Function at 0x439b50
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47dda0
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff66c
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x50], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov eax, 1
test eax, eax
je 0x439bbe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x439bb3
jmp 0x439bbe
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
jmp 0x439b8d
mov eax, dword [ebp - 0x1c]
add eax, 0x32
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
mov ecx, 1
test ecx, ecx
je 0x439c09
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x439bf4
jmp 0x439c09
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
jmp 0x439bce
mov ecx, dword [ebp - 0x1c]
add ecx, 0x3a
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], 0
mov edx, 1
test edx, edx
je 0x439c54
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x439c3f
jmp 0x439c54
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x439c19
mov ecx, dword [ebp - 0x1c]
add ecx, 0xc
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], 0
mov edx, 1
test edx, edx
je 0x439c9f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x439c8a
jmp 0x439c9f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
jmp 0x439c64
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x439cd9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x439cce
jmp 0x439cd9
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
jmp 0x439ca8
mov eax, dword [ebp - 0x1c]
add eax, 0xa
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x40], 0
mov ecx, 1
test ecx, ecx
je 0x439d24
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x439d0f
jmp 0x439d24
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
jmp 0x439ce9
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x48], 0
jmp 0x439d3f
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0xf
jge 0x439d83
cmp dword [ebp - 0x1c], 0
jge 0x439d53
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439d69
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4c], 0xfa
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x248]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x439d36
mov dword [ebp - 0x24c], 0
jmp 0x439d9e
mov ecx, dword [ebp - 0x24c]
add ecx, 1
mov dword [ebp - 0x24c], ecx
cmp dword [ebp - 0x24c], 5
jge 0x439deb
cmp dword [ebp - 0x1c], 0
jge 0x439db5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439dcb
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x250], 0xfa
lea edx, [ebp - 0x250]
push edx
lea eax, [ebp - 0x448]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x439d8f
mov dword [ebp - 0x44c], 0
jmp 0x439e06
mov ecx, dword [ebp - 0x44c]
add ecx, 1
mov dword [ebp - 0x44c], ecx
cmp dword [ebp - 0x44c], 2
jge 0x439e1d
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x44c]
mov dword [ebp - 0x1c], edx
jmp 0x439df7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x439e2f
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x439e47
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x450], 0
mov edx, 1
test edx, edx
je 0x439e9b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x439e7d
jmp 0x439e9b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x450]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x450]
add eax, 1
mov dword [ebp - 0x450], eax
jmp 0x439e51
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x458], 0
jmp 0x439ebf
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 6
jge 0x439ef6
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x458]
mov dword [ebp - 0x1c], eax
jge 0x439ede
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439ef4
mov dword [ebp - 0x1c], 0
jmp 0x439eb0
mov edx, 1
test edx, edx
je 0x439f30
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x45c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x439f22
jmp 0x439f30
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x45c]
mov dword [ebp - 0x1c], edx
jmp 0x439ef6
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x460], 0
mov ecx, 1
test ecx, ecx
je 0x439f8d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x464]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x439f6f
jmp 0x439f8d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x460]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x460]
add eax, 1
mov dword [ebp - 0x460], eax
jmp 0x439f43
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x468], 0
jmp 0x439fae
mov edx, dword [ebp - 0x468]
add edx, 1
mov dword [ebp - 0x468], edx
cmp dword [ebp - 0x468], 5
jge 0x439fe5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x468]
mov dword [ebp - 0x1c], eax
jge 0x439fcd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439fe3
mov dword [ebp - 0x1c], 0
jmp 0x439f9f
mov dword [ebp - 0x46c], 0
jmp 0x43a000
mov edx, dword [ebp - 0x46c]
add edx, 1
mov dword [ebp - 0x46c], edx
cmp dword [ebp - 0x46c], 2
jge 0x43a017
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1c], eax
jmp 0x439ff1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a029
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a041
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x43a07b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43a06d
jmp 0x43a07b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x470]
mov dword [ebp - 0x1c], edx
jmp 0x43a041
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x474], 0
jmp 0x43a09c
mov ecx, dword [ebp - 0x474]
add ecx, 1
mov dword [ebp - 0x474], ecx
cmp dword [ebp - 0x474], 1
jge 0x43a0b3
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x474]
mov dword [ebp - 0x1c], edx
jmp 0x43a08d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a0c5
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a0dd
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x478], 0
mov edx, 1
test edx, edx
je 0x43a131
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43a113
jmp 0x43a131
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x478]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x478]
add eax, 1
mov dword [ebp - 0x478], eax
jmp 0x43a0e7
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x480], 0
jmp 0x43a155
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 0
jge 0x43a16c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x480]
mov dword [ebp - 0x1c], eax
jmp 0x43a146
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a17e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a196
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x484], 1
mov dword [ebp - 0x488], 1
mov dword [ebp - 0x48c], 2
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x494], 0
jmp 0x43a1d9
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 2
jge 0x43a21a
mov eax, dword [ebp - 0x484]
add eax, dword [ebp - 0x488]
mov dword [ebp - 0x48c], eax
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x484], ecx
mov edx, dword [ebp - 0x48c]
mov dword [ebp - 0x488], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x48c]
mov dword [ebp - 0x1c], eax
jmp 0x43a1ca
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x43a25d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43a24f
jmp 0x43a25d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x498]
mov dword [ebp - 0x1c], edx
jmp 0x43a223
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x49c], 0
jmp 0x43a281
mov ecx, dword [ebp - 0x49c]
add ecx, 1
mov dword [ebp - 0x49c], ecx
cmp dword [ebp - 0x49c], 2
jge 0x43a298
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x49c]
mov dword [ebp - 0x1c], edx
jmp 0x43a272
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a2aa
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a2c2
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4a0], 0
jmp 0x43a2dd
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x4a0], edx
cmp dword [ebp - 0x4a0], 4
jge 0x43a2f4
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x1c], eax
jmp 0x43a2ce
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a306
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a31e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x4a4], 0
jmp 0x43a340
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
cmp dword [ebp - 0x4a4], 3
jge 0x43a37b
mov eax, dword [ebp - 0x4a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a36f
mov eax, dword [ebp - 0x4a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a376
and eax, 0xbc614e
jmp 0x43a379
mov dword [ebp - 0x1c], eax
jmp 0x43a331
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a389
jmp 0x43a391
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 0x4ac], 1
mov dword [ebp - 0x4b0], 2
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4b8], 0
jmp 0x43a3d4
mov edx, dword [ebp - 0x4b8]
add edx, 1
mov dword [ebp - 0x4b8], edx
cmp dword [ebp - 0x4b8], 4
jge 0x43a415
mov eax, dword [ebp - 0x4a8]
add eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x4b0], eax
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp - 0x4a8], ecx
mov edx, dword [ebp - 0x4b0]
mov dword [ebp - 0x4ac], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x1c], eax
jmp 0x43a3c5
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4bc], 0
jmp 0x43a439
mov edx, dword [ebp - 0x4bc]
add edx, 1
mov dword [ebp - 0x4bc], edx
cmp dword [ebp - 0x4bc], 2
jge 0x43a450
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x1c], eax
jmp 0x43a42a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a462
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a47a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x4c0], 0
jmp 0x43a49c
mov edx, dword [ebp - 0x4c0]
add edx, 1
mov dword [ebp - 0x4c0], edx
cmp dword [ebp - 0x4c0], 0
jge 0x43a4d7
mov eax, dword [ebp - 0x4c0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a4cb
mov eax, dword [ebp - 0x4c0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a4d2
and eax, 0xbc614e
jmp 0x43a4d5
mov dword [ebp - 0x1c], eax
jmp 0x43a48d
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a4e5
jmp 0x43a4ed
mov dword [ebp - 0x4c4], 0
mov edx, 1
test edx, edx
je 0x43a541
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x4c8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43a523
jmp 0x43a541
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4c4]
add eax, 1
mov dword [ebp - 0x4c4], eax
jmp 0x43a4f7
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4cc], 0
mov edx, 1
test edx, edx
je 0x43a59b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4d0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43a57d
jmp 0x43a59b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4cc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4cc]
add eax, 1
mov dword [ebp - 0x4cc], eax
jmp 0x43a551
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4d4], 0
jmp 0x43a5bf
mov edx, dword [ebp - 0x4d4]
add edx, 1
mov dword [ebp - 0x4d4], edx
cmp dword [ebp - 0x4d4], 1
jge 0x43a5d6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x1c], eax
jmp 0x43a5b0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43a5e8
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43a600
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4d8], 0
mov edx, 1
test edx, edx
je 0x43a654
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x4dc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43a636
jmp 0x43a654
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4d8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4d8]
add eax, 1
mov dword [ebp - 0x4d8], eax
jmp 0x43a60a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4e0], 0
jmp 0x43a678
mov edx, dword [ebp - 0x4e0]
add edx, 1
mov dword [ebp - 0x4e0], edx
cmp dword [ebp - 0x4e0], 4
jge 0x43a6af
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x1c], eax
jge 0x43a697
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43a6ad
mov dword [ebp - 0x1c], 0
jmp 0x43a669
mov dword [ebp - 0x4e4], 0
mov edx, 1
test edx, edx
je 0x43a703
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43a6e5
jmp 0x43a703
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4e4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4e4]
add eax, 1
mov dword [ebp - 0x4e4], eax
jmp 0x43a6b9
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4ec], 1
mov dword [ebp - 0x4f0], 1
mov dword [ebp - 0x4f4], 2
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4fc], 0
jmp 0x43a74c
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
cmp dword [ebp - 0x4fc], 3
jge 0x43a78d
mov eax, dword [ebp - 0x4ec]
add eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4f4]
mov dword [ebp - 0x4f0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x1c], eax
jmp 0x43a73d
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x500], 0
jmp 0x43a7b8
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
cmp dword [ebp - 0x500], 1
jge 0x43a7f3
mov eax, dword [ebp - 0x500]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a7e7
mov eax, dword [ebp - 0x500]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a7ee
and eax, 0xbc614e
jmp 0x43a7f1
mov dword [ebp - 0x1c], eax
jmp 0x43a7a9
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a801
jmp 0x43a809
mov dword [ebp - 0x504], 1
mov dword [ebp - 0x508], 1
mov dword [ebp - 0x50c], 2
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x514], 0
jmp 0x43a84c
mov edx, dword [ebp - 0x514]
add edx, 1
mov dword [ebp - 0x514], edx
cmp dword [ebp - 0x514], 4
jge 0x43a88d
mov eax, dword [ebp - 0x504]
add eax, dword [ebp - 0x508]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x504], ecx
mov edx, dword [ebp - 0x50c]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x50c]
mov dword [ebp - 0x1c], eax
jmp 0x43a83d
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x518], 0
jmp 0x43a8b8
mov edx, dword [ebp - 0x518]
add edx, 1
mov dword [ebp - 0x518], edx
cmp dword [ebp - 0x518], 3
jge 0x43a8f3
mov eax, dword [ebp - 0x518]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43a8e7
mov eax, dword [ebp - 0x518]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43a8ee
and eax, 0xbc614e
jmp 0x43a8f1
mov dword [ebp - 0x1c], eax
jmp 0x43a8a9
mov dword [ebp - 4], 0xfffffffe
call fcn.0043a901
jmp 0x43a909
mov dword [ebp - 0x51c], 0
jmp 0x43a924
mov edx, dword [ebp - 0x51c]
add edx, 1
mov dword [ebp - 0x51c], edx
cmp dword [ebp - 0x51c], 4
jge 0x43a95b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x51c]
mov dword [ebp - 0x1c], eax
jge 0x43a943
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43a959
mov dword [ebp - 0x1c], 0
jmp 0x43a915
mov dword [ebp - 0x520], 0
mov edx, 1
test edx, edx
je 0x43a9af
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43a991
jmp 0x43a9af
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x520]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x520]
add eax, 1
mov dword [ebp - 0x520], eax
jmp 0x43a965
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x528], 0
jmp 0x43a9da
mov edx, dword [ebp - 0x528]
add edx, 1
mov dword [ebp - 0x528], edx
cmp dword [ebp - 0x528], 4
jge 0x43aa15
mov eax, dword [ebp - 0x528]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43aa09
mov eax, dword [ebp - 0x528]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43aa10
and eax, 0xbc614e
jmp 0x43aa13
mov dword [ebp - 0x1c], eax
jmp 0x43a9cb
mov dword [ebp - 4], 0xfffffffe
call fcn.0043aa23
jmp 0x43aa2b
mov dword [ebp - 4], 5
mov dword [ebp - 0x52c], 0
jmp 0x43aa4d
mov edx, dword [ebp - 0x52c]
add edx, 1
mov dword [ebp - 0x52c], edx
cmp dword [ebp - 0x52c], 4
jge 0x43aa88
mov eax, dword [ebp - 0x52c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43aa7c
mov eax, dword [ebp - 0x52c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43aa83
and eax, 0xbc614e
jmp 0x43aa86
mov dword [ebp - 0x1c], eax
jmp 0x43aa3e
mov dword [ebp - 4], 0xfffffffe
call fcn.0043aa96
jmp 0x43aa9e
mov dword [ebp - 0x530], 0
jmp 0x43aab9
mov edx, dword [ebp - 0x530]
add edx, 1
mov dword [ebp - 0x530], edx
cmp dword [ebp - 0x530], 4
jge 0x43aaf0
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x530]
mov dword [ebp - 0x1c], eax
jge 0x43aad8
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43aaee
mov dword [ebp - 0x1c], 0
jmp 0x43aaaa
mov dword [ebp - 4], 6
mov dword [ebp - 0x534], 0
jmp 0x43ab12
mov edx, dword [ebp - 0x534]
add edx, 1
mov dword [ebp - 0x534], edx
cmp dword [ebp - 0x534], 3
jge 0x43ab4d
mov eax, dword [ebp - 0x534]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ab41
mov eax, dword [ebp - 0x534]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ab48
and eax, 0xbc614e
jmp 0x43ab4b
mov dword [ebp - 0x1c], eax
jmp 0x43ab03
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ab5b
jmp 0x43ab63
mov dword [ebp - 0x538], 1
mov dword [ebp - 0x53c], 1
mov dword [ebp - 0x540], 2
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x548], 0
jmp 0x43aba6
mov edx, dword [ebp - 0x548]
add edx, 1
mov dword [ebp - 0x548], edx
cmp dword [ebp - 0x548], 0
jge 0x43abe7
mov eax, dword [ebp - 0x538]
add eax, dword [ebp - 0x53c]
mov dword [ebp - 0x540], eax
mov ecx, dword [ebp - 0x53c]
mov dword [ebp - 0x538], ecx
mov edx, dword [ebp - 0x540]
mov dword [ebp - 0x53c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x540]
mov dword [ebp - 0x1c], eax
jmp 0x43ab97
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x54c], 0
jmp 0x43ac0f
mov edx, dword [ebp - 0x54c]
add edx, 1
mov dword [ebp - 0x54c], edx
cmp dword [ebp - 0x54c], 3
jge 0x43ac4a
mov eax, dword [ebp - 0x54c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ac3e
mov eax, dword [ebp - 0x54c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ac45
and eax, 0xbc614e
jmp 0x43ac48
mov dword [ebp - 0x1c], eax
jmp 0x43ac00
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ac58
jmp 0x43ac60
mov dword [ebp - 0x550], 0
mov edx, 1
test edx, edx
je 0x43acb4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43ac96
jmp 0x43acb4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x550]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x550]
add eax, 1
mov dword [ebp - 0x550], eax
jmp 0x43ac6a
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x558], 0
jmp 0x43acdf
mov edx, dword [ebp - 0x558]
add edx, 1
mov dword [ebp - 0x558], edx
cmp dword [ebp - 0x558], 3
jge 0x43ad1a
mov eax, dword [ebp - 0x558]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ad0e
mov eax, dword [ebp - 0x558]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ad15
and eax, 0xbc614e
jmp 0x43ad18
mov dword [ebp - 0x1c], eax
jmp 0x43acd0
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ad28
jmp 0x43ad30
mov dword [ebp - 0x55c], 0
jmp 0x43ad4b
mov edx, dword [ebp - 0x55c]
add edx, 1
mov dword [ebp - 0x55c], edx
cmp dword [ebp - 0x55c], 2
jge 0x43ad62
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x55c]
mov dword [ebp - 0x1c], eax
jmp 0x43ad3c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43ad74
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43ad8c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x560], 0
jmp 0x43ada7
mov edx, dword [ebp - 0x560]
add edx, 1
mov dword [ebp - 0x560], edx
cmp dword [ebp - 0x560], 4
jge 0x43adf4
cmp dword [ebp - 0x1c], 0
jge 0x43adbe
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43add4
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x564], 0xfa
lea edx, [ebp - 0x564]
push edx
lea eax, [ebp - 0x760]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43ad98
mov dword [ebp - 0x764], 0
mov ecx, 1
test ecx, ecx
je 0x43ae48
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43ae2a
jmp 0x43ae48
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x764]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x764]
add eax, 1
mov dword [ebp - 0x764], eax
jmp 0x43adfe
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x76c], 0
jmp 0x43ae6c
mov edx, dword [ebp - 0x76c]
add edx, 1
mov dword [ebp - 0x76c], edx
cmp dword [ebp - 0x76c], 4
jge 0x43aea3
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x76c]
mov dword [ebp - 0x1c], eax
jge 0x43ae8b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43aea1
mov dword [ebp - 0x1c], 0
jmp 0x43ae5d
mov dword [ebp - 4], 9
mov dword [ebp - 0x770], 0
jmp 0x43aec5
mov edx, dword [ebp - 0x770]
add edx, 1
mov dword [ebp - 0x770], edx
cmp dword [ebp - 0x770], 3
jge 0x43af00
mov eax, dword [ebp - 0x770]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43aef4
mov eax, dword [ebp - 0x770]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43aefb
and eax, 0xbc614e
jmp 0x43aefe
mov dword [ebp - 0x1c], eax
jmp 0x43aeb6
mov dword [ebp - 4], 0xfffffffe
call fcn.0043af0e
jmp 0x43af16
mov dword [ebp - 0x774], 0
mov edx, 1
test edx, edx
je 0x43af6a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43af4c
jmp 0x43af6a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x774]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x774]
add eax, 1
mov dword [ebp - 0x774], eax
jmp 0x43af20
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x77c], 0
jmp 0x43af8b
mov edx, dword [ebp - 0x77c]
add edx, 1
mov dword [ebp - 0x77c], edx
cmp dword [ebp - 0x77c], 4
jge 0x43afc2
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x77c]
mov dword [ebp - 0x1c], eax
jge 0x43afaa
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43afc0
mov dword [ebp - 0x1c], 0
jmp 0x43af7c
mov dword [ebp - 0x780], 0
mov edx, 1
test edx, edx
je 0x43b016
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x784]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43aff8
jmp 0x43b016
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x780]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x780]
add eax, 1
mov dword [ebp - 0x780], eax
jmp 0x43afcc
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x43b056
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x788]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43b048
jmp 0x43b056
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x788]
mov dword [ebp - 0x1c], edx
jmp 0x43b01c
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x43b099
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43b08b
jmp 0x43b099
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x78c]
mov dword [ebp - 0x1c], edx
jmp 0x43b05f
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x790], 0
jmp 0x43b0bd
mov ecx, dword [ebp - 0x790]
add ecx, 1
mov dword [ebp - 0x790], ecx
cmp dword [ebp - 0x790], 4
jge 0x43b10a
cmp dword [ebp - 0x1c], 0
jge 0x43b0d4
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43b0ea
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x794], 0xfa
lea edx, [ebp - 0x794]
push edx
lea eax, [ebp - 0x990]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43b0ae
mov dword [ebp - 0x994], 0
mov ecx, 1
test ecx, ecx
je 0x43b15e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x998]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43b140
jmp 0x43b15e
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x994]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x994]
add eax, 1
mov dword [ebp - 0x994], eax
jmp 0x43b114
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x99c], 0
jmp 0x43b182
mov edx, dword [ebp - 0x99c]
add edx, 1
mov dword [ebp - 0x99c], edx
cmp dword [ebp - 0x99c], 4
jge 0x43b1b9
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x99c]
mov dword [ebp - 0x1c], eax
jge 0x43b1a1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43b1b7
mov dword [ebp - 0x1c], 0
jmp 0x43b173
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x9a0], 0
jmp 0x43b1db
cmp dword [ebp - 0x9a0], 1
jge 0x43b216
mov eax, dword [ebp - 0x9a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b20a
mov eax, dword [ebp - 0x9a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b211
and eax, 0xbc614e
jmp 0x43b214
mov dword [ebp - 0x1c], eax
jmp 0x43b1cc
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b224
jmp 0x43b22c
mov dword [ebp - 0x9a4], 0
jmp 0x43b247
cmp dword [ebp - 0x9a4], 4
jge 0x43b27e