Function at 0x469ca0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b6a68
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x153c
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x54], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x469cfd
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x25
jge 0x469d2e
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x469d13
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x469d23
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x469d2c
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x469cf4
mov dword [ebp - 4], 0xfffffffe
call fcn.00469d3c
jmp 0x469d5a
mov dword [ebp - 0x24], 0
jmp 0x469d6c
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xd
jge 0x469d7f
mov ecx, dword [ebp - 0x24]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x469d63
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469d93
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469da9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x469dc2
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x39
jge 0x469e06
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x469ddc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x469dec
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x469e04
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469e04
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x469db9
mov dword [ebp - 4], 0xfffffffe
call fcn.00469e14
jmp 0x469e23
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 0
jmp 0x469e3c
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0x1a
jge 0x469e6e
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x469e62
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x469e69
and eax, 0xbc614e
jmp 0x469e6c
mov dword [ebp - 0x1c], eax
jmp 0x469e33
mov dword [ebp - 4], 0xfffffffe
call fcn.00469e7c
jmp 0x469e84
mov dword [ebp - 4], 3
mov dword [ebp - 0x30], 0
jmp 0x469e9d
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x11
jge 0x469ecf
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x469ec3
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x469eca
and eax, 0xbc614e
jmp 0x469ecd
mov dword [ebp - 0x1c], eax
jmp 0x469e94
mov dword [ebp - 4], 0xfffffffe
call fcn.00469edd
jmp 0x469ee5
mov dword [ebp - 4], 4
mov dword [ebp - 0x34], 0
jmp 0x469efe
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x1a
jge 0x469f42
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x469f18
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x469f28
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x469f40
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469f40
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x469ef5
mov dword [ebp - 4], 0xfffffffe
call fcn.00469f50
jmp 0x469f5f
mov dword [ebp - 4], 5
mov dword [ebp - 0x38], 0
jmp 0x469f78
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 4
jge 0x469faa
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x469f9e
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x469fa5
and eax, 0xbc614e
jmp 0x469fa8
mov dword [ebp - 0x1c], eax
jmp 0x469f6f
mov dword [ebp - 4], 0xfffffffe
call fcn.00469fb8
jmp 0x469fc0
mov dword [ebp - 4], 6
mov dword [ebp - 0x3c], 0
jmp 0x469fd9
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0xe
jge 0x46a00f
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x469fff
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a00a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46a00d
mov dword [ebp - 0x1c], eax
jmp 0x469fd0
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a01d
jmp 0x46a025
mov dword [ebp - 4], 7
mov dword [ebp - 0x40], 0
jmp 0x46a03e
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xd
jge 0x46a082
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46a058
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a068
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46a080
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a080
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a035
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a090
jmp 0x46a09f
mov dword [ebp - 4], 8
mov dword [ebp - 0x44], 0
jmp 0x46a0b8
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0xd
jge 0x46a0fc
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46a0d2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a0e2
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a0fa
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a0fa
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a0af
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a10a
jmp 0x46a119
mov dword [ebp - 4], 9
mov dword [ebp - 0x48], 0
jmp 0x46a132
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 1
jge 0x46a168
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a158
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a163
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46a166
mov dword [ebp - 0x1c], eax
jmp 0x46a129
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a176
jmp 0x46a17e
mov dword [ebp - 0x4c], 0
jmp 0x46a190
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0xf
jge 0x46a1a3
mov eax, dword [ebp - 0x4c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46a187
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46a1b7
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a1cd
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x50], 0
jmp 0x46a1df
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 9
jge 0x46a21d
cmp dword [ebp - 0x1c], 0
jge 0x46a1f3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46a209
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x250]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46a1d6
mov dword [ebp - 0x254], 0
jmp 0x46a238
mov eax, dword [ebp - 0x254]
add eax, 1
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x46a279
cmp dword [ebp - 0x1c], 0
jge 0x46a24f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46a265
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x450]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46a229
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x454], 0
jmp 0x46a29b
mov eax, dword [ebp - 0x454]
add eax, 1
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0xf
jge 0x46a2e2
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46a2b8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a2c8
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46a2e0
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a2e0
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a28c
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a2f0
jmp 0x46a2ff
mov dword [ebp - 0x458], 0
jmp 0x46a31a
mov ecx, dword [ebp - 0x458]
add ecx, 1
mov dword [ebp - 0x458], ecx
cmp dword [ebp - 0x458], 0
jge 0x46a333
mov edx, dword [ebp - 0x458]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a30b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46a347
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a35d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x45c], 0
jmp 0x46a37f
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 0xb
jge 0x46a3b5
mov eax, dword [ebp - 0x45c]
and eax, 0x80000001
jns 0x46a39a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a3aa
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46a3b3
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46a370
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a3c3
jmp 0x46a3e0
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x460], 0
jmp 0x46a402
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 7
jge 0x46a438
mov eax, dword [ebp - 0x460]
and eax, 0x80000001
jns 0x46a41d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a42d
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46a436
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46a3f3
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a446
jmp 0x46a463
mov dword [ebp - 0x464], 0
jmp 0x46a47e
mov edx, dword [ebp - 0x464]
add edx, 1
mov dword [ebp - 0x464], edx
cmp dword [ebp - 0x464], 0xe
jge 0x46a4bf
cmp dword [ebp - 0x1c], 0
jge 0x46a495
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46a4ab
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46a46f
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x664], 0
jmp 0x46a4e1
mov eax, dword [ebp - 0x664]
add eax, 1
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 0xb
jge 0x46a520
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a510
mov eax, dword [ebp - 0x664]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a51b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46a51e
mov dword [ebp - 0x1c], eax
jmp 0x46a4d2
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a52e
jmp 0x46a536
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x668], 0
jmp 0x46a558
mov edx, dword [ebp - 0x668]
add edx, 1
mov dword [ebp - 0x668], edx
cmp dword [ebp - 0x668], 0xa
jge 0x46a593
mov eax, dword [ebp - 0x668]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a587
mov eax, dword [ebp - 0x668]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a58e
and eax, 0xbc614e
jmp 0x46a591
mov dword [ebp - 0x1c], eax
jmp 0x46a549
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a5a1
jmp 0x46a5a9
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x66c], 0
jmp 0x46a5cb
mov edx, dword [ebp - 0x66c]
add edx, 1
mov dword [ebp - 0x66c], edx
cmp dword [ebp - 0x66c], 3
jge 0x46a612
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46a5e8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a5f8
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46a610
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a610
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a5bc
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a620
jmp 0x46a62f
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x670], 0
jmp 0x46a651
mov ecx, dword [ebp - 0x670]
add ecx, 1
mov dword [ebp - 0x670], ecx
cmp dword [ebp - 0x670], 1
jge 0x46a698
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46a66e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a67e
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a696
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a696
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a642
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a6a6
jmp 0x46a6b5
mov dword [ebp - 0x674], 0
jmp 0x46a6d0
mov ecx, dword [ebp - 0x674]
add ecx, 1
mov dword [ebp - 0x674], ecx
cmp dword [ebp - 0x674], 1
jge 0x46a711
cmp dword [ebp - 0x1c], 0
jge 0x46a6e7
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46a6fd
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x870]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46a6c1
mov dword [ebp - 0x874], 1
mov dword [ebp - 0x878], 1
mov dword [ebp - 0x87c], 2
mov dword [ebp - 0x880], 0
mov dword [ebp - 0x884], 0
jmp 0x46a754
mov eax, dword [ebp - 0x884]
add eax, 1
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 1
jge 0x46a795
mov ecx, dword [ebp - 0x874]
add ecx, dword [ebp - 0x878]
mov dword [ebp - 0x87c], ecx
mov edx, dword [ebp - 0x878]
mov dword [ebp - 0x874], edx
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x878], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x87c]
mov dword [ebp - 0x1c], ecx
jmp 0x46a745
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x888], 0
jmp 0x46a7c0
mov eax, dword [ebp - 0x888]
add eax, 1
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 1
jge 0x46a7ff
mov eax, dword [ebp - 0x888]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a7ef
mov eax, dword [ebp - 0x888]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a7fa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46a7fd
mov dword [ebp - 0x1c], eax
jmp 0x46a7b1
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a80d
jmp 0x46a815
mov dword [ebp - 0x88c], 0
jmp 0x46a830
mov edx, dword [ebp - 0x88c]
add edx, 1
mov dword [ebp - 0x88c], edx
cmp dword [ebp - 0x88c], 7
jge 0x46a849
mov eax, dword [ebp - 0x88c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46a821
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46a85d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a873
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x890], 0
jmp 0x46a88e
mov edx, dword [ebp - 0x890]
add edx, 1
mov dword [ebp - 0x890], edx
cmp dword [ebp - 0x890], 5
jge 0x46a8cf
cmp dword [ebp - 0x1c], 0
jge 0x46a8a5
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46a8bb
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa88]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46a87f
mov dword [ebp - 0xa8c], 1
mov dword [ebp - 0xa90], 1
mov dword [ebp - 0xa94], 2
mov dword [ebp - 0xa98], 0
mov dword [ebp - 0xa9c], 0
jmp 0x46a912
mov eax, dword [ebp - 0xa9c]
add eax, 1
mov dword [ebp - 0xa9c], eax
cmp dword [ebp - 0xa9c], 8
jge 0x46a953
mov ecx, dword [ebp - 0xa8c]
add ecx, dword [ebp - 0xa90]
mov dword [ebp - 0xa94], ecx
mov edx, dword [ebp - 0xa90]
mov dword [ebp - 0xa8c], edx
mov eax, dword [ebp - 0xa94]
mov dword [ebp - 0xa90], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa94]
mov dword [ebp - 0x1c], ecx
jmp 0x46a903
mov edx, dword [ebp - 0x1c]
add edx, 8
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xaa0], 0
jmp 0x46a97e
mov eax, dword [ebp - 0xaa0]
add eax, 1
mov dword [ebp - 0xaa0], eax
cmp dword [ebp - 0xaa0], 3
jge 0x46a9c5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46a99b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a9ab
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x46a9c3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a9c3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a96f
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a9d3
jmp 0x46a9e2
mov dword [ebp - 0xaa4], 0
jmp 0x46a9fd
mov ecx, dword [ebp - 0xaa4]
add ecx, 1
mov dword [ebp - 0xaa4], ecx
cmp dword [ebp - 0xaa4], 2
jge 0x46aa16
mov edx, dword [ebp - 0xaa4]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46a9ee
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46aa2a
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46aa40
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xaa8], 0
jmp 0x46aa62
mov edx, dword [ebp - 0xaa8]
add edx, 1
mov dword [ebp - 0xaa8], edx
cmp dword [ebp - 0xaa8], 1
jge 0x46aa9d
mov eax, dword [ebp - 0xaa8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46aa91
mov eax, dword [ebp - 0xaa8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46aa98
and eax, 0xbc614e
jmp 0x46aa9b
mov dword [ebp - 0x1c], eax
jmp 0x46aa53
mov dword [ebp - 4], 0xfffffffe
call fcn.0046aaab
jmp 0x46aab3
mov dword [ebp - 0xaac], 1
mov dword [ebp - 0xab0], 1
mov dword [ebp - 0xab4], 2
mov dword [ebp - 0xab8], 0
mov dword [ebp - 0xabc], 0
jmp 0x46aaf6
mov edx, dword [ebp - 0xabc]
add edx, 1
mov dword [ebp - 0xabc], edx
cmp dword [ebp - 0xabc], 3
jge 0x46ab37
mov eax, dword [ebp - 0xaac]
add eax, dword [ebp - 0xab0]
mov dword [ebp - 0xab4], eax
mov ecx, dword [ebp - 0xab0]
mov dword [ebp - 0xaac], ecx
mov edx, dword [ebp - 0xab4]
mov dword [ebp - 0xab0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xab4]
mov dword [ebp - 0x1c], eax
jmp 0x46aae7
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xac0], 0
jmp 0x46ab62
mov edx, dword [ebp - 0xac0]
add edx, 1
mov dword [ebp - 0xac0], edx
cmp dword [ebp - 0xac0], 0
jge 0x46ab9d
mov eax, dword [ebp - 0xac0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46ab91
mov eax, dword [ebp - 0xac0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46ab98
and eax, 0xbc614e
jmp 0x46ab9b
mov dword [ebp - 0x1c], eax
jmp 0x46ab53
mov dword [ebp - 4], 0xfffffffe
call fcn.0046abab
jmp 0x46abb3
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xac4], 0
jmp 0x46abd5
mov edx, dword [ebp - 0xac4]
add edx, 1
mov dword [ebp - 0xac4], edx
cmp dword [ebp - 0xac4], 2
jge 0x46ac1c
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x46abf2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46ac02
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46ac1a
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ac1a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x46abc6
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ac2a
jmp 0x46ac39
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xac8], 0
jmp 0x46ac5b
mov ecx, dword [ebp - 0xac8]
add ecx, 1
mov dword [ebp - 0xac8], ecx
cmp dword [ebp - 0xac8], 2
jge 0x46ac96
mov eax, dword [ebp - 0xac8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46ac8a
mov eax, dword [ebp - 0xac8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46ac91
and eax, 0xbc614e
jmp 0x46ac94
mov dword [ebp - 0x1c], eax
jmp 0x46ac4c
mov dword [ebp - 4], 0xfffffffe
call fcn.0046aca4
jmp 0x46acac
mov dword [ebp - 0xacc], 0
jmp 0x46acc7
mov edx, dword [ebp - 0xacc]
add edx, 1
mov dword [ebp - 0xacc], edx
cmp dword [ebp - 0xacc], 0
jge 0x46ace0
mov eax, dword [ebp - 0xacc]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x46acb8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46acf4
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ad0a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xad0], 0
jmp 0x46ad25
mov edx, dword [ebp - 0xad0]
add edx, 1
mov dword [ebp - 0xad0], edx
cmp dword [ebp - 0xad0], 4
jge 0x46ad66
cmp dword [ebp - 0x1c], 0
jge 0x46ad3c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46ad52
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xcc8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46ad16
mov dword [ebp - 0xccc], 0
jmp 0x46ad81
mov eax, dword [ebp - 0xccc]
add eax, 1
mov dword [ebp - 0xccc], eax
cmp dword [ebp - 0xccc], 2
jge 0x46adc2
cmp dword [ebp - 0x1c], 0
jge 0x46ad98
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46adae
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xec8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46ad72
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xecc], 0
jmp 0x46ade4
mov eax, dword [ebp - 0xecc]
add eax, 1
mov dword [ebp - 0xecc], eax
cmp dword [ebp - 0xecc], 3
jge 0x46ae1b
mov ecx, dword [ebp - 0xecc]
and ecx, 0x80000001
jns 0x46ae00
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46ae10
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46ae19
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x46add5
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ae29
jmp 0x46ae47
mov dword [ebp - 0xed0], 1
mov dword [ebp - 0xed4], 1
mov dword [ebp - 0xed8], 2
mov dword [ebp - 0xedc], 0
mov dword [ebp - 0xee0], 0
jmp 0x46ae8a
mov eax, dword [ebp - 0xee0]
add eax, 1
mov dword [ebp - 0xee0], eax
cmp dword [ebp - 0xee0], 2
jge 0x46aecb
mov ecx, dword [ebp - 0xed0]
add ecx, dword [ebp - 0xed4]
mov dword [ebp - 0xed8], ecx
mov edx, dword [ebp - 0xed4]
mov dword [ebp - 0xed0], edx
mov eax, dword [ebp - 0xed8]
mov dword [ebp - 0xed4], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xed8]
mov dword [ebp - 0x1c], ecx
jmp 0x46ae7b
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0xee4], 0
jmp 0x46aeef
mov eax, dword [ebp - 0xee4]
add eax, 1
mov dword [ebp - 0xee4], eax
cmp dword [ebp - 0xee4], 1
jge 0x46af30
cmp dword [ebp - 0x1c], 0
jge 0x46af06
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46af1c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10e0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x46aee0
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x10e4], 0
jmp 0x46af52
mov eax, dword [ebp - 0x10e4]
add eax, 1
mov dword [ebp - 0x10e4], eax
cmp dword [ebp - 0x10e4], 4
jge 0x46af89
mov ecx, dword [ebp - 0x10e4]
and ecx, 0x80000001
jns 0x46af6e
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46af7e
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46af87
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x46af43
mov dword [ebp - 4], 0xfffffffe
call fcn.0046af97
jmp 0x46afb5
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x10e8], 0
jmp 0x46afd7
mov eax, dword [ebp - 0x10e8]
add eax, 1
mov dword [ebp - 0x10e8], eax
cmp dword [ebp - 0x10e8], 1
jge 0x46b00e
mov ecx, dword [ebp - 0x10e8]
and ecx, 0x80000001
jns 0x46aff3
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46b003
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x46b00c
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x46afc8
mov dword [ebp - 4], 0xfffffffe
call fcn.0046b01c
jmp 0x46b03a
mov dword [ebp - 0x10ec], 0
jmp 0x46b055
cmp dword [ebp - 0x10ec], 2
jge 0x46b096
cmp dword [ebp - 0x1c], 0
jge 0x46b06c
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x12ec], 0
jmp 0x46b0b8