Function at 0x497870
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b9790
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1518
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x44], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x4978cd
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x4978fe
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x4978e3
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4978f3
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4978fc
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4978c4
mov dword [ebp - 4], 0xfffffffe
call fcn.0049790c
jmp 0x49792a
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x497943
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x17
jge 0x497979
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x497969
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x497974
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x497977
mov dword [ebp - 0x1c], eax
jmp 0x49793a
mov dword [ebp - 4], 0xfffffffe
call fcn.00497987
jmp 0x49798f
mov dword [ebp - 4], 2
mov dword [ebp - 0x28], 0
jmp 0x4979a8
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x25
jge 0x4979ec
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4979c2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4979d2
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4979ea
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4979ea
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49799f
mov dword [ebp - 4], 0xfffffffe
call fcn.004979fa
jmp 0x497a09
mov dword [ebp - 4], 3
mov dword [ebp - 0x2c], 0
jmp 0x497a22
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0x2b
jge 0x497a54
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x497a48
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x497a4f
and eax, 0xbc614e
jmp 0x497a52
mov dword [ebp - 0x1c], eax
jmp 0x497a19
mov dword [ebp - 4], 0xfffffffe
call fcn.00497a62
jmp 0x497a6a
mov dword [ebp - 4], 4
mov dword [ebp - 0x30], 0
jmp 0x497a83
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x10
jge 0x497ab3
mov eax, dword [ebp - 0x30]
and eax, 0x80000001
jns 0x497a98
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x497aa8
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x497ab1
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x497a7a
mov dword [ebp - 4], 0xfffffffe
call fcn.00497ac1
jmp 0x497ade
mov dword [ebp - 4], 5
mov dword [ebp - 0x34], 0
jmp 0x497af7
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 1
jge 0x497b3b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x497b11
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x497b21
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x497b39
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x497b39
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x497aee
mov dword [ebp - 4], 0xfffffffe
call fcn.00497b49
jmp 0x497b58
mov dword [ebp - 0x38], 0
jmp 0x497b6a
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0x10
jge 0x497b7d
mov edx, dword [ebp - 0x38]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x497b61
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x497b91
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x497ba7
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x3c], 0
jmp 0x497bb9
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0
jge 0x497bcc
mov eax, dword [ebp - 0x3c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x497bb0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x497be0
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x497bf6
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x40], 0
jmp 0x497c08
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 6
jge 0x497c46
cmp dword [ebp - 0x1c], 0
jge 0x497c1c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x497c32
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x497bff
mov dword [ebp - 0x244], 0
jmp 0x497c61
mov eax, dword [ebp - 0x244]
add eax, 1
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 6
jge 0x497c7a
mov ecx, dword [ebp - 0x244]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x497c52
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x497c8e
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x497ca4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x248], 0
jmp 0x497cc6
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 2
jge 0x497d05
mov eax, dword [ebp - 0x248]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x497cf5
mov eax, dword [ebp - 0x248]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x497d00
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x497d03
mov dword [ebp - 0x1c], eax
jmp 0x497cb7
mov dword [ebp - 4], 0xfffffffe
call fcn.00497d13
jmp 0x497d1b
mov dword [ebp - 0x24c], 0
jmp 0x497d36
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 0
jge 0x497d4f
mov eax, dword [ebp - 0x24c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x497d27
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x497d63
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x497d79
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 7
mov dword [ebp - 0x250], 0
jmp 0x497d9b
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 7
jge 0x497dd6
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x497dca
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x497dd1
and eax, 0xbc614e
jmp 0x497dd4
mov dword [ebp - 0x1c], eax
jmp 0x497d8c
mov dword [ebp - 4], 0xfffffffe
call fcn.00497de4
jmp 0x497dec
mov dword [ebp - 0x254], 0
jmp 0x497e07
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 7
jge 0x497e48
cmp dword [ebp - 0x1c], 0
jge 0x497e1e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x497e34
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x450]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x497df8
mov dword [ebp - 4], 8
mov dword [ebp - 0x454], 0
jmp 0x497e6a
mov eax, dword [ebp - 0x454]
add eax, 1
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 7
jge 0x497ea5
mov eax, dword [ebp - 0x454]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x497e99
mov eax, dword [ebp - 0x454]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x497ea0
and eax, 0xbc614e
jmp 0x497ea3
mov dword [ebp - 0x1c], eax
jmp 0x497e5b
mov dword [ebp - 4], 0xfffffffe
call fcn.00497eb3
jmp 0x497ebb
mov dword [ebp - 4], 9
mov dword [ebp - 0x458], 0
jmp 0x497edd
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 1
jge 0x497f24
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x497efa
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x497f0a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x497f22
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x497f22
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x497ece
mov dword [ebp - 4], 0xfffffffe
call fcn.00497f32
jmp 0x497f41
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x464], 2
mov dword [ebp - 0x468], 0
mov dword [ebp - 0x46c], 0
jmp 0x497f84
mov ecx, dword [ebp - 0x46c]
add ecx, 1
mov dword [ebp - 0x46c], ecx
cmp dword [ebp - 0x46c], 0
jge 0x497fc5
mov edx, dword [ebp - 0x45c]
add edx, dword [ebp - 0x460]
mov dword [ebp - 0x464], edx
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x45c], eax
mov ecx, dword [ebp - 0x464]
mov dword [ebp - 0x460], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x464]
mov dword [ebp - 0x1c], edx
jmp 0x497f75
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x470], 0
jmp 0x497fe6
mov ecx, dword [ebp - 0x470]
add ecx, 1
mov dword [ebp - 0x470], ecx
cmp dword [ebp - 0x470], 4
jge 0x497fff
mov edx, dword [ebp - 0x470]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x497fd7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x498013
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x498029
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x474], 0
jmp 0x498044
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 8
jge 0x498085
cmp dword [ebp - 0x1c], 0
jge 0x49805b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x498071
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x670]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x498035
mov dword [ebp - 0x674], 0
jmp 0x4980a0
mov eax, dword [ebp - 0x674]
add eax, 1
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 3
jge 0x4980b9
mov ecx, dword [ebp - 0x674]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x498091
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4980cd
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4980e3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x678], 0
jmp 0x4980fe
mov edx, dword [ebp - 0x678]
add edx, 1
mov dword [ebp - 0x678], edx
cmp dword [ebp - 0x678], 8
jge 0x49813f
cmp dword [ebp - 0x1c], 0
jge 0x498115
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49812b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x870]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4980ef
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x874], 0
jmp 0x498161
mov eax, dword [ebp - 0x874]
add eax, 1
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x874], 0
jge 0x4981a0
mov eax, dword [ebp - 0x874]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x498190
mov eax, dword [ebp - 0x874]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49819b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49819e
mov dword [ebp - 0x1c], eax
jmp 0x498152
mov dword [ebp - 4], 0xfffffffe
call fcn.004981ae
jmp 0x4981b6
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x878], 0
jmp 0x4981d8
mov edx, dword [ebp - 0x878]
add edx, 1
mov dword [ebp - 0x878], edx
cmp dword [ebp - 0x878], 7
jge 0x49820e
mov eax, dword [ebp - 0x878]
and eax, 0x80000001
jns 0x4981f3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x498203
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49820c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4981c9
mov dword [ebp - 4], 0xfffffffe
call fcn.0049821c
jmp 0x498239
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x87c], 0
jmp 0x49825b
mov edx, dword [ebp - 0x87c]
add edx, 1
mov dword [ebp - 0x87c], edx
cmp dword [ebp - 0x87c], 1
jge 0x498296
mov eax, dword [ebp - 0x87c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49828a
mov eax, dword [ebp - 0x87c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x498291
and eax, 0xbc614e
jmp 0x498294
mov dword [ebp - 0x1c], eax
jmp 0x49824c
mov dword [ebp - 4], 0xfffffffe
call fcn.004982a4
jmp 0x4982ac
mov dword [ebp - 0x880], 0
jmp 0x4982c7
mov edx, dword [ebp - 0x880]
add edx, 1
mov dword [ebp - 0x880], edx
cmp dword [ebp - 0x880], 0
jge 0x4982e0
mov eax, dword [ebp - 0x880]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4982b8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4982f4
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49830a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x884], 1
mov dword [ebp - 0x888], 1
mov dword [ebp - 0x88c], 2
mov dword [ebp - 0x890], 0
mov dword [ebp - 0x894], 0
jmp 0x49834d
mov edx, dword [ebp - 0x894]
add edx, 1
mov dword [ebp - 0x894], edx
cmp dword [ebp - 0x894], 8
jge 0x49838e
mov eax, dword [ebp - 0x884]
add eax, dword [ebp - 0x888]
mov dword [ebp - 0x88c], eax
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x884], ecx
mov edx, dword [ebp - 0x88c]
mov dword [ebp - 0x888], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x88c]
mov dword [ebp - 0x1c], eax
jmp 0x49833e
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x898], 0
jmp 0x4983b9
mov edx, dword [ebp - 0x898]
add edx, 1
mov dword [ebp - 0x898], edx
cmp dword [ebp - 0x898], 0
jge 0x498400
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4983d6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4983e6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4983fe
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4983fe
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4983aa
mov dword [ebp - 4], 0xfffffffe
call fcn.0049840e
jmp 0x49841d
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x89c], 0
jmp 0x49843f
mov ecx, dword [ebp - 0x89c]
add ecx, 1
mov dword [ebp - 0x89c], ecx
cmp dword [ebp - 0x89c], 0
jge 0x498486
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49845c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49846c
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x498484
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x498484
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x498430
mov dword [ebp - 4], 0xfffffffe
call fcn.00498494
jmp 0x4984a3
mov dword [ebp - 0x8a0], 0
jmp 0x4984be
mov ecx, dword [ebp - 0x8a0]
add ecx, 1
mov dword [ebp - 0x8a0], ecx
cmp dword [ebp - 0x8a0], 1
jge 0x4984d7
mov edx, dword [ebp - 0x8a0]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4984af
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4984eb
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x498501
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x8a4], 0
jmp 0x498523
mov edx, dword [ebp - 0x8a4]
add edx, 1
mov dword [ebp - 0x8a4], edx
cmp dword [ebp - 0x8a4], 4
jge 0x49855e
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x498552
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x498559
and eax, 0xbc614e
jmp 0x49855c
mov dword [ebp - 0x1c], eax
jmp 0x498514
mov dword [ebp - 4], 0xfffffffe
call fcn.0049856c
jmp 0x498574
mov dword [ebp - 0x8a8], 0
jmp 0x49858f
mov edx, dword [ebp - 0x8a8]
add edx, 1
mov dword [ebp - 0x8a8], edx
cmp dword [ebp - 0x8a8], 5
jge 0x4985d0
cmp dword [ebp - 0x1c], 0
jge 0x4985a6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4985bc
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xaa0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x498580
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xaa4], 0
jmp 0x4985f2
mov eax, dword [ebp - 0xaa4]
add eax, 1
mov dword [ebp - 0xaa4], eax
cmp dword [ebp - 0xaa4], 0
jge 0x498629
mov ecx, dword [ebp - 0xaa4]
and ecx, 0x80000001
jns 0x49860e
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x49861e
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x498627
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4985e3
mov dword [ebp - 4], 0xfffffffe
call fcn.00498637
jmp 0x498655
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xaa8], 0
jmp 0x498677
mov eax, dword [ebp - 0xaa8]
add eax, 1
mov dword [ebp - 0xaa8], eax
cmp dword [ebp - 0xaa8], 0
jge 0x4986be
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x498694
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4986a4
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4986bc
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4986bc
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x498668
mov dword [ebp - 4], 0xfffffffe
call fcn.004986cc
jmp 0x4986db
mov dword [ebp - 0xaac], 0
jmp 0x4986f6
mov ecx, dword [ebp - 0xaac]
add ecx, 1
mov dword [ebp - 0xaac], ecx
cmp dword [ebp - 0xaac], 0
jge 0x498737
cmp dword [ebp - 0x1c], 0
jge 0x49870d
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x498723
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xca8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4986e7
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xcac], 0
jmp 0x498759
mov eax, dword [ebp - 0xcac]
add eax, 1
mov dword [ebp - 0xcac], eax
cmp dword [ebp - 0xcac], 3
jge 0x498794
mov eax, dword [ebp - 0xcac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x498788
mov eax, dword [ebp - 0xcac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49878f
and eax, 0xbc614e
jmp 0x498792
mov dword [ebp - 0x1c], eax
jmp 0x49874a
mov dword [ebp - 4], 0xfffffffe
call fcn.004987a2
jmp 0x4987aa
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xcb0], 0
jmp 0x4987cc
mov edx, dword [ebp - 0xcb0]
add edx, 1
mov dword [ebp - 0xcb0], edx
cmp dword [ebp - 0xcb0], 1
jge 0x498807
mov eax, dword [ebp - 0xcb0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4987fb
mov eax, dword [ebp - 0xcb0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x498802
and eax, 0xbc614e
jmp 0x498805
mov dword [ebp - 0x1c], eax
jmp 0x4987bd
mov dword [ebp - 4], 0xfffffffe
call fcn.00498815
jmp 0x49881d
mov dword [ebp - 0xcb4], 1
mov dword [ebp - 0xcb8], 1
mov dword [ebp - 0xcbc], 2
mov dword [ebp - 0xcc0], 0
mov dword [ebp - 0xcc4], 0
jmp 0x498860
mov edx, dword [ebp - 0xcc4]
add edx, 1
mov dword [ebp - 0xcc4], edx
cmp dword [ebp - 0xcc4], 4
jge 0x4988a1
mov eax, dword [ebp - 0xcb4]
add eax, dword [ebp - 0xcb8]
mov dword [ebp - 0xcbc], eax
mov ecx, dword [ebp - 0xcb8]
mov dword [ebp - 0xcb4], ecx
mov edx, dword [ebp - 0xcbc]
mov dword [ebp - 0xcb8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcbc]
mov dword [ebp - 0x1c], eax
jmp 0x498851
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xcc8], 0
jmp 0x4988c5
mov edx, dword [ebp - 0xcc8]
add edx, 1
mov dword [ebp - 0xcc8], edx
cmp dword [ebp - 0xcc8], 3
jge 0x498906
cmp dword [ebp - 0x1c], 0
jge 0x4988dc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4988f2
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xec0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4988b6
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xec4], 0
jmp 0x498928
mov eax, dword [ebp - 0xec4]
add eax, 1
mov dword [ebp - 0xec4], eax
cmp dword [ebp - 0xec4], 2
jge 0x498967
mov eax, dword [ebp - 0xec4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x498957
mov eax, dword [ebp - 0xec4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x498962
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x498965
mov dword [ebp - 0x1c], eax
jmp 0x498919
mov dword [ebp - 4], 0xfffffffe
call fcn.00498975
jmp 0x49897d
mov dword [ebp - 0xec8], 0
jmp 0x498998
mov edx, dword [ebp - 0xec8]
add edx, 1
mov dword [ebp - 0xec8], edx
cmp dword [ebp - 0xec8], 3
jge 0x4989d9
cmp dword [ebp - 0x1c], 0
jge 0x4989af
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4989c5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x498989
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x10c4], 0
jmp 0x4989fb
mov eax, dword [ebp - 0x10c4]
add eax, 1
mov dword [ebp - 0x10c4], eax
cmp dword [ebp - 0x10c4], 0
jge 0x498a36
mov eax, dword [ebp - 0x10c4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x498a2a
mov eax, dword [ebp - 0x10c4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x498a31
and eax, 0xbc614e
jmp 0x498a34
mov dword [ebp - 0x1c], eax
jmp 0x4989ec
mov dword [ebp - 4], 0xfffffffe
call fcn.00498a44
jmp 0x498a4c
mov dword [ebp - 0x10c8], 0
jmp 0x498a67
mov edx, dword [ebp - 0x10c8]
add edx, 1
mov dword [ebp - 0x10c8], edx
cmp dword [ebp - 0x10c8], 4
jge 0x498aa8
cmp dword [ebp - 0x1c], 0
jge 0x498a7e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x498a94
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x12c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x498a58
mov dword [ebp - 0x12c4], 1
mov dword [ebp - 0x12c8], 1
mov dword [ebp - 0x12cc], 2
mov dword [ebp - 0x12d0], 0
mov dword [ebp - 0x12d4], 0
jmp 0x498aeb
mov eax, dword [ebp - 0x12d4]
add eax, 1
mov dword [ebp - 0x12d4], eax
cmp dword [ebp - 0x12d4], 2
jge 0x498b2c
mov ecx, dword [ebp - 0x12c4]
add ecx, dword [ebp - 0x12c8]
mov dword [ebp - 0x12cc], ecx
mov edx, dword [ebp - 0x12c8]
mov dword [ebp - 0x12c4], edx
mov eax, dword [ebp - 0x12cc]
mov dword [ebp - 0x12c8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x12cc]
mov dword [ebp - 0x1c], ecx
jmp 0x498adc
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x12d8], 1
mov dword [ebp - 0x12dc], 1
mov dword [ebp - 0x12e0], 2
mov dword [ebp - 0x12e4], 0
mov dword [ebp - 0x12e8], 0
jmp 0x498b78
mov eax, dword [ebp - 0x12e8]
add eax, 1
mov dword [ebp - 0x12e8], eax
cmp dword [ebp - 0x12e8], 2
jge 0x498bb9
mov ecx, dword [ebp - 0x12d8]
add ecx, dword [ebp - 0x12dc]
mov dword [ebp - 0x12e0], ecx
mov edx, dword [ebp - 0x12dc]
mov dword [ebp - 0x12d8], edx
mov eax, dword [ebp - 0x12e0]
mov dword [ebp - 0x12dc], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x12e0]
mov dword [ebp - 0x1c], ecx
jmp 0x498b69
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x12ec], 0
jmp 0x498bdd
cmp dword [ebp - 0x12ec], 4
jge 0x498c1e
cmp dword [ebp - 0x1c], 0
jge 0x498bf4
mov dword [ebp - 0x14ec], 1
mov dword [ebp - 0x14f0], 1
mov dword [ebp - 0x14f4], 2
mov dword [ebp - 0x14f8], 0
mov dword [ebp - 0x14fc], 0
jmp 0x498c61