Function at 0x42f4f0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47da88
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff93c
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x30], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x42f53f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x18
jge 0x42f570
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jge 0x42f558
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42f56e
mov dword [ebp - 0x1c], 0
jmp 0x42f536
mov dword [ebp - 0x24], 0
jmp 0x42f582
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x19
jge 0x42f5b3
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jge 0x42f59b
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42f5b1
mov dword [ebp - 0x1c], 0
jmp 0x42f579
mov dword [ebp - 0x28], 0
jmp 0x42f5c5
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x2a
jge 0x42f609
cmp dword [ebp - 0x1c], 0
jge 0x42f5d9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42f5ef
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2c], 0xfa
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42f5bc
mov dword [ebp - 0x22c], 0
jmp 0x42f624
mov ecx, dword [ebp - 0x22c]
add ecx, 1
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x22c], 0x3d
jge 0x42f63b
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x22c]
mov dword [ebp - 0x1c], edx
jmp 0x42f615
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42f64d
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42f665
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x230], 0
mov edx, 1
test edx, edx
je 0x42f6b9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42f69b
jmp 0x42f6b9
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x230]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x230]
add eax, 1
mov dword [ebp - 0x230], eax
jmp 0x42f66f
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1e
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x42f6fc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42f6ee
jmp 0x42f6fc
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x238]
mov dword [ebp - 0x1c], edx
jmp 0x42f6c2
mov eax, dword [ebp - 0x1c]
add eax, 0x17
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x23c], 0
jmp 0x42f720
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
cmp dword [ebp - 0x23c], 0x10
jge 0x42f737
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x23c]
mov dword [ebp - 0x1c], edx
jmp 0x42f711
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42f749
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42f761
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x240], 0
jmp 0x42f77c
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0x13
jge 0x42f7c9
cmp dword [ebp - 0x1c], 0
jge 0x42f793
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42f7a9
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x244], 0xfa
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x440]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42f76d
mov dword [ebp - 0x444], 0
mov ecx, 1
test ecx, ecx
je 0x42f81d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42f7ff
jmp 0x42f81d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x444]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x444]
add eax, 1
mov dword [ebp - 0x444], eax
jmp 0x42f7d3
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x42f860
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42f852
jmp 0x42f860
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x44c]
mov dword [ebp - 0x1c], edx
jmp 0x42f826
mov eax, dword [ebp - 0x1c]
add eax, 0xa
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x450], 0
jmp 0x42f884
mov ecx, dword [ebp - 0x450]
add ecx, 1
mov dword [ebp - 0x450], ecx
cmp dword [ebp - 0x450], 0xb
jge 0x42f8bb
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x450]
mov dword [ebp - 0x1c], edx
jge 0x42f8a3
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42f8b9
mov dword [ebp - 0x1c], 0
jmp 0x42f875
mov dword [ebp - 0x454], 0
jmp 0x42f8d6
mov edx, dword [ebp - 0x454]
add edx, 1
mov dword [ebp - 0x454], edx
cmp dword [ebp - 0x454], 3
jge 0x42f8ed
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x454]
mov dword [ebp - 0x1c], eax
jmp 0x42f8c7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42f8ff
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42f917
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x458], 0
jmp 0x42f939
mov edx, dword [ebp - 0x458]
add edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 4
jge 0x42f974
mov eax, dword [ebp - 0x458]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42f968
mov eax, dword [ebp - 0x458]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42f96f
and eax, 0xbc614e
jmp 0x42f972
mov dword [ebp - 0x1c], eax
jmp 0x42f92a
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f982
jmp 0x42f98a
mov dword [ebp - 0x45c], 0
jmp 0x42f9a5
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 0x10
jge 0x42f9dc
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x45c]
mov dword [ebp - 0x1c], eax
jge 0x42f9c4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42f9da
mov dword [ebp - 0x1c], 0
jmp 0x42f996
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x468], 2
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x470], 0
jmp 0x42fa1f
mov edx, dword [ebp - 0x470]
add edx, 1
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 0xd
jge 0x42fa60
mov eax, dword [ebp - 0x460]
add eax, dword [ebp - 0x464]
mov dword [ebp - 0x468], eax
mov ecx, dword [ebp - 0x464]
mov dword [ebp - 0x460], ecx
mov edx, dword [ebp - 0x468]
mov dword [ebp - 0x464], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x468]
mov dword [ebp - 0x1c], eax
jmp 0x42fa10
mov ecx, dword [ebp - 0x1c]
add ecx, 0xd
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x47c], 2
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x484], 0
jmp 0x42faac
mov edx, dword [ebp - 0x484]
add edx, 1
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 0xe
jge 0x42faed
mov eax, dword [ebp - 0x474]
add eax, dword [ebp - 0x478]
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x474], ecx
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0x478], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x47c]
mov dword [ebp - 0x1c], eax
jmp 0x42fa9d
mov ecx, dword [ebp - 0x1c]
add ecx, 0xe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x488], 0
mov edx, 1
test edx, edx
je 0x42fb4a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x48c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42fb2c
jmp 0x42fb4a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x488]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x488]
add eax, 1
mov dword [ebp - 0x488], eax
jmp 0x42fb00
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x490], 0
jmp 0x42fb6e
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
cmp dword [ebp - 0x490], 1
jge 0x42fb85
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x490]
mov dword [ebp - 0x1c], eax
jmp 0x42fb5f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42fb97
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42fbaf
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x494], 0
jmp 0x42fbca
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 0
jge 0x42fc01
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x494]
mov dword [ebp - 0x1c], eax
jge 0x42fbe9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42fbff
mov dword [ebp - 0x1c], 0
jmp 0x42fbbb
mov dword [ebp - 0x498], 1
mov dword [ebp - 0x49c], 1
mov dword [ebp - 0x4a0], 2
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a8], 0
jmp 0x42fc44
mov edx, dword [ebp - 0x4a8]
add edx, 1
mov dword [ebp - 0x4a8], edx
cmp dword [ebp - 0x4a8], 3
jge 0x42fc85
mov eax, dword [ebp - 0x498]
add eax, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], eax
mov ecx, dword [ebp - 0x49c]
mov dword [ebp - 0x498], ecx
mov edx, dword [ebp - 0x4a0]
mov dword [ebp - 0x49c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x1c], eax
jmp 0x42fc35
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4ac], 0
jmp 0x42fca9
mov edx, dword [ebp - 0x4ac]
add edx, 1
mov dword [ebp - 0x4ac], edx
cmp dword [ebp - 0x4ac], 3
jge 0x42fcf6
cmp dword [ebp - 0x1c], 0
jge 0x42fcc0
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42fcd6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4b0], 0xfa
lea edx, [ebp - 0x4b0]
push edx
lea eax, [ebp - 0x6a8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x42fc9a
mov ecx, 1
test ecx, ecx
je 0x42fd30
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x6ac]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42fd22
jmp 0x42fd30
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6ac]
mov dword [ebp - 0x1c], edx
jmp 0x42fcf6
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x42fd73
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x6b0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42fd65
jmp 0x42fd73
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6b0]
mov dword [ebp - 0x1c], edx
jmp 0x42fd39
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6b4], 0
jmp 0x42fd97
mov ecx, dword [ebp - 0x6b4]
add ecx, 1
mov dword [ebp - 0x6b4], ecx
cmp dword [ebp - 0x6b4], 7
jge 0x42fdae
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x6b4]
mov dword [ebp - 0x1c], edx
jmp 0x42fd88
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42fdc0
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42fdd8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x42fe12
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42fe04
jmp 0x42fe12
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x1c], edx
jmp 0x42fdd8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6bc], 0
mov ecx, 1
test ecx, ecx
je 0x42fe6c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x6c0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42fe4e
jmp 0x42fe6c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6bc]
add eax, 1
mov dword [ebp - 0x6bc], eax
jmp 0x42fe22
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6c4], 0
jmp 0x42fe90
mov edx, dword [ebp - 0x6c4]
add edx, 1
mov dword [ebp - 0x6c4], edx
cmp dword [ebp - 0x6c4], 3
jge 0x42fea7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x1c], eax
jmp 0x42fe81
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42feb9
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42fed1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x42ff0b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x42fefd
jmp 0x42ff0b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6c8]
mov dword [ebp - 0x1c], edx
jmp 0x42fed1
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x6cc], 0
jmp 0x42ff36
mov ecx, dword [ebp - 0x6cc]
add ecx, 1
mov dword [ebp - 0x6cc], ecx
cmp dword [ebp - 0x6cc], 7
jge 0x42ff71
mov eax, dword [ebp - 0x6cc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42ff65
mov eax, dword [ebp - 0x6cc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42ff6c
and eax, 0xbc614e
jmp 0x42ff6f
mov dword [ebp - 0x1c], eax
jmp 0x42ff27
mov dword [ebp - 4], 0xfffffffe
call fcn.0042ff7f
jmp 0x42ff87
mov dword [ebp - 0x6d0], 0
jmp 0x42ffa2
mov edx, dword [ebp - 0x6d0]
add edx, 1
mov dword [ebp - 0x6d0], edx
cmp dword [ebp - 0x6d0], 1
jge 0x42ffb9
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x1c], eax
jmp 0x42ff93
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x42ffcb
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42ffe3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x43001d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43000f
jmp 0x43001d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6d4]
mov dword [ebp - 0x1c], edx
jmp 0x42ffe3
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x30]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret