Function at 0x46f380
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b7030
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1d9c
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x2c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x46f3d6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x46f3e9
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46f3cd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46f3fd
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46f413
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x46f42c
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0
jge 0x46f45e
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46f452
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46f459
and eax, 0xbc614e
jmp 0x46f45c
mov dword [ebp - 0x1c], eax
jmp 0x46f423
mov dword [ebp - 4], 0xfffffffe
call fcn.0046f46c
jmp 0x46f474
mov dword [ebp - 0x28], 0
jmp 0x46f486
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xf
jge 0x46f4c4
cmp dword [ebp - 0x1c], 0
jge 0x46f49a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46f4b0
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46f47d
mov dword [ebp - 4], 1
mov dword [ebp - 0x22c], 0
jmp 0x46f4e6
mov eax, dword [ebp - 0x22c]
add eax, 1
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 7
jge 0x46f52d
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46f503
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46f513
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46f52b
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46f52b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46f4d7
mov dword [ebp - 4], 0xfffffffe
call fcn.0046f53b
jmp 0x46f54a
mov dword [ebp - 0x230], 0
jmp 0x46f565
mov ecx, dword [ebp - 0x230]
add ecx, 1
mov dword [ebp - 0x230], ecx
cmp dword [ebp - 0x230], 5
jge 0x46f57e
mov edx, dword [ebp - 0x230]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46f556
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46f592
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46f5a8
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x234], 0
jmp 0x46f5ca
mov edx, dword [ebp - 0x234]
add edx, 1
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 0xe
jge 0x46f609
mov eax, dword [ebp - 0x234]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46f5f9
mov eax, dword [ebp - 0x234]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46f604
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46f607
mov dword [ebp - 0x1c], eax
jmp 0x46f5bb
mov dword [ebp - 4], 0xfffffffe
call fcn.0046f617
jmp 0x46f61f
mov dword [ebp - 4], 3
mov dword [ebp - 0x238], 0
jmp 0x46f641
mov edx, dword [ebp - 0x238]
add edx, 1
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0x10
jge 0x46f67c
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46f670
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46f677
and eax, 0xbc614e
jmp 0x46f67a
mov dword [ebp - 0x1c], eax
jmp 0x46f632
mov dword [ebp - 4], 0xfffffffe
call fcn.0046f68a
jmp 0x46f692
mov dword [ebp - 0x23c], 0
jmp 0x46f6ad
mov edx, dword [ebp - 0x23c]
add edx, 1
mov dword [ebp - 0x23c], edx
cmp dword [ebp - 0x23c], 5
jge 0x46f6ee
cmp dword [ebp - 0x1c], 0
jge 0x46f6c4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46f6da
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x438]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46f69e
mov dword [ebp - 0x43c], 0
jmp 0x46f709
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 6
jge 0x46f722
mov ecx, dword [ebp - 0x43c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46f6fa
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46f736
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46f74c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 4
mov dword [ebp - 0x440], 0
jmp 0x46f76e
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 0xe
jge 0x46f7a4
mov eax, dword [ebp - 0x440]
and eax, 0x80000001
jns 0x46f789
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46f799
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46f7a2
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46f75f
mov dword [ebp - 4], 0xfffffffe
call fcn.0046f7b2
jmp 0x46f7cf
mov dword [ebp - 0x444], 0
jmp 0x46f7ea
mov edx, dword [ebp - 0x444]
add edx, 1
mov dword [ebp - 0x444], edx
cmp dword [ebp - 0x444], 4
jge 0x46f82b
cmp dword [ebp - 0x1c], 0
jge 0x46f801
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46f817
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x640]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46f7db
mov dword [ebp - 0x644], 0
jmp 0x46f846
mov eax, dword [ebp - 0x644]
add eax, 1
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 0xd
jge 0x46f85f
mov ecx, dword [ebp - 0x644]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46f837
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46f873
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46f889
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x648], 1
mov dword [ebp - 0x64c], 1
mov dword [ebp - 0x650], 2
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x658], 0
jmp 0x46f8cc
mov edx, dword [ebp - 0x658]
add edx, 1
mov dword [ebp - 0x658], edx
cmp dword [ebp - 0x658], 2
jge 0x46f90d
mov eax, dword [ebp - 0x648]
add eax, dword [ebp - 0x64c]
mov dword [ebp - 0x650], eax
mov ecx, dword [ebp - 0x64c]
mov dword [ebp - 0x648], ecx
mov edx, dword [ebp - 0x650]
mov dword [ebp - 0x64c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x650]
mov dword [ebp - 0x1c], eax
jmp 0x46f8bd
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x65c], 0
jmp 0x46f931
mov edx, dword [ebp - 0x65c]
add edx, 1
mov dword [ebp - 0x65c], edx
cmp dword [ebp - 0x65c], 5
jge 0x46f94a
mov eax, dword [ebp - 0x65c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46f922
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46f95e
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46f974
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 5
mov dword [ebp - 0x660], 0
jmp 0x46f996
mov edx, dword [ebp - 0x660]
add edx, 1
mov dword [ebp - 0x660], edx
cmp dword [ebp - 0x660], 0
jge 0x46f9cc
mov eax, dword [ebp - 0x660]
and eax, 0x80000001
jns 0x46f9b1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46f9c1
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46f9ca
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46f987
mov dword [ebp - 4], 0xfffffffe
call fcn.0046f9da
jmp 0x46f9f7
mov dword [ebp - 0x664], 0
jmp 0x46fa12
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x664], edx
cmp dword [ebp - 0x664], 1
jge 0x46fa2b
mov eax, dword [ebp - 0x664]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46fa03
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46fa3f
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46fa55
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 6
mov dword [ebp - 0x668], 0
jmp 0x46fa77
mov edx, dword [ebp - 0x668]
add edx, 1
mov dword [ebp - 0x668], edx
cmp dword [ebp - 0x668], 8
jge 0x46faad
mov eax, dword [ebp - 0x668]
and eax, 0x80000001
jns 0x46fa92
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46faa2
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46faab
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46fa68
mov dword [ebp - 4], 0xfffffffe
call fcn.0046fabb
jmp 0x46fad8
mov dword [ebp - 0x66c], 0
jmp 0x46faf3
mov edx, dword [ebp - 0x66c]
add edx, 1
mov dword [ebp - 0x66c], edx
cmp dword [ebp - 0x66c], 2
jge 0x46fb0c
mov eax, dword [ebp - 0x66c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46fae4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46fb20
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46fb36
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 7
mov dword [ebp - 0x670], 0
jmp 0x46fb58
mov edx, dword [ebp - 0x670]
add edx, 1
mov dword [ebp - 0x670], edx
cmp dword [ebp - 0x670], 8
jge 0x46fb8e
mov eax, dword [ebp - 0x670]
and eax, 0x80000001
jns 0x46fb73
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46fb83
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46fb8c
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46fb49
mov dword [ebp - 4], 0xfffffffe
call fcn.0046fb9c
jmp 0x46fbb9
mov dword [ebp - 4], 8
mov dword [ebp - 0x674], 0
jmp 0x46fbdb
mov edx, dword [ebp - 0x674]
add edx, 1
mov dword [ebp - 0x674], edx
cmp dword [ebp - 0x674], 7
jge 0x46fc1a
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46fc0a
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46fc15
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46fc18
mov dword [ebp - 0x1c], eax
jmp 0x46fbcc
mov dword [ebp - 4], 0xfffffffe
call fcn.0046fc28
jmp 0x46fc30
mov dword [ebp - 0x678], 1
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x680], 2
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x688], 0
jmp 0x46fc73
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 7
jge 0x46fcb4
mov eax, dword [ebp - 0x678]
add eax, dword [ebp - 0x67c]
mov dword [ebp - 0x680], eax
mov ecx, dword [ebp - 0x67c]
mov dword [ebp - 0x678], ecx
mov edx, dword [ebp - 0x680]
mov dword [ebp - 0x67c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x680]
mov dword [ebp - 0x1c], eax
jmp 0x46fc64
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x68c], 0
jmp 0x46fcdf
mov edx, dword [ebp - 0x68c]
add edx, 1
mov dword [ebp - 0x68c], edx
cmp dword [ebp - 0x68c], 7
jge 0x46fd1a
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46fd0e
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46fd15
and eax, 0xbc614e
jmp 0x46fd18
mov dword [ebp - 0x1c], eax
jmp 0x46fcd0
mov dword [ebp - 4], 0xfffffffe
call fcn.0046fd28
jmp 0x46fd30
mov dword [ebp - 0x690], 0
jmp 0x46fd4b
mov edx, dword [ebp - 0x690]
add edx, 1
mov dword [ebp - 0x690], edx
cmp dword [ebp - 0x690], 5
jge 0x46fd64
mov eax, dword [ebp - 0x690]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46fd3c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46fd78
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46fd8e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x694], 0
jmp 0x46fdb0
mov edx, dword [ebp - 0x694]
add edx, 1
mov dword [ebp - 0x694], edx
cmp dword [ebp - 0x694], 8
jge 0x46fdeb
mov eax, dword [ebp - 0x694]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46fddf
mov eax, dword [ebp - 0x694]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46fde6
and eax, 0xbc614e
jmp 0x46fde9
mov dword [ebp - 0x1c], eax
jmp 0x46fda1
mov dword [ebp - 4], 0xfffffffe
call fcn.0046fdf9
jmp 0x46fe01
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x698], 0
jmp 0x46fe23
mov edx, dword [ebp - 0x698]
add edx, 1
mov dword [ebp - 0x698], edx
cmp dword [ebp - 0x698], 1
jge 0x46fe6a
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46fe40
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46fe50
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46fe68
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46fe68
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46fe14
mov dword [ebp - 4], 0xfffffffe
call fcn.0046fe78
jmp 0x46fe87
mov dword [ebp - 0x69c], 1
mov dword [ebp - 0x6a0], 1
mov dword [ebp - 0x6a4], 2
mov dword [ebp - 0x6a8], 0
mov dword [ebp - 0x6ac], 0
jmp 0x46feca
mov ecx, dword [ebp - 0x6ac]
add ecx, 1
mov dword [ebp - 0x6ac], ecx
cmp dword [ebp - 0x6ac], 3
jge 0x46ff0b
mov edx, dword [ebp - 0x69c]
add edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x6a4], edx
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x69c], eax
mov ecx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a0], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6a4]
mov dword [ebp - 0x1c], edx
jmp 0x46febb
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x6b0], 0
jmp 0x46ff36
mov ecx, dword [ebp - 0x6b0]
add ecx, 1
mov dword [ebp - 0x6b0], ecx
cmp dword [ebp - 0x6b0], 4
jge 0x46ff71
mov eax, dword [ebp - 0x6b0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46ff65
mov eax, dword [ebp - 0x6b0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46ff6c
and eax, 0xbc614e
jmp 0x46ff6f
mov dword [ebp - 0x1c], eax
jmp 0x46ff27
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ff7f
jmp 0x46ff87
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x6b4], 0
jmp 0x46ffa9
mov edx, dword [ebp - 0x6b4]
add edx, 1
mov dword [ebp - 0x6b4], edx
cmp dword [ebp - 0x6b4], 2
jge 0x46fff0
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46ffc6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46ffd6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46ffee
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ffee
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46ff9a
mov dword [ebp - 4], 0xfffffffe
call fcn.0046fffe
jmp 0x47000d
mov dword [ebp - 0x6b8], 1
mov dword [ebp - 0x6bc], 1
mov dword [ebp - 0x6c0], 2
mov dword [ebp - 0x6c4], 0
mov dword [ebp - 0x6c8], 0
jmp 0x470050
mov ecx, dword [ebp - 0x6c8]
add ecx, 1
mov dword [ebp - 0x6c8], ecx
cmp dword [ebp - 0x6c8], 1
jge 0x470091
mov edx, dword [ebp - 0x6b8]
add edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], edx
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6b8], eax
mov ecx, dword [ebp - 0x6c0]
mov dword [ebp - 0x6bc], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6c0]
mov dword [ebp - 0x1c], edx
jmp 0x470041
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x6cc], 0
jmp 0x4700bc
mov ecx, dword [ebp - 0x6cc]
add ecx, 1
mov dword [ebp - 0x6cc], ecx
cmp dword [ebp - 0x6cc], 1
jge 0x4700f7
mov eax, dword [ebp - 0x6cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4700eb
mov eax, dword [ebp - 0x6cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4700f2
and eax, 0xbc614e
jmp 0x4700f5
mov dword [ebp - 0x1c], eax
jmp 0x4700ad
mov dword [ebp - 4], 0xfffffffe
call fcn.00470105
jmp 0x47010d
mov dword [ebp - 0x6d0], 0
jmp 0x470128
mov edx, dword [ebp - 0x6d0]
add edx, 1
mov dword [ebp - 0x6d0], edx
cmp dword [ebp - 0x6d0], 2
jge 0x470169
cmp dword [ebp - 0x1c], 0
jge 0x47013f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x470155
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8c8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x470119
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x8cc], 0
jmp 0x47018b
mov eax, dword [ebp - 0x8cc]
add eax, 1
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 2
jge 0x4701c6
mov eax, dword [ebp - 0x8cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4701ba
mov eax, dword [ebp - 0x8cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4701c1
and eax, 0xbc614e
jmp 0x4701c4
mov dword [ebp - 0x1c], eax
jmp 0x47017c
mov dword [ebp - 4], 0xfffffffe
call fcn.004701d4
jmp 0x4701dc
mov dword [ebp - 0x8d0], 0
jmp 0x4701f7
mov edx, dword [ebp - 0x8d0]
add edx, 1
mov dword [ebp - 0x8d0], edx
cmp dword [ebp - 0x8d0], 1
jge 0x470238
cmp dword [ebp - 0x1c], 0
jge 0x47020e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x470224
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xac8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4701e8
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xacc], 0
jmp 0x47025a
mov eax, dword [ebp - 0xacc]
add eax, 1
mov dword [ebp - 0xacc], eax
cmp dword [ebp - 0xacc], 2
jge 0x470291
mov ecx, dword [ebp - 0xacc]
and ecx, 0x80000001
jns 0x470276
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x470286
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x47028f
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x47024b
mov dword [ebp - 4], 0xfffffffe
call fcn.0047029f
jmp 0x4702bd
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xad0], 0
jmp 0x4702df
mov eax, dword [ebp - 0xad0]
add eax, 1
mov dword [ebp - 0xad0], eax
cmp dword [ebp - 0xad0], 4
jge 0x47031a
mov eax, dword [ebp - 0xad0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47030e
mov eax, dword [ebp - 0xad0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470315
and eax, 0xbc614e
jmp 0x470318
mov dword [ebp - 0x1c], eax
jmp 0x4702d0
mov dword [ebp - 4], 0xfffffffe
call fcn.00470328
jmp 0x470330
mov dword [ebp - 0xad4], 1
mov dword [ebp - 0xad8], 1
mov dword [ebp - 0xadc], 2
mov dword [ebp - 0xae0], 0
mov dword [ebp - 0xae4], 0
jmp 0x470373
mov edx, dword [ebp - 0xae4]
add edx, 1
mov dword [ebp - 0xae4], edx
cmp dword [ebp - 0xae4], 3
jge 0x4703b4
mov eax, dword [ebp - 0xad4]
add eax, dword [ebp - 0xad8]
mov dword [ebp - 0xadc], eax
mov ecx, dword [ebp - 0xad8]
mov dword [ebp - 0xad4], ecx
mov edx, dword [ebp - 0xadc]
mov dword [ebp - 0xad8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xadc]
mov dword [ebp - 0x1c], eax
jmp 0x470364
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xae8], 0
jmp 0x4703d8
mov edx, dword [ebp - 0xae8]
add edx, 1
mov dword [ebp - 0xae8], edx
cmp dword [ebp - 0xae8], 4
jge 0x470419
cmp dword [ebp - 0x1c], 0
jge 0x4703ef
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x470405
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xce0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4703c9
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xce4], 0
jmp 0x47043b
mov eax, dword [ebp - 0xce4]
add eax, 1
mov dword [ebp - 0xce4], eax
cmp dword [ebp - 0xce4], 2
jge 0x47047a
mov eax, dword [ebp - 0xce4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47046a
mov eax, dword [ebp - 0xce4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470475
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x470478
mov dword [ebp - 0x1c], eax
jmp 0x47042c
mov dword [ebp - 4], 0xfffffffe
call fcn.00470488
jmp 0x470490
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xce8], 0
jmp 0x4704b2
mov edx, dword [ebp - 0xce8]
add edx, 1
mov dword [ebp - 0xce8], edx
cmp dword [ebp - 0xce8], 4
jge 0x4704f1
mov eax, dword [ebp - 0xce8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4704e1
mov eax, dword [ebp - 0xce8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4704ec
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4704ef
mov dword [ebp - 0x1c], eax
jmp 0x4704a3
mov dword [ebp - 4], 0xfffffffe
call fcn.004704ff
jmp 0x470507
mov dword [ebp - 0xcec], 1
mov dword [ebp - 0xcf0], 1
mov dword [ebp - 0xcf4], 2
mov dword [ebp - 0xcf8], 0
mov dword [ebp - 0xcfc], 0
jmp 0x47054a
mov edx, dword [ebp - 0xcfc]
add edx, 1
mov dword [ebp - 0xcfc], edx
cmp dword [ebp - 0xcfc], 2
jge 0x47058b
mov eax, dword [ebp - 0xcec]
add eax, dword [ebp - 0xcf0]
mov dword [ebp - 0xcf4], eax
mov ecx, dword [ebp - 0xcf0]
mov dword [ebp - 0xcec], ecx
mov edx, dword [ebp - 0xcf4]
mov dword [ebp - 0xcf0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x1c], eax
jmp 0x47053b
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd00], 0
jmp 0x4705af
mov edx, dword [ebp - 0xd00]
add edx, 1
mov dword [ebp - 0xd00], edx
cmp dword [ebp - 0xd00], 4
jge 0x4705c8
mov eax, dword [ebp - 0xd00]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4705a0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4705dc
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4705f2
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xd04], 0
jmp 0x47060d
mov edx, dword [ebp - 0xd04]
add edx, 1
mov dword [ebp - 0xd04], edx
cmp dword [ebp - 0xd04], 0
jge 0x47064e
cmp dword [ebp - 0x1c], 0
jge 0x470624
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47063a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xf00]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4705fe
mov dword [ebp - 0xf04], 0
jmp 0x470669
mov eax, dword [ebp - 0xf04]
add eax, 1
mov dword [ebp - 0xf04], eax
cmp dword [ebp - 0xf04], 0
jge 0x4706aa
cmp dword [ebp - 0x1c], 0
jge 0x470680
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x470696
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1100]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47065a
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x1104], 0
jmp 0x4706cc
cmp dword [ebp - 0x1104], 3
jge 0x470707
mov eax, dword [ebp - 0x1104]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4706fb
mov eax, dword [ebp - 0x1104]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470702
and eax, 0xbc614e
jmp 0x470705
mov dword [ebp - 0x1c], eax
jmp 0x4706bd
mov dword [ebp - 4], 0xfffffffe
call fcn.00470715
jmp 0x47071d
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x1108], 0
jmp 0x47073f
cmp dword [ebp - 0x1108], 1
jge 0x47077e