Function at 0x455610
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b5660
push 0x40d810
mov eax, dword fs:[0]
push eax
add esp, 0xfffff4cc
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x4c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
jmp 0x45567b
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x24
jge 0x4556a1
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jmp 0x455672
mov edx, dword [ebp - 0x1c]
add edx, 0x24
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0
mov dword [ebp - 0x34], 0
jmp 0x4556c3
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x35
jge 0x4556f5
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4556e9
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4556f0
and eax, 0xbc614e
jmp 0x4556f3
mov dword [ebp - 0x1c], eax
jmp 0x4556ba
mov dword [ebp - 4], 0xfffffffe
call fcn.00455703
jmp 0x45570b
mov dword [ebp - 0x38], 0
jmp 0x45571d
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 9
jge 0x455730
mov eax, dword [ebp - 0x38]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x455714
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x455744
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45575a
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x3c], 0
jmp 0x45576c
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x1d
jge 0x45577f
mov eax, dword [ebp - 0x3c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x455763
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x455793
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4557a9
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 1
mov dword [ebp - 0x40], 0
jmp 0x4557c2
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x18
jge 0x455806
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4557dc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4557ec
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x455804
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x455804
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4557b9
mov dword [ebp - 4], 0xfffffffe
call fcn.00455814
jmp 0x455823
mov dword [ebp - 4], 2
mov dword [ebp - 0x44], 0
jmp 0x45583c
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0xe
jge 0x455880
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x455856
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x455866
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x45587e
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45587e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x455833
mov dword [ebp - 4], 0xfffffffe
call fcn.0045588e
jmp 0x45589d
mov dword [ebp - 0x48], 0
jmp 0x4558af
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 1
jge 0x4558ed
cmp dword [ebp - 0x1c], 0
jge 0x4558c3
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4558d9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x248]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4558a6
mov dword [ebp - 4], 3
mov dword [ebp - 0x24c], 0
jmp 0x45590f
mov eax, dword [ebp - 0x24c]
add eax, 1
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0xb
jge 0x45594a
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45593e
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x455945
and eax, 0xbc614e
jmp 0x455948
mov dword [ebp - 0x1c], eax
jmp 0x455900
mov dword [ebp - 4], 0xfffffffe
call fcn.00455958
jmp 0x455960
mov dword [ebp - 0x250], 1
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x258], 2
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x260], 0
jmp 0x4559a3
mov edx, dword [ebp - 0x260]
add edx, 1
mov dword [ebp - 0x260], edx
cmp dword [ebp - 0x260], 2
jge 0x4559e4
mov eax, dword [ebp - 0x250]
add eax, dword [ebp - 0x254]
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x250], ecx
mov edx, dword [ebp - 0x258]
mov dword [ebp - 0x254], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x258]
mov dword [ebp - 0x1c], eax
jmp 0x455994
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x264], 0
jmp 0x455a08
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 7
jge 0x455a21
mov eax, dword [ebp - 0x264]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4559f9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x455a35
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x455a4b
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x268], 0
jmp 0x455a66
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 0xe
jge 0x455aa7
cmp dword [ebp - 0x1c], 0
jge 0x455a7d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x455a93
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x455a57
mov dword [ebp - 4], 4
mov dword [ebp - 0x464], 0
jmp 0x455ac9
mov eax, dword [ebp - 0x464]
add eax, 1
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0xe
jge 0x455b00
mov ecx, dword [ebp - 0x464]
and ecx, 0x80000001
jns 0x455ae5
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x455af5
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x455afe
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x455aba
mov dword [ebp - 4], 0xfffffffe
call fcn.00455b0e
jmp 0x455b2c
mov dword [ebp - 4], 5
mov dword [ebp - 0x468], 0
jmp 0x455b4e
mov eax, dword [ebp - 0x468]
add eax, 1
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0xf
jge 0x455b89
mov eax, dword [ebp - 0x468]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x455b7d
mov eax, dword [ebp - 0x468]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x455b84
and eax, 0xbc614e
jmp 0x455b87
mov dword [ebp - 0x1c], eax
jmp 0x455b3f
mov dword [ebp - 4], 0xfffffffe
call fcn.00455b97
jmp 0x455b9f
mov dword [ebp - 4], 6
mov dword [ebp - 0x46c], 0
jmp 0x455bc1
mov edx, dword [ebp - 0x46c]
add edx, 1
mov dword [ebp - 0x46c], edx
cmp dword [ebp - 0x46c], 8
jge 0x455bf7
mov eax, dword [ebp - 0x46c]
and eax, 0x80000001
jns 0x455bdc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x455bec
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x455bf5
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x455bb2
mov dword [ebp - 4], 0xfffffffe
call fcn.00455c05
jmp 0x455c22
mov dword [ebp - 4], 7
mov dword [ebp - 0x470], 0
jmp 0x455c44
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 0xd
jge 0x455c7a
mov eax, dword [ebp - 0x470]
and eax, 0x80000001
jns 0x455c5f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x455c6f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x455c78
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x455c35
mov dword [ebp - 4], 0xfffffffe
call fcn.00455c88
jmp 0x455ca5
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x47c], 2
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x484], 0
jmp 0x455ce8
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 8
jge 0x455d29
mov eax, dword [ebp - 0x474]
add eax, dword [ebp - 0x478]
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x474], ecx
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0x478], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x47c]
mov dword [ebp - 0x1c], eax
jmp 0x455cd9
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x488], 1
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x490], 2
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x498], 0
jmp 0x455d75
mov edx, dword [ebp - 0x498]
add edx, 1
mov dword [ebp - 0x498], edx
cmp dword [ebp - 0x498], 0xf
jge 0x455db6
mov eax, dword [ebp - 0x488]
add eax, dword [ebp - 0x48c]
mov dword [ebp - 0x490], eax
mov ecx, dword [ebp - 0x48c]
mov dword [ebp - 0x488], ecx
mov edx, dword [ebp - 0x490]
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x490]
mov dword [ebp - 0x1c], eax
jmp 0x455d66
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x49c], 1
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0x4a4], 2
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x4ac], 0
jmp 0x455e02
mov edx, dword [ebp - 0x4ac]
add edx, 1
mov dword [ebp - 0x4ac], edx
cmp dword [ebp - 0x4ac], 4
jge 0x455e43
mov eax, dword [ebp - 0x49c]
add eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x49c], ecx
mov edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x1c], eax
jmp 0x455df3
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x4b0], 0
jmp 0x455e6e
mov edx, dword [ebp - 0x4b0]
add edx, 1
mov dword [ebp - 0x4b0], edx
cmp dword [ebp - 0x4b0], 8
jge 0x455ea9
mov eax, dword [ebp - 0x4b0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x455e9d
mov eax, dword [ebp - 0x4b0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x455ea4
and eax, 0xbc614e
jmp 0x455ea7
mov dword [ebp - 0x1c], eax
jmp 0x455e5f
mov dword [ebp - 4], 0xfffffffe
call fcn.00455eb7
jmp 0x455ebf
mov dword [ebp - 0x4b4], 1
mov dword [ebp - 0x4b8], 1
mov dword [ebp - 0x4bc], 2
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4c4], 0
jmp 0x455f02
mov edx, dword [ebp - 0x4c4]
add edx, 1
mov dword [ebp - 0x4c4], edx
cmp dword [ebp - 0x4c4], 6
jge 0x455f43
mov eax, dword [ebp - 0x4b4]
add eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x4bc], eax
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp - 0x4b4], ecx
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4b8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x1c], eax
jmp 0x455ef3
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x4c8], 0
jmp 0x455f6e
mov edx, dword [ebp - 0x4c8]
add edx, 1
mov dword [ebp - 0x4c8], edx
cmp dword [ebp - 0x4c8], 2
jge 0x455fa9
mov eax, dword [ebp - 0x4c8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x455f9d
mov eax, dword [ebp - 0x4c8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x455fa4
and eax, 0xbc614e
jmp 0x455fa7
mov dword [ebp - 0x1c], eax
jmp 0x455f5f
mov dword [ebp - 4], 0xfffffffe
call fcn.00455fb7
jmp 0x455fbf
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x4cc], 0
jmp 0x455fe1
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
cmp dword [ebp - 0x4cc], 3
jge 0x456020
mov eax, dword [ebp - 0x4cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x456010
mov eax, dword [ebp - 0x4cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45601b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x45601e
mov dword [ebp - 0x1c], eax
jmp 0x455fd2
mov dword [ebp - 4], 0xfffffffe
call fcn.0045602e
jmp 0x456036
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x4d0], 0
jmp 0x456058
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
cmp dword [ebp - 0x4d0], 2
jge 0x456093
mov eax, dword [ebp - 0x4d0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x456087
mov eax, dword [ebp - 0x4d0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45608e
and eax, 0xbc614e
jmp 0x456091
mov dword [ebp - 0x1c], eax
jmp 0x456049
mov dword [ebp - 4], 0xfffffffe
call fcn.004560a1
jmp 0x4560a9
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x4d4], 0
jmp 0x4560cb
mov edx, dword [ebp - 0x4d4]
add edx, 1
mov dword [ebp - 0x4d4], edx
cmp dword [ebp - 0x4d4], 8
jge 0x456101
mov eax, dword [ebp - 0x4d4]
and eax, 0x80000001
jns 0x4560e6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4560f6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4560ff
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4560bc
mov dword [ebp - 4], 0xfffffffe
call fcn.0045610f
jmp 0x45612c
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x4d8], 0
jmp 0x45614e
mov edx, dword [ebp - 0x4d8]
add edx, 1
mov dword [ebp - 0x4d8], edx
cmp dword [ebp - 0x4d8], 3
jge 0x456184
mov eax, dword [ebp - 0x4d8]
and eax, 0x80000001
jns 0x456169
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x456179
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x456182
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x45613f
mov dword [ebp - 4], 0xfffffffe
call fcn.00456192
jmp 0x4561af
mov dword [ebp - 0x4dc], 1
mov dword [ebp - 0x4e0], 1
mov dword [ebp - 0x4e4], 2
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4ec], 0
jmp 0x4561f2
mov edx, dword [ebp - 0x4ec]
add edx, 1
mov dword [ebp - 0x4ec], edx
cmp dword [ebp - 0x4ec], 7
jge 0x456233
mov eax, dword [ebp - 0x4dc]
add eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e0]
mov dword [ebp - 0x4dc], ecx
mov edx, dword [ebp - 0x4e4]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x1c], eax
jmp 0x4561e3
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x4f0], 0
jmp 0x45625e
mov edx, dword [ebp - 0x4f0]
add edx, 1
mov dword [ebp - 0x4f0], edx
cmp dword [ebp - 0x4f0], 7
jge 0x4562a5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x45627b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45628b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4562a3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4562a3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x45624f
mov dword [ebp - 4], 0xfffffffe
call fcn.004562b3
jmp 0x4562c2
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x4f4], 0
jmp 0x4562e4
mov ecx, dword [ebp - 0x4f4]
add ecx, 1
mov dword [ebp - 0x4f4], ecx
cmp dword [ebp - 0x4f4], 5
jge 0x45631f
mov eax, dword [ebp - 0x4f4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x456313
mov eax, dword [ebp - 0x4f4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45631a
and eax, 0xbc614e
jmp 0x45631d
mov dword [ebp - 0x1c], eax
jmp 0x4562d5
mov dword [ebp - 4], 0xfffffffe
call fcn.0045632d
jmp 0x456335
mov dword [ebp - 0x4f8], 0
jmp 0x456350
mov edx, dword [ebp - 0x4f8]
add edx, 1
mov dword [ebp - 0x4f8], edx
cmp dword [ebp - 0x4f8], 6
jge 0x456391
cmp dword [ebp - 0x1c], 0
jge 0x456367
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45637d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x6f0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x456341
mov dword [ebp - 0x6f4], 0
jmp 0x4563ac
mov eax, dword [ebp - 0x6f4]
add eax, 1
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 8
jge 0x4563ed
cmp dword [ebp - 0x1c], 0
jge 0x4563c3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4563d9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x8f0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x45639d
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8f4], 0
jmp 0x45640f
mov eax, dword [ebp - 0x8f4]
add eax, 1
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 7
jge 0x456456
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x45642c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45643c
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x456454
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x456454
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x456400
mov dword [ebp - 4], 0xfffffffe
call fcn.00456464
jmp 0x456473
mov dword [ebp - 0x8f8], 0
jmp 0x45648e
mov ecx, dword [ebp - 0x8f8]
add ecx, 1
mov dword [ebp - 0x8f8], ecx
cmp dword [ebp - 0x8f8], 2
jge 0x4564a7
mov edx, dword [ebp - 0x8f8]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x45647f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4564bb
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4564d1
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x8fc], 0
jmp 0x4564f3
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
cmp dword [ebp - 0x8fc], 4
jge 0x45653a
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x456510
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x456520
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x456538
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x456538
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4564e4
mov dword [ebp - 4], 0xfffffffe
call fcn.00456548
jmp 0x456557
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x900], 0
jmp 0x456579
mov ecx, dword [ebp - 0x900]
add ecx, 1
mov dword [ebp - 0x900], ecx
cmp dword [ebp - 0x900], 0
jge 0x4565c0
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x456596
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4565a6
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4565be
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4565be
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x45656a
mov dword [ebp - 4], 0xfffffffe
call fcn.004565ce
jmp 0x4565dd
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x904], 0
jmp 0x4565ff
mov ecx, dword [ebp - 0x904]
add ecx, 1
mov dword [ebp - 0x904], ecx
cmp dword [ebp - 0x904], 2
jge 0x456636
mov edx, dword [ebp - 0x904]
and edx, 0x80000001
jns 0x45661b
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x45662b
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x456634
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4565f0
mov dword [ebp - 4], 0xfffffffe
call fcn.00456644
jmp 0x456662
mov dword [ebp - 0x908], 0
jmp 0x45667d
mov ecx, dword [ebp - 0x908]
add ecx, 1
mov dword [ebp - 0x908], ecx
cmp dword [ebp - 0x908], 2
jge 0x456696
mov edx, dword [ebp - 0x908]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x45666e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4566aa
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4566c0
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x90c], 0
jmp 0x4566e2
mov edx, dword [ebp - 0x90c]
add edx, 1
mov dword [ebp - 0x90c], edx
cmp dword [ebp - 0x90c], 4
jge 0x456721
mov eax, dword [ebp - 0x90c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x456711
mov eax, dword [ebp - 0x90c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45671c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x45671f
mov dword [ebp - 0x1c], eax
jmp 0x4566d3
mov dword [ebp - 4], 0xfffffffe
call fcn.0045672f
jmp 0x456737
mov dword [ebp - 0x910], 1
mov dword [ebp - 0x914], 1
mov dword [ebp - 0x918], 2
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x920], 0
jmp 0x45677a
mov edx, dword [ebp - 0x920]
add edx, 1
mov dword [ebp - 0x920], edx
cmp dword [ebp - 0x920], 1
jge 0x4567bb
mov eax, dword [ebp - 0x910]
add eax, dword [ebp - 0x914]
mov dword [ebp - 0x918], eax
mov ecx, dword [ebp - 0x914]
mov dword [ebp - 0x910], ecx
mov edx, dword [ebp - 0x918]
mov dword [ebp - 0x914], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x918]
mov dword [ebp - 0x1c], eax
jmp 0x45676b
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x924], 0
jmp 0x4567df
mov edx, dword [ebp - 0x924]
add edx, 1
mov dword [ebp - 0x924], edx
cmp dword [ebp - 0x924], 0
jge 0x456820
cmp dword [ebp - 0x1c], 0
jge 0x4567f6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45680c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xb20]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4567d0
mov dword [ebp - 0xb24], 1
mov dword [ebp - 0xb28], 1
mov dword [ebp - 0xb2c], 2
mov dword [ebp - 0xb30], 0
mov dword [ebp - 0xb34], 0
jmp 0x456863
mov eax, dword [ebp - 0xb34]
add eax, 1
mov dword [ebp - 0xb34], eax
cmp dword [ebp - 0xb34], 0
jge 0x4568a4
mov ecx, dword [ebp - 0xb24]
add ecx, dword [ebp - 0xb28]
mov dword [ebp - 0xb2c], ecx
mov edx, dword [ebp - 0xb28]
mov dword [ebp - 0xb24], edx
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0xb28], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xb2c]
mov dword [ebp - 0x1c], ecx
jmp 0x456854
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xb38], 0
jmp 0x4568cc
mov eax, dword [ebp - 0xb38]
add eax, 1
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 4
jge 0x45690b
mov eax, dword [ebp - 0xb38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4568fb
mov eax, dword [ebp - 0xb38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x456906
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x456909
mov dword [ebp - 0x1c], eax
jmp 0x4568bd
mov dword [ebp - 4], 0xfffffffe
call fcn.00456919
jmp 0x456921
mov dword [ebp - 0xb3c], 0
jmp 0x45693c
mov edx, dword [ebp - 0xb3c]
add edx, 1
mov dword [ebp - 0xb3c], edx
cmp dword [ebp - 0xb3c], 1
jge 0x456955
mov eax, dword [ebp - 0xb3c]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x45692d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x456969
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45697f
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xb40], 0
jmp 0x4569a1
mov edx, dword [ebp - 0xb40]
add edx, 1
mov dword [ebp - 0xb40], edx
cmp dword [ebp - 0xb40], 3
jge 0x4569e8
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4569be
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4569ce
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4569e6
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4569e6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x456992
mov dword [ebp - 4], 0xfffffffe
call fcn.004569f6
jmp 0x456a05
mov dword [ebp - 4], 0x17
mov dword [ebp - 0xb44], 0
jmp 0x456a27
mov ecx, dword [ebp - 0xb44]
add ecx, 1
mov dword [ebp - 0xb44], ecx
cmp dword [ebp - 0xb44], 3
jge 0x456a6e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x456a44
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x456a54
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x456a6c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x456a6c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x456a18
mov dword [ebp - 4], 0xfffffffe
call fcn.00456a7c
jmp 0x456a8b
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x4c]
xor ecx, ebp
call fcn.00408023
mov esp, ebp
pop ebp
ret