Function at 0x469280
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47eda8
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x13d4
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x30], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov eax, 1
test eax, eax
je 0x469306
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4692f1
jmp 0x469306
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x4692cb
mov ecx, dword [ebp - 0x1c]
add ecx, 0xd
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], 0
jmp 0x469321
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xd
jge 0x469365
cmp dword [ebp - 0x1c], 0
jge 0x469335
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46934b
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2c], 0xfa
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x469318
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x234], 2
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x23c], 0
jmp 0x4693a8
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
cmp dword [ebp - 0x23c], 2
jge 0x4693e9
mov edx, dword [ebp - 0x22c]
add edx, dword [ebp - 0x230]
mov dword [ebp - 0x234], edx
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x230], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x234]
mov dword [ebp - 0x1c], edx
jmp 0x469399
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x240], 0
jmp 0x46940d
mov ecx, dword [ebp - 0x240]
add ecx, 1
mov dword [ebp - 0x240], ecx
cmp dword [ebp - 0x240], 0
jge 0x469444
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x240]
mov dword [ebp - 0x1c], edx
jge 0x46942c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469442
mov dword [ebp - 0x1c], 0
jmp 0x4693fe
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x254], 0
jmp 0x469487
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 4
jge 0x4694c8
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x248]
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], eax
jmp 0x469478
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x258], 0
jmp 0x4694ec
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 2
jge 0x469503
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x258]
mov dword [ebp - 0x1c], eax
jmp 0x4694dd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469515
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46952d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x26c], 0
jmp 0x469570
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
cmp dword [ebp - 0x26c], 0x10
jge 0x4695b1
mov eax, dword [ebp - 0x25c]
add eax, dword [ebp - 0x260]
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x25c], ecx
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x264]
mov dword [ebp - 0x1c], eax
jmp 0x469561
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 0
jmp 0x4695fd
mov edx, dword [ebp - 0x280]
add edx, 1
mov dword [ebp - 0x280], edx
cmp dword [ebp - 0x280], 0xa
jge 0x46963e
mov eax, dword [ebp - 0x270]
add eax, dword [ebp - 0x274]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x270], ecx
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x274], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x278]
mov dword [ebp - 0x1c], eax
jmp 0x4695ee
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x284], 0
jmp 0x469662
mov edx, dword [ebp - 0x284]
add edx, 1
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 0xe
jge 0x469699
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x284]
mov dword [ebp - 0x1c], eax
jge 0x469681
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469697
mov dword [ebp - 0x1c], 0
jmp 0x469653
mov dword [ebp - 0x288], 0
jmp 0x4696b4
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 0xa
jge 0x4696cb
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x288]
mov dword [ebp - 0x1c], eax
jmp 0x4696a5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4696dd
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4696f5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x294], 2
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x29c], 0
jmp 0x469738
mov edx, dword [ebp - 0x29c]
add edx, 1
mov dword [ebp - 0x29c], edx
cmp dword [ebp - 0x29c], 2
jge 0x469779
mov eax, dword [ebp - 0x28c]
add eax, dword [ebp - 0x290]
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x290], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x294]
mov dword [ebp - 0x1c], eax
jmp 0x469729
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2a0], 0
jmp 0x46979d
mov edx, dword [ebp - 0x2a0]
add edx, 1
mov dword [ebp - 0x2a0], edx
cmp dword [ebp - 0x2a0], 3
jge 0x4697ea
cmp dword [ebp - 0x1c], 0
jge 0x4697b4
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4697ca
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2a4], 0xfa
lea edx, [ebp - 0x2a4]
push edx
lea eax, [ebp - 0x4a0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46978e
mov dword [ebp - 0x4a4], 1
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 0x4ac], 2
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x4b4], 0
jmp 0x46982d
mov ecx, dword [ebp - 0x4b4]
add ecx, 1
mov dword [ebp - 0x4b4], ecx
cmp dword [ebp - 0x4b4], 2
jge 0x46986e
mov edx, dword [ebp - 0x4a4]
add edx, dword [ebp - 0x4a8]
mov dword [ebp - 0x4ac], edx
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp - 0x4a8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4ac]
mov dword [ebp - 0x1c], edx
jmp 0x46981e
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4698b1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4b8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4698a3
jmp 0x4698b1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4b8]
mov dword [ebp - 0x1c], edx
jmp 0x469877
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4bc], 0
mov ecx, 1
test ecx, ecx
je 0x46990e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4698f0
jmp 0x46990e
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4bc]
add eax, 1
mov dword [ebp - 0x4bc], eax
jmp 0x4698c4
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4c4], 1
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x4cc], 2
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x4d4], 0
jmp 0x46995a
mov edx, dword [ebp - 0x4d4]
add edx, 1
mov dword [ebp - 0x4d4], edx
cmp dword [ebp - 0x4d4], 0
jge 0x46999b
mov eax, dword [ebp - 0x4c4]
add eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x4cc], eax
mov ecx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4c4], ecx
mov edx, dword [ebp - 0x4cc]
mov dword [ebp - 0x4c8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x1c], eax
jmp 0x46994b
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4d8], 0
jmp 0x4699bc
mov edx, dword [ebp - 0x4d8]
add edx, 1
mov dword [ebp - 0x4d8], edx
cmp dword [ebp - 0x4d8], 6
jge 0x4699f3
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x1c], eax
jge 0x4699db
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4699f1
mov dword [ebp - 0x1c], 0
jmp 0x4699ad
mov dword [ebp - 0x4dc], 0
jmp 0x469a0e
mov edx, dword [ebp - 0x4dc]
add edx, 1
mov dword [ebp - 0x4dc], edx
cmp dword [ebp - 0x4dc], 2
jge 0x469a25
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x1c], eax
jmp 0x4699ff
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469a37
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x469a4f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4e0], 1
mov dword [ebp - 0x4e4], 1
mov dword [ebp - 0x4e8], 2
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4f0], 0
jmp 0x469a92
mov edx, dword [ebp - 0x4f0]
add edx, 1
mov dword [ebp - 0x4f0], edx
cmp dword [ebp - 0x4f0], 5
jge 0x469ad3
mov eax, dword [ebp - 0x4e0]
add eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x4e0], ecx
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x4e4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x1c], eax
jmp 0x469a83
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4f4], 0
jmp 0x469af7
mov edx, dword [ebp - 0x4f4]
add edx, 1
mov dword [ebp - 0x4f4], edx
cmp dword [ebp - 0x4f4], 0
jge 0x469b0e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x1c], eax
jmp 0x469ae8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469b20
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x469b38
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4f8], 1
mov dword [ebp - 0x4fc], 1
mov dword [ebp - 0x500], 2
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x508], 0
jmp 0x469b7b
mov edx, dword [ebp - 0x508]
add edx, 1
mov dword [ebp - 0x508], edx
cmp dword [ebp - 0x508], 2
jge 0x469bbc
mov eax, dword [ebp - 0x4f8]
add eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x500], eax
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0x4f8], ecx
mov edx, dword [ebp - 0x500]
mov dword [ebp - 0x4fc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x500]
mov dword [ebp - 0x1c], eax
jmp 0x469b6c
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x469bff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x50c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x469bf1
jmp 0x469bff
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x50c]
mov dword [ebp - 0x1c], edx
jmp 0x469bc5
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x510], 0
jmp 0x469c23
mov ecx, dword [ebp - 0x510]
add ecx, 1
mov dword [ebp - 0x510], ecx
cmp dword [ebp - 0x510], 3
jge 0x469c5a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x510]
mov dword [ebp - 0x1c], edx
jge 0x469c42
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469c58
mov dword [ebp - 0x1c], 0
jmp 0x469c14
mov dword [ebp - 0x514], 0
jmp 0x469c75
mov edx, dword [ebp - 0x514]
add edx, 1
mov dword [ebp - 0x514], edx
cmp dword [ebp - 0x514], 5
jge 0x469c8c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x514]
mov dword [ebp - 0x1c], eax
jmp 0x469c66
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469c9e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x469cb6
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x518], 0
jmp 0x469cd8
mov edx, dword [ebp - 0x518]
add edx, 1
mov dword [ebp - 0x518], edx
cmp dword [ebp - 0x518], 7
jge 0x469d13
mov eax, dword [ebp - 0x518]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x469d07
mov eax, dword [ebp - 0x518]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x469d0e
and eax, 0xbc614e
jmp 0x469d11
mov dword [ebp - 0x1c], eax
jmp 0x469cc9
mov dword [ebp - 4], 0xfffffffe
call fcn.00469d21
jmp 0x469d29
mov dword [ebp - 0x51c], 0
jmp 0x469d44
mov edx, dword [ebp - 0x51c]
add edx, 1
mov dword [ebp - 0x51c], edx
cmp dword [ebp - 0x51c], 4
jge 0x469d7b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x51c]
mov dword [ebp - 0x1c], eax
jge 0x469d63
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469d79
mov dword [ebp - 0x1c], 0
jmp 0x469d35
mov dword [ebp - 0x520], 0
jmp 0x469d96
mov edx, dword [ebp - 0x520]
add edx, 1
mov dword [ebp - 0x520], edx
cmp dword [ebp - 0x520], 5
jge 0x469dad
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x520]
mov dword [ebp - 0x1c], eax
jmp 0x469d87
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469dbf
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x469dd7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x524], 0
jmp 0x469df2
mov edx, dword [ebp - 0x524]
add edx, 1
mov dword [ebp - 0x524], edx
cmp dword [ebp - 0x524], 2
jge 0x469e09
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x524]
mov dword [ebp - 0x1c], eax
jmp 0x469de3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469e1b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x469e33
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x528], 0
jmp 0x469e4e
mov edx, dword [ebp - 0x528]
add edx, 1
mov dword [ebp - 0x528], edx
cmp dword [ebp - 0x528], 6
jge 0x469e65
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x528]
mov dword [ebp - 0x1c], eax
jmp 0x469e3f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x469e77
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x469e8f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x52c], 0
jmp 0x469eb1
mov edx, dword [ebp - 0x52c]
add edx, 1
mov dword [ebp - 0x52c], edx
cmp dword [ebp - 0x52c], 2
jge 0x469eec
mov eax, dword [ebp - 0x52c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x469ee0
mov eax, dword [ebp - 0x52c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x469ee7
and eax, 0xbc614e
jmp 0x469eea
mov dword [ebp - 0x1c], eax
jmp 0x469ea2
mov dword [ebp - 4], 0xfffffffe
call fcn.00469efa
jmp 0x469f02
mov dword [ebp - 0x530], 0
mov edx, 1
test edx, edx
je 0x469f56
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x534]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x469f38
jmp 0x469f56
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x530]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x530]
add eax, 1
mov dword [ebp - 0x530], eax
jmp 0x469f0c
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x538], 0
jmp 0x469f7a
mov edx, dword [ebp - 0x538]
add edx, 1
mov dword [ebp - 0x538], edx
cmp dword [ebp - 0x538], 8
jge 0x469fb1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x538]
mov dword [ebp - 0x1c], eax
jge 0x469f99
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469faf
mov dword [ebp - 0x1c], 0
jmp 0x469f6b
mov dword [ebp - 0x53c], 0
jmp 0x469fcc
mov edx, dword [ebp - 0x53c]
add edx, 1
mov dword [ebp - 0x53c], edx
cmp dword [ebp - 0x53c], 2
jge 0x46a019
cmp dword [ebp - 0x1c], 0
jge 0x469fe3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469ff9
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x540], 0xfa
lea edx, [ebp - 0x540]
push edx
lea eax, [ebp - 0x738]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x469fbd
mov ecx, 1
test ecx, ecx
je 0x46a053
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x73c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46a045
jmp 0x46a053
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x73c]
mov dword [ebp - 0x1c], edx
jmp 0x46a019
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x740], 0
mov ecx, 1
test ecx, ecx
je 0x46a0b0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x744]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a092
jmp 0x46a0b0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x740]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x740]
add eax, 1
mov dword [ebp - 0x740], eax
jmp 0x46a066
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x748], 0
jmp 0x46a0d4
mov edx, dword [ebp - 0x748]
add edx, 1
mov dword [ebp - 0x748], edx
cmp dword [ebp - 0x748], 6
jge 0x46a10b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x748]
mov dword [ebp - 0x1c], eax
jge 0x46a0f3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a109
mov dword [ebp - 0x1c], 0
jmp 0x46a0c5
mov dword [ebp - 0x74c], 0
mov edx, 1
test edx, edx
je 0x46a15f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a141
jmp 0x46a15f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x74c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x74c]
add eax, 1
mov dword [ebp - 0x74c], eax
jmp 0x46a115
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x754], 0
jmp 0x46a183
mov edx, dword [ebp - 0x754]
add edx, 1
mov dword [ebp - 0x754], edx
cmp dword [ebp - 0x754], 4
jge 0x46a1d0
cmp dword [ebp - 0x1c], 0
jge 0x46a19a
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a1b0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x758], 0xfa
lea edx, [ebp - 0x758]
push edx
lea eax, [ebp - 0x950]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46a174
mov dword [ebp - 0x954], 0
jmp 0x46a1eb
mov ecx, dword [ebp - 0x954]
add ecx, 1
mov dword [ebp - 0x954], ecx
cmp dword [ebp - 0x954], 4
jge 0x46a202
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x954]
mov dword [ebp - 0x1c], edx
jmp 0x46a1dc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46a214
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46a22c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x46a266
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46a258
jmp 0x46a266
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x958]
mov dword [ebp - 0x1c], edx
jmp 0x46a22c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x46a2a6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x95c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46a298
jmp 0x46a2a6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x95c]
mov dword [ebp - 0x1c], edx
jmp 0x46a26c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x46a2e6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x960]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46a2d8
jmp 0x46a2e6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x960]
mov dword [ebp - 0x1c], edx
jmp 0x46a2ac
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x964], 0
jmp 0x46a307
mov ecx, dword [ebp - 0x964]
add ecx, 1
mov dword [ebp - 0x964], ecx
cmp dword [ebp - 0x964], 0
jge 0x46a33e
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x964]
mov dword [ebp - 0x1c], edx
jge 0x46a326
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a33c
mov dword [ebp - 0x1c], 0
jmp 0x46a2f8
mov dword [ebp - 0x968], 0
mov edx, 1
test edx, edx
je 0x46a392
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x96c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a374
jmp 0x46a392
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x968]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x968]
add eax, 1
mov dword [ebp - 0x968], eax
jmp 0x46a348
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x970], 0
jmp 0x46a3ba
mov edx, dword [ebp - 0x970]
add edx, 1
mov dword [ebp - 0x970], edx
cmp dword [ebp - 0x970], 0
jge 0x46a3f5
mov eax, dword [ebp - 0x970]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a3e9
mov eax, dword [ebp - 0x970]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a3f0
and eax, 0xbc614e
jmp 0x46a3f3
mov dword [ebp - 0x1c], eax
jmp 0x46a3ab
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a403
jmp 0x46a40b
mov dword [ebp - 4], 3
mov dword [ebp - 0x974], 0
jmp 0x46a42d
mov edx, dword [ebp - 0x974]
add edx, 1
mov dword [ebp - 0x974], edx
cmp dword [ebp - 0x974], 0
jge 0x46a468
mov eax, dword [ebp - 0x974]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a45c
mov eax, dword [ebp - 0x974]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a463
and eax, 0xbc614e
jmp 0x46a466
mov dword [ebp - 0x1c], eax
jmp 0x46a41e
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a476
jmp 0x46a47e
mov dword [ebp - 0x978], 0
jmp 0x46a499
mov edx, dword [ebp - 0x978]
add edx, 1
mov dword [ebp - 0x978], edx
cmp dword [ebp - 0x978], 4
jge 0x46a4e6
cmp dword [ebp - 0x1c], 0
jge 0x46a4b0
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a4c6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x97c], 0xfa
lea edx, [ebp - 0x97c]
push edx
lea eax, [ebp - 0xb78]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46a48a
mov dword [ebp - 0xb7c], 1
mov dword [ebp - 0xb80], 1
mov dword [ebp - 0xb84], 2
mov dword [ebp - 0xb88], 0
mov dword [ebp - 0xb8c], 0
jmp 0x46a529
mov ecx, dword [ebp - 0xb8c]
add ecx, 1
mov dword [ebp - 0xb8c], ecx
cmp dword [ebp - 0xb8c], 0
jge 0x46a56a
mov edx, dword [ebp - 0xb7c]
add edx, dword [ebp - 0xb80]
mov dword [ebp - 0xb84], edx
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0xb7c], eax
mov ecx, dword [ebp - 0xb84]
mov dword [ebp - 0xb80], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xb84]
mov dword [ebp - 0x1c], edx
jmp 0x46a51a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb90], 0
jmp 0x46a58b
mov ecx, dword [ebp - 0xb90]
add ecx, 1
mov dword [ebp - 0xb90], ecx
cmp dword [ebp - 0xb90], 1
jge 0x46a5d8
cmp dword [ebp - 0x1c], 0
jge 0x46a5a2
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a5b8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xb94], 0xfa
lea edx, [ebp - 0xb94]
push edx
lea eax, [ebp - 0xd90]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46a57c
mov dword [ebp - 0xd94], 0
jmp 0x46a5f3
mov ecx, dword [ebp - 0xd94]
add ecx, 1
mov dword [ebp - 0xd94], ecx
cmp dword [ebp - 0xd94], 2
jge 0x46a62a
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xd94]
mov dword [ebp - 0x1c], edx
jge 0x46a612
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a628
mov dword [ebp - 0x1c], 0
jmp 0x46a5e4
mov dword [ebp - 4], 4
mov dword [ebp - 0xd98], 0
jmp 0x46a64c
mov edx, dword [ebp - 0xd98]
add edx, 1
mov dword [ebp - 0xd98], edx
cmp dword [ebp - 0xd98], 2
jge 0x46a687
mov eax, dword [ebp - 0xd98]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a67b
mov eax, dword [ebp - 0xd98]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a682
and eax, 0xbc614e
jmp 0x46a685
mov dword [ebp - 0x1c], eax
jmp 0x46a63d
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a695
jmp 0x46a69d
mov dword [ebp - 0xd9c], 0
jmp 0x46a6b8
mov edx, dword [ebp - 0xd9c]
add edx, 1
mov dword [ebp - 0xd9c], edx
cmp dword [ebp - 0xd9c], 1
jge 0x46a705
cmp dword [ebp - 0x1c], 0
jge 0x46a6cf
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a6e5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xda0], 0xfa
lea edx, [ebp - 0xda0]
push edx
lea eax, [ebp - 0xf98]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46a6a9
mov dword [ebp - 0xf9c], 0
mov ecx, 1
test ecx, ecx
je 0x46a759
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp - 0xfa0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a73b
jmp 0x46a759
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xf9c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xf9c]
add eax, 1
mov dword [ebp - 0xf9c], eax
jmp 0x46a70f
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0xfa4], 0
jmp 0x46a784
mov edx, dword [ebp - 0xfa4]
add edx, 1
mov dword [ebp - 0xfa4], edx
cmp dword [ebp - 0xfa4], 2
jge 0x46a7bf
mov eax, dword [ebp - 0xfa4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a7b3
mov eax, dword [ebp - 0xfa4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a7ba
and eax, 0xbc614e
jmp 0x46a7bd
mov dword [ebp - 0x1c], eax
jmp 0x46a775
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a7cd
jmp 0x46a7d5
mov dword [ebp - 0xfa8], 0
mov edx, 1
test edx, edx
je 0x46a829
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xfac], eax
mov eax, dword [ebp - 0xfac]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a80b
jmp 0x46a829
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xfa8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xfa8]
add eax, 1
mov dword [ebp - 0xfa8], eax
jmp 0x46a7df
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0xfb0], 0
jmp 0x46a854
mov edx, dword [ebp - 0xfb0]
add edx, 1
mov dword [ebp - 0xfb0], edx
cmp dword [ebp - 0xfb0], 0
jge 0x46a88f
mov eax, dword [ebp - 0xfb0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a883
mov eax, dword [ebp - 0xfb0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a88a
and eax, 0xbc614e
jmp 0x46a88d
mov dword [ebp - 0x1c], eax
jmp 0x46a845
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a89d
jmp 0x46a8a5
mov dword [ebp - 0xfb4], 0
mov edx, 1
test edx, edx
je 0x46a8f9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xfb8], eax
mov eax, dword [ebp - 0xfb8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a8db
jmp 0x46a8f9
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xfb4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xfb4]
add eax, 1
mov dword [ebp - 0xfb4], eax
jmp 0x46a8af
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xfbc], 0
jmp 0x46a91d
cmp dword [ebp - 0xfbc], 0
jge 0x46a96a
cmp dword [ebp - 0x1c], 0
jge 0x46a934
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a94a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xfc0], 0xfa
lea edx, [ebp - 0xfc0]
push edx
lea eax, [ebp - 0x11b8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x46a90e
mov dword [ebp - 0x11bc], 0
mov ecx, 1
test ecx, ecx
je 0x46a9be
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp - 0x11c0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a9a0
jmp 0x46a9be
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x11bc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x11bc]
add eax, 1
mov dword [ebp - 0x11bc], eax
jmp 0x46a974
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x46aa01
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x11c4], eax
mov eax, dword [ebp - 0x11c4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x46a9f3
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x46aa44