Function at 0x48f160
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b8f08
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x2dac
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x48f1bd
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xf
jge 0x48f1f3
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48f1e3
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48f1ee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48f1f1
mov dword [ebp - 0x1c], eax
jmp 0x48f1b4
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f201
jmp 0x48f209
mov dword [ebp - 0x24], 0
jmp 0x48f21b
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0xb
jge 0x48f259
cmp dword [ebp - 0x1c], 0
jge 0x48f22f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48f245
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48f212
mov dword [ebp - 4], 1
mov dword [ebp - 0x224], 0
jmp 0x48f27b
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x1f
jge 0x48f2c2
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48f298
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48f2a8
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x48f2c0
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48f2c0
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48f26c
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f2d0
jmp 0x48f2df
mov dword [ebp - 4], 2
mov dword [ebp - 0x228], 0
jmp 0x48f301
mov ecx, dword [ebp - 0x228]
add ecx, 1
mov dword [ebp - 0x228], ecx
cmp dword [ebp - 0x228], 0x16
jge 0x48f348
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48f31e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48f32e
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48f346
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48f346
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48f2f2
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f356
jmp 0x48f365
mov dword [ebp - 0x22c], 0
jmp 0x48f380
mov ecx, dword [ebp - 0x22c]
add ecx, 1
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x22c], 0x1e
jge 0x48f3c1
cmp dword [ebp - 0x1c], 0
jge 0x48f397
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48f3ad
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48f371
mov dword [ebp - 4], 3
mov dword [ebp - 0x42c], 0
jmp 0x48f3e3
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x11
jge 0x48f41e
mov eax, dword [ebp - 0x42c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48f412
mov eax, dword [ebp - 0x42c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48f419
and eax, 0xbc614e
jmp 0x48f41c
mov dword [ebp - 0x1c], eax
jmp 0x48f3d4
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f42c
jmp 0x48f434
mov dword [ebp - 4], 4
mov dword [ebp - 0x430], 0
jmp 0x48f456
mov edx, dword [ebp - 0x430]
add edx, 1
mov dword [ebp - 0x430], edx
cmp dword [ebp - 0x430], 0x1a
jge 0x48f48c
mov eax, dword [ebp - 0x430]
and eax, 0x80000001
jns 0x48f471
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48f481
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48f48a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48f447
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f49a
jmp 0x48f4b7
mov dword [ebp - 0x434], 0
jmp 0x48f4d2
mov edx, dword [ebp - 0x434]
add edx, 1
mov dword [ebp - 0x434], edx
cmp dword [ebp - 0x434], 0x16
jge 0x48f4eb
mov eax, dword [ebp - 0x434]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48f4c3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48f4ff
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48f515
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 5
mov dword [ebp - 0x438], 0
jmp 0x48f537
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 2
jge 0x48f572
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48f566
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48f56d
and eax, 0xbc614e
jmp 0x48f570
mov dword [ebp - 0x1c], eax
jmp 0x48f528
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f580
jmp 0x48f588
mov dword [ebp - 4], 6
mov dword [ebp - 0x43c], 0
jmp 0x48f5aa
mov edx, dword [ebp - 0x43c]
add edx, 1
mov dword [ebp - 0x43c], edx
cmp dword [ebp - 0x43c], 2
jge 0x48f5e5
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48f5d9
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48f5e0
and eax, 0xbc614e
jmp 0x48f5e3
mov dword [ebp - 0x1c], eax
jmp 0x48f59b
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f5f3
jmp 0x48f5fb
mov dword [ebp - 4], 7
mov dword [ebp - 0x440], 0
jmp 0x48f61d
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 0xc
jge 0x48f664
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48f63a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48f64a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48f662
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48f662
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48f60e
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f672
jmp 0x48f681
mov dword [ebp - 4], 8
mov dword [ebp - 0x444], 0
jmp 0x48f6a3
mov ecx, dword [ebp - 0x444]
add ecx, 1
mov dword [ebp - 0x444], ecx
cmp dword [ebp - 0x444], 8
jge 0x48f6da
mov edx, dword [ebp - 0x444]
and edx, 0x80000001
jns 0x48f6bf
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x48f6cf
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x48f6d8
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48f694
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f6e8
jmp 0x48f706
mov dword [ebp - 4], 9
mov dword [ebp - 0x448], 0
jmp 0x48f728
mov ecx, dword [ebp - 0x448]
add ecx, 1
mov dword [ebp - 0x448], ecx
cmp dword [ebp - 0x448], 0xe
jge 0x48f767
mov eax, dword [ebp - 0x448]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48f757
mov eax, dword [ebp - 0x448]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48f762
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48f765
mov dword [ebp - 0x1c], eax
jmp 0x48f719
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f775
jmp 0x48f77d
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x44c], 0
jmp 0x48f79f
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 0
jge 0x48f7d5
mov eax, dword [ebp - 0x44c]
and eax, 0x80000001
jns 0x48f7ba
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48f7ca
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48f7d3
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48f790
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f7e3
jmp 0x48f800
mov dword [ebp - 0x450], 0
jmp 0x48f81b
mov edx, dword [ebp - 0x450]
add edx, 1
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x450], 7
jge 0x48f834
mov eax, dword [ebp - 0x450]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48f80c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48f848
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48f85e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x454], 0
jmp 0x48f880
mov edx, dword [ebp - 0x454]
add edx, 1
mov dword [ebp - 0x454], edx
cmp dword [ebp - 0x454], 4
jge 0x48f8b6
mov eax, dword [ebp - 0x454]
and eax, 0x80000001
jns 0x48f89b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48f8ab
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48f8b4
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48f871
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f8c4
jmp 0x48f8e1
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x458], 0
jmp 0x48f903
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 0xe
jge 0x48f942
mov eax, dword [ebp - 0x458]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48f932
mov eax, dword [ebp - 0x458]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48f93d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48f940
mov dword [ebp - 0x1c], eax
jmp 0x48f8f4
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f950
jmp 0x48f958
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x45c], 0
jmp 0x48f97a
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 8
jge 0x48f9b9
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48f9a9
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48f9b4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48f9b7
mov dword [ebp - 0x1c], eax
jmp 0x48f96b
mov dword [ebp - 4], 0xfffffffe
call fcn.0048f9c7
jmp 0x48f9cf
mov dword [ebp - 0x460], 0
jmp 0x48f9ea
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 8
jge 0x48fa2b
cmp dword [ebp - 0x1c], 0
jge 0x48fa01
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48fa17
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x658]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48f9db
mov dword [ebp - 0x65c], 0
jmp 0x48fa46
mov eax, dword [ebp - 0x65c]
add eax, 1
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 1
jge 0x48fa5f
mov ecx, dword [ebp - 0x65c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x48fa37
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48fa73
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48fa89
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x660], 0
jmp 0x48faa4
mov edx, dword [ebp - 0x660]
add edx, 1
mov dword [ebp - 0x660], edx
cmp dword [ebp - 0x660], 0xb
jge 0x48fae5
cmp dword [ebp - 0x1c], 0
jge 0x48fabb
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48fad1
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x858]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48fa95
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x85c], 0
jmp 0x48fb07
mov eax, dword [ebp - 0x85c]
add eax, 1
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 3
jge 0x48fb4e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48fb24
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48fb34
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x48fb4c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48fb4c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48faf8
mov dword [ebp - 4], 0xfffffffe
call fcn.0048fb5c
jmp 0x48fb6b
mov dword [ebp - 0x860], 0
jmp 0x48fb86
mov ecx, dword [ebp - 0x860]
add ecx, 1
mov dword [ebp - 0x860], ecx
cmp dword [ebp - 0x860], 8
jge 0x48fb9f
mov edx, dword [ebp - 0x860]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48fb77
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48fbb3
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48fbc9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x864], 1
mov dword [ebp - 0x868], 1
mov dword [ebp - 0x86c], 2
mov dword [ebp - 0x870], 0
mov dword [ebp - 0x874], 0
jmp 0x48fc0c
mov edx, dword [ebp - 0x874]
add edx, 1
mov dword [ebp - 0x874], edx
cmp dword [ebp - 0x874], 1
jge 0x48fc4d
mov eax, dword [ebp - 0x864]
add eax, dword [ebp - 0x868]
mov dword [ebp - 0x86c], eax
mov ecx, dword [ebp - 0x868]
mov dword [ebp - 0x864], ecx
mov edx, dword [ebp - 0x86c]
mov dword [ebp - 0x868], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x86c]
mov dword [ebp - 0x1c], eax
jmp 0x48fbfd
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x878], 0
jmp 0x48fc78
mov edx, dword [ebp - 0x878]
add edx, 1
mov dword [ebp - 0x878], edx
cmp dword [ebp - 0x878], 8
jge 0x48fcb3
mov eax, dword [ebp - 0x878]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48fca7
mov eax, dword [ebp - 0x878]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48fcae
and eax, 0xbc614e
jmp 0x48fcb1
mov dword [ebp - 0x1c], eax
jmp 0x48fc69
mov dword [ebp - 4], 0xfffffffe
call fcn.0048fcc1
jmp 0x48fcc9
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x87c], 0
jmp 0x48fceb
mov edx, dword [ebp - 0x87c]
add edx, 1
mov dword [ebp - 0x87c], edx
cmp dword [ebp - 0x87c], 3
jge 0x48fd32
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48fd08
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48fd18
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48fd30
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48fd30
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48fcdc
mov dword [ebp - 4], 0xfffffffe
call fcn.0048fd40
jmp 0x48fd4f
mov dword [ebp - 0x880], 0
jmp 0x48fd6a
mov ecx, dword [ebp - 0x880]
add ecx, 1
mov dword [ebp - 0x880], ecx
cmp dword [ebp - 0x880], 2
jge 0x48fd83
mov edx, dword [ebp - 0x880]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48fd5b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48fd97
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48fdad
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x884], 0
jmp 0x48fdc8
mov edx, dword [ebp - 0x884]
add edx, 1
mov dword [ebp - 0x884], edx
cmp dword [ebp - 0x884], 7
jge 0x48fde1
mov eax, dword [ebp - 0x884]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48fdb9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48fdf5
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48fe0b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x888], 0
jmp 0x48fe26
mov edx, dword [ebp - 0x888]
add edx, 1
mov dword [ebp - 0x888], edx
cmp dword [ebp - 0x888], 2
jge 0x48fe67
cmp dword [ebp - 0x1c], 0
jge 0x48fe3d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48fe53
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa80]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48fe17
mov dword [ebp - 0xa84], 1
mov dword [ebp - 0xa88], 1
mov dword [ebp - 0xa8c], 2
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa94], 0
jmp 0x48feaa
mov eax, dword [ebp - 0xa94]
add eax, 1
mov dword [ebp - 0xa94], eax
cmp dword [ebp - 0xa94], 4
jge 0x48feeb
mov ecx, dword [ebp - 0xa84]
add ecx, dword [ebp - 0xa88]
mov dword [ebp - 0xa8c], ecx
mov edx, dword [ebp - 0xa88]
mov dword [ebp - 0xa84], edx
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0xa88], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa8c]
mov dword [ebp - 0x1c], ecx
jmp 0x48fe9b
mov edx, dword [ebp - 0x1c]
add edx, 4
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xa98], 0
jmp 0x48ff16
mov eax, dword [ebp - 0xa98]
add eax, 1
mov dword [ebp - 0xa98], eax
cmp dword [ebp - 0xa98], 6
jge 0x48ff55
mov eax, dword [ebp - 0xa98]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48ff45
mov eax, dword [ebp - 0xa98]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48ff50
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48ff53
mov dword [ebp - 0x1c], eax
jmp 0x48ff07
mov dword [ebp - 4], 0xfffffffe
call fcn.0048ff63
jmp 0x48ff6b
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xa9c], 0
jmp 0x48ff8d
mov edx, dword [ebp - 0xa9c]
add edx, 1
mov dword [ebp - 0xa9c], edx
cmp dword [ebp - 0xa9c], 1
jge 0x48ffc3
mov eax, dword [ebp - 0xa9c]
and eax, 0x80000001
jns 0x48ffa8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48ffb8
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48ffc1
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48ff7e
mov dword [ebp - 4], 0xfffffffe
call fcn.0048ffd1
jmp 0x48ffee
mov dword [ebp - 0xaa0], 0
jmp 0x490009
mov edx, dword [ebp - 0xaa0]
add edx, 1
mov dword [ebp - 0xaa0], edx
cmp dword [ebp - 0xaa0], 0
jge 0x49004a
cmp dword [ebp - 0x1c], 0
jge 0x490020
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x490036
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc98]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48fffa
mov dword [ebp - 0xc9c], 0
jmp 0x490065
mov eax, dword [ebp - 0xc9c]
add eax, 1
mov dword [ebp - 0xc9c], eax
cmp dword [ebp - 0xc9c], 5
jge 0x4900a6
cmp dword [ebp - 0x1c], 0
jge 0x49007c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x490092
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe98]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x490056
mov dword [ebp - 0xe9c], 0
jmp 0x4900c1
mov eax, dword [ebp - 0xe9c]
add eax, 1
mov dword [ebp - 0xe9c], eax
cmp dword [ebp - 0xe9c], 7
jge 0x490102
cmp dword [ebp - 0x1c], 0
jge 0x4900d8
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4900ee
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1098]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4900b2
mov dword [ebp - 0x109c], 1
mov dword [ebp - 0x10a0], 1
mov dword [ebp - 0x10a4], 2
mov dword [ebp - 0x10a8], 0
mov dword [ebp - 0x10ac], 0
jmp 0x490145
mov eax, dword [ebp - 0x10ac]
add eax, 1
mov dword [ebp - 0x10ac], eax
cmp dword [ebp - 0x10ac], 3
jge 0x490186
mov ecx, dword [ebp - 0x109c]
add ecx, dword [ebp - 0x10a0]
mov dword [ebp - 0x10a4], ecx
mov edx, dword [ebp - 0x10a0]
mov dword [ebp - 0x109c], edx
mov eax, dword [ebp - 0x10a4]
mov dword [ebp - 0x10a0], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x10a4]
mov dword [ebp - 0x1c], ecx
jmp 0x490136
mov edx, dword [ebp - 0x1c]
add edx, 3
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x10b0], 0
jmp 0x4901b1
mov eax, dword [ebp - 0x10b0]
add eax, 1
mov dword [ebp - 0x10b0], eax
cmp dword [ebp - 0x10b0], 2
jge 0x4901f8
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4901ce
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4901de
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4901f6
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4901f6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4901a2
mov dword [ebp - 4], 0xfffffffe
call fcn.00490206
jmp 0x490215
mov dword [ebp - 0x10b4], 0
jmp 0x490230
mov ecx, dword [ebp - 0x10b4]
add ecx, 1
mov dword [ebp - 0x10b4], ecx
cmp dword [ebp - 0x10b4], 1
jge 0x490249
mov edx, dword [ebp - 0x10b4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x490221
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49025d
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x490273
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x10b8], 0
jmp 0x490295
mov edx, dword [ebp - 0x10b8]
add edx, 1
mov dword [ebp - 0x10b8], edx
cmp dword [ebp - 0x10b8], 1
jge 0x4902cb
mov eax, dword [ebp - 0x10b8]
and eax, 0x80000001
jns 0x4902b0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4902c0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4902c9
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x490286
mov dword [ebp - 4], 0xfffffffe
call fcn.004902d9
jmp 0x4902f6
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x10bc], 0
jmp 0x490318
mov edx, dword [ebp - 0x10bc]
add edx, 1
mov dword [ebp - 0x10bc], edx
cmp dword [ebp - 0x10bc], 0
jge 0x490357
mov eax, dword [ebp - 0x10bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x490347
mov eax, dword [ebp - 0x10bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x490352
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x490355
mov dword [ebp - 0x1c], eax
jmp 0x490309
mov dword [ebp - 4], 0xfffffffe
call fcn.00490365
jmp 0x49036d
mov dword [ebp - 0x10c0], 0
jmp 0x490388
mov edx, dword [ebp - 0x10c0]
add edx, 1
mov dword [ebp - 0x10c0], edx
cmp dword [ebp - 0x10c0], 4
jge 0x4903c9
cmp dword [ebp - 0x1c], 0
jge 0x49039f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4903b5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x12b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x490379
mov dword [ebp - 0x12bc], 0
jmp 0x4903e4
mov eax, dword [ebp - 0x12bc]
add eax, 1
mov dword [ebp - 0x12bc], eax
cmp dword [ebp - 0x12bc], 2
jge 0x490425
cmp dword [ebp - 0x1c], 0
jge 0x4903fb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x490411
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x14b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4903d5
mov dword [ebp - 0x14bc], 0
jmp 0x490440
mov eax, dword [ebp - 0x14bc]
add eax, 1
mov dword [ebp - 0x14bc], eax
cmp dword [ebp - 0x14bc], 1
jge 0x490481
cmp dword [ebp - 0x1c], 0
jge 0x490457
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49046d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x16b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x490431
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x16bc], 0
jmp 0x4904a3
mov eax, dword [ebp - 0x16bc]
add eax, 1
mov dword [ebp - 0x16bc], eax
cmp dword [ebp - 0x16bc], 4
jge 0x4904e2
mov eax, dword [ebp - 0x16bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4904d2
mov eax, dword [ebp - 0x16bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4904dd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4904e0
mov dword [ebp - 0x1c], eax
jmp 0x490494
mov dword [ebp - 4], 0xfffffffe
call fcn.004904f0
jmp 0x4904f8
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x16c0], 0
jmp 0x49051a
cmp dword [ebp - 0x16c0], 1
jge 0x490555
mov eax, dword [ebp - 0x16c0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x490549
mov eax, dword [ebp - 0x16c0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x490550
and eax, 0xbc614e
jmp 0x490553
mov dword [ebp - 4], 0xfffffffe
call fcn.00490563
jmp 0x49056b
mov dword [ebp - 0x16c4], 0
jmp 0x490586