Function at 0x467c70
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b6890
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff220
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x40], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x467cbf
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xe
jge 0x467cd2
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x467cb6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x467ce6
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467cfc
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x467d2a
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x12
jge 0x467d50
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x467d21
mov ecx, dword [ebp - 0x1c]
add ecx, 0x12
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], 0
jmp 0x467d72
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x12
jge 0x467da2
mov eax, dword [ebp - 0x38]
and eax, 0x80000001
jns 0x467d87
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x467d97
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x467da0
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x467d69
mov dword [ebp - 4], 0xfffffffe
call fcn.00467db0
jmp 0x467dcd
mov dword [ebp - 0x3c], 0
jmp 0x467ddf
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x15
jge 0x467e1d
cmp dword [ebp - 0x1c], 0
jge 0x467df3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x467e09
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x238]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x467dd6
mov dword [ebp - 4], 1
mov dword [ebp - 0x23c], 0
jmp 0x467e3f
mov eax, dword [ebp - 0x23c]
add eax, 1
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x10
jge 0x467e86
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x467e5c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x467e6c
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x467e84
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467e84
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x467e30
mov dword [ebp - 4], 0xfffffffe
call fcn.00467e94
jmp 0x467ea3
mov dword [ebp - 4], 2
mov dword [ebp - 0x240], 0
jmp 0x467ec5
mov ecx, dword [ebp - 0x240]
add ecx, 1
mov dword [ebp - 0x240], ecx
cmp dword [ebp - 0x240], 8
jge 0x467f00
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x467ef4
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x467efb
and eax, 0xbc614e
jmp 0x467efe
mov dword [ebp - 0x1c], eax
jmp 0x467eb6
mov dword [ebp - 4], 0xfffffffe
call fcn.00467f0e
jmp 0x467f16
mov dword [ebp - 0x244], 0
jmp 0x467f31
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0xa
jge 0x467f72
cmp dword [ebp - 0x1c], 0
jge 0x467f48
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x467f5e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x467f22
mov dword [ebp - 4], 3
mov dword [ebp - 0x444], 0
jmp 0x467f94
mov eax, dword [ebp - 0x444]
add eax, 1
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 9
jge 0x467fd3
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x467fc3
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x467fce
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x467fd1
mov dword [ebp - 0x1c], eax
jmp 0x467f85
mov dword [ebp - 4], 0xfffffffe
call fcn.00467fe1
jmp 0x467fe9
mov dword [ebp - 0x448], 1
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x450], 2
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x458], 0
jmp 0x46802c
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 0x10
jge 0x46806d
mov eax, dword [ebp - 0x448]
add eax, dword [ebp - 0x44c]
mov dword [ebp - 0x450], eax
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x448], ecx
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x44c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x450]
mov dword [ebp - 0x1c], eax
jmp 0x46801d
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x45c], 0
jmp 0x468098
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 0xc
jge 0x4680d3
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4680c7
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4680ce
and eax, 0xbc614e
jmp 0x4680d1
mov dword [ebp - 0x1c], eax
jmp 0x468089
mov dword [ebp - 4], 0xfffffffe
call fcn.004680e1
jmp 0x4680e9
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x468], 2
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x470], 0
jmp 0x46812c
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 5
jge 0x46816d
mov eax, dword [ebp - 0x460]
add eax, dword [ebp - 0x464]
mov dword [ebp - 0x468], eax
mov ecx, dword [ebp - 0x464]
mov dword [ebp - 0x460], ecx
mov edx, dword [ebp - 0x468]
mov dword [ebp - 0x464], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x468]
mov dword [ebp - 0x1c], eax
jmp 0x46811d
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x474], 0
jmp 0x468198
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 0
jge 0x4681d7
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4681c7
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4681d2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4681d5
mov dword [ebp - 0x1c], eax
jmp 0x468189
mov dword [ebp - 4], 0xfffffffe
call fcn.004681e5
jmp 0x4681ed
mov dword [ebp - 0x478], 0
jmp 0x468208
mov edx, dword [ebp - 0x478]
add edx, 1
mov dword [ebp - 0x478], edx
cmp dword [ebp - 0x478], 1
jge 0x468221
mov eax, dword [ebp - 0x478]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4681f9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x468235
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46824b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x47c], 1
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x484], 2
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x48c], 0
jmp 0x46828e
mov edx, dword [ebp - 0x48c]
add edx, 1
mov dword [ebp - 0x48c], edx
cmp dword [ebp - 0x48c], 0xd
jge 0x4682cf
mov eax, dword [ebp - 0x47c]
add eax, dword [ebp - 0x480]
mov dword [ebp - 0x484], eax
mov ecx, dword [ebp - 0x480]
mov dword [ebp - 0x47c], ecx
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x480], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x484]
mov dword [ebp - 0x1c], eax
jmp 0x46827f
mov ecx, dword [ebp - 0x1c]
add ecx, 0xd
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x490], 0
jmp 0x4682fa
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 0xf
jge 0x468339
mov eax, dword [ebp - 0x490]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468329
mov eax, dword [ebp - 0x490]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468334
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468337
mov dword [ebp - 0x1c], eax
jmp 0x4682eb
mov dword [ebp - 4], 0xfffffffe
call fcn.00468347
jmp 0x46834f
mov dword [ebp - 0x494], 1
mov dword [ebp - 0x498], 1
mov dword [ebp - 0x49c], 2
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x4a4], 0
jmp 0x468392
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
cmp dword [ebp - 0x4a4], 6
jge 0x4683d3
mov eax, dword [ebp - 0x494]
add eax, dword [ebp - 0x498]
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x498], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1c], eax
jmp 0x468383
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x4a8], 0
jmp 0x4683fe
mov edx, dword [ebp - 0x4a8]
add edx, 1
mov dword [ebp - 0x4a8], edx
cmp dword [ebp - 0x4a8], 7
jge 0x468434
mov eax, dword [ebp - 0x4a8]
and eax, 0x80000001
jns 0x468419
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468429
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x468432
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4683ef
mov dword [ebp - 4], 0xfffffffe
call fcn.00468442
jmp 0x46845f
mov dword [ebp - 0x4ac], 0
jmp 0x46847a
mov edx, dword [ebp - 0x4ac]
add edx, 1
mov dword [ebp - 0x4ac], edx
cmp dword [ebp - 0x4ac], 8
jge 0x468493
mov eax, dword [ebp - 0x4ac]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46846b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4684a7
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4684bd
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x4b0], 0
jmp 0x4684df
mov edx, dword [ebp - 0x4b0]
add edx, 1
mov dword [ebp - 0x4b0], edx
cmp dword [ebp - 0x4b0], 2
jge 0x46851e
mov eax, dword [ebp - 0x4b0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46850e
mov eax, dword [ebp - 0x4b0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468519
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46851c
mov dword [ebp - 0x1c], eax
jmp 0x4684d0
mov dword [ebp - 4], 0xfffffffe
call fcn.0046852c
jmp 0x468534
mov dword [ebp - 4], 9
mov dword [ebp - 0x4b4], 0
jmp 0x468556
mov edx, dword [ebp - 0x4b4]
add edx, 1
mov dword [ebp - 0x4b4], edx
cmp dword [ebp - 0x4b4], 8
jge 0x468591
mov eax, dword [ebp - 0x4b4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468585
mov eax, dword [ebp - 0x4b4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46858c
and eax, 0xbc614e
jmp 0x46858f
mov dword [ebp - 0x1c], eax
jmp 0x468547
mov dword [ebp - 4], 0xfffffffe
call fcn.0046859f
jmp 0x4685a7
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x4b8], 0
jmp 0x4685c9
mov edx, dword [ebp - 0x4b8]
add edx, 1
mov dword [ebp - 0x4b8], edx
cmp dword [ebp - 0x4b8], 3
jge 0x468604
mov eax, dword [ebp - 0x4b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4685f8
mov eax, dword [ebp - 0x4b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4685ff
and eax, 0xbc614e
jmp 0x468602
mov dword [ebp - 0x1c], eax
jmp 0x4685ba
mov dword [ebp - 4], 0xfffffffe
call fcn.00468612
jmp 0x46861a
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x4bc], 0
jmp 0x46863c
mov edx, dword [ebp - 0x4bc]
add edx, 1
mov dword [ebp - 0x4bc], edx
cmp dword [ebp - 0x4bc], 8
jge 0x468677
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46866b
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468672
and eax, 0xbc614e
jmp 0x468675
mov dword [ebp - 0x1c], eax
jmp 0x46862d
mov dword [ebp - 4], 0xfffffffe
call fcn.00468685
jmp 0x46868d
mov dword [ebp - 0x4c0], 1
mov dword [ebp - 0x4c4], 1
mov dword [ebp - 0x4c8], 2
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4d0], 0
jmp 0x4686d0
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
cmp dword [ebp - 0x4d0], 2
jge 0x468711
mov eax, dword [ebp - 0x4c0]
add eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x4c8], eax
mov ecx, dword [ebp - 0x4c4]
mov dword [ebp - 0x4c0], ecx
mov edx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x1c], eax
jmp 0x4686c1
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4d4], 0
jmp 0x468735
mov edx, dword [ebp - 0x4d4]
add edx, 1
mov dword [ebp - 0x4d4], edx
cmp dword [ebp - 0x4d4], 0
jge 0x46874e
mov eax, dword [ebp - 0x4d4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x468726
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x468762
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468778
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x4d8], 0
jmp 0x468793
mov edx, dword [ebp - 0x4d8]
add edx, 1
mov dword [ebp - 0x4d8], edx
cmp dword [ebp - 0x4d8], 2
jge 0x4687d4
cmp dword [ebp - 0x1c], 0
jge 0x4687aa
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4687c0
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6d0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x468784
mov dword [ebp - 0x6d4], 0
jmp 0x4687ef
mov eax, dword [ebp - 0x6d4]
add eax, 1
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 8
jge 0x468808
mov ecx, dword [ebp - 0x6d4]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4687e0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46881c
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468832
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x6d8], 0
jmp 0x468854
mov edx, dword [ebp - 0x6d8]
add edx, 1
mov dword [ebp - 0x6d8], edx
cmp dword [ebp - 0x6d8], 2
jge 0x46888a
mov eax, dword [ebp - 0x6d8]
and eax, 0x80000001
jns 0x46886f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46887f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x468888
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x468845
mov dword [ebp - 4], 0xfffffffe
call fcn.00468898
jmp 0x4688b5
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x6dc], 0
jmp 0x4688d7
mov edx, dword [ebp - 0x6dc]
add edx, 1
mov dword [ebp - 0x6dc], edx
cmp dword [ebp - 0x6dc], 4
jge 0x46890d
mov eax, dword [ebp - 0x6dc]
and eax, 0x80000001
jns 0x4688f2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468902
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46890b
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4688c8
mov dword [ebp - 4], 0xfffffffe
call fcn.0046891b
jmp 0x468938
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x6e0], 0
jmp 0x46895a
mov edx, dword [ebp - 0x6e0]
add edx, 1
mov dword [ebp - 0x6e0], edx
cmp dword [ebp - 0x6e0], 2
jge 0x4689a1
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x468977
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468987
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46899f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46899f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46894b
mov dword [ebp - 4], 0xfffffffe
call fcn.004689af
jmp 0x4689be
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x6e4], 0
jmp 0x4689e0
mov ecx, dword [ebp - 0x6e4]
add ecx, 1
mov dword [ebp - 0x6e4], ecx
cmp dword [ebp - 0x6e4], 5
jge 0x468a27
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4689fd
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468a0d
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x468a25
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468a25
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4689d1
mov dword [ebp - 4], 0xfffffffe
call fcn.00468a35
jmp 0x468a44
mov dword [ebp - 0x6e8], 1
mov dword [ebp - 0x6ec], 1
mov dword [ebp - 0x6f0], 2
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 0x6f8], 0
jmp 0x468a87
mov ecx, dword [ebp - 0x6f8]
add ecx, 1
mov dword [ebp - 0x6f8], ecx
cmp dword [ebp - 0x6f8], 2
jge 0x468ac8
mov edx, dword [ebp - 0x6e8]
add edx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f0], edx
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6f0]
mov dword [ebp - 0x6ec], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6f0]
mov dword [ebp - 0x1c], edx
jmp 0x468a78
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6fc], 0
jmp 0x468aec
mov ecx, dword [ebp - 0x6fc]
add ecx, 1
mov dword [ebp - 0x6fc], ecx
cmp dword [ebp - 0x6fc], 0
jge 0x468b05
mov edx, dword [ebp - 0x6fc]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x468add
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x468b19
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468b2f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x700], 0
jmp 0x468b51
mov edx, dword [ebp - 0x700]
add edx, 1
mov dword [ebp - 0x700], edx
cmp dword [ebp - 0x700], 7
jge 0x468b90
mov eax, dword [ebp - 0x700]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468b80
mov eax, dword [ebp - 0x700]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468b8b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468b8e
mov dword [ebp - 0x1c], eax
jmp 0x468b42
mov dword [ebp - 4], 0xfffffffe
call fcn.00468b9e
jmp 0x468ba6
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x704], 0
jmp 0x468bc8
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
cmp dword [ebp - 0x704], 7
jge 0x468bfe
mov eax, dword [ebp - 0x704]
and eax, 0x80000001
jns 0x468be3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468bf3
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x468bfc
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x468bb9
mov dword [ebp - 4], 0xfffffffe
call fcn.00468c0c
jmp 0x468c29
mov dword [ebp - 0x708], 1
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0x710], 2
mov dword [ebp - 0x714], 0
mov dword [ebp - 0x718], 0
jmp 0x468c6c
mov edx, dword [ebp - 0x718]
add edx, 1
mov dword [ebp - 0x718], edx
cmp dword [ebp - 0x718], 6
jge 0x468cad
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x70c]
mov dword [ebp - 0x710], eax
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x710]
mov dword [ebp - 0x70c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x710]
mov dword [ebp - 0x1c], eax
jmp 0x468c5d
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x71c], 0
jmp 0x468cd8
mov edx, dword [ebp - 0x71c]
add edx, 1
mov dword [ebp - 0x71c], edx
cmp dword [ebp - 0x71c], 8
jge 0x468d17
mov eax, dword [ebp - 0x71c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468d07
mov eax, dword [ebp - 0x71c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468d12
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468d15
mov dword [ebp - 0x1c], eax
jmp 0x468cc9
mov dword [ebp - 4], 0xfffffffe
call fcn.00468d25
jmp 0x468d2d
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x720], 0
jmp 0x468d4f
mov edx, dword [ebp - 0x720]
add edx, 1
mov dword [ebp - 0x720], edx
cmp dword [ebp - 0x720], 8
jge 0x468d8a
mov eax, dword [ebp - 0x720]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468d7e
mov eax, dword [ebp - 0x720]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468d85
and eax, 0xbc614e
jmp 0x468d88
mov dword [ebp - 0x1c], eax
jmp 0x468d40
mov dword [ebp - 4], 0xfffffffe
call fcn.00468d98
jmp 0x468da0
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x724], 0
jmp 0x468dc2
mov edx, dword [ebp - 0x724]
add edx, 1
mov dword [ebp - 0x724], edx
cmp dword [ebp - 0x724], 6
jge 0x468df8
mov eax, dword [ebp - 0x724]
and eax, 0x80000001
jns 0x468ddd
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468ded
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x468df6
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x468db3
mov dword [ebp - 4], 0xfffffffe
call fcn.00468e06
jmp 0x468e23
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x728], 0
jmp 0x468e45
mov edx, dword [ebp - 0x728]
add edx, 1
mov dword [ebp - 0x728], edx
cmp dword [ebp - 0x728], 6
jge 0x468e7b
mov eax, dword [ebp - 0x728]
and eax, 0x80000001
jns 0x468e60
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468e70
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x468e79
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x468e36
mov dword [ebp - 4], 0xfffffffe
call fcn.00468e89
jmp 0x468ea6
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x72c], 0
jmp 0x468ec8
mov edx, dword [ebp - 0x72c]
add edx, 1
mov dword [ebp - 0x72c], edx
cmp dword [ebp - 0x72c], 5
jge 0x468f07
mov eax, dword [ebp - 0x72c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468ef7
mov eax, dword [ebp - 0x72c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468f02
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468f05
mov dword [ebp - 0x1c], eax
jmp 0x468eb9
mov dword [ebp - 4], 0xfffffffe
call fcn.00468f15
jmp 0x468f1d
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x730], 0
jmp 0x468f3f
mov edx, dword [ebp - 0x730]
add edx, 1
mov dword [ebp - 0x730], edx
cmp dword [ebp - 0x730], 8
jge 0x468f7e
mov eax, dword [ebp - 0x730]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468f6e
mov eax, dword [ebp - 0x730]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468f79
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468f7c
mov dword [ebp - 0x1c], eax
jmp 0x468f30
mov dword [ebp - 4], 0xfffffffe
call fcn.00468f8c
jmp 0x468f94
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x734], 0
jmp 0x468fb6
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
cmp dword [ebp - 0x734], 1
jge 0x468ff1
mov eax, dword [ebp - 0x734]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468fe5
mov eax, dword [ebp - 0x734]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468fec
and eax, 0xbc614e
jmp 0x468fef
mov dword [ebp - 0x1c], eax
jmp 0x468fa7
mov dword [ebp - 4], 0xfffffffe
call fcn.00468fff
jmp 0x469007
mov dword [ebp - 0x738], 1
mov dword [ebp - 0x73c], 1
mov dword [ebp - 0x740], 2
mov dword [ebp - 0x744], 0
mov dword [ebp - 0x748], 0
jmp 0x46904a
mov edx, dword [ebp - 0x748]
add edx, 1
mov dword [ebp - 0x748], edx
cmp dword [ebp - 0x748], 3
jge 0x46908b
mov eax, dword [ebp - 0x738]
add eax, dword [ebp - 0x73c]
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x73c]
mov dword [ebp - 0x738], ecx
mov edx, dword [ebp - 0x740]
mov dword [ebp - 0x73c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x740]
mov dword [ebp - 0x1c], eax
jmp 0x46903b
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x74c], 0
jmp 0x4690b6
mov edx, dword [ebp - 0x74c]
add edx, 1
mov dword [ebp - 0x74c], edx
cmp dword [ebp - 0x74c], 2
jge 0x4690f1
mov eax, dword [ebp - 0x74c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4690e5
mov eax, dword [ebp - 0x74c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4690ec
and eax, 0xbc614e
jmp 0x4690ef
mov dword [ebp - 0x1c], eax
jmp 0x4690a7
mov dword [ebp - 4], 0xfffffffe
call fcn.004690ff
jmp 0x469107
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x750], 0
jmp 0x469129
cmp dword [ebp - 0x750], 1
jge 0x469170
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x469146
mov dword [ebp - 4], 0xfffffffe
call fcn.0046917e
jmp 0x46918d