Function at 0x450000
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4b5108
push 0x40d810
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1400
call fcn.004175a0
mov eax, dword [0x4bc534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x30], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x45005d
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x27
jge 0x45008f
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x450083
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45008a
and eax, 0xbc614e
jmp 0x45008d
mov dword [ebp - 0x1c], eax
jmp 0x450054
mov dword [ebp - 4], 0xfffffffe
call fcn.0045009d
jmp 0x4500a5
mov dword [ebp - 0x24], 0
jmp 0x4500b7
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x32
jge 0x4500ca
mov eax, dword [ebp - 0x24]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4500ae
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4500de
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4500f4
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x28], 0
jmp 0x450106
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x1e
jge 0x450119
mov eax, dword [ebp - 0x28]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4500fd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x45012d
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450143
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x2c], 0
jmp 0x450155
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 4
jge 0x450193
cmp dword [ebp - 0x1c], 0
jge 0x450169
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45017f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x45014c
mov dword [ebp - 0x22c], 0
jmp 0x4501ae
mov eax, dword [ebp - 0x22c]
add eax, 1
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 6
jge 0x4501c7
mov ecx, dword [ebp - 0x22c]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x45019f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4501db
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4501f1
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 1
mov dword [ebp - 0x230], 0
jmp 0x450213
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 7
jge 0x450249
mov eax, dword [ebp - 0x230]
and eax, 0x80000001
jns 0x45022e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45023e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x450247
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x450204
mov dword [ebp - 4], 0xfffffffe
call fcn.00450257
jmp 0x450274
mov dword [ebp - 0x234], 0
jmp 0x45028f
mov edx, dword [ebp - 0x234]
add edx, 1
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 6
jge 0x4502d0
cmp dword [ebp - 0x1c], 0
jge 0x4502a6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4502bc
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x430]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x450280
mov dword [ebp - 0x434], 0
jmp 0x4502eb
mov eax, dword [ebp - 0x434]
add eax, 1
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 3
jge 0x450304
mov ecx, dword [ebp - 0x434]
not ecx
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x4502dc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x450318
mov edx, dword [ebp - 0x1c]
neg edx
imul edx, edx, 0xfffffffd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45032e
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 2
mov dword [ebp - 0x438], 0
jmp 0x450350
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 0
jge 0x45038f
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45037f
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45038a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x45038d
mov dword [ebp - 0x1c], eax
jmp 0x450341
mov dword [ebp - 4], 0xfffffffe
call fcn.0045039d
jmp 0x4503a5
mov dword [ebp - 0x43c], 1
mov dword [ebp - 0x440], 1
mov dword [ebp - 0x444], 2
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x44c], 0
jmp 0x4503e8
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 1
jge 0x450429
mov eax, dword [ebp - 0x43c]
add eax, dword [ebp - 0x440]
mov dword [ebp - 0x444], eax
mov ecx, dword [ebp - 0x440]
mov dword [ebp - 0x43c], ecx
mov edx, dword [ebp - 0x444]
mov dword [ebp - 0x440], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x444]
mov dword [ebp - 0x1c], eax
jmp 0x4503d9
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x450], 0
jmp 0x450454
mov edx, dword [ebp - 0x450]
add edx, 1
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x450], 1
jge 0x45048a
mov eax, dword [ebp - 0x450]
and eax, 0x80000001
jns 0x45046f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45047f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x450488
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x450445
mov dword [ebp - 4], 0xfffffffe
call fcn.00450498
jmp 0x4504b5
mov dword [ebp - 0x454], 1
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x45c], 2
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x464], 0
jmp 0x4504f8
mov edx, dword [ebp - 0x464]
add edx, 1
mov dword [ebp - 0x464], edx
cmp dword [ebp - 0x464], 1
jge 0x450539
mov eax, dword [ebp - 0x454]
add eax, dword [ebp - 0x458]
mov dword [ebp - 0x45c], eax
mov ecx, dword [ebp - 0x458]
mov dword [ebp - 0x454], ecx
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x458], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x45c]
mov dword [ebp - 0x1c], eax
jmp 0x4504e9
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x468], 0
jmp 0x450564
mov edx, dword [ebp - 0x468]
add edx, 1
mov dword [ebp - 0x468], edx
cmp dword [ebp - 0x468], 9
jge 0x45059a
mov eax, dword [ebp - 0x468]
and eax, 0x80000001
jns 0x45057f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45058f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x450598
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x450555
mov dword [ebp - 4], 0xfffffffe
call fcn.004505a8
jmp 0x4505c5
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x474], 2
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x47c], 0
jmp 0x450608
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
cmp dword [ebp - 0x47c], 0
jge 0x450649
mov eax, dword [ebp - 0x46c]
add eax, dword [ebp - 0x470]
mov dword [ebp - 0x474], eax
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x46c], ecx
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x470], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x474]
mov dword [ebp - 0x1c], eax
jmp 0x4505f9
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x480], 0
jmp 0x450671
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 6
jge 0x4506b8
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x45068e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45069e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4506b6
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4506b6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x450662
mov dword [ebp - 4], 0xfffffffe
call fcn.004506c6
jmp 0x4506d5
mov dword [ebp - 4], 6
mov dword [ebp - 0x484], 0
jmp 0x4506f7
mov ecx, dword [ebp - 0x484]
add ecx, 1
mov dword [ebp - 0x484], ecx
cmp dword [ebp - 0x484], 1
jge 0x450736
mov eax, dword [ebp - 0x484]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x450726
mov eax, dword [ebp - 0x484]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x450731
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x450734
mov dword [ebp - 0x1c], eax
jmp 0x4506e8
mov dword [ebp - 4], 0xfffffffe
call fcn.00450744
jmp 0x45074c
mov dword [ebp - 4], 7
mov dword [ebp - 0x488], 0
jmp 0x45076e
mov edx, dword [ebp - 0x488]
add edx, 1
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 1
jge 0x4507b5
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x45078b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45079b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4507b3
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4507b3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x45075f
mov dword [ebp - 4], 0xfffffffe
call fcn.004507c3
jmp 0x4507d2
mov dword [ebp - 4], 8
mov dword [ebp - 0x48c], 0
jmp 0x4507f4
mov ecx, dword [ebp - 0x48c]
add ecx, 1
mov dword [ebp - 0x48c], ecx
cmp dword [ebp - 0x48c], 6
jge 0x45082f
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x450823
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45082a
and eax, 0xbc614e
jmp 0x45082d
mov dword [ebp - 0x1c], eax
jmp 0x4507e5
mov dword [ebp - 4], 0xfffffffe
call fcn.0045083d
jmp 0x450845
mov dword [ebp - 0x490], 1
mov dword [ebp - 0x494], 1
mov dword [ebp - 0x498], 2
mov dword [ebp - 0x49c], 0
mov dword [ebp - 0x4a0], 0
jmp 0x450888
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x4a0], edx
cmp dword [ebp - 0x4a0], 7
jge 0x4508c9
mov eax, dword [ebp - 0x490]
add eax, dword [ebp - 0x494]
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x494]
mov dword [ebp - 0x490], ecx
mov edx, dword [ebp - 0x498]
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x498]
mov dword [ebp - 0x1c], eax
jmp 0x450879
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x4a4], 0
jmp 0x4508f4
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
cmp dword [ebp - 0x4a4], 3
jge 0x45092a
mov eax, dword [ebp - 0x4a4]
and eax, 0x80000001
jns 0x45090f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x45091f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x450928
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4508e5
mov dword [ebp - 4], 0xfffffffe
call fcn.00450938
jmp 0x450955
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x4a8], 0
jmp 0x450977
mov edx, dword [ebp - 0x4a8]
add edx, 1
mov dword [ebp - 0x4a8], edx
cmp dword [ebp - 0x4a8], 8
jge 0x4509b6
mov eax, dword [ebp - 0x4a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4509a6
mov eax, dword [ebp - 0x4a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4509b1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4509b4
mov dword [ebp - 0x1c], eax
jmp 0x450968
mov dword [ebp - 4], 0xfffffffe
call fcn.004509c4
jmp 0x4509cc
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x4ac], 0
jmp 0x4509ee
mov edx, dword [ebp - 0x4ac]
add edx, 1
mov dword [ebp - 0x4ac], edx
cmp dword [ebp - 0x4ac], 2
jge 0x450a35
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x450a0b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x450a1b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x450a33
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450a33
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x4509df
mov dword [ebp - 4], 0xfffffffe
call fcn.00450a43
jmp 0x450a52
mov dword [ebp - 0x4b0], 0
jmp 0x450a6d
mov ecx, dword [ebp - 0x4b0]
add ecx, 1
mov dword [ebp - 0x4b0], ecx
cmp dword [ebp - 0x4b0], 0
jge 0x450a86
mov edx, dword [ebp - 0x4b0]
not edx
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x450a5e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x450a9a
mov eax, dword [ebp - 0x1c]
neg eax
imul eax, eax, 0xfffffffd
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450ab0
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x4b4], 0
jmp 0x450ad2
mov edx, dword [ebp - 0x4b4]
add edx, 1
mov dword [ebp - 0x4b4], edx
cmp dword [ebp - 0x4b4], 7
jge 0x450b08
mov eax, dword [ebp - 0x4b4]
and eax, 0x80000001
jns 0x450aed
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x450afd
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x450b06
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x450ac3
mov dword [ebp - 4], 0xfffffffe
call fcn.00450b16
jmp 0x450b33
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x4b8], 0
jmp 0x450b55
mov edx, dword [ebp - 0x4b8]
add edx, 1
mov dword [ebp - 0x4b8], edx
cmp dword [ebp - 0x4b8], 7
jge 0x450b90
mov eax, dword [ebp - 0x4b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x450b84
mov eax, dword [ebp - 0x4b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x450b8b
and eax, 0xbc614e
jmp 0x450b8e
mov dword [ebp - 0x1c], eax
jmp 0x450b46
mov dword [ebp - 4], 0xfffffffe
call fcn.00450b9e
jmp 0x450ba6
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x4bc], 0
jmp 0x450bc8
mov edx, dword [ebp - 0x4bc]
add edx, 1
mov dword [ebp - 0x4bc], edx
cmp dword [ebp - 0x4bc], 4
jge 0x450c03
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x450bf7
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x450bfe
and eax, 0xbc614e
jmp 0x450c01
mov dword [ebp - 0x1c], eax
jmp 0x450bb9
mov dword [ebp - 4], 0xfffffffe
call fcn.00450c11
jmp 0x450c19
mov dword [ebp - 0x4c0], 1
mov dword [ebp - 0x4c4], 1
mov dword [ebp - 0x4c8], 2
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4d0], 0
jmp 0x450c5c
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
cmp dword [ebp - 0x4d0], 4
jge 0x450c9d
mov eax, dword [ebp - 0x4c0]
add eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x4c8], eax
mov ecx, dword [ebp - 0x4c4]
mov dword [ebp - 0x4c0], ecx
mov edx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x1c], eax
jmp 0x450c4d
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x4d4], 0
jmp 0x450cc8
mov edx, dword [ebp - 0x4d4]
add edx, 1
mov dword [ebp - 0x4d4], edx
cmp dword [ebp - 0x4d4], 5
jge 0x450cfe
mov eax, dword [ebp - 0x4d4]
and eax, 0x80000001
jns 0x450ce3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x450cf3
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x450cfc
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x450cb9
mov dword [ebp - 4], 0xfffffffe
call fcn.00450d0c
jmp 0x450d29
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x4d8], 0
jmp 0x450d4b
mov edx, dword [ebp - 0x4d8]
add edx, 1
mov dword [ebp - 0x4d8], edx
cmp dword [ebp - 0x4d8], 8
jge 0x450d8a
mov eax, dword [ebp - 0x4d8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x450d7a
mov eax, dword [ebp - 0x4d8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x450d85
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x450d88
mov dword [ebp - 0x1c], eax
jmp 0x450d3c
mov dword [ebp - 4], 0xfffffffe
call fcn.00450d98
jmp 0x450da0
mov dword [ebp - 0x4dc], 1
mov dword [ebp - 0x4e0], 1
mov dword [ebp - 0x4e4], 2
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4ec], 0
jmp 0x450de3
mov edx, dword [ebp - 0x4ec]
add edx, 1
mov dword [ebp - 0x4ec], edx
cmp dword [ebp - 0x4ec], 3
jge 0x450e24
mov eax, dword [ebp - 0x4dc]
add eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e0]
mov dword [ebp - 0x4dc], ecx
mov edx, dword [ebp - 0x4e4]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x1c], eax
jmp 0x450dd4
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4f0], 1
mov dword [ebp - 0x4f4], 1
mov dword [ebp - 0x4f8], 2
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x500], 0
jmp 0x450e70
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
cmp dword [ebp - 0x500], 4
jge 0x450eb1
mov eax, dword [ebp - 0x4f0]
add eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x4f8], eax
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp - 0x4f0], ecx
mov edx, dword [ebp - 0x4f8]
mov dword [ebp - 0x4f4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x1c], eax
jmp 0x450e61
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x504], 0
jmp 0x450edc
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
cmp dword [ebp - 0x504], 3
jge 0x450f17
mov eax, dword [ebp - 0x504]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x450f0b
mov eax, dword [ebp - 0x504]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x450f12
and eax, 0xbc614e
jmp 0x450f15
mov dword [ebp - 0x1c], eax
jmp 0x450ecd
mov dword [ebp - 4], 0xfffffffe
call fcn.00450f25
jmp 0x450f2d
mov dword [ebp - 0x508], 0
jmp 0x450f48
mov edx, dword [ebp - 0x508]
add edx, 1
mov dword [ebp - 0x508], edx
cmp dword [ebp - 0x508], 3
jge 0x450f89
cmp dword [ebp - 0x1c], 0
jge 0x450f5f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450f75
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x700]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x450f39
mov dword [ebp - 0x704], 1
mov dword [ebp - 0x708], 1
mov dword [ebp - 0x70c], 2
mov dword [ebp - 0x710], 0
mov dword [ebp - 0x714], 0
jmp 0x450fcc
mov eax, dword [ebp - 0x714]
add eax, 1
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x714], 6
jge 0x45100d
mov ecx, dword [ebp - 0x704]
add ecx, dword [ebp - 0x708]
mov dword [ebp - 0x70c], ecx
mov edx, dword [ebp - 0x708]
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x708], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x1c], ecx
jmp 0x450fbd
mov edx, dword [ebp - 0x1c]
add edx, 6
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x718], 1
mov dword [ebp - 0x71c], 1
mov dword [ebp - 0x720], 2
mov dword [ebp - 0x724], 0
mov dword [ebp - 0x728], 0
jmp 0x451059
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x728], 0
jge 0x45109a
mov ecx, dword [ebp - 0x718]
add ecx, dword [ebp - 0x71c]
mov dword [ebp - 0x720], ecx
mov edx, dword [ebp - 0x71c]
mov dword [ebp - 0x718], edx
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x71c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x720]
mov dword [ebp - 0x1c], ecx
jmp 0x45104a
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x72c], 0
jmp 0x4510c2
mov eax, dword [ebp - 0x72c]
add eax, 1
mov dword [ebp - 0x72c], eax
cmp dword [ebp - 0x72c], 0
jge 0x4510f9
mov ecx, dword [ebp - 0x72c]
and ecx, 0x80000001
jns 0x4510de
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4510ee
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x4510f7
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4510b3
mov dword [ebp - 4], 0xfffffffe
call fcn.00451107
jmp 0x451125
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x730], 0
jmp 0x451147
mov eax, dword [ebp - 0x730]
add eax, 1
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x730], 0
jge 0x45118e
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x451164
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x451174
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
jmp 0x45118c
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45118c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x451138
mov dword [ebp - 4], 0xfffffffe
call fcn.0045119c
jmp 0x4511ab
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x734], 0
jmp 0x4511cd
mov ecx, dword [ebp - 0x734]
add ecx, 1
mov dword [ebp - 0x734], ecx
cmp dword [ebp - 0x734], 4
jge 0x451204
mov edx, dword [ebp - 0x734]
and edx, 0x80000001
jns 0x4511e9
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x4511f9
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x451202
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4511be
mov dword [ebp - 4], 0xfffffffe
call fcn.00451212
jmp 0x451230
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x738], 0
jmp 0x451252
mov ecx, dword [ebp - 0x738]
add ecx, 1
mov dword [ebp - 0x738], ecx
cmp dword [ebp - 0x738], 2
jge 0x45128d
mov eax, dword [ebp - 0x738]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x451281
mov eax, dword [ebp - 0x738]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x451288
and eax, 0xbc614e
jmp 0x45128b
mov dword [ebp - 0x1c], eax
jmp 0x451243
mov dword [ebp - 4], 0xfffffffe
call fcn.0045129b
jmp 0x4512a3
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x73c], 0
jmp 0x4512c5
mov edx, dword [ebp - 0x73c]
add edx, 1
mov dword [ebp - 0x73c], edx
cmp dword [ebp - 0x73c], 1
jge 0x451300
mov eax, dword [ebp - 0x73c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4512f4
mov eax, dword [ebp - 0x73c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4512fb
and eax, 0xbc614e
jmp 0x4512fe
mov dword [ebp - 0x1c], eax
jmp 0x4512b6
mov dword [ebp - 4], 0xfffffffe
call fcn.0045130e
jmp 0x451316
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x740], 0
jmp 0x451338
mov edx, dword [ebp - 0x740]
add edx, 1
mov dword [ebp - 0x740], edx
cmp dword [ebp - 0x740], 3
jge 0x451373
mov eax, dword [ebp - 0x740]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x451367
mov eax, dword [ebp - 0x740]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45136e
and eax, 0xbc614e
jmp 0x451371
mov dword [ebp - 0x1c], eax
jmp 0x451329
mov dword [ebp - 4], 0xfffffffe
call fcn.00451381
jmp 0x451389
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x744], 0
jmp 0x4513ab
mov edx, dword [ebp - 0x744]
add edx, 1
mov dword [ebp - 0x744], edx
cmp dword [ebp - 0x744], 1
jge 0x4513f2
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x4513c8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4513d8
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4513f0
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4513f0
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
jmp 0x45139c
mov dword [ebp - 4], 0xfffffffe
call fcn.00451400
jmp 0x45140f
mov dword [ebp - 0x748], 0
jmp 0x45142a
mov ecx, dword [ebp - 0x748]
add ecx, 1
mov dword [ebp - 0x748], ecx
cmp dword [ebp - 0x748], 3
jge 0x45146b
cmp dword [ebp - 0x1c], 0
jge 0x451441
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x451457
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x940]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x45141b
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x944], 0
jmp 0x45148d
mov eax, dword [ebp - 0x944]
add eax, 1
mov dword [ebp - 0x944], eax
cmp dword [ebp - 0x944], 4
jge 0x4514c8
mov eax, dword [ebp - 0x944]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4514bc
mov eax, dword [ebp - 0x944]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4514c3
and eax, 0xbc614e
jmp 0x4514c6
mov dword [ebp - 0x1c], eax
jmp 0x45147e
mov dword [ebp - 4], 0xfffffffe
call fcn.004514d6
jmp 0x4514de
mov dword [ebp - 0x948], 0
jmp 0x4514f9
mov edx, dword [ebp - 0x948]
add edx, 1
mov dword [ebp - 0x948], edx
cmp dword [ebp - 0x948], 1
jge 0x451512
mov eax, dword [ebp - 0x948]
not eax
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x4514ea
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x451526
mov ecx, dword [ebp - 0x1c]
neg ecx
imul ecx, ecx, 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45153c
mov dword [ebp - 0x1c], 0xb
mov dword [ebp - 0x94c], 1
mov dword [ebp - 0x950], 1
mov dword [ebp - 0x954], 2
mov dword [ebp - 0x958], 0
mov dword [ebp - 0x95c], 0
jmp 0x45157f