Function at 0x495730
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b95b8
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1bc4
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x48], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x495786
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x32
jge 0x495799
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x49577d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4957ad
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4957c3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x4957dc
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 3
jge 0x495812
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x495802
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49580d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x495810
mov dword [ebp - 0x1c], eax
jmp 0x4957d3
mov dword [ebp - 4], 0xfffffffe
call fcn.00495820
jmp 0x495828
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x495841
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x15
jge 0x495871
mov eax, dword [ebp - 0x28]
and eax, 0x80000001
jns 0x495856
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x495866
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49586f
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x495838
mov dword [ebp - 4], 0xfffffffe
call fcn.0049587f
jmp 0x49589c
mov dword [ebp - 0x2c], 0
jmp 0x4958ae
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x3f
jge 0x4958c1
mov eax, dword [ebp - 0x2c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4958a5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4958d5
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4958eb
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
jmp 0x495919
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x1d
jge 0x49593f
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x495910
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1d
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x44], 0
jmp 0x49595a
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 4
jge 0x495998
cmp dword [ebp - 0x1c], 0
jge 0x49596e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x495984
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x495951
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x254], 0
jmp 0x4959db
mov eax, dword [ebp - 0x254]
add eax, 1
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x14
jge 0x495a1c
mov ecx, dword [ebp - 0x244]
add ecx, dword [ebp - 0x248]
mov dword [ebp - 0x24c], ecx
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], ecx
jmp 0x4959cc
mov edx, dword [ebp - 0x1c]
add edx, 0x14
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x260], 2
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x268], 0
jmp 0x495a68
mov eax, dword [ebp - 0x268]
add eax, 1
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x495aa9
mov ecx, dword [ebp - 0x258]
add ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], edx
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x260]
mov dword [ebp - 0x1c], ecx
jmp 0x495a59
mov edx, dword [ebp - 0x1c]
add edx, 3
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 2
mov dword [ebp - 0x26c], 0
jmp 0x495ad4
mov eax, dword [ebp - 0x26c]
add eax, 1
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x495b0b
mov ecx, dword [ebp - 0x26c]
and ecx, 0x80000001
jns 0x495af0
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x495b00
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x495b09
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x495ac5
mov dword [ebp - 4], 0xfffffffe
call fcn.00495b19
jmp 0x495b37
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 0
jmp 0x495b7a
mov eax, dword [ebp - 0x280]
add eax, 1
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x1e
jge 0x495bbb
mov ecx, dword [ebp - 0x270]
add ecx, dword [ebp - 0x274]
mov dword [ebp - 0x278], ecx
mov edx, dword [ebp - 0x274]
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x278]
mov dword [ebp - 0x1c], ecx
jmp 0x495b6b
mov edx, dword [ebp - 0x1c]
add edx, 0x1e
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x28c], 2
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x294], 0
jmp 0x495c07
mov eax, dword [ebp - 0x294]
add eax, 1
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 5
jge 0x495c48
mov ecx, dword [ebp - 0x284]
add ecx, dword [ebp - 0x288]
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x284], edx
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x288], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x1c], ecx
jmp 0x495bf8
mov edx, dword [ebp - 0x1c]
add edx, 5
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x298], 0
jmp 0x495c6c
mov eax, dword [ebp - 0x298]
add eax, 1
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 8
jge 0x495c85
mov ecx, dword [ebp - 0x298]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x495c5d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x495c99
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x495caf
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x2a0], 1
mov dword [ebp - 0x2a4], 2
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2ac], 0
jmp 0x495cf2
mov edx, dword [ebp - 0x2ac]
add edx, 1
mov dword [ebp - 0x2ac], edx
cmp dword [ebp - 0x2ac], 0
jge 0x495d33
mov eax, dword [ebp - 0x29c]
add eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp - 0x29c], ecx
mov edx, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x1c], eax
jmp 0x495ce3
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x2b8], 2
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2c0], 0
jmp 0x495d7c
mov edx, dword [ebp - 0x2c0]
add edx, 1
mov dword [ebp - 0x2c0], edx
cmp dword [ebp - 0x2c0], 0xc
jge 0x495dbd
mov eax, dword [ebp - 0x2b0]
add eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2b0], ecx
mov edx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2b4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x1c], eax
jmp 0x495d6d
mov ecx, dword [ebp - 0x1c]
add ecx, 0xc
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c4], 0
jmp 0x495de1
mov edx, dword [ebp - 0x2c4]
add edx, 1
mov dword [ebp - 0x2c4], edx
cmp dword [ebp - 0x2c4], 6
jge 0x495e22
cmp dword [ebp - 0x1c], 0
jge 0x495df8
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x495e0e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x4c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x495dd2
mov dword [ebp - 4], 3
mov dword [ebp - 0x4c4], 0
jmp 0x495e44
mov eax, dword [ebp - 0x4c4]
add eax, 1
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 0
jge 0x495e83
mov eax, dword [ebp - 0x4c4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x495e73
mov eax, dword [ebp - 0x4c4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x495e7e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x495e81
mov dword [ebp - 0x1c], eax
jmp 0x495e35
mov dword [ebp - 4], 0xfffffffe
call fcn.00495e91
jmp 0x495e99
mov dword [ebp - 4], 4
mov dword [ebp - 0x4c8], 0
jmp 0x495ebb
mov edx, dword [ebp - 0x4c8]
add edx, 1
mov dword [ebp - 0x4c8], edx
cmp dword [ebp - 0x4c8], 0xa
jge 0x495f02
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x495ed8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x495ee8
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x495f00
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x495f00
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x495eac
mov dword [ebp - 4], 0xfffffffe
call fcn.00495f10
jmp 0x495f1f
mov dword [ebp - 4], 5
mov dword [ebp - 0x4cc], 0
jmp 0x495f41
mov ecx, dword [ebp - 0x4cc]
add ecx, 1
mov dword [ebp - 0x4cc], ecx
cmp dword [ebp - 0x4cc], 0xb
jge 0x495f7c
mov eax, dword [ebp - 0x4cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x495f70
mov eax, dword [ebp - 0x4cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x495f77
and eax, 0xbc614e
jmp 0x495f7a
mov dword [ebp - 0x1c], eax
jmp 0x495f32
mov dword [ebp - 4], 0xfffffffe
call fcn.00495f8a
jmp 0x495f92
mov dword [ebp - 4], 6
mov dword [ebp - 0x4d0], 0
jmp 0x495fb4
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
cmp dword [ebp - 0x4d0], 7
jge 0x495ffb
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x495fd1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x495fe1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x495ff9
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x495ff9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x495fa5
mov dword [ebp - 4], 0xfffffffe
call fcn.00496009
jmp 0x496018
mov dword [ebp - 0x4d4], 0
jmp 0x496033
mov ecx, dword [ebp - 0x4d4]
add ecx, 1
mov dword [ebp - 0x4d4], ecx
cmp dword [ebp - 0x4d4], 7
jge 0x49604c
mov edx, dword [ebp - 0x4d4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x496024
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x496060
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x496076
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x4d8], 0
jmp 0x496091
mov edx, dword [ebp - 0x4d8]
add edx, 1
mov dword [ebp - 0x4d8], edx
cmp dword [ebp - 0x4d8], 0x10
jge 0x4960aa
mov eax, dword [ebp - 0x4d8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x496082
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4960be
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4960d4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 7
mov dword [ebp - 0x4dc], 0
jmp 0x4960f6
mov edx, dword [ebp - 0x4dc]
add edx, 1
mov dword [ebp - 0x4dc], edx
cmp dword [ebp - 0x4dc], 2
jge 0x496131
mov eax, dword [ebp - 0x4dc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x496125
mov eax, dword [ebp - 0x4dc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49612c
and eax, 0xbc614e
jmp 0x49612f
mov dword [ebp - 0x1c], eax
jmp 0x4960e7
mov dword [ebp - 4], 0xfffffffe
call fcn.0049613f
jmp 0x496147
mov dword [ebp - 0x4e0], 0
jmp 0x496162
mov edx, dword [ebp - 0x4e0]
add edx, 1
mov dword [ebp - 0x4e0], edx
cmp dword [ebp - 0x4e0], 8
jge 0x4961a3
cmp dword [ebp - 0x1c], 0
jge 0x496179
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49618f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x496153
mov dword [ebp - 4], 8
mov dword [ebp - 0x6dc], 0
jmp 0x4961c5
mov eax, dword [ebp - 0x6dc]
add eax, 1
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 8
jge 0x4961fc
mov ecx, dword [ebp - 0x6dc]
and ecx, 0x80000001
jns 0x4961e1
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4961f1
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4961fa
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4961b6
mov dword [ebp - 4], 0xfffffffe
call fcn.0049620a
jmp 0x496228
mov dword [ebp - 0x6e0], 0
jmp 0x496243
mov eax, dword [ebp - 0x6e0]
add eax, 1
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 0
jge 0x496284
cmp dword [ebp - 0x1c], 0
jge 0x49625a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x496270
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x496234
mov dword [ebp - 4], 9
mov dword [ebp - 0x8dc], 0
jmp 0x4962a6
mov eax, dword [ebp - 0x8dc]
add eax, 1
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 8
jge 0x4962e1
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4962d5
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4962dc
and eax, 0xbc614e
jmp 0x4962df
mov dword [ebp - 0x1c], eax
jmp 0x496297
mov dword [ebp - 4], 0xfffffffe
call fcn.004962ef
jmp 0x4962f7
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x8e0], 0
jmp 0x496319
mov edx, dword [ebp - 0x8e0]
add edx, 1
mov dword [ebp - 0x8e0], edx
cmp dword [ebp - 0x8e0], 5
jge 0x496358
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x496348
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x496353
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x496356
mov dword [ebp - 0x1c], eax
jmp 0x49630a
mov dword [ebp - 4], 0xfffffffe
call fcn.00496366
jmp 0x49636e
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x8e4], 0
jmp 0x496390
mov edx, dword [ebp - 0x8e4]
add edx, 1
mov dword [ebp - 0x8e4], edx
cmp dword [ebp - 0x8e4], 3
jge 0x4963d7
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4963ad
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4963bd
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4963d5
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4963d5
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x496381
mov dword [ebp - 4], 0xfffffffe
call fcn.004963e5
jmp 0x4963f4
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x8e8], 0
jmp 0x496416
mov ecx, dword [ebp - 0x8e8]
add ecx, 1
mov dword [ebp - 0x8e8], ecx
cmp dword [ebp - 0x8e8], 4
jge 0x49645d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x496433
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x496443
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49645b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49645b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x496407
mov dword [ebp - 4], 0xfffffffe
call fcn.0049646b
jmp 0x49647a
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x8ec], 0
jmp 0x49649c
mov ecx, dword [ebp - 0x8ec]
add ecx, 1
mov dword [ebp - 0x8ec], ecx
cmp dword [ebp - 0x8ec], 2
jge 0x4964d3
mov edx, dword [ebp - 0x8ec]
and edx, 0x80000001
jns 0x4964b8
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x4964c8
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4964d1
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49648d
mov dword [ebp - 4], 0xfffffffe
call fcn.004964e1
jmp 0x4964ff
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x8f0], 0
jmp 0x496521
mov ecx, dword [ebp - 0x8f0]
add ecx, 1
mov dword [ebp - 0x8f0], ecx
cmp dword [ebp - 0x8f0], 0
jge 0x496560
mov eax, dword [ebp - 0x8f0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x496550
mov eax, dword [ebp - 0x8f0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49655b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49655e
mov dword [ebp - 0x1c], eax
jmp 0x496512
mov dword [ebp - 4], 0xfffffffe
call fcn.0049656e
jmp 0x496576
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x8f4], 0
jmp 0x496598
mov edx, dword [ebp - 0x8f4]
add edx, 1
mov dword [ebp - 0x8f4], edx
cmp dword [ebp - 0x8f4], 5
jge 0x4965d3
mov eax, dword [ebp - 0x8f4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4965c7
mov eax, dword [ebp - 0x8f4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4965ce
and eax, 0xbc614e
jmp 0x4965d1
mov dword [ebp - 0x1c], eax
jmp 0x496589
mov dword [ebp - 4], 0xfffffffe
call fcn.004965e1
jmp 0x4965e9
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8f8], 0
jmp 0x49660b
mov edx, dword [ebp - 0x8f8]
add edx, 1
mov dword [ebp - 0x8f8], edx
cmp dword [ebp - 0x8f8], 3
jge 0x496641
mov eax, dword [ebp - 0x8f8]
and eax, 0x80000001
jns 0x496626
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x496636
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49663f
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4965fc
mov dword [ebp - 4], 0xfffffffe
call fcn.0049664f
jmp 0x49666c
mov dword [ebp - 0x8fc], 0
jmp 0x496687
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
cmp dword [ebp - 0x8fc], 6
jge 0x4966c8
cmp dword [ebp - 0x1c], 0
jge 0x49669e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4966b4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xaf8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x496678
mov dword [ebp - 0xafc], 0
jmp 0x4966e3
mov eax, dword [ebp - 0xafc]
add eax, 1
mov dword [ebp - 0xafc], eax
cmp dword [ebp - 0xafc], 8
jge 0x496724
cmp dword [ebp - 0x1c], 0
jge 0x4966fa
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x496710
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcf8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4966d4
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xcfc], 0
jmp 0x496746
mov eax, dword [ebp - 0xcfc]
add eax, 1
mov dword [ebp - 0xcfc], eax
cmp dword [ebp - 0xcfc], 0
jge 0x496785
mov eax, dword [ebp - 0xcfc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x496775
mov eax, dword [ebp - 0xcfc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x496780
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x496783
mov dword [ebp - 0x1c], eax
jmp 0x496737
mov dword [ebp - 4], 0xfffffffe
call fcn.00496793
jmp 0x49679b
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xd00], 0
jmp 0x4967bd
mov edx, dword [ebp - 0xd00]
add edx, 1
mov dword [ebp - 0xd00], edx
cmp dword [ebp - 0xd00], 4
jge 0x4967f8
mov eax, dword [ebp - 0xd00]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4967ec
mov eax, dword [ebp - 0xd00]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4967f3
and eax, 0xbc614e
jmp 0x4967f6
mov dword [ebp - 0x1c], eax
jmp 0x4967ae
mov dword [ebp - 4], 0xfffffffe
call fcn.00496806
jmp 0x49680e
mov dword [ebp - 0xd04], 1
mov dword [ebp - 0xd08], 1
mov dword [ebp - 0xd0c], 2
mov dword [ebp - 0xd10], 0
mov dword [ebp - 0xd14], 0
jmp 0x496851
mov edx, dword [ebp - 0xd14]
add edx, 1
mov dword [ebp - 0xd14], edx
cmp dword [ebp - 0xd14], 1
jge 0x496892
mov eax, dword [ebp - 0xd04]
add eax, dword [ebp - 0xd08]
mov dword [ebp - 0xd0c], eax
mov ecx, dword [ebp - 0xd08]
mov dword [ebp - 0xd04], ecx
mov edx, dword [ebp - 0xd0c]
mov dword [ebp - 0xd08], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xd0c]
mov dword [ebp - 0x1c], eax
jmp 0x496842
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xd18], 0
jmp 0x4968bd
mov edx, dword [ebp - 0xd18]
add edx, 1
mov dword [ebp - 0xd18], edx
cmp dword [ebp - 0xd18], 3
jge 0x4968fc
mov eax, dword [ebp - 0xd18]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4968ec
mov eax, dword [ebp - 0xd18]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4968f7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4968fa
mov dword [ebp - 0x1c], eax
jmp 0x4968ae
mov dword [ebp - 4], 0xfffffffe
call fcn.0049690a
jmp 0x496912
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xd1c], 0
jmp 0x496934
mov edx, dword [ebp - 0xd1c]
add edx, 1
mov dword [ebp - 0xd1c], edx
cmp dword [ebp - 0xd1c], 2
jge 0x49697b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x496951
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x496961
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x496979
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x496979
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x496925
mov dword [ebp - 4], 0xfffffffe
call fcn.00496989
jmp 0x496998
mov dword [ebp - 0xd20], 1
mov dword [ebp - 0xd24], 1
mov dword [ebp - 0xd28], 2
mov dword [ebp - 0xd2c], 0
mov dword [ebp - 0xd30], 0
jmp 0x4969db
mov ecx, dword [ebp - 0xd30]
add ecx, 1
mov dword [ebp - 0xd30], ecx
cmp dword [ebp - 0xd30], 3
jge 0x496a1c
mov edx, dword [ebp - 0xd20]
add edx, dword [ebp - 0xd24]
mov dword [ebp - 0xd28], edx
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0xd20], eax
mov ecx, dword [ebp - 0xd28]
mov dword [ebp - 0xd24], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd28]
mov dword [ebp - 0x1c], edx
jmp 0x4969cc
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xd34], 0
jmp 0x496a47
mov ecx, dword [ebp - 0xd34]
add ecx, 1
mov dword [ebp - 0xd34], ecx
cmp dword [ebp - 0xd34], 1
jge 0x496a82
mov eax, dword [ebp - 0xd34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x496a76
mov eax, dword [ebp - 0xd34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x496a7d
and eax, 0xbc614e
jmp 0x496a80
mov dword [ebp - 0x1c], eax
jmp 0x496a38
mov dword [ebp - 4], 0xfffffffe
call fcn.00496a90
jmp 0x496a98
mov dword [ebp - 0xd38], 1
mov dword [ebp - 0xd3c], 1
mov dword [ebp - 0xd40], 2
mov dword [ebp - 0xd44], 0
mov dword [ebp - 0xd48], 0
jmp 0x496adb
mov edx, dword [ebp - 0xd48]
add edx, 1
mov dword [ebp - 0xd48], edx
cmp dword [ebp - 0xd48], 3
jge 0x496b1c
mov eax, dword [ebp - 0xd38]
add eax, dword [ebp - 0xd3c]
mov dword [ebp - 0xd40], eax
mov ecx, dword [ebp - 0xd3c]
mov dword [ebp - 0xd38], ecx
mov edx, dword [ebp - 0xd40]
mov dword [ebp - 0xd3c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xd40]
mov dword [ebp - 0x1c], eax
jmp 0x496acc
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xd4c], 0
jmp 0x496b47
mov edx, dword [ebp - 0xd4c]
add edx, 1
mov dword [ebp - 0xd4c], edx
cmp dword [ebp - 0xd4c], 1
jge 0x496b86
mov eax, dword [ebp - 0xd4c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x496b76
mov eax, dword [ebp - 0xd4c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x496b81
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x496b84
mov dword [ebp - 0x1c], eax
jmp 0x496b38
mov dword [ebp - 4], 0xfffffffe
call fcn.00496b94
jmp 0x496b9c
mov dword [ebp - 0xd50], 1
mov dword [ebp - 0xd54], 1
mov dword [ebp - 0xd58], 2
mov dword [ebp - 0xd5c], 0
mov dword [ebp - 0xd60], 0
jmp 0x496bdf
mov edx, dword [ebp - 0xd60]
add edx, 1
mov dword [ebp - 0xd60], edx
cmp dword [ebp - 0xd60], 1
jge 0x496c20
mov eax, dword [ebp - 0xd50]
add eax, dword [ebp - 0xd54]
mov dword [ebp - 0xd58], eax
mov ecx, dword [ebp - 0xd54]
mov dword [ebp - 0xd50], ecx
mov edx, dword [ebp - 0xd58]
mov dword [ebp - 0xd54], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xd58]
mov dword [ebp - 0x1c], eax
jmp 0x496bd0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd64], 0
jmp 0x496c44
mov edx, dword [ebp - 0xd64]
add edx, 1
mov dword [ebp - 0xd64], edx
cmp dword [ebp - 0xd64], 4
jge 0x496c85
cmp dword [ebp - 0x1c], 0
jge 0x496c5b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x496c71
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xf60]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x496c35
mov dword [ebp - 0xf64], 1
mov dword [ebp - 0xf68], 1
mov dword [ebp - 0xf6c], 2
mov dword [ebp - 0xf70], 0
mov dword [ebp - 0xf74], 0
jmp 0x496cc8
mov eax, dword [ebp - 0xf74]
add eax, 1
mov dword [ebp - 0xf74], eax
cmp dword [ebp - 0xf74], 3
jge 0x496d09
mov ecx, dword [ebp - 0xf64]
add ecx, dword [ebp - 0xf68]
mov dword [ebp - 0xf6c], ecx
mov edx, dword [ebp - 0xf68]
mov dword [ebp - 0xf64], edx
mov eax, dword [ebp - 0xf6c]
mov dword [ebp - 0xf68], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xf6c]
mov dword [ebp - 0x1c], ecx
jmp 0x496cb9
mov edx, dword [ebp - 0x1c]
add edx, 3
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xf78], 0
jmp 0x496d34
cmp dword [ebp - 0xf78], 0
jge 0x496d6f