Function at 0x487f90
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b87f0
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x14fc
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x4c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x487fed
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x48801e
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x488003
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x488013
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48801c
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x487fe4
mov dword [ebp - 4], 0xfffffffe
call fcn.0048802c
jmp 0x48804a
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x488078
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x24
jge 0x48809e
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
jmp 0x48806f
mov edx, dword [ebp - 0x1c]
add edx, 0x24
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 0
jmp 0x4880c0
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jge 0x4880f6
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4880e6
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4880f1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4880f4
mov dword [ebp - 0x1c], eax
jmp 0x4880b7
mov dword [ebp - 4], 0xfffffffe
call fcn.00488104
jmp 0x48810c
mov dword [ebp - 4], 2
mov dword [ebp - 0x3c], 0
jmp 0x488125
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 1
jge 0x488155
mov eax, dword [ebp - 0x3c]
and eax, 0x80000001
jns 0x48813a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48814a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x488153
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48811c
mov dword [ebp - 4], 0xfffffffe
call fcn.00488163
jmp 0x488180
mov dword [ebp - 4], 3
mov dword [ebp - 0x40], 0
jmp 0x488199
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 5
jge 0x4881cf
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4881bf
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4881ca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4881cd
mov dword [ebp - 0x1c], eax
jmp 0x488190
mov dword [ebp - 4], 0xfffffffe
call fcn.004881dd
jmp 0x4881e5
mov dword [ebp - 4], 4
mov dword [ebp - 0x44], 0
jmp 0x4881fe
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x10
jge 0x48822e
mov eax, dword [ebp - 0x44]
and eax, 0x80000001
jns 0x488213
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x488223
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48822c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4881f5
mov dword [ebp - 4], 0xfffffffe
call fcn.0048823c
jmp 0x488259
mov dword [ebp - 0x48], 0
jmp 0x48826b
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 4
jge 0x4882a9
cmp dword [ebp - 0x1c], 0
jge 0x48827f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x488295
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x248]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x488262
mov dword [ebp - 4], 5
mov dword [ebp - 0x24c], 0
jmp 0x4882cb
mov eax, dword [ebp - 0x24c]
add eax, 1
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0xd
jge 0x488306
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4882fa
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488301
and eax, 0xbc614e
jmp 0x488304
mov dword [ebp - 0x1c], eax
jmp 0x4882bc
mov dword [ebp - 4], 0xfffffffe
call fcn.00488314
jmp 0x48831c
mov dword [ebp - 4], 6
mov dword [ebp - 0x250], 0
jmp 0x48833e
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0xb
jge 0x488385
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48835b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48836b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x488383
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x488383
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48832f
mov dword [ebp - 4], 0xfffffffe
call fcn.00488393
jmp 0x4883a2
mov dword [ebp - 4], 7
mov dword [ebp - 0x254], 0
jmp 0x4883c4
mov ecx, dword [ebp - 0x254]
add ecx, 1
mov dword [ebp - 0x254], ecx
cmp dword [ebp - 0x254], 6
jge 0x488403
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4883f3
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4883fe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x488401
mov dword [ebp - 0x1c], eax
jmp 0x4883b5
mov dword [ebp - 4], 0xfffffffe
call fcn.00488411
jmp 0x488419
mov dword [ebp - 0x258], 0
jmp 0x488434
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 0x10
jge 0x48844d
mov eax, dword [ebp - 0x258]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x488425
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x488461
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x488477
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x25c], 0
jmp 0x488492
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 6
jge 0x4884ab
mov eax, dword [ebp - 0x25c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x488483
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4884bf
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4884d5
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x260], 0
jmp 0x4884f7
mov edx, dword [ebp - 0x260]
add edx, 1
mov dword [ebp - 0x260], edx
cmp dword [ebp - 0x260], 0
jge 0x48853e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x488514
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x488524
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48853c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48853c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4884e8
mov dword [ebp - 4], 0xfffffffe
call fcn.0048854c
jmp 0x48855b
mov dword [ebp - 0x264], 0
jmp 0x488576
mov ecx, dword [ebp - 0x264]
add ecx, 1
mov dword [ebp - 0x264], ecx
cmp dword [ebp - 0x264], 5
jge 0x4885b7
cmp dword [ebp - 0x1c], 0
jge 0x48858d
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4885a3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x488567
mov dword [ebp - 4], 9
mov dword [ebp - 0x464], 0
jmp 0x4885d9
mov eax, dword [ebp - 0x464]
add eax, 1
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 2
jge 0x488610
mov ecx, dword [ebp - 0x464]
and ecx, 0x80000001
jns 0x4885f5
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x488605
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48860e
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4885ca
mov dword [ebp - 4], 0xfffffffe
call fcn.0048861e
jmp 0x48863c
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x470], 2
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x478], 0
jmp 0x48867f
mov eax, dword [ebp - 0x478]
add eax, 1
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 7
jge 0x4886c0
mov ecx, dword [ebp - 0x468]
add ecx, dword [ebp - 0x46c]
mov dword [ebp - 0x470], ecx
mov edx, dword [ebp - 0x46c]
mov dword [ebp - 0x468], edx
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x470]
mov dword [ebp - 0x1c], ecx
jmp 0x488670
mov edx, dword [ebp - 0x1c]
add edx, 7
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x47c], 0
jmp 0x4886e4
mov eax, dword [ebp - 0x47c]
add eax, 1
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 2
jge 0x488725
cmp dword [ebp - 0x1c], 0
jge 0x4886fb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x488711
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x678]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4886d5
mov dword [ebp - 0x67c], 0
jmp 0x488740
mov eax, dword [ebp - 0x67c]
add eax, 1
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 5
jge 0x488759
mov ecx, dword [ebp - 0x67c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x488731
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48876d
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x488783
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x680], 0
jmp 0x48879e
mov edx, dword [ebp - 0x680]
add edx, 1
mov dword [ebp - 0x680], edx
cmp dword [ebp - 0x680], 1
jge 0x4887b7
mov eax, dword [ebp - 0x680]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48878f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4887cb
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4887e1
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x684], 0
jmp 0x488803
mov edx, dword [ebp - 0x684]
add edx, 1
mov dword [ebp - 0x684], edx
cmp dword [ebp - 0x684], 1
jge 0x488839
mov eax, dword [ebp - 0x684]
and eax, 0x80000001
jns 0x48881e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48882e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x488837
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4887f4
mov dword [ebp - 4], 0xfffffffe
call fcn.00488847
jmp 0x488864
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x688], 0
jmp 0x488886
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 0
jge 0x4888c5
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4888b5
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4888c0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4888c3
mov dword [ebp - 0x1c], eax
jmp 0x488877
mov dword [ebp - 4], 0xfffffffe
call fcn.004888d3
jmp 0x4888db
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x68c], 0
jmp 0x4888fd
mov edx, dword [ebp - 0x68c]
add edx, 1
mov dword [ebp - 0x68c], edx
cmp dword [ebp - 0x68c], 3
jge 0x488938
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48892c
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488933
and eax, 0xbc614e
jmp 0x488936
mov dword [ebp - 0x1c], eax
jmp 0x4888ee
mov dword [ebp - 4], 0xfffffffe
call fcn.00488946
jmp 0x48894e
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x690], 0
jmp 0x488970
mov edx, dword [ebp - 0x690]
add edx, 1
mov dword [ebp - 0x690], edx
cmp dword [ebp - 0x690], 6
jge 0x4889b7
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48898d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48899d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4889b5
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4889b5
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x488961
mov dword [ebp - 4], 0xfffffffe
call fcn.004889c5
jmp 0x4889d4
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x694], 0
jmp 0x4889f6
mov ecx, dword [ebp - 0x694]
add ecx, 1
mov dword [ebp - 0x694], ecx
cmp dword [ebp - 0x694], 0
jge 0x488a35
mov eax, dword [ebp - 0x694]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488a25
mov eax, dword [ebp - 0x694]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488a30
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x488a33
mov dword [ebp - 0x1c], eax
jmp 0x4889e7
mov dword [ebp - 4], 0xfffffffe
call fcn.00488a43
jmp 0x488a4b
mov dword [ebp - 0x698], 0
jmp 0x488a66
mov edx, dword [ebp - 0x698]
add edx, 1
mov dword [ebp - 0x698], edx
cmp dword [ebp - 0x698], 2
jge 0x488aa7
cmp dword [ebp - 0x1c], 0
jge 0x488a7d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x488a93
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x890]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x488a57
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x894], 0
jmp 0x488ac9
mov eax, dword [ebp - 0x894]
add eax, 1
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x894], 8
jge 0x488b08
mov eax, dword [ebp - 0x894]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488af8
mov eax, dword [ebp - 0x894]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488b03
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x488b06
mov dword [ebp - 0x1c], eax
jmp 0x488aba
mov dword [ebp - 4], 0xfffffffe
call fcn.00488b16
jmp 0x488b1e
mov dword [ebp - 0x898], 0
jmp 0x488b39
mov edx, dword [ebp - 0x898]
add edx, 1
mov dword [ebp - 0x898], edx
cmp dword [ebp - 0x898], 3
jge 0x488b52
mov eax, dword [ebp - 0x898]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x488b2a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x488b66
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x488b7c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x89c], 0
jmp 0x488b9e
mov edx, dword [ebp - 0x89c]
add edx, 1
mov dword [ebp - 0x89c], edx
cmp dword [ebp - 0x89c], 2
jge 0x488bdd
mov eax, dword [ebp - 0x89c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488bcd
mov eax, dword [ebp - 0x89c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488bd8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x488bdb
mov dword [ebp - 0x1c], eax
jmp 0x488b8f
mov dword [ebp - 4], 0xfffffffe
call fcn.00488beb
jmp 0x488bf3
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8a0], 0
jmp 0x488c15
mov edx, dword [ebp - 0x8a0]
add edx, 1
mov dword [ebp - 0x8a0], edx
cmp dword [ebp - 0x8a0], 1
jge 0x488c5c
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x488c32
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x488c42
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x488c5a
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x488c5a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x488c06
mov dword [ebp - 4], 0xfffffffe
call fcn.00488c6a
jmp 0x488c79
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x8a4], 0
jmp 0x488c9b
mov ecx, dword [ebp - 0x8a4]
add ecx, 1
mov dword [ebp - 0x8a4], ecx
cmp dword [ebp - 0x8a4], 0
jge 0x488cd6
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488cca
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488cd1
and eax, 0xbc614e
jmp 0x488cd4
mov dword [ebp - 0x1c], eax
jmp 0x488c8c
mov dword [ebp - 4], 0xfffffffe
call fcn.00488ce4
jmp 0x488cec
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x8a8], 0
jmp 0x488d0e
mov edx, dword [ebp - 0x8a8]
add edx, 1
mov dword [ebp - 0x8a8], edx
cmp dword [ebp - 0x8a8], 3
jge 0x488d4d
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488d3d
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488d48
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x488d4b
mov dword [ebp - 0x1c], eax
jmp 0x488cff
mov dword [ebp - 4], 0xfffffffe
call fcn.00488d5b
jmp 0x488d63
mov dword [ebp - 0x8ac], 0
jmp 0x488d7e
mov edx, dword [ebp - 0x8ac]
add edx, 1
mov dword [ebp - 0x8ac], edx
cmp dword [ebp - 0x8ac], 2
jge 0x488dbf
cmp dword [ebp - 0x1c], 0
jge 0x488d95
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x488dab
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xaa8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x488d6f
mov dword [ebp - 0xaac], 1
mov dword [ebp - 0xab0], 1
mov dword [ebp - 0xab4], 2
mov dword [ebp - 0xab8], 0
mov dword [ebp - 0xabc], 0
jmp 0x488e02
mov eax, dword [ebp - 0xabc]
add eax, 1
mov dword [ebp - 0xabc], eax
cmp dword [ebp - 0xabc], 1
jge 0x488e43
mov ecx, dword [ebp - 0xaac]
add ecx, dword [ebp - 0xab0]
mov dword [ebp - 0xab4], ecx
mov edx, dword [ebp - 0xab0]
mov dword [ebp - 0xaac], edx
mov eax, dword [ebp - 0xab4]
mov dword [ebp - 0xab0], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xab4]
mov dword [ebp - 0x1c], ecx
jmp 0x488df3
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xac0], 0
jmp 0x488e6e
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
cmp dword [ebp - 0xac0], 3
jge 0x488ead
mov eax, dword [ebp - 0xac0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488e9d
mov eax, dword [ebp - 0xac0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488ea8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x488eab
mov dword [ebp - 0x1c], eax
jmp 0x488e5f
mov dword [ebp - 4], 0xfffffffe
call fcn.00488ebb
jmp 0x488ec3
mov dword [ebp - 0xac4], 0
jmp 0x488ede
mov edx, dword [ebp - 0xac4]
add edx, 1
mov dword [ebp - 0xac4], edx
cmp dword [ebp - 0xac4], 2
jge 0x488f1f
cmp dword [ebp - 0x1c], 0
jge 0x488ef5
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x488f0b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcc0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x488ecf
mov dword [ebp - 0xcc4], 1
mov dword [ebp - 0xcc8], 1
mov dword [ebp - 0xccc], 2
mov dword [ebp - 0xcd0], 0
mov dword [ebp - 0xcd4], 0
jmp 0x488f62
mov eax, dword [ebp - 0xcd4]
add eax, 1
mov dword [ebp - 0xcd4], eax
cmp dword [ebp - 0xcd4], 0
jge 0x488fa3
mov ecx, dword [ebp - 0xcc4]
add ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0xccc], ecx
mov edx, dword [ebp - 0xcc8]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0xcc8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xccc]
mov dword [ebp - 0x1c], ecx
jmp 0x488f53
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xcd8], 0
jmp 0x488fcb
mov eax, dword [ebp - 0xcd8]
add eax, 1
mov dword [ebp - 0xcd8], eax
cmp dword [ebp - 0xcd8], 2
jge 0x48900a
mov eax, dword [ebp - 0xcd8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488ffa
mov eax, dword [ebp - 0xcd8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x489005
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x489008
mov dword [ebp - 0x1c], eax
jmp 0x488fbc
mov dword [ebp - 4], 0xfffffffe
call fcn.00489018
jmp 0x489020
mov dword [ebp - 0xcdc], 0
jmp 0x48903b
mov edx, dword [ebp - 0xcdc]
add edx, 1
mov dword [ebp - 0xcdc], edx
cmp dword [ebp - 0xcdc], 1
jge 0x489054
mov eax, dword [ebp - 0xcdc]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48902c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x489068
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48907e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xce0], 0
jmp 0x4890a0
mov edx, dword [ebp - 0xce0]
add edx, 1
mov dword [ebp - 0xce0], edx
cmp dword [ebp - 0xce0], 3
jge 0x4890d6
mov eax, dword [ebp - 0xce0]
and eax, 0x80000001
jns 0x4890bb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4890cb
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4890d4
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x489091
mov dword [ebp - 4], 0xfffffffe
call fcn.004890e4
jmp 0x489101
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xce4], 0
jmp 0x489123
mov edx, dword [ebp - 0xce4]
add edx, 1
mov dword [ebp - 0xce4], edx
cmp dword [ebp - 0xce4], 0
jge 0x48916a
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x489140
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x489150
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x489168
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489168
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x489114
mov dword [ebp - 4], 0xfffffffe
call fcn.00489178
jmp 0x489187
mov dword [ebp - 0xce8], 0
jmp 0x4891a2
mov ecx, dword [ebp - 0xce8]
add ecx, 1
mov dword [ebp - 0xce8], ecx
cmp dword [ebp - 0xce8], 0
jge 0x4891e3
cmp dword [ebp - 0x1c], 0
jge 0x4891b9
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4891cf
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xee0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x489193
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xee4], 0
jmp 0x489205
mov eax, dword [ebp - 0xee4]
add eax, 1
mov dword [ebp - 0xee4], eax
cmp dword [ebp - 0xee4], 0
jge 0x489240
mov eax, dword [ebp - 0xee4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489234
mov eax, dword [ebp - 0xee4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48923b
and eax, 0xbc614e
jmp 0x48923e
mov dword [ebp - 0x1c], eax
jmp 0x4891f6
mov dword [ebp - 4], 0xfffffffe
call fcn.0048924e
jmp 0x489256
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xee8], 0
jmp 0x489278
mov edx, dword [ebp - 0xee8]
add edx, 1
mov dword [ebp - 0xee8], edx
cmp dword [ebp - 0xee8], 0
jge 0x4892b3
mov eax, dword [ebp - 0xee8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4892a7
mov eax, dword [ebp - 0xee8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4892ae
and eax, 0xbc614e
jmp 0x4892b1
mov dword [ebp - 0x1c], eax
jmp 0x489269
mov dword [ebp - 4], 0xfffffffe
call fcn.004892c1
jmp 0x4892c9
mov dword [ebp - 0xeec], 0
jmp 0x4892e4
cmp dword [ebp - 0xeec], 1
jge 0x489325
cmp dword [ebp - 0x1c], 0
jge 0x4892fb
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x489311
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10e8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4892d5
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x10ec], 0
jmp 0x489347
cmp dword [ebp - 0x10ec], 4
jge 0x489382
mov eax, dword [ebp - 0x10ec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489376
mov dword [ebp - 4], 0xfffffffe
call fcn.00489390
jmp 0x489398