Function at 0x44fb10
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e5e0
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff4d0
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x68], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
jmp 0x44fb7b
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1f
jge 0x44fba1
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jmp 0x44fb72
mov edx, dword [ebp - 0x1c]
add edx, 0x1f
mov dword [ebp - 0x1c], edx
mov eax, 1
test eax, eax
je 0x44fbdb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44fbd0
jmp 0x44fbdb
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
jmp 0x44fbaa
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x44fc12
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44fc07
jmp 0x44fc12
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
jmp 0x44fbe1
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x3c], 0
jmp 0x44fc2d
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0xf
jge 0x44fc3e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
jmp 0x44fc24
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44fc50
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x44fc68
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x40], 0
jmp 0x44fc81
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 5
jge 0x44fcb3
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44fca7
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44fcae
and eax, 0xbc614e
jmp 0x44fcb1
mov dword [ebp - 0x1c], eax
jmp 0x44fc78
mov dword [ebp - 4], 0xfffffffe
call fcn.0044fcc1
jmp 0x44fcc9
mov edx, 1
test edx, edx
je 0x44fcfa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44fcef
jmp 0x44fcfa
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edx
jmp 0x44fcc9
mov eax, dword [ebp - 0x1c]
add eax, 0xd
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], 0
jmp 0x44fd15
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 7
jge 0x44fd46
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], edx
jge 0x44fd2e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44fd44
mov dword [ebp - 0x1c], 0
jmp 0x44fd0c
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
jmp 0x44fd74
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 9
jge 0x44fd9a
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x1c], eax
jmp 0x44fd6b
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x60], 0
jmp 0x44fdb5
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 7
jge 0x44fdf9
cmp dword [ebp - 0x1c], 0
jge 0x44fdc9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44fddf
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x64], 0xfa
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x260]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x44fdac
mov dword [ebp - 0x264], 0
mov ecx, 1
test ecx, ecx
je 0x44fe4d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44fe2f
jmp 0x44fe4d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x264]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x264]
add eax, 1
mov dword [ebp - 0x264], eax
jmp 0x44fe03
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x26c], 0
jmp 0x44fe78
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
cmp dword [ebp - 0x26c], 1
jge 0x44feb3
mov eax, dword [ebp - 0x26c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x44fea7
mov eax, dword [ebp - 0x26c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44feae
and eax, 0xbc614e
jmp 0x44feb1
mov dword [ebp - 0x1c], eax
jmp 0x44fe69
mov dword [ebp - 4], 0xfffffffe
call fcn.0044fec1
jmp 0x44fec9
mov dword [ebp - 0x270], 0
mov edx, 1
test edx, edx
je 0x44ff1d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x274]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44feff
jmp 0x44ff1d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x270]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x270]
add eax, 1
mov dword [ebp - 0x270], eax
jmp 0x44fed3
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x288], 0
jmp 0x44ff69
mov edx, dword [ebp - 0x288]
add edx, 1
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 5
jge 0x44ffaa
mov eax, dword [ebp - 0x278]
add eax, dword [ebp - 0x27c]
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x278], ecx
mov edx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x280]
mov dword [ebp - 0x1c], eax
jmp 0x44ff5a
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x44ffed
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x44ffdf
jmp 0x44ffed
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x28c]
mov dword [ebp - 0x1c], edx
jmp 0x44ffb3
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x294], 1
mov dword [ebp - 0x298], 2
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x2a0], 0
jmp 0x450039
mov ecx, dword [ebp - 0x2a0]
add ecx, 1
mov dword [ebp - 0x2a0], ecx
cmp dword [ebp - 0x2a0], 0
jge 0x45007a
mov edx, dword [ebp - 0x290]
add edx, dword [ebp - 0x294]
mov dword [ebp - 0x298], edx
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x294], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x298]
mov dword [ebp - 0x1c], edx
jmp 0x45002a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2a4], 1
mov dword [ebp - 0x2a8], 1
mov dword [ebp - 0x2ac], 2
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2b4], 0
jmp 0x4500c3
mov ecx, dword [ebp - 0x2b4]
add ecx, 1
mov dword [ebp - 0x2b4], ecx
cmp dword [ebp - 0x2b4], 8
jge 0x450104
mov edx, dword [ebp - 0x2a4]
add edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], edx
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2a8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2ac]
mov dword [ebp - 0x1c], edx
jmp 0x4500b4
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2b8], 0
jmp 0x450128
mov ecx, dword [ebp - 0x2b8]
add ecx, 1
mov dword [ebp - 0x2b8], ecx
cmp dword [ebp - 0x2b8], 0
jge 0x450175
cmp dword [ebp - 0x1c], 0
jge 0x45013f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450155
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2bc], 0xfa
lea edx, [ebp - 0x2bc]
push edx
lea eax, [ebp - 0x4b8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x450119
mov dword [ebp - 0x4bc], 0
jmp 0x450190
mov ecx, dword [ebp - 0x4bc]
add ecx, 1
mov dword [ebp - 0x4bc], ecx
cmp dword [ebp - 0x4bc], 8
jge 0x4501dd
cmp dword [ebp - 0x1c], 0
jge 0x4501a7
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4501bd
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4c0], 0xfa
lea edx, [ebp - 0x4c0]
push edx
lea eax, [ebp - 0x6b8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x450181
mov ecx, 1
test ecx, ecx
je 0x450217
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x6bc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x450209
jmp 0x450217
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x1c], edx
jmp 0x4501dd
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x45025a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x6c0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x45024c
jmp 0x45025a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6c0]
mov dword [ebp - 0x1c], edx
jmp 0x450220
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6c4], 1
mov dword [ebp - 0x6c8], 1
mov dword [ebp - 0x6cc], 2
mov dword [ebp - 0x6d0], 0
mov dword [ebp - 0x6d4], 0
jmp 0x4502a6
mov ecx, dword [ebp - 0x6d4]
add ecx, 1
mov dword [ebp - 0x6d4], ecx
cmp dword [ebp - 0x6d4], 2
jge 0x4502e7
mov edx, dword [ebp - 0x6c4]
add edx, dword [ebp - 0x6c8]
mov dword [ebp - 0x6cc], edx
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6cc]
mov dword [ebp - 0x6c8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x1c], edx
jmp 0x450297
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x45032a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0x6d8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x45031c
jmp 0x45032a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6d8]
mov dword [ebp - 0x1c], edx
jmp 0x4502f0
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x45036d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6dc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x45035f
jmp 0x45036d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6dc]
mov dword [ebp - 0x1c], edx
jmp 0x450333
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6e0], 0
jmp 0x450391
mov ecx, dword [ebp - 0x6e0]
add ecx, 1
mov dword [ebp - 0x6e0], ecx
cmp dword [ebp - 0x6e0], 6
jge 0x4503c8
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x6e0]
mov dword [ebp - 0x1c], edx
jge 0x4503b0
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4503c6
mov dword [ebp - 0x1c], 0
jmp 0x450382
mov dword [ebp - 0x6e4], 0
mov edx, 1
test edx, edx
je 0x45041c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6e8], eax
mov eax, dword [ebp - 0x6e8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4503fe
jmp 0x45041c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6e4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6e4]
add eax, 1
mov dword [ebp - 0x6e4], eax
jmp 0x4503d2
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6ec], 0
jmp 0x450440
mov edx, dword [ebp - 0x6ec]
add edx, 1
mov dword [ebp - 0x6ec], edx
cmp dword [ebp - 0x6ec], 2
jge 0x450457
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x1c], eax
jmp 0x450431
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x450469
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450481
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x6f0], 0
jmp 0x4504a3
mov edx, dword [ebp - 0x6f0]
add edx, 1
mov dword [ebp - 0x6f0], edx
cmp dword [ebp - 0x6f0], 5
jge 0x4504de
mov eax, dword [ebp - 0x6f0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4504d2
mov eax, dword [ebp - 0x6f0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4504d9
and eax, 0xbc614e
jmp 0x4504dc
mov dword [ebp - 0x1c], eax
jmp 0x450494
mov dword [ebp - 4], 0xfffffffe
call fcn.004504ec
jmp 0x4504f4
mov dword [ebp - 0x6f4], 0
mov edx, 1
test edx, edx
je 0x450548
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x45052a
jmp 0x450548
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6f4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6f4]
add eax, 1
mov dword [ebp - 0x6f4], eax
jmp 0x4504fe
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6fc], 0
mov edx, 1
test edx, edx
je 0x4505a5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x700]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x450587
jmp 0x4505a5
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6fc]
add eax, 1
mov dword [ebp - 0x6fc], eax
jmp 0x45055b
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x704], 0
jmp 0x4505c9
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
cmp dword [ebp - 0x704], 3
jge 0x4505e0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x704]
mov dword [ebp - 0x1c], eax
jmp 0x4505ba
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4505f2
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45060a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x708], 1
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0x710], 2
mov dword [ebp - 0x714], 0
mov dword [ebp - 0x718], 0
jmp 0x45064d
mov edx, dword [ebp - 0x718]
add edx, 1
mov dword [ebp - 0x718], edx
cmp dword [ebp - 0x718], 1
jge 0x45068e
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x70c]
mov dword [ebp - 0x710], eax
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x710]
mov dword [ebp - 0x70c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x710]
mov dword [ebp - 0x1c], eax
jmp 0x45063e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x71c], 0
jmp 0x4506b2
mov edx, dword [ebp - 0x71c]
add edx, 1
mov dword [ebp - 0x71c], edx
cmp dword [ebp - 0x71c], 3
jge 0x4506e9
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x71c]
mov dword [ebp - 0x1c], eax
jge 0x4506d1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4506e7
mov dword [ebp - 0x1c], 0
jmp 0x4506a3
mov dword [ebp - 0x720], 0
jmp 0x450704
mov edx, dword [ebp - 0x720]
add edx, 1
mov dword [ebp - 0x720], edx
cmp dword [ebp - 0x720], 0
jge 0x45073b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x720]
mov dword [ebp - 0x1c], eax
jge 0x450723
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450739
mov dword [ebp - 0x1c], 0
jmp 0x4506f5
mov dword [ebp - 0x724], 0
jmp 0x450756
mov edx, dword [ebp - 0x724]
add edx, 1
mov dword [ebp - 0x724], edx
cmp dword [ebp - 0x724], 3
jge 0x4507a3
cmp dword [ebp - 0x1c], 0
jge 0x45076d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450783
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x728], 0xfa
lea edx, [ebp - 0x728]
push edx
lea eax, [ebp - 0x920]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x450747
mov ecx, 1
test ecx, ecx
je 0x4507dd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4507cf
jmp 0x4507dd
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x924]
mov dword [ebp - 0x1c], edx
jmp 0x4507a3
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x928], 0
jmp 0x450801
mov ecx, dword [ebp - 0x928]
add ecx, 1
mov dword [ebp - 0x928], ecx
cmp dword [ebp - 0x928], 0
jge 0x450818
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x928]
mov dword [ebp - 0x1c], edx
jmp 0x4507f2
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x45082a
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450842
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x92c], 0
jmp 0x45085d
mov edx, dword [ebp - 0x92c]
add edx, 1
mov dword [ebp - 0x92c], edx
cmp dword [ebp - 0x92c], 0
jge 0x450894
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x92c]
mov dword [ebp - 0x1c], eax
jge 0x45087c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x450892
mov dword [ebp - 0x1c], 0
jmp 0x45084e
mov dword [ebp - 0x930], 0
mov edx, 1
test edx, edx
je 0x4508e8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x934]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4508ca
jmp 0x4508e8
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x930]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x930]
add eax, 1
mov dword [ebp - 0x930], eax
jmp 0x45089e
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x938], 0
jmp 0x450913
mov edx, dword [ebp - 0x938]
add edx, 1
mov dword [ebp - 0x938], edx
cmp dword [ebp - 0x938], 4
jge 0x45094e
mov eax, dword [ebp - 0x938]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x450942
mov eax, dword [ebp - 0x938]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x450949
and eax, 0xbc614e
jmp 0x45094c
mov dword [ebp - 0x1c], eax
jmp 0x450904
mov dword [ebp - 4], 0xfffffffe
call fcn.0045095c
jmp 0x450964
mov dword [ebp - 0x93c], 0
jmp 0x45097f
mov edx, dword [ebp - 0x93c]
add edx, 1
mov dword [ebp - 0x93c], edx
cmp dword [ebp - 0x93c], 4
jge 0x4509cc
cmp dword [ebp - 0x1c], 0
jge 0x450996
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4509ac
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x940], 0xfa
lea edx, [ebp - 0x940]
push edx
lea eax, [ebp - 0xb38]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x450970
mov ecx, 1
test ecx, ecx
je 0x450a06
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0xb3c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4509f8
jmp 0x450a06
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xb3c]
mov dword [ebp - 0x1c], edx
jmp 0x4509cc
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb40], 0
jmp 0x450a2a
mov ecx, dword [ebp - 0xb40]
add ecx, 1
mov dword [ebp - 0xb40], ecx
cmp dword [ebp - 0xb40], 1
jge 0x450a41
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb40]
mov dword [ebp - 0x1c], edx
jmp 0x450a1b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x450a53
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x450a6b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x68]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret