Function at 0x43d730
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b3ed8
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff344
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x58], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x43d77f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x3a
jge 0x43d792
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43d776
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43d7a6
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d7bc
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x24], 0
jmp 0x43d7ce
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x11
jge 0x43d7e1
mov eax, dword [ebp - 0x24]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43d7c5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43d7f5
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d80b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x28], 0
jmp 0x43d824
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 5
jge 0x43d868
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43d83e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43d84e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43d866
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d866
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d81b
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d876
jmp 0x43d885
mov dword [ebp - 0x2c], 0
jmp 0x43d897
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0x11
jge 0x43d8aa
mov edx, dword [ebp - 0x2c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d88e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43d8be
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d8d4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 1
mov dword [ebp - 0x30], 0
jmp 0x43d8ed
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x1b
jge 0x43d931
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43d907
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43d917
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43d92f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d92f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43d8e4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d93f
jmp 0x43d94e
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
jmp 0x43d97c
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0x19
jge 0x43d9a2
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
jmp 0x43d973
mov eax, dword [ebp - 0x1c]
add eax, 0x19
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x48], 0
jmp 0x43d9c4
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 8
jge 0x43d9f5
mov edx, dword [ebp - 0x48]
and edx, 0x80000001
jns 0x43d9da
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x43d9ea
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43d9f3
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43d9bb
mov dword [ebp - 4], 0xfffffffe
call fcn.0043da03
jmp 0x43da21
mov dword [ebp - 0x4c], 0
jmp 0x43da33
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 8
jge 0x43da46
mov edx, dword [ebp - 0x4c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43da2a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43da5a
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43da70
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 3
mov dword [ebp - 0x50], 0
jmp 0x43da89
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0x10
jge 0x43dacd
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43daa3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43dab3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43dacb
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43dacb
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43da80
mov dword [ebp - 4], 0xfffffffe
call fcn.0043dadb
jmp 0x43daea
mov dword [ebp - 0x54], 0
jmp 0x43dafc
mov ecx, dword [ebp - 0x54]
add ecx, 1
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 9
jge 0x43db3a
cmp dword [ebp - 0x1c], 0
jge 0x43db10
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43db26
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x250]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43daf3
mov dword [ebp - 4], 4
mov dword [ebp - 0x254], 0
jmp 0x43db5c
mov eax, dword [ebp - 0x254]
add eax, 1
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xf
jge 0x43db9b
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43db8b
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43db96
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43db99
mov dword [ebp - 0x1c], eax
jmp 0x43db4d
mov dword [ebp - 4], 0xfffffffe
call fcn.0043dba9
jmp 0x43dbb1
mov dword [ebp - 4], 5
mov dword [ebp - 0x258], 0
jmp 0x43dbd3
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 1
jge 0x43dc12
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43dc02
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43dc0d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43dc10
mov dword [ebp - 0x1c], eax
jmp 0x43dbc4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043dc20
jmp 0x43dc28
mov dword [ebp - 4], 6
mov dword [ebp - 0x25c], 0
jmp 0x43dc4a
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 8
jge 0x43dc91
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43dc67
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43dc77
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43dc8f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43dc8f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43dc3b
mov dword [ebp - 4], 0xfffffffe
call fcn.0043dc9f
jmp 0x43dcae
mov dword [ebp - 4], 7
mov dword [ebp - 0x260], 0
jmp 0x43dcd0
mov ecx, dword [ebp - 0x260]
add ecx, 1
mov dword [ebp - 0x260], ecx
cmp dword [ebp - 0x260], 0
jge 0x43dd0b
mov eax, dword [ebp - 0x260]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43dcff
mov eax, dword [ebp - 0x260]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43dd06
and eax, 0xbc614e
jmp 0x43dd09
mov dword [ebp - 0x1c], eax
jmp 0x43dcc1
mov dword [ebp - 4], 0xfffffffe
call fcn.0043dd19
jmp 0x43dd21
mov dword [ebp - 4], 8
mov dword [ebp - 0x264], 0
jmp 0x43dd43
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 3
jge 0x43dd8a
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43dd60
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43dd70
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43dd88
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43dd88
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43dd34
mov dword [ebp - 4], 0xfffffffe
call fcn.0043dd98
jmp 0x43dda7
mov dword [ebp - 0x268], 0
jmp 0x43ddc2
mov ecx, dword [ebp - 0x268]
add ecx, 1
mov dword [ebp - 0x268], ecx
cmp dword [ebp - 0x268], 7
jge 0x43dddb
mov edx, dword [ebp - 0x268]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43ddb3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43ddef
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43de05
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 9
mov dword [ebp - 0x26c], 0
jmp 0x43de27
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
cmp dword [ebp - 0x26c], 0
jge 0x43de66
mov eax, dword [ebp - 0x26c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43de56
mov eax, dword [ebp - 0x26c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43de61
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43de64
mov dword [ebp - 0x1c], eax
jmp 0x43de18
mov dword [ebp - 4], 0xfffffffe
call fcn.0043de74
jmp 0x43de7c
mov dword [ebp - 0x270], 0
jmp 0x43de97
mov edx, dword [ebp - 0x270]
add edx, 1
mov dword [ebp - 0x270], edx
cmp dword [ebp - 0x270], 0xe
jge 0x43deb0
mov eax, dword [ebp - 0x270]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43de88
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43dec4
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43deda
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x274], 0
jmp 0x43def5
mov edx, dword [ebp - 0x274]
add edx, 1
mov dword [ebp - 0x274], edx
cmp dword [ebp - 0x274], 0
jge 0x43df36
cmp dword [ebp - 0x1c], 0
jge 0x43df0c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43df22
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x470]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43dee6
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x474], 0
jmp 0x43df58
mov eax, dword [ebp - 0x474]
add eax, 1
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 1
jge 0x43df8f
mov ecx, dword [ebp - 0x474]
and ecx, 0x80000001
jns 0x43df74
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x43df84
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43df8d
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43df49
mov dword [ebp - 4], 0xfffffffe
call fcn.0043df9d
jmp 0x43dfbb
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x478], 0
jmp 0x43dfdd
mov eax, dword [ebp - 0x478]
add eax, 1
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0x10
jge 0x43e014
mov ecx, dword [ebp - 0x478]
and ecx, 0x80000001
jns 0x43dff9
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x43e009
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43e012
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43dfce
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e022
jmp 0x43e040
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x47c], 0
jmp 0x43e062
mov eax, dword [ebp - 0x47c]
add eax, 1
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 0x10
jge 0x43e0a1
mov eax, dword [ebp - 0x47c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e091
mov eax, dword [ebp - 0x47c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e09c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43e09f
mov dword [ebp - 0x1c], eax
jmp 0x43e053
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e0af
jmp 0x43e0b7
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x484], 1
mov dword [ebp - 0x488], 2
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x490], 0
jmp 0x43e0fa
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 0
jge 0x43e13b
mov eax, dword [ebp - 0x480]
add eax, dword [ebp - 0x484]
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0x480], ecx
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x484], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x488]
mov dword [ebp - 0x1c], eax
jmp 0x43e0eb
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x494], 0
jmp 0x43e15c
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 6
jge 0x43e175
mov eax, dword [ebp - 0x494]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43e14d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43e189
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e19f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x498], 0
jmp 0x43e1c1
mov edx, dword [ebp - 0x498]
add edx, 1
mov dword [ebp - 0x498], edx
cmp dword [ebp - 0x498], 8
jge 0x43e1f7
mov eax, dword [ebp - 0x498]
and eax, 0x80000001
jns 0x43e1dc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43e1ec
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43e1f5
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x43e1b2
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e205
jmp 0x43e222
mov dword [ebp - 0x49c], 0
jmp 0x43e23d
mov edx, dword [ebp - 0x49c]
add edx, 1
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 8
jge 0x43e256
mov eax, dword [ebp - 0x49c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43e22e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43e26a
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e280
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x4a0], 0
jmp 0x43e2a2
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x4a0], edx
cmp dword [ebp - 0x4a0], 7
jge 0x43e2dd
mov eax, dword [ebp - 0x4a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e2d1
mov eax, dword [ebp - 0x4a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e2d8
and eax, 0xbc614e
jmp 0x43e2db
mov dword [ebp - 0x1c], eax
jmp 0x43e293
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e2eb
jmp 0x43e2f3
mov dword [ebp - 0x4a4], 0
jmp 0x43e30e
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
cmp dword [ebp - 0x4a4], 2
jge 0x43e34f
cmp dword [ebp - 0x1c], 0
jge 0x43e325
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43e33b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43e2ff
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x6a4], 0
jmp 0x43e371
mov eax, dword [ebp - 0x6a4]
add eax, 1
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 0
jge 0x43e3b0
mov eax, dword [ebp - 0x6a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e3a0
mov eax, dword [ebp - 0x6a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e3ab
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43e3ae
mov dword [ebp - 0x1c], eax
jmp 0x43e362
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e3be
jmp 0x43e3c6
mov dword [ebp - 0x6a8], 0
jmp 0x43e3e1
mov edx, dword [ebp - 0x6a8]
add edx, 1
mov dword [ebp - 0x6a8], edx
cmp dword [ebp - 0x6a8], 5
jge 0x43e422
cmp dword [ebp - 0x1c], 0
jge 0x43e3f8
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43e40e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43e3d2
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8a4], 0
jmp 0x43e444
mov eax, dword [ebp - 0x8a4]
add eax, 1
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 8
jge 0x43e47f
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e473
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e47a
and eax, 0xbc614e
jmp 0x43e47d
mov dword [ebp - 0x1c], eax
jmp 0x43e435
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e48d
jmp 0x43e495
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8a8], 0
jmp 0x43e4b7
mov edx, dword [ebp - 0x8a8]
add edx, 1
mov dword [ebp - 0x8a8], edx
cmp dword [ebp - 0x8a8], 3
jge 0x43e4f6
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e4e6
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e4f1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43e4f4
mov dword [ebp - 0x1c], eax
jmp 0x43e4a8
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e504
jmp 0x43e50c
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x8ac], 0
jmp 0x43e52e
mov edx, dword [ebp - 0x8ac]
add edx, 1
mov dword [ebp - 0x8ac], edx
cmp dword [ebp - 0x8ac], 8
jge 0x43e56d
mov eax, dword [ebp - 0x8ac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e55d
mov eax, dword [ebp - 0x8ac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e568
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43e56b
mov dword [ebp - 0x1c], eax
jmp 0x43e51f
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e57b
jmp 0x43e583
mov dword [ebp - 0x8b0], 0
jmp 0x43e59e
mov edx, dword [ebp - 0x8b0]
add edx, 1
mov dword [ebp - 0x8b0], edx
cmp dword [ebp - 0x8b0], 5
jge 0x43e5df
cmp dword [ebp - 0x1c], 0
jge 0x43e5b5
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43e5cb
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xaa8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43e58f
mov dword [ebp - 0xaac], 0
jmp 0x43e5fa
mov eax, dword [ebp - 0xaac]
add eax, 1
mov dword [ebp - 0xaac], eax
cmp dword [ebp - 0xaac], 8
jge 0x43e63b
cmp dword [ebp - 0x1c], 0
jge 0x43e611
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43e627
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xca8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43e5eb
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xcac], 0
jmp 0x43e65d
mov eax, dword [ebp - 0xcac]
add eax, 1
mov dword [ebp - 0xcac], eax
cmp dword [ebp - 0xcac], 4
jge 0x43e6a4
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43e67a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43e68a
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x43e6a2
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e6a2
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43e64e
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e6b2
jmp 0x43e6c1
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xcb0], 0
jmp 0x43e6e3
mov ecx, dword [ebp - 0xcb0]
add ecx, 1
mov dword [ebp - 0xcb0], ecx
cmp dword [ebp - 0xcb0], 4
jge 0x43e71a
mov edx, dword [ebp - 0xcb0]
and edx, 0x80000001
jns 0x43e6ff
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x43e70f
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43e718
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43e6d4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e728
jmp 0x43e746
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xcb4], 0
jmp 0x43e768
mov ecx, dword [ebp - 0xcb4]
add ecx, 1
mov dword [ebp - 0xcb4], ecx
cmp dword [ebp - 0xcb4], 0
jge 0x43e79f
mov edx, dword [ebp - 0xcb4]
and edx, 0x80000001
jns 0x43e784
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x43e794
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x43e79d
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43e759
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e7ad
jmp 0x43e7cb
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xcb8], 0
jmp 0x43e7ed
mov ecx, dword [ebp - 0xcb8]
add ecx, 1
mov dword [ebp - 0xcb8], ecx
cmp dword [ebp - 0xcb8], 0
jge 0x43e834
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43e80a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43e81a
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43e832
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e832
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43e7de
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e842
jmp 0x43e851
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xcbc], 0
jmp 0x43e873
mov ecx, dword [ebp - 0xcbc]
add ecx, 1
mov dword [ebp - 0xcbc], ecx
cmp dword [ebp - 0xcbc], 1
jge 0x43e8ba
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x43e890
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x43e8a0
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43e8b8
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e8b8
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43e864
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e8c8
jmp 0x43e8d7
mov dword [ebp - 0xcc0], 0
jmp 0x43e8f2
mov ecx, dword [ebp - 0xcc0]
add ecx, 1
mov dword [ebp - 0xcc0], ecx
cmp dword [ebp - 0xcc0], 0
jge 0x43e90b
mov edx, dword [ebp - 0xcc0]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x43e8e3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43e91f
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e935
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xcc4], 0
jmp 0x43e950
mov edx, dword [ebp - 0xcc4]
add edx, 1
mov dword [ebp - 0xcc4], edx
cmp dword [ebp - 0xcc4], 4
jge 0x43e969
mov eax, dword [ebp - 0xcc4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x43e941
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43e97d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e993
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xcc8], 0
jmp 0x43e9b5