Function at 0x443d00
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e1d0
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff4fc
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x44], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
jmp 0x443d6b
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x443d91
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jmp 0x443d62
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x34], 0
jmp 0x443dac
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x1f
jge 0x443dbd
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], ecx
jmp 0x443da3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x443dcf
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x443de7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], 0
jmp 0x443e00
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x15
jge 0x443e32
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443e26
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443e2d
and eax, 0xbc614e
jmp 0x443e30
mov dword [ebp - 0x1c], eax
jmp 0x443df7
mov dword [ebp - 4], 0xfffffffe
call fcn.00443e40
jmp 0x443e48
mov dword [ebp - 0x3c], 0
jmp 0x443e5a
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x1a
jge 0x443e9e
cmp dword [ebp - 0x1c], 0
jge 0x443e6e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443e84
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x40], 0xfa
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x240]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x443e51
mov dword [ebp - 0x244], 0
mov ecx, 1
test ecx, ecx
je 0x443ef2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x443ed4
jmp 0x443ef2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x244]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x244]
add eax, 1
mov dword [ebp - 0x244], eax
jmp 0x443ea8
mov ecx, dword [ebp - 0x1c]
add ecx, 0x12
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x24c], 0
jmp 0x443f16
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 1
jge 0x443f2d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], eax
jmp 0x443f07
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x443f3f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x443f57
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x443f91
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x443f83
jmp 0x443f91
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x250]
mov dword [ebp - 0x1c], edx
jmp 0x443f57
mov eax, dword [ebp - 0x1c]
add eax, 0x11
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x25c], 2
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x264], 0
jmp 0x443fdd
mov ecx, dword [ebp - 0x264]
add ecx, 1
mov dword [ebp - 0x264], ecx
cmp dword [ebp - 0x264], 4
jge 0x44401e
mov edx, dword [ebp - 0x254]
add edx, dword [ebp - 0x258]
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], edx
jmp 0x443fce
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x268], 0
jmp 0x444042
mov ecx, dword [ebp - 0x268]
add ecx, 1
mov dword [ebp - 0x268], ecx
cmp dword [ebp - 0x268], 0xf
jge 0x444059
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x268]
mov dword [ebp - 0x1c], edx
jmp 0x444033
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44406b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x444083
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x274], 2
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x27c], 0
jmp 0x4440c6
mov edx, dword [ebp - 0x27c]
add edx, 1
mov dword [ebp - 0x27c], edx
cmp dword [ebp - 0x27c], 0
jge 0x444107
mov eax, dword [ebp - 0x26c]
add eax, dword [ebp - 0x270]
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x270]
mov dword [ebp - 0x26c], ecx
mov edx, dword [ebp - 0x274]
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x274]
mov dword [ebp - 0x1c], eax
jmp 0x4440b7
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x280], 1
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x288], 2
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x290], 0
jmp 0x444150
mov edx, dword [ebp - 0x290]
add edx, 1
mov dword [ebp - 0x290], edx
cmp dword [ebp - 0x290], 2
jge 0x444191
mov eax, dword [ebp - 0x280]
add eax, dword [ebp - 0x284]
mov dword [ebp - 0x288], eax
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x280], ecx
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x284], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x288]
mov dword [ebp - 0x1c], eax
jmp 0x444141
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x294], 0
jmp 0x4441b5
mov edx, dword [ebp - 0x294]
add edx, 1
mov dword [ebp - 0x294], edx
cmp dword [ebp - 0x294], 2
jge 0x4441ec
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x294]
mov dword [ebp - 0x1c], eax
jge 0x4441d4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4441ea
mov dword [ebp - 0x1c], 0
jmp 0x4441a6
mov dword [ebp - 0x298], 0
jmp 0x444207
mov edx, dword [ebp - 0x298]
add edx, 1
mov dword [ebp - 0x298], edx
cmp dword [ebp - 0x298], 7
jge 0x44421e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x298]
mov dword [ebp - 0x1c], eax
jmp 0x4441f8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x444230
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x444248
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x29c], 0
mov edx, 1
test edx, edx
je 0x44429c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44427e
jmp 0x44429c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x29c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x29c]
add eax, 1
mov dword [ebp - 0x29c], eax
jmp 0x444252
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4442df
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4442d1
jmp 0x4442df
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2a4]
mov dword [ebp - 0x1c], edx
jmp 0x4442a5
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2a8], 0
jmp 0x444303
mov ecx, dword [ebp - 0x2a8]
add ecx, 1
mov dword [ebp - 0x2a8], ecx
cmp dword [ebp - 0x2a8], 7
jge 0x444350
cmp dword [ebp - 0x1c], 0
jge 0x44431a
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444330
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2ac], 0xfa
lea edx, [ebp - 0x2ac]
push edx
lea eax, [ebp - 0x4a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4442f4
mov dword [ebp - 4], 1
mov dword [ebp - 0x4ac], 0
jmp 0x444372
mov ecx, dword [ebp - 0x4ac]
add ecx, 1
mov dword [ebp - 0x4ac], ecx
cmp dword [ebp - 0x4ac], 4
jge 0x4443ad
mov eax, dword [ebp - 0x4ac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4443a1
mov eax, dword [ebp - 0x4ac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4443a8
and eax, 0xbc614e
jmp 0x4443ab
mov dword [ebp - 0x1c], eax
jmp 0x444363
mov dword [ebp - 4], 0xfffffffe
call fcn.004443bb
jmp 0x4443c3
mov dword [ebp - 0x4b0], 0
jmp 0x4443de
mov edx, dword [ebp - 0x4b0]
add edx, 1
mov dword [ebp - 0x4b0], edx
cmp dword [ebp - 0x4b0], 4
jge 0x4443f5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x1c], eax
jmp 0x4443cf
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x444407
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44441f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4b4], 0
jmp 0x44443a
mov edx, dword [ebp - 0x4b4]
add edx, 1
mov dword [ebp - 0x4b4], edx
cmp dword [ebp - 0x4b4], 0
jge 0x444471
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x1c], eax
jge 0x444459
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44446f
mov dword [ebp - 0x1c], 0
jmp 0x44442b
mov dword [ebp - 0x4b8], 1
mov dword [ebp - 0x4bc], 1
mov dword [ebp - 0x4c0], 2
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x4c8], 0
jmp 0x4444b4
mov edx, dword [ebp - 0x4c8]
add edx, 1
mov dword [ebp - 0x4c8], edx
cmp dword [ebp - 0x4c8], 3
jge 0x4444f5
mov eax, dword [ebp - 0x4b8]
add eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x4c0], eax
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4b8], ecx
mov edx, dword [ebp - 0x4c0]
mov dword [ebp - 0x4bc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x1c], eax
jmp 0x4444a5
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4cc], 1
mov dword [ebp - 0x4d0], 1
mov dword [ebp - 0x4d4], 2
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x4dc], 0
jmp 0x444541
mov edx, dword [ebp - 0x4dc]
add edx, 1
mov dword [ebp - 0x4dc], edx
cmp dword [ebp - 0x4dc], 0
jge 0x444582
mov eax, dword [ebp - 0x4cc]
add eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x4d4], eax
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0x4cc], ecx
mov edx, dword [ebp - 0x4d4]
mov dword [ebp - 0x4d0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x1c], eax
jmp 0x444532
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4e0], 0
jmp 0x4445a3
mov edx, dword [ebp - 0x4e0]
add edx, 1
mov dword [ebp - 0x4e0], edx
cmp dword [ebp - 0x4e0], 2
jge 0x4445ba
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x1c], eax
jmp 0x444594
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4445cc
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4445e4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4e4], 0
jmp 0x4445ff
mov edx, dword [ebp - 0x4e4]
add edx, 1
mov dword [ebp - 0x4e4], edx
cmp dword [ebp - 0x4e4], 1
jge 0x44464c
cmp dword [ebp - 0x1c], 0
jge 0x444616
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44462c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4e8], 0xfa
lea edx, [ebp - 0x4e8]
push edx
lea eax, [ebp - 0x6e0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4445f0
mov dword [ebp - 0x6e4], 1
mov dword [ebp - 0x6e8], 1
mov dword [ebp - 0x6ec], 2
mov dword [ebp - 0x6f0], 0
mov dword [ebp - 0x6f4], 0
jmp 0x44468f
mov ecx, dword [ebp - 0x6f4]
add ecx, 1
mov dword [ebp - 0x6f4], ecx
cmp dword [ebp - 0x6f4], 0
jge 0x4446d0
mov edx, dword [ebp - 0x6e4]
add edx, dword [ebp - 0x6e8]
mov dword [ebp - 0x6ec], edx
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x6e4], eax
mov ecx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6e8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6ec]
mov dword [ebp - 0x1c], edx
jmp 0x444680
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6f8], 0
jmp 0x4446f1
mov ecx, dword [ebp - 0x6f8]
add ecx, 1
mov dword [ebp - 0x6f8], ecx
cmp dword [ebp - 0x6f8], 3
jge 0x44473e
cmp dword [ebp - 0x1c], 0
jge 0x444708
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44471e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6fc], 0xfa
lea edx, [ebp - 0x6fc]
push edx
lea eax, [ebp - 0x8f8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4446e2
mov dword [ebp - 4], 2
mov dword [ebp - 0x8fc], 0
jmp 0x444760
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
cmp dword [ebp - 0x8fc], 3
jge 0x44479b
mov eax, dword [ebp - 0x8fc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44478f
mov eax, dword [ebp - 0x8fc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444796
and eax, 0xbc614e
jmp 0x444799
mov dword [ebp - 0x1c], eax
jmp 0x444751
mov dword [ebp - 4], 0xfffffffe
call fcn.004447a9
jmp 0x4447b1
mov dword [ebp - 0x900], 0
jmp 0x4447cc
mov edx, dword [ebp - 0x900]
add edx, 1
mov dword [ebp - 0x900], edx
cmp dword [ebp - 0x900], 3
jge 0x444819
cmp dword [ebp - 0x1c], 0
jge 0x4447e3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4447f9
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x904], 0xfa
lea edx, [ebp - 0x904]
push edx
lea eax, [ebp - 0xb00]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4447bd
mov dword [ebp - 4], 3
mov dword [ebp - 0xb04], 0
jmp 0x44483b
mov ecx, dword [ebp - 0xb04]
add ecx, 1
mov dword [ebp - 0xb04], ecx
cmp dword [ebp - 0xb04], 2
jge 0x444876
mov eax, dword [ebp - 0xb04]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44486a
mov eax, dword [ebp - 0xb04]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444871
and eax, 0xbc614e
jmp 0x444874
mov dword [ebp - 0x1c], eax
jmp 0x44482c
mov dword [ebp - 4], 0xfffffffe
call fcn.00444884
jmp 0x44488c
mov dword [ebp - 0xb08], 0
mov edx, 1
test edx, edx
je 0x4448e0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb0c], eax
mov eax, dword [ebp - 0xb0c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4448c2
jmp 0x4448e0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb08]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb08]
add eax, 1
mov dword [ebp - 0xb08], eax
jmp 0x444896
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb10], 0
jmp 0x444904
mov edx, dword [ebp - 0xb10]
add edx, 1
mov dword [ebp - 0xb10], edx
cmp dword [ebp - 0xb10], 1
jge 0x44493b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb10]
mov dword [ebp - 0x1c], eax
jge 0x444923
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x444939
mov dword [ebp - 0x1c], 0
jmp 0x4448f5
mov dword [ebp - 4], 4
mov dword [ebp - 0xb14], 0
jmp 0x44495d
mov edx, dword [ebp - 0xb14]
add edx, 1
mov dword [ebp - 0xb14], edx
cmp dword [ebp - 0xb14], 0
jge 0x444998
mov eax, dword [ebp - 0xb14]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44498c
mov eax, dword [ebp - 0xb14]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x444993
and eax, 0xbc614e
jmp 0x444996
mov dword [ebp - 0x1c], eax
jmp 0x44494e
mov dword [ebp - 4], 0xfffffffe
call fcn.004449a6
jmp 0x4449ae
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x44]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret