Function at 0x4264e0
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x5103a0
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x26c4
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x38], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov eax, 1
test eax, eax
je 0x426558
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42654d
jmp 0x426558
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
jmp 0x426527
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x28], 0
jmp 0x426581
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 7
jge 0x4265aa
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x42659f
mov edx, dword [ebp - 0x24]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x426578
mov dword [ebp - 4], 0xfffffffe
jmp 0x4265ca
mov dword [ebp - 0x2c], 0
jmp 0x4265dc
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0xc
jge 0x42661a
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x426602
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x42660f
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jmp 0x426618
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x4265d3
mov dword [ebp - 0x30], 0
jmp 0x42662c
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0xd
jge 0x426670
cmp dword [ebp - 0x1c], 0
jge 0x426640
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426656
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x34], 0xfa
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x426623
mov dword [ebp - 0x234], 0
jmp 0x42668b
mov ecx, dword [ebp - 0x234]
add ecx, 1
mov dword [ebp - 0x234], ecx
cmp dword [ebp - 0x234], 0
jge 0x4266d8
mov eax, dword [ebp - 0x234]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4266ba
mov eax, dword [ebp - 0x234]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4266ca
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x234]
mov dword [ebp - 0x1c], edx
jmp 0x4266d6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x234]
mov dword [ebp - 0x1c], eax
jmp 0x42667c
mov dword [ebp - 4], 1
mov dword [ebp - 0x238], 0xffffffff
mov dword [ebp - 0x23c], 0
jmp 0x426704
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
cmp dword [ebp - 0x23c], 6
jge 0x426736
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x42672b
mov edx, dword [ebp - 0x238]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4266f5
mov dword [ebp - 4], 0xfffffffe
jmp 0x426756
mov dword [ebp - 4], 2
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x244], 0
jmp 0x426782
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 7
jge 0x4267b4
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4267a9
mov edx, dword [ebp - 0x240]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x426773
mov dword [ebp - 4], 0xfffffffe
jmp 0x4267d4
mov dword [ebp - 0x248], 0
jmp 0x4267ef
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 1
jge 0x426830
cmp dword [ebp - 0x1c], 0
jge 0x426806
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42681c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4267e0
mov eax, 1
test eax, eax
je 0x42686a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42685c
jmp 0x42686a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x444]
mov dword [ebp - 0x1c], edx
jmp 0x426830
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x448], 0
jmp 0x42688b
mov ecx, dword [ebp - 0x448]
add ecx, 1
mov dword [ebp - 0x448], ecx
cmp dword [ebp - 0x448], 6
jge 0x4268a2
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x448]
mov dword [ebp - 0x1c], edx
jmp 0x42687c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4268b4
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4268cc
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44c], 0
jmp 0x4268e7
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 3
jge 0x426928
cmp dword [ebp - 0x1c], 0
jge 0x4268fe
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x426914
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x648]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4268d8
mov dword [ebp - 0x64c], 0
jmp 0x426943
mov eax, dword [ebp - 0x64c]
add eax, 1
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 3
jge 0x42695a
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x64c]
mov dword [ebp - 0x1c], ecx
jmp 0x426934
cmp dword [ebp - 0x1c], 0
jge 0x426968
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426980
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x650], 0
jmp 0x42699b
mov edx, dword [ebp - 0x650]
add edx, 1
mov dword [ebp - 0x650], edx
cmp dword [ebp - 0x650], 0
jge 0x4269e8
cmp dword [ebp - 0x1c], 0
jge 0x4269b2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4269c8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x654], 0xfa
lea edx, [ebp - 0x654]
push edx
lea eax, [ebp - 0x850]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42698c
mov ecx, 1
test ecx, ecx
je 0x426a22
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x854]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x426a14
jmp 0x426a22
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x854]
mov dword [ebp - 0x1c], edx
jmp 0x4269e8
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x858], 0
jmp 0x426a46
mov ecx, dword [ebp - 0x858]
add ecx, 1
mov dword [ebp - 0x858], ecx
cmp dword [ebp - 0x858], 7
jge 0x426a93
mov eax, dword [ebp - 0x858]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x426a75
mov eax, dword [ebp - 0x858]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x426a85
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x858]
mov dword [ebp - 0x1c], edx
jmp 0x426a91
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x858]
mov dword [ebp - 0x1c], eax
jmp 0x426a37
mov dword [ebp - 0x85c], 0
jmp 0x426aae
mov ecx, dword [ebp - 0x85c]
add ecx, 1
mov dword [ebp - 0x85c], ecx
cmp dword [ebp - 0x85c], 4
jge 0x426afb
cmp dword [ebp - 0x1c], 0
jge 0x426ac5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426adb
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x860], 0xfa
lea edx, [ebp - 0x860]
push edx
lea eax, [ebp - 0xa58]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x426a9f
mov dword [ebp - 4], 3
mov dword [ebp - 0xa5c], 0xffffffff
mov dword [ebp - 0xa60], 0
jmp 0x426b27
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
cmp dword [ebp - 0xa60], 4
jge 0x426b59
mov eax, dword [ebp - 0xa60]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x426b4e
mov edx, dword [ebp - 0xa5c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x426b18
mov dword [ebp - 4], 0xfffffffe
jmp 0x426b79
mov dword [ebp - 0xa64], 0
jmp 0x426b94
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmp dword [ebp - 0xa64], 2
jge 0x426be1
mov eax, dword [ebp - 0xa64]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x426bc3
mov eax, dword [ebp - 0xa64]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x426bd3
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa64]
mov dword [ebp - 0x1c], edx
jmp 0x426bdf
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa64]
mov dword [ebp - 0x1c], eax
jmp 0x426b85
mov dword [ebp - 0xa68], 0
jmp 0x426bfc
mov ecx, dword [ebp - 0xa68]
add ecx, 1
mov dword [ebp - 0xa68], ecx
cmp dword [ebp - 0xa68], 4
jge 0x426c49
cmp dword [ebp - 0x1c], 0
jge 0x426c13
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426c29
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa6c], 0xfa
lea edx, [ebp - 0xa6c]
push edx
lea eax, [ebp - 0xc68]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x426bed
mov dword [ebp - 0xc6c], 0
jmp 0x426c64
mov ecx, dword [ebp - 0xc6c]
add ecx, 1
mov dword [ebp - 0xc6c], ecx
cmp dword [ebp - 0xc6c], 3
jge 0x426cb1
cmp dword [ebp - 0x1c], 0
jge 0x426c7b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426c91
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc70], 0xfa
lea edx, [ebp - 0xc70]
push edx
lea eax, [ebp - 0xe68]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x426c55
mov dword [ebp - 4], 4
mov dword [ebp - 0xe6c], 0xffffffff
mov dword [ebp - 0xe70], 0
jmp 0x426cdd
mov ecx, dword [ebp - 0xe70]
add ecx, 1
mov dword [ebp - 0xe70], ecx
cmp dword [ebp - 0xe70], 4
jge 0x426d0f
mov eax, dword [ebp - 0xe70]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x426d04
mov edx, dword [ebp - 0xe6c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x426cce
mov dword [ebp - 4], 0xfffffffe
jmp 0x426d2f
mov dword [ebp - 0xe74], 0
jmp 0x426d4a
mov edx, dword [ebp - 0xe74]
add edx, 1
mov dword [ebp - 0xe74], edx
cmp dword [ebp - 0xe74], 1
jge 0x426d97
cmp dword [ebp - 0x1c], 0
jge 0x426d61
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426d77
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xe78], 0xfa
lea edx, [ebp - 0xe78]
push edx
lea eax, [ebp - 0x1070]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x426d3b
mov dword [ebp - 0x1074], 0
jmp 0x426db2
mov ecx, dword [ebp - 0x1074]
add ecx, 1
mov dword [ebp - 0x1074], ecx
cmp dword [ebp - 0x1074], 4
jge 0x426dc9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1074]
mov dword [ebp - 0x1c], edx
jmp 0x426da3
cmp dword [ebp - 0x1c], 0
jge 0x426dd7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426def
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1078], 0
jmp 0x426e0a
mov edx, dword [ebp - 0x1078]
add edx, 1
mov dword [ebp - 0x1078], edx
cmp dword [ebp - 0x1078], 2
jge 0x426e57
mov eax, dword [ebp - 0x1078]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x426e39
mov eax, dword [ebp - 0x1078]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x426e49
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1078]
mov dword [ebp - 0x1c], edx
jmp 0x426e55
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1078]
mov dword [ebp - 0x1c], eax
jmp 0x426dfb
mov dword [ebp - 0x107c], 0
jmp 0x426e72
mov ecx, dword [ebp - 0x107c]
add ecx, 1
mov dword [ebp - 0x107c], ecx
cmp dword [ebp - 0x107c], 2
jge 0x426e89
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x107c]
mov dword [ebp - 0x1c], edx
jmp 0x426e63
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x426e9b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x426eb3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1080], 0
jmp 0x426ece
mov edx, dword [ebp - 0x1080]
add edx, 1
mov dword [ebp - 0x1080], edx
cmp dword [ebp - 0x1080], 1
jge 0x426ee5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1080]
mov dword [ebp - 0x1c], eax
jmp 0x426ebf
cmp dword [ebp - 0x1c], 0
jge 0x426ef3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426f0b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1084], 0
jmp 0x426f26
mov edx, dword [ebp - 0x1084]
add edx, 1
mov dword [ebp - 0x1084], edx
cmp dword [ebp - 0x1084], 2
jge 0x426f3d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1084]
mov dword [ebp - 0x1c], eax
jmp 0x426f17
cmp dword [ebp - 0x1c], 0
jge 0x426f4b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x426f63
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1088], 0
jmp 0x426f7e
mov edx, dword [ebp - 0x1088]
add edx, 1
mov dword [ebp - 0x1088], edx
cmp dword [ebp - 0x1088], 4
jge 0x426fbf
cmp dword [ebp - 0x1c], 0
jge 0x426f95
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x426fab
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1280]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x426f6f
mov dword [ebp - 0x1284], 0
jmp 0x426fda
mov eax, dword [ebp - 0x1284]
add eax, 1
mov dword [ebp - 0x1284], eax
cmp dword [ebp - 0x1284], 4
jge 0x42701b
cmp dword [ebp - 0x1c], 0
jge 0x426ff1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427007
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1480]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x426fcb
mov dword [ebp - 0x1484], 0
jmp 0x427036
mov eax, dword [ebp - 0x1484]
add eax, 1
mov dword [ebp - 0x1484], eax
cmp dword [ebp - 0x1484], 2
jge 0x42704d
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x1484]
mov dword [ebp - 0x1c], ecx
jmp 0x427027
cmp dword [ebp - 0x1c], 0
jge 0x42705b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x427073
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4270ad
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1488], eax
mov eax, dword [ebp - 0x1488]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42709f
jmp 0x4270ad
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1488]
mov dword [ebp - 0x1c], edx
jmp 0x427073
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4270f0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x148c], eax
mov eax, dword [ebp - 0x148c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4270e2
jmp 0x4270f0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x148c]
mov dword [ebp - 0x1c], edx
jmp 0x4270b6
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1490], 0
jmp 0x427114
mov ecx, dword [ebp - 0x1490]
add ecx, 1
mov dword [ebp - 0x1490], ecx
cmp dword [ebp - 0x1490], 1
jge 0x427155
cmp dword [ebp - 0x1c], 0
jge 0x42712b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427141
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1688]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x427105
mov dword [ebp - 0x168c], 0
jmp 0x427170
mov eax, dword [ebp - 0x168c]
add eax, 1
mov dword [ebp - 0x168c], eax
cmp dword [ebp - 0x168c], 0
jge 0x427187
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x168c]
mov dword [ebp - 0x1c], ecx
jmp 0x427161
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x427199
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4271b1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x1690], 0xffffffff
mov dword [ebp - 0x1694], 0
jmp 0x4271dd
mov edx, dword [ebp - 0x1694]
add edx, 1
mov dword [ebp - 0x1694], edx
cmp dword [ebp - 0x1694], 2
jge 0x42720f
mov eax, dword [ebp - 0x1694]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x427204
mov edx, dword [ebp - 0x1690]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4271ce
mov dword [ebp - 4], 0xfffffffe
jmp 0x42722f
mov dword [ebp - 0x1698], 0
jmp 0x42724a
mov edx, dword [ebp - 0x1698]
add edx, 1
mov dword [ebp - 0x1698], edx
cmp dword [ebp - 0x1698], 1
jge 0x42728b
cmp dword [ebp - 0x1c], 0
jge 0x427261
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x427277
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1890]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42723b
mov dword [ebp - 0x1894], 0
jmp 0x4272a6
mov eax, dword [ebp - 0x1894]
add eax, 1
mov dword [ebp - 0x1894], eax
cmp dword [ebp - 0x1894], 0
jge 0x4272e7
cmp dword [ebp - 0x1c], 0
jge 0x4272bd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4272d3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1a90]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x427297
mov dword [ebp - 0x1a94], 0
jmp 0x427302
mov eax, dword [ebp - 0x1a94]
add eax, 1
mov dword [ebp - 0x1a94], eax
cmp dword [ebp - 0x1a94], 4
jge 0x42734f
cmp dword [ebp - 0x1c], 0
jge 0x427319
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42732f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1a98], 0xfa
lea edx, [ebp - 0x1a98]
push edx
lea eax, [ebp - 0x1c90]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4272f3
mov dword [ebp - 0x1c94], 0
jmp 0x42736a
mov ecx, dword [ebp - 0x1c94]
add ecx, 1
mov dword [ebp - 0x1c94], ecx
cmp dword [ebp - 0x1c94], 0
jge 0x427381
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c94]
mov dword [ebp - 0x1c], edx
jmp 0x42735b
cmp dword [ebp - 0x1c], 0
jge 0x42738f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4273a7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c98], 0
jmp 0x4273c2
mov edx, dword [ebp - 0x1c98]
add edx, 1
mov dword [ebp - 0x1c98], edx
cmp dword [ebp - 0x1c98], 1
jge 0x4273d9
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1c98]
mov dword [ebp - 0x1c], eax
jmp 0x4273b3
cmp dword [ebp - 0x1c], 0
jge 0x4273e7
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4273ff
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c9c], 0
jmp 0x42741a
mov edx, dword [ebp - 0x1c9c]
add edx, 1
mov dword [ebp - 0x1c9c], edx
cmp dword [ebp - 0x1c9c], 2
jge 0x427467
mov eax, dword [ebp - 0x1c9c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x427449
mov eax, dword [ebp - 0x1c9c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x427459
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c9c]
mov dword [ebp - 0x1c], edx
jmp 0x427465
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c9c]
mov dword [ebp - 0x1c], eax
jmp 0x42740b
mov dword [ebp - 0x1ca0], 0
jmp 0x427482
mov ecx, dword [ebp - 0x1ca0]
add ecx, 1
mov dword [ebp - 0x1ca0], ecx
cmp dword [ebp - 0x1ca0], 3
jge 0x427499
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1ca0]
mov dword [ebp - 0x1c], edx
jmp 0x427473
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4274ab
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4274c3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4274fd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1ca4], eax
mov eax, dword [ebp - 0x1ca4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4274ef
jmp 0x4274fd
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1ca4]
mov dword [ebp - 0x1c], edx
jmp 0x4274c3
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1ca8], 0
jmp 0x427521
mov ecx, dword [ebp - 0x1ca8]
add ecx, 1
mov dword [ebp - 0x1ca8], ecx
cmp dword [ebp - 0x1ca8], 3
jge 0x427538
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1ca8]
mov dword [ebp - 0x1c], edx
jmp 0x427512
cmp dword [ebp - 0x1c], 0
jge 0x427546
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42755e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x427598
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1cac], eax
mov eax, dword [ebp - 0x1cac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42758a
jmp 0x427598
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1cac]
mov dword [ebp - 0x1c], edx
jmp 0x42755e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4275d8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1cb0], eax
mov eax, dword [ebp - 0x1cb0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4275ca
jmp 0x4275d8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1cb0]
mov dword [ebp - 0x1c], edx
jmp 0x42759e
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x42761b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1cb4], eax
mov eax, dword [ebp - 0x1cb4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42760d
jmp 0x42761b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1cb4]
mov dword [ebp - 0x1c], edx
jmp 0x4275e1
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x1cb8], 0xffffffff
mov dword [ebp - 0x1cbc], 0
jmp 0x427650
mov ecx, dword [ebp - 0x1cbc]
add ecx, 1
mov dword [ebp - 0x1cbc], ecx
cmp dword [ebp - 0x1cbc], 1
jge 0x427682
mov eax, dword [ebp - 0x1cbc]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x427677
mov edx, dword [ebp - 0x1cb8]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x427641
mov dword [ebp - 4], 0xfffffffe
jmp 0x4276a2
mov dword [ebp - 0x1cc0], 0
jmp 0x4276bd
mov edx, dword [ebp - 0x1cc0]
add edx, 1
mov dword [ebp - 0x1cc0], edx
cmp dword [ebp - 0x1cc0], 1
jge 0x4276d4
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1cc0]
mov dword [ebp - 0x1c], eax
jmp 0x4276ae
cmp dword [ebp - 0x1c], 0
jge 0x4276e2
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4276fa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1cc4], 0
jmp 0x427715
mov edx, dword [ebp - 0x1cc4]
add edx, 1
mov dword [ebp - 0x1cc4], edx
cmp dword [ebp - 0x1cc4], 3
jge 0x427762
cmp dword [ebp - 0x1c], 0
jge 0x42772c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x427742
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1cc8], 0xfa
lea edx, [ebp - 0x1cc8]
push edx
lea eax, [ebp - 0x1ec0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x427706
mov dword [ebp - 0x1ec4], 0
jmp 0x42777d
cmp dword [ebp - 0x1ec4], 2
jge 0x4277ca
cmp dword [ebp - 0x1c], 0
jge 0x427794
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4277aa
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1ec8], 0xfa
lea edx, [ebp - 0x1ec8]
push edx
lea eax, [ebp - 0x20c0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42776e
mov dword [ebp - 0x20c4], 0
jmp 0x4277e5
cmp dword [ebp - 0x20c4], 4
jge 0x427826
cmp dword [ebp - 0x1c], 0
jge 0x4277fc
mov eax, 1
test eax, eax
je 0x427860