Function at 0x484180
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b8440
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x2140
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x4841dd
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x28
jge 0x484213
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x484203
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48420e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x484211
mov dword [ebp - 0x1c], eax
jmp 0x4841d4
mov dword [ebp - 4], 0xfffffffe
call fcn.00484221
jmp 0x484229
mov dword [ebp - 0x24], 0
jmp 0x48423b
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0xb
jge 0x484279
cmp dword [ebp - 0x1c], 0
jge 0x48424f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484265
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484232
mov dword [ebp - 4], 1
mov dword [ebp - 0x224], 0
jmp 0x48429b
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jge 0x4842d6
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4842ca
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4842d1
and eax, 0xbc614e
jmp 0x4842d4
mov dword [ebp - 0x1c], eax
jmp 0x48428c
mov dword [ebp - 4], 0xfffffffe
call fcn.004842e4
jmp 0x4842ec
mov dword [ebp - 4], 2
mov dword [ebp - 0x228], 0
jmp 0x48430e
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0x39
jge 0x484349
mov eax, dword [ebp - 0x228]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48433d
mov eax, dword [ebp - 0x228]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x484344
and eax, 0xbc614e
jmp 0x484347
mov dword [ebp - 0x1c], eax
jmp 0x4842ff
mov dword [ebp - 4], 0xfffffffe
call fcn.00484357
jmp 0x48435f
mov dword [ebp - 0x22c], 0
jmp 0x48437a
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0x1a
jge 0x4843bb
cmp dword [ebp - 0x1c], 0
jge 0x484391
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4843a7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48436b
mov dword [ebp - 0x42c], 1
mov dword [ebp - 0x430], 1
mov dword [ebp - 0x434], 2
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x43c], 0
jmp 0x4843fe
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0
jge 0x48443f
mov ecx, dword [ebp - 0x42c]
add ecx, dword [ebp - 0x430]
mov dword [ebp - 0x434], ecx
mov edx, dword [ebp - 0x430]
mov dword [ebp - 0x42c], edx
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x430], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x434]
mov dword [ebp - 0x1c], ecx
jmp 0x4843ef
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x440], 0
jmp 0x484460
mov eax, dword [ebp - 0x440]
add eax, 1
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 2
jge 0x4844a1
cmp dword [ebp - 0x1c], 0
jge 0x484477
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48448d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x638]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484451
mov dword [ebp - 4], 3
mov dword [ebp - 0x63c], 0
jmp 0x4844c3
mov eax, dword [ebp - 0x63c]
add eax, 1
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 1
jge 0x4844fa
mov ecx, dword [ebp - 0x63c]
and ecx, 0x80000001
jns 0x4844df
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4844ef
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4844f8
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4844b4
mov dword [ebp - 4], 0xfffffffe
call fcn.00484508
jmp 0x484526
mov dword [ebp - 4], 4
mov dword [ebp - 0x640], 0
jmp 0x484548
mov eax, dword [ebp - 0x640]
add eax, 1
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 0xd
jge 0x48457f
mov ecx, dword [ebp - 0x640]
and ecx, 0x80000001
jns 0x484564
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x484574
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48457d
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x484539
mov dword [ebp - 4], 0xfffffffe
call fcn.0048458d
jmp 0x4845ab
mov dword [ebp - 0x644], 0
jmp 0x4845c6
mov eax, dword [ebp - 0x644]
add eax, 1
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 6
jge 0x484607
cmp dword [ebp - 0x1c], 0
jge 0x4845dd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4845f3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x840]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4845b7
mov dword [ebp - 0x844], 0
jmp 0x484622
mov eax, dword [ebp - 0x844]
add eax, 1
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 0x10
jge 0x48463b
mov ecx, dword [ebp - 0x844]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x484613
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48464f
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484665
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x848], 0
jmp 0x484680
mov edx, dword [ebp - 0x848]
add edx, 1
mov dword [ebp - 0x848], edx
cmp dword [ebp - 0x848], 3
jge 0x4846c1
cmp dword [ebp - 0x1c], 0
jge 0x484697
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4846ad
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa40]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484671
mov dword [ebp - 4], 5
mov dword [ebp - 0xa44], 0
jmp 0x4846e3
mov eax, dword [ebp - 0xa44]
add eax, 1
mov dword [ebp - 0xa44], eax
cmp dword [ebp - 0xa44], 0xc
jge 0x48471a
mov ecx, dword [ebp - 0xa44]
and ecx, 0x80000001
jns 0x4846ff
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x48470f
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x484718
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4846d4
mov dword [ebp - 4], 0xfffffffe
call fcn.00484728
jmp 0x484746
mov dword [ebp - 4], 6
mov dword [ebp - 0xa48], 0
jmp 0x484768
mov eax, dword [ebp - 0xa48]
add eax, 1
mov dword [ebp - 0xa48], eax
cmp dword [ebp - 0xa48], 5
jge 0x48479f
mov ecx, dword [ebp - 0xa48]
and ecx, 0x80000001
jns 0x484784
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x484794
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48479d
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x484759
mov dword [ebp - 4], 0xfffffffe
call fcn.004847ad
jmp 0x4847cb
mov dword [ebp - 4], 7
mov dword [ebp - 0xa4c], 0
jmp 0x4847ed
mov eax, dword [ebp - 0xa4c]
add eax, 1
mov dword [ebp - 0xa4c], eax
cmp dword [ebp - 0xa4c], 6
jge 0x484824
mov ecx, dword [ebp - 0xa4c]
and ecx, 0x80000001
jns 0x484809
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x484819
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x484822
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4847de
mov dword [ebp - 4], 0xfffffffe
call fcn.00484832
jmp 0x484850
mov dword [ebp - 4], 8
mov dword [ebp - 0xa50], 0
jmp 0x484872
mov eax, dword [ebp - 0xa50]
add eax, 1
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0xa50], 3
jge 0x4848b9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48488f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48489f
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4848b7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4848b7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x484863
mov dword [ebp - 4], 0xfffffffe
call fcn.004848c7
jmp 0x4848d6
mov dword [ebp - 0xa54], 0
jmp 0x4848f1
mov ecx, dword [ebp - 0xa54]
add ecx, 1
mov dword [ebp - 0xa54], ecx
cmp dword [ebp - 0xa54], 2
jge 0x48490a
mov edx, dword [ebp - 0xa54]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4848e2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48491e
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484934
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 9
mov dword [ebp - 0xa58], 0
jmp 0x484956
mov edx, dword [ebp - 0xa58]
add edx, 1
mov dword [ebp - 0xa58], edx
cmp dword [ebp - 0xa58], 5
jge 0x48499d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x484973
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x484983
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48499b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48499b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x484947
mov dword [ebp - 4], 0xfffffffe
call fcn.004849ab
jmp 0x4849ba
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xa5c], 0
jmp 0x4849dc
mov ecx, dword [ebp - 0xa5c]
add ecx, 1
mov dword [ebp - 0xa5c], ecx
cmp dword [ebp - 0xa5c], 5
jge 0x484a1b
mov eax, dword [ebp - 0xa5c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x484a0b
mov eax, dword [ebp - 0xa5c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x484a16
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x484a19
mov dword [ebp - 0x1c], eax
jmp 0x4849cd
mov dword [ebp - 4], 0xfffffffe
call fcn.00484a29
jmp 0x484a31
mov dword [ebp - 0xa60], 0
jmp 0x484a4c
mov edx, dword [ebp - 0xa60]
add edx, 1
mov dword [ebp - 0xa60], edx
cmp dword [ebp - 0xa60], 3
jge 0x484a8d
cmp dword [ebp - 0x1c], 0
jge 0x484a63
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484a79
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc58]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484a3d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xc5c], 0
jmp 0x484aaf
mov eax, dword [ebp - 0xc5c]
add eax, 1
mov dword [ebp - 0xc5c], eax
cmp dword [ebp - 0xc5c], 2
jge 0x484aea
mov eax, dword [ebp - 0xc5c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x484ade
mov eax, dword [ebp - 0xc5c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x484ae5
and eax, 0xbc614e
jmp 0x484ae8
mov dword [ebp - 0x1c], eax
jmp 0x484aa0
mov dword [ebp - 4], 0xfffffffe
call fcn.00484af8
jmp 0x484b00
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xc60], 0
jmp 0x484b22
mov edx, dword [ebp - 0xc60]
add edx, 1
mov dword [ebp - 0xc60], edx
cmp dword [ebp - 0xc60], 1
jge 0x484b61
mov eax, dword [ebp - 0xc60]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x484b51
mov eax, dword [ebp - 0xc60]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x484b5c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x484b5f
mov dword [ebp - 0x1c], eax
jmp 0x484b13
mov dword [ebp - 4], 0xfffffffe
call fcn.00484b6f
jmp 0x484b77
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xc64], 0
jmp 0x484b99
mov edx, dword [ebp - 0xc64]
add edx, 1
mov dword [ebp - 0xc64], edx
cmp dword [ebp - 0xc64], 7
jge 0x484bd4
mov eax, dword [ebp - 0xc64]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x484bc8
mov eax, dword [ebp - 0xc64]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x484bcf
and eax, 0xbc614e
jmp 0x484bd2
mov dword [ebp - 0x1c], eax
jmp 0x484b8a
mov dword [ebp - 4], 0xfffffffe
call fcn.00484be2
jmp 0x484bea
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xc68], 0
jmp 0x484c0c
mov edx, dword [ebp - 0xc68]
add edx, 1
mov dword [ebp - 0xc68], edx
cmp dword [ebp - 0xc68], 2
jge 0x484c47
mov eax, dword [ebp - 0xc68]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x484c3b
mov eax, dword [ebp - 0xc68]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x484c42
and eax, 0xbc614e
jmp 0x484c45
mov dword [ebp - 0x1c], eax
jmp 0x484bfd
mov dword [ebp - 4], 0xfffffffe
call fcn.00484c55
jmp 0x484c5d
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xc6c], 0
jmp 0x484c7f
mov edx, dword [ebp - 0xc6c]
add edx, 1
mov dword [ebp - 0xc6c], edx
cmp dword [ebp - 0xc6c], 2
jge 0x484cc6
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x484c9c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x484cac
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x484cc4
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484cc4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x484c70
mov dword [ebp - 4], 0xfffffffe
call fcn.00484cd4
jmp 0x484ce3
mov dword [ebp - 0xc70], 1
mov dword [ebp - 0xc74], 1
mov dword [ebp - 0xc78], 2
mov dword [ebp - 0xc7c], 0
mov dword [ebp - 0xc80], 0
jmp 0x484d26
mov ecx, dword [ebp - 0xc80]
add ecx, 1
mov dword [ebp - 0xc80], ecx
cmp dword [ebp - 0xc80], 1
jge 0x484d67
mov edx, dword [ebp - 0xc70]
add edx, dword [ebp - 0xc74]
mov dword [ebp - 0xc78], edx
mov eax, dword [ebp - 0xc74]
mov dword [ebp - 0xc70], eax
mov ecx, dword [ebp - 0xc78]
mov dword [ebp - 0xc74], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc78]
mov dword [ebp - 0x1c], edx
jmp 0x484d17
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc84], 0
jmp 0x484d8b
mov ecx, dword [ebp - 0xc84]
add ecx, 1
mov dword [ebp - 0xc84], ecx
cmp dword [ebp - 0xc84], 7
jge 0x484dcc
cmp dword [ebp - 0x1c], 0
jge 0x484da2
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484db8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe80]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484d7c
mov dword [ebp - 0xe84], 0
jmp 0x484de7
mov eax, dword [ebp - 0xe84]
add eax, 1
mov dword [ebp - 0xe84], eax
cmp dword [ebp - 0xe84], 5
jge 0x484e28
cmp dword [ebp - 0x1c], 0
jge 0x484dfe
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484e14
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1080]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484dd8
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x1084], 0
jmp 0x484e4a
mov eax, dword [ebp - 0x1084]
add eax, 1
mov dword [ebp - 0x1084], eax
cmp dword [ebp - 0x1084], 4
jge 0x484e81
mov ecx, dword [ebp - 0x1084]
and ecx, 0x80000001
jns 0x484e66
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x484e76
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x484e7f
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x484e3b
mov dword [ebp - 4], 0xfffffffe
call fcn.00484e8f
jmp 0x484ead
mov dword [ebp - 0x1088], 0
jmp 0x484ec8
mov eax, dword [ebp - 0x1088]
add eax, 1
mov dword [ebp - 0x1088], eax
cmp dword [ebp - 0x1088], 8
jge 0x484ee1
mov ecx, dword [ebp - 0x1088]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x484eb9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x484ef5
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484f0b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x108c], 0
jmp 0x484f2d
mov edx, dword [ebp - 0x108c]
add edx, 1
mov dword [ebp - 0x108c], edx
cmp dword [ebp - 0x108c], 2
jge 0x484f6c
mov eax, dword [ebp - 0x108c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x484f5c
mov eax, dword [ebp - 0x108c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x484f67
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x484f6a
mov dword [ebp - 0x1c], eax
jmp 0x484f1e
mov dword [ebp - 4], 0xfffffffe
call fcn.00484f7a
jmp 0x484f82
mov dword [ebp - 0x1090], 0
jmp 0x484f9d
mov edx, dword [ebp - 0x1090]
add edx, 1
mov dword [ebp - 0x1090], edx
cmp dword [ebp - 0x1090], 2
jge 0x484fde
cmp dword [ebp - 0x1c], 0
jge 0x484fb4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484fca
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1288]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484f8e
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x128c], 0
jmp 0x485000
mov eax, dword [ebp - 0x128c]
add eax, 1
mov dword [ebp - 0x128c], eax
cmp dword [ebp - 0x128c], 2
jge 0x48503b
mov eax, dword [ebp - 0x128c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48502f
mov eax, dword [ebp - 0x128c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x485036
and eax, 0xbc614e
jmp 0x485039
mov dword [ebp - 0x1c], eax
jmp 0x484ff1
mov dword [ebp - 4], 0xfffffffe
call fcn.00485049
jmp 0x485051
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x1290], 0
jmp 0x485073
mov edx, dword [ebp - 0x1290]
add edx, 1
mov dword [ebp - 0x1290], edx
cmp dword [ebp - 0x1290], 1
jge 0x4850b2
mov eax, dword [ebp - 0x1290]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4850a2
mov eax, dword [ebp - 0x1290]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4850ad
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4850b0
mov dword [ebp - 0x1c], eax
jmp 0x485064
mov dword [ebp - 4], 0xfffffffe
call fcn.004850c0
jmp 0x4850c8
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x1294], 0
jmp 0x4850ea
mov edx, dword [ebp - 0x1294]
add edx, 1
mov dword [ebp - 0x1294], edx
cmp dword [ebp - 0x1294], 2
jge 0x485131
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x485107
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x485117
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48512f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48512f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4850db
mov dword [ebp - 4], 0xfffffffe
call fcn.0048513f
jmp 0x48514e
mov dword [ebp - 0x1298], 0
jmp 0x485169
mov ecx, dword [ebp - 0x1298]
add ecx, 1
mov dword [ebp - 0x1298], ecx
cmp dword [ebp - 0x1298], 0
jge 0x485182
mov edx, dword [ebp - 0x1298]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48515a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x485196
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4851ac
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x129c], 1
mov dword [ebp - 0x12a0], 1
mov dword [ebp - 0x12a4], 2
mov dword [ebp - 0x12a8], 0
mov dword [ebp - 0x12ac], 0
jmp 0x4851ef
mov edx, dword [ebp - 0x12ac]
add edx, 1
mov dword [ebp - 0x12ac], edx
cmp dword [ebp - 0x12ac], 3
jge 0x485230
mov eax, dword [ebp - 0x129c]
add eax, dword [ebp - 0x12a0]
mov dword [ebp - 0x12a4], eax
mov ecx, dword [ebp - 0x12a0]
mov dword [ebp - 0x129c], ecx
mov edx, dword [ebp - 0x12a4]
mov dword [ebp - 0x12a0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x12a4]
mov dword [ebp - 0x1c], eax
jmp 0x4851e0
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x12b0], 0
jmp 0x48525b
mov edx, dword [ebp - 0x12b0]
add edx, 1
mov dword [ebp - 0x12b0], edx
cmp dword [ebp - 0x12b0], 2
jge 0x485296
mov eax, dword [ebp - 0x12b0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48528a
mov eax, dword [ebp - 0x12b0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x485291
and eax, 0xbc614e
jmp 0x485294
mov dword [ebp - 0x1c], eax
jmp 0x48524c
mov dword [ebp - 4], 0xfffffffe
call fcn.004852a4
jmp 0x4852ac
mov dword [ebp - 0x12b4], 0
jmp 0x4852c7
mov edx, dword [ebp - 0x12b4]
add edx, 1
mov dword [ebp - 0x12b4], edx
cmp dword [ebp - 0x12b4], 4
jge 0x485308
cmp dword [ebp - 0x1c], 0
jge 0x4852de
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4852f4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x14b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4852b8
mov dword [ebp - 0x14b4], 0
jmp 0x485323
mov eax, dword [ebp - 0x14b4]
add eax, 1
mov dword [ebp - 0x14b4], eax
cmp dword [ebp - 0x14b4], 1
jge 0x48533c
mov ecx, dword [ebp - 0x14b4]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x485314
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x485350
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x485366
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x14b8], 0
jmp 0x485388
mov edx, dword [ebp - 0x14b8]
add edx, 1
mov dword [ebp - 0x14b8], edx
cmp dword [ebp - 0x14b8], 4
jge 0x4853c7
mov eax, dword [ebp - 0x14b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4853b7
mov eax, dword [ebp - 0x14b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4853c2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4853c5
mov dword [ebp - 0x1c], eax
jmp 0x485379
mov dword [ebp - 4], 0xfffffffe
call fcn.004853d5
jmp 0x4853dd
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x14bc], 0
jmp 0x4853ff
mov edx, dword [ebp - 0x14bc]
add edx, 1
mov dword [ebp - 0x14bc], edx
cmp dword [ebp - 0x14bc], 1
jge 0x48543a
mov eax, dword [ebp - 0x14bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48542e
mov eax, dword [ebp - 0x14bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x485435
and eax, 0xbc614e
jmp 0x485438
mov dword [ebp - 0x1c], eax
jmp 0x4853f0
mov dword [ebp - 4], 0xfffffffe
call fcn.00485448
jmp 0x485450
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x14c0], 0
jmp 0x485472
mov edx, dword [ebp - 0x14c0]
add edx, 1
mov dword [ebp - 0x14c0], edx
cmp dword [ebp - 0x14c0], 0
jge 0x4854b9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48548f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48549f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4854b7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4854b7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x485463
mov dword [ebp - 4], 0xfffffffe
call fcn.004854c7
jmp 0x4854d6
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x14c4], 0
jmp 0x4854f8
mov ecx, dword [ebp - 0x14c4]
add ecx, 1
mov dword [ebp - 0x14c4], ecx
cmp dword [ebp - 0x14c4], 4
jge 0x485533
mov eax, dword [ebp - 0x14c4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x485527
mov eax, dword [ebp - 0x14c4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48552e
and eax, 0xbc614e
jmp 0x485531
mov dword [ebp - 0x1c], eax
jmp 0x4854e9
mov dword [ebp - 4], 0xfffffffe
call fcn.00485541
jmp 0x485549
mov dword [ebp - 0x14c8], 0
jmp 0x485564
cmp dword [ebp - 0x14c8], 3
jge 0x4855a5
cmp dword [ebp - 0x1c], 0
jge 0x48557b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x485591
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x16c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x485555
mov dword [ebp - 0x16c4], 0
jmp 0x4855c0
cmp dword [ebp - 0x16c4], 3
jge 0x4855d9
mov ecx, dword [ebp - 0x16c4]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4855b1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4855ed