Function at 0x43ad80
Capabilities:
Check if file exists
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6f96e7
mov eax, dword fs:[0]
push eax
mov eax, 0x267d8
call fcn.004588f0
mov eax, dword [0x7ca418]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x267cc], ebx
mov eax, dword [0x7e3d4c]
test eax, eax
jne 0x43adf8
push 0xac
call fcn.00458642
add esp, 4
mov dword [ebp - 0x267d0], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x43adea
mov ecx, eax
call fcn.00430950
jmp 0x43adec
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x7e3d4c], eax
push str.870a6
push 0
mov ecx, eax
call int.00432470
push str.ffce8313f5f2
push dword [ebx + 0x24]
call fcn.0043d770
mov esi, eax
add esp, 8
test esi, esi
je 0x43b30f
call fcn.00474085
push esi
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0x267d0], eax
call fcn.00420940
mov dword [ebp - 4], 1
mov dword [ebp - 0x267e4], 0
mov dword [ebp - 0x267e0], 0
mov dword [ebp - 0x267dc], 0
push 1
xor eax, eax
mov byte [ebp - 4], 2
push 0x70ebb4
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 7
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
call fcn.00420aa0
lea eax, [ebp - 0x267e4]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x2d8]
push eax
call fcn.0045ef9c
mov eax, dword [ebp - 0x21c]
add esp, 0xc
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x43aed2
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00420ba0
mov esi, dword [ebp - 0x267e4]
cmp esi, dword [ebp - 0x267e0]
je 0x43b2df
cmp dword [esi + 0x14], 8
jb 0x43aeee
mov edx, dword [esi]
jmp 0x43aef0
mov edx, esi
xor eax, eax
mov dword [ebp - 0x21c], 7
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
cmp word [edx], ax
jne 0x43af16
xor ecx, ecx
jmp 0x43af2f
mov ecx, edx
lea edi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43af20
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x230]
call fcn.00420aa0
xor eax, eax
mov byte [ebp - 4], 4
push eax
push 0x7943cc
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x264], 7
mov dword [ebp - 0x268], 0
mov word [ebp - 0x278], ax
call fcn.00420aa0
xor eax, eax
mov byte [ebp - 4], 5
push eax
push 0x7943cc
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], 7
mov dword [ebp - 0x250], 0
mov word [ebp - 0x260], ax
call fcn.00420aa0
push 1
push 0
push 0x794560
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 6
call fcn.00423530
mov edi, eax
cmp edi, 0xffffffff
jle 0x43b0da
push edi
push 0
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x230]
call fcn.00422400
mov ebx, eax
lea eax, [ebp - 0x278]
cmp eax, ebx
je 0x43b02b
mov eax, dword [ebp - 0x264]
cmp eax, 8
jb 0x43b002
inc eax
lea ecx, [ebp - 0x278]
push eax
push dword [ebp - 0x278]
call fcn.00420ba0
xor eax, eax
mov dword [ebp - 0x264], 7
push ebx
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x268], 0
mov word [ebp - 0x278], ax
call fcn.004226a0
mov eax, dword [ebp - 0x234]
mov byte [ebp - 4], 6
cmp eax, 8
jb 0x43b04d
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.00420ba0
push 0xffffffffffffffff
lea eax, [edi + 1]
push eax
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x230]
call fcn.00422400
mov edi, eax
lea eax, [ebp - 0x260]
cmp eax, edi
je 0x43b0b8
mov eax, dword [ebp - 0x24c]
cmp eax, 8
jb 0x43b08f
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00420ba0
xor eax, eax
mov dword [ebp - 0x24c], 7
push edi
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x250], 0
mov word [ebp - 0x260], ax
call fcn.004226a0
mov eax, dword [ebp - 0x234]
mov byte [ebp - 4], 6
cmp eax, 8
jb 0x43b0da
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.00420ba0
cmp dword [ebp - 0x268], 9
jne 0x43b232
push 4
push 0
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x278]
call fcn.00422400
cmp dword [eax + 0x14], 8
jb 0x43b105
mov eax, dword [eax]
push eax
call fcn.004f2299
mov ecx, dword [ebp - 0x234]
add esp, 4
mov ebx, eax
cmp ecx, 8
jb 0x43b12e
inc ecx
push ecx
push dword [ebp - 0x248]
lea ecx, [ebp - 0x248]
call fcn.00420ba0
push 4
push 5
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x278]
call fcn.00422400
cmp dword [eax + 0x14], 8
jb 0x43b14c
mov eax, dword [eax]
push eax
call fcn.004f2299
mov ecx, dword [ebp - 0x234]
add esp, 4
mov edi, eax
cmp ecx, 8
jb 0x43b175
inc ecx
push ecx
push dword [ebp - 0x248]
lea ecx, [ebp - 0x248]
call fcn.00420ba0
mov eax, dword [ebp - 0x267d0]
cmp eax, ebx
jl 0x43b232
cmp eax, edi
jg 0x43b232
xor ebx, ebx
mov dword [ebp - 0x267d8], 0
push ebx
push 0x70ebf8
lea ecx, [ebp - 0x260]
call fcn.004234e0
mov edi, eax
cmp edi, 0xffffffff
jle 0x43b21b
push edi
push ebx
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x260]
call fcn.00422400
cmp dword [eax + 0x14], 8
jb 0x43b1cb
mov eax, dword [eax]
push eax
call fcn.004f2299
add esp, 4
mov dword [ebp - 0x267d8], eax
lea ecx, [ebp - 0x248]
call fcn.00420900
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x260]
call fcn.00422400
cmp dword [eax + 0x14], 8
jb 0x43b205
mov eax, dword [eax]
push eax
call fcn.004f2299
add esp, 4
lea ecx, [ebp - 0x248]
mov ebx, eax
call fcn.00420900
push ebx
push 0
call fcn.00468aa7
add esp, 8
cmp eax, dword [ebp - 0x267d8]
jg 0x43b382
mov eax, dword [ebp - 0x24c]
cmp eax, 8
jb 0x43b250
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00420ba0
xor eax, eax
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x250], 0
cmp eax, 8
jb 0x43b28b
inc eax
lea ecx, [ebp - 0x278]
push eax
push dword [ebp - 0x278]
call fcn.00420ba0
xor eax, eax
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x268], 0
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x43b2ca
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00420ba0
add esi, 0x18
cmp esi, dword [ebp - 0x267e0]
jne 0x43aee4
mov ebx, dword [ebp - 0x267cc]
lea ecx, [ebp - 0x267e4]
call fcn.00439200
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x43b30f
inc eax
lea ecx, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2d8]
call fcn.00420ba0
push 0x7943cc
lea ecx, [ebp - 0x320]
call fcn.00420940
push 0x7943cc
lea ecx, [ebp - 0x308]
mov dword [ebp - 4], 9
call fcn.00420940
push 0x7943cc
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0xa
call fcn.00420940
push 0x7943cc
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0xb
call fcn.00420940
push str.dd1ecf2295b0
push dword [ebx + 0x24]
mov byte [ebp - 4], 0xc
call fcn.0043d770
mov edx, eax
add esp, 8
test edx, edx
je 0x43b3e1
cmp word [edx], 0
jne 0x43b3c0
xor ecx, ecx
jmp 0x43b3d4
lea ecx, [ebp - 0x260]
call fcn.00420900
lea ecx, [ebp - 0x278]
call fcn.00420900
lea ecx, [ebp - 0x230]
call fcn.00420900
lea ecx, [ebp - 0x267e4]
call fcn.00439200
lea ecx, [ebp - 0x2d8]
call fcn.00420900
xor eax, eax
jmp 0x43bc10
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43b3c5
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x320]
call fcn.00420aa0
push str.ee196bc76e70
push dword [ebx + 0x24]
call fcn.0043d770
mov edx, eax
add esp, 8
test edx, edx
je 0x43b422
cmp word [edx], 0
jne 0x43b401
xor ecx, ecx
jmp 0x43b415
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43b406
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x308]
call fcn.00420aa0
push str.c88257c112fa
push dword [ebx + 0x24]
call fcn.0043d770
mov edx, eax
add esp, 8
test edx, edx
je 0x43b463
cmp word [edx], 0
jne 0x43b442
xor ecx, ecx
jmp 0x43b456
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43b447
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x2c0]
call fcn.00420aa0
push str.b4b10e7a5260
push dword [ebx + 0x24]
call fcn.0043d770
mov edx, eax
add esp, 8
test edx, edx
je 0x43b4ac
cmp word [edx], 0
jne 0x43b483
xor ecx, ecx
jmp 0x43b49f
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43b490
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x2a8]
call fcn.00420aa0
cmp dword [ebp - 0x310], 0
jne 0x43b4bc
xor esi, esi
jmp 0x43bb3f
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004ea000
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x350]
call fcn.00420940
mov esi, dword [ebx + 4]
xor ecx, ecx
mov eax, dword [ebx + 8]
xor edi, edi
mov ebx, eax
mov byte [ebp - 4], 0xd
sub ebx, esi
add ebx, 3
shr ebx, 2
cmp esi, eax
cmova ebx, ecx
test ebx, ebx
je 0x43b532
mov ecx, dword [esi]
test ecx, ecx
je 0x43b52a
mov eax, dword [ecx]
push 0
push 0
push 0x46b
call dword [eax]
inc edi
add esi, 4
cmp edi, ebx
jne 0x43b517
mov edi, dword [ebp - 0x267cc]
xor ecx, ecx
mov eax, dword [edi + 8]
mov ebx, eax
mov esi, dword [edi + 4]
sub ebx, esi
add ebx, 3
xor edi, edi
shr ebx, 2
cmp esi, eax
cmova ebx, ecx
test ebx, ebx
je 0x43b570
mov ecx, dword [esi]
test ecx, ecx
je 0x43b568
mov eax, dword [ecx]
push 0
push 0
push 0x465
call dword [eax]
inc edi
add esi, 4
cmp edi, ebx
jne 0x43b555
cmp dword [ebp - 0x30c], 8
lea eax, [ebp - 0x320]
cmovae eax, dword [ebp - 0x320]
push eax
lea eax, [ebp - 0x338]
push eax
call fcn.0045d51f
lea eax, [ebp - 0x338]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.00422950
add esp, 0x14
cmp dword [ebp - 0x27c], 8
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 0xf
cmovae eax, dword [ebp - 0x290]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x43b5f2
cmp dword [ebp - 0x27c], 8
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
push eax
call fcn.004701a5
add esp, 4
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.0045f706
lea eax, [ebp - 0x320]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.0045f706
mov ecx, eax
add esp, 0x10
cmp dword [ecx + 0x14], 0x10
jb 0x43b629
mov ecx, dword [ecx]
lea edx, [ebp - 0x998]
nop
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx], al
lea edx, [edx + 1]
test al, al
jne 0x43b630
mov eax, dword [ebp - 0x234]
cmp eax, 0x10
jb 0x43b65c
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.0042f550
cmp dword [ebp - 0x2dc], 0x10
lea ecx, [ebp - 0x2f0]
lea edx, [ebp - 0x798]
cmovae ecx, dword [ebp - 0x2f0]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx], al
lea edx, [edx + 1]
test al, al
jne 0x43b676
lea ecx, [ebp - 0x267c8]
call fcn.0046f50b
sub esp, 0x300
mov byte [ebp - 4], 0x11
mov edi, esp
lea esi, [ebp - 0x998]
mov ecx, 0xc0
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x267c8]
call int.0046f596
lea ecx, [ebp - 0x267c8]
call fcn.0046ffbe
push 0x300
lea eax, [ebp - 0x698]
push 0
push eax
call fcn.004ea000
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
add esp, 0xc
mov dword [ebp - 0x398], 0
movups xmmword [ebp - 0x390], xmm0
nop
lea ecx, [ebp - 0x267c8]
call fcn.0046fd1d
test eax, eax
je 0x43b78a
lea eax, [ebp - 0x698]
push eax
lea ecx, [ebp - 0x267c8]
call fcn.0046fa54
movsd xmm0, qword [ebp - 0x388]
xor ecx, ecx
divsd xmm0, qword [ebp - 0x390]
mov eax, dword [ebp - 0x267cc]
xor edi, edi
movsd qword [eax + 0x10], xmm0
mov esi, dword [eax + 4]
mulsd xmm0, qword [0x70d380]
mov eax, dword [eax + 8]
mov ebx, eax
sub ebx, esi
add ebx, 3
shr ebx, 2
cmp esi, eax
cvttsd2si edx, xmm0
cmova ebx, ecx
mov dword [ebp - 0x267d0], edx
test ebx, ebx
je 0x43b780
nop
mov ecx, dword [esi]
test ecx, ecx
je 0x43b778
mov eax, dword [ecx]
push edx
push 0
push 0x466
call dword [eax]
mov edx, dword [ebp - 0x267d0]
inc edi
add esi, 4
cmp edi, ebx
jne 0x43b760
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x64
call ebx
lea ecx, [ebp - 0x267c8]
call fcn.0046fd29
test eax, eax
je 0x43b6f0
lea eax, [ebp - 0x698]
push eax
lea ecx, [ebp - 0x267c8]
call fcn.0046fa54
movsd xmm0, qword [ebp - 0x388]
movsd qword [ebp - 0x267d4], xmm0
divsd xmm0, qword [ebp - 0x390]
mov edi, dword [ebp - 0x267cc]
mov ecx, edi
movsd qword [edi + 0x10], xmm0
mulsd xmm0, qword [0x70d380]
cvttsd2si eax, xmm0
push eax
push 0
push 0x466
call fcn.0043d250
movsd xmm0, qword [ebp - 0x267d4]
ucomisd xmm0, qword [ebp - 0x390]
lahf
test ah, 0x44
jp 0x43b815
ucomisd xmm0, qword [0x70eee0]
lahf
test ah, 0x44
jp 0x43b8bf
lea eax, [ebp - 0x2a8]
xor esi, esi
push 0x7943cc
push eax
call fcn.00438860
add esp, 8
test al, al
je 0x43babb
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], esi
jb 0x43b84c
mov eax, dword [ecx]
jmp 0x43b84e
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp - 0x290]
push edx
push eax
call fcn.00420cf0
lea eax, [ebp - 0x2d8]
mov ecx, edi
push eax
call fcn.0043d870
cmp dword [ebp - 0x294], 8
lea ecx, [ebp - 0x2a8]
lea eax, [ebp - 0x2d8]
cmovae ecx, dword [ebp - 0x2a8]
cmp dword [ebp - 0x2c4], 8
push ecx
cmovae eax, dword [ebp - 0x2d8]
push eax
call fcn.004ed4b5
add esp, 8
mov ecx, 1
test eax, eax
cmove esi, ecx
lea ecx, [ebp - 0x2d8]
call fcn.00420900
test esi, esi
je 0x43babb
push 0x64
push 0
push 0x466
mov ecx, edi
call fcn.0043d250
push 0x7943cc
lea ecx, [ebp - 0x230]
call fcn.00420940
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x267d0]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x267d0], 0x2e
call fcn.004225e0
push eax
push 0
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x338]
call fcn.00422400
push str..exe
push eax
lea eax, [ebp - 0x368]
mov byte [ebp - 4], 0x13
push eax
call fcn.00422a20
add esp, 0xc
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x15
call fcn.00420900
lea eax, [ebp - 0x308]
push 0x7943cc
push eax
call fcn.00438860
add esp, 8
test al, al
je 0x43b96e
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0x368]
call fcn.00420cf0
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.00422950
add esp, 0xc
lea ecx, [ebp - 0x230]
push eax
call fcn.004224b0
lea ecx, [ebp - 0x380]
call fcn.00420900
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x230]
lea eax, [ebp - 0x290]
cmovae ecx, dword [ebp - 0x230]
cmp dword [ebp - 0x27c], 8
push ecx
cmovae eax, dword [ebp - 0x290]
push eax
call int.00470ef2
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.00470ea5
add esp, 0xc
push 0x3e8
call ebx
xor esi, esi
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x43ba55
cmp dword [ebp - 0x2ac], 8
lea ecx, [ebp - 0x2c0]
lea eax, [ebp - 0x230]
cmovae ecx, dword [ebp - 0x2c0]
cmp dword [ebp - 0x21c], 8
push ecx
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.004734ce
mov esi, eax
add esp, 8
test esi, esi
jne 0x43ba55
mov ecx, edi
call fcn.0043ea70
push 0
push 0
push 0x469
mov ecx, edi
call fcn.0043d250
cmp dword [ebp - 0x27c], 8
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
push eax
call fcn.004701a5
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.004701a5
add esp, 8
push 0x3e8
call ebx
lea ecx, [ebp - 0x368]
call fcn.00420900
lea ecx, [ebp - 0x230]
call fcn.00420900
jmp 0x43bada
movsd xmm0, qword [0x70eee8]
mov ecx, edi
push 0x64
push 0
push 0x467
movsd qword [edi + 0x10], xmm0
call fcn.0043d250
xor esi, esi
lea ecx, [ebp - 0x267c8]
call fcn.00520bd0
mov eax, dword [ebp - 0x2dc]
cmp eax, 0x10
jb 0x43bb03
inc eax
lea ecx, [ebp - 0x2f0]
push eax
push dword [ebp - 0x2f0]
call fcn.0042f550
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x2dc], 0xf
mov dword [ebp - 0x2e0], 0
mov byte [ebp - 0x2f0], 0
call fcn.00420900
lea ecx, [ebp - 0x338]
call fcn.00420900
lea ecx, [ebp - 0x350]
call fcn.00420900
mov eax, dword [ebp - 0x294]
cmp eax, 8
jb 0x43bb5d
inc eax
lea ecx, [ebp - 0x2a8]
push eax
push dword [ebp - 0x2a8]
call fcn.00420ba0
xor eax, eax
mov dword [ebp - 0x294], 7
mov word [ebp - 0x2a8], ax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x298], 0
cmp eax, 8
jb 0x43bb98
inc eax
lea ecx, [ebp - 0x2c0]
push eax
push dword [ebp - 0x2c0]
call fcn.00420ba0
xor eax, eax
mov dword [ebp - 0x2ac], 7
mov word [ebp - 0x2c0], ax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2b0], 0
cmp eax, 8
jb 0x43bbd3
inc eax
lea ecx, [ebp - 0x308]
push eax
push dword [ebp - 0x308]
call fcn.00420ba0
mov ecx, dword [ebp - 0x30c]
xor eax, eax
mov dword [ebp - 0x2f4], 7
mov dword [ebp - 0x2f8], 0
mov word [ebp - 0x308], ax
cmp ecx, 8
jb 0x43bc0e
inc ecx
push ecx
push dword [ebp - 0x320]
lea ecx, [ebp - 0x320]
call fcn.00420ba0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004584a2
mov esp, ebp
pop ebp
ret