Function at 0x4422e0
Capabilities:
Check for time delay via gettickcount
Check os version
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47f510
push 0x408860
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x482534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
xor esi, esi
mov dword [ebp - 0x274], esi
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetVersion]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x442345
cmp eax, 4
je 0x442345
and esi, edi
jmp 0x442347
sub esi, edi
mov dword [ebp - 0x274], esi
call ebx
add edi, 1
cmp edi, 0x1b
jl 0x442326
xor eax, eax
lea esp, [esp]
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 0xf
jl 0x442360
cmp esi, 0xffff
jle 0x442389
lea edx, [esi*8]
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x4423b0
mov esi, 0xd
mov dword [ebp - 0x274], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x4423d0
call edi
add esi, eax
mov dword [ebp - 0x274], esi
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x4423e4
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44240e
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 0x10
jl 0x4423d2
xor ecx, ecx
jmp 0x442420
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44243f
cmp eax, 3
je 0x44243f
xor esi, ecx
jmp 0x442444
mov eax, ecx
imul esi, eax
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 7
jl 0x442420
lea ecx, [ebp - 0x270]
push ecx
push 0x478848
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor eax, eax
jmp 0x442470
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 0x11
jl 0x442470
cmp esi, 0xffff
jle 0x442499
lea edx, [esi*8]
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x4424c0
mov esi, 0xd
mov dword [ebp - 0x274], esi
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x4424da
call edi
add esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 4], 0
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x28c], edi
cmp edi, 0x12
jge 0x442535
cmp esi, 0xffff0001
jge 0x44250f
lea edx, [esi*8]
sub edx, esi
neg edx
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x442530
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x4424e9
mov dword [ebp - 4], 0xfffffffe
call fcn.0044256e
xor edi, edi
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea edx, [edx + edx*4]
mov eax, edi
sub eax, edx
cmp eax, 1
je 0x44257b
cmp eax, 4
je 0x44257b
and esi, edi
jmp 0x44257d
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 0x1d
jl 0x442543
xor edi, edi
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x4425b2
cmp eax, 4
je 0x4425b2
and esi, edi
jmp 0x4425b4
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 5
jl 0x442593
xor eax, eax
lea ebx, [ebx]
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 0xa
jl 0x4425d0
cmp esi, 0xffff
jle 0x4425f9
lea edx, [esi*8]
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x442620
mov esi, 0xd
mov dword [ebp - 0x274], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x442640
call edi
add esi, eax
mov dword [ebp - 0x274], esi
xor edi, edi
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea edx, [edx + edx*4]
mov eax, edi
sub eax, edx
cmp eax, 1
je 0x442661
cmp eax, 4
je 0x442661
and esi, edi
jmp 0x442663
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 4
jl 0x442642
xor eax, eax
lea esp, [esp]
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 7
jl 0x442680
cmp esi, 0xffff
jle 0x4426a9
lea eax, [esi*8]
sub eax, esi
mov esi, eax
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xb
mov edx, esi
sub edx, ecx
cmp edx, 7
jne 0x4426d0
mov esi, 0xd
mov dword [ebp - 0x274], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x4426f0
call edi
add esi, eax
mov dword [ebp - 0x274], esi
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x442704
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x44272e
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 4
jl 0x4426f2
xor eax, eax
jmp 0x442740
xor esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 5
jl 0x442740
test esi, esi
jge 0x44275c
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
sub esi, ecx
jne 0x442784
call ebx
mov dword [ebp - 0x274], eax
xor esi, esi
mov dword [ebp - 0x274], esi
jge 0x4427a0
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x4427c8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 4], 1
xor edi, edi
mov dword [ebp - 0x2a0], edi
cmp edi, 0xa
jge 0x44281d
cmp esi, 0xffff0001
jge 0x4427f7
lea edx, [esi*8]
sub edx, esi
neg edx
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x442818
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x4427d1
mov dword [ebp - 4], 0xfffffffe
call fcn.004428a5
xor eax, eax
jmp 0x442830
xor esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 0xf
jl 0x442830
test esi, esi
jge 0x44284c
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x442878
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
xor edi, edi
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x4428b2
cmp eax, 4
je 0x4428b2
and esi, edi
jmp 0x4428b4
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 0xb
jl 0x44287a
xor eax, eax
lea ebx, [ebx]
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 5
jl 0x4428d0
cmp esi, 0xffff
jle 0x4428f9
lea edx, [esi*8]
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x442920
mov esi, 0xd
mov dword [ebp - 0x274], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x442940
call edi
add esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x274], esi
lea edx, [ebp - 0x270]
push edx
push 0x478850
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor edi, edi
lea ebx, [ebx]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x44297f
cmp eax, 4
je 0x44297f
and esi, edi
jmp 0x442981
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 3
jl 0x442960
mov dword [ebp - 4], 2
xor edi, edi
mov dword [ebp - 0x29c], edi
cmp edi, 6
jge 0x4429ea
cmp esi, 0xffff0001
jge 0x4429c4
lea edx, [esi*8]
sub edx, esi
neg edx
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x4429e5
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x44299e
mov dword [ebp - 4], 0xfffffffe
call fcn.00442a8b
cmp esi, 0xffff
jle 0x442a0f
lea edx, [esi*8]
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x442a36
mov esi, 0xd
mov dword [ebp - 0x274], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x442a56
call edi
add esi, eax
mov dword [ebp - 0x274], esi
xor edi, edi
jmp 0x442a60
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea edx, [edx + edx*4]
mov eax, edi
sub eax, edx
cmp eax, 1
je 0x442a98
cmp eax, 4
je 0x442a98
and esi, edi
jmp 0x442a9a
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 6
jl 0x442a60
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x442ac2
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x442aec
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 6
jl 0x442ab0
xor esi, esi
mov dword [ebp - 0x274], esi
jge 0x442b10
mov ecx, esi
neg ecx
add ecx, ecx
add ecx, ecx
sub ecx, esi
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x442b38
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
lea ebx, [ebx]
xor esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 4
jl 0x442b40
test esi, esi
jge 0x442b5c
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x442b88
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
xor edi, edi
lea ebx, [ebx]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea ecx, [edx + edx*4]
mov eax, edi
sub eax, ecx
cmp eax, 1
je 0x442baf
cmp eax, 4
je 0x442baf
and esi, edi
jmp 0x442bb1
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 6
jl 0x442b90
lea edx, [ebp - 0x270]
push edx
push 0x478858
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor eax, eax
lea esp, [esp]
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 8
jl 0x442be0
cmp esi, 0xffff
jle 0x442c09
lea eax, [esi*8]
sub eax, esi
mov esi, eax
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xb
mov edx, esi
sub edx, ecx
cmp edx, 7
jne 0x442c30
mov esi, 0xd
mov dword [ebp - 0x274], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x442c50
call edi
add esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
and esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 7
jl 0x442c52
test esi, esi
jge 0x442c78
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x442ca0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 4], 3
xor edi, edi
mov dword [ebp - 0x284], edi
cmp edi, 2
jge 0x442cf5
cmp esi, 0xffff0001
jge 0x442ccf
lea edx, [esi*8]
sub edx, esi
neg edx
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x442cf0
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x442ca9
mov dword [ebp - 4], 0xfffffffe
call fcn.0044308b
xor eax, eax
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 8
jl 0x442d03
cmp esi, 0xffff
jle 0x442d2c
lea edx, [esi*8]
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x442d53
mov esi, 0xd
mov dword [ebp - 0x274], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x442d73
call edi
add esi, eax
mov dword [ebp - 0x274], esi
xor esi, esi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x274], esi
test esi, esi
jge 0x442d93
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x442dbd
xor esi, esi
mov dword [ebp - 0x274], esi
xor eax, eax
nop
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 4
jl 0x442dc0
cmp esi, 0xffff
jle 0x442de9
lea ecx, [esi*8]
sub ecx, esi
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x442e10
mov esi, 0xd
mov dword [ebp - 0x274], esi
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x442e2a
call edi
add esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
lea esp, [esp]
xor esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 8
jl 0x442e30
test esi, esi
jge 0x442e4c
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x442e78
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
lea ebx, [ebx]
xor esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 3
jl 0x442e80
test esi, esi
jge 0x442e9c
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov edx, esi
sub edx, ecx
jne 0x442ec8
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
lea eax, [ebp - 0x270]
push eax
push 0x478860
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor eax, eax
lea esp, [esp]
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 8
jl 0x442ee0
cmp esi, 0xffff
jle 0x442f09
lea ecx, [esi*8]
sub ecx, esi
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x442f30
mov esi, 0xd
mov dword [ebp - 0x274], esi
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x442f4a
call edi
add esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
lea esp, [esp]
and esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 7
jl 0x442f50
test esi, esi
jge 0x442f76
mov edx, esi
neg edx
add edx, edx
add edx, edx
sub edx, esi
mov esi, edx
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov ecx, esi
sub ecx, eax
jne 0x442f9e
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
xor esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 2
jl 0x442fa0
test esi, esi
jge 0x442fbc
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x442fe8
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
xor eax, eax
lea ebx, [ebx]
add esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 8
jl 0x442ff0
cmp esi, 0xffff
jle 0x443019
lea ecx, [esi*8]
sub ecx, esi
mov esi, ecx
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
mov ecx, esi
sub ecx, eax
cmp ecx, 7
jne 0x443040
mov esi, 0xd
mov dword [ebp - 0x274], esi
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x44305a
call edi
add esi, eax
mov dword [ebp - 0x274], esi
xor edi, edi
lea esp, [esp]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea edx, [edx + edx*4]
mov eax, edi
sub eax, edx
cmp eax, 1
je 0x443098
cmp eax, 4
je 0x443098
and esi, edi
jmp 0x44309a
sub esi, edi
mov dword [ebp - 0x274], esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
add edi, 1
cmp edi, 2
jl 0x443060
xor eax, eax
and esi, eax
mov dword [ebp - 0x274], esi
add eax, 1
cmp eax, 3
jl 0x4430b0
test esi, esi
jge 0x4430d6
mov eax, esi
neg eax
add eax, eax
add eax, eax
sub eax, esi
mov esi, eax
mov dword [ebp - 0x274], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xd
mov edx, esi
sub edx, ecx
jne 0x4430fe
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x274], esi
cmp esi, 0xffff
jle 0x44311d
lea eax, [esi*8]
sub eax, esi
mov esi, eax
mov dword [ebp - 0x274], esi
mov eax, 0x2e8ba2e9
imul esi
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xb
mov edx, esi
sub edx, ecx
cmp edx, 7
jne 0x443144
mov esi, 0xd
mov dword [ebp - 0x274], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
xor edx, edx
mov ecx, 3
div ecx
cmp edx, 1
jne 0x443164
call edi
add esi, eax
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x274], esi
lea edx, [ebp - 0x270]
push edx
push 0x478868
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call edi
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x443192
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x4431bc
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 2
jl 0x443180
mov dword [ebp - 0x274], esi
test esi, esi
jge 0x4431d6
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov edx, esi
sub edx, ecx
jne 0x443202
call ebx
mov esi, eax
mov dword [ebp - 0x274], esi
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x443223
cmp eax, 3
je 0x443223
xor esi, ecx
jmp 0x443228
mov eax, ecx
imul esi, eax
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 2
jl 0x443204
lea ecx, [ebp - 0x270]
push ecx
push 0x478870
call edi
xor ecx, ecx
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x443258
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x443282
xor esi, esi
mov dword [ebp - 0x274], esi
add ecx, 1
cmp ecx, 3
jl 0x443246
xor ecx, ecx
lea esp, [esp]
xor esi, ecx
mov dword [ebp - 0x274], esi
jge 0x4432a2
neg esi
mov dword [ebp - 0x274], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x4432cc