Function at 0x489820
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b8990
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1518
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x489876
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2b
jge 0x4898b4
cmp dword [ebp - 0x1c], 0
jge 0x48988a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4898a0
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48986d
mov dword [ebp - 4], 0
mov dword [ebp - 0x224], 0
jmp 0x4898d6
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0xe
jge 0x489915
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489905
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x489910
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x489913
mov dword [ebp - 0x1c], eax
jmp 0x4898c7
mov dword [ebp - 4], 0xfffffffe
call fcn.00489923
jmp 0x48992b
mov dword [ebp - 4], 1
mov dword [ebp - 0x228], 0
jmp 0x48994d
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0x24
jge 0x489994
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48996a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48997a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x489992
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489992
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48993e
mov dword [ebp - 4], 0xfffffffe
call fcn.004899a2
jmp 0x4899b1
mov dword [ebp - 0x22c], 0
jmp 0x4899cc
mov ecx, dword [ebp - 0x22c]
add ecx, 1
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x22c], 0x40
jge 0x4899e5
mov edx, dword [ebp - 0x22c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4899bd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4899f9
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489a0f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x230], 0
jmp 0x489a31
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 7
jge 0x489a67
mov eax, dword [ebp - 0x230]
and eax, 0x80000001
jns 0x489a4c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x489a5c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x489a65
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x489a22
mov dword [ebp - 4], 0xfffffffe
call fcn.00489a75
jmp 0x489a92
mov dword [ebp - 0x234], 0
jmp 0x489aad
mov edx, dword [ebp - 0x234]
add edx, 1
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 0x1b
jge 0x489aee
cmp dword [ebp - 0x1c], 0
jge 0x489ac4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x489ada
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x430]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x489a9e
mov dword [ebp - 0x434], 0
jmp 0x489b09
mov eax, dword [ebp - 0x434]
add eax, 1
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 5
jge 0x489b4a
cmp dword [ebp - 0x1c], 0
jge 0x489b20
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x489b36
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x630]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x489afa
mov dword [ebp - 4], 3
mov dword [ebp - 0x634], 0
jmp 0x489b6c
mov eax, dword [ebp - 0x634]
add eax, 1
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 7
jge 0x489bab
mov eax, dword [ebp - 0x634]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489b9b
mov eax, dword [ebp - 0x634]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x489ba6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x489ba9
mov dword [ebp - 0x1c], eax
jmp 0x489b5d
mov dword [ebp - 4], 0xfffffffe
call fcn.00489bb9
jmp 0x489bc1
mov dword [ebp - 4], 4
mov dword [ebp - 0x638], 0
jmp 0x489be3
mov edx, dword [ebp - 0x638]
add edx, 1
mov dword [ebp - 0x638], edx
cmp dword [ebp - 0x638], 1
jge 0x489c19
mov eax, dword [ebp - 0x638]
and eax, 0x80000001
jns 0x489bfe
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x489c0e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x489c17
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x489bd4
mov dword [ebp - 4], 0xfffffffe
call fcn.00489c27
jmp 0x489c44
mov dword [ebp - 0x63c], 1
mov dword [ebp - 0x640], 1
mov dword [ebp - 0x644], 2
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x64c], 0
jmp 0x489c87
mov edx, dword [ebp - 0x64c]
add edx, 1
mov dword [ebp - 0x64c], edx
cmp dword [ebp - 0x64c], 3
jge 0x489cc8
mov eax, dword [ebp - 0x63c]
add eax, dword [ebp - 0x640]
mov dword [ebp - 0x644], eax
mov ecx, dword [ebp - 0x640]
mov dword [ebp - 0x63c], ecx
mov edx, dword [ebp - 0x644]
mov dword [ebp - 0x640], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x644]
mov dword [ebp - 0x1c], eax
jmp 0x489c78
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x650], 1
mov dword [ebp - 0x654], 1
mov dword [ebp - 0x658], 2
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x660], 0
jmp 0x489d14
mov edx, dword [ebp - 0x660]
add edx, 1
mov dword [ebp - 0x660], edx
cmp dword [ebp - 0x660], 1
jge 0x489d55
mov eax, dword [ebp - 0x650]
add eax, dword [ebp - 0x654]
mov dword [ebp - 0x658], eax
mov ecx, dword [ebp - 0x654]
mov dword [ebp - 0x650], ecx
mov edx, dword [ebp - 0x658]
mov dword [ebp - 0x654], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x658]
mov dword [ebp - 0x1c], eax
jmp 0x489d05
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x664], 0
jmp 0x489d80
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x664], edx
cmp dword [ebp - 0x664], 1
jge 0x489dbf
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489daf
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x489dba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x489dbd
mov dword [ebp - 0x1c], eax
jmp 0x489d71
mov dword [ebp - 4], 0xfffffffe
call fcn.00489dcd
jmp 0x489dd5
mov dword [ebp - 0x668], 0
jmp 0x489df0
mov edx, dword [ebp - 0x668]
add edx, 1
mov dword [ebp - 0x668], edx
cmp dword [ebp - 0x668], 1
jge 0x489e09
mov eax, dword [ebp - 0x668]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x489de1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x489e1d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489e33
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x66c], 0
jmp 0x489e55
mov edx, dword [ebp - 0x66c]
add edx, 1
mov dword [ebp - 0x66c], edx
cmp dword [ebp - 0x66c], 0
jge 0x489e8b
mov eax, dword [ebp - 0x66c]
and eax, 0x80000001
jns 0x489e70
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x489e80
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x489e89
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x489e46
mov dword [ebp - 4], 0xfffffffe
call fcn.00489e99
jmp 0x489eb6
mov dword [ebp - 4], 7
mov dword [ebp - 0x670], 0
jmp 0x489ed8
mov edx, dword [ebp - 0x670]
add edx, 1
mov dword [ebp - 0x670], edx
cmp dword [ebp - 0x670], 3
jge 0x489f17
mov eax, dword [ebp - 0x670]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489f07
mov eax, dword [ebp - 0x670]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x489f12
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x489f15
mov dword [ebp - 0x1c], eax
jmp 0x489ec9
mov dword [ebp - 4], 0xfffffffe
call fcn.00489f25
jmp 0x489f2d
mov dword [ebp - 0x674], 0
jmp 0x489f48
mov edx, dword [ebp - 0x674]
add edx, 1
mov dword [ebp - 0x674], edx
cmp dword [ebp - 0x674], 0
jge 0x489f61
mov eax, dword [ebp - 0x674]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x489f39
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x489f75
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489f8b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x678], 0
jmp 0x489fa6
mov edx, dword [ebp - 0x678]
add edx, 1
mov dword [ebp - 0x678], edx
cmp dword [ebp - 0x678], 1
jge 0x489fbf
mov eax, dword [ebp - 0x678]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x489f97
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x489fd3
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489fe9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x67c], 0
jmp 0x48a004
mov edx, dword [ebp - 0x67c]
add edx, 1
mov dword [ebp - 0x67c], edx
cmp dword [ebp - 0x67c], 0
jge 0x48a01d
mov eax, dword [ebp - 0x67c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x489ff5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48a031
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48a047
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x680], 0
jmp 0x48a062
mov edx, dword [ebp - 0x680]
add edx, 1
mov dword [ebp - 0x680], edx
cmp dword [ebp - 0x680], 0
jge 0x48a07b
mov eax, dword [ebp - 0x680]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48a053
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48a08f
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48a0a5
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x684], 1
mov dword [ebp - 0x688], 1
mov dword [ebp - 0x68c], 2
mov dword [ebp - 0x690], 0
mov dword [ebp - 0x694], 0
jmp 0x48a0e8
mov edx, dword [ebp - 0x694]
add edx, 1
mov dword [ebp - 0x694], edx
cmp dword [ebp - 0x694], 2
jge 0x48a129
mov eax, dword [ebp - 0x684]
add eax, dword [ebp - 0x688]
mov dword [ebp - 0x68c], eax
mov ecx, dword [ebp - 0x688]
mov dword [ebp - 0x684], ecx
mov edx, dword [ebp - 0x68c]
mov dword [ebp - 0x688], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x68c]
mov dword [ebp - 0x1c], eax
jmp 0x48a0d9
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x698], 0
jmp 0x48a14d
mov edx, dword [ebp - 0x698]
add edx, 1
mov dword [ebp - 0x698], edx
cmp dword [ebp - 0x698], 0
jge 0x48a166
mov eax, dword [ebp - 0x698]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48a13e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48a17a
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48a190
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x69c], 0
jmp 0x48a1b2
mov edx, dword [ebp - 0x69c]
add edx, 1
mov dword [ebp - 0x69c], edx
cmp dword [ebp - 0x69c], 0
jge 0x48a1ed
mov eax, dword [ebp - 0x69c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48a1e1
mov eax, dword [ebp - 0x69c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48a1e8
and eax, 0xbc614e
jmp 0x48a1eb
mov dword [ebp - 0x1c], eax
jmp 0x48a1a3
mov dword [ebp - 4], 0xfffffffe
call fcn.0048a1fb
jmp 0x48a203
mov dword [ebp - 0x6a0], 0
jmp 0x48a21e
mov edx, dword [ebp - 0x6a0]
add edx, 1
mov dword [ebp - 0x6a0], edx
cmp dword [ebp - 0x6a0], 4
jge 0x48a25f
cmp dword [ebp - 0x1c], 0
jge 0x48a235
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48a24b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x898]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48a20f
mov dword [ebp - 4], 9
mov dword [ebp - 0x89c], 0
jmp 0x48a281
mov eax, dword [ebp - 0x89c]
add eax, 1
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 3
jge 0x48a2c8
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48a29e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48a2ae
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x48a2c6
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48a2c6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48a272
mov dword [ebp - 4], 0xfffffffe
call fcn.0048a2d6
jmp 0x48a2e5
mov dword [ebp - 0x8a0], 0
jmp 0x48a300
mov ecx, dword [ebp - 0x8a0]
add ecx, 1
mov dword [ebp - 0x8a0], ecx
cmp dword [ebp - 0x8a0], 0
jge 0x48a319
mov edx, dword [ebp - 0x8a0]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48a2f1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48a32d
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48a343
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x8a4], 0
jmp 0x48a365
mov edx, dword [ebp - 0x8a4]
add edx, 1
mov dword [ebp - 0x8a4], edx
cmp dword [ebp - 0x8a4], 1
jge 0x48a3ac
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48a382
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48a392
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48a3aa
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48a3aa
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48a356
mov dword [ebp - 4], 0xfffffffe
call fcn.0048a3ba
jmp 0x48a3c9
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x8a8], 0
jmp 0x48a3eb
mov ecx, dword [ebp - 0x8a8]
add ecx, 1
mov dword [ebp - 0x8a8], ecx
cmp dword [ebp - 0x8a8], 4
jge 0x48a426
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48a41a
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48a421
and eax, 0xbc614e
jmp 0x48a424
mov dword [ebp - 0x1c], eax
jmp 0x48a3dc
mov dword [ebp - 4], 0xfffffffe
call fcn.0048a434
jmp 0x48a43c
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x8ac], 0
jmp 0x48a45e
mov edx, dword [ebp - 0x8ac]
add edx, 1
mov dword [ebp - 0x8ac], edx
cmp dword [ebp - 0x8ac], 4
jge 0x48a4a5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48a47b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48a48b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48a4a3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48a4a3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48a44f
mov dword [ebp - 4], 0xfffffffe
call fcn.0048a4b3
jmp 0x48a4c2
mov dword [ebp - 0x8b0], 1
mov dword [ebp - 0x8b4], 1
mov dword [ebp - 0x8b8], 2
mov dword [ebp - 0x8bc], 0
mov dword [ebp - 0x8c0], 0
jmp 0x48a505
mov ecx, dword [ebp - 0x8c0]
add ecx, 1
mov dword [ebp - 0x8c0], ecx
cmp dword [ebp - 0x8c0], 3
jge 0x48a546
mov edx, dword [ebp - 0x8b0]
add edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b8], edx
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b0], eax
mov ecx, dword [ebp - 0x8b8]
mov dword [ebp - 0x8b4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8b8]
mov dword [ebp - 0x1c], edx
jmp 0x48a4f6
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c4], 0
jmp 0x48a56a
mov ecx, dword [ebp - 0x8c4]
add ecx, 1
mov dword [ebp - 0x8c4], ecx
cmp dword [ebp - 0x8c4], 2
jge 0x48a5ab
cmp dword [ebp - 0x1c], 0
jge 0x48a581
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48a597
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xac0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48a55b
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xac4], 0
jmp 0x48a5cd
mov eax, dword [ebp - 0xac4]
add eax, 1
mov dword [ebp - 0xac4], eax
cmp dword [ebp - 0xac4], 1
jge 0x48a604
mov ecx, dword [ebp - 0xac4]
and ecx, 0x80000001
jns 0x48a5e9
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x48a5f9
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48a602
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x48a5be
mov dword [ebp - 4], 0xfffffffe
call fcn.0048a612
jmp 0x48a630
mov dword [ebp - 0xac8], 0
jmp 0x48a64b
mov eax, dword [ebp - 0xac8]
add eax, 1
mov dword [ebp - 0xac8], eax
cmp dword [ebp - 0xac8], 3
jge 0x48a68c
cmp dword [ebp - 0x1c], 0
jge 0x48a662
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48a678
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcc0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48a63c
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xcc4], 0
jmp 0x48a6ae
mov eax, dword [ebp - 0xcc4]
add eax, 1
mov dword [ebp - 0xcc4], eax
cmp dword [ebp - 0xcc4], 2
jge 0x48a6f5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48a6cb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48a6db
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x48a6f3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48a6f3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48a69f
mov dword [ebp - 4], 0xfffffffe
call fcn.0048a703
jmp 0x48a712
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xcc8], 0
jmp 0x48a734
mov ecx, dword [ebp - 0xcc8]
add ecx, 1
mov dword [ebp - 0xcc8], ecx
cmp dword [ebp - 0xcc8], 2
jge 0x48a773
mov eax, dword [ebp - 0xcc8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48a763
mov eax, dword [ebp - 0xcc8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48a76e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48a771
mov dword [ebp - 0x1c], eax
jmp 0x48a725
mov dword [ebp - 4], 0xfffffffe
call fcn.0048a781
jmp 0x48a789
mov dword [ebp - 0xccc], 0
jmp 0x48a7a4
mov edx, dword [ebp - 0xccc]
add edx, 1
mov dword [ebp - 0xccc], edx
cmp dword [ebp - 0xccc], 0
jge 0x48a7e5
cmp dword [ebp - 0x1c], 0
jge 0x48a7bb
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48a7d1
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xec8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48a795
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xecc], 0
jmp 0x48a807
mov eax, dword [ebp - 0xecc]
add eax, 1
mov dword [ebp - 0xecc], eax
cmp dword [ebp - 0xecc], 0
jge 0x48a846
mov eax, dword [ebp - 0xecc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48a836
mov eax, dword [ebp - 0xecc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48a841
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48a844
mov dword [ebp - 0x1c], eax
jmp 0x48a7f8
mov dword [ebp - 4], 0xfffffffe
call fcn.0048a854
jmp 0x48a85c
mov dword [ebp - 0xed0], 1
mov dword [ebp - 0xed4], 1
mov dword [ebp - 0xed8], 2
mov dword [ebp - 0xedc], 0
mov dword [ebp - 0xee0], 0
jmp 0x48a89f
mov edx, dword [ebp - 0xee0]
add edx, 1
mov dword [ebp - 0xee0], edx
cmp dword [ebp - 0xee0], 3
jge 0x48a8e0
mov eax, dword [ebp - 0xed0]
add eax, dword [ebp - 0xed4]
mov dword [ebp - 0xed8], eax
mov ecx, dword [ebp - 0xed4]
mov dword [ebp - 0xed0], ecx
mov edx, dword [ebp - 0xed8]
mov dword [ebp - 0xed4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xed8]
mov dword [ebp - 0x1c], eax
jmp 0x48a890
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xee4], 0
jmp 0x48a904
mov edx, dword [ebp - 0xee4]
add edx, 1
mov dword [ebp - 0xee4], edx
cmp dword [ebp - 0xee4], 0
jge 0x48a91d
mov eax, dword [ebp - 0xee4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48a8f5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48a931
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48a947
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xee8], 1
mov dword [ebp - 0xeec], 1
mov dword [ebp - 0xef0], 2
mov dword [ebp - 0xef4], 0
mov dword [ebp - 0xef8], 0
jmp 0x48a98a
mov edx, dword [ebp - 0xef8]
add edx, 1
mov dword [ebp - 0xef8], edx
cmp dword [ebp - 0xef8], 2
jge 0x48a9cb
mov eax, dword [ebp - 0xee8]
add eax, dword [ebp - 0xeec]
mov dword [ebp - 0xef0], eax
mov ecx, dword [ebp - 0xeec]
mov dword [ebp - 0xee8], ecx
mov edx, dword [ebp - 0xef0]
mov dword [ebp - 0xeec], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xef0]
mov dword [ebp - 0x1c], eax
jmp 0x48a97b
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xefc], 0
jmp 0x48a9ef
mov edx, dword [ebp - 0xefc]
add edx, 1
mov dword [ebp - 0xefc], edx
cmp dword [ebp - 0xefc], 4
jge 0x48aa30
cmp dword [ebp - 0x1c], 0
jge 0x48aa06
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48aa1c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10f8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48a9e0
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x10fc], 0
jmp 0x48aa52
mov eax, dword [ebp - 0x10fc]
add eax, 1
mov dword [ebp - 0x10fc], eax
cmp dword [ebp - 0x10fc], 3
jge 0x48aa99
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48aa6f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48aa7f
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x48aa97
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48aa97
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48aa43
mov dword [ebp - 4], 0xfffffffe
call fcn.0048aaa7
jmp 0x48aab6
mov dword [ebp - 0x1100], 0
jmp 0x48aad1
mov ecx, dword [ebp - 0x1100]
add ecx, 1
mov dword [ebp - 0x1100], ecx
cmp dword [ebp - 0x1100], 2
jge 0x48ab12
cmp dword [ebp - 0x1c], 0
jge 0x48aae8
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48aafe
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x12f8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48aac2
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x12fc], 0
jmp 0x48ab34
mov eax, dword [ebp - 0x12fc]
add eax, 1
mov dword [ebp - 0x12fc], eax
cmp dword [ebp - 0x12fc], 4
jge 0x48ab73
mov eax, dword [ebp - 0x12fc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48ab63
mov eax, dword [ebp - 0x12fc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48ab6e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48ab71
mov dword [ebp - 0x1c], eax
jmp 0x48ab25
mov dword [ebp - 4], 0xfffffffe
call fcn.0048ab81
jmp 0x48ab89
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x1300], 0
jmp 0x48abab
mov edx, dword [ebp - 0x1300]
add edx, 1
mov dword [ebp - 0x1300], edx
cmp dword [ebp - 0x1300], 0
jge 0x48abe1
mov eax, dword [ebp - 0x1300]
and eax, 0x80000001
jns 0x48abc6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48abd6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48abdf
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48ab9c
mov dword [ebp - 4], 0xfffffffe
call fcn.0048abef
jmp 0x48ac0c
mov dword [ebp - 0x1304], 0
jmp 0x48ac27
cmp dword [ebp - 0x1304], 0
jge 0x48ac40
mov eax, dword [ebp - 0x1304]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48ac18
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48ac54