Function at 0x433ed0
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x510800
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x3584
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x2c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x433f37
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1b
jge 0x433f60
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x433f55
mov edx, dword [ebp - 0x20]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x433f2e
mov dword [ebp - 4], 0xfffffffe
jmp 0x433f80
mov dword [ebp - 0x28], 0
jmp 0x433f92
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x11
jge 0x433fd0
cmp dword [ebp - 0x1c], 0
jge 0x433fa6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x433fbc
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x433f89
mov dword [ebp - 4], 1
mov dword [ebp - 0x22c], 0xffffffff
mov dword [ebp - 0x230], 0
jmp 0x433ffc
mov eax, dword [ebp - 0x230]
add eax, 1
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x18
jge 0x43402e
mov eax, dword [ebp - 0x230]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x434023
mov edx, dword [ebp - 0x22c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x433fed
mov dword [ebp - 4], 0xfffffffe
jmp 0x43404e
mov dword [ebp - 0x234], 0
jmp 0x434069
mov edx, dword [ebp - 0x234]
add edx, 1
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 0x13
jge 0x4340aa
cmp dword [ebp - 0x1c], 0
jge 0x434080
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434096
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x430]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43405a
mov dword [ebp - 4], 2
mov dword [ebp - 0x434], 0xffffffff
mov dword [ebp - 0x438], 0
jmp 0x4340d6
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0xd
jge 0x434108
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4340fd
mov edx, dword [ebp - 0x434]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4340c7
mov dword [ebp - 4], 0xfffffffe
jmp 0x434128
mov dword [ebp - 4], 3
mov dword [ebp - 0x43c], 0xffffffff
mov dword [ebp - 0x440], 0
jmp 0x434154
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 4
jge 0x434186
mov eax, dword [ebp - 0x440]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x43417b
mov edx, dword [ebp - 0x43c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x434145
mov dword [ebp - 4], 0xfffffffe
jmp 0x4341a6
mov dword [ebp - 0x444], 0
jmp 0x4341c1
mov edx, dword [ebp - 0x444]
add edx, 1
mov dword [ebp - 0x444], edx
cmp dword [ebp - 0x444], 0xb
jge 0x4341d8
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x444]
mov dword [ebp - 0x1c], eax
jmp 0x4341b2
cmp dword [ebp - 0x1c], 0
jge 0x4341e6
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4341fe
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x448], 0
jmp 0x434219
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 0x1d
jge 0x434266
mov eax, dword [ebp - 0x448]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x434248
mov eax, dword [ebp - 0x448]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x434258
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x448]
mov dword [ebp - 0x1c], edx
jmp 0x434264
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x448]
mov dword [ebp - 0x1c], eax
jmp 0x43420a
mov dword [ebp - 0x44c], 0
jmp 0x434281
mov ecx, dword [ebp - 0x44c]
add ecx, 1
mov dword [ebp - 0x44c], ecx
cmp dword [ebp - 0x44c], 7
jge 0x4342ce
cmp dword [ebp - 0x1c], 0
jge 0x434298
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4342ae
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x450], 0xfa
lea edx, [ebp - 0x450]
push edx
lea eax, [ebp - 0x648]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x434272
mov dword [ebp - 0x64c], 0
jmp 0x4342e9
mov ecx, dword [ebp - 0x64c]
add ecx, 1
mov dword [ebp - 0x64c], ecx
cmp dword [ebp - 0x64c], 8
jge 0x434336
cmp dword [ebp - 0x1c], 0
jge 0x434300
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434316
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x650], 0xfa
lea edx, [ebp - 0x650]
push edx
lea eax, [ebp - 0x848]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4342da
mov dword [ebp - 0x84c], 0
jmp 0x434351
mov ecx, dword [ebp - 0x84c]
add ecx, 1
mov dword [ebp - 0x84c], ecx
cmp dword [ebp - 0x84c], 1
jge 0x434392
cmp dword [ebp - 0x1c], 0
jge 0x434368
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43437e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa48]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x434342
mov dword [ebp - 0xa4c], 0
jmp 0x4343ad
mov eax, dword [ebp - 0xa4c]
add eax, 1
mov dword [ebp - 0xa4c], eax
cmp dword [ebp - 0xa4c], 0xf
jge 0x4343fa
cmp dword [ebp - 0x1c], 0
jge 0x4343c4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4343da
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa50], 0xfa
lea edx, [ebp - 0xa50]
push edx
lea eax, [ebp - 0xc48]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43439e
mov dword [ebp - 0xc4c], 0
jmp 0x434415
mov ecx, dword [ebp - 0xc4c]
add ecx, 1
mov dword [ebp - 0xc4c], ecx
cmp dword [ebp - 0xc4c], 0xe
jge 0x434456
cmp dword [ebp - 0x1c], 0
jge 0x43442c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434442
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe48]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x434406
mov eax, 1
test eax, eax
je 0x434490
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x434482
jmp 0x434490
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe4c]
mov dword [ebp - 0x1c], edx
jmp 0x434456
mov eax, dword [ebp - 0x1c]
add eax, 0xc
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4344d3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp - 0xe50]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4344c5
jmp 0x4344d3
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe50]
mov dword [ebp - 0x1c], edx
jmp 0x434499
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x434516
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe54], eax
mov eax, dword [ebp - 0xe54]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x434508
jmp 0x434516
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe54]
mov dword [ebp - 0x1c], edx
jmp 0x4344dc
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe58], 0
jmp 0x43453a
mov ecx, dword [ebp - 0xe58]
add ecx, 1
mov dword [ebp - 0xe58], ecx
cmp dword [ebp - 0xe58], 0xd
jge 0x434551
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xe58]
mov dword [ebp - 0x1c], edx
jmp 0x43452b
cmp dword [ebp - 0x1c], 0
jge 0x43455f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434577
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe5c], 0
jmp 0x434592
mov edx, dword [ebp - 0xe5c]
add edx, 1
mov dword [ebp - 0xe5c], edx
cmp dword [ebp - 0xe5c], 0x10
jge 0x4345df
cmp dword [ebp - 0x1c], 0
jge 0x4345a9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4345bf
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xe60], 0xfa
lea edx, [ebp - 0xe60]
push edx
lea eax, [ebp - 0x1058]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x434583
mov dword [ebp - 0x105c], 0
jmp 0x4345fa
mov ecx, dword [ebp - 0x105c]
add ecx, 1
mov dword [ebp - 0x105c], ecx
cmp dword [ebp - 0x105c], 0xf
jge 0x434647
cmp dword [ebp - 0x1c], 0
jge 0x434611
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434627
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1060], 0xfa
lea edx, [ebp - 0x1060]
push edx
lea eax, [ebp - 0x1258]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4345eb
mov dword [ebp - 0x125c], 0
jmp 0x434662
mov ecx, dword [ebp - 0x125c]
add ecx, 1
mov dword [ebp - 0x125c], ecx
cmp dword [ebp - 0x125c], 9
jge 0x434679
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x125c]
mov dword [ebp - 0x1c], edx
jmp 0x434653
cmp dword [ebp - 0x1c], 0
jge 0x434687
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43469f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4346d9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1260], eax
mov eax, dword [ebp - 0x1260]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4346cb
jmp 0x4346d9
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1260]
mov dword [ebp - 0x1c], edx
jmp 0x43469f
mov eax, dword [ebp - 0x1c]
add eax, 0xf
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1264], 0
jmp 0x4346fd
mov ecx, dword [ebp - 0x1264]
add ecx, 1
mov dword [ebp - 0x1264], ecx
cmp dword [ebp - 0x1264], 5
jge 0x43474a
cmp dword [ebp - 0x1c], 0
jge 0x434714
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43472a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1268], 0xfa
lea edx, [ebp - 0x1268]
push edx
lea eax, [ebp - 0x1460]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4346ee
mov dword [ebp - 0x1464], 0
jmp 0x434765
mov ecx, dword [ebp - 0x1464]
add ecx, 1
mov dword [ebp - 0x1464], ecx
cmp dword [ebp - 0x1464], 2
jge 0x4347b2
cmp dword [ebp - 0x1c], 0
jge 0x43477c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434792
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1468], 0xfa
lea edx, [ebp - 0x1468]
push edx
lea eax, [ebp - 0x1660]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x434756
mov dword [ebp - 4], 4
mov dword [ebp - 0x1664], 0xffffffff
mov dword [ebp - 0x1668], 0
jmp 0x4347de
mov ecx, dword [ebp - 0x1668]
add ecx, 1
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 4
jge 0x434810
mov eax, dword [ebp - 0x1668]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x434805
mov edx, dword [ebp - 0x1664]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4347cf
mov dword [ebp - 4], 0xfffffffe
jmp 0x434830
mov dword [ebp - 0x166c], 0
jmp 0x43484b
mov edx, dword [ebp - 0x166c]
add edx, 1
mov dword [ebp - 0x166c], edx
cmp dword [ebp - 0x166c], 3
jge 0x434862
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x166c]
mov dword [ebp - 0x1c], eax
jmp 0x43483c
cmp dword [ebp - 0x1c], 0
jge 0x434870
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434888
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4348c2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1670], eax
mov eax, dword [ebp - 0x1670]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4348b4
jmp 0x4348c2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1670]
mov dword [ebp - 0x1c], edx
jmp 0x434888
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x1674], 0xffffffff
mov dword [ebp - 0x1678], 0
jmp 0x4348f7
mov ecx, dword [ebp - 0x1678]
add ecx, 1
mov dword [ebp - 0x1678], ecx
cmp dword [ebp - 0x1678], 7
jge 0x434929
mov eax, dword [ebp - 0x1678]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x43491e
mov edx, dword [ebp - 0x1674]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4348e8
mov dword [ebp - 4], 0xfffffffe
jmp 0x434949
mov dword [ebp - 0x167c], 0
jmp 0x434964
mov edx, dword [ebp - 0x167c]
add edx, 1
mov dword [ebp - 0x167c], edx
cmp dword [ebp - 0x167c], 7
jge 0x43497b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x167c]
mov dword [ebp - 0x1c], eax
jmp 0x434955
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43498d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4349a5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x1680], 0xffffffff
mov dword [ebp - 0x1684], 0
jmp 0x4349d1
mov edx, dword [ebp - 0x1684]
add edx, 1
mov dword [ebp - 0x1684], edx
cmp dword [ebp - 0x1684], 5
jge 0x434a03
mov eax, dword [ebp - 0x1684]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4349f8
mov edx, dword [ebp - 0x1680]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4349c2
mov dword [ebp - 4], 0xfffffffe
jmp 0x434a23
mov dword [ebp - 0x1688], 0
jmp 0x434a3e
mov edx, dword [ebp - 0x1688]
add edx, 1
mov dword [ebp - 0x1688], edx
cmp dword [ebp - 0x1688], 8
jge 0x434a55
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1688]
mov dword [ebp - 0x1c], eax
jmp 0x434a2f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434a67
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434a7f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x168c], 0xffffffff
mov dword [ebp - 0x1690], 0
jmp 0x434aab
mov edx, dword [ebp - 0x1690]
add edx, 1
mov dword [ebp - 0x1690], edx
cmp dword [ebp - 0x1690], 0
jge 0x434add
mov eax, dword [ebp - 0x1690]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x434ad2
mov edx, dword [ebp - 0x168c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x434a9c
mov dword [ebp - 4], 0xfffffffe
jmp 0x434afd
mov dword [ebp - 0x1694], 0
jmp 0x434b18
mov edx, dword [ebp - 0x1694]
add edx, 1
mov dword [ebp - 0x1694], edx
cmp dword [ebp - 0x1694], 0
jge 0x434b65
cmp dword [ebp - 0x1c], 0
jge 0x434b2f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434b45
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1698], 0xfa
lea edx, [ebp - 0x1698]
push edx
lea eax, [ebp - 0x1890]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x434b09
mov dword [ebp - 0x1894], 0
jmp 0x434b80
mov ecx, dword [ebp - 0x1894]
add ecx, 1
mov dword [ebp - 0x1894], ecx
cmp dword [ebp - 0x1894], 5
jge 0x434bc1
cmp dword [ebp - 0x1c], 0
jge 0x434b97
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434bad
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1a90]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x434b71
mov dword [ebp - 0x1a94], 0
jmp 0x434bdc
mov eax, dword [ebp - 0x1a94]
add eax, 1
mov dword [ebp - 0x1a94], eax
cmp dword [ebp - 0x1a94], 0
jge 0x434bf3
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1a94]
mov dword [ebp - 0x1c], ecx
jmp 0x434bcd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434c05
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434c1d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x434c57
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1a98], eax
mov eax, dword [ebp - 0x1a98]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x434c49
jmp 0x434c57
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1a98]
mov dword [ebp - 0x1c], edx
jmp 0x434c1d
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1a9c], 0
jmp 0x434c7b
mov ecx, dword [ebp - 0x1a9c]
add ecx, 1
mov dword [ebp - 0x1a9c], ecx
cmp dword [ebp - 0x1a9c], 3
jge 0x434cc8
mov eax, dword [ebp - 0x1a9c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x434caa
mov eax, dword [ebp - 0x1a9c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x434cba
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1a9c]
mov dword [ebp - 0x1c], edx
jmp 0x434cc6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1a9c]
mov dword [ebp - 0x1c], eax
jmp 0x434c6c
mov dword [ebp - 0x1aa0], 0
jmp 0x434ce3
mov ecx, dword [ebp - 0x1aa0]
add ecx, 1
mov dword [ebp - 0x1aa0], ecx
cmp dword [ebp - 0x1aa0], 4
jge 0x434d30
mov eax, dword [ebp - 0x1aa0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x434d12
mov eax, dword [ebp - 0x1aa0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x434d22
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1aa0]
mov dword [ebp - 0x1c], edx
jmp 0x434d2e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1aa0]
mov dword [ebp - 0x1c], eax
jmp 0x434cd4
mov dword [ebp - 0x1aa4], 0
jmp 0x434d4b
mov ecx, dword [ebp - 0x1aa4]
add ecx, 1
mov dword [ebp - 0x1aa4], ecx
cmp dword [ebp - 0x1aa4], 8
jge 0x434d98
mov eax, dword [ebp - 0x1aa4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x434d7a
mov eax, dword [ebp - 0x1aa4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x434d8a
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1aa4]
mov dword [ebp - 0x1c], edx
jmp 0x434d96
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1aa4]
mov dword [ebp - 0x1c], eax
jmp 0x434d3c
mov dword [ebp - 0x1aa8], 0
jmp 0x434db3
mov ecx, dword [ebp - 0x1aa8]
add ecx, 1
mov dword [ebp - 0x1aa8], ecx
cmp dword [ebp - 0x1aa8], 5
jge 0x434dca
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1aa8]
mov dword [ebp - 0x1c], edx
jmp 0x434da4
cmp dword [ebp - 0x1c], 0
jge 0x434dd8
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434df0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1aac], 0
jmp 0x434e0b
mov edx, dword [ebp - 0x1aac]
add edx, 1
mov dword [ebp - 0x1aac], edx
cmp dword [ebp - 0x1aac], 3
jge 0x434e58
mov eax, dword [ebp - 0x1aac]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x434e3a
mov eax, dword [ebp - 0x1aac]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x434e4a
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1aac]
mov dword [ebp - 0x1c], edx
jmp 0x434e56
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1aac]
mov dword [ebp - 0x1c], eax
jmp 0x434dfc
mov ecx, 1
test ecx, ecx
je 0x434e92
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1ab0], eax
mov eax, dword [ebp - 0x1ab0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x434e84
jmp 0x434e92
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1ab0]
mov dword [ebp - 0x1c], edx
jmp 0x434e58
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1ab4], 0
jmp 0x434eb6
mov ecx, dword [ebp - 0x1ab4]
add ecx, 1
mov dword [ebp - 0x1ab4], ecx
cmp dword [ebp - 0x1ab4], 2
jge 0x434f03
cmp dword [ebp - 0x1c], 0
jge 0x434ecd
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434ee3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1ab8], 0xfa
lea edx, [ebp - 0x1ab8]
push edx
lea eax, [ebp - 0x1cb0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x434ea7
mov dword [ebp - 0x1cb4], 0
jmp 0x434f1e
mov ecx, dword [ebp - 0x1cb4]
add ecx, 1
mov dword [ebp - 0x1cb4], ecx
cmp dword [ebp - 0x1cb4], 3
jge 0x434f35
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1cb4]
mov dword [ebp - 0x1c], edx
jmp 0x434f0f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434f47
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434f5f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1cb8], 0
jmp 0x434f7a
mov edx, dword [ebp - 0x1cb8]
add edx, 1
mov dword [ebp - 0x1cb8], edx
cmp dword [ebp - 0x1cb8], 3
jge 0x434f91
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1cb8]
mov dword [ebp - 0x1c], eax
jmp 0x434f6b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434fa3
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434fbb
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 8
mov dword [ebp - 0x1cbc], 0xffffffff
mov dword [ebp - 0x1cc0], 0
jmp 0x434fe7
mov edx, dword [ebp - 0x1cc0]
add edx, 1
mov dword [ebp - 0x1cc0], edx
cmp dword [ebp - 0x1cc0], 4
jge 0x435019
mov eax, dword [ebp - 0x1cc0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x43500e
mov edx, dword [ebp - 0x1cbc]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x434fd8
mov dword [ebp - 4], 0xfffffffe
jmp 0x435039
mov dword [ebp - 4], 9
mov dword [ebp - 0x1cc4], 0xffffffff
mov dword [ebp - 0x1cc8], 0
jmp 0x435065
mov edx, dword [ebp - 0x1cc8]
add edx, 1
mov dword [ebp - 0x1cc8], edx
cmp dword [ebp - 0x1cc8], 1
jge 0x435097
mov eax, dword [ebp - 0x1cc8]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x43508c
mov edx, dword [ebp - 0x1cc4]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x435056
mov dword [ebp - 4], 0xfffffffe
jmp 0x4350b7
mov dword [ebp - 0x1ccc], 0
jmp 0x4350d2
mov edx, dword [ebp - 0x1ccc]
add edx, 1
mov dword [ebp - 0x1ccc], edx
cmp dword [ebp - 0x1ccc], 0
jge 0x4350e9
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1ccc]
mov dword [ebp - 0x1c], eax
jmp 0x4350c3
cmp dword [ebp - 0x1c], 0
jge 0x4350f7
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43510f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1cd0], 0xffffffff
mov dword [ebp - 0x1cd4], 0
jmp 0x43513b
mov edx, dword [ebp - 0x1cd4]
add edx, 1
mov dword [ebp - 0x1cd4], edx
cmp dword [ebp - 0x1cd4], 0
jge 0x43516d
mov eax, dword [ebp - 0x1cd4]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x435162
mov edx, dword [ebp - 0x1cd0]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x43512c
mov dword [ebp - 4], 0xfffffffe
jmp 0x43518d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1cd8], 0xffffffff
mov dword [ebp - 0x1cdc], 0
jmp 0x4351b9
mov edx, dword [ebp - 0x1cdc]
add edx, 1
mov dword [ebp - 0x1cdc], edx
cmp dword [ebp - 0x1cdc], 4
jge 0x4351eb
mov eax, dword [ebp - 0x1cdc]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4351e0
mov edx, dword [ebp - 0x1cd8]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4351aa
mov dword [ebp - 4], 0xfffffffe
jmp 0x43520b
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1ce0], 0xffffffff
mov dword [ebp - 0x1ce4], 0
jmp 0x435237
cmp dword [ebp - 0x1ce4], 4
jge 0x435269
mov eax, dword [ebp - 0x1ce4]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x43525e
mov edx, dword [ebp - 0x1ce0]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x435228
mov dword [ebp - 4], 0xfffffffe
jmp 0x435289
mov dword [ebp - 0x1ce8], 0
jmp 0x4352a4