Function at 0x4793b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b7940
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x141c
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x479406
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x15
jge 0x479444
cmp dword [ebp - 0x1c], 0
jge 0x47941a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x479430
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4793fd
mov dword [ebp - 0x224], 0
jmp 0x47945f
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x479478
mov ecx, dword [ebp - 0x224]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x479450
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47948c
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4794a2
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x228], 0
jmp 0x4794bd
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0x15
jge 0x4794d6
mov eax, dword [ebp - 0x228]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4794ae
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4794ea
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x479500
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x22c], 0
jmp 0x47951b
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 9
jge 0x47955c
cmp dword [ebp - 0x1c], 0
jge 0x479532
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x479548
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47950c
mov dword [ebp - 4], 0
mov dword [ebp - 0x42c], 0
jmp 0x47957e
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x15
jge 0x4795c5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47959b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4795ab
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4795c3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4795c3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47956f
mov dword [ebp - 4], 0xfffffffe
call fcn.004795d3
jmp 0x4795e2
mov dword [ebp - 4], 1
mov dword [ebp - 0x430], 0
jmp 0x479604
mov ecx, dword [ebp - 0x430]
add ecx, 1
mov dword [ebp - 0x430], ecx
cmp dword [ebp - 0x430], 0
jge 0x47963b
mov edx, dword [ebp - 0x430]
and edx, 0x80000001
jns 0x479620
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x479630
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x479639
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4795f5
mov dword [ebp - 4], 0xfffffffe
call fcn.00479649
jmp 0x479667
mov dword [ebp - 0x434], 0
jmp 0x479682
mov ecx, dword [ebp - 0x434]
add ecx, 1
mov dword [ebp - 0x434], ecx
cmp dword [ebp - 0x434], 0xe
jge 0x47969b
mov edx, dword [ebp - 0x434]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x479673
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4796af
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4796c5
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x438], 0
jmp 0x4796e0
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 6
jge 0x4796f9
mov eax, dword [ebp - 0x438]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4796d1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47970d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x479723
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x43c], 0
jmp 0x479745
mov edx, dword [ebp - 0x43c]
add edx, 1
mov dword [ebp - 0x43c], edx
cmp dword [ebp - 0x43c], 4
jge 0x47978c
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x479762
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x479772
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47978a
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47978a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x479736
mov dword [ebp - 4], 0xfffffffe
call fcn.0047979a
jmp 0x4797a9
mov dword [ebp - 0x440], 1
mov dword [ebp - 0x444], 1
mov dword [ebp - 0x448], 2
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x450], 0
jmp 0x4797ec
mov ecx, dword [ebp - 0x450]
add ecx, 1
mov dword [ebp - 0x450], ecx
cmp dword [ebp - 0x450], 0xa
jge 0x47982d
mov edx, dword [ebp - 0x440]
add edx, dword [ebp - 0x444]
mov dword [ebp - 0x448], edx
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x448]
mov dword [ebp - 0x444], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x448]
mov dword [ebp - 0x1c], edx
jmp 0x4797dd
mov eax, dword [ebp - 0x1c]
add eax, 0xa
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x454], 0
jmp 0x479858
mov ecx, dword [ebp - 0x454]
add ecx, 1
mov dword [ebp - 0x454], ecx
cmp dword [ebp - 0x454], 0x10
jge 0x47988f
mov edx, dword [ebp - 0x454]
and edx, 0x80000001
jns 0x479874
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x479884
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x47988d
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x479849
mov dword [ebp - 4], 0xfffffffe
call fcn.0047989d
jmp 0x4798bb
mov dword [ebp - 4], 4
mov dword [ebp - 0x458], 0
jmp 0x4798dd
mov ecx, dword [ebp - 0x458]
add ecx, 1
mov dword [ebp - 0x458], ecx
cmp dword [ebp - 0x458], 0
jge 0x479918
mov eax, dword [ebp - 0x458]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47990c
mov eax, dword [ebp - 0x458]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x479913
and eax, 0xbc614e
jmp 0x479916
mov dword [ebp - 0x1c], eax
jmp 0x4798ce
mov dword [ebp - 4], 0xfffffffe
call fcn.00479926
jmp 0x47992e
mov dword [ebp - 0x45c], 0
jmp 0x479949
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 5
jge 0x479962
mov eax, dword [ebp - 0x45c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47993a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x479976
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47998c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x460], 0
jmp 0x4799a7
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 0xd
jge 0x4799e8
cmp dword [ebp - 0x1c], 0
jge 0x4799be
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4799d4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x658]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x479998
mov dword [ebp - 4], 5
mov dword [ebp - 0x65c], 0
jmp 0x479a0a
mov eax, dword [ebp - 0x65c]
add eax, 1
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 9
jge 0x479a49
mov eax, dword [ebp - 0x65c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x479a39
mov eax, dword [ebp - 0x65c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x479a44
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x479a47
mov dword [ebp - 0x1c], eax
jmp 0x4799fb
mov dword [ebp - 4], 0xfffffffe
call fcn.00479a57
jmp 0x479a5f
mov dword [ebp - 0x660], 0
jmp 0x479a7a
mov edx, dword [ebp - 0x660]
add edx, 1
mov dword [ebp - 0x660], edx
cmp dword [ebp - 0x660], 0xf
jge 0x479a93
mov eax, dword [ebp - 0x660]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x479a6b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x479aa7
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x479abd
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x664], 0
jmp 0x479adf
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x664], edx
cmp dword [ebp - 0x664], 7
jge 0x479b1a
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x479b0e
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x479b15
and eax, 0xbc614e
jmp 0x479b18
mov dword [ebp - 0x1c], eax
jmp 0x479ad0
mov dword [ebp - 4], 0xfffffffe
call fcn.00479b28
jmp 0x479b30
mov dword [ebp - 0x668], 1
mov dword [ebp - 0x66c], 1
mov dword [ebp - 0x670], 2
mov dword [ebp - 0x674], 0
mov dword [ebp - 0x678], 0
jmp 0x479b73
mov edx, dword [ebp - 0x678]
add edx, 1
mov dword [ebp - 0x678], edx
cmp dword [ebp - 0x678], 4
jge 0x479bb4
mov eax, dword [ebp - 0x668]
add eax, dword [ebp - 0x66c]
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x66c]
mov dword [ebp - 0x668], ecx
mov edx, dword [ebp - 0x670]
mov dword [ebp - 0x66c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x670]
mov dword [ebp - 0x1c], eax
jmp 0x479b64
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x680], 1
mov dword [ebp - 0x684], 2
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x68c], 0
jmp 0x479c00
mov edx, dword [ebp - 0x68c]
add edx, 1
mov dword [ebp - 0x68c], edx
cmp dword [ebp - 0x68c], 6
jge 0x479c41
mov eax, dword [ebp - 0x67c]
add eax, dword [ebp - 0x680]
mov dword [ebp - 0x684], eax
mov ecx, dword [ebp - 0x680]
mov dword [ebp - 0x67c], ecx
mov edx, dword [ebp - 0x684]
mov dword [ebp - 0x680], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x684]
mov dword [ebp - 0x1c], eax
jmp 0x479bf1
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x690], 0
jmp 0x479c6c
mov edx, dword [ebp - 0x690]
add edx, 1
mov dword [ebp - 0x690], edx
cmp dword [ebp - 0x690], 0
jge 0x479cb3
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x479c89
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x479c99
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x479cb1
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x479cb1
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x479c5d
mov dword [ebp - 4], 0xfffffffe
call fcn.00479cc1
jmp 0x479cd0
mov dword [ebp - 0x694], 1
mov dword [ebp - 0x698], 1
mov dword [ebp - 0x69c], 2
mov dword [ebp - 0x6a0], 0
mov dword [ebp - 0x6a4], 0
jmp 0x479d13
mov ecx, dword [ebp - 0x6a4]
add ecx, 1
mov dword [ebp - 0x6a4], ecx
cmp dword [ebp - 0x6a4], 7
jge 0x479d54
mov edx, dword [ebp - 0x694]
add edx, dword [ebp - 0x698]
mov dword [ebp - 0x69c], edx
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x694], eax
mov ecx, dword [ebp - 0x69c]
mov dword [ebp - 0x698], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x69c]
mov dword [ebp - 0x1c], edx
jmp 0x479d04
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6a8], 0
jmp 0x479d78
mov ecx, dword [ebp - 0x6a8]
add ecx, 1
mov dword [ebp - 0x6a8], ecx
cmp dword [ebp - 0x6a8], 8
jge 0x479d91
mov edx, dword [ebp - 0x6a8]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x479d69
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x479da5
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x479dbb
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x6ac], 0
jmp 0x479dd6
mov edx, dword [ebp - 0x6ac]
add edx, 1
mov dword [ebp - 0x6ac], edx
cmp dword [ebp - 0x6ac], 6
jge 0x479e17
cmp dword [ebp - 0x1c], 0
jge 0x479ded
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x479e03
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x479dc7
mov dword [ebp - 4], 8
mov dword [ebp - 0x8ac], 0
jmp 0x479e39
mov eax, dword [ebp - 0x8ac]
add eax, 1
mov dword [ebp - 0x8ac], eax
cmp dword [ebp - 0x8ac], 0
jge 0x479e70
mov ecx, dword [ebp - 0x8ac]
and ecx, 0x80000001
jns 0x479e55
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x479e65
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x479e6e
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x479e2a
mov dword [ebp - 4], 0xfffffffe
call fcn.00479e7e
jmp 0x479e9c
mov dword [ebp - 0x8b0], 0
jmp 0x479eb7
mov eax, dword [ebp - 0x8b0]
add eax, 1
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x8b0], 0
jge 0x479ef8
cmp dword [ebp - 0x1c], 0
jge 0x479ece
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x479ee4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xaa8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x479ea8
mov dword [ebp - 0xaac], 0
jmp 0x479f13
mov eax, dword [ebp - 0xaac]
add eax, 1
mov dword [ebp - 0xaac], eax
cmp dword [ebp - 0xaac], 3
jge 0x479f2c
mov ecx, dword [ebp - 0xaac]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x479f04
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x479f40
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x479f56
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 9
mov dword [ebp - 0xab0], 0
jmp 0x479f78
mov edx, dword [ebp - 0xab0]
add edx, 1
mov dword [ebp - 0xab0], edx
cmp dword [ebp - 0xab0], 7
jge 0x479fb3
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x479fa7
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x479fae
and eax, 0xbc614e
jmp 0x479fb1
mov dword [ebp - 0x1c], eax
jmp 0x479f69
mov dword [ebp - 4], 0xfffffffe
call fcn.00479fc1
jmp 0x479fc9
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xab4], 0
jmp 0x479feb
mov edx, dword [ebp - 0xab4]
add edx, 1
mov dword [ebp - 0xab4], edx
cmp dword [ebp - 0xab4], 0
jge 0x47a026
mov eax, dword [ebp - 0xab4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47a01a
mov eax, dword [ebp - 0xab4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47a021
and eax, 0xbc614e
jmp 0x47a024
mov dword [ebp - 0x1c], eax
jmp 0x479fdc
mov dword [ebp - 4], 0xfffffffe
call fcn.0047a034
jmp 0x47a03c
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xab8], 0
jmp 0x47a05e
mov edx, dword [ebp - 0xab8]
add edx, 1
mov dword [ebp - 0xab8], edx
cmp dword [ebp - 0xab8], 5
jge 0x47a0a5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47a07b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47a08b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47a0a3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47a0a3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47a04f
mov dword [ebp - 4], 0xfffffffe
call fcn.0047a0b3
jmp 0x47a0c2
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xabc], 0
jmp 0x47a0e4
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
cmp dword [ebp - 0xabc], 1
jge 0x47a12b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47a101
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47a111
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47a129
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47a129
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47a0d5
mov dword [ebp - 4], 0xfffffffe
call fcn.0047a139
jmp 0x47a148
mov dword [ebp - 0xac0], 1
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0xac8], 2
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xad0], 0
jmp 0x47a18b
mov ecx, dword [ebp - 0xad0]
add ecx, 1
mov dword [ebp - 0xad0], ecx
cmp dword [ebp - 0xad0], 7
jge 0x47a1cc
mov edx, dword [ebp - 0xac0]
add edx, dword [ebp - 0xac4]
mov dword [ebp - 0xac8], edx
mov eax, dword [ebp - 0xac4]
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xac8]
mov dword [ebp - 0xac4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xac8]
mov dword [ebp - 0x1c], edx
jmp 0x47a17c
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xad4], 0
jmp 0x47a1f7
mov ecx, dword [ebp - 0xad4]
add ecx, 1
mov dword [ebp - 0xad4], ecx
cmp dword [ebp - 0xad4], 7
jge 0x47a236
mov eax, dword [ebp - 0xad4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47a226
mov eax, dword [ebp - 0xad4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47a231
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47a234
mov dword [ebp - 0x1c], eax
jmp 0x47a1e8
mov dword [ebp - 4], 0xfffffffe
call fcn.0047a244
jmp 0x47a24c
mov dword [ebp - 0xad8], 1
mov dword [ebp - 0xadc], 1
mov dword [ebp - 0xae0], 2
mov dword [ebp - 0xae4], 0
mov dword [ebp - 0xae8], 0
jmp 0x47a28f
mov edx, dword [ebp - 0xae8]
add edx, 1
mov dword [ebp - 0xae8], edx
cmp dword [ebp - 0xae8], 1
jge 0x47a2d0
mov eax, dword [ebp - 0xad8]
add eax, dword [ebp - 0xadc]
mov dword [ebp - 0xae0], eax
mov ecx, dword [ebp - 0xadc]
mov dword [ebp - 0xad8], ecx
mov edx, dword [ebp - 0xae0]
mov dword [ebp - 0xadc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xae0]
mov dword [ebp - 0x1c], eax
jmp 0x47a280
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xaec], 0
jmp 0x47a2f4
mov edx, dword [ebp - 0xaec]
add edx, 1
mov dword [ebp - 0xaec], edx
cmp dword [ebp - 0xaec], 7
jge 0x47a335
cmp dword [ebp - 0x1c], 0
jge 0x47a30b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47a321
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xce8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47a2e5
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xcec], 0
jmp 0x47a357
mov eax, dword [ebp - 0xcec]
add eax, 1
mov dword [ebp - 0xcec], eax
cmp dword [ebp - 0xcec], 1
jge 0x47a39e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47a374
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47a384
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x47a39c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47a39c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47a348
mov dword [ebp - 4], 0xfffffffe
call fcn.0047a3ac
jmp 0x47a3bb
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xcf0], 0
jmp 0x47a3dd
mov ecx, dword [ebp - 0xcf0]
add ecx, 1
mov dword [ebp - 0xcf0], ecx
cmp dword [ebp - 0xcf0], 4
jge 0x47a414
mov edx, dword [ebp - 0xcf0]
and edx, 0x80000001
jns 0x47a3f9
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x47a409
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x47a412
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47a3ce
mov dword [ebp - 4], 0xfffffffe
call fcn.0047a422
jmp 0x47a440
mov dword [ebp - 0xcf4], 1
mov dword [ebp - 0xcf8], 1
mov dword [ebp - 0xcfc], 2
mov dword [ebp - 0xd00], 0
mov dword [ebp - 0xd04], 0
jmp 0x47a483
mov ecx, dword [ebp - 0xd04]
add ecx, 1
mov dword [ebp - 0xd04], ecx
cmp dword [ebp - 0xd04], 8
jge 0x47a4c4
mov edx, dword [ebp - 0xcf4]
add edx, dword [ebp - 0xcf8]
mov dword [ebp - 0xcfc], edx
mov eax, dword [ebp - 0xcf8]
mov dword [ebp - 0xcf4], eax
mov ecx, dword [ebp - 0xcfc]
mov dword [ebp - 0xcf8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xcfc]
mov dword [ebp - 0x1c], edx
jmp 0x47a474
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd08], 1
mov dword [ebp - 0xd0c], 1
mov dword [ebp - 0xd10], 2
mov dword [ebp - 0xd14], 0
mov dword [ebp - 0xd18], 0
jmp 0x47a510
mov ecx, dword [ebp - 0xd18]
add ecx, 1
mov dword [ebp - 0xd18], ecx
cmp dword [ebp - 0xd18], 2
jge 0x47a551
mov edx, dword [ebp - 0xd08]
add edx, dword [ebp - 0xd0c]
mov dword [ebp - 0xd10], edx
mov eax, dword [ebp - 0xd0c]
mov dword [ebp - 0xd08], eax
mov ecx, dword [ebp - 0xd10]
mov dword [ebp - 0xd0c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd10]
mov dword [ebp - 0x1c], edx
jmp 0x47a501
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xd1c], 0
jmp 0x47a57c
mov ecx, dword [ebp - 0xd1c]
add ecx, 1
mov dword [ebp - 0xd1c], ecx
cmp dword [ebp - 0xd1c], 0
jge 0x47a5b3
mov edx, dword [ebp - 0xd1c]
and edx, 0x80000001
jns 0x47a598
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x47a5a8
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x47a5b1
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47a56d
mov dword [ebp - 4], 0xfffffffe
call fcn.0047a5c1
jmp 0x47a5df
mov dword [ebp - 0xd20], 1
mov dword [ebp - 0xd24], 1
mov dword [ebp - 0xd28], 2
mov dword [ebp - 0xd2c], 0
mov dword [ebp - 0xd30], 0
jmp 0x47a622
mov ecx, dword [ebp - 0xd30]
add ecx, 1
mov dword [ebp - 0xd30], ecx
cmp dword [ebp - 0xd30], 7
jge 0x47a663
mov edx, dword [ebp - 0xd20]
add edx, dword [ebp - 0xd24]
mov dword [ebp - 0xd28], edx
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0xd20], eax
mov ecx, dword [ebp - 0xd28]
mov dword [ebp - 0xd24], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd28]
mov dword [ebp - 0x1c], edx
jmp 0x47a613
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd34], 1
mov dword [ebp - 0xd38], 1
mov dword [ebp - 0xd3c], 2
mov dword [ebp - 0xd40], 0
mov dword [ebp - 0xd44], 0
jmp 0x47a6af
mov ecx, dword [ebp - 0xd44]
add ecx, 1
mov dword [ebp - 0xd44], ecx
cmp dword [ebp - 0xd44], 4
jge 0x47a6f0
mov edx, dword [ebp - 0xd34]
add edx, dword [ebp - 0xd38]
mov dword [ebp - 0xd3c], edx
mov eax, dword [ebp - 0xd38]
mov dword [ebp - 0xd34], eax
mov ecx, dword [ebp - 0xd3c]
mov dword [ebp - 0xd38], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd3c]
mov dword [ebp - 0x1c], edx
jmp 0x47a6a0
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd48], 1
mov dword [ebp - 0xd4c], 1
mov dword [ebp - 0xd50], 2
mov dword [ebp - 0xd54], 0
mov dword [ebp - 0xd58], 0
jmp 0x47a73c
mov ecx, dword [ebp - 0xd58]
add ecx, 1
mov dword [ebp - 0xd58], ecx
cmp dword [ebp - 0xd58], 6
jge 0x47a77d
mov edx, dword [ebp - 0xd48]
add edx, dword [ebp - 0xd4c]
mov dword [ebp - 0xd50], edx
mov eax, dword [ebp - 0xd4c]
mov dword [ebp - 0xd48], eax
mov ecx, dword [ebp - 0xd50]
mov dword [ebp - 0xd4c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd50]
mov dword [ebp - 0x1c], edx
jmp 0x47a72d
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd5c], 0
jmp 0x47a7a1
mov ecx, dword [ebp - 0xd5c]
add ecx, 1
mov dword [ebp - 0xd5c], ecx
cmp dword [ebp - 0xd5c], 5
jge 0x47a7ba
mov edx, dword [ebp - 0xd5c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47a792
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47a7ce
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47a7e4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xd60], 0
jmp 0x47a806
mov edx, dword [ebp - 0xd60]
add edx, 1
mov dword [ebp - 0xd60], edx
cmp dword [ebp - 0xd60], 8
jge 0x47a845
mov eax, dword [ebp - 0xd60]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47a835
mov eax, dword [ebp - 0xd60]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47a840
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47a843
mov dword [ebp - 0x1c], eax
jmp 0x47a7f7
mov dword [ebp - 4], 0xfffffffe
call fcn.0047a853
jmp 0x47a85b
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xd64], 0
jmp 0x47a87d
cmp dword [ebp - 0xd64], 3
jge 0x47a8c4
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47a89a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47a8aa
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47a8c2
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47a8c2
mov dword [ebp - 4], 0xfffffffe
call fcn.0047a8d2
jmp 0x47a8e1
mov dword [ebp - 0xd68], 0
jmp 0x47a8fc
cmp dword [ebp - 0xd68], 5
jge 0x47a93d