Function at 0x47fd00
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b7fc8
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff2d0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x34], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x47fd56
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xc
jge 0x47fd88
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47fd7c
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47fd83
and eax, 0xbc614e
jmp 0x47fd86
mov dword [ebp - 0x1c], eax
jmp 0x47fd4d
mov dword [ebp - 4], 0xfffffffe
call fcn.0047fd96
jmp 0x47fd9e
mov dword [ebp - 0x24], 0
jmp 0x47fdb0
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x15
jge 0x47fdc3
mov eax, dword [ebp - 0x24]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47fda7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47fdd7
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47fded
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x47fe06
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 5
jge 0x47fe38
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47fe2c
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47fe33
and eax, 0xbc614e
jmp 0x47fe36
mov dword [ebp - 0x1c], eax
jmp 0x47fdfd
mov dword [ebp - 4], 0xfffffffe
call fcn.0047fe46
jmp 0x47fe4e
mov dword [ebp - 0x2c], 0
jmp 0x47fe60
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0xc
jge 0x47fe73
mov eax, dword [ebp - 0x2c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x47fe57
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47fe87
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47fe9d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x30], 0
jmp 0x47feaf
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 6
jge 0x47feed
cmp dword [ebp - 0x1c], 0
jge 0x47fec3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47fed9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47fea6
mov dword [ebp - 4], 2
mov dword [ebp - 0x234], 0
jmp 0x47ff0f
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 5
jge 0x47ff4a
mov eax, dword [ebp - 0x234]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47ff3e
mov eax, dword [ebp - 0x234]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47ff45
and eax, 0xbc614e
jmp 0x47ff48
mov dword [ebp - 0x1c], eax
jmp 0x47ff00
mov dword [ebp - 4], 0xfffffffe
call fcn.0047ff58
jmp 0x47ff60
mov dword [ebp - 4], 3
mov dword [ebp - 0x238], 0
jmp 0x47ff82
mov edx, dword [ebp - 0x238]
add edx, 1
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 5
jge 0x47ffbd
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47ffb1
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47ffb8
and eax, 0xbc614e
jmp 0x47ffbb
mov dword [ebp - 0x1c], eax
jmp 0x47ff73
mov dword [ebp - 4], 0xfffffffe
call fcn.0047ffcb
jmp 0x47ffd3
mov dword [ebp - 0x23c], 1
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x244], 2
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x24c], 0
jmp 0x480016
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 8
jge 0x480057
mov eax, dword [ebp - 0x23c]
add eax, dword [ebp - 0x240]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x240]
mov dword [ebp - 0x23c], ecx
mov edx, dword [ebp - 0x244]
mov dword [ebp - 0x240], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x244]
mov dword [ebp - 0x1c], eax
jmp 0x480007
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x250], 0
jmp 0x480082
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0xe
jge 0x4800c9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48009f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4800af
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4800c7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4800c7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x480073
mov dword [ebp - 4], 0xfffffffe
call fcn.004800d7
jmp 0x4800e6
mov dword [ebp - 4], 5
mov dword [ebp - 0x254], 0
jmp 0x480108
mov ecx, dword [ebp - 0x254]
add ecx, 1
mov dword [ebp - 0x254], ecx
cmp dword [ebp - 0x254], 0
jge 0x480147
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x480137
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x480142
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x480145
mov dword [ebp - 0x1c], eax
jmp 0x4800f9
mov dword [ebp - 4], 0xfffffffe
call fcn.00480155
jmp 0x48015d
mov dword [ebp - 4], 6
mov dword [ebp - 0x258], 0
jmp 0x48017f
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 0xb
jge 0x4801b5
mov eax, dword [ebp - 0x258]
and eax, 0x80000001
jns 0x48019a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4801aa
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4801b3
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x480170
mov dword [ebp - 4], 0xfffffffe
call fcn.004801c3
jmp 0x4801e0
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x26c], 0
jmp 0x480223
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
cmp dword [ebp - 0x26c], 0xb
jge 0x480264
mov eax, dword [ebp - 0x25c]
add eax, dword [ebp - 0x260]
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x25c], ecx
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x264]
mov dword [ebp - 0x1c], eax
jmp 0x480214
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 0
jmp 0x4802b0
mov edx, dword [ebp - 0x280]
add edx, 1
mov dword [ebp - 0x280], edx
cmp dword [ebp - 0x280], 7
jge 0x4802f1
mov eax, dword [ebp - 0x270]
add eax, dword [ebp - 0x274]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x270], ecx
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x274], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x278]
mov dword [ebp - 0x1c], eax
jmp 0x4802a1
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x284], 0
jmp 0x48031c
mov edx, dword [ebp - 0x284]
add edx, 1
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 2
jge 0x48035b
mov eax, dword [ebp - 0x284]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48034b
mov eax, dword [ebp - 0x284]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x480356
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x480359
mov dword [ebp - 0x1c], eax
jmp 0x48030d
mov dword [ebp - 4], 0xfffffffe
call fcn.00480369
jmp 0x480371
mov dword [ebp - 0x288], 0
jmp 0x48038c
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 5
jge 0x4803cd
cmp dword [ebp - 0x1c], 0
jge 0x4803a3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4803b9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x480]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48037d
mov dword [ebp - 0x484], 1
mov dword [ebp - 0x488], 1
mov dword [ebp - 0x48c], 2
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x494], 0
jmp 0x480410
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 6
jge 0x480451
mov ecx, dword [ebp - 0x484]
add ecx, dword [ebp - 0x488]
mov dword [ebp - 0x48c], ecx
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x484], edx
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x48c]
mov dword [ebp - 0x1c], ecx
jmp 0x480401
mov edx, dword [ebp - 0x1c]
add edx, 6
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x498], 0
jmp 0x480475
mov eax, dword [ebp - 0x498]
add eax, 1
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 2
jge 0x48048e
mov ecx, dword [ebp - 0x498]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x480466
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4804a2
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4804b8
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x49c], 0
jmp 0x4804da
mov edx, dword [ebp - 0x49c]
add edx, 1
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 1
jge 0x480510
mov eax, dword [ebp - 0x49c]
and eax, 0x80000001
jns 0x4804f5
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x480505
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48050e
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4804cb
mov dword [ebp - 4], 0xfffffffe
call fcn.0048051e
jmp 0x48053b
mov dword [ebp - 0x4a0], 0
jmp 0x480556
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x4a0], edx
cmp dword [ebp - 0x4a0], 4
jge 0x480597
cmp dword [ebp - 0x1c], 0
jge 0x48056d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x480583
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x480547
mov dword [ebp - 0x69c], 0
jmp 0x4805b2
mov eax, dword [ebp - 0x69c]
add eax, 1
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 3
jge 0x4805f3
cmp dword [ebp - 0x1c], 0
jge 0x4805c9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4805df
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x898]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4805a3
mov dword [ebp - 4], 9
mov dword [ebp - 0x89c], 0
jmp 0x480615
mov eax, dword [ebp - 0x89c]
add eax, 1
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 2
jge 0x480650
mov eax, dword [ebp - 0x89c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x480644
mov eax, dword [ebp - 0x89c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48064b
and eax, 0xbc614e
jmp 0x48064e
mov dword [ebp - 0x1c], eax
jmp 0x480606
mov dword [ebp - 4], 0xfffffffe
call fcn.0048065e
jmp 0x480666
mov dword [ebp - 0x8a0], 1
mov dword [ebp - 0x8a4], 1
mov dword [ebp - 0x8a8], 2
mov dword [ebp - 0x8ac], 0
mov dword [ebp - 0x8b0], 0
jmp 0x4806a9
mov edx, dword [ebp - 0x8b0]
add edx, 1
mov dword [ebp - 0x8b0], edx
cmp dword [ebp - 0x8b0], 1
jge 0x4806ea
mov eax, dword [ebp - 0x8a0]
add eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a8], eax
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a0], ecx
mov edx, dword [ebp - 0x8a8]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x1c], eax
jmp 0x48069a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x8b4], 0
jmp 0x480715
mov edx, dword [ebp - 0x8b4]
add edx, 1
mov dword [ebp - 0x8b4], edx
cmp dword [ebp - 0x8b4], 1
jge 0x480750
mov eax, dword [ebp - 0x8b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x480744
mov eax, dword [ebp - 0x8b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x48074b
and eax, 0xbc614e
jmp 0x48074e
mov dword [ebp - 0x1c], eax
jmp 0x480706
mov dword [ebp - 4], 0xfffffffe
call fcn.0048075e
jmp 0x480766
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x8b8], 0
jmp 0x480788
mov edx, dword [ebp - 0x8b8]
add edx, 1
mov dword [ebp - 0x8b8], edx
cmp dword [ebp - 0x8b8], 3
jge 0x4807c3
mov eax, dword [ebp - 0x8b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4807b7
mov eax, dword [ebp - 0x8b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4807be
and eax, 0xbc614e
jmp 0x4807c1
mov dword [ebp - 0x1c], eax
jmp 0x480779
mov dword [ebp - 4], 0xfffffffe
call fcn.004807d1
jmp 0x4807d9
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x8bc], 0
jmp 0x4807fb
mov edx, dword [ebp - 0x8bc]
add edx, 1
mov dword [ebp - 0x8bc], edx
cmp dword [ebp - 0x8bc], 3
jge 0x480831
mov eax, dword [ebp - 0x8bc]
and eax, 0x80000001
jns 0x480816
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x480826
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x48082f
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4807ec
mov dword [ebp - 4], 0xfffffffe
call fcn.0048083f
jmp 0x48085c
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x8c0], 0
jmp 0x48087e
mov edx, dword [ebp - 0x8c0]
add edx, 1
mov dword [ebp - 0x8c0], edx
cmp dword [ebp - 0x8c0], 4
jge 0x4808c5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x48089b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4808ab
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4808c3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4808c3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x48086f
mov dword [ebp - 4], 0xfffffffe
call fcn.004808d3
jmp 0x4808e2
mov dword [ebp - 0x8c4], 0
jmp 0x4808fd
mov ecx, dword [ebp - 0x8c4]
add ecx, 1
mov dword [ebp - 0x8c4], ecx
cmp dword [ebp - 0x8c4], 0
jge 0x480916
mov edx, dword [ebp - 0x8c4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4808ee
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48092a
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x480940
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x8c8], 0
jmp 0x48095b
mov edx, dword [ebp - 0x8c8]
add edx, 1
mov dword [ebp - 0x8c8], edx
cmp dword [ebp - 0x8c8], 1
jge 0x480974
mov eax, dword [ebp - 0x8c8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x48094c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x480988
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48099e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x8cc], 1
mov dword [ebp - 0x8d0], 1
mov dword [ebp - 0x8d4], 2
mov dword [ebp - 0x8d8], 0
mov dword [ebp - 0x8dc], 0
jmp 0x4809e1
mov edx, dword [ebp - 0x8dc]
add edx, 1
mov dword [ebp - 0x8dc], edx
cmp dword [ebp - 0x8dc], 4
jge 0x480a22
mov eax, dword [ebp - 0x8cc]
add eax, dword [ebp - 0x8d0]
mov dword [ebp - 0x8d4], eax
mov ecx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8cc], ecx
mov edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8d0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x1c], eax
jmp 0x4809d2
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x8e0], 0
jmp 0x480a4d
mov edx, dword [ebp - 0x8e0]
add edx, 1
mov dword [ebp - 0x8e0], edx
cmp dword [ebp - 0x8e0], 4
jge 0x480a83
mov eax, dword [ebp - 0x8e0]
and eax, 0x80000001
jns 0x480a68
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x480a78
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x480a81
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x480a3e
mov dword [ebp - 4], 0xfffffffe
call fcn.00480a91
jmp 0x480aae
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x8e4], 0
jmp 0x480ad0
mov edx, dword [ebp - 0x8e4]
add edx, 1
mov dword [ebp - 0x8e4], edx
cmp dword [ebp - 0x8e4], 2
jge 0x480b0f
mov eax, dword [ebp - 0x8e4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x480aff
mov eax, dword [ebp - 0x8e4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x480b0a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x480b0d
mov dword [ebp - 0x1c], eax
jmp 0x480ac1
mov dword [ebp - 4], 0xfffffffe
call fcn.00480b1d
jmp 0x480b25
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8e8], 0
jmp 0x480b47
mov edx, dword [ebp - 0x8e8]
add edx, 1
mov dword [ebp - 0x8e8], edx
cmp dword [ebp - 0x8e8], 0
jge 0x480b86
mov eax, dword [ebp - 0x8e8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x480b76
mov eax, dword [ebp - 0x8e8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x480b81
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x480b84
mov dword [ebp - 0x1c], eax
jmp 0x480b38
mov dword [ebp - 4], 0xfffffffe
call fcn.00480b94
jmp 0x480b9c
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8ec], 0
jmp 0x480bbe
mov edx, dword [ebp - 0x8ec]
add edx, 1
mov dword [ebp - 0x8ec], edx
cmp dword [ebp - 0x8ec], 3
jge 0x480bfd
mov eax, dword [ebp - 0x8ec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x480bed
mov eax, dword [ebp - 0x8ec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x480bf8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x480bfb
mov dword [ebp - 0x1c], eax
jmp 0x480baf
mov dword [ebp - 4], 0xfffffffe
call fcn.00480c0b
jmp 0x480c13
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x8f0], 0
jmp 0x480c35
mov edx, dword [ebp - 0x8f0]
add edx, 1
mov dword [ebp - 0x8f0], edx
cmp dword [ebp - 0x8f0], 0
jge 0x480c6b
mov eax, dword [ebp - 0x8f0]
and eax, 0x80000001
jns 0x480c50
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x480c60
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x480c69
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x480c26
mov dword [ebp - 4], 0xfffffffe
call fcn.00480c79
jmp 0x480c96
mov dword [ebp - 0x8f4], 0
jmp 0x480cb1
mov edx, dword [ebp - 0x8f4]
add edx, 1
mov dword [ebp - 0x8f4], edx
cmp dword [ebp - 0x8f4], 3
jge 0x480cca
mov eax, dword [ebp - 0x8f4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x480ca2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x480cde
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x480cf4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x8f8], 0
jmp 0x480d16
mov edx, dword [ebp - 0x8f8]
add edx, 1
mov dword [ebp - 0x8f8], edx
cmp dword [ebp - 0x8f8], 3
jge 0x480d5d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x480d33
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x480d43
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x480d5b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x480d5b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x480d07
mov dword [ebp - 4], 0xfffffffe
call fcn.00480d6b
jmp 0x480d7a
mov dword [ebp - 0x8fc], 0
jmp 0x480d95
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
cmp dword [ebp - 0x8fc], 2
jge 0x480dae
mov edx, dword [ebp - 0x8fc]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x480d86
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x480dc2
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x480dd8
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x900], 0
jmp 0x480dfa
mov edx, dword [ebp - 0x900]
add edx, 1
mov dword [ebp - 0x900], edx
cmp dword [ebp - 0x900], 4
jge 0x480e39
mov eax, dword [ebp - 0x900]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x480e29
mov eax, dword [ebp - 0x900]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x480e34
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x480e37
mov dword [ebp - 0x1c], eax
jmp 0x480deb
mov dword [ebp - 4], 0xfffffffe
call fcn.00480e47
jmp 0x480e4f
mov dword [ebp - 0x904], 0
jmp 0x480e6a
mov edx, dword [ebp - 0x904]
add edx, 1
mov dword [ebp - 0x904], edx
cmp dword [ebp - 0x904], 0
jge 0x480e83
mov eax, dword [ebp - 0x904]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x480e5b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x480e97
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x480ead
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x908], 1
mov dword [ebp - 0x90c], 1
mov dword [ebp - 0x910], 2
mov dword [ebp - 0x914], 0
mov dword [ebp - 0x918], 0
jmp 0x480ef0
mov edx, dword [ebp - 0x918]
add edx, 1
mov dword [ebp - 0x918], edx
cmp dword [ebp - 0x918], 0
jge 0x480f31
mov eax, dword [ebp - 0x908]
add eax, dword [ebp - 0x90c]
mov dword [ebp - 0x910], eax
mov ecx, dword [ebp - 0x90c]
mov dword [ebp - 0x908], ecx
mov edx, dword [ebp - 0x910]
mov dword [ebp - 0x90c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x910]
mov dword [ebp - 0x1c], eax
jmp 0x480ee1
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x91c], 0
jmp 0x480f59
mov edx, dword [ebp - 0x91c]
add edx, 1
mov dword [ebp - 0x91c], edx
cmp dword [ebp - 0x91c], 2
jge 0x480f94
mov eax, dword [ebp - 0x91c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x480f88
mov eax, dword [ebp - 0x91c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x480f8f
and eax, 0xbc614e
jmp 0x480f92
mov dword [ebp - 0x1c], eax
jmp 0x480f4a
mov dword [ebp - 4], 0xfffffffe
call fcn.00480fa2
jmp 0x480faa
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x920], 0
jmp 0x480fcc
mov edx, dword [ebp - 0x920]
add edx, 1
mov dword [ebp - 0x920], edx
cmp dword [ebp - 0x920], 1
jge 0x481002
mov eax, dword [ebp - 0x920]
and eax, 0x80000001
jns 0x480fe7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x480ff7
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x481000
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x480fbd
mov dword [ebp - 4], 0xfffffffe
call fcn.00481010
jmp 0x48102d
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x924], 0
jmp 0x48104f
mov edx, dword [ebp - 0x924]
add edx, 1
mov dword [ebp - 0x924], edx
cmp dword [ebp - 0x924], 2
jge 0x48108e
mov eax, dword [ebp - 0x924]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48107e
mov eax, dword [ebp - 0x924]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x481089
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48108c
mov dword [ebp - 0x1c], eax
jmp 0x481040
mov dword [ebp - 4], 0xfffffffe
call fcn.0048109c
jmp 0x4810a4
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x928], 0
jmp 0x4810c6
cmp dword [ebp - 0x928], 3
jge 0x4810fc
mov eax, dword [ebp - 0x928]
and eax, 0x80000001
jns 0x4810e1
mov dword [ebp - 4], 0xfffffffe
call fcn.0048110a
jmp 0x481127