Function at 0x45f7d0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b6080
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1e74
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x45f826
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x11
jge 0x45f839
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x45f81d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x45f84d
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45f863
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x24], 0
jmp 0x45f875
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 7
jge 0x45f8b3
cmp dword [ebp - 0x1c], 0
jge 0x45f889
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45f89f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x45f86c
mov dword [ebp - 4], 0
mov dword [ebp - 0x224], 0
jmp 0x45f8d5
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0xd
jge 0x45f914
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45f904
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45f90f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x45f912
mov dword [ebp - 0x1c], eax
jmp 0x45f8c6
mov dword [ebp - 4], 0xfffffffe
call fcn.0045f922
jmp 0x45f92a
mov dword [ebp - 4], 1
mov dword [ebp - 0x228], 0
jmp 0x45f94c
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0xe
jge 0x45f982
mov eax, dword [ebp - 0x228]
and eax, 0x80000001
jns 0x45f967
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45f977
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x45f980
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x45f93d
mov dword [ebp - 4], 0xfffffffe
call fcn.0045f990
jmp 0x45f9ad
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x234], 2
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x23c], 0
jmp 0x45f9f0
mov edx, dword [ebp - 0x23c]
add edx, 1
mov dword [ebp - 0x23c], edx
cmp dword [ebp - 0x23c], 0
jge 0x45fa31
mov eax, dword [ebp - 0x22c]
add eax, dword [ebp - 0x230]
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x230]
mov dword [ebp - 0x22c], ecx
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0x230], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x234]
mov dword [ebp - 0x1c], eax
jmp 0x45f9e1
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x248], 2
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x250], 0
jmp 0x45fa7a
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 8
jge 0x45fabb
mov eax, dword [ebp - 0x240]
add eax, dword [ebp - 0x244]
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x240], ecx
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x248]
mov dword [ebp - 0x1c], eax
jmp 0x45fa6b
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x25c], 2
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x264], 0
jmp 0x45fb07
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 0xe
jge 0x45fb48
mov eax, dword [ebp - 0x254]
add eax, dword [ebp - 0x258]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x258]
mov dword [ebp - 0x254], ecx
mov edx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], eax
jmp 0x45faf8
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x278], 0
jmp 0x45fb94
mov edx, dword [ebp - 0x278]
add edx, 1
mov dword [ebp - 0x278], edx
cmp dword [ebp - 0x278], 1
jge 0x45fbd5
mov eax, dword [ebp - 0x268]
add eax, dword [ebp - 0x26c]
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x268], ecx
mov edx, dword [ebp - 0x270]
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x270]
mov dword [ebp - 0x1c], eax
jmp 0x45fb85
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x27c], 0
jmp 0x45fbf9
mov edx, dword [ebp - 0x27c]
add edx, 1
mov dword [ebp - 0x27c], edx
cmp dword [ebp - 0x27c], 0
jge 0x45fc3a
cmp dword [ebp - 0x1c], 0
jge 0x45fc10
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45fc26
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x478]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x45fbea
mov dword [ebp - 4], 2
mov dword [ebp - 0x47c], 0
jmp 0x45fc5c
mov eax, dword [ebp - 0x47c]
add eax, 1
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 8
jge 0x45fc97
mov eax, dword [ebp - 0x47c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45fc8b
mov eax, dword [ebp - 0x47c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45fc92
and eax, 0xbc614e
jmp 0x45fc95
mov dword [ebp - 0x1c], eax
jmp 0x45fc4d
mov dword [ebp - 4], 0xfffffffe
call fcn.0045fca5
jmp 0x45fcad
mov dword [ebp - 0x480], 0
jmp 0x45fcc8
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 8
jge 0x45fd09
cmp dword [ebp - 0x1c], 0
jge 0x45fcdf
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45fcf5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x678]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x45fcb9
mov dword [ebp - 0x67c], 0
jmp 0x45fd24
mov eax, dword [ebp - 0x67c]
add eax, 1
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 0x10
jge 0x45fd65
cmp dword [ebp - 0x1c], 0
jge 0x45fd3b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45fd51
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x878]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x45fd15
mov dword [ebp - 4], 3
mov dword [ebp - 0x87c], 0
jmp 0x45fd87
mov eax, dword [ebp - 0x87c]
add eax, 1
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 2
jge 0x45fdc2
mov eax, dword [ebp - 0x87c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45fdb6
mov eax, dword [ebp - 0x87c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45fdbd
and eax, 0xbc614e
jmp 0x45fdc0
mov dword [ebp - 0x1c], eax
jmp 0x45fd78
mov dword [ebp - 4], 0xfffffffe
call fcn.0045fdd0
jmp 0x45fdd8
mov dword [ebp - 0x880], 1
mov dword [ebp - 0x884], 1
mov dword [ebp - 0x888], 2
mov dword [ebp - 0x88c], 0
mov dword [ebp - 0x890], 0
jmp 0x45fe1b
mov edx, dword [ebp - 0x890]
add edx, 1
mov dword [ebp - 0x890], edx
cmp dword [ebp - 0x890], 0xd
jge 0x45fe5c
mov eax, dword [ebp - 0x880]
add eax, dword [ebp - 0x884]
mov dword [ebp - 0x888], eax
mov ecx, dword [ebp - 0x884]
mov dword [ebp - 0x880], ecx
mov edx, dword [ebp - 0x888]
mov dword [ebp - 0x884], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x888]
mov dword [ebp - 0x1c], eax
jmp 0x45fe0c
mov ecx, dword [ebp - 0x1c]
add ecx, 0xd
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x894], 0
jmp 0x45fe87
mov edx, dword [ebp - 0x894]
add edx, 1
mov dword [ebp - 0x894], edx
cmp dword [ebp - 0x894], 2
jge 0x45fec2
mov eax, dword [ebp - 0x894]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45feb6
mov eax, dword [ebp - 0x894]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45febd
and eax, 0xbc614e
jmp 0x45fec0
mov dword [ebp - 0x1c], eax
jmp 0x45fe78
mov dword [ebp - 4], 0xfffffffe
call fcn.0045fed0
jmp 0x45fed8
mov dword [ebp - 4], 5
mov dword [ebp - 0x898], 0
jmp 0x45fefa
mov edx, dword [ebp - 0x898]
add edx, 1
mov dword [ebp - 0x898], edx
cmp dword [ebp - 0x898], 3
jge 0x45ff41
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x45ff17
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45ff27
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x45ff3f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45ff3f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x45feeb
mov dword [ebp - 4], 0xfffffffe
call fcn.0045ff4f
jmp 0x45ff5e
mov dword [ebp - 4], 6
mov dword [ebp - 0x89c], 0
jmp 0x45ff80
mov ecx, dword [ebp - 0x89c]
add ecx, 1
mov dword [ebp - 0x89c], ecx
cmp dword [ebp - 0x89c], 4
jge 0x45ffbb
mov eax, dword [ebp - 0x89c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45ffaf
mov eax, dword [ebp - 0x89c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45ffb6
and eax, 0xbc614e
jmp 0x45ffb9
mov dword [ebp - 0x1c], eax
jmp 0x45ff71
mov dword [ebp - 4], 0xfffffffe
call fcn.0045ffc9
jmp 0x45ffd1
mov dword [ebp - 4], 7
mov dword [ebp - 0x8a0], 0
jmp 0x45fff3
mov edx, dword [ebp - 0x8a0]
add edx, 1
mov dword [ebp - 0x8a0], edx
cmp dword [ebp - 0x8a0], 1
jge 0x460029
mov eax, dword [ebp - 0x8a0]
and eax, 0x80000001
jns 0x46000e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46001e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x460027
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x45ffe4
mov dword [ebp - 4], 0xfffffffe
call fcn.00460037
jmp 0x460054
mov dword [ebp - 0x8a4], 0
jmp 0x46006f
mov edx, dword [ebp - 0x8a4]
add edx, 1
mov dword [ebp - 0x8a4], edx
cmp dword [ebp - 0x8a4], 8
jge 0x460088
mov eax, dword [ebp - 0x8a4]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x460060
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46009c
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4600b2
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x8a8], 1
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x8b0], 2
mov dword [ebp - 0x8b4], 0
mov dword [ebp - 0x8b8], 0
jmp 0x4600f5
mov edx, dword [ebp - 0x8b8]
add edx, 1
mov dword [ebp - 0x8b8], edx
cmp dword [ebp - 0x8b8], 6
jge 0x460136
mov eax, dword [ebp - 0x8a8]
add eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], eax
mov ecx, dword [ebp - 0x8ac]
mov dword [ebp - 0x8a8], ecx
mov edx, dword [ebp - 0x8b0]
mov dword [ebp - 0x8ac], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x1c], eax
jmp 0x4600e6
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8bc], 1
mov dword [ebp - 0x8c0], 1
mov dword [ebp - 0x8c4], 2
mov dword [ebp - 0x8c8], 0
mov dword [ebp - 0x8cc], 0
jmp 0x460182
mov edx, dword [ebp - 0x8cc]
add edx, 1
mov dword [ebp - 0x8cc], edx
cmp dword [ebp - 0x8cc], 7
jge 0x4601c3
mov eax, dword [ebp - 0x8bc]
add eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp - 0x8bc], ecx
mov edx, dword [ebp - 0x8c4]
mov dword [ebp - 0x8c0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x1c], eax
jmp 0x460173
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x8d0], 0
jmp 0x4601ee
mov edx, dword [ebp - 0x8d0]
add edx, 1
mov dword [ebp - 0x8d0], edx
cmp dword [ebp - 0x8d0], 1
jge 0x46022d
mov eax, dword [ebp - 0x8d0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46021d
mov eax, dword [ebp - 0x8d0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x460228
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46022b
mov dword [ebp - 0x1c], eax
jmp 0x4601df
mov dword [ebp - 4], 0xfffffffe
call fcn.0046023b
jmp 0x460243
mov dword [ebp - 0x8d4], 1
mov dword [ebp - 0x8d8], 1
mov dword [ebp - 0x8dc], 2
mov dword [ebp - 0x8e0], 0
mov dword [ebp - 0x8e4], 0
jmp 0x460286
mov edx, dword [ebp - 0x8e4]
add edx, 1
mov dword [ebp - 0x8e4], edx
cmp dword [ebp - 0x8e4], 2
jge 0x4602c7
mov eax, dword [ebp - 0x8d4]
add eax, dword [ebp - 0x8d8]
mov dword [ebp - 0x8dc], eax
mov ecx, dword [ebp - 0x8d8]
mov dword [ebp - 0x8d4], ecx
mov edx, dword [ebp - 0x8dc]
mov dword [ebp - 0x8d8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x1c], eax
jmp 0x460277
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8e8], 0
jmp 0x4602eb
mov edx, dword [ebp - 0x8e8]
add edx, 1
mov dword [ebp - 0x8e8], edx
cmp dword [ebp - 0x8e8], 4
jge 0x460304
mov eax, dword [ebp - 0x8e8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4602dc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x460318
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46032e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x8ec], 1
mov dword [ebp - 0x8f0], 1
mov dword [ebp - 0x8f4], 2
mov dword [ebp - 0x8f8], 0
mov dword [ebp - 0x8fc], 0
jmp 0x460371
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
cmp dword [ebp - 0x8fc], 8
jge 0x4603b2
mov eax, dword [ebp - 0x8ec]
add eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x8f4], eax
mov ecx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8ec], ecx
mov edx, dword [ebp - 0x8f4]
mov dword [ebp - 0x8f0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x1c], eax
jmp 0x460362
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x900], 0
jmp 0x4603dd
mov edx, dword [ebp - 0x900]
add edx, 1
mov dword [ebp - 0x900], edx
cmp dword [ebp - 0x900], 8
jge 0x460418
mov eax, dword [ebp - 0x900]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46040c
mov eax, dword [ebp - 0x900]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x460413
and eax, 0xbc614e
jmp 0x460416
mov dword [ebp - 0x1c], eax
jmp 0x4603ce
mov dword [ebp - 4], 0xfffffffe
call fcn.00460426
jmp 0x46042e
mov dword [ebp - 0x904], 1
mov dword [ebp - 0x908], 1
mov dword [ebp - 0x90c], 2
mov dword [ebp - 0x910], 0
mov dword [ebp - 0x914], 0
jmp 0x460471
mov edx, dword [ebp - 0x914]
add edx, 1
mov dword [ebp - 0x914], edx
cmp dword [ebp - 0x914], 7
jge 0x4604b2
mov eax, dword [ebp - 0x904]
add eax, dword [ebp - 0x908]
mov dword [ebp - 0x90c], eax
mov ecx, dword [ebp - 0x908]
mov dword [ebp - 0x904], ecx
mov edx, dword [ebp - 0x90c]
mov dword [ebp - 0x908], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x90c]
mov dword [ebp - 0x1c], eax
jmp 0x460462
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x918], 0
jmp 0x4604dd
mov edx, dword [ebp - 0x918]
add edx, 1
mov dword [ebp - 0x918], edx
cmp dword [ebp - 0x918], 2
jge 0x460513
mov eax, dword [ebp - 0x918]
and eax, 0x80000001
jns 0x4604f8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x460508
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x460511
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4604ce
mov dword [ebp - 4], 0xfffffffe
call fcn.00460521
jmp 0x46053e
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x91c], 0
jmp 0x460560
mov edx, dword [ebp - 0x91c]
add edx, 1
mov dword [ebp - 0x91c], edx
cmp dword [ebp - 0x91c], 3
jge 0x4605a7
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46057d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46058d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4605a5
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4605a5
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x460551
mov dword [ebp - 4], 0xfffffffe
call fcn.004605b5
jmp 0x4605c4
mov dword [ebp - 0x920], 0
jmp 0x4605df
mov ecx, dword [ebp - 0x920]
add ecx, 1
mov dword [ebp - 0x920], ecx
cmp dword [ebp - 0x920], 6
jge 0x4605f8
mov edx, dword [ebp - 0x920]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4605d0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46060c
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x460622
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x924], 0
jmp 0x460644
mov edx, dword [ebp - 0x924]
add edx, 1
mov dword [ebp - 0x924], edx
cmp dword [ebp - 0x924], 2
jge 0x46068b
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x460661
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x460671
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x460689
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x460689
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x460635
mov dword [ebp - 4], 0xfffffffe
call fcn.00460699
jmp 0x4606a8
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x928], 0
jmp 0x4606ca
mov ecx, dword [ebp - 0x928]
add ecx, 1
mov dword [ebp - 0x928], ecx
cmp dword [ebp - 0x928], 6
jge 0x460701
mov edx, dword [ebp - 0x928]
and edx, 0x80000001
jns 0x4606e6
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x4606f6
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4606ff
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4606bb
mov dword [ebp - 4], 0xfffffffe
call fcn.0046070f
jmp 0x46072d
mov dword [ebp - 0x92c], 0
jmp 0x460748
mov ecx, dword [ebp - 0x92c]
add ecx, 1
mov dword [ebp - 0x92c], ecx
cmp dword [ebp - 0x92c], 1
jge 0x460789
cmp dword [ebp - 0x1c], 0
jge 0x46075f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x460775
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xb28]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x460739
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xb2c], 0
jmp 0x4607ab
mov eax, dword [ebp - 0xb2c]
add eax, 1
mov dword [ebp - 0xb2c], eax
cmp dword [ebp - 0xb2c], 4
jge 0x4607e6
mov eax, dword [ebp - 0xb2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4607da
mov eax, dword [ebp - 0xb2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4607e1
and eax, 0xbc614e
jmp 0x4607e4
mov dword [ebp - 0x1c], eax
jmp 0x46079c
mov dword [ebp - 4], 0xfffffffe
call fcn.004607f4
jmp 0x4607fc
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xb30], 0
jmp 0x46081e
mov edx, dword [ebp - 0xb30]
add edx, 1
mov dword [ebp - 0xb30], edx
cmp dword [ebp - 0xb30], 6
jge 0x460859
mov eax, dword [ebp - 0xb30]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46084d
mov eax, dword [ebp - 0xb30]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x460854
and eax, 0xbc614e
jmp 0x460857
mov dword [ebp - 0x1c], eax
jmp 0x46080f
mov dword [ebp - 4], 0xfffffffe
call fcn.00460867
jmp 0x46086f
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xb34], 0
jmp 0x460891
mov edx, dword [ebp - 0xb34]
add edx, 1
mov dword [ebp - 0xb34], edx
cmp dword [ebp - 0xb34], 8
jge 0x4608d0
mov eax, dword [ebp - 0xb34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4608c0
mov eax, dword [ebp - 0xb34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4608cb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4608ce
mov dword [ebp - 0x1c], eax
jmp 0x460882
mov dword [ebp - 4], 0xfffffffe
call fcn.004608de
jmp 0x4608e6
mov dword [ebp - 0xb38], 0
jmp 0x460901
mov edx, dword [ebp - 0xb38]
add edx, 1
mov dword [ebp - 0xb38], edx
cmp dword [ebp - 0xb38], 6
jge 0x46091a
mov eax, dword [ebp - 0xb38]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4608f2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46092e
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x460944
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xb3c], 0
jmp 0x46095f
mov edx, dword [ebp - 0xb3c]
add edx, 1
mov dword [ebp - 0xb3c], edx
cmp dword [ebp - 0xb3c], 5
jge 0x4609a0
cmp dword [ebp - 0x1c], 0
jge 0x460976
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46098c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xd38]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x460950
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xd3c], 0
jmp 0x4609c2
mov eax, dword [ebp - 0xd3c]
add eax, 1
mov dword [ebp - 0xd3c], eax
cmp dword [ebp - 0xd3c], 0
jge 0x4609f9
mov ecx, dword [ebp - 0xd3c]
and ecx, 0x80000001
jns 0x4609de
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4609ee
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4609f7
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4609b3
mov dword [ebp - 4], 0xfffffffe
call fcn.00460a07
jmp 0x460a25
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xd40], 0
jmp 0x460a47
mov eax, dword [ebp - 0xd40]
add eax, 1
mov dword [ebp - 0xd40], eax
cmp dword [ebp - 0xd40], 5
jge 0x460a7e
mov ecx, dword [ebp - 0xd40]
and ecx, 0x80000001
jns 0x460a63
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x460a73
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x460a7c
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x460a38
mov dword [ebp - 4], 0xfffffffe
call fcn.00460a8c
jmp 0x460aaa
mov dword [ebp - 0xd44], 1
mov dword [ebp - 0xd48], 1
mov dword [ebp - 0xd4c], 2
mov dword [ebp - 0xd50], 0
mov dword [ebp - 0xd54], 0
jmp 0x460aed
mov eax, dword [ebp - 0xd54]
add eax, 1
mov dword [ebp - 0xd54], eax
cmp dword [ebp - 0xd54], 2
jge 0x460b2e
mov ecx, dword [ebp - 0xd44]
add ecx, dword [ebp - 0xd48]
mov dword [ebp - 0xd4c], ecx
mov edx, dword [ebp - 0xd48]
mov dword [ebp - 0xd44], edx
mov eax, dword [ebp - 0xd4c]
mov dword [ebp - 0xd48], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xd4c]
mov dword [ebp - 0x1c], ecx
jmp 0x460ade
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0xd58], 0
jmp 0x460b52
mov eax, dword [ebp - 0xd58]
add eax, 1
mov dword [ebp - 0xd58], eax
cmp dword [ebp - 0xd58], 0
jge 0x460b93
cmp dword [ebp - 0x1c], 0
jge 0x460b69
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x460b7f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xf50]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x460b43
mov dword [ebp - 0xf54], 0
jmp 0x460bae
mov eax, dword [ebp - 0xf54]
add eax, 1
mov dword [ebp - 0xf54], eax
cmp dword [ebp - 0xf54], 1
jge 0x460bef
cmp dword [ebp - 0x1c], 0
jge 0x460bc5
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x460bdb
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1150]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x460b9f
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x1154], 0
jmp 0x460c11
mov eax, dword [ebp - 0x1154]
add eax, 1
mov dword [ebp - 0x1154], eax
cmp dword [ebp - 0x1154], 8
jge 0x460c50
mov eax, dword [ebp - 0x1154]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x460c40
mov eax, dword [ebp - 0x1154]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x460c4b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x460c4e
mov dword [ebp - 0x1c], eax
jmp 0x460c02
mov dword [ebp - 4], 0xfffffffe
call fcn.00460c5e
jmp 0x460c66
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x1158], 0
jmp 0x460c88
mov edx, dword [ebp - 0x1158]
add edx, 1
mov dword [ebp - 0x1158], edx
cmp dword [ebp - 0x1158], 3
jge 0x460ccf
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x460ca5
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x460cb5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x460ccd
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x460ccd
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x460c79
mov dword [ebp - 4], 0xfffffffe
call fcn.00460cdd
jmp 0x460cec
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x115c], 0
jmp 0x460d0e
mov ecx, dword [ebp - 0x115c]
add ecx, 1
mov dword [ebp - 0x115c], ecx
cmp dword [ebp - 0x115c], 8
jge 0x460d4d
mov eax, dword [ebp - 0x115c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x460d3d
mov eax, dword [ebp - 0x115c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x460d48
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x460d4b
mov dword [ebp - 0x1c], eax
jmp 0x460cff
mov dword [ebp - 4], 0xfffffffe
call fcn.00460d5b
jmp 0x460d63
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x1160], 0
jmp 0x460d85
cmp dword [ebp - 0x1160], 0
jge 0x460dbb
mov eax, dword [ebp - 0x1160]
and eax, 0x80000001
jns 0x460da0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x460db0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x460db9
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x460d76
mov dword [ebp - 4], 0xfffffffe
call fcn.00460dc9
jmp 0x460de6
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x1164], 0
jmp 0x460e08
cmp dword [ebp - 0x1164], 4
jge 0x460e43