Function at 0x464600
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47ec30
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1100
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x30], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x464656
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2e
jge 0x464667
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x46464d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x464679
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x464691
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x4646a3
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x3c
jge 0x4646d4
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jge 0x4646bc
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4646d2
mov dword [ebp - 0x1c], 0
jmp 0x46469a
mov dword [ebp - 0x28], 0
jmp 0x4646e6
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x19
jge 0x46472a
cmp dword [ebp - 0x1c], 0
jge 0x4646fa
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464710
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2c], 0xfa
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4646dd
mov dword [ebp - 0x22c], 0
jmp 0x464745
mov ecx, dword [ebp - 0x22c]
add ecx, 1
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x22c], 0x20
jge 0x464792
cmp dword [ebp - 0x1c], 0
jge 0x46475c
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464772
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x230], 0xfa
lea edx, [ebp - 0x230]
push edx
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x464736
mov dword [ebp - 0x42c], 0
mov ecx, 1
test ecx, ecx
je 0x4647e6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4647c8
jmp 0x4647e6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x42c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
jmp 0x46479c
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x434], 0
jmp 0x46480a
mov edx, dword [ebp - 0x434]
add edx, 1
mov dword [ebp - 0x434], edx
cmp dword [ebp - 0x434], 0xd
jge 0x464821
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x434]
mov dword [ebp - 0x1c], eax
jmp 0x4647fb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x464833
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46484b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x438], 1
mov dword [ebp - 0x43c], 1
mov dword [ebp - 0x440], 2
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x448], 0
jmp 0x46488e
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 5
jge 0x4648cf
mov eax, dword [ebp - 0x438]
add eax, dword [ebp - 0x43c]
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x43c]
mov dword [ebp - 0x438], ecx
mov edx, dword [ebp - 0x440]
mov dword [ebp - 0x43c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x440]
mov dword [ebp - 0x1c], eax
jmp 0x46487f
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x44c], 0
jmp 0x4648f3
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 1
jge 0x46492a
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x44c]
mov dword [ebp - 0x1c], eax
jge 0x464912
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464928
mov dword [ebp - 0x1c], 0
jmp 0x4648e4
mov dword [ebp - 0x450], 0
jmp 0x464945
mov edx, dword [ebp - 0x450]
add edx, 1
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x450], 6
jge 0x46497c
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x450]
mov dword [ebp - 0x1c], eax
jge 0x464964
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46497a
mov dword [ebp - 0x1c], 0
jmp 0x464936
mov dword [ebp - 0x454], 0
jmp 0x464997
mov edx, dword [ebp - 0x454]
add edx, 1
mov dword [ebp - 0x454], edx
cmp dword [ebp - 0x454], 3
jge 0x4649ae
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x454]
mov dword [ebp - 0x1c], eax
jmp 0x464988
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4649c0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4649d8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x458], 0
jmp 0x4649f3
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 3
jge 0x464a40
cmp dword [ebp - 0x1c], 0
jge 0x464a0a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464a20
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x45c], 0xfa
lea edx, [ebp - 0x45c]
push edx
lea eax, [ebp - 0x658]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4649e4
mov dword [ebp - 0x65c], 1
mov dword [ebp - 0x660], 1
mov dword [ebp - 0x664], 2
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x66c], 0
jmp 0x464a83
mov ecx, dword [ebp - 0x66c]
add ecx, 1
mov dword [ebp - 0x66c], ecx
cmp dword [ebp - 0x66c], 2
jge 0x464ac4
mov edx, dword [ebp - 0x65c]
add edx, dword [ebp - 0x660]
mov dword [ebp - 0x664], edx
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x65c], eax
mov ecx, dword [ebp - 0x664]
mov dword [ebp - 0x660], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x664]
mov dword [ebp - 0x1c], edx
jmp 0x464a74
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x670], 0
jmp 0x464ae8
mov ecx, dword [ebp - 0x670]
add ecx, 1
mov dword [ebp - 0x670], ecx
cmp dword [ebp - 0x670], 7
jge 0x464b35
cmp dword [ebp - 0x1c], 0
jge 0x464aff
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464b15
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x674], 0xfa
lea edx, [ebp - 0x674]
push edx
lea eax, [ebp - 0x870]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x464ad9
mov dword [ebp - 0x874], 1
mov dword [ebp - 0x878], 1
mov dword [ebp - 0x87c], 2
mov dword [ebp - 0x880], 0
mov dword [ebp - 0x884], 0
jmp 0x464b78
mov ecx, dword [ebp - 0x884]
add ecx, 1
mov dword [ebp - 0x884], ecx
cmp dword [ebp - 0x884], 2
jge 0x464bb9
mov edx, dword [ebp - 0x874]
add edx, dword [ebp - 0x878]
mov dword [ebp - 0x87c], edx
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x87c]
mov dword [ebp - 0x878], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x87c]
mov dword [ebp - 0x1c], edx
jmp 0x464b69
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x464bfc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x888]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x464bee
jmp 0x464bfc
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x888]
mov dword [ebp - 0x1c], edx
jmp 0x464bc2
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x88c], 0
mov ecx, 1
test ecx, ecx
je 0x464c59
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x890]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x464c3b
jmp 0x464c59
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x88c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x88c]
add eax, 1
mov dword [ebp - 0x88c], eax
jmp 0x464c0f
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x894], 0
jmp 0x464c7d
mov edx, dword [ebp - 0x894]
add edx, 1
mov dword [ebp - 0x894], edx
cmp dword [ebp - 0x894], 2
jge 0x464c94
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x894]
mov dword [ebp - 0x1c], eax
jmp 0x464c6e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x464ca6
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x464cbe
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x898], 1
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x8a0], 2
mov dword [ebp - 0x8a4], 0
mov dword [ebp - 0x8a8], 0
jmp 0x464d01
mov edx, dword [ebp - 0x8a8]
add edx, 1
mov dword [ebp - 0x8a8], edx
cmp dword [ebp - 0x8a8], 1
jge 0x464d42
mov eax, dword [ebp - 0x898]
add eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], eax
mov ecx, dword [ebp - 0x89c]
mov dword [ebp - 0x898], ecx
mov edx, dword [ebp - 0x8a0]
mov dword [ebp - 0x89c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x1c], eax
jmp 0x464cf2
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8ac], 0
jmp 0x464d66
mov edx, dword [ebp - 0x8ac]
add edx, 1
mov dword [ebp - 0x8ac], edx
cmp dword [ebp - 0x8ac], 0
jge 0x464d9d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x1c], eax
jge 0x464d85
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464d9b
mov dword [ebp - 0x1c], 0
jmp 0x464d57
mov edx, 1
test edx, edx
je 0x464dd7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x8b0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x464dc9
jmp 0x464dd7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8b0]
mov dword [ebp - 0x1c], edx
jmp 0x464d9d
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8b4], 0
jmp 0x464dfb
mov ecx, dword [ebp - 0x8b4]
add ecx, 1
mov dword [ebp - 0x8b4], ecx
cmp dword [ebp - 0x8b4], 7
jge 0x464e12
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x1c], edx
jmp 0x464dec
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x464e24
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x464e3c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8b8], 0
jmp 0x464e57
mov edx, dword [ebp - 0x8b8]
add edx, 1
mov dword [ebp - 0x8b8], edx
cmp dword [ebp - 0x8b8], 4
jge 0x464ea4
cmp dword [ebp - 0x1c], 0
jge 0x464e6e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464e84
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8bc], 0xfa
lea edx, [ebp - 0x8bc]
push edx
lea eax, [ebp - 0xab8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x464e48
mov dword [ebp - 0xabc], 0
jmp 0x464ebf
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
cmp dword [ebp - 0xabc], 7
jge 0x464ed6
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xabc]
mov dword [ebp - 0x1c], edx
jmp 0x464eb0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x464ee8
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x464f00
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xac0], 1
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0xac8], 2
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xad0], 0
jmp 0x464f43
mov edx, dword [ebp - 0xad0]
add edx, 1
mov dword [ebp - 0xad0], edx
cmp dword [ebp - 0xad0], 5
jge 0x464f84
mov eax, dword [ebp - 0xac0]
add eax, dword [ebp - 0xac4]
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xac4]
mov dword [ebp - 0xac0], ecx
mov edx, dword [ebp - 0xac8]
mov dword [ebp - 0xac4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xac8]
mov dword [ebp - 0x1c], eax
jmp 0x464f34
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xad4], 0
jmp 0x464fa8
mov edx, dword [ebp - 0xad4]
add edx, 1
mov dword [ebp - 0xad4], edx
cmp dword [ebp - 0xad4], 3
jge 0x464fbf
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xad4]
mov dword [ebp - 0x1c], eax
jmp 0x464f99
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x464fd1
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x464fe9
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xad8], 1
mov dword [ebp - 0xadc], 1
mov dword [ebp - 0xae0], 2
mov dword [ebp - 0xae4], 0
mov dword [ebp - 0xae8], 0
jmp 0x46502c
mov edx, dword [ebp - 0xae8]
add edx, 1
mov dword [ebp - 0xae8], edx
cmp dword [ebp - 0xae8], 3
jge 0x46506d
mov eax, dword [ebp - 0xad8]
add eax, dword [ebp - 0xadc]
mov dword [ebp - 0xae0], eax
mov ecx, dword [ebp - 0xadc]
mov dword [ebp - 0xad8], ecx
mov edx, dword [ebp - 0xae0]
mov dword [ebp - 0xadc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xae0]
mov dword [ebp - 0x1c], eax
jmp 0x46501d
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0xaec], 0
jmp 0x465098
mov edx, dword [ebp - 0xaec]
add edx, 1
mov dword [ebp - 0xaec], edx
cmp dword [ebp - 0xaec], 0
jge 0x4650d3
mov eax, dword [ebp - 0xaec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4650c7
mov eax, dword [ebp - 0xaec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4650ce
and eax, 0xbc614e
jmp 0x4650d1
mov dword [ebp - 0x1c], eax
jmp 0x465089
mov dword [ebp - 4], 0xfffffffe
call fcn.004650e1
jmp 0x4650e9
mov dword [ebp - 0xaf0], 0
jmp 0x465104
mov edx, dword [ebp - 0xaf0]
add edx, 1
mov dword [ebp - 0xaf0], edx
cmp dword [ebp - 0xaf0], 4
jge 0x465151
cmp dword [ebp - 0x1c], 0
jge 0x46511b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465131
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xaf4], 0xfa
lea edx, [ebp - 0xaf4]
push edx
lea eax, [ebp - 0xcf0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4650f5
mov dword [ebp - 0xcf4], 0
jmp 0x46516c
mov ecx, dword [ebp - 0xcf4]
add ecx, 1
mov dword [ebp - 0xcf4], ecx
cmp dword [ebp - 0xcf4], 8
jge 0x4651a3
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xcf4]
mov dword [ebp - 0x1c], edx
jge 0x46518b
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4651a1
mov dword [ebp - 0x1c], 0
jmp 0x46515d
mov dword [ebp - 0xcf8], 0
jmp 0x4651be
mov edx, dword [ebp - 0xcf8]
add edx, 1
mov dword [ebp - 0xcf8], edx
cmp dword [ebp - 0xcf8], 3
jge 0x4651f5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xcf8]
mov dword [ebp - 0x1c], eax
jge 0x4651dd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4651f3
mov dword [ebp - 0x1c], 0
jmp 0x4651af
mov dword [ebp - 0xcfc], 0
mov edx, 1
test edx, edx
je 0x465249
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd00], eax
mov eax, dword [ebp - 0xd00]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46522b
jmp 0x465249
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xcfc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xcfc]
add eax, 1
mov dword [ebp - 0xcfc], eax
jmp 0x4651ff
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd04], 0
mov edx, 1
test edx, edx
je 0x4652a6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0xd08]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x465288
jmp 0x4652a6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd04]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd04]
add eax, 1
mov dword [ebp - 0xd04], eax
jmp 0x46525c
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0xd0c], 0
jmp 0x4652d1
mov edx, dword [ebp - 0xd0c]
add edx, 1
mov dword [ebp - 0xd0c], edx
cmp dword [ebp - 0xd0c], 5
jge 0x46530c
mov eax, dword [ebp - 0xd0c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x465300
mov eax, dword [ebp - 0xd0c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x465307
and eax, 0xbc614e
jmp 0x46530a
mov dword [ebp - 0x1c], eax
jmp 0x4652c2
mov dword [ebp - 4], 0xfffffffe
call fcn.0046531a
jmp 0x465322
mov dword [ebp - 0xd10], 0
mov edx, 1
test edx, edx
je 0x465376
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd14], eax
mov eax, dword [ebp - 0xd14]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x465358
jmp 0x465376
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd10]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd10]
add eax, 1
mov dword [ebp - 0xd10], eax
jmp 0x46532c
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd18], 0
jmp 0x46539a
mov edx, dword [ebp - 0xd18]
add edx, 1
mov dword [ebp - 0xd18], edx
cmp dword [ebp - 0xd18], 0
jge 0x4653e7
cmp dword [ebp - 0x1c], 0
jge 0x4653b1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4653c7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xd1c], 0xfa
lea edx, [ebp - 0xd1c]
push edx
lea eax, [ebp - 0xf18]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46538b
mov dword [ebp - 0xf1c], 0
jmp 0x465402
mov ecx, dword [ebp - 0xf1c]
add ecx, 1
mov dword [ebp - 0xf1c], ecx
cmp dword [ebp - 0xf1c], 2
jge 0x46544f
cmp dword [ebp - 0x1c], 0
jge 0x465419
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46542f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf20], 0xfa
lea edx, [ebp - 0xf20]
push edx
lea eax, [ebp - 0x1118]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4653f3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x30]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret