Function at 0x445bd0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e288
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff138
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0xd0], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov eax, 1
test eax, eax
je 0x445c52
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x445c3d
jmp 0x445c52
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x445c17
mov ecx, dword [ebp - 0x1c]
add ecx, 0xd
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], 0
mov edx, 1
test edx, edx
je 0x445c9d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x445c88
jmp 0x445c9d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
jmp 0x445c62
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
jmp 0x445cd4
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x19
jge 0x445cfa
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x445ccb
mov ecx, dword [ebp - 0x1c]
add ecx, 0x19
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x445d34
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x445d29
jmp 0x445d34
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edx
jmp 0x445d03
mov eax, dword [ebp - 0x1c]
add eax, 9
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], 0
mov ecx, 1
test ecx, ecx
je 0x445d7f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x445d6a
jmp 0x445d7f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
jmp 0x445d44
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1d
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x50], 0
mov edx, 1
test edx, edx
je 0x445dca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x445db5
jmp 0x445dca
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
jmp 0x445d8f
mov ecx, dword [ebp - 0x1c]
add ecx, 0x15
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x445e04
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x445df9
jmp 0x445e04
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x58]
mov dword [ebp - 0x1c], edx
jmp 0x445dd3
mov eax, dword [ebp - 0x1c]
add eax, 0x1b
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x445e3e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x445e33
jmp 0x445e3e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], edx
jmp 0x445e0d
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x60], 0
mov ecx, 1
test ecx, ecx
je 0x445e89
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x445e74
jmp 0x445e89
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x445e4e
mov ecx, dword [ebp - 0x1c]
add ecx, 0xc
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x70], 2
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
jmp 0x445ec0
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0xb
jge 0x445ee6
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c], eax
jmp 0x445eb7
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x7c], 0
jmp 0x445f01
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 7
jge 0x445f12
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jmp 0x445ef8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x445f24
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x445f3c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x80], 0
jmp 0x445f4e
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 6
jge 0x445f7f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x80]
mov dword [ebp - 0x1c], eax
jge 0x445f67
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445f7d
mov dword [ebp - 0x1c], 0
jmp 0x445f45
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x8c], 2
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x94], 0
jmp 0x445fc2
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 0
jge 0x446003
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x88]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
jmp 0x445fb3
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x98], 0
jmp 0x44602b
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 2
jge 0x446066
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44605a
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x446061
and eax, 0xbc614e
jmp 0x446064
mov dword [ebp - 0x1c], eax
jmp 0x44601c
mov dword [ebp - 4], 0xfffffffe
call fcn.00446074
jmp 0x44607c
mov dword [ebp - 0x9c], 0
jmp 0x446097
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
cmp dword [ebp - 0x9c], 2
jge 0x4460ce
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
jge 0x4460b6
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4460cc
mov dword [ebp - 0x1c], 0
jmp 0x446088
mov dword [ebp - 0xa0], 0
mov edx, 1
test edx, edx
je 0x446122
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x446104
jmp 0x446122
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xa0]
add eax, 1
mov dword [ebp - 0xa0], eax
jmp 0x4460d8
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x446165
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x446157
jmp 0x446165
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], edx
jmp 0x44612b
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4461a8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44619a
jmp 0x4461a8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xac]
mov dword [ebp - 0x1c], edx
jmp 0x44616e
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb0], 0
jmp 0x4461cc
mov ecx, dword [ebp - 0xb0]
add ecx, 1
mov dword [ebp - 0xb0], ecx
cmp dword [ebp - 0xb0], 2
jge 0x4461e3
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], edx
jmp 0x4461bd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4461f5
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44620d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0xb4], 0
jmp 0x44622f
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 6
jge 0x44626a
mov eax, dword [ebp - 0xb4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44625e
mov eax, dword [ebp - 0xb4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x446265
and eax, 0xbc614e
jmp 0x446268
mov dword [ebp - 0x1c], eax
jmp 0x446220
mov dword [ebp - 4], 0xfffffffe
call fcn.00446278
jmp 0x446280
mov dword [ebp - 0xb8], 0
jmp 0x44629b
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 7
jge 0x4462d2
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], eax
jge 0x4462ba
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4462d0
mov dword [ebp - 0x1c], 0
jmp 0x44628c
mov dword [ebp - 0xbc], 0
jmp 0x4462ed
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 1
jge 0x446304
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], eax
jmp 0x4462de
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x446316
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44632e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc0], 0
jmp 0x446349
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 3
jge 0x446380
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], eax
jge 0x446368
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44637e
mov dword [ebp - 0x1c], 0
jmp 0x44633a
mov dword [ebp - 0xc4], 0
jmp 0x44639b
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 2
jge 0x4463d2
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
jge 0x4463ba
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4463d0
mov dword [ebp - 0x1c], 0
jmp 0x44638c
mov dword [ebp - 0xc8], 0
jmp 0x4463ed
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 5
jge 0x44643a
cmp dword [ebp - 0x1c], 0
jge 0x446404
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44641a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xcc], 0xfa
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0x2c8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4463de
mov ecx, 1
test ecx, ecx
je 0x446474
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x446466
jmp 0x446474
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2cc]
mov dword [ebp - 0x1c], edx
jmp 0x44643a
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0x2d4], 1
mov dword [ebp - 0x2d8], 2
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2e0], 0
jmp 0x4464c0
mov ecx, dword [ebp - 0x2e0]
add ecx, 1
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 4
jge 0x446501
mov edx, dword [ebp - 0x2d0]
add edx, dword [ebp - 0x2d4]
mov dword [ebp - 0x2d8], edx
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2d4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x1c], edx
jmp 0x4464b1
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x2ec], 2
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2f4], 0
jmp 0x44654d
mov ecx, dword [ebp - 0x2f4]
add ecx, 1
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 7
jge 0x44658e
mov edx, dword [ebp - 0x2e4]
add edx, dword [ebp - 0x2e8]
mov dword [ebp - 0x2ec], edx
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2e4], eax
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp - 0x2e8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2ec]
mov dword [ebp - 0x1c], edx
jmp 0x44653e
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x2f8], 0
jmp 0x4465b9
mov ecx, dword [ebp - 0x2f8]
add ecx, 1
mov dword [ebp - 0x2f8], ecx
cmp dword [ebp - 0x2f8], 2
jge 0x4465f4
mov eax, dword [ebp - 0x2f8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4465e8
mov eax, dword [ebp - 0x2f8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4465ef
and eax, 0xbc614e
jmp 0x4465f2
mov dword [ebp - 0x1c], eax
jmp 0x4465aa
mov dword [ebp - 4], 0xfffffffe
call fcn.00446602
jmp 0x44660a
mov dword [ebp - 0x2fc], 0
jmp 0x446625
mov edx, dword [ebp - 0x2fc]
add edx, 1
mov dword [ebp - 0x2fc], edx
cmp dword [ebp - 0x2fc], 6
jge 0x44663c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x1c], eax
jmp 0x446616
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44664e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x446666
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x300], 0
jmp 0x446688
mov edx, dword [ebp - 0x300]
add edx, 1
mov dword [ebp - 0x300], edx
cmp dword [ebp - 0x300], 3
jge 0x4466c3
mov eax, dword [ebp - 0x300]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4466b7
mov eax, dword [ebp - 0x300]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4466be
and eax, 0xbc614e
jmp 0x4466c1
mov dword [ebp - 0x1c], eax
jmp 0x446679
mov dword [ebp - 4], 0xfffffffe
call fcn.004466d1
jmp 0x4466d9
mov dword [ebp - 0x304], 1
mov dword [ebp - 0x308], 1
mov dword [ebp - 0x30c], 2
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x314], 0
jmp 0x44671c
mov edx, dword [ebp - 0x314]
add edx, 1
mov dword [ebp - 0x314], edx
cmp dword [ebp - 0x314], 5
jge 0x44675d
mov eax, dword [ebp - 0x304]
add eax, dword [ebp - 0x308]
mov dword [ebp - 0x30c], eax
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x304], ecx
mov edx, dword [ebp - 0x30c]
mov dword [ebp - 0x308], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x30c]
mov dword [ebp - 0x1c], eax
jmp 0x44670d
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4467a0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x318]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x446792
jmp 0x4467a0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x318]
mov dword [ebp - 0x1c], edx
jmp 0x446766
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x31c], 0
jmp 0x4467cb
mov ecx, dword [ebp - 0x31c]
add ecx, 1
mov dword [ebp - 0x31c], ecx
cmp dword [ebp - 0x31c], 4
jge 0x446806
mov eax, dword [ebp - 0x31c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4467fa
mov eax, dword [ebp - 0x31c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x446801
and eax, 0xbc614e
jmp 0x446804
mov dword [ebp - 0x1c], eax
jmp 0x4467bc
mov dword [ebp - 4], 0xfffffffe
call fcn.00446814
jmp 0x44681c
mov dword [ebp - 0x320], 1
mov dword [ebp - 0x324], 1
mov dword [ebp - 0x328], 2
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x330], 0
jmp 0x44685f
mov edx, dword [ebp - 0x330]
add edx, 1
mov dword [ebp - 0x330], edx
cmp dword [ebp - 0x330], 7
jge 0x4468a0
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x324]
mov dword [ebp - 0x328], eax
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x320], ecx
mov edx, dword [ebp - 0x328]
mov dword [ebp - 0x324], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x328]
mov dword [ebp - 0x1c], eax
jmp 0x446850
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x334], 0
jmp 0x4468c4
mov edx, dword [ebp - 0x334]
add edx, 1
mov dword [ebp - 0x334], edx
cmp dword [ebp - 0x334], 0
jge 0x4468db
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x334]
mov dword [ebp - 0x1c], eax
jmp 0x4468b5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4468ed
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x446905
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x338], 0
jmp 0x446920
mov edx, dword [ebp - 0x338]
add edx, 1
mov dword [ebp - 0x338], edx
cmp dword [ebp - 0x338], 4
jge 0x446937
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x338]
mov dword [ebp - 0x1c], eax
jmp 0x446911
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x446949
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x446961
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x33c], 0
jmp 0x446983
mov edx, dword [ebp - 0x33c]
add edx, 1
mov dword [ebp - 0x33c], edx
cmp dword [ebp - 0x33c], 4
jge 0x4469be
mov eax, dword [ebp - 0x33c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4469b2
mov eax, dword [ebp - 0x33c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4469b9
and eax, 0xbc614e
jmp 0x4469bc
mov dword [ebp - 0x1c], eax
jmp 0x446974
mov dword [ebp - 4], 0xfffffffe
call fcn.004469cc
jmp 0x4469d4
mov dword [ebp - 4], 6
mov dword [ebp - 0x340], 0
jmp 0x4469f6
mov edx, dword [ebp - 0x340]
add edx, 1
mov dword [ebp - 0x340], edx
cmp dword [ebp - 0x340], 0
jge 0x446a31
mov eax, dword [ebp - 0x340]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x446a25
mov eax, dword [ebp - 0x340]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x446a2c
and eax, 0xbc614e
jmp 0x446a2f
mov dword [ebp - 0x1c], eax
jmp 0x4469e7
mov dword [ebp - 4], 0xfffffffe
call fcn.00446a3f
jmp 0x446a47
mov dword [ebp - 0x344], 1
mov dword [ebp - 0x348], 1
mov dword [ebp - 0x34c], 2
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x354], 0
jmp 0x446a8a
mov edx, dword [ebp - 0x354]
add edx, 1
mov dword [ebp - 0x354], edx
cmp dword [ebp - 0x354], 1
jge 0x446acb
mov eax, dword [ebp - 0x344]
add eax, dword [ebp - 0x348]
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x348]
mov dword [ebp - 0x344], ecx
mov edx, dword [ebp - 0x34c]
mov dword [ebp - 0x348], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x34c]
mov dword [ebp - 0x1c], eax
jmp 0x446a7b
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x358], 1
mov dword [ebp - 0x35c], 1
mov dword [ebp - 0x360], 2
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x368], 0
jmp 0x446b17
mov edx, dword [ebp - 0x368]
add edx, 1
mov dword [ebp - 0x368], edx
cmp dword [ebp - 0x368], 0
jge 0x446b58
mov eax, dword [ebp - 0x358]
add eax, dword [ebp - 0x35c]
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x35c]
mov dword [ebp - 0x358], ecx
mov edx, dword [ebp - 0x360]
mov dword [ebp - 0x35c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x360]
mov dword [ebp - 0x1c], eax
jmp 0x446b08
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x36c], 0
mov edx, 1
test edx, edx
je 0x446bb2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x446b94
jmp 0x446bb2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x36c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x36c]
add eax, 1
mov dword [ebp - 0x36c], eax
jmp 0x446b68
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x446bf5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x446be7
jmp 0x446bf5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x374]
mov dword [ebp - 0x1c], edx
jmp 0x446bbb
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x378], 0
jmp 0x446c20
mov ecx, dword [ebp - 0x378]
add ecx, 1
mov dword [ebp - 0x378], ecx
cmp dword [ebp - 0x378], 2
jge 0x446c5b
mov eax, dword [ebp - 0x378]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x446c4f
mov eax, dword [ebp - 0x378]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x446c56
and eax, 0xbc614e
jmp 0x446c59
mov dword [ebp - 0x1c], eax
jmp 0x446c11
mov dword [ebp - 4], 0xfffffffe
call fcn.00446c69
jmp 0x446c71
mov dword [ebp - 0x37c], 0
jmp 0x446c8c
mov edx, dword [ebp - 0x37c]
add edx, 1
mov dword [ebp - 0x37c], edx
cmp dword [ebp - 0x37c], 1
jge 0x446cc3
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x37c]
mov dword [ebp - 0x1c], eax
jge 0x446cab
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x446cc1
mov dword [ebp - 0x1c], 0
jmp 0x446c7d
mov edx, 1
test edx, edx
je 0x446cfd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x446cef
jmp 0x446cfd
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x380]
mov dword [ebp - 0x1c], edx
jmp 0x446cc3
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x384], 0
mov ecx, 1
test ecx, ecx
je 0x446d5a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x388]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x446d3c
jmp 0x446d5a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x384]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x384]
add eax, 1
mov dword [ebp - 0x384], eax
jmp 0x446d10
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38c], 0
mov edx, 1
test edx, edx
je 0x446db7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x390]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x446d99
jmp 0x446db7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x38c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38c]
add eax, 1
mov dword [ebp - 0x38c], eax
jmp 0x446d6d
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x394], 0
jmp 0x446ddb
mov edx, dword [ebp - 0x394]
add edx, 1
mov dword [ebp - 0x394], edx
cmp dword [ebp - 0x394], 0
jge 0x446df2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x394]
mov dword [ebp - 0x1c], eax
jmp 0x446dcc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x446e04
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x446e1c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x398], 0
jmp 0x446e37
mov edx, dword [ebp - 0x398]
add edx, 1
mov dword [ebp - 0x398], edx
cmp dword [ebp - 0x398], 2
jge 0x446e84
cmp dword [ebp - 0x1c], 0
jge 0x446e4e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x446e64
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x39c], 0xfa
lea edx, [ebp - 0x39c]
push edx
lea eax, [ebp - 0x598]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x446e28
mov dword [ebp - 0x59c], 0
jmp 0x446e9f
mov ecx, dword [ebp - 0x59c]
add ecx, 1
mov dword [ebp - 0x59c], ecx
cmp dword [ebp - 0x59c], 4
jge 0x446eec
cmp dword [ebp - 0x1c], 0
jge 0x446eb6
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x446ecc
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x5a0], 0xfa
lea edx, [ebp - 0x5a0]
push edx
lea eax, [ebp - 0x798]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x446e90
mov dword [ebp - 4], 8
mov dword [ebp - 0x79c], 0
jmp 0x446f0e
mov ecx, dword [ebp - 0x79c]
add ecx, 1
mov dword [ebp - 0x79c], ecx
cmp dword [ebp - 0x79c], 2
jge 0x446f49
mov eax, dword [ebp - 0x79c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x446f3d
mov eax, dword [ebp - 0x79c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x446f44
and eax, 0xbc614e
jmp 0x446f47
mov dword [ebp - 0x1c], eax
jmp 0x446eff
mov dword [ebp - 4], 0xfffffffe
call fcn.00446f57
jmp 0x446f5f
mov dword [ebp - 0x7a0], 0
mov edx, 1
test edx, edx
je 0x446fb3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0x7a4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x446f95
jmp 0x446fb3
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x7a0]
add eax, 1
mov dword [ebp - 0x7a0], eax
jmp 0x446f69
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x7a8], 0
jmp 0x446fd7
mov edx, dword [ebp - 0x7a8]
add edx, 1
mov dword [ebp - 0x7a8], edx
cmp dword [ebp - 0x7a8], 4
jge 0x446fee
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x1c], eax
jmp 0x446fc8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x447000
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x447018
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x7ac], 0
jmp 0x447033
mov edx, dword [ebp - 0x7ac]
add edx, 1
mov dword [ebp - 0x7ac], edx
cmp dword [ebp - 0x7ac], 4
jge 0x447080
cmp dword [ebp - 0x1c], 0
jge 0x44704a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x447060
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x7b0], 0xfa
lea edx, [ebp - 0x7b0]
push edx
lea eax, [ebp - 0x9a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x447024
mov dword [ebp - 0x9ac], 1
mov dword [ebp - 0x9b0], 1
mov dword [ebp - 0x9b4], 2
mov dword [ebp - 0x9b8], 0
mov dword [ebp - 0x9bc], 0
jmp 0x4470c3
mov ecx, dword [ebp - 0x9bc]
add ecx, 1
mov dword [ebp - 0x9bc], ecx
cmp dword [ebp - 0x9bc], 2
jge 0x447104
mov edx, dword [ebp - 0x9ac]
add edx, dword [ebp - 0x9b0]
mov dword [ebp - 0x9b4], edx
mov eax, dword [ebp - 0x9b0]
mov dword [ebp - 0x9ac], eax
mov ecx, dword [ebp - 0x9b4]
mov dword [ebp - 0x9b0], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x9b4]
mov dword [ebp - 0x1c], edx
jmp 0x4470b4
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x9c0], 0
jmp 0x447128
mov ecx, dword [ebp - 0x9c0]
add ecx, 1
mov dword [ebp - 0x9c0], ecx
cmp dword [ebp - 0x9c0], 3
jge 0x44715f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x9c0]
mov dword [ebp - 0x1c], edx
jge 0x447147
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44715d
mov dword [ebp - 0x1c], 0
jmp 0x447119
mov dword [ebp - 0x9c4], 0
jmp 0x44717a
mov edx, dword [ebp - 0x9c4]
add edx, 1
mov dword [ebp - 0x9c4], edx
cmp dword [ebp - 0x9c4], 3
jge 0x447191
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x9c4]
mov dword [ebp - 0x1c], eax
jmp 0x44716b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4471a3
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4471bb
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4471f5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x9c8], eax
mov eax, dword [ebp - 0x9c8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4471e7
jmp 0x4471f5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x9c8]
mov dword [ebp - 0x1c], edx
jmp 0x4471bb
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 9
mov dword [ebp - 0x9cc], 0
jmp 0x447220
cmp dword [ebp - 0x9cc], 3
jge 0x44725b
mov eax, dword [ebp - 0x9cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44724f
mov eax, dword [ebp - 0x9cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x447256
and eax, 0xbc614e
jmp 0x447259
mov dword [ebp - 4], 0xfffffffe
call fcn.00447269
jmp 0x447271
mov dword [ebp - 0x9d0], 0
jmp 0x44728c