Function at 0x4938b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b9370
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1110
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x50], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x49390d
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x37
jge 0x493951
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x493927
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x493937
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x49394f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49394f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x493904
mov dword [ebp - 4], 0xfffffffe
call fcn.0049395f
jmp 0x49396e
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x49399c
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 0xf
jge 0x4939c2
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jmp 0x493993
mov eax, dword [ebp - 0x1c]
add eax, 0xf
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 0
jmp 0x4939e4
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0xb
jge 0x493a1a
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x493a0a
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x493a15
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x493a18
mov dword [ebp - 0x1c], eax
jmp 0x4939db
mov dword [ebp - 4], 0xfffffffe
call fcn.00493a28
jmp 0x493a30
mov dword [ebp - 4], 2
mov dword [ebp - 0x3c], 0
jmp 0x493a49
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x10
jge 0x493a8d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x493a63
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x493a73
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x493a8b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493a8b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x493a40
mov dword [ebp - 4], 0xfffffffe
call fcn.00493a9b
jmp 0x493aaa
mov dword [ebp - 0x40], 0
jmp 0x493abc
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 5
jge 0x493acf
mov edx, dword [ebp - 0x40]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x493ab3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x493ae3
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493af9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 3
mov dword [ebp - 0x44], 0
jmp 0x493b12
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 5
jge 0x493b48
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x493b38
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x493b43
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x493b46
mov dword [ebp - 0x1c], eax
jmp 0x493b09
mov dword [ebp - 4], 0xfffffffe
call fcn.00493b56
jmp 0x493b5e
mov dword [ebp - 4], 4
mov dword [ebp - 0x48], 0
jmp 0x493b77
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 1
jge 0x493bbb
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x493b91
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x493ba1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x493bb9
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493bb9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x493b6e
mov dword [ebp - 4], 0xfffffffe
call fcn.00493bc9
jmp 0x493bd8
mov dword [ebp - 0x4c], 0
jmp 0x493bea
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0xa
jge 0x493c28
cmp dword [ebp - 0x1c], 0
jge 0x493bfe
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493c14
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x248]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x493be1
mov dword [ebp - 4], 5
mov dword [ebp - 0x24c], 0
jmp 0x493c4a
mov eax, dword [ebp - 0x24c]
add eax, 1
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 6
jge 0x493c89
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x493c79
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x493c84
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x493c87
mov dword [ebp - 0x1c], eax
jmp 0x493c3b
mov dword [ebp - 4], 0xfffffffe
call fcn.00493c97
jmp 0x493c9f
mov dword [ebp - 4], 6
mov dword [ebp - 0x250], 0
jmp 0x493cc1
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 9
jge 0x493d08
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x493cde
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x493cee
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x493d06
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493d06
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x493cb2
mov dword [ebp - 4], 0xfffffffe
call fcn.00493d16
jmp 0x493d25
mov dword [ebp - 4], 7
mov dword [ebp - 0x254], 0
jmp 0x493d47
mov ecx, dword [ebp - 0x254]
add ecx, 1
mov dword [ebp - 0x254], ecx
cmp dword [ebp - 0x254], 2
jge 0x493d7e
mov edx, dword [ebp - 0x254]
and edx, 0x80000001
jns 0x493d63
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x493d73
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x493d7c
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x493d38
mov dword [ebp - 4], 0xfffffffe
call fcn.00493d8c
jmp 0x493daa
mov dword [ebp - 4], 8
mov dword [ebp - 0x258], 0
jmp 0x493dcc
mov ecx, dword [ebp - 0x258]
add ecx, 1
mov dword [ebp - 0x258], ecx
cmp dword [ebp - 0x258], 0xb
jge 0x493e13
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x493de9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x493df9
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x493e11
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493e11
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x493dbd
mov dword [ebp - 4], 0xfffffffe
call fcn.00493e21
jmp 0x493e30
mov dword [ebp - 4], 9
mov dword [ebp - 0x25c], 0
jmp 0x493e52
mov ecx, dword [ebp - 0x25c]
add ecx, 1
mov dword [ebp - 0x25c], ecx
cmp dword [ebp - 0x25c], 0x10
jge 0x493e91
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x493e81
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x493e8c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x493e8f
mov dword [ebp - 0x1c], eax
jmp 0x493e43
mov dword [ebp - 4], 0xfffffffe
call fcn.00493e9f
jmp 0x493ea7
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x260], 0
jmp 0x493ec9
mov edx, dword [ebp - 0x260]
add edx, 1
mov dword [ebp - 0x260], edx
cmp dword [ebp - 0x260], 1
jge 0x493f10
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x493ee6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x493ef6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x493f0e
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493f0e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x493eba
mov dword [ebp - 4], 0xfffffffe
call fcn.00493f1e
jmp 0x493f2d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x264], 0
jmp 0x493f4f
mov ecx, dword [ebp - 0x264]
add ecx, 1
mov dword [ebp - 0x264], ecx
cmp dword [ebp - 0x264], 6
jge 0x493f8e
mov eax, dword [ebp - 0x264]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x493f7e
mov eax, dword [ebp - 0x264]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x493f89
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x493f8c
mov dword [ebp - 0x1c], eax
jmp 0x493f40
mov dword [ebp - 4], 0xfffffffe
call fcn.00493f9c
jmp 0x493fa4
mov dword [ebp - 0x268], 0
jmp 0x493fbf
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 4
jge 0x494000
cmp dword [ebp - 0x1c], 0
jge 0x493fd6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493fec
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x493fb0
mov dword [ebp - 0x464], 0
jmp 0x49401b
mov eax, dword [ebp - 0x464]
add eax, 1
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 7
jge 0x49405c
cmp dword [ebp - 0x1c], 0
jge 0x494032
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x494048
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49400c
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x664], 0
jmp 0x49407e
mov eax, dword [ebp - 0x664]
add eax, 1
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 3
jge 0x4940b9
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4940ad
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4940b4
and eax, 0xbc614e
jmp 0x4940b7
mov dword [ebp - 0x1c], eax
jmp 0x49406f
mov dword [ebp - 4], 0xfffffffe
call fcn.004940c7
jmp 0x4940cf
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x668], 0
jmp 0x4940f1
mov edx, dword [ebp - 0x668]
add edx, 1
mov dword [ebp - 0x668], edx
cmp dword [ebp - 0x668], 0
jge 0x494127
mov eax, dword [ebp - 0x668]
and eax, 0x80000001
jns 0x49410c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x49411c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x494125
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4940e2
mov dword [ebp - 4], 0xfffffffe
call fcn.00494135
jmp 0x494152
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x66c], 0
jmp 0x494174
mov edx, dword [ebp - 0x66c]
add edx, 1
mov dword [ebp - 0x66c], edx
cmp dword [ebp - 0x66c], 0
jge 0x4941af
mov eax, dword [ebp - 0x66c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4941a3
mov eax, dword [ebp - 0x66c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4941aa
and eax, 0xbc614e
jmp 0x4941ad
mov dword [ebp - 0x1c], eax
jmp 0x494165
mov dword [ebp - 4], 0xfffffffe
call fcn.004941bd
jmp 0x4941c5
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x670], 0
jmp 0x4941e7
mov edx, dword [ebp - 0x670]
add edx, 1
mov dword [ebp - 0x670], edx
cmp dword [ebp - 0x670], 4
jge 0x49422e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x494204
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x494214
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49422c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49422c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4941d8
mov dword [ebp - 4], 0xfffffffe
call fcn.0049423c
jmp 0x49424b
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x674], 0
jmp 0x49426d
mov ecx, dword [ebp - 0x674]
add ecx, 1
mov dword [ebp - 0x674], ecx
cmp dword [ebp - 0x674], 1
jge 0x4942a8
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49429c
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4942a3
and eax, 0xbc614e
jmp 0x4942a6
mov dword [ebp - 0x1c], eax
jmp 0x49425e
mov dword [ebp - 4], 0xfffffffe
call fcn.004942b6
jmp 0x4942be
mov dword [ebp - 0x678], 0
jmp 0x4942d9
mov edx, dword [ebp - 0x678]
add edx, 1
mov dword [ebp - 0x678], edx
cmp dword [ebp - 0x678], 2
jge 0x4942f2
mov eax, dword [ebp - 0x678]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4942ca
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x494306
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49431c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x67c], 0
jmp 0x494337
mov edx, dword [ebp - 0x67c]
add edx, 1
mov dword [ebp - 0x67c], edx
cmp dword [ebp - 0x67c], 2
jge 0x494378
cmp dword [ebp - 0x1c], 0
jge 0x49434e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x494364
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x878]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x494328
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x87c], 0
jmp 0x49439a
mov eax, dword [ebp - 0x87c]
add eax, 1
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 0
jge 0x4943d5
mov eax, dword [ebp - 0x87c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4943c9
mov eax, dword [ebp - 0x87c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4943d0
and eax, 0xbc614e
jmp 0x4943d3
mov dword [ebp - 0x1c], eax
jmp 0x49438b
mov dword [ebp - 4], 0xfffffffe
call fcn.004943e3
jmp 0x4943eb
mov dword [ebp - 0x880], 0
jmp 0x494406
mov edx, dword [ebp - 0x880]
add edx, 1
mov dword [ebp - 0x880], edx
cmp dword [ebp - 0x880], 1
jge 0x49441f
mov eax, dword [ebp - 0x880]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4943f7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x494433
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x494449
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x884], 0
jmp 0x494464
mov edx, dword [ebp - 0x884]
add edx, 1
mov dword [ebp - 0x884], edx
cmp dword [ebp - 0x884], 6
jge 0x49447d
mov eax, dword [ebp - 0x884]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x494455
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x494491
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4944a7
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x888], 0
jmp 0x4944c9
mov edx, dword [ebp - 0x888]
add edx, 1
mov dword [ebp - 0x888], edx
cmp dword [ebp - 0x888], 5
jge 0x494510
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4944e6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4944f6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x49450e
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49450e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4944ba
mov dword [ebp - 4], 0xfffffffe
call fcn.0049451e
jmp 0x49452d
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x88c], 0
jmp 0x49454f
mov ecx, dword [ebp - 0x88c]
add ecx, 1
mov dword [ebp - 0x88c], ecx
cmp dword [ebp - 0x88c], 0
jge 0x49458e
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49457e
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x494589
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x49458c
mov dword [ebp - 0x1c], eax
jmp 0x494540
mov dword [ebp - 4], 0xfffffffe
call fcn.0049459c
jmp 0x4945a4
mov dword [ebp - 0x890], 0
jmp 0x4945bf
mov edx, dword [ebp - 0x890]
add edx, 1
mov dword [ebp - 0x890], edx
cmp dword [ebp - 0x890], 1
jge 0x4945d8
mov eax, dword [ebp - 0x890]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4945b0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4945ec
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x494602
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x894], 0
jmp 0x494624
mov edx, dword [ebp - 0x894]
add edx, 1
mov dword [ebp - 0x894], edx
cmp dword [ebp - 0x894], 1
jge 0x49465f
mov eax, dword [ebp - 0x894]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x494653
mov eax, dword [ebp - 0x894]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49465a
and eax, 0xbc614e
jmp 0x49465d
mov dword [ebp - 0x1c], eax
jmp 0x494615
mov dword [ebp - 4], 0xfffffffe
call fcn.0049466d
jmp 0x494675
mov dword [ebp - 0x898], 1
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x8a0], 2
mov dword [ebp - 0x8a4], 0
mov dword [ebp - 0x8a8], 0
jmp 0x4946b8
mov edx, dword [ebp - 0x8a8]
add edx, 1
mov dword [ebp - 0x8a8], edx
cmp dword [ebp - 0x8a8], 6
jge 0x4946f9
mov eax, dword [ebp - 0x898]
add eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], eax
mov ecx, dword [ebp - 0x89c]
mov dword [ebp - 0x898], ecx
mov edx, dword [ebp - 0x8a0]
mov dword [ebp - 0x89c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x1c], eax
jmp 0x4946a9
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x8ac], 0
jmp 0x494724
mov edx, dword [ebp - 0x8ac]
add edx, 1
mov dword [ebp - 0x8ac], edx
cmp dword [ebp - 0x8ac], 4
jge 0x494763
mov eax, dword [ebp - 0x8ac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x494753
mov eax, dword [ebp - 0x8ac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x49475e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x494761
mov dword [ebp - 0x1c], eax
jmp 0x494715
mov dword [ebp - 4], 0xfffffffe
call fcn.00494771
jmp 0x494779
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x8b0], 0
jmp 0x49479b
mov edx, dword [ebp - 0x8b0]
add edx, 1
mov dword [ebp - 0x8b0], edx
cmp dword [ebp - 0x8b0], 2
jge 0x4947d1
mov eax, dword [ebp - 0x8b0]
and eax, 0x80000001
jns 0x4947b6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4947c6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4947cf
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x49478c
mov dword [ebp - 4], 0xfffffffe
call fcn.004947df
jmp 0x4947fc
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x8b4], 0
jmp 0x49481e
mov edx, dword [ebp - 0x8b4]
add edx, 1
mov dword [ebp - 0x8b4], edx
cmp dword [ebp - 0x8b4], 7
jge 0x494859
mov eax, dword [ebp - 0x8b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x49484d
mov eax, dword [ebp - 0x8b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x494854
and eax, 0xbc614e
jmp 0x494857
mov dword [ebp - 0x1c], eax
jmp 0x49480f
mov dword [ebp - 4], 0xfffffffe
call fcn.00494867
jmp 0x49486f
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x8b8], 0
jmp 0x494891
mov edx, dword [ebp - 0x8b8]
add edx, 1
mov dword [ebp - 0x8b8], edx
cmp dword [ebp - 0x8b8], 4
jge 0x4948c7
mov eax, dword [ebp - 0x8b8]
and eax, 0x80000001
jns 0x4948ac
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4948bc
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4948c5
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x494882
mov dword [ebp - 4], 0xfffffffe
call fcn.004948d5
jmp 0x4948f2
mov dword [ebp - 0x8bc], 0
jmp 0x49490d
mov edx, dword [ebp - 0x8bc]
add edx, 1
mov dword [ebp - 0x8bc], edx
cmp dword [ebp - 0x8bc], 3
jge 0x494926
mov eax, dword [ebp - 0x8bc]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4948fe
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49493a
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x494950
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x8c0], 0
jmp 0x494972
mov edx, dword [ebp - 0x8c0]
add edx, 1
mov dword [ebp - 0x8c0], edx
cmp dword [ebp - 0x8c0], 2
jge 0x4949ad
mov eax, dword [ebp - 0x8c0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4949a1
mov eax, dword [ebp - 0x8c0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4949a8
and eax, 0xbc614e
jmp 0x4949ab
mov dword [ebp - 0x1c], eax
jmp 0x494963
mov dword [ebp - 4], 0xfffffffe
call fcn.004949bb
jmp 0x4949c3
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x8c4], 0
jmp 0x4949e5
mov edx, dword [ebp - 0x8c4]
add edx, 1
mov dword [ebp - 0x8c4], edx
cmp dword [ebp - 0x8c4], 0
jge 0x494a20
mov eax, dword [ebp - 0x8c4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x494a14
mov eax, dword [ebp - 0x8c4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x494a1b
and eax, 0xbc614e
jmp 0x494a1e
mov dword [ebp - 0x1c], eax
jmp 0x4949d6
mov dword [ebp - 4], 0xfffffffe
call fcn.00494a2e
jmp 0x494a36
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x8c8], 0
jmp 0x494a58
mov edx, dword [ebp - 0x8c8]
add edx, 1
mov dword [ebp - 0x8c8], edx
cmp dword [ebp - 0x8c8], 4
jge 0x494a9f
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x494a75
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x494a85
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x494a9d
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x494a9d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x494a49
mov dword [ebp - 4], 0xfffffffe
call fcn.00494aad
jmp 0x494abc
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x8cc], 0
jmp 0x494ade
mov ecx, dword [ebp - 0x8cc]
add ecx, 1
mov dword [ebp - 0x8cc], ecx
cmp dword [ebp - 0x8cc], 1
jge 0x494b1d
mov eax, dword [ebp - 0x8cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x494b0d
mov eax, dword [ebp - 0x8cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x494b18
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x494b1b
mov dword [ebp - 0x1c], eax
jmp 0x494acf
mov dword [ebp - 4], 0xfffffffe
call fcn.00494b2b
jmp 0x494b33
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x8d0], 0
jmp 0x494b55
mov edx, dword [ebp - 0x8d0]
add edx, 1
mov dword [ebp - 0x8d0], edx
cmp dword [ebp - 0x8d0], 2
jge 0x494b94
mov eax, dword [ebp - 0x8d0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x494b84
mov eax, dword [ebp - 0x8d0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x494b8f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x494b92
mov dword [ebp - 0x1c], eax
jmp 0x494b46
mov dword [ebp - 4], 0xfffffffe
call fcn.00494ba2
jmp 0x494baa
mov dword [ebp - 0x8d4], 0
jmp 0x494bc5
cmp dword [ebp - 0x8d4], 0
jge 0x494bde
mov eax, dword [ebp - 0x8d4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x494bb6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x494bf2