Function at 0x43ea90
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b4018
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff6b8
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x44], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x43eae6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2a
jge 0x43eb1c
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43eb0c
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43eb17
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43eb1a
mov dword [ebp - 0x1c], eax
jmp 0x43eadd
mov dword [ebp - 4], 0xfffffffe
call fcn.0043eb2a
jmp 0x43eb32
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x43eb60
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x21
jge 0x43eb86
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x43eb57
mov ecx, dword [ebp - 0x1c]
add ecx, 0x21
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 0
jmp 0x43eba8
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 2
jge 0x43ebda
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ebce
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ebd5
and eax, 0xbc614e
jmp 0x43ebd8
mov dword [ebp - 0x1c], eax
jmp 0x43eb9f
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ebe8
jmp 0x43ebf0
mov dword [ebp - 4], 2
mov dword [ebp - 0x3c], 0
jmp 0x43ec09
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x1f
jge 0x43ec4d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43ec23
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43ec33
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43ec4b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43ec4b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43ec00
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ec5b
jmp 0x43ec6a
mov dword [ebp - 0x40], 0
jmp 0x43ec7c
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 3
jge 0x43ecba
cmp dword [ebp - 0x1c], 0
jge 0x43ec90
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43eca6
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43ec73
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x254], 0
jmp 0x43ecfd
mov eax, dword [ebp - 0x254]
add eax, 1
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x10
jge 0x43ed3e
mov ecx, dword [ebp - 0x244]
add ecx, dword [ebp - 0x248]
mov dword [ebp - 0x24c], ecx
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], ecx
jmp 0x43ecee
mov edx, dword [ebp - 0x1c]
add edx, 0x10
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x258], 0
jmp 0x43ed62
mov eax, dword [ebp - 0x258]
add eax, 1
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 4
jge 0x43eda3
cmp dword [ebp - 0x1c], 0
jge 0x43ed79
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43ed8f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x450]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43ed53
mov dword [ebp - 0x454], 1
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x45c], 2
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x464], 0
jmp 0x43ede6
mov eax, dword [ebp - 0x464]
add eax, 1
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0xe
jge 0x43ee27
mov ecx, dword [ebp - 0x454]
add ecx, dword [ebp - 0x458]
mov dword [ebp - 0x45c], ecx
mov edx, dword [ebp - 0x458]
mov dword [ebp - 0x454], edx
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x458], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x45c]
mov dword [ebp - 0x1c], ecx
jmp 0x43edd7
mov edx, dword [ebp - 0x1c]
add edx, 0xe
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x468], 0
jmp 0x43ee4b
mov eax, dword [ebp - 0x468]
add eax, 1
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 9
jge 0x43ee64
mov ecx, dword [ebp - 0x468]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43ee3c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43ee78
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43ee8e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 3
mov dword [ebp - 0x46c], 0
jmp 0x43eeb0
mov edx, dword [ebp - 0x46c]
add edx, 1
mov dword [ebp - 0x46c], edx
cmp dword [ebp - 0x46c], 0xa
jge 0x43eee6
mov eax, dword [ebp - 0x46c]
and eax, 0x80000001
jns 0x43eecb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43eedb
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43eee4
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43eea1
mov dword [ebp - 4], 0xfffffffe
call fcn.0043eef4
jmp 0x43ef11
mov dword [ebp - 4], 4
mov dword [ebp - 0x470], 0
jmp 0x43ef33
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 0xa
jge 0x43ef69
mov eax, dword [ebp - 0x470]
and eax, 0x80000001
jns 0x43ef4e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43ef5e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43ef67
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43ef24
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ef77
jmp 0x43ef94
mov dword [ebp - 0x474], 0
jmp 0x43efaf
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 0xf
jge 0x43efc8
mov eax, dword [ebp - 0x474]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43efa0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43efdc
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43eff2
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x47c], 1
mov dword [ebp - 0x480], 2
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x488], 0
jmp 0x43f035
mov edx, dword [ebp - 0x488]
add edx, 1
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 5
jge 0x43f076
mov eax, dword [ebp - 0x478]
add eax, dword [ebp - 0x47c]
mov dword [ebp - 0x480], eax
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x478], ecx
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x480]
mov dword [ebp - 0x1c], eax
jmp 0x43f026
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x490], 1
mov dword [ebp - 0x494], 2
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x49c], 0
jmp 0x43f0c2
mov edx, dword [ebp - 0x49c]
add edx, 1
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 2
jge 0x43f103
mov eax, dword [ebp - 0x48c]
add eax, dword [ebp - 0x490]
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x490]
mov dword [ebp - 0x48c], ecx
mov edx, dword [ebp - 0x494]
mov dword [ebp - 0x490], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x494]
mov dword [ebp - 0x1c], eax
jmp 0x43f0b3
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x4a0], 0
jmp 0x43f12e
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x4a0], edx
cmp dword [ebp - 0x4a0], 6
jge 0x43f169
mov eax, dword [ebp - 0x4a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f15d
mov eax, dword [ebp - 0x4a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f164
and eax, 0xbc614e
jmp 0x43f167
mov dword [ebp - 0x1c], eax
jmp 0x43f11f
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f177
jmp 0x43f17f
mov dword [ebp - 4], 6
mov dword [ebp - 0x4a4], 0
jmp 0x43f1a1
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
cmp dword [ebp - 0x4a4], 0
jge 0x43f1d7
mov eax, dword [ebp - 0x4a4]
and eax, 0x80000001
jns 0x43f1bc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43f1cc
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43f1d5
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43f192
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f1e5
jmp 0x43f202
mov dword [ebp - 4], 7
mov dword [ebp - 0x4a8], 0
jmp 0x43f224
mov edx, dword [ebp - 0x4a8]
add edx, 1
mov dword [ebp - 0x4a8], edx
cmp dword [ebp - 0x4a8], 5
jge 0x43f26b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43f241
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43f251
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43f269
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f269
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43f215
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f279
jmp 0x43f288
mov dword [ebp - 0x4ac], 0
jmp 0x43f2a3
mov ecx, dword [ebp - 0x4ac]
add ecx, 1
mov dword [ebp - 0x4ac], ecx
cmp dword [ebp - 0x4ac], 2
jge 0x43f2bc
mov edx, dword [ebp - 0x4ac]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43f294
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43f2d0
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f2e6
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0x4b4], 1
mov dword [ebp - 0x4b8], 2
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4c0], 0
jmp 0x43f329
mov edx, dword [ebp - 0x4c0]
add edx, 1
mov dword [ebp - 0x4c0], edx
cmp dword [ebp - 0x4c0], 0
jge 0x43f36a
mov eax, dword [ebp - 0x4b0]
add eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x4b8], eax
mov ecx, dword [ebp - 0x4b4]
mov dword [ebp - 0x4b0], ecx
mov edx, dword [ebp - 0x4b8]
mov dword [ebp - 0x4b4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x1c], eax
jmp 0x43f31a
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4c4], 0
jmp 0x43f38b
mov edx, dword [ebp - 0x4c4]
add edx, 1
mov dword [ebp - 0x4c4], edx
cmp dword [ebp - 0x4c4], 7
jge 0x43f3a4
mov eax, dword [ebp - 0x4c4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43f37c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43f3b8
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f3ce
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x4cc], 1
mov dword [ebp - 0x4d0], 2
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d8], 0
jmp 0x43f411
mov edx, dword [ebp - 0x4d8]
add edx, 1
mov dword [ebp - 0x4d8], edx
cmp dword [ebp - 0x4d8], 8
jge 0x43f452
mov eax, dword [ebp - 0x4c8]
add eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x4d0], eax
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0x4c8], ecx
mov edx, dword [ebp - 0x4d0]
mov dword [ebp - 0x4cc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x1c], eax
jmp 0x43f402
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4dc], 1
mov dword [ebp - 0x4e0], 1
mov dword [ebp - 0x4e4], 2
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4ec], 0
jmp 0x43f49e
mov edx, dword [ebp - 0x4ec]
add edx, 1
mov dword [ebp - 0x4ec], edx
cmp dword [ebp - 0x4ec], 6
jge 0x43f4df
mov eax, dword [ebp - 0x4dc]
add eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e0]
mov dword [ebp - 0x4dc], ecx
mov edx, dword [ebp - 0x4e4]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x1c], eax
jmp 0x43f48f
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4f0], 0
jmp 0x43f503
mov edx, dword [ebp - 0x4f0]
add edx, 1
mov dword [ebp - 0x4f0], edx
cmp dword [ebp - 0x4f0], 6
jge 0x43f51c
mov eax, dword [ebp - 0x4f0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43f4f4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43f530
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f546
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x4f4], 0
jmp 0x43f568
mov edx, dword [ebp - 0x4f4]
add edx, 1
mov dword [ebp - 0x4f4], edx
cmp dword [ebp - 0x4f4], 2
jge 0x43f59e
mov eax, dword [ebp - 0x4f4]
and eax, 0x80000001
jns 0x43f583
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43f593
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43f59c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43f559
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f5ac
jmp 0x43f5c9
mov dword [ebp - 4], 9
mov dword [ebp - 0x4f8], 0
jmp 0x43f5eb
mov edx, dword [ebp - 0x4f8]
add edx, 1
mov dword [ebp - 0x4f8], edx
cmp dword [ebp - 0x4f8], 1
jge 0x43f62a
mov eax, dword [ebp - 0x4f8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f61a
mov eax, dword [ebp - 0x4f8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f625
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43f628
mov dword [ebp - 0x1c], eax
jmp 0x43f5dc
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f638
jmp 0x43f640
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x4fc], 0
jmp 0x43f662
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
cmp dword [ebp - 0x4fc], 1
jge 0x43f6a9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43f67f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43f68f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43f6a7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f6a7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43f653
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f6b7
jmp 0x43f6c6
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x500], 0
jmp 0x43f6e8
mov ecx, dword [ebp - 0x500]
add ecx, 1
mov dword [ebp - 0x500], ecx
cmp dword [ebp - 0x500], 1
jge 0x43f723
mov eax, dword [ebp - 0x500]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f717
mov eax, dword [ebp - 0x500]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f71e
and eax, 0xbc614e
jmp 0x43f721
mov dword [ebp - 0x1c], eax
jmp 0x43f6d9
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f731
jmp 0x43f739
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x504], 0
jmp 0x43f75b
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
cmp dword [ebp - 0x504], 1
jge 0x43f7a2
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43f778
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43f788
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43f7a0
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f7a0
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43f74c
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f7b0
jmp 0x43f7bf
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x508], 0
jmp 0x43f7e1
mov ecx, dword [ebp - 0x508]
add ecx, 1
mov dword [ebp - 0x508], ecx
cmp dword [ebp - 0x508], 3
jge 0x43f820
mov eax, dword [ebp - 0x508]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f810
mov eax, dword [ebp - 0x508]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f81b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43f81e
mov dword [ebp - 0x1c], eax
jmp 0x43f7d2
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f82e
jmp 0x43f836
mov dword [ebp - 0x50c], 1
mov dword [ebp - 0x510], 1
mov dword [ebp - 0x514], 2
mov dword [ebp - 0x518], 0
mov dword [ebp - 0x51c], 0
jmp 0x43f879
mov edx, dword [ebp - 0x51c]
add edx, 1
mov dword [ebp - 0x51c], edx
cmp dword [ebp - 0x51c], 2
jge 0x43f8ba
mov eax, dword [ebp - 0x50c]
add eax, dword [ebp - 0x510]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x50c], ecx
mov edx, dword [ebp - 0x514]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x514]
mov dword [ebp - 0x1c], eax
jmp 0x43f86a
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x520], 1
mov dword [ebp - 0x524], 1
mov dword [ebp - 0x528], 2
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x530], 0
jmp 0x43f906
mov edx, dword [ebp - 0x530]
add edx, 1
mov dword [ebp - 0x530], edx
cmp dword [ebp - 0x530], 0
jge 0x43f947
mov eax, dword [ebp - 0x520]
add eax, dword [ebp - 0x524]
mov dword [ebp - 0x528], eax
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0x520], ecx
mov edx, dword [ebp - 0x528]
mov dword [ebp - 0x524], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x528]
mov dword [ebp - 0x1c], eax
jmp 0x43f8f7
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x534], 1
mov dword [ebp - 0x538], 1
mov dword [ebp - 0x53c], 2
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x544], 0
jmp 0x43f990
mov edx, dword [ebp - 0x544]
add edx, 1
mov dword [ebp - 0x544], edx
cmp dword [ebp - 0x544], 2
jge 0x43f9d1
mov eax, dword [ebp - 0x534]
add eax, dword [ebp - 0x538]
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp - 0x538]
mov dword [ebp - 0x534], ecx
mov edx, dword [ebp - 0x53c]
mov dword [ebp - 0x538], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x53c]
mov dword [ebp - 0x1c], eax
jmp 0x43f981
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x548], 1
mov dword [ebp - 0x54c], 1
mov dword [ebp - 0x550], 2
mov dword [ebp - 0x554], 0
mov dword [ebp - 0x558], 0
jmp 0x43fa1d
mov edx, dword [ebp - 0x558]
add edx, 1
mov dword [ebp - 0x558], edx
cmp dword [ebp - 0x558], 0
jge 0x43fa5e
mov eax, dword [ebp - 0x548]
add eax, dword [ebp - 0x54c]
mov dword [ebp - 0x550], eax
mov ecx, dword [ebp - 0x54c]
mov dword [ebp - 0x548], ecx
mov edx, dword [ebp - 0x550]
mov dword [ebp - 0x54c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x550]
mov dword [ebp - 0x1c], eax
jmp 0x43fa0e
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x55c], 0
jmp 0x43fa86
mov edx, dword [ebp - 0x55c]
add edx, 1
mov dword [ebp - 0x55c], edx
cmp dword [ebp - 0x55c], 2
jge 0x43facd
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43faa3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43fab3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43facb
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43facb
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43fa77
mov dword [ebp - 4], 0xfffffffe
call fcn.0043fadb
jmp 0x43faea
mov dword [ebp - 0x560], 0
jmp 0x43fb05
mov ecx, dword [ebp - 0x560]
add ecx, 1
mov dword [ebp - 0x560], ecx
cmp dword [ebp - 0x560], 1
jge 0x43fb46
cmp dword [ebp - 0x1c], 0
jge 0x43fb1c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43fb32
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x758]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43faf6
mov dword [ebp - 0x75c], 0
jmp 0x43fb61
mov eax, dword [ebp - 0x75c]
add eax, 1
mov dword [ebp - 0x75c], eax
cmp dword [ebp - 0x75c], 3
jge 0x43fba2
cmp dword [ebp - 0x1c], 0
jge 0x43fb78
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43fb8e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x958]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43fb52
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x44]
xor ecx, ebp
call fcn.00408023
mov esp, ebp
pop ebp
ret