Function at 0x43e0c0
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47df68
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff548
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x48], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x43e116
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jge 0x43e148
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e13c
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e143
and eax, 0xbc614e
jmp 0x43e146
mov dword [ebp - 0x1c], eax
jmp 0x43e10d
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e156
jmp 0x43e15e
mov dword [ebp - 0x24], 0
jmp 0x43e170
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 2
jge 0x43e1a1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jge 0x43e189
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e19f
mov dword [ebp - 0x1c], 0
jmp 0x43e167
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x43e1ba
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0
jge 0x43e1ec
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e1e0
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e1e7
and eax, 0xbc614e
jmp 0x43e1ea
mov dword [ebp - 0x1c], eax
jmp 0x43e1b1
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e1fa
jmp 0x43e202
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 0
jmp 0x43e21b
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 8
jge 0x43e24d
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e241
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e248
and eax, 0xbc614e
jmp 0x43e24b
mov dword [ebp - 0x1c], eax
jmp 0x43e212
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e25b
jmp 0x43e263
mov dword [ebp - 4], 3
mov dword [ebp - 0x30], 0
jmp 0x43e27c
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 5
jge 0x43e2ae
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e2a2
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e2a9
and eax, 0xbc614e
jmp 0x43e2ac
mov dword [ebp - 0x1c], eax
jmp 0x43e273
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e2bc
jmp 0x43e2c4
mov edx, 1
test edx, edx
je 0x43e2f5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43e2ea
jmp 0x43e2f5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
jmp 0x43e2c4
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x38], 0
mov ecx, 1
test ecx, ecx
je 0x43e340
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43e32b
jmp 0x43e340
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x43e305
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x40], 0
jmp 0x43e35b
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 2
jge 0x43e39f
cmp dword [ebp - 0x1c], 0
jge 0x43e36f
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e385
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x44], 0xfa
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x240]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43e352
mov dword [ebp - 0x244], 0
jmp 0x43e3ba
mov ecx, dword [ebp - 0x244]
add ecx, 1
mov dword [ebp - 0x244], ecx
cmp dword [ebp - 0x244], 5
jge 0x43e3d1
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x244]
mov dword [ebp - 0x1c], edx
jmp 0x43e3ab
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43e3e3
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43e3fb
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x248], 0
mov edx, 1
test edx, edx
je 0x43e44f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43e431
jmp 0x43e44f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x248]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x248]
add eax, 1
mov dword [ebp - 0x248], eax
jmp 0x43e405
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x43e48f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43e481
jmp 0x43e48f
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x250]
mov dword [ebp - 0x1c], edx
jmp 0x43e455
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x254], 0
jmp 0x43e4b3
mov ecx, dword [ebp - 0x254]
add ecx, 1
mov dword [ebp - 0x254], ecx
cmp dword [ebp - 0x254], 1
jge 0x43e4ea
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x254]
mov dword [ebp - 0x1c], edx
jge 0x43e4d2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e4e8
mov dword [ebp - 0x1c], 0
jmp 0x43e4a4
mov edx, 1
test edx, edx
je 0x43e524
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43e516
jmp 0x43e524
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x258]
mov dword [ebp - 0x1c], edx
jmp 0x43e4ea
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x43e567
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43e559
jmp 0x43e567
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], edx
jmp 0x43e52d
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x260], 0
mov ecx, 1
test ecx, ecx
je 0x43e5c4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x264]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43e5a6
jmp 0x43e5c4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x260]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x260]
add eax, 1
mov dword [ebp - 0x260], eax
jmp 0x43e57a
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x268], 0
mov edx, 1
test edx, edx
je 0x43e61e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43e600
jmp 0x43e61e
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x268]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x268]
add eax, 1
mov dword [ebp - 0x268], eax
jmp 0x43e5d4
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x270], 0
jmp 0x43e642
mov edx, dword [ebp - 0x270]
add edx, 1
mov dword [ebp - 0x270], edx
cmp dword [ebp - 0x270], 7
jge 0x43e679
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x270]
mov dword [ebp - 0x1c], eax
jge 0x43e661
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e677
mov dword [ebp - 0x1c], 0
jmp 0x43e633
mov dword [ebp - 0x274], 0
jmp 0x43e694
mov edx, dword [ebp - 0x274]
add edx, 1
mov dword [ebp - 0x274], edx
cmp dword [ebp - 0x274], 4
jge 0x43e6e1
cmp dword [ebp - 0x1c], 0
jge 0x43e6ab
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e6c1
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x278], 0xfa
lea edx, [ebp - 0x278]
push edx
lea eax, [ebp - 0x470]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43e685
mov dword [ebp - 0x474], 0
jmp 0x43e6fc
mov ecx, dword [ebp - 0x474]
add ecx, 1
mov dword [ebp - 0x474], ecx
cmp dword [ebp - 0x474], 1
jge 0x43e749
cmp dword [ebp - 0x1c], 0
jge 0x43e713
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e729
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x478], 0xfa
lea edx, [ebp - 0x478]
push edx
lea eax, [ebp - 0x670]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43e6ed
mov dword [ebp - 0x674], 0
jmp 0x43e764
mov ecx, dword [ebp - 0x674]
add ecx, 1
mov dword [ebp - 0x674], ecx
cmp dword [ebp - 0x674], 4
jge 0x43e7b1
cmp dword [ebp - 0x1c], 0
jge 0x43e77b
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e791
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x678], 0xfa
lea edx, [ebp - 0x678]
push edx
lea eax, [ebp - 0x870]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43e755
mov dword [ebp - 4], 4
mov dword [ebp - 0x874], 0
jmp 0x43e7d3
mov ecx, dword [ebp - 0x874]
add ecx, 1
mov dword [ebp - 0x874], ecx
cmp dword [ebp - 0x874], 1
jge 0x43e80e
mov eax, dword [ebp - 0x874]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e802
mov eax, dword [ebp - 0x874]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e809
and eax, 0xbc614e
jmp 0x43e80c
mov dword [ebp - 0x1c], eax
jmp 0x43e7c4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e81c
jmp 0x43e824
mov dword [ebp - 0x878], 0
jmp 0x43e83f
mov edx, dword [ebp - 0x878]
add edx, 1
mov dword [ebp - 0x878], edx
cmp dword [ebp - 0x878], 4
jge 0x43e856
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x878]
mov dword [ebp - 0x1c], eax
jmp 0x43e830
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43e868
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43e880
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x87c], 0
jmp 0x43e89b
mov edx, dword [ebp - 0x87c]
add edx, 1
mov dword [ebp - 0x87c], edx
cmp dword [ebp - 0x87c], 4
jge 0x43e8b2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x87c]
mov dword [ebp - 0x1c], eax
jmp 0x43e88c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43e8c4
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43e8dc
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x880], 0
jmp 0x43e8f7
mov edx, dword [ebp - 0x880]
add edx, 1
mov dword [ebp - 0x880], edx
cmp dword [ebp - 0x880], 2
jge 0x43e944
cmp dword [ebp - 0x1c], 0
jge 0x43e90e
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43e924
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x884], 0xfa
lea edx, [ebp - 0x884]
push edx
lea eax, [ebp - 0xa80]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43e8e8
mov dword [ebp - 4], 5
mov dword [ebp - 0xa84], 0
jmp 0x43e966
mov ecx, dword [ebp - 0xa84]
add ecx, 1
mov dword [ebp - 0xa84], ecx
cmp dword [ebp - 0xa84], 4
jge 0x43e9a1
mov eax, dword [ebp - 0xa84]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43e995
mov eax, dword [ebp - 0xa84]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43e99c
and eax, 0xbc614e
jmp 0x43e99f
mov dword [ebp - 0x1c], eax
jmp 0x43e957
mov dword [ebp - 4], 0xfffffffe
call fcn.0043e9af
jmp 0x43e9b7
mov edx, 1
test edx, edx
je 0x43e9f1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0xa88]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43e9e3
jmp 0x43e9f1
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa88]
mov dword [ebp - 0x1c], edx
jmp 0x43e9b7
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa8c], 1
mov dword [ebp - 0xa90], 1
mov dword [ebp - 0xa94], 2
mov dword [ebp - 0xa98], 0
mov dword [ebp - 0xa9c], 0
jmp 0x43ea3a
mov ecx, dword [ebp - 0xa9c]
add ecx, 1
mov dword [ebp - 0xa9c], ecx
cmp dword [ebp - 0xa9c], 4
jge 0x43ea7b
mov edx, dword [ebp - 0xa8c]
add edx, dword [ebp - 0xa90]
mov dword [ebp - 0xa94], edx
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0xa8c], eax
mov ecx, dword [ebp - 0xa94]
mov dword [ebp - 0xa90], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa94]
mov dword [ebp - 0x1c], edx
jmp 0x43ea2b
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xaa0], 0
jmp 0x43ea9f
mov ecx, dword [ebp - 0xaa0]
add ecx, 1
mov dword [ebp - 0xaa0], ecx
cmp dword [ebp - 0xaa0], 4
jge 0x43ead6
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xaa0]
mov dword [ebp - 0x1c], edx
jge 0x43eabe
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43ead4
mov dword [ebp - 0x1c], 0
jmp 0x43ea90
mov dword [ebp - 4], 6
mov dword [ebp - 0xaa4], 0
jmp 0x43eaf8
mov edx, dword [ebp - 0xaa4]
add edx, 1
mov dword [ebp - 0xaa4], edx
cmp dword [ebp - 0xaa4], 3
jge 0x43eb33
mov eax, dword [ebp - 0xaa4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43eb27
mov eax, dword [ebp - 0xaa4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43eb2e
and eax, 0xbc614e
jmp 0x43eb31
mov dword [ebp - 0x1c], eax
jmp 0x43eae9
mov dword [ebp - 4], 0xfffffffe
call fcn.0043eb41
jmp 0x43eb49
mov dword [ebp - 0xaa8], 0
jmp 0x43eb64
mov edx, dword [ebp - 0xaa8]
add edx, 1
mov dword [ebp - 0xaa8], edx
cmp dword [ebp - 0xaa8], 1
jge 0x43eb9b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xaa8]
mov dword [ebp - 0x1c], eax
jge 0x43eb83
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43eb99
mov dword [ebp - 0x1c], 0
jmp 0x43eb55
mov dword [ebp - 4], 7
mov dword [ebp - 0xaac], 0
jmp 0x43ebbd
mov edx, dword [ebp - 0xaac]
add edx, 1
mov dword [ebp - 0xaac], edx
cmp dword [ebp - 0xaac], 0
jge 0x43ebf8
mov eax, dword [ebp - 0xaac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43ebec
mov eax, dword [ebp - 0xaac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43ebf3
and eax, 0xbc614e
jmp 0x43ebf6
mov dword [ebp - 0x1c], eax
jmp 0x43ebae
mov dword [ebp - 4], 0xfffffffe
call fcn.0043ec06
jmp 0x43ec0e
mov dword [ebp - 0xab0], 1
mov dword [ebp - 0xab4], 1
mov dword [ebp - 0xab8], 2
mov dword [ebp - 0xabc], 0
mov dword [ebp - 0xac0], 0
jmp 0x43ec51
mov edx, dword [ebp - 0xac0]
add edx, 1
mov dword [ebp - 0xac0], edx
cmp dword [ebp - 0xac0], 1
jge 0x43ec92
mov eax, dword [ebp - 0xab0]
add eax, dword [ebp - 0xab4]
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0xab4]
mov dword [ebp - 0xab0], ecx
mov edx, dword [ebp - 0xab8]
mov dword [ebp - 0xab4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xab8]
mov dword [ebp - 0x1c], eax
jmp 0x43ec42
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xac4], 0
jmp 0x43ecb6
mov edx, dword [ebp - 0xac4]
add edx, 1
mov dword [ebp - 0xac4], edx
cmp dword [ebp - 0xac4], 3
jge 0x43eced
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xac4]
mov dword [ebp - 0x1c], eax
jge 0x43ecd5
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43eceb
mov dword [ebp - 0x1c], 0
jmp 0x43eca7
mov dword [ebp - 0xac8], 0
jmp 0x43ed08
mov edx, dword [ebp - 0xac8]
add edx, 1
mov dword [ebp - 0xac8], edx
cmp dword [ebp - 0xac8], 0
jge 0x43ed1f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xac8]
mov dword [ebp - 0x1c], eax
jmp 0x43ecf9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43ed31
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43ed49
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x48]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret