Function at 0x432720
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x510780
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x26e4
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x38], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x432779
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x43278a
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x432770
cmp dword [ebp - 0x1c], 0
jge 0x432798
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4327b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4327e1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4327d6
jmp 0x4327e1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x4327b0
mov eax, dword [ebp - 0x1c]
add eax, 0xa
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], 0
jmp 0x4327fc
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0xa
jge 0x43280d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x4327f3
cmp dword [ebp - 0x1c], 0
jge 0x43281b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432833
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0
jmp 0x432845
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0xd
jge 0x432856
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x43283c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x432868
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x432880
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4328b1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4328a6
jmp 0x4328b1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], edx
jmp 0x432880
mov eax, dword [ebp - 0x1c]
add eax, 0xf
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], 0
jmp 0x4328cc
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 3
jge 0x43290a
cmp dword [ebp - 0x1c], 0
jge 0x4328e0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4328f6
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4328c3
mov dword [ebp - 0x234], 0
jmp 0x432925
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 6
jge 0x43293c
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x234]
mov dword [ebp - 0x1c], ecx
jmp 0x432916
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43294e
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x432966
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x238], 0
jmp 0x432981
mov edx, dword [ebp - 0x238]
add edx, 1
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 4
jge 0x4329ce
cmp dword [ebp - 0x1c], 0
jge 0x432998
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4329ae
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x23c], 0xfa
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x438]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432972
mov ecx, 1
test ecx, ecx
je 0x432a08
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4329fa
jmp 0x432a08
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x43c]
mov dword [ebp - 0x1c], edx
jmp 0x4329ce
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x432a4b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x432a3d
jmp 0x432a4b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x440]
mov dword [ebp - 0x1c], edx
jmp 0x432a11
mov eax, dword [ebp - 0x1c]
add eax, 0xd
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x444], 0
jmp 0x432a6f
mov ecx, dword [ebp - 0x444]
add ecx, 1
mov dword [ebp - 0x444], ecx
cmp dword [ebp - 0x444], 0xa
jge 0x432abc
cmp dword [ebp - 0x1c], 0
jge 0x432a86
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432a9c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x448], 0xfa
lea edx, [ebp - 0x448]
push edx
lea eax, [ebp - 0x640]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432a60
mov dword [ebp - 0x644], 0
jmp 0x432ad7
mov ecx, dword [ebp - 0x644]
add ecx, 1
mov dword [ebp - 0x644], ecx
cmp dword [ebp - 0x644], 0xe
jge 0x432b18
cmp dword [ebp - 0x1c], 0
jge 0x432aee
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x432b04
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x840]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x432ac8
mov eax, 1
test eax, eax
je 0x432b52
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x844]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x432b44
jmp 0x432b52
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x844]
mov dword [ebp - 0x1c], edx
jmp 0x432b18
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x848], 0
jmp 0x432b76
mov ecx, dword [ebp - 0x848]
add ecx, 1
mov dword [ebp - 0x848], ecx
cmp dword [ebp - 0x848], 6
jge 0x432bc3
cmp dword [ebp - 0x1c], 0
jge 0x432b8d
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432ba3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x84c], 0xfa
lea edx, [ebp - 0x84c]
push edx
lea eax, [ebp - 0xa48]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432b67
mov dword [ebp - 4], 0
mov dword [ebp - 0xa4c], 0xffffffff
mov dword [ebp - 0xa50], 0
jmp 0x432bef
mov ecx, dword [ebp - 0xa50]
add ecx, 1
mov dword [ebp - 0xa50], ecx
cmp dword [ebp - 0xa50], 0xa
jge 0x432c21
mov eax, dword [ebp - 0xa50]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x432c16
mov edx, dword [ebp - 0xa4c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x432be0
mov dword [ebp - 4], 0xfffffffe
jmp 0x432c41
mov dword [ebp - 0xa54], 0
jmp 0x432c5c
mov edx, dword [ebp - 0xa54]
add edx, 1
mov dword [ebp - 0xa54], edx
cmp dword [ebp - 0xa54], 0
jge 0x432c73
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xa54]
mov dword [ebp - 0x1c], eax
jmp 0x432c4d
cmp dword [ebp - 0x1c], 0
jge 0x432c81
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432c99
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0xa58], 0xffffffff
mov dword [ebp - 0xa5c], 0
jmp 0x432cc5
mov edx, dword [ebp - 0xa5c]
add edx, 1
mov dword [ebp - 0xa5c], edx
cmp dword [ebp - 0xa5c], 8
jge 0x432cf7
mov eax, dword [ebp - 0xa5c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x432cec
mov edx, dword [ebp - 0xa58]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x432cb6
mov dword [ebp - 4], 0xfffffffe
jmp 0x432d17
mov dword [ebp - 0xa60], 0
jmp 0x432d32
mov edx, dword [ebp - 0xa60]
add edx, 1
mov dword [ebp - 0xa60], edx
cmp dword [ebp - 0xa60], 0xc
jge 0x432d49
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa60]
mov dword [ebp - 0x1c], eax
jmp 0x432d23
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x432d5b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x432d73
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa64], 0
jmp 0x432d8e
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmp dword [ebp - 0xa64], 5
jge 0x432ddb
cmp dword [ebp - 0x1c], 0
jge 0x432da5
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432dbb
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa68], 0xfa
lea edx, [ebp - 0xa68]
push edx
lea eax, [ebp - 0xc60]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432d7f
mov dword [ebp - 0xc64], 0
jmp 0x432df6
mov ecx, dword [ebp - 0xc64]
add ecx, 1
mov dword [ebp - 0xc64], ecx
cmp dword [ebp - 0xc64], 7
jge 0x432e43
cmp dword [ebp - 0x1c], 0
jge 0x432e0d
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432e23
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc68], 0xfa
lea edx, [ebp - 0xc68]
push edx
lea eax, [ebp - 0xe60]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432de7
mov dword [ebp - 0xe64], 0
jmp 0x432e5e
mov ecx, dword [ebp - 0xe64]
add ecx, 1
mov dword [ebp - 0xe64], ecx
cmp dword [ebp - 0xe64], 3
jge 0x432e9f
cmp dword [ebp - 0x1c], 0
jge 0x432e75
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x432e8b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1060]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x432e4f
mov dword [ebp - 0x1064], 0
jmp 0x432eba
mov eax, dword [ebp - 0x1064]
add eax, 1
mov dword [ebp - 0x1064], eax
cmp dword [ebp - 0x1064], 0
jge 0x432f07
cmp dword [ebp - 0x1c], 0
jge 0x432ed1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432ee7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1068], 0xfa
lea edx, [ebp - 0x1068]
push edx
lea eax, [ebp - 0x1260]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432eab
mov dword [ebp - 4], 2
mov dword [ebp - 0x1264], 0xffffffff
mov dword [ebp - 0x1268], 0
jmp 0x432f33
mov ecx, dword [ebp - 0x1268]
add ecx, 1
mov dword [ebp - 0x1268], ecx
cmp dword [ebp - 0x1268], 4
jge 0x432f65
mov eax, dword [ebp - 0x1268]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x432f5a
mov edx, dword [ebp - 0x1264]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x432f24
mov dword [ebp - 4], 0xfffffffe
jmp 0x432f85
mov dword [ebp - 4], 3
mov dword [ebp - 0x126c], 0xffffffff
mov dword [ebp - 0x1270], 0
jmp 0x432fb1
mov edx, dword [ebp - 0x1270]
add edx, 1
mov dword [ebp - 0x1270], edx
cmp dword [ebp - 0x1270], 0
jge 0x432fe3
mov eax, dword [ebp - 0x1270]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x432fd8
mov edx, dword [ebp - 0x126c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x432fa2
mov dword [ebp - 4], 0xfffffffe
jmp 0x433003
mov dword [ebp - 0x1274], 0
jmp 0x43301e
mov edx, dword [ebp - 0x1274]
add edx, 1
mov dword [ebp - 0x1274], edx
cmp dword [ebp - 0x1274], 1
jge 0x433035
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1274]
mov dword [ebp - 0x1c], eax
jmp 0x43300f
cmp dword [ebp - 0x1c], 0
jge 0x433043
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43305b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1278], 0
jmp 0x433076
mov edx, dword [ebp - 0x1278]
add edx, 1
mov dword [ebp - 0x1278], edx
cmp dword [ebp - 0x1278], 7
jge 0x4330b7
cmp dword [ebp - 0x1c], 0
jge 0x43308d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4330a3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1470]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x433067
mov dword [ebp - 4], 4
mov dword [ebp - 0x1474], 0xffffffff
mov dword [ebp - 0x1478], 0
jmp 0x4330e3
mov eax, dword [ebp - 0x1478]
add eax, 1
mov dword [ebp - 0x1478], eax
cmp dword [ebp - 0x1478], 6
jge 0x433115
mov eax, dword [ebp - 0x1478]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x43310a
mov edx, dword [ebp - 0x1474]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4330d4
mov dword [ebp - 4], 0xfffffffe
jmp 0x433135
mov dword [ebp - 0x147c], 0
jmp 0x433150
mov edx, dword [ebp - 0x147c]
add edx, 1
mov dword [ebp - 0x147c], edx
cmp dword [ebp - 0x147c], 7
jge 0x433167
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x147c]
mov dword [ebp - 0x1c], eax
jmp 0x433141
cmp dword [ebp - 0x1c], 0
jge 0x433175
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43318d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1480], 0
jmp 0x4331a8
mov edx, dword [ebp - 0x1480]
add edx, 1
mov dword [ebp - 0x1480], edx
cmp dword [ebp - 0x1480], 8
jge 0x4331bf
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1480]
mov dword [ebp - 0x1c], eax
jmp 0x433199
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4331d1
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4331e9
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x433223
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1484], eax
mov eax, dword [ebp - 0x1484]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x433215
jmp 0x433223
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1484]
mov dword [ebp - 0x1c], edx
jmp 0x4331e9
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1488], 0
jmp 0x433247
mov ecx, dword [ebp - 0x1488]
add ecx, 1
mov dword [ebp - 0x1488], ecx
cmp dword [ebp - 0x1488], 3
jge 0x43325e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1488]
mov dword [ebp - 0x1c], edx
jmp 0x433238
cmp dword [ebp - 0x1c], 0
jge 0x43326c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433284
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x148c], 0
jmp 0x43329f
mov edx, dword [ebp - 0x148c]
add edx, 1
mov dword [ebp - 0x148c], edx
cmp dword [ebp - 0x148c], 1
jge 0x4332b6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x148c]
mov dword [ebp - 0x1c], eax
jmp 0x433290
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4332c8
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4332e0
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1490], 0
jmp 0x4332fb
mov edx, dword [ebp - 0x1490]
add edx, 1
mov dword [ebp - 0x1490], edx
cmp dword [ebp - 0x1490], 3
jge 0x433348
cmp dword [ebp - 0x1c], 0
jge 0x433312
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433328
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1494], 0xfa
lea edx, [ebp - 0x1494]
push edx
lea eax, [ebp - 0x1690]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4332ec
mov dword [ebp - 0x1694], 0
jmp 0x433363
mov ecx, dword [ebp - 0x1694]
add ecx, 1
mov dword [ebp - 0x1694], ecx
cmp dword [ebp - 0x1694], 1
jge 0x4333b0
mov eax, dword [ebp - 0x1694]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x433392
mov eax, dword [ebp - 0x1694]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4333a2
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1694]
mov dword [ebp - 0x1c], edx
jmp 0x4333ae
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1694]
mov dword [ebp - 0x1c], eax
jmp 0x433354
mov dword [ebp - 0x1698], 0
jmp 0x4333cb
mov ecx, dword [ebp - 0x1698]
add ecx, 1
mov dword [ebp - 0x1698], ecx
cmp dword [ebp - 0x1698], 4
jge 0x4333e2
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1698]
mov dword [ebp - 0x1c], edx
jmp 0x4333bc
cmp dword [ebp - 0x1c], 0
jge 0x4333f0
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433408
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x169c], 0xffffffff
mov dword [ebp - 0x16a0], 0
jmp 0x433434
mov edx, dword [ebp - 0x16a0]
add edx, 1
mov dword [ebp - 0x16a0], edx
cmp dword [ebp - 0x16a0], 2
jge 0x433466
mov eax, dword [ebp - 0x16a0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x43345b
mov edx, dword [ebp - 0x169c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x433425
mov dword [ebp - 4], 0xfffffffe
jmp 0x433486
mov dword [ebp - 0x16a4], 0
jmp 0x4334a1
mov edx, dword [ebp - 0x16a4]
add edx, 1
mov dword [ebp - 0x16a4], edx
cmp dword [ebp - 0x16a4], 3
jge 0x4334b8
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x16a4]
mov dword [ebp - 0x1c], eax
jmp 0x433492
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4334ca
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4334e2
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x16a8], 0xffffffff
mov dword [ebp - 0x16ac], 0
jmp 0x43350e
mov edx, dword [ebp - 0x16ac]
add edx, 1
mov dword [ebp - 0x16ac], edx
cmp dword [ebp - 0x16ac], 4
jge 0x433540
mov eax, dword [ebp - 0x16ac]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x433535
mov edx, dword [ebp - 0x16a8]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4334ff
mov dword [ebp - 4], 0xfffffffe
jmp 0x433560
mov dword [ebp - 0x16b0], 0
jmp 0x43357b
mov edx, dword [ebp - 0x16b0]
add edx, 1
mov dword [ebp - 0x16b0], edx
cmp dword [ebp - 0x16b0], 1
jge 0x4335bc
cmp dword [ebp - 0x1c], 0
jge 0x433592
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4335a8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x18a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x43356c
mov dword [ebp - 0x18ac], 0
jmp 0x4335d7
mov eax, dword [ebp - 0x18ac]
add eax, 1
mov dword [ebp - 0x18ac], eax
cmp dword [ebp - 0x18ac], 2
jge 0x433624
cmp dword [ebp - 0x1c], 0
jge 0x4335ee
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433604
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18b0], 0xfa
lea edx, [ebp - 0x18b0]
push edx
lea eax, [ebp - 0x1aa8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4335c8
mov ecx, 1
test ecx, ecx
je 0x43365e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1aac], eax
mov eax, dword [ebp - 0x1aac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x433650
jmp 0x43365e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1aac]
mov dword [ebp - 0x1c], edx
jmp 0x433624
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1ab0], 0
jmp 0x433682
mov ecx, dword [ebp - 0x1ab0]
add ecx, 1
mov dword [ebp - 0x1ab0], ecx
cmp dword [ebp - 0x1ab0], 2
jge 0x4336cf
mov eax, dword [ebp - 0x1ab0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4336b1
mov eax, dword [ebp - 0x1ab0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4336c1
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1ab0]
mov dword [ebp - 0x1c], edx
jmp 0x4336cd
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1ab0]
mov dword [ebp - 0x1c], eax
jmp 0x433673
mov dword [ebp - 0x1ab4], 0
jmp 0x4336ea
mov ecx, dword [ebp - 0x1ab4]
add ecx, 1
mov dword [ebp - 0x1ab4], ecx
cmp dword [ebp - 0x1ab4], 4
jge 0x433701
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1ab4]
mov dword [ebp - 0x1c], edx
jmp 0x4336db
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x433713
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43372b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1ab8], 0
jmp 0x433746
mov edx, dword [ebp - 0x1ab8]
add edx, 1
mov dword [ebp - 0x1ab8], edx
cmp dword [ebp - 0x1ab8], 0
jge 0x43375d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1ab8]
mov dword [ebp - 0x1c], eax
jmp 0x433737
cmp dword [ebp - 0x1c], 0
jge 0x43376b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433783
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1abc], 0
jmp 0x43379e
mov edx, dword [ebp - 0x1abc]
add edx, 1
mov dword [ebp - 0x1abc], edx
cmp dword [ebp - 0x1abc], 1
jge 0x4337b5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1abc]
mov dword [ebp - 0x1c], eax
jmp 0x43378f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4337c7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4337df
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x1ac0], 0xffffffff
mov dword [ebp - 0x1ac4], 0
jmp 0x43380b
mov edx, dword [ebp - 0x1ac4]
add edx, 1
mov dword [ebp - 0x1ac4], edx
cmp dword [ebp - 0x1ac4], 0
jge 0x43383d
mov eax, dword [ebp - 0x1ac4]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x433832
mov edx, dword [ebp - 0x1ac0]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4337fc
mov dword [ebp - 4], 0xfffffffe
jmp 0x43385d
mov edx, 1
test edx, edx
je 0x433897
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1ac8], eax
mov eax, dword [ebp - 0x1ac8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x433889
jmp 0x433897
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1ac8]
mov dword [ebp - 0x1c], edx
jmp 0x43385d
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1acc], 0
jmp 0x4338bb
cmp dword [ebp - 0x1acc], 3
jge 0x4338fc
cmp dword [ebp - 0x1c], 0
jge 0x4338d2
mov eax, 1
test eax, eax
je 0x433936