Function at 0x4449d0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e220
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffc70
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0xa0], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x444a22
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x37
jge 0x444a33
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x444a19
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x444a45
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x444a5d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x444a6f
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x37
jge 0x444aa0
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jge 0x444a88
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444a9e
mov dword [ebp - 0x1c], 0
jmp 0x444a66
mov edx, 1
test edx, edx
je 0x444ad1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x444ac6
jmp 0x444ad1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x444aa0
mov eax, dword [ebp - 0x1c]
add eax, 0x12
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x444b0b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x444b00
jmp 0x444b0b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jmp 0x444ada
mov eax, dword [ebp - 0x1c]
add eax, 0x1d
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 0
mov ecx, 1
test ecx, ecx
je 0x444b56
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x444b41
jmp 0x444b56
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
jmp 0x444b1b
mov ecx, dword [ebp - 0x1c]
add ecx, 0x14
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], 0
jmp 0x444b78
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 8
jge 0x444baa
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x444b9e
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444ba5
and eax, 0xbc614e
jmp 0x444ba8
mov dword [ebp - 0x1c], eax
jmp 0x444b6f
mov dword [ebp - 4], 0xfffffffe
call fcn.00444bb8
jmp 0x444bc0
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
jmp 0x444bee
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0x19
jge 0x444c14
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x444be5
mov ecx, dword [ebp - 0x1c]
add ecx, 0x19
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x50], 0
mov edx, 1
test edx, edx
je 0x444c5f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x444c4a
jmp 0x444c5f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
jmp 0x444c24
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x58], 0
jmp 0x444c77
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 0xd
jge 0x444ca8
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
jge 0x444c90
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444ca6
mov dword [ebp - 0x1c], 0
jmp 0x444c6e
mov edx, 1
test edx, edx
je 0x444cd9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x444cce
jmp 0x444cd9
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], edx
jmp 0x444ca8
mov eax, dword [ebp - 0x1c]
add eax, 0xe
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x68], 2
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
jmp 0x444d10
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 0x10
jge 0x444d36
mov edx, dword [ebp - 0x60]
add edx, dword [ebp - 0x64]
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], edx
jmp 0x444d07
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x444d70
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x444d65
jmp 0x444d70
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x74]
mov dword [ebp - 0x1c], edx
jmp 0x444d3f
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x78], 0
jmp 0x444d92
mov ecx, dword [ebp - 0x78]
add ecx, 1
mov dword [ebp - 0x78], ecx
cmp dword [ebp - 0x78], 9
jge 0x444dc4
mov eax, dword [ebp - 0x78]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x444db8
mov eax, dword [ebp - 0x78]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444dbf
and eax, 0xbc614e
jmp 0x444dc2
mov dword [ebp - 0x1c], eax
jmp 0x444d89
mov dword [ebp - 4], 0xfffffffe
call fcn.00444dd2
jmp 0x444dda
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x84], 2
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0
jmp 0x444e17
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 9
jge 0x444e49
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x80]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0x1c], eax
jmp 0x444e08
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x90], 0
mov edx, 1
test edx, edx
je 0x444ea6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x444e88
jmp 0x444ea6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x90]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
jmp 0x444e5c
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x98], 0
jmp 0x444eca
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 0xe
jge 0x444f17
cmp dword [ebp - 0x1c], 0
jge 0x444ee1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444ef7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x9c], 0xfa
lea edx, [ebp - 0x9c]
push edx
lea eax, [ebp - 0x298]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x444ebb
mov dword [ebp - 0x29c], 0
jmp 0x444f32
mov ecx, dword [ebp - 0x29c]
add ecx, 1
mov dword [ebp - 0x29c], ecx
cmp dword [ebp - 0x29c], 0
jge 0x444f49
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x29c]
mov dword [ebp - 0x1c], edx
jmp 0x444f23
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x444f5b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x444f73
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2a0], 0
jmp 0x444f8e
mov edx, dword [ebp - 0x2a0]
add edx, 1
mov dword [ebp - 0x2a0], edx
cmp dword [ebp - 0x2a0], 0xb
jge 0x444fc5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x1c], eax
jge 0x444fad
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444fc3
mov dword [ebp - 0x1c], 0
jmp 0x444f7f
mov dword [ebp - 0x2a4], 1
mov dword [ebp - 0x2a8], 1
mov dword [ebp - 0x2ac], 2
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2b4], 0
jmp 0x445008
mov edx, dword [ebp - 0x2b4]
add edx, 1
mov dword [ebp - 0x2b4], edx
cmp dword [ebp - 0x2b4], 0xa
jge 0x445049
mov eax, dword [ebp - 0x2a4]
add eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2a4], ecx
mov edx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2a8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x1c], eax
jmp 0x444ff9
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2b8], 0
jmp 0x44506d
mov edx, dword [ebp - 0x2b8]
add edx, 1
mov dword [ebp - 0x2b8], edx
cmp dword [ebp - 0x2b8], 8
jge 0x4450a4
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x1c], eax
jge 0x44508c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4450a2
mov dword [ebp - 0x1c], 0
jmp 0x44505e
mov dword [ebp - 0x2bc], 0
mov edx, 1
test edx, edx
je 0x4450f8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2c0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4450da
jmp 0x4450f8
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2bc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2bc]
add eax, 1
mov dword [ebp - 0x2bc], eax
jmp 0x4450ae
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c4], 0
jmp 0x445119
mov edx, dword [ebp - 0x2c4]
add edx, 1
mov dword [ebp - 0x2c4], edx
cmp dword [ebp - 0x2c4], 8
jge 0x445130
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x1c], eax
jmp 0x44510a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x445142
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44515a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c8], 0
jmp 0x445175
mov edx, dword [ebp - 0x2c8]
add edx, 1
mov dword [ebp - 0x2c8], edx
cmp dword [ebp - 0x2c8], 1
jge 0x44518c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x1c], eax
jmp 0x445166
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44519e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4451b6
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2cc], 1
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0x2d4], 2
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2dc], 0
jmp 0x4451f9
mov edx, dword [ebp - 0x2dc]
add edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jge 0x44523a
mov eax, dword [ebp - 0x2cc]
add eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x2d4], eax
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp - 0x2cc], ecx
mov edx, dword [ebp - 0x2d4]
mov dword [ebp - 0x2d0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x1c], eax
jmp 0x4451ea
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2e0], 0
jmp 0x44525e
mov edx, dword [ebp - 0x2e0]
add edx, 1
mov dword [ebp - 0x2e0], edx
cmp dword [ebp - 0x2e0], 0
jge 0x445295
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x1c], eax
jge 0x44527d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445293
mov dword [ebp - 0x1c], 0
jmp 0x44524f
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x2ec], 2
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2f4], 0
jmp 0x4452d8
mov edx, dword [ebp - 0x2f4]
add edx, 1
mov dword [ebp - 0x2f4], edx
cmp dword [ebp - 0x2f4], 8
jge 0x445319
mov eax, dword [ebp - 0x2e4]
add eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp - 0x2e4], ecx
mov edx, dword [ebp - 0x2ec]
mov dword [ebp - 0x2e8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x1c], eax
jmp 0x4452c9
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2f8], 0
jmp 0x44533d
mov edx, dword [ebp - 0x2f8]
add edx, 1
mov dword [ebp - 0x2f8], edx
cmp dword [ebp - 0x2f8], 5
jge 0x445354
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x1c], eax
jmp 0x44532e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x445366
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44537e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0x300], 1
mov dword [ebp - 0x304], 2
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x30c], 0
jmp 0x4453c1
mov edx, dword [ebp - 0x30c]
add edx, 1
mov dword [ebp - 0x30c], edx
cmp dword [ebp - 0x30c], 7
jge 0x445402
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x300]
mov dword [ebp - 0x304], eax
mov ecx, dword [ebp - 0x300]
mov dword [ebp - 0x2fc], ecx
mov edx, dword [ebp - 0x304]
mov dword [ebp - 0x300], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x304]
mov dword [ebp - 0x1c], eax
jmp 0x4453b2
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x310], 0
jmp 0x44542d
mov edx, dword [ebp - 0x310]
add edx, 1
mov dword [ebp - 0x310], edx
cmp dword [ebp - 0x310], 4
jge 0x445468
mov eax, dword [ebp - 0x310]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44545c
mov eax, dword [ebp - 0x310]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x445463
and eax, 0xbc614e
jmp 0x445466
mov dword [ebp - 0x1c], eax
jmp 0x44541e
mov dword [ebp - 4], 0xfffffffe
call fcn.00445476
jmp 0x44547e
mov dword [ebp - 0x314], 1
mov dword [ebp - 0x318], 1
mov dword [ebp - 0x31c], 2
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x324], 0
jmp 0x4454c1
mov edx, dword [ebp - 0x324]
add edx, 1
mov dword [ebp - 0x324], edx
cmp dword [ebp - 0x324], 7
jge 0x445502
mov eax, dword [ebp - 0x314]
add eax, dword [ebp - 0x318]
mov dword [ebp - 0x31c], eax
mov ecx, dword [ebp - 0x318]
mov dword [ebp - 0x314], ecx
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x318], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x31c]
mov dword [ebp - 0x1c], eax
jmp 0x4454b2
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x445545
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x445537
jmp 0x445545
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x328]
mov dword [ebp - 0x1c], edx
jmp 0x44550b
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x32c], 0
jmp 0x445570
mov ecx, dword [ebp - 0x32c]
add ecx, 1
mov dword [ebp - 0x32c], ecx
cmp dword [ebp - 0x32c], 4
jge 0x4455ab
mov eax, dword [ebp - 0x32c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44559f
mov eax, dword [ebp - 0x32c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4455a6
and eax, 0xbc614e
jmp 0x4455a9
mov dword [ebp - 0x1c], eax
jmp 0x445561
mov dword [ebp - 4], 0xfffffffe
call fcn.004455b9
jmp 0x4455c1
mov dword [ebp - 0x330], 0
jmp 0x4455dc
mov edx, dword [ebp - 0x330]
add edx, 1
mov dword [ebp - 0x330], edx
cmp dword [ebp - 0x330], 7
jge 0x445613
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x330]
mov dword [ebp - 0x1c], eax
jge 0x4455fb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445611
mov dword [ebp - 0x1c], 0
jmp 0x4455cd
mov dword [ebp - 0x334], 0
jmp 0x44562e
mov edx, dword [ebp - 0x334]
add edx, 1
mov dword [ebp - 0x334], edx
cmp dword [ebp - 0x334], 2
jge 0x445665
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x334]
mov dword [ebp - 0x1c], eax
jge 0x44564d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445663
mov dword [ebp - 0x1c], 0
jmp 0x44561f
mov dword [ebp - 0x338], 0
jmp 0x445680
mov edx, dword [ebp - 0x338]
add edx, 1
mov dword [ebp - 0x338], edx
cmp dword [ebp - 0x338], 8
jge 0x4456b7
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x338]
mov dword [ebp - 0x1c], eax
jge 0x44569f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4456b5
mov dword [ebp - 0x1c], 0
jmp 0x445671
mov dword [ebp - 0x33c], 0
jmp 0x4456d2
mov edx, dword [ebp - 0x33c]
add edx, 1
mov dword [ebp - 0x33c], edx
cmp dword [ebp - 0x33c], 1
jge 0x445709
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x33c]
mov dword [ebp - 0x1c], eax
jge 0x4456f1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x445707
mov dword [ebp - 0x1c], 0
jmp 0x4456c3
mov dword [ebp - 0x340], 1
mov dword [ebp - 0x344], 1
mov dword [ebp - 0x348], 2
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x350], 0
jmp 0x44574c
mov edx, dword [ebp - 0x350]
add edx, 1
mov dword [ebp - 0x350], edx
cmp dword [ebp - 0x350], 7
jge 0x44578d
mov eax, dword [ebp - 0x340]
add eax, dword [ebp - 0x344]
mov dword [ebp - 0x348], eax
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x340], ecx
mov edx, dword [ebp - 0x348]
mov dword [ebp - 0x344], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x348]
mov dword [ebp - 0x1c], eax
jmp 0x44573d
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4457d0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4457c2
jmp 0x4457d0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x354]
mov dword [ebp - 0x1c], edx
jmp 0x445796
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x358], 0
jmp 0x4457fb
mov ecx, dword [ebp - 0x358]
add ecx, 1
mov dword [ebp - 0x358], ecx
cmp dword [ebp - 0x358], 5
jge 0x445836
mov eax, dword [ebp - 0x358]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44582a
mov eax, dword [ebp - 0x358]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x445831
and eax, 0xbc614e
jmp 0x445834
mov dword [ebp - 0x1c], eax
jmp 0x4457ec
mov dword [ebp - 4], 0xfffffffe
call fcn.00445844
jmp 0x44584c
mov edx, 1
test edx, edx
je 0x445886
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x445878
jmp 0x445886
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x35c]
mov dword [ebp - 0x1c], edx
jmp 0x44584c
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x360], 0
jmp 0x4458aa
mov ecx, dword [ebp - 0x360]
add ecx, 1
mov dword [ebp - 0x360], ecx
cmp dword [ebp - 0x360], 2
jge 0x4458c1
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x360]
mov dword [ebp - 0x1c], edx
jmp 0x44589b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4458d3
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4458eb
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x364], 0
mov edx, 1
test edx, edx
je 0x44593f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x445921
jmp 0x44593f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x364]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x364]
add eax, 1
mov dword [ebp - 0x364], eax
jmp 0x4458f5
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x36c], 0
mov edx, 1
test edx, edx
je 0x44599c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44597e
jmp 0x44599c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x36c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x36c]
add eax, 1
mov dword [ebp - 0x36c], eax
jmp 0x445952
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x374], 0
jmp 0x4459c7
mov edx, dword [ebp - 0x374]
add edx, 1
mov dword [ebp - 0x374], edx
cmp dword [ebp - 0x374], 1
jge 0x445a02
mov eax, dword [ebp - 0x374]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4459f6
mov eax, dword [ebp - 0x374]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4459fd
and eax, 0xbc614e
jmp 0x445a00
mov dword [ebp - 0x1c], eax
jmp 0x4459b8
mov dword [ebp - 4], 0xfffffffe
call fcn.00445a10
jmp 0x445a18
mov dword [ebp - 4], 6
mov dword [ebp - 0x378], 0
jmp 0x445a3a
mov edx, dword [ebp - 0x378]
add edx, 1
mov dword [ebp - 0x378], edx
cmp dword [ebp - 0x378], 2
jge 0x445a75
mov eax, dword [ebp - 0x378]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x445a69
mov eax, dword [ebp - 0x378]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x445a70
and eax, 0xbc614e
jmp 0x445a73
mov dword [ebp - 0x1c], eax
jmp 0x445a2b
mov dword [ebp - 4], 0xfffffffe
call fcn.00445a83
jmp 0x445a8b
mov dword [ebp - 0x37c], 1
mov dword [ebp - 0x380], 1
mov dword [ebp - 0x384], 2
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x38c], 0
jmp 0x445ace
mov edx, dword [ebp - 0x38c]
add edx, 1
mov dword [ebp - 0x38c], edx
cmp dword [ebp - 0x38c], 2
jge 0x445b0f
mov eax, dword [ebp - 0x37c]
add eax, dword [ebp - 0x380]
mov dword [ebp - 0x384], eax
mov ecx, dword [ebp - 0x380]
mov dword [ebp - 0x37c], ecx
mov edx, dword [ebp - 0x384]
mov dword [ebp - 0x380], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x384]
mov dword [ebp - 0x1c], eax
jmp 0x445abf
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x390], 1
mov dword [ebp - 0x394], 1
mov dword [ebp - 0x398], 2
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x3a0], 0
jmp 0x445b5b
mov edx, dword [ebp - 0x3a0]
add edx, 1
mov dword [ebp - 0x3a0], edx
cmp dword [ebp - 0x3a0], 3
jge 0x445b9c
mov eax, dword [ebp - 0x390]
add eax, dword [ebp - 0x394]
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x394]
mov dword [ebp - 0x390], ecx
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x394], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x398]
mov dword [ebp - 0x1c], eax
jmp 0x445b4c
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xa0]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret