Function at 0x4661e0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47ec90
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff090
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x64], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x46622f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x3d
jge 0x466260
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jge 0x466248
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46625e
mov dword [ebp - 0x1c], 0
jmp 0x466226
mov dword [ebp - 0x24], 0
mov edx, 1
test edx, edx
je 0x4662a2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46628d
jmp 0x4662a2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
jmp 0x466267
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], 0
mov edx, 1
test edx, edx
je 0x4662ed
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4662d8
jmp 0x4662ed
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x4662b2
mov ecx, dword [ebp - 0x1c]
add ecx, 0x34
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], 0
mov edx, 1
test edx, edx
je 0x466338
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x466323
jmp 0x466338
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
jmp 0x4662fd
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x3c], 0
jmp 0x46635a
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0
jge 0x46638c
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x466380
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x466387
and eax, 0xbc614e
jmp 0x46638a
mov dword [ebp - 0x1c], eax
jmp 0x466351
mov dword [ebp - 4], 0xfffffffe
call fcn.0046639a
jmp 0x4663a2
mov dword [ebp - 0x40], 0
mov edx, 1
test edx, edx
je 0x4663e4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4663cf
jmp 0x4663e4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
jmp 0x4663a9
mov ecx, dword [ebp - 0x1c]
add ecx, 0x13
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x48], 0
jmp 0x466406
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x17
jge 0x466438
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46642c
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x466433
and eax, 0xbc614e
jmp 0x466436
mov dword [ebp - 0x1c], eax
jmp 0x4663fd
mov dword [ebp - 4], 0xfffffffe
call fcn.00466446
jmp 0x46644e
mov dword [ebp - 0x4c], 0
mov edx, 1
test edx, edx
je 0x466490
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46647b
jmp 0x466490
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
jmp 0x466455
mov ecx, dword [ebp - 0x1c]
add ecx, 0x15
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4664ca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4664bf
jmp 0x4664ca
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x54]
mov dword [ebp - 0x1c], edx
jmp 0x466499
mov eax, dword [ebp - 0x1c]
add eax, 0x17
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x58], 0
jmp 0x4664e5
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 0x58], 0x11
jge 0x4664f6
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x58]
mov dword [ebp - 0x1c], edx
jmp 0x4664dc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x466508
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x466520
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x5c], 0
jmp 0x466532
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 4
jge 0x466576
cmp dword [ebp - 0x1c], 0
jge 0x466546
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46655c
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x60], 0xfa
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x260]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x466529
mov dword [ebp - 4], 2
mov dword [ebp - 0x264], 0
jmp 0x466598
mov ecx, dword [ebp - 0x264]
add ecx, 1
mov dword [ebp - 0x264], ecx
cmp dword [ebp - 0x264], 8
jge 0x4665d3
mov eax, dword [ebp - 0x264]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4665c7
mov eax, dword [ebp - 0x264]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4665ce
and eax, 0xbc614e
jmp 0x4665d1
mov dword [ebp - 0x1c], eax
jmp 0x466589
mov dword [ebp - 4], 0xfffffffe
call fcn.004665e1
jmp 0x4665e9
mov dword [ebp - 0x268], 0
jmp 0x466604
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 5
jge 0x466651
cmp dword [ebp - 0x1c], 0
jge 0x46661b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x466631
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x26c], 0xfa
lea edx, [ebp - 0x26c]
push edx
lea eax, [ebp - 0x468]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4665f5
mov dword [ebp - 0x46c], 0
mov ecx, 1
test ecx, ecx
je 0x4666a5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x466687
jmp 0x4666a5
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x46c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x46c]
add eax, 1
mov dword [ebp - 0x46c], eax
jmp 0x46665b
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x474], 0
jmp 0x4666d0
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 0xd
jge 0x46670b
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4666ff
mov eax, dword [ebp - 0x474]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x466706
and eax, 0xbc614e
jmp 0x466709
mov dword [ebp - 0x1c], eax
jmp 0x4666c1
mov dword [ebp - 4], 0xfffffffe
call fcn.00466719
jmp 0x466721
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x47c], 1
mov dword [ebp - 0x480], 2
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x488], 0
jmp 0x466764
mov edx, dword [ebp - 0x488]
add edx, 1
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 0xa
jge 0x4667a5
mov eax, dword [ebp - 0x478]
add eax, dword [ebp - 0x47c]
mov dword [ebp - 0x480], eax
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x478], ecx
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x480]
mov dword [ebp - 0x1c], eax
jmp 0x466755
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x48c], 0
jmp 0x4667c9
mov edx, dword [ebp - 0x48c]
add edx, 1
mov dword [ebp - 0x48c], edx
cmp dword [ebp - 0x48c], 0xb
jge 0x466800
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x48c]
mov dword [ebp - 0x1c], eax
jge 0x4667e8
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4667fe
mov dword [ebp - 0x1c], 0
jmp 0x4667ba
mov dword [ebp - 0x490], 0
jmp 0x46681b
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 5
jge 0x466852
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x490]
mov dword [ebp - 0x1c], eax
jge 0x46683a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x466850
mov dword [ebp - 0x1c], 0
jmp 0x46680c
mov edx, 1
test edx, edx
je 0x46688c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x494]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46687e
jmp 0x46688c
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x494]
mov dword [ebp - 0x1c], edx
jmp 0x466852
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4668cf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4668c1
jmp 0x4668cf
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x498]
mov dword [ebp - 0x1c], edx
jmp 0x466895
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x49c], 1
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0x4a4], 2
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x4ac], 0
jmp 0x46691b
mov ecx, dword [ebp - 0x4ac]
add ecx, 1
mov dword [ebp - 0x4ac], ecx
cmp dword [ebp - 0x4ac], 8
jge 0x46695c
mov edx, dword [ebp - 0x49c]
add edx, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], edx
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a0], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x1c], edx
jmp 0x46690c
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0x4b4], 1
mov dword [ebp - 0x4b8], 2
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4c0], 0
jmp 0x4669a8
mov ecx, dword [ebp - 0x4c0]
add ecx, 1
mov dword [ebp - 0x4c0], ecx
cmp dword [ebp - 0x4c0], 9
jge 0x4669e9
mov edx, dword [ebp - 0x4b0]
add edx, dword [ebp - 0x4b4]
mov dword [ebp - 0x4b8], edx
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x4b0], eax
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp - 0x4b4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4b8]
mov dword [ebp - 0x1c], edx
jmp 0x466999
mov eax, dword [ebp - 0x1c]
add eax, 9
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c4], 0
mov ecx, 1
test ecx, ecx
je 0x466a46
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x4c8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x466a28
jmp 0x466a46
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4c4]
add eax, 1
mov dword [ebp - 0x4c4], eax
jmp 0x4669fc
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x466a89
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x466a7b
jmp 0x466a89
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4cc]
mov dword [ebp - 0x1c], edx
jmp 0x466a4f
mov eax, dword [ebp - 0x1c]
add eax, 0xe
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4d0], 0
jmp 0x466aad
mov ecx, dword [ebp - 0x4d0]
add ecx, 1
mov dword [ebp - 0x4d0], ecx
cmp dword [ebp - 0x4d0], 4
jge 0x466ae4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x4d0]
mov dword [ebp - 0x1c], edx
jge 0x466acc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x466ae2
mov dword [ebp - 0x1c], 0
jmp 0x466a9e
mov dword [ebp - 0x4d4], 0
mov edx, 1
test edx, edx
je 0x466b38
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x466b1a
jmp 0x466b38
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4d4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4d4]
add eax, 1
mov dword [ebp - 0x4d4], eax
jmp 0x466aee
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4dc], 0
jmp 0x466b5c
mov edx, dword [ebp - 0x4dc]
add edx, 1
mov dword [ebp - 0x4dc], edx
cmp dword [ebp - 0x4dc], 0
jge 0x466b93
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x1c], eax
jge 0x466b7b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x466b91
mov dword [ebp - 0x1c], 0
jmp 0x466b4d
mov dword [ebp - 4], 4
mov dword [ebp - 0x4e0], 0
jmp 0x466bb5
mov edx, dword [ebp - 0x4e0]
add edx, 1
mov dword [ebp - 0x4e0], edx
cmp dword [ebp - 0x4e0], 4
jge 0x466bf0
mov eax, dword [ebp - 0x4e0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x466be4
mov eax, dword [ebp - 0x4e0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x466beb
and eax, 0xbc614e
jmp 0x466bee
mov dword [ebp - 0x1c], eax
jmp 0x466ba6
mov dword [ebp - 4], 0xfffffffe
call fcn.00466bfe
jmp 0x466c06
mov dword [ebp - 0x4e4], 1
mov dword [ebp - 0x4e8], 1
mov dword [ebp - 0x4ec], 2
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4f4], 0
jmp 0x466c49
mov edx, dword [ebp - 0x4f4]
add edx, 1
mov dword [ebp - 0x4f4], edx
cmp dword [ebp - 0x4f4], 1
jge 0x466c8a
mov eax, dword [ebp - 0x4e4]
add eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x4ec], eax
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp - 0x4e4], ecx
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x4e8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x1c], eax
jmp 0x466c3a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4f8], 0
jmp 0x466cae
mov edx, dword [ebp - 0x4f8]
add edx, 1
mov dword [ebp - 0x4f8], edx
cmp dword [ebp - 0x4f8], 4
jge 0x466cfb
cmp dword [ebp - 0x1c], 0
jge 0x466cc5
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x466cdb
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4fc], 0xfa
lea edx, [ebp - 0x4fc]
push edx
lea eax, [ebp - 0x6f8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x466c9f
mov dword [ebp - 4], 5
mov dword [ebp - 0x6fc], 0
jmp 0x466d1d
mov ecx, dword [ebp - 0x6fc]
add ecx, 1
mov dword [ebp - 0x6fc], ecx
cmp dword [ebp - 0x6fc], 3
jge 0x466d58
mov eax, dword [ebp - 0x6fc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x466d4c
mov eax, dword [ebp - 0x6fc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x466d53
and eax, 0xbc614e
jmp 0x466d56
mov dword [ebp - 0x1c], eax
jmp 0x466d0e
mov dword [ebp - 4], 0xfffffffe
call fcn.00466d66
jmp 0x466d6e
mov dword [ebp - 0x700], 0
mov edx, 1
test edx, edx
je 0x466dc2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x704], eax
mov eax, dword [ebp - 0x704]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x466da4
jmp 0x466dc2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x700]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x700]
add eax, 1
mov dword [ebp - 0x700], eax
jmp 0x466d78
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x466e02
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x708]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x466df4
jmp 0x466e02
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x708]
mov dword [ebp - 0x1c], edx
jmp 0x466dc8
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x466e45
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp - 0x70c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x466e37
jmp 0x466e45
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x70c]
mov dword [ebp - 0x1c], edx
jmp 0x466e0b
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x710], 0
mov ecx, 1
test ecx, ecx
je 0x466ea2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x714]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x466e84
jmp 0x466ea2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x710]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x710]
add eax, 1
mov dword [ebp - 0x710], eax
jmp 0x466e58
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x718], 0
jmp 0x466ec6
mov edx, dword [ebp - 0x718]
add edx, 1
mov dword [ebp - 0x718], edx
cmp dword [ebp - 0x718], 5
jge 0x466efd
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x718]
mov dword [ebp - 0x1c], eax
jge 0x466ee5
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x466efb
mov dword [ebp - 0x1c], 0
jmp 0x466eb7
mov dword [ebp - 0x71c], 0
jmp 0x466f18
mov edx, dword [ebp - 0x71c]
add edx, 1
mov dword [ebp - 0x71c], edx
cmp dword [ebp - 0x71c], 0
jge 0x466f4f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x71c]
mov dword [ebp - 0x1c], eax
jge 0x466f37
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x466f4d
mov dword [ebp - 0x1c], 0
jmp 0x466f09
mov dword [ebp - 0x720], 0
jmp 0x466f6a
mov edx, dword [ebp - 0x720]
add edx, 1
mov dword [ebp - 0x720], edx
cmp dword [ebp - 0x720], 3
jge 0x466fb7
cmp dword [ebp - 0x1c], 0
jge 0x466f81
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x466f97
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x724], 0xfa
lea edx, [ebp - 0x724]
push edx
lea eax, [ebp - 0x920]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x466f5b
mov dword [ebp - 0x924], 0
jmp 0x466fd2
mov ecx, dword [ebp - 0x924]
add ecx, 1
mov dword [ebp - 0x924], ecx
cmp dword [ebp - 0x924], 4
jge 0x467009
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x924]
mov dword [ebp - 0x1c], edx
jge 0x466ff1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467007
mov dword [ebp - 0x1c], 0
jmp 0x466fc3
mov edx, 1
test edx, edx
je 0x467043
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x928], eax
mov eax, dword [ebp - 0x928]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x467035
jmp 0x467043
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x928]
mov dword [ebp - 0x1c], edx
jmp 0x467009
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x92c], 0
jmp 0x467067
mov ecx, dword [ebp - 0x92c]
add ecx, 1
mov dword [ebp - 0x92c], ecx
cmp dword [ebp - 0x92c], 4
jge 0x46709e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x92c]
mov dword [ebp - 0x1c], edx
jge 0x467086
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46709c
mov dword [ebp - 0x1c], 0
jmp 0x467058
mov dword [ebp - 0x930], 1
mov dword [ebp - 0x934], 1
mov dword [ebp - 0x938], 2
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x940], 0
jmp 0x4670e1
mov edx, dword [ebp - 0x940]
add edx, 1
mov dword [ebp - 0x940], edx
cmp dword [ebp - 0x940], 5
jge 0x467122
mov eax, dword [ebp - 0x930]
add eax, dword [ebp - 0x934]
mov dword [ebp - 0x938], eax
mov ecx, dword [ebp - 0x934]
mov dword [ebp - 0x930], ecx
mov edx, dword [ebp - 0x938]
mov dword [ebp - 0x934], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x938]
mov dword [ebp - 0x1c], eax
jmp 0x4670d2
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x944], 0
jmp 0x467146
mov edx, dword [ebp - 0x944]
add edx, 1
mov dword [ebp - 0x944], edx
cmp dword [ebp - 0x944], 4
jge 0x46717d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x944]
mov dword [ebp - 0x1c], eax
jge 0x467165
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46717b
mov dword [ebp - 0x1c], 0
jmp 0x467137
mov dword [ebp - 0x948], 0
jmp 0x467198
mov edx, dword [ebp - 0x948]
add edx, 1
mov dword [ebp - 0x948], edx
cmp dword [ebp - 0x948], 1
jge 0x4671af
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x948]
mov dword [ebp - 0x1c], eax
jmp 0x467189
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4671c1
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4671d9
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x94c], 0
jmp 0x4671fb
mov edx, dword [ebp - 0x94c]
add edx, 1
mov dword [ebp - 0x94c], edx
cmp dword [ebp - 0x94c], 3
jge 0x467236
mov eax, dword [ebp - 0x94c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46722a
mov eax, dword [ebp - 0x94c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x467231
and eax, 0xbc614e
jmp 0x467234
mov dword [ebp - 0x1c], eax
jmp 0x4671ec
mov dword [ebp - 4], 0xfffffffe
call fcn.00467244
jmp 0x46724c
mov dword [ebp - 0x950], 0
jmp 0x467267
mov edx, dword [ebp - 0x950]
add edx, 1
mov dword [ebp - 0x950], edx
cmp dword [ebp - 0x950], 4
jge 0x4672b4
cmp dword [ebp - 0x1c], 0
jge 0x46727e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467294
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x954], 0xfa
lea edx, [ebp - 0x954]
push edx
lea eax, [ebp - 0xb50]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x467258
mov dword [ebp - 0xb54], 0
jmp 0x4672cf
mov ecx, dword [ebp - 0xb54]
add ecx, 1
mov dword [ebp - 0xb54], ecx
cmp dword [ebp - 0xb54], 3
jge 0x467306
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xb54]
mov dword [ebp - 0x1c], edx
jge 0x4672ee
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467304
mov dword [ebp - 0x1c], 0
jmp 0x4672c0
mov edx, 1
test edx, edx
je 0x467340
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb58], eax
mov eax, dword [ebp - 0xb58]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x467332
jmp 0x467340
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xb58]
mov dword [ebp - 0x1c], edx
jmp 0x467306
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb5c], 0
jmp 0x467364
mov ecx, dword [ebp - 0xb5c]
add ecx, 1
mov dword [ebp - 0xb5c], ecx
cmp dword [ebp - 0xb5c], 2
jge 0x46737b
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb5c]
mov dword [ebp - 0x1c], edx
jmp 0x467355
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46738d
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4673a5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4673df
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0xb60]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4673d1
jmp 0x4673df
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xb60]
mov dword [ebp - 0x1c], edx
jmp 0x4673a5
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb64], 0
jmp 0x467403
mov ecx, dword [ebp - 0xb64]
add ecx, 1
mov dword [ebp - 0xb64], ecx
cmp dword [ebp - 0xb64], 4
jge 0x467450
cmp dword [ebp - 0x1c], 0
jge 0x46741a
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467430
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xb68], 0xfa
lea edx, [ebp - 0xb68]
push edx
lea eax, [ebp - 0xd60]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4673f4
mov ecx, 1
test ecx, ecx
je 0x46748a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0xd64]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46747c
jmp 0x46748a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd64]
mov dword [ebp - 0x1c], edx
jmp 0x467450
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd68], 0
jmp 0x4674ae
mov ecx, dword [ebp - 0xd68]
add ecx, 1
mov dword [ebp - 0xd68], ecx
cmp dword [ebp - 0xd68], 0
jge 0x4674e5
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xd68]
mov dword [ebp - 0x1c], edx
jge 0x4674cd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4674e3
mov dword [ebp - 0x1c], 0
jmp 0x46749f
mov dword [ebp - 0xd6c], 0
jmp 0x467500
mov edx, dword [ebp - 0xd6c]
add edx, 1
mov dword [ebp - 0xd6c], edx
cmp dword [ebp - 0xd6c], 1
jge 0x467517
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xd6c]
mov dword [ebp - 0x1c], eax
jmp 0x4674f1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x467529
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x467541
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd70], 0
mov edx, 1
test edx, edx
je 0x467595
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd74], eax
mov eax, dword [ebp - 0xd74]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x467577
jmp 0x467595
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd70]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd70]
add eax, 1
mov dword [ebp - 0xd70], eax
jmp 0x46754b
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4675d8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp - 0xd78]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4675ca
jmp 0x4675d8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd78]
mov dword [ebp - 0x1c], edx
jmp 0x46759e
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd7c], 0
jmp 0x4675fc
mov ecx, dword [ebp - 0xd7c]
add ecx, 1
mov dword [ebp - 0xd7c], ecx
cmp dword [ebp - 0xd7c], 3
jge 0x467649
cmp dword [ebp - 0x1c], 0
jge 0x467613
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467629
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xd80], 0xfa
lea edx, [ebp - 0xd80]
push edx
lea eax, [ebp - 0xf78]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4675ed
mov ecx, 1
test ecx, ecx
je 0x467683
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf7c], eax
mov eax, dword [ebp - 0xf7c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x467675
jmp 0x467683
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xf7c]
mov dword [ebp - 0x1c], edx
jmp 0x467649
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4676c6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf80], eax
mov eax, dword [ebp - 0xf80]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4676b8
jmp 0x4676c6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xf80]
mov dword [ebp - 0x1c], edx
jmp 0x46768c
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x64]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret