Function at 0x456ab0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b5790
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x17e4
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x44], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x456b06
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x31
jge 0x456b19
mov ecx, dword [ebp - 0x20]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x456afd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x456b2d
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x456b43
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x456b5c
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x23
jge 0x456b8c
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x456b71
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x456b81
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x456b8a
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x456b53
mov dword [ebp - 4], 0xfffffffe
call fcn.00456b9a
jmp 0x456bb7
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
jmp 0x456be5
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x1b
jge 0x456c0b
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x456bdc
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1b
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x3c], 0
jmp 0x456c2d
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x10
jge 0x456c71
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x456c47
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x456c57
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x456c6f
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x456c6f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x456c24
mov dword [ebp - 4], 0xfffffffe
call fcn.00456c7f
jmp 0x456c8e
mov dword [ebp - 0x40], 0
jmp 0x456ca0
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 8
jge 0x456cde
cmp dword [ebp - 0x1c], 0
jge 0x456cb4
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x456cca
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x456c97
mov dword [ebp - 0x244], 0
jmp 0x456cf9
mov eax, dword [ebp - 0x244]
add eax, 1
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 4
jge 0x456d3a
cmp dword [ebp - 0x1c], 0
jge 0x456d10
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x456d26
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x456cea
mov dword [ebp - 4], 2
mov dword [ebp - 0x444], 0
jmp 0x456d5c
mov eax, dword [ebp - 0x444]
add eax, 1
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 7
jge 0x456d9b
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x456d8b
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x456d96
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x456d99
mov dword [ebp - 0x1c], eax
jmp 0x456d4d
mov dword [ebp - 4], 0xfffffffe
call fcn.00456da9
jmp 0x456db1
mov dword [ebp - 0x448], 0
jmp 0x456dcc
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 0
jge 0x456de5
mov eax, dword [ebp - 0x448]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x456dbd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x456df9
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x456e0f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x44c], 0
jmp 0x456e2a
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 0xd
jge 0x456e43
mov eax, dword [ebp - 0x44c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x456e1b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x456e57
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x456e6d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 3
mov dword [ebp - 0x450], 0
jmp 0x456e8f
mov edx, dword [ebp - 0x450]
add edx, 1
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x450], 0xb
jge 0x456eca
mov eax, dword [ebp - 0x450]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x456ebe
mov eax, dword [ebp - 0x450]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x456ec5
and eax, 0xbc614e
jmp 0x456ec8
mov dword [ebp - 0x1c], eax
jmp 0x456e80
mov dword [ebp - 4], 0xfffffffe
call fcn.00456ed8
jmp 0x456ee0
mov dword [ebp - 4], 4
mov dword [ebp - 0x454], 0
jmp 0x456f02
mov edx, dword [ebp - 0x454]
add edx, 1
mov dword [ebp - 0x454], edx
cmp dword [ebp - 0x454], 0x10
jge 0x456f49
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x456f1f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x456f2f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x456f47
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x456f47
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x456ef3
mov dword [ebp - 4], 0xfffffffe
call fcn.00456f57
jmp 0x456f66
mov dword [ebp - 4], 5
mov dword [ebp - 0x458], 0
jmp 0x456f88
mov ecx, dword [ebp - 0x458]
add ecx, 1
mov dword [ebp - 0x458], ecx
cmp dword [ebp - 0x458], 0
jge 0x456fcf
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x456fa5
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x456fb5
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x456fcd
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x456fcd
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x456f79
mov dword [ebp - 4], 0xfffffffe
call fcn.00456fdd
jmp 0x456fec
mov dword [ebp - 0x45c], 0
jmp 0x457007
mov ecx, dword [ebp - 0x45c]
add ecx, 1
mov dword [ebp - 0x45c], ecx
cmp dword [ebp - 0x45c], 0
jge 0x457020
mov edx, dword [ebp - 0x45c]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x456ff8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x457034
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45704a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x460], 0
jmp 0x457065
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 8
jge 0x4570a6
cmp dword [ebp - 0x1c], 0
jge 0x45707c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x457092
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x658]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x457056
mov dword [ebp - 0x65c], 1
mov dword [ebp - 0x660], 1
mov dword [ebp - 0x664], 2
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x66c], 0
jmp 0x4570e9
mov eax, dword [ebp - 0x66c]
add eax, 1
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 3
jge 0x45712a
mov ecx, dword [ebp - 0x65c]
add ecx, dword [ebp - 0x660]
mov dword [ebp - 0x664], ecx
mov edx, dword [ebp - 0x660]
mov dword [ebp - 0x65c], edx
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x660], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x664]
mov dword [ebp - 0x1c], ecx
jmp 0x4570da
mov edx, dword [ebp - 0x1c]
add edx, 3
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 6
mov dword [ebp - 0x670], 0
jmp 0x457155
mov eax, dword [ebp - 0x670]
add eax, 1
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 5
jge 0x45718c
mov ecx, dword [ebp - 0x670]
and ecx, 0x80000001
jns 0x457171
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x457181
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x45718a
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x457146
mov dword [ebp - 4], 0xfffffffe
call fcn.0045719a
jmp 0x4571b8
mov dword [ebp - 4], 7
mov dword [ebp - 0x674], 0
jmp 0x4571da
mov eax, dword [ebp - 0x674]
add eax, 1
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 6
jge 0x457219
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x457209
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x457214
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x457217
mov dword [ebp - 0x1c], eax
jmp 0x4571cb
mov dword [ebp - 4], 0xfffffffe
call fcn.00457227
jmp 0x45722f
mov dword [ebp - 0x678], 0
jmp 0x45724a
mov edx, dword [ebp - 0x678]
add edx, 1
mov dword [ebp - 0x678], edx
cmp dword [ebp - 0x678], 8
jge 0x457263
mov eax, dword [ebp - 0x678]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x45723b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x457277
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45728d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 8
mov dword [ebp - 0x67c], 0
jmp 0x4572af
mov edx, dword [ebp - 0x67c]
add edx, 1
mov dword [ebp - 0x67c], edx
cmp dword [ebp - 0x67c], 0
jge 0x4572ee
mov eax, dword [ebp - 0x67c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4572de
mov eax, dword [ebp - 0x67c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4572e9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4572ec
mov dword [ebp - 0x1c], eax
jmp 0x4572a0
mov dword [ebp - 4], 0xfffffffe
call fcn.004572fc
jmp 0x457304
mov dword [ebp - 4], 9
mov dword [ebp - 0x680], 0
jmp 0x457326
mov edx, dword [ebp - 0x680]
add edx, 1
mov dword [ebp - 0x680], edx
cmp dword [ebp - 0x680], 2
jge 0x457361
mov eax, dword [ebp - 0x680]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x457355
mov eax, dword [ebp - 0x680]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45735c
and eax, 0xbc614e
jmp 0x45735f
mov dword [ebp - 0x1c], eax
jmp 0x457317
mov dword [ebp - 4], 0xfffffffe
call fcn.0045736f
jmp 0x457377
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x684], 0
jmp 0x457399
mov edx, dword [ebp - 0x684]
add edx, 1
mov dword [ebp - 0x684], edx
cmp dword [ebp - 0x684], 4
jge 0x4573d8
mov eax, dword [ebp - 0x684]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4573c8
mov eax, dword [ebp - 0x684]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4573d3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4573d6
mov dword [ebp - 0x1c], eax
jmp 0x45738a
mov dword [ebp - 4], 0xfffffffe
call fcn.004573e6
jmp 0x4573ee
mov dword [ebp - 0x688], 0
jmp 0x457409
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 0
jge 0x457422
mov eax, dword [ebp - 0x688]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4573fa
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x457436
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45744c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0x690], 1
mov dword [ebp - 0x694], 2
mov dword [ebp - 0x698], 0
mov dword [ebp - 0x69c], 0
jmp 0x45748f
mov edx, dword [ebp - 0x69c]
add edx, 1
mov dword [ebp - 0x69c], edx
cmp dword [ebp - 0x69c], 4
jge 0x4574d0
mov eax, dword [ebp - 0x68c]
add eax, dword [ebp - 0x690]
mov dword [ebp - 0x694], eax
mov ecx, dword [ebp - 0x690]
mov dword [ebp - 0x68c], ecx
mov edx, dword [ebp - 0x694]
mov dword [ebp - 0x690], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x694]
mov dword [ebp - 0x1c], eax
jmp 0x457480
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6a0], 0
jmp 0x4574f4
mov edx, dword [ebp - 0x6a0]
add edx, 1
mov dword [ebp - 0x6a0], edx
cmp dword [ebp - 0x6a0], 6
jge 0x457535
cmp dword [ebp - 0x1c], 0
jge 0x45750b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x457521
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x898]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4574e5
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x89c], 0
jmp 0x457557
mov eax, dword [ebp - 0x89c]
add eax, 1
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 7
jge 0x45759e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x457574
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x457584
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x45759c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45759c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x457548
mov dword [ebp - 4], 0xfffffffe
call fcn.004575ac
jmp 0x4575bb
mov dword [ebp - 0x8a0], 0
jmp 0x4575d6
mov ecx, dword [ebp - 0x8a0]
add ecx, 1
mov dword [ebp - 0x8a0], ecx
cmp dword [ebp - 0x8a0], 0
jge 0x4575ef
mov edx, dword [ebp - 0x8a0]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4575c7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x457603
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x457619
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x8a4], 0
jmp 0x45763b
mov edx, dword [ebp - 0x8a4]
add edx, 1
mov dword [ebp - 0x8a4], edx
cmp dword [ebp - 0x8a4], 1
jge 0x457671
mov eax, dword [ebp - 0x8a4]
and eax, 0x80000001
jns 0x457656
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x457666
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x45766f
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x45762c
mov dword [ebp - 4], 0xfffffffe
call fcn.0045767f
jmp 0x45769c
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x8a8], 0
jmp 0x4576be
mov edx, dword [ebp - 0x8a8]
add edx, 1
mov dword [ebp - 0x8a8], edx
cmp dword [ebp - 0x8a8], 3
jge 0x4576f9
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4576ed
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4576f4
and eax, 0xbc614e
jmp 0x4576f7
mov dword [ebp - 0x1c], eax
jmp 0x4576af
mov dword [ebp - 4], 0xfffffffe
call fcn.00457707
jmp 0x45770f
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x8b0], 1
mov dword [ebp - 0x8b4], 2
mov dword [ebp - 0x8b8], 0
mov dword [ebp - 0x8bc], 0
jmp 0x457752
mov edx, dword [ebp - 0x8bc]
add edx, 1
mov dword [ebp - 0x8bc], edx
cmp dword [ebp - 0x8bc], 4
jge 0x457793
mov eax, dword [ebp - 0x8ac]
add eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x8b0]
mov dword [ebp - 0x8ac], ecx
mov edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x1c], eax
jmp 0x457743
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8c0], 0
jmp 0x4577b7
mov edx, dword [ebp - 0x8c0]
add edx, 1
mov dword [ebp - 0x8c0], edx
cmp dword [ebp - 0x8c0], 2
jge 0x4577d0
mov eax, dword [ebp - 0x8c0]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4577a8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4577e4
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4577fa
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x8c4], 1
mov dword [ebp - 0x8c8], 1
mov dword [ebp - 0x8cc], 2
mov dword [ebp - 0x8d0], 0
mov dword [ebp - 0x8d4], 0
jmp 0x45783d
mov edx, dword [ebp - 0x8d4]
add edx, 1
mov dword [ebp - 0x8d4], edx
cmp dword [ebp - 0x8d4], 2
jge 0x45787e
mov eax, dword [ebp - 0x8c4]
add eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8c8]
mov dword [ebp - 0x8c4], ecx
mov edx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8c8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8cc]
mov dword [ebp - 0x1c], eax
jmp 0x45782e
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x8d8], 0
jmp 0x4578a9
mov edx, dword [ebp - 0x8d8]
add edx, 1
mov dword [ebp - 0x8d8], edx
cmp dword [ebp - 0x8d8], 1
jge 0x4578df
mov eax, dword [ebp - 0x8d8]
and eax, 0x80000001
jns 0x4578c4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4578d4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4578dd
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x45789a
mov dword [ebp - 4], 0xfffffffe
call fcn.004578ed
jmp 0x45790a
mov dword [ebp - 0x8dc], 0
jmp 0x457925
mov edx, dword [ebp - 0x8dc]
add edx, 1
mov dword [ebp - 0x8dc], edx
cmp dword [ebp - 0x8dc], 0
jge 0x457966
cmp dword [ebp - 0x1c], 0
jge 0x45793c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x457952
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xad8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x457916
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xadc], 0
jmp 0x457988
mov eax, dword [ebp - 0xadc]
add eax, 1
mov dword [ebp - 0xadc], eax
cmp dword [ebp - 0xadc], 4
jge 0x4579bf
mov ecx, dword [ebp - 0xadc]
and ecx, 0x80000001
jns 0x4579a4
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4579b4
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4579bd
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x457979
mov dword [ebp - 4], 0xfffffffe
call fcn.004579cd
jmp 0x4579eb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xae0], 0
jmp 0x457a0d
mov eax, dword [ebp - 0xae0]
add eax, 1
mov dword [ebp - 0xae0], eax
cmp dword [ebp - 0xae0], 0
jge 0x457a54
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x457a2a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x457a3a
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x457a52
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x457a52
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4579fe
mov dword [ebp - 4], 0xfffffffe
call fcn.00457a62
jmp 0x457a71
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xae4], 0
jmp 0x457a93
mov ecx, dword [ebp - 0xae4]
add ecx, 1
mov dword [ebp - 0xae4], ecx
cmp dword [ebp - 0xae4], 3
jge 0x457ace
mov eax, dword [ebp - 0xae4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x457ac2
mov eax, dword [ebp - 0xae4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x457ac9
and eax, 0xbc614e
jmp 0x457acc
mov dword [ebp - 0x1c], eax
jmp 0x457a84
mov dword [ebp - 4], 0xfffffffe
call fcn.00457adc
jmp 0x457ae4
mov dword [ebp - 0xae8], 0
jmp 0x457aff
mov edx, dword [ebp - 0xae8]
add edx, 1
mov dword [ebp - 0xae8], edx
cmp dword [ebp - 0xae8], 1
jge 0x457b18
mov eax, dword [ebp - 0xae8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x457af0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x457b2c
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x457b42
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xaec], 0
jmp 0x457b64
mov edx, dword [ebp - 0xaec]
add edx, 1
mov dword [ebp - 0xaec], edx
cmp dword [ebp - 0xaec], 2
jge 0x457b9f
mov eax, dword [ebp - 0xaec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x457b93
mov eax, dword [ebp - 0xaec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x457b9a
and eax, 0xbc614e
jmp 0x457b9d
mov dword [ebp - 0x1c], eax
jmp 0x457b55
mov dword [ebp - 4], 0xfffffffe
call fcn.00457bad
jmp 0x457bb5
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xaf0], 0
jmp 0x457bd7
mov edx, dword [ebp - 0xaf0]
add edx, 1
mov dword [ebp - 0xaf0], edx
cmp dword [ebp - 0xaf0], 1
jge 0x457c16
mov eax, dword [ebp - 0xaf0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x457c06
mov eax, dword [ebp - 0xaf0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x457c11
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x457c14
mov dword [ebp - 0x1c], eax
jmp 0x457bc8
mov dword [ebp - 4], 0xfffffffe
call fcn.00457c24
jmp 0x457c2c
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xaf4], 0
jmp 0x457c4e
mov edx, dword [ebp - 0xaf4]
add edx, 1
mov dword [ebp - 0xaf4], edx
cmp dword [ebp - 0xaf4], 1
jge 0x457c84
mov eax, dword [ebp - 0xaf4]
and eax, 0x80000001
jns 0x457c69
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x457c79
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x457c82
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x457c3f
mov dword [ebp - 4], 0xfffffffe
call fcn.00457c92
jmp 0x457caf
mov dword [ebp - 0xaf8], 0
jmp 0x457cca
mov edx, dword [ebp - 0xaf8]
add edx, 1
mov dword [ebp - 0xaf8], edx
cmp dword [ebp - 0xaf8], 1
jge 0x457ce3
mov eax, dword [ebp - 0xaf8]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x457cbb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x457cf7
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x457d0d
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0xafc], 1
mov dword [ebp - 0xb00], 1
mov dword [ebp - 0xb04], 2
mov dword [ebp - 0xb08], 0
mov dword [ebp - 0xb0c], 0
jmp 0x457d50
mov edx, dword [ebp - 0xb0c]
add edx, 1
mov dword [ebp - 0xb0c], edx
cmp dword [ebp - 0xb0c], 2
jge 0x457d91
mov eax, dword [ebp - 0xafc]
add eax, dword [ebp - 0xb00]
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb00]
mov dword [ebp - 0xafc], ecx
mov edx, dword [ebp - 0xb04]
mov dword [ebp - 0xb00], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xb04]
mov dword [ebp - 0x1c], eax
jmp 0x457d41
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xb10], 0
jmp 0x457dbc
cmp dword [ebp - 0xb10], 0
jge 0x457e03
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x457dd9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x457de9
mov dword [ebp - 4], 0xfffffffe
call fcn.00457e11
jmp 0x457e20
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xb14], 0
jmp 0x457e42