Function at 0x44cfa0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x620781
mov eax, dword fs:[0]
push eax
sub esp, 0xeac
mov eax, dword [0x68d9ac]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xd04], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xd14], eax
mov eax, dword [ebx]
sub eax, 0x10
push eax
call fcn.00407060
add esp, 4
lea edi, [eax + 0x10]
mov dword [ebp - 0xd0c], edi
mov esi, dword [edi - 0xc]
mov dword [ebp - 4], 0
test esi, esi
js 0x44df8d
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x44d038
push esi
lea ecx, [ebp - 0xd0c]
call fcn.00407d40
mov edi, dword [ebp - 0xd0c]
lea eax, [esi + 1]
push eax
push edi
call fcn.005f62ee
add esp, 8
cmp esi, dword [edi - 8]
jg 0x44df8d
xor eax, eax
mov dword [edi - 0xc], esi
mov word [edi + esi*2], ax
cmp dword [edi - 0xc], eax
jl 0x44df4e
push str..lnk
push edi
call fcn.005e339a
add esp, 8
test eax, eax
je 0x44df4e
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
je 0x44df4e
lea eax, [ebp - 0xcf0]
mov dword [ebp - 0xcf0], 0
push eax
push 0x637b4c
push 1
push 0
push 0x637b9c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x44df37
mov ecx, dword [ebp - 0xcf0]
test ecx, ecx
je 0x44df37
mov dword [ebp - 0xcf4], 0
mov eax, dword [ecx]
lea edx, [ebp - 0xcf4]
push edx
push 0x637b8c
push ecx
mov byte [ebp - 4], 1
call dword [eax]
test eax, eax
mov eax, dword [ebp - 0xcf4]
js 0x44df29
test eax, eax
je 0x44df29
mov ecx, dword [eax]
push 0
push dword [ebx]
push eax
call dword [ecx + 0x14]
test eax, eax
jns 0x44d11e
mov eax, dword [ebp - 0xcf4]
mov byte [ebp - 4], 0
test eax, eax
je 0x44df37
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x44df37
push 0x208
lea eax, [ebp - 0x27c]
push 0
push eax
call fcn.005e3240
mov eax, dword [ebp - 0xcf0]
lea edx, [ebp - 0xd18]
add esp, 0xc
mov ecx, dword [eax]
push edx
push 0x104
lea edx, [ebp - 0x27c]
push edx
push eax
call dword [ecx + 0x40]
push 0x208
lea eax, [ebp - 0x484]
push 0
push eax
call fcn.005e3240
add esp, 0xc
lea eax, [ebp - 0x484]
push 0x104
push eax
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea ecx, [ebp - 0x484]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44d190
sub ecx, edx
lea eax, [ebp - 0x484]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0xd04]
push eax
call fcn.0040b130
cmp dword [ebp + 0x18], 0
je 0x44d1d3
mov eax, dword [ebp - 0xcf0]
push 0x84
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x4c]
test eax, eax
js 0x44defe
mov dword [ebp - 0xcfc], 0
mov dword [ebp - 0xd08], 0
mov dword [ebp - 0xd00], 0
push 0x820
lea eax, [ebp - 0xca4]
mov byte [ebp - 4], 2
push 0
push eax
call fcn.005e3240
mov eax, dword [ebp - 0xcf0]
lea edx, [ebp - 0xcfc]
add esp, 0xc
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x10]
test eax, eax
je 0x44d23f
mov eax, dword [ebp - 0xd00]
mov byte [ebp - 4], 1
test eax, eax
je 0x44defe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x44defe
lea eax, [ebp - 0xd08]
push eax
lea eax, [ebp - 0xd00]
push eax
push 0x637b2c
push dword [ebp - 0xcfc]
call dword [sym.imp.SHELL32.dll_SHBindToParent]
mov esi, dword [ebp - 0xd00]
test eax, eax
jne 0x44def0
test esi, esi
je 0x44def0
push 0x108
lea eax, [ebp - 0xeb8]
push 0
push eax
call fcn.005e3240
mov eax, dword [esi]
lea ecx, [ebp - 0xeb8]
add esp, 0xc
push ecx
push 0x8000
push dword [ebp - 0xd08]
push esi
call dword [eax + 0x2c]
test eax, eax
jns 0x44d2c1
push dword [ebp - 0xcfc]
call dword [sym.imp.SHELL32.dll_ILFree]
mov dword [ebp - 0xcfc], 0
jmp 0x44d222
push 0x104
lea eax, [ebp - 0xca4]
push eax
push dword [ebp - 0xd08]
lea eax, [ebp - 0xeb8]
push eax
call dword [sym.imp.SHLWAPI.dll_StrRetToBufW]
test eax, eax
jne 0x44d30e
lea ecx, [ebp - 0xca4]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44d2f0
sub ecx, edx
lea eax, [ebp - 0xca4]
sar ecx, 1
push ecx
push eax
mov ecx, ebx
call fcn.0040b130
push dword [ebp - 0xcfc]
call dword [sym.imp.SHELL32.dll_ILFree]
mov dword [ebp - 0xcfc], 0
call fcn.0047ce80
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44d61a
push 0x53
push str.d:jenkins.jenkinsworkspacehalodeskcommonlibinclude_searchapp_searchappdef.cpp
lea ecx, [ebp - 0xcbc]
mov dword [ebp - 0xcac], eax
mov dword [ebp - 0xca8], 0xf
mov byte [ebp - 0xcbc], al
call fcn.004080e0
push 3
push 0x6306cc
lea ecx, [ebp - 0xcd4]
mov byte [ebp - 4], 3
mov dword [ebp - 0xcc4], 0
mov dword [ebp - 0xcc0], 0xf
mov byte [ebp - 0xcd4], 0
call fcn.004080e0
mov byte [ebp - 4], 4
call fcn.0047ce80
push 1
push 2
lea ecx, [ebp - 0xdb0]
mov dword [ebp - 0xcf8], eax
call fcn.0042a990
push 0xffffffffffffffff
push 0x630678
lea ecx, [ebp - 0xcbc]
mov byte [ebp - 4], 5
call fcn.00421480
push 0xffffffffffffffff
push 0x62f39c
lea ecx, [ebp - 0xcbc]
mov dword [ebp - 0xd04], eax
call fcn.00421480
push 0x64
mov esi, eax
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.005e3240
add esp, 0xc
cmp esi, 0xffffffff
je 0x44d4ee
mov ecx, dword [ebp - 0xd04]
lea eax, [esi - 1]
cmp ecx, eax
jae 0x44d4ee
mov eax, dword [ebp - 0xcac]
lea edx, [ecx + 1]
mov dword [ebp - 0xcdc], 0
mov dword [ebp - 0xcd8], 0xf
mov byte [ebp - 0xcec], 0
cmp eax, edx
jb 0x44df97
sub esi, ecx
sub eax, edx
lea ecx, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0xca8], 0x10
lea eax, [ebp - 0xcbc]
cmovae eax, dword [ebp - 0xcbc]
push ecx
add eax, edx
lea ecx, [ebp - 0xcec]
push eax
call fcn.004080e0
cmp dword [ebp - 0xcd8], 0x10
lea eax, [ebp - 0xcec]
cmovae eax, dword [ebp - 0xcec]
push eax
push 0x95
lea eax, [ebp - 0x74]
push str.__4d___s_
push eax
call fcn.0041fd10
mov edx, dword [ebp - 0xcd8]
add esp, 0x10
cmp edx, 0x10
jb 0x44d4d1
mov ecx, dword [ebp - 0xcec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44d4c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44df9c
push edx
push ecx
call fcn.004f9a35
add esp, 8
mov dword [ebp - 0xcdc], 0
mov dword [ebp - 0xcd8], 0xf
mov byte [ebp - 0xcec], 0
jmp 0x44d504
push 0x95
lea eax, [ebp - 0x74]
push str.__4d_
push eax
call fcn.0041fd10
add esp, 0xc
cmp dword [ebp - 0xcc0], 0x10
lea eax, [ebp - 0xcd4]
cmovae eax, dword [ebp - 0xcd4]
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.00420890
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.00420890
lea eax, [ebp - 0xdb0]
mov byte [ebp - 4], 6
push str.step1:
push eax
call fcn.00420890
mov eax, dword [ebx]
mov ecx, 0x630668
test eax, eax
cmovne ecx, eax
lea eax, [ebp - 0xdb0]
push ecx
push eax
call fcn.0040c9f0
mov ecx, dword [ebp - 0xcf8]
lea edx, [ebp - 0xdb0]
add esp, 0x20
mov eax, dword [ecx]
push edx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xdb0]
call fcn.004209e0
mov edx, dword [ebp - 0xcc0]
mov byte [ebp - 4], 3
cmp edx, 0x10
jb 0x44d5c1
mov ecx, dword [ebp - 0xcd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44d5b7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dfa1
push edx
push ecx
call fcn.004f9a35
add esp, 8
mov edx, dword [ebp - 0xca8]
mov dword [ebp - 0xcc4], 0
mov dword [ebp - 0xcc0], 0xf
mov byte [ebp - 0xcd4], 0
mov byte [ebp - 4], 2
cmp edx, 0x10
jb 0x44d61a
mov ecx, dword [ebp - 0xcbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44d610
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dfa6
push edx
push ecx
call fcn.004f9a35
add esp, 8
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x44d222
mov eax, dword [ebp - 0xcf0]
lea edx, [ebp - 0x27c]
push 2
push 0
push 0x104
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
lea ecx, [ebp - 0x27c]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44d650
sub ecx, edx
lea eax, [ebp - 0x27c]
sar ecx, 1
push ecx
push eax
mov ecx, ebx
call fcn.0040b130
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
je 0x44d6d6
mov eax, dword [ebp - 0xcf0]
lea edx, [ebp - 0xca4]
push 0x104
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
lea ecx, [ebp - 0x27c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44d697
sub ecx, edx
lea eax, [ebp - 0x27c]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0xd10]
push eax
call fcn.0040b130
cmp dword [ebp + 0x18], 0
je 0x44d6d6
mov eax, dword [ebp - 0xcf0]
push 0x104
push dword [ebp - 0xd14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
call fcn.0047ce80
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44d982
push 0x53
push str.d:jenkins.jenkinsworkspacehalodeskcommonlibinclude_searchapp_searchappdef.cpp
lea ecx, [ebp - 0xcd4]
mov dword [ebp - 0xcc4], eax
mov dword [ebp - 0xcc0], 0xf
mov byte [ebp - 0xcd4], al
call fcn.004080e0
push 3
push 0x6306cc
lea ecx, [ebp - 0xcbc]
mov byte [ebp - 4], 7
mov dword [ebp - 0xcac], 0
mov dword [ebp - 0xca8], 0xf
mov byte [ebp - 0xcbc], 0
call fcn.004080e0
mov byte [ebp - 4], 8
call fcn.0047ce80
push 1
push 2
lea ecx, [ebp - 0xdb0]
mov dword [ebp - 0xd04], eax
call fcn.0042a990
push 0xffffffffffffffff
push 0x630678
lea ecx, [ebp - 0xcd4]
mov byte [ebp - 4], 9
call fcn.00421480
push 0xffffffffffffffff
push 0x62f39c
lea ecx, [ebp - 0xcd4]
mov dword [ebp - 0xcf8], eax
call fcn.00421480
push 0x64
mov esi, eax
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.005e3240
add esp, 0xc
cmp esi, 0xffffffff
je 0x44d856
mov ecx, dword [ebp - 0xcf8]
lea eax, [esi - 1]
cmp ecx, eax
jae 0x44d856
mov eax, dword [ebp - 0xcc4]
lea edx, [ecx + 1]
mov dword [ebp - 0xcdc], 0
mov dword [ebp - 0xcd8], 0xf
mov byte [ebp - 0xcec], 0
cmp eax, edx
jb 0x44dfab
sub esi, ecx
sub eax, edx
lea ecx, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0xcc0], 0x10
lea eax, [ebp - 0xcd4]
cmovae eax, dword [ebp - 0xcd4]
push ecx
add eax, edx
lea ecx, [ebp - 0xcec]
push eax
call fcn.004080e0
cmp dword [ebp - 0xcd8], 0x10
lea eax, [ebp - 0xcec]
cmovae eax, dword [ebp - 0xcec]
push eax
push 0xa6
lea eax, [ebp - 0x74]
push str.__4d___s_
push eax
call fcn.0041fd10
add esp, 0x10
lea ecx, [ebp - 0xcec]
call fcn.00406be0
jmp 0x44d86c
push 0xa6
lea eax, [ebp - 0x74]
push str.__4d_
push eax
call fcn.0041fd10
add esp, 0xc
cmp dword [ebp - 0xca8], 0x10
lea eax, [ebp - 0xcbc]
cmovae eax, dword [ebp - 0xcbc]
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.00420890
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.00420890
lea eax, [ebp - 0xdb0]
mov byte [ebp - 4], 0xa
push str.step2:
push eax
call fcn.00420890
mov eax, dword [ebx]
mov ecx, 0x630668
test eax, eax
cmovne ecx, eax
lea eax, [ebp - 0xdb0]
push ecx
push eax
call fcn.0040c9f0
mov ecx, dword [ebp - 0xd04]
lea edx, [ebp - 0xdb0]
add esp, 0x20
mov eax, dword [ecx]
push edx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xdb0]
call fcn.004209e0
mov edx, dword [ebp - 0xca8]
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x44d929
mov ecx, dword [ebp - 0xcbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44d91f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dfb0
push edx
push ecx
call fcn.004f9a35
add esp, 8
mov edx, dword [ebp - 0xcc0]
mov dword [ebp - 0xcac], 0
mov dword [ebp - 0xca8], 0xf
mov byte [ebp - 0xcbc], 0
mov byte [ebp - 4], 2
cmp edx, 0x10
jb 0x44d982
mov ecx, dword [ebp - 0xcd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44d978
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dfb5
push edx
push ecx
call fcn.004f9a35
add esp, 8
call fcn.0047ce80
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44dc2a
push 0x53
push str.d:jenkins.jenkinsworkspacehalodeskcommonlibinclude_searchapp_searchappdef.cpp
lea ecx, [ebp - 0xcd4]
mov dword [ebp - 0xcc4], eax
mov dword [ebp - 0xcc0], 0xf
mov byte [ebp - 0xcd4], al
call fcn.004080e0
push 3
push 0x6306cc
lea ecx, [ebp - 0xcbc]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xcac], 0
mov dword [ebp - 0xca8], 0xf
mov byte [ebp - 0xcbc], 0
call fcn.004080e0
mov byte [ebp - 4], 0xc
call fcn.0047ce80
push 1
push 2
lea ecx, [ebp - 0xdb0]
mov dword [ebp - 0xcf8], eax
call fcn.0042a990
push 0xffffffffffffffff
push 0x630678
lea ecx, [ebp - 0xcd4]
mov byte [ebp - 4], 0xd
call fcn.00421480
push 0xffffffffffffffff
push 0x62f39c
lea ecx, [ebp - 0xcd4]
mov ebx, eax
call fcn.00421480
push 0x64
mov esi, eax
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.005e3240
add esp, 0xc
cmp esi, 0xffffffff
je 0x44daf8
lea eax, [esi - 1]
cmp ebx, eax
jae 0x44daf8
mov eax, dword [ebp - 0xcc4]
lea edx, [ebx + 1]
mov dword [ebp - 0xcdc], 0
mov dword [ebp - 0xcd8], 0xf
mov byte [ebp - 0xcec], 0
cmp eax, edx
jb 0x44dfba
sub esi, ebx
sub eax, edx
lea ecx, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0xcc0], 0x10
lea eax, [ebp - 0xcd4]
cmovae eax, dword [ebp - 0xcd4]
push ecx
add eax, edx
lea ecx, [ebp - 0xcec]
push eax
call fcn.004080e0
cmp dword [ebp - 0xcd8], 0x10
lea eax, [ebp - 0xcec]
cmovae eax, dword [ebp - 0xcec]
push eax
push 0xa7
lea eax, [ebp - 0x74]
push str.__4d___s_
push eax
call fcn.0041fd10
add esp, 0x10
lea ecx, [ebp - 0xcec]
call fcn.00406be0
jmp 0x44db0e
push 0xa7
lea eax, [ebp - 0x74]
push str.__4d_
push eax
call fcn.0041fd10
add esp, 0xc
cmp dword [ebp - 0xca8], 0x10
lea eax, [ebp - 0xcbc]
cmovae eax, dword [ebp - 0xcbc]
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.00420890
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.00420890
lea eax, [ebp - 0xdb0]
mov byte [ebp - 4], 0xe
push str.arg:
push eax
call fcn.00420890
mov eax, dword [ebp - 0xd10]
mov ecx, 0x630668
mov eax, dword [eax]
test eax, eax
cmovne ecx, eax
lea eax, [ebp - 0xdb0]
push ecx
push eax
call fcn.0040c9f0
mov ecx, dword [ebp - 0xcf8]
lea edx, [ebp - 0xdb0]
add esp, 0x20
mov eax, dword [ecx]
push edx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xdb0]
call fcn.004209e0
mov edx, dword [ebp - 0xca8]
mov byte [ebp - 4], 0xb
cmp edx, 0x10
jb 0x44dbd1
mov ecx, dword [ebp - 0xcbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dbc7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dfbf
push edx
push ecx
call fcn.004f9a35
add esp, 8
mov edx, dword [ebp - 0xcc0]
mov dword [ebp - 0xcac], 0
mov dword [ebp - 0xca8], 0xf
mov byte [ebp - 0xcbc], 0
mov byte [ebp - 4], 2
cmp edx, 0x10
jb 0x44dc2a
mov ecx, dword [ebp - 0xcd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dc20
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dfc4
push edx
push ecx
call fcn.004f9a35
add esp, 8
call fcn.0047ce80
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44d222
push 0x53
push str.d:jenkins.jenkinsworkspacehalodeskcommonlibinclude_searchapp_searchappdef.cpp
lea ecx, [ebp - 0xcec]
mov dword [ebp - 0xcdc], eax
mov dword [ebp - 0xcd8], 0xf
mov byte [ebp - 0xcec], al
call fcn.004080e0
push 3
push 0x6306cc
lea ecx, [ebp - 0xcbc]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0xcac], 0
mov dword [ebp - 0xca8], 0xf
mov byte [ebp - 0xcbc], 0
call fcn.004080e0
mov byte [ebp - 4], 0x10
call fcn.0047ce80
push 1
push 2
lea ecx, [ebp - 0xdb0]
mov dword [ebp - 0xcf8], eax
call fcn.0042a990
push 0xffffffffffffffff
push 0x630678
lea ecx, [ebp - 0xcec]
mov byte [ebp - 4], 0x11
call fcn.00421480
push 0xffffffffffffffff
push 0x62f39c
lea ecx, [ebp - 0xcec]
mov ebx, eax
call fcn.00421480
push 0x64
mov esi, eax
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.005e3240
add esp, 0xc
cmp esi, 0xffffffff
je 0x44dda0
lea eax, [esi - 1]
cmp ebx, eax
jae 0x44dda0
mov eax, dword [ebp - 0xcdc]
lea edx, [ebx + 1]
mov dword [ebp - 0xcc4], 0
mov dword [ebp - 0xcc0], 0xf
mov byte [ebp - 0xcd4], 0
cmp eax, edx
jb 0x44dfc9
sub esi, ebx
sub eax, edx
lea ecx, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0xcd8], 0x10
lea eax, [ebp - 0xcec]
cmovae eax, dword [ebp - 0xcec]
push ecx
add eax, edx
lea ecx, [ebp - 0xcd4]
push eax
call fcn.004080e0
cmp dword [ebp - 0xcc0], 0x10
lea eax, [ebp - 0xcd4]
cmovae eax, dword [ebp - 0xcd4]
push eax
push 0xa8
lea eax, [ebp - 0x74]
push str.__4d___s_
push eax
call fcn.0041fd10
add esp, 0x10
lea ecx, [ebp - 0xcd4]
call fcn.00406be0
jmp 0x44ddb6
push 0xa8
lea eax, [ebp - 0x74]
push str.__4d_
push eax
call fcn.0041fd10
add esp, 0xc
cmp dword [ebp - 0xca8], 0x10
lea eax, [ebp - 0xcbc]
cmovae eax, dword [ebp - 0xcbc]
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.00420890
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.00420890
lea eax, [ebp - 0xdb0]
mov byte [ebp - 4], 0x12
push str.working_dir
push eax
call fcn.00420890
mov ecx, dword [ebp - 0xd14]
mov eax, 0x630668
test ecx, ecx
cmovne eax, ecx
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.0040c9f0
mov ecx, dword [ebp - 0xcf8]
lea edx, [ebp - 0xdb0]
add esp, 0x20
mov eax, dword [ecx]
push edx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xdb0]
call fcn.004209e0
mov edx, dword [ebp - 0xca8]
mov byte [ebp - 4], 0xf
cmp edx, 0x10
jb 0x44de77
mov ecx, dword [ebp - 0xcbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44de6d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dfce
push edx
push ecx
call fcn.004f9a35
add esp, 8
mov edx, dword [ebp - 0xcd8]
mov dword [ebp - 0xcac], 0
mov dword [ebp - 0xca8], 0xf
mov byte [ebp - 0xcbc], 0
mov byte [ebp - 4], 2
cmp edx, 0x10
jb 0x44ded0
mov ecx, dword [ebp - 0xcec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dec6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dfd3
push edx
push ecx
call fcn.004f9a35
add esp, 8
mov dword [ebp - 0xcdc], 0
mov dword [ebp - 0xcd8], 0xf
mov byte [ebp - 0xcec], 0
jmp 0x44d222
mov byte [ebp - 4], 1
test esi, esi
je 0x44defe
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov eax, dword [ebp - 0xcf4]
mov byte [ebp - 4], 0
test eax, eax
je 0x44df12
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xcf0]
test ecx, ecx
je 0x44df22
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, 1
jmp 0x44df50
mov byte [ebp - 4], 0
test eax, eax
je 0x44df37
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, ebx
call fcn.00407150
mov ecx, dword [ebp - 0xcf0]
test ecx, ecx
je 0x44df4e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
xor esi, esi
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x44df6f
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f9a43
mov esp, ebp
pop ebp
ret
push 0x80070057
call fcn.00407030
call fcn.00417360
call fcn.005e6a79
call fcn.005e6a79
call fcn.005e6a79
call fcn.00417360
call fcn.005e6a79
call fcn.005e6a79
call fcn.00417360
call fcn.005e6a79
call fcn.005e6a79
call fcn.00417360
call fcn.005e6a79
call fcn.005e6a79
int3