Function at 0x483db0
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x512250
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x32d0
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x30], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x483e17
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1d
jge 0x483e40
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x483e35
mov edx, dword [ebp - 0x20]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x483e0e
mov dword [ebp - 4], 0xfffffffe
jmp 0x483e60
mov dword [ebp - 0x28], 0
jmp 0x483e72
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x19
jge 0x483e83
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x483e69
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x483e95
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x483ead
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0
jmp 0x483ebf
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x11
jge 0x483efd
cmp dword [ebp - 0x1c], 0
jge 0x483ed3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x483ee9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x483eb6
mov dword [ebp - 0x22c], 0
jmp 0x483f18
mov eax, dword [ebp - 0x22c]
add eax, 1
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x15
jge 0x483f59
cmp dword [ebp - 0x1c], 0
jge 0x483f2f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x483f45
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x483f09
mov dword [ebp - 0x42c], 0
jmp 0x483f74
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x16
jge 0x483fc1
mov eax, dword [ebp - 0x42c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x483fa3
mov eax, dword [ebp - 0x42c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x483fb3
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x42c]
mov dword [ebp - 0x1c], edx
jmp 0x483fbf
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x42c]
mov dword [ebp - 0x1c], eax
jmp 0x483f65
mov dword [ebp - 0x430], 0
jmp 0x483fdc
mov ecx, dword [ebp - 0x430]
add ecx, 1
mov dword [ebp - 0x430], ecx
cmp dword [ebp - 0x430], 3
jge 0x484029
cmp dword [ebp - 0x1c], 0
jge 0x483ff3
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484009
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x434], 0xfa
lea edx, [ebp - 0x434]
push edx
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x483fcd
mov dword [ebp - 0x634], 0
jmp 0x484044
mov ecx, dword [ebp - 0x634]
add ecx, 1
mov dword [ebp - 0x634], ecx
cmp dword [ebp - 0x634], 0xf
jge 0x484091
cmp dword [ebp - 0x1c], 0
jge 0x48405b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484071
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x638], 0xfa
lea edx, [ebp - 0x638]
push edx
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x484035
mov dword [ebp - 0x834], 0
jmp 0x4840ac
mov ecx, dword [ebp - 0x834]
add ecx, 1
mov dword [ebp - 0x834], ecx
cmp dword [ebp - 0x834], 0x19
jge 0x4840ed
cmp dword [ebp - 0x1c], 0
jge 0x4840c3
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4840d9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa30]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48409d
mov dword [ebp - 0xa34], 0
jmp 0x484108
mov eax, dword [ebp - 0xa34]
add eax, 1
mov dword [ebp - 0xa34], eax
cmp dword [ebp - 0xa34], 0x16
jge 0x484149
cmp dword [ebp - 0x1c], 0
jge 0x48411f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484135
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc30]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4840f9
mov eax, 1
test eax, eax
je 0x484183
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc34], eax
mov eax, dword [ebp - 0xc34]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x484175
jmp 0x484183
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc34]
mov dword [ebp - 0x1c], edx
jmp 0x484149
mov eax, dword [ebp - 0x1c]
add eax, 0xe
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0xc38], 0xffffffff
mov dword [ebp - 0xc3c], 0
jmp 0x4841b8
mov ecx, dword [ebp - 0xc3c]
add ecx, 1
mov dword [ebp - 0xc3c], ecx
cmp dword [ebp - 0xc3c], 8
jge 0x4841ea
mov eax, dword [ebp - 0xc3c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4841df
mov edx, dword [ebp - 0xc38]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4841a9
mov dword [ebp - 4], 0xfffffffe
jmp 0x48420a
mov edx, 1
test edx, edx
je 0x484244
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp - 0xc40]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x484236
jmp 0x484244
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc40]
mov dword [ebp - 0x1c], edx
jmp 0x48420a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc44], 0
jmp 0x484265
mov ecx, dword [ebp - 0xc44]
add ecx, 1
mov dword [ebp - 0xc44], ecx
cmp dword [ebp - 0xc44], 9
jge 0x48427c
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc44]
mov dword [ebp - 0x1c], edx
jmp 0x484256
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48428e
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4842a6
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc48], 0
jmp 0x4842c1
mov edx, dword [ebp - 0xc48]
add edx, 1
mov dword [ebp - 0xc48], edx
cmp dword [ebp - 0xc48], 3
jge 0x484302
cmp dword [ebp - 0x1c], 0
jge 0x4842d8
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4842ee
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe40]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4842b2
mov dword [ebp - 0xe44], 0
jmp 0x48431d
mov eax, dword [ebp - 0xe44]
add eax, 1
mov dword [ebp - 0xe44], eax
cmp dword [ebp - 0xe44], 0xa
jge 0x48435e
cmp dword [ebp - 0x1c], 0
jge 0x484334
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48434a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1040]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x48430e
mov eax, 1
test eax, eax
je 0x484398
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1044], eax
mov eax, dword [ebp - 0x1044]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x48438a
jmp 0x484398
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1044]
mov dword [ebp - 0x1c], edx
jmp 0x48435e
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1048], 0
jmp 0x4843bc
mov ecx, dword [ebp - 0x1048]
add ecx, 1
mov dword [ebp - 0x1048], ecx
cmp dword [ebp - 0x1048], 4
jge 0x4843d3
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1048]
mov dword [ebp - 0x1c], edx
jmp 0x4843ad
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4843e5
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4843fd
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x104c], 0
jmp 0x484418
mov edx, dword [ebp - 0x104c]
add edx, 1
mov dword [ebp - 0x104c], edx
cmp dword [ebp - 0x104c], 3
jge 0x484465
cmp dword [ebp - 0x1c], 0
jge 0x48442f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484445
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1050], 0xfa
lea edx, [ebp - 0x1050]
push edx
lea eax, [ebp - 0x1248]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x484409
mov dword [ebp - 0x124c], 0
jmp 0x484480
mov ecx, dword [ebp - 0x124c]
add ecx, 1
mov dword [ebp - 0x124c], ecx
cmp dword [ebp - 0x124c], 0
jge 0x4844c1
cmp dword [ebp - 0x1c], 0
jge 0x484497
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4844ad
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1448]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484471
mov eax, 1
test eax, eax
je 0x4844fb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x144c], eax
mov eax, dword [ebp - 0x144c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4844ed
jmp 0x4844fb
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x144c]
mov dword [ebp - 0x1c], edx
jmp 0x4844c1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1450], 0
jmp 0x48451c
mov ecx, dword [ebp - 0x1450]
add ecx, 1
mov dword [ebp - 0x1450], ecx
cmp dword [ebp - 0x1450], 1
jge 0x484533
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1450]
mov dword [ebp - 0x1c], edx
jmp 0x48450d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x484545
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48455d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1454], 0
jmp 0x484578
mov edx, dword [ebp - 0x1454]
add edx, 1
mov dword [ebp - 0x1454], edx
cmp dword [ebp - 0x1454], 0
jge 0x4845c5
mov eax, dword [ebp - 0x1454]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4845a7
mov eax, dword [ebp - 0x1454]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4845b7
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1454]
mov dword [ebp - 0x1c], edx
jmp 0x4845c3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1c], eax
jmp 0x484569
mov dword [ebp - 0x1458], 0
jmp 0x4845e0
mov ecx, dword [ebp - 0x1458]
add ecx, 1
mov dword [ebp - 0x1458], ecx
cmp dword [ebp - 0x1458], 4
jge 0x4845f7
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1458]
mov dword [ebp - 0x1c], edx
jmp 0x4845d1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x484609
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484621
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x145c], 0
jmp 0x48463c
mov edx, dword [ebp - 0x145c]
add edx, 1
mov dword [ebp - 0x145c], edx
cmp dword [ebp - 0x145c], 4
jge 0x484689
mov eax, dword [ebp - 0x145c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x48466b
mov eax, dword [ebp - 0x145c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x48467b
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x145c]
mov dword [ebp - 0x1c], edx
jmp 0x484687
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x145c]
mov dword [ebp - 0x1c], eax
jmp 0x48462d
mov ecx, 1
test ecx, ecx
je 0x4846c3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1460], eax
mov eax, dword [ebp - 0x1460]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4846b5
jmp 0x4846c3
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1460]
mov dword [ebp - 0x1c], edx
jmp 0x484689
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x484706
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1464], eax
mov eax, dword [ebp - 0x1464]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4846f8
jmp 0x484706
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1c], edx
jmp 0x4846cc
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1468], 0
jmp 0x484727
mov ecx, dword [ebp - 0x1468]
add ecx, 1
mov dword [ebp - 0x1468], ecx
cmp dword [ebp - 0x1468], 1
jge 0x48473e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1468]
mov dword [ebp - 0x1c], edx
jmp 0x484718
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x484750
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484768
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x146c], 0
jmp 0x484783
mov edx, dword [ebp - 0x146c]
add edx, 1
mov dword [ebp - 0x146c], edx
cmp dword [ebp - 0x146c], 3
jge 0x4847c4
cmp dword [ebp - 0x1c], 0
jge 0x48479a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4847b0
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1668]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484774
mov eax, 1
test eax, eax
je 0x4847fe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x166c], eax
mov eax, dword [ebp - 0x166c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4847f0
jmp 0x4847fe
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x166c]
mov dword [ebp - 0x1c], edx
jmp 0x4847c4
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1670], 0
jmp 0x484822
mov ecx, dword [ebp - 0x1670]
add ecx, 1
mov dword [ebp - 0x1670], ecx
cmp dword [ebp - 0x1670], 2
jge 0x484839
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1670]
mov dword [ebp - 0x1c], edx
jmp 0x484813
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48484b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484863
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1674], 0
jmp 0x48487e
mov edx, dword [ebp - 0x1674]
add edx, 1
mov dword [ebp - 0x1674], edx
cmp dword [ebp - 0x1674], 4
jge 0x4848cb
cmp dword [ebp - 0x1c], 0
jge 0x484895
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4848ab
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1678], 0xfa
lea edx, [ebp - 0x1678]
push edx
lea eax, [ebp - 0x1870]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x48486f
mov dword [ebp - 0x1874], 0
jmp 0x4848e6
mov ecx, dword [ebp - 0x1874]
add ecx, 1
mov dword [ebp - 0x1874], ecx
cmp dword [ebp - 0x1874], 2
jge 0x4848fd
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1874]
mov dword [ebp - 0x1c], edx
jmp 0x4848d7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48490f
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484927
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1878], 0
jmp 0x484942
mov edx, dword [ebp - 0x1878]
add edx, 1
mov dword [ebp - 0x1878], edx
cmp dword [ebp - 0x1878], 0
jge 0x484959
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1878]
mov dword [ebp - 0x1c], eax
jmp 0x484933
cmp dword [ebp - 0x1c], 0
jge 0x484967
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48497f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x187c], 0
jmp 0x48499a
mov edx, dword [ebp - 0x187c]
add edx, 1
mov dword [ebp - 0x187c], edx
cmp dword [ebp - 0x187c], 0
jge 0x4849e7
mov eax, dword [ebp - 0x187c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4849c9
mov eax, dword [ebp - 0x187c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4849d9
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x187c]
mov dword [ebp - 0x1c], edx
jmp 0x4849e5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x187c]
mov dword [ebp - 0x1c], eax
jmp 0x48498b
mov dword [ebp - 0x1880], 0
jmp 0x484a02
mov ecx, dword [ebp - 0x1880]
add ecx, 1
mov dword [ebp - 0x1880], ecx
cmp dword [ebp - 0x1880], 2
jge 0x484a43
cmp dword [ebp - 0x1c], 0
jge 0x484a19
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484a2f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1a78]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4849f3
mov dword [ebp - 0x1a7c], 0
jmp 0x484a5e
mov eax, dword [ebp - 0x1a7c]
add eax, 1
mov dword [ebp - 0x1a7c], eax
cmp dword [ebp - 0x1a7c], 3
jge 0x484a75
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1a7c]
mov dword [ebp - 0x1c], ecx
jmp 0x484a4f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x484a87
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484a9f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1a80], 0
jmp 0x484aba
mov edx, dword [ebp - 0x1a80]
add edx, 1
mov dword [ebp - 0x1a80], edx
cmp dword [ebp - 0x1a80], 0
jge 0x484ad1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1a80]
mov dword [ebp - 0x1c], eax
jmp 0x484aab
cmp dword [ebp - 0x1c], 0
jge 0x484adf
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484af7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x484b31
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1a84], eax
mov eax, dword [ebp - 0x1a84]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x484b23
jmp 0x484b31
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1a84]
mov dword [ebp - 0x1c], edx
jmp 0x484af7
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1a88], 0
jmp 0x484b52
mov ecx, dword [ebp - 0x1a88]
add ecx, 1
mov dword [ebp - 0x1a88], ecx
cmp dword [ebp - 0x1a88], 2
jge 0x484b69
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1a88]
mov dword [ebp - 0x1c], edx
jmp 0x484b43
cmp dword [ebp - 0x1c], 0
jge 0x484b77
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484b8f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1a8c], 0
jmp 0x484baa
mov edx, dword [ebp - 0x1a8c]
add edx, 1
mov dword [ebp - 0x1a8c], edx
cmp dword [ebp - 0x1a8c], 4
jge 0x484bf7
mov eax, dword [ebp - 0x1a8c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x484bd9
mov eax, dword [ebp - 0x1a8c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x484be9
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1a8c]
mov dword [ebp - 0x1c], edx
jmp 0x484bf5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1a8c]
mov dword [ebp - 0x1c], eax
jmp 0x484b9b
mov dword [ebp - 0x1a90], 0
jmp 0x484c12
mov ecx, dword [ebp - 0x1a90]
add ecx, 1
mov dword [ebp - 0x1a90], ecx
cmp dword [ebp - 0x1a90], 2
jge 0x484c5f
cmp dword [ebp - 0x1c], 0
jge 0x484c29
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484c3f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1a94], 0xfa
lea edx, [ebp - 0x1a94]
push edx
lea eax, [ebp - 0x1c90]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x484c03
mov dword [ebp - 0x1c94], 0
jmp 0x484c7a
mov ecx, dword [ebp - 0x1c94]
add ecx, 1
mov dword [ebp - 0x1c94], ecx
cmp dword [ebp - 0x1c94], 0
jge 0x484c91
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1c94]
mov dword [ebp - 0x1c], edx
jmp 0x484c6b
cmp dword [ebp - 0x1c], 0
jge 0x484c9f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484cb7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c98], 0
jmp 0x484cd2
mov edx, dword [ebp - 0x1c98]
add edx, 1
mov dword [ebp - 0x1c98], edx
cmp dword [ebp - 0x1c98], 0
jge 0x484ce9
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1c98]
mov dword [ebp - 0x1c], eax
jmp 0x484cc3
cmp dword [ebp - 0x1c], 0
jge 0x484cf7
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484d0f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c9c], 0
jmp 0x484d2a
mov edx, dword [ebp - 0x1c9c]
add edx, 1
mov dword [ebp - 0x1c9c], edx
cmp dword [ebp - 0x1c9c], 2
jge 0x484d6b
cmp dword [ebp - 0x1c], 0
jge 0x484d41
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x484d57
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1e98]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x484d1b
mov dword [ebp - 4], 2
mov dword [ebp - 0x1e9c], 0xffffffff
mov dword [ebp - 0x1ea0], 0
jmp 0x484d97
mov eax, dword [ebp - 0x1ea0]
add eax, 1
mov dword [ebp - 0x1ea0], eax
cmp dword [ebp - 0x1ea0], 0
jge 0x484dc9
mov eax, dword [ebp - 0x1ea0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x484dbe
mov edx, dword [ebp - 0x1e9c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x484d88
mov dword [ebp - 4], 0xfffffffe
jmp 0x484de9
mov dword [ebp - 0x1ea4], 0
jmp 0x484e04
mov edx, dword [ebp - 0x1ea4]
add edx, 1
mov dword [ebp - 0x1ea4], edx
cmp dword [ebp - 0x1ea4], 2
jge 0x484e1b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1ea4]
mov dword [ebp - 0x1c], eax
jmp 0x484df5
cmp dword [ebp - 0x1c], 0
jge 0x484e29
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484e41
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x1ea8], 0xffffffff
mov dword [ebp - 0x1eac], 0
jmp 0x484e6d
mov edx, dword [ebp - 0x1eac]
add edx, 1
mov dword [ebp - 0x1eac], edx
cmp dword [ebp - 0x1eac], 0
jge 0x484e9f
mov eax, dword [ebp - 0x1eac]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x484e94
mov edx, dword [ebp - 0x1ea8]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x484e5e
mov dword [ebp - 4], 0xfffffffe
jmp 0x484ebf
mov dword [ebp - 0x1eb0], 0
jmp 0x484eda
mov edx, dword [ebp - 0x1eb0]
add edx, 1
mov dword [ebp - 0x1eb0], edx
cmp dword [ebp - 0x1eb0], 0
jge 0x484f27
cmp dword [ebp - 0x1c], 0
jge 0x484ef1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484f07
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1eb4], 0xfa
lea edx, [ebp - 0x1eb4]
push edx
lea eax, [ebp - 0x20b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x484ecb
mov dword [ebp - 0x20b4], 0
jmp 0x484f42
mov ecx, dword [ebp - 0x20b4]
add ecx, 1
mov dword [ebp - 0x20b4], ecx
cmp dword [ebp - 0x20b4], 1
jge 0x484f59
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x20b4]
mov dword [ebp - 0x1c], edx
jmp 0x484f33
cmp dword [ebp - 0x1c], 0
jge 0x484f67
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x484f7f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20b8], 0
jmp 0x484f9a
cmp dword [ebp - 0x20b8], 4
jge 0x484fb1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x20b8]
mov dword [ebp - 0x1c], eax
jmp 0x484f8b
cmp dword [ebp - 0x1c], 0
jge 0x484fbf