Function at 0x4676f0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47ecf8
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1384
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x467746
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x10
jge 0x46778a
cmp dword [ebp - 0x1c], 0
jge 0x46775a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467770
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0xfa
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46773d
mov dword [ebp - 4], 0
mov dword [ebp - 0x224], 0
jmp 0x4677ac
mov ecx, dword [ebp - 0x224]
add ecx, 1
mov dword [ebp - 0x224], ecx
cmp dword [ebp - 0x224], 0x16
jge 0x4677e7
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4677db
mov eax, dword [ebp - 0x224]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4677e2
and eax, 0xbc614e
jmp 0x4677e5
mov dword [ebp - 0x1c], eax
jmp 0x46779d
mov dword [ebp - 4], 0xfffffffe
call fcn.004677f5
jmp 0x4677fd
mov edx, 1
test edx, edx
je 0x467837
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x467829
jmp 0x467837
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x228]
mov dword [ebp - 0x1c], edx
jmp 0x4677fd
mov eax, dword [ebp - 0x1c]
add eax, 0xb
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x22c], 0
jmp 0x46785b
mov ecx, dword [ebp - 0x22c]
add ecx, 1
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x22c], 0x12
jge 0x4678a8
cmp dword [ebp - 0x1c], 0
jge 0x467872
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467888
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x230], 0xfa
lea edx, [ebp - 0x230]
push edx
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46784c
mov ecx, 1
test ecx, ecx
je 0x4678e2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4678d4
jmp 0x4678e2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x42c]
mov dword [ebp - 0x1c], edx
jmp 0x4678a8
mov eax, dword [ebp - 0x1c]
add eax, 0x12
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x430], 0
jmp 0x467906
mov ecx, dword [ebp - 0x430]
add ecx, 1
mov dword [ebp - 0x430], ecx
cmp dword [ebp - 0x430], 1
jge 0x46791d
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x430]
mov dword [ebp - 0x1c], edx
jmp 0x4678f7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46792f
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x467947
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x434], 0
mov edx, 1
test edx, edx
je 0x46799b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46797d
jmp 0x46799b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x434]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x434]
add eax, 1
mov dword [ebp - 0x434], eax
jmp 0x467951
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x43c], 0
jmp 0x4679bf
mov edx, dword [ebp - 0x43c]
add edx, 1
mov dword [ebp - 0x43c], edx
cmp dword [ebp - 0x43c], 0x15
jge 0x4679d6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x43c]
mov dword [ebp - 0x1c], eax
jmp 0x4679b0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4679e8
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x467a00
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x440], 0
jmp 0x467a1b
mov edx, dword [ebp - 0x440]
add edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 4
jge 0x467a32
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x440]
mov dword [ebp - 0x1c], eax
jmp 0x467a0c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x467a44
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x467a5c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x444], 0
mov edx, 1
test edx, edx
je 0x467ab0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x467a92
jmp 0x467ab0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x444]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x444]
add eax, 1
mov dword [ebp - 0x444], eax
jmp 0x467a66
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x44c], 0
jmp 0x467ad4
mov edx, dword [ebp - 0x44c]
add edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 0xf
jge 0x467b0b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x44c]
mov dword [ebp - 0x1c], eax
jge 0x467af3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467b09
mov dword [ebp - 0x1c], 0
jmp 0x467ac5
mov dword [ebp - 4], 1
mov dword [ebp - 0x450], 0
jmp 0x467b2d
mov edx, dword [ebp - 0x450]
add edx, 1
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x450], 5
jge 0x467b68
mov eax, dword [ebp - 0x450]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x467b5c
mov eax, dword [ebp - 0x450]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x467b63
and eax, 0xbc614e
jmp 0x467b66
mov dword [ebp - 0x1c], eax
jmp 0x467b1e
mov dword [ebp - 4], 0xfffffffe
call fcn.00467b76
jmp 0x467b7e
mov dword [ebp - 0x454], 0
mov edx, 1
test edx, edx
je 0x467bd2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x458]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x467bb4
jmp 0x467bd2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x454]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x454]
add eax, 1
mov dword [ebp - 0x454], eax
jmp 0x467b88
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x45c], 0
jmp 0x467bfd
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 0x10
jge 0x467c38
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x467c2c
mov eax, dword [ebp - 0x45c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x467c33
and eax, 0xbc614e
jmp 0x467c36
mov dword [ebp - 0x1c], eax
jmp 0x467bee
mov dword [ebp - 4], 0xfffffffe
call fcn.00467c46
jmp 0x467c4e
mov dword [ebp - 0x460], 0
jmp 0x467c69
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 0x10
jge 0x467ca0
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x460]
mov dword [ebp - 0x1c], eax
jge 0x467c88
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467c9e
mov dword [ebp - 0x1c], 0
jmp 0x467c5a
mov dword [ebp - 0x464], 0
mov edx, 1
test edx, edx
je 0x467cf4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x468]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x467cd6
jmp 0x467cf4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x464]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x464]
add eax, 1
mov dword [ebp - 0x464], eax
jmp 0x467caa
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x46c], 0
jmp 0x467d1f
mov edx, dword [ebp - 0x46c]
add edx, 1
mov dword [ebp - 0x46c], edx
cmp dword [ebp - 0x46c], 0xc
jge 0x467d5a
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x467d4e
mov eax, dword [ebp - 0x46c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x467d55
and eax, 0xbc614e
jmp 0x467d58
mov dword [ebp - 0x1c], eax
jmp 0x467d10
mov dword [ebp - 4], 0xfffffffe
call fcn.00467d68
jmp 0x467d70
mov dword [ebp - 0x470], 0
jmp 0x467d8b
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 9
jge 0x467dd8
cmp dword [ebp - 0x1c], 0
jge 0x467da2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467db8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x474], 0xfa
lea edx, [ebp - 0x474]
push edx
lea eax, [ebp - 0x670]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x467d7c
mov dword [ebp - 0x674], 0
mov ecx, 1
test ecx, ecx
je 0x467e2c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x678]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x467e0e
jmp 0x467e2c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x674]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x674]
add eax, 1
mov dword [ebp - 0x674], eax
jmp 0x467de2
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x67c], 0
mov edx, 1
test edx, edx
je 0x467e89
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x680]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x467e6b
jmp 0x467e89
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x67c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x67c]
add eax, 1
mov dword [ebp - 0x67c], eax
jmp 0x467e3f
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x684], 0
jmp 0x467ead
mov edx, dword [ebp - 0x684]
add edx, 1
mov dword [ebp - 0x684], edx
cmp dword [ebp - 0x684], 0xe
jge 0x467ee4
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x684]
mov dword [ebp - 0x1c], eax
jge 0x467ecc
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467ee2
mov dword [ebp - 0x1c], 0
jmp 0x467e9e
mov dword [ebp - 4], 4
mov dword [ebp - 0x688], 0
jmp 0x467f06
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
cmp dword [ebp - 0x688], 0xb
jge 0x467f41
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x467f35
mov eax, dword [ebp - 0x688]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x467f3c
and eax, 0xbc614e
jmp 0x467f3f
mov dword [ebp - 0x1c], eax
jmp 0x467ef7
mov dword [ebp - 4], 0xfffffffe
call fcn.00467f4f
jmp 0x467f57
mov dword [ebp - 0x68c], 0
jmp 0x467f72
mov edx, dword [ebp - 0x68c]
add edx, 1
mov dword [ebp - 0x68c], edx
cmp dword [ebp - 0x68c], 7
jge 0x467fbf
cmp dword [ebp - 0x1c], 0
jge 0x467f89
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467f9f
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x690], 0xfa
lea edx, [ebp - 0x690]
push edx
lea eax, [ebp - 0x888]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x467f63
mov dword [ebp - 4], 5
mov dword [ebp - 0x88c], 0
jmp 0x467fe1
mov ecx, dword [ebp - 0x88c]
add ecx, 1
mov dword [ebp - 0x88c], ecx
cmp dword [ebp - 0x88c], 0
jge 0x46801c
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468010
mov eax, dword [ebp - 0x88c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468017
and eax, 0xbc614e
jmp 0x46801a
mov dword [ebp - 0x1c], eax
jmp 0x467fd2
mov dword [ebp - 4], 0xfffffffe
call fcn.0046802a
jmp 0x468032
mov edx, 1
test edx, edx
je 0x46806c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x890]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46805e
jmp 0x46806c
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x890]
mov dword [ebp - 0x1c], edx
jmp 0x468032
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x894], 0
jmp 0x468090
mov ecx, dword [ebp - 0x894]
add ecx, 1
mov dword [ebp - 0x894], ecx
cmp dword [ebp - 0x894], 5
jge 0x4680a7
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x894]
mov dword [ebp - 0x1c], edx
jmp 0x468081
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4680b9
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4680d1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x898], 1
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x8a0], 2
mov dword [ebp - 0x8a4], 0
mov dword [ebp - 0x8a8], 0
jmp 0x468114
mov edx, dword [ebp - 0x8a8]
add edx, 1
mov dword [ebp - 0x8a8], edx
cmp dword [ebp - 0x8a8], 8
jge 0x468155
mov eax, dword [ebp - 0x898]
add eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], eax
mov ecx, dword [ebp - 0x89c]
mov dword [ebp - 0x898], ecx
mov edx, dword [ebp - 0x8a0]
mov dword [ebp - 0x89c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x1c], eax
jmp 0x468105
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8ac], 0
jmp 0x468179
mov edx, dword [ebp - 0x8ac]
add edx, 1
mov dword [ebp - 0x8ac], edx
cmp dword [ebp - 0x8ac], 7
jge 0x4681c6
cmp dword [ebp - 0x1c], 0
jge 0x468190
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4681a6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8b0], 0xfa
lea edx, [ebp - 0x8b0]
push edx
lea eax, [ebp - 0xaa8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46816a
mov dword [ebp - 0xaac], 0
jmp 0x4681e1
mov ecx, dword [ebp - 0xaac]
add ecx, 1
mov dword [ebp - 0xaac], ecx
cmp dword [ebp - 0xaac], 4
jge 0x468218
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xaac]
mov dword [ebp - 0x1c], edx
jge 0x468200
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468216
mov dword [ebp - 0x1c], 0
jmp 0x4681d2
mov dword [ebp - 0xab0], 0
jmp 0x468233
mov edx, dword [ebp - 0xab0]
add edx, 1
mov dword [ebp - 0xab0], edx
cmp dword [ebp - 0xab0], 0
jge 0x46824a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xab0]
mov dword [ebp - 0x1c], eax
jmp 0x468224
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46825c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468274
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xab4], 0
jmp 0x46828f
mov edx, dword [ebp - 0xab4]
add edx, 1
mov dword [ebp - 0xab4], edx
cmp dword [ebp - 0xab4], 1
jge 0x4682a6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xab4]
mov dword [ebp - 0x1c], eax
jmp 0x468280
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4682b8
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4682d0
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xab8], 1
mov dword [ebp - 0xabc], 1
mov dword [ebp - 0xac0], 2
mov dword [ebp - 0xac4], 0
mov dword [ebp - 0xac8], 0
jmp 0x468313
mov edx, dword [ebp - 0xac8]
add edx, 1
mov dword [ebp - 0xac8], edx
cmp dword [ebp - 0xac8], 4
jge 0x468354
mov eax, dword [ebp - 0xab8]
add eax, dword [ebp - 0xabc]
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
mov dword [ebp - 0xab8], ecx
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0xabc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xac0]
mov dword [ebp - 0x1c], eax
jmp 0x468304
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xacc], 0
jmp 0x468378
mov edx, dword [ebp - 0xacc]
add edx, 1
mov dword [ebp - 0xacc], edx
cmp dword [ebp - 0xacc], 3
jge 0x4683af
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xacc]
mov dword [ebp - 0x1c], eax
jge 0x468397
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4683ad
mov dword [ebp - 0x1c], 0
jmp 0x468369
mov dword [ebp - 4], 6
mov dword [ebp - 0xad0], 0
jmp 0x4683d1
mov edx, dword [ebp - 0xad0]
add edx, 1
mov dword [ebp - 0xad0], edx
cmp dword [ebp - 0xad0], 0
jge 0x46840c
mov eax, dword [ebp - 0xad0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468400
mov eax, dword [ebp - 0xad0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468407
and eax, 0xbc614e
jmp 0x46840a
mov dword [ebp - 0x1c], eax
jmp 0x4683c2
mov dword [ebp - 4], 0xfffffffe
call fcn.0046841a
jmp 0x468422
mov dword [ebp - 0xad4], 0
jmp 0x46843d
mov edx, dword [ebp - 0xad4]
add edx, 1
mov dword [ebp - 0xad4], edx
cmp dword [ebp - 0xad4], 1
jge 0x46848a
cmp dword [ebp - 0x1c], 0
jge 0x468454
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46846a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xad8], 0xfa
lea edx, [ebp - 0xad8]
push edx
lea eax, [ebp - 0xcd0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46842e
mov dword [ebp - 0xcd4], 0
jmp 0x4684a5
mov ecx, dword [ebp - 0xcd4]
add ecx, 1
mov dword [ebp - 0xcd4], ecx
cmp dword [ebp - 0xcd4], 7
jge 0x4684dc
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x1c], edx
jge 0x4684c4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4684da
mov dword [ebp - 0x1c], 0
jmp 0x468496
mov edx, 1
test edx, edx
je 0x468516
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcd8], eax
mov eax, dword [ebp - 0xcd8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x468508
jmp 0x468516
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xcd8]
mov dword [ebp - 0x1c], edx
jmp 0x4684dc
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x468559
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 0xcdc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46854b
jmp 0x468559
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xcdc]
mov dword [ebp - 0x1c], edx
jmp 0x46851f
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xce0], 0
mov ecx, 1
test ecx, ecx
je 0x4685b6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xce4], eax
mov eax, dword [ebp - 0xce4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x468598
jmp 0x4685b6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xce0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xce0]
add eax, 1
mov dword [ebp - 0xce0], eax
jmp 0x46856c
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4685f9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xce8], eax
mov eax, dword [ebp - 0xce8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4685eb
jmp 0x4685f9
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xce8]
mov dword [ebp - 0x1c], edx
jmp 0x4685bf
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xcec], 0
jmp 0x46861d
mov ecx, dword [ebp - 0xcec]
add ecx, 1
mov dword [ebp - 0xcec], ecx
cmp dword [ebp - 0xcec], 4
jge 0x46866a
cmp dword [ebp - 0x1c], 0
jge 0x468634
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46864a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xcf0], 0xfa
lea edx, [ebp - 0xcf0]
push edx
lea eax, [ebp - 0xee8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46860e
mov dword [ebp - 0xeec], 0
jmp 0x468685
mov ecx, dword [ebp - 0xeec]
add ecx, 1
mov dword [ebp - 0xeec], ecx
cmp dword [ebp - 0xeec], 0
jge 0x46869c
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xeec]
mov dword [ebp - 0x1c], edx
jmp 0x468676
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4686ae
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4686c6
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0xef0], 0
jmp 0x4686e8
mov edx, dword [ebp - 0xef0]
add edx, 1
mov dword [ebp - 0xef0], edx
cmp dword [ebp - 0xef0], 4
jge 0x468723
mov eax, dword [ebp - 0xef0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468717
mov eax, dword [ebp - 0xef0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46871e
and eax, 0xbc614e
jmp 0x468721
mov dword [ebp - 0x1c], eax
jmp 0x4686d9
mov dword [ebp - 4], 0xfffffffe
call fcn.00468731
jmp 0x468739
mov dword [ebp - 4], 8
mov dword [ebp - 0xef4], 0
jmp 0x46875b
mov edx, dword [ebp - 0xef4]
add edx, 1
mov dword [ebp - 0xef4], edx
cmp dword [ebp - 0xef4], 4
jge 0x468796
mov eax, dword [ebp - 0xef4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46878a
mov eax, dword [ebp - 0xef4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468791
and eax, 0xbc614e
jmp 0x468794
mov dword [ebp - 0x1c], eax
jmp 0x46874c
mov dword [ebp - 4], 0xfffffffe
call fcn.004687a4
jmp 0x4687ac
mov dword [ebp - 4], 9
mov dword [ebp - 0xef8], 0
jmp 0x4687ce
mov edx, dword [ebp - 0xef8]
add edx, 1
mov dword [ebp - 0xef8], edx
cmp dword [ebp - 0xef8], 1
jge 0x468809
mov eax, dword [ebp - 0xef8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4687fd
mov eax, dword [ebp - 0xef8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468804
and eax, 0xbc614e
jmp 0x468807
mov dword [ebp - 0x1c], eax
jmp 0x4687bf
mov dword [ebp - 4], 0xfffffffe
call fcn.00468817
jmp 0x46881f
mov dword [ebp - 0xefc], 0
jmp 0x46883a
mov edx, dword [ebp - 0xefc]
add edx, 1
mov dword [ebp - 0xefc], edx
cmp dword [ebp - 0xefc], 3
jge 0x468887
cmp dword [ebp - 0x1c], 0
jge 0x468851
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468867
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf00], 0xfa
lea edx, [ebp - 0xf00]
push edx
lea eax, [ebp - 0x10f8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46882b
mov ecx, 1
test ecx, ecx
je 0x4688c1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x10fc], eax
mov eax, dword [ebp - 0x10fc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4688b3
jmp 0x4688c1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10fc]
mov dword [ebp - 0x1c], edx
jmp 0x468887
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1100], 0
jmp 0x4688e5
mov ecx, dword [ebp - 0x1100]
add ecx, 1
mov dword [ebp - 0x1100], ecx
cmp dword [ebp - 0x1100], 2
jge 0x4688fc
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1100]
mov dword [ebp - 0x1c], edx
jmp 0x4688d6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46890e
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468926
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1104], 0
jmp 0x468941
mov edx, dword [ebp - 0x1104]
add edx, 1
mov dword [ebp - 0x1104], edx
cmp dword [ebp - 0x1104], 3
jge 0x468958
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1104]
mov dword [ebp - 0x1c], eax
jmp 0x468932
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46896a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468982
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4689bc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1108], eax
mov eax, dword [ebp - 0x1108]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4689ae
jmp 0x4689bc
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1108]
mov dword [ebp - 0x1c], edx
jmp 0x468982
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4689ff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x110c], eax
mov eax, dword [ebp - 0x110c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4689f1
jmp 0x4689ff
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x110c]
mov dword [ebp - 0x1c], edx
jmp 0x4689c5
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1110], 0
jmp 0x468a2a
mov ecx, dword [ebp - 0x1110]
add ecx, 1
mov dword [ebp - 0x1110], ecx
cmp dword [ebp - 0x1110], 1
jge 0x468a65
mov eax, dword [ebp - 0x1110]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468a59
mov eax, dword [ebp - 0x1110]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468a60
and eax, 0xbc614e
jmp 0x468a63
mov dword [ebp - 0x1c], eax
jmp 0x468a1b
mov dword [ebp - 4], 0xfffffffe
call fcn.00468a73
jmp 0x468a7b
mov edx, 1
test edx, edx
je 0x468ab5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1114], eax
mov eax, dword [ebp - 0x1114]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x468aa7
jmp 0x468ab5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1114]
mov dword [ebp - 0x1c], edx
jmp 0x468a7b
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1118], 1
mov dword [ebp - 0x111c], 1
mov dword [ebp - 0x1120], 2
mov dword [ebp - 0x1124], 0
mov dword [ebp - 0x1128], 0
jmp 0x468b01
mov ecx, dword [ebp - 0x1128]
add ecx, 1
mov dword [ebp - 0x1128], ecx
cmp dword [ebp - 0x1128], 4
jge 0x468b42
mov edx, dword [ebp - 0x1118]
add edx, dword [ebp - 0x111c]
mov dword [ebp - 0x1120], edx
mov eax, dword [ebp - 0x111c]
mov dword [ebp - 0x1118], eax
mov ecx, dword [ebp - 0x1120]
mov dword [ebp - 0x111c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1120]
mov dword [ebp - 0x1c], edx
jmp 0x468af2
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x112c], 0
mov ecx, 1
test ecx, ecx
je 0x468b9f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1130], eax
mov eax, dword [ebp - 0x1130]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x468b81
jmp 0x468b9f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x112c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x112c]
add eax, 1
mov dword [ebp - 0x112c], eax
jmp 0x468b55
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1134], 0
jmp 0x468bc3
mov edx, dword [ebp - 0x1134]
add edx, 1
mov dword [ebp - 0x1134], edx
cmp dword [ebp - 0x1134], 2
jge 0x468bfa
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1134]
mov dword [ebp - 0x1c], eax
jge 0x468be2
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468bf8
mov dword [ebp - 0x1c], 0
jmp 0x468bb4
mov dword [ebp - 0x1138], 1
mov dword [ebp - 0x113c], 1
mov dword [ebp - 0x1140], 2
mov dword [ebp - 0x1144], 0
mov dword [ebp - 0x1148], 0
jmp 0x468c3d
mov edx, dword [ebp - 0x1148]
add edx, 1
mov dword [ebp - 0x1148], edx
cmp dword [ebp - 0x1148], 0
jge 0x468c7e
mov eax, dword [ebp - 0x1138]
add eax, dword [ebp - 0x113c]
mov dword [ebp - 0x1140], eax
mov ecx, dword [ebp - 0x113c]
mov dword [ebp - 0x1138], ecx
mov edx, dword [ebp - 0x1140]
mov dword [ebp - 0x113c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1140]
mov dword [ebp - 0x1c], eax
jmp 0x468c2e
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x114c], 0
jmp 0x468c9f
cmp dword [ebp - 0x114c], 1
jge 0x468cd6
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x114c]
mov dword [ebp - 0x1c], eax
jge 0x468cbe
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468cd4
mov dword [ebp - 0x1150], 0
jmp 0x468cf1
cmp dword [ebp - 0x1150], 2
jge 0x468d28