Function at 0x40360b
Capabilities:
Check for time delay via gettickcount
Check os version
Get common file path

Disassembly:
push 0x324
push 0x4a1238
call fcn.0045cba0
xor eax, eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x31
jge 0x40365b
mov eax, dword [ebp - 0x2e0]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x40364d
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x403653
inc dword [ebp - 0x214]
inc dword [ebp - 0x2e0]
jmp 0x40362b
push 0xfffffffffffffffe
pop esi
mov dword [ebp - 4], esi
call fcn.004036b7
mov dword [ebp - 4], 1
push 7
pop ecx
mov dword [ebp - 0x2e8], ecx
and dword [ebp - 0x298], 0
cmp dword [ebp - 0x298], 0x38
jge 0x4036e8
mov eax, dword [ebp - 0x298]
cdq
mov ebx, ecx
idiv ebx
test edx, edx
jne 0x40369b
dec dword [ebp - 0x2e8]
mov eax, edi
cdq
idiv dword [ebp - 0x2e8]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x298]
jmp 0x40367d
mov dword [ebp - 4], esi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x403703
cmp edx, 4
je 0x403703
and edi, ecx
jmp 0x403705
sub edi, ecx
mov dword [ebp - 0x214], edi
inc ecx
cmp ecx, 0x30
jl 0x4036ed
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 2
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 0xe
jge 0x403763
mov eax, dword [ebp - 0x220]
and eax, reloc.WS2_32.dll_accept
jns 0x40374c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x403754
inc edi
jmp 0x403755
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x220]
jmp 0x403731
mov dword [ebp - 4], esi
call fcn.004037a5
mov dword [ebp - 4], 3
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 0x18
jge 0x4037cc
mov eax, dword [ebp - 0x2c8]
and eax, reloc.WS2_32.dll_accept
jns 0x403794
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4037bd
inc edi
jmp 0x4037be
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2c8]
jmp 0x403779
mov dword [ebp - 4], esi
call fcn.004037f5
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x40380d
cmp edx, 4
je 0x40380d
and edi, ecx
jmp 0x40380f
sub edi, ecx
mov dword [ebp - 0x214], edi
inc ecx
push 7
pop ebx
cmp ecx, ebx
jl 0x4037d6
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 4
mov dword [ebp - 0x334], ebx
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0x18
jge 0x40389f
mov eax, dword [ebp - 0x228]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x403861
dec dword [ebp - 0x334]
mov eax, edi
cdq
idiv dword [ebp - 0x334]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x228]
jmp 0x403843
mov dword [ebp - 4], esi
mov dword [ebp - 4], 5
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0xb
jge 0x4038e2
mov eax, dword [ebp - 0x2b0]
and eax, reloc.WS2_32.dll_accept
jns 0x4038cb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4038d3
inc edi
jmp 0x4038d4
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2b0]
jmp 0x4038b0
mov dword [ebp - 4], esi
call fcn.00403941
mov dword [ebp - 4], 6
push 7
pop ecx
mov dword [ebp - 0x2f0], ecx
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0xa
jge 0x40397e
mov eax, dword [ebp - 0x230]
cdq
mov ebx, ecx
idiv ebx
test edx, edx
jne 0x40391f
dec dword [ebp - 0x2f0]
mov eax, edi
cdq
idiv dword [ebp - 0x2f0]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x230]
jmp 0x403901
mov dword [ebp - 4], esi
xor eax, eax
sub edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 5
jl 0x403983
mov ebx, 0xffff0001
cmp edi, ebx
jge 0x4039a3
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x4039bd
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov edi, eax
mov dword [ebp - 0x214], edi
xor eax, eax
sub edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 0xa
jl 0x4039bf
cmp edi, ebx
jge 0x4039da
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x4039f4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov edi, eax
mov dword [ebp - 0x214], edi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x403a0c
cmp edx, 4
je 0x403a0c
and edi, ecx
jmp 0x403a0e
sub edi, ecx
mov dword [ebp - 0x214], edi
inc ecx
cmp ecx, 5
jl 0x4039f6
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
and edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 2
jl 0x403a2e
test edi, edi
jns 0x403a49
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x403a63
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
mov dword [ebp - 0x214], edi
push 7
pop ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x330], ecx
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2d8], 4
jge 0x403aad
mov eax, dword [ebp - 0x2d8]
cdq
mov ebx, ecx
idiv ebx
test edx, edx
jne 0x403a94
dec dword [ebp - 0x330]
mov eax, edi
cdq
idiv dword [ebp - 0x330]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2d8]
jmp 0x403a76
mov dword [ebp - 4], esi
jmp 0x403ada
mov dword [ebp - 4], 8
mov dword [ebp - 0x2f8], ecx
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0xa
jge 0x403b25
mov eax, dword [ebp - 0x238]
cdq
mov ebx, ecx
idiv ebx
test edx, edx
jne 0x403b0c
dec dword [ebp - 0x2f8]
mov eax, edi
cdq
idiv dword [ebp - 0x2f8]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x238]
jmp 0x403aee
mov dword [ebp - 4], esi
jmp 0x403b52
mov dword [ebp - 4], 9
and dword [ebp - 0x2b8], 0
cmp dword [ebp - 0x2b8], ecx
jge 0x403b91
mov eax, dword [ebp - 0x2b8]
and eax, reloc.WS2_32.dll_accept
jns 0x403b7a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x403b82
inc edi
jmp 0x403b83
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2b8]
jmp 0x403b60
mov dword [ebp - 4], esi
call fcn.00403bf0
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x318], ecx
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 0xf
jge 0x403c2d
mov eax, dword [ebp - 0x240]
cdq
mov ebx, ecx
idiv ebx
test edx, edx
jne 0x403bcb
dec dword [ebp - 0x318]
mov eax, edi
cdq
idiv dword [ebp - 0x318]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x240]
jmp 0x403bad
mov dword [ebp - 4], esi
mov dword [ebp - 4], 0xb
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0
jge 0x403c6f
mov eax, dword [ebp - 0x2d0]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x403c60
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x403c67
inc edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2d0]
jmp 0x403c3e
mov dword [ebp - 4], esi
call fcn.00403caa
mov dword [ebp - 4], 0xc
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0
jge 0x403cc3
mov eax, dword [ebp - 0x248]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x403cb5
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x403cbb
inc dword [ebp - 0x214]
inc dword [ebp - 0x248]
jmp 0x403c85
mov dword [ebp - 4], esi
call fcn.00403dad
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
xor edx, edx
push 3
pop ecx
div ecx
test edx, edx
jne 0x4054c4
add dword [ebp - 0x214], 0xb
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 0xa
jl 0x403ced
cmp dword [ebp - 0x214], 0
jge 0x403d11
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x403d2d
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor edi, edi
call ebx
xor edx, edx
push 3
pop ecx
div ecx
test edx, edx
jne 0x4054af
add dword [ebp - 0x214], 0x10
xor edi, edi
call ebx
xor edx, edx
push 3
pop ecx
div ecx
test edx, edx
jne 0x40549a
inc dword [ebp - 0x214]
xor edi, edi
call ebx
xor edx, edx
push 3
pop ecx
div ecx
test edx, edx
jne 0x405485
add dword [ebp - 0x214], 4
push 0xfa
lea eax, [ebp - 0x210]
push eax
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call edi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x403db8
cmp edx, 4
je 0x403db8
and dword [ebp - 0x214], ecx
jmp 0x403dbe
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 6
jl 0x403d90
push 0xfa
lea eax, [ebp - 0x210]
push eax
call edi
mov dword [ebp - 4], 0xd
push 7
pop ecx
mov dword [ebp - 0x300], ecx
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 2
jge 0x403e45
mov eax, dword [ebp - 0x294]
cdq
mov edi, ecx
idiv edi
test edx, edx
jne 0x403e07
dec dword [ebp - 0x300]
mov eax, dword [ebp - 0x214]
cdq
idiv dword [ebp - 0x300]
mov dword [ebp - 0x214], eax
inc dword [ebp - 0x294]
jmp 0x403de9
mov dword [ebp - 4], esi
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x403e4a
cmp dword [ebp - 0x214], 0xffff0001
jge 0x403e71
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x403e8d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0xe
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x250], 8
jge 0x403ecb
mov eax, dword [ebp - 0x250]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x403ebd
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x403ec3
inc dword [ebp - 0x214]
inc dword [ebp - 0x250]
jmp 0x403e9b
mov dword [ebp - 4], esi
call fcn.00403f24
mov dword [ebp - 4], 0xf
push 7
pop ecx
mov dword [ebp - 0x328], ecx
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 8
jge 0x403f55
mov eax, dword [ebp - 0x29c]
cdq
mov edi, ecx
idiv edi
test edx, edx
jne 0x403f08
dec dword [ebp - 0x328]
mov eax, ebx
cdq
idiv dword [ebp - 0x328]
mov ebx, eax
mov dword [ebp - 0x214], ebx
inc dword [ebp - 0x29c]
jmp 0x403eea
mov dword [ebp - 4], esi
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
push 3
pop ecx
div ecx
test edx, edx
jne 0x405476
add ebx, 2
mov dword [ebp - 0x214], ebx
mov dword [ebp - 4], 0x10
and dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 7
jge 0x403fb6
mov eax, dword [ebp - 0x258]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x403fa7
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x403fae
inc ebx
mov dword [ebp - 0x214], ebx
inc dword [ebp - 0x258]
jmp 0x403f85
mov dword [ebp - 4], esi
call fcn.00403ff1
mov dword [ebp - 4], 0x11
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 6
jge 0x40400a
mov eax, dword [ebp - 0x2a4]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x403ffc
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x404002
inc dword [ebp - 0x214]
inc dword [ebp - 0x2a4]
jmp 0x403fcc
mov dword [ebp - 4], esi
call fcn.00404045
mov dword [ebp - 4], 0x12
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0
jge 0x40405e
mov eax, dword [ebp - 0x260]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x404050
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x404056
inc dword [ebp - 0x214]
inc dword [ebp - 0x260]
jmp 0x404020
mov dword [ebp - 4], esi
call fcn.0040408c
mov edi, 0xaaaaaaae
mov dword [ebp - 0x214], edi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x404097
cmp edx, 4
je 0x404097
and edi, ecx
jmp 0x404099
sub edi, ecx
mov dword [ebp - 0x214], edi
inc ecx
cmp ecx, 4
jl 0x404073
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 0x13
push 7
pop ecx
mov dword [ebp - 0x308], ecx
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], ecx
jge 0x404129
mov eax, dword [ebp - 0x2ac]
cdq
mov ebx, ecx
idiv ebx
test edx, edx
jne 0x4040eb
dec dword [ebp - 0x308]
mov eax, edi
cdq
idiv dword [ebp - 0x308]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2ac]
jmp 0x4040ce
mov dword [ebp - 4], esi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x404144
cmp edx, 4
je 0x404144
and edi, ecx
jmp 0x404146
sub edi, ecx
mov dword [ebp - 0x214], edi
inc ecx
cmp ecx, 7
jl 0x40412e
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
sub edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 5
jl 0x404166
cmp edi, 0xffff0001
jge 0x404185
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x40419f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov edi, eax
mov dword [ebp - 0x214], edi
xor eax, eax
and edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 6
jl 0x4041a1
test edi, edi
jns 0x4041bc
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x4041d6
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
mov dword [ebp - 0x214], edi
mov dword [ebp - 4], 0x14
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 8
jge 0x404216
mov eax, dword [ebp - 0x268]
and eax, reloc.WS2_32.dll_accept
jns 0x4041ff
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x404207
inc edi
jmp 0x404208
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x268]
jmp 0x4041e4
mov dword [ebp - 4], esi
call fcn.00404275
mov dword [ebp - 4], 0x15
push 7
pop ecx
mov dword [ebp - 0x320], ecx
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 1
jge 0x4042b2
mov eax, dword [ebp - 0x2b4]
cdq
mov ebx, ecx
idiv ebx
test edx, edx
jne 0x404253
dec dword [ebp - 0x320]
mov eax, edi
cdq
idiv dword [ebp - 0x320]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2b4]
jmp 0x404235
mov dword [ebp - 4], esi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x4042cd
cmp edx, 4
je 0x4042cd
and edi, ecx
jmp 0x4042cf
sub edi, ecx
mov dword [ebp - 0x214], edi
inc ecx
push 7
pop ebx
cmp ecx, ebx
jl 0x4042b7
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 0x16
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 5
jge 0x40432f
mov eax, dword [ebp - 0x270]
and eax, reloc.WS2_32.dll_accept
jns 0x404318
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x404320
inc edi
jmp 0x404321
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x270]
jmp 0x4042fd
mov dword [ebp - 4], esi
call fcn.0040438d
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x310], ebx
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], ebx
jge 0x4043a5
mov eax, dword [ebp - 0x2bc]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x404368
dec dword [ebp - 0x310]
mov eax, edi
cdq
idiv dword [ebp - 0x310]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2bc]
jmp 0x40434b
mov dword [ebp - 4], esi
jmp 0x4043d4
xor eax, eax
sub edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, ebx
jl 0x4043d6
cmp edi, 0xffff0001
jge 0x4043f4
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
mov ecx, ebx
idiv ecx
test edx, edx
je 0x40440d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov edi, eax
mov dword [ebp - 0x214], edi
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x2ec], ebx
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 3
jge 0x40447d
mov eax, dword [ebp - 0x278]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x40443f
dec dword [ebp - 0x2ec]
mov eax, edi
cdq
idiv dword [ebp - 0x2ec]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x278]
jmp 0x404421
mov dword [ebp - 4], esi
xor ebx, ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
push 3
pop ecx
div ecx
test edx, edx
jne 0x405467
add edi, 4
mov dword [ebp - 0x214], edi
mov dword [ebp - 4], 0x19
and dword [ebp - 0x2c4], edx
cmp dword [ebp - 0x2c4], 1
jge 0x4044df
mov eax, dword [ebp - 0x2c4]
and eax, reloc.WS2_32.dll_accept
jns 0x4044c8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4044d0
inc edi
jmp 0x4044d1
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2c4]
jmp 0x4044ad
mov dword [ebp - 4], esi
call fcn.00404533
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 0x1a
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x280], 1
jge 0x40455a
mov eax, dword [ebp - 0x280]
and eax, reloc.WS2_32.dll_accept
jns 0x404522
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x40454b
inc edi
jmp 0x40454c
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x280]
jmp 0x404507
mov dword [ebp - 4], esi
call fcn.004045b9
mov dword [ebp - 4], 0x1b
push 7
pop ebx
mov dword [ebp - 0x2f4], ebx
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 1
jge 0x4045d1
mov eax, dword [ebp - 0x2cc]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x404597
dec dword [ebp - 0x2f4]
mov eax, edi
cdq
idiv dword [ebp - 0x2f4]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2cc]
jmp 0x404579
mov dword [ebp - 4], esi
jmp 0x404600
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x2fc], ebx
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 2
jge 0x404682
mov eax, dword [ebp - 0x288]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x404644
dec dword [ebp - 0x2fc]
mov eax, edi
cdq
idiv dword [ebp - 0x2fc]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x288]
jmp 0x404626
mov dword [ebp - 4], esi
mov dword [ebp - 4], 0x1d
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 3
jge 0x4046c5
mov eax, dword [ebp - 0x2d4]
and eax, reloc.WS2_32.dll_accept
jns 0x4046ae
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4046b6
inc edi
jmp 0x4046b7
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2d4]
jmp 0x404693
mov dword [ebp - 4], esi
call fcn.0040477a
xor ebx, ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
push 3
pop ecx
div ecx
test edx, edx
jne 0x405458
add edi, ecx
mov dword [ebp - 0x214], edi
xor eax, eax
and edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 3
jl 0x4046ee
test edi, edi
jns 0x404709
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x404723
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
mov dword [ebp - 0x214], edi
mov dword [ebp - 4], 0x1e
push 7
pop ecx
mov dword [ebp - 0x304], ecx
and dword [ebp - 0x290], 0
cmp dword [ebp - 0x290], 3
jge 0x4047b7
mov eax, dword [ebp - 0x290]
cdq
mov ebx, ecx
idiv ebx
test edx, edx
jne 0x404758
dec dword [ebp - 0x304]
mov eax, edi
cdq
idiv dword [ebp - 0x304]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x290]
jmp 0x40473a
mov dword [ebp - 4], esi
xor eax, eax
and edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 2
jl 0x4047bc
test edi, edi
jns 0x4047d7
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x4047f1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
mov dword [ebp - 0x214], edi
mov dword [ebp - 4], 0x1f
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 3
jge 0x404831
mov eax, dword [ebp - 0x2dc]
and eax, reloc.WS2_32.dll_accept
jns 0x40481a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x404822
inc edi
jmp 0x404823
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2dc]
jmp 0x4047ff
mov dword [ebp - 4], esi
call fcn.004048ae
xor ebx, ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
push 3
pop ecx
div ecx
test edx, edx
jne 0x405449
add edi, ecx
mov dword [ebp - 0x214], edi
mov dword [ebp - 4], 0x20
push 7
pop ebx
mov dword [ebp - 0x30c], ebx
and dword [ebp - 0x2e4], edx
cmp dword [ebp - 0x2e4], 2
jge 0x4048c6
mov eax, dword [ebp - 0x2e4]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x40488c
dec dword [ebp - 0x30c]
mov eax, edi
cdq
idiv dword [ebp - 0x30c]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2e4]
jmp 0x40486e
mov dword [ebp - 4], esi
jmp 0x4048f5
mov dword [ebp - 4], 0x21
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 2
jge 0x404935
mov eax, dword [ebp - 0x2c0]
and eax, reloc.WS2_32.dll_accept
jns 0x40491e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x404926
inc edi
jmp 0x404927
dec edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2c0]
jmp 0x404903
mov dword [ebp - 4], esi
call fcn.004049ce
xor eax, eax
sub edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 3
jl 0x40493f
cmp edi, 0xffff0001
jge 0x40495e
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
mov ecx, ebx
idiv ecx
test edx, edx
je 0x404977
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov edi, eax
mov dword [ebp - 0x214], edi
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x314], ebx
and dword [ebp - 0x2a0], 0
cmp dword [ebp - 0x2a0], 2
jge 0x4049e6
mov eax, dword [ebp - 0x2a0]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x4049a9
dec dword [ebp - 0x314]
mov eax, edi
cdq
idiv dword [ebp - 0x314]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2a0]
jmp 0x40498b
mov dword [ebp - 4], esi
jmp 0x404a15
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x31c], ebx
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 1
jge 0x404a85
mov eax, dword [ebp - 0x218]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x404a47
dec dword [ebp - 0x31c]
mov eax, edi
cdq
idiv dword [ebp - 0x31c]
mov edi, eax
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x218]
jmp 0x404a29
mov dword [ebp - 4], esi
xor eax, eax
and edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 2
jl 0x404a8a
test edi, edi
jns 0x404aa5
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x404abf
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
mov dword [ebp - 0x214], edi
mov dword [ebp - 4], 0x24
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0
jge 0x404afe
mov eax, dword [ebp - 0x2a8]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x404aef
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x404af6
inc edi
mov dword [ebp - 0x214], edi
inc dword [ebp - 0x2a8]
jmp 0x404acd
mov dword [ebp - 4], esi
call fcn.00404b74
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
push 3
pop ecx
div ecx
test edx, edx
jne 0x40543a
inc ebx
mov dword [ebp - 0x214], ebx
mov dword [ebp - 4], 0x25
push 7
pop ecx
mov dword [ebp - 0x324], ecx
and dword [ebp - 0x21c], edx
cmp dword [ebp - 0x21c], 2
jge 0x404ba5
mov eax, dword [ebp - 0x21c]
cdq
mov edi, ecx
idiv edi
test edx, edx
jne 0x404b58
dec dword [ebp - 0x324]
mov eax, ebx
cdq
idiv dword [ebp - 0x324]
mov ebx, eax
mov dword [ebp - 0x214], ebx
inc dword [ebp - 0x21c]
jmp 0x404b3a
mov dword [ebp - 4], esi
mov dword [ebp - 4], 0x26
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0
jge 0x404be7
mov eax, dword [ebp - 0x224]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x404bd8
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x404bdf
inc ebx
mov dword [ebp - 0x214], ebx
inc dword [ebp - 0x224]
jmp 0x404bb6
mov dword [ebp - 4], esi
call fcn.00404c64
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x404bf1
cmp dword [ebp - 0x214], 0
jge 0x404c15
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x404c31
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0x27
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 2
jge 0x404c7d
mov eax, dword [ebp - 0x22c]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x404c6f
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x404c75
inc dword [ebp - 0x214]
inc dword [ebp - 0x22c]
jmp 0x404c3f
mov dword [ebp - 4], esi
call fcn.00404cb8
mov dword [ebp - 4], 0x28
and dword [ebp - 0x234], 0
cmp dword [ebp - 0x234], 1
jge 0x404cd1
mov eax, dword [ebp - 0x234]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x404cc3
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x404cc9
inc dword [ebp - 0x214]
inc dword [ebp - 0x234]
jmp 0x404c93
mov dword [ebp - 4], esi
call fcn.00404d12
mov dword [ebp - 4], 0x29
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 3
jge 0x404d2b
mov eax, dword [ebp - 0x23c]
and eax, reloc.WS2_32.dll_accept
jns 0x404d02
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x404d1d
inc dword [ebp - 0x214]
jmp 0x404d23
dec dword [ebp - 0x214]
inc dword [ebp - 0x23c]
jmp 0x404ce7
mov dword [ebp - 4], esi
call fcn.00404dae
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x404d35
cmp dword [ebp - 0x214], 0
jge 0x404d59
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x404d75
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0x2a
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 1
jge 0x404dd7
mov eax, dword [ebp - 0x244]
and eax, reloc.WS2_32.dll_accept
jns 0x404d9e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x404dc9
inc dword [ebp - 0x214]
jmp 0x404dcf
dec dword [ebp - 0x214]
inc dword [ebp - 0x244]
jmp 0x404d83
mov dword [ebp - 4], esi
call fcn.00404e57
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x404de1
cmp dword [ebp - 0x214], 0xffff0001
jge 0x404e08
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x404e24
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0x2b
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 3
jge 0x404e80
mov eax, dword [ebp - 0x24c]
cdq
push 3
pop ecx
idiv ecx
cmp edx, 1
jne 0x404e72
mov eax, ebx
nop
mov ecx, edx
nop
jmp 0x404e78
inc dword [ebp - 0x214]
inc dword [ebp - 0x24c]
jmp 0x404e32
mov dword [ebp - 4], esi
call fcn.00404f8b
xor eax, eax
sub edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 4
jl 0x404e8a
cmp edi, 0xffff0001
jge 0x404ea9
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x404ec3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov edi, eax
mov dword [ebp - 0x214], edi
test edi, edi
jns 0x404ed0
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x404eea
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
mov dword [ebp - 0x214], edi
xor eax, eax
and edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 3
jl 0x404eec
test edi, edi
jns 0x404f07
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x404f21
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
mov dword [ebp - 0x214], edi
xor eax, eax
and edi, eax
mov dword [ebp - 0x214], edi
inc eax
cmp eax, 2
jl 0x404f23
test edi, edi
jns 0x404f3e
imul edi, edi, 0xfffffffb
mov dword [ebp - 0x214], edi
mov eax, edi
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x404f58
imul ebx, edi
mov dword [ebp - 0x214], ebx
inc edi
jmp 0x404b08
imul edi, ebx
mov dword [ebp - 0x214], edi
inc ebx
jmp 0x40483b
imul edi, ebx
mov dword [ebp - 0x214], edi
inc ebx
jmp 0x4046cf
imul edi, ebx
mov dword [ebp - 0x214], edi
inc ebx
jmp 0x404482
imul ebx, edi
mov dword [ebp - 0x214], ebx
inc edi
jmp 0x403f5a
mov eax, edi
imul eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
inc edi
jmp 0x403d62
mov eax, edi
imul eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
inc edi
jmp 0x403d49
mov eax, edi
imul eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
inc edi
jmp 0x403d2f
mov eax, edi
imul eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
inc edi
jmp 0x403cd3