Function at 0x4763f0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b7658
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1404
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x476446
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 8
jge 0x476484
cmp dword [ebp - 0x1c], 0
jge 0x47645a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x476470
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47643d
mov dword [ebp - 0x224], 0
jmp 0x47649f
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x1f
jge 0x4764b8
mov ecx, dword [ebp - 0x224]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x476490
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4764cc
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4764e2
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x228], 0
jmp 0x4764fd
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0x1d
jge 0x476516
mov eax, dword [ebp - 0x228]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4764ee
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47652a
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x476540
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x234], 2
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x23c], 0
jmp 0x476583
mov edx, dword [ebp - 0x23c]
add edx, 1
mov dword [ebp - 0x23c], edx
cmp dword [ebp - 0x23c], 0x17
jge 0x4765c4
mov eax, dword [ebp - 0x22c]
add eax, dword [ebp - 0x230]
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x230]
mov dword [ebp - 0x22c], ecx
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0x230], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x234]
mov dword [ebp - 0x1c], eax
jmp 0x476574
mov ecx, dword [ebp - 0x1c]
add ecx, 0x17
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x240], 0
jmp 0x4765ef
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0xe
jge 0x476625
mov eax, dword [ebp - 0x240]
and eax, 0x80000001
jns 0x47660a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47661a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x476623
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4765e0
mov dword [ebp - 4], 0xfffffffe
call fcn.00476633
jmp 0x476650
mov dword [ebp - 4], 1
mov dword [ebp - 0x244], 0
jmp 0x476672
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0x1a
jge 0x4766b1
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4766a1
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4766ac
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4766af
mov dword [ebp - 0x1c], eax
jmp 0x476663
mov dword [ebp - 4], 0xfffffffe
call fcn.004766bf
jmp 0x4766c7
mov dword [ebp - 4], 2
mov dword [ebp - 0x248], 0
jmp 0x4766e9
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 0xd
jge 0x476724
mov eax, dword [ebp - 0x248]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x476718
mov eax, dword [ebp - 0x248]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47671f
and eax, 0xbc614e
jmp 0x476722
mov dword [ebp - 0x1c], eax
jmp 0x4766da
mov dword [ebp - 4], 0xfffffffe
call fcn.00476732
jmp 0x47673a
mov dword [ebp - 4], 3
mov dword [ebp - 0x24c], 0
jmp 0x47675c
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 0x16
jge 0x476797
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47678b
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x476792
and eax, 0xbc614e
jmp 0x476795
mov dword [ebp - 0x1c], eax
jmp 0x47674d
mov dword [ebp - 4], 0xfffffffe
call fcn.004767a5
jmp 0x4767ad
mov dword [ebp - 4], 4
mov dword [ebp - 0x250], 0
jmp 0x4767cf
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0x13
jge 0x47680a
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4767fe
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x476805
and eax, 0xbc614e
jmp 0x476808
mov dword [ebp - 0x1c], eax
jmp 0x4767c0
mov dword [ebp - 4], 0xfffffffe
call fcn.00476818
jmp 0x476820
mov dword [ebp - 4], 5
mov dword [ebp - 0x254], 0
jmp 0x476842
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 5
jge 0x476881
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x476871
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47687c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47687f
mov dword [ebp - 0x1c], eax
jmp 0x476833
mov dword [ebp - 4], 0xfffffffe
call fcn.0047688f
jmp 0x476897
mov dword [ebp - 4], 6
mov dword [ebp - 0x258], 0
jmp 0x4768b9
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 0xd
jge 0x4768f8
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4768e8
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4768f3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4768f6
mov dword [ebp - 0x1c], eax
jmp 0x4768aa
mov dword [ebp - 4], 0xfffffffe
call fcn.00476906
jmp 0x47690e
mov dword [ebp - 4], 7
mov dword [ebp - 0x25c], 0
jmp 0x476930
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 7
jge 0x47696b
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47695f
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x476966
and eax, 0xbc614e
jmp 0x476969
mov dword [ebp - 0x1c], eax
jmp 0x476921
mov dword [ebp - 4], 0xfffffffe
call fcn.00476979
jmp 0x476981
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x270], 0
jmp 0x4769c4
mov edx, dword [ebp - 0x270]
add edx, 1
mov dword [ebp - 0x270], edx
cmp dword [ebp - 0x270], 0xe
jge 0x476a05
mov eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x264]
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp - 0x268]
mov dword [ebp - 0x264], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x268]
mov dword [ebp - 0x1c], eax
jmp 0x4769b5
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x274], 0
jmp 0x476a29
mov edx, dword [ebp - 0x274]
add edx, 1
mov dword [ebp - 0x274], edx
cmp dword [ebp - 0x274], 0xf
jge 0x476a6a
cmp dword [ebp - 0x1c], 0
jge 0x476a40
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x476a56
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x470]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x476a1a
mov dword [ebp - 4], 8
mov dword [ebp - 0x474], 0
jmp 0x476a8c
mov eax, dword [ebp - 0x474]
add eax, 1
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 2
jge 0x476ac7
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x476abb
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x476ac2
and eax, 0xbc614e
jmp 0x476ac5
mov dword [ebp - 0x1c], eax
jmp 0x476a7d
mov dword [ebp - 4], 0xfffffffe
call fcn.00476ad5
jmp 0x476add
mov dword [ebp - 4], 9
mov dword [ebp - 0x478], 0
jmp 0x476aff
mov edx, dword [ebp - 0x478]
add edx, 1
mov dword [ebp - 0x478], edx
cmp dword [ebp - 0x478], 0xb
jge 0x476b35
mov eax, dword [ebp - 0x478]
and eax, 0x80000001
jns 0x476b1a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x476b2a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x476b33
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x476af0
mov dword [ebp - 4], 0xfffffffe
call fcn.00476b43
jmp 0x476b60
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x47c], 0
jmp 0x476b82
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
cmp dword [ebp - 0x47c], 1
jge 0x476bb8
mov eax, dword [ebp - 0x47c]
and eax, 0x80000001
jns 0x476b9d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x476bad
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x476bb6
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x476b73
mov dword [ebp - 4], 0xfffffffe
call fcn.00476bc6
jmp 0x476be3
mov dword [ebp - 0x480], 0
jmp 0x476bfe
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 0
jge 0x476c17
mov eax, dword [ebp - 0x480]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x476bef
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x476c2b
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x476c41
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x484], 0
jmp 0x476c63
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 0xf
jge 0x476c99
mov eax, dword [ebp - 0x484]
and eax, 0x80000001
jns 0x476c7e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x476c8e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x476c97
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x476c54
mov dword [ebp - 4], 0xfffffffe
call fcn.00476ca7
jmp 0x476cc4
mov dword [ebp - 0x488], 1
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x490], 2
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x498], 0
jmp 0x476d07
mov edx, dword [ebp - 0x498]
add edx, 1
mov dword [ebp - 0x498], edx
cmp dword [ebp - 0x498], 3
jge 0x476d48
mov eax, dword [ebp - 0x488]
add eax, dword [ebp - 0x48c]
mov dword [ebp - 0x490], eax
mov ecx, dword [ebp - 0x48c]
mov dword [ebp - 0x488], ecx
mov edx, dword [ebp - 0x490]
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x490]
mov dword [ebp - 0x1c], eax
jmp 0x476cf8
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x49c], 0
jmp 0x476d6c
mov edx, dword [ebp - 0x49c]
add edx, 1
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 4
jge 0x476dad
cmp dword [ebp - 0x1c], 0
jge 0x476d83
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x476d99
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x476d5d
mov dword [ebp - 0x69c], 0
jmp 0x476dc8
mov eax, dword [ebp - 0x69c]
add eax, 1
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 7
jge 0x476de1
mov ecx, dword [ebp - 0x69c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x476db9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x476df5
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x476e0b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x6a0], 0
jmp 0x476e2d
mov edx, dword [ebp - 0x6a0]
add edx, 1
mov dword [ebp - 0x6a0], edx
cmp dword [ebp - 0x6a0], 0
jge 0x476e74
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x476e4a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x476e5a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x476e72
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x476e72
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x476e1e
mov dword [ebp - 4], 0xfffffffe
call fcn.00476e82
jmp 0x476e91
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x6a4], 0
jmp 0x476eb3
mov ecx, dword [ebp - 0x6a4]
add ecx, 1
mov dword [ebp - 0x6a4], ecx
cmp dword [ebp - 0x6a4], 4
jge 0x476eee
mov eax, dword [ebp - 0x6a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x476ee2
mov eax, dword [ebp - 0x6a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x476ee9
and eax, 0xbc614e
jmp 0x476eec
mov dword [ebp - 0x1c], eax
jmp 0x476ea4
mov dword [ebp - 4], 0xfffffffe
call fcn.00476efc
jmp 0x476f04
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x6a8], 0
jmp 0x476f26
mov edx, dword [ebp - 0x6a8]
add edx, 1
mov dword [ebp - 0x6a8], edx
cmp dword [ebp - 0x6a8], 6
jge 0x476f65
mov eax, dword [ebp - 0x6a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x476f55
mov eax, dword [ebp - 0x6a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x476f60
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x476f63
mov dword [ebp - 0x1c], eax
jmp 0x476f17
mov dword [ebp - 4], 0xfffffffe
call fcn.00476f73
jmp 0x476f7b
mov dword [ebp - 0x6ac], 1
mov dword [ebp - 0x6b0], 1
mov dword [ebp - 0x6b4], 2
mov dword [ebp - 0x6b8], 0
mov dword [ebp - 0x6bc], 0
jmp 0x476fbe
mov edx, dword [ebp - 0x6bc]
add edx, 1
mov dword [ebp - 0x6bc], edx
cmp dword [ebp - 0x6bc], 1
jge 0x476fff
mov eax, dword [ebp - 0x6ac]
add eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x6b4], eax
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x6ac], ecx
mov edx, dword [ebp - 0x6b4]
mov dword [ebp - 0x6b0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x1c], eax
jmp 0x476faf
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x6c0], 0
jmp 0x47702a
mov edx, dword [ebp - 0x6c0]
add edx, 1
mov dword [ebp - 0x6c0], edx
cmp dword [ebp - 0x6c0], 1
jge 0x477069
mov eax, dword [ebp - 0x6c0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x477059
mov eax, dword [ebp - 0x6c0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x477064
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x477067
mov dword [ebp - 0x1c], eax
jmp 0x47701b
mov dword [ebp - 4], 0xfffffffe
call fcn.00477077
jmp 0x47707f
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x6c4], 0
jmp 0x4770a1
mov edx, dword [ebp - 0x6c4]
add edx, 1
mov dword [ebp - 0x6c4], edx
cmp dword [ebp - 0x6c4], 5
jge 0x4770dc
mov eax, dword [ebp - 0x6c4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4770d0
mov eax, dword [ebp - 0x6c4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4770d7
and eax, 0xbc614e
jmp 0x4770da
mov dword [ebp - 0x1c], eax
jmp 0x477092
mov dword [ebp - 4], 0xfffffffe
call fcn.004770ea
jmp 0x4770f2
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x6c8], 0
jmp 0x477114
mov edx, dword [ebp - 0x6c8]
add edx, 1
mov dword [ebp - 0x6c8], edx
cmp dword [ebp - 0x6c8], 4
jge 0x47714a
mov eax, dword [ebp - 0x6c8]
and eax, 0x80000001
jns 0x47712f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47713f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x477148
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x477105
mov dword [ebp - 4], 0xfffffffe
call fcn.00477158
jmp 0x477175
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x6cc], 0
jmp 0x477197
mov edx, dword [ebp - 0x6cc]
add edx, 1
mov dword [ebp - 0x6cc], edx
cmp dword [ebp - 0x6cc], 5
jge 0x4771d2
mov eax, dword [ebp - 0x6cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4771c6
mov eax, dword [ebp - 0x6cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4771cd
and eax, 0xbc614e
jmp 0x4771d0
mov dword [ebp - 0x1c], eax
jmp 0x477188
mov dword [ebp - 4], 0xfffffffe
call fcn.004771e0
jmp 0x4771e8
mov dword [ebp - 0x6d0], 1
mov dword [ebp - 0x6d4], 1
mov dword [ebp - 0x6d8], 2
mov dword [ebp - 0x6dc], 0
mov dword [ebp - 0x6e0], 0
jmp 0x47722b
mov edx, dword [ebp - 0x6e0]
add edx, 1
mov dword [ebp - 0x6e0], edx
cmp dword [ebp - 0x6e0], 4
jge 0x47726c
mov eax, dword [ebp - 0x6d0]
add eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d8], eax
mov ecx, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d0], ecx
mov edx, dword [ebp - 0x6d8]
mov dword [ebp - 0x6d4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x1c], eax
jmp 0x47721c
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x6e4], 0
jmp 0x477297
mov edx, dword [ebp - 0x6e4]
add edx, 1
mov dword [ebp - 0x6e4], edx
cmp dword [ebp - 0x6e4], 8
jge 0x4772d6
mov eax, dword [ebp - 0x6e4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4772c6
mov eax, dword [ebp - 0x6e4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4772d1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4772d4
mov dword [ebp - 0x1c], eax
jmp 0x477288
mov dword [ebp - 4], 0xfffffffe
call fcn.004772e4
jmp 0x4772ec
mov dword [ebp - 0x6e8], 1
mov dword [ebp - 0x6ec], 1
mov dword [ebp - 0x6f0], 2
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 0x6f8], 0
jmp 0x47732f
mov edx, dword [ebp - 0x6f8]
add edx, 1
mov dword [ebp - 0x6f8], edx
cmp dword [ebp - 0x6f8], 1
jge 0x477370
mov eax, dword [ebp - 0x6e8]
add eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f0], eax
mov ecx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6e8], ecx
mov edx, dword [ebp - 0x6f0]
mov dword [ebp - 0x6ec], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x1c], eax
jmp 0x477320
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x6fc], 0
jmp 0x47739b
mov edx, dword [ebp - 0x6fc]
add edx, 1
mov dword [ebp - 0x6fc], edx
cmp dword [ebp - 0x6fc], 1
jge 0x4773d1
mov eax, dword [ebp - 0x6fc]
and eax, 0x80000001
jns 0x4773b6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4773c6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4773cf
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x47738c
mov dword [ebp - 4], 0xfffffffe
call fcn.004773df
jmp 0x4773fc
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x700], 0
jmp 0x47741e
mov edx, dword [ebp - 0x700]
add edx, 1
mov dword [ebp - 0x700], edx
cmp dword [ebp - 0x700], 0
jge 0x47745d
mov eax, dword [ebp - 0x700]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47744d
mov eax, dword [ebp - 0x700]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x477458
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47745b
mov dword [ebp - 0x1c], eax
jmp 0x47740f
mov dword [ebp - 4], 0xfffffffe
call fcn.0047746b
jmp 0x477473
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x704], 0
jmp 0x477495
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
cmp dword [ebp - 0x704], 1
jge 0x4774cb
mov eax, dword [ebp - 0x704]
and eax, 0x80000001
jns 0x4774b0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4774c0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4774c9
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x477486
mov dword [ebp - 4], 0xfffffffe
call fcn.004774d9
jmp 0x4774f6
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x708], 0
jmp 0x477518
mov edx, dword [ebp - 0x708]
add edx, 1
mov dword [ebp - 0x708], edx
cmp dword [ebp - 0x708], 0
jge 0x477557
mov eax, dword [ebp - 0x708]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x477547
mov eax, dword [ebp - 0x708]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x477552
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x477555
mov dword [ebp - 0x1c], eax
jmp 0x477509
mov dword [ebp - 4], 0xfffffffe
call fcn.00477565
jmp 0x47756d
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x70c], 0
jmp 0x47758f
mov edx, dword [ebp - 0x70c]
add edx, 1
mov dword [ebp - 0x70c], edx
cmp dword [ebp - 0x70c], 4
jge 0x4775d6
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4775ac
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4775bc
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4775d4
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4775d4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x477580
mov dword [ebp - 4], 0xfffffffe
call fcn.004775e4
jmp 0x4775f3
mov dword [ebp - 0x710], 0
jmp 0x47760e
mov ecx, dword [ebp - 0x710]
add ecx, 1
mov dword [ebp - 0x710], ecx
cmp dword [ebp - 0x710], 0
jge 0x477627
mov edx, dword [ebp - 0x710]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4775ff
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47763b
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x477651
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x714], 0
jmp 0x477673
mov edx, dword [ebp - 0x714]
add edx, 1
mov dword [ebp - 0x714], edx
cmp dword [ebp - 0x714], 0
jge 0x4776a9
mov eax, dword [ebp - 0x714]
and eax, 0x80000001
jns 0x47768e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47769e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4776a7
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x477664
mov dword [ebp - 4], 0xfffffffe
call fcn.004776b7
jmp 0x4776d4
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x718], 0
jmp 0x4776f6
mov edx, dword [ebp - 0x718]
add edx, 1
mov dword [ebp - 0x718], edx
cmp dword [ebp - 0x718], 2
jge 0x47773d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x477713
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x477723
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47773b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47773b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4776e7
mov dword [ebp - 4], 0xfffffffe
call fcn.0047774b
jmp 0x47775a
mov dword [ebp - 0x71c], 0
jmp 0x477775
mov ecx, dword [ebp - 0x71c]
add ecx, 1
mov dword [ebp - 0x71c], ecx
cmp dword [ebp - 0x71c], 3
jge 0x47778e
mov edx, dword [ebp - 0x71c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x477766
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4777a2
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4777b8
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x720], 0
jmp 0x4777da
mov edx, dword [ebp - 0x720]
add edx, 1
mov dword [ebp - 0x720], edx
cmp dword [ebp - 0x720], 4
jge 0x477815
mov eax, dword [ebp - 0x720]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x477809
mov eax, dword [ebp - 0x720]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x477810
and eax, 0xbc614e
jmp 0x477813
mov dword [ebp - 0x1c], eax
jmp 0x4777cb
mov dword [ebp - 4], 0xfffffffe
call fcn.00477823
jmp 0x47782b
mov dword [ebp - 0x724], 0
jmp 0x477846
cmp dword [ebp - 0x724], 1
jge 0x47785f
mov eax, dword [ebp - 0x724]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x477837
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x477873