Function at 0x482780
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b8298
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1328
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x4827dd
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x12
jge 0x48280e
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x4827f3
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x482803
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48280c
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4827d4
mov dword [ebp - 4], 0xfffffffe
call fcn.0048281c
jmp 0x48283a
mov dword [ebp - 0x24], 0
jmp 0x48284c
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x38
jge 0x48288a
cmp dword [ebp - 0x1c], 0
jge 0x482860
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x482876
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x482843
mov dword [ebp - 4], 1
mov dword [ebp - 0x224], 0
jmp 0x4828ac
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x20
jge 0x4828e7
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4828db
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4828e2
and eax, 0xbc614e
jmp 0x4828e5
mov dword [ebp - 0x1c], eax
jmp 0x48289d
mov dword [ebp - 4], 0xfffffffe
call fcn.004828f5
jmp 0x4828fd
mov dword [ebp - 4], 2
mov dword [ebp - 0x228], 0
jmp 0x48291f
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0x11
jge 0x482966
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48293c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48294c
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x482964
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x482964
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x482910
mov dword [ebp - 4], 0xfffffffe
call fcn.00482974
jmp 0x482983
mov dword [ebp - 0x22c], 0
jmp 0x48299e
mov ecx, dword [ebp - 0x22c]
add ecx, 1
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x22c], 0
jge 0x4829df
cmp dword [ebp - 0x1c], 0
jge 0x4829b5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4829cb
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48298f
mov dword [ebp - 0x42c], 0
jmp 0x4829fa
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 2
jge 0x482a3b
cmp dword [ebp - 0x1c], 0
jge 0x482a11
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x482a27
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x628]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4829eb
mov dword [ebp - 4], 3
mov dword [ebp - 0x62c], 0
jmp 0x482a5d
mov eax, dword [ebp - 0x62c]
add eax, 1
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0x14
jge 0x482aa4
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x482a7a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x482a8a
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x482aa2
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x482aa2
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x482a4e
mov dword [ebp - 4], 0xfffffffe
call fcn.00482ab2
jmp 0x482ac1
mov dword [ebp - 4], 4
mov dword [ebp - 0x630], 0
jmp 0x482ae3
mov ecx, dword [ebp - 0x630]
add ecx, 1
mov dword [ebp - 0x630], ecx
cmp dword [ebp - 0x630], 0x14
jge 0x482b1e
mov eax, dword [ebp - 0x630]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x482b12
mov eax, dword [ebp - 0x630]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x482b19
and eax, 0xbc614e
jmp 0x482b1c
mov dword [ebp - 0x1c], eax
jmp 0x482ad4
mov dword [ebp - 4], 0xfffffffe
call fcn.00482b2c
jmp 0x482b34
mov dword [ebp - 0x634], 0
jmp 0x482b4f
mov edx, dword [ebp - 0x634]
add edx, 1
mov dword [ebp - 0x634], edx
cmp dword [ebp - 0x634], 2
jge 0x482b90
cmp dword [ebp - 0x1c], 0
jge 0x482b66
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x482b7c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x830]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x482b40
mov dword [ebp - 0x834], 1
mov dword [ebp - 0x838], 1
mov dword [ebp - 0x83c], 2
mov dword [ebp - 0x840], 0
mov dword [ebp - 0x844], 0
jmp 0x482bd3
mov eax, dword [ebp - 0x844]
add eax, 1
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 5
jge 0x482c14
mov ecx, dword [ebp - 0x834]
add ecx, dword [ebp - 0x838]
mov dword [ebp - 0x83c], ecx
mov edx, dword [ebp - 0x838]
mov dword [ebp - 0x834], edx
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x838], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x83c]
mov dword [ebp - 0x1c], ecx
jmp 0x482bc4
mov edx, dword [ebp - 0x1c]
add edx, 5
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 5
mov dword [ebp - 0x848], 0
jmp 0x482c3f
mov eax, dword [ebp - 0x848]
add eax, 1
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 6
jge 0x482c7a
mov eax, dword [ebp - 0x848]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x482c6e
mov eax, dword [ebp - 0x848]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x482c75
and eax, 0xbc614e
jmp 0x482c78
mov dword [ebp - 0x1c], eax
jmp 0x482c30
mov dword [ebp - 4], 0xfffffffe
call fcn.00482c88
jmp 0x482c90
mov dword [ebp - 4], 6
mov dword [ebp - 0x84c], 0
jmp 0x482cb2
mov edx, dword [ebp - 0x84c]
add edx, 1
mov dword [ebp - 0x84c], edx
cmp dword [ebp - 0x84c], 0xa
jge 0x482cf1
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x482ce1
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x482cec
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x482cef
mov dword [ebp - 0x1c], eax
jmp 0x482ca3
mov dword [ebp - 4], 0xfffffffe
call fcn.00482cff
jmp 0x482d07
mov dword [ebp - 0x850], 0
jmp 0x482d22
mov edx, dword [ebp - 0x850]
add edx, 1
mov dword [ebp - 0x850], edx
cmp dword [ebp - 0x850], 1
jge 0x482d63
cmp dword [ebp - 0x1c], 0
jge 0x482d39
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x482d4f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa48]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x482d13
mov dword [ebp - 4], 7
mov dword [ebp - 0xa4c], 0
jmp 0x482d85
mov eax, dword [ebp - 0xa4c]
add eax, 1
mov dword [ebp - 0xa4c], eax
cmp dword [ebp - 0xa4c], 0
jge 0x482dbc
mov ecx, dword [ebp - 0xa4c]
and ecx, 0x80000001
jns 0x482da1
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x482db1
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x482dba
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x482d76
mov dword [ebp - 4], 0xfffffffe
call fcn.00482dca
jmp 0x482de8
mov dword [ebp - 0xa50], 1
mov dword [ebp - 0xa54], 1
mov dword [ebp - 0xa58], 2
mov dword [ebp - 0xa5c], 0
mov dword [ebp - 0xa60], 0
jmp 0x482e2b
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
cmp dword [ebp - 0xa60], 5
jge 0x482e6c
mov ecx, dword [ebp - 0xa50]
add ecx, dword [ebp - 0xa54]
mov dword [ebp - 0xa58], ecx
mov edx, dword [ebp - 0xa54]
mov dword [ebp - 0xa50], edx
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0xa54], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa58]
mov dword [ebp - 0x1c], ecx
jmp 0x482e1c
mov edx, dword [ebp - 0x1c]
add edx, 5
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 8
mov dword [ebp - 0xa64], 0
jmp 0x482e97
mov eax, dword [ebp - 0xa64]
add eax, 1
mov dword [ebp - 0xa64], eax
cmp dword [ebp - 0xa64], 0
jge 0x482ed6
mov eax, dword [ebp - 0xa64]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x482ec6
mov eax, dword [ebp - 0xa64]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x482ed1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x482ed4
mov dword [ebp - 0x1c], eax
jmp 0x482e88
mov dword [ebp - 4], 0xfffffffe
call fcn.00482ee4
jmp 0x482eec
mov dword [ebp - 0xa68], 0
jmp 0x482f07
mov edx, dword [ebp - 0xa68]
add edx, 1
mov dword [ebp - 0xa68], edx
cmp dword [ebp - 0xa68], 1
jge 0x482f20
mov eax, dword [ebp - 0xa68]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x482ef8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x482f34
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x482f4a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 9
mov dword [ebp - 0xa6c], 0
jmp 0x482f6c
mov edx, dword [ebp - 0xa6c]
add edx, 1
mov dword [ebp - 0xa6c], edx
cmp dword [ebp - 0xa6c], 9
jge 0x482fab
mov eax, dword [ebp - 0xa6c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x482f9b
mov eax, dword [ebp - 0xa6c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x482fa6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x482fa9
mov dword [ebp - 0x1c], eax
jmp 0x482f5d
mov dword [ebp - 4], 0xfffffffe
call fcn.00482fb9
jmp 0x482fc1
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xa70], 0
jmp 0x482fe3
mov edx, dword [ebp - 0xa70]
add edx, 1
mov dword [ebp - 0xa70], edx
cmp dword [ebp - 0xa70], 0xa
jge 0x483019
mov eax, dword [ebp - 0xa70]
and eax, 0x80000001
jns 0x482ffe
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48300e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x483017
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x482fd4
mov dword [ebp - 4], 0xfffffffe
call fcn.00483027
jmp 0x483044
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xa74], 0
jmp 0x483066
mov edx, dword [ebp - 0xa74]
add edx, 1
mov dword [ebp - 0xa74], edx
cmp dword [ebp - 0xa74], 2
jge 0x48309c
mov eax, dword [ebp - 0xa74]
and eax, 0x80000001
jns 0x483081
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x483091
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48309a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x483057
mov dword [ebp - 4], 0xfffffffe
call fcn.004830aa
jmp 0x4830c7
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xa78], 0
jmp 0x4830e9
mov edx, dword [ebp - 0xa78]
add edx, 1
mov dword [ebp - 0xa78], edx
cmp dword [ebp - 0xa78], 0xb
jge 0x48311f
mov eax, dword [ebp - 0xa78]
and eax, 0x80000001
jns 0x483104
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x483114
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48311d
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4830da
mov dword [ebp - 4], 0xfffffffe
call fcn.0048312d
jmp 0x48314a
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xa7c], 0
jmp 0x48316c
mov edx, dword [ebp - 0xa7c]
add edx, 1
mov dword [ebp - 0xa7c], edx
cmp dword [ebp - 0xa7c], 4
jge 0x4831b3
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x483189
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x483199
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4831b1
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4831b1
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48315d
mov dword [ebp - 4], 0xfffffffe
call fcn.004831c1
jmp 0x4831d0
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xa80], 0
jmp 0x4831f2
mov ecx, dword [ebp - 0xa80]
add ecx, 1
mov dword [ebp - 0xa80], ecx
cmp dword [ebp - 0xa80], 4
jge 0x48322d
mov eax, dword [ebp - 0xa80]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x483221
mov eax, dword [ebp - 0xa80]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x483228
and eax, 0xbc614e
jmp 0x48322b
mov dword [ebp - 0x1c], eax
jmp 0x4831e3
mov dword [ebp - 4], 0xfffffffe
call fcn.0048323b
jmp 0x483243
mov dword [ebp - 0xa84], 1
mov dword [ebp - 0xa88], 1
mov dword [ebp - 0xa8c], 2
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa94], 0
jmp 0x483286
mov edx, dword [ebp - 0xa94]
add edx, 1
mov dword [ebp - 0xa94], edx
cmp dword [ebp - 0xa94], 2
jge 0x4832c7
mov eax, dword [ebp - 0xa84]
add eax, dword [ebp - 0xa88]
mov dword [ebp - 0xa8c], eax
mov ecx, dword [ebp - 0xa88]
mov dword [ebp - 0xa84], ecx
mov edx, dword [ebp - 0xa8c]
mov dword [ebp - 0xa88], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xa8c]
mov dword [ebp - 0x1c], eax
jmp 0x483277
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xa98], 1
mov dword [ebp - 0xa9c], 1
mov dword [ebp - 0xaa0], 2
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0xaa8], 0
jmp 0x483313
mov edx, dword [ebp - 0xaa8]
add edx, 1
mov dword [ebp - 0xaa8], edx
cmp dword [ebp - 0xaa8], 7
jge 0x483354
mov eax, dword [ebp - 0xa98]
add eax, dword [ebp - 0xa9c]
mov dword [ebp - 0xaa0], eax
mov ecx, dword [ebp - 0xa9c]
mov dword [ebp - 0xa98], ecx
mov edx, dword [ebp - 0xaa0]
mov dword [ebp - 0xa9c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xaa0]
mov dword [ebp - 0x1c], eax
jmp 0x483304
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xaac], 0
jmp 0x483378
mov edx, dword [ebp - 0xaac]
add edx, 1
mov dword [ebp - 0xaac], edx
cmp dword [ebp - 0xaac], 0
jge 0x483391
mov eax, dword [ebp - 0xaac]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x483369
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4833a5
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4833bb
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xab0], 0
jmp 0x4833dd
mov edx, dword [ebp - 0xab0]
add edx, 1
mov dword [ebp - 0xab0], edx
cmp dword [ebp - 0xab0], 1
jge 0x48341c
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48340c
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x483417
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48341a
mov dword [ebp - 0x1c], eax
jmp 0x4833ce
mov dword [ebp - 4], 0xfffffffe
call fcn.0048342a
jmp 0x483432
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xab4], 0
jmp 0x483454
mov edx, dword [ebp - 0xab4]
add edx, 1
mov dword [ebp - 0xab4], edx
cmp dword [ebp - 0xab4], 1
jge 0x483493
mov eax, dword [ebp - 0xab4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x483483
mov eax, dword [ebp - 0xab4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48348e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x483491
mov dword [ebp - 0x1c], eax
jmp 0x483445
mov dword [ebp - 4], 0xfffffffe
call fcn.004834a1
jmp 0x4834a9
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xab8], 0
jmp 0x4834cb
mov edx, dword [ebp - 0xab8]
add edx, 1
mov dword [ebp - 0xab8], edx
cmp dword [ebp - 0xab8], 1
jge 0x483506
mov eax, dword [ebp - 0xab8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4834fa
mov eax, dword [ebp - 0xab8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x483501
and eax, 0xbc614e
jmp 0x483504
mov dword [ebp - 0x1c], eax
jmp 0x4834bc
mov dword [ebp - 4], 0xfffffffe
call fcn.00483514
jmp 0x48351c
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xabc], 0
jmp 0x48353e
mov edx, dword [ebp - 0xabc]
add edx, 1
mov dword [ebp - 0xabc], edx
cmp dword [ebp - 0xabc], 1
jge 0x483574
mov eax, dword [ebp - 0xabc]
and eax, 0x80000001
jns 0x483559
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x483569
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x483572
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48352f
mov dword [ebp - 4], 0xfffffffe
call fcn.00483582
jmp 0x48359f
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xac0], 0
jmp 0x4835c1
mov edx, dword [ebp - 0xac0]
add edx, 1
mov dword [ebp - 0xac0], edx
cmp dword [ebp - 0xac0], 3
jge 0x4835fc
mov eax, dword [ebp - 0xac0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4835f0
mov eax, dword [ebp - 0xac0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4835f7
and eax, 0xbc614e
jmp 0x4835fa
mov dword [ebp - 0x1c], eax
jmp 0x4835b2
mov dword [ebp - 4], 0xfffffffe
call fcn.0048360a
jmp 0x483612
mov dword [ebp - 0xac4], 0
jmp 0x48362d
mov edx, dword [ebp - 0xac4]
add edx, 1
mov dword [ebp - 0xac4], edx
cmp dword [ebp - 0xac4], 7
jge 0x48366e
cmp dword [ebp - 0x1c], 0
jge 0x483644
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48365a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcc0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48361e
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xcc4], 0
jmp 0x483690
mov eax, dword [ebp - 0xcc4]
add eax, 1
mov dword [ebp - 0xcc4], eax
cmp dword [ebp - 0xcc4], 2
jge 0x4836cf
mov eax, dword [ebp - 0xcc4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4836bf
mov eax, dword [ebp - 0xcc4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4836ca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4836cd
mov dword [ebp - 0x1c], eax
jmp 0x483681
mov dword [ebp - 4], 0xfffffffe
call fcn.004836dd
jmp 0x4836e5
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xcc8], 0
jmp 0x483707
mov edx, dword [ebp - 0xcc8]
add edx, 1
mov dword [ebp - 0xcc8], edx
cmp dword [ebp - 0xcc8], 8
jge 0x48373d
mov eax, dword [ebp - 0xcc8]
and eax, 0x80000001
jns 0x483722
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x483732
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48373b
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4836f8
mov dword [ebp - 4], 0xfffffffe
call fcn.0048374b
jmp 0x483768
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xccc], 0
jmp 0x48378a
mov edx, dword [ebp - 0xccc]
add edx, 1
mov dword [ebp - 0xccc], edx
cmp dword [ebp - 0xccc], 0
jge 0x4837c0
mov eax, dword [ebp - 0xccc]
and eax, 0x80000001
jns 0x4837a5
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4837b5
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4837be
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48377b
mov dword [ebp - 4], 0xfffffffe
call fcn.004837ce
jmp 0x4837eb
mov dword [ebp - 0xcd0], 0
jmp 0x483806
mov edx, dword [ebp - 0xcd0]
add edx, 1
mov dword [ebp - 0xcd0], edx
cmp dword [ebp - 0xcd0], 5
jge 0x48381f
mov eax, dword [ebp - 0xcd0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4837f7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x483833
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x483849
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xcd4], 1
mov dword [ebp - 0xcd8], 1
mov dword [ebp - 0xcdc], 2
mov dword [ebp - 0xce0], 0
mov dword [ebp - 0xce4], 0
jmp 0x48388c
mov edx, dword [ebp - 0xce4]
add edx, 1
mov dword [ebp - 0xce4], edx
cmp dword [ebp - 0xce4], 8
jge 0x4838cd
mov eax, dword [ebp - 0xcd4]
add eax, dword [ebp - 0xcd8]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0xcd8]
mov dword [ebp - 0xcd4], ecx
mov edx, dword [ebp - 0xcdc]
mov dword [ebp - 0xcd8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcdc]
mov dword [ebp - 0x1c], eax
jmp 0x48387d
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xce8], 0
jmp 0x4838f1
mov edx, dword [ebp - 0xce8]
add edx, 1
mov dword [ebp - 0xce8], edx
cmp dword [ebp - 0xce8], 4
jge 0x48390a
mov eax, dword [ebp - 0xce8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4838e2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48391e
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x483934
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xcec], 0
jmp 0x483956
mov edx, dword [ebp - 0xcec]
add edx, 1
mov dword [ebp - 0xcec], edx
cmp dword [ebp - 0xcec], 3
jge 0x483995
mov eax, dword [ebp - 0xcec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x483985
mov eax, dword [ebp - 0xcec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x483990
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x483993
mov dword [ebp - 0x1c], eax
jmp 0x483947
mov dword [ebp - 4], 0xfffffffe
call fcn.004839a3
jmp 0x4839ab
mov dword [ebp - 0xcf0], 1
mov dword [ebp - 0xcf4], 1
mov dword [ebp - 0xcf8], 2
mov dword [ebp - 0xcfc], 0
mov dword [ebp - 0xd00], 0
jmp 0x4839ee
mov edx, dword [ebp - 0xd00]
add edx, 1
mov dword [ebp - 0xd00], edx
cmp dword [ebp - 0xd00], 1
jge 0x483a2f
mov eax, dword [ebp - 0xcf0]
add eax, dword [ebp - 0xcf4]
mov dword [ebp - 0xcf8], eax
mov ecx, dword [ebp - 0xcf4]
mov dword [ebp - 0xcf0], ecx
mov edx, dword [ebp - 0xcf8]
mov dword [ebp - 0xcf4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcf8]
mov dword [ebp - 0x1c], eax
jmp 0x4839df
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd04], 0
jmp 0x483a53
mov edx, dword [ebp - 0xd04]
add edx, 1
mov dword [ebp - 0xd04], edx
cmp dword [ebp - 0xd04], 4
jge 0x483a94
cmp dword [ebp - 0x1c], 0
jge 0x483a6a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x483a80
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xf00]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x483a44
mov dword [ebp - 0xf04], 1
mov dword [ebp - 0xf08], 1
mov dword [ebp - 0xf0c], 2
mov dword [ebp - 0xf10], 0
mov dword [ebp - 0xf14], 0
jmp 0x483ad7
mov eax, dword [ebp - 0xf14]
add eax, 1
mov dword [ebp - 0xf14], eax
cmp dword [ebp - 0xf14], 4
jge 0x483b18
mov ecx, dword [ebp - 0xf04]
add ecx, dword [ebp - 0xf08]
mov dword [ebp - 0xf0c], ecx
mov edx, dword [ebp - 0xf08]
mov dword [ebp - 0xf04], edx
mov eax, dword [ebp - 0xf0c]
mov dword [ebp - 0xf08], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xf0c]
mov dword [ebp - 0x1c], ecx
jmp 0x483ac8
mov edx, dword [ebp - 0x1c]
add edx, 4
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xf18], 0
jmp 0x483b43
mov eax, dword [ebp - 0xf18]
add eax, 1
mov dword [ebp - 0xf18], eax
cmp dword [ebp - 0xf18], 4
jge 0x483b7e
mov eax, dword [ebp - 0xf18]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x483b72
mov eax, dword [ebp - 0xf18]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x483b79
and eax, 0xbc614e
jmp 0x483b7c
mov dword [ebp - 0x1c], eax
jmp 0x483b34
mov dword [ebp - 4], 0xfffffffe
call fcn.00483b8c
jmp 0x483b94
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xf1c], 0
jmp 0x483bb6
mov edx, dword [ebp - 0xf1c]
add edx, 1
mov dword [ebp - 0xf1c], edx
cmp dword [ebp - 0xf1c], 0
jge 0x483bfd
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x483bd3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x483be3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x483bfb
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x483bfb
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x483ba7
mov dword [ebp - 4], 0xfffffffe
call fcn.00483c0b
jmp 0x483c1a
mov dword [ebp - 0xf20], 0
jmp 0x483c35
mov ecx, dword [ebp - 0xf20]
add ecx, 1
mov dword [ebp - 0xf20], ecx
cmp dword [ebp - 0xf20], 2
jge 0x483c76
cmp dword [ebp - 0x1c], 0
jge 0x483c4c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x483c62
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1118]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x483c26
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x111c], 0
jmp 0x483c98
cmp dword [ebp - 0x111c], 0
jge 0x483cd7
mov eax, dword [ebp - 0x111c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x483cc7
mov eax, dword [ebp - 0x111c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x483cd2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x483cd5
mov dword [ebp - 0x1c], eax
jmp 0x483c89
mov dword [ebp - 4], 0xfffffffe
call fcn.00483ce5
jmp 0x483ced
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x1120], 0
jmp 0x483d0f
cmp dword [ebp - 0x1120], 4
jge 0x483d45