Function at 0x444c20
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b45d0
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x155c
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x90], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x444c79
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 9
jge 0x444c8c
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x444c70
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x444ca0
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444cb6
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x444ce4
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x15
jge 0x444d0a
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x444cdb
mov ecx, dword [ebp - 0x1c]
add ecx, 0x15
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], 0
jmp 0x444d2c
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x36
jge 0x444d62
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x444d52
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444d5d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x444d60
mov dword [ebp - 0x1c], eax
jmp 0x444d23
mov dword [ebp - 4], 0xfffffffe
call fcn.00444d70
jmp 0x444d78
mov dword [ebp - 4], 1
mov dword [ebp - 0x3c], 0
jmp 0x444d91
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0xc
jge 0x444dc7
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x444db7
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444dc2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x444dc5
mov dword [ebp - 0x1c], eax
jmp 0x444d88
mov dword [ebp - 4], 0xfffffffe
call fcn.00444dd5
jmp 0x444ddd
mov dword [ebp - 4], 2
mov dword [ebp - 0x40], 0
jmp 0x444df6
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xe
jge 0x444e28
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x444e1c
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444e23
and eax, 0xbc614e
jmp 0x444e26
mov dword [ebp - 0x1c], eax
jmp 0x444ded
mov dword [ebp - 4], 0xfffffffe
call fcn.00444e36
jmp 0x444e3e
mov dword [ebp - 4], 3
mov dword [ebp - 0x44], 0
jmp 0x444e57
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x10
jge 0x444e9b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x444e71
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x444e81
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x444e99
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444e99
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x444e4e
mov dword [ebp - 4], 0xfffffffe
call fcn.00444ea9
jmp 0x444eb8
mov dword [ebp - 4], 4
mov dword [ebp - 0x48], 0
jmp 0x444ed1
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 0x10
jge 0x444f03
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x444ef7
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444efe
and eax, 0xbc614e
jmp 0x444f01
mov dword [ebp - 0x1c], eax
jmp 0x444ec8
mov dword [ebp - 4], 0xfffffffe
call fcn.00444f11
jmp 0x444f19
mov dword [ebp - 0x4c], 0
jmp 0x444f2b
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0
jge 0x444f3e
mov eax, dword [ebp - 0x4c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x444f22
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x444f52
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444f68
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 5
mov dword [ebp - 0x50], 0
jmp 0x444f81
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0
jge 0x444fc5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x444f9b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x444fab
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x444fc3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444fc3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x444f78
mov dword [ebp - 4], 0xfffffffe
call fcn.00444fd3
jmp 0x444fe2
mov dword [ebp - 0x54], 0
jmp 0x444ff4
mov ecx, dword [ebp - 0x54]
add ecx, 1
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0xa
jge 0x445007
mov edx, dword [ebp - 0x54]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x444feb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44501b
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445031
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x58], 0
jmp 0x44504a
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 9
jge 0x445080
mov eax, dword [ebp - 0x58]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x445070
mov eax, dword [ebp - 0x58]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44507b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44507e
mov dword [ebp - 0x1c], eax
jmp 0x445041
mov dword [ebp - 4], 0xfffffffe
call fcn.0044508e
jmp 0x445096
mov dword [ebp - 4], 7
mov dword [ebp - 0x5c], 0
jmp 0x4450af
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 3
jge 0x4450df
mov eax, dword [ebp - 0x5c]
and eax, 0x80000001
jns 0x4450c4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4450d4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4450dd
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4450a6
mov dword [ebp - 4], 0xfffffffe
call fcn.004450ed
jmp 0x44510a
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x68], 2
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
jmp 0x445138
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0xe
jge 0x44515e
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x1c], eax
jmp 0x44512f
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x74], 0
jmp 0x445180
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 3
jge 0x4451c4
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44519a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4451aa
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4451c2
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4451c2
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x445177
mov dword [ebp - 4], 0xfffffffe
call fcn.004451d2
jmp 0x4451e1
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x80], 2
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x88], 0
jmp 0x44521b
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0x88], ecx
cmp dword [ebp - 0x88], 5
jge 0x445244
mov edx, dword [ebp - 0x78]
add edx, dword [ebp - 0x7c]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x80]
mov dword [ebp - 0x1c], edx
jmp 0x44520c
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c], 0
jmp 0x445268
mov ecx, dword [ebp - 0x8c]
add ecx, 1
mov dword [ebp - 0x8c], ecx
cmp dword [ebp - 0x8c], 3
jge 0x4452a9
cmp dword [ebp - 0x1c], 0
jge 0x44527f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x445295
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x288]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x445259
mov dword [ebp - 4], 9
mov dword [ebp - 0x28c], 0
jmp 0x4452cb
mov eax, dword [ebp - 0x28c]
add eax, 1
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x445312
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4452e8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4452f8
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x445310
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445310
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4452bc
mov dword [ebp - 4], 0xfffffffe
call fcn.00445320
jmp 0x44532f
mov dword [ebp - 0x290], 0
jmp 0x44534a
mov ecx, dword [ebp - 0x290]
add ecx, 1
mov dword [ebp - 0x290], ecx
cmp dword [ebp - 0x290], 6
jge 0x44538b
cmp dword [ebp - 0x1c], 0
jge 0x445361
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x445377
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x488]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44533b
mov dword [ebp - 0x48c], 0
jmp 0x4453a6
mov eax, dword [ebp - 0x48c]
add eax, 1
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 2
jge 0x4453bf
mov ecx, dword [ebp - 0x48c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x445397
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4453d3
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4453e9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x490], 0
jmp 0x44540b
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 1
jge 0x445441
mov eax, dword [ebp - 0x490]
and eax, 0x80000001
jns 0x445426
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x445436
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44543f
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4453fc
mov dword [ebp - 4], 0xfffffffe
call fcn.0044544f
jmp 0x44546c
mov dword [ebp - 0x494], 1
mov dword [ebp - 0x498], 1
mov dword [ebp - 0x49c], 2
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x4a4], 0
jmp 0x4454af
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
cmp dword [ebp - 0x4a4], 6
jge 0x4454f0
mov eax, dword [ebp - 0x494]
add eax, dword [ebp - 0x498]
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x498], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1c], eax
jmp 0x4454a0
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4a8], 0
jmp 0x445514
mov edx, dword [ebp - 0x4a8]
add edx, 1
mov dword [ebp - 0x4a8], edx
cmp dword [ebp - 0x4a8], 2
jge 0x445555
cmp dword [ebp - 0x1c], 0
jge 0x44552b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x445541
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x445505
mov dword [ebp - 0x6a4], 1
mov dword [ebp - 0x6a8], 1
mov dword [ebp - 0x6ac], 2
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x6b4], 0
jmp 0x445598
mov eax, dword [ebp - 0x6b4]
add eax, 1
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 2
jge 0x4455d9
mov ecx, dword [ebp - 0x6a4]
add ecx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6ac], ecx
mov edx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6a4], edx
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x6ac]
mov dword [ebp - 0x1c], ecx
jmp 0x445589
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x6b8], 0
jmp 0x445604
mov eax, dword [ebp - 0x6b8]
add eax, 1
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 2
jge 0x44563f
mov eax, dword [ebp - 0x6b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x445633
mov eax, dword [ebp - 0x6b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44563a
and eax, 0xbc614e
jmp 0x44563d
mov dword [ebp - 0x1c], eax
jmp 0x4455f5
mov dword [ebp - 4], 0xfffffffe
call fcn.0044564d
jmp 0x445655
mov dword [ebp - 0x6bc], 0
jmp 0x445670
mov edx, dword [ebp - 0x6bc]
add edx, 1
mov dword [ebp - 0x6bc], edx
cmp dword [ebp - 0x6bc], 0
jge 0x445689
mov eax, dword [ebp - 0x6bc]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x445661
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44569d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4456b3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x6c0], 0
jmp 0x4456ce
mov edx, dword [ebp - 0x6c0]
add edx, 1
mov dword [ebp - 0x6c0], edx
cmp dword [ebp - 0x6c0], 3
jge 0x4456e7
mov eax, dword [ebp - 0x6c0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4456bf
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4456fb
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445711
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x6c4], 0
jmp 0x445733
mov edx, dword [ebp - 0x6c4]
add edx, 1
mov dword [ebp - 0x6c4], edx
cmp dword [ebp - 0x6c4], 0
jge 0x44576e
mov eax, dword [ebp - 0x6c4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x445762
mov eax, dword [ebp - 0x6c4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x445769
and eax, 0xbc614e
jmp 0x44576c
mov dword [ebp - 0x1c], eax
jmp 0x445724
mov dword [ebp - 4], 0xfffffffe
call fcn.0044577c
jmp 0x445784
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x6c8], 0
jmp 0x4457a6
mov edx, dword [ebp - 0x6c8]
add edx, 1
mov dword [ebp - 0x6c8], edx
cmp dword [ebp - 0x6c8], 3
jge 0x4457dc
mov eax, dword [ebp - 0x6c8]
and eax, 0x80000001
jns 0x4457c1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4457d1
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4457da
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x445797
mov dword [ebp - 4], 0xfffffffe
call fcn.004457ea
jmp 0x445807
mov dword [ebp - 0x6cc], 0
jmp 0x445822
mov edx, dword [ebp - 0x6cc]
add edx, 1
mov dword [ebp - 0x6cc], edx
cmp dword [ebp - 0x6cc], 2
jge 0x445863
cmp dword [ebp - 0x1c], 0
jge 0x445839
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44584f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8c8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x445813
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x8cc], 0
jmp 0x445885
mov eax, dword [ebp - 0x8cc]
add eax, 1
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 4
jge 0x4458bc
mov ecx, dword [ebp - 0x8cc]
and ecx, 0x80000001
jns 0x4458a1
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4458b1
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4458ba
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x445876
mov dword [ebp - 4], 0xfffffffe
call fcn.004458ca
jmp 0x4458e8
mov dword [ebp - 0x8d0], 0
jmp 0x445903
mov eax, dword [ebp - 0x8d0]
add eax, 1
mov dword [ebp - 0x8d0], eax
cmp dword [ebp - 0x8d0], 1
jge 0x44591c
mov ecx, dword [ebp - 0x8d0]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4458f4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x445930
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445946
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x8d4], 0
jmp 0x445961
mov edx, dword [ebp - 0x8d4]
add edx, 1
mov dword [ebp - 0x8d4], edx
cmp dword [ebp - 0x8d4], 4
jge 0x4459a2
cmp dword [ebp - 0x1c], 0
jge 0x445978
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44598e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xad0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x445952
mov dword [ebp - 0xad4], 1
mov dword [ebp - 0xad8], 1
mov dword [ebp - 0xadc], 2
mov dword [ebp - 0xae0], 0
mov dword [ebp - 0xae4], 0
jmp 0x4459e5
mov eax, dword [ebp - 0xae4]
add eax, 1
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0xae4], 0
jge 0x445a26
mov ecx, dword [ebp - 0xad4]
add ecx, dword [ebp - 0xad8]
mov dword [ebp - 0xadc], ecx
mov edx, dword [ebp - 0xad8]
mov dword [ebp - 0xad4], edx
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0xad8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xadc]
mov dword [ebp - 0x1c], ecx
jmp 0x4459d6
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xae8], 0
jmp 0x445a4e
mov eax, dword [ebp - 0xae8]
add eax, 1
mov dword [ebp - 0xae8], eax
cmp dword [ebp - 0xae8], 2
jge 0x445a85
mov ecx, dword [ebp - 0xae8]
and ecx, 0x80000001
jns 0x445a6a
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x445a7a
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x445a83
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x445a3f
mov dword [ebp - 4], 0xfffffffe
call fcn.00445a93
jmp 0x445ab1
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xaec], 0
jmp 0x445ad3
mov eax, dword [ebp - 0xaec]
add eax, 1
mov dword [ebp - 0xaec], eax
cmp dword [ebp - 0xaec], 4
jge 0x445b1a
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x445af0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x445b00
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x445b18
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445b18
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x445ac4
mov dword [ebp - 4], 0xfffffffe
call fcn.00445b28
jmp 0x445b37
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xaf0], 0
jmp 0x445b59
mov ecx, dword [ebp - 0xaf0]
add ecx, 1
mov dword [ebp - 0xaf0], ecx
cmp dword [ebp - 0xaf0], 3
jge 0x445ba0
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x445b76
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x445b86
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x445b9e
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445b9e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x445b4a
mov dword [ebp - 4], 0xfffffffe
call fcn.00445bae
jmp 0x445bbd
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xaf4], 0
jmp 0x445bdf
mov ecx, dword [ebp - 0xaf4]
add ecx, 1
mov dword [ebp - 0xaf4], ecx
cmp dword [ebp - 0xaf4], 1
jge 0x445c1e
mov eax, dword [ebp - 0xaf4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x445c0e
mov eax, dword [ebp - 0xaf4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x445c19
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x445c1c
mov dword [ebp - 0x1c], eax
jmp 0x445bd0
mov dword [ebp - 4], 0xfffffffe
call fcn.00445c2c
jmp 0x445c34
mov dword [ebp - 0xaf8], 0
jmp 0x445c4f
mov edx, dword [ebp - 0xaf8]
add edx, 1
mov dword [ebp - 0xaf8], edx
cmp dword [ebp - 0xaf8], 4
jge 0x445c90
cmp dword [ebp - 0x1c], 0
jge 0x445c66
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x445c7c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcf0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x445c40
mov dword [ebp - 0xcf4], 0
jmp 0x445cab
mov eax, dword [ebp - 0xcf4]
add eax, 1
mov dword [ebp - 0xcf4], eax
cmp dword [ebp - 0xcf4], 3
jge 0x445cec
cmp dword [ebp - 0x1c], 0
jge 0x445cc2
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x445cd8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xef0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x445c9c
mov dword [ebp - 0xef4], 0
jmp 0x445d07
mov eax, dword [ebp - 0xef4]
add eax, 1
mov dword [ebp - 0xef4], eax
cmp dword [ebp - 0xef4], 2
jge 0x445d20
mov ecx, dword [ebp - 0xef4]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x445cf8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x445d34
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445d4a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xef8], 0
jmp 0x445d6c
mov edx, dword [ebp - 0xef8]
add edx, 1
mov dword [ebp - 0xef8], edx
cmp dword [ebp - 0xef8], 0
jge 0x445db3
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x445d89
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x445d99
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x445db1
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445db1
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x445d5d
mov dword [ebp - 4], 0xfffffffe
call fcn.00445dc1
jmp 0x445dd0
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xefc], 0
jmp 0x445df2
mov ecx, dword [ebp - 0xefc]
add ecx, 1
mov dword [ebp - 0xefc], ecx
cmp dword [ebp - 0xefc], 4
jge 0x445e31
mov eax, dword [ebp - 0xefc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x445e21
mov eax, dword [ebp - 0xefc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x445e2c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x445e2f
mov dword [ebp - 0x1c], eax
jmp 0x445de3
mov dword [ebp - 4], 0xfffffffe
call fcn.00445e3f
jmp 0x445e47
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xf00], 0
jmp 0x445e69
mov edx, dword [ebp - 0xf00]
add edx, 1
mov dword [ebp - 0xf00], edx
cmp dword [ebp - 0xf00], 4
jge 0x445e9f
mov eax, dword [ebp - 0xf00]
and eax, 0x80000001
jns 0x445e84
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x445e94
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x445e9d
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x445e5a
mov dword [ebp - 4], 0xfffffffe
call fcn.00445ead
jmp 0x445eca
mov dword [ebp - 0xf04], 0
jmp 0x445ee5
cmp dword [ebp - 0xf04], 4
jge 0x445f26
cmp dword [ebp - 0x1c], 0
jge 0x445efc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x445f12
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1100]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x445ed6
mov dword [ebp - 0x1104], 1
mov dword [ebp - 0x1108], 1
mov dword [ebp - 0x110c], 2
mov dword [ebp - 0x1110], 0
mov dword [ebp - 0x1114], 0
jmp 0x445f69
cmp dword [ebp - 0x1114], 0
jge 0x445faa
mov ecx, dword [ebp - 0x1104]
add ecx, dword [ebp - 0x1108]
mov dword [ebp - 0x110c], ecx
mov edx, dword [ebp - 0x1108]
mov dword [ebp - 0x1104], edx
mov eax, dword [ebp - 0x110c]
mov dword [ebp - 0x1108], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x110c]
mov dword [ebp - 0x1c], ecx
jmp 0x445f5a
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x1118], 0
jmp 0x445fd2