Function at 0x441cb0
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x510d60
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1ef0
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x441d09
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1c
jge 0x441d4d
cmp dword [ebp - 0x1c], 0
jge 0x441d1d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441d33
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0xfa
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x441d00
mov dword [ebp - 0x224], 0
jmp 0x441d68
mov ecx, dword [ebp - 0x224]
add ecx, 1
mov dword [ebp - 0x224], ecx
cmp dword [ebp - 0x224], 0x18
jge 0x441db5
cmp dword [ebp - 0x1c], 0
jge 0x441d7f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441d95
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x228], 0xfa
lea edx, [ebp - 0x228]
push edx
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x441d59
mov dword [ebp - 0x424], 0
jmp 0x441dd0
mov ecx, dword [ebp - 0x424]
add ecx, 1
mov dword [ebp - 0x424], ecx
cmp dword [ebp - 0x424], 0x2c
jge 0x441e1d
cmp dword [ebp - 0x1c], 0
jge 0x441de7
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441dfd
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x428], 0xfa
lea edx, [ebp - 0x428]
push edx
lea eax, [ebp - 0x620]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x441dc1
mov dword [ebp - 0x624], 0
jmp 0x441e38
mov ecx, dword [ebp - 0x624]
add ecx, 1
mov dword [ebp - 0x624], ecx
cmp dword [ebp - 0x624], 0xb
jge 0x441e4f
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x624]
mov dword [ebp - 0x1c], edx
jmp 0x441e29
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441e61
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x441e79
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x628], 0
jmp 0x441e94
mov edx, dword [ebp - 0x628]
add edx, 1
mov dword [ebp - 0x628], edx
cmp dword [ebp - 0x628], 0x12
jge 0x441ee1
mov eax, dword [ebp - 0x628]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x441ec3
mov eax, dword [ebp - 0x628]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x441ed3
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x628]
mov dword [ebp - 0x1c], edx
jmp 0x441edf
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x628]
mov dword [ebp - 0x1c], eax
jmp 0x441e85
mov dword [ebp - 0x62c], 0
jmp 0x441efc
mov ecx, dword [ebp - 0x62c]
add ecx, 1
mov dword [ebp - 0x62c], ecx
cmp dword [ebp - 0x62c], 0xf
jge 0x441f13
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x62c]
mov dword [ebp - 0x1c], edx
jmp 0x441eed
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441f25
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x441f3d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x441f77
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x630]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x441f69
jmp 0x441f77
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x630]
mov dword [ebp - 0x1c], edx
jmp 0x441f3d
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x634], 0xffffffff
mov dword [ebp - 0x638], 0
jmp 0x441fac
mov ecx, dword [ebp - 0x638]
add ecx, 1
mov dword [ebp - 0x638], ecx
cmp dword [ebp - 0x638], 0x1a
jge 0x441fde
mov eax, dword [ebp - 0x638]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x441fd3
mov edx, dword [ebp - 0x634]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x441f9d
mov dword [ebp - 4], 0xfffffffe
jmp 0x441ffe
mov dword [ebp - 0x63c], 0
jmp 0x442019
mov edx, dword [ebp - 0x63c]
add edx, 1
mov dword [ebp - 0x63c], edx
cmp dword [ebp - 0x63c], 7
jge 0x442066
mov eax, dword [ebp - 0x63c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x442048
mov eax, dword [ebp - 0x63c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x442058
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x63c]
mov dword [ebp - 0x1c], edx
jmp 0x442064
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x63c]
mov dword [ebp - 0x1c], eax
jmp 0x44200a
mov ecx, 1
test ecx, ecx
je 0x4420a0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x640]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442092
jmp 0x4420a0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x640]
mov dword [ebp - 0x1c], edx
jmp 0x442066
mov eax, dword [ebp - 0x1c]
add eax, 9
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x644], 0
jmp 0x4420c4
mov ecx, dword [ebp - 0x644]
add ecx, 1
mov dword [ebp - 0x644], ecx
cmp dword [ebp - 0x644], 0x14
jge 0x442105
cmp dword [ebp - 0x1c], 0
jge 0x4420db
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4420f1
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x840]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4420b5
mov dword [ebp - 4], 1
mov dword [ebp - 0x844], 0xffffffff
mov dword [ebp - 0x848], 0
jmp 0x442131
mov eax, dword [ebp - 0x848]
add eax, 1
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 2
jge 0x442163
mov eax, dword [ebp - 0x848]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x442158
mov edx, dword [ebp - 0x844]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x442122
mov dword [ebp - 4], 0xfffffffe
jmp 0x442183
mov dword [ebp - 0x84c], 0
jmp 0x44219e
mov edx, dword [ebp - 0x84c]
add edx, 1
mov dword [ebp - 0x84c], edx
cmp dword [ebp - 0x84c], 6
jge 0x4421b5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], eax
jmp 0x44218f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4421c7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4421df
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x850], 0
jmp 0x4421fa
mov edx, dword [ebp - 0x850]
add edx, 1
mov dword [ebp - 0x850], edx
cmp dword [ebp - 0x850], 6
jge 0x44223b
cmp dword [ebp - 0x1c], 0
jge 0x442211
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442227
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa48]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4421eb
mov dword [ebp - 4], 2
mov dword [ebp - 0xa4c], 0xffffffff
mov dword [ebp - 0xa50], 0
jmp 0x442267
mov eax, dword [ebp - 0xa50]
add eax, 1
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0xa50], 7
jge 0x442299
mov eax, dword [ebp - 0xa50]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44228e
mov edx, dword [ebp - 0xa4c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x442258
mov dword [ebp - 4], 0xfffffffe
jmp 0x4422b9
mov dword [ebp - 0xa54], 0
jmp 0x4422d4
mov edx, dword [ebp - 0xa54]
add edx, 1
mov dword [ebp - 0xa54], edx
cmp dword [ebp - 0xa54], 1
jge 0x442321
cmp dword [ebp - 0x1c], 0
jge 0x4422eb
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442301
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa58], 0xfa
lea edx, [ebp - 0xa58]
push edx
lea eax, [ebp - 0xc50]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4422c5
mov dword [ebp - 0xc54], 0
jmp 0x44233c
mov ecx, dword [ebp - 0xc54]
add ecx, 1
mov dword [ebp - 0xc54], ecx
cmp dword [ebp - 0xc54], 1
jge 0x442353
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc54]
mov dword [ebp - 0x1c], edx
jmp 0x44232d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x442365
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44237d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0xc58], 0xffffffff
mov dword [ebp - 0xc5c], 0
jmp 0x4423a9
mov edx, dword [ebp - 0xc5c]
add edx, 1
mov dword [ebp - 0xc5c], edx
cmp dword [ebp - 0xc5c], 2
jge 0x4423db
mov eax, dword [ebp - 0xc5c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4423d0
mov edx, dword [ebp - 0xc58]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44239a
mov dword [ebp - 4], 0xfffffffe
jmp 0x4423fb
mov dword [ebp - 0xc60], 0
jmp 0x442416
mov edx, dword [ebp - 0xc60]
add edx, 1
mov dword [ebp - 0xc60], edx
cmp dword [ebp - 0xc60], 6
jge 0x44242d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc60]
mov dword [ebp - 0x1c], eax
jmp 0x442407
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44243f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442457
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0xc64], 0xffffffff
mov dword [ebp - 0xc68], 0
jmp 0x442483
mov edx, dword [ebp - 0xc68]
add edx, 1
mov dword [ebp - 0xc68], edx
cmp dword [ebp - 0xc68], 2
jge 0x4424b5
mov eax, dword [ebp - 0xc68]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4424aa
mov edx, dword [ebp - 0xc64]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x442474
mov dword [ebp - 4], 0xfffffffe
jmp 0x4424d5
mov dword [ebp - 0xc6c], 0
jmp 0x4424f0
mov edx, dword [ebp - 0xc6c]
add edx, 1
mov dword [ebp - 0xc6c], edx
cmp dword [ebp - 0xc6c], 1
jge 0x44253d
cmp dword [ebp - 0x1c], 0
jge 0x442507
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44251d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc70], 0xfa
lea edx, [ebp - 0xc70]
push edx
lea eax, [ebp - 0xe68]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4424e1
mov dword [ebp - 0xe6c], 0
jmp 0x442558
mov ecx, dword [ebp - 0xe6c]
add ecx, 1
mov dword [ebp - 0xe6c], ecx
cmp dword [ebp - 0xe6c], 7
jge 0x442599
cmp dword [ebp - 0x1c], 0
jge 0x44256f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442585
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1068]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x442549
mov dword [ebp - 0x106c], 0
jmp 0x4425b4
mov eax, dword [ebp - 0x106c]
add eax, 1
mov dword [ebp - 0x106c], eax
cmp dword [ebp - 0x106c], 1
jge 0x4425cb
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x106c]
mov dword [ebp - 0x1c], ecx
jmp 0x4425a5
cmp dword [ebp - 0x1c], 0
jge 0x4425d9
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4425f1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1070], 0
jmp 0x44260c
mov edx, dword [ebp - 0x1070]
add edx, 1
mov dword [ebp - 0x1070], edx
cmp dword [ebp - 0x1070], 7
jge 0x442623
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1070]
mov dword [ebp - 0x1c], eax
jmp 0x4425fd
cmp dword [ebp - 0x1c], 0
jge 0x442631
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442649
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1074], 0
jmp 0x442664
mov edx, dword [ebp - 0x1074]
add edx, 1
mov dword [ebp - 0x1074], edx
cmp dword [ebp - 0x1074], 8
jge 0x44267b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1074]
mov dword [ebp - 0x1c], eax
jmp 0x442655
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44268d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4426a5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1078], 0
jmp 0x4426c0
mov edx, dword [ebp - 0x1078]
add edx, 1
mov dword [ebp - 0x1078], edx
cmp dword [ebp - 0x1078], 0
jge 0x44270d
mov eax, dword [ebp - 0x1078]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4426ef
mov eax, dword [ebp - 0x1078]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4426ff
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1078]
mov dword [ebp - 0x1c], edx
jmp 0x44270b
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1078]
mov dword [ebp - 0x1c], eax
jmp 0x4426b1
mov ecx, 1
test ecx, ecx
je 0x442747
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x107c], eax
mov eax, dword [ebp - 0x107c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442739
jmp 0x442747
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x107c]
mov dword [ebp - 0x1c], edx
jmp 0x44270d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x1080], 0xffffffff
mov dword [ebp - 0x1084], 0
jmp 0x442779
mov ecx, dword [ebp - 0x1084]
add ecx, 1
mov dword [ebp - 0x1084], ecx
cmp dword [ebp - 0x1084], 0
jge 0x4427ab
mov eax, dword [ebp - 0x1084]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4427a0
mov edx, dword [ebp - 0x1080]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44276a
mov dword [ebp - 4], 0xfffffffe
jmp 0x4427cb
mov dword [ebp - 4], 6
mov dword [ebp - 0x1088], 0xffffffff
mov dword [ebp - 0x108c], 0
jmp 0x4427f7
mov edx, dword [ebp - 0x108c]
add edx, 1
mov dword [ebp - 0x108c], edx
cmp dword [ebp - 0x108c], 3
jge 0x442829
mov eax, dword [ebp - 0x108c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44281e
mov edx, dword [ebp - 0x1088]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4427e8
mov dword [ebp - 4], 0xfffffffe
jmp 0x442849
mov dword [ebp - 0x1090], 0
jmp 0x442864
mov edx, dword [ebp - 0x1090]
add edx, 1
mov dword [ebp - 0x1090], edx
cmp dword [ebp - 0x1090], 2
jge 0x44287b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1090]
mov dword [ebp - 0x1c], eax
jmp 0x442855
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44288d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4428a5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1094], 0
jmp 0x4428c0
mov edx, dword [ebp - 0x1094]
add edx, 1
mov dword [ebp - 0x1094], edx
cmp dword [ebp - 0x1094], 1
jge 0x4428d7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1094]
mov dword [ebp - 0x1c], eax
jmp 0x4428b1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4428e9
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442901
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44293b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1098], eax
mov eax, dword [ebp - 0x1098]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44292d
jmp 0x44293b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1098]
mov dword [ebp - 0x1c], edx
jmp 0x442901
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x109c], 0xffffffff
mov dword [ebp - 0x10a0], 0
jmp 0x442970
mov ecx, dword [ebp - 0x10a0]
add ecx, 1
mov dword [ebp - 0x10a0], ecx
cmp dword [ebp - 0x10a0], 3
jge 0x4429a2
mov eax, dword [ebp - 0x10a0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x442997
mov edx, dword [ebp - 0x109c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x442961
mov dword [ebp - 4], 0xfffffffe
jmp 0x4429c2
mov dword [ebp - 4], 8
mov dword [ebp - 0x10a4], 0xffffffff
mov dword [ebp - 0x10a8], 0
jmp 0x4429ee
mov edx, dword [ebp - 0x10a8]
add edx, 1
mov dword [ebp - 0x10a8], edx
cmp dword [ebp - 0x10a8], 2
jge 0x442a20
mov eax, dword [ebp - 0x10a8]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x442a15
mov edx, dword [ebp - 0x10a4]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4429df
mov dword [ebp - 4], 0xfffffffe
jmp 0x442a40
mov edx, 1
test edx, edx
je 0x442a7a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x10ac], eax
mov eax, dword [ebp - 0x10ac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442a6c
jmp 0x442a7a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10ac]
mov dword [ebp - 0x1c], edx
jmp 0x442a40
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10b0], 0
jmp 0x442a9e
mov ecx, dword [ebp - 0x10b0]
add ecx, 1
mov dword [ebp - 0x10b0], ecx
cmp dword [ebp - 0x10b0], 2
jge 0x442adf
cmp dword [ebp - 0x1c], 0
jge 0x442ab5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442acb
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x12a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x442a8f
mov dword [ebp - 0x12ac], 0
jmp 0x442afa
mov eax, dword [ebp - 0x12ac]
add eax, 1
mov dword [ebp - 0x12ac], eax
cmp dword [ebp - 0x12ac], 1
jge 0x442b11
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x12ac]
mov dword [ebp - 0x1c], ecx
jmp 0x442aeb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x442b23
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442b3b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x442b75
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12b0], eax
mov eax, dword [ebp - 0x12b0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442b67
jmp 0x442b75
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12b0]
mov dword [ebp - 0x1c], edx
jmp 0x442b3b
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x442bb8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12b4], eax
mov eax, dword [ebp - 0x12b4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442baa
jmp 0x442bb8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12b4]
mov dword [ebp - 0x1c], edx
jmp 0x442b7e
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12b8], 0
jmp 0x442bdc
mov ecx, dword [ebp - 0x12b8]
add ecx, 1
mov dword [ebp - 0x12b8], ecx
cmp dword [ebp - 0x12b8], 4
jge 0x442c29
cmp dword [ebp - 0x1c], 0
jge 0x442bf3
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442c09
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x12bc], 0xfa
lea edx, [ebp - 0x12bc]
push edx
lea eax, [ebp - 0x14b8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x442bcd
mov dword [ebp - 0x14bc], 0
jmp 0x442c44
mov ecx, dword [ebp - 0x14bc]
add ecx, 1
mov dword [ebp - 0x14bc], ecx
cmp dword [ebp - 0x14bc], 4
jge 0x442c91
cmp dword [ebp - 0x1c], 0
jge 0x442c5b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442c71
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14c0], 0xfa
lea edx, [ebp - 0x14c0]
push edx
lea eax, [ebp - 0x16b8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x442c35
mov dword [ebp - 4], 9
mov dword [ebp - 0x16bc], 0xffffffff
mov dword [ebp - 0x16c0], 0
jmp 0x442cbd
mov ecx, dword [ebp - 0x16c0]
add ecx, 1
mov dword [ebp - 0x16c0], ecx
cmp dword [ebp - 0x16c0], 0
jge 0x442cef
mov eax, dword [ebp - 0x16c0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x442ce4
mov edx, dword [ebp - 0x16bc]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x442cae
mov dword [ebp - 4], 0xfffffffe
jmp 0x442d0f
mov dword [ebp - 0x16c4], 0
jmp 0x442d2a
mov edx, dword [ebp - 0x16c4]
add edx, 1
mov dword [ebp - 0x16c4], edx
cmp dword [ebp - 0x16c4], 1
jge 0x442d41
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x16c4]
mov dword [ebp - 0x1c], eax
jmp 0x442d1b
cmp dword [ebp - 0x1c], 0
jge 0x442d4f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442d67
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x16c8], 0
jmp 0x442d82
mov edx, dword [ebp - 0x16c8]
add edx, 1
mov dword [ebp - 0x16c8], edx
cmp dword [ebp - 0x16c8], 2
jge 0x442dcf
mov eax, dword [ebp - 0x16c8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x442db1
mov eax, dword [ebp - 0x16c8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x442dc1
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x16c8]
mov dword [ebp - 0x1c], edx
jmp 0x442dcd
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x16c8]
mov dword [ebp - 0x1c], eax
jmp 0x442d73
mov ecx, 1
test ecx, ecx
je 0x442e09
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x16cc], eax
mov eax, dword [ebp - 0x16cc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442dfb
jmp 0x442e09
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x16cc]
mov dword [ebp - 0x1c], edx
jmp 0x442dcf
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x16d0], 0
jmp 0x442e2d
mov ecx, dword [ebp - 0x16d0]
add ecx, 1
mov dword [ebp - 0x16d0], ecx
cmp dword [ebp - 0x16d0], 0
jge 0x442e6e
cmp dword [ebp - 0x1c], 0
jge 0x442e44
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442e5a
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x18c8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x442e1e
mov eax, 1
test eax, eax
je 0x442ea8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18cc], eax
mov eax, dword [ebp - 0x18cc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442e9a
jmp 0x442ea8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18cc]
mov dword [ebp - 0x1c], edx
jmp 0x442e6e
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x18d0], 0xffffffff
mov dword [ebp - 0x18d4], 0
jmp 0x442edd
mov ecx, dword [ebp - 0x18d4]
add ecx, 1
mov dword [ebp - 0x18d4], ecx
cmp dword [ebp - 0x18d4], 1
jge 0x442f0f
mov eax, dword [ebp - 0x18d4]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x442f04
mov edx, dword [ebp - 0x18d0]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x442ece
mov dword [ebp - 4], 0xfffffffe
jmp 0x442f2f
mov dword [ebp - 0x18d8], 0
jmp 0x442f4a
mov edx, dword [ebp - 0x18d8]
add edx, 1
mov dword [ebp - 0x18d8], edx
cmp dword [ebp - 0x18d8], 1
jge 0x442f8b
cmp dword [ebp - 0x1c], 0
jge 0x442f61
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442f77
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1ad0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x442f3b
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1ad4], 0xffffffff
mov dword [ebp - 0x1ad8], 0
jmp 0x442fb7
mov eax, dword [ebp - 0x1ad8]
add eax, 1
mov dword [ebp - 0x1ad8], eax
cmp dword [ebp - 0x1ad8], 2
jge 0x442fe9
mov eax, dword [ebp - 0x1ad8]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x442fde
mov edx, dword [ebp - 0x1ad4]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x442fa8
mov dword [ebp - 4], 0xfffffffe
jmp 0x443009
mov dword [ebp - 0x1adc], 0
jmp 0x443024
cmp dword [ebp - 0x1adc], 4
jge 0x44303b