Function at 0x44cb00
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x587b19
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x450
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 4], 0
wait
cmp dword [esi + 0x2a4], 0
jne 0x44cb4b
xor eax, eax
wait
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [esi + 0x2b4]
call fcn.004940b0
mov eax, dword [esi + 0x28]
mov dword [ebp - 0xb0], eax
mov cl, byte [esi + 0x24]
mov byte [ebp - 0x98], cl
push 0
lea ecx, [esi + 0x50]
call fcn.004f9c70
push eax
mov ecx, dword [esi + 0x2a4]
call fcn.00510b50
mov dword [ebp - 0x58], eax
mov ecx, 0x5f5774
mov edx, dword [0x5f5774]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
push ecx
call fcn.0050a4d0
add esp, 4
push 0x104
push 0x104
lea ecx, [ebp - 0x1c]
call fcn.00405c40
push eax
push str.LogsDir
mov edx, dword [ebp - 0x30]
push edx
call fcn.0050a330
add esp, 0x10
lea ecx, [ebp - 0x1c]
test eax, eax
jne 0x44cc37
push 0x104
call fcn.00405c40
push eax
push 1
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x44cc15
push str.SHGetFolderPathW__0__0x001a__0__SHGFP_TYPE_DEFAULT__strSysDir.GetBuffer__260__
push eax
lea ecx, [ebp - 0xd0]
call fcn.00434a80
push 0x5cc0a0
lea eax, [ebp - 0xd0]
push eax
call fcn.00554cbc
push 0xffffffffffffffff
lea ecx, [ebp - 0x1c]
call fcn.00403ab0
push 0x59f4f4
push str._sData_
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0040a750
add esp, 0xc
jmp 0x44cc4b
push 0xffffffffffffffff
call fcn.00403ab0
push 0x59e4c8
lea ecx, [ebp - 0x1c]
call fcn.00407ed0
mov edx, dword [esi + 0x2a4]
add edx, 0x10
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x14]
push ecx
call fcn.00425d90
mov byte [ebp - 4], 3
push 0x59e4c4
push eax
lea edx, [ebp - 0x24]
push edx
call fcn.00425e40
mov byte [ebp - 4], 4
push 0x59f540
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00425e40
mov byte [ebp - 4], 5
push 0x59e658
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.00425e40
mov byte [ebp - 4], 6
push 0x59f558
push eax
lea edx, [ebp - 0x2c]
push edx
call fcn.00425e40
add esp, 0x3c
mov byte [ebp - 4], 7
mov eax, dword [eax]
lea ecx, [ebp - 0x45c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
mov dword [ebp - 0x20], edi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c]
call fcn.00404d60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18]
call fcn.00404d60
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.00404d60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x24]
call fcn.00404d60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.00404d60
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, 0xffffffff
je 0x44d723
lea ecx, [ebp - 0xc0]
call fcn.004374b0
mov byte [ebp - 4], 8
mov ecx, esi
call fcn.0044b870
mov bl, 0xc
lea ecx, [ecx]
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x430]
push ecx
mov ecx, esi
call fcn.004a9640
test al, al
je 0x44ce8f
lea edx, [esi + 0x31c]
push edx
lea ecx, [ebp - 0x44]
call fcn.00415ff0
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00431360
mov ecx, eax
call fcn.00431470
test al, al
je 0x44ce8f
lea ecx, [esi + 0x30c]
push ecx
lea ecx, [ebp - 0xd8]
call fcn.00415ff0
push eax
lea edx, [ebp - 0x94]
push edx
lea ecx, [ebp - 0x84]
call fcn.00431360
mov ecx, eax
call fcn.00431440
test al, al
je 0x44ce8f
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x60]
call fcn.00431360
fld qword [eax]
fstp qword [ebp - 0xac]
mov ecx, dword [esi + 0x2a4]
add ecx, 0x10
push ecx
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x14]
push eax
call fcn.00425d90
mov byte [ebp - 4], 9
push 0x59e4c4
push eax
lea ecx, [ebp - 0x24]
push ecx
call fcn.00425e40
mov byte [ebp - 4], 0xa
push 0x59f540
push eax
lea edx, [ebp - 0x28]
push edx
call fcn.00425e40
mov byte [ebp - 4], 0xb
push 0x59e4c4
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00425e40
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x430]
push ecx
push eax
lea edx, [ebp - 0x2c]
push edx
call fcn.00425e40
add esp, 0x3c
mov edi, eax
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xc0]
call fcn.004367f0
push edi
mov ecx, eax
call fcn.00407d40
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x2c]
call fcn.00404d60
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x18]
call fcn.00404d60
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x28]
call fcn.00404d60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x24]
call fcn.00404d60
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x14]
call fcn.00404d60
mov edi, dword [ebp - 0x20]
lea ecx, [ebp - 0x45c]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x44cd30
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [esi + 4]
call fcn.00431340
xor eax, eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0xbc]
mov edi, dword [edx]
mov dword [ebp - 0x4c], edi
cmp edi, dword [ebp - 0xbc]
je 0x44d04c
lea ecx, [edi + 0x18]
call fcn.00404db0
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00514a00
lea ebx, [esi + 0x304]
push 0x59d4a4
push ebx
call fcn.00442c30
add esp, 0x10
test al, al
je 0x44cfea
mov ecx, ebx
call fcn.0042c7a0
push eax
lea ecx, [ebp - 0x18]
call fcn.00404d10
mov byte [ebp - 4], 0x10
xor ebx, ebx
mov dword [ebp - 0xa0], ebx
mov ecx, dword [ebp - 0x74]
sub ecx, dword [ebp - 0x78]
mov eax, 0x38e38e39
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebx, ecx
jae 0x44cfdc
push ebx
lea ecx, [ebp - 0x78]
call fcn.0044a1b0
push eax
lea ecx, [ebp - 0x168]
call fcn.0044b000
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x140], 8
mov eax, dword [ebp - 0x154]
jae 0x44cf84
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x14]
call fcn.0040bfb0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x14]
call fcn.0042c7a0
push 0
mov edx, dword [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
call fcn.004177a0
cmp eax, 0xffffffff
je 0x44cfbb
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x68]
call fcn.0044ca70
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x14]
call fcn.00404d60
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x168]
call fcn.0044a710
inc ebx
jmp 0x44cf31
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x18]
call fcn.00404d60
jmp 0x44d002
mov ecx, dword [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x74]
push edx
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x68]
call fcn.0044c7d0
cmp byte [edi + 0x21], 0
jne 0x44cee1
mov ecx, dword [edi + 8]
cmp byte [ecx + 0x21], 0
jne 0x44d030
mov dword [ebp - 0x9c], ecx
mov eax, dword [ecx]
cmp byte [eax + 0x21], 0
jne 0x44d027
mov ecx, eax
jmp 0x44d015
mov edi, ecx
jmp 0x44cede
mov eax, dword [edi + 4]
cmp byte [eax + 0x21], 0
jne 0x44d045
cmp edi, dword [eax + 8]
jne 0x44d045
mov edi, eax
mov dword [ebp - 0x4c], edi
jmp 0x44d030
mov edi, eax
jmp 0x44cede
lea edx, [ebp - 0x30]
push edx
call fcn.0050a4d0
lea eax, [ebp - 0x34]
push eax
push str.ItemsPerPage
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.0050a210
add esp, 0x10
test eax, eax
jne 0x44d086
push 0x1f4
push str.ItemsPerPage
mov edx, dword [ebp - 0x30]
push edx
call fcn.0050a260
add esp, 0xc
jmp 0x44d08d
mov ebx, dword [ebp - 0x34]
test ebx, ebx
jne 0x44d095
mov ebx, 0x1f4
mov dword [ebp - 0x34], ebx
mov ecx, dword [ebp - 0x64]
sub ecx, dword [ebp - 0x68]
mov eax, 0x38e38e39
imul ecx
sar edx, 5
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, edi
xor edx, edx
div ebx
mov ecx, edx
mov eax, edi
sub eax, ecx
xor edx, edx
div ebx
mov ebx, eax
mov dword [ebp - 0x7c], ebx
test ecx, ecx
je 0x44d0c9
inc ebx
mov dword [ebp - 0x7c], ebx
lea ecx, [esi + 0x2b4]
push ebx
call fcn.00494860
cmp byte [esi + 0x2fc], 0
je 0x44d103
lea eax, [ebx - 1]
mov ecx, dword [ebp - 0x34]
imul eax, ecx
mov dword [ebp - 0x18], eax
mov eax, ebx
imul eax, ecx
mov dword [ebp - 0x14], eax
push ebx
lea ecx, [esi + 0x2b4]
call fcn.004949a0
mov ebx, dword [ebp - 0x18]
jmp 0x44d127
lea ecx, [esi + 0x2b4]
call fcn.004940a0
mov ebx, eax
mov eax, dword [ebp - 0x34]
imul ebx, eax
mov dword [ebp - 0x18], ebx
lea eax, [ebx + eax - 1]
mov dword [ebp - 0x14], eax
mov byte [esi + 0x2fc], 1
cmp dword [ebp - 0x14], edi
jb 0x44d130
dec edi
mov dword [ebp - 0x14], edi
mov ecx, dword [esi + 0x32c]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
push 0
push 0
push 0x20
push 0x32
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
call edi
push eax
push 0x31
call edi
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [esi + 0x32c], eax
push 5
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
mov edx, dword [esi + 0x32c]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_SetBkColor]
push 5
call fcn.004352b0
mov ecx, eax
call fcn.00513a50
push eax
push 0xffffffffffffffff
mov eax, dword [esi + 0x32c]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 1
mov ecx, dword [esi + 0x32c]
push ecx
lea edx, [ebp - 0x50]
push edx
lea ecx, [esi + 4]
call fcn.00402db0
xor eax, eax
mov dword [ebp - 0x48], eax
mov edi, dword [ebp - 0x68]
mov dword [ebp - 0xa4], edi
cmp edi, dword [ebp - 0x64]
je 0x44d6fc
cmp eax, ebx
jl 0x44d6e4
cmp eax, dword [ebp - 0x14]
jg 0x44d6e4
inc eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0xac]
push eax
lea ecx, [edi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov ecx, 0x5f5774
mov edx, dword [0x5f5774]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0x14
movzx ecx, word [ebp - 0x8c]
push ecx
movzx edx, word [ebp - 0x8a]
push edx
movzx eax, word [ebp - 0x86]
push eax
push str._0.2u._0.2u._0.2u
lea ecx, [ebp - 0x28]
push ecx
call fcn.004060d0
add esp, 0x14
lea ecx, [esi + 4]
mov edx, dword [ebp - 0x28]
push edx
push bind
call fcn.004319f0
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x2c], 0
lea ebx, [edi + 0x30]
cmp dword [ebx + 0x14], 8
jb 0x44d268
mov eax, dword [ebx]
jmp 0x44d26a
mov eax, ebx
push eax
mov ecx, dword [esi + 0x2a4]
call fcn.0050fa40
test eax, eax
je 0x44d28d
push eax
push 0xffffffffffffffff
mov eax, dword [esi + 0x32c]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20c], 0
push 0x30
push 0
lea ecx, [ebp - 0x208]
push ecx
call fcn.00555020
add esp, 0xc
mov dword [ebp - 0x20c], 2
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x208], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1f0], eax
lea ecx, [ebp - 0x20c]
push ecx
lea ecx, [esi + 4]
call fcn.004312d0
mov ecx, 0x5f5774
mov edx, dword [0x5f5774]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x16
movzx ecx, word [ebp - 0x80]
push ecx
movzx edx, word [ebp - 0x82]
push edx
movzx eax, word [ebp - 0x84]
push eax
push str._0.2u:_0.2u:_0.2u
lea ecx, [ebp - 0x24]
push ecx
call fcn.004060d0
add esp, 0x14
mov edx, dword [ebp - 0x24]
push edx
push 1
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [esi + 4]
call fcn.00401a50
cmp dword [ebx + 0x14], 8
jb 0x44d333
mov ebx, dword [ebx]
push ebx
push 2
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [esi + 4]
call fcn.00401a50
lea eax, [edi + 0x4c]
cmp dword [eax + 0x14], 8
jb 0x44d34d
mov eax, dword [eax]
push eax
push 3
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [esi + 4]
call fcn.00401a50
lea eax, [edi + 0x14]
cmp dword [eax + 0x14], 8
jb 0x44d367
mov eax, dword [eax]
push eax
push 4
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [esi + 4]
call fcn.00401a50
mov ecx, 0x5f5774
mov edx, dword [0x5f5774]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x18
mov ecx, 0x5f5774
mov edx, dword [0x5f5774]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x1a
push 0x80
lea ecx, [ebp - 0x1d8]
push ecx
push 0xf1
mov edx, dword [0x5fd7c0]
push edx
mov ebx, dword [sym.imp.USER32.dll_LoadStringW]
call ebx
mov eax, dword [edi + 0x10]
cmp eax, 9
ja case.0x44d3de.6
jmp dword [eax*4 + 0x44d7a4]
push 0x80
lea eax, [ebp - 0x1d8]
push eax
push 0x2c26
mov ecx, dword [0x5fd7c0]
push ecx
call ebx
lea edx, [ebp - 0x1d8]
push edx
lea ecx, [ebp - 0x40]
call fcn.0040b5a0
push 0x80
cmp byte [edi + 0x8c], 0
je 0x44d431
lea eax, [ebp - 0x1d8]
push eax
push 0xfa
mov ecx, dword [0x5fd7c0]
push ecx
jmp 0x44d443
lea edx, [ebp - 0x1d8]
push edx
push 0xf9
mov eax, dword [0x5fd7c0]
push eax
call ebx
lea ecx, [ebp - 0x1d8]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0040b5a0
cmp dword [edi + 0x10], 9
jne case.0x44d3de.6
push 0x80
lea edx, [ebp - 0x1d8]
push edx
push 0x2c34
mov eax, dword [0x5fd7c0]
push eax
call ebx
lea ecx, [ebp - 0x1d8]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0040b5f0
jmp case.0x44d3de.6
push 0x80
lea edx, [ebp - 0x1d8]
push edx
push 0x2c24
mov eax, dword [0x5fd7c0]
push eax
call ebx
lea ecx, [ebp - 0x1d8]
push ecx
lea ecx, [ebp - 0x40]
call fcn.0040b5a0
jmp case.0x44d3de.6
push 0x80
lea edx, [ebp - 0x1d8]
push edx
push 0x2c28
mov eax, dword [0x5fd7c0]
push eax
call ebx
lea ecx, [ebp - 0x1d8]
push ecx
lea ecx, [ebp - 0x40]
call fcn.0040b5a0
jmp case.0x44d3de.6
push 0x80
lea edx, [ebp - 0x1d8]
push edx
push 0x2c27
mov eax, dword [0x5fd7c0]
push eax
call ebx
lea ecx, [ebp - 0x1d8]
push ecx
lea ecx, [ebp - 0x40]
call fcn.0040b5a0
push 0x80
cmp dword [edi + 0x10], 4
jne 0x44d540
lea edx, [ebp - 0x1d8]
push edx
push 0x2c2b
mov eax, dword [0x5fd7c0]
push eax
call ebx
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x38]
call fcn.0040b5a0
jmp case.0x44d3de.6
lea ecx, [ebp - 0x1d8]
push ecx
push 0x2c2c
mov edx, dword [0x5fd7c0]
push edx
call ebx
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x38]
call fcn.0040b5a0
jmp case.0x44d3de.6
push 0x80
lea ecx, [ebp - 0x1d8]
push ecx
push 0x2c2a
mov edx, dword [0x5fd7c0]
push edx
call ebx
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x40]
call fcn.0040b5a0
push 0x80
lea ecx, [ebp - 0x1d8]
push ecx
push 0x2c2f
mov edx, dword [0x5fd7c0]
push edx
call ebx
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x38]
call fcn.0040b5a0
lea eax, [edi + 0x68]
cmp dword [eax + 0x14], 8
jb 0x44d5c6
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040bfb0
mov byte [ebp - 4], 0x1b
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0x38]
call fcn.00406040
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x90]
jmp 0x44d674
push 0x80
lea ecx, [ebp - 0x1d8]
push ecx
push 0x2c29
mov edx, dword [0x5fd7c0]
push edx
call ebx
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x40]
call fcn.0040b5a0
push 0x80
lea ecx, [ebp - 0x1d8]
push ecx
push 0x2c30
mov edx, dword [0x5fd7c0]
push edx
call ebx
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x38]
call fcn.0040b5a0
lea eax, [edi + 0x68]
cmp dword [eax + 0x14], 8
jb 0x44d651
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040bfb0
mov byte [ebp - 4], 0x1c
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0x38]
call fcn.00406040
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x50]
call fcn.00404d60
mov ecx, dword [ebp - 0x40]
push ecx
push 5
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [esi + 4]
call fcn.00401a50
mov eax, dword [ebp - 0x38]
push eax
push 6
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [esi + 4]
call fcn.00401a50
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x38]
call fcn.00404d60
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x40]
call fcn.00404d60
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x24]
call fcn.00404d60
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
call fcn.00404d60
add edi, 0x90
mov dword [ebp - 0xa4], edi
mov eax, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x18]
jmp 0x44d1b6
inc eax
mov dword [ebp - 0x48], eax
add edi, 0x90
mov dword [ebp - 0xa4], edi
mov ebx, dword [ebp - 0x18]
jmp 0x44d1b6
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x78]
call fcn.0044c9a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x68]
call fcn.0044c9a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc0]
call fcn.00437450
mov edx, dword [ebp - 0x98]
push edx
mov eax, dword [ebp - 0xb0]
push eax
lea ecx, [esi + 0x24]
call fcn.00432140
lea ecx, [esi + 0x2b4]
call fcn.004940c0
lea ecx, [esi + 0x2b4]
call fcn.00494150
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00404d60
mov eax, dword [ebp - 0x58]
wait
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret