Function at 0x43d57d
Capabilities:
Get common file path
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 2
add esp, 0xfffff004
push eax
dec eax
jne 0x43d586
mov eax, dword [ebp - 4]
add esp, 0xfffff884
push ebx
push esi
push edi
mov esi, eax
mov edi, 0x4b6fc4
mov eax, 0x4a5d14
call fcn.00495388
lea edx, [edi + 0x810]
push edx
lea ecx, [ebp - 0x520]
push ecx
call fcn.00494f58
mov byte [edi + 0x810], 0
xor eax, eax
add esp, 8
mov al, byte [ebp - 0x520]
cmp eax, 0x3f
jne 0x43d6da
lea ebx, [ebp - 0x51f]
cmp byte [ebx], 0
je 0x43d5ed
push ebx
call fcn.004968ec
pop ecx
cmp dword [esi + 0x104], 1
jbe 0x43d668
mov word [ebp - 0x10c], 8
lea eax, [ebp - 0xf8]
call fcn.0040f5f8
add dword [ebp - 0x100], 4
mov word [ebp - 0x10c], 0x14
lea edx, [ebp - 0xf8]
mov eax, esi
call fcn.0043e050
push 0
push 0
cmp byte [ebx], 0
lea ecx, [ebp - 0xf8]
sete dl
and edx, 1
mov al, 1
push edx
xor edx, edx
push 1
call fcn.0044d1cc
sub dword [ebp - 0x100], 4
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0040f6d0
mov word [ebp - 0x10c], 0
jmp 0x43d6c9
cmp dword [esi + 0x104], 1
jne 0x43d697
lea ecx, [ebp - 0x1150]
xor edx, edx
mov eax, esi
call fcn.0046ba40
lea edx, [ebp - 0x1150]
lea eax, [edi + 0x42f0]
add edx, 0x400
call fcn.0041023c
push 1
push 0
lea ecx, [edi + 0x42f0]
lea edx, [edi + 0x3ef0]
mov eax, 0x4c319c
call fcn.00461128
dec eax
jne 0x43d6c9
cmp byte [ebx], 0
mov al, 1
sete cl
and ecx, 1
xor edx, edx
push ecx
mov cl, 1
call fcn.0044cd8c
mov eax, dword [ebp - 0x11c]
mov dword fs:[0], eax
jmp 0x43d980
xor ebx, ebx
mov bl, byte [edi + 0x32c0]
push ebx
call fcn.00498f3c
pop ecx
cmp eax, 0x45
jne 0x43d6f8
mov dword [edi + 0x20c0], 2
xor ebx, ebx
mov bl, byte [edi + 0x32c0]
push ebx
call fcn.00498f3c
pop ecx
cmp eax, 0x54
sete al
and eax, 1
mov byte [edi + 0x21c6], al
cmp byte [ebp - 0x520], 0
je 0x43d73f
lea edx, [ebp - 0x1550]
push edx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
lea eax, [ebp - 0x520]
xor ecx, ecx
xor edx, edx
call fcn.0040a0bc
call fcn.0044e674
mov dword [ebp - 0x120], eax
cmp byte [edi + 0x32af], 0
je 0x43d763
cmp dword [esi + 0x104], 1
ja 0x43d763
mov byte [edi + 0x268d], 0
xor ebx, ebx
jmp 0x43d8e7
mov eax, dword [edi + 0x4afc]
call fcn.0040f74c
lea ecx, [ebp - 0x2180]
mov edx, ebx
mov eax, esi
call fcn.0046ba40
push 0x3ff
lea edx, [ebp - 0x2180]
push edx
lea ecx, [edi + 0x3ef0]
push ecx
call fcn.00495138
add esp, 0xc
lea edx, [ebp - 0x1d80]
lea eax, [edi + 0x42f0]
mov ecx, 0x3ff
call fcn.00410254
mov eax, dword [ebp - 0x1554]
mov dword [edi + 0x2aa8], eax
cmp byte [edi + 0x3ef0], 0
jne 0x43d7d8
cmp word [edi + 0x42f0], 0
je 0x43d8e6
lea eax, [edi + 0x3ef0]
call fcn.0040ba60
push eax
cmp byte [edi + 0x21c6], 0
je 0x43d7f4
mov eax, 0x20b
jmp 0x43d7f9
mov eax, 0x20a
call fcn.0041202c
push eax
lea edx, [ebp - 0x2780]
push edx
call fcn.00497eb8
add esp, 0xc
lea eax, [ebp - 0x2780]
call fcn.0047e984
call fcn.0047de20
cmp byte [edi + 0x21c6], 0
jne 0x43d85f
cmp byte [ebp - 0x520], 0
je 0x43d85f
lea edx, [ebp - 0x520]
push edx
call fcn.004968ec
pop ecx
inc eax
jne 0x43d85f
lea ecx, [ebp - 0x520]
mov eax, 0x1f7
push ecx
call fcn.0041202c
push eax
call fcn.0044e46c
add esp, 8
jmp 0x43d8fc
push 1
push 0
lea ecx, [ebp - 0x1d80]
lea edx, [ebp - 0x2180]
mov eax, 0x4c319c
call fcn.00461128
cmp byte [edi + 0x21c6], 0
je 0x43d8aa
mov eax, 0x4c319c
call fcn.0045e2f0
test al, 1
jne 0x43d8aa
mov eax, 0x3ac
call fcn.0041202c
push eax
lea edx, [ebp - 0x2180]
push edx
call fcn.00448a7c
add esp, 8
mov eax, 0x4c319c
xor ecx, ecx
mov dl, byte [edi + 0x32ad]
call fcn.0045d718
lea eax, [ebp - 0x1550]
push eax
call fcn.004968ec
pop ecx
mov eax, dword [ebp - 0x1580]
mov edx, dword [ebp - 0x157c]
add dword [0x4c5740], eax
adc dword [0x4c5744], edx
call fcn.0047ec90
inc ebx
cmp ebx, dword [esi + 0x104]
jae 0x43d8fc
cmp dword [0x4c4df0], 0
je 0x43d76a
call fcn.0044e674
cmp eax, dword [ebp - 0x120]
jne 0x43d91b
cmp dword [0x4c4df4], 0
jne 0x43d91b
cmp dword [0x4c4df0], 0
je 0x43d91f
xor eax, eax
jmp 0x43d924
mov eax, 1
cmp byte [edi + 0x21c6], 0
je 0x43d973
cmp byte [edi + 0x32af], 0
je 0x43d973
test al, al
je 0x43d973
cmp dword [0x4c244c], 0
je 0x43d973
push 0
push dword [0x4c244c]
call sub.USER32.DLL_ShowWindow
push 0x40
mov eax, 0x3a7
call fcn.0041202c
push eax
mov eax, 0x3a8
call fcn.0041202c
push eax
push dword [0x4c2440]
call sub.USER32.DLL_MessageBoxA
mov edx, dword [ebp - 0x11c]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret