Function at 0x435390
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47dc20
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1784
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x4353e6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x43542a
cmp dword [ebp - 0x1c], 0
jge 0x4353fa
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435410
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0xfa
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4353dd
mov dword [ebp - 0x224], 0
jmp 0x435445
mov ecx, dword [ebp - 0x224]
add ecx, 1
mov dword [ebp - 0x224], ecx
cmp dword [ebp - 0x224], 0x36
jge 0x43547c
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x224]
mov dword [ebp - 0x1c], edx
jge 0x435464
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43547a
mov dword [ebp - 0x1c], 0
jmp 0x435436
mov dword [ebp - 0x228], 0
mov edx, 1
test edx, edx
je 0x4354d0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4354b2
jmp 0x4354d0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x228]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x228]
add eax, 1
mov dword [ebp - 0x228], eax
jmp 0x435486
mov ecx, dword [ebp - 0x1c]
add ecx, 0x3f
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x234], 1
mov dword [ebp - 0x238], 2
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x240], 0
jmp 0x43551c
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0x23
jge 0x43555d
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0x234]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x230], ecx
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x234], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x238]
mov dword [ebp - 0x1c], eax
jmp 0x43550d
mov ecx, dword [ebp - 0x1c]
add ecx, 0x23
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4355a0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x435592
jmp 0x4355a0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x244]
mov dword [ebp - 0x1c], edx
jmp 0x435566
mov eax, dword [ebp - 0x1c]
add eax, 0xe
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x248], 0
jmp 0x4355c4
mov ecx, dword [ebp - 0x248]
add ecx, 1
mov dword [ebp - 0x248], ecx
cmp dword [ebp - 0x248], 2
jge 0x435611
cmp dword [ebp - 0x1c], 0
jge 0x4355db
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4355f1
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24c], 0xfa
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 0x448]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4355b5
mov ecx, 1
test ecx, ecx
je 0x43564b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43563d
jmp 0x43564b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x44c]
mov dword [ebp - 0x1c], edx
jmp 0x435611
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x43568e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x435680
jmp 0x43568e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x450]
mov dword [ebp - 0x1c], edx
jmp 0x435654
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x454], 1
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x45c], 2
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x464], 0
jmp 0x4356da
mov ecx, dword [ebp - 0x464]
add ecx, 1
mov dword [ebp - 0x464], ecx
cmp dword [ebp - 0x464], 4
jge 0x43571b
mov edx, dword [ebp - 0x454]
add edx, dword [ebp - 0x458]
mov dword [ebp - 0x45c], edx
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x454], eax
mov ecx, dword [ebp - 0x45c]
mov dword [ebp - 0x458], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x45c]
mov dword [ebp - 0x1c], edx
jmp 0x4356cb
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x468], 0
jmp 0x43573f
mov ecx, dword [ebp - 0x468]
add ecx, 1
mov dword [ebp - 0x468], ecx
cmp dword [ebp - 0x468], 8
jge 0x435776
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x468]
mov dword [ebp - 0x1c], edx
jge 0x43575e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435774
mov dword [ebp - 0x1c], 0
jmp 0x435730
mov dword [ebp - 0x46c], 0
jmp 0x435791
mov edx, dword [ebp - 0x46c]
add edx, 1
mov dword [ebp - 0x46c], edx
cmp dword [ebp - 0x46c], 6
jge 0x4357c8
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1c], eax
jge 0x4357b0
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4357c6
mov dword [ebp - 0x1c], 0
jmp 0x435782
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x478], 2
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x480], 0
jmp 0x43580b
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 0xf
jge 0x43584c
mov eax, dword [ebp - 0x470]
add eax, dword [ebp - 0x474]
mov dword [ebp - 0x478], eax
mov ecx, dword [ebp - 0x474]
mov dword [ebp - 0x470], ecx
mov edx, dword [ebp - 0x478]
mov dword [ebp - 0x474], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x478]
mov dword [ebp - 0x1c], eax
jmp 0x4357fc
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x484], 0
jmp 0x435870
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 8
jge 0x435887
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x484]
mov dword [ebp - 0x1c], eax
jmp 0x435861
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x435899
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4358b1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x488], 0
jmp 0x4358d3
mov edx, dword [ebp - 0x488]
add edx, 1
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 0
jge 0x43590e
mov eax, dword [ebp - 0x488]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x435902
mov eax, dword [ebp - 0x488]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x435909
and eax, 0xbc614e
jmp 0x43590c
mov dword [ebp - 0x1c], eax
jmp 0x4358c4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043591c
jmp 0x435924
mov dword [ebp - 0x48c], 0
jmp 0x43593f
mov edx, dword [ebp - 0x48c]
add edx, 1
mov dword [ebp - 0x48c], edx
cmp dword [ebp - 0x48c], 6
jge 0x43598c
cmp dword [ebp - 0x1c], 0
jge 0x435956
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43596c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x490], 0xfa
lea edx, [ebp - 0x490]
push edx
lea eax, [ebp - 0x688]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x435930
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0x690], 1
mov dword [ebp - 0x694], 2
mov dword [ebp - 0x698], 0
mov dword [ebp - 0x69c], 0
jmp 0x4359cf
mov ecx, dword [ebp - 0x69c]
add ecx, 1
mov dword [ebp - 0x69c], ecx
cmp dword [ebp - 0x69c], 8
jge 0x435a10
mov edx, dword [ebp - 0x68c]
add edx, dword [ebp - 0x690]
mov dword [ebp - 0x694], edx
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x68c], eax
mov ecx, dword [ebp - 0x694]
mov dword [ebp - 0x690], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x694]
mov dword [ebp - 0x1c], edx
jmp 0x4359c0
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6a0], 0
jmp 0x435a34
mov ecx, dword [ebp - 0x6a0]
add ecx, 1
mov dword [ebp - 0x6a0], ecx
cmp dword [ebp - 0x6a0], 2
jge 0x435a81
cmp dword [ebp - 0x1c], 0
jge 0x435a4b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435a61
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6a4], 0xfa
lea edx, [ebp - 0x6a4]
push edx
lea eax, [ebp - 0x8a0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x435a25
mov dword [ebp - 4], 1
mov dword [ebp - 0x8a4], 0
jmp 0x435aa3
mov ecx, dword [ebp - 0x8a4]
add ecx, 1
mov dword [ebp - 0x8a4], ecx
cmp dword [ebp - 0x8a4], 5
jge 0x435ade
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x435ad2
mov eax, dword [ebp - 0x8a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x435ad9
and eax, 0xbc614e
jmp 0x435adc
mov dword [ebp - 0x1c], eax
jmp 0x435a94
mov dword [ebp - 4], 0xfffffffe
call fcn.00435aec
jmp 0x435af4
mov dword [ebp - 4], 2
mov dword [ebp - 0x8a8], 0
jmp 0x435b16
mov edx, dword [ebp - 0x8a8]
add edx, 1
mov dword [ebp - 0x8a8], edx
cmp dword [ebp - 0x8a8], 1
jge 0x435b51
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x435b45
mov eax, dword [ebp - 0x8a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x435b4c
and eax, 0xbc614e
jmp 0x435b4f
mov dword [ebp - 0x1c], eax
jmp 0x435b07
mov dword [ebp - 4], 0xfffffffe
call fcn.00435b5f
jmp 0x435b67
mov dword [ebp - 0x8ac], 0
jmp 0x435b82
mov edx, dword [ebp - 0x8ac]
add edx, 1
mov dword [ebp - 0x8ac], edx
cmp dword [ebp - 0x8ac], 3
jge 0x435b99
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x1c], eax
jmp 0x435b73
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x435bab
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x435bc3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8b0], 0
mov edx, 1
test edx, edx
je 0x435c17
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp - 0x8b4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x435bf9
jmp 0x435c17
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x8b0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x8b0]
add eax, 1
mov dword [ebp - 0x8b0], eax
jmp 0x435bcd
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8b8], 0
jmp 0x435c3b
mov edx, dword [ebp - 0x8b8]
add edx, 1
mov dword [ebp - 0x8b8], edx
cmp dword [ebp - 0x8b8], 2
jge 0x435c88
cmp dword [ebp - 0x1c], 0
jge 0x435c52
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435c68
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8bc], 0xfa
lea edx, [ebp - 0x8bc]
push edx
lea eax, [ebp - 0xab8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x435c2c
mov ecx, 1
test ecx, ecx
je 0x435cc2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0xabc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x435cb4
jmp 0x435cc2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xabc]
mov dword [ebp - 0x1c], edx
jmp 0x435c88
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xac0], 0
jmp 0x435ce6
mov ecx, dword [ebp - 0xac0]
add ecx, 1
mov dword [ebp - 0xac0], ecx
cmp dword [ebp - 0xac0], 3
jge 0x435d33
cmp dword [ebp - 0x1c], 0
jge 0x435cfd
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435d13
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xac4], 0xfa
lea edx, [ebp - 0xac4]
push edx
lea eax, [ebp - 0xcc0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x435cd7
mov dword [ebp - 0xcc4], 0
mov ecx, 1
test ecx, ecx
je 0x435d87
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcc8], eax
mov eax, dword [ebp - 0xcc8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x435d69
jmp 0x435d87
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xcc4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xcc4]
add eax, 1
mov dword [ebp - 0xcc4], eax
jmp 0x435d3d
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xccc], 0
jmp 0x435dab
mov edx, dword [ebp - 0xccc]
add edx, 1
mov dword [ebp - 0xccc], edx
cmp dword [ebp - 0xccc], 1
jge 0x435dc2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xccc]
mov dword [ebp - 0x1c], eax
jmp 0x435d9c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x435dd4
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x435dec
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcd0], 0
jmp 0x435e07
mov edx, dword [ebp - 0xcd0]
add edx, 1
mov dword [ebp - 0xcd0], edx
cmp dword [ebp - 0xcd0], 3
jge 0x435e54
cmp dword [ebp - 0x1c], 0
jge 0x435e1e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435e34
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xcd4], 0xfa
lea edx, [ebp - 0xcd4]
push edx
lea eax, [ebp - 0xed0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x435df8
mov dword [ebp - 0xed4], 0
jmp 0x435e6f
mov ecx, dword [ebp - 0xed4]
add ecx, 1
mov dword [ebp - 0xed4], ecx
cmp dword [ebp - 0xed4], 8
jge 0x435ea6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xed4]
mov dword [ebp - 0x1c], edx
jge 0x435e8e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435ea4
mov dword [ebp - 0x1c], 0
jmp 0x435e60
mov edx, 1
test edx, edx
je 0x435ee0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xed8], eax
mov eax, dword [ebp - 0xed8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x435ed2
jmp 0x435ee0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xed8]
mov dword [ebp - 0x1c], edx
jmp 0x435ea6
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xedc], 0
jmp 0x435f04
mov ecx, dword [ebp - 0xedc]
add ecx, 1
mov dword [ebp - 0xedc], ecx
cmp dword [ebp - 0xedc], 2
jge 0x435f3b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xedc]
mov dword [ebp - 0x1c], edx
jge 0x435f23
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x435f39
mov dword [ebp - 0x1c], 0
jmp 0x435ef5
mov dword [ebp - 0xee0], 1
mov dword [ebp - 0xee4], 1
mov dword [ebp - 0xee8], 2
mov dword [ebp - 0xeec], 0
mov dword [ebp - 0xef0], 0
jmp 0x435f7e
mov edx, dword [ebp - 0xef0]
add edx, 1
mov dword [ebp - 0xef0], edx
cmp dword [ebp - 0xef0], 8
jge 0x435fbf
mov eax, dword [ebp - 0xee0]
add eax, dword [ebp - 0xee4]
mov dword [ebp - 0xee8], eax
mov ecx, dword [ebp - 0xee4]
mov dword [ebp - 0xee0], ecx
mov edx, dword [ebp - 0xee8]
mov dword [ebp - 0xee4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xee8]
mov dword [ebp - 0x1c], eax
jmp 0x435f6f
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0xef4], 0
jmp 0x435fea
mov edx, dword [ebp - 0xef4]
add edx, 1
mov dword [ebp - 0xef4], edx
cmp dword [ebp - 0xef4], 5
jge 0x436025
mov eax, dword [ebp - 0xef4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x436019
mov eax, dword [ebp - 0xef4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x436020
and eax, 0xbc614e
jmp 0x436023
mov dword [ebp - 0x1c], eax
jmp 0x435fdb
mov dword [ebp - 4], 0xfffffffe
call fcn.00436033
jmp 0x43603b
mov dword [ebp - 4], 4
mov dword [ebp - 0xef8], 0
jmp 0x43605d
mov edx, dword [ebp - 0xef8]
add edx, 1
mov dword [ebp - 0xef8], edx
cmp dword [ebp - 0xef8], 7
jge 0x436098
mov eax, dword [ebp - 0xef8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43608c
mov eax, dword [ebp - 0xef8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x436093
and eax, 0xbc614e
jmp 0x436096
mov dword [ebp - 0x1c], eax
jmp 0x43604e
mov dword [ebp - 4], 0xfffffffe
call fcn.004360a6
jmp 0x4360ae
mov dword [ebp - 0xefc], 0
jmp 0x4360c9
mov edx, dword [ebp - 0xefc]
add edx, 1
mov dword [ebp - 0xefc], edx
cmp dword [ebp - 0xefc], 0
jge 0x436116
cmp dword [ebp - 0x1c], 0
jge 0x4360e0
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4360f6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf00], 0xfa
lea edx, [ebp - 0xf00]
push edx
lea eax, [ebp - 0x10f8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4360ba
mov dword [ebp - 0x10fc], 0
mov ecx, 1
test ecx, ecx
je 0x43616a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1100], eax
mov eax, dword [ebp - 0x1100]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43614c
jmp 0x43616a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x10fc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10fc]
add eax, 1
mov dword [ebp - 0x10fc], eax
jmp 0x436120
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1104], 0
jmp 0x43618e
mov edx, dword [ebp - 0x1104]
add edx, 1
mov dword [ebp - 0x1104], edx
cmp dword [ebp - 0x1104], 5
jge 0x4361db
cmp dword [ebp - 0x1c], 0
jge 0x4361a5
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4361bb
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1108], 0xfa
lea edx, [ebp - 0x1108]
push edx
lea eax, [ebp - 0x1300]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43617f
mov dword [ebp - 0x1304], 0
jmp 0x4361f6
mov ecx, dword [ebp - 0x1304]
add ecx, 1
mov dword [ebp - 0x1304], ecx
cmp dword [ebp - 0x1304], 6
jge 0x43622d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1304]
mov dword [ebp - 0x1c], edx
jge 0x436215
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43622b
mov dword [ebp - 0x1c], 0
jmp 0x4361e7
mov dword [ebp - 0x1308], 1
mov dword [ebp - 0x130c], 1
mov dword [ebp - 0x1310], 2
mov dword [ebp - 0x1314], 0
mov dword [ebp - 0x1318], 0
jmp 0x436270
mov edx, dword [ebp - 0x1318]
add edx, 1
mov dword [ebp - 0x1318], edx
cmp dword [ebp - 0x1318], 6
jge 0x4362b1
mov eax, dword [ebp - 0x1308]
add eax, dword [ebp - 0x130c]
mov dword [ebp - 0x1310], eax
mov ecx, dword [ebp - 0x130c]
mov dword [ebp - 0x1308], ecx
mov edx, dword [ebp - 0x1310]
mov dword [ebp - 0x130c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1310]
mov dword [ebp - 0x1c], eax
jmp 0x436261
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x131c], 0
jmp 0x4362d5
mov edx, dword [ebp - 0x131c]
add edx, 1
mov dword [ebp - 0x131c], edx
cmp dword [ebp - 0x131c], 2
jge 0x43630c
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x131c]
mov dword [ebp - 0x1c], eax
jge 0x4362f4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43630a
mov dword [ebp - 0x1c], 0
jmp 0x4362c6
mov dword [ebp - 0x1320], 0
jmp 0x436327
mov edx, dword [ebp - 0x1320]
add edx, 1
mov dword [ebp - 0x1320], edx
cmp dword [ebp - 0x1320], 2
jge 0x43635e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1320]
mov dword [ebp - 0x1c], eax
jge 0x436346
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43635c
mov dword [ebp - 0x1c], 0
jmp 0x436318
mov dword [ebp - 4], 5
mov dword [ebp - 0x1324], 0
jmp 0x436380
mov edx, dword [ebp - 0x1324]
add edx, 1
mov dword [ebp - 0x1324], edx
cmp dword [ebp - 0x1324], 5
jge 0x4363bb
mov eax, dword [ebp - 0x1324]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4363af
mov eax, dword [ebp - 0x1324]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4363b6
and eax, 0xbc614e
jmp 0x4363b9
mov dword [ebp - 0x1c], eax
jmp 0x436371
mov dword [ebp - 4], 0xfffffffe
call fcn.004363c9
jmp 0x4363d1
mov dword [ebp - 0x1328], 0
mov edx, 1
test edx, edx
je 0x436425
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x132c], eax
mov eax, dword [ebp - 0x132c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x436407
jmp 0x436425
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1328]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1328]
add eax, 1
mov dword [ebp - 0x1328], eax
jmp 0x4363db
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1330], 0
jmp 0x436449
mov edx, dword [ebp - 0x1330]
add edx, 1
mov dword [ebp - 0x1330], edx
cmp dword [ebp - 0x1330], 8
jge 0x436480
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1330]
mov dword [ebp - 0x1c], eax
jge 0x436468
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43647e
mov dword [ebp - 0x1c], 0
jmp 0x43643a
mov edx, 1
test edx, edx
je 0x4364ba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1334], eax
mov eax, dword [ebp - 0x1334]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4364ac
jmp 0x4364ba
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1334]
mov dword [ebp - 0x1c], edx
jmp 0x436480
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1338], 0
jmp 0x4364de
mov ecx, dword [ebp - 0x1338]
add ecx, 1
mov dword [ebp - 0x1338], ecx
cmp dword [ebp - 0x1338], 3
jge 0x43652b
cmp dword [ebp - 0x1c], 0
jge 0x4364f5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43650b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x133c], 0xfa
lea edx, [ebp - 0x133c]
push edx
lea eax, [ebp - 0x1538]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4364cf
mov dword [ebp - 0x153c], 1
mov dword [ebp - 0x1540], 1
mov dword [ebp - 0x1544], 2
mov dword [ebp - 0x1548], 0
mov dword [ebp - 0x154c], 0
jmp 0x43656e
mov ecx, dword [ebp - 0x154c]
add ecx, 1
mov dword [ebp - 0x154c], ecx
cmp dword [ebp - 0x154c], 1
jge 0x4365af
mov edx, dword [ebp - 0x153c]
add edx, dword [ebp - 0x1540]
mov dword [ebp - 0x1544], edx
mov eax, dword [ebp - 0x1540]
mov dword [ebp - 0x153c], eax
mov ecx, dword [ebp - 0x1544]
mov dword [ebp - 0x1540], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1544]
mov dword [ebp - 0x1c], edx
jmp 0x43655f
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1550], 0
jmp 0x4365d3
mov ecx, dword [ebp - 0x1550]
add ecx, 1
mov dword [ebp - 0x1550], ecx
cmp dword [ebp - 0x1550], 0
jge 0x43660a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1550]
mov dword [ebp - 0x1c], edx
jge 0x4365f2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x436608
mov dword [ebp - 0x1c], 0
jmp 0x4365c4
mov dword [ebp - 0x1554], 0
jmp 0x436625
mov edx, dword [ebp - 0x1554]
add edx, 1
mov dword [ebp - 0x1554], edx
cmp dword [ebp - 0x1554], 3
jge 0x43665c
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1554]
mov dword [ebp - 0x1c], eax
jge 0x436644
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43665a
mov dword [ebp - 0x1c], 0
jmp 0x436616
mov dword [ebp - 0x1558], 0
jmp 0x436677
mov edx, dword [ebp - 0x1558]
add edx, 1
mov dword [ebp - 0x1558], edx
cmp dword [ebp - 0x1558], 0
jge 0x4366ae
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1558]
mov dword [ebp - 0x1c], eax
jge 0x436696
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4366ac
mov dword [ebp - 0x1c], 0
jmp 0x436668
mov dword [ebp - 4], 6
mov dword [ebp - 0x155c], 0
jmp 0x4366d0
mov edx, dword [ebp - 0x155c]
add edx, 1
mov dword [ebp - 0x155c], edx
cmp dword [ebp - 0x155c], 0
jge 0x43670b
mov eax, dword [ebp - 0x155c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4366ff
mov eax, dword [ebp - 0x155c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x436706
and eax, 0xbc614e
jmp 0x436709
mov dword [ebp - 0x1c], eax
jmp 0x4366c1
mov dword [ebp - 4], 0xfffffffe
call fcn.00436719
jmp 0x436721
mov edx, 1
test edx, edx
je 0x43675b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1560], eax
mov eax, dword [ebp - 0x1560]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43674d
jmp 0x43675b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1560]
mov dword [ebp - 0x1c], edx
jmp 0x436721
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1564], 1
mov dword [ebp - 0x1568], 1
mov dword [ebp - 0x156c], 2
mov dword [ebp - 0x1570], 0
mov dword [ebp - 0x1574], 0
jmp 0x4367a4
mov ecx, dword [ebp - 0x1574]
add ecx, 1
mov dword [ebp - 0x1574], ecx
cmp dword [ebp - 0x1574], 2
jge 0x4367e5
mov edx, dword [ebp - 0x1564]
add edx, dword [ebp - 0x1568]
mov dword [ebp - 0x156c], edx
mov eax, dword [ebp - 0x1568]
mov dword [ebp - 0x1564], eax
mov ecx, dword [ebp - 0x156c]
mov dword [ebp - 0x1568], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x156c]
mov dword [ebp - 0x1c], edx
jmp 0x436795
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1578], 1
mov dword [ebp - 0x157c], 1
mov dword [ebp - 0x1580], 2
mov dword [ebp - 0x1584], 0
mov dword [ebp - 0x1588], 0
jmp 0x436831
mov ecx, dword [ebp - 0x1588]
add ecx, 1
mov dword [ebp - 0x1588], ecx
cmp dword [ebp - 0x1588], 0
jge 0x436872
mov edx, dword [ebp - 0x1578]
add edx, dword [ebp - 0x157c]
mov dword [ebp - 0x1580], edx
mov eax, dword [ebp - 0x157c]
mov dword [ebp - 0x1578], eax
mov ecx, dword [ebp - 0x1580]
mov dword [ebp - 0x157c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1580]
mov dword [ebp - 0x1c], edx
jmp 0x436822
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x158c], 0
jmp 0x436893
mov ecx, dword [ebp - 0x158c]
add ecx, 1
mov dword [ebp - 0x158c], ecx
cmp dword [ebp - 0x158c], 0
jge 0x4368ca
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x158c]
mov dword [ebp - 0x1c], edx
jge 0x4368b2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4368c8
mov dword [ebp - 0x1c], 0
jmp 0x436884
mov dword [ebp - 0x1590], 0
jmp 0x4368e5
mov edx, dword [ebp - 0x1590]
add edx, 1
mov dword [ebp - 0x1590], edx
cmp dword [ebp - 0x1590], 4
jge 0x43691c
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1590]
mov dword [ebp - 0x1c], eax
jge 0x436904
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43691a
mov dword [ebp - 0x1c], 0
jmp 0x4368d6
mov dword [ebp - 0x1594], 0
jmp 0x436937
mov edx, dword [ebp - 0x1594]
add edx, 1
mov dword [ebp - 0x1594], edx
cmp dword [ebp - 0x1594], 1
jge 0x436984
cmp dword [ebp - 0x1c], 0
jge 0x43694e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x436964
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1598], 0xfa
lea edx, [ebp - 0x1598]
push edx
lea eax, [ebp - 0x1790]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x436928
mov dword [ebp - 4], 7
mov dword [ebp - 0x1794], 0
jmp 0x4369a6
mov ecx, dword [ebp - 0x1794]
add ecx, 1
mov dword [ebp - 0x1794], ecx
cmp dword [ebp - 0x1794], 3
jge 0x4369e1
mov eax, dword [ebp - 0x1794]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4369d5
mov eax, dword [ebp - 0x1794]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4369dc
and eax, 0xbc614e
jmp 0x4369df
mov dword [ebp - 0x1c], eax
jmp 0x436997
mov dword [ebp - 4], 0xfffffffe
call fcn.004369ef
jmp 0x4369f7
mov dword [ebp - 0x1798], 0
jmp 0x436a12
mov edx, dword [ebp - 0x1798]
add edx, 1
mov dword [ebp - 0x1798], edx
cmp dword [ebp - 0x1798], 3
jge 0x436a49
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1798]
mov dword [ebp - 0x1c], eax
jge 0x436a31
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x436a47
mov dword [ebp - 0x1c], 0
jmp 0x436a03
mov dword [ebp - 0x179c], 0
jmp 0x436a64
mov edx, dword [ebp - 0x179c]
add edx, 1
mov dword [ebp - 0x179c], edx
cmp dword [ebp - 0x179c], 4
jge 0x436a7b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x179c]
mov dword [ebp - 0x1c], eax
jmp 0x436a55
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x436a8d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x436aa5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x28]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret