Function at 0x4411c0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b4240
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff018
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x80], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x44120f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1d
jge 0x441222
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x441206
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441236
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44124c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x44127a
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x20
jge 0x4412a0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x441271
mov ecx, dword [ebp - 0x1c]
add ecx, 0x20
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], 0
jmp 0x4412c2
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0xf
jge 0x4412f2
mov eax, dword [ebp - 0x38]
and eax, 0x80000001
jns 0x4412d7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4412e7
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4412f0
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4412b9
mov dword [ebp - 4], 0xfffffffe
call fcn.00441300
jmp 0x44131d
mov dword [ebp - 4], 1
mov dword [ebp - 0x3c], 0
jmp 0x441336
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 2
jge 0x441368
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44135c
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441363
and eax, 0xbc614e
jmp 0x441366
mov dword [ebp - 0x1c], eax
jmp 0x44132d
mov dword [ebp - 4], 0xfffffffe
call fcn.00441376
jmp 0x44137e
mov dword [ebp - 4], 2
mov dword [ebp - 0x40], 0
jmp 0x441397
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xe
jge 0x4413c7
mov eax, dword [ebp - 0x40]
and eax, 0x80000001
jns 0x4413ac
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4413bc
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4413c5
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x44138e
mov dword [ebp - 4], 0xfffffffe
call fcn.004413d5
jmp 0x4413f2
mov dword [ebp - 4], 3
mov dword [ebp - 0x44], 0
jmp 0x44140b
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0xf
jge 0x44143d
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441431
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441438
and eax, 0xbc614e
jmp 0x44143b
mov dword [ebp - 0x1c], eax
jmp 0x441402
mov dword [ebp - 4], 0xfffffffe
call fcn.0044144b
jmp 0x441453
mov dword [ebp - 4], 4
mov dword [ebp - 0x48], 0
jmp 0x44146c
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x20
jge 0x4414b0
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x441486
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x441496
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4414ae
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4414ae
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x441463
mov dword [ebp - 4], 0xfffffffe
call fcn.004414be
jmp 0x4414cd
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
jmp 0x4414fb
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x5c], 0x1f
jge 0x441521
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x50]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x54]
mov dword [ebp - 0x1c], edx
jmp 0x4414f2
mov eax, dword [ebp - 0x1c]
add eax, 0x1f
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x60], 0
jmp 0x441543
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x60], 0x19
jge 0x441579
mov eax, dword [ebp - 0x60]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441569
mov eax, dword [ebp - 0x60]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441574
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x441577
mov dword [ebp - 0x1c], eax
jmp 0x44153a
mov dword [ebp - 4], 0xfffffffe
call fcn.00441587
jmp 0x44158f
mov dword [ebp - 0x64], 0
jmp 0x4415a1
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 0xf
jge 0x4415b4
mov eax, dword [ebp - 0x64]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x441598
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4415c8
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4415de
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x68], 0
jmp 0x4415f7
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 0xa
jge 0x441627
mov eax, dword [ebp - 0x68]
and eax, 0x80000001
jns 0x44160c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x44161c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x441625
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4415ee
mov dword [ebp - 4], 0xfffffffe
call fcn.00441635
jmp 0x441652
mov dword [ebp - 4], 7
mov dword [ebp - 0x6c], 0
jmp 0x44166b
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 0xb
jge 0x44169d
mov eax, dword [ebp - 0x6c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441691
mov eax, dword [ebp - 0x6c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441698
and eax, 0xbc614e
jmp 0x44169b
mov dword [ebp - 0x1c], eax
jmp 0x441662
mov dword [ebp - 4], 0xfffffffe
call fcn.004416ab
jmp 0x4416b3
mov dword [ebp - 0x70], 0
jmp 0x4416c5
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0x10
jge 0x4416d8
mov eax, dword [ebp - 0x70]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4416bc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4416ec
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441702
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x74], 0
jmp 0x44171b
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 0
jge 0x44174d
mov eax, dword [ebp - 0x74]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441741
mov eax, dword [ebp - 0x74]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441748
and eax, 0xbc614e
jmp 0x44174b
mov dword [ebp - 0x1c], eax
jmp 0x441712
mov dword [ebp - 4], 0xfffffffe
call fcn.0044175b
jmp 0x441763
mov dword [ebp - 4], 9
mov dword [ebp - 0x78], 0
jmp 0x44177c
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0xf
jge 0x4417b2
mov eax, dword [ebp - 0x78]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4417a2
mov eax, dword [ebp - 0x78]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4417ad
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4417b0
mov dword [ebp - 0x1c], eax
jmp 0x441773
mov dword [ebp - 4], 0xfffffffe
call fcn.004417c0
jmp 0x4417c8
mov dword [ebp - 0x7c], 0
jmp 0x4417da
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 9
jge 0x441818
cmp dword [ebp - 0x1c], 0
jge 0x4417ee
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x441804
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x278]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4417d1
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x27c], 0
jmp 0x44183a
mov eax, dword [ebp - 0x27c]
add eax, 1
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x441875
mov eax, dword [ebp - 0x27c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441869
mov eax, dword [ebp - 0x27c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441870
and eax, 0xbc614e
jmp 0x441873
mov dword [ebp - 0x1c], eax
jmp 0x44182b
mov dword [ebp - 4], 0xfffffffe
call fcn.00441883
jmp 0x44188b
mov dword [ebp - 0x280], 0
jmp 0x4418a6
mov edx, dword [ebp - 0x280]
add edx, 1
mov dword [ebp - 0x280], edx
cmp dword [ebp - 0x280], 4
jge 0x4418bf
mov eax, dword [ebp - 0x280]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x441897
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4418d3
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4418e9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x284], 0
jmp 0x441904
mov edx, dword [ebp - 0x284]
add edx, 1
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 5
jge 0x44191d
mov eax, dword [ebp - 0x284]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4418f5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441931
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441947
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x288], 0
jmp 0x441969
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 3
jge 0x4419a4
mov eax, dword [ebp - 0x288]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441998
mov eax, dword [ebp - 0x288]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44199f
and eax, 0xbc614e
jmp 0x4419a2
mov dword [ebp - 0x1c], eax
jmp 0x44195a
mov dword [ebp - 4], 0xfffffffe
call fcn.004419b2
jmp 0x4419ba
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x294], 2
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x29c], 0
jmp 0x4419fd
mov edx, dword [ebp - 0x29c]
add edx, 1
mov dword [ebp - 0x29c], edx
cmp dword [ebp - 0x29c], 7
jge 0x441a3e
mov eax, dword [ebp - 0x28c]
add eax, dword [ebp - 0x290]
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x290], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x294]
mov dword [ebp - 0x1c], eax
jmp 0x4419ee
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x2a0], 0
jmp 0x441a69
mov edx, dword [ebp - 0x2a0]
add edx, 1
mov dword [ebp - 0x2a0], edx
cmp dword [ebp - 0x2a0], 0
jge 0x441aa4
mov eax, dword [ebp - 0x2a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441a98
mov eax, dword [ebp - 0x2a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441a9f
and eax, 0xbc614e
jmp 0x441aa2
mov dword [ebp - 0x1c], eax
jmp 0x441a5a
mov dword [ebp - 4], 0xfffffffe
call fcn.00441ab2
jmp 0x441aba
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x2a4], 0
jmp 0x441adc
mov edx, dword [ebp - 0x2a4]
add edx, 1
mov dword [ebp - 0x2a4], edx
cmp dword [ebp - 0x2a4], 5
jge 0x441b23
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x441af9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x441b09
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x441b21
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441b21
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x441acd
mov dword [ebp - 4], 0xfffffffe
call fcn.00441b31
jmp 0x441b40
mov dword [ebp - 0x2a8], 0
jmp 0x441b5b
mov ecx, dword [ebp - 0x2a8]
add ecx, 1
mov dword [ebp - 0x2a8], ecx
cmp dword [ebp - 0x2a8], 0
jge 0x441b74
mov edx, dword [ebp - 0x2a8]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x441b4c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441b88
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441b9e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x2ac], 0
jmp 0x441bb9
mov edx, dword [ebp - 0x2ac]
add edx, 1
mov dword [ebp - 0x2ac], edx
cmp dword [ebp - 0x2ac], 0
jge 0x441bd2
mov eax, dword [ebp - 0x2ac]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x441baa
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441be6
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441bfc
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x2b0], 0
jmp 0x441c17
mov edx, dword [ebp - 0x2b0]
add edx, 1
mov dword [ebp - 0x2b0], edx
cmp dword [ebp - 0x2b0], 1
jge 0x441c30
mov eax, dword [ebp - 0x2b0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x441c08
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441c44
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441c5a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x2bc], 2
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2c4], 0
jmp 0x441c9d
mov edx, dword [ebp - 0x2c4]
add edx, 1
mov dword [ebp - 0x2c4], edx
cmp dword [ebp - 0x2c4], 6
jge 0x441cde
mov eax, dword [ebp - 0x2b4]
add eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x2bc], eax
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2b4], ecx
mov edx, dword [ebp - 0x2bc]
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x1c], eax
jmp 0x441c8e
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x2c8], 0
jmp 0x441d09
mov edx, dword [ebp - 0x2c8]
add edx, 1
mov dword [ebp - 0x2c8], edx
cmp dword [ebp - 0x2c8], 5
jge 0x441d44
mov eax, dword [ebp - 0x2c8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441d38
mov eax, dword [ebp - 0x2c8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441d3f
and eax, 0xbc614e
jmp 0x441d42
mov dword [ebp - 0x1c], eax
jmp 0x441cfa
mov dword [ebp - 4], 0xfffffffe
call fcn.00441d52
jmp 0x441d5a
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x2cc], 0
jmp 0x441d7c
mov edx, dword [ebp - 0x2cc]
add edx, 1
mov dword [ebp - 0x2cc], edx
cmp dword [ebp - 0x2cc], 5
jge 0x441dbb
mov eax, dword [ebp - 0x2cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441dab
mov eax, dword [ebp - 0x2cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441db6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x441db9
mov dword [ebp - 0x1c], eax
jmp 0x441d6d
mov dword [ebp - 4], 0xfffffffe
call fcn.00441dc9
jmp 0x441dd1
mov dword [ebp - 0x2d0], 0
jmp 0x441dec
mov edx, dword [ebp - 0x2d0]
add edx, 1
mov dword [ebp - 0x2d0], edx
cmp dword [ebp - 0x2d0], 6
jge 0x441e05
mov eax, dword [ebp - 0x2d0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x441ddd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441e19
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441e2f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x2d4], 0
jmp 0x441e51
mov edx, dword [ebp - 0x2d4]
add edx, 1
mov dword [ebp - 0x2d4], edx
cmp dword [ebp - 0x2d4], 4
jge 0x441e87
mov eax, dword [ebp - 0x2d4]
and eax, 0x80000001
jns 0x441e6c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x441e7c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x441e85
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x441e42
mov dword [ebp - 4], 0xfffffffe
call fcn.00441e95
jmp 0x441eb2
mov dword [ebp - 0x2d8], 1
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e0], 2
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x2e8], 0
jmp 0x441ef5
mov edx, dword [ebp - 0x2e8]
add edx, 1
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 6
jge 0x441f36
mov eax, dword [ebp - 0x2d8]
add eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e0], eax
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp - 0x2d8], ecx
mov edx, dword [ebp - 0x2e0]
mov dword [ebp - 0x2dc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x1c], eax
jmp 0x441ee6
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2ec], 1
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x2f4], 2
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2fc], 0
jmp 0x441f82
mov edx, dword [ebp - 0x2fc]
add edx, 1
mov dword [ebp - 0x2fc], edx
cmp dword [ebp - 0x2fc], 0
jge 0x441fc3
mov eax, dword [ebp - 0x2ec]
add eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], eax
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2ec], ecx
mov edx, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x1c], eax
jmp 0x441f73
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x300], 0
jmp 0x441feb
mov edx, dword [ebp - 0x300]
add edx, 1
mov dword [ebp - 0x300], edx
cmp dword [ebp - 0x300], 7
jge 0x442032
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x442008
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x442018
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x442030
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442030
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x441fdc
mov dword [ebp - 4], 0xfffffffe
call fcn.00442040
jmp 0x44204f
mov dword [ebp - 0x304], 0
jmp 0x44206a
mov ecx, dword [ebp - 0x304]
add ecx, 1
mov dword [ebp - 0x304], ecx
cmp dword [ebp - 0x304], 0
jge 0x4420ab
cmp dword [ebp - 0x1c], 0
jge 0x442081
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442097
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x500]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44205b
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x504], 0
jmp 0x4420cd
mov eax, dword [ebp - 0x504]
add eax, 1
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 5
jge 0x442104
mov ecx, dword [ebp - 0x504]
and ecx, 0x80000001
jns 0x4420e9
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4420f9
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x442102
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4420be
mov dword [ebp - 4], 0xfffffffe
call fcn.00442112
jmp 0x442130
mov dword [ebp - 0x508], 1
mov dword [ebp - 0x50c], 1
mov dword [ebp - 0x510], 2
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x518], 0
jmp 0x442173
mov eax, dword [ebp - 0x518]
add eax, 1
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0
jge 0x4421b4
mov ecx, dword [ebp - 0x508]
add ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x510], ecx
mov edx, dword [ebp - 0x50c]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x510]
mov dword [ebp - 0x1c], ecx
jmp 0x442164
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x51c], 0
jmp 0x4421dc
mov eax, dword [ebp - 0x51c]
add eax, 1
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 2
jge 0x442223
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4421f9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x442209
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x442221
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442221
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4421cd
mov dword [ebp - 4], 0xfffffffe
call fcn.00442231
jmp 0x442240
mov dword [ebp - 0x520], 0
jmp 0x44225b
mov ecx, dword [ebp - 0x520]
add ecx, 1
mov dword [ebp - 0x520], ecx
cmp dword [ebp - 0x520], 8
jge 0x44229c
cmp dword [ebp - 0x1c], 0
jge 0x442272
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442288
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x718]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44224c
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x71c], 0
jmp 0x4422be
mov eax, dword [ebp - 0x71c]
add eax, 1
mov dword [ebp - 0x71c], eax
cmp dword [ebp - 0x71c], 7
jge 0x4422f5
mov ecx, dword [ebp - 0x71c]
and ecx, 0x80000001
jns 0x4422da
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4422ea
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4422f3
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4422af
mov dword [ebp - 4], 0xfffffffe
call fcn.00442303
jmp 0x442321
mov dword [ebp - 0x720], 0
jmp 0x44233c
mov eax, dword [ebp - 0x720]
add eax, 1
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 2
jge 0x442355
mov ecx, dword [ebp - 0x720]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x44232d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x442369
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44237f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x724], 0
jmp 0x4423a1
mov edx, dword [ebp - 0x724]
add edx, 1
mov dword [ebp - 0x724], edx
cmp dword [ebp - 0x724], 2
jge 0x4423d7
mov eax, dword [ebp - 0x724]
and eax, 0x80000001
jns 0x4423bc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4423cc
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4423d5
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x442392
mov dword [ebp - 4], 0xfffffffe
call fcn.004423e5
jmp 0x442402
mov dword [ebp - 0x728], 0
jmp 0x44241d
cmp dword [ebp - 0x728], 2
jge 0x442436
mov eax, dword [ebp - 0x728]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x44240e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44244a