Function at 0x48d290
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b8d00
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1390
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x58], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x48d2ed
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1e
jge 0x48d31f
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48d313
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48d31a
and eax, 0xbc614e
jmp 0x48d31d
mov dword [ebp - 0x1c], eax
jmp 0x48d2e4
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d32d
jmp 0x48d335
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x48d34e
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 2
jge 0x48d384
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48d374
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48d37f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48d382
mov dword [ebp - 0x1c], eax
jmp 0x48d345
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d392
jmp 0x48d39a
mov dword [ebp - 4], 2
mov dword [ebp - 0x28], 0
jmp 0x48d3b3
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 2
jge 0x48d3e5
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48d3d9
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48d3e0
and eax, 0xbc614e
jmp 0x48d3e3
mov dword [ebp - 0x1c], eax
jmp 0x48d3aa
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d3f3
jmp 0x48d3fb
mov dword [ebp - 4], 3
mov dword [ebp - 0x2c], 0
jmp 0x48d414
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 7
jge 0x48d446
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48d43a
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48d441
and eax, 0xbc614e
jmp 0x48d444
mov dword [ebp - 0x1c], eax
jmp 0x48d40b
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d454
jmp 0x48d45c
mov dword [ebp - 4], 4
mov dword [ebp - 0x30], 0
jmp 0x48d475
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 3
jge 0x48d4b9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48d48f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48d49f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48d4b7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48d4b7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48d46c
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d4c7
jmp 0x48d4d6
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
jmp 0x48d504
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 3
jge 0x48d52a
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
jmp 0x48d4fb
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x48], 0
jmp 0x48d54c
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 1
jge 0x48d57d
mov edx, dword [ebp - 0x48]
and edx, 0x80000001
jns 0x48d562
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x48d572
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x48d57b
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48d543
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d58b
jmp 0x48d5a9
mov dword [ebp - 4], 6
mov dword [ebp - 0x4c], 0
jmp 0x48d5c2
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 4
jge 0x48d5f4
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48d5e8
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48d5ef
and eax, 0xbc614e
jmp 0x48d5f2
mov dword [ebp - 0x1c], eax
jmp 0x48d5b9
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d602
jmp 0x48d60a
mov dword [ebp - 4], 7
mov dword [ebp - 0x50], 0
jmp 0x48d623
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 7
jge 0x48d655
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48d649
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48d650
and eax, 0xbc614e
jmp 0x48d653
mov dword [ebp - 0x1c], eax
jmp 0x48d61a
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d663
jmp 0x48d66b
mov dword [ebp - 0x54], 0
jmp 0x48d67d
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 8
jge 0x48d6bb
cmp dword [ebp - 0x1c], 0
jge 0x48d691
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48d6a7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x250]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48d674
mov dword [ebp - 4], 8
mov dword [ebp - 0x254], 0
jmp 0x48d6dd
mov eax, dword [ebp - 0x254]
add eax, 1
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 8
jge 0x48d71c
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48d70c
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48d717
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48d71a
mov dword [ebp - 0x1c], eax
jmp 0x48d6ce
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d72a
jmp 0x48d732
mov dword [ebp - 4], 9
mov dword [ebp - 0x258], 0
jmp 0x48d754
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 3
jge 0x48d79b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48d771
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48d781
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48d799
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48d799
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48d745
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d7a9
jmp 0x48d7b8
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x25c], 0
jmp 0x48d7da
mov ecx, dword [ebp - 0x25c]
add ecx, 1
mov dword [ebp - 0x25c], ecx
cmp dword [ebp - 0x25c], 2
jge 0x48d821
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48d7f7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48d807
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48d81f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48d81f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48d7cb
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d82f
jmp 0x48d83e
mov dword [ebp - 0x260], 0
jmp 0x48d859
mov ecx, dword [ebp - 0x260]
add ecx, 1
mov dword [ebp - 0x260], ecx
cmp dword [ebp - 0x260], 2
jge 0x48d89a
cmp dword [ebp - 0x1c], 0
jge 0x48d870
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48d886
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x458]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48d84a
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x464], 2
mov dword [ebp - 0x468], 0
mov dword [ebp - 0x46c], 0
jmp 0x48d8dd
mov eax, dword [ebp - 0x46c]
add eax, 1
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 1
jge 0x48d91e
mov ecx, dword [ebp - 0x45c]
add ecx, dword [ebp - 0x460]
mov dword [ebp - 0x464], ecx
mov edx, dword [ebp - 0x460]
mov dword [ebp - 0x45c], edx
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x464]
mov dword [ebp - 0x1c], ecx
jmp 0x48d8ce
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x470], 0
jmp 0x48d949
mov eax, dword [ebp - 0x470]
add eax, 1
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 2
jge 0x48d984
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48d978
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48d97f
and eax, 0xbc614e
jmp 0x48d982
mov dword [ebp - 0x1c], eax
jmp 0x48d93a
mov dword [ebp - 4], 0xfffffffe
call fcn.0048d992
jmp 0x48d99a
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x474], 0
jmp 0x48d9bc
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 4
jge 0x48da03
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48d9d9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48d9e9
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48da01
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48da01
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48d9ad
mov dword [ebp - 4], 0xfffffffe
call fcn.0048da11
jmp 0x48da20
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x478], 0
jmp 0x48da42
mov ecx, dword [ebp - 0x478]
add ecx, 1
mov dword [ebp - 0x478], ecx
cmp dword [ebp - 0x478], 0
jge 0x48da81
mov eax, dword [ebp - 0x478]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48da71
mov eax, dword [ebp - 0x478]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48da7c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48da7f
mov dword [ebp - 0x1c], eax
jmp 0x48da33
mov dword [ebp - 4], 0xfffffffe
call fcn.0048da8f
jmp 0x48da97
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x47c], 0
jmp 0x48dab9
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
cmp dword [ebp - 0x47c], 5
jge 0x48daef
mov eax, dword [ebp - 0x47c]
and eax, 0x80000001
jns 0x48dad4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48dae4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48daed
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48daaa
mov dword [ebp - 4], 0xfffffffe
call fcn.0048dafd
jmp 0x48db1a
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x480], 0
jmp 0x48db3c
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 1
jge 0x48db77
mov eax, dword [ebp - 0x480]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48db6b
mov eax, dword [ebp - 0x480]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48db72
and eax, 0xbc614e
jmp 0x48db75
mov dword [ebp - 0x1c], eax
jmp 0x48db2d
mov dword [ebp - 4], 0xfffffffe
call fcn.0048db85
jmp 0x48db8d
mov dword [ebp - 0x484], 0
jmp 0x48dba8
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 2
jge 0x48dbc1
mov eax, dword [ebp - 0x484]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48db99
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48dbd5
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48dbeb
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x488], 0
jmp 0x48dc0d
mov edx, dword [ebp - 0x488]
add edx, 1
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 2
jge 0x48dc54
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48dc2a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48dc3a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48dc52
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48dc52
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48dbfe
mov dword [ebp - 4], 0xfffffffe
call fcn.0048dc62
jmp 0x48dc71
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x48c], 0
jmp 0x48dc93
mov ecx, dword [ebp - 0x48c]
add ecx, 1
mov dword [ebp - 0x48c], ecx
cmp dword [ebp - 0x48c], 3
jge 0x48dcda
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48dcb0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48dcc0
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48dcd8
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48dcd8
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48dc84
mov dword [ebp - 4], 0xfffffffe
call fcn.0048dce8
jmp 0x48dcf7
mov dword [ebp - 0x490], 0
jmp 0x48dd12
mov ecx, dword [ebp - 0x490]
add ecx, 1
mov dword [ebp - 0x490], ecx
cmp dword [ebp - 0x490], 7
jge 0x48dd53
cmp dword [ebp - 0x1c], 0
jge 0x48dd29
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48dd3f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x688]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48dd03
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x68c], 0
jmp 0x48dd75
mov eax, dword [ebp - 0x68c]
add eax, 1
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 1
jge 0x48ddb4
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48dda4
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48ddaf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48ddb2
mov dword [ebp - 0x1c], eax
jmp 0x48dd66
mov dword [ebp - 4], 0xfffffffe
call fcn.0048ddc2
jmp 0x48ddca
mov dword [ebp - 0x690], 0
jmp 0x48dde5
mov edx, dword [ebp - 0x690]
add edx, 1
mov dword [ebp - 0x690], edx
cmp dword [ebp - 0x690], 6
jge 0x48de26
cmp dword [ebp - 0x1c], 0
jge 0x48ddfc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48de12
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x888]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48ddd6
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x88c], 0
jmp 0x48de48
mov eax, dword [ebp - 0x88c]
add eax, 1
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 4
jge 0x48de87
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48de77
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48de82
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48de85
mov dword [ebp - 0x1c], eax
jmp 0x48de39
mov dword [ebp - 4], 0xfffffffe
call fcn.0048de95
jmp 0x48de9d
mov dword [ebp - 0x890], 1
mov dword [ebp - 0x894], 1
mov dword [ebp - 0x898], 2
mov dword [ebp - 0x89c], 0
mov dword [ebp - 0x8a0], 0
jmp 0x48dee0
mov edx, dword [ebp - 0x8a0]
add edx, 1
mov dword [ebp - 0x8a0], edx
cmp dword [ebp - 0x8a0], 2
jge 0x48df21
mov eax, dword [ebp - 0x890]
add eax, dword [ebp - 0x894]
mov dword [ebp - 0x898], eax
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x890], ecx
mov edx, dword [ebp - 0x898]
mov dword [ebp - 0x894], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x898]
mov dword [ebp - 0x1c], eax
jmp 0x48ded1
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x8a4], 0
jmp 0x48df4c
mov edx, dword [ebp - 0x8a4]
add edx, 1
mov dword [ebp - 0x8a4], edx
cmp dword [ebp - 0x8a4], 6
jge 0x48df8b
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48df7b
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48df86
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48df89
mov dword [ebp - 0x1c], eax
jmp 0x48df3d
mov dword [ebp - 4], 0xfffffffe
call fcn.0048df99
jmp 0x48dfa1
mov dword [ebp - 0x8a8], 1
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x8b0], 2
mov dword [ebp - 0x8b4], 0
mov dword [ebp - 0x8b8], 0
jmp 0x48dfe4
mov edx, dword [ebp - 0x8b8]
add edx, 1
mov dword [ebp - 0x8b8], edx
cmp dword [ebp - 0x8b8], 7
jge 0x48e025
mov eax, dword [ebp - 0x8a8]
add eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], eax
mov ecx, dword [ebp - 0x8ac]
mov dword [ebp - 0x8a8], ecx
mov edx, dword [ebp - 0x8b0]
mov dword [ebp - 0x8ac], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x1c], eax
jmp 0x48dfd5
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x8bc], 0
jmp 0x48e050
mov edx, dword [ebp - 0x8bc]
add edx, 1
mov dword [ebp - 0x8bc], edx
cmp dword [ebp - 0x8bc], 1
jge 0x48e08f
mov eax, dword [ebp - 0x8bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48e07f
mov eax, dword [ebp - 0x8bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48e08a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48e08d
mov dword [ebp - 0x1c], eax
jmp 0x48e041
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e09d
jmp 0x48e0a5
mov dword [ebp - 0x8c0], 0
jmp 0x48e0c0
mov edx, dword [ebp - 0x8c0]
add edx, 1
mov dword [ebp - 0x8c0], edx
cmp dword [ebp - 0x8c0], 7
jge 0x48e101
cmp dword [ebp - 0x1c], 0
jge 0x48e0d7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48e0ed
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xab8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48e0b1
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xabc], 0
jmp 0x48e123
mov eax, dword [ebp - 0xabc]
add eax, 1
mov dword [ebp - 0xabc], eax
cmp dword [ebp - 0xabc], 1
jge 0x48e162
mov eax, dword [ebp - 0xabc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48e152
mov eax, dword [ebp - 0xabc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48e15d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48e160
mov dword [ebp - 0x1c], eax
jmp 0x48e114
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e170
jmp 0x48e178
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xac0], 0
jmp 0x48e19a
mov edx, dword [ebp - 0xac0]
add edx, 1
mov dword [ebp - 0xac0], edx
cmp dword [ebp - 0xac0], 2
jge 0x48e1d9
mov eax, dword [ebp - 0xac0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48e1c9
mov eax, dword [ebp - 0xac0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48e1d4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48e1d7
mov dword [ebp - 0x1c], eax
jmp 0x48e18b
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e1e7
jmp 0x48e1ef
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xac4], 0
jmp 0x48e211
mov edx, dword [ebp - 0xac4]
add edx, 1
mov dword [ebp - 0xac4], edx
cmp dword [ebp - 0xac4], 3
jge 0x48e24c
mov eax, dword [ebp - 0xac4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48e240
mov eax, dword [ebp - 0xac4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48e247
and eax, 0xbc614e
jmp 0x48e24a
mov dword [ebp - 0x1c], eax
jmp 0x48e202
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e25a
jmp 0x48e262
mov dword [ebp - 0xac8], 1
mov dword [ebp - 0xacc], 1
mov dword [ebp - 0xad0], 2
mov dword [ebp - 0xad4], 0
mov dword [ebp - 0xad8], 0
jmp 0x48e2a5
mov edx, dword [ebp - 0xad8]
add edx, 1
mov dword [ebp - 0xad8], edx
cmp dword [ebp - 0xad8], 0
jge 0x48e2e6
mov eax, dword [ebp - 0xac8]
add eax, dword [ebp - 0xacc]
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0xac8], ecx
mov edx, dword [ebp - 0xad0]
mov dword [ebp - 0xacc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xad0]
mov dword [ebp - 0x1c], eax
jmp 0x48e296
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xadc], 1
mov dword [ebp - 0xae0], 1
mov dword [ebp - 0xae4], 2
mov dword [ebp - 0xae8], 0
mov dword [ebp - 0xaec], 0
jmp 0x48e32f
mov edx, dword [ebp - 0xaec]
add edx, 1
mov dword [ebp - 0xaec], edx
cmp dword [ebp - 0xaec], 4
jge 0x48e370
mov eax, dword [ebp - 0xadc]
add eax, dword [ebp - 0xae0]
mov dword [ebp - 0xae4], eax
mov ecx, dword [ebp - 0xae0]
mov dword [ebp - 0xadc], ecx
mov edx, dword [ebp - 0xae4]
mov dword [ebp - 0xae0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xae4]
mov dword [ebp - 0x1c], eax
jmp 0x48e320
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xaf0], 0
jmp 0x48e39b
mov edx, dword [ebp - 0xaf0]
add edx, 1
mov dword [ebp - 0xaf0], edx
cmp dword [ebp - 0xaf0], 2
jge 0x48e3d1
mov eax, dword [ebp - 0xaf0]
and eax, 0x80000001
jns 0x48e3b6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48e3c6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48e3cf
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48e38c
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e3df
jmp 0x48e3fc
mov dword [ebp - 0xaf4], 1
mov dword [ebp - 0xaf8], 1
mov dword [ebp - 0xafc], 2
mov dword [ebp - 0xb00], 0
mov dword [ebp - 0xb04], 0
jmp 0x48e43f
mov edx, dword [ebp - 0xb04]
add edx, 1
mov dword [ebp - 0xb04], edx
cmp dword [ebp - 0xb04], 4
jge 0x48e480
mov eax, dword [ebp - 0xaf4]
add eax, dword [ebp - 0xaf8]
mov dword [ebp - 0xafc], eax
mov ecx, dword [ebp - 0xaf8]
mov dword [ebp - 0xaf4], ecx
mov edx, dword [ebp - 0xafc]
mov dword [ebp - 0xaf8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xafc]
mov dword [ebp - 0x1c], eax
jmp 0x48e430
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xb08], 0
jmp 0x48e4ab
mov edx, dword [ebp - 0xb08]
add edx, 1
mov dword [ebp - 0xb08], edx
cmp dword [ebp - 0xb08], 4
jge 0x48e4e1
mov eax, dword [ebp - 0xb08]
and eax, 0x80000001
jns 0x48e4c6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48e4d6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48e4df
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48e49c
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e4ef
jmp 0x48e50c
mov dword [ebp - 0xb0c], 0
jmp 0x48e527
mov edx, dword [ebp - 0xb0c]
add edx, 1
mov dword [ebp - 0xb0c], edx
cmp dword [ebp - 0xb0c], 3
jge 0x48e568
cmp dword [ebp - 0x1c], 0
jge 0x48e53e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48e554
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xd08]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48e518
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xd0c], 0
jmp 0x48e58a
mov eax, dword [ebp - 0xd0c]
add eax, 1
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 3
jge 0x48e5c1
mov ecx, dword [ebp - 0xd0c]
and ecx, 0x80000001
jns 0x48e5a6
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x48e5b6
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48e5bf
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x48e57b
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e5cf
jmp 0x48e5ed
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0xd10], 0
jmp 0x48e60f
mov eax, dword [ebp - 0xd10]
add eax, 1
mov dword [ebp - 0xd10], eax
cmp dword [ebp - 0xd10], 4
jge 0x48e64a
mov eax, dword [ebp - 0xd10]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48e63e
mov eax, dword [ebp - 0xd10]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48e645
and eax, 0xbc614e
jmp 0x48e648
mov dword [ebp - 0x1c], eax
jmp 0x48e600
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e658
jmp 0x48e660
mov dword [ebp - 0xd14], 0
jmp 0x48e67b
mov edx, dword [ebp - 0xd14]
add edx, 1
mov dword [ebp - 0xd14], edx
cmp dword [ebp - 0xd14], 2
jge 0x48e694
mov eax, dword [ebp - 0xd14]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48e66c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48e6a8
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48e6be
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xd18], 1
mov dword [ebp - 0xd1c], 1
mov dword [ebp - 0xd20], 2
mov dword [ebp - 0xd24], 0
mov dword [ebp - 0xd28], 0
jmp 0x48e701
mov edx, dword [ebp - 0xd28]
add edx, 1
mov dword [ebp - 0xd28], edx
cmp dword [ebp - 0xd28], 2
jge 0x48e742
mov eax, dword [ebp - 0xd18]
add eax, dword [ebp - 0xd1c]
mov dword [ebp - 0xd20], eax
mov ecx, dword [ebp - 0xd1c]
mov dword [ebp - 0xd18], ecx
mov edx, dword [ebp - 0xd20]
mov dword [ebp - 0xd1c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xd20]
mov dword [ebp - 0x1c], eax
jmp 0x48e6f2
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0xd2c], 0
jmp 0x48e76d
cmp dword [ebp - 0xd2c], 3
jge 0x48e7b4
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48e78a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48e79a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48e7b2
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48e7b2
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48e75e
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e7c2
jmp 0x48e7d1
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0xd30], 0
jmp 0x48e7f3
cmp dword [ebp - 0xd30], 3
jge 0x48e82a
mov edx, dword [ebp - 0xd30]
and edx, 0x80000001
jns 0x48e80f
mov dword [ebp - 4], 0xfffffffe
call fcn.0048e838
jmp 0x48e856