Function at 0x43b2a0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47de38
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1d88
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x50], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x43b2fd
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1d
jge 0x43b32f
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b323
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b32a
and eax, 0xbc614e
jmp 0x43b32d
mov dword [ebp - 0x1c], eax
jmp 0x43b2f4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b33d
jmp 0x43b345
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
jmp 0x43b373
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 5
jge 0x43b399
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x43b36a
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 0
jmp 0x43b3bb
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 4
jge 0x43b3ed
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b3e1
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b3e8
and eax, 0xbc614e
jmp 0x43b3eb
mov dword [ebp - 0x1c], eax
jmp 0x43b3b2
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b3fb
jmp 0x43b403
mov dword [ebp - 0x3c], 0
jmp 0x43b415
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 6
jge 0x43b426
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x43b40c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43b438
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43b450
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x40], 0
mov edx, 1
test edx, edx
je 0x43b492
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43b47d
jmp 0x43b492
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
jmp 0x43b457
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x48], 0
jmp 0x43b4ad
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 3
jge 0x43b4f1
cmp dword [ebp - 0x1c], 0
jge 0x43b4c1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43b4d7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4c], 0xfa
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x248]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43b4a4
mov dword [ebp - 0x24c], 0
mov ecx, 1
test ecx, ecx
je 0x43b545
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43b527
jmp 0x43b545
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24c]
add eax, 1
mov dword [ebp - 0x24c], eax
jmp 0x43b4fb
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x25c], 2
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x264], 0
jmp 0x43b591
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 0xa
jge 0x43b5d2
mov eax, dword [ebp - 0x254]
add eax, dword [ebp - 0x258]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x258]
mov dword [ebp - 0x254], ecx
mov edx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], eax
jmp 0x43b582
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x268], 0
jmp 0x43b5fd
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 0
jge 0x43b638
mov eax, dword [ebp - 0x268]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b62c
mov eax, dword [ebp - 0x268]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b633
and eax, 0xbc614e
jmp 0x43b636
mov dword [ebp - 0x1c], eax
jmp 0x43b5ee
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b646
jmp 0x43b64e
mov dword [ebp - 0x26c], 0
mov edx, 1
test edx, edx
je 0x43b6a2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43b684
jmp 0x43b6a2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x26c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x26c]
add eax, 1
mov dword [ebp - 0x26c], eax
jmp 0x43b658
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x274], 0
jmp 0x43b6cd
mov edx, dword [ebp - 0x274]
add edx, 1
mov dword [ebp - 0x274], edx
cmp dword [ebp - 0x274], 0xc
jge 0x43b708
mov eax, dword [ebp - 0x274]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b6fc
mov eax, dword [ebp - 0x274]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b703
and eax, 0xbc614e
jmp 0x43b706
mov dword [ebp - 0x1c], eax
jmp 0x43b6be
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b716
jmp 0x43b71e
mov dword [ebp - 0x278], 0
jmp 0x43b739
mov edx, dword [ebp - 0x278]
add edx, 1
mov dword [ebp - 0x278], edx
cmp dword [ebp - 0x278], 5
jge 0x43b786
cmp dword [ebp - 0x1c], 0
jge 0x43b750
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43b766
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x27c], 0xfa
lea edx, [ebp - 0x27c]
push edx
lea eax, [ebp - 0x478]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43b72a
mov dword [ebp - 4], 4
mov dword [ebp - 0x47c], 0
jmp 0x43b7a8
mov ecx, dword [ebp - 0x47c]
add ecx, 1
mov dword [ebp - 0x47c], ecx
cmp dword [ebp - 0x47c], 3
jge 0x43b7e3
mov eax, dword [ebp - 0x47c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b7d7
mov eax, dword [ebp - 0x47c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b7de
and eax, 0xbc614e
jmp 0x43b7e1
mov dword [ebp - 0x1c], eax
jmp 0x43b799
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b7f1
jmp 0x43b7f9
mov dword [ebp - 4], 5
mov dword [ebp - 0x480], 0
jmp 0x43b81b
mov edx, dword [ebp - 0x480]
add edx, 1
mov dword [ebp - 0x480], edx
cmp dword [ebp - 0x480], 6
jge 0x43b856
mov eax, dword [ebp - 0x480]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43b84a
mov eax, dword [ebp - 0x480]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43b851
and eax, 0xbc614e
jmp 0x43b854
mov dword [ebp - 0x1c], eax
jmp 0x43b80c
mov dword [ebp - 4], 0xfffffffe
call fcn.0043b864
jmp 0x43b86c
mov dword [ebp - 0x484], 0
jmp 0x43b887
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 0x10
jge 0x43b8be
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x484]
mov dword [ebp - 0x1c], eax
jge 0x43b8a6
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43b8bc
mov dword [ebp - 0x1c], 0
jmp 0x43b878
mov dword [ebp - 0x488], 0
mov edx, 1
test edx, edx
je 0x43b912
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x48c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43b8f4
jmp 0x43b912
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x488]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x488]
add eax, 1
mov dword [ebp - 0x488], eax
jmp 0x43b8c8
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x490], 0
jmp 0x43b936
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 7
jge 0x43b94d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x490]
mov dword [ebp - 0x1c], eax
jmp 0x43b927
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43b95f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43b977
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x494], 0
jmp 0x43b992
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 0
jge 0x43b9a9
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x494]
mov dword [ebp - 0x1c], eax
jmp 0x43b983
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43b9bb
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43b9d3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x498], 0
jmp 0x43b9ee
mov edx, dword [ebp - 0x498]
add edx, 1
mov dword [ebp - 0x498], edx
cmp dword [ebp - 0x498], 5
jge 0x43ba25
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x498]
mov dword [ebp - 0x1c], eax
jge 0x43ba0d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43ba23
mov dword [ebp - 0x1c], 0
jmp 0x43b9df
mov dword [ebp - 0x49c], 0
jmp 0x43ba40
mov edx, dword [ebp - 0x49c]
add edx, 1
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 4
jge 0x43ba77
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1c], eax
jge 0x43ba5f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43ba75
mov dword [ebp - 0x1c], 0
jmp 0x43ba31
mov dword [ebp - 0x4a0], 0
jmp 0x43ba92
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x4a0], edx
cmp dword [ebp - 0x4a0], 0
jge 0x43baa9
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x1c], eax
jmp 0x43ba83
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43babb
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43bad3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4a4], 0
jmp 0x43baee
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
cmp dword [ebp - 0x4a4], 8
jge 0x43bb05
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x1c], eax
jmp 0x43badf
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43bb17
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43bb2f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x4a8], 0
jmp 0x43bb51
mov edx, dword [ebp - 0x4a8]
add edx, 1
mov dword [ebp - 0x4a8], edx
cmp dword [ebp - 0x4a8], 2
jge 0x43bb8c
mov eax, dword [ebp - 0x4a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43bb80
mov eax, dword [ebp - 0x4a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43bb87
and eax, 0xbc614e
jmp 0x43bb8a
mov dword [ebp - 0x1c], eax
jmp 0x43bb42
mov dword [ebp - 4], 0xfffffffe
call fcn.0043bb9a
jmp 0x43bba2
mov dword [ebp - 0x4ac], 0
jmp 0x43bbbd
mov edx, dword [ebp - 0x4ac]
add edx, 1
mov dword [ebp - 0x4ac], edx
cmp dword [ebp - 0x4ac], 7
jge 0x43bc0a
cmp dword [ebp - 0x1c], 0
jge 0x43bbd4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43bbea
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4b0], 0xfa
lea edx, [ebp - 0x4b0]
push edx
lea eax, [ebp - 0x6a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43bbae
mov ecx, 1
test ecx, ecx
je 0x43bc44
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x6ac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43bc36
jmp 0x43bc44
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6ac]
mov dword [ebp - 0x1c], edx
jmp 0x43bc0a
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6b0], 0
jmp 0x43bc68
mov ecx, dword [ebp - 0x6b0]
add ecx, 1
mov dword [ebp - 0x6b0], ecx
cmp dword [ebp - 0x6b0], 1
jge 0x43bc9f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x6b0]
mov dword [ebp - 0x1c], edx
jge 0x43bc87
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43bc9d
mov dword [ebp - 0x1c], 0
jmp 0x43bc59
mov dword [ebp - 0x6b4], 0
jmp 0x43bcba
mov edx, dword [ebp - 0x6b4]
add edx, 1
mov dword [ebp - 0x6b4], edx
cmp dword [ebp - 0x6b4], 4
jge 0x43bd07
cmp dword [ebp - 0x1c], 0
jge 0x43bcd1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43bce7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6b8], 0xfa
lea edx, [ebp - 0x6b8]
push edx
lea eax, [ebp - 0x8b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43bcab
mov dword [ebp - 0x8b4], 0
jmp 0x43bd22
mov ecx, dword [ebp - 0x8b4]
add ecx, 1
mov dword [ebp - 0x8b4], ecx
cmp dword [ebp - 0x8b4], 4
jge 0x43bd6f
cmp dword [ebp - 0x1c], 0
jge 0x43bd39
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43bd4f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8b8], 0xfa
lea edx, [ebp - 0x8b8]
push edx
lea eax, [ebp - 0xab0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43bd13
mov dword [ebp - 0xab4], 0
jmp 0x43bd8a
mov ecx, dword [ebp - 0xab4]
add ecx, 1
mov dword [ebp - 0xab4], ecx
cmp dword [ebp - 0xab4], 7
jge 0x43bdc1
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xab4]
mov dword [ebp - 0x1c], edx
jge 0x43bda9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43bdbf
mov dword [ebp - 0x1c], 0
jmp 0x43bd7b
mov edx, 1
test edx, edx
je 0x43bdfb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xab8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43bded
jmp 0x43bdfb
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xab8]
mov dword [ebp - 0x1c], edx
jmp 0x43bdc1
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xabc], 0
jmp 0x43be1f
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
cmp dword [ebp - 0xabc], 2
jge 0x43be36
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xabc]
mov dword [ebp - 0x1c], edx
jmp 0x43be10
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43be48
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43be60
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xac0], 0
jmp 0x43be7b
mov edx, dword [ebp - 0xac0]
add edx, 1
mov dword [ebp - 0xac0], edx
cmp dword [ebp - 0xac0], 4
jge 0x43bec8
cmp dword [ebp - 0x1c], 0
jge 0x43be92
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43bea8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xac4], 0xfa
lea edx, [ebp - 0xac4]
push edx
lea eax, [ebp - 0xcc0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43be6c
mov ecx, 1
test ecx, ecx
je 0x43bf02
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcc4], eax
mov eax, dword [ebp - 0xcc4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43bef4
jmp 0x43bf02
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xcc4]
mov dword [ebp - 0x1c], edx
jmp 0x43bec8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcc8], 0
jmp 0x43bf23
mov ecx, dword [ebp - 0xcc8]
add ecx, 1
mov dword [ebp - 0xcc8], ecx
cmp dword [ebp - 0xcc8], 0
jge 0x43bf5a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xcc8]
mov dword [ebp - 0x1c], edx
jge 0x43bf42
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43bf58
mov dword [ebp - 0x1c], 0
jmp 0x43bf14
mov dword [ebp - 0xccc], 1
mov dword [ebp - 0xcd0], 1
mov dword [ebp - 0xcd4], 2
mov dword [ebp - 0xcd8], 0
mov dword [ebp - 0xcdc], 0
jmp 0x43bf9d
mov edx, dword [ebp - 0xcdc]
add edx, 1
mov dword [ebp - 0xcdc], edx
cmp dword [ebp - 0xcdc], 1
jge 0x43bfde
mov eax, dword [ebp - 0xccc]
add eax, dword [ebp - 0xcd0]
mov dword [ebp - 0xcd4], eax
mov ecx, dword [ebp - 0xcd0]
mov dword [ebp - 0xccc], ecx
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0xcd0], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcd4]
mov dword [ebp - 0x1c], eax
jmp 0x43bf8e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0xce0], 0
jmp 0x43c009
mov edx, dword [ebp - 0xce0]
add edx, 1
mov dword [ebp - 0xce0], edx
cmp dword [ebp - 0xce0], 5
jge 0x43c044
mov eax, dword [ebp - 0xce0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c038
mov eax, dword [ebp - 0xce0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c03f
and eax, 0xbc614e
jmp 0x43c042
mov dword [ebp - 0x1c], eax
jmp 0x43bffa
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c052
jmp 0x43c05a
mov dword [ebp - 0xce4], 0
jmp 0x43c075
mov edx, dword [ebp - 0xce4]
add edx, 1
mov dword [ebp - 0xce4], edx
cmp dword [ebp - 0xce4], 7
jge 0x43c08c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xce4]
mov dword [ebp - 0x1c], eax
jmp 0x43c066
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43c09e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43c0b6
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 8
mov dword [ebp - 0xce8], 0
jmp 0x43c0d8
mov edx, dword [ebp - 0xce8]
add edx, 1
mov dword [ebp - 0xce8], edx
cmp dword [ebp - 0xce8], 4
jge 0x43c113
mov eax, dword [ebp - 0xce8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c107
mov eax, dword [ebp - 0xce8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c10e
and eax, 0xbc614e
jmp 0x43c111
mov dword [ebp - 0x1c], eax
jmp 0x43c0c9
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c121
jmp 0x43c129
mov dword [ebp - 0xcec], 0
jmp 0x43c144
mov edx, dword [ebp - 0xcec]
add edx, 1
mov dword [ebp - 0xcec], edx
cmp dword [ebp - 0xcec], 5
jge 0x43c15b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcec]
mov dword [ebp - 0x1c], eax
jmp 0x43c135
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43c16d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43c185
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcf0], 1
mov dword [ebp - 0xcf4], 1
mov dword [ebp - 0xcf8], 2
mov dword [ebp - 0xcfc], 0
mov dword [ebp - 0xd00], 0
jmp 0x43c1c8
mov edx, dword [ebp - 0xd00]
add edx, 1
mov dword [ebp - 0xd00], edx
cmp dword [ebp - 0xd00], 5
jge 0x43c209
mov eax, dword [ebp - 0xcf0]
add eax, dword [ebp - 0xcf4]
mov dword [ebp - 0xcf8], eax
mov ecx, dword [ebp - 0xcf4]
mov dword [ebp - 0xcf0], ecx
mov edx, dword [ebp - 0xcf8]
mov dword [ebp - 0xcf4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xcf8]
mov dword [ebp - 0x1c], eax
jmp 0x43c1b9
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd04], 0
jmp 0x43c22d
mov edx, dword [ebp - 0xd04]
add edx, 1
mov dword [ebp - 0xd04], edx
cmp dword [ebp - 0xd04], 8
jge 0x43c264
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xd04]
mov dword [ebp - 0x1c], eax
jge 0x43c24c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43c262
mov dword [ebp - 0x1c], 0
jmp 0x43c21e
mov dword [ebp - 0xd08], 0
jmp 0x43c27f
mov edx, dword [ebp - 0xd08]
add edx, 1
mov dword [ebp - 0xd08], edx
cmp dword [ebp - 0xd08], 4
jge 0x43c2cc
cmp dword [ebp - 0x1c], 0
jge 0x43c296
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43c2ac
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xd0c], 0xfa
lea edx, [ebp - 0xd0c]
push edx
lea eax, [ebp - 0xf08]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43c270
mov dword [ebp - 0xf0c], 0
jmp 0x43c2e7
mov ecx, dword [ebp - 0xf0c]
add ecx, 1
mov dword [ebp - 0xf0c], ecx
cmp dword [ebp - 0xf0c], 4
jge 0x43c2fe
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xf0c]
mov dword [ebp - 0x1c], edx
jmp 0x43c2d8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43c310
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43c328
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 9
mov dword [ebp - 0xf10], 0
jmp 0x43c34a
mov edx, dword [ebp - 0xf10]
add edx, 1
mov dword [ebp - 0xf10], edx
cmp dword [ebp - 0xf10], 3
jge 0x43c385
mov eax, dword [ebp - 0xf10]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c379
mov eax, dword [ebp - 0xf10]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c380
and eax, 0xbc614e
jmp 0x43c383
mov dword [ebp - 0x1c], eax
jmp 0x43c33b
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c393
jmp 0x43c39b
mov dword [ebp - 0xf14], 0
jmp 0x43c3b6
mov edx, dword [ebp - 0xf14]
add edx, 1
mov dword [ebp - 0xf14], edx
cmp dword [ebp - 0xf14], 8
jge 0x43c3cd
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xf14]
mov dword [ebp - 0x1c], eax
jmp 0x43c3a7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43c3df
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43c3f7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf18], 0
jmp 0x43c412
mov edx, dword [ebp - 0xf18]
add edx, 1
mov dword [ebp - 0xf18], edx
cmp dword [ebp - 0xf18], 7
jge 0x43c429
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xf18]
mov dword [ebp - 0x1c], eax
jmp 0x43c403
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43c43b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43c453
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf1c], 0
mov edx, 1
test edx, edx
je 0x43c4a7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf20], eax
mov eax, dword [ebp - 0xf20]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43c489
jmp 0x43c4a7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xf1c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xf1c]
add eax, 1
mov dword [ebp - 0xf1c], eax
jmp 0x43c45d
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x43c4ea
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf24], eax
mov eax, dword [ebp - 0xf24]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43c4dc
jmp 0x43c4ea
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xf24]
mov dword [ebp - 0x1c], edx
jmp 0x43c4b0
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x43c52d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf28], eax
mov eax, dword [ebp - 0xf28]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43c51f
jmp 0x43c52d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xf28]
mov dword [ebp - 0x1c], edx
jmp 0x43c4f3
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xf2c], 0
jmp 0x43c558
mov ecx, dword [ebp - 0xf2c]
add ecx, 1
mov dword [ebp - 0xf2c], ecx
cmp dword [ebp - 0xf2c], 2
jge 0x43c593
mov eax, dword [ebp - 0xf2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c587
mov eax, dword [ebp - 0xf2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43c58e
and eax, 0xbc614e
jmp 0x43c591
mov dword [ebp - 0x1c], eax
jmp 0x43c549
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c5a1
jmp 0x43c5a9
mov edx, 1
test edx, edx
je 0x43c5e3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf30], eax
mov eax, dword [ebp - 0xf30]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43c5d5
jmp 0x43c5e3
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xf30]
mov dword [ebp - 0x1c], edx
jmp 0x43c5a9
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf34], 0
jmp 0x43c607
cmp dword [ebp - 0xf34], 2
jge 0x43c654
cmp dword [ebp - 0x1c], 0
jge 0x43c61e
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43c634
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf38], 0xfa
lea edx, [ebp - 0xf38]
push edx
lea eax, [ebp - 0x1130]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43c5f8
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1134], 0
jmp 0x43c676
cmp dword [ebp - 0x1134], 0
jge 0x43c6b1
mov eax, dword [ebp - 0x1134]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43c6a5
mov dword [ebp - 4], 0xfffffffe
call fcn.0043c6bf
jmp 0x43c6c7