Function at 0x46ba70
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b6c70
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1734
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x40], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x46bacd
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x3d
jge 0x46bb11
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46bae7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46baf7
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46bb0f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46bb0f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46bac4
mov dword [ebp - 4], 0xfffffffe
call fcn.0046bb1f
jmp 0x46bb2e
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x46bb5c
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 5
jge 0x46bb82
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jmp 0x46bb53
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 0
jmp 0x46bba4
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0x1a
jge 0x46bbe8
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46bbbe
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46bbce
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46bbe6
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46bbe6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46bb9b
mov dword [ebp - 4], 0xfffffffe
call fcn.0046bbf6
jmp 0x46bc05
mov dword [ebp - 0x3c], 0
jmp 0x46bc17
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0xd
jge 0x46bc55
cmp dword [ebp - 0x1c], 0
jge 0x46bc2b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46bc41
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x238]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46bc0e
mov dword [ebp - 4], 2
mov dword [ebp - 0x23c], 0
jmp 0x46bc77
mov eax, dword [ebp - 0x23c]
add eax, 1
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x10
jge 0x46bcb6
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46bca6
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46bcb1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46bcb4
mov dword [ebp - 0x1c], eax
jmp 0x46bc68
mov dword [ebp - 4], 0xfffffffe
call fcn.0046bcc4
jmp 0x46bccc
mov dword [ebp - 0x240], 0
jmp 0x46bce7
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0x1a
jge 0x46bd28
cmp dword [ebp - 0x1c], 0
jge 0x46bcfe
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46bd14
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x438]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46bcd8
mov dword [ebp - 0x43c], 0
jmp 0x46bd43
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0xb
jge 0x46bd5c
mov ecx, dword [ebp - 0x43c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46bd34
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46bd70
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46bd86
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 3
mov dword [ebp - 0x440], 0
jmp 0x46bda8
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 0xa
jge 0x46bde3
mov eax, dword [ebp - 0x440]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46bdd7
mov eax, dword [ebp - 0x440]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46bdde
and eax, 0xbc614e
jmp 0x46bde1
mov dword [ebp - 0x1c], eax
jmp 0x46bd99
mov dword [ebp - 4], 0xfffffffe
call fcn.0046bdf1
jmp 0x46bdf9
mov dword [ebp - 4], 4
mov dword [ebp - 0x444], 0
jmp 0x46be1b
mov edx, dword [ebp - 0x444]
add edx, 1
mov dword [ebp - 0x444], edx
cmp dword [ebp - 0x444], 0xe
jge 0x46be56
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46be4a
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46be51
and eax, 0xbc614e
jmp 0x46be54
mov dword [ebp - 0x1c], eax
jmp 0x46be0c
mov dword [ebp - 4], 0xfffffffe
call fcn.0046be64
jmp 0x46be6c
mov dword [ebp - 4], 5
mov dword [ebp - 0x448], 0
jmp 0x46be8e
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 6
jge 0x46bec4
mov eax, dword [ebp - 0x448]
and eax, 0x80000001
jns 0x46bea9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46beb9
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46bec2
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46be7f
mov dword [ebp - 4], 0xfffffffe
call fcn.0046bed2
jmp 0x46beef
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x450], 1
mov dword [ebp - 0x454], 2
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x45c], 0
jmp 0x46bf32
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 0x10
jge 0x46bf73
mov eax, dword [ebp - 0x44c]
add eax, dword [ebp - 0x450]
mov dword [ebp - 0x454], eax
mov ecx, dword [ebp - 0x450]
mov dword [ebp - 0x44c], ecx
mov edx, dword [ebp - 0x454]
mov dword [ebp - 0x450], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x454]
mov dword [ebp - 0x1c], eax
jmp 0x46bf23
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x460], 0
jmp 0x46bf9e
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 4
jge 0x46bfd4
mov eax, dword [ebp - 0x460]
and eax, 0x80000001
jns 0x46bfb9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46bfc9
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46bfd2
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46bf8f
mov dword [ebp - 4], 0xfffffffe
call fcn.0046bfe2
jmp 0x46bfff
mov dword [ebp - 4], 7
mov dword [ebp - 0x464], 0
jmp 0x46c021
mov edx, dword [ebp - 0x464]
add edx, 1
mov dword [ebp - 0x464], edx
cmp dword [ebp - 0x464], 0xa
jge 0x46c068
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46c03e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c04e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46c066
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c066
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46c012
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c076
jmp 0x46c085
mov dword [ebp - 4], 8
mov dword [ebp - 0x468], 0
jmp 0x46c0a7
mov ecx, dword [ebp - 0x468]
add ecx, 1
mov dword [ebp - 0x468], ecx
cmp dword [ebp - 0x468], 1
jge 0x46c0e6
mov eax, dword [ebp - 0x468]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c0d6
mov eax, dword [ebp - 0x468]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c0e1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46c0e4
mov dword [ebp - 0x1c], eax
jmp 0x46c098
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c0f4
jmp 0x46c0fc
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x474], 2
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x47c], 0
jmp 0x46c13f
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
cmp dword [ebp - 0x47c], 0xf
jge 0x46c180
mov eax, dword [ebp - 0x46c]
add eax, dword [ebp - 0x470]
mov dword [ebp - 0x474], eax
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x46c], ecx
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x470], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x474]
mov dword [ebp - 0x1c], eax
jmp 0x46c130
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x480], 0
jmp 0x46c1ab
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 0xb
jge 0x46c1e6
mov eax, dword [ebp - 0x480]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c1da
mov eax, dword [ebp - 0x480]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c1e1
and eax, 0xbc614e
jmp 0x46c1e4
mov dword [ebp - 0x1c], eax
jmp 0x46c19c
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c1f4
jmp 0x46c1fc
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x484], 0
jmp 0x46c21e
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 0xc
jge 0x46c254
mov eax, dword [ebp - 0x484]
and eax, 0x80000001
jns 0x46c239
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c249
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46c252
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46c20f
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c262
jmp 0x46c27f
mov dword [ebp - 0x488], 0
jmp 0x46c29a
mov edx, dword [ebp - 0x488]
add edx, 1
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 3
jge 0x46c2db
cmp dword [ebp - 0x1c], 0
jge 0x46c2b1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46c2c7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x680]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46c28b
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x684], 0
jmp 0x46c2fd
mov eax, dword [ebp - 0x684]
add eax, 1
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 3
jge 0x46c33c
mov eax, dword [ebp - 0x684]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c32c
mov eax, dword [ebp - 0x684]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c337
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46c33a
mov dword [ebp - 0x1c], eax
jmp 0x46c2ee
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c34a
jmp 0x46c352
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x688], 0
jmp 0x46c374
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 7
jge 0x46c3b3
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c3a3
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c3ae
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46c3b1
mov dword [ebp - 0x1c], eax
jmp 0x46c365
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c3c1
jmp 0x46c3c9
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x68c], 0
jmp 0x46c3eb
mov edx, dword [ebp - 0x68c]
add edx, 1
mov dword [ebp - 0x68c], edx
cmp dword [ebp - 0x68c], 7
jge 0x46c432
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46c408
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c418
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46c430
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c430
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46c3dc
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c440
jmp 0x46c44f
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x690], 0
jmp 0x46c471
mov ecx, dword [ebp - 0x690]
add ecx, 1
mov dword [ebp - 0x690], ecx
cmp dword [ebp - 0x690], 0
jge 0x46c4ac
mov eax, dword [ebp - 0x690]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c4a0
mov eax, dword [ebp - 0x690]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c4a7
and eax, 0xbc614e
jmp 0x46c4aa
mov dword [ebp - 0x1c], eax
jmp 0x46c462
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c4ba
jmp 0x46c4c2
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x694], 0
jmp 0x46c4e4
mov edx, dword [ebp - 0x694]
add edx, 1
mov dword [ebp - 0x694], edx
cmp dword [ebp - 0x694], 2
jge 0x46c51f
mov eax, dword [ebp - 0x694]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c513
mov eax, dword [ebp - 0x694]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c51a
and eax, 0xbc614e
jmp 0x46c51d
mov dword [ebp - 0x1c], eax
jmp 0x46c4d5
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c52d
jmp 0x46c535
mov dword [ebp - 0x698], 0
jmp 0x46c550
mov edx, dword [ebp - 0x698]
add edx, 1
mov dword [ebp - 0x698], edx
cmp dword [ebp - 0x698], 5
jge 0x46c569
mov eax, dword [ebp - 0x698]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46c541
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46c57d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c593
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x69c], 0
jmp 0x46c5b5
mov edx, dword [ebp - 0x69c]
add edx, 1
mov dword [ebp - 0x69c], edx
cmp dword [ebp - 0x69c], 4
jge 0x46c5f0
mov eax, dword [ebp - 0x69c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c5e4
mov eax, dword [ebp - 0x69c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c5eb
and eax, 0xbc614e
jmp 0x46c5ee
mov dword [ebp - 0x1c], eax
jmp 0x46c5a6
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c5fe
jmp 0x46c606
mov dword [ebp - 0x6a0], 1
mov dword [ebp - 0x6a4], 1
mov dword [ebp - 0x6a8], 2
mov dword [ebp - 0x6ac], 0
mov dword [ebp - 0x6b0], 0
jmp 0x46c649
mov edx, dword [ebp - 0x6b0]
add edx, 1
mov dword [ebp - 0x6b0], edx
cmp dword [ebp - 0x6b0], 3
jge 0x46c68a
mov eax, dword [ebp - 0x6a0]
add eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a0], ecx
mov edx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6a4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x1c], eax
jmp 0x46c63a
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x6b4], 0
jmp 0x46c6b5
mov edx, dword [ebp - 0x6b4]
add edx, 1
mov dword [ebp - 0x6b4], edx
cmp dword [ebp - 0x6b4], 1
jge 0x46c6f4
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c6e4
mov eax, dword [ebp - 0x6b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c6ef
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46c6f2
mov dword [ebp - 0x1c], eax
jmp 0x46c6a6
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c702
jmp 0x46c70a
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x6b8], 0
jmp 0x46c72c
mov edx, dword [ebp - 0x6b8]
add edx, 1
mov dword [ebp - 0x6b8], edx
cmp dword [ebp - 0x6b8], 0
jge 0x46c76b
mov eax, dword [ebp - 0x6b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c75b
mov eax, dword [ebp - 0x6b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c766
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46c769
mov dword [ebp - 0x1c], eax
jmp 0x46c71d
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c779
jmp 0x46c781
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x6bc], 0
jmp 0x46c7a3
mov edx, dword [ebp - 0x6bc]
add edx, 1
mov dword [ebp - 0x6bc], edx
cmp dword [ebp - 0x6bc], 2
jge 0x46c7d9
mov eax, dword [ebp - 0x6bc]
and eax, 0x80000001
jns 0x46c7be
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c7ce
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46c7d7
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46c794
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c7e7
jmp 0x46c804
mov dword [ebp - 0x6c0], 0
jmp 0x46c81f
mov edx, dword [ebp - 0x6c0]
add edx, 1
mov dword [ebp - 0x6c0], edx
cmp dword [ebp - 0x6c0], 3
jge 0x46c860
cmp dword [ebp - 0x1c], 0
jge 0x46c836
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46c84c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46c810
mov dword [ebp - 0x8bc], 0
jmp 0x46c87b
mov eax, dword [ebp - 0x8bc]
add eax, 1
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x8bc], 1
jge 0x46c894
mov ecx, dword [ebp - 0x8bc]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46c86c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46c8a8
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c8be
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x8c0], 0
jmp 0x46c8e0
mov edx, dword [ebp - 0x8c0]
add edx, 1
mov dword [ebp - 0x8c0], edx
cmp dword [ebp - 0x8c0], 3
jge 0x46c916
mov eax, dword [ebp - 0x8c0]
and eax, 0x80000001
jns 0x46c8fb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c90b
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46c914
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46c8d1
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c924
jmp 0x46c941
mov dword [ebp - 0x8c4], 0
jmp 0x46c95c
mov edx, dword [ebp - 0x8c4]
add edx, 1
mov dword [ebp - 0x8c4], edx
cmp dword [ebp - 0x8c4], 4
jge 0x46c99d
cmp dword [ebp - 0x1c], 0
jge 0x46c973
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46c989
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xac0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46c94d
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0xac8], 1
mov dword [ebp - 0xacc], 2
mov dword [ebp - 0xad0], 0
mov dword [ebp - 0xad4], 0
jmp 0x46c9e0
mov eax, dword [ebp - 0xad4]
add eax, 1
mov dword [ebp - 0xad4], eax
cmp dword [ebp - 0xad4], 3
jge 0x46ca21
mov ecx, dword [ebp - 0xac4]
add ecx, dword [ebp - 0xac8]
mov dword [ebp - 0xacc], ecx
mov edx, dword [ebp - 0xac8]
mov dword [ebp - 0xac4], edx
mov eax, dword [ebp - 0xacc]
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1c], ecx
jmp 0x46c9d1
mov edx, dword [ebp - 0x1c]
add edx, 3
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xad8], 0
jmp 0x46ca4c
mov eax, dword [ebp - 0xad8]
add eax, 1
mov dword [ebp - 0xad8], eax
cmp dword [ebp - 0xad8], 1
jge 0x46ca8b
mov eax, dword [ebp - 0xad8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46ca7b
mov eax, dword [ebp - 0xad8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46ca86
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46ca89
mov dword [ebp - 0x1c], eax
jmp 0x46ca3d
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ca99
jmp 0x46caa1
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xadc], 0
jmp 0x46cac3
mov edx, dword [ebp - 0xadc]
add edx, 1
mov dword [ebp - 0xadc], edx
cmp dword [ebp - 0xadc], 0
jge 0x46cb0a
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46cae0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46caf0
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46cb08
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46cb08
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46cab4
mov dword [ebp - 4], 0xfffffffe
call fcn.0046cb18
jmp 0x46cb27
mov dword [ebp - 0xae0], 1
mov dword [ebp - 0xae4], 1
mov dword [ebp - 0xae8], 2
mov dword [ebp - 0xaec], 0
mov dword [ebp - 0xaf0], 0
jmp 0x46cb6a
mov ecx, dword [ebp - 0xaf0]
add ecx, 1
mov dword [ebp - 0xaf0], ecx
cmp dword [ebp - 0xaf0], 0
jge 0x46cbab
mov edx, dword [ebp - 0xae0]
add edx, dword [ebp - 0xae4]
mov dword [ebp - 0xae8], edx
mov eax, dword [ebp - 0xae4]
mov dword [ebp - 0xae0], eax
mov ecx, dword [ebp - 0xae8]
mov dword [ebp - 0xae4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xae8]
mov dword [ebp - 0x1c], edx
jmp 0x46cb5b
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xaf4], 0
jmp 0x46cbd3
mov ecx, dword [ebp - 0xaf4]
add ecx, 1
mov dword [ebp - 0xaf4], ecx
cmp dword [ebp - 0xaf4], 3
jge 0x46cc1a
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46cbf0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46cc00
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46cc18
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46cc18
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46cbc4
mov dword [ebp - 4], 0xfffffffe
call fcn.0046cc28
jmp 0x46cc37
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xaf8], 0
jmp 0x46cc59
mov ecx, dword [ebp - 0xaf8]
add ecx, 1
mov dword [ebp - 0xaf8], ecx
cmp dword [ebp - 0xaf8], 0
jge 0x46cca0
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46cc76
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46cc86
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46cc9e
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46cc9e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46cc4a
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ccae
jmp 0x46ccbd
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xafc], 0
jmp 0x46ccdf
mov ecx, dword [ebp - 0xafc]
add ecx, 1
mov dword [ebp - 0xafc], ecx
cmp dword [ebp - 0xafc], 0
jge 0x46cd26
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46ccfc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46cd0c
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46cd24
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46cd24
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46ccd0
mov dword [ebp - 4], 0xfffffffe
call fcn.0046cd34
jmp 0x46cd43
mov dword [ebp - 0xb00], 0
jmp 0x46cd5e
mov ecx, dword [ebp - 0xb00]
add ecx, 1
mov dword [ebp - 0xb00], ecx
cmp dword [ebp - 0xb00], 3
jge 0x46cd9f
cmp dword [ebp - 0x1c], 0
jge 0x46cd75
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46cd8b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcf8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46cd4f
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xcfc], 0
jmp 0x46cdc1
mov eax, dword [ebp - 0xcfc]
add eax, 1
mov dword [ebp - 0xcfc], eax
cmp dword [ebp - 0xcfc], 3
jge 0x46cdf8
mov ecx, dword [ebp - 0xcfc]
and ecx, 0x80000001
jns 0x46cddd
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46cded
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46cdf6
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x46cdb2
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ce06
jmp 0x46ce24
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xd00], 0
jmp 0x46ce46
mov eax, dword [ebp - 0xd00]
add eax, 1
mov dword [ebp - 0xd00], eax
cmp dword [ebp - 0xd00], 1
jge 0x46ce7d
mov ecx, dword [ebp - 0xd00]
and ecx, 0x80000001
jns 0x46ce62
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46ce72
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46ce7b
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x46ce37
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ce8b
jmp 0x46cea9
mov dword [ebp - 0xd04], 0
jmp 0x46cec4
mov eax, dword [ebp - 0xd04]
add eax, 1
mov dword [ebp - 0xd04], eax
cmp dword [ebp - 0xd04], 3
jge 0x46cf05
cmp dword [ebp - 0x1c], 0
jge 0x46cedb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46cef1
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xf00]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46ceb5
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0xf04], 0
jmp 0x46cf27
mov eax, dword [ebp - 0xf04]
add eax, 1
mov dword [ebp - 0xf04], eax
cmp dword [ebp - 0xf04], 1
jge 0x46cf62
mov eax, dword [ebp - 0xf04]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46cf56
mov eax, dword [ebp - 0xf04]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46cf5d
and eax, 0xbc614e
jmp 0x46cf60
mov dword [ebp - 0x1c], eax
jmp 0x46cf18
mov dword [ebp - 4], 0xfffffffe
call fcn.0046cf70
jmp 0x46cf78
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0xf08], 0
jmp 0x46cf9a
cmp dword [ebp - 0xf08], 0
jge 0x46cfe1
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46cfb7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46cfc7
mov dword [ebp - 4], 0xfffffffe
call fcn.0046cfef
jmp 0x46cffe
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0xf0c], 0
jmp 0x46d020