Function at 0x46d890
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b6e70
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff0b4
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x44], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x46d8df
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1b
jge 0x46d8f2
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46d8d6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46d906
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46d91c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x46d935
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0xa
jge 0x46d979
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46d94f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46d95f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46d977
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46d977
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46d92c
mov dword [ebp - 4], 0xfffffffe
call fcn.0046d987
jmp 0x46d996
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x46d9af
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0x1d
jge 0x46d9e0
mov edx, dword [ebp - 0x28]
and edx, 0x80000001
jns 0x46d9c5
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x46d9d5
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x46d9de
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46d9a6
mov dword [ebp - 4], 0xfffffffe
call fcn.0046d9ee
jmp 0x46da0c
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 0
jmp 0x46da25
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0xb
jge 0x46da57
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46da4b
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46da52
and eax, 0xbc614e
jmp 0x46da55
mov dword [ebp - 0x1c], eax
jmp 0x46da1c
mov dword [ebp - 4], 0xfffffffe
call fcn.0046da65
jmp 0x46da6d
mov dword [ebp - 4], 3
mov dword [ebp - 0x30], 0
jmp 0x46da86
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x20
jge 0x46dab6
mov eax, dword [ebp - 0x30]
and eax, 0x80000001
jns 0x46da9b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46daab
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46dab4
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46da7d
mov dword [ebp - 4], 0xfffffffe
call fcn.0046dac4
jmp 0x46dae1
mov dword [ebp - 4], 4
mov dword [ebp - 0x34], 0
jmp 0x46dafa
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 6
jge 0x46db2c
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46db20
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46db27
and eax, 0xbc614e
jmp 0x46db2a
mov dword [ebp - 0x1c], eax
jmp 0x46daf1
mov dword [ebp - 4], 0xfffffffe
call fcn.0046db3a
jmp 0x46db42
mov dword [ebp - 4], 5
mov dword [ebp - 0x38], 0
jmp 0x46db5b
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0xe
jge 0x46db91
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46db81
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46db8c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46db8f
mov dword [ebp - 0x1c], eax
jmp 0x46db52
mov dword [ebp - 4], 0xfffffffe
call fcn.0046db9f
jmp 0x46dba7
mov dword [ebp - 4], 6
mov dword [ebp - 0x3c], 0
jmp 0x46dbc0
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x1f
jge 0x46dbf6
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46dbe6
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46dbf1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46dbf4
mov dword [ebp - 0x1c], eax
jmp 0x46dbb7
mov dword [ebp - 4], 0xfffffffe
call fcn.0046dc04
jmp 0x46dc0c
mov dword [ebp - 0x40], 0
jmp 0x46dc1e
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 9
jge 0x46dc5c
cmp dword [ebp - 0x1c], 0
jge 0x46dc32
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46dc48
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46dc15
mov dword [ebp - 4], 7
mov dword [ebp - 0x244], 0
jmp 0x46dc7e
mov eax, dword [ebp - 0x244]
add eax, 1
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0xd
jge 0x46dcbd
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46dcad
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46dcb8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46dcbb
mov dword [ebp - 0x1c], eax
jmp 0x46dc6f
mov dword [ebp - 4], 0xfffffffe
call fcn.0046dccb
jmp 0x46dcd3
mov dword [ebp - 0x248], 0
jmp 0x46dcee
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 0xd
jge 0x46dd2f
cmp dword [ebp - 0x1c], 0
jge 0x46dd05
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46dd1b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46dcdf
mov dword [ebp - 0x444], 0
jmp 0x46dd4a
mov eax, dword [ebp - 0x444]
add eax, 1
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 5
jge 0x46dd63
mov ecx, dword [ebp - 0x444]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46dd3b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46dd77
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46dd8d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x448], 1
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x450], 2
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x458], 0
jmp 0x46ddd0
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 2
jge 0x46de11
mov eax, dword [ebp - 0x448]
add eax, dword [ebp - 0x44c]
mov dword [ebp - 0x450], eax
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x448], ecx
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x44c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x450]
mov dword [ebp - 0x1c], eax
jmp 0x46ddc1
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x45c], 0
jmp 0x46de35
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 0xc
jge 0x46de4e
mov eax, dword [ebp - 0x45c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46de26
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46de62
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46de78
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x460], 0
jmp 0x46de93
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 0xd
jge 0x46deac
mov eax, dword [ebp - 0x460]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46de84
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46dec0
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ded6
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x464], 0
jmp 0x46def8
mov edx, dword [ebp - 0x464]
add edx, 1
mov dword [ebp - 0x464], edx
cmp dword [ebp - 0x464], 0xa
jge 0x46df33
mov eax, dword [ebp - 0x464]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46df27
mov eax, dword [ebp - 0x464]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46df2e
and eax, 0xbc614e
jmp 0x46df31
mov dword [ebp - 0x1c], eax
jmp 0x46dee9
mov dword [ebp - 4], 0xfffffffe
call fcn.0046df41
jmp 0x46df49
mov dword [ebp - 4], 9
mov dword [ebp - 0x468], 0
jmp 0x46df6b
mov edx, dword [ebp - 0x468]
add edx, 1
mov dword [ebp - 0x468], edx
cmp dword [ebp - 0x468], 0xa
jge 0x46dfa6
mov eax, dword [ebp - 0x468]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46df9a
mov eax, dword [ebp - 0x468]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46dfa1
and eax, 0xbc614e
jmp 0x46dfa4
mov dword [ebp - 0x1c], eax
jmp 0x46df5c
mov dword [ebp - 4], 0xfffffffe
call fcn.0046dfb4
jmp 0x46dfbc
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x474], 2
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x47c], 0
jmp 0x46dfff
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
cmp dword [ebp - 0x47c], 0
jge 0x46e040
mov eax, dword [ebp - 0x46c]
add eax, dword [ebp - 0x470]
mov dword [ebp - 0x474], eax
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x46c], ecx
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x470], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x474]
mov dword [ebp - 0x1c], eax
jmp 0x46dff0
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x480], 0
jmp 0x46e068
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 6
jge 0x46e09e
mov eax, dword [ebp - 0x480]
and eax, 0x80000001
jns 0x46e083
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46e093
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46e09c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46e059
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e0ac
jmp 0x46e0c9
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x484], 0
jmp 0x46e0eb
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 0xe
jge 0x46e12a
mov eax, dword [ebp - 0x484]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46e11a
mov eax, dword [ebp - 0x484]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46e125
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46e128
mov dword [ebp - 0x1c], eax
jmp 0x46e0dc
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e138
jmp 0x46e140
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x488], 0
jmp 0x46e162
mov edx, dword [ebp - 0x488]
add edx, 1
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 0xd
jge 0x46e198
mov eax, dword [ebp - 0x488]
and eax, 0x80000001
jns 0x46e17d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46e18d
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46e196
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46e153
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e1a6
jmp 0x46e1c3
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x48c], 0
jmp 0x46e1e5
mov edx, dword [ebp - 0x48c]
add edx, 1
mov dword [ebp - 0x48c], edx
cmp dword [ebp - 0x48c], 8
jge 0x46e224
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46e214
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46e21f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46e222
mov dword [ebp - 0x1c], eax
jmp 0x46e1d6
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e232
jmp 0x46e23a
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x490], 0
jmp 0x46e25c
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 1
jge 0x46e29b
mov eax, dword [ebp - 0x490]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46e28b
mov eax, dword [ebp - 0x490]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46e296
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46e299
mov dword [ebp - 0x1c], eax
jmp 0x46e24d
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e2a9
jmp 0x46e2b1
mov dword [ebp - 0x494], 0
jmp 0x46e2cc
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 1
jge 0x46e30d
cmp dword [ebp - 0x1c], 0
jge 0x46e2e3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46e2f9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x690]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46e2bd
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x694], 0
jmp 0x46e32f
mov eax, dword [ebp - 0x694]
add eax, 1
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x694], 3
jge 0x46e366
mov ecx, dword [ebp - 0x694]
and ecx, 0x80000001
jns 0x46e34b
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46e35b
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46e364
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x46e320
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e374
jmp 0x46e392
mov dword [ebp - 0x698], 0
jmp 0x46e3ad
mov eax, dword [ebp - 0x698]
add eax, 1
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 7
jge 0x46e3c6
mov ecx, dword [ebp - 0x698]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46e39e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46e3da
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46e3f0
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x69c], 1
mov dword [ebp - 0x6a0], 1
mov dword [ebp - 0x6a4], 2
mov dword [ebp - 0x6a8], 0
mov dword [ebp - 0x6ac], 0
jmp 0x46e433
mov edx, dword [ebp - 0x6ac]
add edx, 1
mov dword [ebp - 0x6ac], edx
cmp dword [ebp - 0x6ac], 4
jge 0x46e474
mov eax, dword [ebp - 0x69c]
add eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x6a4], eax
mov ecx, dword [ebp - 0x6a0]
mov dword [ebp - 0x69c], ecx
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x1c], eax
jmp 0x46e424
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6b0], 0
jmp 0x46e498
mov edx, dword [ebp - 0x6b0]
add edx, 1
mov dword [ebp - 0x6b0], edx
cmp dword [ebp - 0x6b0], 3
jge 0x46e4b1
mov eax, dword [ebp - 0x6b0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46e489
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46e4c5
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46e4db
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x6b4], 0
jmp 0x46e4f6
mov edx, dword [ebp - 0x6b4]
add edx, 1
mov dword [ebp - 0x6b4], edx
cmp dword [ebp - 0x6b4], 3
jge 0x46e537
cmp dword [ebp - 0x1c], 0
jge 0x46e50d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46e523
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46e4e7
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8b4], 0
jmp 0x46e559
mov eax, dword [ebp - 0x8b4]
add eax, 1
mov dword [ebp - 0x8b4], eax
cmp dword [ebp - 0x8b4], 0
jge 0x46e598
mov eax, dword [ebp - 0x8b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46e588
mov eax, dword [ebp - 0x8b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46e593
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46e596
mov dword [ebp - 0x1c], eax
jmp 0x46e54a
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e5a6
jmp 0x46e5ae
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8b8], 0
jmp 0x46e5d0
mov edx, dword [ebp - 0x8b8]
add edx, 1
mov dword [ebp - 0x8b8], edx
cmp dword [ebp - 0x8b8], 3
jge 0x46e60f
mov eax, dword [ebp - 0x8b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46e5ff
mov eax, dword [ebp - 0x8b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46e60a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46e60d
mov dword [ebp - 0x1c], eax
jmp 0x46e5c1
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e61d
jmp 0x46e625
mov dword [ebp - 0x8bc], 0
jmp 0x46e640
mov edx, dword [ebp - 0x8bc]
add edx, 1
mov dword [ebp - 0x8bc], edx
cmp dword [ebp - 0x8bc], 0
jge 0x46e681
cmp dword [ebp - 0x1c], 0
jge 0x46e657
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46e66d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xab8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46e631
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xabc], 0
jmp 0x46e6a3
mov eax, dword [ebp - 0xabc]
add eax, 1
mov dword [ebp - 0xabc], eax
cmp dword [ebp - 0xabc], 0
jge 0x46e6da
mov ecx, dword [ebp - 0xabc]
and ecx, 0x80000001
jns 0x46e6bf
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46e6cf
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46e6d8
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x46e694
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e6e8
jmp 0x46e706
mov dword [ebp - 0xac0], 0
jmp 0x46e721
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
cmp dword [ebp - 0xac0], 4
jge 0x46e73a
mov ecx, dword [ebp - 0xac0]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46e712
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46e74e
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46e764
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0xac8], 1
mov dword [ebp - 0xacc], 2
mov dword [ebp - 0xad0], 0
mov dword [ebp - 0xad4], 0
jmp 0x46e7a7
mov edx, dword [ebp - 0xad4]
add edx, 1
mov dword [ebp - 0xad4], edx
cmp dword [ebp - 0xad4], 3
jge 0x46e7e8
mov eax, dword [ebp - 0xac4]
add eax, dword [ebp - 0xac8]
mov dword [ebp - 0xacc], eax
mov ecx, dword [ebp - 0xac8]
mov dword [ebp - 0xac4], ecx
mov edx, dword [ebp - 0xacc]
mov dword [ebp - 0xac8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xacc]
mov dword [ebp - 0x1c], eax
jmp 0x46e798
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xad8], 0
jmp 0x46e80c
mov edx, dword [ebp - 0xad8]
add edx, 1
mov dword [ebp - 0xad8], edx
cmp dword [ebp - 0xad8], 2
jge 0x46e825
mov eax, dword [ebp - 0xad8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46e7fd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46e839
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46e84f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xadc], 0
jmp 0x46e86a
mov edx, dword [ebp - 0xadc]
add edx, 1
mov dword [ebp - 0xadc], edx
cmp dword [ebp - 0xadc], 1
jge 0x46e8ab
cmp dword [ebp - 0x1c], 0
jge 0x46e881
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46e897
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcd8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46e85b
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xcdc], 0
jmp 0x46e8cd
mov eax, dword [ebp - 0xcdc]
add eax, 1
mov dword [ebp - 0xcdc], eax
cmp dword [ebp - 0xcdc], 0
jge 0x46e914
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46e8ea
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46e8fa
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46e912
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46e912
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46e8be
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e922
jmp 0x46e931
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xce0], 0
jmp 0x46e953
mov ecx, dword [ebp - 0xce0]
add ecx, 1
mov dword [ebp - 0xce0], ecx
cmp dword [ebp - 0xce0], 3
jge 0x46e98e
mov eax, dword [ebp - 0xce0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46e982
mov eax, dword [ebp - 0xce0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46e989
and eax, 0xbc614e
jmp 0x46e98c
mov dword [ebp - 0x1c], eax
jmp 0x46e944
mov dword [ebp - 4], 0xfffffffe
call fcn.0046e99c
jmp 0x46e9a4
mov dword [ebp - 0xce4], 1
mov dword [ebp - 0xce8], 1
mov dword [ebp - 0xcec], 2
mov dword [ebp - 0xcf0], 0
mov dword [ebp - 0xcf4], 0
jmp 0x46e9e7
mov edx, dword [ebp - 0xcf4]
add edx, 1
mov dword [ebp - 0xcf4], edx
cmp dword [ebp - 0xcf4], 2
jge 0x46ea28
mov eax, dword [ebp - 0xce4]
add eax, dword [ebp - 0xce8]
mov dword [ebp - 0xcec], eax
mov ecx, dword [ebp - 0xce8]
mov dword [ebp - 0xce4], ecx
mov edx, dword [ebp - 0xcec]
mov dword [ebp - 0xce8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcec]
mov dword [ebp - 0x1c], eax
jmp 0x46e9d8
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xcf8], 0
jmp 0x46ea53
mov edx, dword [ebp - 0xcf8]
add edx, 1
mov dword [ebp - 0xcf8], edx
cmp dword [ebp - 0xcf8], 1
jge 0x46ea8e
mov eax, dword [ebp - 0xcf8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46ea82
mov eax, dword [ebp - 0xcf8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46ea89
and eax, 0xbc614e
jmp 0x46ea8c
mov dword [ebp - 0x1c], eax
jmp 0x46ea44
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ea9c
jmp 0x46eaa4
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xcfc], 0
jmp 0x46eac6
mov edx, dword [ebp - 0xcfc]
add edx, 1
mov dword [ebp - 0xcfc], edx
cmp dword [ebp - 0xcfc], 3
jge 0x46eb01
mov eax, dword [ebp - 0xcfc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46eaf5
mov eax, dword [ebp - 0xcfc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46eafc
and eax, 0xbc614e
jmp 0x46eaff
mov dword [ebp - 0x1c], eax
jmp 0x46eab7
mov dword [ebp - 4], 0xfffffffe
call fcn.0046eb0f
jmp 0x46eb17
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xd00], 0
jmp 0x46eb39
mov edx, dword [ebp - 0xd00]
add edx, 1
mov dword [ebp - 0xd00], edx
cmp dword [ebp - 0xd00], 1
jge 0x46eb74
mov eax, dword [ebp - 0xd00]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46eb68
mov eax, dword [ebp - 0xd00]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46eb6f
and eax, 0xbc614e
jmp 0x46eb72
mov dword [ebp - 0x1c], eax
jmp 0x46eb2a
mov dword [ebp - 4], 0xfffffffe
call fcn.0046eb82
jmp 0x46eb8a
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xd04], 0
jmp 0x46ebac
cmp dword [ebp - 0xd04], 3
jge 0x46ebeb
mov eax, dword [ebp - 0xd04]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46ebdb
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ebf9
jmp 0x46ec01