Function at 0x4ecea0
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x514488
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x2768
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x4ecef9
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xf
jge 0x4ecf37
cmp dword [ebp - 0x1c], 0
jge 0x4ecf0d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4ecf23
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4ecef0
mov dword [ebp - 0x224], 0
jmp 0x4ecf52
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x1a
jge 0x4ecf69
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x224]
mov dword [ebp - 0x1c], ecx
jmp 0x4ecf43
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4ecf7b
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4ecf93
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x228], 0
jmp 0x4ecfae
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0x31
jge 0x4ecfc5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x228]
mov dword [ebp - 0x1c], eax
jmp 0x4ecf9f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4ecfd7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4ecfef
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x22c], 0xffffffff
mov dword [ebp - 0x230], 0
jmp 0x4ed01b
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 0x11
jge 0x4ed04d
mov eax, dword [ebp - 0x230]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4ed042
mov edx, dword [ebp - 0x22c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ed00c
mov dword [ebp - 4], 0xfffffffe
jmp 0x4ed06d
mov edx, 1
test edx, edx
je 0x4ed0a7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4ed099
jmp 0x4ed0a7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x234]
mov dword [ebp - 0x1c], edx
jmp 0x4ed06d
mov eax, dword [ebp - 0x1c]
add eax, 0xa
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x238], 0xffffffff
mov dword [ebp - 0x23c], 0
jmp 0x4ed0dc
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
cmp dword [ebp - 0x23c], 0x11
jge 0x4ed10e
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4ed103
mov edx, dword [ebp - 0x238]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ed0cd
mov dword [ebp - 4], 0xfffffffe
jmp 0x4ed12e
mov dword [ebp - 4], 2
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x244], 0
jmp 0x4ed15a
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0xa
jge 0x4ed18c
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4ed181
mov edx, dword [ebp - 0x240]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ed14b
mov dword [ebp - 4], 0xfffffffe
jmp 0x4ed1ac
mov edx, 1
test edx, edx
je 0x4ed1e6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4ed1d8
jmp 0x4ed1e6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x248]
mov dword [ebp - 0x1c], edx
jmp 0x4ed1ac
mov eax, dword [ebp - 0x1c]
add eax, 0x1f
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x250], 0
jmp 0x4ed21b
mov ecx, dword [ebp - 0x250]
add ecx, 1
mov dword [ebp - 0x250], ecx
cmp dword [ebp - 0x250], 7
jge 0x4ed24d
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4ed242
mov edx, dword [ebp - 0x24c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ed20c
mov dword [ebp - 4], 0xfffffffe
jmp 0x4ed26d
mov edx, 1
test edx, edx
je 0x4ed2a7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4ed299
jmp 0x4ed2a7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x254]
mov dword [ebp - 0x1c], edx
jmp 0x4ed26d
mov eax, dword [ebp - 0x1c]
add eax, 0xc
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x258], 0
jmp 0x4ed2cb
mov ecx, dword [ebp - 0x258]
add ecx, 1
mov dword [ebp - 0x258], ecx
cmp dword [ebp - 0x258], 0x14
jge 0x4ed2e2
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x258]
mov dword [ebp - 0x1c], edx
jmp 0x4ed2bc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4ed2f4
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4ed30c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x25c], 0
jmp 0x4ed327
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 0xd
jge 0x4ed33e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], eax
jmp 0x4ed318
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4ed350
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4ed368
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x260], 0
jmp 0x4ed383
mov edx, dword [ebp - 0x260]
add edx, 1
mov dword [ebp - 0x260], edx
cmp dword [ebp - 0x260], 0xe
jge 0x4ed3d0
mov eax, dword [ebp - 0x260]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4ed3b2
mov eax, dword [ebp - 0x260]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4ed3c2
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x260]
mov dword [ebp - 0x1c], edx
jmp 0x4ed3ce
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x260]
mov dword [ebp - 0x1c], eax
jmp 0x4ed374
mov ecx, 1
test ecx, ecx
je 0x4ed40a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x264]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4ed3fc
jmp 0x4ed40a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x264]
mov dword [ebp - 0x1c], edx
jmp 0x4ed3d0
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x268], 0
jmp 0x4ed42e
mov ecx, dword [ebp - 0x268]
add ecx, 1
mov dword [ebp - 0x268], ecx
cmp dword [ebp - 0x268], 0xe
jge 0x4ed47b
cmp dword [ebp - 0x1c], 0
jge 0x4ed445
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4ed45b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x26c], 0xfa
lea edx, [ebp - 0x26c]
push edx
lea eax, [ebp - 0x468]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4ed41f
mov dword [ebp - 0x46c], 0
jmp 0x4ed496
mov ecx, dword [ebp - 0x46c]
add ecx, 1
mov dword [ebp - 0x46c], ecx
cmp dword [ebp - 0x46c], 8
jge 0x4ed4e3
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4ed4c5
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4ed4d5
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x46c]
mov dword [ebp - 0x1c], edx
jmp 0x4ed4e1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1c], eax
jmp 0x4ed487
mov dword [ebp - 0x470], 0
jmp 0x4ed4fe
mov ecx, dword [ebp - 0x470]
add ecx, 1
mov dword [ebp - 0x470], ecx
cmp dword [ebp - 0x470], 3
jge 0x4ed53f
cmp dword [ebp - 0x1c], 0
jge 0x4ed515
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4ed52b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x668]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4ed4ef
mov dword [ebp - 0x66c], 0
jmp 0x4ed55a
mov eax, dword [ebp - 0x66c]
add eax, 1
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 5
jge 0x4ed571
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x66c]
mov dword [ebp - 0x1c], ecx
jmp 0x4ed54b
cmp dword [ebp - 0x1c], 0
jge 0x4ed57f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4ed597
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4ed5d1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0x670]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4ed5c3
jmp 0x4ed5d1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x670]
mov dword [ebp - 0x1c], edx
jmp 0x4ed597
mov eax, dword [ebp - 0x1c]
add eax, 0xc
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x674], 0
jmp 0x4ed5f5
mov ecx, dword [ebp - 0x674]
add ecx, 1
mov dword [ebp - 0x674], ecx
cmp dword [ebp - 0x674], 9
jge 0x4ed642
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4ed624
mov eax, dword [ebp - 0x674]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4ed634
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x674]
mov dword [ebp - 0x1c], edx
jmp 0x4ed640
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x674]
mov dword [ebp - 0x1c], eax
jmp 0x4ed5e6
mov dword [ebp - 4], 4
mov dword [ebp - 0x678], 0xffffffff
mov dword [ebp - 0x67c], 0
jmp 0x4ed66e
mov ecx, dword [ebp - 0x67c]
add ecx, 1
mov dword [ebp - 0x67c], ecx
cmp dword [ebp - 0x67c], 0xa
jge 0x4ed6a0
mov eax, dword [ebp - 0x67c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4ed695
mov edx, dword [ebp - 0x678]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ed65f
mov dword [ebp - 4], 0xfffffffe
jmp 0x4ed6c0
mov edx, 1
test edx, edx
je 0x4ed6fa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x680]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4ed6ec
jmp 0x4ed6fa
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x680]
mov dword [ebp - 0x1c], edx
jmp 0x4ed6c0
mov eax, dword [ebp - 0x1c]
add eax, 0xa
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x684], 0
jmp 0x4ed71e
mov ecx, dword [ebp - 0x684]
add ecx, 1
mov dword [ebp - 0x684], ecx
cmp dword [ebp - 0x684], 0xc
jge 0x4ed735
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x684]
mov dword [ebp - 0x1c], edx
jmp 0x4ed70f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4ed747
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4ed75f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x688], 0
jmp 0x4ed77a
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 6
jge 0x4ed7c7
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4ed7a9
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4ed7b9
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x688]
mov dword [ebp - 0x1c], edx
jmp 0x4ed7c5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x688]
mov dword [ebp - 0x1c], eax
jmp 0x4ed76b
mov dword [ebp - 0x68c], 0
jmp 0x4ed7e2
mov ecx, dword [ebp - 0x68c]
add ecx, 1
mov dword [ebp - 0x68c], ecx
cmp dword [ebp - 0x68c], 4
jge 0x4ed82f
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4ed811
mov eax, dword [ebp - 0x68c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4ed821
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x68c]
mov dword [ebp - 0x1c], edx
jmp 0x4ed82d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x68c]
mov dword [ebp - 0x1c], eax
jmp 0x4ed7d3
mov dword [ebp - 0x690], 0
jmp 0x4ed84a
mov ecx, dword [ebp - 0x690]
add ecx, 1
mov dword [ebp - 0x690], ecx
cmp dword [ebp - 0x690], 8
jge 0x4ed897
mov eax, dword [ebp - 0x690]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4ed879
mov eax, dword [ebp - 0x690]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4ed889
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x690]
mov dword [ebp - 0x1c], edx
jmp 0x4ed895
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x690]
mov dword [ebp - 0x1c], eax
jmp 0x4ed83b
mov dword [ebp - 0x694], 0
jmp 0x4ed8b2
mov ecx, dword [ebp - 0x694]
add ecx, 1
mov dword [ebp - 0x694], ecx
cmp dword [ebp - 0x694], 7
jge 0x4ed8f3
cmp dword [ebp - 0x1c], 0
jge 0x4ed8c9
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4ed8df
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x890]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4ed8a3
mov dword [ebp - 4], 5
mov dword [ebp - 0x894], 0xffffffff
mov dword [ebp - 0x898], 0
jmp 0x4ed91f
mov eax, dword [ebp - 0x898]
add eax, 1
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 1
jge 0x4ed951
mov eax, dword [ebp - 0x898]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4ed946
mov edx, dword [ebp - 0x894]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ed910
mov dword [ebp - 4], 0xfffffffe
jmp 0x4ed971
mov dword [ebp - 0x89c], 0
jmp 0x4ed98c
mov edx, dword [ebp - 0x89c]
add edx, 1
mov dword [ebp - 0x89c], edx
cmp dword [ebp - 0x89c], 8
jge 0x4ed9d9
cmp dword [ebp - 0x1c], 0
jge 0x4ed9a3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4ed9b9
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8a0], 0xfa
lea edx, [ebp - 0x8a0]
push edx
lea eax, [ebp - 0xa98]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4ed97d
mov dword [ebp - 0xa9c], 0
jmp 0x4ed9f4
mov ecx, dword [ebp - 0xa9c]
add ecx, 1
mov dword [ebp - 0xa9c], ecx
cmp dword [ebp - 0xa9c], 1
jge 0x4eda0b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xa9c]
mov dword [ebp - 0x1c], edx
jmp 0x4ed9e5
cmp dword [ebp - 0x1c], 0
jge 0x4eda19
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4eda31
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xaa0], 0
jmp 0x4eda4c
mov edx, dword [ebp - 0xaa0]
add edx, 1
mov dword [ebp - 0xaa0], edx
cmp dword [ebp - 0xaa0], 1
jge 0x4eda63
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xaa0]
mov dword [ebp - 0x1c], eax
jmp 0x4eda3d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4eda75
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4eda8d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xaa4], 0
jmp 0x4edaa8
mov edx, dword [ebp - 0xaa4]
add edx, 1
mov dword [ebp - 0xaa4], edx
cmp dword [ebp - 0xaa4], 0
jge 0x4edaf5
cmp dword [ebp - 0x1c], 0
jge 0x4edabf
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4edad5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xaa8], 0xfa
lea edx, [ebp - 0xaa8]
push edx
lea eax, [ebp - 0xca0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4eda99
mov dword [ebp - 4], 6
mov dword [ebp - 0xca4], 0xffffffff
mov dword [ebp - 0xca8], 0
jmp 0x4edb21
mov ecx, dword [ebp - 0xca8]
add ecx, 1
mov dword [ebp - 0xca8], ecx
cmp dword [ebp - 0xca8], 3
jge 0x4edb53
mov eax, dword [ebp - 0xca8]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4edb48
mov edx, dword [ebp - 0xca4]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4edb12
mov dword [ebp - 4], 0xfffffffe
jmp 0x4edb73
mov dword [ebp - 0xcac], 0
jmp 0x4edb8e
mov edx, dword [ebp - 0xcac]
add edx, 1
mov dword [ebp - 0xcac], edx
cmp dword [ebp - 0xcac], 4
jge 0x4edba5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcac]
mov dword [ebp - 0x1c], eax
jmp 0x4edb7f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4edbb7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4edbcf
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4edc09
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcb0], eax
mov eax, dword [ebp - 0xcb0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4edbfb
jmp 0x4edc09
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xcb0]
mov dword [ebp - 0x1c], edx
jmp 0x4edbcf
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcb4], 0
jmp 0x4edc2d
mov ecx, dword [ebp - 0xcb4]
add ecx, 1
mov dword [ebp - 0xcb4], ecx
cmp dword [ebp - 0xcb4], 1
jge 0x4edc44
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xcb4]
mov dword [ebp - 0x1c], edx
jmp 0x4edc1e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4edc56
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4edc6e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcb8], 0
jmp 0x4edc89
mov edx, dword [ebp - 0xcb8]
add edx, 1
mov dword [ebp - 0xcb8], edx
cmp dword [ebp - 0xcb8], 3
jge 0x4edca0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcb8]
mov dword [ebp - 0x1c], eax
jmp 0x4edc7a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4edcb2
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4edcca
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcbc], 0
jmp 0x4edce5
mov edx, dword [ebp - 0xcbc]
add edx, 1
mov dword [ebp - 0xcbc], edx
cmp dword [ebp - 0xcbc], 2
jge 0x4edcfc
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcbc]
mov dword [ebp - 0x1c], eax
jmp 0x4edcd6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4edd0e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4edd26
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcc0], 0
jmp 0x4edd41
mov edx, dword [ebp - 0xcc0]
add edx, 1
mov dword [ebp - 0xcc0], edx
cmp dword [ebp - 0xcc0], 3
jge 0x4edd8e
mov eax, dword [ebp - 0xcc0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4edd70
mov eax, dword [ebp - 0xcc0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4edd80
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xcc0]
mov dword [ebp - 0x1c], edx
jmp 0x4edd8c
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xcc0]
mov dword [ebp - 0x1c], eax
jmp 0x4edd32
mov dword [ebp - 0xcc4], 0
jmp 0x4edda9
mov ecx, dword [ebp - 0xcc4]
add ecx, 1
mov dword [ebp - 0xcc4], ecx
cmp dword [ebp - 0xcc4], 2
jge 0x4eddf6
mov eax, dword [ebp - 0xcc4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4eddd8
mov eax, dword [ebp - 0xcc4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4edde8
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xcc4]
mov dword [ebp - 0x1c], edx
jmp 0x4eddf4
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xcc4]
mov dword [ebp - 0x1c], eax
jmp 0x4edd9a
mov dword [ebp - 4], 7
mov dword [ebp - 0xcc8], 0xffffffff
mov dword [ebp - 0xccc], 0
jmp 0x4ede22
mov ecx, dword [ebp - 0xccc]
add ecx, 1
mov dword [ebp - 0xccc], ecx
cmp dword [ebp - 0xccc], 2
jge 0x4ede54
mov eax, dword [ebp - 0xccc]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4ede49
mov edx, dword [ebp - 0xcc8]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ede13
mov dword [ebp - 4], 0xfffffffe
jmp 0x4ede74
mov dword [ebp - 4], 8
mov dword [ebp - 0xcd0], 0xffffffff
mov dword [ebp - 0xcd4], 0
jmp 0x4edea0
mov edx, dword [ebp - 0xcd4]
add edx, 1
mov dword [ebp - 0xcd4], edx
cmp dword [ebp - 0xcd4], 3
jge 0x4eded2
mov eax, dword [ebp - 0xcd4]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4edec7
mov edx, dword [ebp - 0xcd0]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ede91
mov dword [ebp - 4], 0xfffffffe
jmp 0x4edef2
mov dword [ebp - 0xcd8], 0
jmp 0x4edf0d
mov edx, dword [ebp - 0xcd8]
add edx, 1
mov dword [ebp - 0xcd8], edx
cmp dword [ebp - 0xcd8], 0
jge 0x4edf24
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcd8]
mov dword [ebp - 0x1c], eax
jmp 0x4edefe
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4edf36
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4edf4e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcdc], 0
jmp 0x4edf69
mov edx, dword [ebp - 0xcdc]
add edx, 1
mov dword [ebp - 0xcdc], edx
cmp dword [ebp - 0xcdc], 4
jge 0x4edf80
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xcdc]
mov dword [ebp - 0x1c], eax
jmp 0x4edf5a
cmp dword [ebp - 0x1c], 0
jge 0x4edf8e
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4edfa6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xce0], 0
jmp 0x4edfc1
mov edx, dword [ebp - 0xce0]
add edx, 1
mov dword [ebp - 0xce0], edx
cmp dword [ebp - 0xce0], 2
jge 0x4edfd8
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xce0]
mov dword [ebp - 0x1c], eax
jmp 0x4edfb2
cmp dword [ebp - 0x1c], 0
jge 0x4edfe6
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4edffe
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xce4], 0
jmp 0x4ee019
mov edx, dword [ebp - 0xce4]
add edx, 1
mov dword [ebp - 0xce4], edx
cmp dword [ebp - 0xce4], 4
jge 0x4ee05a
cmp dword [ebp - 0x1c], 0
jge 0x4ee030
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4ee046
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xee0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4ee00a
mov dword [ebp - 4], 9
mov dword [ebp - 0xee4], 0xffffffff
mov dword [ebp - 0xee8], 0
jmp 0x4ee086
mov eax, dword [ebp - 0xee8]
add eax, 1
mov dword [ebp - 0xee8], eax
cmp dword [ebp - 0xee8], 4
jge 0x4ee0b8
mov eax, dword [ebp - 0xee8]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4ee0ad
mov edx, dword [ebp - 0xee4]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ee077
mov dword [ebp - 4], 0xfffffffe
jmp 0x4ee0d8
mov edx, 1
test edx, edx
je 0x4ee112
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xeec], eax
mov eax, dword [ebp - 0xeec]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4ee104
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4ee155