Function at 0x463200
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47ebe0
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff46c
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x38], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov eax, 1
test eax, eax
je 0x46327f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46326a
jmp 0x46327f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x463244
mov ecx, dword [ebp - 0x1c]
add ecx, 0x15
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], 0
jmp 0x46329a
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x29
jge 0x4632cb
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jge 0x4632b3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4632c9
mov dword [ebp - 0x1c], 0
jmp 0x463291
mov dword [ebp - 0x2c], 0
jmp 0x4632dd
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x17
jge 0x4632ee
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x4632d4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x463300
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x463318
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 0
jmp 0x46332a
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x1e
jge 0x46336e
cmp dword [ebp - 0x1c], 0
jge 0x46333e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463354
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x34], 0xfa
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x463321
mov dword [ebp - 0x234], 1
mov dword [ebp - 0x238], 1
mov dword [ebp - 0x23c], 2
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x244], 0
jmp 0x4633b1
mov ecx, dword [ebp - 0x244]
add ecx, 1
mov dword [ebp - 0x244], ecx
cmp dword [ebp - 0x244], 0x17
jge 0x4633f2
mov edx, dword [ebp - 0x234]
add edx, dword [ebp - 0x238]
mov dword [ebp - 0x23c], edx
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x238], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], edx
jmp 0x4633a2
mov eax, dword [ebp - 0x1c]
add eax, 0x17
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x248], 0
jmp 0x463416
mov ecx, dword [ebp - 0x248]
add ecx, 1
mov dword [ebp - 0x248], ecx
cmp dword [ebp - 0x248], 8
jge 0x46344d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x248]
mov dword [ebp - 0x1c], edx
jge 0x463435
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46344b
mov dword [ebp - 0x1c], 0
jmp 0x463407
mov edx, 1
test edx, edx
je 0x463487
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x463479
jmp 0x463487
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], edx
jmp 0x46344d
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x250], 0
jmp 0x4634ab
mov ecx, dword [ebp - 0x250]
add ecx, 1
mov dword [ebp - 0x250], ecx
cmp dword [ebp - 0x250], 0xd
jge 0x4634e2
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x250]
mov dword [ebp - 0x1c], edx
jge 0x4634ca
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4634e0
mov dword [ebp - 0x1c], 0
jmp 0x46349c
mov edx, 1
test edx, edx
je 0x46351c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46350e
jmp 0x46351c
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x254]
mov dword [ebp - 0x1c], edx
jmp 0x4634e2
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x46355f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x463551
jmp 0x46355f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x258]
mov dword [ebp - 0x1c], edx
jmp 0x463525
mov eax, dword [ebp - 0x1c]
add eax, 0x20
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x25c], 0
jmp 0x46358a
mov ecx, dword [ebp - 0x25c]
add ecx, 1
mov dword [ebp - 0x25c], ecx
cmp dword [ebp - 0x25c], 4
jge 0x4635c5
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4635b9
mov eax, dword [ebp - 0x25c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4635c0
and eax, 0xbc614e
jmp 0x4635c3
mov dword [ebp - 0x1c], eax
jmp 0x46357b
mov dword [ebp - 4], 0xfffffffe
call fcn.004635d3
jmp 0x4635db
mov dword [ebp - 0x260], 0
jmp 0x4635f6
mov edx, dword [ebp - 0x260]
add edx, 1
mov dword [ebp - 0x260], edx
cmp dword [ebp - 0x260], 0xd
jge 0x46362d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x260]
mov dword [ebp - 0x1c], eax
jge 0x463615
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46362b
mov dword [ebp - 0x1c], 0
jmp 0x4635e7
mov dword [ebp - 0x264], 0
jmp 0x463648
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 0xc
jge 0x46367f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x264]
mov dword [ebp - 0x1c], eax
jge 0x463667
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46367d
mov dword [ebp - 0x1c], 0
jmp 0x463639
mov dword [ebp - 4], 1
mov dword [ebp - 0x268], 0
jmp 0x4636a1
mov edx, dword [ebp - 0x268]
add edx, 1
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 9
jge 0x4636dc
mov eax, dword [ebp - 0x268]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4636d0
mov eax, dword [ebp - 0x268]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4636d7
and eax, 0xbc614e
jmp 0x4636da
mov dword [ebp - 0x1c], eax
jmp 0x463692
mov dword [ebp - 4], 0xfffffffe
call fcn.004636ea
jmp 0x4636f2
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x274], 2
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x27c], 0
jmp 0x463735
mov edx, dword [ebp - 0x27c]
add edx, 1
mov dword [ebp - 0x27c], edx
cmp dword [ebp - 0x27c], 0xe
jge 0x463776
mov eax, dword [ebp - 0x26c]
add eax, dword [ebp - 0x270]
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x270]
mov dword [ebp - 0x26c], ecx
mov edx, dword [ebp - 0x274]
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x274]
mov dword [ebp - 0x1c], eax
jmp 0x463726
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x280], 0
jmp 0x46379a
mov edx, dword [ebp - 0x280]
add edx, 1
mov dword [ebp - 0x280], edx
cmp dword [ebp - 0x280], 0xf
jge 0x4637d1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x280]
mov dword [ebp - 0x1c], eax
jge 0x4637b9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4637cf
mov dword [ebp - 0x1c], 0
jmp 0x46378b
mov dword [ebp - 4], 2
mov dword [ebp - 0x284], 0
jmp 0x4637f3
mov edx, dword [ebp - 0x284]
add edx, 1
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 0xe
jge 0x46382e
mov eax, dword [ebp - 0x284]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x463822
mov eax, dword [ebp - 0x284]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x463829
and eax, 0xbc614e
jmp 0x46382c
mov dword [ebp - 0x1c], eax
jmp 0x4637e4
mov dword [ebp - 4], 0xfffffffe
call fcn.0046383c
jmp 0x463844
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x290], 2
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x298], 0
jmp 0x463887
mov edx, dword [ebp - 0x298]
add edx, 1
mov dword [ebp - 0x298], edx
cmp dword [ebp - 0x298], 0xe
jge 0x4638c8
mov eax, dword [ebp - 0x288]
add eax, dword [ebp - 0x28c]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x288], ecx
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x28c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x290]
mov dword [ebp - 0x1c], eax
jmp 0x463878
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x29c], 0
jmp 0x4638ec
mov edx, dword [ebp - 0x29c]
add edx, 1
mov dword [ebp - 0x29c], edx
cmp dword [ebp - 0x29c], 3
jge 0x463903
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x29c]
mov dword [ebp - 0x1c], eax
jmp 0x4638dd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x463915
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46392d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2a0], 0
mov edx, 1
test edx, edx
je 0x463981
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x463963
jmp 0x463981
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2a0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2a0]
add eax, 1
mov dword [ebp - 0x2a0], eax
jmp 0x463937
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2a8], 0
mov edx, 1
test edx, edx
je 0x4639de
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4639c0
jmp 0x4639de
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2a8]
add eax, 1
mov dword [ebp - 0x2a8], eax
jmp 0x463994
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x2b8], 2
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2c0], 0
jmp 0x463a2a
mov edx, dword [ebp - 0x2c0]
add edx, 1
mov dword [ebp - 0x2c0], edx
cmp dword [ebp - 0x2c0], 0
jge 0x463a6b
mov eax, dword [ebp - 0x2b0]
add eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2b0], ecx
mov edx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2b4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x1c], eax
jmp 0x463a1b
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c4], 0
jmp 0x463a8c
mov edx, dword [ebp - 0x2c4]
add edx, 1
mov dword [ebp - 0x2c4], edx
cmp dword [ebp - 0x2c4], 1
jge 0x463ac3
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x1c], eax
jge 0x463aab
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463ac1
mov dword [ebp - 0x1c], 0
jmp 0x463a7d
mov dword [ebp - 0x2c8], 1
mov dword [ebp - 0x2cc], 1
mov dword [ebp - 0x2d0], 2
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d8], 0
jmp 0x463b06
mov edx, dword [ebp - 0x2d8]
add edx, 1
mov dword [ebp - 0x2d8], edx
cmp dword [ebp - 0x2d8], 1
jge 0x463b47
mov eax, dword [ebp - 0x2c8]
add eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp - 0x2c8], ecx
mov edx, dword [ebp - 0x2d0]
mov dword [ebp - 0x2cc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x1c], eax
jmp 0x463af7
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x463b8a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x463b7c
jmp 0x463b8a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2dc]
mov dword [ebp - 0x1c], edx
jmp 0x463b50
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2e0], 0
mov ecx, 1
test ecx, ecx
je 0x463be7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x463bc9
jmp 0x463be7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2e0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2e0]
add eax, 1
mov dword [ebp - 0x2e0], eax
jmp 0x463b9d
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x2ec], 1
mov dword [ebp - 0x2f0], 2
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f8], 0
jmp 0x463c33
mov edx, dword [ebp - 0x2f8]
add edx, 1
mov dword [ebp - 0x2f8], edx
cmp dword [ebp - 0x2f8], 1
jge 0x463c74
mov eax, dword [ebp - 0x2e8]
add eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x2f0], eax
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp - 0x2e8], ecx
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2ec], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x1c], eax
jmp 0x463c24
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x2fc], 0
jmp 0x463c9f
mov edx, dword [ebp - 0x2fc]
add edx, 1
mov dword [ebp - 0x2fc], edx
cmp dword [ebp - 0x2fc], 5
jge 0x463cda
mov eax, dword [ebp - 0x2fc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x463cce
mov eax, dword [ebp - 0x2fc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x463cd5
and eax, 0xbc614e
jmp 0x463cd8
mov dword [ebp - 0x1c], eax
jmp 0x463c90
mov dword [ebp - 4], 0xfffffffe
call fcn.00463ce8
jmp 0x463cf0
mov dword [ebp - 0x300], 0
jmp 0x463d0b
mov edx, dword [ebp - 0x300]
add edx, 1
mov dword [ebp - 0x300], edx
cmp dword [ebp - 0x300], 1
jge 0x463d58
cmp dword [ebp - 0x1c], 0
jge 0x463d22
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463d38
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x304], 0xfa
lea edx, [ebp - 0x304]
push edx
lea eax, [ebp - 0x500]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x463cfc
mov dword [ebp - 0x504], 0
mov ecx, 1
test ecx, ecx
je 0x463dac
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x508], eax
mov eax, dword [ebp - 0x508]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x463d8e
jmp 0x463dac
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x504]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x504]
add eax, 1
mov dword [ebp - 0x504], eax
jmp 0x463d62
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x50c], 0
jmp 0x463dd0
mov edx, dword [ebp - 0x50c]
add edx, 1
mov dword [ebp - 0x50c], edx
cmp dword [ebp - 0x50c], 8
jge 0x463de7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x50c]
mov dword [ebp - 0x1c], eax
jmp 0x463dc1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x463df9
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x463e11
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x510], 0
mov edx, 1
test edx, edx
je 0x463e65
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x463e47
jmp 0x463e65
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x510]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x510]
add eax, 1
mov dword [ebp - 0x510], eax
jmp 0x463e1b
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x518], 1
mov dword [ebp - 0x51c], 1
mov dword [ebp - 0x520], 2
mov dword [ebp - 0x524], 0
mov dword [ebp - 0x528], 0
jmp 0x463eb1
mov edx, dword [ebp - 0x528]
add edx, 1
mov dword [ebp - 0x528], edx
cmp dword [ebp - 0x528], 6
jge 0x463ef2
mov eax, dword [ebp - 0x518]
add eax, dword [ebp - 0x51c]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x51c]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x520]
mov dword [ebp - 0x51c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x520]
mov dword [ebp - 0x1c], eax
jmp 0x463ea2
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x52c], 1
mov dword [ebp - 0x530], 1
mov dword [ebp - 0x534], 2
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x53c], 0
jmp 0x463f3e
mov edx, dword [ebp - 0x53c]
add edx, 1
mov dword [ebp - 0x53c], edx
cmp dword [ebp - 0x53c], 2
jge 0x463f7f
mov eax, dword [ebp - 0x52c]
add eax, dword [ebp - 0x530]
mov dword [ebp - 0x534], eax
mov ecx, dword [ebp - 0x530]
mov dword [ebp - 0x52c], ecx
mov edx, dword [ebp - 0x534]
mov dword [ebp - 0x530], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x534]
mov dword [ebp - 0x1c], eax
jmp 0x463f2f
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x463fc2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x540]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x463fb4
jmp 0x463fc2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x540]
mov dword [ebp - 0x1c], edx
jmp 0x463f88
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x544], 0
jmp 0x463fe6
mov ecx, dword [ebp - 0x544]
add ecx, 1
mov dword [ebp - 0x544], ecx
cmp dword [ebp - 0x544], 8
jge 0x46401d
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x544]
mov dword [ebp - 0x1c], edx
jge 0x464005
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46401b
mov dword [ebp - 0x1c], 0
jmp 0x463fd7
mov dword [ebp - 0x548], 0
jmp 0x464038
mov edx, dword [ebp - 0x548]
add edx, 1
mov dword [ebp - 0x548], edx
cmp dword [ebp - 0x548], 4
jge 0x464085
cmp dword [ebp - 0x1c], 0
jge 0x46404f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464065
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x54c], 0xfa
lea edx, [ebp - 0x54c]
push edx
lea eax, [ebp - 0x748]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x464029
mov dword [ebp - 0x74c], 0
jmp 0x4640a0
mov ecx, dword [ebp - 0x74c]
add ecx, 1
mov dword [ebp - 0x74c], ecx
cmp dword [ebp - 0x74c], 5
jge 0x4640ed
cmp dword [ebp - 0x1c], 0
jge 0x4640b7
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4640cd
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x750], 0xfa
lea edx, [ebp - 0x750]
push edx
lea eax, [ebp - 0x948]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x464091
mov dword [ebp - 0x94c], 0
jmp 0x464108
mov ecx, dword [ebp - 0x94c]
add ecx, 1
mov dword [ebp - 0x94c], ecx
cmp dword [ebp - 0x94c], 6
jge 0x46413f
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x94c]
mov dword [ebp - 0x1c], edx
jge 0x464127
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46413d
mov dword [ebp - 0x1c], 0
jmp 0x4640f9
mov dword [ebp - 0x950], 0
jmp 0x46415a
mov edx, dword [ebp - 0x950]
add edx, 1
mov dword [ebp - 0x950], edx
cmp dword [ebp - 0x950], 6
jge 0x464191
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x950]
mov dword [ebp - 0x1c], eax
jge 0x464179
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46418f
mov dword [ebp - 0x1c], 0
jmp 0x46414b
mov dword [ebp - 4], 4
mov dword [ebp - 0x954], 0
jmp 0x4641b3
mov edx, dword [ebp - 0x954]
add edx, 1
mov dword [ebp - 0x954], edx
cmp dword [ebp - 0x954], 8
jge 0x4641ee
mov eax, dword [ebp - 0x954]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4641e2
mov eax, dword [ebp - 0x954]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4641e9
and eax, 0xbc614e
jmp 0x4641ec
mov dword [ebp - 0x1c], eax
jmp 0x4641a4
mov dword [ebp - 4], 0xfffffffe
call fcn.004641fc
jmp 0x464204
mov edx, 1
test edx, edx
je 0x46423e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x464230
jmp 0x46423e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x958]
mov dword [ebp - 0x1c], edx
jmp 0x464204
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x95c], 0
mov ecx, 1
test ecx, ecx
je 0x464298
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x960]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46427a
jmp 0x464298
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x95c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x95c]
add eax, 1
mov dword [ebp - 0x95c], eax
jmp 0x46424e
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x964], 0
mov edx, 1
test edx, edx
je 0x4642f5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x968]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4642d7
jmp 0x4642f5
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x964]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x964]
add eax, 1
mov dword [ebp - 0x964], eax
jmp 0x4642ab
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x96c], 0
jmp 0x464319
mov edx, dword [ebp - 0x96c]
add edx, 1
mov dword [ebp - 0x96c], edx
cmp dword [ebp - 0x96c], 7
jge 0x464350
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x96c]
mov dword [ebp - 0x1c], eax
jge 0x464338
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46434e
mov dword [ebp - 0x1c], 0
jmp 0x46430a
mov dword [ebp - 0x970], 1
mov dword [ebp - 0x974], 1
mov dword [ebp - 0x978], 2
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0x980], 0
jmp 0x464393
mov edx, dword [ebp - 0x980]
add edx, 1
mov dword [ebp - 0x980], edx
cmp dword [ebp - 0x980], 3
jge 0x4643d4
mov eax, dword [ebp - 0x970]
add eax, dword [ebp - 0x974]
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x974]
mov dword [ebp - 0x970], ecx
mov edx, dword [ebp - 0x978]
mov dword [ebp - 0x974], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x978]
mov dword [ebp - 0x1c], eax
jmp 0x464384
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x984], 1
mov dword [ebp - 0x988], 1
mov dword [ebp - 0x98c], 2
mov dword [ebp - 0x990], 0
mov dword [ebp - 0x994], 0
jmp 0x464420
mov edx, dword [ebp - 0x994]
add edx, 1
mov dword [ebp - 0x994], edx
cmp dword [ebp - 0x994], 7
jge 0x464461
mov eax, dword [ebp - 0x984]
add eax, dword [ebp - 0x988]
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0x988]
mov dword [ebp - 0x984], ecx
mov edx, dword [ebp - 0x98c]
mov dword [ebp - 0x988], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x98c]
mov dword [ebp - 0x1c], eax
jmp 0x464411
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x998], 0
jmp 0x464485
mov edx, dword [ebp - 0x998]
add edx, 1
mov dword [ebp - 0x998], edx
cmp dword [ebp - 0x998], 8
jge 0x4644bc
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x998]
mov dword [ebp - 0x1c], eax
jge 0x4644a4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4644ba
mov dword [ebp - 0x1c], 0
jmp 0x464476
mov dword [ebp - 0x99c], 0
jmp 0x4644d7
mov edx, dword [ebp - 0x99c]
add edx, 1
mov dword [ebp - 0x99c], edx
cmp dword [ebp - 0x99c], 1
jge 0x464524
cmp dword [ebp - 0x1c], 0
jge 0x4644ee
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464504
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x9a0], 0xfa
lea edx, [ebp - 0x9a0]
push edx
lea eax, [ebp - 0xb98]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4644c8
mov dword [ebp - 0xb9c], 0
jmp 0x46453f
mov ecx, dword [ebp - 0xb9c]
add ecx, 1
mov dword [ebp - 0xb9c], ecx
cmp dword [ebp - 0xb9c], 3
jge 0x464576
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xb9c]
mov dword [ebp - 0x1c], edx
jge 0x46455e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464574
mov dword [ebp - 0x1c], 0
jmp 0x464530
mov dword [ebp - 0xba0], 0
mov edx, 1
test edx, edx
je 0x4645ca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp - 0xba4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4645ac
jmp 0x4645ca
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xba0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xba0]
add eax, 1
mov dword [ebp - 0xba0], eax
jmp 0x464580
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x38]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret