Function at 0x44c090
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x5110b8
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x30d0
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x3c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x44c0f7
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x37
jge 0x44c120
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44c115
mov edx, dword [ebp - 0x20]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44c0ee
mov dword [ebp - 4], 0xfffffffe
jmp 0x44c140
mov dword [ebp - 0x28], 0
jmp 0x44c152
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x1c
jge 0x44c190
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44c178
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44c185
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x44c18e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x44c149
mov dword [ebp - 0x2c], 0
jmp 0x44c1a2
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0xe
jge 0x44c1b3
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jmp 0x44c199
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44c1c5
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44c1dd
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 0
jmp 0x44c1ef
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 5
jge 0x44c200
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x44c1e6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44c212
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44c22a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], 0
jmp 0x44c23c
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x15
jge 0x44c280
cmp dword [ebp - 0x1c], 0
jge 0x44c250
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c266
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x38], 0xfa
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44c233
mov ecx, 1
test ecx, ecx
je 0x44c2ba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44c2ac
jmp 0x44c2ba
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], edx
jmp 0x44c280
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x240], 0
jmp 0x44c2db
mov ecx, dword [ebp - 0x240]
add ecx, 1
mov dword [ebp - 0x240], ecx
cmp dword [ebp - 0x240], 2
jge 0x44c2f2
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x240]
mov dword [ebp - 0x1c], edx
jmp 0x44c2cc
cmp dword [ebp - 0x1c], 0
jge 0x44c300
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c318
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x244], 0
jmp 0x44c333
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0xe
jge 0x44c380
cmp dword [ebp - 0x1c], 0
jge 0x44c34a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c360
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x248], 0xfa
lea edx, [ebp - 0x248]
push edx
lea eax, [ebp - 0x440]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44c324
mov ecx, 1
test ecx, ecx
je 0x44c3ba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44c3ac
jmp 0x44c3ba
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x444]
mov dword [ebp - 0x1c], edx
jmp 0x44c380
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x448], 0
jmp 0x44c3de
mov ecx, dword [ebp - 0x448]
add ecx, 1
mov dword [ebp - 0x448], ecx
cmp dword [ebp - 0x448], 0
jge 0x44c42b
cmp dword [ebp - 0x1c], 0
jge 0x44c3f5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c40b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x44c], 0xfa
lea edx, [ebp - 0x44c]
push edx
lea eax, [ebp - 0x648]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44c3cf
mov dword [ebp - 0x64c], 0
jmp 0x44c446
mov ecx, dword [ebp - 0x64c]
add ecx, 1
mov dword [ebp - 0x64c], ecx
cmp dword [ebp - 0x64c], 0xf
jge 0x44c493
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44c475
mov eax, dword [ebp - 0x64c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44c485
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x64c]
mov dword [ebp - 0x1c], edx
jmp 0x44c491
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x64c]
mov dword [ebp - 0x1c], eax
jmp 0x44c437
mov dword [ebp - 0x650], 0
jmp 0x44c4ae
mov ecx, dword [ebp - 0x650]
add ecx, 1
mov dword [ebp - 0x650], ecx
cmp dword [ebp - 0x650], 0xc
jge 0x44c4c5
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x650]
mov dword [ebp - 0x1c], edx
jmp 0x44c49f
cmp dword [ebp - 0x1c], 0
jge 0x44c4d3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c4eb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x654], 0
jmp 0x44c506
mov edx, dword [ebp - 0x654]
add edx, 1
mov dword [ebp - 0x654], edx
cmp dword [ebp - 0x654], 4
jge 0x44c51d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x654]
mov dword [ebp - 0x1c], eax
jmp 0x44c4f7
cmp dword [ebp - 0x1c], 0
jge 0x44c52b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c543
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44c57d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x658], eax
mov eax, dword [ebp - 0x658]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44c56f
jmp 0x44c57d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x658]
mov dword [ebp - 0x1c], edx
jmp 0x44c543
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x65c], 0
jmp 0x44c5a1
mov ecx, dword [ebp - 0x65c]
add ecx, 1
mov dword [ebp - 0x65c], ecx
cmp dword [ebp - 0x65c], 6
jge 0x44c5ee
mov eax, dword [ebp - 0x65c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44c5d0
mov eax, dword [ebp - 0x65c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44c5e0
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x65c]
mov dword [ebp - 0x1c], edx
jmp 0x44c5ec
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x65c]
mov dword [ebp - 0x1c], eax
jmp 0x44c592
mov dword [ebp - 0x660], 0
jmp 0x44c609
mov ecx, dword [ebp - 0x660]
add ecx, 1
mov dword [ebp - 0x660], ecx
cmp dword [ebp - 0x660], 6
jge 0x44c620
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x660]
mov dword [ebp - 0x1c], edx
jmp 0x44c5fa
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44c632
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44c64a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44c684
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x664]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44c676
jmp 0x44c684
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x664]
mov dword [ebp - 0x1c], edx
jmp 0x44c64a
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x668], 0
jmp 0x44c6a8
mov ecx, dword [ebp - 0x668]
add ecx, 1
mov dword [ebp - 0x668], ecx
cmp dword [ebp - 0x668], 4
jge 0x44c6bf
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x668]
mov dword [ebp - 0x1c], edx
jmp 0x44c699
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44c6d1
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44c6e9
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x66c], 0
jmp 0x44c704
mov edx, dword [ebp - 0x66c]
add edx, 1
mov dword [ebp - 0x66c], edx
cmp dword [ebp - 0x66c], 5
jge 0x44c745
cmp dword [ebp - 0x1c], 0
jge 0x44c71b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44c731
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x868]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44c6f5
mov dword [ebp - 0x86c], 0
jmp 0x44c760
mov eax, dword [ebp - 0x86c]
add eax, 1
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 3
jge 0x44c7ad
mov eax, dword [ebp - 0x86c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44c78f
mov eax, dword [ebp - 0x86c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44c79f
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x86c]
mov dword [ebp - 0x1c], edx
jmp 0x44c7ab
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x86c]
mov dword [ebp - 0x1c], eax
jmp 0x44c751
mov dword [ebp - 0x870], 0
jmp 0x44c7c8
mov ecx, dword [ebp - 0x870]
add ecx, 1
mov dword [ebp - 0x870], ecx
cmp dword [ebp - 0x870], 3
jge 0x44c7df
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x870]
mov dword [ebp - 0x1c], edx
jmp 0x44c7b9
cmp dword [ebp - 0x1c], 0
jge 0x44c7ed
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c805
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44c83f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44c831
jmp 0x44c83f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x874]
mov dword [ebp - 0x1c], edx
jmp 0x44c805
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x878], 0
jmp 0x44c863
mov ecx, dword [ebp - 0x878]
add ecx, 1
mov dword [ebp - 0x878], ecx
cmp dword [ebp - 0x878], 8
jge 0x44c8a4
cmp dword [ebp - 0x1c], 0
jge 0x44c87a
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44c890
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa70]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44c854
mov dword [ebp - 0xa74], 0
jmp 0x44c8bf
mov eax, dword [ebp - 0xa74]
add eax, 1
mov dword [ebp - 0xa74], eax
cmp dword [ebp - 0xa74], 1
jge 0x44c90c
cmp dword [ebp - 0x1c], 0
jge 0x44c8d6
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c8ec
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa78], 0xfa
lea edx, [ebp - 0xa78]
push edx
lea eax, [ebp - 0xc70]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44c8b0
mov dword [ebp - 0xc74], 0
jmp 0x44c927
mov ecx, dword [ebp - 0xc74]
add ecx, 1
mov dword [ebp - 0xc74], ecx
cmp dword [ebp - 0xc74], 3
jge 0x44c974
cmp dword [ebp - 0x1c], 0
jge 0x44c93e
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c954
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc78], 0xfa
lea edx, [ebp - 0xc78]
push edx
lea eax, [ebp - 0xe70]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44c918
mov dword [ebp - 0xe74], 0
jmp 0x44c98f
mov ecx, dword [ebp - 0xe74]
add ecx, 1
mov dword [ebp - 0xe74], ecx
cmp dword [ebp - 0xe74], 1
jge 0x44c9dc
mov eax, dword [ebp - 0xe74]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44c9be
mov eax, dword [ebp - 0xe74]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44c9ce
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe74]
mov dword [ebp - 0x1c], edx
jmp 0x44c9da
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe74]
mov dword [ebp - 0x1c], eax
jmp 0x44c980
mov dword [ebp - 0xe78], 0
jmp 0x44c9f7
mov ecx, dword [ebp - 0xe78]
add ecx, 1
mov dword [ebp - 0xe78], ecx
cmp dword [ebp - 0xe78], 4
jge 0x44ca0e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xe78]
mov dword [ebp - 0x1c], edx
jmp 0x44c9e8
cmp dword [ebp - 0x1c], 0
jge 0x44ca1c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ca34
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe7c], 0
jmp 0x44ca4f
mov edx, dword [ebp - 0xe7c]
add edx, 1
mov dword [ebp - 0xe7c], edx
cmp dword [ebp - 0xe7c], 1
jge 0x44ca9c
mov eax, dword [ebp - 0xe7c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44ca7e
mov eax, dword [ebp - 0xe7c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44ca8e
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe7c]
mov dword [ebp - 0x1c], edx
jmp 0x44ca9a
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe7c]
mov dword [ebp - 0x1c], eax
jmp 0x44ca40
mov ecx, 1
test ecx, ecx
je 0x44cad6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe80], eax
mov eax, dword [ebp - 0xe80]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44cac8
jmp 0x44cad6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe80]
mov dword [ebp - 0x1c], edx
jmp 0x44ca9c
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe84], 0
jmp 0x44cafa
mov ecx, dword [ebp - 0xe84]
add ecx, 1
mov dword [ebp - 0xe84], ecx
cmp dword [ebp - 0xe84], 1
jge 0x44cb3b
cmp dword [ebp - 0x1c], 0
jge 0x44cb11
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44cb27
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1080]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44caeb
mov dword [ebp - 0x1084], 0
jmp 0x44cb56
mov eax, dword [ebp - 0x1084]
add eax, 1
mov dword [ebp - 0x1084], eax
cmp dword [ebp - 0x1084], 0
jge 0x44cba3
mov eax, dword [ebp - 0x1084]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44cb85
mov eax, dword [ebp - 0x1084]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44cb95
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1084]
mov dword [ebp - 0x1c], edx
jmp 0x44cba1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1084]
mov dword [ebp - 0x1c], eax
jmp 0x44cb47
mov dword [ebp - 0x1088], 0
jmp 0x44cbbe
mov ecx, dword [ebp - 0x1088]
add ecx, 1
mov dword [ebp - 0x1088], ecx
cmp dword [ebp - 0x1088], 0
jge 0x44cbff
cmp dword [ebp - 0x1c], 0
jge 0x44cbd5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44cbeb
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1280]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44cbaf
mov dword [ebp - 0x1284], 0
jmp 0x44cc1a
mov eax, dword [ebp - 0x1284]
add eax, 1
mov dword [ebp - 0x1284], eax
cmp dword [ebp - 0x1284], 4
jge 0x44cc67
mov eax, dword [ebp - 0x1284]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44cc49
mov eax, dword [ebp - 0x1284]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44cc59
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1284]
mov dword [ebp - 0x1c], edx
jmp 0x44cc65
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1284]
mov dword [ebp - 0x1c], eax
jmp 0x44cc0b
mov dword [ebp - 4], 1
mov dword [ebp - 0x1288], 0xffffffff
mov dword [ebp - 0x128c], 0
jmp 0x44cc93
mov ecx, dword [ebp - 0x128c]
add ecx, 1
mov dword [ebp - 0x128c], ecx
cmp dword [ebp - 0x128c], 1
jge 0x44ccc5
mov eax, dword [ebp - 0x128c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44ccba
mov edx, dword [ebp - 0x1288]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44cc84
mov dword [ebp - 4], 0xfffffffe
jmp 0x44cce5
mov dword [ebp - 4], 2
mov dword [ebp - 0x1290], 0xffffffff
mov dword [ebp - 0x1294], 0
jmp 0x44cd11
mov edx, dword [ebp - 0x1294]
add edx, 1
mov dword [ebp - 0x1294], edx
cmp dword [ebp - 0x1294], 2
jge 0x44cd43
mov eax, dword [ebp - 0x1294]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44cd38
mov edx, dword [ebp - 0x1290]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44cd02
mov dword [ebp - 4], 0xfffffffe
jmp 0x44cd63
mov dword [ebp - 0x1298], 0
jmp 0x44cd7e
mov edx, dword [ebp - 0x1298]
add edx, 1
mov dword [ebp - 0x1298], edx
cmp dword [ebp - 0x1298], 4
jge 0x44cd95
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1298]
mov dword [ebp - 0x1c], eax
jmp 0x44cd6f
cmp dword [ebp - 0x1c], 0
jge 0x44cda3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44cdbb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44cdf5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x129c], eax
mov eax, dword [ebp - 0x129c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44cde7
jmp 0x44cdf5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x129c]
mov dword [ebp - 0x1c], edx
jmp 0x44cdbb
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12a0], 0
jmp 0x44ce16
mov ecx, dword [ebp - 0x12a0]
add ecx, 1
mov dword [ebp - 0x12a0], ecx
cmp dword [ebp - 0x12a0], 4
jge 0x44ce57
cmp dword [ebp - 0x1c], 0
jge 0x44ce2d
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ce43
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1498]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44ce07
mov dword [ebp - 4], 3
mov dword [ebp - 0x149c], 0xffffffff
mov dword [ebp - 0x14a0], 0
jmp 0x44ce83
mov eax, dword [ebp - 0x14a0]
add eax, 1
mov dword [ebp - 0x14a0], eax
cmp dword [ebp - 0x14a0], 4
jge 0x44ceb5
mov eax, dword [ebp - 0x14a0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44ceaa
mov edx, dword [ebp - 0x149c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44ce74
mov dword [ebp - 4], 0xfffffffe
jmp 0x44ced5
mov dword [ebp - 0x14a4], 0
jmp 0x44cef0
mov edx, dword [ebp - 0x14a4]
add edx, 1
mov dword [ebp - 0x14a4], edx
cmp dword [ebp - 0x14a4], 4
jge 0x44cf31
cmp dword [ebp - 0x1c], 0
jge 0x44cf07
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44cf1d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x16a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44cee1
mov dword [ebp - 0x16a4], 0
jmp 0x44cf4c
mov eax, dword [ebp - 0x16a4]
add eax, 1
mov dword [ebp - 0x16a4], eax
cmp dword [ebp - 0x16a4], 2
jge 0x44cf8d
cmp dword [ebp - 0x1c], 0
jge 0x44cf63
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44cf79
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x18a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44cf3d
mov dword [ebp - 4], 4
mov dword [ebp - 0x18a4], 0xffffffff
mov dword [ebp - 0x18a8], 0
jmp 0x44cfb9
mov eax, dword [ebp - 0x18a8]
add eax, 1
mov dword [ebp - 0x18a8], eax
cmp dword [ebp - 0x18a8], 2
jge 0x44cfeb
mov eax, dword [ebp - 0x18a8]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44cfe0
mov edx, dword [ebp - 0x18a4]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44cfaa
mov dword [ebp - 4], 0xfffffffe
jmp 0x44d00b
mov edx, 1
test edx, edx
je 0x44d045
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18ac], eax
mov eax, dword [ebp - 0x18ac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d037
jmp 0x44d045
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18ac]
mov dword [ebp - 0x1c], edx
jmp 0x44d00b
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18b0], 0
jmp 0x44d069
mov ecx, dword [ebp - 0x18b0]
add ecx, 1
mov dword [ebp - 0x18b0], ecx
cmp dword [ebp - 0x18b0], 4
jge 0x44d0aa
cmp dword [ebp - 0x1c], 0
jge 0x44d080
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d096
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1aa8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44d05a
mov dword [ebp - 0x1aac], 0
jmp 0x44d0c5
mov eax, dword [ebp - 0x1aac]
add eax, 1
mov dword [ebp - 0x1aac], eax
cmp dword [ebp - 0x1aac], 1
jge 0x44d106
cmp dword [ebp - 0x1c], 0
jge 0x44d0dc
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d0f2
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1ca8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44d0b6
mov dword [ebp - 0x1cac], 0
jmp 0x44d121
mov eax, dword [ebp - 0x1cac]
add eax, 1
mov dword [ebp - 0x1cac], eax
cmp dword [ebp - 0x1cac], 1
jge 0x44d16e
mov eax, dword [ebp - 0x1cac]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44d150
mov eax, dword [ebp - 0x1cac]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44d160
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1cac]
mov dword [ebp - 0x1c], edx
jmp 0x44d16c
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1cac]
mov dword [ebp - 0x1c], eax
jmp 0x44d112
mov dword [ebp - 0x1cb0], 0
jmp 0x44d189
mov ecx, dword [ebp - 0x1cb0]
add ecx, 1
mov dword [ebp - 0x1cb0], ecx
cmp dword [ebp - 0x1cb0], 4
jge 0x44d1ca
cmp dword [ebp - 0x1c], 0
jge 0x44d1a0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d1b6
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1ea8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44d17a
mov eax, 1
test eax, eax
je 0x44d204
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1eac], eax
mov eax, dword [ebp - 0x1eac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d1f6
jmp 0x44d204
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1eac]
mov dword [ebp - 0x1c], edx
jmp 0x44d1ca
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1eb0], 0
jmp 0x44d225
mov ecx, dword [ebp - 0x1eb0]
add ecx, 1
mov dword [ebp - 0x1eb0], ecx
cmp dword [ebp - 0x1eb0], 3
jge 0x44d266
cmp dword [ebp - 0x1c], 0
jge 0x44d23c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d252
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x20a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44d216
mov dword [ebp - 4], 5
mov dword [ebp - 0x20ac], 0xffffffff
mov dword [ebp - 0x20b0], 0
jmp 0x44d292
mov eax, dword [ebp - 0x20b0]
add eax, 1
mov dword [ebp - 0x20b0], eax
cmp dword [ebp - 0x20b0], 3
jge 0x44d2c4
mov eax, dword [ebp - 0x20b0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44d2b9
mov edx, dword [ebp - 0x20ac]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44d283
mov dword [ebp - 4], 0xfffffffe
jmp 0x44d2e4
mov dword [ebp - 0x20b4], 0
jmp 0x44d2ff
mov edx, dword [ebp - 0x20b4]
add edx, 1
mov dword [ebp - 0x20b4], edx
cmp dword [ebp - 0x20b4], 3
jge 0x44d316
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20b4]
mov dword [ebp - 0x1c], eax
jmp 0x44d2f0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44d328
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d340
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20b8], 0
jmp 0x44d35b
mov edx, dword [ebp - 0x20b8]
add edx, 1
mov dword [ebp - 0x20b8], edx
cmp dword [ebp - 0x20b8], 0
jge 0x44d39c
cmp dword [ebp - 0x1c], 0
jge 0x44d372
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d388
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x22b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44d34c
mov dword [ebp - 0x22b4], 0
jmp 0x44d3b7
mov eax, dword [ebp - 0x22b4]
add eax, 1
mov dword [ebp - 0x22b4], eax
cmp dword [ebp - 0x22b4], 4
jge 0x44d3f8
cmp dword [ebp - 0x1c], 0
jge 0x44d3ce
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d3e4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x24b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44d3a8
mov eax, 1
test eax, eax
je 0x44d432
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24b4], eax
mov eax, dword [ebp - 0x24b4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d424
jmp 0x44d432
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24b4]
mov dword [ebp - 0x1c], edx
jmp 0x44d3f8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24b8], 0
jmp 0x44d453
cmp dword [ebp - 0x24b8], 4
jge 0x44d4a0
mov eax, dword [ebp - 0x24b8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44d482
mov dword [ebp - 0x24bc], 0
jmp 0x44d4bb