Function at 0x43fbd0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b40e0
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1104
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x50], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
jmp 0x43fc42
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1d
jge 0x43fc68
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jmp 0x43fc39
mov edx, dword [ebp - 0x1c]
add edx, 0x1d
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
jmp 0x43fc9f
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xd
jge 0x43fcc5
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], ecx
jmp 0x43fc96
mov edx, dword [ebp - 0x1c]
add edx, 0xd
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0
mov dword [ebp - 0x48], 0
jmp 0x43fce7
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x1e
jge 0x43fd2b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43fd01
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43fd11
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43fd29
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43fd29
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43fcde
mov dword [ebp - 4], 0xfffffffe
call fcn.0043fd39
jmp 0x43fd48
mov dword [ebp - 0x4c], 0
jmp 0x43fd5a
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 2
jge 0x43fd98
cmp dword [ebp - 0x1c], 0
jge 0x43fd6e
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43fd84
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x248]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43fd51
mov dword [ebp - 4], 1
mov dword [ebp - 0x24c], 0
jmp 0x43fdba
mov eax, dword [ebp - 0x24c]
add eax, 1
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 8
jge 0x43fdf1
mov ecx, dword [ebp - 0x24c]
and ecx, 0x80000001
jns 0x43fdd6
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x43fde6
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43fdef
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43fdab
mov dword [ebp - 4], 0xfffffffe
call fcn.0043fdff
jmp 0x43fe1d
mov dword [ebp - 4], 2
mov dword [ebp - 0x250], 0
jmp 0x43fe3f
mov eax, dword [ebp - 0x250]
add eax, 1
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 9
jge 0x43fe76
mov ecx, dword [ebp - 0x250]
and ecx, 0x80000001
jns 0x43fe5b
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x43fe6b
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43fe74
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43fe30
mov dword [ebp - 4], 0xfffffffe
call fcn.0043fe84
jmp 0x43fea2
mov dword [ebp - 4], 3
mov dword [ebp - 0x254], 0
jmp 0x43fec4
mov eax, dword [ebp - 0x254]
add eax, 1
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 8
jge 0x43feff
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43fef3
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43fefa
and eax, 0xbc614e
jmp 0x43fefd
mov dword [ebp - 0x1c], eax
jmp 0x43feb5
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ff0d
jmp 0x43ff15
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x260], 2
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x268], 0
jmp 0x43ff58
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 3
jge 0x43ff99
mov eax, dword [ebp - 0x258]
add eax, dword [ebp - 0x25c]
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], ecx
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x260]
mov dword [ebp - 0x1c], eax
jmp 0x43ff49
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x26c], 0
jmp 0x43ffbd
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
cmp dword [ebp - 0x26c], 0
jge 0x43fffe
cmp dword [ebp - 0x1c], 0
jge 0x43ffd4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43ffea
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x468]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43ffae
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x474], 2
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x47c], 0
jmp 0x440041
mov eax, dword [ebp - 0x47c]
add eax, 1
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 0
jge 0x440082
mov ecx, dword [ebp - 0x46c]
add ecx, dword [ebp - 0x470]
mov dword [ebp - 0x474], ecx
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x46c], edx
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x470], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x474]
mov dword [ebp - 0x1c], ecx
jmp 0x440032
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x480], 0
jmp 0x4400a3
mov eax, dword [ebp - 0x480]
add eax, 1
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 6
jge 0x4400e4
cmp dword [ebp - 0x1c], 0
jge 0x4400ba
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4400d0
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x678]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x440094
mov dword [ebp - 4], 4
mov dword [ebp - 0x67c], 0
jmp 0x440106
mov eax, dword [ebp - 0x67c]
add eax, 1
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 0
jge 0x44014d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x440123
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x440133
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44014b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44014b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4400f7
mov dword [ebp - 4], 0xfffffffe
call fcn.0044015b
jmp 0x44016a
mov dword [ebp - 4], 5
mov dword [ebp - 0x680], 0
jmp 0x44018c
mov ecx, dword [ebp - 0x680]
add ecx, 1
mov dword [ebp - 0x680], ecx
cmp dword [ebp - 0x680], 2
jge 0x4401c3
mov edx, dword [ebp - 0x680]
and edx, 0x80000001
jns 0x4401a8
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x4401b8
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4401c1
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44017d
mov dword [ebp - 4], 0xfffffffe
call fcn.004401d1
jmp 0x4401ef
mov dword [ebp - 0x684], 0
jmp 0x44020a
mov ecx, dword [ebp - 0x684]
add ecx, 1
mov dword [ebp - 0x684], ecx
cmp dword [ebp - 0x684], 8
jge 0x440223
mov edx, dword [ebp - 0x684]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4401fb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x440237
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44024d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x688], 0
jmp 0x440268
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 6
jge 0x4402a9
cmp dword [ebp - 0x1c], 0
jge 0x44027f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x440295
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x880]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x440259
mov dword [ebp - 4], 6
mov dword [ebp - 0x884], 0
jmp 0x4402cb
mov eax, dword [ebp - 0x884]
add eax, 1
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 3
jge 0x440306
mov eax, dword [ebp - 0x884]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4402fa
mov eax, dword [ebp - 0x884]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x440301
and eax, 0xbc614e
jmp 0x440304
mov dword [ebp - 0x1c], eax
jmp 0x4402bc
mov dword [ebp - 4], 0xfffffffe
call fcn.00440314
jmp 0x44031c
mov dword [ebp - 4], 7
mov dword [ebp - 0x888], 0
jmp 0x44033e
mov edx, dword [ebp - 0x888]
add edx, 1
mov dword [ebp - 0x888], edx
cmp dword [ebp - 0x888], 1
jge 0x440379
mov eax, dword [ebp - 0x888]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44036d
mov eax, dword [ebp - 0x888]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x440374
and eax, 0xbc614e
jmp 0x440377
mov dword [ebp - 0x1c], eax
jmp 0x44032f
mov dword [ebp - 4], 0xfffffffe
call fcn.00440387
jmp 0x44038f
mov dword [ebp - 4], 8
mov dword [ebp - 0x88c], 0
jmp 0x4403b1
mov edx, dword [ebp - 0x88c]
add edx, 1
mov dword [ebp - 0x88c], edx
cmp dword [ebp - 0x88c], 4
jge 0x4403ec
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4403e0
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4403e7
and eax, 0xbc614e
jmp 0x4403ea
mov dword [ebp - 0x1c], eax
jmp 0x4403a2
mov dword [ebp - 4], 0xfffffffe
call fcn.004403fa
jmp 0x440402
mov dword [ebp - 4], 9
mov dword [ebp - 0x890], 0
jmp 0x440424
mov edx, dword [ebp - 0x890]
add edx, 1
mov dword [ebp - 0x890], edx
cmp dword [ebp - 0x890], 4
jge 0x44045f
mov eax, dword [ebp - 0x890]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x440453
mov eax, dword [ebp - 0x890]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44045a
and eax, 0xbc614e
jmp 0x44045d
mov dword [ebp - 0x1c], eax
jmp 0x440415
mov dword [ebp - 4], 0xfffffffe
call fcn.0044046d
jmp 0x440475
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x894], 0
jmp 0x440497
mov edx, dword [ebp - 0x894]
add edx, 1
mov dword [ebp - 0x894], edx
cmp dword [ebp - 0x894], 0
jge 0x4404d2
mov eax, dword [ebp - 0x894]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4404c6
mov eax, dword [ebp - 0x894]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4404cd
and eax, 0xbc614e
jmp 0x4404d0
mov dword [ebp - 0x1c], eax
jmp 0x440488
mov dword [ebp - 4], 0xfffffffe
call fcn.004404e0
jmp 0x4404e8
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x898], 0
jmp 0x44050a
mov edx, dword [ebp - 0x898]
add edx, 1
mov dword [ebp - 0x898], edx
cmp dword [ebp - 0x898], 3
jge 0x440551
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x440527
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x440537
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44054f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44054f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4404fb
mov dword [ebp - 4], 0xfffffffe
call fcn.0044055f
jmp 0x44056e
mov dword [ebp - 0x89c], 0
jmp 0x440589
mov ecx, dword [ebp - 0x89c]
add ecx, 1
mov dword [ebp - 0x89c], ecx
cmp dword [ebp - 0x89c], 7
jge 0x4405ca
cmp dword [ebp - 0x1c], 0
jge 0x4405a0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4405b6
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa98]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44057a
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xa9c], 0
jmp 0x4405ec
mov eax, dword [ebp - 0xa9c]
add eax, 1
mov dword [ebp - 0xa9c], eax
cmp dword [ebp - 0xa9c], 2
jge 0x440633
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x440609
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x440619
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x440631
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440631
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4405dd
mov dword [ebp - 4], 0xfffffffe
call fcn.00440641
jmp 0x440650
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xaa0], 0
jmp 0x440672
mov ecx, dword [ebp - 0xaa0]
add ecx, 1
mov dword [ebp - 0xaa0], ecx
cmp dword [ebp - 0xaa0], 4
jge 0x4406a9
mov edx, dword [ebp - 0xaa0]
and edx, 0x80000001
jns 0x44068e
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x44069e
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4406a7
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x440663
mov dword [ebp - 4], 0xfffffffe
call fcn.004406b7
jmp 0x4406d5
mov dword [ebp - 0xaa4], 1
mov dword [ebp - 0xaa8], 1
mov dword [ebp - 0xaac], 2
mov dword [ebp - 0xab0], 0
mov dword [ebp - 0xab4], 0
jmp 0x440718
mov ecx, dword [ebp - 0xab4]
add ecx, 1
mov dword [ebp - 0xab4], ecx
cmp dword [ebp - 0xab4], 1
jge 0x440759
mov edx, dword [ebp - 0xaa4]
add edx, dword [ebp - 0xaa8]
mov dword [ebp - 0xaac], edx
mov eax, dword [ebp - 0xaa8]
mov dword [ebp - 0xaa4], eax
mov ecx, dword [ebp - 0xaac]
mov dword [ebp - 0xaa8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xaac]
mov dword [ebp - 0x1c], edx
jmp 0x440709
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xab8], 1
mov dword [ebp - 0xabc], 1
mov dword [ebp - 0xac0], 2
mov dword [ebp - 0xac4], 0
mov dword [ebp - 0xac8], 0
jmp 0x4407a5
mov ecx, dword [ebp - 0xac8]
add ecx, 1
mov dword [ebp - 0xac8], ecx
cmp dword [ebp - 0xac8], 1
jge 0x4407e6
mov edx, dword [ebp - 0xab8]
add edx, dword [ebp - 0xabc]
mov dword [ebp - 0xac0], edx
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0xac0]
mov dword [ebp - 0xabc], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1c], edx
jmp 0x440796
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xacc], 0
jmp 0x440811
mov ecx, dword [ebp - 0xacc]
add ecx, 1
mov dword [ebp - 0xacc], ecx
cmp dword [ebp - 0xacc], 4
jge 0x440858
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44082e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44083e
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x440856
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440856
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x440802
mov dword [ebp - 4], 0xfffffffe
call fcn.00440866
jmp 0x440875
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xad0], 0
jmp 0x440897
mov ecx, dword [ebp - 0xad0]
add ecx, 1
mov dword [ebp - 0xad0], ecx
cmp dword [ebp - 0xad0], 7
jge 0x4408ce
mov edx, dword [ebp - 0xad0]
and edx, 0x80000001
jns 0x4408b3
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x4408c3
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4408cc
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x440888
mov dword [ebp - 4], 0xfffffffe
call fcn.004408dc
jmp 0x4408fa
mov dword [ebp - 0xad4], 0
jmp 0x440915
mov ecx, dword [ebp - 0xad4]
add ecx, 1
mov dword [ebp - 0xad4], ecx
cmp dword [ebp - 0xad4], 0
jge 0x44092e
mov edx, dword [ebp - 0xad4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x440906
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x440942
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440958
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xad8], 0
jmp 0x44097a
mov edx, dword [ebp - 0xad8]
add edx, 1
mov dword [ebp - 0xad8], edx
cmp dword [ebp - 0xad8], 0
jge 0x4409b0
mov eax, dword [ebp - 0xad8]
and eax, 0x80000001
jns 0x440995
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4409a5
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4409ae
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44096b
mov dword [ebp - 4], 0xfffffffe
call fcn.004409be
jmp 0x4409db
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xadc], 0
jmp 0x4409fd
mov edx, dword [ebp - 0xadc]
add edx, 1
mov dword [ebp - 0xadc], edx
cmp dword [ebp - 0xadc], 6
jge 0x440a33
mov eax, dword [ebp - 0xadc]
and eax, 0x80000001
jns 0x440a18
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x440a28
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x440a31
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4409ee
mov dword [ebp - 4], 0xfffffffe
call fcn.00440a41
jmp 0x440a5e
mov dword [ebp - 0xae0], 0
jmp 0x440a79
mov edx, dword [ebp - 0xae0]
add edx, 1
mov dword [ebp - 0xae0], edx
cmp dword [ebp - 0xae0], 8
jge 0x440a92
mov eax, dword [ebp - 0xae0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x440a6a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x440aa6
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440abc
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xae4], 0
jmp 0x440ade
mov edx, dword [ebp - 0xae4]
add edx, 1
mov dword [ebp - 0xae4], edx
cmp dword [ebp - 0xae4], 5
jge 0x440b14
mov eax, dword [ebp - 0xae4]
and eax, 0x80000001
jns 0x440af9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x440b09
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x440b12
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x440acf
mov dword [ebp - 4], 0xfffffffe
call fcn.00440b22
jmp 0x440b3f
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xae8], 0
jmp 0x440b61
mov edx, dword [ebp - 0xae8]
add edx, 1
mov dword [ebp - 0xae8], edx
cmp dword [ebp - 0xae8], 1
jge 0x440ba8
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x440b7e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x440b8e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x440ba6
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440ba6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x440b52
mov dword [ebp - 4], 0xfffffffe
call fcn.00440bb6
jmp 0x440bc5
mov dword [ebp - 0xaec], 0
jmp 0x440be0
mov ecx, dword [ebp - 0xaec]
add ecx, 1
mov dword [ebp - 0xaec], ecx
cmp dword [ebp - 0xaec], 8
jge 0x440bf9
mov edx, dword [ebp - 0xaec]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x440bd1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x440c0d
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440c23
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xaf0], 0
jmp 0x440c3e
mov edx, dword [ebp - 0xaf0]
add edx, 1
mov dword [ebp - 0xaf0], edx
cmp dword [ebp - 0xaf0], 1
jge 0x440c7f
cmp dword [ebp - 0x1c], 0
jge 0x440c55
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x440c6b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xce8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x440c2f
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xcec], 0
jmp 0x440ca1
mov eax, dword [ebp - 0xcec]
add eax, 1
mov dword [ebp - 0xcec], eax
cmp dword [ebp - 0xcec], 2
jge 0x440ce0
mov eax, dword [ebp - 0xcec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x440cd0
mov eax, dword [ebp - 0xcec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x440cdb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x440cde
mov dword [ebp - 0x1c], eax
jmp 0x440c92
mov dword [ebp - 4], 0xfffffffe
call fcn.00440cee
jmp 0x440cf6
mov dword [ebp - 0xcf0], 1
mov dword [ebp - 0xcf4], 1
mov dword [ebp - 0xcf8], 2
mov dword [ebp - 0xcfc], 0
mov dword [ebp - 0xd00], 0
jmp 0x440d39
mov edx, dword [ebp - 0xd00]
add edx, 1
mov dword [ebp - 0xd00], edx
cmp dword [ebp - 0xd00], 0
jge 0x440d7a
mov eax, dword [ebp - 0xcf0]
add eax, dword [ebp - 0xcf4]
mov dword [ebp - 0xcf8], eax
mov ecx, dword [ebp - 0xcf4]
mov dword [ebp - 0xcf0], ecx
mov edx, dword [ebp - 0xcf8]
mov dword [ebp - 0xcf4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcf8]
mov dword [ebp - 0x1c], eax
jmp 0x440d2a
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd04], 0
jmp 0x440d9b
mov edx, dword [ebp - 0xd04]
add edx, 1
mov dword [ebp - 0xd04], edx
cmp dword [ebp - 0xd04], 0
jge 0x440ddc
cmp dword [ebp - 0x1c], 0
jge 0x440db2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x440dc8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xf00]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x440d8c
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xf04], 0
jmp 0x440dfe
mov eax, dword [ebp - 0xf04]
add eax, 1
mov dword [ebp - 0xf04], eax
cmp dword [ebp - 0xf04], 3
jge 0x440e39
mov eax, dword [ebp - 0xf04]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x440e2d
mov eax, dword [ebp - 0xf04]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x440e34
and eax, 0xbc614e
jmp 0x440e37
mov dword [ebp - 0x1c], eax
jmp 0x440def
mov dword [ebp - 4], 0xfffffffe
call fcn.00440e47
jmp 0x440e4f
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xf08], 0
jmp 0x440e71
mov edx, dword [ebp - 0xf08]
add edx, 1
mov dword [ebp - 0xf08], edx
cmp dword [ebp - 0xf08], 2
jge 0x440ea7
mov eax, dword [ebp - 0xf08]
and eax, 0x80000001
jns 0x440e8c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x440e9c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x440ea5
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x440e62
mov dword [ebp - 4], 0xfffffffe
call fcn.00440eb5
jmp 0x440ed2
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xf0c], 0
jmp 0x440ef4
mov edx, dword [ebp - 0xf0c]
add edx, 1
mov dword [ebp - 0xf0c], edx
cmp dword [ebp - 0xf0c], 3
jge 0x440f3b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x440f11
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x440f21
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x440f39
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440f39
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x440ee5
mov dword [ebp - 4], 0xfffffffe
call fcn.00440f49
jmp 0x440f58
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xf10], 0
jmp 0x440f7a
mov ecx, dword [ebp - 0xf10]
add ecx, 1
mov dword [ebp - 0xf10], ecx
cmp dword [ebp - 0xf10], 3
jge 0x440fb1
mov edx, dword [ebp - 0xf10]
and edx, 0x80000001
jns 0x440f96
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x440fa6
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x440faf
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x440f6b
mov dword [ebp - 4], 0xfffffffe
call fcn.00440fbf
jmp 0x440fdd
mov dword [ebp - 0xf14], 0
jmp 0x440ff8
mov ecx, dword [ebp - 0xf14]
add ecx, 1
mov dword [ebp - 0xf14], ecx
cmp dword [ebp - 0xf14], 2
jge 0x441039
cmp dword [ebp - 0x1c], 0
jge 0x44100f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x441025
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1110]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x440fe9
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x1114], 0
jmp 0x44105b
mov eax, dword [ebp - 0x1114]
add eax, 1
mov dword [ebp - 0x1114], eax
cmp dword [ebp - 0x1114], 0
jge 0x441096
mov eax, dword [ebp - 0x1114]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44108a
mov eax, dword [ebp - 0x1114]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441091
and eax, 0xbc614e
jmp 0x441094
mov dword [ebp - 0x1c], eax
jmp 0x44104c
mov dword [ebp - 4], 0xfffffffe
call fcn.004410a4
jmp 0x4410ac
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x1118], 0
jmp 0x4410ce
cmp dword [ebp - 0x1118], 4
jge 0x44110d
mov eax, dword [ebp - 0x1118]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4410fd
mov eax, dword [ebp - 0x1118]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441108
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44110b
mov dword [ebp - 0x1c], eax
jmp 0x4410bf
mov dword [ebp - 4], 0xfffffffe
call fcn.0044111b
jmp 0x441123
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x111c], 0
jmp 0x441145
cmp dword [ebp - 0x111c], 1
jge 0x441180