Function at 0x45de10
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47e9e0
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff93c
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x4c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
jmp 0x45de7b
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 8
jge 0x45dea1
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jmp 0x45de72
mov edx, dword [ebp - 0x1c]
add edx, 8
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0
mov dword [ebp - 0x34], 0
jmp 0x45dec3
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x15
jge 0x45def5
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45dee9
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45def0
and eax, 0xbc614e
jmp 0x45def3
mov dword [ebp - 0x1c], eax
jmp 0x45deba
mov dword [ebp - 4], 0xfffffffe
call fcn.0045df03
jmp 0x45df0b
mov dword [ebp - 0x38], 0
mov edx, 1
test edx, edx
je 0x45df4d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x45df38
jmp 0x45df4d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x45df12
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1b
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x40], 0
jmp 0x45df6f
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x1e
jge 0x45dfa1
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45df95
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45df9c
and eax, 0xbc614e
jmp 0x45df9f
mov dword [ebp - 0x1c], eax
jmp 0x45df66
mov dword [ebp - 4], 0xfffffffe
call fcn.0045dfaf
jmp 0x45dfb7
mov dword [ebp - 0x44], 0
jmp 0x45dfc9
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x20
jge 0x45e00d
cmp dword [ebp - 0x1c], 0
jge 0x45dfdd
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45dff3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x48], 0xfa
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x248]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x45dfc0
mov dword [ebp - 4], 2
mov dword [ebp - 0x24c], 0
jmp 0x45e02f
mov ecx, dword [ebp - 0x24c]
add ecx, 1
mov dword [ebp - 0x24c], ecx
cmp dword [ebp - 0x24c], 6
jge 0x45e06a
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45e05e
mov eax, dword [ebp - 0x24c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45e065
and eax, 0xbc614e
jmp 0x45e068
mov dword [ebp - 0x1c], eax
jmp 0x45e020
mov dword [ebp - 4], 0xfffffffe
call fcn.0045e078
jmp 0x45e080
mov dword [ebp - 0x250], 0
jmp 0x45e09b
mov edx, dword [ebp - 0x250]
add edx, 1
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0x11
jge 0x45e0b2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x250]
mov dword [ebp - 0x1c], eax
jmp 0x45e08c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x45e0c4
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45e0dc
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x254], 0
jmp 0x45e0f7
mov edx, dword [ebp - 0x254]
add edx, 1
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 6
jge 0x45e12e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x254]
mov dword [ebp - 0x1c], eax
jge 0x45e116
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45e12c
mov dword [ebp - 0x1c], 0
jmp 0x45e0e8
mov dword [ebp - 0x258], 0
mov edx, 1
test edx, edx
je 0x45e182
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x45e164
jmp 0x45e182
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x258]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x258]
add eax, 1
mov dword [ebp - 0x258], eax
jmp 0x45e138
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x270], 0
jmp 0x45e1ce
mov edx, dword [ebp - 0x270]
add edx, 1
mov dword [ebp - 0x270], edx
cmp dword [ebp - 0x270], 0xc
jge 0x45e20f
mov eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x264]
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp - 0x268]
mov dword [ebp - 0x264], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x268]
mov dword [ebp - 0x1c], eax
jmp 0x45e1bf
mov ecx, dword [ebp - 0x1c]
add ecx, 0xc
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x45e252
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x274]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x45e244
jmp 0x45e252
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x274]
mov dword [ebp - 0x1c], edx
jmp 0x45e218
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x288], 0
jmp 0x45e29e
mov ecx, dword [ebp - 0x288]
add ecx, 1
mov dword [ebp - 0x288], ecx
cmp dword [ebp - 0x288], 0xf
jge 0x45e2df
mov edx, dword [ebp - 0x278]
add edx, dword [ebp - 0x27c]
mov dword [ebp - 0x280], edx
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x280]
mov dword [ebp - 0x1c], edx
jmp 0x45e28f
mov eax, dword [ebp - 0x1c]
add eax, 0xf
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x28c], 0
jmp 0x45e30a
mov ecx, dword [ebp - 0x28c]
add ecx, 1
mov dword [ebp - 0x28c], ecx
cmp dword [ebp - 0x28c], 1
jge 0x45e345
mov eax, dword [ebp - 0x28c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45e339
mov eax, dword [ebp - 0x28c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45e340
and eax, 0xbc614e
jmp 0x45e343
mov dword [ebp - 0x1c], eax
jmp 0x45e2fb
mov dword [ebp - 4], 0xfffffffe
call fcn.0045e353
jmp 0x45e35b
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x294], 1
mov dword [ebp - 0x298], 2
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x2a0], 0
jmp 0x45e39e
mov edx, dword [ebp - 0x2a0]
add edx, 1
mov dword [ebp - 0x2a0], edx
cmp dword [ebp - 0x2a0], 0xa
jge 0x45e3df
mov eax, dword [ebp - 0x290]
add eax, dword [ebp - 0x294]
mov dword [ebp - 0x298], eax
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0x290], ecx
mov edx, dword [ebp - 0x298]
mov dword [ebp - 0x294], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x298]
mov dword [ebp - 0x1c], eax
jmp 0x45e38f
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x2a4], 0
jmp 0x45e40a
mov edx, dword [ebp - 0x2a4]
add edx, 1
mov dword [ebp - 0x2a4], edx
cmp dword [ebp - 0x2a4], 3
jge 0x45e445
mov eax, dword [ebp - 0x2a4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45e439
mov eax, dword [ebp - 0x2a4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45e440
and eax, 0xbc614e
jmp 0x45e443
mov dword [ebp - 0x1c], eax
jmp 0x45e3fb
mov dword [ebp - 4], 0xfffffffe
call fcn.0045e453
jmp 0x45e45b
mov dword [ebp - 0x2a8], 0
jmp 0x45e476
mov edx, dword [ebp - 0x2a8]
add edx, 1
mov dword [ebp - 0x2a8], edx
cmp dword [ebp - 0x2a8], 2
jge 0x45e4c3
cmp dword [ebp - 0x1c], 0
jge 0x45e48d
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45e4a3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2ac], 0xfa
lea edx, [ebp - 0x2ac]
push edx
lea eax, [ebp - 0x4a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x45e467
mov dword [ebp - 0x4ac], 0
jmp 0x45e4de
mov ecx, dword [ebp - 0x4ac]
add ecx, 1
mov dword [ebp - 0x4ac], ecx
cmp dword [ebp - 0x4ac], 0xe
jge 0x45e4f5
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x4ac]
mov dword [ebp - 0x1c], edx
jmp 0x45e4cf
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x45e507
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45e51f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4b0], 0
jmp 0x45e53a
mov edx, dword [ebp - 0x4b0]
add edx, 1
mov dword [ebp - 0x4b0], edx
cmp dword [ebp - 0x4b0], 0x10
jge 0x45e587
cmp dword [ebp - 0x1c], 0
jge 0x45e551
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45e567
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4b4], 0xfa
lea edx, [ebp - 0x4b4]
push edx
lea eax, [ebp - 0x6b0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x45e52b
mov dword [ebp - 0x6b4], 0
mov ecx, 1
test ecx, ecx
je 0x45e5db
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x45e5bd
jmp 0x45e5db
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6b4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6b4]
add eax, 1
mov dword [ebp - 0x6b4], eax
jmp 0x45e591
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x6bc], 0
jmp 0x45e606
mov edx, dword [ebp - 0x6bc]
add edx, 1
mov dword [ebp - 0x6bc], edx
cmp dword [ebp - 0x6bc], 2
jge 0x45e641
mov eax, dword [ebp - 0x6bc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45e635
mov eax, dword [ebp - 0x6bc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45e63c
and eax, 0xbc614e
jmp 0x45e63f
mov dword [ebp - 0x1c], eax
jmp 0x45e5f7
mov dword [ebp - 4], 0xfffffffe
call fcn.0045e64f
jmp 0x45e657
mov dword [ebp - 0x6c0], 0
mov edx, 1
test edx, edx
je 0x45e6ab
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x6c4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x45e68d
jmp 0x45e6ab
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6c0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6c0]
add eax, 1
mov dword [ebp - 0x6c0], eax
jmp 0x45e661
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6c8], 0
jmp 0x45e6cc
mov edx, dword [ebp - 0x6c8]
add edx, 1
mov dword [ebp - 0x6c8], edx
cmp dword [ebp - 0x6c8], 2
jge 0x45e703
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x1c], eax
jge 0x45e6eb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45e701
mov dword [ebp - 0x1c], 0
jmp 0x45e6bd
mov dword [ebp - 0x6cc], 0
jmp 0x45e71e
mov edx, dword [ebp - 0x6cc]
add edx, 1
mov dword [ebp - 0x6cc], edx
cmp dword [ebp - 0x6cc], 2
jge 0x45e735
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x1c], eax
jmp 0x45e70f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x45e747
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x45e75f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x6d0], 0
jmp 0x45e781
mov edx, dword [ebp - 0x6d0]
add edx, 1
mov dword [ebp - 0x6d0], edx
cmp dword [ebp - 0x6d0], 4
jge 0x45e7bc
mov eax, dword [ebp - 0x6d0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x45e7b0
mov eax, dword [ebp - 0x6d0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x45e7b7
and eax, 0xbc614e
jmp 0x45e7ba
mov dword [ebp - 0x1c], eax
jmp 0x45e772
mov dword [ebp - 4], 0xfffffffe
call fcn.0045e7ca
jmp 0x45e7d2
mov dword [ebp - 0x6d4], 0
jmp 0x45e7ed
mov edx, dword [ebp - 0x6d4]
add edx, 1
mov dword [ebp - 0x6d4], edx
cmp dword [ebp - 0x6d4], 2
jge 0x45e824
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x1c], eax
jge 0x45e80c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x45e822
mov dword [ebp - 0x1c], 0
jmp 0x45e7de
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x4c]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret