Function at 0x49ae20
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b9ac8
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x156c
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x49ae76
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 7
jge 0x49aeb4
cmp dword [ebp - 0x1c], 0
jge 0x49ae8a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49aea0
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49ae6d
mov dword [ebp - 0x224], 0
jmp 0x49aecf
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x49aee8
mov ecx, dword [ebp - 0x224]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x49aec0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49aefc
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49af12
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x228], 0
jmp 0x49af2d
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0x34
jge 0x49af46
mov eax, dword [ebp - 0x228]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49af1e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49af5a
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49af70
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x22c], 0
jmp 0x49af92
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0xd
jge 0x49afd1
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49afc1
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49afcc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49afcf
mov dword [ebp - 0x1c], eax
jmp 0x49af83
mov dword [ebp - 4], 0xfffffffe
call fcn.0049afdf
jmp 0x49afe7
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x234], 1
mov dword [ebp - 0x238], 2
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x240], 0
jmp 0x49b02a
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0xb
jge 0x49b06b
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0x234]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x230], ecx
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x234], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x238]
mov dword [ebp - 0x1c], eax
jmp 0x49b01b
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x244], 0
jmp 0x49b096
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0xb
jge 0x49b0dd
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49b0b3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49b0c3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49b0db
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49b0db
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b087
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b0eb
jmp 0x49b0fa
mov dword [ebp - 4], 2
mov dword [ebp - 0x248], 0
jmp 0x49b11c
mov ecx, dword [ebp - 0x248]
add ecx, 1
mov dword [ebp - 0x248], ecx
cmp dword [ebp - 0x248], 0x10
jge 0x49b163
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49b139
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49b149
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b161
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49b161
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b10d
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b171
jmp 0x49b180
mov dword [ebp - 4], 3
mov dword [ebp - 0x24c], 0
jmp 0x49b1a2
mov ecx, dword [ebp - 0x24c]
add ecx, 1
mov dword [ebp - 0x24c], ecx
cmp dword [ebp - 0x24c], 0xf
jge 0x49b1d9
mov edx, dword [ebp - 0x24c]
and edx, 0x80000001
jns 0x49b1be
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x49b1ce
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49b1d7
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49b193
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b1e7
jmp 0x49b205
mov dword [ebp - 4], 4
mov dword [ebp - 0x250], 0
jmp 0x49b227
mov ecx, dword [ebp - 0x250]
add ecx, 1
mov dword [ebp - 0x250], ecx
cmp dword [ebp - 0x250], 1
jge 0x49b262
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49b256
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49b25d
and eax, 0xbc614e
jmp 0x49b260
mov dword [ebp - 0x1c], eax
jmp 0x49b218
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b270
jmp 0x49b278
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x25c], 2
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x264], 0
jmp 0x49b2bb
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 6
jge 0x49b2fc
mov eax, dword [ebp - 0x254]
add eax, dword [ebp - 0x258]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x258]
mov dword [ebp - 0x254], ecx
mov edx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], eax
jmp 0x49b2ac
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x268], 0
jmp 0x49b320
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 4
jge 0x49b361
cmp dword [ebp - 0x1c], 0
jge 0x49b337
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49b34d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49b311
mov dword [ebp - 4], 5
mov dword [ebp - 0x464], 0
jmp 0x49b383
mov eax, dword [ebp - 0x464]
add eax, 1
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 1
jge 0x49b3ca
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49b3a0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49b3b0
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x49b3c8
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49b3c8
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b374
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b3d8
jmp 0x49b3e7
mov dword [ebp - 0x468], 0
jmp 0x49b402
mov ecx, dword [ebp - 0x468]
add ecx, 1
mov dword [ebp - 0x468], ecx
cmp dword [ebp - 0x468], 0
jge 0x49b41b
mov edx, dword [ebp - 0x468]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b3f3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49b42f
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49b445
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x46c], 0
jmp 0x49b460
mov edx, dword [ebp - 0x46c]
add edx, 1
mov dword [ebp - 0x46c], edx
cmp dword [ebp - 0x46c], 7
jge 0x49b479
mov eax, dword [ebp - 0x46c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49b451
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49b48d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49b4a3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x470], 0
jmp 0x49b4c5
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 6
jge 0x49b504
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49b4f4
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49b4ff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49b502
mov dword [ebp - 0x1c], eax
jmp 0x49b4b6
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b512
jmp 0x49b51a
mov dword [ebp - 4], 7
mov dword [ebp - 0x474], 0
jmp 0x49b53c
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 0xe
jge 0x49b577
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49b56b
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49b572
and eax, 0xbc614e
jmp 0x49b575
mov dword [ebp - 0x1c], eax
jmp 0x49b52d
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b585
jmp 0x49b58d
mov dword [ebp - 0x478], 0
jmp 0x49b5a8
mov edx, dword [ebp - 0x478]
add edx, 1
mov dword [ebp - 0x478], edx
cmp dword [ebp - 0x478], 2
jge 0x49b5e9
cmp dword [ebp - 0x1c], 0
jge 0x49b5bf
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49b5d5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x670]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49b599
mov dword [ebp - 4], 8
mov dword [ebp - 0x674], 0
jmp 0x49b60b
mov eax, dword [ebp - 0x674]
add eax, 1
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 9
jge 0x49b652
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49b628
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49b638
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x49b650
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49b650
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b5fc
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b660
jmp 0x49b66f
mov dword [ebp - 0x678], 0
jmp 0x49b68a
mov ecx, dword [ebp - 0x678]
add ecx, 1
mov dword [ebp - 0x678], ecx
cmp dword [ebp - 0x678], 0xc
jge 0x49b6a3
mov edx, dword [ebp - 0x678]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b67b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49b6b7
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49b6cd
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 9
mov dword [ebp - 0x67c], 0
jmp 0x49b6ef
mov edx, dword [ebp - 0x67c]
add edx, 1
mov dword [ebp - 0x67c], edx
cmp dword [ebp - 0x67c], 7
jge 0x49b725
mov eax, dword [ebp - 0x67c]
and eax, 0x80000001
jns 0x49b70a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49b71a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49b723
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49b6e0
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b733
jmp 0x49b750
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x680], 0
jmp 0x49b772
mov edx, dword [ebp - 0x680]
add edx, 1
mov dword [ebp - 0x680], edx
cmp dword [ebp - 0x680], 0xb
jge 0x49b7b9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49b78f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49b79f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49b7b7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49b7b7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b763
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b7c7
jmp 0x49b7d6
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x684], 0
jmp 0x49b7f8
mov ecx, dword [ebp - 0x684]
add ecx, 1
mov dword [ebp - 0x684], ecx
cmp dword [ebp - 0x684], 6
jge 0x49b83f
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49b815
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49b825
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b83d
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49b83d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49b7e9
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b84d
jmp 0x49b85c
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x688], 0
jmp 0x49b87e
mov ecx, dword [ebp - 0x688]
add ecx, 1
mov dword [ebp - 0x688], ecx
cmp dword [ebp - 0x688], 0
jge 0x49b8bd
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49b8ad
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49b8b8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49b8bb
mov dword [ebp - 0x1c], eax
jmp 0x49b86f
mov dword [ebp - 4], 0xfffffffe
call fcn.0049b8cb
jmp 0x49b8d3
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0x690], 1
mov dword [ebp - 0x694], 2
mov dword [ebp - 0x698], 0
mov dword [ebp - 0x69c], 0
jmp 0x49b916
mov edx, dword [ebp - 0x69c]
add edx, 1
mov dword [ebp - 0x69c], edx
cmp dword [ebp - 0x69c], 6
jge 0x49b957
mov eax, dword [ebp - 0x68c]
add eax, dword [ebp - 0x690]
mov dword [ebp - 0x694], eax
mov ecx, dword [ebp - 0x690]
mov dword [ebp - 0x68c], ecx
mov edx, dword [ebp - 0x694]
mov dword [ebp - 0x690], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x694]
mov dword [ebp - 0x1c], eax
jmp 0x49b907
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6a0], 0
jmp 0x49b97b
mov edx, dword [ebp - 0x6a0]
add edx, 1
mov dword [ebp - 0x6a0], edx
cmp dword [ebp - 0x6a0], 6
jge 0x49b9bc
cmp dword [ebp - 0x1c], 0
jge 0x49b992
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49b9a8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x898]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49b96c
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x8a0], 1
mov dword [ebp - 0x8a4], 2
mov dword [ebp - 0x8a8], 0
mov dword [ebp - 0x8ac], 0
jmp 0x49b9ff
mov eax, dword [ebp - 0x8ac]
add eax, 1
mov dword [ebp - 0x8ac], eax
cmp dword [ebp - 0x8ac], 0
jge 0x49ba40
mov ecx, dword [ebp - 0x89c]
add ecx, dword [ebp - 0x8a0]
mov dword [ebp - 0x8a4], ecx
mov edx, dword [ebp - 0x8a0]
mov dword [ebp - 0x89c], edx
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a0], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x1c], ecx
jmp 0x49b9f0
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x8b0], 0
jmp 0x49ba68
mov eax, dword [ebp - 0x8b0]
add eax, 1
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x8b0], 6
jge 0x49ba9f
mov ecx, dword [ebp - 0x8b0]
and ecx, 0x80000001
jns 0x49ba84
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x49ba94
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49ba9d
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49ba59
mov dword [ebp - 4], 0xfffffffe
call fcn.0049baad
jmp 0x49bacb
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x8b4], 0
jmp 0x49baed
mov eax, dword [ebp - 0x8b4]
add eax, 1
mov dword [ebp - 0x8b4], eax
cmp dword [ebp - 0x8b4], 4
jge 0x49bb24
mov ecx, dword [ebp - 0x8b4]
and ecx, 0x80000001
jns 0x49bb09
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x49bb19
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49bb22
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49bade
mov dword [ebp - 4], 0xfffffffe
call fcn.0049bb32
jmp 0x49bb50
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x8bc], 1
mov dword [ebp - 0x8c0], 2
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0x8c8], 0
jmp 0x49bb93
mov eax, dword [ebp - 0x8c8]
add eax, 1
mov dword [ebp - 0x8c8], eax
cmp dword [ebp - 0x8c8], 0
jge 0x49bbd4
mov ecx, dword [ebp - 0x8b8]
add ecx, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c0], ecx
mov edx, dword [ebp - 0x8bc]
mov dword [ebp - 0x8b8], edx
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x8c0]
mov dword [ebp - 0x1c], ecx
jmp 0x49bb84
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x8cc], 0
jmp 0x49bbf5
mov eax, dword [ebp - 0x8cc]
add eax, 1
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 6
jge 0x49bc0e
mov ecx, dword [ebp - 0x8cc]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x49bbe6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49bc22
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49bc38
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x8d0], 0
jmp 0x49bc5a
mov edx, dword [ebp - 0x8d0]
add edx, 1
mov dword [ebp - 0x8d0], edx
cmp dword [ebp - 0x8d0], 6
jge 0x49bc99
mov eax, dword [ebp - 0x8d0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49bc89
mov eax, dword [ebp - 0x8d0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49bc94
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49bc97
mov dword [ebp - 0x1c], eax
jmp 0x49bc4b
mov dword [ebp - 4], 0xfffffffe
call fcn.0049bca7
jmp 0x49bcaf
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8d4], 0
jmp 0x49bcd1
mov edx, dword [ebp - 0x8d4]
add edx, 1
mov dword [ebp - 0x8d4], edx
cmp dword [ebp - 0x8d4], 6
jge 0x49bd10
mov eax, dword [ebp - 0x8d4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49bd00
mov eax, dword [ebp - 0x8d4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49bd0b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49bd0e
mov dword [ebp - 0x1c], eax
jmp 0x49bcc2
mov dword [ebp - 4], 0xfffffffe
call fcn.0049bd1e
jmp 0x49bd26
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8d8], 0
jmp 0x49bd48
mov edx, dword [ebp - 0x8d8]
add edx, 1
mov dword [ebp - 0x8d8], edx
cmp dword [ebp - 0x8d8], 4
jge 0x49bd7e
mov eax, dword [ebp - 0x8d8]
and eax, 0x80000001
jns 0x49bd63
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49bd73
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49bd7c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49bd39
mov dword [ebp - 4], 0xfffffffe
call fcn.0049bd8c
jmp 0x49bda9
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x8dc], 0
jmp 0x49bdcb
mov edx, dword [ebp - 0x8dc]
add edx, 1
mov dword [ebp - 0x8dc], edx
cmp dword [ebp - 0x8dc], 2
jge 0x49be0a
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49bdfa
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49be05
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49be08
mov dword [ebp - 0x1c], eax
jmp 0x49bdbc
mov dword [ebp - 4], 0xfffffffe
call fcn.0049be18
jmp 0x49be20
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x8e0], 0
jmp 0x49be42
mov edx, dword [ebp - 0x8e0]
add edx, 1
mov dword [ebp - 0x8e0], edx
cmp dword [ebp - 0x8e0], 4
jge 0x49be81
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49be71
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49be7c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49be7f
mov dword [ebp - 0x1c], eax
jmp 0x49be33
mov dword [ebp - 4], 0xfffffffe
call fcn.0049be8f
jmp 0x49be97
mov dword [ebp - 0x8e4], 1
mov dword [ebp - 0x8e8], 1
mov dword [ebp - 0x8ec], 2
mov dword [ebp - 0x8f0], 0
mov dword [ebp - 0x8f4], 0
jmp 0x49beda
mov edx, dword [ebp - 0x8f4]
add edx, 1
mov dword [ebp - 0x8f4], edx
cmp dword [ebp - 0x8f4], 1
jge 0x49bf1b
mov eax, dword [ebp - 0x8e4]
add eax, dword [ebp - 0x8e8]
mov dword [ebp - 0x8ec], eax
mov ecx, dword [ebp - 0x8e8]
mov dword [ebp - 0x8e4], ecx
mov edx, dword [ebp - 0x8ec]
mov dword [ebp - 0x8e8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x1c], eax
jmp 0x49becb
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x8f8], 0
jmp 0x49bf46
mov edx, dword [ebp - 0x8f8]
add edx, 1
mov dword [ebp - 0x8f8], edx
cmp dword [ebp - 0x8f8], 3
jge 0x49bf7c
mov eax, dword [ebp - 0x8f8]
and eax, 0x80000001
jns 0x49bf61
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49bf71
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49bf7a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49bf37
mov dword [ebp - 4], 0xfffffffe
call fcn.0049bf8a
jmp 0x49bfa7
mov dword [ebp - 0x8fc], 0
jmp 0x49bfc2
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
cmp dword [ebp - 0x8fc], 1
jge 0x49bfdb
mov eax, dword [ebp - 0x8fc]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49bfb3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49bfef
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49c005
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x900], 0
jmp 0x49c027
mov edx, dword [ebp - 0x900]
add edx, 1
mov dword [ebp - 0x900], edx
cmp dword [ebp - 0x900], 3
jge 0x49c062
mov eax, dword [ebp - 0x900]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49c056
mov eax, dword [ebp - 0x900]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49c05d
and eax, 0xbc614e
jmp 0x49c060
mov dword [ebp - 0x1c], eax
jmp 0x49c018
mov dword [ebp - 4], 0xfffffffe
call fcn.0049c070
jmp 0x49c078
mov dword [ebp - 0x904], 0
jmp 0x49c093
mov edx, dword [ebp - 0x904]
add edx, 1
mov dword [ebp - 0x904], edx
cmp dword [ebp - 0x904], 2
jge 0x49c0ac
mov eax, dword [ebp - 0x904]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49c084
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49c0c0
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49c0d6
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x908], 0
jmp 0x49c0f1
mov edx, dword [ebp - 0x908]
add edx, 1
mov dword [ebp - 0x908], edx
cmp dword [ebp - 0x908], 1
jge 0x49c132
cmp dword [ebp - 0x1c], 0
jge 0x49c108
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49c11e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xb00]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49c0e2
mov dword [ebp - 0xb04], 0
jmp 0x49c14d
mov eax, dword [ebp - 0xb04]
add eax, 1
mov dword [ebp - 0xb04], eax
cmp dword [ebp - 0xb04], 4
jge 0x49c166
mov ecx, dword [ebp - 0xb04]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x49c13e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49c17a
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49c190
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xb08], 0
jmp 0x49c1b2
cmp dword [ebp - 0xb08], 2
jge 0x49c1f9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49c1cf
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49c1df
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49c1f7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49c1f7
mov dword [ebp - 4], 0xfffffffe
call fcn.0049c207
jmp 0x49c216
mov dword [ebp - 0xb0c], 0
jmp 0x49c231
cmp dword [ebp - 0xb0c], 3
jge 0x49c272