
call fcn.00433e48
jmp 0x433e50
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x86c], 0
jmp 0x433e72
mov edx, dword [ebp - 0x86c]
add edx, 1
mov dword [ebp - 0x86c], edx
cmp dword [ebp - 0x86c], 8
jge 0x433eb1
mov eax, dword [ebp - 0x86c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433ea1
mov eax, dword [ebp - 0x86c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433eac
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x433eaf
mov dword [ebp - 0x1c], eax
jmp 0x433e63
mov dword [ebp - 4], 0xfffffffe
call fcn.00433ebf
jmp 0x433ec7
mov dword [ebp - 0x870], 0
jmp 0x433ee2
mov edx, dword [ebp - 0x870]
add edx, 1
mov dword [ebp - 0x870], edx
cmp dword [ebp - 0x870], 9
jge 0x433efb
mov eax, dword [ebp - 0x870]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x433ed3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x433f0f
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433f25
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x874], 0
jmp 0x433f40
mov edx, dword [ebp - 0x874]
add edx, 1
mov dword [ebp - 0x874], edx
cmp dword [ebp - 0x874], 8
jge 0x433f81
cmp dword [ebp - 0x1c], 0
jge 0x433f57
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x433f6d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa70]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x433f31
mov dword [ebp - 0xa74], 0
jmp 0x433f9c
mov eax, dword [ebp - 0xa74]
add eax, 1
mov dword [ebp - 0xa74], eax
cmp dword [ebp - 0xa74], 0
jge 0x433fdd
cmp dword [ebp - 0x1c], 0
jge 0x433fb3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x433fc9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc70]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x433f8d
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xc74], 0
jmp 0x433fff
mov eax, dword [ebp - 0xc74]
add eax, 1
mov dword [ebp - 0xc74], eax
cmp dword [ebp - 0xc74], 5
jge 0x434036
mov ecx, dword [ebp - 0xc74]
and ecx, 0x80000001
jns 0x43401b
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x43402b
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x434034
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x433ff0
mov dword [ebp - 4], 0xfffffffe
call fcn.00434044
jmp 0x434062
mov dword [ebp - 0xc78], 0
jmp 0x43407d
mov eax, dword [ebp - 0xc78]
add eax, 1
mov dword [ebp - 0xc78], eax
cmp dword [ebp - 0xc78], 3
jge 0x434096
mov ecx, dword [ebp - 0xc78]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43406e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4340aa
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4340c0
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xc7c], 1
mov dword [ebp - 0xc80], 1
mov dword [ebp - 0xc84], 2
mov dword [ebp - 0xc88], 0
mov dword [ebp - 0xc8c], 0
jmp 0x434103
mov edx, dword [ebp - 0xc8c]
add edx, 1
mov dword [ebp - 0xc8c], edx
cmp dword [ebp - 0xc8c], 3
jge 0x434144
mov eax, dword [ebp - 0xc7c]
add eax, dword [ebp - 0xc80]
mov dword [ebp - 0xc84], eax
mov ecx, dword [ebp - 0xc80]
mov dword [ebp - 0xc7c], ecx
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc84]
mov dword [ebp - 0x1c], eax
jmp 0x4340f4
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xc90], 1
mov dword [ebp - 0xc94], 1
mov dword [ebp - 0xc98], 2
mov dword [ebp - 0xc9c], 0
mov dword [ebp - 0xca0], 0
jmp 0x434190
mov edx, dword [ebp - 0xca0]
add edx, 1
mov dword [ebp - 0xca0], edx
cmp dword [ebp - 0xca0], 6
jge 0x4341d1
mov eax, dword [ebp - 0xc90]
add eax, dword [ebp - 0xc94]
mov dword [ebp - 0xc98], eax
mov ecx, dword [ebp - 0xc94]
mov dword [ebp - 0xc90], ecx
mov edx, dword [ebp - 0xc98]
mov dword [ebp - 0xc94], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc98]
mov dword [ebp - 0x1c], eax
jmp 0x434181
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xca4], 0
jmp 0x4341fc
mov edx, dword [ebp - 0xca4]
add edx, 1
mov dword [ebp - 0xca4], edx
cmp dword [ebp - 0xca4], 1
jge 0x43423b
mov eax, dword [ebp - 0xca4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43422b
mov eax, dword [ebp - 0xca4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x434236
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x434239
mov dword [ebp - 0x1c], eax
jmp 0x4341ed
mov dword [ebp - 4], 0xfffffffe
call fcn.00434249
jmp 0x434251
mov dword [ebp - 0xca8], 0
jmp 0x43426c
mov edx, dword [ebp - 0xca8]
add edx, 1
mov dword [ebp - 0xca8], edx
cmp dword [ebp - 0xca8], 4
jge 0x434285
mov eax, dword [ebp - 0xca8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43425d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434299
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4342af
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xcac], 0
jmp 0x4342ca
mov edx, dword [ebp - 0xcac]
add edx, 1
mov dword [ebp - 0xcac], edx
cmp dword [ebp - 0xcac], 4
jge 0x43430b
cmp dword [ebp - 0x1c], 0
jge 0x4342e1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4342f7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xea8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4342bb
mov dword [ebp - 0xeac], 0
jmp 0x434326
mov eax, dword [ebp - 0xeac]
add eax, 1
mov dword [ebp - 0xeac], eax
cmp dword [ebp - 0xeac], 3
jge 0x434367
cmp dword [ebp - 0x1c], 0
jge 0x43433d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434353
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x434317
mov dword [ebp - 0x10ac], 1
mov dword [ebp - 0x10b0], 1
mov dword [ebp - 0x10b4], 2
mov dword [ebp - 0x10b8], 0
mov dword [ebp - 0x10bc], 0
jmp 0x4343aa
mov eax, dword [ebp - 0x10bc]
add eax, 1
mov dword [ebp - 0x10bc], eax
cmp dword [ebp - 0x10bc], 6
jge 0x4343eb
mov ecx, dword [ebp - 0x10ac]
add ecx, dword [ebp - 0x10b0]
mov dword [ebp - 0x10b4], ecx
mov edx, dword [ebp - 0x10b0]
mov dword [ebp - 0x10ac], edx
mov eax, dword [ebp - 0x10b4]
mov dword [ebp - 0x10b0], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x10b4]
mov dword [ebp - 0x1c], ecx
jmp 0x43439b
mov edx, dword [ebp - 0x1c]
add edx, 6
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x10c0], 0
jmp 0x434416
mov eax, dword [ebp - 0x10c0]
add eax, 1
mov dword [ebp - 0x10c0], eax
cmp dword [ebp - 0x10c0], 5
jge 0x43445d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x434433
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x434443
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43445b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43445b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x434407
mov dword [ebp - 4], 0xfffffffe
call fcn.0043446b
jmp 0x43447a
mov dword [ebp - 0x10c4], 0
jmp 0x434495
mov ecx, dword [ebp - 0x10c4]
add ecx, 1
mov dword [ebp - 0x10c4], ecx
cmp dword [ebp - 0x10c4], 2
jge 0x4344ae
mov edx, dword [ebp - 0x10c4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x434486
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4344c2
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4344d8
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x10c8], 0
jmp 0x4344fa
mov edx, dword [ebp - 0x10c8]
add edx, 1
mov dword [ebp - 0x10c8], edx
cmp dword [ebp - 0x10c8], 8
jge 0x434530
mov eax, dword [ebp - 0x10c8]
and eax, 0x80000001
jns 0x434515
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x434525
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43452e
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4344eb
mov dword [ebp - 4], 0xfffffffe
call fcn.0043453e
jmp 0x43455b
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x10cc], 0
jmp 0x43457d
mov edx, dword [ebp - 0x10cc]
add edx, 1
mov dword [ebp - 0x10cc], edx
cmp dword [ebp - 0x10cc], 5
jge 0x4345b3
mov eax, dword [ebp - 0x10cc]
and eax, 0x80000001
jns 0x434598
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4345a8
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4345b1
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43456e
mov dword [ebp - 4], 0xfffffffe
call fcn.004345c1
jmp 0x4345de
mov dword [ebp - 0x10d0], 0
jmp 0x4345f9
mov edx, dword [ebp - 0x10d0]
add edx, 1
mov dword [ebp - 0x10d0], edx
cmp dword [ebp - 0x10d0], 7
jge 0x434612
mov eax, dword [ebp - 0x10d0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4345ea
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434626
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43463c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x10d4], 1
mov dword [ebp - 0x10d8], 1
mov dword [ebp - 0x10dc], 2
mov dword [ebp - 0x10e0], 0
mov dword [ebp - 0x10e4], 0
jmp 0x43467f
mov edx, dword [ebp - 0x10e4]
add edx, 1
mov dword [ebp - 0x10e4], edx
cmp dword [ebp - 0x10e4], 1
jge 0x4346c0
mov eax, dword [ebp - 0x10d4]
add eax, dword [ebp - 0x10d8]
mov dword [ebp - 0x10dc], eax
mov ecx, dword [ebp - 0x10d8]
mov dword [ebp - 0x10d4], ecx
mov edx, dword [ebp - 0x10dc]
mov dword [ebp - 0x10d8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x10dc]
mov dword [ebp - 0x1c], eax
jmp 0x434670
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x10e8], 1
mov dword [ebp - 0x10ec], 1
mov dword [ebp - 0x10f0], 2
mov dword [ebp - 0x10f4], 0
mov dword [ebp - 0x10f8], 0
jmp 0x43470c
mov edx, dword [ebp - 0x10f8]
add edx, 1
mov dword [ebp - 0x10f8], edx
cmp dword [ebp - 0x10f8], 2
jge 0x43474d
mov eax, dword [ebp - 0x10e8]
add eax, dword [ebp - 0x10ec]
mov dword [ebp - 0x10f0], eax
mov ecx, dword [ebp - 0x10ec]
mov dword [ebp - 0x10e8], ecx
mov edx, dword [ebp - 0x10f0]
mov dword [ebp - 0x10ec], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x10f0]
mov dword [ebp - 0x1c], eax
jmp 0x4346fd
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x10fc], 0
jmp 0x434778
mov edx, dword [ebp - 0x10fc]
add edx, 1
mov dword [ebp - 0x10fc], edx
cmp dword [ebp - 0x10fc], 6
jge 0x4347bf
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x434795
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4347a5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4347bd
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4347bd
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x434769
mov dword [ebp - 4], 0xfffffffe
call fcn.004347cd
jmp 0x4347dc
mov dword [ebp - 0x1100], 1
mov dword [ebp - 0x1104], 1
mov dword [ebp - 0x1108], 2
mov dword [ebp - 0x110c], 0
mov dword [ebp - 0x1110], 0
jmp 0x43481f
mov ecx, dword [ebp - 0x1110]
add ecx, 1
mov dword [ebp - 0x1110], ecx
cmp dword [ebp - 0x1110], 0
jge 0x434860
mov edx, dword [ebp - 0x1100]
add edx, dword [ebp - 0x1104]
mov dword [ebp - 0x1108], edx
mov eax, dword [ebp - 0x1104]
mov dword [ebp - 0x1100], eax
mov ecx, dword [ebp - 0x1108]
mov dword [ebp - 0x1104], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1108]
mov dword [ebp - 0x1c], edx
jmp 0x434810
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1114], 1
mov dword [ebp - 0x1118], 1
mov dword [ebp - 0x111c], 2
mov dword [ebp - 0x1120], 0
mov dword [ebp - 0x1124], 0
jmp 0x4348a9
mov ecx, dword [ebp - 0x1124]
add ecx, 1
mov dword [ebp - 0x1124], ecx
cmp dword [ebp - 0x1124], 1
jge 0x4348ea
mov edx, dword [ebp - 0x1114]
add edx, dword [ebp - 0x1118]
mov dword [ebp - 0x111c], edx
mov eax, dword [ebp - 0x1118]
mov dword [ebp - 0x1114], eax
mov ecx, dword [ebp - 0x111c]
mov dword [ebp - 0x1118], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x111c]
mov dword [ebp - 0x1c], edx
jmp 0x43489a
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x1128], 0
jmp 0x434915
mov ecx, dword [ebp - 0x1128]
add ecx, 1
mov dword [ebp - 0x1128], ecx
cmp dword [ebp - 0x1128], 4
jge 0x43494c
mov edx, dword [ebp - 0x1128]
and edx, 0x80000001
jns 0x434931
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x434941
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43494a
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x434906
mov dword [ebp - 4], 0xfffffffe
call fcn.0043495a
jmp 0x434978
mov dword [ebp - 0x112c], 0
jmp 0x434993
mov ecx, dword [ebp - 0x112c]
add ecx, 1
mov dword [ebp - 0x112c], ecx
cmp dword [ebp - 0x112c], 2
jge 0x4349d4
cmp dword [ebp - 0x1c], 0
jge 0x4349aa
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4349c0
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1328]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x434984
mov dword [ebp - 0x132c], 0
jmp 0x4349ef
mov eax, dword [ebp - 0x132c]
add eax, 1
mov dword [ebp - 0x132c], eax
cmp dword [ebp - 0x132c], 1
jge 0x434a08
mov ecx, dword [ebp - 0x132c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4349e0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434a1c
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434a32
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x1330], 0
jmp 0x434a4d
cmp dword [ebp - 0x1330], 4
jge 0x434a66
mov eax, dword [ebp - 0x1330]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x434a3e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434a7a