Function at 0x44db70
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x511128
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x3320
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x4c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x44dbc9
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x28
jge 0x44dc07
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44dbef
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44dbfc
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
jmp 0x44dc05
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x44dbc0
mov dword [ebp - 0x24], 0
jmp 0x44dc19
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 0x30
jge 0x44dc57
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44dc3f
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44dc4c
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x44dc55
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jmp 0x44dc10
mov dword [ebp - 0x28], 0
jmp 0x44dc69
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0x22
jge 0x44dc7a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x44dc60
cmp dword [ebp - 0x1c], 0
jge 0x44dc88
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44dca0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x44dcc0
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0xe
jge 0x44dce9
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44dcde
mov edx, dword [ebp - 0x2c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44dcb7
mov dword [ebp - 4], 0xfffffffe
jmp 0x44dd09
mov dword [ebp - 4], 1
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x38], 0
jmp 0x44dd29
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0
jge 0x44dd52
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44dd47
mov edx, dword [ebp - 0x34]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44dd20
mov dword [ebp - 4], 0xfffffffe
jmp 0x44dd72
mov dword [ebp - 0x3c], 0
jmp 0x44dd84
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 8
jge 0x44ddc2
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44ddaa
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44ddb7
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
jmp 0x44ddc0
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x44dd7b
mov dword [ebp - 0x40], 0
jmp 0x44ddd4
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 6
jge 0x44de12
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44ddfa
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44de07
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
jmp 0x44de10
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
jmp 0x44ddcb
mov dword [ebp - 0x44], 0
jmp 0x44de24
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 6
jge 0x44de68
cmp dword [ebp - 0x1c], 0
jge 0x44de38
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44de4e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x48], 0xfa
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x248]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44de1b
mov dword [ebp - 0x24c], 0
jmp 0x44de83
mov ecx, dword [ebp - 0x24c]
add ecx, 1
mov dword [ebp - 0x24c], ecx
cmp dword [ebp - 0x24c], 0x16
jge 0x44de9a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], edx
jmp 0x44de74
cmp dword [ebp - 0x1c], 0
jge 0x44dea8
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44dec0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x250], 0
jmp 0x44dedb
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0xb
jge 0x44df1c
cmp dword [ebp - 0x1c], 0
jge 0x44def2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44df08
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x448]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44decc
mov dword [ebp - 0x44c], 0
jmp 0x44df37
mov eax, dword [ebp - 0x44c]
add eax, 1
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0x10
jge 0x44df84
mov eax, dword [ebp - 0x44c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44df66
mov eax, dword [ebp - 0x44c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44df76
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x44c]
mov dword [ebp - 0x1c], edx
jmp 0x44df82
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x44c]
mov dword [ebp - 0x1c], eax
jmp 0x44df28
mov ecx, 1
test ecx, ecx
je 0x44dfbe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44dfb0
jmp 0x44dfbe
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x450]
mov dword [ebp - 0x1c], edx
jmp 0x44df84
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x454], 0
jmp 0x44dfe2
mov ecx, dword [ebp - 0x454]
add ecx, 1
mov dword [ebp - 0x454], ecx
cmp dword [ebp - 0x454], 0
jge 0x44dff9
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x454]
mov dword [ebp - 0x1c], edx
jmp 0x44dfd3
cmp dword [ebp - 0x1c], 0
jge 0x44e007
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e01f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x458], 0
jmp 0x44e03a
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 8
jge 0x44e07b
cmp dword [ebp - 0x1c], 0
jge 0x44e051
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e067
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x650]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e02b
mov dword [ebp - 0x654], 0
jmp 0x44e096
mov eax, dword [ebp - 0x654]
add eax, 1
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 5
jge 0x44e0ad
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x654]
mov dword [ebp - 0x1c], ecx
jmp 0x44e087
cmp dword [ebp - 0x1c], 0
jge 0x44e0bb
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e0d3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x658], 0
jmp 0x44e0ee
mov edx, dword [ebp - 0x658]
add edx, 1
mov dword [ebp - 0x658], edx
cmp dword [ebp - 0x658], 7
jge 0x44e105
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x658]
mov dword [ebp - 0x1c], eax
jmp 0x44e0df
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44e117
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e12f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x65c], 0
jmp 0x44e14a
mov edx, dword [ebp - 0x65c]
add edx, 1
mov dword [ebp - 0x65c], edx
cmp dword [ebp - 0x65c], 0
jge 0x44e197
cmp dword [ebp - 0x1c], 0
jge 0x44e161
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e177
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x660], 0xfa
lea edx, [ebp - 0x660]
push edx
lea eax, [ebp - 0x858]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e13b
mov dword [ebp - 0x85c], 0
jmp 0x44e1b2
mov ecx, dword [ebp - 0x85c]
add ecx, 1
mov dword [ebp - 0x85c], ecx
cmp dword [ebp - 0x85c], 8
jge 0x44e1ff
cmp dword [ebp - 0x1c], 0
jge 0x44e1c9
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e1df
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x860], 0xfa
lea edx, [ebp - 0x860]
push edx
lea eax, [ebp - 0xa58]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e1a3
mov dword [ebp - 0xa5c], 0
jmp 0x44e21a
mov ecx, dword [ebp - 0xa5c]
add ecx, 1
mov dword [ebp - 0xa5c], ecx
cmp dword [ebp - 0xa5c], 8
jge 0x44e25b
cmp dword [ebp - 0x1c], 0
jge 0x44e231
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e247
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc58]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e20b
mov eax, 1
test eax, eax
je 0x44e295
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc5c], eax
mov eax, dword [ebp - 0xc5c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44e287
jmp 0x44e295
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc5c]
mov dword [ebp - 0x1c], edx
jmp 0x44e25b
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc60], 0
jmp 0x44e2b9
mov ecx, dword [ebp - 0xc60]
add ecx, 1
mov dword [ebp - 0xc60], ecx
cmp dword [ebp - 0xc60], 2
jge 0x44e306
cmp dword [ebp - 0x1c], 0
jge 0x44e2d0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e2e6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc64], 0xfa
lea edx, [ebp - 0xc64]
push edx
lea eax, [ebp - 0xe60]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e2aa
mov dword [ebp - 0xe64], 0
jmp 0x44e321
mov ecx, dword [ebp - 0xe64]
add ecx, 1
mov dword [ebp - 0xe64], ecx
cmp dword [ebp - 0xe64], 5
jge 0x44e362
cmp dword [ebp - 0x1c], 0
jge 0x44e338
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e34e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1060]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e312
mov dword [ebp - 0x1064], 0
jmp 0x44e37d
mov eax, dword [ebp - 0x1064]
add eax, 1
mov dword [ebp - 0x1064], eax
cmp dword [ebp - 0x1064], 2
jge 0x44e394
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x1064]
mov dword [ebp - 0x1c], ecx
jmp 0x44e36e
cmp dword [ebp - 0x1c], 0
jge 0x44e3a2
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e3ba
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1068], 0
jmp 0x44e3d5
mov edx, dword [ebp - 0x1068]
add edx, 1
mov dword [ebp - 0x1068], edx
cmp dword [ebp - 0x1068], 0
jge 0x44e416
cmp dword [ebp - 0x1c], 0
jge 0x44e3ec
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e402
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1260]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e3c6
mov dword [ebp - 0x1264], 0
jmp 0x44e431
mov eax, dword [ebp - 0x1264]
add eax, 1
mov dword [ebp - 0x1264], eax
cmp dword [ebp - 0x1264], 1
jge 0x44e472
cmp dword [ebp - 0x1c], 0
jge 0x44e448
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e45e
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1460]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e422
mov eax, 1
test eax, eax
je 0x44e4ac
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1464], eax
mov eax, dword [ebp - 0x1464]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44e49e
jmp 0x44e4ac
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1c], edx
jmp 0x44e472
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44e4ef
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1468], eax
mov eax, dword [ebp - 0x1468]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44e4e1
jmp 0x44e4ef
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1468]
mov dword [ebp - 0x1c], edx
jmp 0x44e4b5
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x146c], 0
jmp 0x44e513
mov ecx, dword [ebp - 0x146c]
add ecx, 1
mov dword [ebp - 0x146c], ecx
cmp dword [ebp - 0x146c], 0
jge 0x44e560
mov eax, dword [ebp - 0x146c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44e542
mov eax, dword [ebp - 0x146c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44e552
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x146c]
mov dword [ebp - 0x1c], edx
jmp 0x44e55e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x146c]
mov dword [ebp - 0x1c], eax
jmp 0x44e504
mov dword [ebp - 0x1470], 0
jmp 0x44e57b
mov ecx, dword [ebp - 0x1470]
add ecx, 1
mov dword [ebp - 0x1470], ecx
cmp dword [ebp - 0x1470], 4
jge 0x44e5bc
cmp dword [ebp - 0x1c], 0
jge 0x44e592
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e5a8
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1668]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e56c
mov dword [ebp - 0x166c], 0
jmp 0x44e5d7
mov eax, dword [ebp - 0x166c]
add eax, 1
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 3
jge 0x44e624
cmp dword [ebp - 0x1c], 0
jge 0x44e5ee
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e604
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1670], 0xfa
lea edx, [ebp - 0x1670]
push edx
lea eax, [ebp - 0x1868]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e5c8
mov dword [ebp - 0x186c], 0
jmp 0x44e63f
mov ecx, dword [ebp - 0x186c]
add ecx, 1
mov dword [ebp - 0x186c], ecx
cmp dword [ebp - 0x186c], 2
jge 0x44e656
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x186c]
mov dword [ebp - 0x1c], edx
jmp 0x44e630
cmp dword [ebp - 0x1c], 0
jge 0x44e664
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e67c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1870], 0
jmp 0x44e697
mov edx, dword [ebp - 0x1870]
add edx, 1
mov dword [ebp - 0x1870], edx
cmp dword [ebp - 0x1870], 0
jge 0x44e6e4
mov eax, dword [ebp - 0x1870]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44e6c6
mov eax, dword [ebp - 0x1870]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44e6d6
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1870]
mov dword [ebp - 0x1c], edx
jmp 0x44e6e2
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1870]
mov dword [ebp - 0x1c], eax
jmp 0x44e688
mov dword [ebp - 0x1874], 0
jmp 0x44e6ff
mov ecx, dword [ebp - 0x1874]
add ecx, 1
mov dword [ebp - 0x1874], ecx
cmp dword [ebp - 0x1874], 0
jge 0x44e74c
cmp dword [ebp - 0x1c], 0
jge 0x44e716
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e72c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1878], 0xfa
lea edx, [ebp - 0x1878]
push edx
lea eax, [ebp - 0x1a70]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e6f0
mov dword [ebp - 0x1a74], 0
jmp 0x44e767
mov ecx, dword [ebp - 0x1a74]
add ecx, 1
mov dword [ebp - 0x1a74], ecx
cmp dword [ebp - 0x1a74], 1
jge 0x44e7b4
mov eax, dword [ebp - 0x1a74]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44e796
mov eax, dword [ebp - 0x1a74]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44e7a6
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1c], edx
jmp 0x44e7b2
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1c], eax
jmp 0x44e758
mov dword [ebp - 0x1a78], 0
jmp 0x44e7cf
mov ecx, dword [ebp - 0x1a78]
add ecx, 1
mov dword [ebp - 0x1a78], ecx
cmp dword [ebp - 0x1a78], 4
jge 0x44e7e6
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1a78]
mov dword [ebp - 0x1c], edx
jmp 0x44e7c0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44e7f8
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e810
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1a7c], 0
jmp 0x44e82b
mov edx, dword [ebp - 0x1a7c]
add edx, 1
mov dword [ebp - 0x1a7c], edx
cmp dword [ebp - 0x1a7c], 0
jge 0x44e842
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1a7c]
mov dword [ebp - 0x1c], eax
jmp 0x44e81c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44e854
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e86c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1a80], 0
jmp 0x44e887
mov edx, dword [ebp - 0x1a80]
add edx, 1
mov dword [ebp - 0x1a80], edx
cmp dword [ebp - 0x1a80], 1
jge 0x44e8c8
cmp dword [ebp - 0x1c], 0
jge 0x44e89e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e8b4
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x1c78]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44e878
mov dword [ebp - 0x1c7c], 0
jmp 0x44e8e3
mov eax, dword [ebp - 0x1c7c]
add eax, 1
mov dword [ebp - 0x1c7c], eax
cmp dword [ebp - 0x1c7c], 2
jge 0x44e930
mov eax, dword [ebp - 0x1c7c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44e912
mov eax, dword [ebp - 0x1c7c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44e922
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c7c]
mov dword [ebp - 0x1c], edx
jmp 0x44e92e
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c7c]
mov dword [ebp - 0x1c], eax
jmp 0x44e8d4
mov dword [ebp - 0x1c80], 0
jmp 0x44e94b
mov ecx, dword [ebp - 0x1c80]
add ecx, 1
mov dword [ebp - 0x1c80], ecx
cmp dword [ebp - 0x1c80], 0
jge 0x44e962
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c80]
mov dword [ebp - 0x1c], edx
jmp 0x44e93c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44e974
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e98c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44e9c6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c84], eax
mov eax, dword [ebp - 0x1c84]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44e9b8
jmp 0x44e9c6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1c84]
mov dword [ebp - 0x1c], edx
jmp 0x44e98c
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c88], 0
jmp 0x44e9ea
mov ecx, dword [ebp - 0x1c88]
add ecx, 1
mov dword [ebp - 0x1c88], ecx
cmp dword [ebp - 0x1c88], 4
jge 0x44ea37
mov eax, dword [ebp - 0x1c88]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44ea19
mov eax, dword [ebp - 0x1c88]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44ea29
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c88]
mov dword [ebp - 0x1c], edx
jmp 0x44ea35
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c88]
mov dword [ebp - 0x1c], eax
jmp 0x44e9db
mov ecx, 1
test ecx, ecx
je 0x44ea71
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c8c], eax
mov eax, dword [ebp - 0x1c8c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44ea63
jmp 0x44ea71
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1c8c]
mov dword [ebp - 0x1c], edx
jmp 0x44ea37
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c90], 0
jmp 0x44ea95
mov ecx, dword [ebp - 0x1c90]
add ecx, 1
mov dword [ebp - 0x1c90], ecx
cmp dword [ebp - 0x1c90], 4
jge 0x44eae2
mov eax, dword [ebp - 0x1c90]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44eac4
mov eax, dword [ebp - 0x1c90]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44ead4
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c90]
mov dword [ebp - 0x1c], edx
jmp 0x44eae0
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x1c90]
mov dword [ebp - 0x1c], eax
jmp 0x44ea86
mov dword [ebp - 0x1c94], 0
jmp 0x44eafd
mov ecx, dword [ebp - 0x1c94]
add ecx, 1
mov dword [ebp - 0x1c94], ecx
cmp dword [ebp - 0x1c94], 0
jge 0x44eb4a
cmp dword [ebp - 0x1c], 0
jge 0x44eb14
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44eb2a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1c98], 0xfa
lea edx, [ebp - 0x1c98]
push edx
lea eax, [ebp - 0x1e90]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44eaee
mov dword [ebp - 0x1e94], 0
jmp 0x44eb65
mov ecx, dword [ebp - 0x1e94]
add ecx, 1
mov dword [ebp - 0x1e94], ecx
cmp dword [ebp - 0x1e94], 3
jge 0x44ebb2
cmp dword [ebp - 0x1c], 0
jge 0x44eb7c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44eb92
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1e98], 0xfa
lea edx, [ebp - 0x1e98]
push edx
lea eax, [ebp - 0x2090]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44eb56
mov dword [ebp - 0x2094], 0
jmp 0x44ebcd
mov ecx, dword [ebp - 0x2094]
add ecx, 1
mov dword [ebp - 0x2094], ecx
cmp dword [ebp - 0x2094], 1
jge 0x44ebe4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x2094]
mov dword [ebp - 0x1c], edx
jmp 0x44ebbe
cmp dword [ebp - 0x1c], 0
jge 0x44ebf2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ec0a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2098], 0
jmp 0x44ec25
mov edx, dword [ebp - 0x2098]
add edx, 1
mov dword [ebp - 0x2098], edx
cmp dword [ebp - 0x2098], 1
jge 0x44ec3c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2098]
mov dword [ebp - 0x1c], eax
jmp 0x44ec16
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ec4e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ec66
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x209c], 0
jmp 0x44ec81
mov edx, dword [ebp - 0x209c]
add edx, 1
mov dword [ebp - 0x209c], edx
cmp dword [ebp - 0x209c], 1
jge 0x44ecc2
cmp dword [ebp - 0x1c], 0
jge 0x44ec98
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ecae
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x2298]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44ec72
mov dword [ebp - 0x229c], 0
jmp 0x44ecdd
mov eax, dword [ebp - 0x229c]
add eax, 1
mov dword [ebp - 0x229c], eax
cmp dword [ebp - 0x229c], 3
jge 0x44ed2a
cmp dword [ebp - 0x1c], 0
jge 0x44ecf4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ed0a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x22a0], 0xfa
lea edx, [ebp - 0x22a0]
push edx
lea eax, [ebp - 0x2498]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44ecce
mov dword [ebp - 0x249c], 0
jmp 0x44ed45
mov ecx, dword [ebp - 0x249c]
add ecx, 1
mov dword [ebp - 0x249c], ecx
cmp dword [ebp - 0x249c], 0
jge 0x44ed86
cmp dword [ebp - 0x1c], 0
jge 0x44ed5c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ed72
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x2698]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44ed36
mov eax, 1
test eax, eax
je 0x44edc0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x269c], eax
mov eax, dword [ebp - 0x269c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44edb2
jmp 0x44edc0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x269c]
mov dword [ebp - 0x1c], edx
jmp 0x44ed86
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44ee03
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x26a0], eax
mov eax, dword [ebp - 0x26a0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44edf5
jmp 0x44ee03
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x26a0]
mov dword [ebp - 0x1c], edx
jmp 0x44edc9
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x26a4], 0
jmp 0x44ee27
mov ecx, dword [ebp - 0x26a4]
add ecx, 1
mov dword [ebp - 0x26a4], ecx
cmp dword [ebp - 0x26a4], 2
jge 0x44ee3e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x26a4]
mov dword [ebp - 0x1c], edx
jmp 0x44ee18
cmp dword [ebp - 0x1c], 0
jge 0x44ee4c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ee64
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x26a8], 0xffffffff
mov dword [ebp - 0x26ac], 0
jmp 0x44ee90
cmp dword [ebp - 0x26ac], 3
jge 0x44eec2
mov eax, dword [ebp - 0x26ac]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44eeb7
mov dword [ebp - 4], 0xfffffffe
jmp 0x44eee2