Function at 0x468930
Capabilities:
Check os version
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x511990
push 0x40b390
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x2168
call fcn.004149d0
mov eax, dword [0x517138]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x468989
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x20
jge 0x46899a
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x468980
cmp dword [ebp - 0x1c], 0
jge 0x4689a8
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4689c0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x4689d2
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x17
jge 0x468a10
cmp dword [ebp - 0x1c], 0
jge 0x4689e6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4689fc
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4689c9
mov dword [ebp - 0x224], 0
jmp 0x468a2b
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x468a42
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x224]
mov dword [ebp - 0x1c], ecx
jmp 0x468a1c
cmp dword [ebp - 0x1c], 0
jge 0x468a50
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468a68
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x228], 0
jmp 0x468a83
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 6
jge 0x468a9a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x228]
mov dword [ebp - 0x1c], eax
jmp 0x468a74
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x468aac
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468ac4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x22c], 0
jmp 0x468adf
mov edx, dword [ebp - 0x22c]
add edx, 1
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0xd
jge 0x468b20
cmp dword [ebp - 0x1c], 0
jge 0x468af6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468b0c
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x468ad0
mov dword [ebp - 0x42c], 0
jmp 0x468b3b
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0xd
jge 0x468b52
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x1c], ecx
jmp 0x468b2c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x468b64
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468b7c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x468bb6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x468ba8
jmp 0x468bb6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x430]
mov dword [ebp - 0x1c], edx
jmp 0x468b7c
mov eax, dword [ebp - 0x1c]
add eax, 0xe
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x434], 0
jmp 0x468bda
mov ecx, dword [ebp - 0x434]
add ecx, 1
mov dword [ebp - 0x434], ecx
cmp dword [ebp - 0x434], 0xe
jge 0x468c1b
cmp dword [ebp - 0x1c], 0
jge 0x468bf1
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468c07
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x630]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x468bcb
mov dword [ebp - 0x634], 0
jmp 0x468c36
mov eax, dword [ebp - 0x634]
add eax, 1
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 6
jge 0x468c83
cmp dword [ebp - 0x1c], 0
jge 0x468c4d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468c63
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x638], 0xfa
lea edx, [ebp - 0x638]
push edx
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x468c27
mov dword [ebp - 0x834], 0
jmp 0x468c9e
mov ecx, dword [ebp - 0x834]
add ecx, 1
mov dword [ebp - 0x834], ecx
cmp dword [ebp - 0x834], 2
jge 0x468cb5
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x834]
mov dword [ebp - 0x1c], edx
jmp 0x468c8f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x468cc7
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468cdf
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x838], 0xffffffff
mov dword [ebp - 0x83c], 0
jmp 0x468d0b
mov edx, dword [ebp - 0x83c]
add edx, 1
mov dword [ebp - 0x83c], edx
cmp dword [ebp - 0x83c], 5
jge 0x468d3d
mov eax, dword [ebp - 0x83c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x468d32
mov edx, dword [ebp - 0x838]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x468cfc
mov dword [ebp - 4], 0xfffffffe
jmp 0x468d5d
mov dword [ebp - 0x840], 0
jmp 0x468d78
mov edx, dword [ebp - 0x840]
add edx, 1
mov dword [ebp - 0x840], edx
cmp dword [ebp - 0x840], 6
jge 0x468dc5
cmp dword [ebp - 0x1c], 0
jge 0x468d8f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468da5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x844], 0xfa
lea edx, [ebp - 0x844]
push edx
lea eax, [ebp - 0xa40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x468d69
mov dword [ebp - 0xa44], 0
jmp 0x468de0
mov ecx, dword [ebp - 0xa44]
add ecx, 1
mov dword [ebp - 0xa44], ecx
cmp dword [ebp - 0xa44], 7
jge 0x468e2d
cmp dword [ebp - 0x1c], 0
jge 0x468df7
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468e0d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xa48], 0xfa
lea edx, [ebp - 0xa48]
push edx
lea eax, [ebp - 0xc40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x468dd1
mov dword [ebp - 4], 1
mov dword [ebp - 0xc44], 0xffffffff
mov dword [ebp - 0xc48], 0
jmp 0x468e59
mov ecx, dword [ebp - 0xc48]
add ecx, 1
mov dword [ebp - 0xc48], ecx
cmp dword [ebp - 0xc48], 6
jge 0x468e8b
mov eax, dword [ebp - 0xc48]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x468e80
mov edx, dword [ebp - 0xc44]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x468e4a
mov dword [ebp - 4], 0xfffffffe
jmp 0x468eab
mov dword [ebp - 4], 2
mov dword [ebp - 0xc4c], 0xffffffff
mov dword [ebp - 0xc50], 0
jmp 0x468ed7
mov edx, dword [ebp - 0xc50]
add edx, 1
mov dword [ebp - 0xc50], edx
cmp dword [ebp - 0xc50], 0
jge 0x468f09
mov eax, dword [ebp - 0xc50]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x468efe
mov edx, dword [ebp - 0xc4c]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x468ec8
mov dword [ebp - 4], 0xfffffffe
jmp 0x468f29
mov edx, 1
test edx, edx
je 0x468f63
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0xc54]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x468f55
jmp 0x468f63
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc54]
mov dword [ebp - 0x1c], edx
jmp 0x468f29
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc58], 0
jmp 0x468f84
mov ecx, dword [ebp - 0xc58]
add ecx, 1
mov dword [ebp - 0xc58], ecx
cmp dword [ebp - 0xc58], 4
jge 0x468f9b
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xc58]
mov dword [ebp - 0x1c], edx
jmp 0x468f75
cmp dword [ebp - 0x1c], 0
jge 0x468fa9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468fc1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc5c], 0
jmp 0x468fdc
mov edx, dword [ebp - 0xc5c]
add edx, 1
mov dword [ebp - 0xc5c], edx
cmp dword [ebp - 0xc5c], 4
jge 0x468ff3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc5c]
mov dword [ebp - 0x1c], eax
jmp 0x468fcd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469005
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46901d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc60], 0
jmp 0x469038
mov edx, dword [ebp - 0xc60]
add edx, 1
mov dword [ebp - 0xc60], edx
cmp dword [ebp - 0xc60], 4
jge 0x469085
cmp dword [ebp - 0x1c], 0
jge 0x46904f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469065
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc64], 0xfa
lea edx, [ebp - 0xc64]
push edx
lea eax, [ebp - 0xe60]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x469029
mov ecx, 1
test ecx, ecx
je 0x4690bf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp - 0xe64]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4690b1
jmp 0x4690bf
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe64]
mov dword [ebp - 0x1c], edx
jmp 0x469085
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0xe68], 0xffffffff
mov dword [ebp - 0xe6c], 0
jmp 0x4690f1
mov ecx, dword [ebp - 0xe6c]
add ecx, 1
mov dword [ebp - 0xe6c], ecx
cmp dword [ebp - 0xe6c], 1
jge 0x469123
mov eax, dword [ebp - 0xe6c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x469118
mov edx, dword [ebp - 0xe68]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4690e2
mov dword [ebp - 4], 0xfffffffe
jmp 0x469143
mov dword [ebp - 0xe70], 0
jmp 0x46915e
mov edx, dword [ebp - 0xe70]
add edx, 1
mov dword [ebp - 0xe70], edx
cmp dword [ebp - 0xe70], 1
jge 0x4691ab
mov eax, dword [ebp - 0xe70]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x46918d
mov eax, dword [ebp - 0xe70]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x46919d
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe70]
mov dword [ebp - 0x1c], edx
jmp 0x4691a9
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe70]
mov dword [ebp - 0x1c], eax
jmp 0x46914f
mov dword [ebp - 0xe74], 0
jmp 0x4691c6
mov ecx, dword [ebp - 0xe74]
add ecx, 1
mov dword [ebp - 0xe74], ecx
cmp dword [ebp - 0xe74], 0
jge 0x4691dd
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xe74]
mov dword [ebp - 0x1c], edx
jmp 0x4691b7
cmp dword [ebp - 0x1c], 0
jge 0x4691eb
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469203
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe78], 0
jmp 0x46921e
mov edx, dword [ebp - 0xe78]
add edx, 1
mov dword [ebp - 0xe78], edx
cmp dword [ebp - 0xe78], 5
jge 0x469235
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xe78]
mov dword [ebp - 0x1c], eax
jmp 0x46920f
cmp dword [ebp - 0x1c], 0
jge 0x469243
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46925b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe7c], 0
jmp 0x469276
mov edx, dword [ebp - 0xe7c]
add edx, 1
mov dword [ebp - 0xe7c], edx
cmp dword [ebp - 0xe7c], 8
jge 0x46928d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xe7c]
mov dword [ebp - 0x1c], eax
jmp 0x469267
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46929f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4692b7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xe80], 0
jmp 0x4692d2
mov edx, dword [ebp - 0xe80]
add edx, 1
mov dword [ebp - 0xe80], edx
cmp dword [ebp - 0xe80], 0
jge 0x46931f
mov eax, dword [ebp - 0xe80]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x469301
mov eax, dword [ebp - 0xe80]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x469311
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe80]
mov dword [ebp - 0x1c], edx
jmp 0x46931d
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe80]
mov dword [ebp - 0x1c], eax
jmp 0x4692c3
mov dword [ebp - 0xe84], 0
jmp 0x46933a
mov ecx, dword [ebp - 0xe84]
add ecx, 1
mov dword [ebp - 0xe84], ecx
cmp dword [ebp - 0xe84], 4
jge 0x469387
mov eax, dword [ebp - 0xe84]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x469369
mov eax, dword [ebp - 0xe84]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x469379
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe84]
mov dword [ebp - 0x1c], edx
jmp 0x469385
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xe84]
mov dword [ebp - 0x1c], eax
jmp 0x46932b
mov dword [ebp - 4], 4
mov dword [ebp - 0xe88], 0xffffffff
mov dword [ebp - 0xe8c], 0
jmp 0x4693b3
mov ecx, dword [ebp - 0xe8c]
add ecx, 1
mov dword [ebp - 0xe8c], ecx
cmp dword [ebp - 0xe8c], 1
jge 0x4693e5
mov eax, dword [ebp - 0xe8c]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4693da
mov edx, dword [ebp - 0xe88]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4693a4
mov dword [ebp - 4], 0xfffffffe
jmp 0x469405
mov dword [ebp - 0xe90], 0
jmp 0x469420
mov edx, dword [ebp - 0xe90]
add edx, 1
mov dword [ebp - 0xe90], edx
cmp dword [ebp - 0xe90], 2
jge 0x46946d
cmp dword [ebp - 0x1c], 0
jge 0x469437
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46944d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xe94], 0xfa
lea edx, [ebp - 0xe94]
push edx
lea eax, [ebp - 0x1090]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x469411
mov dword [ebp - 4], 5
mov dword [ebp - 0x1094], 0xffffffff
mov dword [ebp - 0x1098], 0
jmp 0x469499
mov ecx, dword [ebp - 0x1098]
add ecx, 1
mov dword [ebp - 0x1098], ecx
cmp dword [ebp - 0x1098], 2
jge 0x4694cb
mov eax, dword [ebp - 0x1098]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x4694c0
mov edx, dword [ebp - 0x1094]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x46948a
mov dword [ebp - 4], 0xfffffffe
jmp 0x4694eb
mov dword [ebp - 0x109c], 0
jmp 0x469506
mov edx, dword [ebp - 0x109c]
add edx, 1
mov dword [ebp - 0x109c], edx
cmp dword [ebp - 0x109c], 4
jge 0x469553
cmp dword [ebp - 0x1c], 0
jge 0x46951d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469533
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10a0], 0xfa
lea edx, [ebp - 0x10a0]
push edx
lea eax, [ebp - 0x1298]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4694f7
mov dword [ebp - 0x129c], 0
jmp 0x46956e
mov ecx, dword [ebp - 0x129c]
add ecx, 1
mov dword [ebp - 0x129c], ecx
cmp dword [ebp - 0x129c], 0
jge 0x4695bb
mov eax, dword [ebp - 0x129c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x46959d
mov eax, dword [ebp - 0x129c]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4695ad
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x129c]
mov dword [ebp - 0x1c], edx
jmp 0x4695b9
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x129c]
mov dword [ebp - 0x1c], eax
jmp 0x46955f
mov dword [ebp - 0x12a0], 0
jmp 0x4695d6
mov ecx, dword [ebp - 0x12a0]
add ecx, 1
mov dword [ebp - 0x12a0], ecx
cmp dword [ebp - 0x12a0], 0
jge 0x469623
mov eax, dword [ebp - 0x12a0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x469605
mov eax, dword [ebp - 0x12a0]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x469615
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x12a0]
mov dword [ebp - 0x1c], edx
jmp 0x469621
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x12a0]
mov dword [ebp - 0x1c], eax
jmp 0x4695c7
mov dword [ebp - 0x12a4], 0
jmp 0x46963e
mov ecx, dword [ebp - 0x12a4]
add ecx, 1
mov dword [ebp - 0x12a4], ecx
cmp dword [ebp - 0x12a4], 2
jge 0x469655
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x12a4]
mov dword [ebp - 0x1c], edx
jmp 0x46962f
cmp dword [ebp - 0x1c], 0
jge 0x469663
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46967b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12a8], 0
jmp 0x469696
mov edx, dword [ebp - 0x12a8]
add edx, 1
mov dword [ebp - 0x12a8], edx
cmp dword [ebp - 0x12a8], 1
jge 0x4696e3
mov eax, dword [ebp - 0x12a8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4696c5
mov eax, dword [ebp - 0x12a8]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4696d5
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x12a8]
mov dword [ebp - 0x1c], edx
jmp 0x4696e1
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x12a8]
mov dword [ebp - 0x1c], eax
jmp 0x469687
mov ecx, 1
test ecx, ecx
je 0x46971d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12ac], eax
mov eax, dword [ebp - 0x12ac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46970f
jmp 0x46971d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12ac]
mov dword [ebp - 0x1c], edx
jmp 0x4696e3
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x469760
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12b0], eax
mov eax, dword [ebp - 0x12b0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x469752
jmp 0x469760
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x12b0]
mov dword [ebp - 0x1c], edx
jmp 0x469726
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x12b4], 0
jmp 0x469784
mov ecx, dword [ebp - 0x12b4]
add ecx, 1
mov dword [ebp - 0x12b4], ecx
cmp dword [ebp - 0x12b4], 4
jge 0x4697d1
cmp dword [ebp - 0x1c], 0
jge 0x46979b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4697b1
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x12b8], 0xfa
lea edx, [ebp - 0x12b8]
push edx
lea eax, [ebp - 0x14b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x469775
mov ecx, 1
test ecx, ecx
je 0x46980b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x14b4], eax
mov eax, dword [ebp - 0x14b4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4697fd
jmp 0x46980b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14b4]
mov dword [ebp - 0x1c], edx
jmp 0x4697d1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14b8], 0
jmp 0x46982c
mov ecx, dword [ebp - 0x14b8]
add ecx, 1
mov dword [ebp - 0x14b8], ecx
cmp dword [ebp - 0x14b8], 4
jge 0x469843
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14b8]
mov dword [ebp - 0x1c], edx
jmp 0x46981d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469855
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46986d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14bc], 0
jmp 0x469888
mov edx, dword [ebp - 0x14bc]
add edx, 1
mov dword [ebp - 0x14bc], edx
cmp dword [ebp - 0x14bc], 2
jge 0x4698d5
mov eax, dword [ebp - 0x14bc]
cdq
mov ecx, 5
idiv ecx
cmp edx, 1
je 0x4698b7
mov eax, dword [ebp - 0x14bc]
cdq
mov ecx, 5
idiv ecx
cmp edx, 4
jne 0x4698c7
nop
nop
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14bc]
mov dword [ebp - 0x1c], edx
jmp 0x4698d3
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x14bc]
mov dword [ebp - 0x1c], eax
jmp 0x469879
mov dword [ebp - 0x14c0], 0
jmp 0x4698f0
mov ecx, dword [ebp - 0x14c0]
add ecx, 1
mov dword [ebp - 0x14c0], ecx
cmp dword [ebp - 0x14c0], 3
jge 0x469907
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14c0]
mov dword [ebp - 0x1c], edx
jmp 0x4698e1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469919
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x469931
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14c4], 0
jmp 0x46994c
mov edx, dword [ebp - 0x14c4]
add edx, 1
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jge 0x469963
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x14c4]
mov dword [ebp - 0x1c], eax
jmp 0x46993d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469975
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46998d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4699c7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x14c8], eax
mov eax, dword [ebp - 0x14c8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4699b9
jmp 0x4699c7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x1c], edx
jmp 0x46998d
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14cc], 0
jmp 0x4699eb
mov ecx, dword [ebp - 0x14cc]
add ecx, 1
mov dword [ebp - 0x14cc], ecx
cmp dword [ebp - 0x14cc], 1
jge 0x469a2c
cmp dword [ebp - 0x1c], 0
jge 0x469a02
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x469a18
mov dword [ebp - 0x1c], 0
push 0xfa
lea edx, [ebp - 0x16c8]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4699dc
mov dword [ebp - 0x16cc], 0
jmp 0x469a47
mov eax, dword [ebp - 0x16cc]
add eax, 1
mov dword [ebp - 0x16cc], eax
cmp dword [ebp - 0x16cc], 2
jge 0x469a5e
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x16cc]
mov dword [ebp - 0x1c], ecx
jmp 0x469a38
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469a70
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x469a88
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x16d0], 0xffffffff
mov dword [ebp - 0x16d4], 0
jmp 0x469ab4
mov edx, dword [ebp - 0x16d4]
add edx, 1
mov dword [ebp - 0x16d4], edx
cmp dword [ebp - 0x16d4], 2
jge 0x469ae6
mov eax, dword [ebp - 0x16d4]
cdq
mov ecx, 0x25
idiv ecx
test edx, edx
jne 0x469adb
mov edx, dword [ebp - 0x16d0]
movsx eax, byte [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x469aa5
mov dword [ebp - 4], 0xfffffffe
jmp 0x469b06
mov dword [ebp - 0x16d8], 0
jmp 0x469b21
mov edx, dword [ebp - 0x16d8]
add edx, 1
mov dword [ebp - 0x16d8], edx
cmp dword [ebp - 0x16d8], 4
jge 0x469b38
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x16d8]
mov dword [ebp - 0x1c], eax
jmp 0x469b12
cmp dword [ebp - 0x1c], 0
jge 0x469b46
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469b5e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x16dc], 0
jmp 0x469b79