Function at 0x4485d0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b4978
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1b34
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x448626
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jge 0x448664
cmp dword [ebp - 0x1c], 0
jge 0x44863a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x448650
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44861d
mov dword [ebp - 4], 0
mov dword [ebp - 0x224], 0
jmp 0x448686
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x32
jge 0x4486c5
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4486b5
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4486c0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4486c3
mov dword [ebp - 0x1c], eax
jmp 0x448677
mov dword [ebp - 4], 0xfffffffe
call fcn.004486d3
jmp 0x4486db
mov dword [ebp - 0x228], 0
jmp 0x4486f6
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0x12
jge 0x44870f
mov eax, dword [ebp - 0x228]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4486e7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x448723
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x448739
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x22c], 0
jmp 0x448754
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0x19
jge 0x44876d
mov eax, dword [ebp - 0x22c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x448745
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x448781
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x448797
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x230], 0
jmp 0x4487b2
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 0xf
jge 0x4487f3
cmp dword [ebp - 0x1c], 0
jge 0x4487c9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4487df
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4487a3
mov dword [ebp - 4], 1
mov dword [ebp - 0x42c], 0
jmp 0x448815
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 8
jge 0x448850
mov eax, dword [ebp - 0x42c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x448844
mov eax, dword [ebp - 0x42c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44884b
and eax, 0xbc614e
jmp 0x44884e
mov dword [ebp - 0x1c], eax
jmp 0x448806
mov dword [ebp - 4], 0xfffffffe
call fcn.0044885e
jmp 0x448866
mov dword [ebp - 0x430], 1
mov dword [ebp - 0x434], 1
mov dword [ebp - 0x438], 2
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x440], 0
jmp 0x4488a9
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 3
jge 0x4488ea
mov eax, dword [ebp - 0x430]
add eax, dword [ebp - 0x434]
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x434]
mov dword [ebp - 0x430], ecx
mov edx, dword [ebp - 0x438]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x438]
mov dword [ebp - 0x1c], eax
jmp 0x44889a
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x444], 0
jmp 0x448915
mov edx, dword [ebp - 0x444]
add edx, 1
mov dword [ebp - 0x444], edx
cmp dword [ebp - 0x444], 0xb
jge 0x448950
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x448944
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44894b
and eax, 0xbc614e
jmp 0x44894e
mov dword [ebp - 0x1c], eax
jmp 0x448906
mov dword [ebp - 4], 0xfffffffe
call fcn.0044895e
jmp 0x448966
mov dword [ebp - 0x448], 0
jmp 0x448981
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 4
jge 0x4489c2
cmp dword [ebp - 0x1c], 0
jge 0x448998
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4489ae
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x640]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x448972
mov dword [ebp - 4], 3
mov dword [ebp - 0x644], 0
jmp 0x4489e4
mov eax, dword [ebp - 0x644]
add eax, 1
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 0xa
jge 0x448a2b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x448a01
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x448a11
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x448a29
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x448a29
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4489d5
mov dword [ebp - 4], 0xfffffffe
call fcn.00448a39
jmp 0x448a48
mov dword [ebp - 4], 4
mov dword [ebp - 0x648], 0
jmp 0x448a6a
mov ecx, dword [ebp - 0x648]
add ecx, 1
mov dword [ebp - 0x648], ecx
cmp dword [ebp - 0x648], 0x10
jge 0x448aa5
mov eax, dword [ebp - 0x648]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x448a99
mov eax, dword [ebp - 0x648]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x448aa0
and eax, 0xbc614e
jmp 0x448aa3
mov dword [ebp - 0x1c], eax
jmp 0x448a5b
mov dword [ebp - 4], 0xfffffffe
call fcn.00448ab3
jmp 0x448abb
mov dword [ebp - 4], 5
mov dword [ebp - 0x64c], 0
jmp 0x448add
mov edx, dword [ebp - 0x64c]
add edx, 1
mov dword [ebp - 0x64c], edx
cmp dword [ebp - 0x64c], 7
jge 0x448b1c
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x448b0c
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x448b17
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x448b1a
mov dword [ebp - 0x1c], eax
jmp 0x448ace
mov dword [ebp - 4], 0xfffffffe
call fcn.00448b2a
jmp 0x448b32
mov dword [ebp - 4], 6
mov dword [ebp - 0x650], 0
jmp 0x448b54
mov edx, dword [ebp - 0x650]
add edx, 1
mov dword [ebp - 0x650], edx
cmp dword [ebp - 0x650], 0x10
jge 0x448b93
mov eax, dword [ebp - 0x650]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x448b83
mov eax, dword [ebp - 0x650]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x448b8e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x448b91
mov dword [ebp - 0x1c], eax
jmp 0x448b45
mov dword [ebp - 4], 0xfffffffe
call fcn.00448ba1
jmp 0x448ba9
mov dword [ebp - 0x654], 1
mov dword [ebp - 0x658], 1
mov dword [ebp - 0x65c], 2
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x664], 0
jmp 0x448bec
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x664], edx
cmp dword [ebp - 0x664], 0xc
jge 0x448c2d
mov eax, dword [ebp - 0x654]
add eax, dword [ebp - 0x658]
mov dword [ebp - 0x65c], eax
mov ecx, dword [ebp - 0x658]
mov dword [ebp - 0x654], ecx
mov edx, dword [ebp - 0x65c]
mov dword [ebp - 0x658], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x65c]
mov dword [ebp - 0x1c], eax
jmp 0x448bdd
mov ecx, dword [ebp - 0x1c]
add ecx, 0xc
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x668], 0
jmp 0x448c58
mov edx, dword [ebp - 0x668]
add edx, 1
mov dword [ebp - 0x668], edx
cmp dword [ebp - 0x668], 0
jge 0x448c9f
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x448c75
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x448c85
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x448c9d
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x448c9d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x448c49
mov dword [ebp - 4], 0xfffffffe
call fcn.00448cad
jmp 0x448cbc
mov dword [ebp - 0x66c], 0
jmp 0x448cd7
mov ecx, dword [ebp - 0x66c]
add ecx, 1
mov dword [ebp - 0x66c], ecx
cmp dword [ebp - 0x66c], 2
jge 0x448d18
cmp dword [ebp - 0x1c], 0
jge 0x448cee
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x448d04
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x868]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x448cc8
mov dword [ebp - 4], 8
mov dword [ebp - 0x86c], 0
jmp 0x448d3a
mov eax, dword [ebp - 0x86c]
add eax, 1
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 0
jge 0x448d71
mov ecx, dword [ebp - 0x86c]
and ecx, 0x80000001
jns 0x448d56
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x448d66
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x448d6f
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x448d2b
mov dword [ebp - 4], 0xfffffffe
call fcn.00448d7f
jmp 0x448d9d
mov dword [ebp - 0x870], 1
mov dword [ebp - 0x874], 1
mov dword [ebp - 0x878], 2
mov dword [ebp - 0x87c], 0
mov dword [ebp - 0x880], 0
jmp 0x448de0
mov eax, dword [ebp - 0x880]
add eax, 1
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x880], 2
jge 0x448e21
mov ecx, dword [ebp - 0x870]
add ecx, dword [ebp - 0x874]
mov dword [ebp - 0x878], ecx
mov edx, dword [ebp - 0x874]
mov dword [ebp - 0x870], edx
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x878]
mov dword [ebp - 0x1c], ecx
jmp 0x448dd1
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 9
mov dword [ebp - 0x884], 0
jmp 0x448e4c
mov eax, dword [ebp - 0x884]
add eax, 1
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 8
jge 0x448e87
mov eax, dword [ebp - 0x884]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x448e7b
mov eax, dword [ebp - 0x884]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x448e82
and eax, 0xbc614e
jmp 0x448e85
mov dword [ebp - 0x1c], eax
jmp 0x448e3d
mov dword [ebp - 4], 0xfffffffe
call fcn.00448e95
jmp 0x448e9d
mov dword [ebp - 0x888], 0
jmp 0x448eb8
mov edx, dword [ebp - 0x888]
add edx, 1
mov dword [ebp - 0x888], edx
cmp dword [ebp - 0x888], 0
jge 0x448ef9
cmp dword [ebp - 0x1c], 0
jge 0x448ecf
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x448ee5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa80]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x448ea9
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xa84], 0
jmp 0x448f1b
mov eax, dword [ebp - 0xa84]
add eax, 1
mov dword [ebp - 0xa84], eax
cmp dword [ebp - 0xa84], 1
jge 0x448f62
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x448f38
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x448f48
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x448f60
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x448f60
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x448f0c
mov dword [ebp - 4], 0xfffffffe
call fcn.00448f70
jmp 0x448f7f
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xa88], 0
jmp 0x448fa1
mov ecx, dword [ebp - 0xa88]
add ecx, 1
mov dword [ebp - 0xa88], ecx
cmp dword [ebp - 0xa88], 2
jge 0x448fd8
mov edx, dword [ebp - 0xa88]
and edx, 0x80000001
jns 0x448fbd
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x448fcd
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x448fd6
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x448f92
mov dword [ebp - 4], 0xfffffffe
call fcn.00448fe6
jmp 0x449004
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xa8c], 0
jmp 0x449026
mov ecx, dword [ebp - 0xa8c]
add ecx, 1
mov dword [ebp - 0xa8c], ecx
cmp dword [ebp - 0xa8c], 5
jge 0x449061
mov eax, dword [ebp - 0xa8c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x449055
mov eax, dword [ebp - 0xa8c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44905c
and eax, 0xbc614e
jmp 0x44905f
mov dword [ebp - 0x1c], eax
jmp 0x449017
mov dword [ebp - 4], 0xfffffffe
call fcn.0044906f
jmp 0x449077
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xa90], 0
jmp 0x449099
mov edx, dword [ebp - 0xa90]
add edx, 1
mov dword [ebp - 0xa90], edx
cmp dword [ebp - 0xa90], 2
jge 0x4490d8
mov eax, dword [ebp - 0xa90]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4490c8
mov eax, dword [ebp - 0xa90]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4490d3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4490d6
mov dword [ebp - 0x1c], eax
jmp 0x44908a
mov dword [ebp - 4], 0xfffffffe
call fcn.004490e6
jmp 0x4490ee
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xa94], 0
jmp 0x449110
mov edx, dword [ebp - 0xa94]
add edx, 1
mov dword [ebp - 0xa94], edx
cmp dword [ebp - 0xa94], 0
jge 0x44914f
mov eax, dword [ebp - 0xa94]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44913f
mov eax, dword [ebp - 0xa94]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44914a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44914d
mov dword [ebp - 0x1c], eax
jmp 0x449101
mov dword [ebp - 4], 0xfffffffe
call fcn.0044915d
jmp 0x449165
mov dword [ebp - 0xa98], 1
mov dword [ebp - 0xa9c], 1
mov dword [ebp - 0xaa0], 2
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0xaa8], 0
jmp 0x4491a8
mov edx, dword [ebp - 0xaa8]
add edx, 1
mov dword [ebp - 0xaa8], edx
cmp dword [ebp - 0xaa8], 4
jge 0x4491e9
mov eax, dword [ebp - 0xa98]
add eax, dword [ebp - 0xa9c]
mov dword [ebp - 0xaa0], eax
mov ecx, dword [ebp - 0xa9c]
mov dword [ebp - 0xa98], ecx
mov edx, dword [ebp - 0xaa0]
mov dword [ebp - 0xa9c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xaa0]
mov dword [ebp - 0x1c], eax
jmp 0x449199
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xaac], 0
jmp 0x44920d
mov edx, dword [ebp - 0xaac]
add edx, 1
mov dword [ebp - 0xaac], edx
cmp dword [ebp - 0xaac], 8
jge 0x44924e
cmp dword [ebp - 0x1c], 0
jge 0x449224
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44923a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xca8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4491fe
mov dword [ebp - 0xcac], 1
mov dword [ebp - 0xcb0], 1
mov dword [ebp - 0xcb4], 2
mov dword [ebp - 0xcb8], 0
mov dword [ebp - 0xcbc], 0
jmp 0x449291
mov eax, dword [ebp - 0xcbc]
add eax, 1
mov dword [ebp - 0xcbc], eax
cmp dword [ebp - 0xcbc], 0
jge 0x4492d2
mov ecx, dword [ebp - 0xcac]
add ecx, dword [ebp - 0xcb0]
mov dword [ebp - 0xcb4], ecx
mov edx, dword [ebp - 0xcb0]
mov dword [ebp - 0xcac], edx
mov eax, dword [ebp - 0xcb4]
mov dword [ebp - 0xcb0], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x1c], ecx
jmp 0x449282
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xcc0], 0
jmp 0x4492fa
mov eax, dword [ebp - 0xcc0]
add eax, 1
mov dword [ebp - 0xcc0], eax
cmp dword [ebp - 0xcc0], 4
jge 0x449331
mov ecx, dword [ebp - 0xcc0]
and ecx, 0x80000001
jns 0x449316
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x449326
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44932f
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4492eb
mov dword [ebp - 4], 0xfffffffe
call fcn.0044933f
jmp 0x44935d
mov dword [ebp - 0xcc4], 1
mov dword [ebp - 0xcc8], 1
mov dword [ebp - 0xccc], 2
mov dword [ebp - 0xcd0], 0
mov dword [ebp - 0xcd4], 0
jmp 0x4493a0
mov eax, dword [ebp - 0xcd4]
add eax, 1
mov dword [ebp - 0xcd4], eax
cmp dword [ebp - 0xcd4], 5
jge 0x4493e1
mov ecx, dword [ebp - 0xcc4]
add ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0xccc], ecx
mov edx, dword [ebp - 0xcc8]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0xcc8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xccc]
mov dword [ebp - 0x1c], ecx
jmp 0x449391
mov edx, dword [ebp - 0x1c]
add edx, 5
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xcd8], 0
jmp 0x44940c
mov eax, dword [ebp - 0xcd8]
add eax, 1
mov dword [ebp - 0xcd8], eax
cmp dword [ebp - 0xcd8], 0
jge 0x449453
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x449429
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x449439
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x449451
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449451
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4493fd
mov dword [ebp - 4], 0xfffffffe
call fcn.00449461
jmp 0x449470
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xcdc], 0
jmp 0x449492
mov ecx, dword [ebp - 0xcdc]
add ecx, 1
mov dword [ebp - 0xcdc], ecx
cmp dword [ebp - 0xcdc], 0
jge 0x4494c9
mov edx, dword [ebp - 0xcdc]
and edx, 0x80000001
jns 0x4494ae
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x4494be
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4494c7
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x449483
mov dword [ebp - 4], 0xfffffffe
call fcn.004494d7
jmp 0x4494f5
mov dword [ebp - 0xce0], 0
jmp 0x449510
mov ecx, dword [ebp - 0xce0]
add ecx, 1
mov dword [ebp - 0xce0], ecx
cmp dword [ebp - 0xce0], 3
jge 0x449529
mov edx, dword [ebp - 0xce0]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x449501
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44953d
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449553
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xce4], 0
jmp 0x449575
mov edx, dword [ebp - 0xce4]
add edx, 1
mov dword [ebp - 0xce4], edx
cmp dword [ebp - 0xce4], 2
jge 0x4495b4
mov eax, dword [ebp - 0xce4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4495a4
mov eax, dword [ebp - 0xce4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4495af
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4495b2
mov dword [ebp - 0x1c], eax
jmp 0x449566
mov dword [ebp - 4], 0xfffffffe
call fcn.004495c2
jmp 0x4495ca
mov dword [ebp - 0xce8], 0
jmp 0x4495e5
mov edx, dword [ebp - 0xce8]
add edx, 1
mov dword [ebp - 0xce8], edx
cmp dword [ebp - 0xce8], 0
jge 0x449626
cmp dword [ebp - 0x1c], 0
jge 0x4495fc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449612
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xee0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4495d6
mov dword [ebp - 0xee4], 1
mov dword [ebp - 0xee8], 1
mov dword [ebp - 0xeec], 2
mov dword [ebp - 0xef0], 0
mov dword [ebp - 0xef4], 0
jmp 0x449669
mov eax, dword [ebp - 0xef4]
add eax, 1
mov dword [ebp - 0xef4], eax
cmp dword [ebp - 0xef4], 0
jge 0x4496aa
mov ecx, dword [ebp - 0xee4]
add ecx, dword [ebp - 0xee8]
mov dword [ebp - 0xeec], ecx
mov edx, dword [ebp - 0xee8]
mov dword [ebp - 0xee4], edx
mov eax, dword [ebp - 0xeec]
mov dword [ebp - 0xee8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xeec]
mov dword [ebp - 0x1c], ecx
jmp 0x44965a
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xef8], 0
jmp 0x4496d2
mov eax, dword [ebp - 0xef8]
add eax, 1
mov dword [ebp - 0xef8], eax
cmp dword [ebp - 0xef8], 0
jge 0x449719
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4496ef
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4496ff
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x449717
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449717
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4496c3
mov dword [ebp - 4], 0xfffffffe
call fcn.00449727
jmp 0x449736
mov dword [ebp - 0xefc], 0
jmp 0x449751
mov ecx, dword [ebp - 0xefc]
add ecx, 1
mov dword [ebp - 0xefc], ecx
cmp dword [ebp - 0xefc], 3
jge 0x449792
cmp dword [ebp - 0x1c], 0
jge 0x449768
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44977e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10f8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x449742
mov dword [ebp - 0x10fc], 0
jmp 0x4497ad
mov eax, dword [ebp - 0x10fc]
add eax, 1
mov dword [ebp - 0x10fc], eax
cmp dword [ebp - 0x10fc], 2
jge 0x4497c6
mov ecx, dword [ebp - 0x10fc]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44979e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4497da
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4497f0
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x1100], 0
jmp 0x449812
mov edx, dword [ebp - 0x1100]
add edx, 1
mov dword [ebp - 0x1100], edx
cmp dword [ebp - 0x1100], 3
jge 0x449848
mov eax, dword [ebp - 0x1100]
and eax, 0x80000001
jns 0x44982d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44983d
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x449846
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x449803
mov dword [ebp - 4], 0xfffffffe
call fcn.00449856
jmp 0x449873
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x1104], 0
jmp 0x449895
mov edx, dword [ebp - 0x1104]
add edx, 1
mov dword [ebp - 0x1104], edx
cmp dword [ebp - 0x1104], 3
jge 0x4498d0
mov eax, dword [ebp - 0x1104]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4498c4
mov eax, dword [ebp - 0x1104]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4498cb
and eax, 0xbc614e
jmp 0x4498ce
mov dword [ebp - 0x1c], eax
jmp 0x449886
mov dword [ebp - 4], 0xfffffffe
call fcn.004498de
jmp 0x4498e6
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x1108], 0
jmp 0x449908
mov edx, dword [ebp - 0x1108]
add edx, 1
mov dword [ebp - 0x1108], edx
cmp dword [ebp - 0x1108], 0
jge 0x449947
mov eax, dword [ebp - 0x1108]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x449937
mov eax, dword [ebp - 0x1108]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x449942
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x449945
mov dword [ebp - 0x1c], eax
jmp 0x4498f9
mov dword [ebp - 4], 0xfffffffe
call fcn.00449955
jmp 0x44995d
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x110c], 0
jmp 0x44997f
mov edx, dword [ebp - 0x110c]
add edx, 1
mov dword [ebp - 0x110c], edx
cmp dword [ebp - 0x110c], 4
jge 0x4499be
mov eax, dword [ebp - 0x110c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4499ae
mov eax, dword [ebp - 0x110c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4499b9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4499bc
mov dword [ebp - 0x1c], eax
jmp 0x449970
mov dword [ebp - 4], 0xfffffffe
call fcn.004499cc
jmp 0x4499d4
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x1110], 0
jmp 0x4499f6
mov edx, dword [ebp - 0x1110]
add edx, 1
mov dword [ebp - 0x1110], edx
cmp dword [ebp - 0x1110], 0
jge 0x449a35
mov eax, dword [ebp - 0x1110]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x449a25
mov eax, dword [ebp - 0x1110]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x449a30
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x449a33
mov dword [ebp - 0x1c], eax
jmp 0x4499e7
mov dword [ebp - 4], 0xfffffffe
call fcn.00449a43
jmp 0x449a4b
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x1114], 0
jmp 0x449a6d
mov edx, dword [ebp - 0x1114]
add edx, 1
mov dword [ebp - 0x1114], edx
cmp dword [ebp - 0x1114], 3
jge 0x449aa3
mov eax, dword [ebp - 0x1114]
and eax, 0x80000001
jns 0x449a88
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x449a98
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x449aa1
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x449a5e
mov dword [ebp - 4], 0xfffffffe
call fcn.00449ab1
jmp 0x449ace
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x1118], 0
jmp 0x449af0
cmp dword [ebp - 0x1118], 2
jge 0x449b26
mov eax, dword [ebp - 0x1118]
and eax, 0x80000001
jns 0x449b0b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x449b1b
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x449b24
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x449ae1
mov dword [ebp - 4], 0xfffffffe
call fcn.00449b34
jmp 0x449b51
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x111c], 0
jmp 0x449b73
cmp dword [ebp - 0x111c], 3
jge 0x449bae