Function at 0x44fb20
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x5111b0
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x3350
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x44fb79
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x33
jge 0x44fb8a
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x44fb70
cmp dword [ebp - 0x1c], 0
jge 0x44fb98
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44fbb0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x44fbc2
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1d
jge 0x44fc00
cmp dword [ebp - 0x1c], 0
jge 0x44fbd6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44fbec
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44fbb9
mov dword [ebp - 0x224], 0
jmp 0x44fc1b
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x11
jge 0x44fc68
cmp dword [ebp - 0x1c], 0
jge 0x44fc32
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44fc48
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x228], 0xfa
lea edx, [ebp - 0x228]
push edx
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44fc0c
mov ecx, 1
test ecx, ecx
je 0x44fca2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x424]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44fc94
jmp 0x44fca2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x424]
mov dword [ebp - 0x1c], edx
jmp 0x44fc68
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x428], 0
jmp 0x44fcc6
mov ecx, dword [ebp - 0x428]
add ecx, 1
mov dword [ebp - 0x428], ecx
cmp dword [ebp - 0x428], 8
jge 0x44fd13
mov eax, dword [ebp - 0x428]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44fcf5
mov eax, dword [ebp - 0x428]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44fd05
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x428]
mov dword [ebp - 0x1c], edx
jmp 0x44fd11
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x428]
mov dword [ebp - 0x1c], eax
jmp 0x44fcb7
mov dword [ebp - 4], 0
mov dword [ebp - 0x42c], 0xffffffff
mov dword [ebp - 0x430], 0
jmp 0x44fd3f
mov ecx, dword [ebp - 0x430]
add ecx, 1
mov dword [ebp - 0x430], ecx
cmp dword [ebp - 0x430], 0xc
jge 0x44fd71
mov eax, dword [ebp - 0x430]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x44fd66
mov edx, dword [ebp - 0x42c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x44fd30
mov dword [ebp - 4], 0xfffffffe
jmp 0x44fd91
mov edx, 1
test edx, edx
je 0x44fdcb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x434]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44fdbd
jmp 0x44fdcb
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x434]
mov dword [ebp - 0x1c], edx
jmp 0x44fd91
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44fe0e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44fe00
jmp 0x44fe0e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x438]
mov dword [ebp - 0x1c], edx
jmp 0x44fdd4
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x43c], 0
jmp 0x44fe32
mov ecx, dword [ebp - 0x43c]
add ecx, 1
mov dword [ebp - 0x43c], ecx
cmp dword [ebp - 0x43c], 0xd
jge 0x44fe7f
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x44fe61
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x44fe71
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x43c]
mov dword [ebp - 0x1c], edx
jmp 0x44fe7d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x43c]
mov dword [ebp - 0x1c], eax
jmp 0x44fe23
mov dword [ebp - 0x440], 0
jmp 0x44fe9a
mov ecx, dword [ebp - 0x440]
add ecx, 1
mov dword [ebp - 0x440], ecx
cmp dword [ebp - 0x440], 3
jge 0x44fee7
cmp dword [ebp - 0x1c], 0
jge 0x44feb1
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44fec7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x444], 0xfa
lea edx, [ebp - 0x444]
push edx
lea eax, [ebp - 0x640]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44fe8b
mov dword [ebp - 0x644], 0
jmp 0x44ff02
mov ecx, dword [ebp - 0x644]
add ecx, 1
mov dword [ebp - 0x644], ecx
cmp dword [ebp - 0x644], 3
jge 0x44ff19
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x644]
mov dword [ebp - 0x1c], edx
jmp 0x44fef3
cmp dword [ebp - 0x1c], 0
jge 0x44ff27
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44ff3f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x44ff79
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x648]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44ff6b
jmp 0x44ff79
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x648]
mov dword [ebp - 0x1c], edx
jmp 0x44ff3f
mov eax, dword [ebp - 0x1c]
add eax, 0xb
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x64c], 0
jmp 0x44ff9d
mov ecx, dword [ebp - 0x64c]
add ecx, 1
mov dword [ebp - 0x64c], ecx
cmp dword [ebp - 0x64c], 0xa
jge 0x44ffde
cmp dword [ebp - 0x1c], 0
jge 0x44ffb4
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44ffca
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x848]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x44ff8e
mov dword [ebp - 0x84c], 0
jmp 0x44fff9
mov eax, dword [ebp - 0x84c]
add eax, 1
mov dword [ebp - 0x84c], eax
cmp dword [ebp - 0x84c], 8
jge 0x450046
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x450028
mov eax, dword [ebp - 0x84c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x450038
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], edx
jmp 0x450044
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x84c]
mov dword [ebp - 0x1c], eax
jmp 0x44ffea
mov dword [ebp - 4], 1
mov dword [ebp - 0x850], 0xffffffff
mov dword [ebp - 0x854], 0
jmp 0x450072
mov ecx, dword [ebp - 0x854]
add ecx, 1
mov dword [ebp - 0x854], ecx
cmp dword [ebp - 0x854], 0x10
jge 0x4500a4
mov eax, dword [ebp - 0x854]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x450099
mov edx, dword [ebp - 0x850]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x450063
mov dword [ebp - 4], 0xfffffffe
jmp 0x4500c4
mov dword [ebp - 0x858], 0
jmp 0x4500df
mov edx, dword [ebp - 0x858]
add edx, 1
mov dword [ebp - 0x858], edx
cmp dword [ebp - 0x858], 7
jge 0x4500f6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x858]
mov dword [ebp - 0x1c], eax
jmp 0x4500d0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x450108
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450120
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x85c], 0
jmp 0x45013b
mov edx, dword [ebp - 0x85c]
add edx, 1
mov dword [ebp - 0x85c], edx
cmp dword [ebp - 0x85c], 7
jge 0x450152
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x85c]
mov dword [ebp - 0x1c], eax
jmp 0x45012c
cmp dword [ebp - 0x1c], 0
jge 0x450160
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450178
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4501b2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0x860]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4501a4
jmp 0x4501b2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x860]
mov dword [ebp - 0x1c], edx
jmp 0x450178
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x864], 0
jmp 0x4501d6
mov ecx, dword [ebp - 0x864]
add ecx, 1
mov dword [ebp - 0x864], ecx
cmp dword [ebp - 0x864], 7
jge 0x450217
cmp dword [ebp - 0x1c], 0
jge 0x4501ed
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450203
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xa60]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4501c7
mov dword [ebp - 0xa64], 0
jmp 0x450232
mov eax, dword [ebp - 0xa64]
add eax, 1
mov dword [ebp - 0xa64], eax
cmp dword [ebp - 0xa64], 5
jge 0x450273
cmp dword [ebp - 0x1c], 0
jge 0x450249
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45025f
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x450223
mov dword [ebp - 0xc64], 0
jmp 0x45028e
mov eax, dword [ebp - 0xc64]
add eax, 1
mov dword [ebp - 0xc64], eax
cmp dword [ebp - 0xc64], 0
jge 0x4502db
mov eax, dword [ebp - 0xc64]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4502bd
mov eax, dword [ebp - 0xc64]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4502cd
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc64]
mov dword [ebp - 0x1c], edx
jmp 0x4502d9
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xc64]
mov dword [ebp - 0x1c], eax
jmp 0x45027f
mov dword [ebp - 0xc68], 0
jmp 0x4502f6
mov ecx, dword [ebp - 0xc68]
add ecx, 1
mov dword [ebp - 0xc68], ecx
cmp dword [ebp - 0xc68], 6
jge 0x45030d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xc68]
mov dword [ebp - 0x1c], edx
jmp 0x4502e7
cmp dword [ebp - 0x1c], 0
jge 0x45031b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450333
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc6c], 0
jmp 0x45034e
mov edx, dword [ebp - 0xc6c]
add edx, 1
mov dword [ebp - 0xc6c], edx
cmp dword [ebp - 0xc6c], 8
jge 0x450365
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xc6c]
mov dword [ebp - 0x1c], eax
jmp 0x45033f
cmp dword [ebp - 0x1c], 0
jge 0x450373
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45038b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc70], 0
jmp 0x4503a6
mov edx, dword [ebp - 0xc70]
add edx, 1
mov dword [ebp - 0xc70], edx
cmp dword [ebp - 0xc70], 2
jge 0x4503bd
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc70]
mov dword [ebp - 0x1c], eax
jmp 0x450397
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4503cf
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4503e7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc74], 0
jmp 0x450402
mov edx, dword [ebp - 0xc74]
add edx, 1
mov dword [ebp - 0xc74], edx
cmp dword [ebp - 0xc74], 4
jge 0x450419
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xc74]
mov dword [ebp - 0x1c], eax
jmp 0x4503f3
cmp dword [ebp - 0x1c], 0
jge 0x450427
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45043f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0xc78], 0xffffffff
mov dword [ebp - 0xc7c], 0
jmp 0x45046b
mov edx, dword [ebp - 0xc7c]
add edx, 1
mov dword [ebp - 0xc7c], edx
cmp dword [ebp - 0xc7c], 2
jge 0x45049d
mov eax, dword [ebp - 0xc7c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x450492
mov edx, dword [ebp - 0xc78]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x45045c
mov dword [ebp - 4], 0xfffffffe
jmp 0x4504bd
mov dword [ebp - 0xc80], 0
jmp 0x4504d8
mov edx, dword [ebp - 0xc80]
add edx, 1
mov dword [ebp - 0xc80], edx
cmp dword [ebp - 0xc80], 3
jge 0x4504ef
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc80]
mov dword [ebp - 0x1c], eax
jmp 0x4504c9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x450501
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450519
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x450553
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc84], eax
mov eax, dword [ebp - 0xc84]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x450545
jmp 0x450553
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc84]
mov dword [ebp - 0x1c], edx
jmp 0x450519
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc88], 0
jmp 0x450577
mov ecx, dword [ebp - 0xc88]
add ecx, 1
mov dword [ebp - 0xc88], ecx
cmp dword [ebp - 0xc88], 4
jge 0x45058e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xc88]
mov dword [ebp - 0x1c], edx
jmp 0x450568
cmp dword [ebp - 0x1c], 0
jge 0x45059c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4505b4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc8c], 0
jmp 0x4505cf
mov edx, dword [ebp - 0xc8c]
add edx, 1
mov dword [ebp - 0xc8c], edx
cmp dword [ebp - 0xc8c], 4
jge 0x450610
cmp dword [ebp - 0x1c], 0
jge 0x4505e6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4505fc
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0xe88]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4505c0
mov dword [ebp - 0xe8c], 0
jmp 0x45062b
mov eax, dword [ebp - 0xe8c]
add eax, 1
mov dword [ebp - 0xe8c], eax
cmp dword [ebp - 0xe8c], 2
jge 0x450678
mov eax, dword [ebp - 0xe8c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x45065a
mov eax, dword [ebp - 0xe8c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x45066a
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe8c]
mov dword [ebp - 0x1c], edx
jmp 0x450676
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe8c]
mov dword [ebp - 0x1c], eax
jmp 0x45061c
mov dword [ebp - 0xe90], 0
jmp 0x450693
mov ecx, dword [ebp - 0xe90]
add ecx, 1
mov dword [ebp - 0xe90], ecx
cmp dword [ebp - 0xe90], 4
jge 0x4506e0
mov eax, dword [ebp - 0xe90]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4506c2
mov eax, dword [ebp - 0xe90]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4506d2
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe90]
mov dword [ebp - 0x1c], edx
jmp 0x4506de
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe90]
mov dword [ebp - 0x1c], eax
jmp 0x450684
mov dword [ebp - 4], 3
mov dword [ebp - 0xe94], 0xffffffff
mov dword [ebp - 0xe98], 0
jmp 0x45070c
mov ecx, dword [ebp - 0xe98]
add ecx, 1
mov dword [ebp - 0xe98], ecx
cmp dword [ebp - 0xe98], 3
jge 0x45073e
mov eax, dword [ebp - 0xe98]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x450733
mov edx, dword [ebp - 0xe94]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4506fd
mov dword [ebp - 4], 0xfffffffe
jmp 0x45075e
mov dword [ebp - 0xe9c], 0
jmp 0x450779
mov edx, dword [ebp - 0xe9c]
add edx, 1
mov dword [ebp - 0xe9c], edx
cmp dword [ebp - 0xe9c], 5
jge 0x4507c6
mov eax, dword [ebp - 0xe9c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4507a8
mov eax, dword [ebp - 0xe9c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4507b8
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe9c]
mov dword [ebp - 0x1c], edx
jmp 0x4507c4
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe9c]
mov dword [ebp - 0x1c], eax
jmp 0x45076a
mov dword [ebp - 4], 4
mov dword [ebp - 0xea0], 0xffffffff
mov dword [ebp - 0xea4], 0
jmp 0x4507f2
mov ecx, dword [ebp - 0xea4]
add ecx, 1
mov dword [ebp - 0xea4], ecx
cmp dword [ebp - 0xea4], 6
jge 0x450824
mov eax, dword [ebp - 0xea4]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x450819
mov edx, dword [ebp - 0xea0]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4507e3
mov dword [ebp - 4], 0xfffffffe
jmp 0x450844
mov dword [ebp - 0xea8], 0
jmp 0x45085f
mov edx, dword [ebp - 0xea8]
add edx, 1
mov dword [ebp - 0xea8], edx
cmp dword [ebp - 0xea8], 2
jge 0x4508ac
mov eax, dword [ebp - 0xea8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x45088e
mov eax, dword [ebp - 0xea8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x45089e
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xea8]
mov dword [ebp - 0x1c], edx
jmp 0x4508aa
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xea8]
mov dword [ebp - 0x1c], eax
jmp 0x450850
mov dword [ebp - 0xeac], 0
jmp 0x4508c7
mov ecx, dword [ebp - 0xeac]
add ecx, 1
mov dword [ebp - 0xeac], ecx
cmp dword [ebp - 0xeac], 4
jge 0x450914
mov eax, dword [ebp - 0xeac]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4508f6
mov eax, dword [ebp - 0xeac]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x450906
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xeac]
mov dword [ebp - 0x1c], edx
jmp 0x450912
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xeac]
mov dword [ebp - 0x1c], eax
jmp 0x4508b8
mov dword [ebp - 0xeb0], 0
jmp 0x45092f
mov ecx, dword [ebp - 0xeb0]
add ecx, 1
mov dword [ebp - 0xeb0], ecx
cmp dword [ebp - 0xeb0], 2
jge 0x45097c
cmp dword [ebp - 0x1c], 0
jge 0x450946
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45095c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xeb4], 0xfa
lea edx, [ebp - 0xeb4]
push edx
lea eax, [ebp - 0x10b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x450920
mov dword [ebp - 0x10b4], 0
jmp 0x450997
mov ecx, dword [ebp - 0x10b4]
add ecx, 1
mov dword [ebp - 0x10b4], ecx
cmp dword [ebp - 0x10b4], 0
jge 0x4509e4
mov eax, dword [ebp - 0x10b4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4509c6
mov eax, dword [ebp - 0x10b4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4509d6
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10b4]
mov dword [ebp - 0x1c], edx
jmp 0x4509e2
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x10b4]
mov dword [ebp - 0x1c], eax
jmp 0x450988
mov dword [ebp - 0x10b8], 0
jmp 0x4509ff
mov ecx, dword [ebp - 0x10b8]
add ecx, 1
mov dword [ebp - 0x10b8], ecx
cmp dword [ebp - 0x10b8], 2
jge 0x450a16
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10b8]
mov dword [ebp - 0x1c], edx
jmp 0x4509f0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x450a28
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450a40
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x450a7a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x10bc], eax
mov eax, dword [ebp - 0x10bc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x450a6c
jmp 0x450a7a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10bc]
mov dword [ebp - 0x1c], edx
jmp 0x450a40
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x10c0], 0xffffffff
mov dword [ebp - 0x10c4], 0
jmp 0x450aaf
mov ecx, dword [ebp - 0x10c4]
add ecx, 1
mov dword [ebp - 0x10c4], ecx
cmp dword [ebp - 0x10c4], 4
jge 0x450ae1
mov eax, dword [ebp - 0x10c4]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x450ad6
mov edx, dword [ebp - 0x10c0]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x450aa0
mov dword [ebp - 4], 0xfffffffe
jmp 0x450b01
mov dword [ebp - 0x10c8], 0
jmp 0x450b1c
mov edx, dword [ebp - 0x10c8]
add edx, 1
mov dword [ebp - 0x10c8], edx
cmp dword [ebp - 0x10c8], 1
jge 0x450b69
mov eax, dword [ebp - 0x10c8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x450b4b
mov eax, dword [ebp - 0x10c8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x450b5b
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10c8]
mov dword [ebp - 0x1c], edx
jmp 0x450b67
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x10c8]
mov dword [ebp - 0x1c], eax
jmp 0x450b0d
mov dword [ebp - 0x10cc], 0
jmp 0x450b84
mov ecx, dword [ebp - 0x10cc]
add ecx, 1
mov dword [ebp - 0x10cc], ecx
cmp dword [ebp - 0x10cc], 2
jge 0x450bc5
cmp dword [ebp - 0x1c], 0
jge 0x450b9b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450bb1
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x12c8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x450b75
mov dword [ebp - 0x12cc], 0
jmp 0x450be0
mov eax, dword [ebp - 0x12cc]
add eax, 1
mov dword [ebp - 0x12cc], eax
cmp dword [ebp - 0x12cc], 4
jge 0x450bf7
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x12cc]
mov dword [ebp - 0x1c], ecx
jmp 0x450bd1
cmp dword [ebp - 0x1c], 0
jge 0x450c05
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450c1d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x450c57
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12d0], eax
mov eax, dword [ebp - 0x12d0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x450c49
jmp 0x450c57
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12d0]
mov dword [ebp - 0x1c], edx
jmp 0x450c1d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12d4], 0
jmp 0x450c78
mov ecx, dword [ebp - 0x12d4]
add ecx, 1
mov dword [ebp - 0x12d4], ecx
cmp dword [ebp - 0x12d4], 1
jge 0x450cc5
mov eax, dword [ebp - 0x12d4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x450ca7
mov eax, dword [ebp - 0x12d4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x450cb7
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x12d4]
mov dword [ebp - 0x1c], edx
jmp 0x450cc3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x12d4]
mov dword [ebp - 0x1c], eax
jmp 0x450c69
mov dword [ebp - 0x12d8], 0
jmp 0x450ce0
mov ecx, dword [ebp - 0x12d8]
add ecx, 1
mov dword [ebp - 0x12d8], ecx
cmp dword [ebp - 0x12d8], 2
jge 0x450cf7
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x12d8]
mov dword [ebp - 0x1c], edx
jmp 0x450cd1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x450d09
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450d21
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x12dc], 0xffffffff
mov dword [ebp - 0x12e0], 0
jmp 0x450d4d
mov edx, dword [ebp - 0x12e0]
add edx, 1
mov dword [ebp - 0x12e0], edx
cmp dword [ebp - 0x12e0], 3
jge 0x450d7f
mov eax, dword [ebp - 0x12e0]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x450d74
mov edx, dword [ebp - 0x12dc]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x450d3e
mov dword [ebp - 4], 0xfffffffe
jmp 0x450d9f
mov dword [ebp - 0x12e4], 0
jmp 0x450dba
mov edx, dword [ebp - 0x12e4]
add edx, 1
mov dword [ebp - 0x12e4], edx
cmp dword [ebp - 0x12e4], 0
jge 0x450dfb
cmp dword [ebp - 0x1c], 0
jge 0x450dd1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450de7
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x14e0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x450dab
mov dword [ebp - 0x14e4], 0
jmp 0x450e16
cmp dword [ebp - 0x14e4], 0
jge 0x450e63
mov eax, dword [ebp - 0x14e4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x450e45
mov eax, dword [ebp - 0x14e4]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x450e55
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14e4]
mov dword [ebp - 0x1c], edx
jmp 0x450e61
mov ecx, 1
test ecx, ecx
je 0x450e9d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x14e8], eax
mov eax, dword [ebp - 0x14e8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x450e8f
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14ec], 0
jmp 0x450ec1