Function at 0x41e1c0
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x510130
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x14ac
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x41e219
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x41e22a
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x41e210
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41e23c
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41e254
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x41e266
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1a
jge 0x41e2a4
cmp dword [ebp - 0x1c], 0
jge 0x41e27a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41e290
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x41e25d
mov dword [ebp - 4], 0
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x228], 0
jmp 0x41e2d0
mov eax, dword [ebp - 0x228]
add eax, 1
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 6
jge 0x41e302
mov eax, dword [ebp - 0x228]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x41e2f7
mov edx, dword [ebp - 0x224]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x41e2c1
mov dword [ebp - 4], 0xfffffffe
jmp 0x41e322
mov dword [ebp - 0x22c], 0
jmp 0x41e33d
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 8
jge 0x41e38a
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x41e36c
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x41e37c
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], edx
jmp 0x41e388
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], eax
jmp 0x41e32e
mov dword [ebp - 0x230], 0
jmp 0x41e3a5
mov ecx, dword [ebp - 0x230]
add ecx, 1
mov dword [ebp - 0x230], ecx
cmp dword [ebp - 0x230], 6
jge 0x41e3e6
cmp dword [ebp - 0x1c], 0
jge 0x41e3bc
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41e3d2
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x41e396
mov dword [ebp - 0x42c], 0
jmp 0x41e401
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0xc
jge 0x41e418
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x1c], ecx
jmp 0x41e3f2
cmp dword [ebp - 0x1c], 0
jge 0x41e426
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41e43e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x430], 0
jmp 0x41e459
mov edx, dword [ebp - 0x430]
add edx, 1
mov dword [ebp - 0x430], edx
cmp dword [ebp - 0x430], 5
jge 0x41e4a6
cmp dword [ebp - 0x1c], 0
jge 0x41e470
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41e486
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x434], 0xfa
lea edx, [ebp - 0x434]
push edx
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x41e44a
mov dword [ebp - 4], 1
mov dword [ebp - 0x634], 0xffffffff
mov dword [ebp - 0x638], 0
jmp 0x41e4d2
mov ecx, dword [ebp - 0x638]
add ecx, 1
mov dword [ebp - 0x638], ecx
cmp dword [ebp - 0x638], 0xd
jge 0x41e504
mov eax, dword [ebp - 0x638]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x41e4f9
mov edx, dword [ebp - 0x634]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x41e4c3
mov dword [ebp - 4], 0xfffffffe
jmp 0x41e524
mov dword [ebp - 0x63c], 0
jmp 0x41e53f
mov edx, dword [ebp - 0x63c]
add edx, 1
mov dword [ebp - 0x63c], edx
cmp dword [ebp - 0x63c], 5
jge 0x41e556
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x63c]
mov dword [ebp - 0x1c], eax
jmp 0x41e530
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41e568
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41e580
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x640], 0
jmp 0x41e59b
mov edx, dword [ebp - 0x640]
add edx, 1
mov dword [ebp - 0x640], edx
cmp dword [ebp - 0x640], 0xf
jge 0x41e5e8
cmp dword [ebp - 0x1c], 0
jge 0x41e5b2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41e5c8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x644], 0xfa
lea edx, [ebp - 0x644]
push edx
lea eax, [ebp - 0x840]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x41e58c
mov dword [ebp - 0x844], 0
jmp 0x41e603
mov ecx, dword [ebp - 0x844]
add ecx, 1
mov dword [ebp - 0x844], ecx
cmp dword [ebp - 0x844], 5
jge 0x41e61a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x844]
mov dword [ebp - 0x1c], edx
jmp 0x41e5f4
cmp dword [ebp - 0x1c], 0
jge 0x41e628
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41e640
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x848], 0
jmp 0x41e65b
mov edx, dword [ebp - 0x848]
add edx, 1
mov dword [ebp - 0x848], edx
cmp dword [ebp - 0x848], 8
jge 0x41e672
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x848]
mov dword [ebp - 0x1c], eax
jmp 0x41e64c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41e684
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41e69c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x84c], 0
jmp 0x41e6b7
mov edx, dword [ebp - 0x84c]
add edx, 1
mov dword [ebp - 0x84c], edx
cmp dword [ebp - 0x84c], 7
jge 0x41e704
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x41e6e6
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x41e6f6
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], edx
jmp 0x41e702
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], eax
jmp 0x41e6a8
mov ecx, 1
test ecx, ecx
je 0x41e73e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x850]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x41e730
jmp 0x41e73e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x850]
mov dword [ebp - 0x1c], edx
jmp 0x41e704
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x854], 0xffffffff
mov dword [ebp - 0x858], 0
jmp 0x41e773
mov ecx, dword [ebp - 0x858]
add ecx, 1
mov dword [ebp - 0x858], ecx
cmp dword [ebp - 0x858], 8
jge 0x41e7a5
mov eax, dword [ebp - 0x858]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x41e79a
mov edx, dword [ebp - 0x854]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x41e764
mov dword [ebp - 4], 0xfffffffe
jmp 0x41e7c5
mov dword [ebp - 0x85c], 0
jmp 0x41e7e0
mov edx, dword [ebp - 0x85c]
add edx, 1
mov dword [ebp - 0x85c], edx
cmp dword [ebp - 0x85c], 7
jge 0x41e7f7
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x85c]
mov dword [ebp - 0x1c], eax
jmp 0x41e7d1
cmp dword [ebp - 0x1c], 0
jge 0x41e805
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41e81d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x860], 0
jmp 0x41e838
mov edx, dword [ebp - 0x860]
add edx, 1
mov dword [ebp - 0x860], edx
cmp dword [ebp - 0x860], 2
jge 0x41e84f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x860]
mov dword [ebp - 0x1c], eax
jmp 0x41e829
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41e861
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41e879
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x864], 0xffffffff
mov dword [ebp - 0x868], 0
jmp 0x41e8a5
mov edx, dword [ebp - 0x868]
add edx, 1
mov dword [ebp - 0x868], edx
cmp dword [ebp - 0x868], 6
jge 0x41e8d7
mov eax, dword [ebp - 0x868]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x41e8cc
mov edx, dword [ebp - 0x864]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x41e896
mov dword [ebp - 4], 0xfffffffe
jmp 0x41e8f7
mov dword [ebp - 0x86c], 0
jmp 0x41e912
mov edx, dword [ebp - 0x86c]
add edx, 1
mov dword [ebp - 0x86c], edx
cmp dword [ebp - 0x86c], 3
jge 0x41e929
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x86c]
mov dword [ebp - 0x1c], eax
jmp 0x41e903
cmp dword [ebp - 0x1c], 0
jge 0x41e937
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41e94f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x870], 0
jmp 0x41e96a
mov edx, dword [ebp - 0x870]
add edx, 1
mov dword [ebp - 0x870], edx
cmp dword [ebp - 0x870], 4
jge 0x41e9ab
cmp dword [ebp - 0x1c], 0
jge 0x41e981
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41e997
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa68]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x41e95b
mov dword [ebp - 0xa6c], 0
jmp 0x41e9c6
mov eax, dword [ebp - 0xa6c]
add eax, 1
mov dword [ebp - 0xa6c], eax
cmp dword [ebp - 0xa6c], 0
jge 0x41ea13
mov eax, dword [ebp - 0xa6c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x41e9f5
mov eax, dword [ebp - 0xa6c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x41ea05
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa6c]
mov dword [ebp - 0x1c], edx
jmp 0x41ea11
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa6c]
mov dword [ebp - 0x1c], eax
jmp 0x41e9b7
mov dword [ebp - 4], 4
mov dword [ebp - 0xa70], 0xffffffff
mov dword [ebp - 0xa74], 0
jmp 0x41ea3f
mov ecx, dword [ebp - 0xa74]
add ecx, 1
mov dword [ebp - 0xa74], ecx
cmp dword [ebp - 0xa74], 8
jge 0x41ea71
mov eax, dword [ebp - 0xa74]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x41ea66
mov edx, dword [ebp - 0xa70]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x41ea30
mov dword [ebp - 4], 0xfffffffe
jmp 0x41ea91
mov dword [ebp - 0xa78], 0
jmp 0x41eaac
mov edx, dword [ebp - 0xa78]
add edx, 1
mov dword [ebp - 0xa78], edx
cmp dword [ebp - 0xa78], 3
jge 0x41eac3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa78]
mov dword [ebp - 0x1c], eax
jmp 0x41ea9d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41ead5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41eaed
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa7c], 0
jmp 0x41eb08
mov edx, dword [ebp - 0xa7c]
add edx, 1
mov dword [ebp - 0xa7c], edx
cmp dword [ebp - 0xa7c], 4
jge 0x41eb1f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xa7c]
mov dword [ebp - 0x1c], eax
jmp 0x41eaf9
cmp dword [ebp - 0x1c], 0
jge 0x41eb2d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41eb45
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0xa80], 0xffffffff
mov dword [ebp - 0xa84], 0
jmp 0x41eb71
mov edx, dword [ebp - 0xa84]
add edx, 1
mov dword [ebp - 0xa84], edx
cmp dword [ebp - 0xa84], 2
jge 0x41eba3
mov eax, dword [ebp - 0xa84]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x41eb98
mov edx, dword [ebp - 0xa80]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x41eb62
mov dword [ebp - 4], 0xfffffffe
jmp 0x41ebc3
mov dword [ebp - 0xa88], 0
jmp 0x41ebde
mov edx, dword [ebp - 0xa88]
add edx, 1
mov dword [ebp - 0xa88], edx
cmp dword [ebp - 0xa88], 0
jge 0x41ebf5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xa88]
mov dword [ebp - 0x1c], eax
jmp 0x41ebcf
cmp dword [ebp - 0x1c], 0
jge 0x41ec03
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41ec1b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa8c], 0
jmp 0x41ec36
mov edx, dword [ebp - 0xa8c]
add edx, 1
mov dword [ebp - 0xa8c], edx
cmp dword [ebp - 0xa8c], 3
jge 0x41ec4d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa8c]
mov dword [ebp - 0x1c], eax
jmp 0x41ec27
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41ec5f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41ec77
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa90], 0
jmp 0x41ec92
mov edx, dword [ebp - 0xa90]
add edx, 1
mov dword [ebp - 0xa90], edx
cmp dword [ebp - 0xa90], 1
jge 0x41eca9
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa90]
mov dword [ebp - 0x1c], eax
jmp 0x41ec83
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41ecbb
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41ecd3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x41ed0d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0xa94]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x41ecff
jmp 0x41ed0d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa94]
mov dword [ebp - 0x1c], edx
jmp 0x41ecd3
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa98], 0
jmp 0x41ed2e
mov ecx, dword [ebp - 0xa98]
add ecx, 1
mov dword [ebp - 0xa98], ecx
cmp dword [ebp - 0xa98], 4
jge 0x41ed45
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa98]
mov dword [ebp - 0x1c], edx
jmp 0x41ed1f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41ed57
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41ed6f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0xa9c], 0xffffffff
mov dword [ebp - 0xaa0], 0
jmp 0x41ed9b
mov edx, dword [ebp - 0xaa0]
add edx, 1
mov dword [ebp - 0xaa0], edx
cmp dword [ebp - 0xaa0], 0
jge 0x41edcd
mov eax, dword [ebp - 0xaa0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x41edc2
mov edx, dword [ebp - 0xa9c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x41ed8c
mov dword [ebp - 4], 0xfffffffe
jmp 0x41eded
mov edx, 1
test edx, edx
je 0x41ee27
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0xaa4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x41ee19
jmp 0x41ee27
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xaa4]
mov dword [ebp - 0x1c], edx
jmp 0x41eded
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xaa8], 0
jmp 0x41ee4b
mov ecx, dword [ebp - 0xaa8]
add ecx, 1
mov dword [ebp - 0xaa8], ecx
cmp dword [ebp - 0xaa8], 3
jge 0x41ee98
mov eax, dword [ebp - 0xaa8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x41ee7a
mov eax, dword [ebp - 0xaa8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x41ee8a
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xaa8]
mov dword [ebp - 0x1c], edx
jmp 0x41ee96
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xaa8]
mov dword [ebp - 0x1c], eax
jmp 0x41ee3c
mov dword [ebp - 0xaac], 0
jmp 0x41eeb3
mov ecx, dword [ebp - 0xaac]
add ecx, 1
mov dword [ebp - 0xaac], ecx
cmp dword [ebp - 0xaac], 1
jge 0x41ef00
cmp dword [ebp - 0x1c], 0
jge 0x41eeca
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41eee0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xab0], 0xfa
lea edx, [ebp - 0xab0]
push edx
lea eax, [ebp - 0xca8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x41eea4
mov dword [ebp - 0xcac], 0
jmp 0x41ef1b
mov ecx, dword [ebp - 0xcac]
add ecx, 1
mov dword [ebp - 0xcac], ecx
cmp dword [ebp - 0xcac], 4
jge 0x41ef68
cmp dword [ebp - 0x1c], 0
jge 0x41ef32
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41ef48
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xcb0], 0xfa
lea edx, [ebp - 0xcb0]
push edx
lea eax, [ebp - 0xea8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x41ef0c
mov ecx, 1
test ecx, ecx
je 0x41efa2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xeac], eax
mov eax, dword [ebp - 0xeac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x41ef94
jmp 0x41efa2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xeac]
mov dword [ebp - 0x1c], edx
jmp 0x41ef68
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xeb0], 0
jmp 0x41efc3
mov ecx, dword [ebp - 0xeb0]
add ecx, 1
mov dword [ebp - 0xeb0], ecx
cmp dword [ebp - 0xeb0], 1
jge 0x41efda
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xeb0]
mov dword [ebp - 0x1c], edx
jmp 0x41efb4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41efec
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41f004
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xeb4], 0
jmp 0x41f01f
mov edx, dword [ebp - 0xeb4]
add edx, 1
mov dword [ebp - 0xeb4], edx
cmp dword [ebp - 0xeb4], 4
jge 0x41f060
cmp dword [ebp - 0x1c], 0
jge 0x41f036
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41f04c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x10b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x41f010
mov eax, 1
test eax, eax
je 0x41f09a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x10b4], eax
mov eax, dword [ebp - 0x10b4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x41f08c
jmp 0x41f09a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10b4]
mov dword [ebp - 0x1c], edx
jmp 0x41f060
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10b8], 0
jmp 0x41f0be
mov ecx, dword [ebp - 0x10b8]
add ecx, 1
mov dword [ebp - 0x10b8], ecx
cmp dword [ebp - 0x10b8], 1
jge 0x41f0ff
cmp dword [ebp - 0x1c], 0
jge 0x41f0d5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41f0eb
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x12b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x41f0af
mov dword [ebp - 0x12b4], 0
jmp 0x41f11a
mov eax, dword [ebp - 0x12b4]
add eax, 1
mov dword [ebp - 0x12b4], eax
cmp dword [ebp - 0x12b4], 2
jge 0x41f167
mov eax, dword [ebp - 0x12b4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x41f149
mov eax, dword [ebp - 0x12b4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x41f159
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x12b4]
mov dword [ebp - 0x1c], edx
jmp 0x41f165
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x12b4]
mov dword [ebp - 0x1c], eax
jmp 0x41f10b
mov dword [ebp - 0x12b8], 0
jmp 0x41f182
mov ecx, dword [ebp - 0x12b8]
add ecx, 1
mov dword [ebp - 0x12b8], ecx
cmp dword [ebp - 0x12b8], 2
jge 0x41f199
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x12b8]
mov dword [ebp - 0x1c], edx
jmp 0x41f173
cmp dword [ebp - 0x1c], 0
jge 0x41f1a7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41f1bf
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12bc], 0
jmp 0x41f1da
mov edx, dword [ebp - 0x12bc]
add edx, 1
mov dword [ebp - 0x12bc], edx
cmp dword [ebp - 0x12bc], 2
jge 0x41f1f1
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x12bc]
mov dword [ebp - 0x1c], eax
jmp 0x41f1cb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x41f203
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x41f21b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12c0], 0
jmp 0x41f236
mov edx, dword [ebp - 0x12c0]
add edx, 1
mov dword [ebp - 0x12c0], edx
cmp dword [ebp - 0x12c0], 4
jge 0x41f283
cmp dword [ebp - 0x1c], 0
jge 0x41f24d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x41f263
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x12c4], 0xfa
lea edx, [ebp - 0x12c4]
push edx
lea eax, [ebp - 0x14c0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x41f227
mov dword [ebp - 0x14c4], 0
jmp 0x41f29e
cmp dword [ebp - 0x14c4], 4
jge 0x41f2eb
mov eax, dword [ebp - 0x14c4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x41f2cd
mov eax, dword [ebp - 0x14c4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x41f2dd
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14c4]
mov dword [ebp - 0x1c], edx
jmp 0x41f2e9
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x14c4]
mov dword [ebp - 0x1c], eax
jmp 0x41f28f
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x28]
xor ecx, ebp
call fcn.004079a5
mov esp, ebp
pop ebp
ret