Function at 0x492d40
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x512750
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x30f0
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x30], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov eax, 1
test eax, eax
je 0x492db8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x492dad
jmp 0x492db8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
jmp 0x492d87
mov eax, dword [ebp - 0x1c]
add eax, 0x2d
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x492dd3
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 0x2c
jge 0x492de4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x492dca
cmp dword [ebp - 0x1c], 0
jge 0x492df2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x492e0a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], 0
jmp 0x492e1c
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 5
jge 0x492e5a
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x492e42
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x492e4f
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x492e58
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x492e13
mov dword [ebp - 0x2c], 0
jmp 0x492e6c
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0x1b
jge 0x492eaa
cmp dword [ebp - 0x1c], 0
jge 0x492e80
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x492e96
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x492e63
mov dword [ebp - 0x22c], 0
jmp 0x492ec5
mov eax, dword [ebp - 0x22c]
add eax, 1
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xe
jge 0x492f12
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x492ef4
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x492f04
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], edx
jmp 0x492f10
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], eax
jmp 0x492eb6
mov dword [ebp - 0x230], 0
jmp 0x492f2d
mov ecx, dword [ebp - 0x230]
add ecx, 1
mov dword [ebp - 0x230], ecx
cmp dword [ebp - 0x230], 0x1c
jge 0x492f7a
mov eax, dword [ebp - 0x230]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x492f5c
mov eax, dword [ebp - 0x230]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x492f6c
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x230]
mov dword [ebp - 0x1c], edx
jmp 0x492f78
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x230]
mov dword [ebp - 0x1c], eax
jmp 0x492f1e
mov dword [ebp - 4], 0
mov dword [ebp - 0x234], 0xffffffff
mov dword [ebp - 0x238], 0
jmp 0x492fa6
mov ecx, dword [ebp - 0x238]
add ecx, 1
mov dword [ebp - 0x238], ecx
cmp dword [ebp - 0x238], 0
jge 0x492fd8
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x492fcd
mov edx, dword [ebp - 0x234]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x492f97
mov dword [ebp - 4], 0xfffffffe
jmp 0x492ff8
mov dword [ebp - 4], 1
mov dword [ebp - 0x23c], 0xffffffff
mov dword [ebp - 0x240], 0
jmp 0x493024
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0xa
jge 0x493056
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x49304b
mov edx, dword [ebp - 0x23c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x493015
mov dword [ebp - 4], 0xfffffffe
jmp 0x493076
mov edx, 1
test edx, edx
je 0x4930b0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4930a2
jmp 0x4930b0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x244]
mov dword [ebp - 0x1c], edx
jmp 0x493076
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x248], 0
jmp 0x4930d4
mov ecx, dword [ebp - 0x248]
add ecx, 1
mov dword [ebp - 0x248], ecx
cmp dword [ebp - 0x248], 0xf
jge 0x4930eb
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x248]
mov dword [ebp - 0x1c], edx
jmp 0x4930c5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4930fd
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493115
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24c], 0
jmp 0x493130
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 0x16
jge 0x49317d
cmp dword [ebp - 0x1c], 0
jge 0x493147
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49315d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x250], 0xfa
lea edx, [ebp - 0x250]
push edx
lea eax, [ebp - 0x448]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x493121
mov dword [ebp - 0x44c], 0
jmp 0x493198
mov ecx, dword [ebp - 0x44c]
add ecx, 1
mov dword [ebp - 0x44c], ecx
cmp dword [ebp - 0x44c], 9
jge 0x4931e5
cmp dword [ebp - 0x1c], 0
jge 0x4931af
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4931c5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x450], 0xfa
lea edx, [ebp - 0x450]
push edx
lea eax, [ebp - 0x648]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x493189
mov dword [ebp - 0x64c], 0
jmp 0x493200
mov ecx, dword [ebp - 0x64c]
add ecx, 1
mov dword [ebp - 0x64c], ecx
cmp dword [ebp - 0x64c], 0xe
jge 0x49324d
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x49322f
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x49323f
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x64c]
mov dword [ebp - 0x1c], edx
jmp 0x49324b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x64c]
mov dword [ebp - 0x1c], eax
jmp 0x4931f1
mov dword [ebp - 4], 2
mov dword [ebp - 0x650], 0xffffffff
mov dword [ebp - 0x654], 0
jmp 0x493279
mov ecx, dword [ebp - 0x654]
add ecx, 1
mov dword [ebp - 0x654], ecx
cmp dword [ebp - 0x654], 6
jge 0x4932ab
mov eax, dword [ebp - 0x654]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4932a0
mov edx, dword [ebp - 0x650]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49326a
mov dword [ebp - 4], 0xfffffffe
jmp 0x4932cb
mov dword [ebp - 0x658], 0
jmp 0x4932e6
mov edx, dword [ebp - 0x658]
add edx, 1
mov dword [ebp - 0x658], edx
cmp dword [ebp - 0x658], 9
jge 0x493333
cmp dword [ebp - 0x1c], 0
jge 0x4932fd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493313
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x65c], 0xfa
lea edx, [ebp - 0x65c]
push edx
lea eax, [ebp - 0x858]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4932d7
mov dword [ebp - 0x85c], 0
jmp 0x49334e
mov ecx, dword [ebp - 0x85c]
add ecx, 1
mov dword [ebp - 0x85c], ecx
cmp dword [ebp - 0x85c], 3
jge 0x49338f
cmp dword [ebp - 0x1c], 0
jge 0x493365
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49337b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa58]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49333f
mov dword [ebp - 0xa5c], 0
jmp 0x4933aa
mov eax, dword [ebp - 0xa5c]
add eax, 1
mov dword [ebp - 0xa5c], eax
cmp dword [ebp - 0xa5c], 1
jge 0x4933c1
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xa5c]
mov dword [ebp - 0x1c], ecx
jmp 0x49339b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4933d3
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4933eb
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa60], 0
jmp 0x493406
mov edx, dword [ebp - 0xa60]
add edx, 1
mov dword [ebp - 0xa60], edx
cmp dword [ebp - 0xa60], 3
jge 0x49341d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa60]
mov dword [ebp - 0x1c], eax
jmp 0x4933f7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49342f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493447
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa64], 0
jmp 0x493462
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmp dword [ebp - 0xa64], 3
jge 0x493479
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xa64]
mov dword [ebp - 0x1c], eax
jmp 0x493453
cmp dword [ebp - 0x1c], 0
jge 0x493487
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49349f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa68], 0
jmp 0x4934ba
mov edx, dword [ebp - 0xa68]
add edx, 1
mov dword [ebp - 0xa68], edx
cmp dword [ebp - 0xa68], 0
jge 0x493507
mov eax, dword [ebp - 0xa68]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4934e9
mov eax, dword [ebp - 0xa68]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4934f9
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa68]
mov dword [ebp - 0x1c], edx
jmp 0x493505
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa68]
mov dword [ebp - 0x1c], eax
jmp 0x4934ab
mov dword [ebp - 0xa6c], 0
jmp 0x493522
mov ecx, dword [ebp - 0xa6c]
add ecx, 1
mov dword [ebp - 0xa6c], ecx
cmp dword [ebp - 0xa6c], 2
jge 0x493539
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa6c]
mov dword [ebp - 0x1c], edx
jmp 0x493513
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49354b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493563
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa70], 0
jmp 0x49357e
mov edx, dword [ebp - 0xa70]
add edx, 1
mov dword [ebp - 0xa70], edx
cmp dword [ebp - 0xa70], 5
jge 0x493595
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa70]
mov dword [ebp - 0x1c], eax
jmp 0x49356f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4935a7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4935bf
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa74], 0
jmp 0x4935da
mov edx, dword [ebp - 0xa74]
add edx, 1
mov dword [ebp - 0xa74], edx
cmp dword [ebp - 0xa74], 5
jge 0x49361b
cmp dword [ebp - 0x1c], 0
jge 0x4935f1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493607
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc70]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4935cb
mov eax, 1
test eax, eax
je 0x493655
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp - 0xc74]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x493647
jmp 0x493655
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc74]
mov dword [ebp - 0x1c], edx
jmp 0x49361b
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc78], 0
jmp 0x493679
mov ecx, dword [ebp - 0xc78]
add ecx, 1
mov dword [ebp - 0xc78], ecx
cmp dword [ebp - 0xc78], 7
jge 0x4936c6
cmp dword [ebp - 0x1c], 0
jge 0x493690
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4936a6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc7c], 0xfa
lea edx, [ebp - 0xc7c]
push edx
lea eax, [ebp - 0xe78]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x49366a
mov ecx, 1
test ecx, ecx
je 0x493700
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe7c], eax
mov eax, dword [ebp - 0xe7c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4936f2
jmp 0x493700
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe7c]
mov dword [ebp - 0x1c], edx
jmp 0x4936c6
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe80], 0
jmp 0x493724
mov ecx, dword [ebp - 0xe80]
add ecx, 1
mov dword [ebp - 0xe80], ecx
cmp dword [ebp - 0xe80], 3
jge 0x49373b
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe80]
mov dword [ebp - 0x1c], edx
jmp 0x493715
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49374d
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493765
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe84], 0
jmp 0x493780
mov edx, dword [ebp - 0xe84]
add edx, 1
mov dword [ebp - 0xe84], edx
cmp dword [ebp - 0xe84], 1
jge 0x4937c1
cmp dword [ebp - 0x1c], 0
jge 0x493797
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4937ad
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1080]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x493771
mov dword [ebp - 0x1084], 0
jmp 0x4937dc
mov eax, dword [ebp - 0x1084]
add eax, 1
mov dword [ebp - 0x1084], eax
cmp dword [ebp - 0x1084], 3
jge 0x493829
cmp dword [ebp - 0x1c], 0
jge 0x4937f3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493809
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1088], 0xfa
lea edx, [ebp - 0x1088]
push edx
lea eax, [ebp - 0x1280]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4937cd
mov ecx, 1
test ecx, ecx
je 0x493863
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1284], eax
mov eax, dword [ebp - 0x1284]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x493855
jmp 0x493863
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1284]
mov dword [ebp - 0x1c], edx
jmp 0x493829
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1288], 0
jmp 0x493887
mov ecx, dword [ebp - 0x1288]
add ecx, 1
mov dword [ebp - 0x1288], ecx
cmp dword [ebp - 0x1288], 5
jge 0x49389e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1288]
mov dword [ebp - 0x1c], edx
jmp 0x493878
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4938b0
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4938c8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x128c], 0
jmp 0x4938e3
mov edx, dword [ebp - 0x128c]
add edx, 1
mov dword [ebp - 0x128c], edx
cmp dword [ebp - 0x128c], 7
jge 0x493924
cmp dword [ebp - 0x1c], 0
jge 0x4938fa
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493910
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1488]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4938d4
mov eax, 1
test eax, eax
je 0x49395e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x148c], eax
mov eax, dword [ebp - 0x148c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x493950
jmp 0x49395e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x148c]
mov dword [ebp - 0x1c], edx
jmp 0x493924
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1490], 0
jmp 0x493982
mov ecx, dword [ebp - 0x1490]
add ecx, 1
mov dword [ebp - 0x1490], ecx
cmp dword [ebp - 0x1490], 5
jge 0x4939c3
cmp dword [ebp - 0x1c], 0
jge 0x493999
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4939af
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1688]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x493973
mov dword [ebp - 0x168c], 0
jmp 0x4939de
mov eax, dword [ebp - 0x168c]
add eax, 1
mov dword [ebp - 0x168c], eax
cmp dword [ebp - 0x168c], 5
jge 0x493a2b
mov eax, dword [ebp - 0x168c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x493a0d
mov eax, dword [ebp - 0x168c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x493a1d
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x168c]
mov dword [ebp - 0x1c], edx
jmp 0x493a29
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x168c]
mov dword [ebp - 0x1c], eax
jmp 0x4939cf
mov dword [ebp - 4], 3
mov dword [ebp - 0x1690], 0xffffffff
mov dword [ebp - 0x1694], 0
jmp 0x493a57
mov ecx, dword [ebp - 0x1694]
add ecx, 1
mov dword [ebp - 0x1694], ecx
cmp dword [ebp - 0x1694], 3
jge 0x493a89
mov eax, dword [ebp - 0x1694]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x493a7e
mov edx, dword [ebp - 0x1690]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x493a48
mov dword [ebp - 4], 0xfffffffe
jmp 0x493aa9
mov edx, 1
test edx, edx
je 0x493ae3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1698], eax
mov eax, dword [ebp - 0x1698]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x493ad5
jmp 0x493ae3
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1698]
mov dword [ebp - 0x1c], edx
jmp 0x493aa9
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x169c], 0
jmp 0x493b07
mov ecx, dword [ebp - 0x169c]
add ecx, 1
mov dword [ebp - 0x169c], ecx
cmp dword [ebp - 0x169c], 2
jge 0x493b1e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x169c]
mov dword [ebp - 0x1c], edx
jmp 0x493af8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x493b30
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493b48
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x16a0], 0
jmp 0x493b63
mov edx, dword [ebp - 0x16a0]
add edx, 1
mov dword [ebp - 0x16a0], edx
cmp dword [ebp - 0x16a0], 8
jge 0x493b7a
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x16a0]
mov dword [ebp - 0x1c], eax
jmp 0x493b54
cmp dword [ebp - 0x1c], 0
jge 0x493b88
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493ba0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x16a4], 0
jmp 0x493bbb
mov edx, dword [ebp - 0x16a4]
add edx, 1
mov dword [ebp - 0x16a4], edx
cmp dword [ebp - 0x16a4], 0
jge 0x493c08
mov eax, dword [ebp - 0x16a4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x493bea
mov eax, dword [ebp - 0x16a4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x493bfa
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x16a4]
mov dword [ebp - 0x1c], edx
jmp 0x493c06
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x16a4]
mov dword [ebp - 0x1c], eax
jmp 0x493bac
mov dword [ebp - 0x16a8], 0
jmp 0x493c23
mov ecx, dword [ebp - 0x16a8]
add ecx, 1
mov dword [ebp - 0x16a8], ecx
cmp dword [ebp - 0x16a8], 0
jge 0x493c70
mov eax, dword [ebp - 0x16a8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x493c52
mov eax, dword [ebp - 0x16a8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x493c62
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x16a8]
mov dword [ebp - 0x1c], edx
jmp 0x493c6e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x16a8]
mov dword [ebp - 0x1c], eax
jmp 0x493c14
mov dword [ebp - 0x16ac], 0
jmp 0x493c8b
mov ecx, dword [ebp - 0x16ac]
add ecx, 1
mov dword [ebp - 0x16ac], ecx
cmp dword [ebp - 0x16ac], 6
jge 0x493cd8
cmp dword [ebp - 0x1c], 0
jge 0x493ca2
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493cb8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x16b0], 0xfa
lea edx, [ebp - 0x16b0]
push edx
lea eax, [ebp - 0x18a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x493c7c
mov dword [ebp - 0x18ac], 0
jmp 0x493cf3
mov ecx, dword [ebp - 0x18ac]
add ecx, 1
mov dword [ebp - 0x18ac], ecx
cmp dword [ebp - 0x18ac], 8
jge 0x493d0a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x18ac]
mov dword [ebp - 0x1c], edx
jmp 0x493ce4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x493d1c
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x493d34
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x18b0], 0xffffffff
mov dword [ebp - 0x18b4], 0
jmp 0x493d60
mov edx, dword [ebp - 0x18b4]
add edx, 1
mov dword [ebp - 0x18b4], edx
cmp dword [ebp - 0x18b4], 7
jge 0x493d92
mov eax, dword [ebp - 0x18b4]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x493d87
mov edx, dword [ebp - 0x18b0]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x493d51
mov dword [ebp - 4], 0xfffffffe
jmp 0x493db2
mov edx, 1
test edx, edx
je 0x493dec
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18b8], eax
mov eax, dword [ebp - 0x18b8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x493dde
jmp 0x493dec
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18b8]
mov dword [ebp - 0x1c], edx
jmp 0x493db2
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18bc], 0
jmp 0x493e0d
mov ecx, dword [ebp - 0x18bc]
add ecx, 1
mov dword [ebp - 0x18bc], ecx
cmp dword [ebp - 0x18bc], 8
jge 0x493e5a
cmp dword [ebp - 0x1c], 0
jge 0x493e24
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493e3a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18c0], 0xfa
lea edx, [ebp - 0x18c0]
push edx
lea eax, [ebp - 0x1ab8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x493dfe
mov dword [ebp - 0x1abc], 0
jmp 0x493e75
mov ecx, dword [ebp - 0x1abc]
add ecx, 1
mov dword [ebp - 0x1abc], ecx
cmp dword [ebp - 0x1abc], 3
jge 0x493ec2
cmp dword [ebp - 0x1c], 0
jge 0x493e8c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493ea2
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1ac0], 0xfa
lea edx, [ebp - 0x1ac0]
push edx
lea eax, [ebp - 0x1cb8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x493e66
mov dword [ebp - 0x1cbc], 0
jmp 0x493edd
mov ecx, dword [ebp - 0x1cbc]
add ecx, 1
mov dword [ebp - 0x1cbc], ecx
cmp dword [ebp - 0x1cbc], 2
jge 0x493ef4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1cbc]
mov dword [ebp - 0x1c], edx
jmp 0x493ece
cmp dword [ebp - 0x1c], 0
jge 0x493f02
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493f1a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x493f54
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1cc0], eax
mov eax, dword [ebp - 0x1cc0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x493f46
jmp 0x493f54
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1cc0]
mov dword [ebp - 0x1c], edx
jmp 0x493f1a
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1cc4], 0
jmp 0x493f78
mov ecx, dword [ebp - 0x1cc4]
add ecx, 1
mov dword [ebp - 0x1cc4], ecx
cmp dword [ebp - 0x1cc4], 4
jge 0x493fc5
cmp dword [ebp - 0x1c], 0
jge 0x493f8f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x493fa5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1cc8], 0xfa
lea edx, [ebp - 0x1cc8]
push edx
lea eax, [ebp - 0x1ec0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x493f69
mov dword [ebp - 0x1ec4], 0
jmp 0x493fe0
mov ecx, dword [ebp - 0x1ec4]
add ecx, 1
mov dword [ebp - 0x1ec4], ecx
cmp dword [ebp - 0x1ec4], 1
jge 0x493ff7
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1ec4]
mov dword [ebp - 0x1c], edx
jmp 0x493fd1
cmp dword [ebp - 0x1c], 0
jge 0x494005
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49401d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1ec8], 0
jmp 0x494038
cmp dword [ebp - 0x1ec8], 2
jge 0x494079
cmp dword [ebp - 0x1c], 0
jge 0x49404f
mov dword [ebp - 0x20c4], 0
jmp 0x494094