Function at 0x48b050
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b8ad0
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff80c
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x78], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x48b0a6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2f
jge 0x48b0d8
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48b0cc
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48b0d3
and eax, 0xbc614e
jmp 0x48b0d6
mov dword [ebp - 0x1c], eax
jmp 0x48b09d
mov dword [ebp - 4], 0xfffffffe
call fcn.0048b0e6
jmp 0x48b0ee
mov dword [ebp - 0x24], 0
jmp 0x48b100
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x19
jge 0x48b113
mov eax, dword [ebp - 0x24]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48b0f7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48b127
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48b13d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x28], 0
jmp 0x48b14f
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 4
jge 0x48b162
mov eax, dword [ebp - 0x28]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48b146
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48b176
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48b18c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], 0
jmp 0x48b1a5
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x1c
jge 0x48b1d5
mov eax, dword [ebp - 0x2c]
and eax, 0x80000001
jns 0x48b1ba
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48b1ca
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48b1d3
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48b19c
mov dword [ebp - 4], 0xfffffffe
call fcn.0048b1e3
jmp 0x48b200
mov dword [ebp - 4], 2
mov dword [ebp - 0x30], 0
jmp 0x48b219
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 8
jge 0x48b24b
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48b23f
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48b246
and eax, 0xbc614e
jmp 0x48b249
mov dword [ebp - 0x1c], eax
jmp 0x48b210
mov dword [ebp - 4], 0xfffffffe
call fcn.0048b259
jmp 0x48b261
mov dword [ebp - 4], 3
mov dword [ebp - 0x34], 0
jmp 0x48b27a
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x1e
jge 0x48b2be
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48b294
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48b2a4
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48b2bc
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48b2bc
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48b271
mov dword [ebp - 4], 0xfffffffe
call fcn.0048b2cc
jmp 0x48b2db
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
jmp 0x48b309
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 0x1d
jge 0x48b32f
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
jmp 0x48b300
mov eax, dword [ebp - 0x1c]
add eax, 0x1d
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x4c], 0
jmp 0x48b351
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0xe
jge 0x48b387
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48b377
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48b382
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48b385
mov dword [ebp - 0x1c], eax
jmp 0x48b348
mov dword [ebp - 4], 0xfffffffe
call fcn.0048b395
jmp 0x48b39d
mov dword [ebp - 4], 5
mov dword [ebp - 0x50], 0
jmp 0x48b3b6
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 5
jge 0x48b3e6
mov eax, dword [ebp - 0x50]
and eax, 0x80000001
jns 0x48b3cb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48b3db
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48b3e4
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48b3ad
mov dword [ebp - 4], 0xfffffffe
call fcn.0048b3f4
jmp 0x48b411
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x5c], 2
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
jmp 0x48b43f
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 3
jge 0x48b465
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
jmp 0x48b436
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x68], 0
jmp 0x48b487
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 2
jge 0x48b4bd
mov eax, dword [ebp - 0x68]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48b4ad
mov eax, dword [ebp - 0x68]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48b4b8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48b4bb
mov dword [ebp - 0x1c], eax
jmp 0x48b47e
mov dword [ebp - 4], 0xfffffffe
call fcn.0048b4cb
jmp 0x48b4d3
mov dword [ebp - 4], 7
mov dword [ebp - 0x6c], 0
jmp 0x48b4ec
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 9
jge 0x48b51c
mov eax, dword [ebp - 0x6c]
and eax, 0x80000001
jns 0x48b501
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48b511
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48b51a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48b4e3
mov dword [ebp - 4], 0xfffffffe
call fcn.0048b52a
jmp 0x48b547
mov dword [ebp - 0x70], 0
jmp 0x48b559
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0xb
jge 0x48b56c
mov eax, dword [ebp - 0x70]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48b550
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48b580
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48b596
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x74], 0
jmp 0x48b5a8
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 6
jge 0x48b5e6
cmp dword [ebp - 0x1c], 0
jge 0x48b5bc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48b5d2
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x270]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48b59f
mov dword [ebp - 0x274], 0
jmp 0x48b601
mov eax, dword [ebp - 0x274]
add eax, 1
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 3
jge 0x48b61a
mov ecx, dword [ebp - 0x274]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x48b5f2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48b62e
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48b644
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x288], 0
jmp 0x48b687
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 4
jge 0x48b6c8
mov eax, dword [ebp - 0x278]
add eax, dword [ebp - 0x27c]
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x278], ecx
mov edx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x280]
mov dword [ebp - 0x1c], eax
jmp 0x48b678
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x294], 2
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x29c], 0
jmp 0x48b714
mov edx, dword [ebp - 0x29c]
add edx, 1
mov dword [ebp - 0x29c], edx
cmp dword [ebp - 0x29c], 5
jge 0x48b755
mov eax, dword [ebp - 0x28c]
add eax, dword [ebp - 0x290]
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x290], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x294]
mov dword [ebp - 0x1c], eax
jmp 0x48b705
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2a0], 1
mov dword [ebp - 0x2a4], 1
mov dword [ebp - 0x2a8], 2
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2b0], 0
jmp 0x48b7a1
mov edx, dword [ebp - 0x2b0]
add edx, 1
mov dword [ebp - 0x2b0], edx
cmp dword [ebp - 0x2b0], 1
jge 0x48b7e2
mov eax, dword [ebp - 0x2a0]
add eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a0], ecx
mov edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2a4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x1c], eax
jmp 0x48b792
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x2b4], 0
jmp 0x48b80d
mov edx, dword [ebp - 0x2b4]
add edx, 1
mov dword [ebp - 0x2b4], edx
cmp dword [ebp - 0x2b4], 1
jge 0x48b84c
mov eax, dword [ebp - 0x2b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48b83c
mov eax, dword [ebp - 0x2b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48b847
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48b84a
mov dword [ebp - 0x1c], eax
jmp 0x48b7fe
mov dword [ebp - 4], 0xfffffffe
call fcn.0048b85a
jmp 0x48b862
mov dword [ebp - 0x2b8], 0
jmp 0x48b87d
mov edx, dword [ebp - 0x2b8]
add edx, 1
mov dword [ebp - 0x2b8], edx
cmp dword [ebp - 0x2b8], 2
jge 0x48b896
mov eax, dword [ebp - 0x2b8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48b86e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48b8aa
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48b8c0
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x2c0], 1
mov dword [ebp - 0x2c4], 2
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2cc], 0
jmp 0x48b903
mov edx, dword [ebp - 0x2cc]
add edx, 1
mov dword [ebp - 0x2cc], edx
cmp dword [ebp - 0x2cc], 1
jge 0x48b944
mov eax, dword [ebp - 0x2bc]
add eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2bc], ecx
mov edx, dword [ebp - 0x2c4]
mov dword [ebp - 0x2c0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x1c], eax
jmp 0x48b8f4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2d0], 0
jmp 0x48b968
mov edx, dword [ebp - 0x2d0]
add edx, 1
mov dword [ebp - 0x2d0], edx
cmp dword [ebp - 0x2d0], 2
jge 0x48b981
mov eax, dword [ebp - 0x2d0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48b959
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48b995
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48b9ab
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 9
mov dword [ebp - 0x2d4], 0
jmp 0x48b9cd
mov edx, dword [ebp - 0x2d4]
add edx, 1
mov dword [ebp - 0x2d4], edx
cmp dword [ebp - 0x2d4], 1
jge 0x48ba03
mov eax, dword [ebp - 0x2d4]
and eax, 0x80000001
jns 0x48b9e8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48b9f8
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48ba01
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48b9be
mov dword [ebp - 4], 0xfffffffe
call fcn.0048ba11
jmp 0x48ba2e
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x2d8], 0
jmp 0x48ba50
mov edx, dword [ebp - 0x2d8]
add edx, 1
mov dword [ebp - 0x2d8], edx
cmp dword [ebp - 0x2d8], 4
jge 0x48ba86
mov eax, dword [ebp - 0x2d8]
and eax, 0x80000001
jns 0x48ba6b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48ba7b
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48ba84
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48ba41
mov dword [ebp - 4], 0xfffffffe
call fcn.0048ba94
jmp 0x48bab1
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x2dc], 0
jmp 0x48bad3
mov edx, dword [ebp - 0x2dc]
add edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jge 0x48bb09
mov eax, dword [ebp - 0x2dc]
and eax, 0x80000001
jns 0x48baee
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48bafe
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48bb07
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48bac4
mov dword [ebp - 4], 0xfffffffe
call fcn.0048bb17
jmp 0x48bb34
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x2e0], 0
jmp 0x48bb56
mov edx, dword [ebp - 0x2e0]
add edx, 1
mov dword [ebp - 0x2e0], edx
cmp dword [ebp - 0x2e0], 1
jge 0x48bb91
mov eax, dword [ebp - 0x2e0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48bb85
mov eax, dword [ebp - 0x2e0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48bb8c
and eax, 0xbc614e
jmp 0x48bb8f
mov dword [ebp - 0x1c], eax
jmp 0x48bb47
mov dword [ebp - 4], 0xfffffffe
call fcn.0048bb9f
jmp 0x48bba7
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x2e4], 0
jmp 0x48bbc9
mov edx, dword [ebp - 0x2e4]
add edx, 1
mov dword [ebp - 0x2e4], edx
cmp dword [ebp - 0x2e4], 4
jge 0x48bc08
mov eax, dword [ebp - 0x2e4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48bbf8
mov eax, dword [ebp - 0x2e4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48bc03
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48bc06
mov dword [ebp - 0x1c], eax
jmp 0x48bbba
mov dword [ebp - 4], 0xfffffffe
call fcn.0048bc16
jmp 0x48bc1e
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x2e8], 0
jmp 0x48bc40
mov edx, dword [ebp - 0x2e8]
add edx, 1
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
jge 0x48bc87
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48bc5d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48bc6d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48bc85
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48bc85
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48bc31
mov dword [ebp - 4], 0xfffffffe
call fcn.0048bc95
jmp 0x48bca4
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x2ec], 0
jmp 0x48bcc6
mov ecx, dword [ebp - 0x2ec]
add ecx, 1
mov dword [ebp - 0x2ec], ecx
cmp dword [ebp - 0x2ec], 3
jge 0x48bcfd
mov edx, dword [ebp - 0x2ec]
and edx, 0x80000001
jns 0x48bce2
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x48bcf2
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x48bcfb
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48bcb7
mov dword [ebp - 4], 0xfffffffe
call fcn.0048bd0b
jmp 0x48bd29
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x2f0], 0
jmp 0x48bd4b
mov ecx, dword [ebp - 0x2f0]
add ecx, 1
mov dword [ebp - 0x2f0], ecx
cmp dword [ebp - 0x2f0], 1
jge 0x48bd92
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48bd68
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48bd78
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48bd90
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48bd90
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48bd3c
mov dword [ebp - 4], 0xfffffffe
call fcn.0048bda0
jmp 0x48bdaf
mov dword [ebp - 0x2f4], 0
jmp 0x48bdca
mov ecx, dword [ebp - 0x2f4]
add ecx, 1
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jge 0x48be0b
cmp dword [ebp - 0x1c], 0
jge 0x48bde1
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48bdf7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x4f0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48bdbb
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x4f4], 0
jmp 0x48be2d
mov eax, dword [ebp - 0x4f4]
add eax, 1
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 4
jge 0x48be74
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48be4a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48be5a
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x48be72
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48be72
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48be1e
mov dword [ebp - 4], 0xfffffffe
call fcn.0048be82
jmp 0x48be91
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x4f8], 0
jmp 0x48beb3
mov ecx, dword [ebp - 0x4f8]
add ecx, 1
mov dword [ebp - 0x4f8], ecx
cmp dword [ebp - 0x4f8], 3
jge 0x48beea
mov edx, dword [ebp - 0x4f8]
and edx, 0x80000001
jns 0x48becf
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x48bedf
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x48bee8
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48bea4
mov dword [ebp - 4], 0xfffffffe
call fcn.0048bef8
jmp 0x48bf16
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x4fc], 0
jmp 0x48bf38
mov ecx, dword [ebp - 0x4fc]
add ecx, 1
mov dword [ebp - 0x4fc], ecx
cmp dword [ebp - 0x4fc], 2
jge 0x48bf77
mov eax, dword [ebp - 0x4fc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48bf67
mov eax, dword [ebp - 0x4fc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48bf72
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48bf75
mov dword [ebp - 0x1c], eax
jmp 0x48bf29
mov dword [ebp - 4], 0xfffffffe
call fcn.0048bf85
jmp 0x48bf8d
mov dword [ebp - 0x500], 0
jmp 0x48bfa8
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
cmp dword [ebp - 0x500], 1
jge 0x48bfc1
mov eax, dword [ebp - 0x500]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48bf99
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48bfd5
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48bfeb
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x504], 0
jmp 0x48c00d
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
cmp dword [ebp - 0x504], 0
jge 0x48c054
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48c02a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48c03a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48c052
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48c052
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48bffe
mov dword [ebp - 4], 0xfffffffe
call fcn.0048c062
jmp 0x48c071
mov dword [ebp - 0x508], 0
jmp 0x48c08c
mov ecx, dword [ebp - 0x508]
add ecx, 1
mov dword [ebp - 0x508], ecx
cmp dword [ebp - 0x508], 2
jge 0x48c0cd
cmp dword [ebp - 0x1c], 0
jge 0x48c0a3
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48c0b9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x700]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48c07d
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x704], 0
jmp 0x48c0ef
mov eax, dword [ebp - 0x704]
add eax, 1
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 4
jge 0x48c136
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48c10c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48c11c
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x48c134
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48c134
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48c0e0
mov dword [ebp - 4], 0xfffffffe
call fcn.0048c144
jmp 0x48c153
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x708], 0
jmp 0x48c175
mov ecx, dword [ebp - 0x708]
add ecx, 1
mov dword [ebp - 0x708], ecx
cmp dword [ebp - 0x708], 0
jge 0x48c1bc
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48c192
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48c1a2
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48c1ba
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48c1ba
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48c166
mov dword [ebp - 4], 0xfffffffe
call fcn.0048c1ca
jmp 0x48c1d9
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x70c], 0
jmp 0x48c1fb
mov ecx, dword [ebp - 0x70c]
add ecx, 1
mov dword [ebp - 0x70c], ecx
cmp dword [ebp - 0x70c], 3
jge 0x48c236
mov eax, dword [ebp - 0x70c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48c22a
mov eax, dword [ebp - 0x70c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48c231
and eax, 0xbc614e
jmp 0x48c234
mov dword [ebp - 0x1c], eax
jmp 0x48c1ec
mov dword [ebp - 4], 0xfffffffe
call fcn.0048c244
jmp 0x48c24c
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x710], 0
jmp 0x48c26e
mov edx, dword [ebp - 0x710]
add edx, 1
mov dword [ebp - 0x710], edx
cmp dword [ebp - 0x710], 0
jge 0x48c2a9
mov eax, dword [ebp - 0x710]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48c29d
mov eax, dword [ebp - 0x710]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48c2a4
and eax, 0xbc614e
jmp 0x48c2a7
mov dword [ebp - 0x1c], eax
jmp 0x48c25f
mov dword [ebp - 4], 0xfffffffe
call fcn.0048c2b7
jmp 0x48c2bf
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x714], 0
jmp 0x48c2e1
mov edx, dword [ebp - 0x714]
add edx, 1
mov dword [ebp - 0x714], edx
cmp dword [ebp - 0x714], 4
jge 0x48c320
mov eax, dword [ebp - 0x714]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48c310
mov eax, dword [ebp - 0x714]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48c31b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48c31e
mov dword [ebp - 0x1c], eax
jmp 0x48c2d2
mov dword [ebp - 4], 0xfffffffe
call fcn.0048c32e
jmp 0x48c336
mov dword [ebp - 0x718], 0
jmp 0x48c351
mov edx, dword [ebp - 0x718]
add edx, 1
mov dword [ebp - 0x718], edx
cmp dword [ebp - 0x718], 2
jge 0x48c36a
mov eax, dword [ebp - 0x718]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48c342
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48c37e
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48c394
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x71c], 0
jmp 0x48c3b6