Function at 0x4434b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b4460
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x16dc
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x34], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x44350d
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 6
jge 0x44353f
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443533
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44353a
and eax, 0xbc614e
jmp 0x44353d
mov dword [ebp - 0x1c], eax
jmp 0x443504
mov dword [ebp - 4], 0xfffffffe
call fcn.0044354d
jmp 0x443555
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x44356e
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x38
jge 0x4435b2
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x443588
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x443598
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4435b0
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4435b0
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x443565
mov dword [ebp - 4], 0xfffffffe
call fcn.004435c0
jmp 0x4435cf
mov dword [ebp - 0x28], 0
jmp 0x4435e1
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 7
jge 0x4435f4
mov edx, dword [ebp - 0x28]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4435d8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x443608
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44361e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 0
jmp 0x443637
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x12
jge 0x44367b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x443651
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x443661
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x443679
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443679
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44362e
mov dword [ebp - 4], 0xfffffffe
call fcn.00443689
jmp 0x443698
mov dword [ebp - 0x30], 0
jmp 0x4436aa
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 1
jge 0x4436e8
cmp dword [ebp - 0x1c], 0
jge 0x4436be
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4436d4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4436a1
mov dword [ebp - 0x234], 0
jmp 0x443703
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 4
jge 0x443744
cmp dword [ebp - 0x1c], 0
jge 0x44371a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x443730
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x430]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4436f4
mov dword [ebp - 0x434], 0
jmp 0x44375f
mov eax, dword [ebp - 0x434]
add eax, 1
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0x16
jge 0x443778
mov ecx, dword [ebp - 0x434]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x443750
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44378c
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4437a2
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 3
mov dword [ebp - 0x438], 0
jmp 0x4437c4
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 0xe
jge 0x4437ff
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4437f3
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4437fa
and eax, 0xbc614e
jmp 0x4437fd
mov dword [ebp - 0x1c], eax
jmp 0x4437b5
mov dword [ebp - 4], 0xfffffffe
call fcn.0044380d
jmp 0x443815
mov dword [ebp - 4], 4
mov dword [ebp - 0x43c], 0
jmp 0x443837
mov edx, dword [ebp - 0x43c]
add edx, 1
mov dword [ebp - 0x43c], edx
cmp dword [ebp - 0x43c], 0xe
jge 0x44386d
mov eax, dword [ebp - 0x43c]
and eax, 0x80000001
jns 0x443852
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x443862
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44386b
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x443828
mov dword [ebp - 4], 0xfffffffe
call fcn.0044387b
jmp 0x443898
mov dword [ebp - 4], 5
mov dword [ebp - 0x440], 0
jmp 0x4438ba
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 4
jge 0x4438f9
mov eax, dword [ebp - 0x440]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4438e9
mov eax, dword [ebp - 0x440]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4438f4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4438f7
mov dword [ebp - 0x1c], eax
jmp 0x4438ab
mov dword [ebp - 4], 0xfffffffe
call fcn.00443907
jmp 0x44390f
mov dword [ebp - 4], 6
mov dword [ebp - 0x444], 0
jmp 0x443931
mov edx, dword [ebp - 0x444]
add edx, 1
mov dword [ebp - 0x444], edx
cmp dword [ebp - 0x444], 0xa
jge 0x443967
mov eax, dword [ebp - 0x444]
and eax, 0x80000001
jns 0x44394c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44395c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x443965
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x443922
mov dword [ebp - 4], 0xfffffffe
call fcn.00443975
jmp 0x443992
mov dword [ebp - 4], 7
mov dword [ebp - 0x448], 0
jmp 0x4439b4
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 7
jge 0x4439f3
mov eax, dword [ebp - 0x448]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4439e3
mov eax, dword [ebp - 0x448]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4439ee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4439f1
mov dword [ebp - 0x1c], eax
jmp 0x4439a5
mov dword [ebp - 4], 0xfffffffe
call fcn.00443a01
jmp 0x443a09
mov dword [ebp - 0x44c], 0
jmp 0x443a24
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 0
jge 0x443a3d
mov eax, dword [ebp - 0x44c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x443a15
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x443a51
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443a67
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x450], 0
jmp 0x443a82
mov edx, dword [ebp - 0x450]
add edx, 1
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x450], 0
jge 0x443ac3
cmp dword [ebp - 0x1c], 0
jge 0x443a99
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x443aaf
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x648]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x443a73
mov dword [ebp - 0x64c], 0
jmp 0x443ade
mov eax, dword [ebp - 0x64c]
add eax, 1
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 1
jge 0x443af7
mov ecx, dword [ebp - 0x64c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x443acf
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x443b0b
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443b21
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x650], 0
jmp 0x443b43
mov edx, dword [ebp - 0x650]
add edx, 1
mov dword [ebp - 0x650], edx
cmp dword [ebp - 0x650], 4
jge 0x443b82
mov eax, dword [ebp - 0x650]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443b72
mov eax, dword [ebp - 0x650]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443b7d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x443b80
mov dword [ebp - 0x1c], eax
jmp 0x443b34
mov dword [ebp - 4], 0xfffffffe
call fcn.00443b90
jmp 0x443b98
mov dword [ebp - 4], 9
mov dword [ebp - 0x654], 0
jmp 0x443bba
mov edx, dword [ebp - 0x654]
add edx, 1
mov dword [ebp - 0x654], edx
cmp dword [ebp - 0x654], 2
jge 0x443bf9
mov eax, dword [ebp - 0x654]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443be9
mov eax, dword [ebp - 0x654]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443bf4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x443bf7
mov dword [ebp - 0x1c], eax
jmp 0x443bab
mov dword [ebp - 4], 0xfffffffe
call fcn.00443c07
jmp 0x443c0f
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x658], 0
jmp 0x443c31
mov edx, dword [ebp - 0x658]
add edx, 1
mov dword [ebp - 0x658], edx
cmp dword [ebp - 0x658], 2
jge 0x443c6c
mov eax, dword [ebp - 0x658]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443c60
mov eax, dword [ebp - 0x658]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443c67
and eax, 0xbc614e
jmp 0x443c6a
mov dword [ebp - 0x1c], eax
jmp 0x443c22
mov dword [ebp - 4], 0xfffffffe
call fcn.00443c7a
jmp 0x443c82
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x65c], 0
jmp 0x443ca4
mov edx, dword [ebp - 0x65c]
add edx, 1
mov dword [ebp - 0x65c], edx
cmp dword [ebp - 0x65c], 2
jge 0x443ceb
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x443cc1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x443cd1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x443ce9
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443ce9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x443c95
mov dword [ebp - 4], 0xfffffffe
call fcn.00443cf9
jmp 0x443d08
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x660], 0
jmp 0x443d2a
mov ecx, dword [ebp - 0x660]
add ecx, 1
mov dword [ebp - 0x660], ecx
cmp dword [ebp - 0x660], 3
jge 0x443d69
mov eax, dword [ebp - 0x660]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443d59
mov eax, dword [ebp - 0x660]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443d64
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x443d67
mov dword [ebp - 0x1c], eax
jmp 0x443d1b
mov dword [ebp - 4], 0xfffffffe
call fcn.00443d77
jmp 0x443d7f
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x664], 0
jmp 0x443da1
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x664], edx
cmp dword [ebp - 0x664], 0
jge 0x443dd7
mov eax, dword [ebp - 0x664]
and eax, 0x80000001
jns 0x443dbc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x443dcc
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x443dd5
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x443d92
mov dword [ebp - 4], 0xfffffffe
call fcn.00443de5
jmp 0x443e02
mov dword [ebp - 0x668], 0
jmp 0x443e1d
mov edx, dword [ebp - 0x668]
add edx, 1
mov dword [ebp - 0x668], edx
cmp dword [ebp - 0x668], 4
jge 0x443e36
mov eax, dword [ebp - 0x668]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x443e0e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x443e4a
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443e60
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x66c], 0
jmp 0x443e82
mov edx, dword [ebp - 0x66c]
add edx, 1
mov dword [ebp - 0x66c], edx
cmp dword [ebp - 0x66c], 3
jge 0x443ebd
mov eax, dword [ebp - 0x66c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443eb1
mov eax, dword [ebp - 0x66c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443eb8
and eax, 0xbc614e
jmp 0x443ebb
mov dword [ebp - 0x1c], eax
jmp 0x443e73
mov dword [ebp - 4], 0xfffffffe
call fcn.00443ecb
jmp 0x443ed3
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x670], 0
jmp 0x443ef5
mov edx, dword [ebp - 0x670]
add edx, 1
mov dword [ebp - 0x670], edx
cmp dword [ebp - 0x670], 2
jge 0x443f34
mov eax, dword [ebp - 0x670]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443f24
mov eax, dword [ebp - 0x670]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443f2f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x443f32
mov dword [ebp - 0x1c], eax
jmp 0x443ee6
mov dword [ebp - 4], 0xfffffffe
call fcn.00443f42
jmp 0x443f4a
mov dword [ebp - 0x674], 1
mov dword [ebp - 0x678], 1
mov dword [ebp - 0x67c], 2
mov dword [ebp - 0x680], 0
mov dword [ebp - 0x684], 0
jmp 0x443f8d
mov edx, dword [ebp - 0x684]
add edx, 1
mov dword [ebp - 0x684], edx
cmp dword [ebp - 0x684], 0
jge 0x443fce
mov eax, dword [ebp - 0x674]
add eax, dword [ebp - 0x678]
mov dword [ebp - 0x67c], eax
mov ecx, dword [ebp - 0x678]
mov dword [ebp - 0x674], ecx
mov edx, dword [ebp - 0x67c]
mov dword [ebp - 0x678], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x67c]
mov dword [ebp - 0x1c], eax
jmp 0x443f7e
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x688], 1
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0x690], 2
mov dword [ebp - 0x694], 0
mov dword [ebp - 0x698], 0
jmp 0x444017
mov edx, dword [ebp - 0x698]
add edx, 1
mov dword [ebp - 0x698], edx
cmp dword [ebp - 0x698], 1
jge 0x444058
mov eax, dword [ebp - 0x688]
add eax, dword [ebp - 0x68c]
mov dword [ebp - 0x690], eax
mov ecx, dword [ebp - 0x68c]
mov dword [ebp - 0x688], ecx
mov edx, dword [ebp - 0x690]
mov dword [ebp - 0x68c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x690]
mov dword [ebp - 0x1c], eax
jmp 0x444008
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x69c], 0
jmp 0x44407c
mov edx, dword [ebp - 0x69c]
add edx, 1
mov dword [ebp - 0x69c], edx
cmp dword [ebp - 0x69c], 3
jge 0x4440bd
cmp dword [ebp - 0x1c], 0
jge 0x444093
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4440a9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x898]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44406d
mov dword [ebp - 0x89c], 0
jmp 0x4440d8
mov eax, dword [ebp - 0x89c]
add eax, 1
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 1
jge 0x444119
cmp dword [ebp - 0x1c], 0
jge 0x4440ef
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x444105
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa98]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4440c9
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xa9c], 0
jmp 0x44413b
mov eax, dword [ebp - 0xa9c]
add eax, 1
mov dword [ebp - 0xa9c], eax
cmp dword [ebp - 0xa9c], 4
jge 0x444182
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x444158
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x444168
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x444180
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444180
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44412c
mov dword [ebp - 4], 0xfffffffe
call fcn.00444190
jmp 0x44419f
mov dword [ebp - 0xaa0], 0
jmp 0x4441ba
mov ecx, dword [ebp - 0xaa0]
add ecx, 1
mov dword [ebp - 0xaa0], ecx
cmp dword [ebp - 0xaa0], 1
jge 0x4441d3
mov edx, dword [ebp - 0xaa0]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4441ab
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4441e7
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4441fd
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xaa4], 0
jmp 0x44421f
mov edx, dword [ebp - 0xaa4]
add edx, 1
mov dword [ebp - 0xaa4], edx
cmp dword [ebp - 0xaa4], 2
jge 0x44425a
mov eax, dword [ebp - 0xaa4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44424e
mov eax, dword [ebp - 0xaa4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444255
and eax, 0xbc614e
jmp 0x444258
mov dword [ebp - 0x1c], eax
jmp 0x444210
mov dword [ebp - 4], 0xfffffffe
call fcn.00444268
jmp 0x444270
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xaa8], 0
jmp 0x444292
mov edx, dword [ebp - 0xaa8]
add edx, 1
mov dword [ebp - 0xaa8], edx
cmp dword [ebp - 0xaa8], 4
jge 0x4442d9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4442af
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4442bf
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4442d7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4442d7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x444283
mov dword [ebp - 4], 0xfffffffe
call fcn.004442e7
jmp 0x4442f6
mov dword [ebp - 0xaac], 0
jmp 0x444311
mov ecx, dword [ebp - 0xaac]
add ecx, 1
mov dword [ebp - 0xaac], ecx
cmp dword [ebp - 0xaac], 0
jge 0x444352
cmp dword [ebp - 0x1c], 0
jge 0x444328
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44433e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xca8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x444302
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xcac], 0
jmp 0x444374
mov eax, dword [ebp - 0xcac]
add eax, 1
mov dword [ebp - 0xcac], eax
cmp dword [ebp - 0xcac], 2
jge 0x4443ab
mov ecx, dword [ebp - 0xcac]
and ecx, 0x80000001
jns 0x444390
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4443a0
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4443a9
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x444365
mov dword [ebp - 4], 0xfffffffe
call fcn.004443b9
jmp 0x4443d7
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xcb0], 0
jmp 0x4443f9
mov eax, dword [ebp - 0xcb0]
add eax, 1
mov dword [ebp - 0xcb0], eax
cmp dword [ebp - 0xcb0], 0
jge 0x444430
mov ecx, dword [ebp - 0xcb0]
and ecx, 0x80000001
jns 0x444415
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x444425
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44442e
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4443ea
mov dword [ebp - 4], 0xfffffffe
call fcn.0044443e
jmp 0x44445c
mov dword [ebp - 0xcb4], 0
jmp 0x444477
mov eax, dword [ebp - 0xcb4]
add eax, 1
mov dword [ebp - 0xcb4], eax
cmp dword [ebp - 0xcb4], 2
jge 0x4444b8
cmp dword [ebp - 0x1c], 0
jge 0x44448e
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4444a4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xeb0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x444468
mov dword [ebp - 0xeb4], 0
jmp 0x4444d3
mov eax, dword [ebp - 0xeb4]
add eax, 1
mov dword [ebp - 0xeb4], eax
cmp dword [ebp - 0xeb4], 4
jge 0x4444ec
mov ecx, dword [ebp - 0xeb4]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4444c4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x444500
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444516
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xeb8], 0
jmp 0x444538
mov edx, dword [ebp - 0xeb8]
add edx, 1
mov dword [ebp - 0xeb8], edx
cmp dword [ebp - 0xeb8], 1
jge 0x44456e
mov eax, dword [ebp - 0xeb8]
and eax, 0x80000001
jns 0x444553
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x444563
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44456c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x444529
mov dword [ebp - 4], 0xfffffffe
call fcn.0044457c
jmp 0x444599
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xebc], 0
jmp 0x4445bb
mov edx, dword [ebp - 0xebc]
add edx, 1
mov dword [ebp - 0xebc], edx
cmp dword [ebp - 0xebc], 3
jge 0x4445f1
mov eax, dword [ebp - 0xebc]
and eax, 0x80000001
jns 0x4445d6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4445e6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4445ef
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4445ac
mov dword [ebp - 4], 0xfffffffe
call fcn.004445ff
jmp 0x44461c
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xec0], 0
jmp 0x44463e
mov edx, dword [ebp - 0xec0]
add edx, 1
mov dword [ebp - 0xec0], edx
cmp dword [ebp - 0xec0], 0
jge 0x444685
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44465b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44466b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x444683
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444683
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44462f
mov dword [ebp - 4], 0xfffffffe
call fcn.00444693
jmp 0x4446a2
mov dword [ebp - 0xec4], 1
mov dword [ebp - 0xec8], 1
mov dword [ebp - 0xecc], 2
mov dword [ebp - 0xed0], 0
mov dword [ebp - 0xed4], 0
jmp 0x4446e5
mov ecx, dword [ebp - 0xed4]
add ecx, 1
mov dword [ebp - 0xed4], ecx
cmp dword [ebp - 0xed4], 0
jge 0x444726
mov edx, dword [ebp - 0xec4]
add edx, dword [ebp - 0xec8]
mov dword [ebp - 0xecc], edx
mov eax, dword [ebp - 0xec8]
mov dword [ebp - 0xec4], eax
mov ecx, dword [ebp - 0xecc]
mov dword [ebp - 0xec8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xecc]
mov dword [ebp - 0x1c], edx
jmp 0x4446d6
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xed8], 0
jmp 0x444747
mov ecx, dword [ebp - 0xed8]
add ecx, 1
mov dword [ebp - 0xed8], ecx
cmp dword [ebp - 0xed8], 3
jge 0x444788
cmp dword [ebp - 0x1c], 0
jge 0x44475e
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x444774
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10d0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x444738
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x10d4], 0
jmp 0x4447aa
mov eax, dword [ebp - 0x10d4]
add eax, 1
mov dword [ebp - 0x10d4], eax
cmp dword [ebp - 0x10d4], 2
jge 0x4447e9
mov eax, dword [ebp - 0x10d4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4447d9
mov eax, dword [ebp - 0x10d4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4447e4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4447e7
mov dword [ebp - 0x1c], eax
jmp 0x44479b
mov dword [ebp - 4], 0xfffffffe
call fcn.004447f7
jmp 0x4447ff
mov dword [ebp - 0x10d8], 0
jmp 0x44481a
mov edx, dword [ebp - 0x10d8]
add edx, 1
mov dword [ebp - 0x10d8], edx
cmp dword [ebp - 0x10d8], 0
jge 0x444833
mov eax, dword [ebp - 0x10d8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44480b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x444847
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44485d