Function at 0x429f30
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x5104f0
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x20f8
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x429f89
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x10
jge 0x429fc7
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x429faf
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x429fbc
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
jmp 0x429fc5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x429f80
mov dword [ebp - 0x24], 0
jmp 0x429fd9
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 4
jge 0x42a017
cmp dword [ebp - 0x1c], 0
jge 0x429fed
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42a003
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x429fd0
mov dword [ebp - 0x224], 0
jmp 0x42a032
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x10
jge 0x42a07f
cmp dword [ebp - 0x1c], 0
jge 0x42a049
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a05f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x228], 0xfa
lea edx, [ebp - 0x228]
push edx
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42a023
mov dword [ebp - 0x424], 0
jmp 0x42a09a
mov ecx, dword [ebp - 0x424]
add ecx, 1
mov dword [ebp - 0x424], ecx
cmp dword [ebp - 0x424], 0xe
jge 0x42a0b1
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x424]
mov dword [ebp - 0x1c], edx
jmp 0x42a08b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42a0c3
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42a0db
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x428], 0
jmp 0x42a0f6
mov edx, dword [ebp - 0x428]
add edx, 1
mov dword [ebp - 0x428], edx
cmp dword [ebp - 0x428], 6
jge 0x42a10d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x428]
mov dword [ebp - 0x1c], eax
jmp 0x42a0e7
cmp dword [ebp - 0x1c], 0
jge 0x42a11b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a133
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x42c], 0xffffffff
mov dword [ebp - 0x430], 0
jmp 0x42a15f
mov edx, dword [ebp - 0x430]
add edx, 1
mov dword [ebp - 0x430], edx
cmp dword [ebp - 0x430], 0x10
jge 0x42a191
mov eax, dword [ebp - 0x430]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x42a186
mov edx, dword [ebp - 0x42c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42a150
mov dword [ebp - 4], 0xfffffffe
jmp 0x42a1b1
mov dword [ebp - 0x434], 0
jmp 0x42a1cc
mov edx, dword [ebp - 0x434]
add edx, 1
mov dword [ebp - 0x434], edx
cmp dword [ebp - 0x434], 0xc
jge 0x42a1e3
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x434]
mov dword [ebp - 0x1c], eax
jmp 0x42a1bd
cmp dword [ebp - 0x1c], 0
jge 0x42a1f1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a209
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x438], 0
jmp 0x42a224
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 0xf
jge 0x42a271
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x42a253
mov eax, dword [ebp - 0x438]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x42a263
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x438]
mov dword [ebp - 0x1c], edx
jmp 0x42a26f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x438]
mov dword [ebp - 0x1c], eax
jmp 0x42a215
mov dword [ebp - 0x43c], 0
jmp 0x42a28c
mov ecx, dword [ebp - 0x43c]
add ecx, 1
mov dword [ebp - 0x43c], ecx
cmp dword [ebp - 0x43c], 8
jge 0x42a2d9
cmp dword [ebp - 0x1c], 0
jge 0x42a2a3
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a2b9
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x440], 0xfa
lea edx, [ebp - 0x440]
push edx
lea eax, [ebp - 0x638]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42a27d
mov dword [ebp - 0x63c], 0
jmp 0x42a2f4
mov ecx, dword [ebp - 0x63c]
add ecx, 1
mov dword [ebp - 0x63c], ecx
cmp dword [ebp - 0x63c], 2
jge 0x42a335
cmp dword [ebp - 0x1c], 0
jge 0x42a30b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42a321
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x838]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42a2e5
mov dword [ebp - 0x83c], 0
jmp 0x42a350
mov eax, dword [ebp - 0x83c]
add eax, 1
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 2
jge 0x42a39d
mov eax, dword [ebp - 0x83c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x42a37f
mov eax, dword [ebp - 0x83c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x42a38f
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x83c]
mov dword [ebp - 0x1c], edx
jmp 0x42a39b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x83c]
mov dword [ebp - 0x1c], eax
jmp 0x42a341
mov ecx, 1
test ecx, ecx
je 0x42a3d7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0x840]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42a3c9
jmp 0x42a3d7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x840]
mov dword [ebp - 0x1c], edx
jmp 0x42a39d
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x42a41a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x844]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42a40c
jmp 0x42a41a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x844]
mov dword [ebp - 0x1c], edx
jmp 0x42a3e0
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x848], 0
jmp 0x42a43e
mov ecx, dword [ebp - 0x848]
add ecx, 1
mov dword [ebp - 0x848], ecx
cmp dword [ebp - 0x848], 5
jge 0x42a455
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x848]
mov dword [ebp - 0x1c], edx
jmp 0x42a42f
cmp dword [ebp - 0x1c], 0
jge 0x42a463
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a47b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x84c], 0
jmp 0x42a496
mov edx, dword [ebp - 0x84c]
add edx, 1
mov dword [ebp - 0x84c], edx
cmp dword [ebp - 0x84c], 5
jge 0x42a4ad
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], eax
jmp 0x42a487
cmp dword [ebp - 0x1c], 0
jge 0x42a4bb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a4d3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x850], 0
jmp 0x42a4ee
mov edx, dword [ebp - 0x850]
add edx, 1
mov dword [ebp - 0x850], edx
cmp dword [ebp - 0x850], 4
jge 0x42a505
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x850]
mov dword [ebp - 0x1c], eax
jmp 0x42a4df
cmp dword [ebp - 0x1c], 0
jge 0x42a513
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a52b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x854], 0
jmp 0x42a546
mov edx, dword [ebp - 0x854]
add edx, 1
mov dword [ebp - 0x854], edx
cmp dword [ebp - 0x854], 1
jge 0x42a55d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x854]
mov dword [ebp - 0x1c], eax
jmp 0x42a537
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42a56f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42a587
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x858], 0
jmp 0x42a5a2
mov edx, dword [ebp - 0x858]
add edx, 1
mov dword [ebp - 0x858], edx
cmp dword [ebp - 0x858], 6
jge 0x42a5b9
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x858]
mov dword [ebp - 0x1c], eax
jmp 0x42a593
cmp dword [ebp - 0x1c], 0
jge 0x42a5c7
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a5df
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x42a619
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x85c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42a60b
jmp 0x42a619
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x85c]
mov dword [ebp - 0x1c], edx
jmp 0x42a5df
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x860], 0
jmp 0x42a63a
mov ecx, dword [ebp - 0x860]
add ecx, 1
mov dword [ebp - 0x860], ecx
cmp dword [ebp - 0x860], 7
jge 0x42a651
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x860]
mov dword [ebp - 0x1c], edx
jmp 0x42a62b
cmp dword [ebp - 0x1c], 0
jge 0x42a65f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a677
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x864], 0
jmp 0x42a692
mov edx, dword [ebp - 0x864]
add edx, 1
mov dword [ebp - 0x864], edx
cmp dword [ebp - 0x864], 1
jge 0x42a6df
cmp dword [ebp - 0x1c], 0
jge 0x42a6a9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a6bf
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x868], 0xfa
lea edx, [ebp - 0x868]
push edx
lea eax, [ebp - 0xa60]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42a683
mov dword [ebp - 0xa64], 0
jmp 0x42a6fa
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
cmp dword [ebp - 0xa64], 2
jge 0x42a747
cmp dword [ebp - 0x1c], 0
jge 0x42a711
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a727
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa68], 0xfa
lea edx, [ebp - 0xa68]
push edx
lea eax, [ebp - 0xc60]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42a6eb
mov dword [ebp - 0xc64], 0
jmp 0x42a762
mov ecx, dword [ebp - 0xc64]
add ecx, 1
mov dword [ebp - 0xc64], ecx
cmp dword [ebp - 0xc64], 1
jge 0x42a779
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc64]
mov dword [ebp - 0x1c], edx
jmp 0x42a753
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42a78b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42a7a3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc68], 0
jmp 0x42a7be
mov edx, dword [ebp - 0xc68]
add edx, 1
mov dword [ebp - 0xc68], edx
cmp dword [ebp - 0xc68], 7
jge 0x42a7ff
cmp dword [ebp - 0x1c], 0
jge 0x42a7d5
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42a7eb
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe60]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42a7af
mov dword [ebp - 0xe64], 0
jmp 0x42a81a
mov eax, dword [ebp - 0xe64]
add eax, 1
mov dword [ebp - 0xe64], eax
cmp dword [ebp - 0xe64], 0
jge 0x42a831
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xe64]
mov dword [ebp - 0x1c], ecx
jmp 0x42a80b
cmp dword [ebp - 0x1c], 0
jge 0x42a83f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a857
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0xe68], 0xffffffff
mov dword [ebp - 0xe6c], 0
jmp 0x42a883
mov edx, dword [ebp - 0xe6c]
add edx, 1
mov dword [ebp - 0xe6c], edx
cmp dword [ebp - 0xe6c], 6
jge 0x42a8b5
mov eax, dword [ebp - 0xe6c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x42a8aa
mov edx, dword [ebp - 0xe68]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42a874
mov dword [ebp - 4], 0xfffffffe
jmp 0x42a8d5
mov dword [ebp - 0xe70], 0
jmp 0x42a8f0
mov edx, dword [ebp - 0xe70]
add edx, 1
mov dword [ebp - 0xe70], edx
cmp dword [ebp - 0xe70], 0
jge 0x42a907
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xe70]
mov dword [ebp - 0x1c], eax
jmp 0x42a8e1
cmp dword [ebp - 0x1c], 0
jge 0x42a915
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a92d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe74], 0
jmp 0x42a948
mov edx, dword [ebp - 0xe74]
add edx, 1
mov dword [ebp - 0xe74], edx
cmp dword [ebp - 0xe74], 8
jge 0x42a95f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xe74]
mov dword [ebp - 0x1c], eax
jmp 0x42a939
cmp dword [ebp - 0x1c], 0
jge 0x42a96d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a985
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe78], 0
jmp 0x42a9a0
mov edx, dword [ebp - 0xe78]
add edx, 1
mov dword [ebp - 0xe78], edx
cmp dword [ebp - 0xe78], 3
jge 0x42a9ed
cmp dword [ebp - 0x1c], 0
jge 0x42a9b7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a9cd
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xe7c], 0xfa
lea edx, [ebp - 0xe7c]
push edx
lea eax, [ebp - 0x1078]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42a991
mov dword [ebp - 0x107c], 0
jmp 0x42aa08
mov ecx, dword [ebp - 0x107c]
add ecx, 1
mov dword [ebp - 0x107c], ecx
cmp dword [ebp - 0x107c], 3
jge 0x42aa55
mov eax, dword [ebp - 0x107c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x42aa37
mov eax, dword [ebp - 0x107c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x42aa47
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x107c]
mov dword [ebp - 0x1c], edx
jmp 0x42aa53
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x107c]
mov dword [ebp - 0x1c], eax
jmp 0x42a9f9
mov ecx, 1
test ecx, ecx
je 0x42aa8f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1080], eax
mov eax, dword [ebp - 0x1080]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42aa81
jmp 0x42aa8f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1080]
mov dword [ebp - 0x1c], edx
jmp 0x42aa55
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1084], 0
jmp 0x42aab0
mov ecx, dword [ebp - 0x1084]
add ecx, 1
mov dword [ebp - 0x1084], ecx
cmp dword [ebp - 0x1084], 0
jge 0x42aafd
mov eax, dword [ebp - 0x1084]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x42aadf
mov eax, dword [ebp - 0x1084]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x42aaef
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1084]
mov dword [ebp - 0x1c], edx
jmp 0x42aafb
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1084]
mov dword [ebp - 0x1c], eax
jmp 0x42aaa1
mov dword [ebp - 0x1088], 0
jmp 0x42ab18
mov ecx, dword [ebp - 0x1088]
add ecx, 1
mov dword [ebp - 0x1088], ecx
cmp dword [ebp - 0x1088], 2
jge 0x42ab2f
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1088]
mov dword [ebp - 0x1c], edx
jmp 0x42ab09
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42ab41
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42ab59
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x108c], 0
jmp 0x42ab74
mov edx, dword [ebp - 0x108c]
add edx, 1
mov dword [ebp - 0x108c], edx
cmp dword [ebp - 0x108c], 0
jge 0x42abc1
cmp dword [ebp - 0x1c], 0
jge 0x42ab8b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42aba1
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1090], 0xfa
lea edx, [ebp - 0x1090]
push edx
lea eax, [ebp - 0x1288]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42ab65
mov ecx, 1
test ecx, ecx
je 0x42abfb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x128c], eax
mov eax, dword [ebp - 0x128c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42abed
jmp 0x42abfb
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x128c]
mov dword [ebp - 0x1c], edx
jmp 0x42abc1
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x1290], 0xffffffff
mov dword [ebp - 0x1294], 0
jmp 0x42ac30
mov ecx, dword [ebp - 0x1294]
add ecx, 1
mov dword [ebp - 0x1294], ecx
cmp dword [ebp - 0x1294], 4
jge 0x42ac62
mov eax, dword [ebp - 0x1294]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x42ac57
mov edx, dword [ebp - 0x1290]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x42ac21
mov dword [ebp - 4], 0xfffffffe
jmp 0x42ac82
mov dword [ebp - 0x1298], 0
jmp 0x42ac9d
mov edx, dword [ebp - 0x1298]
add edx, 1
mov dword [ebp - 0x1298], edx
cmp dword [ebp - 0x1298], 0
jge 0x42acb4
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1298]
mov dword [ebp - 0x1c], eax
jmp 0x42ac8e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42acc6
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42acde
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x129c], 0
jmp 0x42acf9
mov edx, dword [ebp - 0x129c]
add edx, 1
mov dword [ebp - 0x129c], edx
cmp dword [ebp - 0x129c], 4
jge 0x42ad10
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x129c]
mov dword [ebp - 0x1c], eax
jmp 0x42acea
cmp dword [ebp - 0x1c], 0
jge 0x42ad1e
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ad36
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12a0], 0
jmp 0x42ad51
mov edx, dword [ebp - 0x12a0]
add edx, 1
mov dword [ebp - 0x12a0], edx
cmp dword [ebp - 0x12a0], 4
jge 0x42ad92
cmp dword [ebp - 0x1c], 0
jge 0x42ad68
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42ad7e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1498]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42ad42
mov dword [ebp - 0x149c], 0
jmp 0x42adad
mov eax, dword [ebp - 0x149c]
add eax, 1
mov dword [ebp - 0x149c], eax
cmp dword [ebp - 0x149c], 1
jge 0x42adfa
mov eax, dword [ebp - 0x149c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x42addc
mov eax, dword [ebp - 0x149c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x42adec
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x149c]
mov dword [ebp - 0x1c], edx
jmp 0x42adf8
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x149c]
mov dword [ebp - 0x1c], eax
jmp 0x42ad9e
mov ecx, 1
test ecx, ecx
je 0x42ae34
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x14a0], eax
mov eax, dword [ebp - 0x14a0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42ae26
jmp 0x42ae34
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14a0]
mov dword [ebp - 0x1c], edx
jmp 0x42adfa
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14a4], 0
jmp 0x42ae58
mov ecx, dword [ebp - 0x14a4]
add ecx, 1
mov dword [ebp - 0x14a4], ecx
cmp dword [ebp - 0x14a4], 1
jge 0x42ae6f
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14a4]
mov dword [ebp - 0x1c], edx
jmp 0x42ae49
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42ae81
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42ae99
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14a8], 0
jmp 0x42aeb4
mov edx, dword [ebp - 0x14a8]
add edx, 1
mov dword [ebp - 0x14a8], edx
cmp dword [ebp - 0x14a8], 4
jge 0x42aecb
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x14a8]
mov dword [ebp - 0x1c], eax
jmp 0x42aea5
cmp dword [ebp - 0x1c], 0
jge 0x42aed9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42aef1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14ac], 0
jmp 0x42af0c
mov edx, dword [ebp - 0x14ac]
add edx, 1
mov dword [ebp - 0x14ac], edx
cmp dword [ebp - 0x14ac], 2
jge 0x42af23
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x14ac]
mov dword [ebp - 0x1c], eax
jmp 0x42aefd
cmp dword [ebp - 0x1c], 0
jge 0x42af31
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42af49
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14b0], 0
jmp 0x42af64
mov edx, dword [ebp - 0x14b0]
add edx, 1
mov dword [ebp - 0x14b0], edx
cmp dword [ebp - 0x14b0], 1
jge 0x42af7b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x14b0]
mov dword [ebp - 0x1c], eax
jmp 0x42af55
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42af8d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42afa5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14b4], 0
jmp 0x42afc0
cmp dword [ebp - 0x14b4], 4
jge 0x42b00d