Function at 0x449dd0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e400
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x2e6c
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x449e26
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x37
jge 0x449e6a
cmp dword [ebp - 0x1c], 0
jge 0x449e3a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449e50
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0xfa
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x449e1d
mov dword [ebp - 0x224], 0
jmp 0x449e85
mov ecx, dword [ebp - 0x224]
add ecx, 1
mov dword [ebp - 0x224], ecx
cmp dword [ebp - 0x224], 0x1d
jge 0x449e9c
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x224]
mov dword [ebp - 0x1c], edx
jmp 0x449e76
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x449eae
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x449ec6
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x228], 0
mov edx, 1
test edx, edx
je 0x449f1a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x449efc
jmp 0x449f1a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x228]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x228]
add eax, 1
mov dword [ebp - 0x228], eax
jmp 0x449ed0
mov ecx, dword [ebp - 0x1c]
add ecx, 0x32
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x230], 0
jmp 0x449f3e
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 0xd
jge 0x449f8b
cmp dword [ebp - 0x1c], 0
jge 0x449f55
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449f6b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x234], 0xfa
lea edx, [ebp - 0x234]
push edx
lea eax, [ebp - 0x430]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x449f2f
mov dword [ebp - 0x434], 0
jmp 0x449fa6
mov ecx, dword [ebp - 0x434]
add ecx, 1
mov dword [ebp - 0x434], ecx
cmp dword [ebp - 0x434], 0xd
jge 0x449ff3
cmp dword [ebp - 0x1c], 0
jge 0x449fbd
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x449fd3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x438], 0xfa
lea edx, [ebp - 0x438]
push edx
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x449f97
mov dword [ebp - 0x634], 0
jmp 0x44a00e
mov ecx, dword [ebp - 0x634]
add ecx, 1
mov dword [ebp - 0x634], ecx
cmp dword [ebp - 0x634], 0
jge 0x44a05b
cmp dword [ebp - 0x1c], 0
jge 0x44a025
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a03b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x638], 0xfa
lea edx, [ebp - 0x638]
push edx
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x449fff
mov dword [ebp - 0x834], 0
jmp 0x44a076
mov ecx, dword [ebp - 0x834]
add ecx, 1
mov dword [ebp - 0x834], ecx
cmp dword [ebp - 0x834], 6
jge 0x44a0c3
cmp dword [ebp - 0x1c], 0
jge 0x44a08d
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a0a3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x838], 0xfa
lea edx, [ebp - 0x838]
push edx
lea eax, [ebp - 0xa30]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44a067
mov dword [ebp - 0xa34], 0
mov ecx, 1
test ecx, ecx
je 0x44a117
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp - 0xa38]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44a0f9
jmp 0x44a117
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xa34]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xa34]
add eax, 1
mov dword [ebp - 0xa34], eax
jmp 0x44a0cd
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x44a15a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa3c], eax
mov eax, dword [ebp - 0xa3c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44a14c
jmp 0x44a15a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa3c]
mov dword [ebp - 0x1c], edx
jmp 0x44a120
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44a19d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp - 0xa40]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44a18f
jmp 0x44a19d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa40]
mov dword [ebp - 0x1c], edx
jmp 0x44a163
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44a1e0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0xa44]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44a1d2
jmp 0x44a1e0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa44]
mov dword [ebp - 0x1c], edx
jmp 0x44a1a6
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0xa48], 0
jmp 0x44a20b
mov ecx, dword [ebp - 0xa48]
add ecx, 1
mov dword [ebp - 0xa48], ecx
cmp dword [ebp - 0xa48], 1
jge 0x44a246
mov eax, dword [ebp - 0xa48]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a23a
mov eax, dword [ebp - 0xa48]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a241
and eax, 0xbc614e
jmp 0x44a244
mov dword [ebp - 0x1c], eax
jmp 0x44a1fc
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a254
jmp 0x44a25c
mov dword [ebp - 4], 1
mov dword [ebp - 0xa4c], 0
jmp 0x44a27e
mov edx, dword [ebp - 0xa4c]
add edx, 1
mov dword [ebp - 0xa4c], edx
cmp dword [ebp - 0xa4c], 8
jge 0x44a2b9
mov eax, dword [ebp - 0xa4c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a2ad
mov eax, dword [ebp - 0xa4c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a2b4
and eax, 0xbc614e
jmp 0x44a2b7
mov dword [ebp - 0x1c], eax
jmp 0x44a26f
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a2c7
jmp 0x44a2cf
mov dword [ebp - 0xa50], 0
jmp 0x44a2ea
mov edx, dword [ebp - 0xa50]
add edx, 1
mov dword [ebp - 0xa50], edx
cmp dword [ebp - 0xa50], 5
jge 0x44a337
cmp dword [ebp - 0x1c], 0
jge 0x44a301
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a317
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa54], 0xfa
lea edx, [ebp - 0xa54]
push edx
lea eax, [ebp - 0xc50]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44a2db
mov ecx, 1
test ecx, ecx
je 0x44a371
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0xc54]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44a363
jmp 0x44a371
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc54]
mov dword [ebp - 0x1c], edx
jmp 0x44a337
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc58], 0
jmp 0x44a395
mov ecx, dword [ebp - 0xc58]
add ecx, 1
mov dword [ebp - 0xc58], ecx
cmp dword [ebp - 0xc58], 4
jge 0x44a3cc
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xc58]
mov dword [ebp - 0x1c], edx
jge 0x44a3b4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a3ca
mov dword [ebp - 0x1c], 0
jmp 0x44a386
mov dword [ebp - 0xc5c], 1
mov dword [ebp - 0xc60], 1
mov dword [ebp - 0xc64], 2
mov dword [ebp - 0xc68], 0
mov dword [ebp - 0xc6c], 0
jmp 0x44a40f
mov edx, dword [ebp - 0xc6c]
add edx, 1
mov dword [ebp - 0xc6c], edx
cmp dword [ebp - 0xc6c], 5
jge 0x44a450
mov eax, dword [ebp - 0xc5c]
add eax, dword [ebp - 0xc60]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0xc60]
mov dword [ebp - 0xc5c], ecx
mov edx, dword [ebp - 0xc64]
mov dword [ebp - 0xc60], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc64]
mov dword [ebp - 0x1c], eax
jmp 0x44a400
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0xc70], 0
jmp 0x44a47b
mov edx, dword [ebp - 0xc70]
add edx, 1
mov dword [ebp - 0xc70], edx
cmp dword [ebp - 0xc70], 2
jge 0x44a4b6
mov eax, dword [ebp - 0xc70]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a4aa
mov eax, dword [ebp - 0xc70]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a4b1
and eax, 0xbc614e
jmp 0x44a4b4
mov dword [ebp - 0x1c], eax
jmp 0x44a46c
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a4c4
jmp 0x44a4cc
mov dword [ebp - 4], 3
mov dword [ebp - 0xc74], 0
jmp 0x44a4ee
mov edx, dword [ebp - 0xc74]
add edx, 1
mov dword [ebp - 0xc74], edx
cmp dword [ebp - 0xc74], 6
jge 0x44a529
mov eax, dword [ebp - 0xc74]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a51d
mov eax, dword [ebp - 0xc74]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a524
and eax, 0xbc614e
jmp 0x44a527
mov dword [ebp - 0x1c], eax
jmp 0x44a4df
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a537
jmp 0x44a53f
mov dword [ebp - 4], 4
mov dword [ebp - 0xc78], 0
jmp 0x44a561
mov edx, dword [ebp - 0xc78]
add edx, 1
mov dword [ebp - 0xc78], edx
cmp dword [ebp - 0xc78], 6
jge 0x44a59c
mov eax, dword [ebp - 0xc78]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a590
mov eax, dword [ebp - 0xc78]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a597
and eax, 0xbc614e
jmp 0x44a59a
mov dword [ebp - 0x1c], eax
jmp 0x44a552
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a5aa
jmp 0x44a5b2
mov dword [ebp - 0xc7c], 0
mov edx, 1
test edx, edx
je 0x44a606
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc80], eax
mov eax, dword [ebp - 0xc80]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44a5e8
jmp 0x44a606
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xc7c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc7c]
add eax, 1
mov dword [ebp - 0xc7c], eax
jmp 0x44a5bc
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0xc84], 0
jmp 0x44a631
mov edx, dword [ebp - 0xc84]
add edx, 1
mov dword [ebp - 0xc84], edx
cmp dword [ebp - 0xc84], 5
jge 0x44a66c
mov eax, dword [ebp - 0xc84]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a660
mov eax, dword [ebp - 0xc84]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a667
and eax, 0xbc614e
jmp 0x44a66a
mov dword [ebp - 0x1c], eax
jmp 0x44a622
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a67a
jmp 0x44a682
mov dword [ebp - 0xc88], 1
mov dword [ebp - 0xc8c], 1
mov dword [ebp - 0xc90], 2
mov dword [ebp - 0xc94], 0
mov dword [ebp - 0xc98], 0
jmp 0x44a6c5
mov edx, dword [ebp - 0xc98]
add edx, 1
mov dword [ebp - 0xc98], edx
cmp dword [ebp - 0xc98], 8
jge 0x44a706
mov eax, dword [ebp - 0xc88]
add eax, dword [ebp - 0xc8c]
mov dword [ebp - 0xc90], eax
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0xc88], ecx
mov edx, dword [ebp - 0xc90]
mov dword [ebp - 0xc8c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc90]
mov dword [ebp - 0x1c], eax
jmp 0x44a6b6
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xc9c], 0
jmp 0x44a72a
mov edx, dword [ebp - 0xc9c]
add edx, 1
mov dword [ebp - 0xc9c], edx
cmp dword [ebp - 0xc9c], 5
jge 0x44a741
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x1c], eax
jmp 0x44a71b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a753
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a76b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xca0], 0
jmp 0x44a786
mov edx, dword [ebp - 0xca0]
add edx, 1
mov dword [ebp - 0xca0], edx
cmp dword [ebp - 0xca0], 8
jge 0x44a79d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xca0]
mov dword [ebp - 0x1c], eax
jmp 0x44a777
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a7af
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a7c7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xca4], 0
jmp 0x44a7e2
mov edx, dword [ebp - 0xca4]
add edx, 1
mov dword [ebp - 0xca4], edx
cmp dword [ebp - 0xca4], 0
jge 0x44a82f
cmp dword [ebp - 0x1c], 0
jge 0x44a7f9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a80f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xca8], 0xfa
lea edx, [ebp - 0xca8]
push edx
lea eax, [ebp - 0xea0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44a7d3
mov dword [ebp - 0xea4], 0
jmp 0x44a84a
mov ecx, dword [ebp - 0xea4]
add ecx, 1
mov dword [ebp - 0xea4], ecx
cmp dword [ebp - 0xea4], 4
jge 0x44a861
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xea4]
mov dword [ebp - 0x1c], edx
jmp 0x44a83b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44a873
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44a88b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xea8], 0
jmp 0x44a8a6
mov edx, dword [ebp - 0xea8]
add edx, 1
mov dword [ebp - 0xea8], edx
cmp dword [ebp - 0xea8], 2
jge 0x44a8f3
cmp dword [ebp - 0x1c], 0
jge 0x44a8bd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a8d3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xeac], 0xfa
lea edx, [ebp - 0xeac]
push edx
lea eax, [ebp - 0x10a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44a897
mov dword [ebp - 4], 6
mov dword [ebp - 0x10ac], 0
jmp 0x44a915
mov ecx, dword [ebp - 0x10ac]
add ecx, 1
mov dword [ebp - 0x10ac], ecx
cmp dword [ebp - 0x10ac], 0
jge 0x44a950
mov eax, dword [ebp - 0x10ac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44a944
mov eax, dword [ebp - 0x10ac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44a94b
and eax, 0xbc614e
jmp 0x44a94e
mov dword [ebp - 0x1c], eax
jmp 0x44a906
mov dword [ebp - 4], 0xfffffffe
call fcn.0044a95e
jmp 0x44a966
mov dword [ebp - 0x10b0], 0
jmp 0x44a981
mov edx, dword [ebp - 0x10b0]
add edx, 1
mov dword [ebp - 0x10b0], edx
cmp dword [ebp - 0x10b0], 8
jge 0x44a9ce
cmp dword [ebp - 0x1c], 0
jge 0x44a998
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44a9ae
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10b4], 0xfa
lea edx, [ebp - 0x10b4]
push edx
lea eax, [ebp - 0x12b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44a972
mov dword [ebp - 0x12b4], 0
mov ecx, 1
test ecx, ecx
je 0x44aa22
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12b8], eax
mov eax, dword [ebp - 0x12b8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44aa04
jmp 0x44aa22
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x12b4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x12b4]
add eax, 1
mov dword [ebp - 0x12b4], eax
jmp 0x44a9d8
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x12bc], 0
jmp 0x44aa4d
mov edx, dword [ebp - 0x12bc]
add edx, 1
mov dword [ebp - 0x12bc], edx
cmp dword [ebp - 0x12bc], 6
jge 0x44aa88
mov eax, dword [ebp - 0x12bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44aa7c
mov eax, dword [ebp - 0x12bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44aa83
and eax, 0xbc614e
jmp 0x44aa86
mov dword [ebp - 0x1c], eax
jmp 0x44aa3e
mov dword [ebp - 4], 0xfffffffe
call fcn.0044aa96
jmp 0x44aa9e
mov dword [ebp - 0x12c0], 0
mov edx, 1
test edx, edx
je 0x44aaf2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12c4], eax
mov eax, dword [ebp - 0x12c4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44aad4
jmp 0x44aaf2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x12c0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x12c0]
add eax, 1
mov dword [ebp - 0x12c0], eax
jmp 0x44aaa8
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x12c8], 0
jmp 0x44ab16
mov edx, dword [ebp - 0x12c8]
add edx, 1
mov dword [ebp - 0x12c8], edx
cmp dword [ebp - 0x12c8], 2
jge 0x44ab63
cmp dword [ebp - 0x1c], 0
jge 0x44ab2d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ab43
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x12cc], 0xfa
lea edx, [ebp - 0x12cc]
push edx
lea eax, [ebp - 0x14c8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44ab07
mov dword [ebp - 0x14cc], 0
jmp 0x44ab7e
mov ecx, dword [ebp - 0x14cc]
add ecx, 1
mov dword [ebp - 0x14cc], ecx
cmp dword [ebp - 0x14cc], 4
jge 0x44ab95
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14cc]
mov dword [ebp - 0x1c], edx
jmp 0x44ab6f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44aba7
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44abbf
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14d0], 1
mov dword [ebp - 0x14d4], 1
mov dword [ebp - 0x14d8], 2
mov dword [ebp - 0x14dc], 0
mov dword [ebp - 0x14e0], 0
jmp 0x44ac02
mov edx, dword [ebp - 0x14e0]
add edx, 1
mov dword [ebp - 0x14e0], edx
cmp dword [ebp - 0x14e0], 2
jge 0x44ac43
mov eax, dword [ebp - 0x14d0]
add eax, dword [ebp - 0x14d4]
mov dword [ebp - 0x14d8], eax
mov ecx, dword [ebp - 0x14d4]
mov dword [ebp - 0x14d0], ecx
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x14d4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x14d8]
mov dword [ebp - 0x1c], eax
jmp 0x44abf3
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x14e4], 1
mov dword [ebp - 0x14e8], 1
mov dword [ebp - 0x14ec], 2
mov dword [ebp - 0x14f0], 0
mov dword [ebp - 0x14f4], 0
jmp 0x44ac8f
mov edx, dword [ebp - 0x14f4]
add edx, 1
mov dword [ebp - 0x14f4], edx
cmp dword [ebp - 0x14f4], 3
jge 0x44acd0
mov eax, dword [ebp - 0x14e4]
add eax, dword [ebp - 0x14e8]
mov dword [ebp - 0x14ec], eax
mov ecx, dword [ebp - 0x14e8]
mov dword [ebp - 0x14e4], ecx
mov edx, dword [ebp - 0x14ec]
mov dword [ebp - 0x14e8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x14ec]
mov dword [ebp - 0x1c], eax
jmp 0x44ac80
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x14f8], 0
jmp 0x44acf4
mov edx, dword [ebp - 0x14f8]
add edx, 1
mov dword [ebp - 0x14f8], edx
cmp dword [ebp - 0x14f8], 0
jge 0x44ad2b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x1c], eax
jge 0x44ad13
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ad29
mov dword [ebp - 0x1c], 0
jmp 0x44ace5
mov dword [ebp - 0x14fc], 0
jmp 0x44ad46
mov edx, dword [ebp - 0x14fc]
add edx, 1
mov dword [ebp - 0x14fc], edx
cmp dword [ebp - 0x14fc], 3
jge 0x44ad5d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x14fc]
mov dword [ebp - 0x1c], eax
jmp 0x44ad37
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ad6f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ad87
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1500], 0
mov edx, 1
test edx, edx
je 0x44addb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1504], eax
mov eax, dword [ebp - 0x1504]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44adbd
jmp 0x44addb
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1500]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1500]
add eax, 1
mov dword [ebp - 0x1500], eax
jmp 0x44ad91
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1508], 0
jmp 0x44adff
mov edx, dword [ebp - 0x1508]
add edx, 1
mov dword [ebp - 0x1508], edx
cmp dword [ebp - 0x1508], 1
jge 0x44ae16
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1508]
mov dword [ebp - 0x1c], eax
jmp 0x44adf0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ae28
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ae40
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x150c], 0
jmp 0x44ae5b
mov edx, dword [ebp - 0x150c]
add edx, 1
mov dword [ebp - 0x150c], edx
cmp dword [ebp - 0x150c], 0
jge 0x44ae72
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x150c]
mov dword [ebp - 0x1c], eax
jmp 0x44ae4c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44ae84
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ae9c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1510], 0
mov edx, 1
test edx, edx
je 0x44aef0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1514], eax
mov eax, dword [ebp - 0x1514]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44aed2
jmp 0x44aef0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1510]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1510]
add eax, 1
mov dword [ebp - 0x1510], eax
jmp 0x44aea6
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1518], 0
jmp 0x44af14
mov edx, dword [ebp - 0x1518]
add edx, 1
mov dword [ebp - 0x1518], edx
cmp dword [ebp - 0x1518], 3
jge 0x44af4b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1518]
mov dword [ebp - 0x1c], eax
jge 0x44af33
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44af49
mov dword [ebp - 0x1c], 0
jmp 0x44af05
mov dword [ebp - 0x151c], 1
mov dword [ebp - 0x1520], 1
mov dword [ebp - 0x1524], 2
mov dword [ebp - 0x1528], 0
mov dword [ebp - 0x152c], 0
jmp 0x44af8e
mov edx, dword [ebp - 0x152c]
add edx, 1
mov dword [ebp - 0x152c], edx
cmp dword [ebp - 0x152c], 3
jge 0x44afcf
mov eax, dword [ebp - 0x151c]
add eax, dword [ebp - 0x1520]
mov dword [ebp - 0x1524], eax
mov ecx, dword [ebp - 0x1520]
mov dword [ebp - 0x151c], ecx
mov edx, dword [ebp - 0x1524]
mov dword [ebp - 0x1520], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1524]
mov dword [ebp - 0x1c], eax
jmp 0x44af7f
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1530], 0
jmp 0x44aff3
mov edx, dword [ebp - 0x1530]
add edx, 1
mov dword [ebp - 0x1530], edx
cmp dword [ebp - 0x1530], 1
jge 0x44b040
cmp dword [ebp - 0x1c], 0
jge 0x44b00a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b020
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1534], 0xfa
lea edx, [ebp - 0x1534]
push edx
lea eax, [ebp - 0x1730]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44afe4
mov dword [ebp - 0x1734], 0
jmp 0x44b05b
mov ecx, dword [ebp - 0x1734]
add ecx, 1
mov dword [ebp - 0x1734], ecx
cmp dword [ebp - 0x1734], 2
jge 0x44b092
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1734]
mov dword [ebp - 0x1c], edx
jge 0x44b07a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b090
mov dword [ebp - 0x1c], 0
jmp 0x44b04c
mov dword [ebp - 0x1738], 0
mov edx, 1
test edx, edx
je 0x44b0e6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x173c], eax
mov eax, dword [ebp - 0x173c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44b0c8
jmp 0x44b0e6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1738]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1738]
add eax, 1
mov dword [ebp - 0x1738], eax
jmp 0x44b09c
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1740], 0
jmp 0x44b10a
mov edx, dword [ebp - 0x1740]
add edx, 1
mov dword [ebp - 0x1740], edx
cmp dword [ebp - 0x1740], 3
jge 0x44b141
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1740]
mov dword [ebp - 0x1c], eax
jge 0x44b129
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b13f
mov dword [ebp - 0x1c], 0
jmp 0x44b0fb
mov dword [ebp - 4], 8
mov dword [ebp - 0x1744], 0
jmp 0x44b163
mov edx, dword [ebp - 0x1744]
add edx, 1
mov dword [ebp - 0x1744], edx
cmp dword [ebp - 0x1744], 2
jge 0x44b19e
mov eax, dword [ebp - 0x1744]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b192
mov eax, dword [ebp - 0x1744]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b199
and eax, 0xbc614e
jmp 0x44b19c
mov dword [ebp - 0x1c], eax
jmp 0x44b154
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b1ac
jmp 0x44b1b4
mov dword [ebp - 4], 9
mov dword [ebp - 0x1748], 0
jmp 0x44b1d6
mov edx, dword [ebp - 0x1748]
add edx, 1
mov dword [ebp - 0x1748], edx
cmp dword [ebp - 0x1748], 0
jge 0x44b211
mov eax, dword [ebp - 0x1748]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b205
mov eax, dword [ebp - 0x1748]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b20c
and eax, 0xbc614e
jmp 0x44b20f
mov dword [ebp - 0x1c], eax
jmp 0x44b1c7
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b21f
jmp 0x44b227
mov dword [ebp - 0x174c], 0
jmp 0x44b242
mov edx, dword [ebp - 0x174c]
add edx, 1
mov dword [ebp - 0x174c], edx
cmp dword [ebp - 0x174c], 3
jge 0x44b279
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x174c]
mov dword [ebp - 0x1c], eax
jge 0x44b261
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b277
mov dword [ebp - 0x1c], 0
jmp 0x44b233
mov dword [ebp - 0x1750], 0
jmp 0x44b294
mov edx, dword [ebp - 0x1750]
add edx, 1
mov dword [ebp - 0x1750], edx
cmp dword [ebp - 0x1750], 1
jge 0x44b2cb
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1750]
mov dword [ebp - 0x1c], eax
jge 0x44b2b3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44b2c9
mov dword [ebp - 0x1c], 0
jmp 0x44b285
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1754], 0
jmp 0x44b2ed
mov edx, dword [ebp - 0x1754]
add edx, 1
mov dword [ebp - 0x1754], edx
cmp dword [ebp - 0x1754], 4
jge 0x44b328
mov eax, dword [ebp - 0x1754]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44b31c
mov eax, dword [ebp - 0x1754]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44b323
and eax, 0xbc614e
jmp 0x44b326
mov dword [ebp - 0x1c], eax
jmp 0x44b2de
mov dword [ebp - 4], 0xfffffffe
call fcn.0044b336
jmp 0x44b33e
mov dword [ebp - 0x1758], 0
jmp 0x44b359
mov edx, dword [ebp - 0x1758]
add edx, 1
mov dword [ebp - 0x1758], edx
cmp dword [ebp - 0x1758], 2
jge 0x44b370
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1758]
mov dword [ebp - 0x1c], eax
jmp 0x44b34a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44b382
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44b39a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x175c], 1
mov dword [ebp - 0x1760], 1
mov dword [ebp - 0x1764], 2
mov dword [ebp - 0x1768], 0
mov dword [ebp - 0x176c], 0
jmp 0x44b3dd
cmp dword [ebp - 0x176c], 1
jge 0x44b41e