Function at 0x4428d0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e150
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff68c
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x44291f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 8
jge 0x442963
cmp dword [ebp - 0x1c], 0
jge 0x442933
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442949
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0xfa
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x442916
mov dword [ebp - 0x224], 0
jmp 0x44297e
mov ecx, dword [ebp - 0x224]
add ecx, 1
mov dword [ebp - 0x224], ecx
cmp dword [ebp - 0x224], 0
jge 0x4429cb
cmp dword [ebp - 0x1c], 0
jge 0x442995
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4429ab
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x228], 0xfa
lea edx, [ebp - 0x228]
push edx
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44296f
mov ecx, 1
test ecx, ecx
je 0x442a05
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x424]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4429f7
jmp 0x442a05
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x424]
mov dword [ebp - 0x1c], edx
jmp 0x4429cb
mov eax, dword [ebp - 0x1c]
add eax, 0x11
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x428], 0
mov ecx, 1
test ecx, ecx
je 0x442a62
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x442a44
jmp 0x442a62
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x428]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x428]
add eax, 1
mov dword [ebp - 0x428], eax
jmp 0x442a18
mov ecx, dword [ebp - 0x1c]
add ecx, 0x19
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x430], 0
mov edx, 1
test edx, edx
je 0x442abf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x434]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x442aa1
jmp 0x442abf
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x430]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x430]
add eax, 1
mov dword [ebp - 0x430], eax
jmp 0x442a75
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x438], 1
mov dword [ebp - 0x43c], 1
mov dword [ebp - 0x440], 2
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x448], 0
jmp 0x442b0b
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 8
jge 0x442b4c
mov eax, dword [ebp - 0x438]
add eax, dword [ebp - 0x43c]
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x43c]
mov dword [ebp - 0x438], ecx
mov edx, dword [ebp - 0x440]
mov dword [ebp - 0x43c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x440]
mov dword [ebp - 0x1c], eax
jmp 0x442afc
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x44c], 0
jmp 0x442b77
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 0xf
jge 0x442bb2
mov eax, dword [ebp - 0x44c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x442ba6
mov eax, dword [ebp - 0x44c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x442bad
and eax, 0xbc614e
jmp 0x442bb0
mov dword [ebp - 0x1c], eax
jmp 0x442b68
mov dword [ebp - 4], 0xfffffffe
call fcn.00442bc0
jmp 0x442bc8
mov edx, 1
test edx, edx
je 0x442c02
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442bf4
jmp 0x442c02
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x450]
mov dword [ebp - 0x1c], edx
jmp 0x442bc8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x454], 0
jmp 0x442c23
mov ecx, dword [ebp - 0x454]
add ecx, 1
mov dword [ebp - 0x454], ecx
cmp dword [ebp - 0x454], 2
jge 0x442c3a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x454]
mov dword [ebp - 0x1c], edx
jmp 0x442c14
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x442c4c
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442c64
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x458], 0
jmp 0x442c7f
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 2
jge 0x442ccc
cmp dword [ebp - 0x1c], 0
jge 0x442c96
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442cac
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x45c], 0xfa
lea edx, [ebp - 0x45c]
push edx
lea eax, [ebp - 0x658]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x442c70
mov dword [ebp - 0x65c], 0
jmp 0x442ce7
mov ecx, dword [ebp - 0x65c]
add ecx, 1
mov dword [ebp - 0x65c], ecx
cmp dword [ebp - 0x65c], 0
jge 0x442cfe
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x65c]
mov dword [ebp - 0x1c], edx
jmp 0x442cd8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x442d10
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442d28
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x442d62
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442d54
jmp 0x442d62
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x660]
mov dword [ebp - 0x1c], edx
jmp 0x442d28
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x664], 0
mov ecx, 1
test ecx, ecx
je 0x442dbf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x668]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x442da1
jmp 0x442dbf
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x664]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x664]
add eax, 1
mov dword [ebp - 0x664], eax
jmp 0x442d75
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x66c], 0
jmp 0x442de3
mov edx, dword [ebp - 0x66c]
add edx, 1
mov dword [ebp - 0x66c], edx
cmp dword [ebp - 0x66c], 2
jge 0x442dfa
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x66c]
mov dword [ebp - 0x1c], eax
jmp 0x442dd4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x442e0c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442e24
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x670], 0
jmp 0x442e3f
mov edx, dword [ebp - 0x670]
add edx, 1
mov dword [ebp - 0x670], edx
cmp dword [ebp - 0x670], 4
jge 0x442e8c
cmp dword [ebp - 0x1c], 0
jge 0x442e56
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442e6c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x674], 0xfa
lea edx, [ebp - 0x674]
push edx
lea eax, [ebp - 0x870]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x442e30
mov dword [ebp - 0x874], 0
jmp 0x442ea7
mov ecx, dword [ebp - 0x874]
add ecx, 1
mov dword [ebp - 0x874], ecx
cmp dword [ebp - 0x874], 3
jge 0x442ede
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x874]
mov dword [ebp - 0x1c], edx
jge 0x442ec6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442edc
mov dword [ebp - 0x1c], 0
jmp 0x442e98
mov edx, 1
test edx, edx
je 0x442f18
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x878]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x442f0a
jmp 0x442f18
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x878]
mov dword [ebp - 0x1c], edx
jmp 0x442ede
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x87c], 0
jmp 0x442f3c
mov ecx, dword [ebp - 0x87c]
add ecx, 1
mov dword [ebp - 0x87c], ecx
cmp dword [ebp - 0x87c], 6
jge 0x442f73
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x87c]
mov dword [ebp - 0x1c], edx
jge 0x442f5b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442f71
mov dword [ebp - 0x1c], 0
jmp 0x442f2d
mov dword [ebp - 0x880], 1
mov dword [ebp - 0x884], 1
mov dword [ebp - 0x888], 2
mov dword [ebp - 0x88c], 0
mov dword [ebp - 0x890], 0
jmp 0x442fb6
mov edx, dword [ebp - 0x890]
add edx, 1
mov dword [ebp - 0x890], edx
cmp dword [ebp - 0x890], 2
jge 0x442ff7
mov eax, dword [ebp - 0x880]
add eax, dword [ebp - 0x884]
mov dword [ebp - 0x888], eax
mov ecx, dword [ebp - 0x884]
mov dword [ebp - 0x880], ecx
mov edx, dword [ebp - 0x888]
mov dword [ebp - 0x884], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x888]
mov dword [ebp - 0x1c], eax
jmp 0x442fa7
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x894], 1
mov dword [ebp - 0x898], 1
mov dword [ebp - 0x89c], 2
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x8a4], 0
jmp 0x443043
mov edx, dword [ebp - 0x8a4]
add edx, 1
mov dword [ebp - 0x8a4], edx
cmp dword [ebp - 0x8a4], 1
jge 0x443084
mov eax, dword [ebp - 0x894]
add eax, dword [ebp - 0x898]
mov dword [ebp - 0x89c], eax
mov ecx, dword [ebp - 0x898]
mov dword [ebp - 0x894], ecx
mov edx, dword [ebp - 0x89c]
mov dword [ebp - 0x898], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x89c]
mov dword [ebp - 0x1c], eax
jmp 0x443034
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4430c7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x8a8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4430b9
jmp 0x4430c7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8a8]
mov dword [ebp - 0x1c], edx
jmp 0x44308d
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x8b0], 1
mov dword [ebp - 0x8b4], 2
mov dword [ebp - 0x8b8], 0
mov dword [ebp - 0x8bc], 0
jmp 0x443113
mov ecx, dword [ebp - 0x8bc]
add ecx, 1
mov dword [ebp - 0x8bc], ecx
cmp dword [ebp - 0x8bc], 2
jge 0x443154
mov edx, dword [ebp - 0x8ac]
add edx, dword [ebp - 0x8b0]
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b0], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x1c], edx
jmp 0x443104
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c0], 1
mov dword [ebp - 0x8c4], 1
mov dword [ebp - 0x8c8], 2
mov dword [ebp - 0x8cc], 0
mov dword [ebp - 0x8d0], 0
jmp 0x4431a0
mov ecx, dword [ebp - 0x8d0]
add ecx, 1
mov dword [ebp - 0x8d0], ecx
cmp dword [ebp - 0x8d0], 1
jge 0x4431e1
mov edx, dword [ebp - 0x8c0]
add edx, dword [ebp - 0x8c4]
mov dword [ebp - 0x8c8], edx
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x8c0], eax
mov ecx, dword [ebp - 0x8c8]
mov dword [ebp - 0x8c4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8c8]
mov dword [ebp - 0x1c], edx
jmp 0x443191
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d4], 0
mov ecx, 1
test ecx, ecx
je 0x44323e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x8d8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x443220
jmp 0x44323e
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x8d4]
add eax, 1
mov dword [ebp - 0x8d4], eax
jmp 0x4431f4
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x8dc], 0
jmp 0x443269
mov edx, dword [ebp - 0x8dc]
add edx, 1
mov dword [ebp - 0x8dc], edx
cmp dword [ebp - 0x8dc], 3
jge 0x4432a4
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443298
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44329f
and eax, 0xbc614e
jmp 0x4432a2
mov dword [ebp - 0x1c], eax
jmp 0x44325a
mov dword [ebp - 4], 0xfffffffe
call fcn.004432b2
jmp 0x4432ba
mov dword [ebp - 4], 2
mov dword [ebp - 0x8e0], 0
jmp 0x4432dc
mov edx, dword [ebp - 0x8e0]
add edx, 1
mov dword [ebp - 0x8e0], edx
cmp dword [ebp - 0x8e0], 3
jge 0x443317
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44330b
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443312
and eax, 0xbc614e
jmp 0x443315
mov dword [ebp - 0x1c], eax
jmp 0x4432cd
mov dword [ebp - 4], 0xfffffffe
call fcn.00443325
jmp 0x44332d
mov dword [ebp - 0x8e4], 0
mov edx, 1
test edx, edx
je 0x443381
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x8e8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x443363
jmp 0x443381
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x8e4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x8e4]
add eax, 1
mov dword [ebp - 0x8e4], eax
jmp 0x443337
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8ec], 1
mov dword [ebp - 0x8f0], 1
mov dword [ebp - 0x8f4], 2
mov dword [ebp - 0x8f8], 0
mov dword [ebp - 0x8fc], 0
jmp 0x4433ca
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
cmp dword [ebp - 0x8fc], 4
jge 0x44340b
mov eax, dword [ebp - 0x8ec]
add eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x8f4], eax
mov ecx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8ec], ecx
mov edx, dword [ebp - 0x8f4]
mov dword [ebp - 0x8f0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x1c], eax
jmp 0x4433bb
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x900], 0
jmp 0x44342f
mov edx, dword [ebp - 0x900]
add edx, 1
mov dword [ebp - 0x900], edx
cmp dword [ebp - 0x900], 2
jge 0x443466
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x900]
mov dword [ebp - 0x1c], eax
jge 0x44344e
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443464
mov dword [ebp - 0x1c], 0
jmp 0x443420
mov dword [ebp - 0x904], 0
jmp 0x443481
mov edx, dword [ebp - 0x904]
add edx, 1
mov dword [ebp - 0x904], edx
cmp dword [ebp - 0x904], 4
jge 0x4434b8
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x904]
mov dword [ebp - 0x1c], eax
jge 0x4434a0
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4434b6
mov dword [ebp - 0x1c], 0
jmp 0x443472
mov dword [ebp - 0x908], 0
jmp 0x4434d3
mov edx, dword [ebp - 0x908]
add edx, 1
mov dword [ebp - 0x908], edx
cmp dword [ebp - 0x908], 1
jge 0x44350a
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x908]
mov dword [ebp - 0x1c], eax
jge 0x4434f2
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443508
mov dword [ebp - 0x1c], 0
jmp 0x4434c4
mov dword [ebp - 0x90c], 0
mov edx, 1
test edx, edx
je 0x44355e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x910]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x443540
jmp 0x44355e
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x90c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x90c]
add eax, 1
mov dword [ebp - 0x90c], eax
jmp 0x443514
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x914], 0
jmp 0x443582
mov edx, dword [ebp - 0x914]
add edx, 1
mov dword [ebp - 0x914], edx
cmp dword [ebp - 0x914], 1
jge 0x4435b9
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x914]
mov dword [ebp - 0x1c], eax
jge 0x4435a1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4435b7
mov dword [ebp - 0x1c], 0
jmp 0x443573
mov dword [ebp - 4], 3
mov dword [ebp - 0x918], 0
jmp 0x4435db
mov edx, dword [ebp - 0x918]
add edx, 1
mov dword [ebp - 0x918], edx
cmp dword [ebp - 0x918], 2
jge 0x443616
mov eax, dword [ebp - 0x918]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44360a
mov eax, dword [ebp - 0x918]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443611
and eax, 0xbc614e
jmp 0x443614
mov dword [ebp - 0x1c], eax
jmp 0x4435cc
mov dword [ebp - 4], 0xfffffffe
call fcn.00443624
jmp 0x44362c
mov dword [ebp - 0x91c], 0
jmp 0x443647
mov edx, dword [ebp - 0x91c]
add edx, 1
mov dword [ebp - 0x91c], edx
cmp dword [ebp - 0x91c], 0
jge 0x44367e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x91c]
mov dword [ebp - 0x1c], eax
jge 0x443666
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44367c
mov dword [ebp - 0x1c], 0
jmp 0x443638
mov dword [ebp - 4], 4
mov dword [ebp - 0x920], 0
jmp 0x4436a0
mov edx, dword [ebp - 0x920]
add edx, 1
mov dword [ebp - 0x920], edx
cmp dword [ebp - 0x920], 4
jge 0x4436db
mov eax, dword [ebp - 0x920]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4436cf
mov eax, dword [ebp - 0x920]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4436d6
and eax, 0xbc614e
jmp 0x4436d9
mov dword [ebp - 0x1c], eax
jmp 0x443691
mov dword [ebp - 4], 0xfffffffe
call fcn.004436e9
jmp 0x4436f1
mov edx, 1
test edx, edx
je 0x44372b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44371d
jmp 0x44372b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x924]
mov dword [ebp - 0x1c], edx
jmp 0x4436f1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x928], 0
jmp 0x44374c
mov ecx, dword [ebp - 0x928]
add ecx, 1
mov dword [ebp - 0x928], ecx
cmp dword [ebp - 0x928], 4
jge 0x443783
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x928]
mov dword [ebp - 0x1c], edx
jge 0x44376b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443781
mov dword [ebp - 0x1c], 0
jmp 0x44373d
mov dword [ebp - 0x92c], 1
mov dword [ebp - 0x930], 1
mov dword [ebp - 0x934], 2
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x93c], 0
jmp 0x4437c6
mov edx, dword [ebp - 0x93c]
add edx, 1
mov dword [ebp - 0x93c], edx
cmp dword [ebp - 0x93c], 3
jge 0x443807
mov eax, dword [ebp - 0x92c]
add eax, dword [ebp - 0x930]
mov dword [ebp - 0x934], eax
mov ecx, dword [ebp - 0x930]
mov dword [ebp - 0x92c], ecx
mov edx, dword [ebp - 0x934]
mov dword [ebp - 0x930], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x934]
mov dword [ebp - 0x1c], eax
jmp 0x4437b7
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x940], 0
jmp 0x443832
mov edx, dword [ebp - 0x940]
add edx, 1
mov dword [ebp - 0x940], edx
cmp dword [ebp - 0x940], 4
jge 0x44386d
mov eax, dword [ebp - 0x940]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443861
mov eax, dword [ebp - 0x940]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443868
and eax, 0xbc614e
jmp 0x44386b
mov dword [ebp - 0x1c], eax
jmp 0x443823
mov dword [ebp - 4], 0xfffffffe
call fcn.0044387b
jmp 0x443883
mov dword [ebp - 4], 6
mov dword [ebp - 0x944], 0
jmp 0x4438a5
mov edx, dword [ebp - 0x944]
add edx, 1
mov dword [ebp - 0x944], edx
cmp dword [ebp - 0x944], 0
jge 0x4438e0
mov eax, dword [ebp - 0x944]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4438d4
mov eax, dword [ebp - 0x944]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4438db
and eax, 0xbc614e
jmp 0x4438de
mov dword [ebp - 0x1c], eax
jmp 0x443896
mov dword [ebp - 4], 0xfffffffe
call fcn.004438ee
jmp 0x4438f6
mov dword [ebp - 0x948], 0
jmp 0x443911
mov edx, dword [ebp - 0x948]
add edx, 1
mov dword [ebp - 0x948], edx
cmp dword [ebp - 0x948], 4
jge 0x443928
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x948]
mov dword [ebp - 0x1c], eax
jmp 0x443902
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44393a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x443952
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x94c], 0
mov edx, 1
test edx, edx
je 0x4439a6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x950], eax
mov eax, dword [ebp - 0x950]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x443988
jmp 0x4439a6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x94c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x94c]
add eax, 1
mov dword [ebp - 0x94c], eax
jmp 0x44395c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x954], 0
jmp 0x4439ca
mov edx, dword [ebp - 0x954]
add edx, 1
mov dword [ebp - 0x954], edx
cmp dword [ebp - 0x954], 3
jge 0x4439e1
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x954]
mov dword [ebp - 0x1c], eax
jmp 0x4439bb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4439f3
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x443a0b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x958], 0
jmp 0x443a2d
mov edx, dword [ebp - 0x958]
add edx, 1
mov dword [ebp - 0x958], edx
cmp dword [ebp - 0x958], 2
jge 0x443a68
mov eax, dword [ebp - 0x958]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443a5c
mov eax, dword [ebp - 0x958]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443a63
and eax, 0xbc614e
jmp 0x443a66
mov dword [ebp - 0x1c], eax
jmp 0x443a1e
mov dword [ebp - 4], 0xfffffffe
call fcn.00443a76
jmp 0x443a7e
mov dword [ebp - 0x95c], 0
jmp 0x443a99
mov edx, dword [ebp - 0x95c]
add edx, 1
mov dword [ebp - 0x95c], edx
cmp dword [ebp - 0x95c], 2
jge 0x443ad0
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x95c]
mov dword [ebp - 0x1c], eax
jge 0x443ab8
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443ace
mov dword [ebp - 0x1c], 0
jmp 0x443a8a
mov dword [ebp - 0x960], 0
jmp 0x443aeb
mov edx, dword [ebp - 0x960]
add edx, 1
mov dword [ebp - 0x960], edx
cmp dword [ebp - 0x960], 2
jge 0x443b22
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x960]
mov dword [ebp - 0x1c], eax
jge 0x443b0a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x443b20
mov dword [ebp - 0x1c], 0
jmp 0x443adc
mov dword [ebp - 4], 8
mov dword [ebp - 0x964], 0
jmp 0x443b44
mov edx, dword [ebp - 0x964]
add edx, 1
mov dword [ebp - 0x964], edx
cmp dword [ebp - 0x964], 2
jge 0x443b7f
mov eax, dword [ebp - 0x964]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x443b73
mov eax, dword [ebp - 0x964]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x443b7a
and eax, 0xbc614e
jmp 0x443b7d
mov dword [ebp - 0x1c], eax
jmp 0x443b35
mov dword [ebp - 4], 0xfffffffe
call fcn.00443b8d
jmp 0x443b95
mov dword [ebp - 0x968], 1
mov dword [ebp - 0x96c], 1
mov dword [ebp - 0x970], 2
mov dword [ebp - 0x974], 0
mov dword [ebp - 0x978], 0
jmp 0x443bd8
mov edx, dword [ebp - 0x978]
add edx, 1
mov dword [ebp - 0x978], edx
cmp dword [ebp - 0x978], 3
jge 0x443c19
mov eax, dword [ebp - 0x968]
add eax, dword [ebp - 0x96c]
mov dword [ebp - 0x970], eax
mov ecx, dword [ebp - 0x96c]
mov dword [ebp - 0x968], ecx
mov edx, dword [ebp - 0x970]
mov dword [ebp - 0x96c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x970]
mov dword [ebp - 0x1c], eax
jmp 0x443bc9
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x97c], 0
jmp 0x443c3d
mov edx, dword [ebp - 0x97c]
add edx, 1
mov dword [ebp - 0x97c], edx
cmp dword [ebp - 0x97c], 2
jge 0x443c54
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x97c]
mov dword [ebp - 0x1c], eax
jmp 0x443c2e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x443c66
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x443c7e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x980], 0
mov edx, 1
test edx, edx
je 0x443cd2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x984], eax
mov eax, dword [ebp - 0x984]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x443cb4
jmp 0x443cd2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x980]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x980]
add eax, 1
mov dword [ebp - 0x980], eax
jmp 0x443c88
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x28]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret