Function at 0x43cdb0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47dee8
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff098
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x54], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x43cdff
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xc
jge 0x43ce30
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jge 0x43ce18
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43ce2e
mov dword [ebp - 0x1c], 0
jmp 0x43cdf6
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x43ce49
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1a
jge 0x43ce7b
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ce6f
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ce76
and eax, 0xbc614e
jmp 0x43ce79
mov dword [ebp - 0x1c], eax
jmp 0x43ce40
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ce89
jmp 0x43ce91
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x43ceaa
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 8
jge 0x43cedc
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ced0
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ced7
and eax, 0xbc614e
jmp 0x43ceda
mov dword [ebp - 0x1c], eax
jmp 0x43cea1
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ceea
jmp 0x43cef2
mov dword [ebp - 0x2c], 0
jmp 0x43cf04
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x17
jge 0x43cf35
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jge 0x43cf1d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43cf33
mov dword [ebp - 0x1c], 0
jmp 0x43cefb
mov dword [ebp - 4], 2
mov dword [ebp - 0x30], 0
jmp 0x43cf4e
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0
jge 0x43cf80
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43cf74
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43cf7b
and eax, 0xbc614e
jmp 0x43cf7e
mov dword [ebp - 0x1c], eax
jmp 0x43cf45
mov dword [ebp - 4], 0xfffffffe
call fcn.0043cf8e
jmp 0x43cf96
mov dword [ebp - 0x34], 0
mov edx, 1
test edx, edx
je 0x43cfd8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43cfc3
jmp 0x43cfd8
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
jmp 0x43cf9d
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], 0
jmp 0x43cff3
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 2
jge 0x43d004
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x43cfea
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43d016
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43d02e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x40], 0
mov edx, 1
test edx, edx
je 0x43d070
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43d05b
jmp 0x43d070
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
jmp 0x43d035
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x48], 0
jmp 0x43d08b
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 6
jge 0x43d09c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
jmp 0x43d082
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43d0ae
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43d0c6
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], 0
jmp 0x43d0d8
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 8
jge 0x43d11c
cmp dword [ebp - 0x1c], 0
jge 0x43d0ec
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d102
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x50], 0xfa
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x250]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43d0cf
mov dword [ebp - 4], 3
mov dword [ebp - 0x254], 0
jmp 0x43d13e
mov ecx, dword [ebp - 0x254]
add ecx, 1
mov dword [ebp - 0x254], ecx
cmp dword [ebp - 0x254], 1
jge 0x43d179
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43d16d
mov eax, dword [ebp - 0x254]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43d174
and eax, 0xbc614e
jmp 0x43d177
mov dword [ebp - 0x1c], eax
jmp 0x43d12f
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d187
jmp 0x43d18f
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x260], 2
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x268], 0
jmp 0x43d1d2
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 0
jge 0x43d213
mov eax, dword [ebp - 0x258]
add eax, dword [ebp - 0x25c]
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], ecx
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x260]
mov dword [ebp - 0x1c], eax
jmp 0x43d1c3
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x43d253
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43d245
jmp 0x43d253
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x26c]
mov dword [ebp - 0x1c], edx
jmp 0x43d219
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 0
jmp 0x43d29c
mov ecx, dword [ebp - 0x280]
add ecx, 1
mov dword [ebp - 0x280], ecx
cmp dword [ebp - 0x280], 4
jge 0x43d2dd
mov edx, dword [ebp - 0x270]
add edx, dword [ebp - 0x274]
mov dword [ebp - 0x278], edx
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x274], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x278]
mov dword [ebp - 0x1c], edx
jmp 0x43d28d
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x284], 0
jmp 0x43d301
mov ecx, dword [ebp - 0x284]
add ecx, 1
mov dword [ebp - 0x284], ecx
cmp dword [ebp - 0x284], 8
jge 0x43d318
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x284]
mov dword [ebp - 0x1c], edx
jmp 0x43d2f2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43d32a
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43d342
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x288], 0
jmp 0x43d35d
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 8
jge 0x43d394
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x288]
mov dword [ebp - 0x1c], eax
jge 0x43d37c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d392
mov dword [ebp - 0x1c], 0
jmp 0x43d34e
mov dword [ebp - 4], 4
mov dword [ebp - 0x28c], 0
jmp 0x43d3b6
mov edx, dword [ebp - 0x28c]
add edx, 1
mov dword [ebp - 0x28c], edx
cmp dword [ebp - 0x28c], 1
jge 0x43d3f1
mov eax, dword [ebp - 0x28c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43d3e5
mov eax, dword [ebp - 0x28c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43d3ec
and eax, 0xbc614e
jmp 0x43d3ef
mov dword [ebp - 0x1c], eax
jmp 0x43d3a7
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d3ff
jmp 0x43d407
mov dword [ebp - 0x290], 0
mov edx, 1
test edx, edx
je 0x43d45b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43d43d
jmp 0x43d45b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x290]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x290]
add eax, 1
mov dword [ebp - 0x290], eax
jmp 0x43d411
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x2a0], 2
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2a8], 0
jmp 0x43d4a7
mov edx, dword [ebp - 0x2a8]
add edx, 1
mov dword [ebp - 0x2a8], edx
cmp dword [ebp - 0x2a8], 2
jge 0x43d4e8
mov eax, dword [ebp - 0x298]
add eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0x298], ecx
mov edx, dword [ebp - 0x2a0]
mov dword [ebp - 0x29c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x1c], eax
jmp 0x43d498
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2ac], 0
jmp 0x43d50c
mov edx, dword [ebp - 0x2ac]
add edx, 1
mov dword [ebp - 0x2ac], edx
cmp dword [ebp - 0x2ac], 1
jge 0x43d523
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x1c], eax
jmp 0x43d4fd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43d535
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43d54d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2b0], 0
jmp 0x43d568
mov edx, dword [ebp - 0x2b0]
add edx, 1
mov dword [ebp - 0x2b0], edx
cmp dword [ebp - 0x2b0], 4
jge 0x43d5b5
cmp dword [ebp - 0x1c], 0
jge 0x43d57f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d595
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2b4], 0xfa
lea edx, [ebp - 0x2b4]
push edx
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43d559
mov dword [ebp - 0x4b4], 0
jmp 0x43d5d0
mov ecx, dword [ebp - 0x4b4]
add ecx, 1
mov dword [ebp - 0x4b4], ecx
cmp dword [ebp - 0x4b4], 4
jge 0x43d61d
cmp dword [ebp - 0x1c], 0
jge 0x43d5e7
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d5fd
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4b8], 0xfa
lea edx, [ebp - 0x4b8]
push edx
lea eax, [ebp - 0x6b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43d5c1
mov dword [ebp - 0x6b4], 1
mov dword [ebp - 0x6b8], 1
mov dword [ebp - 0x6bc], 2
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6c4], 0
jmp 0x43d660
mov ecx, dword [ebp - 0x6c4]
add ecx, 1
mov dword [ebp - 0x6c4], ecx
cmp dword [ebp - 0x6c4], 1
jge 0x43d6a1
mov edx, dword [ebp - 0x6b4]
add edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x6bc], edx
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x6b4], eax
mov ecx, dword [ebp - 0x6bc]
mov dword [ebp - 0x6b8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x1c], edx
jmp 0x43d651
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x6c8], 0
jmp 0x43d6cc
mov ecx, dword [ebp - 0x6c8]
add ecx, 1
mov dword [ebp - 0x6c8], ecx
cmp dword [ebp - 0x6c8], 3
jge 0x43d707
mov eax, dword [ebp - 0x6c8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43d6fb
mov eax, dword [ebp - 0x6c8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43d702
and eax, 0xbc614e
jmp 0x43d705
mov dword [ebp - 0x1c], eax
jmp 0x43d6bd
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d715
jmp 0x43d71d
mov dword [ebp - 0x6cc], 0
jmp 0x43d738
mov edx, dword [ebp - 0x6cc]
add edx, 1
mov dword [ebp - 0x6cc], edx
cmp dword [ebp - 0x6cc], 2
jge 0x43d76f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x1c], eax
jge 0x43d757
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d76d
mov dword [ebp - 0x1c], 0
jmp 0x43d729
mov dword [ebp - 0x6d0], 0
mov edx, 1
test edx, edx
je 0x43d7c3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43d7a5
jmp 0x43d7c3
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6d0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6d0]
add eax, 1
mov dword [ebp - 0x6d0], eax
jmp 0x43d779
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6d8], 0
jmp 0x43d7e7
mov edx, dword [ebp - 0x6d8]
add edx, 1
mov dword [ebp - 0x6d8], edx
cmp dword [ebp - 0x6d8], 3
jge 0x43d834
cmp dword [ebp - 0x1c], 0
jge 0x43d7fe
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d814
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6dc], 0xfa
lea edx, [ebp - 0x6dc]
push edx
lea eax, [ebp - 0x8d8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43d7d8
mov dword [ebp - 0x8dc], 0
jmp 0x43d84f
mov ecx, dword [ebp - 0x8dc]
add ecx, 1
mov dword [ebp - 0x8dc], ecx
cmp dword [ebp - 0x8dc], 2
jge 0x43d89c
cmp dword [ebp - 0x1c], 0
jge 0x43d866
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d87c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8e0], 0xfa
lea edx, [ebp - 0x8e0]
push edx
lea eax, [ebp - 0xad8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43d840
mov dword [ebp - 4], 6
mov dword [ebp - 0xadc], 0
jmp 0x43d8be
mov ecx, dword [ebp - 0xadc]
add ecx, 1
mov dword [ebp - 0xadc], ecx
cmp dword [ebp - 0xadc], 1
jge 0x43d8f9
mov eax, dword [ebp - 0xadc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43d8ed
mov eax, dword [ebp - 0xadc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43d8f4
and eax, 0xbc614e
jmp 0x43d8f7
mov dword [ebp - 0x1c], eax
jmp 0x43d8af
mov dword [ebp - 4], 0xfffffffe
call fcn.0043d907
jmp 0x43d90f
mov dword [ebp - 0xae0], 0
jmp 0x43d92a
mov edx, dword [ebp - 0xae0]
add edx, 1
mov dword [ebp - 0xae0], edx
cmp dword [ebp - 0xae0], 3
jge 0x43d977
cmp dword [ebp - 0x1c], 0
jge 0x43d941
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43d957
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xae4], 0xfa
lea edx, [ebp - 0xae4]
push edx
lea eax, [ebp - 0xce0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43d91b
mov dword [ebp - 0xce4], 0
mov ecx, 1
test ecx, ecx
je 0x43d9cb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xce8], eax
mov eax, dword [ebp - 0xce8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43d9ad
jmp 0x43d9cb
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xce4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xce4]
add eax, 1
mov dword [ebp - 0xce4], eax
jmp 0x43d981
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xcec], 1
mov dword [ebp - 0xcf0], 1
mov dword [ebp - 0xcf4], 2
mov dword [ebp - 0xcf8], 0
mov dword [ebp - 0xcfc], 0
jmp 0x43da17
mov edx, dword [ebp - 0xcfc]
add edx, 1
mov dword [ebp - 0xcfc], edx
cmp dword [ebp - 0xcfc], 0
jge 0x43da58
mov eax, dword [ebp - 0xcec]
add eax, dword [ebp - 0xcf0]
mov dword [ebp - 0xcf4], eax
mov ecx, dword [ebp - 0xcf0]
mov dword [ebp - 0xcec], ecx
mov edx, dword [ebp - 0xcf4]
mov dword [ebp - 0xcf0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x1c], eax
jmp 0x43da08
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0xd00], 0
jmp 0x43da80
mov edx, dword [ebp - 0xd00]
add edx, 1
mov dword [ebp - 0xd00], edx
cmp dword [ebp - 0xd00], 3
jge 0x43dabb
mov eax, dword [ebp - 0xd00]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43daaf
mov eax, dword [ebp - 0xd00]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43dab6
and eax, 0xbc614e
jmp 0x43dab9
mov dword [ebp - 0x1c], eax
jmp 0x43da71
mov dword [ebp - 4], 0xfffffffe
call fcn.0043dac9
jmp 0x43dad1
mov dword [ebp - 0xd04], 1
mov dword [ebp - 0xd08], 1
mov dword [ebp - 0xd0c], 2
mov dword [ebp - 0xd10], 0
mov dword [ebp - 0xd14], 0
jmp 0x43db14
mov edx, dword [ebp - 0xd14]
add edx, 1
mov dword [ebp - 0xd14], edx
cmp dword [ebp - 0xd14], 2
jge 0x43db55
mov eax, dword [ebp - 0xd04]
add eax, dword [ebp - 0xd08]
mov dword [ebp - 0xd0c], eax
mov ecx, dword [ebp - 0xd08]
mov dword [ebp - 0xd04], ecx
mov edx, dword [ebp - 0xd0c]
mov dword [ebp - 0xd08], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xd0c]
mov dword [ebp - 0x1c], eax
jmp 0x43db05
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x43db98
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0xd18]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43db8a
jmp 0x43db98
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd18]
mov dword [ebp - 0x1c], edx
jmp 0x43db5e
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd1c], 1
mov dword [ebp - 0xd20], 1
mov dword [ebp - 0xd24], 2
mov dword [ebp - 0xd28], 0
mov dword [ebp - 0xd2c], 0
jmp 0x43dbe4
mov ecx, dword [ebp - 0xd2c]
add ecx, 1
mov dword [ebp - 0xd2c], ecx
cmp dword [ebp - 0xd2c], 3
jge 0x43dc25
mov edx, dword [ebp - 0xd1c]
add edx, dword [ebp - 0xd20]
mov dword [ebp - 0xd24], edx
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0xd1c], eax
mov ecx, dword [ebp - 0xd24]
mov dword [ebp - 0xd20], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd24]
mov dword [ebp - 0x1c], edx
jmp 0x43dbd5
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd30], 0
jmp 0x43dc49
mov ecx, dword [ebp - 0xd30]
add ecx, 1
mov dword [ebp - 0xd30], ecx
cmp dword [ebp - 0xd30], 1
jge 0x43dc60
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xd30]
mov dword [ebp - 0x1c], edx
jmp 0x43dc3a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43dc72
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43dc8a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x43dcc4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd34], eax
mov eax, dword [ebp - 0xd34]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43dcb6
jmp 0x43dcc4
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd34]
mov dword [ebp - 0x1c], edx
jmp 0x43dc8a
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x43dd07
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0xd38]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43dcf9
jmp 0x43dd07
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd38]
mov dword [ebp - 0x1c], edx
jmp 0x43dccd
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd3c], 1
mov dword [ebp - 0xd40], 1
mov dword [ebp - 0xd44], 2
mov dword [ebp - 0xd48], 0
mov dword [ebp - 0xd4c], 0
jmp 0x43dd50
mov ecx, dword [ebp - 0xd4c]
add ecx, 1
mov dword [ebp - 0xd4c], ecx
cmp dword [ebp - 0xd4c], 3
jge 0x43dd91
mov edx, dword [ebp - 0xd3c]
add edx, dword [ebp - 0xd40]
mov dword [ebp - 0xd44], edx
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0xd3c], eax
mov ecx, dword [ebp - 0xd44]
mov dword [ebp - 0xd40], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd44]
mov dword [ebp - 0x1c], edx
jmp 0x43dd41
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd50], 0
mov ecx, 1
test ecx, ecx
je 0x43ddee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd54], eax
mov eax, dword [ebp - 0xd54]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43ddd0
jmp 0x43ddee
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd50]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd50]
add eax, 1
mov dword [ebp - 0xd50], eax
jmp 0x43dda4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd58], 0
mov edx, 1
test edx, edx
je 0x43de4b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd5c], eax
mov eax, dword [ebp - 0xd5c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43de2d
jmp 0x43de4b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd58]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd58]
add eax, 1
mov dword [ebp - 0xd58], eax
jmp 0x43de01
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0xd60], 0
jmp 0x43de76
mov edx, dword [ebp - 0xd60]
add edx, 1
mov dword [ebp - 0xd60], edx
cmp dword [ebp - 0xd60], 0
jge 0x43deb1
mov eax, dword [ebp - 0xd60]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43dea5
mov eax, dword [ebp - 0xd60]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43deac
and eax, 0xbc614e
jmp 0x43deaf
mov dword [ebp - 0x1c], eax
jmp 0x43de67
mov dword [ebp - 4], 0xfffffffe
call fcn.0043debf
jmp 0x43dec7
mov dword [ebp - 0xd64], 0
mov edx, 1
test edx, edx
je 0x43df1b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd68], eax
mov eax, dword [ebp - 0xd68]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43defd
jmp 0x43df1b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd64]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd64]
add eax, 1
mov dword [ebp - 0xd64], eax
jmp 0x43ded1
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd6c], 0
jmp 0x43df3f
mov edx, dword [ebp - 0xd6c]
add edx, 1
mov dword [ebp - 0xd6c], edx
cmp dword [ebp - 0xd6c], 2
jge 0x43df56
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xd6c]
mov dword [ebp - 0x1c], eax
jmp 0x43df30
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43df68
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43df80
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd70], 0
jmp 0x43df9b
mov edx, dword [ebp - 0xd70]
add edx, 1
mov dword [ebp - 0xd70], edx
cmp dword [ebp - 0xd70], 3
jge 0x43dfe8
cmp dword [ebp - 0x1c], 0
jge 0x43dfb2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43dfc8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xd74], 0xfa
lea edx, [ebp - 0xd74]
push edx
lea eax, [ebp - 0xf70]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43df8c
mov dword [ebp - 0xf74], 0
jmp 0x43e003
mov ecx, dword [ebp - 0xf74]
add ecx, 1
mov dword [ebp - 0xf74], ecx
cmp dword [ebp - 0xf74], 4
jge 0x43e01a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xf74]
mov dword [ebp - 0x1c], edx
jmp 0x43dff4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43e02c
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43e044
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf78], 0
jmp 0x43e05f
mov edx, dword [ebp - 0xf78]
add edx, 1
mov dword [ebp - 0xf78], edx
cmp dword [ebp - 0xf78], 2
jge 0x43e076
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xf78]
mov dword [ebp - 0x1c], eax
jmp 0x43e050
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43e088
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43e0a0
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x54]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret