Function at 0x49e450
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b9de0
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffffd6c
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x40], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x49e4a6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xa
jge 0x49e4d7
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x49e4bc
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x49e4cc
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49e4d5
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49e49d
mov dword [ebp - 4], 0xfffffffe
call fcn.0049e4e5
jmp 0x49e503
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x49e51c
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x23
jge 0x49e54d
mov ecx, dword [ebp - 0x24]
and ecx, 0x80000001
jns 0x49e532
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x49e542
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49e54b
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49e513
mov dword [ebp - 4], 0xfffffffe
call fcn.0049e55b
jmp 0x49e579
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
jmp 0x49e5a7
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x24
jge 0x49e5cd
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], ecx
jmp 0x49e59e
mov edx, dword [ebp - 0x1c]
add edx, 0x24
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x3c], 0
jmp 0x49e5e8
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x20
jge 0x49e626
cmp dword [ebp - 0x1c], 0
jge 0x49e5fc
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e612
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x238]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49e5df
mov dword [ebp - 4], 2
mov dword [ebp - 0x23c], 0
jmp 0x49e648
mov eax, dword [ebp - 0x23c]
add eax, 1
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 8
jge 0x49e687
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49e677
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49e682
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49e685
mov dword [ebp - 0x1c], eax
jmp 0x49e639
mov dword [ebp - 4], 0xfffffffe
call fcn.0049e695
jmp 0x49e69d
mov dword [ebp - 4], 3
mov dword [ebp - 0x240], 0
jmp 0x49e6bf
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 2
jge 0x49e6f5
mov eax, dword [ebp - 0x240]
and eax, 0x80000001
jns 0x49e6da
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49e6ea
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49e6f3
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49e6b0
mov dword [ebp - 4], 0xfffffffe
call fcn.0049e703
jmp 0x49e720
mov dword [ebp - 4], 4
mov dword [ebp - 0x244], 0
jmp 0x49e742
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0
jge 0x49e781
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49e771
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49e77c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49e77f
mov dword [ebp - 0x1c], eax
jmp 0x49e733
mov dword [ebp - 4], 0xfffffffe
call fcn.0049e78f
jmp 0x49e797
mov dword [ebp - 4], 5
mov dword [ebp - 0x248], 0
jmp 0x49e7b9
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 3
jge 0x49e7f4
mov eax, dword [ebp - 0x248]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49e7e8
mov eax, dword [ebp - 0x248]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49e7ef
and eax, 0xbc614e
jmp 0x49e7f2
mov dword [ebp - 0x1c], eax
jmp 0x49e7aa
mov dword [ebp - 4], 0xfffffffe
call fcn.0049e802
jmp 0x49e80a
mov dword [ebp - 4], 6
mov dword [ebp - 0x24c], 0
jmp 0x49e82c
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 1
jge 0x49e862
mov eax, dword [ebp - 0x24c]
and eax, 0x80000001
jns 0x49e847
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49e857
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49e860
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49e81d
mov dword [ebp - 4], 0xfffffffe
call fcn.0049e870
jmp 0x49e88d
mov dword [ebp - 4], 7
mov dword [ebp - 0x250], 0
jmp 0x49e8af
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 7
jge 0x49e8ee
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49e8de
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49e8e9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49e8ec
mov dword [ebp - 0x1c], eax
jmp 0x49e8a0
mov dword [ebp - 4], 0xfffffffe
call fcn.0049e8fc
jmp 0x49e904
mov dword [ebp - 4], 8
mov dword [ebp - 0x254], 0
jmp 0x49e926
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 3
jge 0x49e95c
mov eax, dword [ebp - 0x254]
and eax, 0x80000001
jns 0x49e941
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49e951
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49e95a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49e917
mov dword [ebp - 4], 0xfffffffe
call fcn.0049e96a
jmp 0x49e987
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x260], 2
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x268], 0
jmp 0x49e9ca
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 6
jge 0x49ea0b
mov eax, dword [ebp - 0x258]
add eax, dword [ebp - 0x25c]
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], ecx
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x260]
mov dword [ebp - 0x1c], eax
jmp 0x49e9bb
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x274], 2
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x27c], 0
jmp 0x49ea57
mov edx, dword [ebp - 0x27c]
add edx, 1
mov dword [ebp - 0x27c], edx
cmp dword [ebp - 0x27c], 8
jge 0x49ea98
mov eax, dword [ebp - 0x26c]
add eax, dword [ebp - 0x270]
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x270]
mov dword [ebp - 0x26c], ecx
mov edx, dword [ebp - 0x274]
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x274]
mov dword [ebp - 0x1c], eax
jmp 0x49ea48
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x280], 0
jmp 0x49eac3
mov edx, dword [ebp - 0x280]
add edx, 1
mov dword [ebp - 0x280], edx
cmp dword [ebp - 0x280], 7
jge 0x49eb02
mov eax, dword [ebp - 0x280]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49eaf2
mov eax, dword [ebp - 0x280]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49eafd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49eb00
mov dword [ebp - 0x1c], eax
jmp 0x49eab4
mov dword [ebp - 4], 0xfffffffe
call fcn.0049eb10
jmp 0x49eb18
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x284], 0
jmp 0x49eb3a
mov edx, dword [ebp - 0x284]
add edx, 1
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 7
jge 0x49eb75
mov eax, dword [ebp - 0x284]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49eb69
mov eax, dword [ebp - 0x284]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49eb70
and eax, 0xbc614e
jmp 0x49eb73
mov dword [ebp - 0x1c], eax
jmp 0x49eb2b
mov dword [ebp - 4], 0xfffffffe
call fcn.0049eb83
jmp 0x49eb8b
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x288], 0
jmp 0x49ebad
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 3
jge 0x49ebe3
mov eax, dword [ebp - 0x288]
and eax, 0x80000001
jns 0x49ebc8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49ebd8
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49ebe1
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49eb9e
mov dword [ebp - 4], 0xfffffffe
call fcn.0049ebf1
jmp 0x49ec0e
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x28c], 0
jmp 0x49ec30
mov edx, dword [ebp - 0x28c]
add edx, 1
mov dword [ebp - 0x28c], edx
cmp dword [ebp - 0x28c], 7
jge 0x49ec66
mov eax, dword [ebp - 0x28c]
and eax, 0x80000001
jns 0x49ec4b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49ec5b
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49ec64
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49ec21
mov dword [ebp - 4], 0xfffffffe
call fcn.0049ec74
jmp 0x49ec91
mov dword [ebp - 0x290], 0
jmp 0x49ecac
mov edx, dword [ebp - 0x290]
add edx, 1
mov dword [ebp - 0x290], edx
cmp dword [ebp - 0x290], 5
jge 0x49ecc5
mov eax, dword [ebp - 0x290]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49ec9d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49ecd9
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49ecef
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x294], 0
jmp 0x49ed11
mov edx, dword [ebp - 0x294]
add edx, 1
mov dword [ebp - 0x294], edx
cmp dword [ebp - 0x294], 6
jge 0x49ed47
mov eax, dword [ebp - 0x294]
and eax, 0x80000001
jns 0x49ed2c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49ed3c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49ed45
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49ed02
mov dword [ebp - 4], 0xfffffffe
call fcn.0049ed55
jmp 0x49ed72
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x298], 0
jmp 0x49ed94
mov edx, dword [ebp - 0x298]
add edx, 1
mov dword [ebp - 0x298], edx
cmp dword [ebp - 0x298], 8
jge 0x49eddb
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49edb1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49edc1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49edd9
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49edd9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49ed85
mov dword [ebp - 4], 0xfffffffe
call fcn.0049ede9
jmp 0x49edf8
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x29c], 0
jmp 0x49ee1a
mov ecx, dword [ebp - 0x29c]
add ecx, 1
mov dword [ebp - 0x29c], ecx
cmp dword [ebp - 0x29c], 2
jge 0x49ee55
mov eax, dword [ebp - 0x29c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49ee49
mov eax, dword [ebp - 0x29c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49ee50
and eax, 0xbc614e
jmp 0x49ee53
mov dword [ebp - 0x1c], eax
jmp 0x49ee0b
mov dword [ebp - 4], 0xfffffffe
call fcn.0049ee63
jmp 0x49ee6b
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x2a0], 0
jmp 0x49ee8d
mov edx, dword [ebp - 0x2a0]
add edx, 1
mov dword [ebp - 0x2a0], edx
cmp dword [ebp - 0x2a0], 1
jge 0x49eec3
mov eax, dword [ebp - 0x2a0]
and eax, 0x80000001
jns 0x49eea8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49eeb8
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49eec1
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49ee7e
mov dword [ebp - 4], 0xfffffffe
call fcn.0049eed1
jmp 0x49eeee
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x2a4], 0
jmp 0x49ef10
mov edx, dword [ebp - 0x2a4]
add edx, 1
mov dword [ebp - 0x2a4], edx
cmp dword [ebp - 0x2a4], 2
jge 0x49ef57
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49ef2d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49ef3d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49ef55
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49ef55
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49ef01
mov dword [ebp - 4], 0xfffffffe
call fcn.0049ef65
jmp 0x49ef74
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x40]
xor ecx, ebp
call fcn.00408023
mov esp, ebp
pop ebp
ret