Function at 0x44e0a0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e548
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x13d8
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x54], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x44e0f6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x18
jge 0x44e127
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jge 0x44e10f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e125
mov dword [ebp - 0x1c], 0
jmp 0x44e0ed
mov dword [ebp - 0x24], 0
mov edx, 1
test edx, edx
je 0x44e169
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44e154
jmp 0x44e169
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
jmp 0x44e12e
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], 0
mov edx, 1
test edx, edx
je 0x44e1b4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44e19f
jmp 0x44e1b4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x44e179
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
jmp 0x44e1eb
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 8
jge 0x44e211
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x44e1e2
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x48], 0
jmp 0x44e233
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 2
jge 0x44e265
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44e259
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44e260
and eax, 0xbc614e
jmp 0x44e263
mov dword [ebp - 0x1c], eax
jmp 0x44e22a
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e273
jmp 0x44e27b
mov dword [ebp - 0x4c], 0
jmp 0x44e28d
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 7
jge 0x44e2d1
cmp dword [ebp - 0x1c], 0
jge 0x44e2a1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e2b7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x50], 0xfa
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x250]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e284
mov dword [ebp - 0x254], 0
mov ecx, 1
test ecx, ecx
je 0x44e325
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44e307
jmp 0x44e325
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x254]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x254]
add eax, 1
mov dword [ebp - 0x254], eax
jmp 0x44e2db
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x26c], 0
jmp 0x44e371
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
cmp dword [ebp - 0x26c], 4
jge 0x44e3b2
mov eax, dword [ebp - 0x25c]
add eax, dword [ebp - 0x260]
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x25c], ecx
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x264]
mov dword [ebp - 0x1c], eax
jmp 0x44e362
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 0
jmp 0x44e3fe
mov edx, dword [ebp - 0x280]
add edx, 1
mov dword [ebp - 0x280], edx
cmp dword [ebp - 0x280], 2
jge 0x44e43f
mov eax, dword [ebp - 0x270]
add eax, dword [ebp - 0x274]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x270], ecx
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x274], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x278]
mov dword [ebp - 0x1c], eax
jmp 0x44e3ef
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x284], 0
jmp 0x44e463
mov edx, dword [ebp - 0x284]
add edx, 1
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 0
jge 0x44e47a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x284]
mov dword [ebp - 0x1c], eax
jmp 0x44e454
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44e48c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e4a4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x288], 0
jmp 0x44e4bf
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 4
jge 0x44e50c
cmp dword [ebp - 0x1c], 0
jge 0x44e4d6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e4ec
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x28c], 0xfa
lea edx, [ebp - 0x28c]
push edx
lea eax, [ebp - 0x488]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e4b0
mov dword [ebp - 4], 1
mov dword [ebp - 0x48c], 0
jmp 0x44e52e
mov ecx, dword [ebp - 0x48c]
add ecx, 1
mov dword [ebp - 0x48c], ecx
cmp dword [ebp - 0x48c], 3
jge 0x44e569
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44e55d
mov eax, dword [ebp - 0x48c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44e564
and eax, 0xbc614e
jmp 0x44e567
mov dword [ebp - 0x1c], eax
jmp 0x44e51f
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e577
jmp 0x44e57f
mov dword [ebp - 0x490], 0
jmp 0x44e59a
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 1
jge 0x44e5d1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x490]
mov dword [ebp - 0x1c], eax
jge 0x44e5b9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e5cf
mov dword [ebp - 0x1c], 0
jmp 0x44e58b
mov dword [ebp - 0x494], 0
jmp 0x44e5ec
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 0
jge 0x44e639
cmp dword [ebp - 0x1c], 0
jge 0x44e603
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e619
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x498], 0xfa
lea edx, [ebp - 0x498]
push edx
lea eax, [ebp - 0x690]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e5dd
mov dword [ebp - 0x694], 0
jmp 0x44e654
mov ecx, dword [ebp - 0x694]
add ecx, 1
mov dword [ebp - 0x694], ecx
cmp dword [ebp - 0x694], 1
jge 0x44e68b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x694]
mov dword [ebp - 0x1c], edx
jge 0x44e673
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e689
mov dword [ebp - 0x1c], 0
jmp 0x44e645
mov dword [ebp - 0x698], 0
jmp 0x44e6a6
mov edx, dword [ebp - 0x698]
add edx, 1
mov dword [ebp - 0x698], edx
cmp dword [ebp - 0x698], 0
jge 0x44e6f3
cmp dword [ebp - 0x1c], 0
jge 0x44e6bd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e6d3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x69c], 0xfa
lea edx, [ebp - 0x69c]
push edx
lea eax, [ebp - 0x898]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e697
mov ecx, 1
test ecx, ecx
je 0x44e72d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x89c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44e71f
jmp 0x44e72d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x89c]
mov dword [ebp - 0x1c], edx
jmp 0x44e6f3
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x8a0], 0
jmp 0x44e758
mov ecx, dword [ebp - 0x8a0]
add ecx, 1
mov dword [ebp - 0x8a0], ecx
cmp dword [ebp - 0x8a0], 4
jge 0x44e793
mov eax, dword [ebp - 0x8a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44e787
mov eax, dword [ebp - 0x8a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44e78e
and eax, 0xbc614e
jmp 0x44e791
mov dword [ebp - 0x1c], eax
jmp 0x44e749
mov dword [ebp - 4], 0xfffffffe
call fcn.0044e7a1
jmp 0x44e7a9
mov edx, 1
test edx, edx
je 0x44e7e3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x8a4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44e7d5
jmp 0x44e7e3
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x1c], edx
jmp 0x44e7a9
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8a8], 1
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x8b0], 2
mov dword [ebp - 0x8b4], 0
mov dword [ebp - 0x8b8], 0
jmp 0x44e82f
mov ecx, dword [ebp - 0x8b8]
add ecx, 1
mov dword [ebp - 0x8b8], ecx
cmp dword [ebp - 0x8b8], 1
jge 0x44e870
mov edx, dword [ebp - 0x8a8]
add edx, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], edx
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8a8], eax
mov ecx, dword [ebp - 0x8b0]
mov dword [ebp - 0x8ac], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8b0]
mov dword [ebp - 0x1c], edx
jmp 0x44e820
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8bc], 0
jmp 0x44e894
mov ecx, dword [ebp - 0x8bc]
add ecx, 1
mov dword [ebp - 0x8bc], ecx
cmp dword [ebp - 0x8bc], 4
jge 0x44e8ab
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x8bc]
mov dword [ebp - 0x1c], edx
jmp 0x44e885
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44e8bd
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44e8d5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c0], 0
jmp 0x44e8f0
mov edx, dword [ebp - 0x8c0]
add edx, 1
mov dword [ebp - 0x8c0], edx
cmp dword [ebp - 0x8c0], 3
jge 0x44e93d
cmp dword [ebp - 0x1c], 0
jge 0x44e907
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e91d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8c4], 0xfa
lea edx, [ebp - 0x8c4]
push edx
lea eax, [ebp - 0xac0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44e8e1
mov dword [ebp - 0xac4], 0
jmp 0x44e958
mov ecx, dword [ebp - 0xac4]
add ecx, 1
mov dword [ebp - 0xac4], ecx
cmp dword [ebp - 0xac4], 0
jge 0x44e98f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xac4]
mov dword [ebp - 0x1c], edx
jge 0x44e977
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e98d
mov dword [ebp - 0x1c], 0
jmp 0x44e949
mov dword [ebp - 0xac8], 0
jmp 0x44e9aa
mov edx, dword [ebp - 0xac8]
add edx, 1
mov dword [ebp - 0xac8], edx
cmp dword [ebp - 0xac8], 4
jge 0x44e9e1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xac8]
mov dword [ebp - 0x1c], eax
jge 0x44e9c9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44e9df
mov dword [ebp - 0x1c], 0
jmp 0x44e99b
mov dword [ebp - 0xacc], 0
mov edx, 1
test edx, edx
je 0x44ea35
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0xad0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44ea17
jmp 0x44ea35
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xacc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xacc]
add eax, 1
mov dword [ebp - 0xacc], eax
jmp 0x44e9eb
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xad4], 0
jmp 0x44ea59
mov edx, dword [ebp - 0xad4]
add edx, 1
mov dword [ebp - 0xad4], edx
cmp dword [ebp - 0xad4], 2
jge 0x44ea70
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xad4]
mov dword [ebp - 0x1c], eax
jmp 0x44ea4a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ea82
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ea9a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xad8], 0
mov edx, 1
test edx, edx
je 0x44eaee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xadc], eax
mov eax, dword [ebp - 0xadc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44ead0
jmp 0x44eaee
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xad8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xad8]
add eax, 1
mov dword [ebp - 0xad8], eax
jmp 0x44eaa4
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xae0], 0
jmp 0x44eb12
mov edx, dword [ebp - 0xae0]
add edx, 1
mov dword [ebp - 0xae0], edx
cmp dword [ebp - 0xae0], 3
jge 0x44eb5f
cmp dword [ebp - 0x1c], 0
jge 0x44eb29
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44eb3f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xae4], 0xfa
lea edx, [ebp - 0xae4]
push edx
lea eax, [ebp - 0xce0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44eb03
mov dword [ebp - 0xce4], 0
jmp 0x44eb7a
mov ecx, dword [ebp - 0xce4]
add ecx, 1
mov dword [ebp - 0xce4], ecx
cmp dword [ebp - 0xce4], 4
jge 0x44ebb1
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xce4]
mov dword [ebp - 0x1c], edx
jge 0x44eb99
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ebaf
mov dword [ebp - 0x1c], 0
jmp 0x44eb6b
mov dword [ebp - 0xce8], 0
jmp 0x44ebcc
mov edx, dword [ebp - 0xce8]
add edx, 1
mov dword [ebp - 0xce8], edx
cmp dword [ebp - 0xce8], 1
jge 0x44ebe3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xce8]
mov dword [ebp - 0x1c], eax
jmp 0x44ebbd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ebf5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ec0d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcec], 0
jmp 0x44ec28
mov edx, dword [ebp - 0xcec]
add edx, 1
mov dword [ebp - 0xcec], edx
cmp dword [ebp - 0xcec], 4
jge 0x44ec3f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcec]
mov dword [ebp - 0x1c], eax
jmp 0x44ec19
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ec51
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ec69
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0xcf0], 0
jmp 0x44ec8b
mov edx, dword [ebp - 0xcf0]
add edx, 1
mov dword [ebp - 0xcf0], edx
cmp dword [ebp - 0xcf0], 3
jge 0x44ecc6
mov eax, dword [ebp - 0xcf0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ecba
mov eax, dword [ebp - 0xcf0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ecc1
and eax, 0xbc614e
jmp 0x44ecc4
mov dword [ebp - 0x1c], eax
jmp 0x44ec7c
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ecd4
jmp 0x44ecdc
mov dword [ebp - 0xcf4], 0
jmp 0x44ecf7
mov edx, dword [ebp - 0xcf4]
add edx, 1
mov dword [ebp - 0xcf4], edx
cmp dword [ebp - 0xcf4], 0
jge 0x44ed44
cmp dword [ebp - 0x1c], 0
jge 0x44ed0e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ed24
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xcf8], 0xfa
lea edx, [ebp - 0xcf8]
push edx
lea eax, [ebp - 0xef0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44ece8
mov dword [ebp - 4], 4
mov dword [ebp - 0xef4], 0
jmp 0x44ed66
mov ecx, dword [ebp - 0xef4]
add ecx, 1
mov dword [ebp - 0xef4], ecx
cmp dword [ebp - 0xef4], 3
jge 0x44eda1
mov eax, dword [ebp - 0xef4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ed95
mov eax, dword [ebp - 0xef4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ed9c
and eax, 0xbc614e
jmp 0x44ed9f
mov dword [ebp - 0x1c], eax
jmp 0x44ed57
mov dword [ebp - 4], 0xfffffffe
call fcn.0044edaf
jmp 0x44edb7
mov dword [ebp - 4], 5
mov dword [ebp - 0xef8], 0
jmp 0x44edd9
mov edx, dword [ebp - 0xef8]
add edx, 1
mov dword [ebp - 0xef8], edx
cmp dword [ebp - 0xef8], 0
jge 0x44ee14
mov eax, dword [ebp - 0xef8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ee08
mov eax, dword [ebp - 0xef8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ee0f
and eax, 0xbc614e
jmp 0x44ee12
mov dword [ebp - 0x1c], eax
jmp 0x44edca
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ee22
jmp 0x44ee2a
mov dword [ebp - 0xefc], 0
jmp 0x44ee45
mov edx, dword [ebp - 0xefc]
add edx, 1
mov dword [ebp - 0xefc], edx
cmp dword [ebp - 0xefc], 2
jge 0x44ee5c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xefc]
mov dword [ebp - 0x1c], eax
jmp 0x44ee36
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ee6e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ee86
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0xf00], 0
jmp 0x44eea8
mov edx, dword [ebp - 0xf00]
add edx, 1
mov dword [ebp - 0xf00], edx
cmp dword [ebp - 0xf00], 3
jge 0x44eee3
mov eax, dword [ebp - 0xf00]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44eed7
mov eax, dword [ebp - 0xf00]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44eede
and eax, 0xbc614e
jmp 0x44eee1
mov dword [ebp - 0x1c], eax
jmp 0x44ee99
mov dword [ebp - 4], 0xfffffffe
call fcn.0044eef1
jmp 0x44eef9
mov dword [ebp - 4], 7
mov dword [ebp - 0xf04], 0
jmp 0x44ef1b
mov edx, dword [ebp - 0xf04]
add edx, 1
mov dword [ebp - 0xf04], edx
cmp dword [ebp - 0xf04], 3
jge 0x44ef56
mov eax, dword [ebp - 0xf04]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ef4a
mov eax, dword [ebp - 0xf04]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ef51
and eax, 0xbc614e
jmp 0x44ef54
mov dword [ebp - 0x1c], eax
jmp 0x44ef0c
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ef64
jmp 0x44ef6c
mov dword [ebp - 4], 8
mov dword [ebp - 0xf08], 0
jmp 0x44ef8e
mov edx, dword [ebp - 0xf08]
add edx, 1
mov dword [ebp - 0xf08], edx
cmp dword [ebp - 0xf08], 0
jge 0x44efc9
mov eax, dword [ebp - 0xf08]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44efbd
mov eax, dword [ebp - 0xf08]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44efc4
and eax, 0xbc614e
jmp 0x44efc7
mov dword [ebp - 0x1c], eax
jmp 0x44ef7f
mov dword [ebp - 4], 0xfffffffe
call fcn.0044efd7
jmp 0x44efdf
mov dword [ebp - 0xf0c], 0
jmp 0x44effa
mov edx, dword [ebp - 0xf0c]
add edx, 1
mov dword [ebp - 0xf0c], edx
cmp dword [ebp - 0xf0c], 2
jge 0x44f047
cmp dword [ebp - 0x1c], 0
jge 0x44f011
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44f027
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf10], 0xfa
lea edx, [ebp - 0xf10]
push edx
lea eax, [ebp - 0x1108]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44efeb
mov dword [ebp - 0x110c], 0
mov ecx, 1
test ecx, ecx
je 0x44f09b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1110], eax
mov eax, dword [ebp - 0x1110]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44f07d
jmp 0x44f09b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x110c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x110c]
add eax, 1
mov dword [ebp - 0x110c], eax
jmp 0x44f051
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1114], 0
jmp 0x44f0bc
mov edx, dword [ebp - 0x1114]
add edx, 1
mov dword [ebp - 0x1114], edx
cmp dword [ebp - 0x1114], 1
jge 0x44f0d3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1114]
mov dword [ebp - 0x1c], eax
jmp 0x44f0ad
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44f0e5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44f0fd
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44f137
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1118], eax
mov eax, dword [ebp - 0x1118]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44f129
jmp 0x44f137
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1118]
mov dword [ebp - 0x1c], edx
jmp 0x44f0fd
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x111c], 0
mov ecx, 1
test ecx, ecx
je 0x44f194
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1120], eax
mov eax, dword [ebp - 0x1120]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44f176
jmp 0x44f194
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x111c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x111c]
add eax, 1
mov dword [ebp - 0x111c], eax
jmp 0x44f14a
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x44f1d7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1124], eax
mov eax, dword [ebp - 0x1124]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44f1c9
jmp 0x44f1d7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1124]
mov dword [ebp - 0x1c], edx
jmp 0x44f19d
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 9
mov dword [ebp - 0x1128], 0
jmp 0x44f202
mov ecx, dword [ebp - 0x1128]
add ecx, 1
mov dword [ebp - 0x1128], ecx
cmp dword [ebp - 0x1128], 4
jge 0x44f23d
mov eax, dword [ebp - 0x1128]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44f231
mov eax, dword [ebp - 0x1128]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44f238
and eax, 0xbc614e
jmp 0x44f23b
mov dword [ebp - 0x1c], eax
jmp 0x44f1f3
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f24b
jmp 0x44f253
mov dword [ebp - 0x112c], 1
mov dword [ebp - 0x1130], 1
mov dword [ebp - 0x1134], 2
mov dword [ebp - 0x1138], 0
mov dword [ebp - 0x113c], 0
jmp 0x44f296
mov edx, dword [ebp - 0x113c]
add edx, 1
mov dword [ebp - 0x113c], edx
cmp dword [ebp - 0x113c], 2
jge 0x44f2d7
mov eax, dword [ebp - 0x112c]
add eax, dword [ebp - 0x1130]
mov dword [ebp - 0x1134], eax
mov ecx, dword [ebp - 0x1130]
mov dword [ebp - 0x112c], ecx
mov edx, dword [ebp - 0x1134]
mov dword [ebp - 0x1130], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1134]
mov dword [ebp - 0x1c], eax
jmp 0x44f287
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1140], 0
jmp 0x44f2fb
mov edx, dword [ebp - 0x1140]
add edx, 1
mov dword [ebp - 0x1140], edx
cmp dword [ebp - 0x1140], 1
jge 0x44f312
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1140]
mov dword [ebp - 0x1c], eax
jmp 0x44f2ec
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44f324
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44f33c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44f376
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1144], eax
mov eax, dword [ebp - 0x1144]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44f368
jmp 0x44f376
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1144]
mov dword [ebp - 0x1c], edx
jmp 0x44f33c
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1148], 0
jmp 0x44f39a
mov ecx, dword [ebp - 0x1148]
add ecx, 1
mov dword [ebp - 0x1148], ecx
cmp dword [ebp - 0x1148], 4
jge 0x44f3b1
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1148]
mov dword [ebp - 0x1c], edx
jmp 0x44f38b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44f3c3
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44f3db
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x114c], 0
jmp 0x44f3fd
mov edx, dword [ebp - 0x114c]
add edx, 1
mov dword [ebp - 0x114c], edx
cmp dword [ebp - 0x114c], 0
jge 0x44f438
mov eax, dword [ebp - 0x114c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44f42c
mov eax, dword [ebp - 0x114c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44f433
and eax, 0xbc614e
jmp 0x44f436
mov dword [ebp - 0x1c], eax
jmp 0x44f3ee
mov dword [ebp - 4], 0xfffffffe
call fcn.0044f446
jmp 0x44f44e
mov dword [ebp - 0x1150], 1
mov dword [ebp - 0x1154], 1
mov dword [ebp - 0x1158], 2
mov dword [ebp - 0x115c], 0
mov dword [ebp - 0x1160], 0
jmp 0x44f491
mov edx, dword [ebp - 0x1160]
add edx, 1
mov dword [ebp - 0x1160], edx
cmp dword [ebp - 0x1160], 0
jge 0x44f4d2
mov eax, dword [ebp - 0x1150]
add eax, dword [ebp - 0x1154]
mov dword [ebp - 0x1158], eax
mov ecx, dword [ebp - 0x1154]
mov dword [ebp - 0x1150], ecx
mov edx, dword [ebp - 0x1158]
mov dword [ebp - 0x1154], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1c], eax
jmp 0x44f482
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1164], 0
mov edx, 1
test edx, edx
je 0x44f52c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1168], eax
mov eax, dword [ebp - 0x1168]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44f50e
jmp 0x44f52c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1164]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1164]
add eax, 1
mov dword [ebp - 0x1164], eax
jmp 0x44f4e2
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x116c], 0
jmp 0x44f54d
mov edx, dword [ebp - 0x116c]
add edx, 1
mov dword [ebp - 0x116c], edx
cmp dword [ebp - 0x116c], 2
jge 0x44f564
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x116c]
mov dword [ebp - 0x1c], eax
jmp 0x44f53e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44f576
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44f58e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1170], 0
jmp 0x44f5a9
cmp dword [ebp - 0x1170], 2
jge 0x44f5c0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1170]
mov dword [ebp - 0x1c], eax
jmp 0x44f59a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44f5d2