Function at 0x4580ca
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x680
mov eax, dword [0x46700c]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edx
xor edx, edx
xor edi, edi
inc edi
mov ebx, edx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], ecx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], ebx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edx
cmp eax, reloc.ADVAPI32.dll_TraceMessage
je 0x458bf4
cmp dword [ebp + 0x10], edx
je 0x458150
push dword [ebp + 0x10]
push eax
push ecx
mov eax, esi
call fcn.00456e72
test eax, eax
jne 0x458144
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edi
mov eax, 0x404a8c
jmp 0x458155
cmp eax, 0x80004005
jne 0x45813d
jmp 0x458c0a
mov eax, 0x404c30
test esi, esi
jne 0x45815e
mov esi, 0x404a10
push 1
push eax
push esi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea ecx, reloc.ADVAPI32.dll_TraceMessage
xor edx, edx
call fcn.00455c5a
test eax, eax
je 0x458bf4
mov eax, dword [ebp + 0x10]
neg eax
sbb eax, eax
add eax, 0x26dd
push eax
call fcn.0043f8b3
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.00455afc
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
test eax, eax
je 0x458bf4
mov edx, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
lea eax, reloc.ADVAPI32.dll_TraceMessage
call fcn.00455ab4
test eax, eax
je 0x458bdf
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x422f2c
push 4
pop esi
call fcn.00440126
lea eax, reloc.ADVAPI32.dll_TraceMessage
pop ecx
pop ecx
test eax, eax
je 0x4581ea
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
push 0x41e9d8
push dword [ebp - 0x650]
call dword [sym.imp.msvcrt.dll_wcstok]
mov ebx, eax
pop ecx
pop ecx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], ebx
test ebx, ebx
je 0x458bd9
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
cmp dword [ebp + 0x10], eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
mov eax, 0x404a8c
jne 0x45822a
mov eax, 0x404c30
push ebx
push eax
push 0x422f48
push 4
pop esi
call fcn.00440126
add esp, 0xc
xor esi, esi
push esi
push ebx
push 0x404af0
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea ecx, reloc.ADVAPI32.dll_TraceMessage
xor edx, edx
call fcn.00455c5a
test eax, eax
jne 0x458284
push esi
push 0x404aa0
push 0x404af0
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea ecx, reloc.ADVAPI32.dll_TraceMessage
xor edx, edx
call fcn.00455c5a
test eax, eax
je 0x458b9d
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.00455afc
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
test eax, eax
je 0x458b9d
mov edx, eax
mov eax, 0x104
lea esi, reloc.ADVAPI32.dll_TraceMessage
call fcn.0042c88c
mov eax, esi
push 0x41e9d8
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
mov ebx, eax
pop ecx
pop ecx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], ebx
test ebx, ebx
je 0x4582ec
xor eax, eax
mov word [ebx], ax
add ebx, 2
mov edx, ebx
mov eax, 0x104
lea esi, reloc.ADVAPI32.dll_TraceMessage
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], ebx
call fcn.0042c88c
cmp dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 0
je 0x458329
lea esi, reloc.ADVAPI32.dll_TraceMessage
call fcn.00440984
mov ecx, esi
push ecx
mov ecx, eax
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
call fcn.00454ecf
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edi
jne 0x45875d
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
mov esi, 0x80004005
test eax, eax
je 0x458746
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push 0x41d1dc
push eax
call dword [sym.imp.msvcrt.dll_swscanf]
add esp, 0xc
test eax, eax
je 0x4587f7
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
cmp eax, reloc.ADVAPI32.dll_TraceMessage
je 0x4587f7
cmp eax, 0x19
ja 0x4585fd
je 0x4585e6
cmp eax, 0x11
ja 0x4584cb
je 0x458477
xor ecx, ecx
sub eax, ecx
je 0x45874b
dec eax
je 0x458436
sub eax, 9
je 0x4585e6
dec eax
je 0x458422
dec eax
jne 0x45874b
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x4583d5
xor eax, eax
mov esi, eax
jmp 0x4583f8
call edi
mov esi, eax
test esi, esi
jne 0x4583e2
push 0x57
pop esi
test esi, esi
jle 0x4583f0
and esi, 0xffff
or esi, 0x80070000
test esi, esi
jne 0x4587f7
call fcn.00440e9b
test eax, eax
lea edi, reloc.ADVAPI32.dll_TraceMessage
mov eax, 0x104
je 0x458413
push 0x422338
jmp 0x458418
push 0x42234c
call fcn.0042c8f1
jmp 0x45874b
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
jmp 0x458448
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
je 0x458453
xor eax, eax
jmp 0x458742
call edi
mov esi, eax
test esi, esi
jne 0x458460
push 0x57
pop esi
test esi, esi
jle 0x45874b
and esi, 0xffff
or esi, 0x80070000
jmp 0x45874b
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
test eax, eax
je 0x458493
xor eax, eax
mov esi, eax
jmp 0x4584b6
call edi
mov esi, eax
test esi, esi
jne 0x4584a0
push 0x57
pop esi
test esi, esi
jle 0x4584ae
and esi, 0xffff
or esi, 0x80070000
test esi, esi
jne 0x4587f7
push 0x422360
mov eax, 0x104
lea edi, reloc.ADVAPI32.dll_TraceMessage
jmp 0x458418
sub eax, 0x12
je 0x45859d
dec eax
dec eax
je 0x458554
dec eax
je 0x45874b
dec eax
dec eax
je 0x45874b
dec eax
jne 0x45874b
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x45850a
xor eax, eax
mov esi, eax
jmp 0x45852d
call edi
mov esi, eax
test esi, esi
jne 0x458517
push 0x57
pop esi
test esi, esi
jle 0x458525
and esi, 0xffff
or esi, 0x80070000
test esi, esi
jne 0x4587f7
lea eax, reloc.ADVAPI32.dll_TraceMessage
push 0x41d1e4
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
pop ecx
pop ecx
test eax, eax
je 0x45874b
xor ecx, ecx
mov word [eax + 4], cx
jmp 0x45874b
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
test eax, eax
je 0x458570
xor eax, eax
mov esi, eax
jmp 0x458593
call edi
mov esi, eax
test esi, esi
jne 0x45857d
push 0x57
pop esi
test esi, esi
jle 0x45858b
and esi, 0xffff
or esi, 0x80070000
test esi, esi
jne 0x4587f7
push 0x422378
jmp 0x4584bb
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
test eax, eax
je 0x4585b9
xor eax, eax
mov esi, eax
jmp 0x4585dc
call edi
mov esi, eax
test esi, esi
jne 0x4585c6
push 0x57
pop esi
test esi, esi
jle 0x4585d4
and esi, 0xffff
or esi, 0x80070000
test esi, esi
jne 0x4587f7
push 0x42236c
jmp 0x4584bb
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
jmp 0x458448
cmp eax, 0x4019
ja 0x4586c5
cmp eax, 0x4016
jae 0x45874b
cmp eax, 0x1e
je 0x45874b
cmp eax, 0x32
je 0x45874b
cmp eax, 0x33
je 0x45867c
cmp eax, 0x34
jne 0x45874b
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
test eax, eax
je 0x45864f
xor eax, eax
mov esi, eax
jmp 0x458672
call edi
mov esi, eax
test esi, esi
jne 0x45865c
push 0x57
pop esi
test esi, esi
jle 0x45866a
and esi, 0xffff
or esi, 0x80070000
test esi, esi
jne 0x4587f7
push 0x422398
jmp 0x4584bb
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
test eax, eax
je 0x458698
xor eax, eax
mov esi, eax
jmp 0x4586bb
call edi
mov esi, eax
test esi, esi
jne 0x4586a5
push 0x57
pop esi
test esi, esi
jle 0x4586b3
and esi, 0xffff
or esi, 0x80070000
test esi, esi
jne 0x4587f7
push 0x422388
jmp 0x4584bb
sub eax, 0x401f
je 0x45874b
sub eax, 4
je 0x458731
sub eax, 3
je 0x45871e
sub eax, 5
je 0x458704
sub eax, 0x3825
jne 0x45874b
push 1
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.00441544
mov esi, eax
neg esi
sbb esi, esi
and esi, 0x7fffbffb
add esi, 0x80004005
jmp 0x45874b
mov ecx, 0x104
lea ebx, reloc.ADVAPI32.dll_TraceMessage
call fcn.00454ace
mov ebx, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
mov esi, eax
jmp 0x45874b
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
mov ecx, 0x104
call fcn.0045486d
jmp 0x458742
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.00454c21
mov esi, eax
jmp 0x45874b
mov esi, 0x80004003
test esi, esi
jne 0x4587f7
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 1
test ebx, ebx
je 0x4587a5
lea eax, reloc.ADVAPI32.dll_TraceMessage
test eax, eax
je 0x458772
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea ecx, reloc.ADVAPI32.dll_TraceMessage
lea edx, [ecx + 2]
xor esi, esi
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x45877d
lea eax, reloc.ADVAPI32.dll_TraceMessage
sub ecx, edx
push eax
sar ecx, 1
mov eax, 0x104
sub eax, ecx
lea edi, reloc.ADVAPI32.dll_TraceMessage
call fcn.0042c8f1
cmp dword [ebp + 0x10], 0
je 0x4587c6
lea edx, reloc.ADVAPI32.dll_TraceMessage
call fcn.00440b2f
test eax, eax
jne 0x4587c6
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.00440bf0
lea eax, reloc.ADVAPI32.dll_TraceMessage
test eax, eax
je 0x4587d7
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
mov ebx, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
push ebx
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x422f68
push 4
pop esi
call fcn.00440126
add esp, 0xc
jmp 0x4587fd
mov ebx, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
push dword [ebp - 0x644]
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
cmp dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 0
pop ecx
je 0x458b9d
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
xor eax, eax
push eax
push ebx
push dword [ebp - 0x638]
call fcn.0044d924
test eax, eax
je 0x458bad
push ebx
push dword [ebp - 0x638]
xor esi, esi
inc esi
call fcn.0044d83f
mov edi, eax
push edi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edi
call fcn.0043f6bb
cmp edi, esi
jb 0x458bad
push esi
call fcn.0043f83d
lea eax, reloc.ADVAPI32.dll_TraceMessage
inc esi
push eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], esi
call fcn.00455afc
mov ebx, eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], ebx
test ebx, ebx
je 0x458b81
cmp dword [ebp + 0x10], 0
je 0x458aa7
xor eax, eax
push 0x40
mov esi, eax
mov ebx, eax
pop eax
push 0x41e9d8
push dword [ebp - 0x640]
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], esi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 3
call dword [sym.imp.msvcrt.dll_wcsstr]
pop ecx
xor edi, edi
pop ecx
mov ecx, eax
inc edi
test ecx, ecx
je 0x458969
mov eax, edi
lea esi, [ecx + 2]
dec eax
je 0x458907
dec eax
je 0x4588ff
dec eax
je 0x4588ed
push 0x422f90
xor eax, eax
push 5
mov word [ecx], ax
call fcn.004400fc
jmp 0x45890e
xor eax, eax
mov word [ecx], ax
call fcn.00440984
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
jmp 0x45890e
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], esi
jmp 0x458909
mov ebx, esi
xor eax, eax
mov word [ecx], ax
push 0x41e9d8
push esi
call dword [sym.imp.msvcrt.dll_wcsstr]
pop ecx
pop ecx
mov ecx, eax
inc edi
test ecx, ecx
jne 0x4588cc
xor edi, edi
test ebx, ebx
je 0x458944
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x45892e
sub ecx, edx
sar ecx, 1
cmp ecx, 2
jae 0x458944
mov ebx, edi
mov esi, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
test esi, esi
je 0x458969
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x458953
sub ecx, edx
sar ecx, 1
cmp ecx, 2
jae 0x458969
mov esi, edi
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x45898f
xor ecx, ecx
cmp dword [eax + 0x50], ecx
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
jne 0x458995
test eax, 0x1000000
jne 0x458995
and eax, 0xffffffbf
jmp 0x458995
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
lea ecx, reloc.ADVAPI32.dll_TraceMessage
push ecx
push dword [ebp - 0x654]
lea edx, reloc.ADVAPI32.dll_TraceMessage
push eax
push esi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push ebx
mov ebx, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
mov ecx, ebx
call fcn.00442be5
mov edi, eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edi
test edi, edi
jns 0x458a00
cmp edi, 0xbc2
je 0x4589fe
push edi
lea ecx, reloc.ADVAPI32.dll_TraceMessage
push ecx
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push ebx
push 0x422fe0
push 2
pop esi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edi
call fcn.00440126
add esp, 0x14
jmp 0x458a87
test edi, edi
jne 0x458a2b
xor eax, eax
inc eax
cmp dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
jne 0x458a13
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push ebx
push 0x422fc0
push 4
pop esi
call fcn.00440126
add esp, 0xc
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
xor ecx, ecx
cmp dword [eax + 0xc], ecx
je 0x458a87
push 0x208
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new___unsigned_int_]
mov esi, eax
pop ecx
test esi, esi
je 0x458a87
mov edi, 0x104
lea edx, reloc.ADVAPI32.dll_TraceMessage
mov eax, edi
call fcn.0042c88c
push esi
call fcn.004402ab
mov eax, edi
push ebx
mov edi, esi
call fcn.0042c8f1
xor eax, eax
push eax
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
push dword [eax + 0xc]
mov eax, esi
call fcn.0044c53f
push esi
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
pop ecx
mov esi, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
xor eax, eax
inc eax
cmp dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
jne 0x458b73
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
jmp 0x458b73
push 0x41e9d8
push ebx
call dword [sym.imp.msvcrt.dll_wcsstr]
pop ecx
pop ecx
test eax, eax
je 0x458abe
xor ecx, ecx
mov word [eax], cx
push 0x208
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new___unsigned_int_]
mov edi, eax
pop ecx
test edi, edi
je 0x458b73
lea edx, reloc.ADVAPI32.dll_TraceMessage
mov eax, 0x104
mov esi, edi
call fcn.0042c88c
push edi
call fcn.004402ab
push ebx
mov eax, 0x104
call fcn.0042c8f1
push 1
xor eax, eax
push eax
push eax
xor edx, edx
mov ecx, edi
call fcn.0044217a
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
test eax, eax
jns 0x458b31
cmp eax, 0xbc2
je 0x458b31
push eax
push edi
push 0x423040
push 2
pop esi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
call fcn.00440126
add esp, 0xc
jmp 0x458b41
push edi
push 0x423028
push 4
pop esi
call fcn.00440126
pop ecx
pop ecx
xor eax, eax
inc eax
cmp dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
jne 0x458b52
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x458b65
push edi
call fcn.0044d7e7
push edi
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
mov esi, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
pop ecx
push ebx
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
mov edi, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
pop ecx
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push eax
call dword [sym.imp.SETUPAPI.dll_SetupFindNextLine]
test eax, eax
je 0x458bad
cmp esi, edi
jbe 0x45885a
jmp 0x458bad
push ebx
push 0x423068
push 2
pop esi
call fcn.00440126
pop ecx
pop ecx
xor eax, eax
push 0x41e9d8
push eax
call dword [sym.imp.msvcrt.dll_wcstok]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
pop ecx
pop ecx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
test ebx, ebx
jne 0x458213
mov edi, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
mov ebx, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
push dword [ebp - 0x650]
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
pop ecx
test edi, edi
js 0x458bf4
test ebx, ebx
jne 0x458bf6
mov ebx, edi
cmp ebx, 1
jne 0x458c08
cmp dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 0
je 0x458c08
xor eax, eax
mov ebx, eax
mov eax, ebx
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004655f1
leave
ret 0xc