Function at 0x433260
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47dbb0
push 0x40e3c0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x19a4
call fcn.00418010
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x2c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov eax, 1
test eax, eax
je 0x4332d5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4332ca
jmp 0x4332d5
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
jmp 0x4332a4
mov eax, dword [ebp - 0x1c]
add eax, 0x16
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x4332f0
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 0x36
jge 0x433334
cmp dword [ebp - 0x1c], 0
jge 0x433304
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43331a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x28], 0xfa
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4332e7
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x234], 2
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x23c], 0
jmp 0x433377
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
cmp dword [ebp - 0x23c], 0x16
jge 0x4333b8
mov edx, dword [ebp - 0x22c]
add edx, dword [ebp - 0x230]
mov dword [ebp - 0x234], edx
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x230], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x234]
mov dword [ebp - 0x1c], edx
jmp 0x433368
mov eax, dword [ebp - 0x1c]
add eax, 0x16
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x240], 0
jmp 0x4333e3
mov ecx, dword [ebp - 0x240]
add ecx, 1
mov dword [ebp - 0x240], ecx
cmp dword [ebp - 0x240], 9
jge 0x43341e
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433412
mov eax, dword [ebp - 0x240]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433419
and eax, 0xbc614e
jmp 0x43341c
mov dword [ebp - 0x1c], eax
jmp 0x4333d4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043342c
jmp 0x433434
mov dword [ebp - 0x244], 0
jmp 0x43344f
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0xc
jge 0x433486
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x244]
mov dword [ebp - 0x1c], eax
jge 0x43346e
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433484
mov dword [ebp - 0x1c], 0
jmp 0x433440
mov dword [ebp - 4], 1
mov dword [ebp - 0x248], 0
jmp 0x4334a8
mov edx, dword [ebp - 0x248]
add edx, 1
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 0xb
jge 0x4334e3
mov eax, dword [ebp - 0x248]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4334d7
mov eax, dword [ebp - 0x248]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4334de
and eax, 0xbc614e
jmp 0x4334e1
mov dword [ebp - 0x1c], eax
jmp 0x433499
mov dword [ebp - 4], 0xfffffffe
call fcn.004334f1
jmp 0x4334f9
mov dword [ebp - 0x24c], 0
mov edx, 1
test edx, edx
je 0x43354d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43352f
jmp 0x43354d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24c]
add eax, 1
mov dword [ebp - 0x24c], eax
jmp 0x433503
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x25c], 2
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x264], 0
jmp 0x433599
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 1
jge 0x4335da
mov eax, dword [ebp - 0x254]
add eax, dword [ebp - 0x258]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x258]
mov dword [ebp - 0x254], ecx
mov edx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], eax
jmp 0x43358a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x43361d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43360f
jmp 0x43361d
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x268]
mov dword [ebp - 0x1c], edx
jmp 0x4335e3
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x26c], 0
mov ecx, 1
test ecx, ecx
je 0x43367a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43365c
jmp 0x43367a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x26c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x26c]
add eax, 1
mov dword [ebp - 0x26c], eax
jmp 0x433630
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x274], 0
jmp 0x43369e
mov edx, dword [ebp - 0x274]
add edx, 1
mov dword [ebp - 0x274], edx
cmp dword [ebp - 0x274], 8
jge 0x4336b5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x274]
mov dword [ebp - 0x1c], eax
jmp 0x43368f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4336c7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4336df
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x278], 0
jmp 0x4336fa
mov edx, dword [ebp - 0x278]
add edx, 1
mov dword [ebp - 0x278], edx
cmp dword [ebp - 0x278], 7
jge 0x433711
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x278]
mov dword [ebp - 0x1c], eax
jmp 0x4336eb
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x433723
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43373b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x433775
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x433767
jmp 0x433775
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x27c]
mov dword [ebp - 0x1c], edx
jmp 0x43373b
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x280], 0
jmp 0x433799
mov ecx, dword [ebp - 0x280]
add ecx, 1
mov dword [ebp - 0x280], ecx
cmp dword [ebp - 0x280], 0
jge 0x4337e6
cmp dword [ebp - 0x1c], 0
jge 0x4337b0
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4337c6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x284], 0xfa
lea edx, [ebp - 0x284]
push edx
lea eax, [ebp - 0x480]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43378a
mov dword [ebp - 0x484], 0
jmp 0x433801
mov ecx, dword [ebp - 0x484]
add ecx, 1
mov dword [ebp - 0x484], ecx
cmp dword [ebp - 0x484], 0xa
jge 0x43384e
cmp dword [ebp - 0x1c], 0
jge 0x433818
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43382e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x488], 0xfa
lea edx, [ebp - 0x488]
push edx
lea eax, [ebp - 0x680]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4337f2
mov ecx, 1
test ecx, ecx
je 0x433888
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x684], eax
mov eax, dword [ebp - 0x684]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43387a
jmp 0x433888
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x684]
mov dword [ebp - 0x1c], edx
jmp 0x43384e
mov eax, dword [ebp - 0x1c]
add eax, 0xd
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x688], 1
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0x690], 2
mov dword [ebp - 0x694], 0
mov dword [ebp - 0x698], 0
jmp 0x4338d4
mov ecx, dword [ebp - 0x698]
add ecx, 1
mov dword [ebp - 0x698], ecx
cmp dword [ebp - 0x698], 2
jge 0x433915
mov edx, dword [ebp - 0x688]
add edx, dword [ebp - 0x68c]
mov dword [ebp - 0x690], edx
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x688], eax
mov ecx, dword [ebp - 0x690]
mov dword [ebp - 0x68c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x690]
mov dword [ebp - 0x1c], edx
jmp 0x4338c5
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x69c], 0
jmp 0x433939
mov ecx, dword [ebp - 0x69c]
add ecx, 1
mov dword [ebp - 0x69c], ecx
cmp dword [ebp - 0x69c], 7
jge 0x433986
cmp dword [ebp - 0x1c], 0
jge 0x433950
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433966
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6a0], 0xfa
lea edx, [ebp - 0x6a0]
push edx
lea eax, [ebp - 0x898]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43392a
mov dword [ebp - 4], 2
mov dword [ebp - 0x89c], 0
jmp 0x4339a8
mov ecx, dword [ebp - 0x89c]
add ecx, 1
mov dword [ebp - 0x89c], ecx
cmp dword [ebp - 0x89c], 7
jge 0x4339e3
mov eax, dword [ebp - 0x89c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4339d7
mov eax, dword [ebp - 0x89c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4339de
and eax, 0xbc614e
jmp 0x4339e1
mov dword [ebp - 0x1c], eax
jmp 0x433999
mov dword [ebp - 4], 0xfffffffe
call fcn.004339f1
jmp 0x4339f9
mov dword [ebp - 4], 3
mov dword [ebp - 0x8a0], 0
jmp 0x433a1b
mov edx, dword [ebp - 0x8a0]
add edx, 1
mov dword [ebp - 0x8a0], edx
cmp dword [ebp - 0x8a0], 2
jge 0x433a56
mov eax, dword [ebp - 0x8a0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433a4a
mov eax, dword [ebp - 0x8a0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433a51
and eax, 0xbc614e
jmp 0x433a54
mov dword [ebp - 0x1c], eax
jmp 0x433a0c
mov dword [ebp - 4], 0xfffffffe
call fcn.00433a64
jmp 0x433a6c
mov dword [ebp - 0x8a4], 0
mov edx, 1
test edx, edx
je 0x433ac0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x8a8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x433aa2
jmp 0x433ac0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x8a4]
add eax, 1
mov dword [ebp - 0x8a4], eax
jmp 0x433a76
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8ac], 0
mov edx, 1
test edx, edx
je 0x433b1d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x8b0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x433aff
jmp 0x433b1d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x8ac]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x8ac]
add eax, 1
mov dword [ebp - 0x8ac], eax
jmp 0x433ad3
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x8b4], 0
jmp 0x433b41
mov edx, dword [ebp - 0x8b4]
add edx, 1
mov dword [ebp - 0x8b4], edx
cmp dword [ebp - 0x8b4], 0
jge 0x433b8e
cmp dword [ebp - 0x1c], 0
jge 0x433b58
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433b6e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x8b8], 0xfa
lea edx, [ebp - 0x8b8]
push edx
lea eax, [ebp - 0xab0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x433b32
mov dword [ebp - 0xab4], 0
mov ecx, 1
test ecx, ecx
je 0x433be2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xab8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x433bc4
jmp 0x433be2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xab4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xab4]
add eax, 1
mov dword [ebp - 0xab4], eax
jmp 0x433b98
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xabc], 0
jmp 0x433c06
mov edx, dword [ebp - 0xabc]
add edx, 1
mov dword [ebp - 0xabc], edx
cmp dword [ebp - 0xabc], 1
jge 0x433c3d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xabc]
mov dword [ebp - 0x1c], eax
jge 0x433c25
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433c3b
mov dword [ebp - 0x1c], 0
jmp 0x433bf7
mov edx, 1
test edx, edx
je 0x433c77
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0xac0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x433c69
jmp 0x433c77
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1c], edx
jmp 0x433c3d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xac4], 0
jmp 0x433c98
mov ecx, dword [ebp - 0xac4]
add ecx, 1
mov dword [ebp - 0xac4], ecx
cmp dword [ebp - 0xac4], 1
jge 0x433ce5
cmp dword [ebp - 0x1c], 0
jge 0x433caf
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433cc5
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xac8], 0xfa
lea edx, [ebp - 0xac8]
push edx
lea eax, [ebp - 0xcc0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x433c89
mov dword [ebp - 0xcc4], 0
jmp 0x433d00
mov ecx, dword [ebp - 0xcc4]
add ecx, 1
mov dword [ebp - 0xcc4], ecx
cmp dword [ebp - 0xcc4], 2
jge 0x433d4d
cmp dword [ebp - 0x1c], 0
jge 0x433d17
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433d2d
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xcc8], 0xfa
lea edx, [ebp - 0xcc8]
push edx
lea eax, [ebp - 0xec0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x433cf1
mov ecx, 1
test ecx, ecx
je 0x433d87
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xec4], eax
mov eax, dword [ebp - 0xec4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x433d79
jmp 0x433d87
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xec4]
mov dword [ebp - 0x1c], edx
jmp 0x433d4d
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xec8], 0
jmp 0x433dab
mov ecx, dword [ebp - 0xec8]
add ecx, 1
mov dword [ebp - 0xec8], ecx
cmp dword [ebp - 0xec8], 7
jge 0x433de2
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xec8]
mov dword [ebp - 0x1c], edx
jge 0x433dca
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433de0
mov dword [ebp - 0x1c], 0
jmp 0x433d9c
mov dword [ebp - 4], 4
mov dword [ebp - 0xecc], 0
jmp 0x433e04
mov edx, dword [ebp - 0xecc]
add edx, 1
mov dword [ebp - 0xecc], edx
cmp dword [ebp - 0xecc], 7
jge 0x433e3f
mov eax, dword [ebp - 0xecc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x433e33
mov eax, dword [ebp - 0xecc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x433e3a
and eax, 0xbc614e
jmp 0x433e3d
mov dword [ebp - 0x1c], eax
jmp 0x433df5
mov dword [ebp - 4], 0xfffffffe
call fcn.00433e4d
jmp 0x433e55
mov dword [ebp - 0xed0], 0
mov edx, 1
test edx, edx
je 0x433ea9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0xed4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x433e8b
jmp 0x433ea9
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xed0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xed0]
add eax, 1
mov dword [ebp - 0xed0], eax
jmp 0x433e5f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xed8], 0
mov edx, 1
test edx, edx
je 0x433f06
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xedc], eax
mov eax, dword [ebp - 0xedc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x433ee8
jmp 0x433f06
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xed8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xed8]
add eax, 1
mov dword [ebp - 0xed8], eax
jmp 0x433ebc
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x433f49
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp - 0xee0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x433f3b
jmp 0x433f49
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xee0]
mov dword [ebp - 0x1c], edx
jmp 0x433f0f
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xee4], 0
jmp 0x433f6d
mov ecx, dword [ebp - 0xee4]
add ecx, 1
mov dword [ebp - 0xee4], ecx
cmp dword [ebp - 0xee4], 3
jge 0x433fa4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xee4]
mov dword [ebp - 0x1c], edx
jge 0x433f8c
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x433fa2
mov dword [ebp - 0x1c], 0
jmp 0x433f5e
mov dword [ebp - 0xee8], 0
mov edx, 1
test edx, edx
je 0x433ff8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xeec], eax
mov eax, dword [ebp - 0xeec]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x433fda
jmp 0x433ff8
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xee8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xee8]
add eax, 1
mov dword [ebp - 0xee8], eax
jmp 0x433fae
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x434038
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xef0], eax
mov eax, dword [ebp - 0xef0]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43402a
jmp 0x434038
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xef0]
mov dword [ebp - 0x1c], edx
jmp 0x433ffe
mov eax, dword [ebp - 0x1c]
add eax, 5
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x43407b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xef4], eax
mov eax, dword [ebp - 0xef4]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43406d
jmp 0x43407b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xef4]
mov dword [ebp - 0x1c], edx
jmp 0x434041
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xef8], 0
jmp 0x43409f
mov ecx, dword [ebp - 0xef8]
add ecx, 1
mov dword [ebp - 0xef8], ecx
cmp dword [ebp - 0xef8], 8
jge 0x4340b6
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xef8]
mov dword [ebp - 0x1c], edx
jmp 0x434090
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4340c8
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4340e0
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xefc], 1
mov dword [ebp - 0xf00], 1
mov dword [ebp - 0xf04], 2
mov dword [ebp - 0xf08], 0
mov dword [ebp - 0xf0c], 0
jmp 0x434123
mov edx, dword [ebp - 0xf0c]
add edx, 1
mov dword [ebp - 0xf0c], edx
cmp dword [ebp - 0xf0c], 4
jge 0x434164
mov eax, dword [ebp - 0xefc]
add eax, dword [ebp - 0xf00]
mov dword [ebp - 0xf04], eax
mov ecx, dword [ebp - 0xf00]
mov dword [ebp - 0xefc], ecx
mov edx, dword [ebp - 0xf04]
mov dword [ebp - 0xf00], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xf04]
mov dword [ebp - 0x1c], eax
jmp 0x434114
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xf10], 0
jmp 0x434188
mov edx, dword [ebp - 0xf10]
add edx, 1
mov dword [ebp - 0xf10], edx
cmp dword [ebp - 0xf10], 5
jge 0x4341bf
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xf10]
mov dword [ebp - 0x1c], eax
jge 0x4341a7
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4341bd
mov dword [ebp - 0x1c], 0
jmp 0x434179
mov dword [ebp - 0xf14], 0
jmp 0x4341da
mov edx, dword [ebp - 0xf14]
add edx, 1
mov dword [ebp - 0xf14], edx
cmp dword [ebp - 0xf14], 8
jge 0x434227
cmp dword [ebp - 0x1c], 0
jge 0x4341f1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434207
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xf18], 0xfa
lea edx, [ebp - 0xf18]
push edx
lea eax, [ebp - 0x1110]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4341cb
mov dword [ebp - 0x1114], 0
jmp 0x434242
mov ecx, dword [ebp - 0x1114]
add ecx, 1
mov dword [ebp - 0x1114], ecx
cmp dword [ebp - 0x1114], 6
jge 0x434279
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x1114]
mov dword [ebp - 0x1c], edx
jge 0x434261
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434277
mov dword [ebp - 0x1c], 0
jmp 0x434233
mov dword [ebp - 0x1118], 0
mov edx, 1
test edx, edx
je 0x4342cd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x111c], eax
mov eax, dword [ebp - 0x111c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4342af
jmp 0x4342cd
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1118]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1118]
add eax, 1
mov dword [ebp - 0x1118], eax
jmp 0x434283
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1120], 0
mov edx, 1
test edx, edx
je 0x43432a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1124], eax
mov eax, dword [ebp - 0x1124]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43430c
jmp 0x43432a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1120]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1120]
add eax, 1
mov dword [ebp - 0x1120], eax
jmp 0x4342e0
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1128], 0
jmp 0x43434e
mov edx, dword [ebp - 0x1128]
add edx, 1
mov dword [ebp - 0x1128], edx
cmp dword [ebp - 0x1128], 3
jge 0x434365
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1128]
mov dword [ebp - 0x1c], eax
jmp 0x43433f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434377
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43438f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x112c], 1
mov dword [ebp - 0x1130], 1
mov dword [ebp - 0x1134], 2
mov dword [ebp - 0x1138], 0
mov dword [ebp - 0x113c], 0
jmp 0x4343d2
mov edx, dword [ebp - 0x113c]
add edx, 1
mov dword [ebp - 0x113c], edx
cmp dword [ebp - 0x113c], 3
jge 0x434413
mov eax, dword [ebp - 0x112c]
add eax, dword [ebp - 0x1130]
mov dword [ebp - 0x1134], eax
mov ecx, dword [ebp - 0x1130]
mov dword [ebp - 0x112c], ecx
mov edx, dword [ebp - 0x1134]
mov dword [ebp - 0x1130], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1134]
mov dword [ebp - 0x1c], eax
jmp 0x4343c3
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1140], 0
jmp 0x434437
mov edx, dword [ebp - 0x1140]
add edx, 1
mov dword [ebp - 0x1140], edx
cmp dword [ebp - 0x1140], 0
jge 0x43444e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1140]
mov dword [ebp - 0x1c], eax
jmp 0x434428
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434460
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434478
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4344b2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1144], eax
mov eax, dword [ebp - 0x1144]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4344a4
jmp 0x4344b2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1144]
mov dword [ebp - 0x1c], edx
jmp 0x434478
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1148], 0
jmp 0x4344d6
mov ecx, dword [ebp - 0x1148]
add ecx, 1
mov dword [ebp - 0x1148], ecx
cmp dword [ebp - 0x1148], 4
jge 0x434523
cmp dword [ebp - 0x1c], 0
jge 0x4344ed
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434503
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x114c], 0xfa
lea edx, [ebp - 0x114c]
push edx
lea eax, [ebp - 0x1348]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4344c7
mov dword [ebp - 0x134c], 0
jmp 0x43453e
mov ecx, dword [ebp - 0x134c]
add ecx, 1
mov dword [ebp - 0x134c], ecx
cmp dword [ebp - 0x134c], 2
jge 0x434555
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x134c]
mov dword [ebp - 0x1c], edx
jmp 0x43452f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434567
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43457f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1350], 0
jmp 0x43459a
mov edx, dword [ebp - 0x1350]
add edx, 1
mov dword [ebp - 0x1350], edx
cmp dword [ebp - 0x1350], 0
jge 0x4345e7
cmp dword [ebp - 0x1c], 0
jge 0x4345b1
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4345c7
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1354], 0xfa
lea edx, [ebp - 0x1354]
push edx
lea eax, [ebp - 0x1550]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43458b
mov dword [ebp - 0x1554], 0
jmp 0x434602
mov ecx, dword [ebp - 0x1554]
add ecx, 1
mov dword [ebp - 0x1554], ecx
cmp dword [ebp - 0x1554], 3
jge 0x434619
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1554]
mov dword [ebp - 0x1c], edx
jmp 0x4345f3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43462b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434643
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1558], 0
jmp 0x43465e
mov edx, dword [ebp - 0x1558]
add edx, 1
mov dword [ebp - 0x1558], edx
cmp dword [ebp - 0x1558], 1
jge 0x434675
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1558]
mov dword [ebp - 0x1c], eax
jmp 0x43464f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x434687
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43469f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x155c], 1
mov dword [ebp - 0x1560], 1
mov dword [ebp - 0x1564], 2
mov dword [ebp - 0x1568], 0
mov dword [ebp - 0x156c], 0
jmp 0x4346e2
mov edx, dword [ebp - 0x156c]
add edx, 1
mov dword [ebp - 0x156c], edx
cmp dword [ebp - 0x156c], 3
jge 0x434723
mov eax, dword [ebp - 0x155c]
add eax, dword [ebp - 0x1560]
mov dword [ebp - 0x1564], eax
mov ecx, dword [ebp - 0x1560]
mov dword [ebp - 0x155c], ecx
mov edx, dword [ebp - 0x1564]
mov dword [ebp - 0x1560], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1564]
mov dword [ebp - 0x1c], eax
jmp 0x4346d3
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1570], 0
mov edx, 1
test edx, edx
je 0x434780
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1574], eax
mov eax, dword [ebp - 0x1574]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x434762
jmp 0x434780
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1570]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1570]
add eax, 1
mov dword [ebp - 0x1570], eax
jmp 0x434736
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1578], 0
mov edx, 1
test edx, edx
je 0x4347dd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x157c], eax
mov eax, dword [ebp - 0x157c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4347bf
jmp 0x4347dd
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1578]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1578]
add eax, 1
mov dword [ebp - 0x1578], eax
jmp 0x434793
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1580], 0
jmp 0x434801
mov edx, dword [ebp - 0x1580]
add edx, 1
mov dword [ebp - 0x1580], edx
cmp dword [ebp - 0x1580], 4
jge 0x43484e
cmp dword [ebp - 0x1c], 0
jge 0x434818
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43482e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1584], 0xfa
lea edx, [ebp - 0x1584]
push edx
lea eax, [ebp - 0x1780]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4347f2
mov dword [ebp - 0x1784], 0
jmp 0x434869
mov ecx, dword [ebp - 0x1784]
add ecx, 1
mov dword [ebp - 0x1784], ecx
cmp dword [ebp - 0x1784], 4
jge 0x4348b6
cmp dword [ebp - 0x1c], 0
jge 0x434880
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x434896
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1788], 0xfa
lea edx, [ebp - 0x1788]
push edx
lea eax, [ebp - 0x1980]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43485a
mov ecx, 1
test ecx, ecx
je 0x4348f0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1984], eax
mov eax, dword [ebp - 0x1984]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4348e2
jmp 0x4348f0
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1984]
mov dword [ebp - 0x1c], edx
jmp 0x4348b6
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1988], 0
jmp 0x434914
mov ecx, dword [ebp - 0x1988]
add ecx, 1
mov dword [ebp - 0x1988], ecx
cmp dword [ebp - 0x1988], 2
jge 0x43492b
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1988]
mov dword [ebp - 0x1c], edx
jmp 0x434905
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43493d
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x434955
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x198c], 0
jmp 0x434970
mov edx, dword [ebp - 0x198c]
add edx, 1
mov dword [ebp - 0x198c], edx
cmp dword [ebp - 0x198c], 2
jge 0x4349a7
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x198c]
mov dword [ebp - 0x1c], eax
jge 0x43498f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4349a5
mov dword [ebp - 0x1c], 0
jmp 0x434961
mov dword [ebp - 0x1990], 1
mov dword [ebp - 0x1994], 1
mov dword [ebp - 0x1998], 2
mov dword [ebp - 0x199c], 0
mov dword [ebp - 0x19a0], 0
jmp 0x4349ea
mov edx, dword [ebp - 0x19a0]
add edx, 1
mov dword [ebp - 0x19a0], edx
cmp dword [ebp - 0x19a0], 0
jge 0x434a2b
mov eax, dword [ebp - 0x1990]
add eax, dword [ebp - 0x1994]
mov dword [ebp - 0x1998], eax
mov ecx, dword [ebp - 0x1994]
mov dword [ebp - 0x1990], ecx
mov edx, dword [ebp - 0x1998]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1c], eax
jmp 0x4349db
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x19a4], 1
mov dword [ebp - 0x19a8], 1
mov dword [ebp - 0x19ac], 2
mov dword [ebp - 0x19b0], 0
mov dword [ebp - 0x19b4], 0
jmp 0x434a74
cmp dword [ebp - 0x19b4], 0
jge 0x434ab5
mov eax, dword [ebp - 0x19a4]
add eax, dword [ebp - 0x19a8]
mov dword [ebp - 0x19ac], eax
mov ecx, dword [ebp - 0x19a8]
mov dword [ebp - 0x19a4], ecx
mov edx, dword [ebp - 0x19ac]
mov dword [ebp - 0x19a8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x19ac]
mov dword [ebp - 0x1c], eax
jmp 0x434a65
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x19b8], 0
jmp 0x434ad6