Function at 0x450290
Capabilities:
Create thread
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f1f7a
mov eax, dword fs:[0]
push eax
sub esp, 0x210
mov eax, dword [0x674ff8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x21c], 0x730c40
mov dword [0x730c40], 0x644460
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x4502e4
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c44], eax
mov dword [ebp - 4], 0
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x45030d
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c48], eax
push 0x63ca44
mov ecx, 0x730c4c
mov byte [ebp - 4], 2
call fcn.00404b00
push 0x63ca44
mov ecx, 0x730c50
call fcn.00404b00
push 0x63ca44
mov ecx, 0x730c54
call fcn.00404b00
push 0x63ca44
mov ecx, 0x730c58
call fcn.00404b00
mov ecx, 0x730c5c
mov byte [ebp - 4], 3
call fcn.00448fc0
mov ecx, 0x730c68
mov byte [ebp - 4], 4
call fcn.0044a960
mov byte [ebp - 4], 5
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x45038f
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c74], eax
mov byte [ebp - 4], 6
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x4503b5
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c78], eax
mov byte [ebp - 4], 7
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x4503db
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c7c], eax
mov byte [ebp - 4], 8
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x450401
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c80], eax
mov byte [ebp - 4], 9
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x450427
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c84], eax
mov byte [ebp - 4], 0xa
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x45044d
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c88], eax
mov byte [ebp - 4], 0xb
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x450473
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c8c], eax
mov byte [ebp - 4], 0xc
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x450499
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730c90], eax
push 0xa
mov ecx, 0x730ca0
mov byte [ebp - 4], 0xd
call fcn.0049dfd8
mov dword [0x730cbc], 0
mov dword [0x730cc0], 0
mov dword [0x730cc4], 0
mov ecx, 0x730cd8
mov byte [ebp - 4], 0xf
call fcn.004a063b
mov byte [ebp - 4], 0x10
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x4504fb
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730cec], eax
push 0
push 0x63ca44
mov ecx, 0x730c90
mov byte [ebp - 4], 0x11
call fcn.004049c0
push 0x730c90
mov ecx, 0x730c88
call fcn.00404270
push 0x730c88
mov ecx, 0x730c84
call fcn.00404270
push 0x730c84
mov ecx, 0x730c80
call fcn.00404270
push 0x730c80
mov ecx, 0x730c7c
call fcn.00404270
push 0x730c7c
mov ecx, 0x730c78
call fcn.00404270
push 0x730c78
mov ecx, 0x730c74
call fcn.00404270
push 0x730c74
mov ecx, 0x730c48
call fcn.00404270
mov ecx, 0x730ca0
call fcn.0049e1b2
mov eax, dword [0x730cbc]
mov ecx, 0x730cec
push 0
push 0x63ca44
mov dword [0x730cc0], eax
call fcn.004049c0
push 0x730cd0
push 0
push 0x730c40
push 0x44fe30
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x730cd4
push 0
push 0x730c40
push 0x44fea0
push 0
push 0
mov dword [0x730cc8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x208
mov dword [0x730ccc], eax
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.005c7190
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x450620
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
mov ecx, 0x730c8c
call fcn.004049c0
push 1
push 0x63d128
mov ecx, 0x730c8c
call fcn.0040a630
mov eax, 0x730c40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c2ae8
mov esp, ebp
pop ebp
ret