Function at 0x4618e0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47eb78
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x11b4
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x5c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x461936
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x20
jge 0x461947
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x46192d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x461959
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x461971
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x461983
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1d
jge 0x4619b4
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jge 0x46199c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4619b2
mov dword [ebp - 0x1c], 0
jmp 0x46197a
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
jmp 0x4619e2
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0xd
jge 0x461a08
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x4619d9
mov ecx, dword [ebp - 0x1c]
add ecx, 0xd
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], 0
jmp 0x461a23
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x16
jge 0x461a34
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x461a1a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x461a46
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x461a5e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x461a8f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x461a84
jmp 0x461a8f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
jmp 0x461a5e
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44], 0
jmp 0x461aaa
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0x10
jge 0x461adb
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edx
jge 0x461ac3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x461ad9
mov dword [ebp - 0x1c], 0
jmp 0x461aa1
mov edx, 1
test edx, edx
je 0x461b0c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x461b01
jmp 0x461b0c
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], edx
jmp 0x461adb
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], 0
jmp 0x461b27
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 5
jge 0x461b38
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], edx
jmp 0x461b1e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x461b4a
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x461b62
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x461b93
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x461b88
jmp 0x461b93
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], edx
jmp 0x461b62
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x54], 0
jmp 0x461bae
mov ecx, dword [ebp - 0x54]
add ecx, 1
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0xe
jge 0x461bf2
cmp dword [ebp - 0x1c], 0
jge 0x461bc2
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x461bd8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x58], 0xfa
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x461ba5
mov ecx, 1
test ecx, ecx
je 0x461c2c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x461c1e
jmp 0x461c2c
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], edx
jmp 0x461bf2
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x260], 0
jmp 0x461c50
mov ecx, dword [ebp - 0x260]
add ecx, 1
mov dword [ebp - 0x260], ecx
cmp dword [ebp - 0x260], 0x10
jge 0x461c9d
cmp dword [ebp - 0x1c], 0
jge 0x461c67
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x461c7d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x264], 0xfa
lea edx, [ebp - 0x264]
push edx
lea eax, [ebp - 0x460]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x461c41
mov ecx, 1
test ecx, ecx
je 0x461cd7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x464]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x461cc9
jmp 0x461cd7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x464]
mov dword [ebp - 0x1c], edx
jmp 0x461c9d
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x468], 0
jmp 0x461cfb
mov ecx, dword [ebp - 0x468]
add ecx, 1
mov dword [ebp - 0x468], ecx
cmp dword [ebp - 0x468], 3
jge 0x461d12
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x468]
mov dword [ebp - 0x1c], edx
jmp 0x461cec
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x461d24
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x461d3c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x461d76
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x461d68
jmp 0x461d76
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x46c]
mov dword [ebp - 0x1c], edx
jmp 0x461d3c
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x470], 0
jmp 0x461da1
mov ecx, dword [ebp - 0x470]
add ecx, 1
mov dword [ebp - 0x470], ecx
cmp dword [ebp - 0x470], 4
jge 0x461ddc
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x461dd0
mov eax, dword [ebp - 0x470]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x461dd7
and eax, 0xbc614e
jmp 0x461dda
mov dword [ebp - 0x1c], eax
jmp 0x461d92
mov dword [ebp - 4], 0xfffffffe
call fcn.00461dea
jmp 0x461df2
mov dword [ebp - 0x474], 0
jmp 0x461e0d
mov edx, dword [ebp - 0x474]
add edx, 1
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 3
jge 0x461e44
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x474]
mov dword [ebp - 0x1c], eax
jge 0x461e2c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x461e42
mov dword [ebp - 0x1c], 0
jmp 0x461dfe
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x47c], 1
mov dword [ebp - 0x480], 2
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x488], 0
jmp 0x461e87
mov edx, dword [ebp - 0x488]
add edx, 1
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 0
jge 0x461ec8
mov eax, dword [ebp - 0x478]
add eax, dword [ebp - 0x47c]
mov dword [ebp - 0x480], eax
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x478], ecx
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x480]
mov dword [ebp - 0x1c], eax
jmp 0x461e78
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x48c], 0
jmp 0x461ee9
mov edx, dword [ebp - 0x48c]
add edx, 1
mov dword [ebp - 0x48c], edx
cmp dword [ebp - 0x48c], 0
jge 0x461f36
cmp dword [ebp - 0x1c], 0
jge 0x461f00
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x461f16
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x490], 0xfa
lea edx, [ebp - 0x490]
push edx
lea eax, [ebp - 0x688]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x461eda
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0x690], 1
mov dword [ebp - 0x694], 2
mov dword [ebp - 0x698], 0
mov dword [ebp - 0x69c], 0
jmp 0x461f79
mov ecx, dword [ebp - 0x69c]
add ecx, 1
mov dword [ebp - 0x69c], ecx
cmp dword [ebp - 0x69c], 4
jge 0x461fba
mov edx, dword [ebp - 0x68c]
add edx, dword [ebp - 0x690]
mov dword [ebp - 0x694], edx
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x68c], eax
mov ecx, dword [ebp - 0x694]
mov dword [ebp - 0x690], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x694]
mov dword [ebp - 0x1c], edx
jmp 0x461f6a
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6a0], 0
mov ecx, 1
test ecx, ecx
je 0x462017
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp - 0x6a4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x461ff9
jmp 0x462017
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6a0]
add eax, 1
mov dword [ebp - 0x6a0], eax
jmp 0x461fcd
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x6a8], 0
jmp 0x462042
mov edx, dword [ebp - 0x6a8]
add edx, 1
mov dword [ebp - 0x6a8], edx
cmp dword [ebp - 0x6a8], 6
jge 0x46207d
mov eax, dword [ebp - 0x6a8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462071
mov eax, dword [ebp - 0x6a8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462078
and eax, 0xbc614e
jmp 0x46207b
mov dword [ebp - 0x1c], eax
jmp 0x462033
mov dword [ebp - 4], 0xfffffffe
call fcn.0046208b
jmp 0x462093
mov dword [ebp - 0x6ac], 0
mov edx, 1
test edx, edx
je 0x4620e7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x6b0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4620c9
jmp 0x4620e7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6ac]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6ac]
add eax, 1
mov dword [ebp - 0x6ac], eax
jmp 0x46209d
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6b4], 0
mov edx, 1
test edx, edx
je 0x462144
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x462126
jmp 0x462144
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6b4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6b4]
add eax, 1
mov dword [ebp - 0x6b4], eax
jmp 0x4620fa
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6bc], 0
jmp 0x462168
mov edx, dword [ebp - 0x6bc]
add edx, 1
mov dword [ebp - 0x6bc], edx
cmp dword [ebp - 0x6bc], 2
jge 0x46219f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x1c], eax
jge 0x462187
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46219d
mov dword [ebp - 0x1c], 0
jmp 0x462159
mov edx, 1
test edx, edx
je 0x4621d9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x6c0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4621cb
jmp 0x4621d9
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6c0]
mov dword [ebp - 0x1c], edx
jmp 0x46219f
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6c4], 0
mov ecx, 1
test ecx, ecx
je 0x462236
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x462218
jmp 0x462236
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6c4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6c4]
add eax, 1
mov dword [ebp - 0x6c4], eax
jmp 0x4621ec
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x462279
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6cc], eax
mov eax, dword [ebp - 0x6cc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46226b
jmp 0x462279
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x1c], edx
jmp 0x46223f
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6d0], 0
mov ecx, 1
test ecx, ecx
je 0x4622d6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4622b8
jmp 0x4622d6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6d0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6d0]
add eax, 1
mov dword [ebp - 0x6d0], eax
jmp 0x46228c
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x6d8], 0
jmp 0x462301
mov edx, dword [ebp - 0x6d8]
add edx, 1
mov dword [ebp - 0x6d8], edx
cmp dword [ebp - 0x6d8], 0
jge 0x46233c
mov eax, dword [ebp - 0x6d8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462330
mov eax, dword [ebp - 0x6d8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462337
and eax, 0xbc614e
jmp 0x46233a
mov dword [ebp - 0x1c], eax
jmp 0x4622f2
mov dword [ebp - 4], 0xfffffffe
call fcn.0046234a
jmp 0x462352
mov dword [ebp - 0x6dc], 0
mov edx, 1
test edx, edx
je 0x4623a6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x462388
jmp 0x4623a6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6dc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6dc]
add eax, 1
mov dword [ebp - 0x6dc], eax
jmp 0x46235c
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6e4], 1
mov dword [ebp - 0x6e8], 1
mov dword [ebp - 0x6ec], 2
mov dword [ebp - 0x6f0], 0
mov dword [ebp - 0x6f4], 0
jmp 0x4623f2
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
cmp dword [ebp - 0x6f4], 8
jge 0x462433
mov eax, dword [ebp - 0x6e4]
add eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x6ec], eax
mov ecx, dword [ebp - 0x6e8]
mov dword [ebp - 0x6e4], ecx
mov edx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6e8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x1c], eax
jmp 0x4623e3
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6f8], 0
jmp 0x462457
mov edx, dword [ebp - 0x6f8]
add edx, 1
mov dword [ebp - 0x6f8], edx
cmp dword [ebp - 0x6f8], 4
jge 0x4624a4
cmp dword [ebp - 0x1c], 0
jge 0x46246e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x462484
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6fc], 0xfa
lea edx, [ebp - 0x6fc]
push edx
lea eax, [ebp - 0x8f8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x462448
mov ecx, 1
test ecx, ecx
je 0x4624de
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x8fc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4624d0
jmp 0x4624de
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8fc]
mov dword [ebp - 0x1c], edx
jmp 0x4624a4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x900], 0
jmp 0x4624ff
mov ecx, dword [ebp - 0x900]
add ecx, 1
mov dword [ebp - 0x900], ecx
cmp dword [ebp - 0x900], 6
jge 0x462536
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x900]
mov dword [ebp - 0x1c], edx
jge 0x46251e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x462534
mov dword [ebp - 0x1c], 0
jmp 0x4624f0
mov dword [ebp - 0x904], 0
jmp 0x462551
mov edx, dword [ebp - 0x904]
add edx, 1
mov dword [ebp - 0x904], edx
cmp dword [ebp - 0x904], 7
jge 0x462568
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x904]
mov dword [ebp - 0x1c], eax
jmp 0x462542
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46257a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x462592
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x908], 1
mov dword [ebp - 0x90c], 1
mov dword [ebp - 0x910], 2
mov dword [ebp - 0x914], 0
mov dword [ebp - 0x918], 0
jmp 0x4625d5
mov edx, dword [ebp - 0x918]
add edx, 1
mov dword [ebp - 0x918], edx
cmp dword [ebp - 0x918], 4
jge 0x462616
mov eax, dword [ebp - 0x908]
add eax, dword [ebp - 0x90c]
mov dword [ebp - 0x910], eax
mov ecx, dword [ebp - 0x90c]
mov dword [ebp - 0x908], ecx
mov edx, dword [ebp - 0x910]
mov dword [ebp - 0x90c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x910]
mov dword [ebp - 0x1c], eax
jmp 0x4625c6
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x91c], 0
jmp 0x46263a
mov edx, dword [ebp - 0x91c]
add edx, 1
mov dword [ebp - 0x91c], edx
cmp dword [ebp - 0x91c], 7
jge 0x462651
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x91c]
mov dword [ebp - 0x1c], eax
jmp 0x46262b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x462663
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46267b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x920], 0
mov edx, 1
test edx, edx
je 0x4626cf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4626b1
jmp 0x4626cf
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x920]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x920]
add eax, 1
mov dword [ebp - 0x920], eax
jmp 0x462685
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x928], 0
jmp 0x4626f0
mov edx, dword [ebp - 0x928]
add edx, 1
mov dword [ebp - 0x928], edx
cmp dword [ebp - 0x928], 4
jge 0x462727
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x928]
mov dword [ebp - 0x1c], eax
jge 0x46270f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x462725
mov dword [ebp - 0x1c], 0
jmp 0x4626e1
mov dword [ebp - 0x92c], 1
mov dword [ebp - 0x930], 1
mov dword [ebp - 0x934], 2
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x93c], 0
jmp 0x46276a
mov edx, dword [ebp - 0x93c]
add edx, 1
mov dword [ebp - 0x93c], edx
cmp dword [ebp - 0x93c], 1
jge 0x4627ab
mov eax, dword [ebp - 0x92c]
add eax, dword [ebp - 0x930]
mov dword [ebp - 0x934], eax
mov ecx, dword [ebp - 0x930]
mov dword [ebp - 0x92c], ecx
mov edx, dword [ebp - 0x934]
mov dword [ebp - 0x930], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x934]
mov dword [ebp - 0x1c], eax
jmp 0x46275b
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x940], 0
mov edx, 1
test edx, edx
je 0x462808
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x944]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4627ea
jmp 0x462808
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x940]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x940]
add eax, 1
mov dword [ebp - 0x940], eax
jmp 0x4627be
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x948], 0
mov edx, 1
test edx, edx
je 0x462865
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0x94c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x462847
jmp 0x462865
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x948]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x948]
add eax, 1
mov dword [ebp - 0x948], eax
jmp 0x46281b
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4628a8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x950], eax
mov eax, dword [ebp - 0x950]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46289a
jmp 0x4628a8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x950]
mov dword [ebp - 0x1c], edx
jmp 0x46286e
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x954], 0
jmp 0x4628cc
mov ecx, dword [ebp - 0x954]
add ecx, 1
mov dword [ebp - 0x954], ecx
cmp dword [ebp - 0x954], 0
jge 0x4628e3
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x954]
mov dword [ebp - 0x1c], edx
jmp 0x4628bd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4628f5
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46290d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x958], 0
jmp 0x46292f
mov edx, dword [ebp - 0x958]
add edx, 1
mov dword [ebp - 0x958], edx
cmp dword [ebp - 0x958], 4
jge 0x46296a
mov eax, dword [ebp - 0x958]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46295e
mov eax, dword [ebp - 0x958]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462965
and eax, 0xbc614e
jmp 0x462968
mov dword [ebp - 0x1c], eax
jmp 0x462920
mov dword [ebp - 4], 0xfffffffe
call fcn.00462978
jmp 0x462980
mov dword [ebp - 0x95c], 0
mov edx, 1
test edx, edx
je 0x4629d4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x960]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4629b6
jmp 0x4629d4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x95c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x95c]
add eax, 1
mov dword [ebp - 0x95c], eax
jmp 0x46298a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x964], 0
jmp 0x4629ff
mov edx, dword [ebp - 0x964]
add edx, 1
mov dword [ebp - 0x964], edx
cmp dword [ebp - 0x964], 3
jge 0x462a3a
mov eax, dword [ebp - 0x964]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462a2e
mov eax, dword [ebp - 0x964]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462a35
and eax, 0xbc614e
jmp 0x462a38
mov dword [ebp - 0x1c], eax
jmp 0x4629f0
mov dword [ebp - 4], 0xfffffffe
call fcn.00462a48
jmp 0x462a50
mov dword [ebp - 0x968], 0
mov edx, 1
test edx, edx
je 0x462aa4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x96c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x462a86
jmp 0x462aa4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x968]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x968]
add eax, 1
mov dword [ebp - 0x968], eax
jmp 0x462a5a
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x970], 0
jmp 0x462ac8
mov edx, dword [ebp - 0x970]
add edx, 1
mov dword [ebp - 0x970], edx
cmp dword [ebp - 0x970], 3
jge 0x462adf
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x970]
mov dword [ebp - 0x1c], eax
jmp 0x462ab9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x462af1
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x462b09
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x974], 0
jmp 0x462b24
mov edx, dword [ebp - 0x974]
add edx, 1
mov dword [ebp - 0x974], edx
cmp dword [ebp - 0x974], 2
jge 0x462b3b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x974]
mov dword [ebp - 0x1c], eax
jmp 0x462b15
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x462b4d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x462b65
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x978], 0
mov edx, 1
test edx, edx
je 0x462bb9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x97c], eax
mov eax, dword [ebp - 0x97c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x462b9b
jmp 0x462bb9
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x978]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x978]
add eax, 1
mov dword [ebp - 0x978], eax
jmp 0x462b6f
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x980], 1
mov dword [ebp - 0x984], 1
mov dword [ebp - 0x988], 2
mov dword [ebp - 0x98c], 0
mov dword [ebp - 0x990], 0
jmp 0x462c05
mov edx, dword [ebp - 0x990]
add edx, 1
mov dword [ebp - 0x990], edx
cmp dword [ebp - 0x990], 3
jge 0x462c46
mov eax, dword [ebp - 0x980]
add eax, dword [ebp - 0x984]
mov dword [ebp - 0x988], eax
mov ecx, dword [ebp - 0x984]
mov dword [ebp - 0x980], ecx
mov edx, dword [ebp - 0x988]
mov dword [ebp - 0x984], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x988]
mov dword [ebp - 0x1c], eax
jmp 0x462bf6
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x994], 0
mov edx, 1
test edx, edx
je 0x462ca3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x998]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x462c85
jmp 0x462ca3
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x994]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x994]
add eax, 1
mov dword [ebp - 0x994], eax
jmp 0x462c59
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x99c], 0
jmp 0x462cc7
mov edx, dword [ebp - 0x99c]
add edx, 1
mov dword [ebp - 0x99c], edx
cmp dword [ebp - 0x99c], 3
jge 0x462d14
cmp dword [ebp - 0x1c], 0
jge 0x462cde
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x462cf4
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x9a0], 0xfa
lea edx, [ebp - 0x9a0]
push edx
lea eax, [ebp - 0xb98]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x462cb8
mov dword [ebp - 0xb9c], 0
jmp 0x462d2f
mov ecx, dword [ebp - 0xb9c]
add ecx, 1
mov dword [ebp - 0xb9c], ecx
cmp dword [ebp - 0xb9c], 1
jge 0x462d66
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xb9c]
mov dword [ebp - 0x1c], edx
jge 0x462d4e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x462d64
mov dword [ebp - 0x1c], 0
jmp 0x462d20
mov edx, 1
test edx, edx
je 0x462da0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xba0], eax
mov eax, dword [ebp - 0xba0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x462d92
jmp 0x462da0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xba0]
mov dword [ebp - 0x1c], edx
jmp 0x462d66
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xba4], 0
jmp 0x462dc1
mov ecx, dword [ebp - 0xba4]
add ecx, 1
mov dword [ebp - 0xba4], ecx
cmp dword [ebp - 0xba4], 1
jge 0x462dd8
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xba4]
mov dword [ebp - 0x1c], edx
jmp 0x462db2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x462dea
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x462e02
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0xba8], 0
jmp 0x462e24
mov edx, dword [ebp - 0xba8]
add edx, 1
mov dword [ebp - 0xba8], edx
cmp dword [ebp - 0xba8], 2
jge 0x462e5f
mov eax, dword [ebp - 0xba8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462e53
mov eax, dword [ebp - 0xba8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462e5a
and eax, 0xbc614e
jmp 0x462e5d
mov dword [ebp - 0x1c], eax
jmp 0x462e15
mov dword [ebp - 4], 0xfffffffe
call fcn.00462e6d
jmp 0x462e75
mov dword [ebp - 4], 6
mov dword [ebp - 0xbac], 0
jmp 0x462e97
mov edx, dword [ebp - 0xbac]
add edx, 1
mov dword [ebp - 0xbac], edx
cmp dword [ebp - 0xbac], 1
jge 0x462ed2
mov eax, dword [ebp - 0xbac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x462ec6
mov eax, dword [ebp - 0xbac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x462ecd
and eax, 0xbc614e
jmp 0x462ed0
mov dword [ebp - 0x1c], eax
jmp 0x462e88
mov dword [ebp - 4], 0xfffffffe
call fcn.00462ee0
jmp 0x462ee8
mov dword [ebp - 0xbb0], 0
jmp 0x462f03
mov edx, dword [ebp - 0xbb0]
add edx, 1
mov dword [ebp - 0xbb0], edx
cmp dword [ebp - 0xbb0], 2
jge 0x462f3a
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xbb0]
mov dword [ebp - 0x1c], eax
jge 0x462f22
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x462f38
mov dword [ebp - 0x1c], 0
jmp 0x462ef4
mov dword [ebp - 0xbb4], 0
jmp 0x462f55
cmp dword [ebp - 0xbb4], 0
jge 0x462f8c
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xbb4]
mov dword [ebp - 0x1c], eax
jge 0x462f74
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x462f8a
mov dword [ebp - 0xbb8], 0
jmp 0x462fa7
cmp dword [ebp - 0xbb8], 2
jge 0x462ff4