Function at 0x44a6c0
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x511018
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x2310
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x34], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x44a719
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xf
jge 0x44a757
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44a73f
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44a74c
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
jmp 0x44a755
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x44a710
mov dword [ebp - 0x24], 0
jmp 0x44a769
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 0x3c
jge 0x44a77a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x44a760
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a78c
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a7a4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44a7d5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44a7ca
jmp 0x44a7d5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x44a7a4
mov eax, dword [ebp - 0x1c]
add eax, 0x34
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0
jmp 0x44a7f0
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0x18
jge 0x44a801
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jmp 0x44a7e7
cmp dword [ebp - 0x1c], 0
jge 0x44a80f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a827
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 0
jmp 0x44a839
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 9
jge 0x44a877
cmp dword [ebp - 0x1c], 0
jge 0x44a84d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a863
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44a830
mov dword [ebp - 0x234], 0
jmp 0x44a892
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0xb
jge 0x44a8a9
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x234]
mov dword [ebp - 0x1c], ecx
jmp 0x44a883
cmp dword [ebp - 0x1c], 0
jge 0x44a8b7
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a8cf
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x238], 0
jmp 0x44a8ea
mov edx, dword [ebp - 0x238]
add edx, 1
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 4
jge 0x44a937
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44a919
mov eax, dword [ebp - 0x238]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44a929
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x238]
mov dword [ebp - 0x1c], edx
jmp 0x44a935
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x238]
mov dword [ebp - 0x1c], eax
jmp 0x44a8db
mov dword [ebp - 4], 0
mov dword [ebp - 0x23c], 0xffffffff
mov dword [ebp - 0x240], 0
jmp 0x44a963
mov ecx, dword [ebp - 0x240]
add ecx, 1
mov dword [ebp - 0x240], ecx
cmp dword [ebp - 0x240], 7
jge 0x44a995
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44a98a
mov edx, dword [ebp - 0x23c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44a954
mov dword [ebp - 4], 0xfffffffe
jmp 0x44a9b5
mov dword [ebp - 0x244], 0
jmp 0x44a9d0
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 7
jge 0x44aa11
cmp dword [ebp - 0x1c], 0
jge 0x44a9e7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a9fd
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44a9c1
mov dword [ebp - 0x444], 0
jmp 0x44aa2c
mov eax, dword [ebp - 0x444]
add eax, 1
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 9
jge 0x44aa6d
cmp dword [ebp - 0x1c], 0
jge 0x44aa43
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44aa59
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x640]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44aa1d
mov dword [ebp - 0x644], 0
jmp 0x44aa88
mov eax, dword [ebp - 0x644]
add eax, 1
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 7
jge 0x44aad5
cmp dword [ebp - 0x1c], 0
jge 0x44aa9f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44aab5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x648], 0xfa
lea edx, [ebp - 0x648]
push edx
lea eax, [ebp - 0x840]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44aa79
mov dword [ebp - 4], 1
mov dword [ebp - 0x844], 0xffffffff
mov dword [ebp - 0x848], 0
jmp 0x44ab01
mov ecx, dword [ebp - 0x848]
add ecx, 1
mov dword [ebp - 0x848], ecx
cmp dword [ebp - 0x848], 6
jge 0x44ab33
mov eax, dword [ebp - 0x848]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44ab28
mov edx, dword [ebp - 0x844]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44aaf2
mov dword [ebp - 4], 0xfffffffe
jmp 0x44ab53
mov dword [ebp - 0x84c], 0
jmp 0x44ab6e
mov edx, dword [ebp - 0x84c]
add edx, 1
mov dword [ebp - 0x84c], edx
cmp dword [ebp - 0x84c], 0xa
jge 0x44abbb
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44ab9d
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44abad
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], edx
jmp 0x44abb9
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], eax
jmp 0x44ab5f
mov dword [ebp - 0x850], 0
jmp 0x44abd6
mov ecx, dword [ebp - 0x850]
add ecx, 1
mov dword [ebp - 0x850], ecx
cmp dword [ebp - 0x850], 4
jge 0x44ac23
cmp dword [ebp - 0x1c], 0
jge 0x44abed
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ac03
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x854], 0xfa
lea edx, [ebp - 0x854]
push edx
lea eax, [ebp - 0xa50]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44abc7
mov dword [ebp - 0xa54], 0
jmp 0x44ac3e
mov ecx, dword [ebp - 0xa54]
add ecx, 1
mov dword [ebp - 0xa54], ecx
cmp dword [ebp - 0xa54], 3
jge 0x44ac8b
mov eax, dword [ebp - 0xa54]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44ac6d
mov eax, dword [ebp - 0xa54]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44ac7d
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa54]
mov dword [ebp - 0x1c], edx
jmp 0x44ac89
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xa54]
mov dword [ebp - 0x1c], eax
jmp 0x44ac2f
mov dword [ebp - 0xa58], 0
jmp 0x44aca6
mov ecx, dword [ebp - 0xa58]
add ecx, 1
mov dword [ebp - 0xa58], ecx
cmp dword [ebp - 0xa58], 0xd
jge 0x44acf3
cmp dword [ebp - 0x1c], 0
jge 0x44acbd
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44acd3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa5c], 0xfa
lea edx, [ebp - 0xa5c]
push edx
lea eax, [ebp - 0xc58]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44ac97
mov dword [ebp - 0xc5c], 0
jmp 0x44ad0e
mov ecx, dword [ebp - 0xc5c]
add ecx, 1
mov dword [ebp - 0xc5c], ecx
cmp dword [ebp - 0xc5c], 0
jge 0x44ad25
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xc5c]
mov dword [ebp - 0x1c], edx
jmp 0x44acff
cmp dword [ebp - 0x1c], 0
jge 0x44ad33
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ad4b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc60], 0
jmp 0x44ad66
mov edx, dword [ebp - 0xc60]
add edx, 1
mov dword [ebp - 0xc60], edx
cmp dword [ebp - 0xc60], 4
jge 0x44ad7d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc60]
mov dword [ebp - 0x1c], eax
jmp 0x44ad57
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ad8f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ada7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc64], 0
jmp 0x44adc2
mov edx, dword [ebp - 0xc64]
add edx, 1
mov dword [ebp - 0xc64], edx
cmp dword [ebp - 0xc64], 7
jge 0x44ae03
cmp dword [ebp - 0x1c], 0
jge 0x44add9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44adef
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe60]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44adb3
mov eax, 1
test eax, eax
je 0x44ae3d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp - 0xe64]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44ae2f
jmp 0x44ae3d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe64]
mov dword [ebp - 0x1c], edx
jmp 0x44ae03
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe68], 0
jmp 0x44ae61
mov ecx, dword [ebp - 0xe68]
add ecx, 1
mov dword [ebp - 0xe68], ecx
cmp dword [ebp - 0xe68], 6
jge 0x44ae78
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xe68]
mov dword [ebp - 0x1c], edx
jmp 0x44ae52
cmp dword [ebp - 0x1c], 0
jge 0x44ae86
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ae9e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe6c], 0
jmp 0x44aeb9
mov edx, dword [ebp - 0xe6c]
add edx, 1
mov dword [ebp - 0xe6c], edx
cmp dword [ebp - 0xe6c], 7
jge 0x44aed0
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xe6c]
mov dword [ebp - 0x1c], eax
jmp 0x44aeaa
cmp dword [ebp - 0x1c], 0
jge 0x44aede
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44aef6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0xe70], 0xffffffff
mov dword [ebp - 0xe74], 0
jmp 0x44af22
mov edx, dword [ebp - 0xe74]
add edx, 1
mov dword [ebp - 0xe74], edx
cmp dword [ebp - 0xe74], 5
jge 0x44af54
mov eax, dword [ebp - 0xe74]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44af49
mov edx, dword [ebp - 0xe70]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44af13
mov dword [ebp - 4], 0xfffffffe
jmp 0x44af74
mov edx, 1
test edx, edx
je 0x44afae
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe78], eax
mov eax, dword [ebp - 0xe78]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44afa0
jmp 0x44afae
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe78]
mov dword [ebp - 0x1c], edx
jmp 0x44af74
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0xe7c], 0xffffffff
mov dword [ebp - 0xe80], 0
jmp 0x44afe3
mov ecx, dword [ebp - 0xe80]
add ecx, 1
mov dword [ebp - 0xe80], ecx
cmp dword [ebp - 0xe80], 6
jge 0x44b015
mov eax, dword [ebp - 0xe80]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44b00a
mov edx, dword [ebp - 0xe7c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44afd4
mov dword [ebp - 4], 0xfffffffe
jmp 0x44b035
mov dword [ebp - 0xe84], 0
jmp 0x44b050
mov edx, dword [ebp - 0xe84]
add edx, 1
mov dword [ebp - 0xe84], edx
cmp dword [ebp - 0xe84], 2
jge 0x44b091
cmp dword [ebp - 0x1c], 0
jge 0x44b067
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b07d
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1080]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44b041
mov dword [ebp - 0x1084], 0
jmp 0x44b0ac
mov eax, dword [ebp - 0x1084]
add eax, 1
mov dword [ebp - 0x1084], eax
cmp dword [ebp - 0x1084], 0
jge 0x44b0c3
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x1084]
mov dword [ebp - 0x1c], ecx
jmp 0x44b09d
cmp dword [ebp - 0x1c], 0
jge 0x44b0d1
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b0e9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1088], 0
jmp 0x44b104
mov edx, dword [ebp - 0x1088]
add edx, 1
mov dword [ebp - 0x1088], edx
cmp dword [ebp - 0x1088], 4
jge 0x44b11b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1088]
mov dword [ebp - 0x1c], eax
jmp 0x44b0f5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b12d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b145
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x108c], 0
jmp 0x44b160
mov edx, dword [ebp - 0x108c]
add edx, 1
mov dword [ebp - 0x108c], edx
cmp dword [ebp - 0x108c], 3
jge 0x44b177
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x108c]
mov dword [ebp - 0x1c], eax
jmp 0x44b151
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b189
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b1a1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1090], 0
jmp 0x44b1bc
mov edx, dword [ebp - 0x1090]
add edx, 1
mov dword [ebp - 0x1090], edx
cmp dword [ebp - 0x1090], 2
jge 0x44b1fd
cmp dword [ebp - 0x1c], 0
jge 0x44b1d3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b1e9
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1288]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44b1ad
mov eax, 1
test eax, eax
je 0x44b237
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x128c], eax
mov eax, dword [ebp - 0x128c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44b229
jmp 0x44b237
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x128c]
mov dword [ebp - 0x1c], edx
jmp 0x44b1fd
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x1290], 0xffffffff
mov dword [ebp - 0x1294], 0
jmp 0x44b26c
mov ecx, dword [ebp - 0x1294]
add ecx, 1
mov dword [ebp - 0x1294], ecx
cmp dword [ebp - 0x1294], 0
jge 0x44b29e
mov eax, dword [ebp - 0x1294]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44b293
mov edx, dword [ebp - 0x1290]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44b25d
mov dword [ebp - 4], 0xfffffffe
jmp 0x44b2be
mov edx, 1
test edx, edx
je 0x44b2f8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1298], eax
mov eax, dword [ebp - 0x1298]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44b2ea
jmp 0x44b2f8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1298]
mov dword [ebp - 0x1c], edx
jmp 0x44b2be
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x129c], 0
jmp 0x44b31c
mov ecx, dword [ebp - 0x129c]
add ecx, 1
mov dword [ebp - 0x129c], ecx
cmp dword [ebp - 0x129c], 0
jge 0x44b333
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x129c]
mov dword [ebp - 0x1c], edx
jmp 0x44b30d
cmp dword [ebp - 0x1c], 0
jge 0x44b341
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b359
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44b393
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12a0], eax
mov eax, dword [ebp - 0x12a0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44b385
jmp 0x44b393
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12a0]
mov dword [ebp - 0x1c], edx
jmp 0x44b359
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12a4], 0
jmp 0x44b3b4
mov ecx, dword [ebp - 0x12a4]
add ecx, 1
mov dword [ebp - 0x12a4], ecx
cmp dword [ebp - 0x12a4], 2
jge 0x44b3cb
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x12a4]
mov dword [ebp - 0x1c], edx
jmp 0x44b3a5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b3dd
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b3f5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12a8], 0
jmp 0x44b410
mov edx, dword [ebp - 0x12a8]
add edx, 1
mov dword [ebp - 0x12a8], edx
cmp dword [ebp - 0x12a8], 0
jge 0x44b427
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x12a8]
mov dword [ebp - 0x1c], eax
jmp 0x44b401
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b439
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b451
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12ac], 0
jmp 0x44b46c
mov edx, dword [ebp - 0x12ac]
add edx, 1
mov dword [ebp - 0x12ac], edx
cmp dword [ebp - 0x12ac], 4
jge 0x44b4ad
cmp dword [ebp - 0x1c], 0
jge 0x44b483
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b499
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x14a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44b45d
mov dword [ebp - 0x14ac], 0
jmp 0x44b4c8
mov eax, dword [ebp - 0x14ac]
add eax, 1
mov dword [ebp - 0x14ac], eax
cmp dword [ebp - 0x14ac], 1
jge 0x44b4df
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x14ac]
mov dword [ebp - 0x1c], ecx
jmp 0x44b4b9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b4f1
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b509
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14b0], 0
jmp 0x44b524
mov edx, dword [ebp - 0x14b0]
add edx, 1
mov dword [ebp - 0x14b0], edx
cmp dword [ebp - 0x14b0], 4
jge 0x44b571
cmp dword [ebp - 0x1c], 0
jge 0x44b53b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b551
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14b4], 0xfa
lea edx, [ebp - 0x14b4]
push edx
lea eax, [ebp - 0x16b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44b515
mov dword [ebp - 0x16b4], 0
jmp 0x44b58c
mov ecx, dword [ebp - 0x16b4]
add ecx, 1
mov dword [ebp - 0x16b4], ecx
cmp dword [ebp - 0x16b4], 3
jge 0x44b5a3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x16b4]
mov dword [ebp - 0x1c], edx
jmp 0x44b57d
cmp dword [ebp - 0x1c], 0
jge 0x44b5b1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b5c9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x16b8], 0
jmp 0x44b5e4
mov edx, dword [ebp - 0x16b8]
add edx, 1
mov dword [ebp - 0x16b8], edx
cmp dword [ebp - 0x16b8], 0
jge 0x44b625
cmp dword [ebp - 0x1c], 0
jge 0x44b5fb
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b611
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x18b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44b5d5
mov dword [ebp - 4], 5
mov dword [ebp - 0x18b4], 0xffffffff
mov dword [ebp - 0x18b8], 0
jmp 0x44b651
mov eax, dword [ebp - 0x18b8]
add eax, 1
mov dword [ebp - 0x18b8], eax
cmp dword [ebp - 0x18b8], 0
jge 0x44b683
mov eax, dword [ebp - 0x18b8]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44b678
mov edx, dword [ebp - 0x18b4]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44b642
mov dword [ebp - 4], 0xfffffffe
jmp 0x44b6a3
mov edx, 1
test edx, edx
je 0x44b6dd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18bc], eax
mov eax, dword [ebp - 0x18bc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44b6cf
jmp 0x44b6dd
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18bc]
mov dword [ebp - 0x1c], edx
jmp 0x44b6a3
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44b71d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18c0], eax
mov eax, dword [ebp - 0x18c0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44b70f
jmp 0x44b71d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18c0]
mov dword [ebp - 0x1c], edx
jmp 0x44b6e3
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x18c4], 0xffffffff
mov dword [ebp - 0x18c8], 0
jmp 0x44b752
mov ecx, dword [ebp - 0x18c8]
add ecx, 1
mov dword [ebp - 0x18c8], ecx
cmp dword [ebp - 0x18c8], 1
jge 0x44b784
mov eax, dword [ebp - 0x18c8]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44b779
mov edx, dword [ebp - 0x18c4]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44b743
mov dword [ebp - 4], 0xfffffffe
jmp 0x44b7a4
mov edx, 1
test edx, edx
je 0x44b7de
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18cc], eax
mov eax, dword [ebp - 0x18cc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44b7d0
jmp 0x44b7de
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18cc]
mov dword [ebp - 0x1c], edx
jmp 0x44b7a4
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18d0], 0
jmp 0x44b802
mov ecx, dword [ebp - 0x18d0]
add ecx, 1
mov dword [ebp - 0x18d0], ecx
cmp dword [ebp - 0x18d0], 1
jge 0x44b84f
cmp dword [ebp - 0x1c], 0
jge 0x44b819
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b82f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18d4], 0xfa
lea edx, [ebp - 0x18d4]
push edx
lea eax, [ebp - 0x1ad0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44b7f3
mov dword [ebp - 0x1ad4], 0
jmp 0x44b86a
mov ecx, dword [ebp - 0x1ad4]
add ecx, 1
mov dword [ebp - 0x1ad4], ecx
cmp dword [ebp - 0x1ad4], 4
jge 0x44b881
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1ad4]
mov dword [ebp - 0x1c], edx
jmp 0x44b85b
cmp dword [ebp - 0x1c], 0
jge 0x44b88f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b8a7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44b8e1