Function at 0x44c720
Capabilities:
Check for time delay via gettickcount
Check os version
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47f848
push 0x408860
mov eax, dword fs:[0]
push eax
sub esp, 0x2a0
mov eax, dword [0x482534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
xor esi, esi
mov dword [ebp - 0x274], esi
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x44c772
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44c79c
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 0xc
jl 0x44c760
mov dword [ebp - 4], 0
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x290], edi
cmp edi, 9
jge 0x44c7ff
cmp esi, 0xffff0001
jge 0x44c7d9
lea ecx, [esi*8]
sub ecx, esi
neg ecx
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x44c7fa
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44c7b3
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c86b
mov dword [ebp - 4], 1
xor edi, edi
mov dword [ebp - 0x2ac], edi
test edi, edi
jge 0x44c878
cmp esi, 0xffff0001
jge 0x44c839
lea ecx, [esi*8]
sub ecx, esi
neg ecx
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x44c85a
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44c814
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c8e5
mov dword [ebp - 4], 2
xor edi, edi
mov dword [ebp - 0x280], edi
cmp edi, 0xa
jge 0x44c8f2
cmp esi, 0xffff0001
jge 0x44c8b3
lea ecx, [esi*8]
sub ecx, esi
neg ecx
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x44c8d4
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44c88d
mov dword [ebp - 4], 0xfffffffe
call fcn.0044c92b
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetVersion]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x44c938
cmp eax, 4
je 0x44c938
and esi, edi
jmp 0x44c93a
sub esi, edi
mov dword [ebp - 0x274], esi
call ebx
add edi, 1
cmp edi, 0xc
jl 0x44c906
xor edi, edi
lea esp, [esp]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea edx, [edx + edx*4]
mov eax, edi
sub eax, edx
cmp eax, 1
je 0x44c96f
cmp eax, 4
je 0x44c96f
and esi, edi
jmp 0x44c971
sub esi, edi
mov dword [ebp - 0x274], esi
call ebx
add edi, 1
cmp edi, 0xe
jl 0x44c950
xor edi, edi
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x44c9a2
cmp eax, 4
je 0x44c9a2
and esi, edi
jmp 0x44c9a4
sub esi, edi
mov dword [ebp - 0x274], esi
call ebx
add edi, 1
cmp edi, 7
jl 0x44c983
xor eax, eax
jmp 0x44c9c0
and esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 0xa
jl 0x44c9c0
test esi, esi
jge 0x44c9e6
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x44ca0e
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
test esi, esi
jge 0x44ca24
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x44ca4c
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 4], 3
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x298], edi
cmp edi, 6
jge 0x44caa7
cmp esi, 0xffff0001
jge 0x44ca81
lea edx, [esi*8]
sub edx, esi
neg edx
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x44caa2
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44ca5b
mov dword [ebp - 4], 0xfffffffe
call fcn.0044cb25
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x44cac7
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44caf1
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 0x10
jl 0x44cab5
xor ecx, ecx
jmp 0x44cb00
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44cb32
cmp eax, 3
je 0x44cb32
xor esi, ecx
jmp 0x44cb37
mov eax, ecx
imul esi, eax
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 0xe
jl 0x44cb00
lea ecx, [ebp - 0x270]
push ecx
push 0x4785b0
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call edi
xor ecx, ecx
jmp 0x44cb60
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44cb7f
cmp eax, 3
je 0x44cb7f
xor esi, ecx
jmp 0x44cb84
mov eax, ecx
imul esi, eax
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 6
jl 0x44cb60
lea ecx, [ebp - 0x270]
push ecx
push 0x4785b8
call edi
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x44cbb4
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44cbde
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 0xb
jl 0x44cba2
xor eax, eax
jmp 0x44cbf0
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 5
jl 0x44cbf0
cmp esi, 0xffff
jle 0x44cc19
lea ecx, [esi*8]
sub ecx, esi
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x44cc40
mov esi, 0xd
mov dword [ebp - 0x274], esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x44cc60
call ebx
add esi, eax
mov dword [ebp - 0x274], esi
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44cc81
cmp eax, 3
je 0x44cc81
xor esi, ecx
jmp 0x44cc86
mov eax, ecx
imul esi, eax
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 8
jl 0x44cc62
lea ecx, [ebp - 0x270]
push ecx
push 0x4785c0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor eax, eax
jmp 0x44ccb0
xor esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 8
jl 0x44ccb0
test esi, esi
jge 0x44cccc
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44ccfc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 4], 4
xor edi, edi
mov dword [ebp - 0x288], edi
cmp edi, 6
jge 0x44cd55
cmp esi, 0xffff0001
jge 0x44cd2b
lea ecx, [esi*8]
sub ecx, esi
neg ecx
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x44cd50
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44cd05
mov dword [ebp - 4], 0xfffffffe
call fcn.0044cdc6
mov dword [ebp - 4], 5
xor edi, edi
mov dword [ebp - 0x2a8], edi
cmp edi, 4
jge 0x44cdd3
cmp esi, 0xffff0001
jge 0x44cd90
lea ecx, [esi*8]
sub ecx, esi
neg ecx
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x44cdb5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44cd6a
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ce0c
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44ce19
cmp eax, 3
je 0x44ce19
xor esi, ecx
jmp 0x44ce1e
mov eax, ecx
imul esi, eax
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 7
jl 0x44cde1
lea ecx, [ebp - 0x270]
push ecx
push 0x4785c8
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call edi
xor eax, eax
xor esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 3
jl 0x44ce42
test esi, esi
jge 0x44ce5e
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44ce8e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
and esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 4
jl 0x44ce90
test esi, esi
jge 0x44ceb6
mov ecx, esi
neg ecx
add ecx, ecx
add ecx, ecx
sub ecx, esi
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x44cede
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x274], esi
test esi, esi
jge 0x44cef0
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44cf20
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44cf41
cmp eax, 3
je 0x44cf41
xor esi, ecx
jmp 0x44cf46
mov eax, ecx
imul esi, eax
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 3
jl 0x44cf22
lea ecx, [ebp - 0x270]
push ecx
push 0x4785d0
call edi
xor eax, eax
and esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 4
jl 0x44cf64
test esi, esi
jge 0x44cf8a
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x44cfb2
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x274], esi
test esi, esi
jge 0x44cfc4
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44cfee
xor esi, esi
mov dword [ebp - 0x274], esi
xor eax, eax
xor esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 3
jl 0x44cff0
test esi, esi
jge 0x44d00c
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov edx, esi
sub edx, ecx
jne 0x44d03c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 4], 6
xor edi, edi
mov dword [ebp - 0x278], edi
cmp edi, 2
jge 0x44d095
cmp esi, 0xffff0001
jge 0x44d06b
lea eax, [esi*8]
sub eax, esi
neg eax
mov esi, eax
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
jne 0x44d090
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44d045
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d19b
cmp esi, 0xffff
jle 0x44d0ba
lea eax, [esi*8]
sub eax, esi
mov esi, eax
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xb
mov edx, esi
sub edx, ecx
cmp edx, 7
jne 0x44d0e1
mov esi, 0xd
mov dword [ebp - 0x274], esi
call ebx
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x44d0fb
call ebx
add esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
lea ecx, [ecx]
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 4
jl 0x44d100
cmp esi, 0xffff
jle 0x44d129
lea edx, [esi*8]
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x44d150
mov esi, 0xd
mov dword [ebp - 0x274], esi
call ebx
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x44d16a
call ebx
add esi, eax
mov dword [ebp - 0x274], esi
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44d1a8
cmp eax, 3
je 0x44d1a8
xor esi, ecx
jmp 0x44d1ad
mov eax, ecx
imul esi, eax
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 4
jl 0x44d170
lea ecx, [ebp - 0x270]
push ecx
push 0x4785d8
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call edi
xor esi, esi
mov dword [ebp - 0x274], esi
jge 0x44d1eb
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x44d213
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x44d227
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44d251
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 2
jl 0x44d215
test esi, esi
jge 0x44d26f
mov ecx, esi
neg ecx
add ecx, ecx
add ecx, ecx
sub ecx, esi
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x44d297
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
lea edx, [ebp - 0x270]
push edx
push 0x4785e0
call edi
mov dword [ebp - 4], 7
xor edi, edi
mov dword [ebp - 0x2a0], edi
cmp edi, 1
jge 0x44d2fe
cmp esi, 0xffff0001
jge 0x44d2d4
lea eax, [esi*8]
sub eax, esi
neg eax
mov esi, eax
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
jne 0x44d2f9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44d2ae
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d337
xor edi, edi
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x44d344
cmp eax, 4
je 0x44d344
and esi, edi
jmp 0x44d346
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 3
jl 0x44d30c
mov dword [ebp - 0x274], esi
test esi, esi
jge 0x44d36c
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44d39c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x274], esi
test esi, esi
jge 0x44d3ae
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov edx, esi
sub edx, ecx
jne 0x44d3d8
xor esi, esi
mov dword [ebp - 0x274], esi
xor edi, edi
lea ebx, [ebx]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x44d3ff
cmp eax, 4
je 0x44d3ff
and esi, edi
jmp 0x44d401
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 4
jl 0x44d3e0
xor eax, eax
jmp 0x44d420
and esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 4
jl 0x44d420
test esi, esi
jge 0x44d446
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x44d46e
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
and esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 4
jl 0x44d470
test esi, esi
jge 0x44d496
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x44d4be
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x44d4d2
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44d4fc
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 3
jl 0x44d4c0
xor edi, edi
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x44d525
cmp eax, 4
je 0x44d525
and esi, edi
jmp 0x44d527
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 4
jl 0x44d506
mov dword [ebp - 4], 8
xor edi, edi
mov dword [ebp - 0x27c], edi
cmp edi, 3
jge 0x44d594
cmp esi, 0xffff0001
jge 0x44d56a
lea edx, [esi*8]
sub edx, esi
neg edx
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x44d58f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44d544
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d6be
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x44d5b4
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44d5de
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 2
jl 0x44d5a2
xor eax, eax
jmp 0x44d5f0
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 3
jl 0x44d5f0
cmp esi, 0xffff
jle 0x44d619
lea ecx, [esi*8]
sub ecx, esi
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x44d640
mov esi, 0xd
mov dword [ebp - 0x274], esi
call ebx
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x44d65a
call ebx
add esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 4], 9
xor edi, edi
mov dword [ebp - 0x284], edi
test edi, edi
jge 0x44d6cb
cmp esi, 0xffff0001
jge 0x44d688
lea edx, [esi*8]
sub edx, esi
neg edx
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x44d6ad
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44d663
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d73c
mov dword [ebp - 4], 0xa
xor edi, edi
mov dword [ebp - 0x28c], edi
cmp edi, 2
jge 0x44d749
cmp esi, 0xffff0001
jge 0x44d706
lea edx, [esi*8]
sub edx, esi
neg edx
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x44d72b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44d6e0
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d7ba
mov dword [ebp - 4], 0xb
xor edi, edi
mov dword [ebp - 0x294], edi
cmp edi, 3
jge 0x44d7c7
cmp esi, 0xffff0001
jge 0x44d784
lea edx, [esi*8]
sub edx, esi
neg edx
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x44d7a9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44d75e
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d83c
test esi, esi
jge 0x44d7df
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44d80f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
xor edi, edi
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x44d849
cmp eax, 4
je 0x44d849
and esi, edi
jmp 0x44d84b
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 3
jl 0x44d811
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x44d873
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44d89d
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 3
jl 0x44d861
mov dword [ebp - 4], 0xc
xor edi, edi
mov dword [ebp - 0x29c], edi
cmp edi, 3
jge 0x44d8fe
cmp esi, 0xffff0001
jge 0x44d8d4
lea ecx, [esi*8]
sub ecx, esi
neg ecx
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x44d8f9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44d8ae
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d937
xor edi, edi
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x44d944
cmp eax, 4
je 0x44d944
and esi, edi
jmp 0x44d946
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 4
jl 0x44d90c
test esi, esi
jge 0x44d970
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
sub ecx, eax
jne 0x44d99a
call edi
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x274], esi
lea edx, [ebp - 0x270]
push edx
push 0x4785e8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor eax, eax
and esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 4
jl 0x44d9b4
test esi, esi
jge 0x44d9da
mov eax, esi
neg eax
add eax, eax
add eax, eax
sub eax, esi
mov esi, eax
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xd
mov edx, esi
sub edx, ecx
jne 0x44d9fe