Function at 0x49d600
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x512ac8
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x3504
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x49d659
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x28
jge 0x49d69d
cmp dword [ebp - 0x1c], 0
jge 0x49d66d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49d683
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0xfa
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x49d650
mov dword [ebp - 4], 0
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x228], 0
jmp 0x49d6c9
mov ecx, dword [ebp - 0x228]
add ecx, 1
mov dword [ebp - 0x228], ecx
cmp dword [ebp - 0x228], 0x34
jge 0x49d6fb
mov eax, dword [ebp - 0x228]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x49d6f0
mov edx, dword [ebp - 0x224]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49d6ba
mov dword [ebp - 4], 0xfffffffe
jmp 0x49d71b
mov dword [ebp - 0x22c], 0
jmp 0x49d736
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0x17
jge 0x49d74d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], eax
jmp 0x49d727
cmp dword [ebp - 0x1c], 0
jge 0x49d75b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49d773
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x230], 0
jmp 0x49d78e
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 0x34
jge 0x49d7a5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x230]
mov dword [ebp - 0x1c], eax
jmp 0x49d77f
cmp dword [ebp - 0x1c], 0
jge 0x49d7b3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49d7cb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x234], 0
jmp 0x49d7e6
mov edx, dword [ebp - 0x234]
add edx, 1
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 0xd
jge 0x49d7fd
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x234]
mov dword [ebp - 0x1c], eax
jmp 0x49d7d7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49d80f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49d827
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x238], 0
jmp 0x49d842
mov edx, dword [ebp - 0x238]
add edx, 1
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0x11
jge 0x49d859
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x238]
mov dword [ebp - 0x1c], eax
jmp 0x49d833
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49d86b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49d883
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x23c], 0
jmp 0x49d89e
mov edx, dword [ebp - 0x23c]
add edx, 1
mov dword [ebp - 0x23c], edx
cmp dword [ebp - 0x23c], 6
jge 0x49d8b5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], eax
jmp 0x49d88f
cmp dword [ebp - 0x1c], 0
jge 0x49d8c3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49d8db
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x240], 0
jmp 0x49d8f6
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0xc
jge 0x49d937
cmp dword [ebp - 0x1c], 0
jge 0x49d90d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49d923
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x438]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49d8e7
mov dword [ebp - 0x43c], 0
jmp 0x49d952
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0x12
jge 0x49d99f
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x49d981
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x49d991
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x43c]
mov dword [ebp - 0x1c], edx
jmp 0x49d99d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x43c]
mov dword [ebp - 0x1c], eax
jmp 0x49d943
mov dword [ebp - 4], 1
mov dword [ebp - 0x440], 0xffffffff
mov dword [ebp - 0x444], 0
jmp 0x49d9cb
mov ecx, dword [ebp - 0x444]
add ecx, 1
mov dword [ebp - 0x444], ecx
cmp dword [ebp - 0x444], 0xe
jge 0x49d9fd
mov eax, dword [ebp - 0x444]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x49d9f2
mov edx, dword [ebp - 0x440]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49d9bc
mov dword [ebp - 4], 0xfffffffe
jmp 0x49da1d
mov dword [ebp - 0x448], 0
jmp 0x49da38
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 0x15
jge 0x49da4f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x448]
mov dword [ebp - 0x1c], eax
jmp 0x49da29
cmp dword [ebp - 0x1c], 0
jge 0x49da5d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49da75
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44c], 0
jmp 0x49da90
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 0xb
jge 0x49dadd
cmp dword [ebp - 0x1c], 0
jge 0x49daa7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49dabd
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x450], 0xfa
lea edx, [ebp - 0x450]
push edx
lea eax, [ebp - 0x648]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x49da81
mov dword [ebp - 4], 2
mov dword [ebp - 0x64c], 0xffffffff
mov dword [ebp - 0x650], 0
jmp 0x49db09
mov ecx, dword [ebp - 0x650]
add ecx, 1
mov dword [ebp - 0x650], ecx
cmp dword [ebp - 0x650], 0xe
jge 0x49db3b
mov eax, dword [ebp - 0x650]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x49db30
mov edx, dword [ebp - 0x64c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49dafa
mov dword [ebp - 4], 0xfffffffe
jmp 0x49db5b
mov dword [ebp - 0x654], 0
jmp 0x49db76
mov edx, dword [ebp - 0x654]
add edx, 1
mov dword [ebp - 0x654], edx
cmp dword [ebp - 0x654], 0x10
jge 0x49dbb7
cmp dword [ebp - 0x1c], 0
jge 0x49db8d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49dba3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x850]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49db67
mov dword [ebp - 4], 3
mov dword [ebp - 0x854], 0xffffffff
mov dword [ebp - 0x858], 0
jmp 0x49dbe3
mov eax, dword [ebp - 0x858]
add eax, 1
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 0xe
jge 0x49dc15
mov eax, dword [ebp - 0x858]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x49dc0a
mov edx, dword [ebp - 0x854]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49dbd4
mov dword [ebp - 4], 0xfffffffe
jmp 0x49dc35
mov dword [ebp - 0x85c], 0
jmp 0x49dc50
mov edx, dword [ebp - 0x85c]
add edx, 1
mov dword [ebp - 0x85c], edx
cmp dword [ebp - 0x85c], 0xc
jge 0x49dc67
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x85c]
mov dword [ebp - 0x1c], eax
jmp 0x49dc41
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49dc79
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49dc91
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x860], 0
jmp 0x49dcac
mov edx, dword [ebp - 0x860]
add edx, 1
mov dword [ebp - 0x860], edx
cmp dword [ebp - 0x860], 5
jge 0x49dcc3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x860]
mov dword [ebp - 0x1c], eax
jmp 0x49dc9d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49dcd5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49dced
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x864], 0
jmp 0x49dd08
mov edx, dword [ebp - 0x864]
add edx, 1
mov dword [ebp - 0x864], edx
cmp dword [ebp - 0x864], 9
jge 0x49dd55
mov eax, dword [ebp - 0x864]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x49dd37
mov eax, dword [ebp - 0x864]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x49dd47
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x864]
mov dword [ebp - 0x1c], edx
jmp 0x49dd53
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x864]
mov dword [ebp - 0x1c], eax
jmp 0x49dcf9
mov dword [ebp - 0x868], 0
jmp 0x49dd70
mov ecx, dword [ebp - 0x868]
add ecx, 1
mov dword [ebp - 0x868], ecx
cmp dword [ebp - 0x868], 0xe
jge 0x49ddb1
cmp dword [ebp - 0x1c], 0
jge 0x49dd87
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49dd9d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa60]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49dd61
mov dword [ebp - 0xa64], 0
jmp 0x49ddcc
mov eax, dword [ebp - 0xa64]
add eax, 1
mov dword [ebp - 0xa64], eax
cmp dword [ebp - 0xa64], 0xf
jge 0x49de19
mov eax, dword [ebp - 0xa64]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x49ddfb
mov eax, dword [ebp - 0xa64]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x49de0b
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa64]
mov dword [ebp - 0x1c], edx
jmp 0x49de17
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa64]
mov dword [ebp - 0x1c], eax
jmp 0x49ddbd
mov dword [ebp - 0xa68], 0
jmp 0x49de34
mov ecx, dword [ebp - 0xa68]
add ecx, 1
mov dword [ebp - 0xa68], ecx
cmp dword [ebp - 0xa68], 2
jge 0x49de75
cmp dword [ebp - 0x1c], 0
jge 0x49de4b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49de61
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49de25
mov dword [ebp - 4], 4
mov dword [ebp - 0xc64], 0xffffffff
mov dword [ebp - 0xc68], 0
jmp 0x49dea1
mov eax, dword [ebp - 0xc68]
add eax, 1
mov dword [ebp - 0xc68], eax
cmp dword [ebp - 0xc68], 7
jge 0x49ded3
mov eax, dword [ebp - 0xc68]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x49dec8
mov edx, dword [ebp - 0xc64]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49de92
mov dword [ebp - 4], 0xfffffffe
jmp 0x49def3
mov dword [ebp - 0xc6c], 0
jmp 0x49df0e
mov edx, dword [ebp - 0xc6c]
add edx, 1
mov dword [ebp - 0xc6c], edx
cmp dword [ebp - 0xc6c], 7
jge 0x49df5b
cmp dword [ebp - 0x1c], 0
jge 0x49df25
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49df3b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc70], 0xfa
lea edx, [ebp - 0xc70]
push edx
lea eax, [ebp - 0xe68]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x49deff
mov dword [ebp - 0xe6c], 0
jmp 0x49df76
mov ecx, dword [ebp - 0xe6c]
add ecx, 1
mov dword [ebp - 0xe6c], ecx
cmp dword [ebp - 0xe6c], 0
jge 0x49dfc3
mov eax, dword [ebp - 0xe6c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x49dfa5
mov eax, dword [ebp - 0xe6c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x49dfb5
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe6c]
mov dword [ebp - 0x1c], edx
jmp 0x49dfc1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe6c]
mov dword [ebp - 0x1c], eax
jmp 0x49df67
mov dword [ebp - 0xe70], 0
jmp 0x49dfde
mov ecx, dword [ebp - 0xe70]
add ecx, 1
mov dword [ebp - 0xe70], ecx
cmp dword [ebp - 0xe70], 6
jge 0x49dff5
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe70]
mov dword [ebp - 0x1c], edx
jmp 0x49dfcf
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49e007
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e01f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe74], 0
jmp 0x49e03a
mov edx, dword [ebp - 0xe74]
add edx, 1
mov dword [ebp - 0xe74], edx
cmp dword [ebp - 0xe74], 0
jge 0x49e087
mov eax, dword [ebp - 0xe74]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x49e069
mov eax, dword [ebp - 0xe74]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x49e079
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe74]
mov dword [ebp - 0x1c], edx
jmp 0x49e085
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe74]
mov dword [ebp - 0x1c], eax
jmp 0x49e02b
mov dword [ebp - 0xe78], 0
jmp 0x49e0a2
mov ecx, dword [ebp - 0xe78]
add ecx, 1
mov dword [ebp - 0xe78], ecx
cmp dword [ebp - 0xe78], 3
jge 0x49e0e3
cmp dword [ebp - 0x1c], 0
jge 0x49e0b9
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e0cf
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1070]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49e093
mov dword [ebp - 0x1074], 0
jmp 0x49e0fe
mov eax, dword [ebp - 0x1074]
add eax, 1
mov dword [ebp - 0x1074], eax
cmp dword [ebp - 0x1074], 5
jge 0x49e115
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1074]
mov dword [ebp - 0x1c], ecx
jmp 0x49e0ef
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49e127
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e13f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x1078], 0xffffffff
mov dword [ebp - 0x107c], 0
jmp 0x49e16b
mov edx, dword [ebp - 0x107c]
add edx, 1
mov dword [ebp - 0x107c], edx
cmp dword [ebp - 0x107c], 3
jge 0x49e19d
mov eax, dword [ebp - 0x107c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x49e192
mov edx, dword [ebp - 0x1078]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x49e15c
mov dword [ebp - 4], 0xfffffffe
jmp 0x49e1bd
mov edx, 1
test edx, edx
je 0x49e1f7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1080], eax
mov eax, dword [ebp - 0x1080]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x49e1e9
jmp 0x49e1f7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1080]
mov dword [ebp - 0x1c], edx
jmp 0x49e1bd
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1084], 0
jmp 0x49e21b
mov ecx, dword [ebp - 0x1084]
add ecx, 1
mov dword [ebp - 0x1084], ecx
cmp dword [ebp - 0x1084], 5
jge 0x49e25c
cmp dword [ebp - 0x1c], 0
jge 0x49e232
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e248
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1280]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x49e20c
mov dword [ebp - 0x1284], 0
jmp 0x49e277
mov eax, dword [ebp - 0x1284]
add eax, 1
mov dword [ebp - 0x1284], eax
cmp dword [ebp - 0x1284], 3
jge 0x49e28e
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1284]
mov dword [ebp - 0x1c], ecx
jmp 0x49e268
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49e2a0
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e2b8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1288], 0
jmp 0x49e2d3
mov edx, dword [ebp - 0x1288]
add edx, 1
mov dword [ebp - 0x1288], edx
cmp dword [ebp - 0x1288], 0
jge 0x49e2ea
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1288]
mov dword [ebp - 0x1c], eax
jmp 0x49e2c4
cmp dword [ebp - 0x1c], 0
jge 0x49e2f8
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49e310
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x128c], 0
jmp 0x49e32b
mov edx, dword [ebp - 0x128c]
add edx, 1
mov dword [ebp - 0x128c], edx
cmp dword [ebp - 0x128c], 3
jge 0x49e378
cmp dword [ebp - 0x1c], 0
jge 0x49e342
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49e358
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1290], 0xfa
lea edx, [ebp - 0x1290]
push edx
lea eax, [ebp - 0x1488]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x49e31c
mov dword [ebp - 0x148c], 0
jmp 0x49e393
mov ecx, dword [ebp - 0x148c]
add ecx, 1
mov dword [ebp - 0x148c], ecx
cmp dword [ebp - 0x148c], 0
jge 0x49e3e0
mov eax, dword [ebp - 0x148c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x49e3c2
mov eax, dword [ebp - 0x148c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x49e3d2
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x148c]
mov dword [ebp - 0x1c], edx
jmp 0x49e3de
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x148c]
mov dword [ebp - 0x1c], eax
jmp 0x49e384
mov dword [ebp - 0x1490], 0
jmp 0x49e3fb
mov ecx, dword [ebp - 0x1490]
add ecx, 1
mov dword [ebp - 0x1490], ecx
cmp dword [ebp - 0x1490], 3
jge 0x49e448
mov eax, dword [ebp - 0x1490]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x49e42a
mov eax, dword [ebp - 0x1490]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x49e43a
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1490]
mov dword [ebp - 0x1c], edx
jmp 0x49e446
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1490]
mov dword [ebp - 0x1c], eax
jmp 0x49e3ec
mov dword [ebp - 0x1494], 0
jmp 0x49e463
mov ecx, dword [ebp - 0x1494]
add ecx, 1
mov dword [ebp - 0x1494], ecx
cmp dword [ebp - 0x1494], 3
jge 0x49e47a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1494]
mov dword [ebp - 0x1c], edx
jmp 0x49e454
cmp dword [ebp - 0x1c], 0
jge 0x49e488
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49e4a0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1498], 0
jmp 0x49e4bb
mov edx, dword [ebp - 0x1498]
add edx, 1
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 2
jge 0x49e4d2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1498]
mov dword [ebp - 0x1c], eax
jmp 0x49e4ac
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49e4e4
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e4fc
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x49e536
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x149c], eax
mov eax, dword [ebp - 0x149c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x49e528
jmp 0x49e536
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x149c]
mov dword [ebp - 0x1c], edx
jmp 0x49e4fc
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14a0], 0
jmp 0x49e55a
mov ecx, dword [ebp - 0x14a0]
add ecx, 1
mov dword [ebp - 0x14a0], ecx
cmp dword [ebp - 0x14a0], 2
jge 0x49e571
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14a0]
mov dword [ebp - 0x1c], edx
jmp 0x49e54b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49e583
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e59b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14a4], 0
jmp 0x49e5b6
mov edx, dword [ebp - 0x14a4]
add edx, 1
mov dword [ebp - 0x14a4], edx
cmp dword [ebp - 0x14a4], 4
jge 0x49e603
cmp dword [ebp - 0x1c], 0
jge 0x49e5cd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49e5e3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14a8], 0xfa
lea edx, [ebp - 0x14a8]
push edx
lea eax, [ebp - 0x16a0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x49e5a7
mov dword [ebp - 0x16a4], 0
jmp 0x49e61e
mov ecx, dword [ebp - 0x16a4]
add ecx, 1
mov dword [ebp - 0x16a4], ecx
cmp dword [ebp - 0x16a4], 4
jge 0x49e635
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x16a4]
mov dword [ebp - 0x1c], edx
jmp 0x49e60f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49e647
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e65f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x16a8], 0
jmp 0x49e67a
mov edx, dword [ebp - 0x16a8]
add edx, 1
mov dword [ebp - 0x16a8], edx
cmp dword [ebp - 0x16a8], 4
jge 0x49e6c7
cmp dword [ebp - 0x1c], 0
jge 0x49e691
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x49e6a7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x16ac], 0xfa
lea edx, [ebp - 0x16ac]
push edx
lea eax, [ebp - 0x18a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x49e66b
mov dword [ebp - 0x18ac], 0
jmp 0x49e6e2
mov ecx, dword [ebp - 0x18ac]
add ecx, 1
mov dword [ebp - 0x18ac], ecx
cmp dword [ebp - 0x18ac], 1
jge 0x49e6f9
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x18ac]
mov dword [ebp - 0x1c], edx
jmp 0x49e6d3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49e70b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x49e723
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18b0], 0
jmp 0x49e73e
cmp dword [ebp - 0x18b0], 3
jge 0x49e755
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x18b0]
mov dword [ebp - 0x1c], eax
jmp 0x49e72f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x49e767