Function at 0x47c630
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x511fd8
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1a68
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x47c689
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x11
jge 0x47c6c7
cmp dword [ebp - 0x1c], 0
jge 0x47c69d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47c6b3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47c680
mov dword [ebp - 4], 0
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x228], 0
jmp 0x47c6f3
mov eax, dword [ebp - 0x228]
add eax, 1
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 9
jge 0x47c725
mov eax, dword [ebp - 0x228]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x47c71a
mov edx, dword [ebp - 0x224]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47c6e4
mov dword [ebp - 4], 0xfffffffe
jmp 0x47c745
mov edx, 1
test edx, edx
je 0x47c77f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47c771
jmp 0x47c77f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], edx
jmp 0x47c745
mov eax, dword [ebp - 0x1c]
add eax, 0x15
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x230], 0
jmp 0x47c7a3
mov ecx, dword [ebp - 0x230]
add ecx, 1
mov dword [ebp - 0x230], ecx
cmp dword [ebp - 0x230], 0x1d
jge 0x47c7e4
cmp dword [ebp - 0x1c], 0
jge 0x47c7ba
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47c7d0
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47c794
mov eax, 1
test eax, eax
je 0x47c81e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47c810
jmp 0x47c81e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x42c]
mov dword [ebp - 0x1c], edx
jmp 0x47c7e4
mov eax, dword [ebp - 0x1c]
add eax, 0xf
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x430], 0
jmp 0x47c842
mov ecx, dword [ebp - 0x430]
add ecx, 1
mov dword [ebp - 0x430], ecx
cmp dword [ebp - 0x430], 3
jge 0x47c859
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x430]
mov dword [ebp - 0x1c], edx
jmp 0x47c833
cmp dword [ebp - 0x1c], 0
jge 0x47c867
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c87f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x434], 0
jmp 0x47c89a
mov edx, dword [ebp - 0x434]
add edx, 1
mov dword [ebp - 0x434], edx
cmp dword [ebp - 0x434], 0xe
jge 0x47c8e7
cmp dword [ebp - 0x1c], 0
jge 0x47c8b1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47c8c7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x438], 0xfa
lea edx, [ebp - 0x438]
push edx
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x47c88b
mov dword [ebp - 0x634], 0
jmp 0x47c902
mov ecx, dword [ebp - 0x634]
add ecx, 1
mov dword [ebp - 0x634], ecx
cmp dword [ebp - 0x634], 0xa
jge 0x47c943
cmp dword [ebp - 0x1c], 0
jge 0x47c919
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47c92f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x830]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47c8f3
mov dword [ebp - 0x834], 0
jmp 0x47c95e
mov eax, dword [ebp - 0x834]
add eax, 1
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x834], 0xc
jge 0x47c975
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x834]
mov dword [ebp - 0x1c], ecx
jmp 0x47c94f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47c987
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47c99f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x838], 0xffffffff
mov dword [ebp - 0x83c], 0
jmp 0x47c9cb
mov edx, dword [ebp - 0x83c]
add edx, 1
mov dword [ebp - 0x83c], edx
cmp dword [ebp - 0x83c], 8
jge 0x47c9fd
mov eax, dword [ebp - 0x83c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x47c9f2
mov edx, dword [ebp - 0x838]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47c9bc
mov dword [ebp - 4], 0xfffffffe
jmp 0x47ca1d
mov dword [ebp - 0x840], 0
jmp 0x47ca38
mov edx, dword [ebp - 0x840]
add edx, 1
mov dword [ebp - 0x840], edx
cmp dword [ebp - 0x840], 2
jge 0x47ca85
mov eax, dword [ebp - 0x840]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x47ca67
mov eax, dword [ebp - 0x840]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x47ca77
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x840]
mov dword [ebp - 0x1c], edx
jmp 0x47ca83
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x840]
mov dword [ebp - 0x1c], eax
jmp 0x47ca29
mov dword [ebp - 0x844], 0
jmp 0x47caa0
mov ecx, dword [ebp - 0x844]
add ecx, 1
mov dword [ebp - 0x844], ecx
cmp dword [ebp - 0x844], 0xb
jge 0x47caed
mov eax, dword [ebp - 0x844]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x47cacf
mov eax, dword [ebp - 0x844]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x47cadf
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x844]
mov dword [ebp - 0x1c], edx
jmp 0x47caeb
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x844]
mov dword [ebp - 0x1c], eax
jmp 0x47ca91
mov dword [ebp - 0x848], 0
jmp 0x47cb08
mov ecx, dword [ebp - 0x848]
add ecx, 1
mov dword [ebp - 0x848], ecx
cmp dword [ebp - 0x848], 0xb
jge 0x47cb49
cmp dword [ebp - 0x1c], 0
jge 0x47cb1f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47cb35
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa40]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47caf9
mov dword [ebp - 0xa44], 0
jmp 0x47cb64
mov eax, dword [ebp - 0xa44]
add eax, 1
mov dword [ebp - 0xa44], eax
cmp dword [ebp - 0xa44], 5
jge 0x47cb7b
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xa44]
mov dword [ebp - 0x1c], ecx
jmp 0x47cb55
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47cb8d
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47cba5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa48], 0
jmp 0x47cbc0
mov edx, dword [ebp - 0xa48]
add edx, 1
mov dword [ebp - 0xa48], edx
cmp dword [ebp - 0xa48], 2
jge 0x47cc0d
mov eax, dword [ebp - 0xa48]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x47cbef
mov eax, dword [ebp - 0xa48]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x47cbff
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa48]
mov dword [ebp - 0x1c], edx
jmp 0x47cc0b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa48]
mov dword [ebp - 0x1c], eax
jmp 0x47cbb1
mov dword [ebp - 0xa4c], 0
jmp 0x47cc28
mov ecx, dword [ebp - 0xa4c]
add ecx, 1
mov dword [ebp - 0xa4c], ecx
cmp dword [ebp - 0xa4c], 0x10
jge 0x47cc69
cmp dword [ebp - 0x1c], 0
jge 0x47cc3f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47cc55
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc48]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47cc19
mov dword [ebp - 0xc4c], 0
jmp 0x47cc84
mov eax, dword [ebp - 0xc4c]
add eax, 1
mov dword [ebp - 0xc4c], eax
cmp dword [ebp - 0xc4c], 0x10
jge 0x47ccc5
cmp dword [ebp - 0x1c], 0
jge 0x47cc9b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47ccb1
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe48]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47cc75
mov dword [ebp - 0xe4c], 0
jmp 0x47cce0
mov eax, dword [ebp - 0xe4c]
add eax, 1
mov dword [ebp - 0xe4c], eax
cmp dword [ebp - 0xe4c], 0
jge 0x47ccf7
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xe4c]
mov dword [ebp - 0x1c], ecx
jmp 0x47ccd1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47cd09
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47cd21
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe50], 0
jmp 0x47cd3c
mov edx, dword [ebp - 0xe50]
add edx, 1
mov dword [ebp - 0xe50], edx
cmp dword [ebp - 0xe50], 8
jge 0x47cd89
mov eax, dword [ebp - 0xe50]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x47cd6b
mov eax, dword [ebp - 0xe50]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x47cd7b
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe50]
mov dword [ebp - 0x1c], edx
jmp 0x47cd87
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe50]
mov dword [ebp - 0x1c], eax
jmp 0x47cd2d
mov dword [ebp - 0xe54], 0
jmp 0x47cda4
mov ecx, dword [ebp - 0xe54]
add ecx, 1
mov dword [ebp - 0xe54], ecx
cmp dword [ebp - 0xe54], 4
jge 0x47cdf1
cmp dword [ebp - 0x1c], 0
jge 0x47cdbb
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cdd1
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xe58], 0xfa
lea edx, [ebp - 0xe58]
push edx
lea eax, [ebp - 0x1050]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x47cd95
mov dword [ebp - 0x1054], 0
jmp 0x47ce0c
mov ecx, dword [ebp - 0x1054]
add ecx, 1
mov dword [ebp - 0x1054], ecx
cmp dword [ebp - 0x1054], 2
jge 0x47ce23
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1054]
mov dword [ebp - 0x1c], edx
jmp 0x47cdfd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47ce35
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47ce4d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1058], 0
jmp 0x47ce68
mov edx, dword [ebp - 0x1058]
add edx, 1
mov dword [ebp - 0x1058], edx
cmp dword [ebp - 0x1058], 5
jge 0x47cea9
cmp dword [ebp - 0x1c], 0
jge 0x47ce7f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47ce95
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1250]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47ce59
mov dword [ebp - 0x1254], 0
jmp 0x47cec4
mov eax, dword [ebp - 0x1254]
add eax, 1
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 8
jge 0x47cf11
cmp dword [ebp - 0x1c], 0
jge 0x47cedb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cef1
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1258], 0xfa
lea edx, [ebp - 0x1258]
push edx
lea eax, [ebp - 0x1450]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x47ceb5
mov dword [ebp - 0x1454], 0
jmp 0x47cf2c
mov ecx, dword [ebp - 0x1454]
add ecx, 1
mov dword [ebp - 0x1454], ecx
cmp dword [ebp - 0x1454], 4
jge 0x47cf79
mov eax, dword [ebp - 0x1454]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x47cf5b
mov eax, dword [ebp - 0x1454]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x47cf6b
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1454]
mov dword [ebp - 0x1c], edx
jmp 0x47cf77
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1c], eax
jmp 0x47cf1d
mov ecx, 1
test ecx, ecx
je 0x47cfb3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1458], eax
mov eax, dword [ebp - 0x1458]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47cfa5
jmp 0x47cfb3
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1458]
mov dword [ebp - 0x1c], edx
jmp 0x47cf79
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x145c], 0
jmp 0x47cfd7
mov ecx, dword [ebp - 0x145c]
add ecx, 1
mov dword [ebp - 0x145c], ecx
cmp dword [ebp - 0x145c], 0
jge 0x47d024
cmp dword [ebp - 0x1c], 0
jge 0x47cfee
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d004
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1460], 0xfa
lea edx, [ebp - 0x1460]
push edx
lea eax, [ebp - 0x1658]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x47cfc8
mov dword [ebp - 0x165c], 0
jmp 0x47d03f
mov ecx, dword [ebp - 0x165c]
add ecx, 1
mov dword [ebp - 0x165c], ecx
cmp dword [ebp - 0x165c], 4
jge 0x47d08c
mov eax, dword [ebp - 0x165c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x47d06e
mov eax, dword [ebp - 0x165c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x47d07e
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x165c]
mov dword [ebp - 0x1c], edx
jmp 0x47d08a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x165c]
mov dword [ebp - 0x1c], eax
jmp 0x47d030
mov ecx, 1
test ecx, ecx
je 0x47d0c6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1660], eax
mov eax, dword [ebp - 0x1660]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47d0b8
jmp 0x47d0c6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1660]
mov dword [ebp - 0x1c], edx
jmp 0x47d08c
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x1664], 0xffffffff
mov dword [ebp - 0x1668], 0
jmp 0x47d0fb
mov ecx, dword [ebp - 0x1668]
add ecx, 1
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 8
jge 0x47d12d
mov eax, dword [ebp - 0x1668]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x47d122
mov edx, dword [ebp - 0x1664]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x47d0ec
mov dword [ebp - 4], 0xfffffffe
jmp 0x47d14d
mov dword [ebp - 0x166c], 0
jmp 0x47d168
mov edx, dword [ebp - 0x166c]
add edx, 1
mov dword [ebp - 0x166c], edx
cmp dword [ebp - 0x166c], 4
jge 0x47d17f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x166c]
mov dword [ebp - 0x1c], eax
jmp 0x47d159
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47d191
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47d1a9
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x47d1e3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1670], eax
mov eax, dword [ebp - 0x1670]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47d1d5
jmp 0x47d1e3
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1670]
mov dword [ebp - 0x1c], edx
jmp 0x47d1a9
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1674], 0
jmp 0x47d207
mov ecx, dword [ebp - 0x1674]
add ecx, 1
mov dword [ebp - 0x1674], ecx
cmp dword [ebp - 0x1674], 1
jge 0x47d21e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1674]
mov dword [ebp - 0x1c], edx
jmp 0x47d1f8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47d230
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47d248
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x47d282
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1678], eax
mov eax, dword [ebp - 0x1678]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47d274
jmp 0x47d282
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1678]
mov dword [ebp - 0x1c], edx
jmp 0x47d248
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x47d2c5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x167c], eax
mov eax, dword [ebp - 0x167c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47d2b7
jmp 0x47d2c5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x167c]
mov dword [ebp - 0x1c], edx
jmp 0x47d28b
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1680], 0
jmp 0x47d2e9
mov ecx, dword [ebp - 0x1680]
add ecx, 1
mov dword [ebp - 0x1680], ecx
cmp dword [ebp - 0x1680], 4
jge 0x47d32a
cmp dword [ebp - 0x1c], 0
jge 0x47d300
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47d316
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1878]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47d2da
mov dword [ebp - 0x187c], 0
jmp 0x47d345
mov eax, dword [ebp - 0x187c]
add eax, 1
mov dword [ebp - 0x187c], eax
cmp dword [ebp - 0x187c], 3
jge 0x47d386
cmp dword [ebp - 0x1c], 0
jge 0x47d35c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47d372
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1a78]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x47d336
mov eax, 1
test eax, eax
je 0x47d3c0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1a7c], eax
mov eax, dword [ebp - 0x1a7c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47d3b2
jmp 0x47d3c0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1a7c]
mov dword [ebp - 0x1c], edx
jmp 0x47d386
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1a80], 0
jmp 0x47d3e4
mov ecx, dword [ebp - 0x1a80]
add ecx, 1
mov dword [ebp - 0x1a80], ecx
cmp dword [ebp - 0x1a80], 1
jge 0x47d3fb
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1a80]
mov dword [ebp - 0x1c], edx
jmp 0x47d3d5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47d40d
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47d425
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.004079a5
mov esp, ebp
pop ebp
ret