Function at 0x44e0a0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b4f08
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1174
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x30], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x44e0fd
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x33
jge 0x44e12f
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44e123
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44e12a
and eax, 0xbc614e
jmp 0x44e12d
mov dword [ebp - 0x1c], eax
jmp 0x44e0f4
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e13d
jmp 0x44e145
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x44e15e
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x13
jge 0x44e18e
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x44e173
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44e183
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44e18c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44e155
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e19c
jmp 0x44e1b9
mov dword [ebp - 4], 2
mov dword [ebp - 0x28], 0
jmp 0x44e1d2
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x15
jge 0x44e202
mov eax, dword [ebp - 0x28]
and eax, 0x80000001
jns 0x44e1e7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44e1f7
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44e200
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44e1c9
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e210
jmp 0x44e22d
mov dword [ebp - 0x2c], 0
jmp 0x44e23f
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 1
jge 0x44e27d
cmp dword [ebp - 0x1c], 0
jge 0x44e253
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e269
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e236
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x234], 2
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x23c], 0
jmp 0x44e2c0
mov eax, dword [ebp - 0x23c]
add eax, 1
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jge 0x44e301
mov ecx, dword [ebp - 0x22c]
add ecx, dword [ebp - 0x230]
mov dword [ebp - 0x234], ecx
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x22c], edx
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x234]
mov dword [ebp - 0x1c], ecx
jmp 0x44e2b1
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x248], 2
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x250], 0
jmp 0x44e34a
mov eax, dword [ebp - 0x250]
add eax, 1
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x44e38b
mov ecx, dword [ebp - 0x240]
add ecx, dword [ebp - 0x244]
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x244]
mov dword [ebp - 0x240], edx
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x248]
mov dword [ebp - 0x1c], ecx
jmp 0x44e33b
mov edx, dword [ebp - 0x1c]
add edx, 3
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 3
mov dword [ebp - 0x254], 0
jmp 0x44e3b6
mov eax, dword [ebp - 0x254]
add eax, 1
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x44e3f5
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44e3e5
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44e3f0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44e3f3
mov dword [ebp - 0x1c], eax
jmp 0x44e3a7
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e403
jmp 0x44e40b
mov dword [ebp - 4], 4
mov dword [ebp - 0x258], 0
jmp 0x44e42d
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 6
jge 0x44e463
mov eax, dword [ebp - 0x258]
and eax, 0x80000001
jns 0x44e448
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44e458
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44e461
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44e41e
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e471
jmp 0x44e48e
mov dword [ebp - 4], 5
mov dword [ebp - 0x25c], 0
jmp 0x44e4b0
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 0
jge 0x44e4e6
mov eax, dword [ebp - 0x25c]
and eax, 0x80000001
jns 0x44e4cb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44e4db
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44e4e4
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44e4a1
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e4f4
jmp 0x44e511
mov dword [ebp - 0x260], 0
jmp 0x44e52c
mov edx, dword [ebp - 0x260]
add edx, 1
mov dword [ebp - 0x260], edx
cmp dword [ebp - 0x260], 4
jge 0x44e545
mov eax, dword [ebp - 0x260]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44e51d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44e559
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e56f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x264], 0
jmp 0x44e58a
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 6
jge 0x44e5a3
mov eax, dword [ebp - 0x264]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44e57b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44e5b7
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e5cd
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x268], 0
jmp 0x44e5ef
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 3
jge 0x44e636
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44e60c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44e61c
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44e634
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e634
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44e5e0
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e644
jmp 0x44e653
mov dword [ebp - 4], 7
mov dword [ebp - 0x26c], 0
jmp 0x44e675
mov ecx, dword [ebp - 0x26c]
add ecx, 1
mov dword [ebp - 0x26c], ecx
cmp dword [ebp - 0x26c], 4
jge 0x44e6ac
mov edx, dword [ebp - 0x26c]
and edx, 0x80000001
jns 0x44e691
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x44e6a1
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x44e6aa
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44e666
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e6ba
jmp 0x44e6d8
mov dword [ebp - 0x270], 0
jmp 0x44e6f3
mov ecx, dword [ebp - 0x270]
add ecx, 1
mov dword [ebp - 0x270], ecx
cmp dword [ebp - 0x270], 6
jge 0x44e734
cmp dword [ebp - 0x1c], 0
jge 0x44e70a
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e720
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x468]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e6e4
mov dword [ebp - 4], 8
mov dword [ebp - 0x46c], 0
jmp 0x44e756
mov eax, dword [ebp - 0x46c]
add eax, 1
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0
jge 0x44e791
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44e785
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44e78c
and eax, 0xbc614e
jmp 0x44e78f
mov dword [ebp - 0x1c], eax
jmp 0x44e747
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e79f
jmp 0x44e7a7
mov dword [ebp - 4], 9
mov dword [ebp - 0x470], 0
jmp 0x44e7c9
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 5
jge 0x44e808
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44e7f8
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44e803
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44e806
mov dword [ebp - 0x1c], eax
jmp 0x44e7ba
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e816
jmp 0x44e81e
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x474], 0
jmp 0x44e840
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 0
jge 0x44e87b
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44e86f
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44e876
and eax, 0xbc614e
jmp 0x44e879
mov dword [ebp - 0x1c], eax
jmp 0x44e831
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e889
jmp 0x44e891
mov dword [ebp - 0x478], 0
jmp 0x44e8ac
mov edx, dword [ebp - 0x478]
add edx, 1
mov dword [ebp - 0x478], edx
cmp dword [ebp - 0x478], 1
jge 0x44e8ed
cmp dword [ebp - 0x1c], 0
jge 0x44e8c3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e8d9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x670]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e89d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x674], 0
jmp 0x44e90f
mov eax, dword [ebp - 0x674]
add eax, 1
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 5
jge 0x44e94e
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44e93e
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44e949
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44e94c
mov dword [ebp - 0x1c], eax
jmp 0x44e900
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e95c
jmp 0x44e964
mov dword [ebp - 0x678], 1
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x680], 2
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x688], 0
jmp 0x44e9a7
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 3
jge 0x44e9e8
mov eax, dword [ebp - 0x678]
add eax, dword [ebp - 0x67c]
mov dword [ebp - 0x680], eax
mov ecx, dword [ebp - 0x67c]
mov dword [ebp - 0x678], ecx
mov edx, dword [ebp - 0x680]
mov dword [ebp - 0x67c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x680]
mov dword [ebp - 0x1c], eax
jmp 0x44e998
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x68c], 0
jmp 0x44ea13
mov edx, dword [ebp - 0x68c]
add edx, 1
mov dword [ebp - 0x68c], edx
cmp dword [ebp - 0x68c], 2
jge 0x44ea49
mov eax, dword [ebp - 0x68c]
and eax, 0x80000001
jns 0x44ea2e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44ea3e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44ea47
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44ea04
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ea57
jmp 0x44ea74
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x690], 0
jmp 0x44ea96
mov edx, dword [ebp - 0x690]
add edx, 1
mov dword [ebp - 0x690], edx
cmp dword [ebp - 0x690], 5
jge 0x44ead5
mov eax, dword [ebp - 0x690]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44eac5
mov eax, dword [ebp - 0x690]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ead0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44ead3
mov dword [ebp - 0x1c], eax
jmp 0x44ea87
mov dword [ebp - 4], 0xfffffffe
call fcn.0044eae3
jmp 0x44eaeb
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x694], 0
jmp 0x44eb0d
mov edx, dword [ebp - 0x694]
add edx, 1
mov dword [ebp - 0x694], edx
cmp dword [ebp - 0x694], 7
jge 0x44eb4c
mov eax, dword [ebp - 0x694]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44eb3c
mov eax, dword [ebp - 0x694]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44eb47
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44eb4a
mov dword [ebp - 0x1c], eax
jmp 0x44eafe
mov dword [ebp - 4], 0xfffffffe
call fcn.0044eb5a
jmp 0x44eb62
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x698], 0
jmp 0x44eb84
mov edx, dword [ebp - 0x698]
add edx, 1
mov dword [ebp - 0x698], edx
cmp dword [ebp - 0x698], 2
jge 0x44ebcb
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44eba1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44ebb1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44ebc9
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ebc9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44eb75
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ebd9
jmp 0x44ebe8
mov dword [ebp - 0x69c], 0
jmp 0x44ec03
mov ecx, dword [ebp - 0x69c]
add ecx, 1
mov dword [ebp - 0x69c], ecx
cmp dword [ebp - 0x69c], 3
jge 0x44ec1c
mov edx, dword [ebp - 0x69c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44ebf4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ec30
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ec46
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x6a0], 0
jmp 0x44ec68
mov edx, dword [ebp - 0x6a0]
add edx, 1
mov dword [ebp - 0x6a0], edx
cmp dword [ebp - 0x6a0], 3
jge 0x44ecaf
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44ec85
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44ec95
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44ecad
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ecad
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44ec59
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ecbd
jmp 0x44eccc
mov dword [ebp - 0x6a4], 1
mov dword [ebp - 0x6a8], 1
mov dword [ebp - 0x6ac], 2
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x6b4], 0
jmp 0x44ed0f
mov ecx, dword [ebp - 0x6b4]
add ecx, 1
mov dword [ebp - 0x6b4], ecx
cmp dword [ebp - 0x6b4], 4
jge 0x44ed50
mov edx, dword [ebp - 0x6a4]
add edx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6ac], edx
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x6a4], eax
mov ecx, dword [ebp - 0x6ac]
mov dword [ebp - 0x6a8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6ac]
mov dword [ebp - 0x1c], edx
jmp 0x44ed00
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x6b8], 0
jmp 0x44ed7b
mov ecx, dword [ebp - 0x6b8]
add ecx, 1
mov dword [ebp - 0x6b8], ecx
cmp dword [ebp - 0x6b8], 3
jge 0x44edba
mov eax, dword [ebp - 0x6b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44edaa
mov eax, dword [ebp - 0x6b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44edb5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44edb8
mov dword [ebp - 0x1c], eax
jmp 0x44ed6c
mov dword [ebp - 4], 0xfffffffe
call fcn.0044edc8
jmp 0x44edd0
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x6bc], 0
jmp 0x44edf2
mov edx, dword [ebp - 0x6bc]
add edx, 1
mov dword [ebp - 0x6bc], edx
cmp dword [ebp - 0x6bc], 4
jge 0x44ee39
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44ee0f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44ee1f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44ee37
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ee37
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44ede3
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ee47
jmp 0x44ee56
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x6c0], 0
jmp 0x44ee78
mov ecx, dword [ebp - 0x6c0]
add ecx, 1
mov dword [ebp - 0x6c0], ecx
cmp dword [ebp - 0x6c0], 4
jge 0x44eeaf
mov edx, dword [ebp - 0x6c0]
and edx, 0x80000001
jns 0x44ee94
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x44eea4
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x44eead
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44ee69
mov dword [ebp - 4], 0xfffffffe
call fcn.0044eebd
jmp 0x44eedb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x6c4], 0
jmp 0x44eefd
mov ecx, dword [ebp - 0x6c4]
add ecx, 1
mov dword [ebp - 0x6c4], ecx
cmp dword [ebp - 0x6c4], 1
jge 0x44ef38
mov eax, dword [ebp - 0x6c4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ef2c
mov eax, dword [ebp - 0x6c4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ef33
and eax, 0xbc614e
jmp 0x44ef36
mov dword [ebp - 0x1c], eax
jmp 0x44eeee
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ef46
jmp 0x44ef4e
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x6c8], 0
jmp 0x44ef70
mov edx, dword [ebp - 0x6c8]
add edx, 1
mov dword [ebp - 0x6c8], edx
cmp dword [ebp - 0x6c8], 3
jge 0x44efaf
mov eax, dword [ebp - 0x6c8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ef9f
mov eax, dword [ebp - 0x6c8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44efaa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44efad
mov dword [ebp - 0x1c], eax
jmp 0x44ef61
mov dword [ebp - 4], 0xfffffffe
call fcn.0044efbd
jmp 0x44efc5
mov dword [ebp - 0x6cc], 1
mov dword [ebp - 0x6d0], 1
mov dword [ebp - 0x6d4], 2
mov dword [ebp - 0x6d8], 0
mov dword [ebp - 0x6dc], 0
jmp 0x44f008
mov edx, dword [ebp - 0x6dc]
add edx, 1
mov dword [ebp - 0x6dc], edx
cmp dword [ebp - 0x6dc], 3
jge 0x44f049
mov eax, dword [ebp - 0x6cc]
add eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x6d4], eax
mov ecx, dword [ebp - 0x6d0]
mov dword [ebp - 0x6cc], ecx
mov edx, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x1c], eax
jmp 0x44eff9
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6e0], 1
mov dword [ebp - 0x6e4], 1
mov dword [ebp - 0x6e8], 2
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x6f0], 0
jmp 0x44f095
mov edx, dword [ebp - 0x6f0]
add edx, 1
mov dword [ebp - 0x6f0], edx
cmp dword [ebp - 0x6f0], 4
jge 0x44f0d6
mov eax, dword [ebp - 0x6e0]
add eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6e4]
mov dword [ebp - 0x6e0], ecx
mov edx, dword [ebp - 0x6e8]
mov dword [ebp - 0x6e4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x1c], eax
jmp 0x44f086
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x44f0fa
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
cmp dword [ebp - 0x6f4], 1
jge 0x44f13b
cmp dword [ebp - 0x1c], 0
jge 0x44f111
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44f127
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8f0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44f0eb
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x8f4], 0
jmp 0x44f15d
mov eax, dword [ebp - 0x8f4]
add eax, 1
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 2
jge 0x44f19c
mov eax, dword [ebp - 0x8f4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44f18c
mov eax, dword [ebp - 0x8f4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44f197
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44f19a
mov dword [ebp - 0x1c], eax
jmp 0x44f14e
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f1aa
jmp 0x44f1b2
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x8f8], 0
jmp 0x44f1d4
mov edx, dword [ebp - 0x8f8]
add edx, 1
mov dword [ebp - 0x8f8], edx
cmp dword [ebp - 0x8f8], 2
jge 0x44f20a
mov eax, dword [ebp - 0x8f8]
and eax, 0x80000001
jns 0x44f1ef
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44f1ff
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44f208
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44f1c5
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f218
jmp 0x44f235
mov dword [ebp - 0x8fc], 0
jmp 0x44f250
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
cmp dword [ebp - 0x8fc], 3
jge 0x44f269
mov eax, dword [ebp - 0x8fc]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44f241
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44f27d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44f293
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x900], 0
jmp 0x44f2b5
mov edx, dword [ebp - 0x900]
add edx, 1
mov dword [ebp - 0x900], edx
cmp dword [ebp - 0x900], 1
jge 0x44f2f0
mov eax, dword [ebp - 0x900]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44f2e4
mov eax, dword [ebp - 0x900]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44f2eb
and eax, 0xbc614e
jmp 0x44f2ee
mov dword [ebp - 0x1c], eax
jmp 0x44f2a6
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f2fe
jmp 0x44f306
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x904], 0
jmp 0x44f328
mov edx, dword [ebp - 0x904]
add edx, 1
mov dword [ebp - 0x904], edx
cmp dword [ebp - 0x904], 3
jge 0x44f36f
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44f345
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44f355
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44f36d
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44f36d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44f319
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f37d
jmp 0x44f38c
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x908], 0
jmp 0x44f3ae
mov ecx, dword [ebp - 0x908]
add ecx, 1
mov dword [ebp - 0x908], ecx
cmp dword [ebp - 0x908], 3
jge 0x44f3f5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x44f3cb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44f3db
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44f3f3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44f3f3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x44f39f
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f403
jmp 0x44f412
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x90c], 0
jmp 0x44f434
mov ecx, dword [ebp - 0x90c]
add ecx, 1
mov dword [ebp - 0x90c], ecx
cmp dword [ebp - 0x90c], 2
jge 0x44f46b
mov edx, dword [ebp - 0x90c]
and edx, 0x80000001
jns 0x44f450
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x44f460
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x44f469
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44f425
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f479
jmp 0x44f497
mov dword [ebp - 0x910], 1
mov dword [ebp - 0x914], 1
mov dword [ebp - 0x918], 2
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x920], 0
jmp 0x44f4da
mov ecx, dword [ebp - 0x920]
add ecx, 1
mov dword [ebp - 0x920], ecx
cmp dword [ebp - 0x920], 2
jge 0x44f51b
mov edx, dword [ebp - 0x910]
add edx, dword [ebp - 0x914]
mov dword [ebp - 0x918], edx
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x910], eax
mov ecx, dword [ebp - 0x918]
mov dword [ebp - 0x914], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x918]
mov dword [ebp - 0x1c], edx
jmp 0x44f4cb
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x924], 0
jmp 0x44f546
mov ecx, dword [ebp - 0x924]
add ecx, 1
mov dword [ebp - 0x924], ecx
cmp dword [ebp - 0x924], 0
jge 0x44f585
mov eax, dword [ebp - 0x924]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44f575
mov eax, dword [ebp - 0x924]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44f580
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44f583
mov dword [ebp - 0x1c], eax
jmp 0x44f537
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f593
jmp 0x44f59b
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x928], 0
jmp 0x44f5bd
cmp dword [ebp - 0x928], 0
jge 0x44f5f3
mov eax, dword [ebp - 0x928]
and eax, 0x80000001
jns 0x44f5d8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44f5e8
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f601
jmp 0x44f61e
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x92c], 0
jmp 0x44f640