Function at 0x491dd0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b91a0
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x112c
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x7c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x491e2d
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x13
jge 0x491e71
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x491e47
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x491e57
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x491e6f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x491e6f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x491e24
mov dword [ebp - 4], 0xfffffffe
call fcn.00491e7f
jmp 0x491e8e
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x491ea7
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 0
jge 0x491edd
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x491ecd
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x491ed8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x491edb
mov dword [ebp - 0x1c], eax
jmp 0x491e9e
mov dword [ebp - 4], 0xfffffffe
call fcn.00491eeb
jmp 0x491ef3
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
jmp 0x491f21
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0xf
jge 0x491f47
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x491f18
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], 0
jmp 0x491f62
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0xe
jge 0x491f75
mov eax, dword [ebp - 0x3c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x491f59
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x491f89
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x491f9f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x40], 0
jmp 0x491fb8
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xe
jge 0x491fe8
mov eax, dword [ebp - 0x40]
and eax, 0x80000001
jns 0x491fcd
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x491fdd
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x491fe6
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x491faf
mov dword [ebp - 4], 0xfffffffe
call fcn.00491ff6
jmp 0x492013
mov dword [ebp - 4], 3
mov dword [ebp - 0x44], 0
jmp 0x49202c
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0xe
jge 0x492062
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x492052
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49205d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x492060
mov dword [ebp - 0x1c], eax
jmp 0x492023
mov dword [ebp - 4], 0xfffffffe
call fcn.00492070
jmp 0x492078
mov dword [ebp - 4], 4
mov dword [ebp - 0x48], 0
jmp 0x492091
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 7
jge 0x4920c1
mov eax, dword [ebp - 0x48]
and eax, 0x80000001
jns 0x4920a6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4920b6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4920bf
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x492088
mov dword [ebp - 4], 0xfffffffe
call fcn.004920cf
jmp 0x4920ec
mov dword [ebp - 4], 5
mov dword [ebp - 0x4c], 0
jmp 0x492105
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 7
jge 0x492149
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49211f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49212f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x492147
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492147
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4920fc
mov dword [ebp - 4], 0xfffffffe
call fcn.00492157
jmp 0x492166
mov dword [ebp - 4], 6
mov dword [ebp - 0x50], 0
jmp 0x49217f
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0xc
jge 0x4921b1
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4921a5
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4921ac
and eax, 0xbc614e
jmp 0x4921af
mov dword [ebp - 0x1c], eax
jmp 0x492176
mov dword [ebp - 4], 0xfffffffe
call fcn.004921bf
jmp 0x4921c7
mov dword [ebp - 0x54], 0
jmp 0x4921d9
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0xd
jge 0x4921ec
mov eax, dword [ebp - 0x54]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4921d0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x492200
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492216
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 7
mov dword [ebp - 0x58], 0
jmp 0x49222f
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 0xe
jge 0x492273
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x492249
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x492259
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x492271
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492271
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x492226
mov dword [ebp - 4], 0xfffffffe
call fcn.00492281
jmp 0x492290
mov dword [ebp - 4], 8
mov dword [ebp - 0x5c], 0
jmp 0x4922a9
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x5c], 0xa
jge 0x4922ed
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4922c3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4922d3
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4922eb
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4922eb
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4922a0
mov dword [ebp - 4], 0xfffffffe
call fcn.004922fb
jmp 0x49230a
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x68], 2
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
jmp 0x492338
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 0xb
jge 0x49235e
mov edx, dword [ebp - 0x60]
add edx, dword [ebp - 0x64]
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], edx
jmp 0x49232f
mov eax, dword [ebp - 0x1c]
add eax, 0xb
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 9
mov dword [ebp - 0x74], 0
jmp 0x492380
mov ecx, dword [ebp - 0x74]
add ecx, 1
mov dword [ebp - 0x74], ecx
cmp dword [ebp - 0x74], 0
jge 0x4923b2
mov eax, dword [ebp - 0x74]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4923a6
mov eax, dword [ebp - 0x74]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4923ad
and eax, 0xbc614e
jmp 0x4923b0
mov dword [ebp - 0x1c], eax
jmp 0x492377
mov dword [ebp - 4], 0xfffffffe
call fcn.004923c0
jmp 0x4923c8
mov dword [ebp - 0x78], 0
jmp 0x4923da
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0xc
jge 0x492418
cmp dword [ebp - 0x1c], 0
jge 0x4923ee
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x492404
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x278]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4923d1
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x27c], 0
jmp 0x49243a
mov eax, dword [ebp - 0x27c]
add eax, 1
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0xc
jge 0x492471
mov ecx, dword [ebp - 0x27c]
and ecx, 0x80000001
jns 0x492456
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x492466
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49246f
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x49242b
mov dword [ebp - 4], 0xfffffffe
call fcn.0049247f
jmp 0x49249d
mov dword [ebp - 0x280], 0
jmp 0x4924b8
mov eax, dword [ebp - 0x280]
add eax, 1
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x4924f9
cmp dword [ebp - 0x1c], 0
jge 0x4924cf
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4924e5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x478]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4924a9
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x47c], 0
jmp 0x49251b
mov eax, dword [ebp - 0x47c]
add eax, 1
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 2
jge 0x492562
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x492538
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x492548
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x492560
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492560
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49250c
mov dword [ebp - 4], 0xfffffffe
call fcn.00492570
jmp 0x49257f
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x480], 0
jmp 0x4925a1
mov ecx, dword [ebp - 0x480]
add ecx, 1
mov dword [ebp - 0x480], ecx
cmp dword [ebp - 0x480], 7
jge 0x4925e0
mov eax, dword [ebp - 0x480]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4925d0
mov eax, dword [ebp - 0x480]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4925db
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4925de
mov dword [ebp - 0x1c], eax
jmp 0x492592
mov dword [ebp - 4], 0xfffffffe
call fcn.004925ee
jmp 0x4925f6
mov dword [ebp - 0x484], 0
jmp 0x492611
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 3
jge 0x492652
cmp dword [ebp - 0x1c], 0
jge 0x492628
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49263e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x680]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x492602
mov dword [ebp - 0x684], 1
mov dword [ebp - 0x688], 1
mov dword [ebp - 0x68c], 2
mov dword [ebp - 0x690], 0
mov dword [ebp - 0x694], 0
jmp 0x492695
mov eax, dword [ebp - 0x694]
add eax, 1
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x694], 5
jge 0x4926d6
mov ecx, dword [ebp - 0x684]
add ecx, dword [ebp - 0x688]
mov dword [ebp - 0x68c], ecx
mov edx, dword [ebp - 0x688]
mov dword [ebp - 0x684], edx
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x688], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x68c]
mov dword [ebp - 0x1c], ecx
jmp 0x492686
mov edx, dword [ebp - 0x1c]
add edx, 5
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x698], 0
jmp 0x492701
mov eax, dword [ebp - 0x698]
add eax, 1
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 6
jge 0x492748
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49271e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49272e
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x492746
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492746
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4926f2
mov dword [ebp - 4], 0xfffffffe
call fcn.00492756
jmp 0x492765
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x69c], 0
jmp 0x492787
mov ecx, dword [ebp - 0x69c]
add ecx, 1
mov dword [ebp - 0x69c], ecx
cmp dword [ebp - 0x69c], 2
jge 0x4927c2
mov eax, dword [ebp - 0x69c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4927b6
mov eax, dword [ebp - 0x69c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4927bd
and eax, 0xbc614e
jmp 0x4927c0
mov dword [ebp - 0x1c], eax
jmp 0x492778
mov dword [ebp - 4], 0xfffffffe
call fcn.004927d0
jmp 0x4927d8
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x6a0], 0
jmp 0x4927fa
mov edx, dword [ebp - 0x6a0]
add edx, 1
mov dword [ebp - 0x6a0], edx
cmp dword [ebp - 0x6a0], 4
jge 0x492835
mov eax, dword [ebp - 0x6a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x492829
mov eax, dword [ebp - 0x6a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x492830
and eax, 0xbc614e
jmp 0x492833
mov dword [ebp - 0x1c], eax
jmp 0x4927eb
mov dword [ebp - 4], 0xfffffffe
call fcn.00492843
jmp 0x49284b
mov dword [ebp - 0x6a4], 0
jmp 0x492866
mov edx, dword [ebp - 0x6a4]
add edx, 1
mov dword [ebp - 0x6a4], edx
cmp dword [ebp - 0x6a4], 4
jge 0x49287f
mov eax, dword [ebp - 0x6a4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x492857
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x492893
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4928a9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x6a8], 0
jmp 0x4928cb
mov edx, dword [ebp - 0x6a8]
add edx, 1
mov dword [ebp - 0x6a8], edx
cmp dword [ebp - 0x6a8], 3
jge 0x492906
mov eax, dword [ebp - 0x6a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4928fa
mov eax, dword [ebp - 0x6a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x492901
and eax, 0xbc614e
jmp 0x492904
mov dword [ebp - 0x1c], eax
jmp 0x4928bc
mov dword [ebp - 4], 0xfffffffe
call fcn.00492914
jmp 0x49291c
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x6ac], 0
jmp 0x49293e
mov edx, dword [ebp - 0x6ac]
add edx, 1
mov dword [ebp - 0x6ac], edx
cmp dword [ebp - 0x6ac], 5
jge 0x492985
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x49295b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49296b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x492983
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492983
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x49292f
mov dword [ebp - 4], 0xfffffffe
call fcn.00492993
jmp 0x4929a2
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x6b0], 0
jmp 0x4929c4
mov ecx, dword [ebp - 0x6b0]
add ecx, 1
mov dword [ebp - 0x6b0], ecx
cmp dword [ebp - 0x6b0], 4
jge 0x492a0b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4929e1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4929f1
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x492a09
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492a09
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4929b5
mov dword [ebp - 4], 0xfffffffe
call fcn.00492a19
jmp 0x492a28
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x6b4], 0
jmp 0x492a4a
mov ecx, dword [ebp - 0x6b4]
add ecx, 1
mov dword [ebp - 0x6b4], ecx
cmp dword [ebp - 0x6b4], 3
jge 0x492a89
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x492a79
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x492a84
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x492a87
mov dword [ebp - 0x1c], eax
jmp 0x492a3b
mov dword [ebp - 4], 0xfffffffe
call fcn.00492a97
jmp 0x492a9f
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x6b8], 0
jmp 0x492ac1
mov edx, dword [ebp - 0x6b8]
add edx, 1
mov dword [ebp - 0x6b8], edx
cmp dword [ebp - 0x6b8], 4
jge 0x492afc
mov eax, dword [ebp - 0x6b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x492af0
mov eax, dword [ebp - 0x6b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x492af7
and eax, 0xbc614e
jmp 0x492afa
mov dword [ebp - 0x1c], eax
jmp 0x492ab2
mov dword [ebp - 4], 0xfffffffe
call fcn.00492b0a
jmp 0x492b12
mov dword [ebp - 0x6bc], 0
jmp 0x492b2d
mov edx, dword [ebp - 0x6bc]
add edx, 1
mov dword [ebp - 0x6bc], edx
cmp dword [ebp - 0x6bc], 1
jge 0x492b6e
cmp dword [ebp - 0x1c], 0
jge 0x492b44
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x492b5a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x492b1e
mov dword [ebp - 0x8bc], 0
jmp 0x492b89
mov eax, dword [ebp - 0x8bc]
add eax, 1
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x8bc], 3
jge 0x492ba2
mov ecx, dword [ebp - 0x8bc]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x492b7a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x492bb6
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492bcc
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x8c0], 0
jmp 0x492bee
mov edx, dword [ebp - 0x8c0]
add edx, 1
mov dword [ebp - 0x8c0], edx
cmp dword [ebp - 0x8c0], 2
jge 0x492c2d
mov eax, dword [ebp - 0x8c0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x492c1d
mov eax, dword [ebp - 0x8c0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x492c28
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x492c2b
mov dword [ebp - 0x1c], eax
jmp 0x492bdf
mov dword [ebp - 4], 0xfffffffe
call fcn.00492c3b
jmp 0x492c43
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x8c4], 0
jmp 0x492c65
mov edx, dword [ebp - 0x8c4]
add edx, 1
mov dword [ebp - 0x8c4], edx
cmp dword [ebp - 0x8c4], 4
jge 0x492cac
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x492c82
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x492c92
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x492caa
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492caa
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x492c56
mov dword [ebp - 4], 0xfffffffe
call fcn.00492cba
jmp 0x492cc9
mov dword [ebp - 0x8c8], 0
jmp 0x492ce4
mov ecx, dword [ebp - 0x8c8]
add ecx, 1
mov dword [ebp - 0x8c8], ecx
cmp dword [ebp - 0x8c8], 3
jge 0x492cfd
mov edx, dword [ebp - 0x8c8]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x492cd5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x492d11
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492d27
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x8cc], 0
jmp 0x492d49
mov edx, dword [ebp - 0x8cc]
add edx, 1
mov dword [ebp - 0x8cc], edx
cmp dword [ebp - 0x8cc], 2
jge 0x492d90
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x492d66
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x492d76
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x492d8e
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492d8e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x492d3a
mov dword [ebp - 4], 0xfffffffe
call fcn.00492d9e
jmp 0x492dad
mov dword [ebp - 0x8d0], 1
mov dword [ebp - 0x8d4], 1
mov dword [ebp - 0x8d8], 2
mov dword [ebp - 0x8dc], 0
mov dword [ebp - 0x8e0], 0
jmp 0x492df0
mov ecx, dword [ebp - 0x8e0]
add ecx, 1
mov dword [ebp - 0x8e0], ecx
cmp dword [ebp - 0x8e0], 3
jge 0x492e31
mov edx, dword [ebp - 0x8d0]
add edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8d8], edx
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x8d0], eax
mov ecx, dword [ebp - 0x8d8]
mov dword [ebp - 0x8d4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x1c], edx
jmp 0x492de1
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x8e4], 0
jmp 0x492e5c
mov ecx, dword [ebp - 0x8e4]
add ecx, 1
mov dword [ebp - 0x8e4], ecx
cmp dword [ebp - 0x8e4], 0
jge 0x492e93
mov edx, dword [ebp - 0x8e4]
and edx, 0x80000001
jns 0x492e78
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x492e88
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x492e91
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x492e4d
mov dword [ebp - 4], 0xfffffffe
call fcn.00492ea1
jmp 0x492ebf
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x8e8], 0
jmp 0x492ee1
mov ecx, dword [ebp - 0x8e8]
add ecx, 1
mov dword [ebp - 0x8e8], ecx
cmp dword [ebp - 0x8e8], 0
jge 0x492f28
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x492efe
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x492f0e
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x492f26
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492f26
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x492ed2
mov dword [ebp - 4], 0xfffffffe
call fcn.00492f36
jmp 0x492f45
mov dword [ebp - 0x8ec], 0
jmp 0x492f60
mov ecx, dword [ebp - 0x8ec]
add ecx, 1
mov dword [ebp - 0x8ec], ecx
cmp dword [ebp - 0x8ec], 3
jge 0x492fa1
cmp dword [ebp - 0x1c], 0
jge 0x492f77
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x492f8d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xae8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x492f51
mov dword [ebp - 0xaec], 1
mov dword [ebp - 0xaf0], 1
mov dword [ebp - 0xaf4], 2
mov dword [ebp - 0xaf8], 0
mov dword [ebp - 0xafc], 0
jmp 0x492fe4
mov eax, dword [ebp - 0xafc]
add eax, 1
mov dword [ebp - 0xafc], eax
cmp dword [ebp - 0xafc], 1
jge 0x493025
mov ecx, dword [ebp - 0xaec]
add ecx, dword [ebp - 0xaf0]
mov dword [ebp - 0xaf4], ecx
mov edx, dword [ebp - 0xaf0]
mov dword [ebp - 0xaec], edx
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0xaf0], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xaf4]
mov dword [ebp - 0x1c], ecx
jmp 0x492fd5
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xb00], 0
jmp 0x493050
mov eax, dword [ebp - 0xb00]
add eax, 1
mov dword [ebp - 0xb00], eax
cmp dword [ebp - 0xb00], 1
jge 0x493087
mov ecx, dword [ebp - 0xb00]
and ecx, 0x80000001
jns 0x49306c
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x49307c
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x493085
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x493041
mov dword [ebp - 4], 0xfffffffe
call fcn.00493095
jmp 0x4930b3
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xb04], 0
jmp 0x4930d5
mov eax, dword [ebp - 0xb04]
add eax, 1
mov dword [ebp - 0xb04], eax
cmp dword [ebp - 0xb04], 4
jge 0x49311c
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4930f2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x493102
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x49311a
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49311a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4930c6
mov dword [ebp - 4], 0xfffffffe
call fcn.0049312a
jmp 0x493139
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0xb08], 0
jmp 0x49315b
cmp dword [ebp - 0xb08], 4
jge 0x4931a2
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x493178
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x493188
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4931a0
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4931a0
mov dword [ebp - 4], 0xfffffffe
call fcn.004931b0
jmp 0x4931bf
mov dword [ebp - 0xb0c], 0
jmp 0x4931da
cmp dword [ebp - 0xb0c], 1
jge 0x49321b