Function at 0x44a390
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b4b48
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1284
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x3c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x44a3ed
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x10
jge 0x44a41e
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x44a403
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x44a413
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44a41c
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x44a3e4
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a42c
jmp 0x44a44a
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x44a478
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x3c
jge 0x44a49e
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
jmp 0x44a46f
mov edx, dword [ebp - 0x1c]
add edx, 0x3c
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x38], 0
jmp 0x44a4b9
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x3e
jge 0x44a4f7
cmp dword [ebp - 0x1c], 0
jge 0x44a4cd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a4e3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x238]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44a4b0
mov dword [ebp - 0x23c], 0
jmp 0x44a512
mov eax, dword [ebp - 0x23c]
add eax, 1
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x18
jge 0x44a553
cmp dword [ebp - 0x1c], 0
jge 0x44a529
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a53f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x438]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44a503
mov dword [ebp - 4], 1
mov dword [ebp - 0x43c], 0
jmp 0x44a575
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0xa
jge 0x44a5ac
mov ecx, dword [ebp - 0x43c]
and ecx, 0x80000001
jns 0x44a591
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x44a5a1
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44a5aa
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x44a566
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a5ba
jmp 0x44a5d8
mov dword [ebp - 4], 2
mov dword [ebp - 0x440], 0
jmp 0x44a5fa
mov eax, dword [ebp - 0x440]
add eax, 1
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0x14
jge 0x44a641
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44a617
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44a627
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44a63f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a63f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44a5eb
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a64f
jmp 0x44a65e
mov dword [ebp - 4], 3
mov dword [ebp - 0x444], 0
jmp 0x44a680
mov ecx, dword [ebp - 0x444]
add ecx, 1
mov dword [ebp - 0x444], ecx
cmp dword [ebp - 0x444], 0xb
jge 0x44a6bb
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a6af
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a6b6
and eax, 0xbc614e
jmp 0x44a6b9
mov dword [ebp - 0x1c], eax
jmp 0x44a671
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a6c9
jmp 0x44a6d1
mov dword [ebp - 0x448], 1
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x450], 2
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x458], 0
jmp 0x44a714
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 6
jge 0x44a755
mov eax, dword [ebp - 0x448]
add eax, dword [ebp - 0x44c]
mov dword [ebp - 0x450], eax
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x448], ecx
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x44c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x450]
mov dword [ebp - 0x1c], eax
jmp 0x44a705
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x45c], 0
jmp 0x44a780
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 5
jge 0x44a7bf
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a7af
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a7ba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44a7bd
mov dword [ebp - 0x1c], eax
jmp 0x44a771
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a7cd
jmp 0x44a7d5
mov dword [ebp - 4], 5
mov dword [ebp - 0x460], 0
jmp 0x44a7f7
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 1
jge 0x44a832
mov eax, dword [ebp - 0x460]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a826
mov eax, dword [ebp - 0x460]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a82d
and eax, 0xbc614e
jmp 0x44a830
mov dword [ebp - 0x1c], eax
jmp 0x44a7e8
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a840
jmp 0x44a848
mov dword [ebp - 4], 6
mov dword [ebp - 0x464], 0
jmp 0x44a86a
mov edx, dword [ebp - 0x464]
add edx, 1
mov dword [ebp - 0x464], edx
cmp dword [ebp - 0x464], 6
jge 0x44a8a0
mov eax, dword [ebp - 0x464]
and eax, 0x80000001
jns 0x44a885
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44a895
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44a89e
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44a85b
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a8ae
jmp 0x44a8cb
mov dword [ebp - 0x468], 0
jmp 0x44a8e6
mov edx, dword [ebp - 0x468]
add edx, 1
mov dword [ebp - 0x468], edx
cmp dword [ebp - 0x468], 0xa
jge 0x44a8ff
mov eax, dword [ebp - 0x468]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44a8d7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a913
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a929
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 7
mov dword [ebp - 0x46c], 0
jmp 0x44a94b
mov edx, dword [ebp - 0x46c]
add edx, 1
mov dword [ebp - 0x46c], edx
cmp dword [ebp - 0x46c], 6
jge 0x44a98a
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a97a
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a985
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44a988
mov dword [ebp - 0x1c], eax
jmp 0x44a93c
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a998
jmp 0x44a9a0
mov dword [ebp - 0x470], 0
jmp 0x44a9bb
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 0xe
jge 0x44a9fc
cmp dword [ebp - 0x1c], 0
jge 0x44a9d2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a9e8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x668]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44a9ac
mov dword [ebp - 0x66c], 0
jmp 0x44aa17
mov eax, dword [ebp - 0x66c]
add eax, 1
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 0
jge 0x44aa30
mov ecx, dword [ebp - 0x66c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44aa08
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44aa44
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44aa5a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x670], 0
jmp 0x44aa7c
mov edx, dword [ebp - 0x670]
add edx, 1
mov dword [ebp - 0x670], edx
cmp dword [ebp - 0x670], 1
jge 0x44aac3
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44aa99
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44aaa9
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44aac1
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44aac1
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44aa6d
mov dword [ebp - 4], 0xfffffffe
call fcn.0044aad1
jmp 0x44aae0
mov dword [ebp - 0x674], 0
jmp 0x44aafb
mov ecx, dword [ebp - 0x674]
add ecx, 1
mov dword [ebp - 0x674], ecx
cmp dword [ebp - 0x674], 1
jge 0x44ab3c
cmp dword [ebp - 0x1c], 0
jge 0x44ab12
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ab28
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x870]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44aaec
mov dword [ebp - 4], 9
mov dword [ebp - 0x874], 0
jmp 0x44ab5e
mov eax, dword [ebp - 0x874]
add eax, 1
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x874], 3
jge 0x44ab95
mov ecx, dword [ebp - 0x874]
and ecx, 0x80000001
jns 0x44ab7a
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x44ab8a
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44ab93
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x44ab4f
mov dword [ebp - 4], 0xfffffffe
call fcn.0044aba3
jmp 0x44abc1
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x878], 0
jmp 0x44abe3
mov eax, dword [ebp - 0x878]
add eax, 1
mov dword [ebp - 0x878], eax
cmp dword [ebp - 0x878], 7
jge 0x44ac1e
mov eax, dword [ebp - 0x878]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ac12
mov eax, dword [ebp - 0x878]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ac19
and eax, 0xbc614e
jmp 0x44ac1c
mov dword [ebp - 0x1c], eax
jmp 0x44abd4
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ac2c
jmp 0x44ac34
mov dword [ebp - 0x87c], 0
jmp 0x44ac4f
mov edx, dword [ebp - 0x87c]
add edx, 1
mov dword [ebp - 0x87c], edx
cmp dword [ebp - 0x87c], 3
jge 0x44ac90
cmp dword [ebp - 0x1c], 0
jge 0x44ac66
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ac7c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa78]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44ac40
mov dword [ebp - 0xa7c], 0
jmp 0x44acab
mov eax, dword [ebp - 0xa7c]
add eax, 1
mov dword [ebp - 0xa7c], eax
cmp dword [ebp - 0xa7c], 4
jge 0x44acec
cmp dword [ebp - 0x1c], 0
jge 0x44acc2
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44acd8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc78]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44ac9c
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xc7c], 0
jmp 0x44ad0e
mov eax, dword [ebp - 0xc7c]
add eax, 1
mov dword [ebp - 0xc7c], eax
cmp dword [ebp - 0xc7c], 2
jge 0x44ad45
mov ecx, dword [ebp - 0xc7c]
and ecx, 0x80000001
jns 0x44ad2a
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x44ad3a
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44ad43
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x44acff
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ad53
jmp 0x44ad71
mov dword [ebp - 0xc80], 0
jmp 0x44ad8c
mov eax, dword [ebp - 0xc80]
add eax, 1
mov dword [ebp - 0xc80], eax
cmp dword [ebp - 0xc80], 7
jge 0x44adcd
cmp dword [ebp - 0x1c], 0
jge 0x44ada3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44adb9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe78]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44ad7d
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xe7c], 0
jmp 0x44adef
mov eax, dword [ebp - 0xe7c]
add eax, 1
mov dword [ebp - 0xe7c], eax
cmp dword [ebp - 0xe7c], 0
jge 0x44ae2a
mov eax, dword [ebp - 0xe7c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ae1e
mov eax, dword [ebp - 0xe7c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ae25
and eax, 0xbc614e
jmp 0x44ae28
mov dword [ebp - 0x1c], eax
jmp 0x44ade0
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ae38
jmp 0x44ae40
mov dword [ebp - 0xe80], 0
jmp 0x44ae5b
mov edx, dword [ebp - 0xe80]
add edx, 1
mov dword [ebp - 0xe80], edx
cmp dword [ebp - 0xe80], 3
jge 0x44ae9c
cmp dword [ebp - 0x1c], 0
jge 0x44ae72
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ae88
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1078]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44ae4c
mov dword [ebp - 0x107c], 0
jmp 0x44aeb7
mov eax, dword [ebp - 0x107c]
add eax, 1
mov dword [ebp - 0x107c], eax
cmp dword [ebp - 0x107c], 2
jge 0x44aed0
mov ecx, dword [ebp - 0x107c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44aea8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44aee4
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44aefa
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x1080], 0
jmp 0x44af1c
mov edx, dword [ebp - 0x1080]
add edx, 1
mov dword [ebp - 0x1080], edx
cmp dword [ebp - 0x1080], 3
jge 0x44af5b
mov eax, dword [ebp - 0x1080]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44af4b
mov eax, dword [ebp - 0x1080]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44af56
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44af59
mov dword [ebp - 0x1c], eax
jmp 0x44af0d
mov dword [ebp - 4], 0xfffffffe
call fcn.0044af69
jmp 0x44af71
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x1084], 0
jmp 0x44af93
mov edx, dword [ebp - 0x1084]
add edx, 1
mov dword [ebp - 0x1084], edx
cmp dword [ebp - 0x1084], 0
jge 0x44afc9
mov eax, dword [ebp - 0x1084]
and eax, 0x80000001
jns 0x44afae
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44afbe
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44afc7
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44af84
mov dword [ebp - 4], 0xfffffffe
call fcn.0044afd7
jmp 0x44aff4
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x1088], 0
jmp 0x44b016
mov edx, dword [ebp - 0x1088]
add edx, 1
mov dword [ebp - 0x1088], edx
cmp dword [ebp - 0x1088], 2
jge 0x44b055
mov eax, dword [ebp - 0x1088]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b045
mov eax, dword [ebp - 0x1088]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b050
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44b053
mov dword [ebp - 0x1c], eax
jmp 0x44b007
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b063
jmp 0x44b06b
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x108c], 0
jmp 0x44b08d
mov edx, dword [ebp - 0x108c]
add edx, 1
mov dword [ebp - 0x108c], edx
cmp dword [ebp - 0x108c], 6
jge 0x44b0d4
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44b0aa
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44b0ba
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44b0d2
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b0d2
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44b07e
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b0e2
jmp 0x44b0f1
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x1090], 0
jmp 0x44b113
mov ecx, dword [ebp - 0x1090]
add ecx, 1
mov dword [ebp - 0x1090], ecx
cmp dword [ebp - 0x1090], 6
jge 0x44b14e
mov eax, dword [ebp - 0x1090]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b142
mov eax, dword [ebp - 0x1090]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b149
and eax, 0xbc614e
jmp 0x44b14c
mov dword [ebp - 0x1c], eax
jmp 0x44b104
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b15c
jmp 0x44b164
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x1094], 0
jmp 0x44b186
mov edx, dword [ebp - 0x1094]
add edx, 1
mov dword [ebp - 0x1094], edx
cmp dword [ebp - 0x1094], 1
jge 0x44b1bc
mov eax, dword [ebp - 0x1094]
and eax, 0x80000001
jns 0x44b1a1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44b1b1
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44b1ba
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44b177
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b1ca
jmp 0x44b1e7
mov dword [ebp - 0x1098], 0
jmp 0x44b202
mov edx, dword [ebp - 0x1098]
add edx, 1
mov dword [ebp - 0x1098], edx
cmp dword [ebp - 0x1098], 6
jge 0x44b21b
mov eax, dword [ebp - 0x1098]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44b1f3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b22f
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b245
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x109c], 0
jmp 0x44b260
mov edx, dword [ebp - 0x109c]
add edx, 1
mov dword [ebp - 0x109c], edx
cmp dword [ebp - 0x109c], 2
jge 0x44b2a1
cmp dword [ebp - 0x1c], 0
jge 0x44b277
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b28d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1298]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44b251
mov dword [ebp - 0x129c], 0
jmp 0x44b2bc
mov eax, dword [ebp - 0x129c]
add eax, 1
mov dword [ebp - 0x129c], eax
cmp dword [ebp - 0x129c], 3
jge 0x44b2d5
mov ecx, dword [ebp - 0x129c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44b2ad
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b2e9
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b2ff
mov dword [ebp - 0x1c], 0xb
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x3c]
xor ecx, ebp
call fcn.00408023
mov esp, ebp
pop ebp
ret