Function at 0x428630
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47d830
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x23e8
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x3c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov eax, 1
test eax, eax
je 0x4286b6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4286a1
jmp 0x4286b6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x42867b
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2a
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x28], 0
jmp 0x4286d8
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x24
jge 0x42870a
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4286fe
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x428705
and eax, 0xbc614e
jmp 0x428708
mov dword [ebp - 0x1c], eax
jmp 0x4286cf
mov dword [ebp - 4], 0xfffffffe
call fcn.00428718
jmp 0x428720
mov dword [ebp - 0x2c], 0
jmp 0x428732
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x20
jge 0x428763
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jge 0x42874b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428761
mov dword [ebp - 0x1c], 0
jmp 0x428729
mov edx, 1
test edx, edx
je 0x428794
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x428789
jmp 0x428794
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], edx
jmp 0x428763
mov eax, dword [ebp - 0x1c]
add eax, 9
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], 0
jmp 0x4287af
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 5
jge 0x4287f3
cmp dword [ebp - 0x1c], 0
jge 0x4287c3
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4287d9
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x38], 0xfa
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4287a6
mov dword [ebp - 4], 1
mov dword [ebp - 0x23c], 0
jmp 0x428815
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
cmp dword [ebp - 0x23c], 0x11
jge 0x428850
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x428844
mov eax, dword [ebp - 0x23c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42884b
and eax, 0xbc614e
jmp 0x42884e
mov dword [ebp - 0x1c], eax
jmp 0x428806
mov dword [ebp - 4], 0xfffffffe
call fcn.0042885e
jmp 0x428866
mov dword [ebp - 4], 2
mov dword [ebp - 0x240], 0
jmp 0x428888
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0
jge 0x4288c3
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4288b7
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4288be
and eax, 0xbc614e
jmp 0x4288c1
mov dword [ebp - 0x1c], eax
jmp 0x428879
mov dword [ebp - 4], 0xfffffffe
call fcn.004288d1
jmp 0x4288d9
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x254], 0
jmp 0x42891c
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 2
jge 0x42895d
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x248]
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], eax
jmp 0x42890d
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x258], 0
jmp 0x428981
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 0xe
jge 0x4289b8
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x258]
mov dword [ebp - 0x1c], eax
jge 0x4289a0
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4289b6
mov dword [ebp - 0x1c], 0
jmp 0x428972
mov dword [ebp - 0x25c], 0
mov edx, 1
test edx, edx
je 0x428a0c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4289ee
jmp 0x428a0c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x25c]
add eax, 1
mov dword [ebp - 0x25c], eax
jmp 0x4289c2
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x264], 0
jmp 0x428a30
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 0xd
jge 0x428a47
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x264]
mov dword [ebp - 0x1c], eax
jmp 0x428a21
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x428a59
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x428a71
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x268], 0
mov edx, 1
test edx, edx
je 0x428ac5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x428aa7
jmp 0x428ac5
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x268]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x268]
add eax, 1
mov dword [ebp - 0x268], eax
jmp 0x428a7b
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x270], 0
jmp 0x428ae9
mov edx, dword [ebp - 0x270]
add edx, 1
mov dword [ebp - 0x270], edx
cmp dword [ebp - 0x270], 0xd
jge 0x428b20
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x270]
mov dword [ebp - 0x1c], eax
jge 0x428b08
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428b1e
mov dword [ebp - 0x1c], 0
jmp 0x428ada
mov dword [ebp - 0x274], 0
jmp 0x428b3b
mov edx, dword [ebp - 0x274]
add edx, 1
mov dword [ebp - 0x274], edx
cmp dword [ebp - 0x274], 3
jge 0x428b72
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x274]
mov dword [ebp - 0x1c], eax
jge 0x428b5a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428b70
mov dword [ebp - 0x1c], 0
jmp 0x428b2c
mov dword [ebp - 0x278], 0
mov edx, 1
test edx, edx
je 0x428bc6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x428ba8
jmp 0x428bc6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x278]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x278]
add eax, 1
mov dword [ebp - 0x278], eax
jmp 0x428b7c
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x280], 1
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x288], 2
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x290], 0
jmp 0x428c0f
mov edx, dword [ebp - 0x290]
add edx, 1
mov dword [ebp - 0x290], edx
cmp dword [ebp - 0x290], 4
jge 0x428c50
mov eax, dword [ebp - 0x280]
add eax, dword [ebp - 0x284]
mov dword [ebp - 0x288], eax
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x280], ecx
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x284], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x288]
mov dword [ebp - 0x1c], eax
jmp 0x428c00
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x294], 0
jmp 0x428c7b
mov edx, dword [ebp - 0x294]
add edx, 1
mov dword [ebp - 0x294], edx
cmp dword [ebp - 0x294], 3
jge 0x428cb6
mov eax, dword [ebp - 0x294]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x428caa
mov eax, dword [ebp - 0x294]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x428cb1
and eax, 0xbc614e
jmp 0x428cb4
mov dword [ebp - 0x1c], eax
jmp 0x428c6c
mov dword [ebp - 4], 0xfffffffe
call fcn.00428cc4
jmp 0x428ccc
mov dword [ebp - 4], 4
mov dword [ebp - 0x298], 0
jmp 0x428cee
mov edx, dword [ebp - 0x298]
add edx, 1
mov dword [ebp - 0x298], edx
cmp dword [ebp - 0x298], 7
jge 0x428d29
mov eax, dword [ebp - 0x298]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x428d1d
mov eax, dword [ebp - 0x298]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x428d24
and eax, 0xbc614e
jmp 0x428d27
mov dword [ebp - 0x1c], eax
jmp 0x428cdf
mov dword [ebp - 4], 0xfffffffe
call fcn.00428d37
jmp 0x428d3f
mov edx, 1
test edx, edx
je 0x428d79
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x428d6b
jmp 0x428d79
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x29c]
mov dword [ebp - 0x1c], edx
jmp 0x428d3f
mov eax, dword [ebp - 0x1c]
add eax, 0xa
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2a0], 0
jmp 0x428d9d
mov ecx, dword [ebp - 0x2a0]
add ecx, 1
mov dword [ebp - 0x2a0], ecx
cmp dword [ebp - 0x2a0], 7
jge 0x428dea
cmp dword [ebp - 0x1c], 0
jge 0x428db4
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428dca
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2a4], 0xfa
lea edx, [ebp - 0x2a4]
push edx
lea eax, [ebp - 0x4a0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x428d8e
mov dword [ebp - 0x4a4], 0
mov ecx, 1
test ecx, ecx
je 0x428e3e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x428e20
jmp 0x428e3e
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4a4]
add eax, 1
mov dword [ebp - 0x4a4], eax
jmp 0x428df4
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4ac], 0
jmp 0x428e62
mov edx, dword [ebp - 0x4ac]
add edx, 1
mov dword [ebp - 0x4ac], edx
cmp dword [ebp - 0x4ac], 6
jge 0x428eaf
cmp dword [ebp - 0x1c], 0
jge 0x428e79
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428e8f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4b0], 0xfa
lea edx, [ebp - 0x4b0]
push edx
lea eax, [ebp - 0x6a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x428e53
mov dword [ebp - 0x6ac], 0
jmp 0x428eca
mov ecx, dword [ebp - 0x6ac]
add ecx, 1
mov dword [ebp - 0x6ac], ecx
cmp dword [ebp - 0x6ac], 4
jge 0x428f17
cmp dword [ebp - 0x1c], 0
jge 0x428ee1
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428ef7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6b0], 0xfa
lea edx, [ebp - 0x6b0]
push edx
lea eax, [ebp - 0x8a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x428ebb
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x8b0], 1
mov dword [ebp - 0x8b4], 2
mov dword [ebp - 0x8b8], 0
mov dword [ebp - 0x8bc], 0
jmp 0x428f5a
mov ecx, dword [ebp - 0x8bc]
add ecx, 1
mov dword [ebp - 0x8bc], ecx
cmp dword [ebp - 0x8bc], 7
jge 0x428f9b
mov edx, dword [ebp - 0x8ac]
add edx, dword [ebp - 0x8b0]
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b0], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x1c], edx
jmp 0x428f4b
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c0], 0
jmp 0x428fbf
mov ecx, dword [ebp - 0x8c0]
add ecx, 1
mov dword [ebp - 0x8c0], ecx
cmp dword [ebp - 0x8c0], 0
jge 0x428fd6
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x8c0]
mov dword [ebp - 0x1c], edx
jmp 0x428fb0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x428fe8
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x429000
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c4], 0
jmp 0x42901b
mov edx, dword [ebp - 0x8c4]
add edx, 1
mov dword [ebp - 0x8c4], edx
cmp dword [ebp - 0x8c4], 5
jge 0x429068
cmp dword [ebp - 0x1c], 0
jge 0x429032
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429048
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8c8], 0xfa
lea edx, [ebp - 0x8c8]
push edx
lea eax, [ebp - 0xac0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42900c
mov ecx, 1
test ecx, ecx
je 0x4290a2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xac4], eax
mov eax, dword [ebp - 0xac4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x429094
jmp 0x4290a2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xac4]
mov dword [ebp - 0x1c], edx
jmp 0x429068
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xac8], 0
jmp 0x4290c3
mov ecx, dword [ebp - 0xac8]
add ecx, 1
mov dword [ebp - 0xac8], ecx
cmp dword [ebp - 0xac8], 2
jge 0x429110
cmp dword [ebp - 0x1c], 0
jge 0x4290da
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4290f0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xacc], 0xfa
lea edx, [ebp - 0xacc]
push edx
lea eax, [ebp - 0xcc8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4290b4
mov ecx, 1
test ecx, ecx
je 0x42914a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xccc], eax
mov eax, dword [ebp - 0xccc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42913c
jmp 0x42914a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xccc]
mov dword [ebp - 0x1c], edx
jmp 0x429110
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcd0], 0
mov ecx, 1
test ecx, ecx
je 0x4291a7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcd4], eax
mov eax, dword [ebp - 0xcd4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x429189
jmp 0x4291a7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xcd0]
add eax, 1
mov dword [ebp - 0xcd0], eax
jmp 0x42915d
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xcd8], 0
jmp 0x4291cb
mov edx, dword [ebp - 0xcd8]
add edx, 1
mov dword [ebp - 0xcd8], edx
cmp dword [ebp - 0xcd8], 4
jge 0x4291e2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcd8]
mov dword [ebp - 0x1c], eax
jmp 0x4291bc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4291f4
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42920c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcdc], 0
jmp 0x429227
mov edx, dword [ebp - 0xcdc]
add edx, 1
mov dword [ebp - 0xcdc], edx
cmp dword [ebp - 0xcdc], 4
jge 0x42923e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcdc]
mov dword [ebp - 0x1c], eax
jmp 0x429218
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x429250
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x429268
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xce0], 0
mov edx, 1
test edx, edx
je 0x4292bc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xce4], eax
mov eax, dword [ebp - 0xce4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42929e
jmp 0x4292bc
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xce0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xce0]
add eax, 1
mov dword [ebp - 0xce0], eax
jmp 0x429272
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0xce8], 0
jmp 0x4292e7
mov edx, dword [ebp - 0xce8]
add edx, 1
mov dword [ebp - 0xce8], edx
cmp dword [ebp - 0xce8], 5
jge 0x429322
mov eax, dword [ebp - 0xce8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x429316
mov eax, dword [ebp - 0xce8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42931d
and eax, 0xbc614e
jmp 0x429320
mov dword [ebp - 0x1c], eax
jmp 0x4292d8
mov dword [ebp - 4], 0xfffffffe
call fcn.00429330
jmp 0x429338
mov dword [ebp - 0xcec], 0
jmp 0x429353
mov edx, dword [ebp - 0xcec]
add edx, 1
mov dword [ebp - 0xcec], edx
cmp dword [ebp - 0xcec], 3
jge 0x4293a0
cmp dword [ebp - 0x1c], 0
jge 0x42936a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429380
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xcf0], 0xfa
lea edx, [ebp - 0xcf0]
push edx
lea eax, [ebp - 0xee8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x429344
mov dword [ebp - 0xeec], 0
mov ecx, 1
test ecx, ecx
je 0x4293f4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xef0], eax
mov eax, dword [ebp - 0xef0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4293d6
jmp 0x4293f4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xeec]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xeec]
add eax, 1
mov dword [ebp - 0xeec], eax
jmp 0x4293aa
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xef4], 0
mov edx, 1
test edx, edx
je 0x429451
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xef8], eax
mov eax, dword [ebp - 0xef8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x429433
jmp 0x429451
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xef4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xef4]
add eax, 1
mov dword [ebp - 0xef4], eax
jmp 0x429407
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xefc], 0
mov edx, 1
test edx, edx
je 0x4294ab
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf00], eax
mov eax, dword [ebp - 0xf00]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42948d
jmp 0x4294ab
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xefc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xefc]
add eax, 1
mov dword [ebp - 0xefc], eax
jmp 0x429461
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xf04], 0
jmp 0x4294cf
mov edx, dword [ebp - 0xf04]
add edx, 1
mov dword [ebp - 0xf04], edx
cmp dword [ebp - 0xf04], 7
jge 0x429506
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xf04]
mov dword [ebp - 0x1c], eax
jge 0x4294ee
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429504
mov dword [ebp - 0x1c], 0
jmp 0x4294c0
mov dword [ebp - 0xf08], 0
jmp 0x429521
mov edx, dword [ebp - 0xf08]
add edx, 1
mov dword [ebp - 0xf08], edx
cmp dword [ebp - 0xf08], 6
jge 0x42956e
cmp dword [ebp - 0x1c], 0
jge 0x429538
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42954e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf0c], 0xfa
lea edx, [ebp - 0xf0c]
push edx
lea eax, [ebp - 0x1108]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x429512
mov dword [ebp - 4], 6
mov dword [ebp - 0x110c], 0
jmp 0x429590
mov ecx, dword [ebp - 0x110c]
add ecx, 1
mov dword [ebp - 0x110c], ecx
cmp dword [ebp - 0x110c], 8
jge 0x4295cb
mov eax, dword [ebp - 0x110c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4295bf
mov eax, dword [ebp - 0x110c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4295c6
and eax, 0xbc614e
jmp 0x4295c9
mov dword [ebp - 0x1c], eax
jmp 0x429581
mov dword [ebp - 4], 0xfffffffe
call fcn.004295d9
jmp 0x4295e1
mov dword [ebp - 0x1110], 0
jmp 0x4295fc
mov edx, dword [ebp - 0x1110]
add edx, 1
mov dword [ebp - 0x1110], edx
cmp dword [ebp - 0x1110], 2
jge 0x429613
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1110]
mov dword [ebp - 0x1c], eax
jmp 0x4295ed
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x429625
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42963d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x1114], 0
jmp 0x42965f
mov edx, dword [ebp - 0x1114]
add edx, 1
mov dword [ebp - 0x1114], edx
cmp dword [ebp - 0x1114], 6
jge 0x42969a
mov eax, dword [ebp - 0x1114]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42968e
mov eax, dword [ebp - 0x1114]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x429695
and eax, 0xbc614e
jmp 0x429698
mov dword [ebp - 0x1c], eax
jmp 0x429650
mov dword [ebp - 4], 0xfffffffe
call fcn.004296a8
jmp 0x4296b0
mov dword [ebp - 4], 8
mov dword [ebp - 0x1118], 0
jmp 0x4296d2
mov edx, dword [ebp - 0x1118]
add edx, 1
mov dword [ebp - 0x1118], edx
cmp dword [ebp - 0x1118], 1
jge 0x42970d
mov eax, dword [ebp - 0x1118]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x429701
mov eax, dword [ebp - 0x1118]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x429708
and eax, 0xbc614e
jmp 0x42970b
mov dword [ebp - 0x1c], eax
jmp 0x4296c3
mov dword [ebp - 4], 0xfffffffe
call fcn.0042971b
jmp 0x429723
mov dword [ebp - 0x111c], 0
jmp 0x42973e
mov edx, dword [ebp - 0x111c]
add edx, 1
mov dword [ebp - 0x111c], edx
cmp dword [ebp - 0x111c], 3
jge 0x429775
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x111c]
mov dword [ebp - 0x1c], eax
jge 0x42975d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429773
mov dword [ebp - 0x1c], 0
jmp 0x42972f
mov dword [ebp - 0x1120], 0
jmp 0x429790
mov edx, dword [ebp - 0x1120]
add edx, 1
mov dword [ebp - 0x1120], edx
cmp dword [ebp - 0x1120], 3
jge 0x4297a7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1120]
mov dword [ebp - 0x1c], eax
jmp 0x429781
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4297b9
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4297d1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 9
mov dword [ebp - 0x1124], 0
jmp 0x4297f3
mov edx, dword [ebp - 0x1124]
add edx, 1
mov dword [ebp - 0x1124], edx
cmp dword [ebp - 0x1124], 3
jge 0x42982e
mov eax, dword [ebp - 0x1124]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x429822
mov eax, dword [ebp - 0x1124]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x429829
and eax, 0xbc614e
jmp 0x42982c
mov dword [ebp - 0x1c], eax
jmp 0x4297e4
mov dword [ebp - 4], 0xfffffffe
call fcn.0042983c
jmp 0x429844
mov dword [ebp - 0x1128], 0
mov edx, 1
test edx, edx
je 0x429898
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x112c], eax
mov eax, dword [ebp - 0x112c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42987a
jmp 0x429898
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1128]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1128]
add eax, 1
mov dword [ebp - 0x1128], eax
jmp 0x42984e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1130], 0
jmp 0x4298c3
mov edx, dword [ebp - 0x1130]
add edx, 1
mov dword [ebp - 0x1130], edx
cmp dword [ebp - 0x1130], 0
jge 0x4298fe
mov eax, dword [ebp - 0x1130]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4298f2
mov eax, dword [ebp - 0x1130]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4298f9
and eax, 0xbc614e
jmp 0x4298fc
mov dword [ebp - 0x1c], eax
jmp 0x4298b4
mov dword [ebp - 4], 0xfffffffe
call fcn.0042990c
jmp 0x429914
mov edx, 1
test edx, edx
je 0x42994e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1134], eax
mov eax, dword [ebp - 0x1134]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x429940
jmp 0x42994e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1134]
mov dword [ebp - 0x1c], edx
jmp 0x429914
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1138], 0
jmp 0x429979
mov ecx, dword [ebp - 0x1138]
add ecx, 1
mov dword [ebp - 0x1138], ecx
cmp dword [ebp - 0x1138], 4
jge 0x4299b4
mov eax, dword [ebp - 0x1138]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4299a8
mov eax, dword [ebp - 0x1138]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4299af
and eax, 0xbc614e
jmp 0x4299b2
mov dword [ebp - 0x1c], eax
jmp 0x42996a
mov dword [ebp - 4], 0xfffffffe
call fcn.004299c2
jmp 0x4299ca
mov dword [ebp - 0x113c], 0
jmp 0x4299e5
mov edx, dword [ebp - 0x113c]
add edx, 1
mov dword [ebp - 0x113c], edx
cmp dword [ebp - 0x113c], 0
jge 0x429a32
cmp dword [ebp - 0x1c], 0
jge 0x4299fc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429a12
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1140], 0xfa
lea edx, [ebp - 0x1140]
push edx
lea eax, [ebp - 0x1338]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4299d6
mov dword [ebp - 0x133c], 0
jmp 0x429a4d
mov ecx, dword [ebp - 0x133c]
add ecx, 1
mov dword [ebp - 0x133c], ecx
cmp dword [ebp - 0x133c], 2
jge 0x429a64
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x133c]
mov dword [ebp - 0x1c], edx
jmp 0x429a3e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x429a76
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x429a8e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1340], 0
jmp 0x429aa9
mov edx, dword [ebp - 0x1340]
add edx, 1
mov dword [ebp - 0x1340], edx
cmp dword [ebp - 0x1340], 0
jge 0x429af6
cmp dword [ebp - 0x1c], 0
jge 0x429ac0
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429ad6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1344], 0xfa
lea edx, [ebp - 0x1344]
push edx
lea eax, [ebp - 0x1540]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x429a9a
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1544], 0
jmp 0x429b18
mov ecx, dword [ebp - 0x1544]
add ecx, 1
mov dword [ebp - 0x1544], ecx
cmp dword [ebp - 0x1544], 2
jge 0x429b53
mov eax, dword [ebp - 0x1544]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x429b47
mov eax, dword [ebp - 0x1544]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x429b4e
and eax, 0xbc614e
jmp 0x429b51
mov dword [ebp - 0x1c], eax
jmp 0x429b09
mov dword [ebp - 4], 0xfffffffe
call fcn.00429b61
jmp 0x429b69
mov dword [ebp - 0x1548], 0
mov edx, 1
test edx, edx
je 0x429bbd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x154c], eax
mov eax, dword [ebp - 0x154c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x429b9f
jmp 0x429bbd
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1548]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1548]
add eax, 1
mov dword [ebp - 0x1548], eax
jmp 0x429b73
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x1550], 0
jmp 0x429be8
mov edx, dword [ebp - 0x1550]
add edx, 1
mov dword [ebp - 0x1550], edx
cmp dword [ebp - 0x1550], 1
jge 0x429c23
mov eax, dword [ebp - 0x1550]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x429c17
mov eax, dword [ebp - 0x1550]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x429c1e
and eax, 0xbc614e
jmp 0x429c21
mov dword [ebp - 0x1c], eax
jmp 0x429bd9
mov dword [ebp - 4], 0xfffffffe
call fcn.00429c31
jmp 0x429c39
mov dword [ebp - 0x1554], 0
jmp 0x429c54
cmp dword [ebp - 0x1554], 3
jge 0x429ca1
cmp dword [ebp - 0x1c], 0
jge 0x429c6b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429c81
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x1754], 0
jmp 0x429cc3
cmp dword [ebp - 0x1754], 1
jge 0x429cfe