Function at 0x4990f0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b98e8
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x16c0
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x34], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x49914d
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x14
jge 0x49917e
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x499163
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x499173
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49917c
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x499144
mov dword [ebp - 4], 0xfffffffe
call fcn.0049918c
jmp 0x4991aa
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x4991c3
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x13
jge 0x4991f9
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4991e9
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4991f4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4991f7
mov dword [ebp - 0x1c], eax
jmp 0x4991ba
mov dword [ebp - 4], 0xfffffffe
call fcn.00499207
jmp 0x49920f
mov dword [ebp - 0x28], 0
jmp 0x499221
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x28
jge 0x499234
mov eax, dword [ebp - 0x28]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x499218
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x499248
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49925e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 0
jmp 0x499277
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x26
jge 0x4992bb
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x499291
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4992a1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4992b9
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4992b9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49926e
mov dword [ebp - 4], 0xfffffffe
call fcn.004992c9
jmp 0x4992d8
mov dword [ebp - 0x30], 0
jmp 0x4992ea
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0
jge 0x499328
cmp dword [ebp - 0x1c], 0
jge 0x4992fe
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x499314
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4992e1
mov dword [ebp - 0x234], 0
jmp 0x499343
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x20
jge 0x499384
cmp dword [ebp - 0x1c], 0
jge 0x49935a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x499370
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x430]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x499334
mov dword [ebp - 4], 3
mov dword [ebp - 0x434], 0
jmp 0x4993a6
mov eax, dword [ebp - 0x434]
add eax, 1
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 4
jge 0x4993e1
mov eax, dword [ebp - 0x434]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4993d5
mov eax, dword [ebp - 0x434]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4993dc
and eax, 0xbc614e
jmp 0x4993df
mov dword [ebp - 0x1c], eax
jmp 0x499397
mov dword [ebp - 4], 0xfffffffe
call fcn.004993ef
jmp 0x4993f7
mov dword [ebp - 0x438], 0
jmp 0x499412
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 0xf
jge 0x499453
cmp dword [ebp - 0x1c], 0
jge 0x499429
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49943f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x630]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x499403
mov dword [ebp - 4], 4
mov dword [ebp - 0x634], 0
jmp 0x499475
mov eax, dword [ebp - 0x634]
add eax, 1
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 0
jge 0x4994ac
mov ecx, dword [ebp - 0x634]
and ecx, 0x80000001
jns 0x499491
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4994a1
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4994aa
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x499466
mov dword [ebp - 4], 0xfffffffe
call fcn.004994ba
jmp 0x4994d8
mov dword [ebp - 0x638], 1
mov dword [ebp - 0x63c], 1
mov dword [ebp - 0x640], 2
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x648], 0
jmp 0x49951b
mov eax, dword [ebp - 0x648]
add eax, 1
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 1
jge 0x49955c
mov ecx, dword [ebp - 0x638]
add ecx, dword [ebp - 0x63c]
mov dword [ebp - 0x640], ecx
mov edx, dword [ebp - 0x63c]
mov dword [ebp - 0x638], edx
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x63c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x640]
mov dword [ebp - 0x1c], ecx
jmp 0x49950c
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 5
mov dword [ebp - 0x64c], 0
jmp 0x499587
mov eax, dword [ebp - 0x64c]
add eax, 1
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 6
jge 0x4995c6
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4995b6
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4995c1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4995c4
mov dword [ebp - 0x1c], eax
jmp 0x499578
mov dword [ebp - 4], 0xfffffffe
call fcn.004995d4
jmp 0x4995dc
mov dword [ebp - 0x650], 0
jmp 0x4995f7
mov edx, dword [ebp - 0x650]
add edx, 1
mov dword [ebp - 0x650], edx
cmp dword [ebp - 0x650], 7
jge 0x499610
mov eax, dword [ebp - 0x650]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4995e8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x499624
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49963a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x654], 1
mov dword [ebp - 0x658], 1
mov dword [ebp - 0x65c], 2
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x664], 0
jmp 0x49967d
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x664], edx
cmp dword [ebp - 0x664], 2
jge 0x4996be
mov eax, dword [ebp - 0x654]
add eax, dword [ebp - 0x658]
mov dword [ebp - 0x65c], eax
mov ecx, dword [ebp - 0x658]
mov dword [ebp - 0x654], ecx
mov edx, dword [ebp - 0x65c]
mov dword [ebp - 0x658], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x65c]
mov dword [ebp - 0x1c], eax
jmp 0x49966e
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x668], 0
jmp 0x4996e9
mov edx, dword [ebp - 0x668]
add edx, 1
mov dword [ebp - 0x668], edx
cmp dword [ebp - 0x668], 0
jge 0x49971f
mov eax, dword [ebp - 0x668]
and eax, 0x80000001
jns 0x499704
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x499714
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49971d
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4996da
mov dword [ebp - 4], 0xfffffffe
call fcn.0049972d
jmp 0x49974a
mov dword [ebp - 0x66c], 0
jmp 0x499765
mov edx, dword [ebp - 0x66c]
add edx, 1
mov dword [ebp - 0x66c], edx
cmp dword [ebp - 0x66c], 7
jge 0x49977e
mov eax, dword [ebp - 0x66c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x499756
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x499792
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4997a8
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 7
mov dword [ebp - 0x670], 0
jmp 0x4997ca
mov edx, dword [ebp - 0x670]
add edx, 1
mov dword [ebp - 0x670], edx
cmp dword [ebp - 0x670], 7
jge 0x499811
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4997e7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4997f7
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49980f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49980f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4997bb
mov dword [ebp - 4], 0xfffffffe
call fcn.0049981f
jmp 0x49982e
mov dword [ebp - 0x674], 0
jmp 0x499849
mov ecx, dword [ebp - 0x674]
add ecx, 1
mov dword [ebp - 0x674], ecx
cmp dword [ebp - 0x674], 3
jge 0x49988a
cmp dword [ebp - 0x1c], 0
jge 0x499860
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x499876
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x870]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49983a
mov dword [ebp - 0x874], 0
jmp 0x4998a5
mov eax, dword [ebp - 0x874]
add eax, 1
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x874], 4
jge 0x4998e6
cmp dword [ebp - 0x1c], 0
jge 0x4998bc
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4998d2
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa70]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x499896
mov dword [ebp - 0xa74], 0
jmp 0x499901
mov eax, dword [ebp - 0xa74]
add eax, 1
mov dword [ebp - 0xa74], eax
cmp dword [ebp - 0xa74], 6
jge 0x49991a
mov ecx, dword [ebp - 0xa74]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4998f2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49992e
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x499944
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xa78], 0
jmp 0x49995f
mov edx, dword [ebp - 0xa78]
add edx, 1
mov dword [ebp - 0xa78], edx
cmp dword [ebp - 0xa78], 1
jge 0x4999a0
cmp dword [ebp - 0x1c], 0
jge 0x499976
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49998c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc70]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x499950
mov dword [ebp - 0xc74], 0
jmp 0x4999bb
mov eax, dword [ebp - 0xc74]
add eax, 1
mov dword [ebp - 0xc74], eax
cmp dword [ebp - 0xc74], 8
jge 0x4999d4
mov ecx, dword [ebp - 0xc74]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4999ac
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4999e8
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4999fe
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xc78], 0
jmp 0x499a19
mov edx, dword [ebp - 0xc78]
add edx, 1
mov dword [ebp - 0xc78], edx
cmp dword [ebp - 0xc78], 2
jge 0x499a32
mov eax, dword [ebp - 0xc78]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x499a0a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x499a46
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x499a5c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xc7c], 0
jmp 0x499a77
mov edx, dword [ebp - 0xc7c]
add edx, 1
mov dword [ebp - 0xc7c], edx
cmp dword [ebp - 0xc7c], 1
jge 0x499ab8
cmp dword [ebp - 0x1c], 0
jge 0x499a8e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x499aa4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe78]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x499a68
mov dword [ebp - 0xe7c], 0
jmp 0x499ad3
mov eax, dword [ebp - 0xe7c]
add eax, 1
mov dword [ebp - 0xe7c], eax
cmp dword [ebp - 0xe7c], 7
jge 0x499aec
mov ecx, dword [ebp - 0xe7c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x499ac4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x499b00
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x499b16
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xe80], 0
jmp 0x499b31
mov edx, dword [ebp - 0xe80]
add edx, 1
mov dword [ebp - 0xe80], edx
cmp dword [ebp - 0xe80], 6
jge 0x499b72
cmp dword [ebp - 0x1c], 0
jge 0x499b48
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x499b5e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1078]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x499b22
mov dword [ebp - 4], 8
mov dword [ebp - 0x107c], 0
jmp 0x499b94
mov eax, dword [ebp - 0x107c]
add eax, 1
mov dword [ebp - 0x107c], eax
cmp dword [ebp - 0x107c], 4
jge 0x499bcf
mov eax, dword [ebp - 0x107c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x499bc3
mov eax, dword [ebp - 0x107c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x499bca
and eax, 0xbc614e
jmp 0x499bcd
mov dword [ebp - 0x1c], eax
jmp 0x499b85
mov dword [ebp - 4], 0xfffffffe
call fcn.00499bdd
jmp 0x499be5
mov dword [ebp - 4], 9
mov dword [ebp - 0x1080], 0
jmp 0x499c07
mov edx, dword [ebp - 0x1080]
add edx, 1
mov dword [ebp - 0x1080], edx
cmp dword [ebp - 0x1080], 4
jge 0x499c46
mov eax, dword [ebp - 0x1080]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x499c36
mov eax, dword [ebp - 0x1080]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x499c41
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x499c44
mov dword [ebp - 0x1c], eax
jmp 0x499bf8
mov dword [ebp - 4], 0xfffffffe
call fcn.00499c54
jmp 0x499c5c
mov dword [ebp - 0x1084], 0
jmp 0x499c77
mov edx, dword [ebp - 0x1084]
add edx, 1
mov dword [ebp - 0x1084], edx
cmp dword [ebp - 0x1084], 5
jge 0x499cb8
cmp dword [ebp - 0x1c], 0
jge 0x499c8e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x499ca4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1280]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x499c68
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1284], 0
jmp 0x499cda
mov eax, dword [ebp - 0x1284]
add eax, 1
mov dword [ebp - 0x1284], eax
cmp dword [ebp - 0x1284], 7
jge 0x499d11
mov ecx, dword [ebp - 0x1284]
and ecx, 0x80000001
jns 0x499cf6
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x499d06
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x499d0f
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x499ccb
mov dword [ebp - 4], 0xfffffffe
call fcn.00499d1f
jmp 0x499d3d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1288], 0
jmp 0x499d5f
mov eax, dword [ebp - 0x1288]
add eax, 1
mov dword [ebp - 0x1288], eax
cmp dword [ebp - 0x1288], 1
jge 0x499d96
mov ecx, dword [ebp - 0x1288]
and ecx, 0x80000001
jns 0x499d7b
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x499d8b
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x499d94
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x499d50
mov dword [ebp - 4], 0xfffffffe
call fcn.00499da4
jmp 0x499dc2
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x128c], 0
jmp 0x499de4
mov eax, dword [ebp - 0x128c]
add eax, 1
mov dword [ebp - 0x128c], eax
cmp dword [ebp - 0x128c], 0
jge 0x499e1f
mov eax, dword [ebp - 0x128c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x499e13
mov eax, dword [ebp - 0x128c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x499e1a
and eax, 0xbc614e
jmp 0x499e1d
mov dword [ebp - 0x1c], eax
jmp 0x499dd5
mov dword [ebp - 4], 0xfffffffe
call fcn.00499e2d
jmp 0x499e35
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x1290], 0
jmp 0x499e57
mov edx, dword [ebp - 0x1290]
add edx, 1
mov dword [ebp - 0x1290], edx
cmp dword [ebp - 0x1290], 8
jge 0x499e9e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x499e74
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x499e84
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x499e9c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x499e9c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x499e48
mov dword [ebp - 4], 0xfffffffe
call fcn.00499eac
jmp 0x499ebb
mov dword [ebp - 0x1294], 0
jmp 0x499ed6
mov ecx, dword [ebp - 0x1294]
add ecx, 1
mov dword [ebp - 0x1294], ecx
cmp dword [ebp - 0x1294], 3
jge 0x499f17
cmp dword [ebp - 0x1c], 0
jge 0x499eed
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x499f03
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1490]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x499ec7
mov dword [ebp - 0x1494], 0
jmp 0x499f32
mov eax, dword [ebp - 0x1494]
add eax, 1
mov dword [ebp - 0x1494], eax
cmp dword [ebp - 0x1494], 2
jge 0x499f4b
mov ecx, dword [ebp - 0x1494]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x499f23
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x499f5f
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x499f75
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x1498], 0
jmp 0x499f97
mov edx, dword [ebp - 0x1498]
add edx, 1
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jge 0x499fd2
mov eax, dword [ebp - 0x1498]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x499fc6
mov eax, dword [ebp - 0x1498]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x499fcd
and eax, 0xbc614e
jmp 0x499fd0
mov dword [ebp - 0x1c], eax
jmp 0x499f88
mov dword [ebp - 4], 0xfffffffe
call fcn.00499fe0
jmp 0x499fe8
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x149c], 0
jmp 0x49a00a
mov edx, dword [ebp - 0x149c]
add edx, 1
mov dword [ebp - 0x149c], edx
cmp dword [ebp - 0x149c], 2
jge 0x49a045
mov eax, dword [ebp - 0x149c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49a039
mov eax, dword [ebp - 0x149c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49a040
and eax, 0xbc614e
jmp 0x49a043
mov dword [ebp - 0x1c], eax
jmp 0x499ffb
mov dword [ebp - 4], 0xfffffffe
call fcn.0049a053
jmp 0x49a05b
mov dword [ebp - 0x14a0], 0
jmp 0x49a076
mov edx, dword [ebp - 0x14a0]
add edx, 1
mov dword [ebp - 0x14a0], edx
cmp dword [ebp - 0x14a0], 4
jge 0x49a08f
mov eax, dword [ebp - 0x14a0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49a067
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49a0a3
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49a0b9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x14a4], 0
jmp 0x49a0db
mov edx, dword [ebp - 0x14a4]
add edx, 1
mov dword [ebp - 0x14a4], edx
cmp dword [ebp - 0x14a4], 1
jge 0x49a116
mov eax, dword [ebp - 0x14a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49a10a
mov eax, dword [ebp - 0x14a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49a111
and eax, 0xbc614e
jmp 0x49a114
mov dword [ebp - 0x1c], eax
jmp 0x49a0cc
mov dword [ebp - 4], 0xfffffffe
call fcn.0049a124
jmp 0x49a12c
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x14a8], 0
jmp 0x49a14e
mov edx, dword [ebp - 0x14a8]
add edx, 1
mov dword [ebp - 0x14a8], edx
cmp dword [ebp - 0x14a8], 0
jge 0x49a189
mov eax, dword [ebp - 0x14a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49a17d
mov eax, dword [ebp - 0x14a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49a184
and eax, 0xbc614e
jmp 0x49a187
mov dword [ebp - 0x1c], eax
jmp 0x49a13f
mov dword [ebp - 4], 0xfffffffe
call fcn.0049a197
jmp 0x49a19f
mov dword [ebp - 0x14ac], 0
jmp 0x49a1ba
mov edx, dword [ebp - 0x14ac]
add edx, 1
mov dword [ebp - 0x14ac], edx
cmp dword [ebp - 0x14ac], 2
jge 0x49a1d3
mov eax, dword [ebp - 0x14ac]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49a1ab
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49a1e7
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49a1fd
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x14b0], 0
jmp 0x49a21f
mov edx, dword [ebp - 0x14b0]
add edx, 1
mov dword [ebp - 0x14b0], edx
cmp dword [ebp - 0x14b0], 1
jge 0x49a255
mov eax, dword [ebp - 0x14b0]
and eax, 0x80000001
jns 0x49a23a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49a24a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49a253
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49a210
mov dword [ebp - 4], 0xfffffffe
call fcn.0049a263
jmp 0x49a280
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x14b4], 0
jmp 0x49a2a2
mov edx, dword [ebp - 0x14b4]
add edx, 1
mov dword [ebp - 0x14b4], edx
cmp dword [ebp - 0x14b4], 2
jge 0x49a2e1
mov eax, dword [ebp - 0x14b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49a2d1
mov eax, dword [ebp - 0x14b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49a2dc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49a2df
mov dword [ebp - 0x1c], eax
jmp 0x49a293
mov dword [ebp - 4], 0xfffffffe
call fcn.0049a2ef
jmp 0x49a2f7
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x14b8], 0
jmp 0x49a319
cmp dword [ebp - 0x14b8], 0
jge 0x49a34f
mov eax, dword [ebp - 0x14b8]
and eax, 0x80000001
jns 0x49a334
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49a344
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49a34d
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49a30a
mov dword [ebp - 4], 0xfffffffe
call fcn.0049a35d
jmp 0x49a37a
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x14bc], 0
jmp 0x49a39c
cmp dword [ebp - 0x14bc], 4
jge 0x49a3db