Function at 0x49efa0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b9ec8
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x124c
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x48], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x49effd
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x21
jge 0x49f02f
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49f023
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49f02a
and eax, 0xbc614e
jmp 0x49f02d
mov dword [ebp - 0x1c], eax
jmp 0x49eff4
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f03d
jmp 0x49f045
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x49f073
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x3f
jge 0x49f099
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x49f06a
mov ecx, dword [ebp - 0x1c]
add ecx, 0x3f
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 0
jmp 0x49f0bb
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x1f
jge 0x49f0f1
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49f0e1
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49f0ec
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49f0ef
mov dword [ebp - 0x1c], eax
jmp 0x49f0b2
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f0ff
jmp 0x49f107
mov dword [ebp - 4], 2
mov dword [ebp - 0x3c], 0
jmp 0x49f120
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0xa
jge 0x49f150
mov eax, dword [ebp - 0x3c]
and eax, 0x80000001
jns 0x49f135
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49f145
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49f14e
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49f117
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f15e
jmp 0x49f17b
mov dword [ebp - 4], 3
mov dword [ebp - 0x40], 0
jmp 0x49f194
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 3
jge 0x49f1ca
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49f1ba
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49f1c5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49f1c8
mov dword [ebp - 0x1c], eax
jmp 0x49f18b
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f1d8
jmp 0x49f1e0
mov dword [ebp - 0x44], 0
jmp 0x49f1f2
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 5
jge 0x49f230
cmp dword [ebp - 0x1c], 0
jge 0x49f206
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49f21c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49f1e9
mov dword [ebp - 4], 4
mov dword [ebp - 0x244], 0
jmp 0x49f252
mov eax, dword [ebp - 0x244]
add eax, 1
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x10
jge 0x49f291
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49f281
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49f28c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49f28f
mov dword [ebp - 0x1c], eax
jmp 0x49f243
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f29f
jmp 0x49f2a7
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x250], 2
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x258], 0
jmp 0x49f2ea
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 0x10
jge 0x49f32b
mov eax, dword [ebp - 0x248]
add eax, dword [ebp - 0x24c]
mov dword [ebp - 0x250], eax
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x250]
mov dword [ebp - 0x24c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x250]
mov dword [ebp - 0x1c], eax
jmp 0x49f2db
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x25c], 0
jmp 0x49f356
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 0xc
jge 0x49f39d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49f373
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49f383
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49f39b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49f39b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49f347
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f3ab
jmp 0x49f3ba
mov dword [ebp - 0x260], 0
jmp 0x49f3d5
mov ecx, dword [ebp - 0x260]
add ecx, 1
mov dword [ebp - 0x260], ecx
cmp dword [ebp - 0x260], 0xb
jge 0x49f3ee
mov edx, dword [ebp - 0x260]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49f3c6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49f402
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49f418
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x264], 0
jmp 0x49f43a
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 2
jge 0x49f481
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49f457
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49f467
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49f47f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49f47f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49f42b
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f48f
jmp 0x49f49e
mov dword [ebp - 0x268], 0
jmp 0x49f4b9
mov ecx, dword [ebp - 0x268]
add ecx, 1
mov dword [ebp - 0x268], ecx
cmp dword [ebp - 0x268], 9
jge 0x49f4fa
cmp dword [ebp - 0x1c], 0
jge 0x49f4d0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49f4e6
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49f4aa
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x46c], 2
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x474], 0
jmp 0x49f53d
mov eax, dword [ebp - 0x474]
add eax, 1
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 0x10
jge 0x49f57e
mov ecx, dword [ebp - 0x464]
add ecx, dword [ebp - 0x468]
mov dword [ebp - 0x46c], ecx
mov edx, dword [ebp - 0x468]
mov dword [ebp - 0x464], edx
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x468], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x46c]
mov dword [ebp - 0x1c], ecx
jmp 0x49f52e
mov edx, dword [ebp - 0x1c]
add edx, 0x10
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 7
mov dword [ebp - 0x478], 0
jmp 0x49f5a9
mov eax, dword [ebp - 0x478]
add eax, 1
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 4
jge 0x49f5e0
mov ecx, dword [ebp - 0x478]
and ecx, 0x80000001
jns 0x49f5c5
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x49f5d5
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49f5de
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49f59a
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f5ee
jmp 0x49f60c
mov dword [ebp - 0x47c], 1
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x484], 2
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x48c], 0
jmp 0x49f64f
mov eax, dword [ebp - 0x48c]
add eax, 1
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 7
jge 0x49f690
mov ecx, dword [ebp - 0x47c]
add ecx, dword [ebp - 0x480]
mov dword [ebp - 0x484], ecx
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x480], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x484]
mov dword [ebp - 0x1c], ecx
jmp 0x49f640
mov edx, dword [ebp - 0x1c]
add edx, 7
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 8
mov dword [ebp - 0x490], 0
jmp 0x49f6bb
mov eax, dword [ebp - 0x490]
add eax, 1
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 3
jge 0x49f6f2
mov ecx, dword [ebp - 0x490]
and ecx, 0x80000001
jns 0x49f6d7
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x49f6e7
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49f6f0
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49f6ac
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f700
jmp 0x49f71e
mov dword [ebp - 4], 9
mov dword [ebp - 0x494], 0
jmp 0x49f740
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 6
jge 0x49f77f
mov eax, dword [ebp - 0x494]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49f76f
mov eax, dword [ebp - 0x494]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49f77a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49f77d
mov dword [ebp - 0x1c], eax
jmp 0x49f731
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f78d
jmp 0x49f795
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x498], 0
jmp 0x49f7b7
mov edx, dword [ebp - 0x498]
add edx, 1
mov dword [ebp - 0x498], edx
cmp dword [ebp - 0x498], 8
jge 0x49f7ed
mov eax, dword [ebp - 0x498]
and eax, 0x80000001
jns 0x49f7d2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49f7e2
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49f7eb
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49f7a8
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f7fb
jmp 0x49f818
mov dword [ebp - 0x49c], 1
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0x4a4], 2
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x4ac], 0
jmp 0x49f85b
mov edx, dword [ebp - 0x4ac]
add edx, 1
mov dword [ebp - 0x4ac], edx
cmp dword [ebp - 0x4ac], 2
jge 0x49f89c
mov eax, dword [ebp - 0x49c]
add eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x49c], ecx
mov edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x1c], eax
jmp 0x49f84c
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x4b0], 0
jmp 0x49f8c7
mov edx, dword [ebp - 0x4b0]
add edx, 1
mov dword [ebp - 0x4b0], edx
cmp dword [ebp - 0x4b0], 6
jge 0x49f906
mov eax, dword [ebp - 0x4b0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49f8f6
mov eax, dword [ebp - 0x4b0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49f901
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49f904
mov dword [ebp - 0x1c], eax
jmp 0x49f8b8
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f914
jmp 0x49f91c
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x4b4], 0
jmp 0x49f93e
mov edx, dword [ebp - 0x4b4]
add edx, 1
mov dword [ebp - 0x4b4], edx
cmp dword [ebp - 0x4b4], 4
jge 0x49f985
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49f95b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49f96b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49f983
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49f983
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49f92f
mov dword [ebp - 4], 0xfffffffe
call fcn.0049f993
jmp 0x49f9a2
mov dword [ebp - 0x4b8], 0
jmp 0x49f9bd
mov ecx, dword [ebp - 0x4b8]
add ecx, 1
mov dword [ebp - 0x4b8], ecx
cmp dword [ebp - 0x4b8], 2
jge 0x49f9fe
cmp dword [ebp - 0x1c], 0
jge 0x49f9d4
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49f9ea
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49f9ae
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x6b4], 0
jmp 0x49fa20
mov eax, dword [ebp - 0x6b4]
add eax, 1
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 4
jge 0x49fa5f
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49fa4f
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49fa5a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49fa5d
mov dword [ebp - 0x1c], eax
jmp 0x49fa11
mov dword [ebp - 4], 0xfffffffe
call fcn.0049fa6d
jmp 0x49fa75
mov dword [ebp - 0x6b8], 0
jmp 0x49fa90
mov edx, dword [ebp - 0x6b8]
add edx, 1
mov dword [ebp - 0x6b8], edx
cmp dword [ebp - 0x6b8], 7
jge 0x49faa9
mov eax, dword [ebp - 0x6b8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49fa81
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49fabd
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49fad3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x6bc], 0
jmp 0x49faf5
mov edx, dword [ebp - 0x6bc]
add edx, 1
mov dword [ebp - 0x6bc], edx
cmp dword [ebp - 0x6bc], 5
jge 0x49fb3c
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49fb12
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49fb22
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49fb3a
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49fb3a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49fae6
mov dword [ebp - 4], 0xfffffffe
call fcn.0049fb4a
jmp 0x49fb59
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x6c0], 0
jmp 0x49fb7b
mov ecx, dword [ebp - 0x6c0]
add ecx, 1
mov dword [ebp - 0x6c0], ecx
cmp dword [ebp - 0x6c0], 7
jge 0x49fbb2
mov edx, dword [ebp - 0x6c0]
and edx, 0x80000001
jns 0x49fb97
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x49fba7
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49fbb0
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49fb6c
mov dword [ebp - 4], 0xfffffffe
call fcn.0049fbc0
jmp 0x49fbde
mov dword [ebp - 0x6c4], 0
jmp 0x49fbf9
mov ecx, dword [ebp - 0x6c4]
add ecx, 1
mov dword [ebp - 0x6c4], ecx
cmp dword [ebp - 0x6c4], 1
jge 0x49fc3a
cmp dword [ebp - 0x1c], 0
jge 0x49fc10
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49fc26
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49fbea
mov dword [ebp - 0x8c4], 0
jmp 0x49fc55
mov eax, dword [ebp - 0x8c4]
add eax, 1
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 4
jge 0x49fc6e
mov ecx, dword [ebp - 0x8c4]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x49fc46
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49fc82
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49fc98
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8c8], 0
jmp 0x49fcba
mov edx, dword [ebp - 0x8c8]
add edx, 1
mov dword [ebp - 0x8c8], edx
cmp dword [ebp - 0x8c8], 4
jge 0x49fcf9
mov eax, dword [ebp - 0x8c8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49fce9
mov eax, dword [ebp - 0x8c8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49fcf4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49fcf7
mov dword [ebp - 0x1c], eax
jmp 0x49fcab
mov dword [ebp - 4], 0xfffffffe
call fcn.0049fd07
jmp 0x49fd0f
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8cc], 0
jmp 0x49fd31
mov edx, dword [ebp - 0x8cc]
add edx, 1
mov dword [ebp - 0x8cc], edx
cmp dword [ebp - 0x8cc], 0
jge 0x49fd78
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49fd4e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49fd5e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49fd76
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49fd76
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49fd22
mov dword [ebp - 4], 0xfffffffe
call fcn.0049fd86
jmp 0x49fd95
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x8d0], 0
jmp 0x49fdb7
mov ecx, dword [ebp - 0x8d0]
add ecx, 1
mov dword [ebp - 0x8d0], ecx
cmp dword [ebp - 0x8d0], 2
jge 0x49fdee
mov edx, dword [ebp - 0x8d0]
and edx, 0x80000001
jns 0x49fdd3
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x49fde3
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49fdec
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49fda8
mov dword [ebp - 4], 0xfffffffe
call fcn.0049fdfc
jmp 0x49fe1a
mov dword [ebp - 0x8d4], 0
jmp 0x49fe35
mov ecx, dword [ebp - 0x8d4]
add ecx, 1
mov dword [ebp - 0x8d4], ecx
cmp dword [ebp - 0x8d4], 4
jge 0x49fe4e
mov edx, dword [ebp - 0x8d4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49fe26
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49fe62
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49fe78
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x8d8], 0
jmp 0x49fe9a
mov edx, dword [ebp - 0x8d8]
add edx, 1
mov dword [ebp - 0x8d8], edx
cmp dword [ebp - 0x8d8], 2
jge 0x49fed0
mov eax, dword [ebp - 0x8d8]
and eax, 0x80000001
jns 0x49feb5
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49fec5
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49fece
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49fe8b
mov dword [ebp - 4], 0xfffffffe
call fcn.0049fede
jmp 0x49fefb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x8dc], 0
jmp 0x49ff1d
mov edx, dword [ebp - 0x8dc]
add edx, 1
mov dword [ebp - 0x8dc], edx
cmp dword [ebp - 0x8dc], 2
jge 0x49ff53
mov eax, dword [ebp - 0x8dc]
and eax, 0x80000001
jns 0x49ff38
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49ff48
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49ff51
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49ff0e
mov dword [ebp - 4], 0xfffffffe
call fcn.0049ff61
jmp 0x49ff7e
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x8e0], 0
jmp 0x49ffa0
mov edx, dword [ebp - 0x8e0]
add edx, 1
mov dword [ebp - 0x8e0], edx
cmp dword [ebp - 0x8e0], 4
jge 0x49ffe7
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49ffbd
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49ffcd
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49ffe5
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49ffe5
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49ff91
mov dword [ebp - 4], 0xfffffffe
call fcn.0049fff5
jmp 0x4a0004
mov dword [ebp - 0x8e4], 1
mov dword [ebp - 0x8e8], 1
mov dword [ebp - 0x8ec], 2
mov dword [ebp - 0x8f0], 0
mov dword [ebp - 0x8f4], 0
jmp 0x4a0047
mov ecx, dword [ebp - 0x8f4]
add ecx, 1
mov dword [ebp - 0x8f4], ecx
cmp dword [ebp - 0x8f4], 0
jge 0x4a0088
mov edx, dword [ebp - 0x8e4]
add edx, dword [ebp - 0x8e8]
mov dword [ebp - 0x8ec], edx
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0x8e4], eax
mov ecx, dword [ebp - 0x8ec]
mov dword [ebp - 0x8e8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8ec]
mov dword [ebp - 0x1c], edx
jmp 0x4a0038
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8f8], 0
jmp 0x4a00a9
mov ecx, dword [ebp - 0x8f8]
add ecx, 1
mov dword [ebp - 0x8f8], ecx
cmp dword [ebp - 0x8f8], 3
jge 0x4a00ea
cmp dword [ebp - 0x1c], 0
jge 0x4a00c0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4a00d6
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xaf0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4a009a
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xaf4], 0
jmp 0x4a010c
mov eax, dword [ebp - 0xaf4]
add eax, 1
mov dword [ebp - 0xaf4], eax
cmp dword [ebp - 0xaf4], 0
jge 0x4a014b
mov eax, dword [ebp - 0xaf4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4a013b
mov eax, dword [ebp - 0xaf4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4a0146
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4a0149
mov dword [ebp - 0x1c], eax
jmp 0x4a00fd
mov dword [ebp - 4], 0xfffffffe
call fcn.004a0159
jmp 0x4a0161
mov dword [ebp - 0xaf8], 1
mov dword [ebp - 0xafc], 1
mov dword [ebp - 0xb00], 2
mov dword [ebp - 0xb04], 0
mov dword [ebp - 0xb08], 0
jmp 0x4a01a4
mov edx, dword [ebp - 0xb08]
add edx, 1
mov dword [ebp - 0xb08], edx
cmp dword [ebp - 0xb08], 1
jge 0x4a01e5
mov eax, dword [ebp - 0xaf8]
add eax, dword [ebp - 0xafc]
mov dword [ebp - 0xb00], eax
mov ecx, dword [ebp - 0xafc]
mov dword [ebp - 0xaf8], ecx
mov edx, dword [ebp - 0xb00]
mov dword [ebp - 0xafc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xb00]
mov dword [ebp - 0x1c], eax
jmp 0x4a0195
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xb0c], 0
jmp 0x4a0210
mov edx, dword [ebp - 0xb0c]
add edx, 1
mov dword [ebp - 0xb0c], edx
cmp dword [ebp - 0xb0c], 1
jge 0x4a024f
mov eax, dword [ebp - 0xb0c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4a023f
mov eax, dword [ebp - 0xb0c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4a024a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4a024d
mov dword [ebp - 0x1c], eax
jmp 0x4a0201
mov dword [ebp - 4], 0xfffffffe
call fcn.004a025d
jmp 0x4a0265
mov dword [ebp - 0xb10], 0
jmp 0x4a0280
mov edx, dword [ebp - 0xb10]
add edx, 1
mov dword [ebp - 0xb10], edx
cmp dword [ebp - 0xb10], 4
jge 0x4a0299
mov eax, dword [ebp - 0xb10]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4a0271
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4a02ad
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4a02c3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xb14], 0
jmp 0x4a02e5
mov edx, dword [ebp - 0xb14]
add edx, 1
mov dword [ebp - 0xb14], edx
cmp dword [ebp - 0xb14], 2
jge 0x4a031b
mov eax, dword [ebp - 0xb14]
and eax, 0x80000001
jns 0x4a0300
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4a0310
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4a0319
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4a02d6
mov dword [ebp - 4], 0xfffffffe
call fcn.004a0329
jmp 0x4a0346
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xb18], 0
jmp 0x4a0368
mov edx, dword [ebp - 0xb18]
add edx, 1
mov dword [ebp - 0xb18], edx
cmp dword [ebp - 0xb18], 4
jge 0x4a03a3
mov eax, dword [ebp - 0xb18]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4a0397
mov eax, dword [ebp - 0xb18]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4a039e
and eax, 0xbc614e
jmp 0x4a03a1
mov dword [ebp - 0x1c], eax
jmp 0x4a0359
mov dword [ebp - 4], 0xfffffffe
call fcn.004a03b1
jmp 0x4a03b9
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xb1c], 0
jmp 0x4a03db
mov edx, dword [ebp - 0xb1c]
add edx, 1
mov dword [ebp - 0xb1c], edx
cmp dword [ebp - 0xb1c], 1
jge 0x4a0422
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4a03f8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4a0408
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4a0420
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4a0420
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4a03cc
mov dword [ebp - 4], 0xfffffffe
call fcn.004a0430
jmp 0x4a043f
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xb20], 0
jmp 0x4a0461
cmp dword [ebp - 0xb20], 4
jge 0x4a04a8
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4a047e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4a048e
mov dword [ebp - 4], 0xfffffffe
call fcn.004a04b6
jmp 0x4a04c5
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0xb24], 0
jmp 0x4a04e7