Function at 0x427b70
Capabilities:
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x510420
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1c98
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x2c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x427bc9
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x3e
jge 0x427bda
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x427bc0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x427bec
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427c04
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x427c16
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1f
jge 0x427c54
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x427c3c
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x427c49
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x427c52
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jmp 0x427c0d
mov dword [ebp - 0x28], 0
jmp 0x427c66
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0x13
jge 0x427ca4
cmp dword [ebp - 0x1c], 0
jge 0x427c7a
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427c90
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x427c5d
mov dword [ebp - 0x22c], 0
jmp 0x427cbf
mov eax, dword [ebp - 0x22c]
add eax, 1
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x13
jge 0x427d0c
cmp dword [ebp - 0x1c], 0
jge 0x427cd6
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x427cec
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x230], 0xfa
lea edx, [ebp - 0x230]
push edx
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x427cb0
mov dword [ebp - 0x42c], 0
jmp 0x427d27
mov ecx, dword [ebp - 0x42c]
add ecx, 1
mov dword [ebp - 0x42c], ecx
cmp dword [ebp - 0x42c], 2
jge 0x427d74
mov eax, dword [ebp - 0x42c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x427d56
mov eax, dword [ebp - 0x42c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x427d66
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x42c]
mov dword [ebp - 0x1c], edx
jmp 0x427d72
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x42c]
mov dword [ebp - 0x1c], eax
jmp 0x427d18
mov dword [ebp - 0x430], 0
jmp 0x427d8f
mov ecx, dword [ebp - 0x430]
add ecx, 1
mov dword [ebp - 0x430], ecx
cmp dword [ebp - 0x430], 7
jge 0x427dd0
cmp dword [ebp - 0x1c], 0
jge 0x427da6
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427dbc
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x628]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x427d80
mov dword [ebp - 0x62c], 0
jmp 0x427deb
mov eax, dword [ebp - 0x62c]
add eax, 1
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 7
jge 0x427e2c
cmp dword [ebp - 0x1c], 0
jge 0x427e02
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427e18
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x828]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x427ddc
mov dword [ebp - 0x82c], 0
jmp 0x427e47
mov eax, dword [ebp - 0x82c]
add eax, 1
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 0xf
jge 0x427e5e
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x82c]
mov dword [ebp - 0x1c], ecx
jmp 0x427e38
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x427e70
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427e88
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x830], 0xffffffff
mov dword [ebp - 0x834], 0
jmp 0x427eb4
mov edx, dword [ebp - 0x834]
add edx, 1
mov dword [ebp - 0x834], edx
cmp dword [ebp - 0x834], 0xd
jge 0x427ee6
mov eax, dword [ebp - 0x834]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x427edb
mov edx, dword [ebp - 0x830]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x427ea5
mov dword [ebp - 4], 0xfffffffe
jmp 0x427f06
mov edx, 1
test edx, edx
je 0x427f40
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x838]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x427f32
jmp 0x427f40
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x838]
mov dword [ebp - 0x1c], edx
jmp 0x427f06
mov eax, dword [ebp - 0x1c]
add eax, 0xc
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x83c], 0
jmp 0x427f64
mov ecx, dword [ebp - 0x83c]
add ecx, 1
mov dword [ebp - 0x83c], ecx
cmp dword [ebp - 0x83c], 0xe
jge 0x427f7b
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x83c]
mov dword [ebp - 0x1c], edx
jmp 0x427f55
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x427f8d
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427fa5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x840], 0
jmp 0x427fc0
mov edx, dword [ebp - 0x840]
add edx, 1
mov dword [ebp - 0x840], edx
cmp dword [ebp - 0x840], 0
jge 0x428001
cmp dword [ebp - 0x1c], 0
jge 0x427fd7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427fed
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa38]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x427fb1
mov dword [ebp - 0xa3c], 0
jmp 0x42801c
mov eax, dword [ebp - 0xa3c]
add eax, 1
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 8
jge 0x428033
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xa3c]
mov dword [ebp - 0x1c], ecx
jmp 0x42800d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x428045
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42805d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa40], 0
jmp 0x428078
mov edx, dword [ebp - 0xa40]
add edx, 1
mov dword [ebp - 0xa40], edx
cmp dword [ebp - 0xa40], 1
jge 0x4280c5
cmp dword [ebp - 0x1c], 0
jge 0x42808f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4280a5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa44], 0xfa
lea edx, [ebp - 0xa44]
push edx
lea eax, [ebp - 0xc40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x428069
mov ecx, 1
test ecx, ecx
je 0x4280ff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0xc44]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4280f1
jmp 0x4280ff
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc44]
mov dword [ebp - 0x1c], edx
jmp 0x4280c5
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x428142
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp - 0xc48]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x428134
jmp 0x428142
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc48]
mov dword [ebp - 0x1c], edx
jmp 0x428108
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x428185
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0xc4c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x428177
jmp 0x428185
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc4c]
mov dword [ebp - 0x1c], edx
jmp 0x42814b
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc50], 0
jmp 0x4281a9
mov ecx, dword [ebp - 0xc50]
add ecx, 1
mov dword [ebp - 0xc50], ecx
cmp dword [ebp - 0xc50], 2
jge 0x4281f6
mov eax, dword [ebp - 0xc50]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4281d8
mov eax, dword [ebp - 0xc50]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4281e8
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc50]
mov dword [ebp - 0x1c], edx
jmp 0x4281f4
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xc50]
mov dword [ebp - 0x1c], eax
jmp 0x42819a
mov dword [ebp - 4], 1
mov dword [ebp - 0xc54], 0xffffffff
mov dword [ebp - 0xc58], 0
jmp 0x428222
mov ecx, dword [ebp - 0xc58]
add ecx, 1
mov dword [ebp - 0xc58], ecx
cmp dword [ebp - 0xc58], 1
jge 0x428254
mov eax, dword [ebp - 0xc58]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x428249
mov edx, dword [ebp - 0xc54]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x428213
mov dword [ebp - 4], 0xfffffffe
jmp 0x428274
mov dword [ebp - 0xc5c], 0
jmp 0x42828f
mov edx, dword [ebp - 0xc5c]
add edx, 1
mov dword [ebp - 0xc5c], edx
cmp dword [ebp - 0xc5c], 2
jge 0x4282a6
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xc5c]
mov dword [ebp - 0x1c], eax
jmp 0x428280
cmp dword [ebp - 0x1c], 0
jge 0x4282b4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4282cc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc60], 0
jmp 0x4282e7
mov edx, dword [ebp - 0xc60]
add edx, 1
mov dword [ebp - 0xc60], edx
cmp dword [ebp - 0xc60], 4
jge 0x428334
cmp dword [ebp - 0x1c], 0
jge 0x4282fe
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428314
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc64], 0xfa
lea edx, [ebp - 0xc64]
push edx
lea eax, [ebp - 0xe60]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4282d8
mov dword [ebp - 0xe64], 0
jmp 0x42834f
mov ecx, dword [ebp - 0xe64]
add ecx, 1
mov dword [ebp - 0xe64], ecx
cmp dword [ebp - 0xe64], 1
jge 0x428366
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe64]
mov dword [ebp - 0x1c], edx
jmp 0x428340
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x428378
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x428390
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe68], 0
jmp 0x4283ab
mov edx, dword [ebp - 0xe68]
add edx, 1
mov dword [ebp - 0xe68], edx
cmp dword [ebp - 0xe68], 3
jge 0x4283f8
mov eax, dword [ebp - 0xe68]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4283da
mov eax, dword [ebp - 0xe68]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4283ea
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe68]
mov dword [ebp - 0x1c], edx
jmp 0x4283f6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe68]
mov dword [ebp - 0x1c], eax
jmp 0x42839c
mov dword [ebp - 0xe6c], 0
jmp 0x428413
mov ecx, dword [ebp - 0xe6c]
add ecx, 1
mov dword [ebp - 0xe6c], ecx
cmp dword [ebp - 0xe6c], 2
jge 0x42842a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe6c]
mov dword [ebp - 0x1c], edx
jmp 0x428404
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42843c
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x428454
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe70], 0
jmp 0x42846f
mov edx, dword [ebp - 0xe70]
add edx, 1
mov dword [ebp - 0xe70], edx
cmp dword [ebp - 0xe70], 2
jge 0x4284b0
cmp dword [ebp - 0x1c], 0
jge 0x428486
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42849c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1068]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x428460
mov dword [ebp - 0x106c], 0
jmp 0x4284cb
mov eax, dword [ebp - 0x106c]
add eax, 1
mov dword [ebp - 0x106c], eax
cmp dword [ebp - 0x106c], 4
jge 0x4284e2
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x106c]
mov dword [ebp - 0x1c], ecx
jmp 0x4284bc
cmp dword [ebp - 0x1c], 0
jge 0x4284f0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428508
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1070], 0
jmp 0x428523
mov edx, dword [ebp - 0x1070]
add edx, 1
mov dword [ebp - 0x1070], edx
cmp dword [ebp - 0x1070], 0
jge 0x428564
cmp dword [ebp - 0x1c], 0
jge 0x42853a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x428550
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1268]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x428514
mov eax, 1
test eax, eax
je 0x42859e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x126c], eax
mov eax, dword [ebp - 0x126c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x428590
jmp 0x42859e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x126c]
mov dword [ebp - 0x1c], edx
jmp 0x428564
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1270], 0
jmp 0x4285c2
mov ecx, dword [ebp - 0x1270]
add ecx, 1
mov dword [ebp - 0x1270], ecx
cmp dword [ebp - 0x1270], 1
jge 0x42860f
cmp dword [ebp - 0x1c], 0
jge 0x4285d9
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4285ef
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1274], 0xfa
lea edx, [ebp - 0x1274]
push edx
lea eax, [ebp - 0x1470]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4285b3
mov dword [ebp - 0x1474], 0
jmp 0x42862a
mov ecx, dword [ebp - 0x1474]
add ecx, 1
mov dword [ebp - 0x1474], ecx
cmp dword [ebp - 0x1474], 0
jge 0x428641
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1474]
mov dword [ebp - 0x1c], edx
jmp 0x42861b
cmp dword [ebp - 0x1c], 0
jge 0x42864f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428667
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1478], 0
jmp 0x428682
mov edx, dword [ebp - 0x1478]
add edx, 1
mov dword [ebp - 0x1478], edx
cmp dword [ebp - 0x1478], 3
jge 0x4286c3
cmp dword [ebp - 0x1c], 0
jge 0x428699
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4286af
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1670]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x428673
mov dword [ebp - 0x1674], 0
jmp 0x4286de
mov eax, dword [ebp - 0x1674]
add eax, 1
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x1674], 3
jge 0x42871f
cmp dword [ebp - 0x1c], 0
jge 0x4286f5
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42870b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1870]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4286cf
mov eax, 1
test eax, eax
je 0x428759
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1874], eax
mov eax, dword [ebp - 0x1874]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42874b
jmp 0x428759
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1874]
mov dword [ebp - 0x1c], edx
jmp 0x42871f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x1878], 0xffffffff
mov dword [ebp - 0x187c], 0
jmp 0x42878b
mov ecx, dword [ebp - 0x187c]
add ecx, 1
mov dword [ebp - 0x187c], ecx
cmp dword [ebp - 0x187c], 3
jge 0x4287bd
mov eax, dword [ebp - 0x187c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4287b2
mov edx, dword [ebp - 0x1878]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42877c
mov dword [ebp - 4], 0xfffffffe
jmp 0x4287dd
mov dword [ebp - 0x1880], 0
jmp 0x4287f8
mov edx, dword [ebp - 0x1880]
add edx, 1
mov dword [ebp - 0x1880], edx
cmp dword [ebp - 0x1880], 2
jge 0x42880f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1880]
mov dword [ebp - 0x1c], eax
jmp 0x4287e9
cmp dword [ebp - 0x1c], 0
jge 0x42881d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428835
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1884], 0
jmp 0x428850
mov edx, dword [ebp - 0x1884]
add edx, 1
mov dword [ebp - 0x1884], edx
cmp dword [ebp - 0x1884], 3
jge 0x428867
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1884]
mov dword [ebp - 0x1c], eax
jmp 0x428841
cmp dword [ebp - 0x1c], 0
jge 0x428875
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42888d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4288c7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1888], eax
mov eax, dword [ebp - 0x1888]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4288b9
jmp 0x4288c7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1888]
mov dword [ebp - 0x1c], edx
jmp 0x42888d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x188c], 0xffffffff
mov dword [ebp - 0x1890], 0
jmp 0x4288f9
mov ecx, dword [ebp - 0x1890]
add ecx, 1
mov dword [ebp - 0x1890], ecx
cmp dword [ebp - 0x1890], 3
jge 0x42892b
mov eax, dword [ebp - 0x1890]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x428920
mov edx, dword [ebp - 0x188c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4288ea
mov dword [ebp - 4], 0xfffffffe
jmp 0x42894b
mov dword [ebp - 0x1894], 0
jmp 0x428966
mov edx, dword [ebp - 0x1894]
add edx, 1
mov dword [ebp - 0x1894], edx
cmp dword [ebp - 0x1894], 4
jge 0x42897d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1894]
mov dword [ebp - 0x1c], eax
jmp 0x428957
cmp dword [ebp - 0x1c], 0
jge 0x42898b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4289a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1898], 0
jmp 0x4289be
mov edx, dword [ebp - 0x1898]
add edx, 1
mov dword [ebp - 0x1898], edx
cmp dword [ebp - 0x1898], 3
jge 0x428a0b
mov eax, dword [ebp - 0x1898]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4289ed
mov eax, dword [ebp - 0x1898]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4289fd
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1898]
mov dword [ebp - 0x1c], edx
jmp 0x428a09
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1898]
mov dword [ebp - 0x1c], eax
jmp 0x4289af
mov dword [ebp - 0x189c], 0
jmp 0x428a26
mov ecx, dword [ebp - 0x189c]
add ecx, 1
mov dword [ebp - 0x189c], ecx
cmp dword [ebp - 0x189c], 0
jge 0x428a73
mov eax, dword [ebp - 0x189c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x428a55
mov eax, dword [ebp - 0x189c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x428a65
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x189c]
mov dword [ebp - 0x1c], edx
jmp 0x428a71
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x189c]
mov dword [ebp - 0x1c], eax
jmp 0x428a17
mov dword [ebp - 0x18a0], 0
jmp 0x428a8e
mov ecx, dword [ebp - 0x18a0]
add ecx, 1
mov dword [ebp - 0x18a0], ecx
cmp dword [ebp - 0x18a0], 1
jge 0x428adb
mov eax, dword [ebp - 0x18a0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x428abd
mov eax, dword [ebp - 0x18a0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x428acd
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x18a0]
mov dword [ebp - 0x1c], edx
jmp 0x428ad9
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x18a0]
mov dword [ebp - 0x1c], eax
jmp 0x428a7f
mov ecx, 1
test ecx, ecx
je 0x428b15
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18a4], eax
mov eax, dword [ebp - 0x18a4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x428b07
jmp 0x428b15
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18a4]
mov dword [ebp - 0x1c], edx
jmp 0x428adb
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18a8], 0
jmp 0x428b39
mov ecx, dword [ebp - 0x18a8]
add ecx, 1
mov dword [ebp - 0x18a8], ecx
cmp dword [ebp - 0x18a8], 2
jge 0x428b7a
cmp dword [ebp - 0x1c], 0
jge 0x428b50
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x428b66
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1aa0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x428b2a
mov eax, 1
test eax, eax
je 0x428bb4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1aa4], eax
mov eax, dword [ebp - 0x1aa4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x428ba6
jmp 0x428bb4
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1aa4]
mov dword [ebp - 0x1c], edx
jmp 0x428b7a
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1aa8], 0
jmp 0x428bd8
mov ecx, dword [ebp - 0x1aa8]
add ecx, 1
mov dword [ebp - 0x1aa8], ecx
cmp dword [ebp - 0x1aa8], 1
jge 0x428c19
cmp dword [ebp - 0x1c], 0
jge 0x428bef
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x428c05
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1ca0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x428bc9
mov dword [ebp - 0x1ca4], 0
jmp 0x428c34
mov eax, dword [ebp - 0x1ca4]
add eax, 1
mov dword [ebp - 0x1ca4], eax
cmp dword [ebp - 0x1ca4], 3
jge 0x428c4b
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1ca4]
mov dword [ebp - 0x1c], ecx
jmp 0x428c25
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x428c5d
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x428c75
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x1ca8], 0xffffffff
mov dword [ebp - 0x1cac], 0
jmp 0x428ca1
mov edx, dword [ebp - 0x1cac]
add edx, 1
mov dword [ebp - 0x1cac], edx
cmp dword [ebp - 0x1cac], 3
jge 0x428cd3
mov eax, dword [ebp - 0x1cac]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x428cc8
mov edx, dword [ebp - 0x1ca8]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x428c92
mov dword [ebp - 4], 0xfffffffe
jmp 0x428cf3
mov dword [ebp - 0x1cb0], 0
jmp 0x428d0e
mov edx, dword [ebp - 0x1cb0]
add edx, 1
mov dword [ebp - 0x1cb0], edx
cmp dword [ebp - 0x1cb0], 3
jge 0x428d25
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1cb0]
mov dword [ebp - 0x1c], eax
jmp 0x428cff
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x428d37
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x428d4f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.004079a5
mov esp, ebp
pop ebp
ret