Function at 0x474220
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b74c8
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1f80
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x34], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x474276
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x38
jge 0x474289
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x47426d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47429d
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4742b3
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x4742cc
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x12
jge 0x4742fc
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x4742e1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4742f1
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4742fa
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4742c3
mov dword [ebp - 4], 0xfffffffe
call fcn.0047430a
jmp 0x474327
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x474340
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xc
jge 0x474370
mov eax, dword [ebp - 0x28]
and eax, 0x80000001
jns 0x474355
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x474365
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47436e
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x474337
mov dword [ebp - 4], 0xfffffffe
call fcn.0047437e
jmp 0x47439b
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 0
jmp 0x4743b4
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0xe
jge 0x4743f8
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4743ce
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4743de
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4743f6
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4743f6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4743ab
mov dword [ebp - 4], 0xfffffffe
call fcn.00474406
jmp 0x474415
mov dword [ebp - 0x30], 0
jmp 0x474427
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0
jge 0x474465
cmp dword [ebp - 0x1c], 0
jge 0x47443b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474451
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47441e
mov dword [ebp - 0x234], 0
jmp 0x474480
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x13
jge 0x4744c1
cmp dword [ebp - 0x1c], 0
jge 0x474497
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4744ad
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x430]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x474471
mov dword [ebp - 4], 3
mov dword [ebp - 0x434], 0
jmp 0x4744e3
mov eax, dword [ebp - 0x434]
add eax, 1
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 3
jge 0x474522
mov eax, dword [ebp - 0x434]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x474512
mov eax, dword [ebp - 0x434]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47451d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x474520
mov dword [ebp - 0x1c], eax
jmp 0x4744d4
mov dword [ebp - 4], 0xfffffffe
call fcn.00474530
jmp 0x474538
mov dword [ebp - 0x438], 0
jmp 0x474553
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 6
jge 0x47456c
mov eax, dword [ebp - 0x438]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x474544
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474580
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474596
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 4
mov dword [ebp - 0x43c], 0
jmp 0x4745b8
mov edx, dword [ebp - 0x43c]
add edx, 1
mov dword [ebp - 0x43c], edx
cmp dword [ebp - 0x43c], 7
jge 0x4745f3
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4745e7
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4745ee
and eax, 0xbc614e
jmp 0x4745f1
mov dword [ebp - 0x1c], eax
jmp 0x4745a9
mov dword [ebp - 4], 0xfffffffe
call fcn.00474601
jmp 0x474609
mov dword [ebp - 0x440], 0
jmp 0x474624
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 5
jge 0x474665
cmp dword [ebp - 0x1c], 0
jge 0x47463b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474651
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x638]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x474615
mov dword [ebp - 4], 5
mov dword [ebp - 0x63c], 0
jmp 0x474687
mov eax, dword [ebp - 0x63c]
add eax, 1
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 0xb
jge 0x4746c6
mov eax, dword [ebp - 0x63c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4746b6
mov eax, dword [ebp - 0x63c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4746c1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4746c4
mov dword [ebp - 0x1c], eax
jmp 0x474678
mov dword [ebp - 4], 0xfffffffe
call fcn.004746d4
jmp 0x4746dc
mov dword [ebp - 0x640], 0
jmp 0x4746f7
mov edx, dword [ebp - 0x640]
add edx, 1
mov dword [ebp - 0x640], edx
cmp dword [ebp - 0x640], 1
jge 0x474738
cmp dword [ebp - 0x1c], 0
jge 0x47470e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474724
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x838]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4746e8
mov dword [ebp - 0x83c], 0
jmp 0x474753
mov eax, dword [ebp - 0x83c]
add eax, 1
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 6
jge 0x474794
cmp dword [ebp - 0x1c], 0
jge 0x47476a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474780
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa38]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x474744
mov dword [ebp - 4], 6
mov dword [ebp - 0xa3c], 0
jmp 0x4747b6
mov eax, dword [ebp - 0xa3c]
add eax, 1
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 0
jge 0x4747f5
mov eax, dword [ebp - 0xa3c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4747e5
mov eax, dword [ebp - 0xa3c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4747f0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4747f3
mov dword [ebp - 0x1c], eax
jmp 0x4747a7
mov dword [ebp - 4], 0xfffffffe
call fcn.00474803
jmp 0x47480b
mov dword [ebp - 4], 7
mov dword [ebp - 0xa40], 0
jmp 0x47482d
mov edx, dword [ebp - 0xa40]
add edx, 1
mov dword [ebp - 0xa40], edx
cmp dword [ebp - 0xa40], 1
jge 0x474868
mov eax, dword [ebp - 0xa40]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47485c
mov eax, dword [ebp - 0xa40]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x474863
and eax, 0xbc614e
jmp 0x474866
mov dword [ebp - 0x1c], eax
jmp 0x47481e
mov dword [ebp - 4], 0xfffffffe
call fcn.00474876
jmp 0x47487e
mov dword [ebp - 0xa44], 1
mov dword [ebp - 0xa48], 1
mov dword [ebp - 0xa4c], 2
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0xa54], 0
jmp 0x4748c1
mov edx, dword [ebp - 0xa54]
add edx, 1
mov dword [ebp - 0xa54], edx
cmp dword [ebp - 0xa54], 0xf
jge 0x474902
mov eax, dword [ebp - 0xa44]
add eax, dword [ebp - 0xa48]
mov dword [ebp - 0xa4c], eax
mov ecx, dword [ebp - 0xa48]
mov dword [ebp - 0xa44], ecx
mov edx, dword [ebp - 0xa4c]
mov dword [ebp - 0xa48], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xa4c]
mov dword [ebp - 0x1c], eax
jmp 0x4748b2
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xa58], 1
mov dword [ebp - 0xa5c], 1
mov dword [ebp - 0xa60], 2
mov dword [ebp - 0xa64], 0
mov dword [ebp - 0xa68], 0
jmp 0x47494e
mov edx, dword [ebp - 0xa68]
add edx, 1
mov dword [ebp - 0xa68], edx
cmp dword [ebp - 0xa68], 6
jge 0x47498f
mov eax, dword [ebp - 0xa58]
add eax, dword [ebp - 0xa5c]
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0xa5c]
mov dword [ebp - 0xa58], ecx
mov edx, dword [ebp - 0xa60]
mov dword [ebp - 0xa5c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xa60]
mov dword [ebp - 0x1c], eax
jmp 0x47493f
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xa6c], 0
jmp 0x4749b3
mov edx, dword [ebp - 0xa6c]
add edx, 1
mov dword [ebp - 0xa6c], edx
cmp dword [ebp - 0xa6c], 0xe
jge 0x4749cc
mov eax, dword [ebp - 0xa6c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4749a4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4749e0
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4749f6
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xa70], 0
jmp 0x474a11
mov edx, dword [ebp - 0xa70]
add edx, 1
mov dword [ebp - 0xa70], edx
cmp dword [ebp - 0xa70], 0xa
jge 0x474a2a
mov eax, dword [ebp - 0xa70]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x474a02
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474a3e
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474a54
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0xa74], 0
jmp 0x474a76
mov edx, dword [ebp - 0xa74]
add edx, 1
mov dword [ebp - 0xa74], edx
cmp dword [ebp - 0xa74], 8
jge 0x474abd
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x474a93
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x474aa3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x474abb
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474abb
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x474a67
mov dword [ebp - 4], 0xfffffffe
call fcn.00474acb
jmp 0x474ada
mov dword [ebp - 0xa78], 1
mov dword [ebp - 0xa7c], 1
mov dword [ebp - 0xa80], 2
mov dword [ebp - 0xa84], 0
mov dword [ebp - 0xa88], 0
jmp 0x474b1d
mov ecx, dword [ebp - 0xa88]
add ecx, 1
mov dword [ebp - 0xa88], ecx
cmp dword [ebp - 0xa88], 2
jge 0x474b5e
mov edx, dword [ebp - 0xa78]
add edx, dword [ebp - 0xa7c]
mov dword [ebp - 0xa80], edx
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0xa78], eax
mov ecx, dword [ebp - 0xa80]
mov dword [ebp - 0xa7c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa80]
mov dword [ebp - 0x1c], edx
jmp 0x474b0e
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa8c], 0
jmp 0x474b82
mov ecx, dword [ebp - 0xa8c]
add ecx, 1
mov dword [ebp - 0xa8c], ecx
cmp dword [ebp - 0xa8c], 0xf
jge 0x474b9b
mov edx, dword [ebp - 0xa8c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x474b73
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474baf
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474bc5
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 9
mov dword [ebp - 0xa90], 0
jmp 0x474be7
mov edx, dword [ebp - 0xa90]
add edx, 1
mov dword [ebp - 0xa90], edx
cmp dword [ebp - 0xa90], 0xf
jge 0x474c2e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x474c04
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x474c14
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x474c2c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474c2c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x474bd8
mov dword [ebp - 4], 0xfffffffe
call fcn.00474c3c
jmp 0x474c4b
mov dword [ebp - 0xa94], 1
mov dword [ebp - 0xa98], 1
mov dword [ebp - 0xa9c], 2
mov dword [ebp - 0xaa0], 0
mov dword [ebp - 0xaa4], 0
jmp 0x474c8e
mov ecx, dword [ebp - 0xaa4]
add ecx, 1
mov dword [ebp - 0xaa4], ecx
cmp dword [ebp - 0xaa4], 7
jge 0x474ccf
mov edx, dword [ebp - 0xa94]
add edx, dword [ebp - 0xa98]
mov dword [ebp - 0xa9c], edx
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0xa94], eax
mov ecx, dword [ebp - 0xa9c]
mov dword [ebp - 0xa98], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa9c]
mov dword [ebp - 0x1c], edx
jmp 0x474c7f
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xaa8], 0
jmp 0x474cfa
mov ecx, dword [ebp - 0xaa8]
add ecx, 1
mov dword [ebp - 0xaa8], ecx
cmp dword [ebp - 0xaa8], 6
jge 0x474d31
mov edx, dword [ebp - 0xaa8]
and edx, 0x80000001
jns 0x474d16
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x474d26
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x474d2f
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x474ceb
mov dword [ebp - 4], 0xfffffffe
call fcn.00474d3f
jmp 0x474d5d
mov dword [ebp - 0xaac], 0
jmp 0x474d78
mov ecx, dword [ebp - 0xaac]
add ecx, 1
mov dword [ebp - 0xaac], ecx
cmp dword [ebp - 0xaac], 4
jge 0x474d91
mov edx, dword [ebp - 0xaac]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x474d69
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474da5
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474dbb
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xab0], 0
jmp 0x474ddd
mov edx, dword [ebp - 0xab0]
add edx, 1
mov dword [ebp - 0xab0], edx
cmp dword [ebp - 0xab0], 0
jge 0x474e1c
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x474e0c
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x474e17
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x474e1a
mov dword [ebp - 0x1c], eax
jmp 0x474dce
mov dword [ebp - 4], 0xfffffffe
call fcn.00474e2a
jmp 0x474e32
mov dword [ebp - 0xab4], 0
jmp 0x474e4d
mov edx, dword [ebp - 0xab4]
add edx, 1
mov dword [ebp - 0xab4], edx
cmp dword [ebp - 0xab4], 6
jge 0x474e66
mov eax, dword [ebp - 0xab4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x474e3e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474e7a
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474e90
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xab8], 0
jmp 0x474eab
mov edx, dword [ebp - 0xab8]
add edx, 1
mov dword [ebp - 0xab8], edx
cmp dword [ebp - 0xab8], 6
jge 0x474ec4
mov eax, dword [ebp - 0xab8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x474e9c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474ed8
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474eee
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xabc], 0
jmp 0x474f09
mov edx, dword [ebp - 0xabc]
add edx, 1
mov dword [ebp - 0xabc], edx
cmp dword [ebp - 0xabc], 3
jge 0x474f22
mov eax, dword [ebp - 0xabc]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x474efa
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474f36
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474f4c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xac0], 0
jmp 0x474f67
mov edx, dword [ebp - 0xac0]
add edx, 1
mov dword [ebp - 0xac0], edx
cmp dword [ebp - 0xac0], 3
jge 0x474fa8
cmp dword [ebp - 0x1c], 0
jge 0x474f7e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474f94
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcb8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x474f58
mov dword [ebp - 0xcbc], 0
jmp 0x474fc3
mov eax, dword [ebp - 0xcbc]
add eax, 1
mov dword [ebp - 0xcbc], eax
cmp dword [ebp - 0xcbc], 2
jge 0x475004
cmp dword [ebp - 0x1c], 0
jge 0x474fda
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474ff0
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xeb8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x474fb4
mov dword [ebp - 0xebc], 0
jmp 0x47501f
mov eax, dword [ebp - 0xebc]
add eax, 1
mov dword [ebp - 0xebc], eax
cmp dword [ebp - 0xebc], 4
jge 0x475060
cmp dword [ebp - 0x1c], 0
jge 0x475036
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47504c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x475010
mov dword [ebp - 0x10bc], 0
jmp 0x47507b
mov eax, dword [ebp - 0x10bc]
add eax, 1
mov dword [ebp - 0x10bc], eax
cmp dword [ebp - 0x10bc], 1
jge 0x475094
mov ecx, dword [ebp - 0x10bc]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x47506c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4750a8
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4750be
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x10c0], 0
jmp 0x4750e0
mov edx, dword [ebp - 0x10c0]
add edx, 1
mov dword [ebp - 0x10c0], edx
cmp dword [ebp - 0x10c0], 2
jge 0x47511b
mov eax, dword [ebp - 0x10c0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47510f
mov eax, dword [ebp - 0x10c0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x475116
and eax, 0xbc614e
jmp 0x475119
mov dword [ebp - 0x1c], eax
jmp 0x4750d1
mov dword [ebp - 4], 0xfffffffe
call fcn.00475129
jmp 0x475131
mov dword [ebp - 0x10c4], 0
jmp 0x47514c
mov edx, dword [ebp - 0x10c4]
add edx, 1
mov dword [ebp - 0x10c4], edx
cmp dword [ebp - 0x10c4], 2
jge 0x47518d
cmp dword [ebp - 0x1c], 0
jge 0x475163
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x475179
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x12c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47513d
mov dword [ebp - 0x12c4], 0
jmp 0x4751a8
mov eax, dword [ebp - 0x12c4]
add eax, 1
mov dword [ebp - 0x12c4], eax
cmp dword [ebp - 0x12c4], 0
jge 0x4751e9
cmp dword [ebp - 0x1c], 0
jge 0x4751bf
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4751d5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x14c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x475199
mov dword [ebp - 0x14c4], 0
jmp 0x475204
mov eax, dword [ebp - 0x14c4]
add eax, 1
mov dword [ebp - 0x14c4], eax
cmp dword [ebp - 0x14c4], 2
jge 0x47521d
mov ecx, dword [ebp - 0x14c4]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4751f5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x475231
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x475247
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x14c8], 0
jmp 0x475262
mov edx, dword [ebp - 0x14c8]
add edx, 1
mov dword [ebp - 0x14c8], edx
cmp dword [ebp - 0x14c8], 0
jge 0x47527b
mov eax, dword [ebp - 0x14c8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x475253
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47528f
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4752a5
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x14cc], 0
jmp 0x4752c0
mov edx, dword [ebp - 0x14cc]
add edx, 1
mov dword [ebp - 0x14cc], edx
cmp dword [ebp - 0x14cc], 1
jge 0x4752d9
mov eax, dword [ebp - 0x14cc]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4752b1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4752ed
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x475303
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x14d0], 0
jmp 0x47531e
mov edx, dword [ebp - 0x14d0]
add edx, 1
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 3
jge 0x475337
mov eax, dword [ebp - 0x14d0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47530f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47534b
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x475361
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x14d4], 0
jmp 0x47537c
mov edx, dword [ebp - 0x14d4]
add edx, 1
mov dword [ebp - 0x14d4], edx
cmp dword [ebp - 0x14d4], 3
jge 0x475395
mov eax, dword [ebp - 0x14d4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47536d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4753a9
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4753bf
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x14d8], 0
jmp 0x4753e1
cmp dword [ebp - 0x14d8], 4
jge 0x475417