Function at 0x44c400
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e4c8
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1d90
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x44c456
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x19
jge 0x44c49a
cmp dword [ebp - 0x1c], 0
jge 0x44c46a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c480
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0xfa
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44c44d
mov dword [ebp - 0x224], 1
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x22c], 2
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x234], 0
jmp 0x44c4dd
mov ecx, dword [ebp - 0x234]
add ecx, 1
mov dword [ebp - 0x234], ecx
cmp dword [ebp - 0x234], 0x3d
jge 0x44c51e
mov edx, dword [ebp - 0x224]
add edx, dword [ebp - 0x228]
mov dword [ebp - 0x22c], edx
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0x228], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], edx
jmp 0x44c4ce
mov eax, dword [ebp - 0x1c]
add eax, 0x3d
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x238], 0
jmp 0x44c542
mov ecx, dword [ebp - 0x238]
add ecx, 1
mov dword [ebp - 0x238], ecx
cmp dword [ebp - 0x238], 5
jge 0x44c559
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x238]
mov dword [ebp - 0x1c], edx
jmp 0x44c533
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44c56b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44c583
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x23c], 0
mov edx, 1
test edx, edx
je 0x44c5d7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44c5b9
jmp 0x44c5d7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x23c]
add eax, 1
mov dword [ebp - 0x23c], eax
jmp 0x44c58d
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x244], 0
jmp 0x44c5fb
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 8
jge 0x44c632
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x244]
mov dword [ebp - 0x1c], eax
jge 0x44c61a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c630
mov dword [ebp - 0x1c], 0
jmp 0x44c5ec
mov dword [ebp - 0x248], 0
jmp 0x44c64d
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 6
jge 0x44c664
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x248]
mov dword [ebp - 0x1c], eax
jmp 0x44c63e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44c676
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44c68e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24c], 0
jmp 0x44c6a9
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 0xe
jge 0x44c6e0
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], eax
jge 0x44c6c8
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c6de
mov dword [ebp - 0x1c], 0
jmp 0x44c69a
mov dword [ebp - 4], 0
mov dword [ebp - 0x250], 0
jmp 0x44c702
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0xe
jge 0x44c73d
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44c731
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44c738
and eax, 0xbc614e
jmp 0x44c73b
mov dword [ebp - 0x1c], eax
jmp 0x44c6f3
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c74b
jmp 0x44c753
mov dword [ebp - 0x254], 0
jmp 0x44c76e
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 7
jge 0x44c7bb
cmp dword [ebp - 0x1c], 0
jge 0x44c785
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c79b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x258], 0xfa
lea edx, [ebp - 0x258]
push edx
lea eax, [ebp - 0x450]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44c75f
mov dword [ebp - 4], 1
mov dword [ebp - 0x454], 0
jmp 0x44c7dd
mov ecx, dword [ebp - 0x454]
add ecx, 1
mov dword [ebp - 0x454], ecx
cmp dword [ebp - 0x454], 2
jge 0x44c818
mov eax, dword [ebp - 0x454]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44c80c
mov eax, dword [ebp - 0x454]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44c813
and eax, 0xbc614e
jmp 0x44c816
mov dword [ebp - 0x1c], eax
jmp 0x44c7ce
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c826
jmp 0x44c82e
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x460], 2
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x468], 0
jmp 0x44c871
mov edx, dword [ebp - 0x468]
add edx, 1
mov dword [ebp - 0x468], edx
cmp dword [ebp - 0x468], 7
jge 0x44c8b2
mov eax, dword [ebp - 0x458]
add eax, dword [ebp - 0x45c]
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp - 0x45c]
mov dword [ebp - 0x458], ecx
mov edx, dword [ebp - 0x460]
mov dword [ebp - 0x45c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x460]
mov dword [ebp - 0x1c], eax
jmp 0x44c862
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x46c], 0
jmp 0x44c8d6
mov edx, dword [ebp - 0x46c]
add edx, 1
mov dword [ebp - 0x46c], edx
cmp dword [ebp - 0x46c], 2
jge 0x44c923
cmp dword [ebp - 0x1c], 0
jge 0x44c8ed
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c903
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x470], 0xfa
lea edx, [ebp - 0x470]
push edx
lea eax, [ebp - 0x668]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44c8c7
mov dword [ebp - 0x66c], 0
jmp 0x44c93e
mov ecx, dword [ebp - 0x66c]
add ecx, 1
mov dword [ebp - 0x66c], ecx
cmp dword [ebp - 0x66c], 2
jge 0x44c98b
cmp dword [ebp - 0x1c], 0
jge 0x44c955
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44c96b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x670], 0xfa
lea edx, [ebp - 0x670]
push edx
lea eax, [ebp - 0x868]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44c92f
mov ecx, 1
test ecx, ecx
je 0x44c9c5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 0x86c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44c9b7
jmp 0x44c9c5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x86c]
mov dword [ebp - 0x1c], edx
jmp 0x44c98b
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x870], 0
jmp 0x44c9f0
mov ecx, dword [ebp - 0x870]
add ecx, 1
mov dword [ebp - 0x870], ecx
cmp dword [ebp - 0x870], 1
jge 0x44ca2b
mov eax, dword [ebp - 0x870]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ca1f
mov eax, dword [ebp - 0x870]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ca26
and eax, 0xbc614e
jmp 0x44ca29
mov dword [ebp - 0x1c], eax
jmp 0x44c9e1
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ca39
jmp 0x44ca41
mov dword [ebp - 4], 3
mov dword [ebp - 0x874], 0
jmp 0x44ca63
mov edx, dword [ebp - 0x874]
add edx, 1
mov dword [ebp - 0x874], edx
cmp dword [ebp - 0x874], 7
jge 0x44ca9e
mov eax, dword [ebp - 0x874]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ca92
mov eax, dword [ebp - 0x874]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ca99
and eax, 0xbc614e
jmp 0x44ca9c
mov dword [ebp - 0x1c], eax
jmp 0x44ca54
mov dword [ebp - 4], 0xfffffffe
call fcn.0044caac
jmp 0x44cab4
mov dword [ebp - 0x878], 0
jmp 0x44cacf
mov edx, dword [ebp - 0x878]
add edx, 1
mov dword [ebp - 0x878], edx
cmp dword [ebp - 0x878], 8
jge 0x44cb06
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x878]
mov dword [ebp - 0x1c], eax
jge 0x44caee
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44cb04
mov dword [ebp - 0x1c], 0
jmp 0x44cac0
mov dword [ebp - 0x87c], 0
mov edx, 1
test edx, edx
je 0x44cb5a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x880]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44cb3c
jmp 0x44cb5a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x87c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x87c]
add eax, 1
mov dword [ebp - 0x87c], eax
jmp 0x44cb10
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x884], 0
jmp 0x44cb7e
mov edx, dword [ebp - 0x884]
add edx, 1
mov dword [ebp - 0x884], edx
cmp dword [ebp - 0x884], 0
jge 0x44cbcb
cmp dword [ebp - 0x1c], 0
jge 0x44cb95
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44cbab
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x888], 0xfa
lea edx, [ebp - 0x888]
push edx
lea eax, [ebp - 0xa80]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44cb6f
mov dword [ebp - 0xa84], 0
jmp 0x44cbe6
mov ecx, dword [ebp - 0xa84]
add ecx, 1
mov dword [ebp - 0xa84], ecx
cmp dword [ebp - 0xa84], 4
jge 0x44cc33
cmp dword [ebp - 0x1c], 0
jge 0x44cbfd
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44cc13
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa88], 0xfa
lea edx, [ebp - 0xa88]
push edx
lea eax, [ebp - 0xc80]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44cbd7
mov dword [ebp - 0xc84], 0
mov ecx, 1
test ecx, ecx
je 0x44cc87
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc88], eax
mov eax, dword [ebp - 0xc88]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44cc69
jmp 0x44cc87
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xc84]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc84]
add eax, 1
mov dword [ebp - 0xc84], eax
jmp 0x44cc3d
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xc8c], 0
jmp 0x44ccab
mov edx, dword [ebp - 0xc8c]
add edx, 1
mov dword [ebp - 0xc8c], edx
cmp dword [ebp - 0xc8c], 5
jge 0x44ccf8
cmp dword [ebp - 0x1c], 0
jge 0x44ccc2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ccd8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc90], 0xfa
lea edx, [ebp - 0xc90]
push edx
lea eax, [ebp - 0xe88]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44cc9c
mov dword [ebp - 0xe8c], 0
jmp 0x44cd13
mov ecx, dword [ebp - 0xe8c]
add ecx, 1
mov dword [ebp - 0xe8c], ecx
cmp dword [ebp - 0xe8c], 3
jge 0x44cd60
cmp dword [ebp - 0x1c], 0
jge 0x44cd2a
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44cd40
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xe90], 0xfa
lea edx, [ebp - 0xe90]
push edx
lea eax, [ebp - 0x1088]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44cd04
mov dword [ebp - 0x108c], 0
jmp 0x44cd7b
mov ecx, dword [ebp - 0x108c]
add ecx, 1
mov dword [ebp - 0x108c], ecx
cmp dword [ebp - 0x108c], 4
jge 0x44cdc8
cmp dword [ebp - 0x1c], 0
jge 0x44cd92
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44cda8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1090], 0xfa
lea edx, [ebp - 0x1090]
push edx
lea eax, [ebp - 0x1288]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44cd6c
mov dword [ebp - 0x128c], 0
mov ecx, 1
test ecx, ecx
je 0x44ce1c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1290], eax
mov eax, dword [ebp - 0x1290]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44cdfe
jmp 0x44ce1c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x128c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x128c]
add eax, 1
mov dword [ebp - 0x128c], eax
jmp 0x44cdd2
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x1294], 0
jmp 0x44ce47
mov edx, dword [ebp - 0x1294]
add edx, 1
mov dword [ebp - 0x1294], edx
cmp dword [ebp - 0x1294], 4
jge 0x44ce82
mov eax, dword [ebp - 0x1294]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44ce76
mov eax, dword [ebp - 0x1294]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44ce7d
and eax, 0xbc614e
jmp 0x44ce80
mov dword [ebp - 0x1c], eax
jmp 0x44ce38
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ce90
jmp 0x44ce98
mov edx, 1
test edx, edx
je 0x44ced2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1298], eax
mov eax, dword [ebp - 0x1298]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44cec4
jmp 0x44ced2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1298]
mov dword [ebp - 0x1c], edx
jmp 0x44ce98
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x129c], 0
jmp 0x44cef6
mov ecx, dword [ebp - 0x129c]
add ecx, 1
mov dword [ebp - 0x129c], ecx
cmp dword [ebp - 0x129c], 2
jge 0x44cf0d
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x129c]
mov dword [ebp - 0x1c], edx
jmp 0x44cee7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44cf1f
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44cf37
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x12a0], 0
jmp 0x44cf59
mov edx, dword [ebp - 0x12a0]
add edx, 1
mov dword [ebp - 0x12a0], edx
cmp dword [ebp - 0x12a0], 2
jge 0x44cf94
mov eax, dword [ebp - 0x12a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44cf88
mov eax, dword [ebp - 0x12a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44cf8f
and eax, 0xbc614e
jmp 0x44cf92
mov dword [ebp - 0x1c], eax
jmp 0x44cf4a
mov dword [ebp - 4], 0xfffffffe
call fcn.0044cfa2
jmp 0x44cfaa
mov dword [ebp - 0x12a4], 1
mov dword [ebp - 0x12a8], 1
mov dword [ebp - 0x12ac], 2
mov dword [ebp - 0x12b0], 0
mov dword [ebp - 0x12b4], 0
jmp 0x44cfed
mov edx, dword [ebp - 0x12b4]
add edx, 1
mov dword [ebp - 0x12b4], edx
cmp dword [ebp - 0x12b4], 4
jge 0x44d02e
mov eax, dword [ebp - 0x12a4]
add eax, dword [ebp - 0x12a8]
mov dword [ebp - 0x12ac], eax
mov ecx, dword [ebp - 0x12a8]
mov dword [ebp - 0x12a4], ecx
mov edx, dword [ebp - 0x12ac]
mov dword [ebp - 0x12a8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x12ac]
mov dword [ebp - 0x1c], eax
jmp 0x44cfde
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x12b8], 0
jmp 0x44d052
mov edx, dword [ebp - 0x12b8]
add edx, 1
mov dword [ebp - 0x12b8], edx
cmp dword [ebp - 0x12b8], 4
jge 0x44d089
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x12b8]
mov dword [ebp - 0x1c], eax
jge 0x44d071
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44d087
mov dword [ebp - 0x1c], 0
jmp 0x44d043
mov dword [ebp - 0x12bc], 0
mov edx, 1
test edx, edx
je 0x44d0dd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12c0], eax
mov eax, dword [ebp - 0x12c0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44d0bf
jmp 0x44d0dd
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x12bc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x12bc]
add eax, 1
mov dword [ebp - 0x12bc], eax
jmp 0x44d093
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x12c4], 0
jmp 0x44d0fe
mov edx, dword [ebp - 0x12c4]
add edx, 1
mov dword [ebp - 0x12c4], edx
cmp dword [ebp - 0x12c4], 1
jge 0x44d115
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x12c4]
mov dword [ebp - 0x1c], eax
jmp 0x44d0ef
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44d127
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d13f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44d179
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12c8], eax
mov eax, dword [ebp - 0x12c8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d16b
jmp 0x44d179
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12c8]
mov dword [ebp - 0x1c], edx
jmp 0x44d13f
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x12cc], 0
jmp 0x44d1a4
mov ecx, dword [ebp - 0x12cc]
add ecx, 1
mov dword [ebp - 0x12cc], ecx
cmp dword [ebp - 0x12cc], 3
jge 0x44d1df
mov eax, dword [ebp - 0x12cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44d1d3
mov eax, dword [ebp - 0x12cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44d1da
and eax, 0xbc614e
jmp 0x44d1dd
mov dword [ebp - 0x1c], eax
jmp 0x44d195
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d1ed
jmp 0x44d1f5
mov dword [ebp - 0x12d0], 0
mov edx, 1
test edx, edx
je 0x44d249
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12d4], eax
mov eax, dword [ebp - 0x12d4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44d22b
jmp 0x44d249
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x12d0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x12d0]
add eax, 1
mov dword [ebp - 0x12d0], eax
jmp 0x44d1ff
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x12d8], 0
jmp 0x44d26a
mov edx, dword [ebp - 0x12d8]
add edx, 1
mov dword [ebp - 0x12d8], edx
cmp dword [ebp - 0x12d8], 0
jge 0x44d281
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x12d8]
mov dword [ebp - 0x1c], eax
jmp 0x44d25b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44d293
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d2ab
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44d2e5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12dc], eax
mov eax, dword [ebp - 0x12dc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d2d7
jmp 0x44d2e5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12dc]
mov dword [ebp - 0x1c], edx
jmp 0x44d2ab
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44d328
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12e0], eax
mov eax, dword [ebp - 0x12e0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d31a
jmp 0x44d328
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12e0]
mov dword [ebp - 0x1c], edx
jmp 0x44d2ee
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12e4], 0
jmp 0x44d34c
mov ecx, dword [ebp - 0x12e4]
add ecx, 1
mov dword [ebp - 0x12e4], ecx
cmp dword [ebp - 0x12e4], 3
jge 0x44d363
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x12e4]
mov dword [ebp - 0x1c], edx
jmp 0x44d33d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44d375
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d38d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44d3c7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12e8], eax
mov eax, dword [ebp - 0x12e8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d3b9
jmp 0x44d3c7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12e8]
mov dword [ebp - 0x1c], edx
jmp 0x44d38d
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44d40a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12ec], eax
mov eax, dword [ebp - 0x12ec]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d3fc
jmp 0x44d40a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12ec]
mov dword [ebp - 0x1c], edx
jmp 0x44d3d0
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12f0], 0
jmp 0x44d42e
mov ecx, dword [ebp - 0x12f0]
add ecx, 1
mov dword [ebp - 0x12f0], ecx
cmp dword [ebp - 0x12f0], 1
jge 0x44d445
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x12f0]
mov dword [ebp - 0x1c], edx
jmp 0x44d41f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44d457
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d46f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12f4], 0
jmp 0x44d48a
mov edx, dword [ebp - 0x12f4]
add edx, 1
mov dword [ebp - 0x12f4], edx
cmp dword [ebp - 0x12f4], 2
jge 0x44d4d7
cmp dword [ebp - 0x1c], 0
jge 0x44d4a1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44d4b7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x12f8], 0xfa
lea edx, [ebp - 0x12f8]
push edx
lea eax, [ebp - 0x14f0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44d47b
mov dword [ebp - 0x14f4], 0
jmp 0x44d4f2
mov ecx, dword [ebp - 0x14f4]
add ecx, 1
mov dword [ebp - 0x14f4], ecx
cmp dword [ebp - 0x14f4], 1
jge 0x44d529
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x14f4]
mov dword [ebp - 0x1c], edx
jge 0x44d511
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44d527
mov dword [ebp - 0x1c], 0
jmp 0x44d4e3
mov edx, 1
test edx, edx
je 0x44d563
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x14f8], eax
mov eax, dword [ebp - 0x14f8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d555
jmp 0x44d563
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14f8]
mov dword [ebp - 0x1c], edx
jmp 0x44d529
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44d5a6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x14fc], eax
mov eax, dword [ebp - 0x14fc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d598
jmp 0x44d5a6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14fc]
mov dword [ebp - 0x1c], edx
jmp 0x44d56c
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1500], 1
mov dword [ebp - 0x1504], 1
mov dword [ebp - 0x1508], 2
mov dword [ebp - 0x150c], 0
mov dword [ebp - 0x1510], 0
jmp 0x44d5f2
mov ecx, dword [ebp - 0x1510]
add ecx, 1
mov dword [ebp - 0x1510], ecx
cmp dword [ebp - 0x1510], 0
jge 0x44d633
mov edx, dword [ebp - 0x1500]
add edx, dword [ebp - 0x1504]
mov dword [ebp - 0x1508], edx
mov eax, dword [ebp - 0x1504]
mov dword [ebp - 0x1500], eax
mov ecx, dword [ebp - 0x1508]
mov dword [ebp - 0x1504], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1508]
mov dword [ebp - 0x1c], edx
jmp 0x44d5e3
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1514], 0
jmp 0x44d654
mov ecx, dword [ebp - 0x1514]
add ecx, 1
mov dword [ebp - 0x1514], ecx
cmp dword [ebp - 0x1514], 0
jge 0x44d68b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1514]
mov dword [ebp - 0x1c], edx
jge 0x44d673
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44d689
mov dword [ebp - 0x1c], 0
jmp 0x44d645
mov dword [ebp - 4], 7
mov dword [ebp - 0x1518], 0
jmp 0x44d6ad
mov edx, dword [ebp - 0x1518]
add edx, 1
mov dword [ebp - 0x1518], edx
cmp dword [ebp - 0x1518], 2
jge 0x44d6e8
mov eax, dword [ebp - 0x1518]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44d6dc
mov eax, dword [ebp - 0x1518]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44d6e3
and eax, 0xbc614e
jmp 0x44d6e6
mov dword [ebp - 0x1c], eax
jmp 0x44d69e
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d6f6
jmp 0x44d6fe
mov dword [ebp - 0x151c], 0
jmp 0x44d719
mov edx, dword [ebp - 0x151c]
add edx, 1
mov dword [ebp - 0x151c], edx
cmp dword [ebp - 0x151c], 4
jge 0x44d730
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x151c]
mov dword [ebp - 0x1c], eax
jmp 0x44d70a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44d742
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d75a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44d794
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1520], eax
mov eax, dword [ebp - 0x1520]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44d786
jmp 0x44d794
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1520]
mov dword [ebp - 0x1c], edx
jmp 0x44d75a
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1524], 0
jmp 0x44d7b8
mov ecx, dword [ebp - 0x1524]
add ecx, 1
mov dword [ebp - 0x1524], ecx
cmp dword [ebp - 0x1524], 4
jge 0x44d805
cmp dword [ebp - 0x1c], 0
jge 0x44d7cf
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44d7e5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1528], 0xfa
lea edx, [ebp - 0x1528]
push edx
lea eax, [ebp - 0x1720]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44d7a9
mov dword [ebp - 0x1724], 0
jmp 0x44d820
mov ecx, dword [ebp - 0x1724]
add ecx, 1
mov dword [ebp - 0x1724], ecx
cmp dword [ebp - 0x1724], 3
jge 0x44d857
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1724]
mov dword [ebp - 0x1c], edx
jge 0x44d83f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44d855
mov dword [ebp - 0x1c], 0
jmp 0x44d811
mov dword [ebp - 0x1728], 0
mov edx, 1
test edx, edx
je 0x44d8ab
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x172c], eax
mov eax, dword [ebp - 0x172c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44d88d
jmp 0x44d8ab
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1728]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1728]
add eax, 1
mov dword [ebp - 0x1728], eax
jmp 0x44d861
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1730], 0
mov edx, 1
test edx, edx
je 0x44d908
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1734], eax
mov eax, dword [ebp - 0x1734]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44d8ea
jmp 0x44d908
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1730]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1730]
add eax, 1
mov dword [ebp - 0x1730], eax
jmp 0x44d8be
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1738], 0
jmp 0x44d92c
mov edx, dword [ebp - 0x1738]
add edx, 1
mov dword [ebp - 0x1738], edx
cmp dword [ebp - 0x1738], 3
jge 0x44d943
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1738]
mov dword [ebp - 0x1c], eax
jmp 0x44d91d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44d955
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d96d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x173c], 0
jmp 0x44d988
mov edx, dword [ebp - 0x173c]
add edx, 1
mov dword [ebp - 0x173c], edx
cmp dword [ebp - 0x173c], 4
jge 0x44d99f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x173c]
mov dword [ebp - 0x1c], eax
jmp 0x44d979
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44d9b1
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44d9c9
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1740], 0
jmp 0x44d9e4
cmp dword [ebp - 0x1740], 2
jge 0x44da1b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1740]
mov dword [ebp - 0x1c], eax
jge 0x44da03
mov dword [ebp - 0x1744], 0
jmp 0x44da36