Function at 0x449430
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x510fd8
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1a9c
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x34], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x449489
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x36
jge 0x44949a
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x449480
cmp dword [ebp - 0x1c], 0
jge 0x4494a8
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4494c0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4494f1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4494e6
jmp 0x4494f1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x4494c0
mov eax, dword [ebp - 0x1c]
add eax, 0x13
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44952b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x449520
jmp 0x44952b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x4494fa
mov eax, dword [ebp - 0x1c]
add eax, 0x1d
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0
jmp 0x449546
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0xf
jge 0x449557
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jmp 0x44953d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x449569
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449581
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 0
jmp 0x449593
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x10
jge 0x4495d1
cmp dword [ebp - 0x1c], 0
jge 0x4495a7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4495bd
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44958a
mov dword [ebp - 0x234], 0
jmp 0x4495ec
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 5
jge 0x449603
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x234]
mov dword [ebp - 0x1c], ecx
jmp 0x4495dd
cmp dword [ebp - 0x1c], 0
jge 0x449611
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449629
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x238], 0
jmp 0x449644
mov edx, dword [ebp - 0x238]
add edx, 1
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 6
jge 0x449691
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x449673
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x449683
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x238]
mov dword [ebp - 0x1c], edx
jmp 0x44968f
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x238]
mov dword [ebp - 0x1c], eax
jmp 0x449635
mov dword [ebp - 0x23c], 0
jmp 0x4496ac
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
cmp dword [ebp - 0x23c], 9
jge 0x4496f9
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4496db
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4496eb
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], edx
jmp 0x4496f7
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], eax
jmp 0x44969d
mov dword [ebp - 0x240], 0
jmp 0x449714
mov ecx, dword [ebp - 0x240]
add ecx, 1
mov dword [ebp - 0x240], ecx
cmp dword [ebp - 0x240], 1
jge 0x449755
cmp dword [ebp - 0x1c], 0
jge 0x44972b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449741
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x438]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x449705
mov dword [ebp - 0x43c], 0
jmp 0x449770
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0xb
jge 0x4497bd
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44979f
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4497af
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x43c]
mov dword [ebp - 0x1c], edx
jmp 0x4497bb
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x43c]
mov dword [ebp - 0x1c], eax
jmp 0x449761
mov dword [ebp - 0x440], 0
jmp 0x4497d8
mov ecx, dword [ebp - 0x440]
add ecx, 1
mov dword [ebp - 0x440], ecx
cmp dword [ebp - 0x440], 6
jge 0x449825
mov eax, dword [ebp - 0x440]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x449807
mov eax, dword [ebp - 0x440]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x449817
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x440]
mov dword [ebp - 0x1c], edx
jmp 0x449823
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x440]
mov dword [ebp - 0x1c], eax
jmp 0x4497c9
mov dword [ebp - 0x444], 0
jmp 0x449840
mov ecx, dword [ebp - 0x444]
add ecx, 1
mov dword [ebp - 0x444], ecx
cmp dword [ebp - 0x444], 0xc
jge 0x449857
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x444]
mov dword [ebp - 0x1c], edx
jmp 0x449831
cmp dword [ebp - 0x1c], 0
jge 0x449865
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44987d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x448], 0
jmp 0x449898
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 1
jge 0x4498d9
cmp dword [ebp - 0x1c], 0
jge 0x4498af
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4498c5
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x640]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x449889
mov eax, 1
test eax, eax
je 0x449913
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x644]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x449905
jmp 0x449913
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x644]
mov dword [ebp - 0x1c], edx
jmp 0x4498d9
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x648], 0
jmp 0x449937
mov ecx, dword [ebp - 0x648]
add ecx, 1
mov dword [ebp - 0x648], ecx
cmp dword [ebp - 0x648], 2
jge 0x44994e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x648]
mov dword [ebp - 0x1c], edx
jmp 0x449928
cmp dword [ebp - 0x1c], 0
jge 0x44995c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449974
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x64c], 0
jmp 0x44998f
mov edx, dword [ebp - 0x64c]
add edx, 1
mov dword [ebp - 0x64c], edx
cmp dword [ebp - 0x64c], 5
jge 0x4499d0
cmp dword [ebp - 0x1c], 0
jge 0x4499a6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4499bc
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x848]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x449980
mov dword [ebp - 0x84c], 0
jmp 0x4499eb
mov eax, dword [ebp - 0x84c]
add eax, 1
mov dword [ebp - 0x84c], eax
cmp dword [ebp - 0x84c], 7
jge 0x449a38
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x449a1a
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x449a2a
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], edx
jmp 0x449a36
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], eax
jmp 0x4499dc
mov dword [ebp - 0x850], 0
jmp 0x449a53
mov ecx, dword [ebp - 0x850]
add ecx, 1
mov dword [ebp - 0x850], ecx
cmp dword [ebp - 0x850], 0
jge 0x449a6a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x850]
mov dword [ebp - 0x1c], edx
jmp 0x449a44
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x449a7c
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449a94
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x854], 0
jmp 0x449aaf
mov edx, dword [ebp - 0x854]
add edx, 1
mov dword [ebp - 0x854], edx
cmp dword [ebp - 0x854], 5
jge 0x449af0
cmp dword [ebp - 0x1c], 0
jge 0x449ac6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449adc
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa50]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x449aa0
mov eax, 1
test eax, eax
je 0x449b2a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0xa54]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x449b1c
jmp 0x449b2a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa54]
mov dword [ebp - 0x1c], edx
jmp 0x449af0
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa58], 0
jmp 0x449b4e
mov ecx, dword [ebp - 0xa58]
add ecx, 1
mov dword [ebp - 0xa58], ecx
cmp dword [ebp - 0xa58], 7
jge 0x449b9b
mov eax, dword [ebp - 0xa58]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x449b7d
mov eax, dword [ebp - 0xa58]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x449b8d
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1c], edx
jmp 0x449b99
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa58]
mov dword [ebp - 0x1c], eax
jmp 0x449b3f
mov ecx, 1
test ecx, ecx
je 0x449bd5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0xa5c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x449bc7
jmp 0x449bd5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa5c]
mov dword [ebp - 0x1c], edx
jmp 0x449b9b
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa60], 0
jmp 0x449bf6
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
cmp dword [ebp - 0xa60], 0
jge 0x449c0d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xa60]
mov dword [ebp - 0x1c], edx
jmp 0x449be7
cmp dword [ebp - 0x1c], 0
jge 0x449c1b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449c33
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa64], 0
jmp 0x449c4e
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmp dword [ebp - 0xa64], 8
jge 0x449c65
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa64]
mov dword [ebp - 0x1c], eax
jmp 0x449c3f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x449c77
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449c8f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa68], 0
jmp 0x449caa
mov edx, dword [ebp - 0xa68]
add edx, 1
mov dword [ebp - 0xa68], edx
cmp dword [ebp - 0xa68], 7
jge 0x449cf7
mov eax, dword [ebp - 0xa68]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x449cd9
mov eax, dword [ebp - 0xa68]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x449ce9
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa68]
mov dword [ebp - 0x1c], edx
jmp 0x449cf5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa68]
mov dword [ebp - 0x1c], eax
jmp 0x449c9b
mov dword [ebp - 0xa6c], 0
jmp 0x449d12
mov ecx, dword [ebp - 0xa6c]
add ecx, 1
mov dword [ebp - 0xa6c], ecx
cmp dword [ebp - 0xa6c], 6
jge 0x449d5f
cmp dword [ebp - 0x1c], 0
jge 0x449d29
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449d3f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa70], 0xfa
lea edx, [ebp - 0xa70]
push edx
lea eax, [ebp - 0xc68]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x449d03
mov dword [ebp - 0xc6c], 0
jmp 0x449d7a
mov ecx, dword [ebp - 0xc6c]
add ecx, 1
mov dword [ebp - 0xc6c], ecx
cmp dword [ebp - 0xc6c], 4
jge 0x449dbb
cmp dword [ebp - 0x1c], 0
jge 0x449d91
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449da7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe68]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x449d6b
mov dword [ebp - 4], 0
mov dword [ebp - 0xe6c], 0xffffffff
mov dword [ebp - 0xe70], 0
jmp 0x449de7
mov eax, dword [ebp - 0xe70]
add eax, 1
mov dword [ebp - 0xe70], eax
cmp dword [ebp - 0xe70], 1
jge 0x449e19
mov eax, dword [ebp - 0xe70]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x449e0e
mov edx, dword [ebp - 0xe6c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x449dd8
mov dword [ebp - 4], 0xfffffffe
jmp 0x449e39
mov dword [ebp - 0xe74], 0
jmp 0x449e54
mov edx, dword [ebp - 0xe74]
add edx, 1
mov dword [ebp - 0xe74], edx
cmp dword [ebp - 0xe74], 2
jge 0x449e95
cmp dword [ebp - 0x1c], 0
jge 0x449e6b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449e81
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1070]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x449e45
mov dword [ebp - 0x1074], 0
jmp 0x449eb0
mov eax, dword [ebp - 0x1074]
add eax, 1
mov dword [ebp - 0x1074], eax
cmp dword [ebp - 0x1074], 1
jge 0x449ec7
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1074]
mov dword [ebp - 0x1c], ecx
jmp 0x449ea1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x449ed9
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449ef1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x1078], 0xffffffff
mov dword [ebp - 0x107c], 0
jmp 0x449f1d
mov edx, dword [ebp - 0x107c]
add edx, 1
mov dword [ebp - 0x107c], edx
cmp dword [ebp - 0x107c], 1
jge 0x449f4f
mov eax, dword [ebp - 0x107c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x449f44
mov edx, dword [ebp - 0x1078]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x449f0e
mov dword [ebp - 4], 0xfffffffe
jmp 0x449f6f
mov dword [ebp - 0x1080], 0
jmp 0x449f8a
mov edx, dword [ebp - 0x1080]
add edx, 1
mov dword [ebp - 0x1080], edx
cmp dword [ebp - 0x1080], 2
jge 0x449fd7
mov eax, dword [ebp - 0x1080]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x449fb9
mov eax, dword [ebp - 0x1080]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x449fc9
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1080]
mov dword [ebp - 0x1c], edx
jmp 0x449fd5
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1080]
mov dword [ebp - 0x1c], eax
jmp 0x449f7b
mov dword [ebp - 0x1084], 0
jmp 0x449ff2
mov ecx, dword [ebp - 0x1084]
add ecx, 1
mov dword [ebp - 0x1084], ecx
cmp dword [ebp - 0x1084], 3
jge 0x44a009
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1084]
mov dword [ebp - 0x1c], edx
jmp 0x449fe3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a01b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a033
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1088], 0
jmp 0x44a04e
mov edx, dword [ebp - 0x1088]
add edx, 1
mov dword [ebp - 0x1088], edx
cmp dword [ebp - 0x1088], 0
jge 0x44a065
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1088]
mov dword [ebp - 0x1c], eax
jmp 0x44a03f
cmp dword [ebp - 0x1c], 0
jge 0x44a073
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a08b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x108c], 0
jmp 0x44a0a6
mov edx, dword [ebp - 0x108c]
add edx, 1
mov dword [ebp - 0x108c], edx
cmp dword [ebp - 0x108c], 3
jge 0x44a0f3
cmp dword [ebp - 0x1c], 0
jge 0x44a0bd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a0d3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1090], 0xfa
lea edx, [ebp - 0x1090]
push edx
lea eax, [ebp - 0x1288]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44a097
mov dword [ebp - 0x128c], 0
jmp 0x44a10e
mov ecx, dword [ebp - 0x128c]
add ecx, 1
mov dword [ebp - 0x128c], ecx
cmp dword [ebp - 0x128c], 1
jge 0x44a125
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x128c]
mov dword [ebp - 0x1c], edx
jmp 0x44a0ff
cmp dword [ebp - 0x1c], 0
jge 0x44a133
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a14b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44a185
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1290], eax
mov eax, dword [ebp - 0x1290]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44a177
jmp 0x44a185
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1290]
mov dword [ebp - 0x1c], edx
jmp 0x44a14b
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1294], 0
jmp 0x44a1a6
mov ecx, dword [ebp - 0x1294]
add ecx, 1
mov dword [ebp - 0x1294], ecx
cmp dword [ebp - 0x1294], 1
jge 0x44a1bd
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1294]
mov dword [ebp - 0x1c], edx
jmp 0x44a197
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a1cf
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a1e7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x1298], 0xffffffff
mov dword [ebp - 0x129c], 0
jmp 0x44a213
mov edx, dword [ebp - 0x129c]
add edx, 1
mov dword [ebp - 0x129c], edx
cmp dword [ebp - 0x129c], 4
jge 0x44a245
mov eax, dword [ebp - 0x129c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44a23a
mov edx, dword [ebp - 0x1298]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44a204
mov dword [ebp - 4], 0xfffffffe
jmp 0x44a265
mov dword [ebp - 0x12a0], 0
jmp 0x44a280
mov edx, dword [ebp - 0x12a0]
add edx, 1
mov dword [ebp - 0x12a0], edx
cmp dword [ebp - 0x12a0], 0
jge 0x44a2c1
cmp dword [ebp - 0x1c], 0
jge 0x44a297
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a2ad
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1498]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44a271
mov dword [ebp - 4], 3
mov dword [ebp - 0x149c], 0xffffffff
mov dword [ebp - 0x14a0], 0
jmp 0x44a2ed
mov eax, dword [ebp - 0x14a0]
add eax, 1
mov dword [ebp - 0x14a0], eax
cmp dword [ebp - 0x14a0], 3
jge 0x44a31f
mov eax, dword [ebp - 0x14a0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44a314
mov edx, dword [ebp - 0x149c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44a2de
mov dword [ebp - 4], 0xfffffffe
jmp 0x44a33f
mov dword [ebp - 0x14a4], 0
jmp 0x44a35a
mov edx, dword [ebp - 0x14a4]
add edx, 1
mov dword [ebp - 0x14a4], edx
cmp dword [ebp - 0x14a4], 2
jge 0x44a371
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x14a4]
mov dword [ebp - 0x1c], eax
jmp 0x44a34b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a383
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a39b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14a8], 0
jmp 0x44a3b6
mov edx, dword [ebp - 0x14a8]
add edx, 1
mov dword [ebp - 0x14a8], edx
cmp dword [ebp - 0x14a8], 4
jge 0x44a3f7
cmp dword [ebp - 0x1c], 0
jge 0x44a3cd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a3e3
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x16a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44a3a7
mov dword [ebp - 0x16a4], 0
jmp 0x44a412
mov eax, dword [ebp - 0x16a4]
add eax, 1
mov dword [ebp - 0x16a4], eax
cmp dword [ebp - 0x16a4], 3
jge 0x44a429
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x16a4]
mov dword [ebp - 0x1c], ecx
jmp 0x44a403
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a43b
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a453
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x16a8], 0
jmp 0x44a46e
mov edx, dword [ebp - 0x16a8]
add edx, 1
mov dword [ebp - 0x16a8], edx
cmp dword [ebp - 0x16a8], 1
jge 0x44a4af
cmp dword [ebp - 0x1c], 0
jge 0x44a485
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a49b
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x18a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44a45f
mov dword [ebp - 0x18a4], 0
jmp 0x44a4ca
mov eax, dword [ebp - 0x18a4]
add eax, 1
mov dword [ebp - 0x18a4], eax
cmp dword [ebp - 0x18a4], 0
jge 0x44a4e1
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x18a4]
mov dword [ebp - 0x1c], ecx
jmp 0x44a4bb
cmp dword [ebp - 0x1c], 0
jge 0x44a4ef
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a507
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44a541
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18a8], eax
mov eax, dword [ebp - 0x18a8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44a533
jmp 0x44a541
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18a8]
mov dword [ebp - 0x1c], edx
jmp 0x44a507
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18ac], 0
jmp 0x44a565
mov ecx, dword [ebp - 0x18ac]
add ecx, 1
mov dword [ebp - 0x18ac], ecx
cmp dword [ebp - 0x18ac], 2
jge 0x44a5a6
cmp dword [ebp - 0x1c], 0
jge 0x44a57c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a592
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1aa8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44a556
mov dword [ebp - 0x1aac], 0
jmp 0x44a5c1
mov eax, dword [ebp - 0x1aac]
add eax, 1
mov dword [ebp - 0x1aac], eax
cmp dword [ebp - 0x1aac], 2
jge 0x44a5d8
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1aac]
mov dword [ebp - 0x1c], ecx
jmp 0x44a5b2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a5ea
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a602