Function at 0x481540
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b8150
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff908
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0xc8], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
jmp 0x4815ae
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x4815d4
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jmp 0x4815a5
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x34], 0
jmp 0x4815ef
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xa
jge 0x481602
mov ecx, dword [ebp - 0x34]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4815e6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x481616
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48162c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], 0
jmp 0x481645
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x18
jge 0x481677
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48166b
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x481672
and eax, 0xbc614e
jmp 0x481675
mov dword [ebp - 0x1c], eax
jmp 0x48163c
mov dword [ebp - 4], 0xfffffffe
call fcn.00481685
jmp 0x48168d
mov dword [ebp - 4], 1
mov dword [ebp - 0x3c], 0
jmp 0x4816a6
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 7
jge 0x4816dc
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4816cc
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4816d7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4816da
mov dword [ebp - 0x1c], eax
jmp 0x48169d
mov dword [ebp - 4], 0xfffffffe
call fcn.004816ea
jmp 0x4816f2
mov dword [ebp - 4], 2
mov dword [ebp - 0x40], 0
jmp 0x48170b
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x12
jge 0x48173b
mov eax, dword [ebp - 0x40]
and eax, 0x80000001
jns 0x481720
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x481730
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x481739
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x481702
mov dword [ebp - 4], 0xfffffffe
call fcn.00481749
jmp 0x481766
mov dword [ebp - 4], 3
mov dword [ebp - 0x44], 0
jmp 0x48177f
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x1d
jge 0x4817af
mov eax, dword [ebp - 0x44]
and eax, 0x80000001
jns 0x481794
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4817a4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4817ad
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x481776
mov dword [ebp - 4], 0xfffffffe
call fcn.004817bd
jmp 0x4817da
mov dword [ebp - 4], 4
mov dword [ebp - 0x48], 0
jmp 0x4817f3
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x19
jge 0x481825
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x481819
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x481820
and eax, 0xbc614e
jmp 0x481823
mov dword [ebp - 0x1c], eax
jmp 0x4817ea
mov dword [ebp - 4], 0xfffffffe
call fcn.00481833
jmp 0x48183b
mov dword [ebp - 4], 5
mov dword [ebp - 0x4c], 0
jmp 0x481854
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 5
jge 0x481898
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48186e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48187e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x481896
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x481896
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48184b
mov dword [ebp - 4], 0xfffffffe
call fcn.004818a6
jmp 0x4818b5
mov dword [ebp - 4], 6
mov dword [ebp - 0x50], 0
jmp 0x4818ce
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0
jge 0x4818ff
mov edx, dword [ebp - 0x50]
and edx, 0x80000001
jns 0x4818e4
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x4818f4
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4818fd
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4818c5
mov dword [ebp - 4], 0xfffffffe
call fcn.0048190d
jmp 0x48192b
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x5c], 2
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
jmp 0x481959
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 4
jge 0x48197f
mov edx, dword [ebp - 0x54]
add edx, dword [ebp - 0x58]
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], edx
jmp 0x481950
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x68], 0
jmp 0x4819a1
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
cmp dword [ebp - 0x68], 2
jge 0x4819e5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4819bb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4819cb
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4819e3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4819e3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x481998
mov dword [ebp - 4], 0xfffffffe
call fcn.004819f3
jmp 0x481a02
mov dword [ebp - 4], 8
mov dword [ebp - 0x6c], 0
jmp 0x481a1b
mov ecx, dword [ebp - 0x6c]
add ecx, 1
mov dword [ebp - 0x6c], ecx
cmp dword [ebp - 0x6c], 4
jge 0x481a4c
mov edx, dword [ebp - 0x6c]
and edx, 0x80000001
jns 0x481a31
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x481a41
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x481a4a
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x481a12
mov dword [ebp - 4], 0xfffffffe
call fcn.00481a5a
jmp 0x481a78
mov dword [ebp - 4], 9
mov dword [ebp - 0x70], 0
jmp 0x481a91
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 7
jge 0x481ac3
mov eax, dword [ebp - 0x70]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x481ab7
mov eax, dword [ebp - 0x70]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x481abe
and eax, 0xbc614e
jmp 0x481ac1
mov dword [ebp - 0x1c], eax
jmp 0x481a88
mov dword [ebp - 4], 0xfffffffe
call fcn.00481ad1
jmp 0x481ad9
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x7c], 2
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x84], 0
jmp 0x481b10
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 8
jge 0x481b39
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x78]
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x74], ecx
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jmp 0x481b01
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x88], 0
jmp 0x481b64
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 8
jge 0x481b9a
mov eax, dword [ebp - 0x88]
and eax, 0x80000001
jns 0x481b7f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x481b8f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x481b98
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x481b55
mov dword [ebp - 4], 0xfffffffe
call fcn.00481ba8
jmp 0x481bc5
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x8c], 0
jmp 0x481be7
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 2
jge 0x481c22
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x481c16
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x481c1d
and eax, 0xbc614e
jmp 0x481c20
mov dword [ebp - 0x1c], eax
jmp 0x481bd8
mov dword [ebp - 4], 0xfffffffe
call fcn.00481c30
jmp 0x481c38
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x90], 0
jmp 0x481c5a
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 5
jge 0x481ca1
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x481c77
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x481c87
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x481c9f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x481c9f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x481c4b
mov dword [ebp - 4], 0xfffffffe
call fcn.00481caf
jmp 0x481cbe
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x94], 0
jmp 0x481ce0
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 7
jge 0x481d1b
mov eax, dword [ebp - 0x94]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x481d0f
mov eax, dword [ebp - 0x94]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x481d16
and eax, 0xbc614e
jmp 0x481d19
mov dword [ebp - 0x1c], eax
jmp 0x481cd1
mov dword [ebp - 4], 0xfffffffe
call fcn.00481d29
jmp 0x481d31
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x98], 0
jmp 0x481d53
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 2
jge 0x481d9a
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x481d70
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x481d80
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x481d98
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x481d98
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x481d44
mov dword [ebp - 4], 0xfffffffe
call fcn.00481da8
jmp 0x481db7
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x9c], 0
jmp 0x481dd9
mov ecx, dword [ebp - 0x9c]
add ecx, 1
mov dword [ebp - 0x9c], ecx
cmp dword [ebp - 0x9c], 6
jge 0x481e14
mov eax, dword [ebp - 0x9c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x481e08
mov eax, dword [ebp - 0x9c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x481e0f
and eax, 0xbc614e
jmp 0x481e12
mov dword [ebp - 0x1c], eax
jmp 0x481dca
mov dword [ebp - 4], 0xfffffffe
call fcn.00481e22
jmp 0x481e2a
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xa0], 0
jmp 0x481e4c
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 4
jge 0x481e82
mov eax, dword [ebp - 0xa0]
and eax, 0x80000001
jns 0x481e67
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x481e77
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x481e80
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x481e3d
mov dword [ebp - 4], 0xfffffffe
call fcn.00481e90
jmp 0x481ead
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xa4], 0
jmp 0x481ecf
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 3
jge 0x481f0a
mov eax, dword [ebp - 0xa4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x481efe
mov eax, dword [ebp - 0xa4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x481f05
and eax, 0xbc614e
jmp 0x481f08
mov dword [ebp - 0x1c], eax
jmp 0x481ec0
mov dword [ebp - 4], 0xfffffffe
call fcn.00481f18
jmp 0x481f20
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xac], 1
mov dword [ebp - 0xb0], 2
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], 0
jmp 0x481f63
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 3
jge 0x481fa4
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0xac]
mov dword [ebp - 0xb0], eax
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], eax
jmp 0x481f54
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xbc], 0
jmp 0x481fcf
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 0
jge 0x482005
mov eax, dword [ebp - 0xbc]
and eax, 0x80000001
jns 0x481fea
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x481ffa
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x482003
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x481fc0
mov dword [ebp - 4], 0xfffffffe
call fcn.00482013
jmp 0x482030
mov dword [ebp - 0xc0], 0
jmp 0x48204b
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 4
jge 0x482064
mov eax, dword [ebp - 0xc0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48203c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x482078
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48208e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xc4], 0
jmp 0x4820a9
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 4
jge 0x4820ea
cmp dword [ebp - 0x1c], 0
jge 0x4820c0
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4820d6
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x2c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48209a
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x2c4], 0
jmp 0x48210c
mov eax, dword [ebp - 0x2c4]
add eax, 1
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x482153
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x482129
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x482139
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x482151
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x482151
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4820fd
mov dword [ebp - 4], 0xfffffffe
call fcn.00482161
jmp 0x482170
mov dword [ebp - 0x2c8], 0
jmp 0x48218b
mov ecx, dword [ebp - 0x2c8]
add ecx, 1
mov dword [ebp - 0x2c8], ecx
cmp dword [ebp - 0x2c8], 4
jge 0x4821cc
cmp dword [ebp - 0x1c], 0
jge 0x4821a2
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4821b8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x4c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48217c
mov dword [ebp - 0x4c4], 1
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x4cc], 2
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x4d4], 0
jmp 0x48220f
mov eax, dword [ebp - 0x4d4]
add eax, 1
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 2
jge 0x482250
mov ecx, dword [ebp - 0x4c4]
add ecx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4cc], ecx
mov edx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x4c8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0x1c], ecx
jmp 0x482200
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x4d8], 0
jmp 0x48227b
mov eax, dword [ebp - 0x4d8]
add eax, 1
mov dword [ebp - 0x4d8], eax
cmp dword [ebp - 0x4d8], 1
jge 0x4822c2
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x482298
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4822a8
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4822c0
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4822c0
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48226c
mov dword [ebp - 4], 0xfffffffe
call fcn.004822d0
jmp 0x4822df
mov dword [ebp - 0x4dc], 1
mov dword [ebp - 0x4e0], 1
mov dword [ebp - 0x4e4], 2
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4ec], 0
jmp 0x482322
mov ecx, dword [ebp - 0x4ec]
add ecx, 1
mov dword [ebp - 0x4ec], ecx
cmp dword [ebp - 0x4ec], 2
jge 0x482363
mov edx, dword [ebp - 0x4dc]
add edx, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e4], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x4e0], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4e4]
mov dword [ebp - 0x1c], edx
jmp 0x482313
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4f0], 0
jmp 0x482387
mov ecx, dword [ebp - 0x4f0]
add ecx, 1
mov dword [ebp - 0x4f0], ecx
cmp dword [ebp - 0x4f0], 2
jge 0x4823c8
cmp dword [ebp - 0x1c], 0
jge 0x48239e
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4823b4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6e8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x482378
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x6ec], 0
jmp 0x4823ea
mov eax, dword [ebp - 0x6ec]
add eax, 1
mov dword [ebp - 0x6ec], eax
cmp dword [ebp - 0x6ec], 3
jge 0x482421
mov ecx, dword [ebp - 0x6ec]
and ecx, 0x80000001
jns 0x482406
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x482416
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x48241f
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4823db
mov dword [ebp - 4], 0xfffffffe
call fcn.0048242f
jmp 0x48244d
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x6f0], 0
jmp 0x48246f
mov eax, dword [ebp - 0x6f0]
add eax, 1
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 0
jge 0x4824b6
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48248c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48249c
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4824b4
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4824b4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x482460
mov dword [ebp - 4], 0xfffffffe
call fcn.004824c4
jmp 0x4824d3
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x6f4], 0
jmp 0x4824f5
mov ecx, dword [ebp - 0x6f4]
add ecx, 1
mov dword [ebp - 0x6f4], ecx
cmp dword [ebp - 0x6f4], 4
jge 0x482530
mov eax, dword [ebp - 0x6f4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x482524
mov eax, dword [ebp - 0x6f4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48252b
and eax, 0xbc614e
jmp 0x48252e
mov dword [ebp - 0x1c], eax
jmp 0x4824e6
mov dword [ebp - 4], 0xfffffffe
call fcn.0048253e
jmp 0x482546
mov dword [ebp - 0x6f8], 0
jmp 0x482561
mov edx, dword [ebp - 0x6f8]
add edx, 1
mov dword [ebp - 0x6f8], edx
cmp dword [ebp - 0x6f8], 3
jge 0x48257a
mov eax, dword [ebp - 0x6f8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x482552
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48258e
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4825a4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x6fc], 0
jmp 0x4825c6
mov edx, dword [ebp - 0x6fc]
add edx, 1
mov dword [ebp - 0x6fc], edx
cmp dword [ebp - 0x6fc], 4
jge 0x4825fc
mov eax, dword [ebp - 0x6fc]
and eax, 0x80000001
jns 0x4825e1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4825f1
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4825fa
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4825b7
mov dword [ebp - 4], 0xfffffffe
call fcn.0048260a
jmp 0x482627
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x700], 0
jmp 0x482649
mov edx, dword [ebp - 0x700]
add edx, 1
mov dword [ebp - 0x700], edx
cmp dword [ebp - 0x700], 3
jge 0x482688
mov eax, dword [ebp - 0x700]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x482678
mov eax, dword [ebp - 0x700]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x482683
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x482686
mov dword [ebp - 0x1c], eax
jmp 0x48263a
mov dword [ebp - 4], 0xfffffffe
call fcn.00482696
jmp 0x48269e
mov dword [ebp - 0x704], 0
jmp 0x4826b9
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
cmp dword [ebp - 0x704], 1
jge 0x4826d2
mov eax, dword [ebp - 0x704]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4826aa
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4826e6
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4826fc
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x708], 0
jmp 0x482717
mov edx, dword [ebp - 0x708]
add edx, 1
mov dword [ebp - 0x708], edx
cmp dword [ebp - 0x708], 0
jge 0x482730
mov eax, dword [ebp - 0x708]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x482708
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x482744
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48275a
mov dword [ebp - 0x1c], 0xb
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc8]
xor ecx, ebp
call fcn.00408023
mov esp, ebp
pop ebp
ret