Function at 0x487620
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x512370
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x14a4
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x487679
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x30
jge 0x4876bd
cmp dword [ebp - 0x1c], 0
jge 0x48768d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4876a3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0xfa
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x487670
mov dword [ebp - 0x224], 0
jmp 0x4876d8
mov ecx, dword [ebp - 0x224]
add ecx, 1
mov dword [ebp - 0x224], ecx
cmp dword [ebp - 0x224], 0x2d
jge 0x4876ef
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x224]
mov dword [ebp - 0x1c], edx
jmp 0x4876c9
cmp dword [ebp - 0x1c], 0
jge 0x4876fd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x487715
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x228], 0
jmp 0x487730
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 7
jge 0x48777d
cmp dword [ebp - 0x1c], 0
jge 0x487747
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48775d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x22c], 0xfa
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x487721
mov dword [ebp - 0x42c], 0
jmp 0x487798
mov ecx, dword [ebp - 0x42c]
add ecx, 1
mov dword [ebp - 0x42c], ecx
cmp dword [ebp - 0x42c], 0x30
jge 0x4877d9
cmp dword [ebp - 0x1c], 0
jge 0x4877af
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4877c5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x628]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x487789
mov dword [ebp - 0x62c], 0
jmp 0x4877f4
mov eax, dword [ebp - 0x62c]
add eax, 1
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0x12
jge 0x487835
cmp dword [ebp - 0x1c], 0
jge 0x48780b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x487821
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x828]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4877e5
mov dword [ebp - 0x82c], 0
jmp 0x487850
mov eax, dword [ebp - 0x82c]
add eax, 1
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 0x17
jge 0x487867
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x82c]
mov dword [ebp - 0x1c], ecx
jmp 0x487841
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x487879
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x487891
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x830], 0
jmp 0x4878ac
mov edx, dword [ebp - 0x830]
add edx, 1
mov dword [ebp - 0x830], edx
cmp dword [ebp - 0x830], 2
jge 0x4878f9
mov eax, dword [ebp - 0x830]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4878db
mov eax, dword [ebp - 0x830]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4878eb
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x830]
mov dword [ebp - 0x1c], edx
jmp 0x4878f7
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x830]
mov dword [ebp - 0x1c], eax
jmp 0x48789d
mov dword [ebp - 0x834], 0
jmp 0x487914
mov ecx, dword [ebp - 0x834]
add ecx, 1
mov dword [ebp - 0x834], ecx
cmp dword [ebp - 0x834], 4
jge 0x487955
cmp dword [ebp - 0x1c], 0
jge 0x48792b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x487941
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa30]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x487905
mov eax, 1
test eax, eax
je 0x48798f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa34], eax
mov eax, dword [ebp - 0xa34]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x487981
jmp 0x48798f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa34]
mov dword [ebp - 0x1c], edx
jmp 0x487955
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa38], 0
jmp 0x4879b3
mov ecx, dword [ebp - 0xa38]
add ecx, 1
mov dword [ebp - 0xa38], ecx
cmp dword [ebp - 0xa38], 7
jge 0x487a00
mov eax, dword [ebp - 0xa38]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4879e2
mov eax, dword [ebp - 0xa38]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4879f2
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa38]
mov dword [ebp - 0x1c], edx
jmp 0x4879fe
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa38]
mov dword [ebp - 0x1c], eax
jmp 0x4879a4
mov dword [ebp - 0xa3c], 0
jmp 0x487a1b
mov ecx, dword [ebp - 0xa3c]
add ecx, 1
mov dword [ebp - 0xa3c], ecx
cmp dword [ebp - 0xa3c], 0
jge 0x487a5c
cmp dword [ebp - 0x1c], 0
jge 0x487a32
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x487a48
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc38]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x487a0c
mov dword [ebp - 4], 0
mov dword [ebp - 0xc3c], 0xffffffff
mov dword [ebp - 0xc40], 0
jmp 0x487a88
mov eax, dword [ebp - 0xc40]
add eax, 1
mov dword [ebp - 0xc40], eax
cmp dword [ebp - 0xc40], 2
jge 0x487aba
mov eax, dword [ebp - 0xc40]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x487aaf
mov edx, dword [ebp - 0xc3c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x487a79
mov dword [ebp - 4], 0xfffffffe
jmp 0x487ada
mov dword [ebp - 0xc44], 0
jmp 0x487af5
mov edx, dword [ebp - 0xc44]
add edx, 1
mov dword [ebp - 0xc44], edx
cmp dword [ebp - 0xc44], 0xf
jge 0x487b42
cmp dword [ebp - 0x1c], 0
jge 0x487b0c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x487b22
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc48], 0xfa
lea edx, [ebp - 0xc48]
push edx
lea eax, [ebp - 0xe40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x487ae6
mov dword [ebp - 0xe44], 0
jmp 0x487b5d
mov ecx, dword [ebp - 0xe44]
add ecx, 1
mov dword [ebp - 0xe44], ecx
cmp dword [ebp - 0xe44], 7
jge 0x487b74
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xe44]
mov dword [ebp - 0x1c], edx
jmp 0x487b4e
cmp dword [ebp - 0x1c], 0
jge 0x487b82
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x487b9a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x487bd4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe48], eax
mov eax, dword [ebp - 0xe48]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x487bc6
jmp 0x487bd4
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe48]
mov dword [ebp - 0x1c], edx
jmp 0x487b9a
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe4c], 0
jmp 0x487bf8
mov ecx, dword [ebp - 0xe4c]
add ecx, 1
mov dword [ebp - 0xe4c], ecx
cmp dword [ebp - 0xe4c], 9
jge 0x487c0f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xe4c]
mov dword [ebp - 0x1c], edx
jmp 0x487be9
cmp dword [ebp - 0x1c], 0
jge 0x487c1d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x487c35
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe50], 0
jmp 0x487c50
mov edx, dword [ebp - 0xe50]
add edx, 1
mov dword [ebp - 0xe50], edx
cmp dword [ebp - 0xe50], 0xb
jge 0x487c67
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xe50]
mov dword [ebp - 0x1c], eax
jmp 0x487c41
cmp dword [ebp - 0x1c], 0
jge 0x487c75
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x487c8d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe54], 0
jmp 0x487ca8
mov edx, dword [ebp - 0xe54]
add edx, 1
mov dword [ebp - 0xe54], edx
cmp dword [ebp - 0xe54], 4
jge 0x487ce9
cmp dword [ebp - 0x1c], 0
jge 0x487cbf
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x487cd5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1050]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x487c99
mov eax, 1
test eax, eax
je 0x487d23
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1054], eax
mov eax, dword [ebp - 0x1054]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x487d15
jmp 0x487d23
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1054]
mov dword [ebp - 0x1c], edx
jmp 0x487ce9
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x1058], 0xffffffff
mov dword [ebp - 0x105c], 0
jmp 0x487d58
mov ecx, dword [ebp - 0x105c]
add ecx, 1
mov dword [ebp - 0x105c], ecx
cmp dword [ebp - 0x105c], 0xa
jge 0x487d8a
mov eax, dword [ebp - 0x105c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x487d7f
mov edx, dword [ebp - 0x1058]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x487d49
mov dword [ebp - 4], 0xfffffffe
jmp 0x487daa
mov dword [ebp - 0x1060], 0
jmp 0x487dc5
mov edx, dword [ebp - 0x1060]
add edx, 1
mov dword [ebp - 0x1060], edx
cmp dword [ebp - 0x1060], 7
jge 0x487ddc
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1060]
mov dword [ebp - 0x1c], eax
jmp 0x487db6
cmp dword [ebp - 0x1c], 0
jge 0x487dea
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x487e02
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1064], 0
jmp 0x487e1d
mov edx, dword [ebp - 0x1064]
add edx, 1
mov dword [ebp - 0x1064], edx
cmp dword [ebp - 0x1064], 8
jge 0x487e6a
mov eax, dword [ebp - 0x1064]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x487e4c
mov eax, dword [ebp - 0x1064]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x487e5c
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1064]
mov dword [ebp - 0x1c], edx
jmp 0x487e68
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1064]
mov dword [ebp - 0x1c], eax
jmp 0x487e0e
mov dword [ebp - 0x1068], 0
jmp 0x487e85
mov ecx, dword [ebp - 0x1068]
add ecx, 1
mov dword [ebp - 0x1068], ecx
cmp dword [ebp - 0x1068], 3
jge 0x487e9c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1068]
mov dword [ebp - 0x1c], edx
jmp 0x487e76
cmp dword [ebp - 0x1c], 0
jge 0x487eaa
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x487ec2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x106c], 0
jmp 0x487edd
mov edx, dword [ebp - 0x106c]
add edx, 1
mov dword [ebp - 0x106c], edx
cmp dword [ebp - 0x106c], 0
jge 0x487f1e
cmp dword [ebp - 0x1c], 0
jge 0x487ef4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x487f0a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1268]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x487ece
mov dword [ebp - 0x126c], 0
jmp 0x487f39
mov eax, dword [ebp - 0x126c]
add eax, 1
mov dword [ebp - 0x126c], eax
cmp dword [ebp - 0x126c], 7
jge 0x487f50
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x126c]
mov dword [ebp - 0x1c], ecx
jmp 0x487f2a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x487f62
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x487f7a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x487fb4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1270], eax
mov eax, dword [ebp - 0x1270]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x487fa6
jmp 0x487fb4
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1270]
mov dword [ebp - 0x1c], edx
jmp 0x487f7a
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x487ff7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1274], eax
mov eax, dword [ebp - 0x1274]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x487fe9
jmp 0x487ff7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1274]
mov dword [ebp - 0x1c], edx
jmp 0x487fbd
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1278], 0
jmp 0x488018
mov ecx, dword [ebp - 0x1278]
add ecx, 1
mov dword [ebp - 0x1278], ecx
cmp dword [ebp - 0x1278], 5
jge 0x488065
mov eax, dword [ebp - 0x1278]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x488047
mov eax, dword [ebp - 0x1278]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x488057
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1278]
mov dword [ebp - 0x1c], edx
jmp 0x488063
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1278]
mov dword [ebp - 0x1c], eax
jmp 0x488009
mov dword [ebp - 4], 2
mov dword [ebp - 0x127c], 0xffffffff
mov dword [ebp - 0x1280], 0
jmp 0x488091
mov ecx, dword [ebp - 0x1280]
add ecx, 1
mov dword [ebp - 0x1280], ecx
cmp dword [ebp - 0x1280], 5
jge 0x4880c3
mov eax, dword [ebp - 0x1280]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4880b8
mov edx, dword [ebp - 0x127c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x488082
mov dword [ebp - 4], 0xfffffffe
jmp 0x4880e3
mov dword [ebp - 0x1284], 0
jmp 0x4880fe
mov edx, dword [ebp - 0x1284]
add edx, 1
mov dword [ebp - 0x1284], edx
cmp dword [ebp - 0x1284], 5
jge 0x488115
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1284]
mov dword [ebp - 0x1c], eax
jmp 0x4880ef
cmp dword [ebp - 0x1c], 0
jge 0x488123
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48813b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x488175
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1288], eax
mov eax, dword [ebp - 0x1288]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x488167
jmp 0x488175
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1288]
mov dword [ebp - 0x1c], edx
jmp 0x48813b
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4881b8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x128c], eax
mov eax, dword [ebp - 0x128c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4881aa
jmp 0x4881b8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x128c]
mov dword [ebp - 0x1c], edx
jmp 0x48817e
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x1290], 0xffffffff
mov dword [ebp - 0x1294], 0
jmp 0x4881ed
mov ecx, dword [ebp - 0x1294]
add ecx, 1
mov dword [ebp - 0x1294], ecx
cmp dword [ebp - 0x1294], 3
jge 0x48821f
mov eax, dword [ebp - 0x1294]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x488214
mov edx, dword [ebp - 0x1290]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4881de
mov dword [ebp - 4], 0xfffffffe
jmp 0x48823f
mov edx, 1
test edx, edx
je 0x488279
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1298], eax
mov eax, dword [ebp - 0x1298]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x48826b
jmp 0x488279
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1298]
mov dword [ebp - 0x1c], edx
jmp 0x48823f
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4882bc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x129c], eax
mov eax, dword [ebp - 0x129c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4882ae
jmp 0x4882bc
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x129c]
mov dword [ebp - 0x1c], edx
jmp 0x488282
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12a0], 0
jmp 0x4882e0
mov ecx, dword [ebp - 0x12a0]
add ecx, 1
mov dword [ebp - 0x12a0], ecx
cmp dword [ebp - 0x12a0], 7
jge 0x488321
cmp dword [ebp - 0x1c], 0
jge 0x4882f7
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48830d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1498]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4882d1
mov dword [ebp - 0x149c], 0
jmp 0x48833c
mov eax, dword [ebp - 0x149c]
add eax, 1
mov dword [ebp - 0x149c], eax
cmp dword [ebp - 0x149c], 7
jge 0x488353
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x149c]
mov dword [ebp - 0x1c], ecx
jmp 0x48832d
cmp dword [ebp - 0x1c], 0
jge 0x488361
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x488379
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4883b3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x14a0], eax
mov eax, dword [ebp - 0x14a0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4883a5
jmp 0x4883b3
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14a0]
mov dword [ebp - 0x1c], edx
jmp 0x488379
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14a4], 0
jmp 0x4883d4
mov ecx, dword [ebp - 0x14a4]
add ecx, 1
mov dword [ebp - 0x14a4], ecx
cmp dword [ebp - 0x14a4], 7
jge 0x488421
mov eax, dword [ebp - 0x14a4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x488403
mov eax, dword [ebp - 0x14a4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x488413
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14a4]
mov dword [ebp - 0x1c], edx
jmp 0x48841f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x14a4]
mov dword [ebp - 0x1c], eax
jmp 0x4883c5
mov ecx, 1
test ecx, ecx
je 0x48845b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x14a8], eax
mov eax, dword [ebp - 0x14a8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x48844d
jmp 0x48845b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14a8]
mov dword [ebp - 0x1c], edx
jmp 0x488421
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x14ac], 0xffffffff
mov dword [ebp - 0x14b0], 0
jmp 0x488490
mov ecx, dword [ebp - 0x14b0]
add ecx, 1
mov dword [ebp - 0x14b0], ecx
cmp dword [ebp - 0x14b0], 0
jge 0x4884c2
mov eax, dword [ebp - 0x14b0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4884b7
mov edx, dword [ebp - 0x14ac]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x488481
mov dword [ebp - 4], 0xfffffffe
jmp 0x4884e2
mov edx, 1
test edx, edx
je 0x48851c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x14b4], eax
mov eax, dword [ebp - 0x14b4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x48850e
jmp 0x48851c
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14b4]
mov dword [ebp - 0x1c], edx
jmp 0x4884e2
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14b8], 0
jmp 0x488540
mov ecx, dword [ebp - 0x14b8]
add ecx, 1
mov dword [ebp - 0x14b8], ecx
cmp dword [ebp - 0x14b8], 2
jge 0x488557
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x14b8]
mov dword [ebp - 0x1c], edx
jmp 0x488531
cmp dword [ebp - 0x1c], 0
jge 0x488565
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48857d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14bc], 0
jmp 0x488598
mov edx, dword [ebp - 0x14bc]
add edx, 1
mov dword [ebp - 0x14bc], edx
cmp dword [ebp - 0x14bc], 0
jge 0x4885e5
mov eax, dword [ebp - 0x14bc]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4885c7
mov eax, dword [ebp - 0x14bc]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4885d7
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14bc]
mov dword [ebp - 0x1c], edx
jmp 0x4885e3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x14bc]
mov dword [ebp - 0x1c], eax
jmp 0x488589
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x28]
xor ecx, ebp
call fcn.004079a5
mov esp, ebp
pop ebp
ret