Function at 0x462660
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b6330
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff328
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x90], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x4626b9
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x32
jge 0x4626ea
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x4626cf
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4626df
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4626e8
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4626b0
mov dword [ebp - 4], 0xfffffffe
call fcn.004626f8
jmp 0x462716
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x46272f
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1e
jge 0x462760
mov ecx, dword [ebp - 0x24]
and ecx, 0x80000001
jns 0x462745
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x462755
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46275e
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x462726
mov dword [ebp - 4], 0xfffffffe
call fcn.0046276e
jmp 0x46278c
mov dword [ebp - 0x28], 0
jmp 0x46279e
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 8
jge 0x4627b1
mov ecx, dword [ebp - 0x28]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x462795
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4627c5
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4627db
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 0
jmp 0x4627f4
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x1e
jge 0x462826
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46281a
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462821
and eax, 0xbc614e
jmp 0x462824
mov dword [ebp - 0x1c], eax
jmp 0x4627eb
mov dword [ebp - 4], 0xfffffffe
call fcn.00462834
jmp 0x46283c
mov dword [ebp - 4], 3
mov dword [ebp - 0x30], 0
jmp 0x462855
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 2
jge 0x46288b
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46287b
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462886
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x462889
mov dword [ebp - 0x1c], eax
jmp 0x46284c
mov dword [ebp - 4], 0xfffffffe
call fcn.00462899
jmp 0x4628a1
mov dword [ebp - 4], 4
mov dword [ebp - 0x34], 0
jmp 0x4628ba
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x17
jge 0x4628ec
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4628e0
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4628e7
and eax, 0xbc614e
jmp 0x4628ea
mov dword [ebp - 0x1c], eax
jmp 0x4628b1
mov dword [ebp - 4], 0xfffffffe
call fcn.004628fa
jmp 0x462902
mov dword [ebp - 0x38], 0
jmp 0x462914
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0xe
jge 0x462927
mov eax, dword [ebp - 0x38]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46290b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46293b
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x462951
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 5
mov dword [ebp - 0x3c], 0
jmp 0x46296a
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 2
jge 0x46299a
mov eax, dword [ebp - 0x3c]
and eax, 0x80000001
jns 0x46297f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46298f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x462998
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x462961
mov dword [ebp - 4], 0xfffffffe
call fcn.004629a8
jmp 0x4629c5
mov dword [ebp - 4], 6
mov dword [ebp - 0x40], 0
jmp 0x4629de
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xb
jge 0x462a14
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462a04
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462a0f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x462a12
mov dword [ebp - 0x1c], eax
jmp 0x4629d5
mov dword [ebp - 4], 0xfffffffe
call fcn.00462a22
jmp 0x462a2a
mov dword [ebp - 4], 7
mov dword [ebp - 0x44], 0
jmp 0x462a43
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0xb
jge 0x462a75
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462a69
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462a70
and eax, 0xbc614e
jmp 0x462a73
mov dword [ebp - 0x1c], eax
jmp 0x462a3a
mov dword [ebp - 4], 0xfffffffe
call fcn.00462a83
jmp 0x462a8b
mov dword [ebp - 4], 8
mov dword [ebp - 0x48], 0
jmp 0x462aa4
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 3
jge 0x462ad4
mov eax, dword [ebp - 0x48]
and eax, 0x80000001
jns 0x462ab9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x462ac9
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x462ad2
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x462a9b
mov dword [ebp - 4], 0xfffffffe
call fcn.00462ae2
jmp 0x462aff
mov dword [ebp - 4], 9
mov dword [ebp - 0x4c], 0
jmp 0x462b18
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 7
jge 0x462b48
mov eax, dword [ebp - 0x4c]
and eax, 0x80000001
jns 0x462b2d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x462b3d
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x462b46
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x462b0f
mov dword [ebp - 4], 0xfffffffe
call fcn.00462b56
jmp 0x462b73
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x50], 0
jmp 0x462b8c
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 7
jge 0x462bc2
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462bb2
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462bbd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x462bc0
mov dword [ebp - 0x1c], eax
jmp 0x462b83
mov dword [ebp - 4], 0xfffffffe
call fcn.00462bd0
jmp 0x462bd8
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x5c], 2
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
jmp 0x462c06
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 0xe
jge 0x462c2c
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
jmp 0x462bfd
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x70], 2
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
jmp 0x462c63
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 8
jge 0x462c89
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c], eax
jmp 0x462c5a
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x7c], 0
jmp 0x462cab
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 5
jge 0x462cef
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x462cc5
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x462cd5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x462ced
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x462ced
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x462ca2
mov dword [ebp - 4], 0xfffffffe
call fcn.00462cfd
jmp 0x462d0c
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x80], 0
jmp 0x462d25
mov ecx, dword [ebp - 0x80]
add ecx, 1
mov dword [ebp - 0x80], ecx
cmp dword [ebp - 0x80], 5
jge 0x462d57
mov eax, dword [ebp - 0x80]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462d4b
mov eax, dword [ebp - 0x80]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462d52
and eax, 0xbc614e
jmp 0x462d55
mov dword [ebp - 0x1c], eax
jmp 0x462d1c
mov dword [ebp - 4], 0xfffffffe
call fcn.00462d65
jmp 0x462d6d
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x84], 0
jmp 0x462d8f
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0xb
jge 0x462dce
mov eax, dword [ebp - 0x84]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462dbe
mov eax, dword [ebp - 0x84]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462dc9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x462dcc
mov dword [ebp - 0x1c], eax
jmp 0x462d80
mov dword [ebp - 4], 0xfffffffe
call fcn.00462ddc
jmp 0x462de4
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x88], 0
jmp 0x462e06
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 5
jge 0x462e45
mov eax, dword [ebp - 0x88]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462e35
mov eax, dword [ebp - 0x88]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462e40
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x462e43
mov dword [ebp - 0x1c], eax
jmp 0x462df7
mov dword [ebp - 4], 0xfffffffe
call fcn.00462e53
jmp 0x462e5b
mov dword [ebp - 0x8c], 0
jmp 0x462e76
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 0xa
jge 0x462eb7
cmp dword [ebp - 0x1c], 0
jge 0x462e8d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x462ea3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x288]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x462e67
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x28c], 0
jmp 0x462ed9
mov eax, dword [ebp - 0x28c]
add eax, 1
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 4
jge 0x462f18
mov eax, dword [ebp - 0x28c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462f08
mov eax, dword [ebp - 0x28c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462f13
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x462f16
mov dword [ebp - 0x1c], eax
jmp 0x462eca
mov dword [ebp - 4], 0xfffffffe
call fcn.00462f26
jmp 0x462f2e
mov dword [ebp - 0x290], 0
jmp 0x462f49
mov edx, dword [ebp - 0x290]
add edx, 1
mov dword [ebp - 0x290], edx
cmp dword [ebp - 0x290], 2
jge 0x462f8a
cmp dword [ebp - 0x1c], 0
jge 0x462f60
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x462f76
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x488]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x462f3a
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x48c], 0
jmp 0x462fac
mov eax, dword [ebp - 0x48c]
add eax, 1
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 8
jge 0x462fe7
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462fdb
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462fe2
and eax, 0xbc614e
jmp 0x462fe5
mov dword [ebp - 0x1c], eax
jmp 0x462f9d
mov dword [ebp - 4], 0xfffffffe
call fcn.00462ff5
jmp 0x462ffd
mov dword [ebp - 0x490], 0
jmp 0x463018
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 4
jge 0x463059
cmp dword [ebp - 0x1c], 0
jge 0x46302f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x463045
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x688]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x463009
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x68c], 0
jmp 0x46307b
mov eax, dword [ebp - 0x68c]
add eax, 1
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 7
jge 0x4630ba
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4630aa
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4630b5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4630b8
mov dword [ebp - 0x1c], eax
jmp 0x46306c
mov dword [ebp - 4], 0xfffffffe
call fcn.004630c8
jmp 0x4630d0
mov dword [ebp - 0x690], 1
mov dword [ebp - 0x694], 1
mov dword [ebp - 0x698], 2
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x6a0], 0
jmp 0x463113
mov edx, dword [ebp - 0x6a0]
add edx, 1
mov dword [ebp - 0x6a0], edx
cmp dword [ebp - 0x6a0], 1
jge 0x463154
mov eax, dword [ebp - 0x690]
add eax, dword [ebp - 0x694]
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x694]
mov dword [ebp - 0x690], ecx
mov edx, dword [ebp - 0x698]
mov dword [ebp - 0x694], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x698]
mov dword [ebp - 0x1c], eax
jmp 0x463104
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x6a4], 0
jmp 0x46317f
mov edx, dword [ebp - 0x6a4]
add edx, 1
mov dword [ebp - 0x6a4], edx
cmp dword [ebp - 0x6a4], 1
jge 0x4631b5
mov eax, dword [ebp - 0x6a4]
and eax, 0x80000001
jns 0x46319a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4631aa
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4631b3
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x463170
mov dword [ebp - 4], 0xfffffffe
call fcn.004631c3
jmp 0x4631e0
mov dword [ebp - 0x6a8], 1
mov dword [ebp - 0x6ac], 1
mov dword [ebp - 0x6b0], 2
mov dword [ebp - 0x6b4], 0
mov dword [ebp - 0x6b8], 0
jmp 0x463223
mov edx, dword [ebp - 0x6b8]
add edx, 1
mov dword [ebp - 0x6b8], edx
cmp dword [ebp - 0x6b8], 8
jge 0x463264
mov eax, dword [ebp - 0x6a8]
add eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x6b0], eax
mov ecx, dword [ebp - 0x6ac]
mov dword [ebp - 0x6a8], ecx
mov edx, dword [ebp - 0x6b0]
mov dword [ebp - 0x6ac], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x1c], eax
jmp 0x463214
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6bc], 1
mov dword [ebp - 0x6c0], 1
mov dword [ebp - 0x6c4], 2
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x6cc], 0
jmp 0x4632b0
mov edx, dword [ebp - 0x6cc]
add edx, 1
mov dword [ebp - 0x6cc], edx
cmp dword [ebp - 0x6cc], 5
jge 0x4632f1
mov eax, dword [ebp - 0x6bc]
add eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6c0]
mov dword [ebp - 0x6bc], ecx
mov edx, dword [ebp - 0x6c4]
mov dword [ebp - 0x6c0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x1c], eax
jmp 0x4632a1
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x6d0], 0
jmp 0x46331c
mov edx, dword [ebp - 0x6d0]
add edx, 1
mov dword [ebp - 0x6d0], edx
cmp dword [ebp - 0x6d0], 7
jge 0x463363
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x463339
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x463349
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x463361
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463361
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46330d
mov dword [ebp - 4], 0xfffffffe
call fcn.00463371
jmp 0x463380
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x6d4], 0
jmp 0x4633a2
mov ecx, dword [ebp - 0x6d4]
add ecx, 1
mov dword [ebp - 0x6d4], ecx
cmp dword [ebp - 0x6d4], 4
jge 0x4633e9
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4633bf
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4633cf
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4633e7
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4633e7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x463393
mov dword [ebp - 4], 0xfffffffe
call fcn.004633f7
jmp 0x463406
mov dword [ebp - 0x6d8], 0
jmp 0x463421
mov ecx, dword [ebp - 0x6d8]
add ecx, 1
mov dword [ebp - 0x6d8], ecx
cmp dword [ebp - 0x6d8], 2
jge 0x46343a
mov edx, dword [ebp - 0x6d8]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x463412
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46344e
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463464
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x6dc], 0
jmp 0x463486
mov edx, dword [ebp - 0x6dc]
add edx, 1
mov dword [ebp - 0x6dc], edx
cmp dword [ebp - 0x6dc], 4
jge 0x4634bc
mov eax, dword [ebp - 0x6dc]
and eax, 0x80000001
jns 0x4634a1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4634b1
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4634ba
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x463477
mov dword [ebp - 4], 0xfffffffe
call fcn.004634ca
jmp 0x4634e7
mov dword [ebp - 0x6e0], 0
jmp 0x463502
mov edx, dword [ebp - 0x6e0]
add edx, 1
mov dword [ebp - 0x6e0], edx
cmp dword [ebp - 0x6e0], 4
jge 0x463543
cmp dword [ebp - 0x1c], 0
jge 0x463519
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46352f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4634f3
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x8dc], 0
jmp 0x463565
mov eax, dword [ebp - 0x8dc]
add eax, 1
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 2
jge 0x4635a4
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x463594
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46359f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4635a2
mov dword [ebp - 0x1c], eax
jmp 0x463556
mov dword [ebp - 4], 0xfffffffe
call fcn.004635b2
jmp 0x4635ba
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x8e0], 0
jmp 0x4635dc
mov edx, dword [ebp - 0x8e0]
add edx, 1
mov dword [ebp - 0x8e0], edx
cmp dword [ebp - 0x8e0], 1
jge 0x463617
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46360b
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x463612
and eax, 0xbc614e
jmp 0x463615
mov dword [ebp - 0x1c], eax
jmp 0x4635cd
mov dword [ebp - 4], 0xfffffffe
call fcn.00463625
jmp 0x46362d
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x8e4], 0
jmp 0x46364f
mov edx, dword [ebp - 0x8e4]
add edx, 1
mov dword [ebp - 0x8e4], edx
cmp dword [ebp - 0x8e4], 3
jge 0x46368a
mov eax, dword [ebp - 0x8e4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46367e
mov eax, dword [ebp - 0x8e4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x463685
and eax, 0xbc614e
jmp 0x463688
mov dword [ebp - 0x1c], eax
jmp 0x463640
mov dword [ebp - 4], 0xfffffffe
call fcn.00463698
jmp 0x4636a0
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x8e8], 0
jmp 0x4636c2
mov edx, dword [ebp - 0x8e8]
add edx, 1
mov dword [ebp - 0x8e8], edx
cmp dword [ebp - 0x8e8], 2
jge 0x463701
mov eax, dword [ebp - 0x8e8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4636f1
mov eax, dword [ebp - 0x8e8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4636fc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4636ff
mov dword [ebp - 0x1c], eax
jmp 0x4636b3
mov dword [ebp - 4], 0xfffffffe
call fcn.0046370f
jmp 0x463717
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x8ec], 0
jmp 0x463739
mov edx, dword [ebp - 0x8ec]
add edx, 1
mov dword [ebp - 0x8ec], edx
cmp dword [ebp - 0x8ec], 3
jge 0x46376f
mov eax, dword [ebp - 0x8ec]
and eax, 0x80000001
jns 0x463754
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x463764
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46376d
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46372a
mov dword [ebp - 4], 0xfffffffe
call fcn.0046377d
jmp 0x46379a
mov dword [ebp - 0x8f0], 0
jmp 0x4637b5
mov edx, dword [ebp - 0x8f0]
add edx, 1
mov dword [ebp - 0x8f0], edx
cmp dword [ebp - 0x8f0], 3
jge 0x4637f6
cmp dword [ebp - 0x1c], 0
jge 0x4637cc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4637e2
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xae8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4637a6
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xaec], 0
jmp 0x463818
mov eax, dword [ebp - 0xaec]
add eax, 1
mov dword [ebp - 0xaec], eax
cmp dword [ebp - 0xaec], 0
jge 0x46385f
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x463835
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x463845
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46385d
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46385d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x463809
mov dword [ebp - 4], 0xfffffffe
call fcn.0046386d
jmp 0x46387c
mov dword [ebp - 0xaf0], 0
jmp 0x463897
mov ecx, dword [ebp - 0xaf0]
add ecx, 1
mov dword [ebp - 0xaf0], ecx
cmp dword [ebp - 0xaf0], 1
jge 0x4638d8
cmp dword [ebp - 0x1c], 0
jge 0x4638ae
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4638c4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xce8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x463888
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x90]
xor ecx, ebp
call fcn.00408023
mov esp, ebp
pop ebp
ret