Function at 0x434b70
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47dc00
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff958
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x78], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
jmp 0x434bdb
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1b
jge 0x434c01
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jmp 0x434bd2
mov edx, dword [ebp - 0x1c]
add edx, 0x1b
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0
mov dword [ebp - 0x34], 0
jmp 0x434c23
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 7
jge 0x434c55
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x434c49
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x434c50
and eax, 0xbc614e
jmp 0x434c53
mov dword [ebp - 0x1c], eax
jmp 0x434c1a
mov dword [ebp - 4], 0xfffffffe
call fcn.00434c63
jmp 0x434c6b
mov dword [ebp - 0x38], 0
mov edx, 1
test edx, edx
je 0x434cad
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x434c98
jmp 0x434cad
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x434c72
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x40], 0
jmp 0x434cc8
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xb
jge 0x434cf9
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
jge 0x434ce1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434cf7
mov dword [ebp - 0x1c], 0
jmp 0x434cbf
mov dword [ebp - 0x44], 0
mov edx, 1
test edx, edx
je 0x434d3b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x434d26
jmp 0x434d3b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
jmp 0x434d00
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4c], 0
jmp 0x434d56
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 7
jge 0x434d67
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
jmp 0x434d4d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434d79
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434d91
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x58], 2
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
jmp 0x434dbf
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 3
jge 0x434de5
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
jmp 0x434db6
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x64], 0
mov edx, 1
test edx, edx
je 0x434e30
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x434e1b
jmp 0x434e30
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x64]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
jmp 0x434df5
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x434e6a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x434e5f
jmp 0x434e6a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], edx
jmp 0x434e39
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x70], 0
jmp 0x434e85
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 5
jge 0x434ec9
cmp dword [ebp - 0x1c], 0
jge 0x434e99
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434eaf
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x74], 0xfa
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x434e7c
mov dword [ebp - 0x274], 0
mov ecx, 1
test ecx, ecx
je 0x434f1d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x434eff
jmp 0x434f1d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x274]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x274]
add eax, 1
mov dword [ebp - 0x274], eax
jmp 0x434ed3
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x434f60
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x434f52
jmp 0x434f60
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x27c]
mov dword [ebp - 0x1c], edx
jmp 0x434f26
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x280], 0
jmp 0x434f84
mov ecx, dword [ebp - 0x280]
add ecx, 1
mov dword [ebp - 0x280], ecx
cmp dword [ebp - 0x280], 6
jge 0x434fbb
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x280]
mov dword [ebp - 0x1c], edx
jge 0x434fa3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434fb9
mov dword [ebp - 0x1c], 0
jmp 0x434f75
mov dword [ebp - 0x284], 0
jmp 0x434fd6
mov edx, dword [ebp - 0x284]
add edx, 1
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 4
jge 0x434fed
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x284]
mov dword [ebp - 0x1c], eax
jmp 0x434fc7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434fff
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x435017
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x288], 0
jmp 0x435032
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 2
jge 0x435069
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x288]
mov dword [ebp - 0x1c], eax
jge 0x435051
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435067
mov dword [ebp - 0x1c], 0
jmp 0x435023
mov dword [ebp - 0x28c], 0
jmp 0x435084
mov edx, dword [ebp - 0x28c]
add edx, 1
mov dword [ebp - 0x28c], edx
cmp dword [ebp - 0x28c], 5
jge 0x43509b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28c]
mov dword [ebp - 0x1c], eax
jmp 0x435075
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4350ad
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4350c5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4350ff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4350f1
jmp 0x4350ff
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x290]
mov dword [ebp - 0x1c], edx
jmp 0x4350c5
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x294], 1
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x29c], 2
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x2a4], 0
jmp 0x43514b
mov ecx, dword [ebp - 0x2a4]
add ecx, 1
mov dword [ebp - 0x2a4], ecx
cmp dword [ebp - 0x2a4], 4
jge 0x43518c
mov edx, dword [ebp - 0x294]
add edx, dword [ebp - 0x298]
mov dword [ebp - 0x29c], edx
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0x298], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x29c]
mov dword [ebp - 0x1c], edx
jmp 0x43513c
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2a8], 0
jmp 0x4351b0
mov ecx, dword [ebp - 0x2a8]
add ecx, 1
mov dword [ebp - 0x2a8], ecx
cmp dword [ebp - 0x2a8], 0
jge 0x4351c7
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x1c], edx
jmp 0x4351a1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4351d9
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4351f1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2ac], 0
jmp 0x43520c
mov edx, dword [ebp - 0x2ac]
add edx, 1
mov dword [ebp - 0x2ac], edx
cmp dword [ebp - 0x2ac], 4
jge 0x435243
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x1c], eax
jge 0x43522b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435241
mov dword [ebp - 0x1c], 0
jmp 0x4351fd
mov dword [ebp - 0x2b0], 0
jmp 0x43525e
mov edx, dword [ebp - 0x2b0]
add edx, 1
mov dword [ebp - 0x2b0], edx
cmp dword [ebp - 0x2b0], 1
jge 0x4352ab
cmp dword [ebp - 0x1c], 0
jge 0x435275
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43528b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2b4], 0xfa
lea edx, [ebp - 0x2b4]
push edx
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43524f
mov dword [ebp - 0x4b4], 0
mov ecx, 1
test ecx, ecx
je 0x4352ff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4b8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4352e1
jmp 0x4352ff
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4b4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4b4]
add eax, 1
mov dword [ebp - 0x4b4], eax
jmp 0x4352b5
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4bc], 0
jmp 0x435323
mov edx, dword [ebp - 0x4bc]
add edx, 1
mov dword [ebp - 0x4bc], edx
cmp dword [ebp - 0x4bc], 1
jge 0x435370
cmp dword [ebp - 0x1c], 0
jge 0x43533a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435350
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4c0], 0xfa
lea edx, [ebp - 0x4c0]
push edx
lea eax, [ebp - 0x6b8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x435314
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x78]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret