Function at 0x42a730
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47d8f8
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1344
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x44], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov eax, 1
test eax, eax
je 0x42a7b6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42a7a1
jmp 0x42a7b6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x42a77b
mov ecx, dword [ebp - 0x1c]
add ecx, 0x17
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], 0
jmp 0x42a7d1
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xe
jge 0x42a802
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jge 0x42a7ea
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a800
mov dword [ebp - 0x1c], 0
jmp 0x42a7c8
mov dword [ebp - 0x2c], 0
mov edx, 1
test edx, edx
je 0x42a844
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42a82f
jmp 0x42a844
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x42a809
mov ecx, dword [ebp - 0x1c]
add ecx, 0x26
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], 0
mov edx, 1
test edx, edx
je 0x42a88f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42a87a
jmp 0x42a88f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
jmp 0x42a854
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], 0
jmp 0x42a8aa
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x11
jge 0x42a8ee
cmp dword [ebp - 0x1c], 0
jge 0x42a8be
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a8d4
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x40], 0xfa
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x240]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42a8a1
mov ecx, 1
test ecx, ecx
je 0x42a928
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42a91a
jmp 0x42a928
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x244]
mov dword [ebp - 0x1c], edx
jmp 0x42a8ee
mov eax, dword [ebp - 0x1c]
add eax, 0xf
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x248], 0
jmp 0x42a94c
mov ecx, dword [ebp - 0x248]
add ecx, 1
mov dword [ebp - 0x248], ecx
cmp dword [ebp - 0x248], 0x1c
jge 0x42a983
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x248]
mov dword [ebp - 0x1c], edx
jge 0x42a96b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a981
mov dword [ebp - 0x1c], 0
jmp 0x42a93d
mov dword [ebp - 0x24c], 0
jmp 0x42a99e
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 0x1d
jge 0x42a9d5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], eax
jge 0x42a9bd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42a9d3
mov dword [ebp - 0x1c], 0
jmp 0x42a98f
mov edx, 1
test edx, edx
je 0x42aa0f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42aa01
jmp 0x42aa0f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x250]
mov dword [ebp - 0x1c], edx
jmp 0x42a9d5
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x254], 0
jmp 0x42aa33
mov ecx, dword [ebp - 0x254]
add ecx, 1
mov dword [ebp - 0x254], ecx
cmp dword [ebp - 0x254], 5
jge 0x42aa4a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x254]
mov dword [ebp - 0x1c], edx
jmp 0x42aa24
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42aa5c
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42aa74
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x258], 0
jmp 0x42aa96
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 4
jge 0x42aad1
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42aac5
mov eax, dword [ebp - 0x258]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42aacc
and eax, 0xbc614e
jmp 0x42aacf
mov dword [ebp - 0x1c], eax
jmp 0x42aa87
mov dword [ebp - 4], 0xfffffffe
call fcn.0042aadf
jmp 0x42aae7
mov edx, 1
test edx, edx
je 0x42ab21
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42ab13
jmp 0x42ab21
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], edx
jmp 0x42aae7
mov eax, dword [ebp - 0x1c]
add eax, 0xd
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x270], 0
jmp 0x42ab6d
mov ecx, dword [ebp - 0x270]
add ecx, 1
mov dword [ebp - 0x270], ecx
cmp dword [ebp - 0x270], 1
jge 0x42abae
mov edx, dword [ebp - 0x260]
add edx, dword [ebp - 0x264]
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x268]
mov dword [ebp - 0x264], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x268]
mov dword [ebp - 0x1c], edx
jmp 0x42ab5e
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x42abf1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x274]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42abe3
jmp 0x42abf1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x274]
mov dword [ebp - 0x1c], edx
jmp 0x42abb7
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x288], 0
jmp 0x42ac3d
mov ecx, dword [ebp - 0x288]
add ecx, 1
mov dword [ebp - 0x288], ecx
cmp dword [ebp - 0x288], 9
jge 0x42ac7e
mov edx, dword [ebp - 0x278]
add edx, dword [ebp - 0x27c]
mov dword [ebp - 0x280], edx
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x280]
mov dword [ebp - 0x1c], edx
jmp 0x42ac2e
mov eax, dword [ebp - 0x1c]
add eax, 9
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28c], 0
jmp 0x42aca2
mov ecx, dword [ebp - 0x28c]
add ecx, 1
mov dword [ebp - 0x28c], ecx
cmp dword [ebp - 0x28c], 0x10
jge 0x42acef
cmp dword [ebp - 0x1c], 0
jge 0x42acb9
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42accf
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x290], 0xfa
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x488]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42ac93
mov dword [ebp - 0x48c], 0
mov ecx, 1
test ecx, ecx
je 0x42ad43
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42ad25
jmp 0x42ad43
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x48c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x48c]
add eax, 1
mov dword [ebp - 0x48c], eax
jmp 0x42acf9
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x494], 0
jmp 0x42ad67
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 2
jge 0x42ad9e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x494]
mov dword [ebp - 0x1c], eax
jge 0x42ad86
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ad9c
mov dword [ebp - 0x1c], 0
jmp 0x42ad58
mov dword [ebp - 4], 1
mov dword [ebp - 0x498], 0
jmp 0x42adc0
mov edx, dword [ebp - 0x498]
add edx, 1
mov dword [ebp - 0x498], edx
cmp dword [ebp - 0x498], 8
jge 0x42adfb
mov eax, dword [ebp - 0x498]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42adef
mov eax, dword [ebp - 0x498]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42adf6
and eax, 0xbc614e
jmp 0x42adf9
mov dword [ebp - 0x1c], eax
jmp 0x42adb1
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ae09
jmp 0x42ae11
mov dword [ebp - 0x49c], 0
jmp 0x42ae2c
mov edx, dword [ebp - 0x49c]
add edx, 1
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 4
jge 0x42ae63
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1c], eax
jge 0x42ae4b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ae61
mov dword [ebp - 0x1c], 0
jmp 0x42ae1d
mov edx, 1
test edx, edx
je 0x42ae9d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x4a0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42ae8f
jmp 0x42ae9d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4a0]
mov dword [ebp - 0x1c], edx
jmp 0x42ae63
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x42aee0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42aed2
jmp 0x42aee0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x1c], edx
jmp 0x42aea6
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 0x4ac], 1
mov dword [ebp - 0x4b0], 2
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4b8], 0
jmp 0x42af2c
mov ecx, dword [ebp - 0x4b8]
add ecx, 1
mov dword [ebp - 0x4b8], ecx
cmp dword [ebp - 0x4b8], 8
jge 0x42af6d
mov edx, dword [ebp - 0x4a8]
add edx, dword [ebp - 0x4ac]
mov dword [ebp - 0x4b0], edx
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x4a8], eax
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp - 0x4ac], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4b0]
mov dword [ebp - 0x1c], edx
jmp 0x42af1d
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x4bc], 0
jmp 0x42af98
mov ecx, dword [ebp - 0x4bc]
add ecx, 1
mov dword [ebp - 0x4bc], ecx
cmp dword [ebp - 0x4bc], 6
jge 0x42afd3
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42afc7
mov eax, dword [ebp - 0x4bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42afce
and eax, 0xbc614e
jmp 0x42afd1
mov dword [ebp - 0x1c], eax
jmp 0x42af89
mov dword [ebp - 4], 0xfffffffe
call fcn.0042afe1
jmp 0x42afe9
mov dword [ebp - 0x4c0], 0
mov edx, 1
test edx, edx
je 0x42b03d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4c4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42b01f
jmp 0x42b03d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4c0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4c0]
add eax, 1
mov dword [ebp - 0x4c0], eax
jmp 0x42aff3
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4c8], 0
jmp 0x42b061
mov edx, dword [ebp - 0x4c8]
add edx, 1
mov dword [ebp - 0x4c8], edx
cmp dword [ebp - 0x4c8], 4
jge 0x42b098
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x1c], eax
jge 0x42b080
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b096
mov dword [ebp - 0x1c], 0
jmp 0x42b052
mov dword [ebp - 0x4cc], 0
jmp 0x42b0b3
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
cmp dword [ebp - 0x4cc], 2
jge 0x42b100
cmp dword [ebp - 0x1c], 0
jge 0x42b0ca
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b0e0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4d0], 0xfa
lea edx, [ebp - 0x4d0]
push edx
lea eax, [ebp - 0x6c8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42b0a4
mov dword [ebp - 4], 3
mov dword [ebp - 0x6cc], 0
jmp 0x42b122
mov ecx, dword [ebp - 0x6cc]
add ecx, 1
mov dword [ebp - 0x6cc], ecx
cmp dword [ebp - 0x6cc], 0
jge 0x42b15d
mov eax, dword [ebp - 0x6cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42b151
mov eax, dword [ebp - 0x6cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42b158
and eax, 0xbc614e
jmp 0x42b15b
mov dword [ebp - 0x1c], eax
jmp 0x42b113
mov dword [ebp - 4], 0xfffffffe
call fcn.0042b16b
jmp 0x42b173
mov edx, 1
test edx, edx
je 0x42b1ad
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x6d0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42b19f
jmp 0x42b1ad
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6d0]
mov dword [ebp - 0x1c], edx
jmp 0x42b173
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6d4], 0
jmp 0x42b1d1
mov ecx, dword [ebp - 0x6d4]
add ecx, 1
mov dword [ebp - 0x6d4], ecx
cmp dword [ebp - 0x6d4], 0
jge 0x42b21e
cmp dword [ebp - 0x1c], 0
jge 0x42b1e8
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b1fe
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6d8], 0xfa
lea edx, [ebp - 0x6d8]
push edx
lea eax, [ebp - 0x8d0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42b1c2
mov dword [ebp - 0x8d4], 0
jmp 0x42b239
mov ecx, dword [ebp - 0x8d4]
add ecx, 1
mov dword [ebp - 0x8d4], ecx
cmp dword [ebp - 0x8d4], 4
jge 0x42b270
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x1c], edx
jge 0x42b258
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b26e
mov dword [ebp - 0x1c], 0
jmp 0x42b22a
mov dword [ebp - 4], 4
mov dword [ebp - 0x8d8], 0
jmp 0x42b292
mov edx, dword [ebp - 0x8d8]
add edx, 1
mov dword [ebp - 0x8d8], edx
cmp dword [ebp - 0x8d8], 3
jge 0x42b2cd
mov eax, dword [ebp - 0x8d8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42b2c1
mov eax, dword [ebp - 0x8d8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42b2c8
and eax, 0xbc614e
jmp 0x42b2cb
mov dword [ebp - 0x1c], eax
jmp 0x42b283
mov dword [ebp - 4], 0xfffffffe
call fcn.0042b2db
jmp 0x42b2e3
mov dword [ebp - 4], 5
mov dword [ebp - 0x8dc], 0
jmp 0x42b305
mov edx, dword [ebp - 0x8dc]
add edx, 1
mov dword [ebp - 0x8dc], edx
cmp dword [ebp - 0x8dc], 0
jge 0x42b340
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42b334
mov eax, dword [ebp - 0x8dc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42b33b
and eax, 0xbc614e
jmp 0x42b33e
mov dword [ebp - 0x1c], eax
jmp 0x42b2f6
mov dword [ebp - 4], 0xfffffffe
call fcn.0042b34e
jmp 0x42b356
mov dword [ebp - 4], 6
mov dword [ebp - 0x8e0], 0
jmp 0x42b378
mov edx, dword [ebp - 0x8e0]
add edx, 1
mov dword [ebp - 0x8e0], edx
cmp dword [ebp - 0x8e0], 0
jge 0x42b3b3
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42b3a7
mov eax, dword [ebp - 0x8e0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42b3ae
and eax, 0xbc614e
jmp 0x42b3b1
mov dword [ebp - 0x1c], eax
jmp 0x42b369
mov dword [ebp - 4], 0xfffffffe
call fcn.0042b3c1
jmp 0x42b3c9
mov edx, 1
test edx, edx
je 0x42b403
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x8e4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42b3f5
jmp 0x42b403
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8e4]
mov dword [ebp - 0x1c], edx
jmp 0x42b3c9
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x42b446
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x8e8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42b438
jmp 0x42b446
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8e8]
mov dword [ebp - 0x1c], edx
jmp 0x42b40c
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8ec], 0
jmp 0x42b46a
mov ecx, dword [ebp - 0x8ec]
add ecx, 1
mov dword [ebp - 0x8ec], ecx
cmp dword [ebp - 0x8ec], 3
jge 0x42b481
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x8ec]
mov dword [ebp - 0x1c], edx
jmp 0x42b45b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42b493
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42b4ab
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8f0], 0
jmp 0x42b4c6
mov edx, dword [ebp - 0x8f0]
add edx, 1
mov dword [ebp - 0x8f0], edx
cmp dword [ebp - 0x8f0], 2
jge 0x42b513
cmp dword [ebp - 0x1c], 0
jge 0x42b4dd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b4f3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8f4], 0xfa
lea edx, [ebp - 0x8f4]
push edx
lea eax, [ebp - 0xaf0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42b4b7
mov ecx, 1
test ecx, ecx
je 0x42b54d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xaf4], eax
mov eax, dword [ebp - 0xaf4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42b53f
jmp 0x42b54d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xaf4]
mov dword [ebp - 0x1c], edx
jmp 0x42b513
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0xaf8], 0
jmp 0x42b578
mov ecx, dword [ebp - 0xaf8]
add ecx, 1
mov dword [ebp - 0xaf8], ecx
cmp dword [ebp - 0xaf8], 3
jge 0x42b5b3
mov eax, dword [ebp - 0xaf8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42b5a7
mov eax, dword [ebp - 0xaf8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42b5ae
and eax, 0xbc614e
jmp 0x42b5b1
mov dword [ebp - 0x1c], eax
jmp 0x42b569
mov dword [ebp - 4], 0xfffffffe
call fcn.0042b5c1
jmp 0x42b5c9
mov edx, 1
test edx, edx
je 0x42b603
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp - 0xafc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42b5f5
jmp 0x42b603
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xafc]
mov dword [ebp - 0x1c], edx
jmp 0x42b5c9
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb00], 0
mov ecx, 1
test ecx, ecx
je 0x42b660
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb04], eax
mov eax, dword [ebp - 0xb04]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42b642
jmp 0x42b660
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb00]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb00]
add eax, 1
mov dword [ebp - 0xb00], eax
jmp 0x42b616
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb08], 0
jmp 0x42b684
mov edx, dword [ebp - 0xb08]
add edx, 1
mov dword [ebp - 0xb08], edx
cmp dword [ebp - 0xb08], 3
jge 0x42b6bb
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb08]
mov dword [ebp - 0x1c], eax
jge 0x42b6a3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b6b9
mov dword [ebp - 0x1c], 0
jmp 0x42b675
mov dword [ebp - 0xb0c], 0
jmp 0x42b6d6
mov edx, dword [ebp - 0xb0c]
add edx, 1
mov dword [ebp - 0xb0c], edx
cmp dword [ebp - 0xb0c], 0
jge 0x42b6ed
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xb0c]
mov dword [ebp - 0x1c], eax
jmp 0x42b6c7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42b6ff
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42b717
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 8
mov dword [ebp - 0xb10], 0
jmp 0x42b739
mov edx, dword [ebp - 0xb10]
add edx, 1
mov dword [ebp - 0xb10], edx
cmp dword [ebp - 0xb10], 3
jge 0x42b774
mov eax, dword [ebp - 0xb10]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42b768
mov eax, dword [ebp - 0xb10]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42b76f
and eax, 0xbc614e
jmp 0x42b772
mov dword [ebp - 0x1c], eax
jmp 0x42b72a
mov dword [ebp - 4], 0xfffffffe
call fcn.0042b782
jmp 0x42b78a
mov dword [ebp - 0xb14], 0
jmp 0x42b7a5
mov edx, dword [ebp - 0xb14]
add edx, 1
mov dword [ebp - 0xb14], edx
cmp dword [ebp - 0xb14], 1
jge 0x42b7dc
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb14]
mov dword [ebp - 0x1c], eax
jge 0x42b7c4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b7da
mov dword [ebp - 0x1c], 0
jmp 0x42b796
mov dword [ebp - 0xb18], 0
jmp 0x42b7f7
mov edx, dword [ebp - 0xb18]
add edx, 1
mov dword [ebp - 0xb18], edx
cmp dword [ebp - 0xb18], 2
jge 0x42b82e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb18]
mov dword [ebp - 0x1c], eax
jge 0x42b816
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b82c
mov dword [ebp - 0x1c], 0
jmp 0x42b7e8
mov dword [ebp - 0xb1c], 0
jmp 0x42b849
mov edx, dword [ebp - 0xb1c]
add edx, 1
mov dword [ebp - 0xb1c], edx
cmp dword [ebp - 0xb1c], 4
jge 0x42b880
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb1c]
mov dword [ebp - 0x1c], eax
jge 0x42b868
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b87e
mov dword [ebp - 0x1c], 0
jmp 0x42b83a
mov dword [ebp - 0xb20], 0
mov edx, 1
test edx, edx
je 0x42b8d4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0xb24]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42b8b6
jmp 0x42b8d4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb20]
add eax, 1
mov dword [ebp - 0xb20], eax
jmp 0x42b88a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x42b917
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp - 0xb28]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42b909
jmp 0x42b917
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xb28]
mov dword [ebp - 0x1c], edx
jmp 0x42b8dd
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb2c], 0
jmp 0x42b93b
mov ecx, dword [ebp - 0xb2c]
add ecx, 1
mov dword [ebp - 0xb2c], ecx
cmp dword [ebp - 0xb2c], 1
jge 0x42b972
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xb2c]
mov dword [ebp - 0x1c], edx
jge 0x42b95a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42b970
mov dword [ebp - 0x1c], 0
jmp 0x42b92c
mov dword [ebp - 0xb30], 0
mov edx, 1
test edx, edx
je 0x42b9c6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0xb34]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42b9a8
jmp 0x42b9c6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb30]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb30]
add eax, 1
mov dword [ebp - 0xb30], eax
jmp 0x42b97c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb38], 0
mov edx, 1
test edx, edx
je 0x42ba23
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0xb3c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42ba05
jmp 0x42ba23
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb38]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb38]
add eax, 1
mov dword [ebp - 0xb38], eax
jmp 0x42b9d9
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb40], 0
jmp 0x42ba44
mov edx, dword [ebp - 0xb40]
add edx, 1
mov dword [ebp - 0xb40], edx
cmp dword [ebp - 0xb40], 2
jge 0x42ba91
cmp dword [ebp - 0x1c], 0
jge 0x42ba5b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42ba71
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xb44], 0xfa
lea edx, [ebp - 0xb44]
push edx
lea eax, [ebp - 0xd40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42ba35
mov dword [ebp - 0xd44], 0
jmp 0x42baac
mov ecx, dword [ebp - 0xd44]
add ecx, 1
mov dword [ebp - 0xd44], ecx
cmp dword [ebp - 0xd44], 2
jge 0x42baf9
cmp dword [ebp - 0x1c], 0
jge 0x42bac3
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42bad9
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xd48], 0xfa
lea edx, [ebp - 0xd48]
push edx
lea eax, [ebp - 0xf40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42ba9d
mov dword [ebp - 0xf44], 0
jmp 0x42bb14
mov ecx, dword [ebp - 0xf44]
add ecx, 1
mov dword [ebp - 0xf44], ecx
cmp dword [ebp - 0xf44], 1
jge 0x42bb61
cmp dword [ebp - 0x1c], 0
jge 0x42bb2b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42bb41
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf48], 0xfa
lea edx, [ebp - 0xf48]
push edx
lea eax, [ebp - 0x1140]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42bb05
mov dword [ebp - 4], 9
mov dword [ebp - 0x1144], 0
jmp 0x42bb83
mov ecx, dword [ebp - 0x1144]
add ecx, 1
mov dword [ebp - 0x1144], ecx
cmp dword [ebp - 0x1144], 2
jge 0x42bbbe
mov eax, dword [ebp - 0x1144]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42bbb2
mov eax, dword [ebp - 0x1144]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42bbb9
and eax, 0xbc614e
jmp 0x42bbbc
mov dword [ebp - 0x1c], eax
jmp 0x42bb74
mov dword [ebp - 4], 0xfffffffe
call fcn.0042bbcc
jmp 0x42bbd4
mov dword [ebp - 0x1148], 0
jmp 0x42bbef
mov edx, dword [ebp - 0x1148]
add edx, 1
mov dword [ebp - 0x1148], edx
cmp dword [ebp - 0x1148], 2
jge 0x42bc3c
cmp dword [ebp - 0x1c], 0
jge 0x42bc06
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42bc1c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x114c], 0xfa
lea edx, [ebp - 0x114c]
push edx
lea eax, [ebp - 0x1348]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42bbe0
mov ecx, 1
test ecx, ecx
je 0x42bc76
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x134c], eax
mov eax, dword [ebp - 0x134c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42bc68
jmp 0x42bc76
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x134c]
mov dword [ebp - 0x1c], edx
jmp 0x42bc3c
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1350], 0
mov ecx, 1
test ecx, ecx
je 0x42bcd3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1354], eax
mov eax, dword [ebp - 0x1354]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42bcb5
jmp 0x42bcd3
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1350]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1350]
add eax, 1
mov dword [ebp - 0x1350], eax
jmp 0x42bc89
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1358], 0
jmp 0x42bcf7
mov edx, dword [ebp - 0x1358]
add edx, 1
mov dword [ebp - 0x1358], edx
cmp dword [ebp - 0x1358], 4
jge 0x42bd0e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1358]
mov dword [ebp - 0x1c], eax
jmp 0x42bce8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42bd20
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42bd38
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x42bd72
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x135c], eax
mov eax, dword [ebp - 0x135c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42bd64
jmp 0x42bd72
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x135c]
mov dword [ebp - 0x1c], edx
jmp 0x42bd38
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x44]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret