Function at 0x44b320
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b4c40
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1e24
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x50], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x44b37d
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x40
jge 0x44b3af
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b3a3
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b3aa
and eax, 0xbc614e
jmp 0x44b3ad
mov dword [ebp - 0x1c], eax
jmp 0x44b374
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b3bd
jmp 0x44b3c5
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x44b3de
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x28
jge 0x44b414
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b404
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b40f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44b412
mov dword [ebp - 0x1c], eax
jmp 0x44b3d5
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b422
jmp 0x44b42a
mov dword [ebp - 4], 2
mov dword [ebp - 0x28], 0
jmp 0x44b443
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x30
jge 0x44b475
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b469
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b470
and eax, 0xbc614e
jmp 0x44b473
mov dword [ebp - 0x1c], eax
jmp 0x44b43a
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b483
jmp 0x44b48b
mov dword [ebp - 4], 3
mov dword [ebp - 0x2c], 0
jmp 0x44b4a4
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0xe
jge 0x44b4e8
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44b4be
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44b4ce
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44b4e6
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b4e6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44b49b
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b4f6
jmp 0x44b505
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
jmp 0x44b533
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 5
jge 0x44b559
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
jmp 0x44b52a
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x44], 0
jmp 0x44b57b
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0xf
jge 0x44b5bf
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44b595
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44b5a5
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44b5bd
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b5bd
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44b572
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b5cd
jmp 0x44b5dc
mov dword [ebp - 4], 5
mov dword [ebp - 0x48], 0
jmp 0x44b5f5
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 7
jge 0x44b627
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b61b
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b622
and eax, 0xbc614e
jmp 0x44b625
mov dword [ebp - 0x1c], eax
jmp 0x44b5ec
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b635
jmp 0x44b63d
mov dword [ebp - 0x4c], 0
jmp 0x44b64f
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0xe
jge 0x44b68d
cmp dword [ebp - 0x1c], 0
jge 0x44b663
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b679
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x248]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44b646
mov dword [ebp - 4], 6
mov dword [ebp - 0x24c], 0
jmp 0x44b6af
mov eax, dword [ebp - 0x24c]
add eax, 1
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0xa
jge 0x44b6f6
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44b6cc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44b6dc
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44b6f4
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b6f4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44b6a0
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b704
jmp 0x44b713
mov dword [ebp - 0x250], 0
jmp 0x44b72e
mov ecx, dword [ebp - 0x250]
add ecx, 1
mov dword [ebp - 0x250], ecx
cmp dword [ebp - 0x250], 2
jge 0x44b747
mov edx, dword [ebp - 0x250]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44b71f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b75b
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b771
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 7
mov dword [ebp - 0x254], 0
jmp 0x44b793
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 0xc
jge 0x44b7ce
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b7c2
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b7c9
and eax, 0xbc614e
jmp 0x44b7cc
mov dword [ebp - 0x1c], eax
jmp 0x44b784
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b7dc
jmp 0x44b7e4
mov dword [ebp - 4], 8
mov dword [ebp - 0x258], 0
jmp 0x44b806
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 6
jge 0x44b845
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b835
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b840
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44b843
mov dword [ebp - 0x1c], eax
jmp 0x44b7f7
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b853
jmp 0x44b85b
mov dword [ebp - 4], 9
mov dword [ebp - 0x25c], 0
jmp 0x44b87d
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 0xb
jge 0x44b8bc
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b8ac
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b8b7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44b8ba
mov dword [ebp - 0x1c], eax
jmp 0x44b86e
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b8ca
jmp 0x44b8d2
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x260], 0
jmp 0x44b8f4
mov edx, dword [ebp - 0x260]
add edx, 1
mov dword [ebp - 0x260], edx
cmp dword [ebp - 0x260], 0xa
jge 0x44b933
mov eax, dword [ebp - 0x260]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b923
mov eax, dword [ebp - 0x260]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b92e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44b931
mov dword [ebp - 0x1c], eax
jmp 0x44b8e5
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b941
jmp 0x44b949
mov dword [ebp - 0x264], 0
jmp 0x44b964
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 0xe
jge 0x44b97d
mov eax, dword [ebp - 0x264]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44b955
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b991
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b9a7
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x268], 0
jmp 0x44b9c9
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 0xd
jge 0x44b9ff
mov eax, dword [ebp - 0x268]
and eax, 0x80000001
jns 0x44b9e4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44b9f4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44b9fd
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44b9ba
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ba0d
jmp 0x44ba2a
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x274], 2
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x27c], 0
jmp 0x44ba6d
mov edx, dword [ebp - 0x27c]
add edx, 1
mov dword [ebp - 0x27c], edx
cmp dword [ebp - 0x27c], 4
jge 0x44baae
mov eax, dword [ebp - 0x26c]
add eax, dword [ebp - 0x270]
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x270]
mov dword [ebp - 0x26c], ecx
mov edx, dword [ebp - 0x274]
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x274]
mov dword [ebp - 0x1c], eax
jmp 0x44ba5e
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x280], 0
jmp 0x44bad2
mov edx, dword [ebp - 0x280]
add edx, 1
mov dword [ebp - 0x280], edx
cmp dword [ebp - 0x280], 6
jge 0x44baeb
mov eax, dword [ebp - 0x280]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44bac3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44baff
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44bb15
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x284], 0
jmp 0x44bb30
mov edx, dword [ebp - 0x284]
add edx, 1
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 0
jge 0x44bb49
mov eax, dword [ebp - 0x284]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44bb21
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44bb5d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44bb73
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x290], 2
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x298], 0
jmp 0x44bbb6
mov edx, dword [ebp - 0x298]
add edx, 1
mov dword [ebp - 0x298], edx
cmp dword [ebp - 0x298], 0
jge 0x44bbf7
mov eax, dword [ebp - 0x288]
add eax, dword [ebp - 0x28c]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x288], ecx
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x28c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x290]
mov dword [ebp - 0x1c], eax
jmp 0x44bba7
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x29c], 0
jmp 0x44bc1f
mov edx, dword [ebp - 0x29c]
add edx, 1
mov dword [ebp - 0x29c], edx
cmp dword [ebp - 0x29c], 2
jge 0x44bc5e
mov eax, dword [ebp - 0x29c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44bc4e
mov eax, dword [ebp - 0x29c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44bc59
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44bc5c
mov dword [ebp - 0x1c], eax
jmp 0x44bc10
mov dword [ebp - 4], 0xfffffffe
call fcn.0044bc6c
jmp 0x44bc74
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x2a0], 0
jmp 0x44bc96
mov edx, dword [ebp - 0x2a0]
add edx, 1
mov dword [ebp - 0x2a0], edx
cmp dword [ebp - 0x2a0], 8
jge 0x44bcd5
mov eax, dword [ebp - 0x2a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44bcc5
mov eax, dword [ebp - 0x2a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44bcd0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44bcd3
mov dword [ebp - 0x1c], eax
jmp 0x44bc87
mov dword [ebp - 4], 0xfffffffe
call fcn.0044bce3
jmp 0x44bceb
mov dword [ebp - 0x2a4], 0
jmp 0x44bd06
mov edx, dword [ebp - 0x2a4]
add edx, 1
mov dword [ebp - 0x2a4], edx
cmp dword [ebp - 0x2a4], 3
jge 0x44bd1f
mov eax, dword [ebp - 0x2a4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44bcf7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44bd33
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44bd49
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x2a8], 1
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x2b0], 2
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b8], 0
jmp 0x44bd8c
mov edx, dword [ebp - 0x2b8]
add edx, 1
mov dword [ebp - 0x2b8], edx
cmp dword [ebp - 0x2b8], 1
jge 0x44bdcd
mov eax, dword [ebp - 0x2a8]
add eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2a8], ecx
mov edx, dword [ebp - 0x2b0]
mov dword [ebp - 0x2ac], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x1c], eax
jmp 0x44bd7d
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x2bc], 0
jmp 0x44bdf8
mov edx, dword [ebp - 0x2bc]
add edx, 1
mov dword [ebp - 0x2bc], edx
cmp dword [ebp - 0x2bc], 6
jge 0x44be2e
mov eax, dword [ebp - 0x2bc]
and eax, 0x80000001
jns 0x44be13
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44be23
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44be2c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44bde9
mov dword [ebp - 4], 0xfffffffe
call fcn.0044be3c
jmp 0x44be59
mov dword [ebp - 0x2c0], 0
jmp 0x44be74
mov edx, dword [ebp - 0x2c0]
add edx, 1
mov dword [ebp - 0x2c0], edx
cmp dword [ebp - 0x2c0], 6
jge 0x44beb5
cmp dword [ebp - 0x1c], 0
jge 0x44be8b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44bea1
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x4b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44be65
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x4bc], 0
jmp 0x44bed7
mov eax, dword [ebp - 0x4bc]
add eax, 1
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 8
jge 0x44bf12
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44bf06
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44bf0d
and eax, 0xbc614e
jmp 0x44bf10
mov dword [ebp - 0x1c], eax
jmp 0x44bec8
mov dword [ebp - 4], 0xfffffffe
call fcn.0044bf20
jmp 0x44bf28
mov dword [ebp - 0x4c0], 0
jmp 0x44bf43
mov edx, dword [ebp - 0x4c0]
add edx, 1
mov dword [ebp - 0x4c0], edx
cmp dword [ebp - 0x4c0], 6
jge 0x44bf84
cmp dword [ebp - 0x1c], 0
jge 0x44bf5a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44bf70
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44bf34
mov dword [ebp - 0x6bc], 1
mov dword [ebp - 0x6c0], 1
mov dword [ebp - 0x6c4], 2
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x6cc], 0
jmp 0x44bfc7
mov eax, dword [ebp - 0x6cc]
add eax, 1
mov dword [ebp - 0x6cc], eax
cmp dword [ebp - 0x6cc], 7
jge 0x44c008
mov ecx, dword [ebp - 0x6bc]
add ecx, dword [ebp - 0x6c0]
mov dword [ebp - 0x6c4], ecx
mov edx, dword [ebp - 0x6c0]
mov dword [ebp - 0x6bc], edx
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x6c0], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x1c], ecx
jmp 0x44bfb8
mov edx, dword [ebp - 0x1c]
add edx, 7
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x6d0], 0
jmp 0x44c02c
mov eax, dword [ebp - 0x6d0]
add eax, 1
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 0
jge 0x44c045
mov ecx, dword [ebp - 0x6d0]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44c01d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44c059
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c06f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x6d4], 0
jmp 0x44c091
mov edx, dword [ebp - 0x6d4]
add edx, 1
mov dword [ebp - 0x6d4], edx
cmp dword [ebp - 0x6d4], 1
jge 0x44c0cc
mov eax, dword [ebp - 0x6d4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44c0c0
mov eax, dword [ebp - 0x6d4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44c0c7
and eax, 0xbc614e
jmp 0x44c0ca
mov dword [ebp - 0x1c], eax
jmp 0x44c082
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c0da
jmp 0x44c0e2
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x6d8], 0
jmp 0x44c104
mov edx, dword [ebp - 0x6d8]
add edx, 1
mov dword [ebp - 0x6d8], edx
cmp dword [ebp - 0x6d8], 4
jge 0x44c13a
mov eax, dword [ebp - 0x6d8]
and eax, 0x80000001
jns 0x44c11f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44c12f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44c138
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44c0f5
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c148
jmp 0x44c165
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x6dc], 0
jmp 0x44c187
mov edx, dword [ebp - 0x6dc]
add edx, 1
mov dword [ebp - 0x6dc], edx
cmp dword [ebp - 0x6dc], 3
jge 0x44c1bd
mov eax, dword [ebp - 0x6dc]
and eax, 0x80000001
jns 0x44c1a2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44c1b2
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44c1bb
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44c178
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c1cb
jmp 0x44c1e8
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x6e0], 0
jmp 0x44c20a
mov edx, dword [ebp - 0x6e0]
add edx, 1
mov dword [ebp - 0x6e0], edx
cmp dword [ebp - 0x6e0], 2
jge 0x44c251
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44c227
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44c237
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44c24f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c24f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44c1fb
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c25f
jmp 0x44c26e
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x6e4], 0
jmp 0x44c290
mov ecx, dword [ebp - 0x6e4]
add ecx, 1
mov dword [ebp - 0x6e4], ecx
cmp dword [ebp - 0x6e4], 4
jge 0x44c2c7
mov edx, dword [ebp - 0x6e4]
and edx, 0x80000001
jns 0x44c2ac
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x44c2bc
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x44c2c5
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44c281
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c2d5
jmp 0x44c2f3
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x6e8], 0
jmp 0x44c315
mov ecx, dword [ebp - 0x6e8]
add ecx, 1
mov dword [ebp - 0x6e8], ecx
cmp dword [ebp - 0x6e8], 3
jge 0x44c350
mov eax, dword [ebp - 0x6e8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44c344
mov eax, dword [ebp - 0x6e8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44c34b
and eax, 0xbc614e
jmp 0x44c34e
mov dword [ebp - 0x1c], eax
jmp 0x44c306
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c35e
jmp 0x44c366
mov dword [ebp - 0x6ec], 0
jmp 0x44c381
mov edx, dword [ebp - 0x6ec]
add edx, 1
mov dword [ebp - 0x6ec], edx
cmp dword [ebp - 0x6ec], 0
jge 0x44c3c2
cmp dword [ebp - 0x1c], 0
jge 0x44c398
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44c3ae
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8e8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44c372
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x8ec], 0
jmp 0x44c3e4
mov eax, dword [ebp - 0x8ec]
add eax, 1
mov dword [ebp - 0x8ec], eax
cmp dword [ebp - 0x8ec], 2
jge 0x44c42b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44c401
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44c411
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44c429
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c429
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44c3d5
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c439
jmp 0x44c448
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x8f0], 0
jmp 0x44c46a
mov ecx, dword [ebp - 0x8f0]
add ecx, 1
mov dword [ebp - 0x8f0], ecx
cmp dword [ebp - 0x8f0], 2
jge 0x44c4b1
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44c487
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44c497
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44c4af
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c4af
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44c45b
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c4bf
jmp 0x44c4ce
mov dword [ebp - 0x8f4], 0
jmp 0x44c4e9
mov ecx, dword [ebp - 0x8f4]
add ecx, 1
mov dword [ebp - 0x8f4], ecx
cmp dword [ebp - 0x8f4], 0
jge 0x44c502
mov edx, dword [ebp - 0x8f4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44c4da
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44c516
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c52c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x8f8], 0
jmp 0x44c54e
mov edx, dword [ebp - 0x8f8]
add edx, 1
mov dword [ebp - 0x8f8], edx
cmp dword [ebp - 0x8f8], 0
jge 0x44c584
mov eax, dword [ebp - 0x8f8]
and eax, 0x80000001
jns 0x44c569
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44c579
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44c582
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44c53f
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c592
jmp 0x44c5af
mov dword [ebp - 0x8fc], 0
jmp 0x44c5ca
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
cmp dword [ebp - 0x8fc], 0
jge 0x44c5e3
mov eax, dword [ebp - 0x8fc]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44c5bb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44c5f7
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c60d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x900], 1
mov dword [ebp - 0x904], 1
mov dword [ebp - 0x908], 2
mov dword [ebp - 0x90c], 0
mov dword [ebp - 0x910], 0
jmp 0x44c650
mov edx, dword [ebp - 0x910]
add edx, 1
mov dword [ebp - 0x910], edx
cmp dword [ebp - 0x910], 3
jge 0x44c691
mov eax, dword [ebp - 0x900]
add eax, dword [ebp - 0x904]
mov dword [ebp - 0x908], eax
mov ecx, dword [ebp - 0x904]
mov dword [ebp - 0x900], ecx
mov edx, dword [ebp - 0x908]
mov dword [ebp - 0x904], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x908]
mov dword [ebp - 0x1c], eax
jmp 0x44c641
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x914], 1
mov dword [ebp - 0x918], 1
mov dword [ebp - 0x91c], 2
mov dword [ebp - 0x920], 0
mov dword [ebp - 0x924], 0
jmp 0x44c6dd
cmp dword [ebp - 0x924], 2
jge 0x44c71e