Function at 0x463900
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b6490
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1604
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x463956
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x21
jge 0x463969
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46394d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46397d
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463993
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x24], 0
jmp 0x4639a5
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x16
jge 0x4639e3
cmp dword [ebp - 0x1c], 0
jge 0x4639b9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4639cf
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46399c
mov dword [ebp - 0x224], 0
jmp 0x4639fe
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x16
jge 0x463a17
mov ecx, dword [ebp - 0x224]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4639ef
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x463a2b
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463a41
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x228], 0
jmp 0x463a63
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0x13
jge 0x463a9e
mov eax, dword [ebp - 0x228]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x463a92
mov eax, dword [ebp - 0x228]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x463a99
and eax, 0xbc614e
jmp 0x463a9c
mov dword [ebp - 0x1c], eax
jmp 0x463a54
mov dword [ebp - 4], 0xfffffffe
call fcn.00463aac
jmp 0x463ab4
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x234], 2
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x23c], 0
jmp 0x463af7
mov edx, dword [ebp - 0x23c]
add edx, 1
mov dword [ebp - 0x23c], edx
cmp dword [ebp - 0x23c], 8
jge 0x463b38
mov eax, dword [ebp - 0x22c]
add eax, dword [ebp - 0x230]
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x230]
mov dword [ebp - 0x22c], ecx
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0x230], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x234]
mov dword [ebp - 0x1c], eax
jmp 0x463ae8
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x240], 0
jmp 0x463b5c
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0xc
jge 0x463b75
mov eax, dword [ebp - 0x240]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x463b4d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x463b89
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463b9f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 1
mov dword [ebp - 0x244], 0
jmp 0x463bc1
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0xa
jge 0x463bf7
mov eax, dword [ebp - 0x244]
and eax, 0x80000001
jns 0x463bdc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x463bec
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x463bf5
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x463bb2
mov dword [ebp - 4], 0xfffffffe
call fcn.00463c05
jmp 0x463c22
mov dword [ebp - 0x248], 0
jmp 0x463c3d
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 6
jge 0x463c56
mov eax, dword [ebp - 0x248]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x463c2e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x463c6a
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463c80
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x24c], 0
jmp 0x463ca2
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 7
jge 0x463ce1
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x463cd1
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x463cdc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x463cdf
mov dword [ebp - 0x1c], eax
jmp 0x463c93
mov dword [ebp - 4], 0xfffffffe
call fcn.00463cef
jmp 0x463cf7
mov dword [ebp - 4], 3
mov dword [ebp - 0x250], 0
jmp 0x463d19
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0xc
jge 0x463d4f
mov eax, dword [ebp - 0x250]
and eax, 0x80000001
jns 0x463d34
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x463d44
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x463d4d
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x463d0a
mov dword [ebp - 4], 0xfffffffe
call fcn.00463d5d
jmp 0x463d7a
mov dword [ebp - 0x254], 0
jmp 0x463d95
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 2
jge 0x463dae
mov eax, dword [ebp - 0x254]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x463d86
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x463dc2
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463dd8
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 4
mov dword [ebp - 0x258], 0
jmp 0x463dfa
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 5
jge 0x463e39
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x463e29
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x463e34
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x463e37
mov dword [ebp - 0x1c], eax
jmp 0x463deb
mov dword [ebp - 4], 0xfffffffe
call fcn.00463e47
jmp 0x463e4f
mov dword [ebp - 4], 5
mov dword [ebp - 0x25c], 0
jmp 0x463e71
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 0xc
jge 0x463eb0
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x463ea0
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x463eab
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x463eae
mov dword [ebp - 0x1c], eax
jmp 0x463e62
mov dword [ebp - 4], 0xfffffffe
call fcn.00463ebe
jmp 0x463ec6
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x270], 0
jmp 0x463f09
mov edx, dword [ebp - 0x270]
add edx, 1
mov dword [ebp - 0x270], edx
cmp dword [ebp - 0x270], 0xc
jge 0x463f4a
mov eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x264]
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp - 0x268]
mov dword [ebp - 0x264], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x268]
mov dword [ebp - 0x1c], eax
jmp 0x463efa
mov ecx, dword [ebp - 0x1c]
add ecx, 0xc
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x27c], 2
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x284], 0
jmp 0x463f96
mov edx, dword [ebp - 0x284]
add edx, 1
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 8
jge 0x463fd7
mov eax, dword [ebp - 0x274]
add eax, dword [ebp - 0x278]
mov dword [ebp - 0x27c], eax
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x274], ecx
mov edx, dword [ebp - 0x27c]
mov dword [ebp - 0x278], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x27c]
mov dword [ebp - 0x1c], eax
jmp 0x463f87
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x288], 0
jmp 0x464002
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 4
jge 0x464041
mov eax, dword [ebp - 0x288]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464031
mov eax, dword [ebp - 0x288]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46403c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46403f
mov dword [ebp - 0x1c], eax
jmp 0x463ff3
mov dword [ebp - 4], 0xfffffffe
call fcn.0046404f
jmp 0x464057
mov dword [ebp - 0x28c], 0
jmp 0x464072
mov edx, dword [ebp - 0x28c]
add edx, 1
mov dword [ebp - 0x28c], edx
cmp dword [ebp - 0x28c], 1
jge 0x4640b3
cmp dword [ebp - 0x1c], 0
jge 0x464089
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46409f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x488]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x464063
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x490], 1
mov dword [ebp - 0x494], 2
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x49c], 0
jmp 0x4640f6
mov eax, dword [ebp - 0x49c]
add eax, 1
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 0
jge 0x464137
mov ecx, dword [ebp - 0x48c]
add ecx, dword [ebp - 0x490]
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x490]
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x490], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x494]
mov dword [ebp - 0x1c], ecx
jmp 0x4640e7
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 7
mov dword [ebp - 0x4a0], 0
jmp 0x46415f
mov eax, dword [ebp - 0x4a0]
add eax, 1
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x4a0], 4
jge 0x46419e
mov eax, dword [ebp - 0x4a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46418e
mov eax, dword [ebp - 0x4a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464199
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46419c
mov dword [ebp - 0x1c], eax
jmp 0x464150
mov dword [ebp - 4], 0xfffffffe
call fcn.004641ac
jmp 0x4641b4
mov dword [ebp - 4], 8
mov dword [ebp - 0x4a4], 0
jmp 0x4641d6
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
cmp dword [ebp - 0x4a4], 5
jge 0x46420c
mov eax, dword [ebp - 0x4a4]
and eax, 0x80000001
jns 0x4641f1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x464201
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46420a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4641c7
mov dword [ebp - 4], 0xfffffffe
call fcn.0046421a
jmp 0x464237
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 0x4ac], 1
mov dword [ebp - 0x4b0], 2
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4b8], 0
jmp 0x46427a
mov edx, dword [ebp - 0x4b8]
add edx, 1
mov dword [ebp - 0x4b8], edx
cmp dword [ebp - 0x4b8], 1
jge 0x4642bb
mov eax, dword [ebp - 0x4a8]
add eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x4b0], eax
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp - 0x4a8], ecx
mov edx, dword [ebp - 0x4b0]
mov dword [ebp - 0x4ac], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x1c], eax
jmp 0x46426b
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x4bc], 0
jmp 0x4642e6
mov edx, dword [ebp - 0x4bc]
add edx, 1
mov dword [ebp - 0x4bc], edx
cmp dword [ebp - 0x4bc], 7
jge 0x464325
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464315
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464320
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464323
mov dword [ebp - 0x1c], eax
jmp 0x4642d7
mov dword [ebp - 4], 0xfffffffe
call fcn.00464333
jmp 0x46433b
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x4c0], 0
jmp 0x46435d
mov edx, dword [ebp - 0x4c0]
add edx, 1
mov dword [ebp - 0x4c0], edx
cmp dword [ebp - 0x4c0], 8
jge 0x46439c
mov eax, dword [ebp - 0x4c0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46438c
mov eax, dword [ebp - 0x4c0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464397
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46439a
mov dword [ebp - 0x1c], eax
jmp 0x46434e
mov dword [ebp - 4], 0xfffffffe
call fcn.004643aa
jmp 0x4643b2
mov dword [ebp - 0x4c4], 1
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x4cc], 2
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x4d4], 0
jmp 0x4643f5
mov edx, dword [ebp - 0x4d4]
add edx, 1
mov dword [ebp - 0x4d4], edx
cmp dword [ebp - 0x4d4], 6
jge 0x464436
mov eax, dword [ebp - 0x4c4]
add eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x4cc], eax
mov ecx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4c4], ecx
mov edx, dword [ebp - 0x4cc]
mov dword [ebp - 0x4c8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x1c], eax
jmp 0x4643e6
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4d8], 1
mov dword [ebp - 0x4dc], 1
mov dword [ebp - 0x4e0], 2
mov dword [ebp - 0x4e4], 0
mov dword [ebp - 0x4e8], 0
jmp 0x464482
mov edx, dword [ebp - 0x4e8]
add edx, 1
mov dword [ebp - 0x4e8], edx
cmp dword [ebp - 0x4e8], 7
jge 0x4644c3
mov eax, dword [ebp - 0x4d8]
add eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e0], eax
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x4d8], ecx
mov edx, dword [ebp - 0x4e0]
mov dword [ebp - 0x4dc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x1c], eax
jmp 0x464473
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x4ec], 0
jmp 0x4644ee
mov edx, dword [ebp - 0x4ec]
add edx, 1
mov dword [ebp - 0x4ec], edx
cmp dword [ebp - 0x4ec], 2
jge 0x46452d
mov eax, dword [ebp - 0x4ec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46451d
mov eax, dword [ebp - 0x4ec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464528
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46452b
mov dword [ebp - 0x1c], eax
jmp 0x4644df
mov dword [ebp - 4], 0xfffffffe
call fcn.0046453b
jmp 0x464543
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x4f0], 0
jmp 0x464565
mov edx, dword [ebp - 0x4f0]
add edx, 1
mov dword [ebp - 0x4f0], edx
cmp dword [ebp - 0x4f0], 4
jge 0x46459b
mov eax, dword [ebp - 0x4f0]
and eax, 0x80000001
jns 0x464580
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x464590
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x464599
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x464556
mov dword [ebp - 4], 0xfffffffe
call fcn.004645a9
jmp 0x4645c6
mov dword [ebp - 0x4f4], 0
jmp 0x4645e1
mov edx, dword [ebp - 0x4f4]
add edx, 1
mov dword [ebp - 0x4f4], edx
cmp dword [ebp - 0x4f4], 7
jge 0x464622
cmp dword [ebp - 0x1c], 0
jge 0x4645f8
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46460e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6f0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4645d2
mov dword [ebp - 0x6f4], 0
jmp 0x46463d
mov eax, dword [ebp - 0x6f4]
add eax, 1
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 0
jge 0x46467e
cmp dword [ebp - 0x1c], 0
jge 0x464654
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46466a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8f0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46462e
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x8f4], 0
jmp 0x4646a0
mov eax, dword [ebp - 0x8f4]
add eax, 1
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 2
jge 0x4646df
mov eax, dword [ebp - 0x8f4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4646cf
mov eax, dword [ebp - 0x8f4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4646da
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4646dd
mov dword [ebp - 0x1c], eax
jmp 0x464691
mov dword [ebp - 4], 0xfffffffe
call fcn.004646ed
jmp 0x4646f5
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x8f8], 0
jmp 0x464717
mov edx, dword [ebp - 0x8f8]
add edx, 1
mov dword [ebp - 0x8f8], edx
cmp dword [ebp - 0x8f8], 0
jge 0x464756
mov eax, dword [ebp - 0x8f8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464746
mov eax, dword [ebp - 0x8f8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464751
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464754
mov dword [ebp - 0x1c], eax
jmp 0x464708
mov dword [ebp - 4], 0xfffffffe
call fcn.00464764
jmp 0x46476c
mov dword [ebp - 0x8fc], 1
mov dword [ebp - 0x900], 1
mov dword [ebp - 0x904], 2
mov dword [ebp - 0x908], 0
mov dword [ebp - 0x90c], 0
jmp 0x4647af
mov edx, dword [ebp - 0x90c]
add edx, 1
mov dword [ebp - 0x90c], edx
cmp dword [ebp - 0x90c], 1
jge 0x4647f0
mov eax, dword [ebp - 0x8fc]
add eax, dword [ebp - 0x900]
mov dword [ebp - 0x904], eax
mov ecx, dword [ebp - 0x900]
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x904]
mov dword [ebp - 0x900], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x904]
mov dword [ebp - 0x1c], eax
jmp 0x4647a0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x910], 0
jmp 0x46481b
mov edx, dword [ebp - 0x910]
add edx, 1
mov dword [ebp - 0x910], edx
cmp dword [ebp - 0x910], 6
jge 0x464856
mov eax, dword [ebp - 0x910]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46484a
mov eax, dword [ebp - 0x910]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464851
and eax, 0xbc614e
jmp 0x464854
mov dword [ebp - 0x1c], eax
jmp 0x46480c
mov dword [ebp - 4], 0xfffffffe
call fcn.00464864
jmp 0x46486c
mov dword [ebp - 0x914], 1
mov dword [ebp - 0x918], 1
mov dword [ebp - 0x91c], 2
mov dword [ebp - 0x920], 0
mov dword [ebp - 0x924], 0
jmp 0x4648af
mov edx, dword [ebp - 0x924]
add edx, 1
mov dword [ebp - 0x924], edx
cmp dword [ebp - 0x924], 5
jge 0x4648f0
mov eax, dword [ebp - 0x914]
add eax, dword [ebp - 0x918]
mov dword [ebp - 0x91c], eax
mov ecx, dword [ebp - 0x918]
mov dword [ebp - 0x914], ecx
mov edx, dword [ebp - 0x91c]
mov dword [ebp - 0x918], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x91c]
mov dword [ebp - 0x1c], eax
jmp 0x4648a0
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x928], 0
jmp 0x464914
mov edx, dword [ebp - 0x928]
add edx, 1
mov dword [ebp - 0x928], edx
cmp dword [ebp - 0x928], 8
jge 0x46492d
mov eax, dword [ebp - 0x928]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x464905
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x464941
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464957
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x92c], 0
jmp 0x464979
mov edx, dword [ebp - 0x92c]
add edx, 1
mov dword [ebp - 0x92c], edx
cmp dword [ebp - 0x92c], 2
jge 0x4649c0
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x464996
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4649a6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4649be
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4649be
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46496a
mov dword [ebp - 4], 0xfffffffe
call fcn.004649ce
jmp 0x4649dd
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x930], 0
jmp 0x4649ff
mov ecx, dword [ebp - 0x930]
add ecx, 1
mov dword [ebp - 0x930], ecx
cmp dword [ebp - 0x930], 1
jge 0x464a36
mov edx, dword [ebp - 0x930]
and edx, 0x80000001
jns 0x464a1b
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x464a2b
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x464a34
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4649f0
mov dword [ebp - 4], 0xfffffffe
call fcn.00464a44
jmp 0x464a62
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x934], 0
jmp 0x464a84
mov ecx, dword [ebp - 0x934]
add ecx, 1
mov dword [ebp - 0x934], ecx
cmp dword [ebp - 0x934], 3
jge 0x464ac3
mov eax, dword [ebp - 0x934]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464ab3
mov eax, dword [ebp - 0x934]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464abe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464ac1
mov dword [ebp - 0x1c], eax
jmp 0x464a75
mov dword [ebp - 4], 0xfffffffe
call fcn.00464ad1
jmp 0x464ad9
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x938], 0
jmp 0x464afb
mov edx, dword [ebp - 0x938]
add edx, 1
mov dword [ebp - 0x938], edx
cmp dword [ebp - 0x938], 2
jge 0x464b3a
mov eax, dword [ebp - 0x938]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464b2a
mov eax, dword [ebp - 0x938]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464b35
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464b38
mov dword [ebp - 0x1c], eax
jmp 0x464aec
mov dword [ebp - 4], 0xfffffffe
call fcn.00464b48
jmp 0x464b50
mov dword [ebp - 0x93c], 0
jmp 0x464b6b
mov edx, dword [ebp - 0x93c]
add edx, 1
mov dword [ebp - 0x93c], edx
cmp dword [ebp - 0x93c], 0
jge 0x464b84
mov eax, dword [ebp - 0x93c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x464b5c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x464b98
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464bae
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x940], 0
jmp 0x464bd0
mov edx, dword [ebp - 0x940]
add edx, 1
mov dword [ebp - 0x940], edx
cmp dword [ebp - 0x940], 2
jge 0x464c0f
mov eax, dword [ebp - 0x940]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464bff
mov eax, dword [ebp - 0x940]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464c0a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464c0d
mov dword [ebp - 0x1c], eax
jmp 0x464bc1
mov dword [ebp - 4], 0xfffffffe
call fcn.00464c1d
jmp 0x464c25
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x944], 0
jmp 0x464c47
mov edx, dword [ebp - 0x944]
add edx, 1
mov dword [ebp - 0x944], edx
cmp dword [ebp - 0x944], 1
jge 0x464c8e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x464c64
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x464c74
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x464c8c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464c8c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x464c38
mov dword [ebp - 4], 0xfffffffe
call fcn.00464c9c
jmp 0x464cab
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x948], 0
jmp 0x464ccd
mov ecx, dword [ebp - 0x948]
add ecx, 1
mov dword [ebp - 0x948], ecx
cmp dword [ebp - 0x948], 0
jge 0x464d0c
mov eax, dword [ebp - 0x948]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464cfc
mov eax, dword [ebp - 0x948]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464d07
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464d0a
mov dword [ebp - 0x1c], eax
jmp 0x464cbe
mov dword [ebp - 4], 0xfffffffe
call fcn.00464d1a
jmp 0x464d22
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x94c], 0
jmp 0x464d44
mov edx, dword [ebp - 0x94c]
add edx, 1
mov dword [ebp - 0x94c], edx
cmp dword [ebp - 0x94c], 3
jge 0x464d7f
mov eax, dword [ebp - 0x94c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464d73
mov eax, dword [ebp - 0x94c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464d7a
and eax, 0xbc614e
jmp 0x464d7d
mov dword [ebp - 0x1c], eax
jmp 0x464d35
mov dword [ebp - 4], 0xfffffffe
call fcn.00464d8d
jmp 0x464d95
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x950], 0
jmp 0x464db7
cmp dword [ebp - 0x950], 4
jge 0x464dfe
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x464dd4
mov dword [ebp - 4], 0xfffffffe
call fcn.00464e0c
jmp 0x464e1b