Function at 0x436ad0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47dc90
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffb38
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x70], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x436b1f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2c
jge 0x436b30
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x436b16
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x436b42
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x436b5a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
mov edx, 1
test edx, edx
je 0x436b9c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x436b87
jmp 0x436b9c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
jmp 0x436b61
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], 0
mov edx, 1
test edx, edx
je 0x436be7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x436bd2
jmp 0x436be7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x436bac
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x34], 0
jmp 0x436c09
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0xa
jge 0x436c3b
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x436c2f
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x436c36
and eax, 0xbc614e
jmp 0x436c39
mov dword [ebp - 0x1c], eax
jmp 0x436c00
mov dword [ebp - 4], 0xfffffffe
call fcn.00436c49
jmp 0x436c51
mov edx, 1
test edx, edx
je 0x436c82
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x436c77
jmp 0x436c82
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
jmp 0x436c51
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x436cbc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x436cb1
jmp 0x436cbc
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
jmp 0x436c8b
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x436cf6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x436ceb
jmp 0x436cf6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
jmp 0x436cc5
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44], 0
mov ecx, 1
test ecx, ecx
je 0x436d41
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x436d2c
jmp 0x436d41
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
jmp 0x436d06
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4c], 0
jmp 0x436d5c
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0xf
jge 0x436d8d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
jge 0x436d75
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x436d8b
mov dword [ebp - 0x1c], 0
jmp 0x436d53
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x58], 2
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
jmp 0x436dbb
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0xb
jge 0x436de1
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
jmp 0x436db2
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x436e1b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x436e10
jmp 0x436e1b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x64]
mov dword [ebp - 0x1c], edx
jmp 0x436dea
mov eax, dword [ebp - 0x1c]
add eax, 0xe
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x68], 0
jmp 0x436e36
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
cmp dword [ebp - 0x68], 0xf
jge 0x436e7a
cmp dword [ebp - 0x1c], 0
jge 0x436e4a
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x436e60
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6c], 0xfa
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x268]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x436e2d
mov dword [ebp - 0x26c], 0
mov ecx, 1
test ecx, ecx
je 0x436ece
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x436eb0
jmp 0x436ece
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x26c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x26c]
add eax, 1
mov dword [ebp - 0x26c], eax
jmp 0x436e84
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x274], 0
jmp 0x436ef9
mov edx, dword [ebp - 0x274]
add edx, 1
mov dword [ebp - 0x274], edx
cmp dword [ebp - 0x274], 4
jge 0x436f34
mov eax, dword [ebp - 0x274]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x436f28
mov eax, dword [ebp - 0x274]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x436f2f
and eax, 0xbc614e
jmp 0x436f32
mov dword [ebp - 0x1c], eax
jmp 0x436eea
mov dword [ebp - 4], 0xfffffffe
call fcn.00436f42
jmp 0x436f4a
mov dword [ebp - 4], 2
mov dword [ebp - 0x278], 0
jmp 0x436f6c
mov edx, dword [ebp - 0x278]
add edx, 1
mov dword [ebp - 0x278], edx
cmp dword [ebp - 0x278], 7
jge 0x436fa7
mov eax, dword [ebp - 0x278]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x436f9b
mov eax, dword [ebp - 0x278]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x436fa2
and eax, 0xbc614e
jmp 0x436fa5
mov dword [ebp - 0x1c], eax
jmp 0x436f5d
mov dword [ebp - 4], 0xfffffffe
call fcn.00436fb5
jmp 0x436fbd
mov dword [ebp - 4], 3
mov dword [ebp - 0x27c], 0
jmp 0x436fdf
mov edx, dword [ebp - 0x27c]
add edx, 1
mov dword [ebp - 0x27c], edx
cmp dword [ebp - 0x27c], 3
jge 0x43701a
mov eax, dword [ebp - 0x27c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43700e
mov eax, dword [ebp - 0x27c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x437015
and eax, 0xbc614e
jmp 0x437018
mov dword [ebp - 0x1c], eax
jmp 0x436fd0
mov dword [ebp - 4], 0xfffffffe
call fcn.00437028
jmp 0x437030
mov dword [ebp - 0x280], 0
jmp 0x43704b
mov edx, dword [ebp - 0x280]
add edx, 1
mov dword [ebp - 0x280], edx
cmp dword [ebp - 0x280], 0xb
jge 0x437062
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x280]
mov dword [ebp - 0x1c], eax
jmp 0x43703c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x437074
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43708c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x28c], 2
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x294], 0
jmp 0x4370cf
mov edx, dword [ebp - 0x294]
add edx, 1
mov dword [ebp - 0x294], edx
cmp dword [ebp - 0x294], 0xf
jge 0x437110
mov eax, dword [ebp - 0x284]
add eax, dword [ebp - 0x288]
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0x288]
mov dword [ebp - 0x284], ecx
mov edx, dword [ebp - 0x28c]
mov dword [ebp - 0x288], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x28c]
mov dword [ebp - 0x1c], eax
jmp 0x4370c0
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x298], 0
jmp 0x437134
mov edx, dword [ebp - 0x298]
add edx, 1
mov dword [ebp - 0x298], edx
cmp dword [ebp - 0x298], 0xc
jge 0x43716b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x298]
mov dword [ebp - 0x1c], eax
jge 0x437153
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x437169
mov dword [ebp - 0x1c], 0
jmp 0x437125
mov dword [ebp - 0x29c], 0
jmp 0x437186
mov edx, dword [ebp - 0x29c]
add edx, 1
mov dword [ebp - 0x29c], edx
cmp dword [ebp - 0x29c], 1
jge 0x4371d3
cmp dword [ebp - 0x1c], 0
jge 0x43719d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4371b3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2a0], 0xfa
lea edx, [ebp - 0x2a0]
push edx
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x437177
mov dword [ebp - 0x49c], 0
jmp 0x4371ee
mov ecx, dword [ebp - 0x49c]
add ecx, 1
mov dword [ebp - 0x49c], ecx
cmp dword [ebp - 0x49c], 4
jge 0x437225
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x49c]
mov dword [ebp - 0x1c], edx
jge 0x43720d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x437223
mov dword [ebp - 0x1c], 0
jmp 0x4371df
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0x4a4], 1
mov dword [ebp - 0x4a8], 2
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x4b0], 0
jmp 0x437268
mov edx, dword [ebp - 0x4b0]
add edx, 1
mov dword [ebp - 0x4b0], edx
cmp dword [ebp - 0x4b0], 6
jge 0x4372a9
mov eax, dword [ebp - 0x4a0]
add eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a8], eax
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a0], ecx
mov edx, dword [ebp - 0x4a8]
mov dword [ebp - 0x4a4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x1c], eax
jmp 0x437259
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4b4], 0
jmp 0x4372cd
mov edx, dword [ebp - 0x4b4]
add edx, 1
mov dword [ebp - 0x4b4], edx
cmp dword [ebp - 0x4b4], 8
jge 0x437304
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x1c], eax
jge 0x4372ec
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x437302
mov dword [ebp - 0x1c], 0
jmp 0x4372be
mov edx, 1
test edx, edx
je 0x43733e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4b8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x437330
jmp 0x43733e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4b8]
mov dword [ebp - 0x1c], edx
jmp 0x437304
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4bc], 0
mov ecx, 1
test ecx, ecx
je 0x43739b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43737d
jmp 0x43739b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4bc]
add eax, 1
mov dword [ebp - 0x4bc], eax
jmp 0x437351
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4c4], 0
jmp 0x4373bc
mov edx, dword [ebp - 0x4c4]
add edx, 1
mov dword [ebp - 0x4c4], edx
cmp dword [ebp - 0x4c4], 2
jge 0x4373f3
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x1c], eax
jge 0x4373db
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4373f1
mov dword [ebp - 0x1c], 0
jmp 0x4373ad
mov dword [ebp - 0x4c8], 0
jmp 0x43740e
mov edx, dword [ebp - 0x4c8]
add edx, 1
mov dword [ebp - 0x4c8], edx
cmp dword [ebp - 0x4c8], 3
jge 0x437425
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x1c], eax
jmp 0x4373ff
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x437437
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43744f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x4cc], 0
jmp 0x437471
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
cmp dword [ebp - 0x4cc], 0
jge 0x4374ac
mov eax, dword [ebp - 0x4cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4374a0
mov eax, dword [ebp - 0x4cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4374a7
and eax, 0xbc614e
jmp 0x4374aa
mov dword [ebp - 0x1c], eax
jmp 0x437462
mov dword [ebp - 4], 0xfffffffe
call fcn.004374ba
jmp 0x4374c2
mov edx, 1
test edx, edx
je 0x4374fc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4d0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4374ee
jmp 0x4374fc
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4d0]
mov dword [ebp - 0x1c], edx
jmp 0x4374c2
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4d4], 0
mov ecx, 1
test ecx, ecx
je 0x437559
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43753b
jmp 0x437559
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4d4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4d4]
add eax, 1
mov dword [ebp - 0x4d4], eax
jmp 0x43750f
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x70]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret