Function at 0x47bc10
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b7b88
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1518
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x48], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x47bc6d
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x37
jge 0x47bc9e
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x47bc83
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x47bc93
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x47bc9c
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x47bc64
mov dword [ebp - 4], 0xfffffffe
call fcn.0047bcac
jmp 0x47bcca
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x47bce3
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x3f
jge 0x47bd15
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47bd09
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47bd10
and eax, 0xbc614e
jmp 0x47bd13
mov dword [ebp - 0x1c], eax
jmp 0x47bcda
mov dword [ebp - 4], 0xfffffffe
call fcn.0047bd23
jmp 0x47bd2b
mov dword [ebp - 4], 2
mov dword [ebp - 0x28], 0
jmp 0x47bd44
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x1e
jge 0x47bd74
mov eax, dword [ebp - 0x28]
and eax, 0x80000001
jns 0x47bd59
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47bd69
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47bd72
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x47bd3b
mov dword [ebp - 4], 0xfffffffe
call fcn.0047bd82
jmp 0x47bd9f
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
jmp 0x47bdcd
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0xe
jge 0x47bdf3
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
jmp 0x47bdc4
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x40], 0
jmp 0x47be15
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x18
jge 0x47be4b
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47be3b
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47be46
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47be49
mov dword [ebp - 0x1c], eax
jmp 0x47be0c
mov dword [ebp - 4], 0xfffffffe
call fcn.0047be59
jmp 0x47be61
mov dword [ebp - 0x44], 0
jmp 0x47be73
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0xd
jge 0x47beb1
cmp dword [ebp - 0x1c], 0
jge 0x47be87
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47be9d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47be6a
mov dword [ebp - 0x244], 0
jmp 0x47becc
mov eax, dword [ebp - 0x244]
add eax, 1
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 7
jge 0x47bee5
mov ecx, dword [ebp - 0x244]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x47bebd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47bef9
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47bf0f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 4
mov dword [ebp - 0x248], 0
jmp 0x47bf31
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 0xe
jge 0x47bf78
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47bf4e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47bf5e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47bf76
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47bf76
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47bf22
mov dword [ebp - 4], 0xfffffffe
call fcn.0047bf86
jmp 0x47bf95
mov dword [ebp - 4], 5
mov dword [ebp - 0x24c], 0
jmp 0x47bfb7
mov ecx, dword [ebp - 0x24c]
add ecx, 1
mov dword [ebp - 0x24c], ecx
cmp dword [ebp - 0x24c], 1
jge 0x47bfee
mov edx, dword [ebp - 0x24c]
and edx, 0x80000001
jns 0x47bfd3
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x47bfe3
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x47bfec
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47bfa8
mov dword [ebp - 4], 0xfffffffe
call fcn.0047bffc
jmp 0x47c01a
mov dword [ebp - 0x250], 1
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x258], 2
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x260], 0
jmp 0x47c05d
mov ecx, dword [ebp - 0x260]
add ecx, 1
mov dword [ebp - 0x260], ecx
cmp dword [ebp - 0x260], 2
jge 0x47c09e
mov edx, dword [ebp - 0x250]
add edx, dword [ebp - 0x254]
mov dword [ebp - 0x258], edx
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x250], eax
mov ecx, dword [ebp - 0x258]
mov dword [ebp - 0x254], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x258]
mov dword [ebp - 0x1c], edx
jmp 0x47c04e
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x264], 0
jmp 0x47c0c9
mov ecx, dword [ebp - 0x264]
add ecx, 1
mov dword [ebp - 0x264], ecx
cmp dword [ebp - 0x264], 7
jge 0x47c108
mov eax, dword [ebp - 0x264]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47c0f8
mov eax, dword [ebp - 0x264]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47c103
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47c106
mov dword [ebp - 0x1c], eax
jmp 0x47c0ba
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c116
jmp 0x47c11e
mov dword [ebp - 0x268], 0
jmp 0x47c139
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 6
jge 0x47c17a
cmp dword [ebp - 0x1c], 0
jge 0x47c150
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47c166
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47c12a
mov dword [ebp - 4], 7
mov dword [ebp - 0x464], 0
jmp 0x47c19c
mov eax, dword [ebp - 0x464]
add eax, 1
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 7
jge 0x47c1d7
mov eax, dword [ebp - 0x464]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47c1cb
mov eax, dword [ebp - 0x464]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47c1d2
and eax, 0xbc614e
jmp 0x47c1d5
mov dword [ebp - 0x1c], eax
jmp 0x47c18d
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c1e5
jmp 0x47c1ed
mov dword [ebp - 4], 8
mov dword [ebp - 0x468], 0
jmp 0x47c20f
mov edx, dword [ebp - 0x468]
add edx, 1
mov dword [ebp - 0x468], edx
cmp dword [ebp - 0x468], 5
jge 0x47c256
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47c22c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47c23c
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47c254
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c254
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47c200
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c264
jmp 0x47c273
mov dword [ebp - 0x46c], 0
jmp 0x47c28e
mov ecx, dword [ebp - 0x46c]
add ecx, 1
mov dword [ebp - 0x46c], ecx
cmp dword [ebp - 0x46c], 6
jge 0x47c2a7
mov edx, dword [ebp - 0x46c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47c27f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47c2bb
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c2d1
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 9
mov dword [ebp - 0x470], 0
jmp 0x47c2f3
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 6
jge 0x47c329
mov eax, dword [ebp - 0x470]
and eax, 0x80000001
jns 0x47c30e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47c31e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47c327
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x47c2e4
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c337
jmp 0x47c354
mov dword [ebp - 0x474], 0
jmp 0x47c36f
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 2
jge 0x47c388
mov eax, dword [ebp - 0x474]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47c360
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47c39c
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c3b2
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x478], 0
jmp 0x47c3d4
mov edx, dword [ebp - 0x478]
add edx, 1
mov dword [ebp - 0x478], edx
cmp dword [ebp - 0x478], 6
jge 0x47c41b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47c3f1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47c401
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47c419
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c419
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47c3c5
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c429
jmp 0x47c438
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x47c], 0
jmp 0x47c45a
mov ecx, dword [ebp - 0x47c]
add ecx, 1
mov dword [ebp - 0x47c], ecx
cmp dword [ebp - 0x47c], 8
jge 0x47c499
mov eax, dword [ebp - 0x47c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47c489
mov eax, dword [ebp - 0x47c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47c494
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47c497
mov dword [ebp - 0x1c], eax
jmp 0x47c44b
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c4a7
jmp 0x47c4af
mov dword [ebp - 0x480], 0
jmp 0x47c4ca
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 6
jge 0x47c4e3
mov eax, dword [ebp - 0x480]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47c4bb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47c4f7
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c50d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x484], 0
jmp 0x47c52f
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 4
jge 0x47c576
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47c54c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47c55c
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47c574
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c574
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47c520
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c584
jmp 0x47c593
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x488], 0
jmp 0x47c5b5
mov ecx, dword [ebp - 0x488]
add ecx, 1
mov dword [ebp - 0x488], ecx
cmp dword [ebp - 0x488], 6
jge 0x47c5fc
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47c5d2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47c5e2
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47c5fa
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c5fa
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47c5a6
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c60a
jmp 0x47c619
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x48c], 0
jmp 0x47c63b
mov ecx, dword [ebp - 0x48c]
add ecx, 1
mov dword [ebp - 0x48c], ecx
cmp dword [ebp - 0x48c], 1
jge 0x47c67a
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47c66a
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47c675
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47c678
mov dword [ebp - 0x1c], eax
jmp 0x47c62c
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c688
jmp 0x47c690
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x490], 0
jmp 0x47c6b2
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 1
jge 0x47c6f1
mov eax, dword [ebp - 0x490]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47c6e1
mov eax, dword [ebp - 0x490]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47c6ec
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47c6ef
mov dword [ebp - 0x1c], eax
jmp 0x47c6a3
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c6ff
jmp 0x47c707
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x494], 0
jmp 0x47c729
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 2
jge 0x47c768
mov eax, dword [ebp - 0x494]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47c758
mov eax, dword [ebp - 0x494]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47c763
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47c766
mov dword [ebp - 0x1c], eax
jmp 0x47c71a
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c776
jmp 0x47c77e
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x498], 0
jmp 0x47c7a0
mov edx, dword [ebp - 0x498]
add edx, 1
mov dword [ebp - 0x498], edx
cmp dword [ebp - 0x498], 1
jge 0x47c7e7
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47c7bd
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47c7cd
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47c7e5
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c7e5
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47c791
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c7f5
jmp 0x47c804
mov dword [ebp - 0x49c], 0
jmp 0x47c81f
mov ecx, dword [ebp - 0x49c]
add ecx, 1
mov dword [ebp - 0x49c], ecx
cmp dword [ebp - 0x49c], 0
jge 0x47c860
cmp dword [ebp - 0x1c], 0
jge 0x47c836
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47c84c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47c810
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x69c], 0
jmp 0x47c882
mov eax, dword [ebp - 0x69c]
add eax, 1
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 0
jge 0x47c8c9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47c89f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47c8af
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x47c8c7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c8c7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47c873
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c8d7
jmp 0x47c8e6
mov dword [ebp - 0x6a0], 1
mov dword [ebp - 0x6a4], 1
mov dword [ebp - 0x6a8], 2
mov dword [ebp - 0x6ac], 0
mov dword [ebp - 0x6b0], 0
jmp 0x47c929
mov ecx, dword [ebp - 0x6b0]
add ecx, 1
mov dword [ebp - 0x6b0], ecx
cmp dword [ebp - 0x6b0], 1
jge 0x47c96a
mov edx, dword [ebp - 0x6a0]
add edx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a8], edx
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a0], eax
mov ecx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6a4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6a8]
mov dword [ebp - 0x1c], edx
jmp 0x47c91a
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x6b4], 0
jmp 0x47c995
mov ecx, dword [ebp - 0x6b4]
add ecx, 1
mov dword [ebp - 0x6b4], ecx
cmp dword [ebp - 0x6b4], 3
jge 0x47c9d4
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47c9c4
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47c9cf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47c9d2
mov dword [ebp - 0x1c], eax
jmp 0x47c986
mov dword [ebp - 4], 0xfffffffe
call fcn.0047c9e2
jmp 0x47c9ea
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x6b8], 0
jmp 0x47ca0c
mov edx, dword [ebp - 0x6b8]
add edx, 1
mov dword [ebp - 0x6b8], edx
cmp dword [ebp - 0x6b8], 3
jge 0x47ca53
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47ca29
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47ca39
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47ca51
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47ca51
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47c9fd
mov dword [ebp - 4], 0xfffffffe
call fcn.0047ca61
jmp 0x47ca70
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x6bc], 0
jmp 0x47ca92
mov ecx, dword [ebp - 0x6bc]
add ecx, 1
mov dword [ebp - 0x6bc], ecx
cmp dword [ebp - 0x6bc], 3
jge 0x47cad9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47caaf
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47cabf
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47cad7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cad7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47ca83
mov dword [ebp - 4], 0xfffffffe
call fcn.0047cae7
jmp 0x47caf6
mov dword [ebp - 0x6c0], 0
jmp 0x47cb11
mov ecx, dword [ebp - 0x6c0]
add ecx, 1
mov dword [ebp - 0x6c0], ecx
cmp dword [ebp - 0x6c0], 4
jge 0x47cb2a
mov edx, dword [ebp - 0x6c0]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47cb02
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47cb3e
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cb54
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x6c4], 0
jmp 0x47cb6f
mov edx, dword [ebp - 0x6c4]
add edx, 1
mov dword [ebp - 0x6c4], edx
cmp dword [ebp - 0x6c4], 1
jge 0x47cbb0
cmp dword [ebp - 0x1c], 0
jge 0x47cb86
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47cb9c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47cb60
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x8c4], 0
jmp 0x47cbd2
mov eax, dword [ebp - 0x8c4]
add eax, 1
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 1
jge 0x47cc0d
mov eax, dword [ebp - 0x8c4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47cc01
mov eax, dword [ebp - 0x8c4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47cc08
and eax, 0xbc614e
jmp 0x47cc0b
mov dword [ebp - 0x1c], eax
jmp 0x47cbc3
mov dword [ebp - 4], 0xfffffffe
call fcn.0047cc1b
jmp 0x47cc23
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x8c8], 0
jmp 0x47cc45
mov edx, dword [ebp - 0x8c8]
add edx, 1
mov dword [ebp - 0x8c8], edx
cmp dword [ebp - 0x8c8], 4
jge 0x47cc84
mov eax, dword [ebp - 0x8c8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47cc74
mov eax, dword [ebp - 0x8c8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47cc7f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47cc82
mov dword [ebp - 0x1c], eax
jmp 0x47cc36
mov dword [ebp - 4], 0xfffffffe
call fcn.0047cc92
jmp 0x47cc9a
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x8cc], 0
jmp 0x47ccbc
mov edx, dword [ebp - 0x8cc]
add edx, 1
mov dword [ebp - 0x8cc], edx
cmp dword [ebp - 0x8cc], 2
jge 0x47cd03
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47ccd9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47cce9
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47cd01
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cd01
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47ccad
mov dword [ebp - 4], 0xfffffffe
call fcn.0047cd11
jmp 0x47cd20
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x8d0], 0
jmp 0x47cd42
mov ecx, dword [ebp - 0x8d0]
add ecx, 1
mov dword [ebp - 0x8d0], ecx
cmp dword [ebp - 0x8d0], 1
jge 0x47cd89
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x47cd5f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47cd6f
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47cd87
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cd87
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47cd33
mov dword [ebp - 4], 0xfffffffe
call fcn.0047cd97
jmp 0x47cda6
mov dword [ebp - 0x8d4], 0
jmp 0x47cdc1
mov ecx, dword [ebp - 0x8d4]
add ecx, 1
mov dword [ebp - 0x8d4], ecx
cmp dword [ebp - 0x8d4], 3
jge 0x47cdda
mov edx, dword [ebp - 0x8d4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x47cdb2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47cdee
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47ce04
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x8d8], 0
jmp 0x47ce26
mov edx, dword [ebp - 0x8d8]
add edx, 1
mov dword [ebp - 0x8d8], edx
cmp dword [ebp - 0x8d8], 2
jge 0x47ce5c
mov eax, dword [ebp - 0x8d8]
and eax, 0x80000001
jns 0x47ce41
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47ce51
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47ce5a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x47ce17
mov dword [ebp - 4], 0xfffffffe
call fcn.0047ce6a
jmp 0x47ce87
mov dword [ebp - 0x8dc], 0
jmp 0x47cea2
mov edx, dword [ebp - 0x8dc]
add edx, 1
mov dword [ebp - 0x8dc], edx
cmp dword [ebp - 0x8dc], 3
jge 0x47cee3
cmp dword [ebp - 0x1c], 0
jge 0x47ceb9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47cecf
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xad8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47ce93
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xadc], 0
jmp 0x47cf05
mov eax, dword [ebp - 0xadc]
add eax, 1
mov dword [ebp - 0xadc], eax
cmp dword [ebp - 0xadc], 2
jge 0x47cf44
mov eax, dword [ebp - 0xadc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47cf34
mov eax, dword [ebp - 0xadc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47cf3f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47cf42
mov dword [ebp - 0x1c], eax
jmp 0x47cef6
mov dword [ebp - 4], 0xfffffffe
call fcn.0047cf52
jmp 0x47cf5a
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0xae0], 0
jmp 0x47cf7c
cmp dword [ebp - 0xae0], 4
jge 0x47cfbb
mov eax, dword [ebp - 0xae0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47cfab
mov eax, dword [ebp - 0xae0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47cfb6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47cfb9
mov dword [ebp - 0x1c], eax
jmp 0x47cf6d
mov dword [ebp - 4], 0xfffffffe
call fcn.0047cfc9
jmp 0x47cfd1
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0xae4], 0
jmp 0x47cff3
cmp dword [ebp - 0xae4], 3
jge 0x47d03a