Function at 0x43ed70
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47dfd8
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff0f8
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x38], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x43edc6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2d
jge 0x43edf8
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43edec
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43edf3
and eax, 0xbc614e
jmp 0x43edf6
mov dword [ebp - 0x1c], eax
jmp 0x43edbd
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ee06
jmp 0x43ee0e
mov edx, 1
test edx, edx
je 0x43ee3f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43ee34
jmp 0x43ee3f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x43ee0e
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x43ee79
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43ee6e
jmp 0x43ee79
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x43ee48
mov eax, dword [ebp - 0x1c]
add eax, 0x31
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0
jmp 0x43ee94
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0xb
jge 0x43eec5
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jge 0x43eead
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43eec3
mov dword [ebp - 0x1c], 0
jmp 0x43ee8b
mov dword [ebp - 0x30], 0
jmp 0x43eed7
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x19
jge 0x43ef1b
cmp dword [ebp - 0x1c], 0
jge 0x43eeeb
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43ef01
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x34], 0xfa
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43eece
mov dword [ebp - 0x234], 0
mov ecx, 1
test ecx, ecx
je 0x43ef6f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43ef51
jmp 0x43ef6f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x234]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
jmp 0x43ef25
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x23c], 0
mov edx, 1
test edx, edx
je 0x43efcc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43efae
jmp 0x43efcc
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x23c]
add eax, 1
mov dword [ebp - 0x23c], eax
jmp 0x43ef82
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x244], 0
jmp 0x43eff7
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 8
jge 0x43f032
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f026
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f02d
and eax, 0xbc614e
jmp 0x43f030
mov dword [ebp - 0x1c], eax
jmp 0x43efe8
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f040
jmp 0x43f048
mov dword [ebp - 0x248], 0
jmp 0x43f063
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 6
jge 0x43f07a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x248]
mov dword [ebp - 0x1c], eax
jmp 0x43f054
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43f08c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43f0a4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24c], 0
jmp 0x43f0bf
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 8
jge 0x43f0d6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], eax
jmp 0x43f0b0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43f0e8
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43f100
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x250], 0
jmp 0x43f122
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 7
jge 0x43f15d
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f151
mov eax, dword [ebp - 0x250]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f158
and eax, 0xbc614e
jmp 0x43f15b
mov dword [ebp - 0x1c], eax
jmp 0x43f113
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f16b
jmp 0x43f173
mov dword [ebp - 4], 3
mov dword [ebp - 0x254], 0
jmp 0x43f195
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 2
jge 0x43f1d0
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f1c4
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f1cb
and eax, 0xbc614e
jmp 0x43f1ce
mov dword [ebp - 0x1c], eax
jmp 0x43f186
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f1de
jmp 0x43f1e6
mov dword [ebp - 0x258], 0
jmp 0x43f201
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 1
jge 0x43f218
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x258]
mov dword [ebp - 0x1c], eax
jmp 0x43f1f2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43f22a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43f242
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x25c], 0
jmp 0x43f264
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 6
jge 0x43f29f
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f293
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f29a
and eax, 0xbc614e
jmp 0x43f29d
mov dword [ebp - 0x1c], eax
jmp 0x43f255
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f2ad
jmp 0x43f2b5
mov dword [ebp - 0x260], 0
jmp 0x43f2d0
mov edx, dword [ebp - 0x260]
add edx, 1
mov dword [ebp - 0x260], edx
cmp dword [ebp - 0x260], 4
jge 0x43f307
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x260]
mov dword [ebp - 0x1c], eax
jge 0x43f2ef
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f305
mov dword [ebp - 0x1c], 0
jmp 0x43f2c1
mov dword [ebp - 4], 5
mov dword [ebp - 0x264], 0
jmp 0x43f329
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 1
jge 0x43f364
mov eax, dword [ebp - 0x264]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f358
mov eax, dword [ebp - 0x264]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f35f
and eax, 0xbc614e
jmp 0x43f362
mov dword [ebp - 0x1c], eax
jmp 0x43f31a
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f372
jmp 0x43f37a
mov dword [ebp - 0x268], 0
jmp 0x43f395
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 0
jge 0x43f3e2
cmp dword [ebp - 0x1c], 0
jge 0x43f3ac
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f3c2
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x26c], 0xfa
lea edx, [ebp - 0x26c]
push edx
lea eax, [ebp - 0x468]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43f386
mov ecx, 1
test ecx, ecx
je 0x43f41c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43f40e
jmp 0x43f41c
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x46c]
mov dword [ebp - 0x1c], edx
jmp 0x43f3e2
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x470], 0
jmp 0x43f440
mov ecx, dword [ebp - 0x470]
add ecx, 1
mov dword [ebp - 0x470], ecx
cmp dword [ebp - 0x470], 5
jge 0x43f48d
cmp dword [ebp - 0x1c], 0
jge 0x43f457
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f46d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x474], 0xfa
lea edx, [ebp - 0x474]
push edx
lea eax, [ebp - 0x670]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43f431
mov dword [ebp - 0x674], 0
jmp 0x43f4a8
mov ecx, dword [ebp - 0x674]
add ecx, 1
mov dword [ebp - 0x674], ecx
cmp dword [ebp - 0x674], 0
jge 0x43f4f5
cmp dword [ebp - 0x1c], 0
jge 0x43f4bf
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f4d5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x678], 0xfa
lea edx, [ebp - 0x678]
push edx
lea eax, [ebp - 0x870]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43f499
mov dword [ebp - 0x874], 0
jmp 0x43f510
mov ecx, dword [ebp - 0x874]
add ecx, 1
mov dword [ebp - 0x874], ecx
cmp dword [ebp - 0x874], 1
jge 0x43f547
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x874]
mov dword [ebp - 0x1c], edx
jge 0x43f52f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f545
mov dword [ebp - 0x1c], 0
jmp 0x43f501
mov dword [ebp - 0x878], 0
jmp 0x43f562
mov edx, dword [ebp - 0x878]
add edx, 1
mov dword [ebp - 0x878], edx
cmp dword [ebp - 0x878], 1
jge 0x43f5af
cmp dword [ebp - 0x1c], 0
jge 0x43f579
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f58f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x87c], 0xfa
lea edx, [ebp - 0x87c]
push edx
lea eax, [ebp - 0xa78]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43f553
mov dword [ebp - 0xa7c], 0
mov ecx, 1
test ecx, ecx
je 0x43f603
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa80], eax
mov eax, dword [ebp - 0xa80]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43f5e5
jmp 0x43f603
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xa7c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xa7c]
add eax, 1
mov dword [ebp - 0xa7c], eax
jmp 0x43f5b9
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xa84], 0
jmp 0x43f627
mov edx, dword [ebp - 0xa84]
add edx, 1
mov dword [ebp - 0xa84], edx
cmp dword [ebp - 0xa84], 0
jge 0x43f674
cmp dword [ebp - 0x1c], 0
jge 0x43f63e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f654
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa88], 0xfa
lea edx, [ebp - 0xa88]
push edx
lea eax, [ebp - 0xc80]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43f618
mov ecx, 1
test ecx, ecx
je 0x43f6ae
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc84], eax
mov eax, dword [ebp - 0xc84]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43f6a0
jmp 0x43f6ae
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc84]
mov dword [ebp - 0x1c], edx
jmp 0x43f674
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc88], 1
mov dword [ebp - 0xc8c], 1
mov dword [ebp - 0xc90], 2
mov dword [ebp - 0xc94], 0
mov dword [ebp - 0xc98], 0
jmp 0x43f6fa
mov ecx, dword [ebp - 0xc98]
add ecx, 1
mov dword [ebp - 0xc98], ecx
cmp dword [ebp - 0xc98], 1
jge 0x43f73b
mov edx, dword [ebp - 0xc88]
add edx, dword [ebp - 0xc8c]
mov dword [ebp - 0xc90], edx
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0xc88], eax
mov ecx, dword [ebp - 0xc90]
mov dword [ebp - 0xc8c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc90]
mov dword [ebp - 0x1c], edx
jmp 0x43f6eb
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc9c], 0
jmp 0x43f75f
mov ecx, dword [ebp - 0xc9c]
add ecx, 1
mov dword [ebp - 0xc9c], ecx
cmp dword [ebp - 0xc9c], 3
jge 0x43f776
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc9c]
mov dword [ebp - 0x1c], edx
jmp 0x43f750
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43f788
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43f7a0
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0xca0], 0
jmp 0x43f7c2
mov edx, dword [ebp - 0xca0]
add edx, 1
mov dword [ebp - 0xca0], edx
cmp dword [ebp - 0xca0], 4
jge 0x43f7fd
mov eax, dword [ebp - 0xca0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43f7f1
mov eax, dword [ebp - 0xca0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43f7f8
and eax, 0xbc614e
jmp 0x43f7fb
mov dword [ebp - 0x1c], eax
jmp 0x43f7b3
mov dword [ebp - 4], 0xfffffffe
call fcn.0043f80b
jmp 0x43f813
mov edx, 1
test edx, edx
je 0x43f84d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xca4], eax
mov eax, dword [ebp - 0xca4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43f83f
jmp 0x43f84d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xca4]
mov dword [ebp - 0x1c], edx
jmp 0x43f813
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xca8], 1
mov dword [ebp - 0xcac], 1
mov dword [ebp - 0xcb0], 2
mov dword [ebp - 0xcb4], 0
mov dword [ebp - 0xcb8], 0
jmp 0x43f896
mov ecx, dword [ebp - 0xcb8]
add ecx, 1
mov dword [ebp - 0xcb8], ecx
cmp dword [ebp - 0xcb8], 3
jge 0x43f8d7
mov edx, dword [ebp - 0xca8]
add edx, dword [ebp - 0xcac]
mov dword [ebp - 0xcb0], edx
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0xca8], eax
mov ecx, dword [ebp - 0xcb0]
mov dword [ebp - 0xcac], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xcb0]
mov dword [ebp - 0x1c], edx
jmp 0x43f887
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcbc], 0
jmp 0x43f8fb
mov ecx, dword [ebp - 0xcbc]
add ecx, 1
mov dword [ebp - 0xcbc], ecx
cmp dword [ebp - 0xcbc], 0
jge 0x43f932
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xcbc]
mov dword [ebp - 0x1c], edx
jge 0x43f91a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43f930
mov dword [ebp - 0x1c], 0
jmp 0x43f8ec
mov dword [ebp - 0xcc0], 1
mov dword [ebp - 0xcc4], 1
mov dword [ebp - 0xcc8], 2
mov dword [ebp - 0xccc], 0
mov dword [ebp - 0xcd0], 0
jmp 0x43f975
mov edx, dword [ebp - 0xcd0]
add edx, 1
mov dword [ebp - 0xcd0], edx
cmp dword [ebp - 0xcd0], 3
jge 0x43f9b6
mov eax, dword [ebp - 0xcc0]
add eax, dword [ebp - 0xcc4]
mov dword [ebp - 0xcc8], eax
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0xcc0], ecx
mov edx, dword [ebp - 0xcc8]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x1c], eax
jmp 0x43f966
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x43f9f9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcd4], eax
mov eax, dword [ebp - 0xcd4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43f9eb
jmp 0x43f9f9
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x1c], edx
jmp 0x43f9bf
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcd8], 0
mov ecx, 1
test ecx, ecx
je 0x43fa56
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 0xcdc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43fa38
jmp 0x43fa56
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xcd8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xcd8]
add eax, 1
mov dword [ebp - 0xcd8], eax
jmp 0x43fa0c
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xce0], 0
mov edx, 1
test edx, edx
je 0x43fab0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xce4], eax
mov eax, dword [ebp - 0xce4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43fa92
jmp 0x43fab0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xce0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xce0]
add eax, 1
mov dword [ebp - 0xce0], eax
jmp 0x43fa66
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0xce8], 0
jmp 0x43fadb
mov edx, dword [ebp - 0xce8]
add edx, 1
mov dword [ebp - 0xce8], edx
cmp dword [ebp - 0xce8], 3
jge 0x43fb16
mov eax, dword [ebp - 0xce8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43fb0a
mov eax, dword [ebp - 0xce8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43fb11
and eax, 0xbc614e
jmp 0x43fb14
mov dword [ebp - 0x1c], eax
jmp 0x43facc
mov dword [ebp - 4], 0xfffffffe
call fcn.0043fb24
jmp 0x43fb2c
mov dword [ebp - 4], 8
mov dword [ebp - 0xcec], 0
jmp 0x43fb4e
mov edx, dword [ebp - 0xcec]
add edx, 1
mov dword [ebp - 0xcec], edx
cmp dword [ebp - 0xcec], 1
jge 0x43fb89
mov eax, dword [ebp - 0xcec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43fb7d
mov eax, dword [ebp - 0xcec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43fb84
and eax, 0xbc614e
jmp 0x43fb87
mov dword [ebp - 0x1c], eax
jmp 0x43fb3f
mov dword [ebp - 4], 0xfffffffe
call fcn.0043fb97
jmp 0x43fb9f
mov dword [ebp - 0xcf0], 0
jmp 0x43fbba
mov edx, dword [ebp - 0xcf0]
add edx, 1
mov dword [ebp - 0xcf0], edx
cmp dword [ebp - 0xcf0], 3
jge 0x43fbd1
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcf0]
mov dword [ebp - 0x1c], eax
jmp 0x43fbab
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43fbe3
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43fbfb
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcf4], 0
jmp 0x43fc16
mov edx, dword [ebp - 0xcf4]
add edx, 1
mov dword [ebp - 0xcf4], edx
cmp dword [ebp - 0xcf4], 1
jge 0x43fc63
cmp dword [ebp - 0x1c], 0
jge 0x43fc2d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43fc43
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xcf8], 0xfa
lea edx, [ebp - 0xcf8]
push edx
lea eax, [ebp - 0xef0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43fc07
mov ecx, 1
test ecx, ecx
je 0x43fc9d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xef4], eax
mov eax, dword [ebp - 0xef4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43fc8f
jmp 0x43fc9d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xef4]
mov dword [ebp - 0x1c], edx
jmp 0x43fc63
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xef8], 0
mov ecx, 1
test ecx, ecx
je 0x43fcfa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xefc], eax
mov eax, dword [ebp - 0xefc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43fcdc
jmp 0x43fcfa
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xef8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xef8]
add eax, 1
mov dword [ebp - 0xef8], eax
jmp 0x43fcb0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xf00], 1
mov dword [ebp - 0xf04], 1
mov dword [ebp - 0xf08], 2
mov dword [ebp - 0xf0c], 0
mov dword [ebp - 0xf10], 0
jmp 0x43fd46
mov edx, dword [ebp - 0xf10]
add edx, 1
mov dword [ebp - 0xf10], edx
cmp dword [ebp - 0xf10], 2
jge 0x43fd87
mov eax, dword [ebp - 0xf00]
add eax, dword [ebp - 0xf04]
mov dword [ebp - 0xf08], eax
mov ecx, dword [ebp - 0xf04]
mov dword [ebp - 0xf00], ecx
mov edx, dword [ebp - 0xf08]
mov dword [ebp - 0xf04], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xf08]
mov dword [ebp - 0x1c], eax
jmp 0x43fd37
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0xf14], 0
jmp 0x43fdb2
mov edx, dword [ebp - 0xf14]
add edx, 1
mov dword [ebp - 0xf14], edx
cmp dword [ebp - 0xf14], 2
jge 0x43fded
mov eax, dword [ebp - 0xf14]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43fde1
mov eax, dword [ebp - 0xf14]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43fde8
and eax, 0xbc614e
jmp 0x43fdeb
mov dword [ebp - 0x1c], eax
jmp 0x43fda3
mov dword [ebp - 4], 0xfffffffe
call fcn.0043fdfb
jmp 0x43fe03
mov dword [ebp - 0xf18], 0
jmp 0x43fe1e
mov edx, dword [ebp - 0xf18]
add edx, 1
mov dword [ebp - 0xf18], edx
cmp dword [ebp - 0xf18], 3
jge 0x43fe55
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xf18]
mov dword [ebp - 0x1c], eax
jge 0x43fe3d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43fe53
mov dword [ebp - 0x1c], 0
jmp 0x43fe0f
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x38]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret