Function at 0x43fe80
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e060
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x11a0
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x44], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov eax, 1
test eax, eax
je 0x43ff06
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43fef1
jmp 0x43ff06
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x43fecb
mov ecx, dword [ebp - 0x1c]
add ecx, 0x32
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], 0
jmp 0x43ff21
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 5
jge 0x43ff32
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x43ff18
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43ff44
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43ff5c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x2c], 0
jmp 0x43ff75
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x18
jge 0x43ffa7
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ff9b
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ffa2
and eax, 0xbc614e
jmp 0x43ffa5
mov dword [ebp - 0x1c], eax
jmp 0x43ff6c
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ffb5
jmp 0x43ffbd
mov edx, 1
test edx, edx
je 0x43ffee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43ffe3
jmp 0x43ffee
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], edx
jmp 0x43ffbd
mov eax, dword [ebp - 0x1c]
add eax, 0x11
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x34], 0
jmp 0x440010
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 0x1e
jge 0x440042
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x440036
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44003d
and eax, 0xbc614e
jmp 0x440040
mov dword [ebp - 0x1c], eax
jmp 0x440007
mov dword [ebp - 4], 0xfffffffe
call fcn.00440050
jmp 0x440058
mov dword [ebp - 0x38], 0
jmp 0x44006a
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 3
jge 0x44009b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jge 0x440083
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440099
mov dword [ebp - 0x1c], 0
jmp 0x440061
mov dword [ebp - 0x3c], 0
jmp 0x4400ad
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0xd
jge 0x4400f1
cmp dword [ebp - 0x1c], 0
jge 0x4400c1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4400d7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x40], 0xfa
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x240]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4400a4
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x254], 0
jmp 0x440134
mov ecx, dword [ebp - 0x254]
add ecx, 1
mov dword [ebp - 0x254], ecx
cmp dword [ebp - 0x254], 7
jge 0x440175
mov edx, dword [ebp - 0x244]
add edx, dword [ebp - 0x248]
mov dword [ebp - 0x24c], edx
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], edx
jmp 0x440125
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x258], 0
jmp 0x440199
mov ecx, dword [ebp - 0x258]
add ecx, 1
mov dword [ebp - 0x258], ecx
cmp dword [ebp - 0x258], 0xd
jge 0x4401e6
cmp dword [ebp - 0x1c], 0
jge 0x4401b0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4401c6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x25c], 0xfa
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44018a
mov dword [ebp - 0x45c], 0
mov ecx, 1
test ecx, ecx
je 0x44023a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44021c
jmp 0x44023a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x45c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x45c]
add eax, 1
mov dword [ebp - 0x45c], eax
jmp 0x4401f0
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x46c], 2
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x474], 0
jmp 0x440286
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 0
jge 0x4402c7
mov eax, dword [ebp - 0x464]
add eax, dword [ebp - 0x468]
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp - 0x468]
mov dword [ebp - 0x464], ecx
mov edx, dword [ebp - 0x46c]
mov dword [ebp - 0x468], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1c], eax
jmp 0x440277
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x478], 0
mov edx, 1
test edx, edx
je 0x440321
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x440303
jmp 0x440321
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x478]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x478]
add eax, 1
mov dword [ebp - 0x478], eax
jmp 0x4402d7
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x480], 0
jmp 0x440345
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 2
jge 0x440392
cmp dword [ebp - 0x1c], 0
jge 0x44035c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440372
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x484], 0xfa
lea edx, [ebp - 0x484]
push edx
lea eax, [ebp - 0x680]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x440336
mov dword [ebp - 0x684], 0
jmp 0x4403ad
mov ecx, dword [ebp - 0x684]
add ecx, 1
mov dword [ebp - 0x684], ecx
cmp dword [ebp - 0x684], 2
jge 0x4403fa
cmp dword [ebp - 0x1c], 0
jge 0x4403c4
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4403da
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x688], 0xfa
lea edx, [ebp - 0x688]
push edx
lea eax, [ebp - 0x880]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44039e
mov ecx, 1
test ecx, ecx
je 0x440434
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x884]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x440426
jmp 0x440434
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x884]
mov dword [ebp - 0x1c], edx
jmp 0x4403fa
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x888], 0
jmp 0x440458
mov ecx, dword [ebp - 0x888]
add ecx, 1
mov dword [ebp - 0x888], ecx
cmp dword [ebp - 0x888], 0xf
jge 0x44046f
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x888]
mov dword [ebp - 0x1c], edx
jmp 0x440449
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x440481
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x440499
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x88c], 0
jmp 0x4404bb
mov edx, dword [ebp - 0x88c]
add edx, 1
mov dword [ebp - 0x88c], edx
cmp dword [ebp - 0x88c], 0xb
jge 0x4404f6
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4404ea
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4404f1
and eax, 0xbc614e
jmp 0x4404f4
mov dword [ebp - 0x1c], eax
jmp 0x4404ac
mov dword [ebp - 4], 0xfffffffe
call fcn.00440504
jmp 0x44050c
mov dword [ebp - 0x890], 0
jmp 0x440527
mov edx, dword [ebp - 0x890]
add edx, 1
mov dword [ebp - 0x890], edx
cmp dword [ebp - 0x890], 0xf
jge 0x44053e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x890]
mov dword [ebp - 0x1c], eax
jmp 0x440518
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x440550
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x440568
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x894], 0
jmp 0x440583
mov edx, dword [ebp - 0x894]
add edx, 1
mov dword [ebp - 0x894], edx
cmp dword [ebp - 0x894], 2
jge 0x44059a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x894]
mov dword [ebp - 0x1c], eax
jmp 0x440574
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4405ac
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4405c4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x898], 0
jmp 0x4405df
mov edx, dword [ebp - 0x898]
add edx, 1
mov dword [ebp - 0x898], edx
cmp dword [ebp - 0x898], 0xd
jge 0x44062c
cmp dword [ebp - 0x1c], 0
jge 0x4405f6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44060c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x89c], 0xfa
lea edx, [ebp - 0x89c]
push edx
lea eax, [ebp - 0xa98]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4405d0
mov dword [ebp - 0xa9c], 0
mov ecx, 1
test ecx, ecx
je 0x440680
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0xaa0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x440662
jmp 0x440680
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xa9c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xa9c]
add eax, 1
mov dword [ebp - 0xa9c], eax
jmp 0x440636
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xaa4], 0
jmp 0x4406a4
mov edx, dword [ebp - 0xaa4]
add edx, 1
mov dword [ebp - 0xaa4], edx
cmp dword [ebp - 0xaa4], 2
jge 0x4406db
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xaa4]
mov dword [ebp - 0x1c], eax
jge 0x4406c3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4406d9
mov dword [ebp - 0x1c], 0
jmp 0x440695
mov edx, 1
test edx, edx
je 0x440715
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0xaa8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x440707
jmp 0x440715
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xaa8]
mov dword [ebp - 0x1c], edx
jmp 0x4406db
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0xaac], 0
jmp 0x440740
mov ecx, dword [ebp - 0xaac]
add ecx, 1
mov dword [ebp - 0xaac], ecx
cmp dword [ebp - 0xaac], 4
jge 0x44077b
mov eax, dword [ebp - 0xaac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44076f
mov eax, dword [ebp - 0xaac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x440776
and eax, 0xbc614e
jmp 0x440779
mov dword [ebp - 0x1c], eax
jmp 0x440731
mov dword [ebp - 4], 0xfffffffe
call fcn.00440789
jmp 0x440791
mov dword [ebp - 0xab0], 0
jmp 0x4407ac
mov edx, dword [ebp - 0xab0]
add edx, 1
mov dword [ebp - 0xab0], edx
cmp dword [ebp - 0xab0], 0
jge 0x4407c3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xab0]
mov dword [ebp - 0x1c], eax
jmp 0x44079d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4407d5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4407ed
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xab4], 0
jmp 0x440808
mov edx, dword [ebp - 0xab4]
add edx, 1
mov dword [ebp - 0xab4], edx
cmp dword [ebp - 0xab4], 8
jge 0x44083f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xab4]
mov dword [ebp - 0x1c], eax
jge 0x440827
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44083d
mov dword [ebp - 0x1c], 0
jmp 0x4407f9
mov dword [ebp - 0xab8], 0
jmp 0x44085a
mov edx, dword [ebp - 0xab8]
add edx, 1
mov dword [ebp - 0xab8], edx
cmp dword [ebp - 0xab8], 4
jge 0x4408a7
cmp dword [ebp - 0x1c], 0
jge 0x440871
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440887
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xabc], 0xfa
lea edx, [ebp - 0xabc]
push edx
lea eax, [ebp - 0xcb8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44084b
mov dword [ebp - 4], 4
mov dword [ebp - 0xcbc], 0
jmp 0x4408c9
mov ecx, dword [ebp - 0xcbc]
add ecx, 1
mov dword [ebp - 0xcbc], ecx
cmp dword [ebp - 0xcbc], 3
jge 0x440904
mov eax, dword [ebp - 0xcbc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4408f8
mov eax, dword [ebp - 0xcbc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4408ff
and eax, 0xbc614e
jmp 0x440902
mov dword [ebp - 0x1c], eax
jmp 0x4408ba
mov dword [ebp - 4], 0xfffffffe
call fcn.00440912
jmp 0x44091a
mov edx, 1
test edx, edx
je 0x440954
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcc0], eax
mov eax, dword [ebp - 0xcc0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x440946
jmp 0x440954
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xcc0]
mov dword [ebp - 0x1c], edx
jmp 0x44091a
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcc4], 0
mov ecx, 1
test ecx, ecx
je 0x4409b1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcc8], eax
mov eax, dword [ebp - 0xcc8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x440993
jmp 0x4409b1
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xcc4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xcc4]
add eax, 1
mov dword [ebp - 0xcc4], eax
jmp 0x440967
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xccc], 0
jmp 0x4409d5
mov edx, dword [ebp - 0xccc]
add edx, 1
mov dword [ebp - 0xccc], edx
cmp dword [ebp - 0xccc], 7
jge 0x440a22
cmp dword [ebp - 0x1c], 0
jge 0x4409ec
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440a02
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xcd0], 0xfa
lea edx, [ebp - 0xcd0]
push edx
lea eax, [ebp - 0xec8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4409c6
mov dword [ebp - 4], 5
mov dword [ebp - 0xecc], 0
jmp 0x440a44
mov ecx, dword [ebp - 0xecc]
add ecx, 1
mov dword [ebp - 0xecc], ecx
cmp dword [ebp - 0xecc], 6
jge 0x440a7f
mov eax, dword [ebp - 0xecc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x440a73
mov eax, dword [ebp - 0xecc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x440a7a
and eax, 0xbc614e
jmp 0x440a7d
mov dword [ebp - 0x1c], eax
jmp 0x440a35
mov dword [ebp - 4], 0xfffffffe
call fcn.00440a8d
jmp 0x440a95
mov dword [ebp - 0xed0], 1
mov dword [ebp - 0xed4], 1
mov dword [ebp - 0xed8], 2
mov dword [ebp - 0xedc], 0
mov dword [ebp - 0xee0], 0
jmp 0x440ad8
mov edx, dword [ebp - 0xee0]
add edx, 1
mov dword [ebp - 0xee0], edx
cmp dword [ebp - 0xee0], 0
jge 0x440b19
mov eax, dword [ebp - 0xed0]
add eax, dword [ebp - 0xed4]
mov dword [ebp - 0xed8], eax
mov ecx, dword [ebp - 0xed4]
mov dword [ebp - 0xed0], ecx
mov edx, dword [ebp - 0xed8]
mov dword [ebp - 0xed4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xed8]
mov dword [ebp - 0x1c], eax
jmp 0x440ac9
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xee4], 1
mov dword [ebp - 0xee8], 1
mov dword [ebp - 0xeec], 2
mov dword [ebp - 0xef0], 0
mov dword [ebp - 0xef4], 0
jmp 0x440b62
mov edx, dword [ebp - 0xef4]
add edx, 1
mov dword [ebp - 0xef4], edx
cmp dword [ebp - 0xef4], 1
jge 0x440ba3
mov eax, dword [ebp - 0xee4]
add eax, dword [ebp - 0xee8]
mov dword [ebp - 0xeec], eax
mov ecx, dword [ebp - 0xee8]
mov dword [ebp - 0xee4], ecx
mov edx, dword [ebp - 0xeec]
mov dword [ebp - 0xee8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xeec]
mov dword [ebp - 0x1c], eax
jmp 0x440b53
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xef8], 0
jmp 0x440bc7
mov edx, dword [ebp - 0xef8]
add edx, 1
mov dword [ebp - 0xef8], edx
cmp dword [ebp - 0xef8], 8
jge 0x440bfe
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xef8]
mov dword [ebp - 0x1c], eax
jge 0x440be6
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440bfc
mov dword [ebp - 0x1c], 0
jmp 0x440bb8
mov dword [ebp - 0xefc], 1
mov dword [ebp - 0xf00], 1
mov dword [ebp - 0xf04], 2
mov dword [ebp - 0xf08], 0
mov dword [ebp - 0xf0c], 0
jmp 0x440c41
mov edx, dword [ebp - 0xf0c]
add edx, 1
mov dword [ebp - 0xf0c], edx
cmp dword [ebp - 0xf0c], 0
jge 0x440c82
mov eax, dword [ebp - 0xefc]
add eax, dword [ebp - 0xf00]
mov dword [ebp - 0xf04], eax
mov ecx, dword [ebp - 0xf00]
mov dword [ebp - 0xefc], ecx
mov edx, dword [ebp - 0xf04]
mov dword [ebp - 0xf00], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xf04]
mov dword [ebp - 0x1c], eax
jmp 0x440c32
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xf10], 1
mov dword [ebp - 0xf14], 1
mov dword [ebp - 0xf18], 2
mov dword [ebp - 0xf1c], 0
mov dword [ebp - 0xf20], 0
jmp 0x440ccb
mov edx, dword [ebp - 0xf20]
add edx, 1
mov dword [ebp - 0xf20], edx
cmp dword [ebp - 0xf20], 5
jge 0x440d0c
mov eax, dword [ebp - 0xf10]
add eax, dword [ebp - 0xf14]
mov dword [ebp - 0xf18], eax
mov ecx, dword [ebp - 0xf14]
mov dword [ebp - 0xf10], ecx
mov edx, dword [ebp - 0xf18]
mov dword [ebp - 0xf14], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xf18]
mov dword [ebp - 0x1c], eax
jmp 0x440cbc
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x440d4f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf24], eax
mov eax, dword [ebp - 0xf24]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x440d41
jmp 0x440d4f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xf24]
mov dword [ebp - 0x1c], edx
jmp 0x440d15
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf28], 0
jmp 0x440d73
mov ecx, dword [ebp - 0xf28]
add ecx, 1
mov dword [ebp - 0xf28], ecx
cmp dword [ebp - 0xf28], 0
jge 0x440d8a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xf28]
mov dword [ebp - 0x1c], edx
jmp 0x440d64
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x440d9c
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x440db4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf2c], 0
jmp 0x440dcf
mov edx, dword [ebp - 0xf2c]
add edx, 1
mov dword [ebp - 0xf2c], edx
cmp dword [ebp - 0xf2c], 2
jge 0x440de6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xf2c]
mov dword [ebp - 0x1c], eax
jmp 0x440dc0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x440df8
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x440e10
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf30], 1
mov dword [ebp - 0xf34], 1
mov dword [ebp - 0xf38], 2
mov dword [ebp - 0xf3c], 0
mov dword [ebp - 0xf40], 0
jmp 0x440e53
mov edx, dword [ebp - 0xf40]
add edx, 1
mov dword [ebp - 0xf40], edx
cmp dword [ebp - 0xf40], 1
jge 0x440e94
mov eax, dword [ebp - 0xf30]
add eax, dword [ebp - 0xf34]
mov dword [ebp - 0xf38], eax
mov ecx, dword [ebp - 0xf34]
mov dword [ebp - 0xf30], ecx
mov edx, dword [ebp - 0xf38]
mov dword [ebp - 0xf34], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xf38]
mov dword [ebp - 0x1c], eax
jmp 0x440e44
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xf44], 0
jmp 0x440eb8
mov edx, dword [ebp - 0xf44]
add edx, 1
mov dword [ebp - 0xf44], edx
cmp dword [ebp - 0xf44], 0
jge 0x440f05
cmp dword [ebp - 0x1c], 0
jge 0x440ecf
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440ee5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf48], 0xfa
lea edx, [ebp - 0xf48]
push edx
lea eax, [ebp - 0x1140]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x440ea9
mov dword [ebp - 0x1144], 1
mov dword [ebp - 0x1148], 1
mov dword [ebp - 0x114c], 2
mov dword [ebp - 0x1150], 0
mov dword [ebp - 0x1154], 0
jmp 0x440f48
mov ecx, dword [ebp - 0x1154]
add ecx, 1
mov dword [ebp - 0x1154], ecx
cmp dword [ebp - 0x1154], 4
jge 0x440f89
mov edx, dword [ebp - 0x1144]
add edx, dword [ebp - 0x1148]
mov dword [ebp - 0x114c], edx
mov eax, dword [ebp - 0x1148]
mov dword [ebp - 0x1144], eax
mov ecx, dword [ebp - 0x114c]
mov dword [ebp - 0x1148], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x114c]
mov dword [ebp - 0x1c], edx
jmp 0x440f39
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1158], 0
jmp 0x440fad
mov ecx, dword [ebp - 0x1158]
add ecx, 1
mov dword [ebp - 0x1158], ecx
cmp dword [ebp - 0x1158], 2
jge 0x440fe4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1158]
mov dword [ebp - 0x1c], edx
jge 0x440fcc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x440fe2
mov dword [ebp - 0x1c], 0
jmp 0x440f9e
mov edx, 1
test edx, edx
je 0x44101e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x115c], eax
mov eax, dword [ebp - 0x115c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x441010
jmp 0x44101e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x115c]
mov dword [ebp - 0x1c], edx
jmp 0x440fe4
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1160], 0
jmp 0x441042
mov ecx, dword [ebp - 0x1160]
add ecx, 1
mov dword [ebp - 0x1160], ecx
cmp dword [ebp - 0x1160], 3
jge 0x441079
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1160]
mov dword [ebp - 0x1c], edx
jge 0x441061
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441077
mov dword [ebp - 0x1c], 0
jmp 0x441033
mov dword [ebp - 0x1164], 1
mov dword [ebp - 0x1168], 1
mov dword [ebp - 0x116c], 2
mov dword [ebp - 0x1170], 0
mov dword [ebp - 0x1174], 0
jmp 0x4410bc
mov edx, dword [ebp - 0x1174]
add edx, 1
mov dword [ebp - 0x1174], edx
cmp dword [ebp - 0x1174], 0
jge 0x4410fd
mov eax, dword [ebp - 0x1164]
add eax, dword [ebp - 0x1168]
mov dword [ebp - 0x116c], eax
mov ecx, dword [ebp - 0x1168]
mov dword [ebp - 0x1164], ecx
mov edx, dword [ebp - 0x116c]
mov dword [ebp - 0x1168], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x116c]
mov dword [ebp - 0x1c], eax
jmp 0x4410ad
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1178], 0
jmp 0x44111e
mov edx, dword [ebp - 0x1178]
add edx, 1
mov dword [ebp - 0x1178], edx
cmp dword [ebp - 0x1178], 2
jge 0x441135
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1178]
mov dword [ebp - 0x1c], eax
jmp 0x44110f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441147
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44115f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x117c], 0
jmp 0x441181
mov edx, dword [ebp - 0x117c]
add edx, 1
mov dword [ebp - 0x117c], edx
cmp dword [ebp - 0x117c], 4
jge 0x4411bc
mov eax, dword [ebp - 0x117c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4411b0
mov eax, dword [ebp - 0x117c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4411b7
and eax, 0xbc614e
jmp 0x4411ba
mov dword [ebp - 0x1c], eax
jmp 0x441172
mov dword [ebp - 4], 0xfffffffe
call fcn.004411ca
jmp 0x4411d2
mov dword [ebp - 0x1180], 0
jmp 0x4411ed
mov edx, dword [ebp - 0x1180]
add edx, 1
mov dword [ebp - 0x1180], edx
cmp dword [ebp - 0x1180], 3
jge 0x441224
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1180]
mov dword [ebp - 0x1c], eax
jge 0x44120c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441222
mov dword [ebp - 0x1c], 0
jmp 0x4411de
mov dword [ebp - 0x1184], 1
mov dword [ebp - 0x1188], 1
mov dword [ebp - 0x118c], 2
mov dword [ebp - 0x1190], 0
mov dword [ebp - 0x1194], 0
jmp 0x441267
mov edx, dword [ebp - 0x1194]
add edx, 1
mov dword [ebp - 0x1194], edx
cmp dword [ebp - 0x1194], 0
jge 0x4412a8
mov eax, dword [ebp - 0x1184]
add eax, dword [ebp - 0x1188]
mov dword [ebp - 0x118c], eax
mov ecx, dword [ebp - 0x1188]
mov dword [ebp - 0x1184], ecx
mov edx, dword [ebp - 0x118c]
mov dword [ebp - 0x1188], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x118c]
mov dword [ebp - 0x1c], eax
jmp 0x441258
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4412e8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1198], eax
mov eax, dword [ebp - 0x1198]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4412da
jmp 0x4412e8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1198]
mov dword [ebp - 0x1c], edx
jmp 0x4412ae
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x119c], 1
mov dword [ebp - 0x11a0], 1
mov dword [ebp - 0x11a4], 2
mov dword [ebp - 0x11a8], 0
mov dword [ebp - 0x11ac], 0
jmp 0x441331
mov ecx, dword [ebp - 0x11ac]
add ecx, 1
mov dword [ebp - 0x11ac], ecx
cmp dword [ebp - 0x11ac], 3
jge 0x441372
mov edx, dword [ebp - 0x119c]
add edx, dword [ebp - 0x11a0]
mov dword [ebp - 0x11a4], edx
mov eax, dword [ebp - 0x11a0]
mov dword [ebp - 0x119c], eax
mov ecx, dword [ebp - 0x11a4]
mov dword [ebp - 0x11a0], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x11a4]
mov dword [ebp - 0x1c], edx
jmp 0x441322
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x11b0], 0
jmp 0x441396
mov ecx, dword [ebp - 0x11b0]
add ecx, 1
mov dword [ebp - 0x11b0], ecx
cmp dword [ebp - 0x11b0], 0
jge 0x4413ad
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x11b0]
mov dword [ebp - 0x1c], edx
jmp 0x441387
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4413bf
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4413d7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x11b4], 0
jmp 0x4413f2
mov edx, dword [ebp - 0x11b4]
add edx, 1
mov dword [ebp - 0x11b4], edx
cmp dword [ebp - 0x11b4], 3
jge 0x441429
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x11b4]
mov dword [ebp - 0x1c], eax
jge 0x441411
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441427
mov dword [ebp - 0x1c], 0
jmp 0x4413e3
mov dword [ebp - 4], 7
mov dword [ebp - 0x11b8], 0
jmp 0x44144b
mov edx, dword [ebp - 0x11b8]
add edx, 1
mov dword [ebp - 0x11b8], edx
cmp dword [ebp - 0x11b8], 0
jge 0x441486
mov eax, dword [ebp - 0x11b8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44147a
mov eax, dword [ebp - 0x11b8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441481
and eax, 0xbc614e
jmp 0x441484
mov dword [ebp - 0x1c], eax
jmp 0x44143c
mov dword [ebp - 4], 0xfffffffe
call fcn.00441494
jmp 0x44149c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x44]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret