Function at 0x431960
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47db30
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1564
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x4319b6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x14
jge 0x4319fa
cmp dword [ebp - 0x1c], 0
jge 0x4319ca
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4319e0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0xfa
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4319ad
mov dword [ebp - 0x224], 0
jmp 0x431a15
mov ecx, dword [ebp - 0x224]
add ecx, 1
mov dword [ebp - 0x224], ecx
cmp dword [ebp - 0x224], 0x1f
jge 0x431a4c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x224]
mov dword [ebp - 0x1c], edx
jge 0x431a34
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x431a4a
mov dword [ebp - 0x1c], 0
jmp 0x431a06
mov dword [ebp - 0x228], 0
jmp 0x431a67
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 2
jge 0x431a9e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x228]
mov dword [ebp - 0x1c], eax
jge 0x431a86
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x431a9c
mov dword [ebp - 0x1c], 0
jmp 0x431a58
mov dword [ebp - 0x22c], 0
jmp 0x431ab9
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0xd
jge 0x431ad0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], eax
jmp 0x431aaa
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x431ae2
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x431afa
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x230], 0
jmp 0x431b15
mov edx, dword [ebp - 0x230]
add edx, 1
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 0xe
jge 0x431b2c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x230]
mov dword [ebp - 0x1c], eax
jmp 0x431b06
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x431b3e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x431b56
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x234], 0
jmp 0x431b71
mov edx, dword [ebp - 0x234]
add edx, 1
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 2
jge 0x431bbe
cmp dword [ebp - 0x1c], 0
jge 0x431b88
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x431b9e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x238], 0xfa
lea edx, [ebp - 0x238]
push edx
lea eax, [ebp - 0x430]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x431b62
mov dword [ebp - 0x434], 0
jmp 0x431bd9
mov ecx, dword [ebp - 0x434]
add ecx, 1
mov dword [ebp - 0x434], ecx
cmp dword [ebp - 0x434], 5
jge 0x431c26
cmp dword [ebp - 0x1c], 0
jge 0x431bf0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x431c06
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x438], 0xfa
lea edx, [ebp - 0x438]
push edx
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x431bca
mov dword [ebp - 0x634], 0
jmp 0x431c41
mov ecx, dword [ebp - 0x634]
add ecx, 1
mov dword [ebp - 0x634], ecx
cmp dword [ebp - 0x634], 0x10
jge 0x431c58
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x634]
mov dword [ebp - 0x1c], edx
jmp 0x431c32
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x431c6a
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x431c82
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x431cbc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x638]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x431cae
jmp 0x431cbc
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x638]
mov dword [ebp - 0x1c], edx
jmp 0x431c82
mov eax, dword [ebp - 0x1c]
add eax, 0xc
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x63c], 0
jmp 0x431ce0
mov ecx, dword [ebp - 0x63c]
add ecx, 1
mov dword [ebp - 0x63c], ecx
cmp dword [ebp - 0x63c], 6
jge 0x431d17
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x63c]
mov dword [ebp - 0x1c], edx
jge 0x431cff
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x431d15
mov dword [ebp - 0x1c], 0
jmp 0x431cd1
mov dword [ebp - 0x640], 0
jmp 0x431d32
mov edx, dword [ebp - 0x640]
add edx, 1
mov dword [ebp - 0x640], edx
cmp dword [ebp - 0x640], 3
jge 0x431d69
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x640]
mov dword [ebp - 0x1c], eax
jge 0x431d51
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x431d67
mov dword [ebp - 0x1c], 0
jmp 0x431d23
mov dword [ebp - 4], 0
mov dword [ebp - 0x644], 0
jmp 0x431d8b
mov edx, dword [ebp - 0x644]
add edx, 1
mov dword [ebp - 0x644], edx
cmp dword [ebp - 0x644], 4
jge 0x431dc6
mov eax, dword [ebp - 0x644]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x431dba
mov eax, dword [ebp - 0x644]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x431dc1
and eax, 0xbc614e
jmp 0x431dc4
mov dword [ebp - 0x1c], eax
jmp 0x431d7c
mov dword [ebp - 4], 0xfffffffe
call fcn.00431dd4
jmp 0x431ddc
mov edx, 1
test edx, edx
je 0x431e16
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x648]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x431e08
jmp 0x431e16
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x648]
mov dword [ebp - 0x1c], edx
jmp 0x431ddc
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x64c], 0
jmp 0x431e37
mov ecx, dword [ebp - 0x64c]
add ecx, 1
mov dword [ebp - 0x64c], ecx
cmp dword [ebp - 0x64c], 0
jge 0x431e6e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x64c]
mov dword [ebp - 0x1c], edx
jge 0x431e56
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x431e6c
mov dword [ebp - 0x1c], 0
jmp 0x431e28
mov edx, 1
test edx, edx
je 0x431ea8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0x650]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x431e9a
jmp 0x431ea8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x650]
mov dword [ebp - 0x1c], edx
jmp 0x431e6e
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x654], 0
jmp 0x431ed3
mov ecx, dword [ebp - 0x654]
add ecx, 1
mov dword [ebp - 0x654], ecx
cmp dword [ebp - 0x654], 2
jge 0x431f0e
mov eax, dword [ebp - 0x654]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x431f02
mov eax, dword [ebp - 0x654]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x431f09
and eax, 0xbc614e
jmp 0x431f0c
mov dword [ebp - 0x1c], eax
jmp 0x431ec4
mov dword [ebp - 4], 0xfffffffe
call fcn.00431f1c
jmp 0x431f24
mov dword [ebp - 4], 2
mov dword [ebp - 0x658], 0
jmp 0x431f46
mov edx, dword [ebp - 0x658]
add edx, 1
mov dword [ebp - 0x658], edx
cmp dword [ebp - 0x658], 0
jge 0x431f81
mov eax, dword [ebp - 0x658]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x431f75
mov eax, dword [ebp - 0x658]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x431f7c
and eax, 0xbc614e
jmp 0x431f7f
mov dword [ebp - 0x1c], eax
jmp 0x431f37
mov dword [ebp - 4], 0xfffffffe
call fcn.00431f8f
jmp 0x431f97
mov dword [ebp - 0x65c], 0
mov edx, 1
test edx, edx
je 0x431feb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x431fcd
jmp 0x431feb
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x65c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x65c]
add eax, 1
mov dword [ebp - 0x65c], eax
jmp 0x431fa1
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x664], 0
jmp 0x43200c
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x664], edx
cmp dword [ebp - 0x664], 4
jge 0x432059
cmp dword [ebp - 0x1c], 0
jge 0x432023
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432039
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x668], 0xfa
lea edx, [ebp - 0x668]
push edx
lea eax, [ebp - 0x860]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x431ffd
mov dword [ebp - 4], 3
mov dword [ebp - 0x864], 0
jmp 0x43207b
mov ecx, dword [ebp - 0x864]
add ecx, 1
mov dword [ebp - 0x864], ecx
cmp dword [ebp - 0x864], 4
jge 0x4320b6
mov eax, dword [ebp - 0x864]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4320aa
mov eax, dword [ebp - 0x864]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4320b1
and eax, 0xbc614e
jmp 0x4320b4
mov dword [ebp - 0x1c], eax
jmp 0x43206c
mov dword [ebp - 4], 0xfffffffe
call fcn.004320c4
jmp 0x4320cc
mov dword [ebp - 0x868], 0
mov edx, 1
test edx, edx
je 0x432120
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 0x86c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x432102
jmp 0x432120
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x868]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x868]
add eax, 1
mov dword [ebp - 0x868], eax
jmp 0x4320d6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x870], 0
jmp 0x432144
mov edx, dword [ebp - 0x870]
add edx, 1
mov dword [ebp - 0x870], edx
cmp dword [ebp - 0x870], 1
jge 0x43217b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x870]
mov dword [ebp - 0x1c], eax
jge 0x432163
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432179
mov dword [ebp - 0x1c], 0
jmp 0x432135
mov edx, 1
test edx, edx
je 0x4321b5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4321a7
jmp 0x4321b5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x874]
mov dword [ebp - 0x1c], edx
jmp 0x43217b
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x878], 0
jmp 0x4321d9
mov ecx, dword [ebp - 0x878]
add ecx, 1
mov dword [ebp - 0x878], ecx
cmp dword [ebp - 0x878], 3
jge 0x4321f0
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x878]
mov dword [ebp - 0x1c], edx
jmp 0x4321ca
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x432202
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43221a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x87c], 1
mov dword [ebp - 0x880], 1
mov dword [ebp - 0x884], 2
mov dword [ebp - 0x888], 0
mov dword [ebp - 0x88c], 0
jmp 0x43225d
mov edx, dword [ebp - 0x88c]
add edx, 1
mov dword [ebp - 0x88c], edx
cmp dword [ebp - 0x88c], 3
jge 0x43229e
mov eax, dword [ebp - 0x87c]
add eax, dword [ebp - 0x880]
mov dword [ebp - 0x884], eax
mov ecx, dword [ebp - 0x880]
mov dword [ebp - 0x87c], ecx
mov edx, dword [ebp - 0x884]
mov dword [ebp - 0x880], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x884]
mov dword [ebp - 0x1c], eax
jmp 0x43224e
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4322e1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x890]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4322d3
jmp 0x4322e1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x890]
mov dword [ebp - 0x1c], edx
jmp 0x4322a7
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x894], 0
jmp 0x432305
mov ecx, dword [ebp - 0x894]
add ecx, 1
mov dword [ebp - 0x894], ecx
cmp dword [ebp - 0x894], 4
jge 0x43231c
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x894]
mov dword [ebp - 0x1c], edx
jmp 0x4322f6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43232e
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x432346
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x898], 0
jmp 0x432368
mov edx, dword [ebp - 0x898]
add edx, 1
mov dword [ebp - 0x898], edx
cmp dword [ebp - 0x898], 3
jge 0x4323a3
mov eax, dword [ebp - 0x898]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x432397
mov eax, dword [ebp - 0x898]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43239e
and eax, 0xbc614e
jmp 0x4323a1
mov dword [ebp - 0x1c], eax
jmp 0x432359
mov dword [ebp - 4], 0xfffffffe
call fcn.004323b1
jmp 0x4323b9
mov dword [ebp - 0x89c], 0
mov edx, 1
test edx, edx
je 0x43240d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0x8a0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4323ef
jmp 0x43240d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x89c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x89c]
add eax, 1
mov dword [ebp - 0x89c], eax
jmp 0x4323c3
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x432450
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x8a4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x432442
jmp 0x432450
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x1c], edx
jmp 0x432416
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8a8], 0
jmp 0x432471
mov ecx, dword [ebp - 0x8a8]
add ecx, 1
mov dword [ebp - 0x8a8], ecx
cmp dword [ebp - 0x8a8], 4
jge 0x4324be
cmp dword [ebp - 0x1c], 0
jge 0x432488
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43249e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8ac], 0xfa
lea edx, [ebp - 0x8ac]
push edx
lea eax, [ebp - 0xaa8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432462
mov dword [ebp - 0xaac], 0
mov ecx, 1
test ecx, ecx
je 0x432512
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0xab0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4324f4
jmp 0x432512
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xaac]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xaac]
add eax, 1
mov dword [ebp - 0xaac], eax
jmp 0x4324c8
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x432555
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xab4], eax
mov eax, dword [ebp - 0xab4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x432547
jmp 0x432555
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xab4]
mov dword [ebp - 0x1c], edx
jmp 0x43251b
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xab8], 0
mov ecx, 1
test ecx, ecx
je 0x4325af
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0xabc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x432591
jmp 0x4325af
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xab8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xab8]
add eax, 1
mov dword [ebp - 0xab8], eax
jmp 0x432565
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xac0], 1
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0xac8], 2
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xad0], 0
jmp 0x4325fb
mov edx, dword [ebp - 0xad0]
add edx, 1
mov dword [ebp - 0xad0], edx
cmp dword [ebp - 0xad0], 0
jge 0x43263c
mov eax, dword [ebp - 0xac0]
add eax, dword [ebp - 0xac4]
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xac4]
mov dword [ebp - 0xac0], ecx
mov edx, dword [ebp - 0xac8]
mov dword [ebp - 0xac4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xac8]
mov dword [ebp - 0x1c], eax
jmp 0x4325ec
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xad4], 0
jmp 0x43265d
mov edx, dword [ebp - 0xad4]
add edx, 1
mov dword [ebp - 0xad4], edx
cmp dword [ebp - 0xad4], 2
jge 0x432694
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xad4]
mov dword [ebp - 0x1c], eax
jge 0x43267c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432692
mov dword [ebp - 0x1c], 0
jmp 0x43264e
mov dword [ebp - 0xad8], 1
mov dword [ebp - 0xadc], 1
mov dword [ebp - 0xae0], 2
mov dword [ebp - 0xae4], 0
mov dword [ebp - 0xae8], 0
jmp 0x4326d7
mov edx, dword [ebp - 0xae8]
add edx, 1
mov dword [ebp - 0xae8], edx
cmp dword [ebp - 0xae8], 0
jge 0x432718
mov eax, dword [ebp - 0xad8]
add eax, dword [ebp - 0xadc]
mov dword [ebp - 0xae0], eax
mov ecx, dword [ebp - 0xadc]
mov dword [ebp - 0xad8], ecx
mov edx, dword [ebp - 0xae0]
mov dword [ebp - 0xadc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xae0]
mov dword [ebp - 0x1c], eax
jmp 0x4326c8
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xaec], 0
jmp 0x432739
mov edx, dword [ebp - 0xaec]
add edx, 1
mov dword [ebp - 0xaec], edx
cmp dword [ebp - 0xaec], 4
jge 0x432750
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xaec]
mov dword [ebp - 0x1c], eax
jmp 0x43272a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x432762
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43277a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0xaf0], 0
jmp 0x43279c
mov edx, dword [ebp - 0xaf0]
add edx, 1
mov dword [ebp - 0xaf0], edx
cmp dword [ebp - 0xaf0], 2
jge 0x4327d7
mov eax, dword [ebp - 0xaf0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4327cb
mov eax, dword [ebp - 0xaf0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4327d2
and eax, 0xbc614e
jmp 0x4327d5
mov dword [ebp - 0x1c], eax
jmp 0x43278d
mov dword [ebp - 4], 0xfffffffe
call fcn.004327e5
jmp 0x4327ed
mov dword [ebp - 0xaf4], 1
mov dword [ebp - 0xaf8], 1
mov dword [ebp - 0xafc], 2
mov dword [ebp - 0xb00], 0
mov dword [ebp - 0xb04], 0
jmp 0x432830
mov edx, dword [ebp - 0xb04]
add edx, 1
mov dword [ebp - 0xb04], edx
cmp dword [ebp - 0xb04], 3
jge 0x432871
mov eax, dword [ebp - 0xaf4]
add eax, dword [ebp - 0xaf8]
mov dword [ebp - 0xafc], eax
mov ecx, dword [ebp - 0xaf8]
mov dword [ebp - 0xaf4], ecx
mov edx, dword [ebp - 0xafc]
mov dword [ebp - 0xaf8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xafc]
mov dword [ebp - 0x1c], eax
jmp 0x432821
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4328b4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb08], eax
mov eax, dword [ebp - 0xb08]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4328a6
jmp 0x4328b4
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xb08]
mov dword [ebp - 0x1c], edx
jmp 0x43287a
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb0c], 0
jmp 0x4328d8
mov ecx, dword [ebp - 0xb0c]
add ecx, 1
mov dword [ebp - 0xb0c], ecx
cmp dword [ebp - 0xb0c], 4
jge 0x4328ef
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb0c]
mov dword [ebp - 0x1c], edx
jmp 0x4328c9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x432901
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x432919
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0xb10], 0
jmp 0x43293b
mov edx, dword [ebp - 0xb10]
add edx, 1
mov dword [ebp - 0xb10], edx
cmp dword [ebp - 0xb10], 3
jge 0x432976
mov eax, dword [ebp - 0xb10]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43296a
mov eax, dword [ebp - 0xb10]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x432971
and eax, 0xbc614e
jmp 0x432974
mov dword [ebp - 0x1c], eax
jmp 0x43292c
mov dword [ebp - 4], 0xfffffffe
call fcn.00432984
jmp 0x43298c
mov dword [ebp - 0xb14], 0
jmp 0x4329a7
mov edx, dword [ebp - 0xb14]
add edx, 1
mov dword [ebp - 0xb14], edx
cmp dword [ebp - 0xb14], 3
jge 0x4329be
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xb14]
mov dword [ebp - 0x1c], eax
jmp 0x432998
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4329d0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4329e8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb18], 0
jmp 0x432a03
mov edx, dword [ebp - 0xb18]
add edx, 1
mov dword [ebp - 0xb18], edx
cmp dword [ebp - 0xb18], 3
jge 0x432a1a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xb18]
mov dword [ebp - 0x1c], eax
jmp 0x4329f4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x432a2c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x432a44
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb1c], 0
jmp 0x432a5f
mov edx, dword [ebp - 0xb1c]
add edx, 1
mov dword [ebp - 0xb1c], edx
cmp dword [ebp - 0xb1c], 2
jge 0x432a96
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb1c]
mov dword [ebp - 0x1c], eax
jge 0x432a7e
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432a94
mov dword [ebp - 0x1c], 0
jmp 0x432a50
mov dword [ebp - 0xb20], 0
jmp 0x432ab1
mov edx, dword [ebp - 0xb20]
add edx, 1
mov dword [ebp - 0xb20], edx
cmp dword [ebp - 0xb20], 4
jge 0x432afe
cmp dword [ebp - 0x1c], 0
jge 0x432ac8
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432ade
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xb24], 0xfa
lea edx, [ebp - 0xb24]
push edx
lea eax, [ebp - 0xd20]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432aa2
mov dword [ebp - 0xd24], 0
jmp 0x432b19
mov ecx, dword [ebp - 0xd24]
add ecx, 1
mov dword [ebp - 0xd24], ecx
cmp dword [ebp - 0xd24], 1
jge 0x432b30
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xd24]
mov dword [ebp - 0x1c], edx
jmp 0x432b0a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x432b42
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x432b5a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x432b94
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0xd28]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x432b86
jmp 0x432b94
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd28]
mov dword [ebp - 0x1c], edx
jmp 0x432b5a
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd2c], 0
jmp 0x432bb8
mov ecx, dword [ebp - 0xd2c]
add ecx, 1
mov dword [ebp - 0xd2c], ecx
cmp dword [ebp - 0xd2c], 1
jge 0x432c05
cmp dword [ebp - 0x1c], 0
jge 0x432bcf
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432be5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xd30], 0xfa
lea edx, [ebp - 0xd30]
push edx
lea eax, [ebp - 0xf28]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432ba9
mov dword [ebp - 0xf2c], 0
jmp 0x432c20
mov ecx, dword [ebp - 0xf2c]
add ecx, 1
mov dword [ebp - 0xf2c], ecx
cmp dword [ebp - 0xf2c], 1
jge 0x432c6d
cmp dword [ebp - 0x1c], 0
jge 0x432c37
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432c4d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf30], 0xfa
lea edx, [ebp - 0xf30]
push edx
lea eax, [ebp - 0x1128]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x432c11
mov dword [ebp - 0x112c], 0
jmp 0x432c88
mov ecx, dword [ebp - 0x112c]
add ecx, 1
mov dword [ebp - 0x112c], ecx
cmp dword [ebp - 0x112c], 4
jge 0x432cbf
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x112c]
mov dword [ebp - 0x1c], edx
jge 0x432ca7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432cbd
mov dword [ebp - 0x1c], 0
jmp 0x432c79
mov dword [ebp - 4], 7
mov dword [ebp - 0x1130], 0
jmp 0x432ce1
mov edx, dword [ebp - 0x1130]
add edx, 1
mov dword [ebp - 0x1130], edx
cmp dword [ebp - 0x1130], 2
jge 0x432d1c
mov eax, dword [ebp - 0x1130]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x432d10
mov eax, dword [ebp - 0x1130]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x432d17
and eax, 0xbc614e
jmp 0x432d1a
mov dword [ebp - 0x1c], eax
jmp 0x432cd2
mov dword [ebp - 4], 0xfffffffe
call fcn.00432d2a
jmp 0x432d32
mov dword [ebp - 0x1134], 0
jmp 0x432d4d
mov edx, dword [ebp - 0x1134]
add edx, 1
mov dword [ebp - 0x1134], edx
cmp dword [ebp - 0x1134], 0
jge 0x432d84
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1134]
mov dword [ebp - 0x1c], eax
jge 0x432d6c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x432d82
mov dword [ebp - 0x1c], 0
jmp 0x432d3e
mov edx, 1
test edx, edx
je 0x432dbe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1138], eax
mov eax, dword [ebp - 0x1138]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x432db0
jmp 0x432dbe
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1138]
mov dword [ebp - 0x1c], edx
jmp 0x432d84
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 8
mov dword [ebp - 0x113c], 0
jmp 0x432de6
mov ecx, dword [ebp - 0x113c]
add ecx, 1
mov dword [ebp - 0x113c], ecx
cmp dword [ebp - 0x113c], 1
jge 0x432e21
mov eax, dword [ebp - 0x113c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x432e15
mov eax, dword [ebp - 0x113c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x432e1c
and eax, 0xbc614e
jmp 0x432e1f
mov dword [ebp - 0x1c], eax
jmp 0x432dd7
mov dword [ebp - 4], 0xfffffffe
call fcn.00432e2f
jmp 0x432e37
mov dword [ebp - 0x1140], 0
jmp 0x432e52
cmp dword [ebp - 0x1140], 2
jge 0x432e69
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1140]
mov dword [ebp - 0x1c], eax
jmp 0x432e43
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x432e7b