Function at 0x43c350
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b3da8
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x12c8
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x34], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x43c3ad
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x3f
jge 0x43c3e3
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c3d3
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c3de
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43c3e1
mov dword [ebp - 0x1c], eax
jmp 0x43c3a4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c3f1
jmp 0x43c3f9
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x43c412
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x14
jge 0x43c448
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c438
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c443
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43c446
mov dword [ebp - 0x1c], eax
jmp 0x43c409
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c456
jmp 0x43c45e
mov dword [ebp - 4], 2
mov dword [ebp - 0x28], 0
jmp 0x43c477
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 3
jge 0x43c4bb
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43c491
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43c4a1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43c4b9
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43c4b9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43c46e
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c4c9
jmp 0x43c4d8
mov dword [ebp - 4], 3
mov dword [ebp - 0x2c], 0
jmp 0x43c4f1
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0x19
jge 0x43c527
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c517
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c522
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43c525
mov dword [ebp - 0x1c], eax
jmp 0x43c4e8
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c535
jmp 0x43c53d
mov dword [ebp - 0x30], 0
jmp 0x43c54f
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 4
jge 0x43c58d
cmp dword [ebp - 0x1c], 0
jge 0x43c563
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43c579
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43c546
mov dword [ebp - 4], 4
mov dword [ebp - 0x234], 0
jmp 0x43c5af
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0xb
jge 0x43c5ea
mov eax, dword [ebp - 0x234]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c5de
mov eax, dword [ebp - 0x234]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c5e5
and eax, 0xbc614e
jmp 0x43c5e8
mov dword [ebp - 0x1c], eax
jmp 0x43c5a0
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c5f8
jmp 0x43c600
mov dword [ebp - 4], 5
mov dword [ebp - 0x238], 0
jmp 0x43c622
mov edx, dword [ebp - 0x238]
add edx, 1
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0x1c
jge 0x43c661
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c651
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c65c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43c65f
mov dword [ebp - 0x1c], eax
jmp 0x43c613
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c66f
jmp 0x43c677
mov dword [ebp - 4], 6
mov dword [ebp - 0x23c], 0
jmp 0x43c699
mov edx, dword [ebp - 0x23c]
add edx, 1
mov dword [ebp - 0x23c], edx
cmp dword [ebp - 0x23c], 0xa
jge 0x43c6d8
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c6c8
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c6d3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43c6d6
mov dword [ebp - 0x1c], eax
jmp 0x43c68a
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c6e6
jmp 0x43c6ee
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x248], 2
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x250], 0
jmp 0x43c731
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0xa
jge 0x43c772
mov eax, dword [ebp - 0x240]
add eax, dword [ebp - 0x244]
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x240], ecx
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x248]
mov dword [ebp - 0x1c], eax
jmp 0x43c722
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x254], 0
jmp 0x43c796
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 7
jge 0x43c7af
mov eax, dword [ebp - 0x254]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43c787
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43c7c3
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43c7d9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x258], 0
jmp 0x43c7f4
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 5
jge 0x43c835
cmp dword [ebp - 0x1c], 0
jge 0x43c80b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43c821
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x450]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43c7e5
mov dword [ebp - 0x454], 0
jmp 0x43c850
mov eax, dword [ebp - 0x454]
add eax, 1
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 1
jge 0x43c891
cmp dword [ebp - 0x1c], 0
jge 0x43c867
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43c87d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x650]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43c841
mov dword [ebp - 4], 7
mov dword [ebp - 0x654], 0
jmp 0x43c8b3
mov eax, dword [ebp - 0x654]
add eax, 1
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 6
jge 0x43c8ee
mov eax, dword [ebp - 0x654]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c8e2
mov eax, dword [ebp - 0x654]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c8e9
and eax, 0xbc614e
jmp 0x43c8ec
mov dword [ebp - 0x1c], eax
jmp 0x43c8a4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c8fc
jmp 0x43c904
mov dword [ebp - 4], 8
mov dword [ebp - 0x658], 0
jmp 0x43c926
mov edx, dword [ebp - 0x658]
add edx, 1
mov dword [ebp - 0x658], edx
cmp dword [ebp - 0x658], 0
jge 0x43c95c
mov eax, dword [ebp - 0x658]
and eax, 0x80000001
jns 0x43c941
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43c951
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43c95a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43c917
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c96a
jmp 0x43c987
mov dword [ebp - 4], 9
mov dword [ebp - 0x65c], 0
jmp 0x43c9a9
mov edx, dword [ebp - 0x65c]
add edx, 1
mov dword [ebp - 0x65c], edx
cmp dword [ebp - 0x65c], 5
jge 0x43c9f0
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43c9c6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43c9d6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43c9ee
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43c9ee
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43c99a
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c9fe
jmp 0x43ca0d
mov dword [ebp - 0x660], 0
jmp 0x43ca28
mov ecx, dword [ebp - 0x660]
add ecx, 1
mov dword [ebp - 0x660], ecx
cmp dword [ebp - 0x660], 3
jge 0x43ca69
cmp dword [ebp - 0x1c], 0
jge 0x43ca3f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43ca55
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x858]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43ca19
mov dword [ebp - 0x85c], 1
mov dword [ebp - 0x860], 1
mov dword [ebp - 0x864], 2
mov dword [ebp - 0x868], 0
mov dword [ebp - 0x86c], 0
jmp 0x43caac
mov eax, dword [ebp - 0x86c]
add eax, 1
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 7
jge 0x43caed
mov ecx, dword [ebp - 0x85c]
add ecx, dword [ebp - 0x860]
mov dword [ebp - 0x864], ecx
mov edx, dword [ebp - 0x860]
mov dword [ebp - 0x85c], edx
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x864]
mov dword [ebp - 0x1c], ecx
jmp 0x43ca9d
mov edx, dword [ebp - 0x1c]
add edx, 7
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x870], 0
jmp 0x43cb11
mov eax, dword [ebp - 0x870]
add eax, 1
mov dword [ebp - 0x870], eax
cmp dword [ebp - 0x870], 1
jge 0x43cb2a
mov ecx, dword [ebp - 0x870]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43cb02
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43cb3e
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43cb54
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x874], 0
jmp 0x43cb76
mov edx, dword [ebp - 0x874]
add edx, 1
mov dword [ebp - 0x874], edx
cmp dword [ebp - 0x874], 7
jge 0x43cbac
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x43cb91
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43cba1
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43cbaa
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43cb67
mov dword [ebp - 4], 0xfffffffe
call fcn.0043cbba
jmp 0x43cbd7
mov dword [ebp - 0x878], 0
jmp 0x43cbf2
mov edx, dword [ebp - 0x878]
add edx, 1
mov dword [ebp - 0x878], edx
cmp dword [ebp - 0x878], 6
jge 0x43cc0b
mov eax, dword [ebp - 0x878]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43cbe3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43cc1f
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43cc35
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x87c], 0
jmp 0x43cc50
mov edx, dword [ebp - 0x87c]
add edx, 1
mov dword [ebp - 0x87c], edx
cmp dword [ebp - 0x87c], 8
jge 0x43cc91
cmp dword [ebp - 0x1c], 0
jge 0x43cc67
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43cc7d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa78]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43cc41
mov dword [ebp - 0xa7c], 0
jmp 0x43ccac
mov eax, dword [ebp - 0xa7c]
add eax, 1
mov dword [ebp - 0xa7c], eax
cmp dword [ebp - 0xa7c], 6
jge 0x43cced
cmp dword [ebp - 0x1c], 0
jge 0x43ccc3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43ccd9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc78]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43cc9d
mov dword [ebp - 0xc7c], 1
mov dword [ebp - 0xc80], 1
mov dword [ebp - 0xc84], 2
mov dword [ebp - 0xc88], 0
mov dword [ebp - 0xc8c], 0
jmp 0x43cd30
mov eax, dword [ebp - 0xc8c]
add eax, 1
mov dword [ebp - 0xc8c], eax
cmp dword [ebp - 0xc8c], 8
jge 0x43cd71
mov ecx, dword [ebp - 0xc7c]
add ecx, dword [ebp - 0xc80]
mov dword [ebp - 0xc84], ecx
mov edx, dword [ebp - 0xc80]
mov dword [ebp - 0xc7c], edx
mov eax, dword [ebp - 0xc84]
mov dword [ebp - 0xc80], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x1c], ecx
jmp 0x43cd21
mov edx, dword [ebp - 0x1c]
add edx, 8
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xc90], 0
jmp 0x43cd9c
mov eax, dword [ebp - 0xc90]
add eax, 1
mov dword [ebp - 0xc90], eax
cmp dword [ebp - 0xc90], 6
jge 0x43cdd7
mov eax, dword [ebp - 0xc90]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43cdcb
mov eax, dword [ebp - 0xc90]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43cdd2
and eax, 0xbc614e
jmp 0x43cdd5
mov dword [ebp - 0x1c], eax
jmp 0x43cd8d
mov dword [ebp - 4], 0xfffffffe
call fcn.0043cde5
jmp 0x43cded
mov dword [ebp - 0xc94], 0
jmp 0x43ce08
mov edx, dword [ebp - 0xc94]
add edx, 1
mov dword [ebp - 0xc94], edx
cmp dword [ebp - 0xc94], 7
jge 0x43ce21
mov eax, dword [ebp - 0xc94]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43cdf9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43ce35
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43ce4b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xc98], 0
jmp 0x43ce66
mov edx, dword [ebp - 0xc98]
add edx, 1
mov dword [ebp - 0xc98], edx
cmp dword [ebp - 0xc98], 1
jge 0x43cea7
cmp dword [ebp - 0x1c], 0
jge 0x43ce7d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43ce93
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe90]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43ce57
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xe94], 0
jmp 0x43cec9
mov eax, dword [ebp - 0xe94]
add eax, 1
mov dword [ebp - 0xe94], eax
cmp dword [ebp - 0xe94], 5
jge 0x43cf00
mov ecx, dword [ebp - 0xe94]
and ecx, 0x80000001
jns 0x43cee5
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x43cef5
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43cefe
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43ceba
mov dword [ebp - 4], 0xfffffffe
call fcn.0043cf0e
jmp 0x43cf2c
mov dword [ebp - 0xe98], 0
jmp 0x43cf47
mov eax, dword [ebp - 0xe98]
add eax, 1
mov dword [ebp - 0xe98], eax
cmp dword [ebp - 0xe98], 4
jge 0x43cf60
mov ecx, dword [ebp - 0xe98]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43cf38
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43cf74
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43cf8a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xe9c], 0
jmp 0x43cfac
mov edx, dword [ebp - 0xe9c]
add edx, 1
mov dword [ebp - 0xe9c], edx
cmp dword [ebp - 0xe9c], 0
jge 0x43cfe2
mov eax, dword [ebp - 0xe9c]
and eax, 0x80000001
jns 0x43cfc7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43cfd7
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43cfe0
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43cf9d
mov dword [ebp - 4], 0xfffffffe
call fcn.0043cff0
jmp 0x43d00d
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xea0], 0
jmp 0x43d02f
mov edx, dword [ebp - 0xea0]
add edx, 1
mov dword [ebp - 0xea0], edx
cmp dword [ebp - 0xea0], 4
jge 0x43d06a
mov eax, dword [ebp - 0xea0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43d05e
mov eax, dword [ebp - 0xea0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43d065
and eax, 0xbc614e
jmp 0x43d068
mov dword [ebp - 0x1c], eax
jmp 0x43d020
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d078
jmp 0x43d080
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xea4], 0
jmp 0x43d0a2
mov edx, dword [ebp - 0xea4]
add edx, 1
mov dword [ebp - 0xea4], edx
cmp dword [ebp - 0xea4], 1
jge 0x43d0e1
mov eax, dword [ebp - 0xea4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43d0d1
mov eax, dword [ebp - 0xea4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43d0dc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43d0df
mov dword [ebp - 0x1c], eax
jmp 0x43d093
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d0ef
jmp 0x43d0f7
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xea8], 0
jmp 0x43d119
mov edx, dword [ebp - 0xea8]
add edx, 1
mov dword [ebp - 0xea8], edx
cmp dword [ebp - 0xea8], 3
jge 0x43d160
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43d136
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43d146
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43d15e
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d15e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d10a
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d16e
jmp 0x43d17d
mov dword [ebp - 0xeac], 0
jmp 0x43d198
mov ecx, dword [ebp - 0xeac]
add ecx, 1
mov dword [ebp - 0xeac], ecx
cmp dword [ebp - 0xeac], 1
jge 0x43d1d9
cmp dword [ebp - 0x1c], 0
jge 0x43d1af
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43d1c5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43d189
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x10ac], 0
jmp 0x43d1fb
mov eax, dword [ebp - 0x10ac]
add eax, 1
mov dword [ebp - 0x10ac], eax
cmp dword [ebp - 0x10ac], 7
jge 0x43d242
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43d218
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43d228
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43d240
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d240
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d1ec
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d250
jmp 0x43d25f
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x10b0], 0
jmp 0x43d281
mov ecx, dword [ebp - 0x10b0]
add ecx, 1
mov dword [ebp - 0x10b0], ecx
cmp dword [ebp - 0x10b0], 2
jge 0x43d2b8
mov edx, dword [ebp - 0x10b0]
and edx, 0x80000001
jns 0x43d29d
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x43d2ad
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43d2b6
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43d272
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d2c6
jmp 0x43d2e4
mov dword [ebp - 0x10b4], 0
jmp 0x43d2ff
mov ecx, dword [ebp - 0x10b4]
add ecx, 1
mov dword [ebp - 0x10b4], ecx
cmp dword [ebp - 0x10b4], 1
jge 0x43d318
mov edx, dword [ebp - 0x10b4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d2f0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43d32c
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d342
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x10b8], 0
jmp 0x43d364
mov edx, dword [ebp - 0x10b8]
add edx, 1
mov dword [ebp - 0x10b8], edx
cmp dword [ebp - 0x10b8], 8
jge 0x43d3ab
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43d381
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43d391
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43d3a9
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d3a9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d355
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d3b9
jmp 0x43d3c8
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x10bc], 0
jmp 0x43d3ea
mov ecx, dword [ebp - 0x10bc]
add ecx, 1
mov dword [ebp - 0x10bc], ecx
cmp dword [ebp - 0x10bc], 1
jge 0x43d425
mov eax, dword [ebp - 0x10bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43d419
mov eax, dword [ebp - 0x10bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43d420
and eax, 0xbc614e
jmp 0x43d423
mov dword [ebp - 0x1c], eax
jmp 0x43d3db
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d433
jmp 0x43d43b
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x10c0], 0
jmp 0x43d45d
mov edx, dword [ebp - 0x10c0]
add edx, 1
mov dword [ebp - 0x10c0], edx
cmp dword [ebp - 0x10c0], 2
jge 0x43d493
mov eax, dword [ebp - 0x10c0]
and eax, 0x80000001
jns 0x43d478
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43d488
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43d491
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43d44e
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d4a1
jmp 0x43d4be
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x10c4], 0
jmp 0x43d4e0
mov edx, dword [ebp - 0x10c4]
add edx, 1
mov dword [ebp - 0x10c4], edx
cmp dword [ebp - 0x10c4], 7
jge 0x43d527
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43d4fd
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43d50d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43d525
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d525
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d4d1
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d535
jmp 0x43d544
mov dword [ebp - 0x10c8], 1
mov dword [ebp - 0x10cc], 1
mov dword [ebp - 0x10d0], 2
mov dword [ebp - 0x10d4], 0
mov dword [ebp - 0x10d8], 0
jmp 0x43d587
mov ecx, dword [ebp - 0x10d8]
add ecx, 1
mov dword [ebp - 0x10d8], ecx
cmp dword [ebp - 0x10d8], 1
jge 0x43d5c8
mov edx, dword [ebp - 0x10c8]
add edx, dword [ebp - 0x10cc]
mov dword [ebp - 0x10d0], edx
mov eax, dword [ebp - 0x10cc]
mov dword [ebp - 0x10c8], eax
mov ecx, dword [ebp - 0x10d0]
mov dword [ebp - 0x10cc], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10d0]
mov dword [ebp - 0x1c], edx
jmp 0x43d578
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10dc], 0
jmp 0x43d5ec
mov ecx, dword [ebp - 0x10dc]
add ecx, 1
mov dword [ebp - 0x10dc], ecx
cmp dword [ebp - 0x10dc], 0
jge 0x43d62d
cmp dword [ebp - 0x1c], 0
jge 0x43d603
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43d619
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x12d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43d5dd
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x12dc], 0
jmp 0x43d64f
mov eax, dword [ebp - 0x12dc]
add eax, 1
mov dword [ebp - 0x12dc], eax
cmp dword [ebp - 0x12dc], 2
jge 0x43d696
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43d66c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43d67c
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43d694
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d694
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d640
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d6a4
jmp 0x43d6b3
mov dword [ebp - 0x12e0], 0
jmp 0x43d6ce
mov ecx, dword [ebp - 0x12e0]
add ecx, 1
mov dword [ebp - 0x12e0], ecx
cmp dword [ebp - 0x12e0], 0
jge 0x43d6e7
mov edx, dword [ebp - 0x12e0]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d6bf
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43d6fb
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d711
mov dword [ebp - 0x1c], 0xb
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x34]
xor ecx, ebp
call fcn.00408023
mov esp, ebp
pop ebp
ret