Function at 0x42bda0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47d980
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1520
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x3c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x42bdf6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x14
jge 0x42be07
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x42bded
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42be19
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42be31
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x42be43
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 6
jge 0x42be54
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jmp 0x42be3a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42be66
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42be7e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], 0
jmp 0x42be90
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 9
jge 0x42bec1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jge 0x42bea9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42bebf
mov dword [ebp - 0x1c], 0
jmp 0x42be87
mov edx, 1
test edx, edx
je 0x42bef2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42bee7
jmp 0x42bef2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jmp 0x42bec1
mov eax, dword [ebp - 0x1c]
add eax, 0x17
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x30], 0
jmp 0x42bf14
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x1a
jge 0x42bf46
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42bf3a
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42bf41
and eax, 0xbc614e
jmp 0x42bf44
mov dword [ebp - 0x1c], eax
jmp 0x42bf0b
mov dword [ebp - 4], 0xfffffffe
call fcn.0042bf54
jmp 0x42bf5c
mov dword [ebp - 0x34], 0
jmp 0x42bf6e
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x1b
jge 0x42bfb2
cmp dword [ebp - 0x1c], 0
jge 0x42bf82
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42bf98
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x38], 0xfa
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42bf65
mov dword [ebp - 0x23c], 0
jmp 0x42bfcd
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
cmp dword [ebp - 0x23c], 6
jge 0x42bfe4
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], edx
jmp 0x42bfbe
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42bff6
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42c00e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x240], 0
jmp 0x42c029
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 9
jge 0x42c060
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x240]
mov dword [ebp - 0x1c], eax
jge 0x42c048
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c05e
mov dword [ebp - 0x1c], 0
jmp 0x42c01a
mov dword [ebp - 4], 1
mov dword [ebp - 0x244], 0
jmp 0x42c082
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0xf
jge 0x42c0bd
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42c0b1
mov eax, dword [ebp - 0x244]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42c0b8
and eax, 0xbc614e
jmp 0x42c0bb
mov dword [ebp - 0x1c], eax
jmp 0x42c073
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c0cb
jmp 0x42c0d3
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x250], 2
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x258], 0
jmp 0x42c116
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 9
jge 0x42c157
mov eax, dword [ebp - 0x248]
add eax, dword [ebp - 0x24c]
mov dword [ebp - 0x250], eax
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x250]
mov dword [ebp - 0x24c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x250]
mov dword [ebp - 0x1c], eax
jmp 0x42c107
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x25c], 0
jmp 0x42c17b
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 0xe
jge 0x42c1c8
cmp dword [ebp - 0x1c], 0
jge 0x42c192
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c1a8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x260], 0xfa
lea edx, [ebp - 0x260]
push edx
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42c16c
mov dword [ebp - 0x45c], 0
jmp 0x42c1e3
mov ecx, dword [ebp - 0x45c]
add ecx, 1
mov dword [ebp - 0x45c], ecx
cmp dword [ebp - 0x45c], 5
jge 0x42c230
cmp dword [ebp - 0x1c], 0
jge 0x42c1fa
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c210
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x460], 0xfa
lea edx, [ebp - 0x460]
push edx
lea eax, [ebp - 0x658]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42c1d4
mov dword [ebp - 0x65c], 0
jmp 0x42c24b
mov ecx, dword [ebp - 0x65c]
add ecx, 1
mov dword [ebp - 0x65c], ecx
cmp dword [ebp - 0x65c], 0x10
jge 0x42c262
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x65c]
mov dword [ebp - 0x1c], edx
jmp 0x42c23c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42c274
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42c28c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x660], 0
jmp 0x42c2a7
mov edx, dword [ebp - 0x660]
add edx, 1
mov dword [ebp - 0x660], edx
cmp dword [ebp - 0x660], 2
jge 0x42c2f4
cmp dword [ebp - 0x1c], 0
jge 0x42c2be
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c2d4
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x664], 0xfa
lea edx, [ebp - 0x664]
push edx
lea eax, [ebp - 0x860]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42c298
mov dword [ebp - 0x864], 0
jmp 0x42c30f
mov ecx, dword [ebp - 0x864]
add ecx, 1
mov dword [ebp - 0x864], ecx
cmp dword [ebp - 0x864], 0xb
jge 0x42c346
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x864]
mov dword [ebp - 0x1c], edx
jge 0x42c32e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c344
mov dword [ebp - 0x1c], 0
jmp 0x42c300
mov dword [ebp - 0x868], 0
jmp 0x42c361
mov edx, dword [ebp - 0x868]
add edx, 1
mov dword [ebp - 0x868], edx
cmp dword [ebp - 0x868], 3
jge 0x42c398
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x868]
mov dword [ebp - 0x1c], eax
jge 0x42c380
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c396
mov dword [ebp - 0x1c], 0
jmp 0x42c352
mov dword [ebp - 0x86c], 0
mov edx, 1
test edx, edx
je 0x42c3ec
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x870]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42c3ce
jmp 0x42c3ec
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x86c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x86c]
add eax, 1
mov dword [ebp - 0x86c], eax
jmp 0x42c3a2
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x874], 0
jmp 0x42c40d
mov edx, dword [ebp - 0x874]
add edx, 1
mov dword [ebp - 0x874], edx
cmp dword [ebp - 0x874], 0
jge 0x42c444
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x874]
mov dword [ebp - 0x1c], eax
jge 0x42c42c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c442
mov dword [ebp - 0x1c], 0
jmp 0x42c3fe
mov dword [ebp - 4], 2
mov dword [ebp - 0x878], 0
jmp 0x42c466
mov edx, dword [ebp - 0x878]
add edx, 1
mov dword [ebp - 0x878], edx
cmp dword [ebp - 0x878], 2
jge 0x42c4a1
mov eax, dword [ebp - 0x878]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42c495
mov eax, dword [ebp - 0x878]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42c49c
and eax, 0xbc614e
jmp 0x42c49f
mov dword [ebp - 0x1c], eax
jmp 0x42c457
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c4af
jmp 0x42c4b7
mov dword [ebp - 0x87c], 0
jmp 0x42c4d2
mov edx, dword [ebp - 0x87c]
add edx, 1
mov dword [ebp - 0x87c], edx
cmp dword [ebp - 0x87c], 5
jge 0x42c509
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x87c]
mov dword [ebp - 0x1c], eax
jge 0x42c4f1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c507
mov dword [ebp - 0x1c], 0
jmp 0x42c4c3
mov dword [ebp - 4], 3
mov dword [ebp - 0x880], 0
jmp 0x42c52b
mov edx, dword [ebp - 0x880]
add edx, 1
mov dword [ebp - 0x880], edx
cmp dword [ebp - 0x880], 0
jge 0x42c566
mov eax, dword [ebp - 0x880]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42c55a
mov eax, dword [ebp - 0x880]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42c561
and eax, 0xbc614e
jmp 0x42c564
mov dword [ebp - 0x1c], eax
jmp 0x42c51c
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c574
jmp 0x42c57c
mov dword [ebp - 0x884], 0
jmp 0x42c597
mov edx, dword [ebp - 0x884]
add edx, 1
mov dword [ebp - 0x884], edx
cmp dword [ebp - 0x884], 1
jge 0x42c5ae
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x884]
mov dword [ebp - 0x1c], eax
jmp 0x42c588
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42c5c0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42c5d8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x888], 0
jmp 0x42c5f3
mov edx, dword [ebp - 0x888]
add edx, 1
mov dword [ebp - 0x888], edx
cmp dword [ebp - 0x888], 8
jge 0x42c60a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x888]
mov dword [ebp - 0x1c], eax
jmp 0x42c5e4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42c61c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42c634
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x42c66e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x88c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42c660
jmp 0x42c66e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x88c]
mov dword [ebp - 0x1c], edx
jmp 0x42c634
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x890], 0
jmp 0x42c692
mov ecx, dword [ebp - 0x890]
add ecx, 1
mov dword [ebp - 0x890], ecx
cmp dword [ebp - 0x890], 5
jge 0x42c6a9
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x890]
mov dword [ebp - 0x1c], edx
jmp 0x42c683
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42c6bb
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42c6d3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x894], 1
mov dword [ebp - 0x898], 1
mov dword [ebp - 0x89c], 2
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x8a4], 0
jmp 0x42c716
mov edx, dword [ebp - 0x8a4]
add edx, 1
mov dword [ebp - 0x8a4], edx
cmp dword [ebp - 0x8a4], 3
jge 0x42c757
mov eax, dword [ebp - 0x894]
add eax, dword [ebp - 0x898]
mov dword [ebp - 0x89c], eax
mov ecx, dword [ebp - 0x898]
mov dword [ebp - 0x894], ecx
mov edx, dword [ebp - 0x89c]
mov dword [ebp - 0x898], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x89c]
mov dword [ebp - 0x1c], eax
jmp 0x42c707
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8a8], 0
mov edx, 1
test edx, edx
je 0x42c7b4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x8ac]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42c796
jmp 0x42c7b4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x8a8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x8a8]
add eax, 1
mov dword [ebp - 0x8a8], eax
jmp 0x42c76a
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8b0], 0
jmp 0x42c7d5
mov edx, dword [ebp - 0x8b0]
add edx, 1
mov dword [ebp - 0x8b0], edx
cmp dword [ebp - 0x8b0], 6
jge 0x42c7ec
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x1c], eax
jmp 0x42c7c6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42c7fe
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42c816
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8b4], 0
jmp 0x42c831
mov edx, dword [ebp - 0x8b4]
add edx, 1
mov dword [ebp - 0x8b4], edx
cmp dword [ebp - 0x8b4], 6
jge 0x42c87e
cmp dword [ebp - 0x1c], 0
jge 0x42c848
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c85e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8b8], 0xfa
lea edx, [ebp - 0x8b8]
push edx
lea eax, [ebp - 0xab0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42c822
mov dword [ebp - 4], 4
mov dword [ebp - 0xab4], 0
jmp 0x42c8a0
mov ecx, dword [ebp - 0xab4]
add ecx, 1
mov dword [ebp - 0xab4], ecx
cmp dword [ebp - 0xab4], 6
jge 0x42c8db
mov eax, dword [ebp - 0xab4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42c8cf
mov eax, dword [ebp - 0xab4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42c8d6
and eax, 0xbc614e
jmp 0x42c8d9
mov dword [ebp - 0x1c], eax
jmp 0x42c891
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c8e9
jmp 0x42c8f1
mov dword [ebp - 0xab8], 0
jmp 0x42c90c
mov edx, dword [ebp - 0xab8]
add edx, 1
mov dword [ebp - 0xab8], edx
cmp dword [ebp - 0xab8], 8
jge 0x42c959
cmp dword [ebp - 0x1c], 0
jge 0x42c923
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c939
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xabc], 0xfa
lea edx, [ebp - 0xabc]
push edx
lea eax, [ebp - 0xcb8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42c8fd
mov dword [ebp - 0xcbc], 0
jmp 0x42c974
mov ecx, dword [ebp - 0xcbc]
add ecx, 1
mov dword [ebp - 0xcbc], ecx
cmp dword [ebp - 0xcbc], 3
jge 0x42c9ab
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xcbc]
mov dword [ebp - 0x1c], edx
jge 0x42c993
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42c9a9
mov dword [ebp - 0x1c], 0
jmp 0x42c965
mov dword [ebp - 0xcc0], 1
mov dword [ebp - 0xcc4], 1
mov dword [ebp - 0xcc8], 2
mov dword [ebp - 0xccc], 0
mov dword [ebp - 0xcd0], 0
jmp 0x42c9ee
mov edx, dword [ebp - 0xcd0]
add edx, 1
mov dword [ebp - 0xcd0], edx
cmp dword [ebp - 0xcd0], 2
jge 0x42ca2f
mov eax, dword [ebp - 0xcc0]
add eax, dword [ebp - 0xcc4]
mov dword [ebp - 0xcc8], eax
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0xcc0], ecx
mov edx, dword [ebp - 0xcc8]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x1c], eax
jmp 0x42c9df
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xcd4], 0
jmp 0x42ca53
mov edx, dword [ebp - 0xcd4]
add edx, 1
mov dword [ebp - 0xcd4], edx
cmp dword [ebp - 0xcd4], 3
jge 0x42ca8a
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xcd4]
mov dword [ebp - 0x1c], eax
jge 0x42ca72
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ca88
mov dword [ebp - 0x1c], 0
jmp 0x42ca44
mov dword [ebp - 0xcd8], 0
jmp 0x42caa5
mov edx, dword [ebp - 0xcd8]
add edx, 1
mov dword [ebp - 0xcd8], edx
cmp dword [ebp - 0xcd8], 2
jge 0x42cadc
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xcd8]
mov dword [ebp - 0x1c], eax
jge 0x42cac4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42cada
mov dword [ebp - 0x1c], 0
jmp 0x42ca96
mov edx, 1
test edx, edx
je 0x42cb16
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 0xcdc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42cb08
jmp 0x42cb16
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xcdc]
mov dword [ebp - 0x1c], edx
jmp 0x42cadc
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xce0], 0
jmp 0x42cb3a
mov ecx, dword [ebp - 0xce0]
add ecx, 1
mov dword [ebp - 0xce0], ecx
cmp dword [ebp - 0xce0], 1
jge 0x42cb71
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xce0]
mov dword [ebp - 0x1c], edx
jge 0x42cb59
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42cb6f
mov dword [ebp - 0x1c], 0
jmp 0x42cb2b
mov dword [ebp - 0xce4], 0
jmp 0x42cb8c
mov edx, dword [ebp - 0xce4]
add edx, 1
mov dword [ebp - 0xce4], edx
cmp dword [ebp - 0xce4], 2
jge 0x42cbc3
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xce4]
mov dword [ebp - 0x1c], eax
jge 0x42cbab
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42cbc1
mov dword [ebp - 0x1c], 0
jmp 0x42cb7d
mov dword [ebp - 0xce8], 0
mov edx, 1
test edx, edx
je 0x42cc17
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcec], eax
mov eax, dword [ebp - 0xcec]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42cbf9
jmp 0x42cc17
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xce8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xce8]
add eax, 1
mov dword [ebp - 0xce8], eax
jmp 0x42cbcd
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0xcf0], 0
jmp 0x42cc42
mov edx, dword [ebp - 0xcf0]
add edx, 1
mov dword [ebp - 0xcf0], edx
cmp dword [ebp - 0xcf0], 0
jge 0x42cc7d
mov eax, dword [ebp - 0xcf0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42cc71
mov eax, dword [ebp - 0xcf0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42cc78
and eax, 0xbc614e
jmp 0x42cc7b
mov dword [ebp - 0x1c], eax
jmp 0x42cc33
mov dword [ebp - 4], 0xfffffffe
call fcn.0042cc8b
jmp 0x42cc93
mov dword [ebp - 0xcf4], 0
mov edx, 1
test edx, edx
je 0x42cce7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0xcf8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42ccc9
jmp 0x42cce7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xcf4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xcf4]
add eax, 1
mov dword [ebp - 0xcf4], eax
jmp 0x42cc9d
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xcfc], 0
jmp 0x42cd0b
mov edx, dword [ebp - 0xcfc]
add edx, 1
mov dword [ebp - 0xcfc], edx
cmp dword [ebp - 0xcfc], 2
jge 0x42cd58
cmp dword [ebp - 0x1c], 0
jge 0x42cd22
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42cd38
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xd00], 0xfa
lea edx, [ebp - 0xd00]
push edx
lea eax, [ebp - 0xef8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42ccfc
mov dword [ebp - 0xefc], 0
jmp 0x42cd73
mov ecx, dword [ebp - 0xefc]
add ecx, 1
mov dword [ebp - 0xefc], ecx
cmp dword [ebp - 0xefc], 1
jge 0x42cdaa
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xefc]
mov dword [ebp - 0x1c], edx
jge 0x42cd92
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42cda8
mov dword [ebp - 0x1c], 0
jmp 0x42cd64
mov edx, 1
test edx, edx
je 0x42cde4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf00], eax
mov eax, dword [ebp - 0xf00]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42cdd6
jmp 0x42cde4
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xf00]
mov dword [ebp - 0x1c], edx
jmp 0x42cdaa
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf04], 0
jmp 0x42ce08
mov ecx, dword [ebp - 0xf04]
add ecx, 1
mov dword [ebp - 0xf04], ecx
cmp dword [ebp - 0xf04], 2
jge 0x42ce55
cmp dword [ebp - 0x1c], 0
jge 0x42ce1f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ce35
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf08], 0xfa
lea edx, [ebp - 0xf08]
push edx
lea eax, [ebp - 0x1100]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42cdf9
mov dword [ebp - 0x1104], 0
jmp 0x42ce70
mov ecx, dword [ebp - 0x1104]
add ecx, 1
mov dword [ebp - 0x1104], ecx
cmp dword [ebp - 0x1104], 3
jge 0x42cebd
cmp dword [ebp - 0x1c], 0
jge 0x42ce87
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ce9d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1108], 0xfa
lea edx, [ebp - 0x1108]
push edx
lea eax, [ebp - 0x1300]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42ce61
mov ecx, 1
test ecx, ecx
je 0x42cef7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1304], eax
mov eax, dword [ebp - 0x1304]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42cee9
jmp 0x42cef7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1304]
mov dword [ebp - 0x1c], edx
jmp 0x42cebd
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1308], 1
mov dword [ebp - 0x130c], 1
mov dword [ebp - 0x1310], 2
mov dword [ebp - 0x1314], 0
mov dword [ebp - 0x1318], 0
jmp 0x42cf43
mov ecx, dword [ebp - 0x1318]
add ecx, 1
mov dword [ebp - 0x1318], ecx
cmp dword [ebp - 0x1318], 0
jge 0x42cf84
mov edx, dword [ebp - 0x1308]
add edx, dword [ebp - 0x130c]
mov dword [ebp - 0x1310], edx
mov eax, dword [ebp - 0x130c]
mov dword [ebp - 0x1308], eax
mov ecx, dword [ebp - 0x1310]
mov dword [ebp - 0x130c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1310]
mov dword [ebp - 0x1c], edx
jmp 0x42cf34
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x131c], 0
jmp 0x42cfa5
mov ecx, dword [ebp - 0x131c]
add ecx, 1
mov dword [ebp - 0x131c], ecx
cmp dword [ebp - 0x131c], 3
jge 0x42cff2
cmp dword [ebp - 0x1c], 0
jge 0x42cfbc
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42cfd2
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1320], 0xfa
lea edx, [ebp - 0x1320]
push edx
lea eax, [ebp - 0x1518]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42cf96
mov dword [ebp - 4], 6
mov dword [ebp - 0x151c], 0
jmp 0x42d014
mov ecx, dword [ebp - 0x151c]
add ecx, 1
mov dword [ebp - 0x151c], ecx
cmp dword [ebp - 0x151c], 0
jge 0x42d04f
mov eax, dword [ebp - 0x151c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42d043
mov eax, dword [ebp - 0x151c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42d04a
and eax, 0xbc614e
jmp 0x42d04d
mov dword [ebp - 0x1c], eax
jmp 0x42d005
mov dword [ebp - 4], 0xfffffffe
call fcn.0042d05d
jmp 0x42d065
mov dword [ebp - 0x1520], 0
jmp 0x42d080
mov edx, dword [ebp - 0x1520]
add edx, 1
mov dword [ebp - 0x1520], edx
cmp dword [ebp - 0x1520], 1
jge 0x42d097
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1520]
mov dword [ebp - 0x1c], eax
jmp 0x42d071
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42d0a9
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42d0c1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x1524], 0
jmp 0x42d0e3
mov edx, dword [ebp - 0x1524]
add edx, 1
mov dword [ebp - 0x1524], edx
cmp dword [ebp - 0x1524], 0
jge 0x42d11e
mov eax, dword [ebp - 0x1524]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42d112
mov eax, dword [ebp - 0x1524]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42d119
and eax, 0xbc614e
jmp 0x42d11c
mov dword [ebp - 0x1c], eax
jmp 0x42d0d4
mov dword [ebp - 4], 0xfffffffe
call fcn.0042d12c
jmp 0x42d134
mov dword [ebp - 0x1528], 1
mov dword [ebp - 0x152c], 1
mov dword [ebp - 0x1530], 2
mov dword [ebp - 0x1534], 0
mov dword [ebp - 0x1538], 0
jmp 0x42d177
mov edx, dword [ebp - 0x1538]
add edx, 1
mov dword [ebp - 0x1538], edx
cmp dword [ebp - 0x1538], 2
jge 0x42d1b8
mov eax, dword [ebp - 0x1528]
add eax, dword [ebp - 0x152c]
mov dword [ebp - 0x1530], eax
mov ecx, dword [ebp - 0x152c]
mov dword [ebp - 0x1528], ecx
mov edx, dword [ebp - 0x1530]
mov dword [ebp - 0x152c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1530]
mov dword [ebp - 0x1c], eax
jmp 0x42d168
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x3c]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret