Function at 0x470280
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47ef90
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1ba4
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x40], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x4702d6
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x23
jge 0x470307
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jge 0x4702ef
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x470305
mov dword [ebp - 0x1c], 0
jmp 0x4702cd
mov dword [ebp - 0x24], 0
jmp 0x470319
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x2b
jge 0x47032a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jmp 0x470310
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47033c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x470354
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x470385
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47037a
jmp 0x470385
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x470354
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x2c], 0
jmp 0x4703a7
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0x1f
jge 0x4703d9
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4703cd
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4703d4
and eax, 0xbc614e
jmp 0x4703d7
mov dword [ebp - 0x1c], eax
jmp 0x47039e
mov dword [ebp - 4], 0xfffffffe
call fcn.004703e7
jmp 0x4703ef
mov dword [ebp - 0x30], 0
mov edx, 1
test edx, edx
je 0x470431
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47041c
jmp 0x470431
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
jmp 0x4703f6
mov ecx, dword [ebp - 0x1c]
add ecx, 0x16
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38], 0
jmp 0x47044c
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x12
jge 0x470490
cmp dword [ebp - 0x1c], 0
jge 0x470460
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x470476
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x3c], 0xfa
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x470443
mov ecx, 1
test ecx, ecx
je 0x4704ca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4704bc
jmp 0x4704ca
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], edx
jmp 0x470490
mov eax, dword [ebp - 0x1c]
add eax, 0x20
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x240], 0
jmp 0x4704f5
mov ecx, dword [ebp - 0x240]
add ecx, 1
mov dword [ebp - 0x240], ecx
cmp dword [ebp - 0x240], 0x1b
jge 0x470530
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x470524
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47052b
and eax, 0xbc614e
jmp 0x47052e
mov dword [ebp - 0x1c], eax
jmp 0x4704e6
mov dword [ebp - 4], 0xfffffffe
call fcn.0047053e
jmp 0x470546
mov dword [ebp - 0x244], 0
mov edx, 1
test edx, edx
je 0x47059a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47057c
jmp 0x47059a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x244]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x244]
add eax, 1
mov dword [ebp - 0x244], eax
jmp 0x470550
mov ecx, dword [ebp - 0x1c]
add ecx, 0x11
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x24c], 0
jmp 0x4705be
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 3
jge 0x47060b
cmp dword [ebp - 0x1c], 0
jge 0x4705d5
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4705eb
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x250], 0xfa
lea edx, [ebp - 0x250]
push edx
lea eax, [ebp - 0x448]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4705af
mov dword [ebp - 0x44c], 0
mov ecx, 1
test ecx, ecx
je 0x47065f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x470641
jmp 0x47065f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x44c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x44c]
add eax, 1
mov dword [ebp - 0x44c], eax
jmp 0x470615
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x454], 0
jmp 0x470683
mov edx, dword [ebp - 0x454]
add edx, 1
mov dword [ebp - 0x454], edx
cmp dword [ebp - 0x454], 0xa
jge 0x4706ba
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x454]
mov dword [ebp - 0x1c], eax
jge 0x4706a2
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4706b8
mov dword [ebp - 0x1c], 0
jmp 0x470674
mov dword [ebp - 4], 2
mov dword [ebp - 0x458], 0
jmp 0x4706dc
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 7
jge 0x470717
mov eax, dword [ebp - 0x458]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47070b
mov eax, dword [ebp - 0x458]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470712
and eax, 0xbc614e
jmp 0x470715
mov dword [ebp - 0x1c], eax
jmp 0x4706cd
mov dword [ebp - 4], 0xfffffffe
call fcn.00470725
jmp 0x47072d
mov dword [ebp - 0x45c], 0
jmp 0x470748
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 7
jge 0x47075f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x45c]
mov dword [ebp - 0x1c], eax
jmp 0x470739
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x470771
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x470789
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x460], 0
jmp 0x4707a4
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
cmp dword [ebp - 0x460], 5
jge 0x4707f1
cmp dword [ebp - 0x1c], 0
jge 0x4707bb
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4707d1
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x464], 0xfa
lea edx, [ebp - 0x464]
push edx
lea eax, [ebp - 0x660]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x470795
mov dword [ebp - 0x664], 1
mov dword [ebp - 0x668], 1
mov dword [ebp - 0x66c], 2
mov dword [ebp - 0x670], 0
mov dword [ebp - 0x674], 0
jmp 0x470834
mov ecx, dword [ebp - 0x674]
add ecx, 1
mov dword [ebp - 0x674], ecx
cmp dword [ebp - 0x674], 1
jge 0x470875
mov edx, dword [ebp - 0x664]
add edx, dword [ebp - 0x668]
mov dword [ebp - 0x66c], edx
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x664], eax
mov ecx, dword [ebp - 0x66c]
mov dword [ebp - 0x668], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x66c]
mov dword [ebp - 0x1c], edx
jmp 0x470825
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x678], 0
jmp 0x470899
mov ecx, dword [ebp - 0x678]
add ecx, 1
mov dword [ebp - 0x678], ecx
cmp dword [ebp - 0x678], 0
jge 0x4708e6
cmp dword [ebp - 0x1c], 0
jge 0x4708b0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4708c6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x67c], 0xfa
lea edx, [ebp - 0x67c]
push edx
lea eax, [ebp - 0x878]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x47088a
mov dword [ebp - 0x87c], 0
mov ecx, 1
test ecx, ecx
je 0x47093a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x880]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47091c
jmp 0x47093a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x87c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x87c]
add eax, 1
mov dword [ebp - 0x87c], eax
jmp 0x4708f0
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x884], 0
jmp 0x47095e
mov edx, dword [ebp - 0x884]
add edx, 1
mov dword [ebp - 0x884], edx
cmp dword [ebp - 0x884], 6
jge 0x470995
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x884]
mov dword [ebp - 0x1c], eax
jge 0x47097d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x470993
mov dword [ebp - 0x1c], 0
jmp 0x47094f
mov dword [ebp - 0x888], 0
jmp 0x4709b0
mov edx, dword [ebp - 0x888]
add edx, 1
mov dword [ebp - 0x888], edx
cmp dword [ebp - 0x888], 3
jge 0x4709fd
cmp dword [ebp - 0x1c], 0
jge 0x4709c7
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4709dd
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x88c], 0xfa
lea edx, [ebp - 0x88c]
push edx
lea eax, [ebp - 0xa88]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4709a1
mov dword [ebp - 4], 3
mov dword [ebp - 0xa8c], 0
jmp 0x470a1f
mov ecx, dword [ebp - 0xa8c]
add ecx, 1
mov dword [ebp - 0xa8c], ecx
cmp dword [ebp - 0xa8c], 7
jge 0x470a5a
mov eax, dword [ebp - 0xa8c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x470a4e
mov eax, dword [ebp - 0xa8c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470a55
and eax, 0xbc614e
jmp 0x470a58
mov dword [ebp - 0x1c], eax
jmp 0x470a10
mov dword [ebp - 4], 0xfffffffe
call fcn.00470a68
jmp 0x470a70
mov dword [ebp - 0xa90], 1
mov dword [ebp - 0xa94], 1
mov dword [ebp - 0xa98], 2
mov dword [ebp - 0xa9c], 0
mov dword [ebp - 0xaa0], 0
jmp 0x470ab3
mov edx, dword [ebp - 0xaa0]
add edx, 1
mov dword [ebp - 0xaa0], edx
cmp dword [ebp - 0xaa0], 6
jge 0x470af4
mov eax, dword [ebp - 0xa90]
add eax, dword [ebp - 0xa94]
mov dword [ebp - 0xa98], eax
mov ecx, dword [ebp - 0xa94]
mov dword [ebp - 0xa90], ecx
mov edx, dword [ebp - 0xa98]
mov dword [ebp - 0xa94], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xa98]
mov dword [ebp - 0x1c], eax
jmp 0x470aa4
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xaa4], 0
mov edx, 1
test edx, edx
je 0x470b51
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0xaa8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x470b33
jmp 0x470b51
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xaa4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xaa4]
add eax, 1
mov dword [ebp - 0xaa4], eax
jmp 0x470b07
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0xaac], 0
jmp 0x470b79
mov edx, dword [ebp - 0xaac]
add edx, 1
mov dword [ebp - 0xaac], edx
cmp dword [ebp - 0xaac], 8
jge 0x470bb4
mov eax, dword [ebp - 0xaac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x470ba8
mov eax, dword [ebp - 0xaac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470baf
and eax, 0xbc614e
jmp 0x470bb2
mov dword [ebp - 0x1c], eax
jmp 0x470b6a
mov dword [ebp - 4], 0xfffffffe
call fcn.00470bc2
jmp 0x470bca
mov dword [ebp - 4], 5
mov dword [ebp - 0xab0], 0
jmp 0x470bec
mov edx, dword [ebp - 0xab0]
add edx, 1
mov dword [ebp - 0xab0], edx
cmp dword [ebp - 0xab0], 8
jge 0x470c27
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x470c1b
mov eax, dword [ebp - 0xab0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470c22
and eax, 0xbc614e
jmp 0x470c25
mov dword [ebp - 0x1c], eax
jmp 0x470bdd
mov dword [ebp - 4], 0xfffffffe
call fcn.00470c35
jmp 0x470c3d
mov edx, 1
test edx, edx
je 0x470c77
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xab4], eax
mov eax, dword [ebp - 0xab4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x470c69
jmp 0x470c77
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xab4]
mov dword [ebp - 0x1c], edx
jmp 0x470c3d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x470cb7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xab8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x470ca9
jmp 0x470cb7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xab8]
mov dword [ebp - 0x1c], edx
jmp 0x470c7d
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xabc], 0
jmp 0x470cdb
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
cmp dword [ebp - 0xabc], 4
jge 0x470cf2
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xabc]
mov dword [ebp - 0x1c], edx
jmp 0x470ccc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x470d04
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x470d1c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x470d56
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0xac0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x470d48
jmp 0x470d56
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1c], edx
jmp 0x470d1c
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0xac4], 0
jmp 0x470d81
mov ecx, dword [ebp - 0xac4]
add ecx, 1
mov dword [ebp - 0xac4], ecx
cmp dword [ebp - 0xac4], 1
jge 0x470dbc
mov eax, dword [ebp - 0xac4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x470db0
mov eax, dword [ebp - 0xac4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470db7
and eax, 0xbc614e
jmp 0x470dba
mov dword [ebp - 0x1c], eax
jmp 0x470d72
mov dword [ebp - 4], 0xfffffffe
call fcn.00470dca
jmp 0x470dd2
mov dword [ebp - 0xac8], 1
mov dword [ebp - 0xacc], 1
mov dword [ebp - 0xad0], 2
mov dword [ebp - 0xad4], 0
mov dword [ebp - 0xad8], 0
jmp 0x470e15
mov edx, dword [ebp - 0xad8]
add edx, 1
mov dword [ebp - 0xad8], edx
cmp dword [ebp - 0xad8], 1
jge 0x470e56
mov eax, dword [ebp - 0xac8]
add eax, dword [ebp - 0xacc]
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0xac8], ecx
mov edx, dword [ebp - 0xad0]
mov dword [ebp - 0xacc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xad0]
mov dword [ebp - 0x1c], eax
jmp 0x470e06
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0xadc], 0
jmp 0x470e81
mov edx, dword [ebp - 0xadc]
add edx, 1
mov dword [ebp - 0xadc], edx
cmp dword [ebp - 0xadc], 4
jge 0x470ebc
mov eax, dword [ebp - 0xadc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x470eb0
mov eax, dword [ebp - 0xadc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470eb7
and eax, 0xbc614e
jmp 0x470eba
mov dword [ebp - 0x1c], eax
jmp 0x470e72
mov dword [ebp - 4], 0xfffffffe
call fcn.00470eca
jmp 0x470ed2
mov dword [ebp - 4], 8
mov dword [ebp - 0xae0], 0
jmp 0x470ef4
mov edx, dword [ebp - 0xae0]
add edx, 1
mov dword [ebp - 0xae0], edx
cmp dword [ebp - 0xae0], 4
jge 0x470f2f
mov eax, dword [ebp - 0xae0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x470f23
mov eax, dword [ebp - 0xae0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x470f2a
and eax, 0xbc614e
jmp 0x470f2d
mov dword [ebp - 0x1c], eax
jmp 0x470ee5
mov dword [ebp - 4], 0xfffffffe
call fcn.00470f3d
jmp 0x470f45
mov edx, 1
test edx, edx
je 0x470f7f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0xae4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x470f71
jmp 0x470f7f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xae4]
mov dword [ebp - 0x1c], edx
jmp 0x470f45
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xae8], 0
jmp 0x470fa3
mov ecx, dword [ebp - 0xae8]
add ecx, 1
mov dword [ebp - 0xae8], ecx
cmp dword [ebp - 0xae8], 2
jge 0x470fda
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xae8]
mov dword [ebp - 0x1c], edx
jge 0x470fc2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x470fd8
mov dword [ebp - 0x1c], 0
jmp 0x470f94
mov dword [ebp - 4], 9
mov dword [ebp - 0xaec], 0
jmp 0x470ffc
mov edx, dword [ebp - 0xaec]
add edx, 1
mov dword [ebp - 0xaec], edx
cmp dword [ebp - 0xaec], 4
jge 0x471037
mov eax, dword [ebp - 0xaec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47102b
mov eax, dword [ebp - 0xaec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x471032
and eax, 0xbc614e
jmp 0x471035
mov dword [ebp - 0x1c], eax
jmp 0x470fed
mov dword [ebp - 4], 0xfffffffe
call fcn.00471045
jmp 0x47104d
mov dword [ebp - 0xaf0], 0
mov edx, 1
test edx, edx
je 0x4710a1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xaf4], eax
mov eax, dword [ebp - 0xaf4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x471083
jmp 0x4710a1
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xaf0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xaf0]
add eax, 1
mov dword [ebp - 0xaf0], eax
jmp 0x471057
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xaf8], 0
jmp 0x4710c5
mov edx, dword [ebp - 0xaf8]
add edx, 1
mov dword [ebp - 0xaf8], edx
cmp dword [ebp - 0xaf8], 3
jge 0x4710dc
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xaf8]
mov dword [ebp - 0x1c], eax
jmp 0x4710b6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4710ee
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x471106
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x471140
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp - 0xafc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x471132
jmp 0x471140
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xafc]
mov dword [ebp - 0x1c], edx
jmp 0x471106
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb00], 1
mov dword [ebp - 0xb04], 1
mov dword [ebp - 0xb08], 2
mov dword [ebp - 0xb0c], 0
mov dword [ebp - 0xb10], 0
jmp 0x47118c
mov ecx, dword [ebp - 0xb10]
add ecx, 1
mov dword [ebp - 0xb10], ecx
cmp dword [ebp - 0xb10], 2
jge 0x4711cd
mov edx, dword [ebp - 0xb00]
add edx, dword [ebp - 0xb04]
mov dword [ebp - 0xb08], edx
mov eax, dword [ebp - 0xb04]
mov dword [ebp - 0xb00], eax
mov ecx, dword [ebp - 0xb08]
mov dword [ebp - 0xb04], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xb08]
mov dword [ebp - 0x1c], edx
jmp 0x47117d
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb14], 0
mov ecx, 1
test ecx, ecx
je 0x47122a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb18], eax
mov eax, dword [ebp - 0xb18]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47120c
jmp 0x47122a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb14]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb14]
add eax, 1
mov dword [ebp - 0xb14], eax
jmp 0x4711e0
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb1c], 1
mov dword [ebp - 0xb20], 1
mov dword [ebp - 0xb24], 2
mov dword [ebp - 0xb28], 0
mov dword [ebp - 0xb2c], 0
jmp 0x471276
mov edx, dword [ebp - 0xb2c]
add edx, 1
mov dword [ebp - 0xb2c], edx
cmp dword [ebp - 0xb2c], 1
jge 0x4712b7
mov eax, dword [ebp - 0xb1c]
add eax, dword [ebp - 0xb20]
mov dword [ebp - 0xb24], eax
mov ecx, dword [ebp - 0xb20]
mov dword [ebp - 0xb1c], ecx
mov edx, dword [ebp - 0xb24]
mov dword [ebp - 0xb20], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xb24]
mov dword [ebp - 0x1c], eax
jmp 0x471267
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb30], 0
jmp 0x4712db
mov edx, dword [ebp - 0xb30]
add edx, 1
mov dword [ebp - 0xb30], edx
cmp dword [ebp - 0xb30], 3
jge 0x4712f2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xb30]
mov dword [ebp - 0x1c], eax
jmp 0x4712cc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x471304
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47131c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xb34], 0
jmp 0x47133e
mov edx, dword [ebp - 0xb34]
add edx, 1
mov dword [ebp - 0xb34], edx
cmp dword [ebp - 0xb34], 2
jge 0x471379
mov eax, dword [ebp - 0xb34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47136d
mov eax, dword [ebp - 0xb34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x471374
and eax, 0xbc614e
jmp 0x471377
mov dword [ebp - 0x1c], eax
jmp 0x47132f
mov dword [ebp - 4], 0xfffffffe
call fcn.00471387
jmp 0x47138f
mov dword [ebp - 0xb38], 0
jmp 0x4713aa
mov edx, dword [ebp - 0xb38]
add edx, 1
mov dword [ebp - 0xb38], edx
cmp dword [ebp - 0xb38], 0
jge 0x4713e1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1c], eax
jge 0x4713c9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4713df
mov dword [ebp - 0x1c], 0
jmp 0x47139b
mov dword [ebp - 0xb3c], 0
jmp 0x4713fc
mov edx, dword [ebp - 0xb3c]
add edx, 1
mov dword [ebp - 0xb3c], edx
cmp dword [ebp - 0xb3c], 4
jge 0x471449
cmp dword [ebp - 0x1c], 0
jge 0x471413
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x471429
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xb40], 0xfa
lea edx, [ebp - 0xb40]
push edx
lea eax, [ebp - 0xd38]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4713ed
mov dword [ebp - 0xd3c], 0
jmp 0x471464
mov ecx, dword [ebp - 0xd3c]
add ecx, 1
mov dword [ebp - 0xd3c], ecx
cmp dword [ebp - 0xd3c], 4
jge 0x47147b
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xd3c]
mov dword [ebp - 0x1c], edx
jmp 0x471455
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47148d
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4714a5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd40], 0
jmp 0x4714c0
mov edx, dword [ebp - 0xd40]
add edx, 1
mov dword [ebp - 0xd40], edx
cmp dword [ebp - 0xd40], 0
jge 0x4714d7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xd40]
mov dword [ebp - 0x1c], eax
jmp 0x4714b1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4714e9
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x471501
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd44], 0
jmp 0x47151c
mov edx, dword [ebp - 0xd44]
add edx, 1
mov dword [ebp - 0xd44], edx
cmp dword [ebp - 0xd44], 3
jge 0x471569
cmp dword [ebp - 0x1c], 0
jge 0x471533
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x471549
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xd48], 0xfa
lea edx, [ebp - 0xd48]
push edx
lea eax, [ebp - 0xf40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x47150d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xf44], 0
jmp 0x47158b
mov ecx, dword [ebp - 0xf44]
add ecx, 1
mov dword [ebp - 0xf44], ecx
cmp dword [ebp - 0xf44], 2
jge 0x4715c6
mov eax, dword [ebp - 0xf44]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4715ba
mov eax, dword [ebp - 0xf44]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4715c1
and eax, 0xbc614e
jmp 0x4715c4
mov dword [ebp - 0x1c], eax
jmp 0x47157c
mov dword [ebp - 4], 0xfffffffe
call fcn.004715d4
jmp 0x4715dc
mov dword [ebp - 0xf48], 0
jmp 0x4715f7
mov edx, dword [ebp - 0xf48]
add edx, 1
mov dword [ebp - 0xf48], edx
cmp dword [ebp - 0xf48], 2
jge 0x471644
cmp dword [ebp - 0x1c], 0
jge 0x47160e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x471624
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf4c], 0xfa
lea edx, [ebp - 0xf4c]
push edx
lea eax, [ebp - 0x1148]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4715e8
mov dword [ebp - 0x114c], 0
jmp 0x47165f
mov ecx, dword [ebp - 0x114c]
add ecx, 1
mov dword [ebp - 0x114c], ecx
cmp dword [ebp - 0x114c], 3
jge 0x471696
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x114c]
mov dword [ebp - 0x1c], edx
jge 0x47167e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x471694
mov dword [ebp - 0x1c], 0
jmp 0x471650
mov dword [ebp - 0x1150], 1
mov dword [ebp - 0x1154], 1
mov dword [ebp - 0x1158], 2
mov dword [ebp - 0x115c], 0
mov dword [ebp - 0x1160], 0
jmp 0x4716d9
mov edx, dword [ebp - 0x1160]
add edx, 1
mov dword [ebp - 0x1160], edx
cmp dword [ebp - 0x1160], 0
jge 0x47171a
mov eax, dword [ebp - 0x1150]
add eax, dword [ebp - 0x1154]
mov dword [ebp - 0x1158], eax
mov ecx, dword [ebp - 0x1154]
mov dword [ebp - 0x1150], ecx
mov edx, dword [ebp - 0x1158]
mov dword [ebp - 0x1154], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1c], eax
jmp 0x4716ca
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1164], 1
mov dword [ebp - 0x1168], 1
mov dword [ebp - 0x116c], 2
mov dword [ebp - 0x1170], 0
mov dword [ebp - 0x1174], 0
jmp 0x471763
mov edx, dword [ebp - 0x1174]
add edx, 1
mov dword [ebp - 0x1174], edx
cmp dword [ebp - 0x1174], 4
jge 0x4717a4
mov eax, dword [ebp - 0x1164]
add eax, dword [ebp - 0x1168]
mov dword [ebp - 0x116c], eax
mov ecx, dword [ebp - 0x1168]
mov dword [ebp - 0x1164], ecx
mov edx, dword [ebp - 0x116c]
mov dword [ebp - 0x1168], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x116c]
mov dword [ebp - 0x1c], eax
jmp 0x471754
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1178], 0
jmp 0x4717c8
mov edx, dword [ebp - 0x1178]
add edx, 1
mov dword [ebp - 0x1178], edx
cmp dword [ebp - 0x1178], 0
jge 0x4717ff
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1178]
mov dword [ebp - 0x1c], eax
jge 0x4717e7
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4717fd
mov dword [ebp - 0x1c], 0
jmp 0x4717b9
mov edx, 1
test edx, edx
je 0x471839
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x117c], eax
mov eax, dword [ebp - 0x117c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x47182b
jmp 0x471839
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x117c]
mov dword [ebp - 0x1c], edx
jmp 0x4717ff
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1180], 0
jmp 0x471864
mov ecx, dword [ebp - 0x1180]
add ecx, 1
mov dword [ebp - 0x1180], ecx
cmp dword [ebp - 0x1180], 1
jge 0x47189f
mov eax, dword [ebp - 0x1180]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x471893
mov eax, dword [ebp - 0x1180]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47189a
and eax, 0xbc614e
jmp 0x47189d
mov dword [ebp - 0x1c], eax
jmp 0x471855
mov dword [ebp - 4], 0xfffffffe
call fcn.004718ad
jmp 0x4718b5
mov dword [ebp - 0x1184], 0
jmp 0x4718d0
cmp dword [ebp - 0x1184], 0
jge 0x4718e7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1184]
mov dword [ebp - 0x1c], eax
jmp 0x4718c1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4718f9