Function at 0x430050
Capabilities:
Check os version
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47dab0
push 0x40e3c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffff008
mov eax, dword [0x481398]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x2c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x43009f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xc
jge 0x4300b0
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x430096
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4300c2
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4300da
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x4300ec
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0xa
jge 0x430130
cmp dword [ebp - 0x1c], 0
jge 0x430100
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x430116
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x28], 0xfa
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4300e3
mov dword [ebp - 4], 0
mov dword [ebp - 0x22c], 0
jmp 0x430152
mov ecx, dword [ebp - 0x22c]
add ecx, 1
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x22c], 0x18
jge 0x43018d
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x430181
mov eax, dword [ebp - 0x22c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x430188
and eax, 0xbc614e
jmp 0x43018b
mov dword [ebp - 0x1c], eax
jmp 0x430143
mov dword [ebp - 4], 0xfffffffe
call fcn.0043019b
jmp 0x4301a3
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x234], 1
mov dword [ebp - 0x238], 2
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x240], 0
jmp 0x4301e6
mov edx, dword [ebp - 0x240]
add edx, 1
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0x1c
jge 0x430227
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0x234]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x230], ecx
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x234], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x238]
mov dword [ebp - 0x1c], eax
jmp 0x4301d7
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1c
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x244], 0
jmp 0x43024b
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0x14
jge 0x430298
cmp dword [ebp - 0x1c], 0
jge 0x430262
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x430278
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x248], 0xfa
lea edx, [ebp - 0x248]
push edx
lea eax, [ebp - 0x440]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x43023c
mov dword [ebp - 0x444], 0
jmp 0x4302b3
mov ecx, dword [ebp - 0x444]
add ecx, 1
mov dword [ebp - 0x444], ecx
cmp dword [ebp - 0x444], 0x14
jge 0x4302ea
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x444]
mov dword [ebp - 0x1c], edx
jge 0x4302d2
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4302e8
mov dword [ebp - 0x1c], 0
jmp 0x4302a4
mov dword [ebp - 0x448], 0
jmp 0x430305
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 0x1b
jge 0x43031c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x448]
mov dword [ebp - 0x1c], eax
jmp 0x4302f6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43032e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x430346
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44c], 0
mov edx, 1
test edx, edx
je 0x43039a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43037c
jmp 0x43039a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x44c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x44c]
add eax, 1
mov dword [ebp - 0x44c], eax
jmp 0x430350
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x454], 0
jmp 0x4303be
mov edx, dword [ebp - 0x454]
add edx, 1
mov dword [ebp - 0x454], edx
cmp dword [ebp - 0x454], 9
jge 0x4303d5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x454]
mov dword [ebp - 0x1c], eax
jmp 0x4303af
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4303e7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4303ff
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x430439
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x458]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x43042b
jmp 0x430439
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x458]
mov dword [ebp - 0x1c], edx
jmp 0x4303ff
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x464], 2
mov dword [ebp - 0x468], 0
mov dword [ebp - 0x46c], 0
jmp 0x430485
mov ecx, dword [ebp - 0x46c]
add ecx, 1
mov dword [ebp - 0x46c], ecx
cmp dword [ebp - 0x46c], 1
jge 0x4304c6
mov edx, dword [ebp - 0x45c]
add edx, dword [ebp - 0x460]
mov dword [ebp - 0x464], edx
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x45c], eax
mov ecx, dword [ebp - 0x464]
mov dword [ebp - 0x460], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x464]
mov dword [ebp - 0x1c], edx
jmp 0x430476
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x478], 2
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x480], 0
jmp 0x430512
mov ecx, dword [ebp - 0x480]
add ecx, 1
mov dword [ebp - 0x480], ecx
cmp dword [ebp - 0x480], 0xf
jge 0x430553
mov edx, dword [ebp - 0x470]
add edx, dword [ebp - 0x474]
mov dword [ebp - 0x478], edx
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x470], eax
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x474], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x478]
mov dword [ebp - 0x1c], edx
jmp 0x430503
mov eax, dword [ebp - 0x1c]
add eax, 0xf
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x484], 1
mov dword [ebp - 0x488], 1
mov dword [ebp - 0x48c], 2
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x494], 0
jmp 0x43059f
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
cmp dword [ebp - 0x494], 6
jge 0x4305e0
mov edx, dword [ebp - 0x484]
add edx, dword [ebp - 0x488]
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x484], eax
mov ecx, dword [ebp - 0x48c]
mov dword [ebp - 0x488], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x48c]
mov dword [ebp - 0x1c], edx
jmp 0x430590
mov eax, dword [ebp - 0x1c]
add eax, 6
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x498], 0
jmp 0x43060b
mov ecx, dword [ebp - 0x498]
add ecx, 1
mov dword [ebp - 0x498], ecx
cmp dword [ebp - 0x498], 6
jge 0x430646
mov eax, dword [ebp - 0x498]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43063a
mov eax, dword [ebp - 0x498]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x430641
and eax, 0xbc614e
jmp 0x430644
mov dword [ebp - 0x1c], eax
jmp 0x4305fc
mov dword [ebp - 4], 0xfffffffe
call fcn.00430654
jmp 0x43065c
mov dword [ebp - 0x49c], 0
jmp 0x430677
mov edx, dword [ebp - 0x49c]
add edx, 1
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 0xd
jge 0x4306ae
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1c], eax
jge 0x430696
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4306ac
mov dword [ebp - 0x1c], 0
jmp 0x430668
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0x4a4], 1
mov dword [ebp - 0x4a8], 2
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x4b0], 0
jmp 0x4306f1
mov edx, dword [ebp - 0x4b0]
add edx, 1
mov dword [ebp - 0x4b0], edx
cmp dword [ebp - 0x4b0], 0
jge 0x430732
mov eax, dword [ebp - 0x4a0]
add eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a8], eax
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a0], ecx
mov edx, dword [ebp - 0x4a8]
mov dword [ebp - 0x4a4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x1c], eax
jmp 0x4306e2
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4b4], 1
mov dword [ebp - 0x4b8], 1
mov dword [ebp - 0x4bc], 2
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4c4], 0
jmp 0x43077b
mov edx, dword [ebp - 0x4c4]
add edx, 1
mov dword [ebp - 0x4c4], edx
cmp dword [ebp - 0x4c4], 0
jge 0x4307bc
mov eax, dword [ebp - 0x4b4]
add eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x4bc], eax
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp - 0x4b4], ecx
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4b8], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x1c], eax
jmp 0x43076c
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4c8], 0
mov edx, 1
test edx, edx
je 0x430816
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4307f8
jmp 0x430816
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4c8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4c8]
add eax, 1
mov dword [ebp - 0x4c8], eax
jmp 0x4307cc
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4d0], 0
mov edx, 1
test edx, edx
je 0x430873
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4d4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x430855
jmp 0x430873
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x4d0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x4d0]
add eax, 1
mov dword [ebp - 0x4d0], eax
jmp 0x430829
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov edx, 1
test edx, edx
je 0x4308b6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4308a8
jmp 0x4308b6
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x4d8]
mov dword [ebp - 0x1c], edx
jmp 0x43087c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4dc], 0
jmp 0x4308d7
mov ecx, dword [ebp - 0x4dc]
add ecx, 1
mov dword [ebp - 0x4dc], ecx
cmp dword [ebp - 0x4dc], 3
jge 0x430924
cmp dword [ebp - 0x1c], 0
jge 0x4308ee
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x430904
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4e0], 0xfa
lea edx, [ebp - 0x4e0]
push edx
lea eax, [ebp - 0x6d8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4308c8
mov dword [ebp - 4], 2
mov dword [ebp - 0x6dc], 0
jmp 0x430946
mov ecx, dword [ebp - 0x6dc]
add ecx, 1
mov dword [ebp - 0x6dc], ecx
cmp dword [ebp - 0x6dc], 6
jge 0x430981
mov eax, dword [ebp - 0x6dc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x430975
mov eax, dword [ebp - 0x6dc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43097c
and eax, 0xbc614e
jmp 0x43097f
mov dword [ebp - 0x1c], eax
jmp 0x430937
mov dword [ebp - 4], 0xfffffffe
call fcn.0043098f
jmp 0x430997
mov dword [ebp - 0x6e0], 0
jmp 0x4309b2
mov edx, dword [ebp - 0x6e0]
add edx, 1
mov dword [ebp - 0x6e0], edx
cmp dword [ebp - 0x6e0], 4
jge 0x4309ff
cmp dword [ebp - 0x1c], 0
jge 0x4309c9
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4309df
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x6e4], 0xfa
lea edx, [ebp - 0x6e4]
push edx
lea eax, [ebp - 0x8e0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4309a3
mov dword [ebp - 4], 3
mov dword [ebp - 0x8e4], 0
jmp 0x430a21
mov ecx, dword [ebp - 0x8e4]
add ecx, 1
mov dword [ebp - 0x8e4], ecx
cmp dword [ebp - 0x8e4], 3
jge 0x430a5c
mov eax, dword [ebp - 0x8e4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x430a50
mov eax, dword [ebp - 0x8e4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x430a57
and eax, 0xbc614e
jmp 0x430a5a
mov dword [ebp - 0x1c], eax
jmp 0x430a12
mov dword [ebp - 4], 0xfffffffe
call fcn.00430a6a
jmp 0x430a72
mov edx, 1
test edx, edx
je 0x430aac
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x8e8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x430a9e
jmp 0x430aac
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8e8]
mov dword [ebp - 0x1c], edx
jmp 0x430a72
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8ec], 1
mov dword [ebp - 0x8f0], 1
mov dword [ebp - 0x8f4], 2
mov dword [ebp - 0x8f8], 0
mov dword [ebp - 0x8fc], 0
jmp 0x430af8
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
cmp dword [ebp - 0x8fc], 0
jge 0x430b39
mov edx, dword [ebp - 0x8ec]
add edx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8f4], edx
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x8ec], eax
mov ecx, dword [ebp - 0x8f4]
mov dword [ebp - 0x8f0], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x8f4]
mov dword [ebp - 0x1c], edx
jmp 0x430ae9
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x900], 0
jmp 0x430b5a
mov ecx, dword [ebp - 0x900]
add ecx, 1
mov dword [ebp - 0x900], ecx
cmp dword [ebp - 0x900], 1
jge 0x430b71
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x900]
mov dword [ebp - 0x1c], edx
jmp 0x430b4b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x430b83
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x430b9b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x904], 1
mov dword [ebp - 0x908], 1
mov dword [ebp - 0x90c], 2
mov dword [ebp - 0x910], 0
mov dword [ebp - 0x914], 0
jmp 0x430bde
mov edx, dword [ebp - 0x914]
add edx, 1
mov dword [ebp - 0x914], edx
cmp dword [ebp - 0x914], 4
jge 0x430c1f
mov eax, dword [ebp - 0x904]
add eax, dword [ebp - 0x908]
mov dword [ebp - 0x90c], eax
mov ecx, dword [ebp - 0x908]
mov dword [ebp - 0x904], ecx
mov edx, dword [ebp - 0x90c]
mov dword [ebp - 0x908], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x90c]
mov dword [ebp - 0x1c], eax
jmp 0x430bcf
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x918], 0
mov edx, 1
test edx, edx
je 0x430c7c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x91c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x430c5e
jmp 0x430c7c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x918]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x918]
add eax, 1
mov dword [ebp - 0x918], eax
jmp 0x430c32
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x920], 0
mov edx, 1
test edx, edx
je 0x430cd6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x430cb8
jmp 0x430cd6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x920]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x920]
add eax, 1
mov dword [ebp - 0x920], eax
jmp 0x430c8c
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x928], 0
jmp 0x430d01
mov edx, dword [ebp - 0x928]
add edx, 1
mov dword [ebp - 0x928], edx
cmp dword [ebp - 0x928], 2
jge 0x430d3c
mov eax, dword [ebp - 0x928]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x430d30
mov eax, dword [ebp - 0x928]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x430d37
and eax, 0xbc614e
jmp 0x430d3a
mov dword [ebp - 0x1c], eax
jmp 0x430cf2
mov dword [ebp - 4], 0xfffffffe
call fcn.00430d4a
jmp 0x430d52
mov edx, 1
test edx, edx
je 0x430d8c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0x92c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x430d7e
jmp 0x430d8c
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x92c]
mov dword [ebp - 0x1c], edx
jmp 0x430d52
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x930], 1
mov dword [ebp - 0x934], 1
mov dword [ebp - 0x938], 2
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x940], 0
jmp 0x430dd8
mov ecx, dword [ebp - 0x940]
add ecx, 1
mov dword [ebp - 0x940], ecx
cmp dword [ebp - 0x940], 4
jge 0x430e19
mov edx, dword [ebp - 0x930]
add edx, dword [ebp - 0x934]
mov dword [ebp - 0x938], edx
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x938]
mov dword [ebp - 0x934], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x938]
mov dword [ebp - 0x1c], edx
jmp 0x430dc9
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x944], 0
jmp 0x430e3d
mov ecx, dword [ebp - 0x944]
add ecx, 1
mov dword [ebp - 0x944], ecx
cmp dword [ebp - 0x944], 0
jge 0x430e54
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x944]
mov dword [ebp - 0x1c], edx
jmp 0x430e2e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x430e66
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x430e7e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x430eb8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x948], eax
mov eax, dword [ebp - 0x948]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x430eaa
jmp 0x430eb8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x948]
mov dword [ebp - 0x1c], edx
jmp 0x430e7e
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x94c], 1
mov dword [ebp - 0x950], 1
mov dword [ebp - 0x954], 2
mov dword [ebp - 0x958], 0
mov dword [ebp - 0x95c], 0
jmp 0x430f04
mov ecx, dword [ebp - 0x95c]
add ecx, 1
mov dword [ebp - 0x95c], ecx
cmp dword [ebp - 0x95c], 1
jge 0x430f45
mov edx, dword [ebp - 0x94c]
add edx, dword [ebp - 0x950]
mov dword [ebp - 0x954], edx
mov eax, dword [ebp - 0x950]
mov dword [ebp - 0x94c], eax
mov ecx, dword [ebp - 0x954]
mov dword [ebp - 0x950], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x954]
mov dword [ebp - 0x1c], edx
jmp 0x430ef5
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x960], 0
jmp 0x430f70
mov ecx, dword [ebp - 0x960]
add ecx, 1
mov dword [ebp - 0x960], ecx
cmp dword [ebp - 0x960], 0
jge 0x430fab
mov eax, dword [ebp - 0x960]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x430f9f
mov eax, dword [ebp - 0x960]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x430fa6
and eax, 0xbc614e
jmp 0x430fa9
mov dword [ebp - 0x1c], eax
jmp 0x430f61
mov dword [ebp - 4], 0xfffffffe
call fcn.00430fb9
jmp 0x430fc1
mov dword [ebp - 4], 6
mov dword [ebp - 0x964], 0
jmp 0x430fe3
mov edx, dword [ebp - 0x964]
add edx, 1
mov dword [ebp - 0x964], edx
cmp dword [ebp - 0x964], 0
jge 0x43101e
mov eax, dword [ebp - 0x964]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x431012
mov eax, dword [ebp - 0x964]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x431019
and eax, 0xbc614e
jmp 0x43101c
mov dword [ebp - 0x1c], eax
jmp 0x430fd4
mov dword [ebp - 4], 0xfffffffe
call fcn.0043102c
jmp 0x431034
mov edx, 1
test edx, edx
je 0x43106e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x968]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x431060
jmp 0x43106e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x968]
mov dword [ebp - 0x1c], edx
jmp 0x431034
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x96c], 0
mov ecx, 1
test ecx, ecx
je 0x4310cb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0x970]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4310ad
jmp 0x4310cb
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x96c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x96c]
add eax, 1
mov dword [ebp - 0x96c], eax
jmp 0x431081
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x974], 0
jmp 0x4310ef
mov edx, dword [ebp - 0x974]
add edx, 1
mov dword [ebp - 0x974], edx
cmp dword [ebp - 0x974], 1
jge 0x431126
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x974]
mov dword [ebp - 0x1c], eax
jge 0x43110e
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x431124
mov dword [ebp - 0x1c], 0
jmp 0x4310e0
mov dword [ebp - 0x978], 0
jmp 0x431141
mov edx, dword [ebp - 0x978]
add edx, 1
mov dword [ebp - 0x978], edx
cmp dword [ebp - 0x978], 0
jge 0x43118e
cmp dword [ebp - 0x1c], 0
jge 0x431158
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43116e
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x97c], 0xfa
lea edx, [ebp - 0x97c]
push edx
lea eax, [ebp - 0xb78]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x431132
mov ecx, 1
test ecx, ecx
je 0x4311c8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb7c], eax
mov eax, dword [ebp - 0xb7c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4311ba
jmp 0x4311c8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xb7c]
mov dword [ebp - 0x1c], edx
jmp 0x43118e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb80], 0
jmp 0x4311e9
mov ecx, dword [ebp - 0xb80]
add ecx, 1
mov dword [ebp - 0xb80], ecx
cmp dword [ebp - 0xb80], 4
jge 0x431236
cmp dword [ebp - 0x1c], 0
jge 0x431200
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x431216
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xb84], 0xfa
lea edx, [ebp - 0xb84]
push edx
lea eax, [ebp - 0xd80]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x4311da
mov dword [ebp - 0xd84], 1
mov dword [ebp - 0xd88], 1
mov dword [ebp - 0xd8c], 2
mov dword [ebp - 0xd90], 0
mov dword [ebp - 0xd94], 0
jmp 0x431279
mov ecx, dword [ebp - 0xd94]
add ecx, 1
mov dword [ebp - 0xd94], ecx
cmp dword [ebp - 0xd94], 2
jge 0x4312ba
mov edx, dword [ebp - 0xd84]
add edx, dword [ebp - 0xd88]
mov dword [ebp - 0xd8c], edx
mov eax, dword [ebp - 0xd88]
mov dword [ebp - 0xd84], eax
mov ecx, dword [ebp - 0xd8c]
mov dword [ebp - 0xd88], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd8c]
mov dword [ebp - 0x1c], edx
jmp 0x43126a
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x4312fd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd98], eax
mov eax, dword [ebp - 0xd98]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4312ef
jmp 0x4312fd
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd98]
mov dword [ebp - 0x1c], edx
jmp 0x4312c3
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x431340
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0xd9c]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x431332
jmp 0x431340
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd9c]
mov dword [ebp - 0x1c], edx
jmp 0x431306
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xda0], 1
mov dword [ebp - 0xda4], 1
mov dword [ebp - 0xda8], 2
mov dword [ebp - 0xdac], 0
mov dword [ebp - 0xdb0], 0
jmp 0x43138c
mov ecx, dword [ebp - 0xdb0]
add ecx, 1
mov dword [ebp - 0xdb0], ecx
cmp dword [ebp - 0xdb0], 0
jge 0x4313cd
mov edx, dword [ebp - 0xda0]
add edx, dword [ebp - 0xda4]
mov dword [ebp - 0xda8], edx
mov eax, dword [ebp - 0xda4]
mov dword [ebp - 0xda0], eax
mov ecx, dword [ebp - 0xda8]
mov dword [ebp - 0xda4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xda8]
mov dword [ebp - 0x1c], edx
jmp 0x43137d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xdb4], 0
jmp 0x4313ee
mov ecx, dword [ebp - 0xdb4]
add ecx, 1
mov dword [ebp - 0xdb4], ecx
cmp dword [ebp - 0xdb4], 0
jge 0x431405
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xdb4]
mov dword [ebp - 0x1c], edx
jmp 0x4313df
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x431417
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x43142f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xdb8], 0
jmp 0x43144a
mov edx, dword [ebp - 0xdb8]
add edx, 1
mov dword [ebp - 0xdb8], edx
cmp dword [ebp - 0xdb8], 4
jge 0x431481
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xdb8]
mov dword [ebp - 0x1c], eax
jge 0x431469
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43147f
mov dword [ebp - 0x1c], 0
jmp 0x43143b
mov edx, 1
test edx, edx
je 0x4314bb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xdbc], eax
mov eax, dword [ebp - 0xdbc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4314ad
jmp 0x4314bb
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xdbc]
mov dword [ebp - 0x1c], edx
jmp 0x431481
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0xdc0], 0
jmp 0x4314e6
mov ecx, dword [ebp - 0xdc0]
add ecx, 1
mov dword [ebp - 0xdc0], ecx
cmp dword [ebp - 0xdc0], 2
jge 0x431521
mov eax, dword [ebp - 0xdc0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x431515
mov eax, dword [ebp - 0xdc0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43151c
and eax, 0xbc614e
jmp 0x43151f
mov dword [ebp - 0x1c], eax
jmp 0x4314d7
mov dword [ebp - 4], 0xfffffffe
call fcn.0043152f
jmp 0x431537
mov dword [ebp - 0xdc4], 0
jmp 0x431552
mov edx, dword [ebp - 0xdc4]
add edx, 1
mov dword [ebp - 0xdc4], edx
cmp dword [ebp - 0xdc4], 1
jge 0x431569
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xdc4]
mov dword [ebp - 0x1c], eax
jmp 0x431543
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43157b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x431593
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov edx, 1
test edx, edx
je 0x4315cd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xdc8], eax
mov eax, dword [ebp - 0xdc8]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x4315bf
jmp 0x4315cd
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xdc8]
mov dword [ebp - 0x1c], edx
jmp 0x431593
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x431610
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xdcc], eax
mov eax, dword [ebp - 0xdcc]
xor edx, edx
mov ecx, 7
div ecx
test edx, edx
jne 0x431602
jmp 0x431610
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xdcc]
mov dword [ebp - 0x1c], edx
jmp 0x4315d6
mov eax, dword [ebp - 0x1c]
add eax, 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xdd0], 0
mov ecx, 1
test ecx, ecx
je 0x43166d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xdd4], eax
mov eax, dword [ebp - 0xdd4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43164f
jmp 0x43166d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xdd0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xdd0]
add eax, 1
mov dword [ebp - 0xdd0], eax
jmp 0x431623
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xdd8], 0
jmp 0x431691
mov edx, dword [ebp - 0xdd8]
add edx, 1
mov dword [ebp - 0xdd8], edx
cmp dword [ebp - 0xdd8], 1
jge 0x4316de
cmp dword [ebp - 0x1c], 0
jge 0x4316a8
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4316be
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xddc], 0xfa
lea edx, [ebp - 0xddc]
push edx
lea eax, [ebp - 0xfd8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
jmp 0x431682
mov dword [ebp - 0xfdc], 0
mov ecx, 1
test ecx, ecx
je 0x431732
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xfe0], eax
mov eax, dword [ebp - 0xfe0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x431714
jmp 0x431732
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xfdc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xfdc]
add eax, 1
mov dword [ebp - 0xfdc], eax
jmp 0x4316e8
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xfe4], 0
jmp 0x431756
mov edx, dword [ebp - 0xfe4]
add edx, 1
mov dword [ebp - 0xfe4], edx
cmp dword [ebp - 0xfe4], 2
jge 0x43178d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xfe4]
mov dword [ebp - 0x1c], eax
jge 0x431775
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43178b
mov dword [ebp - 0x1c], 0
jmp 0x431747
mov dword [ebp - 0xfe8], 0
mov edx, 1
test edx, edx
je 0x4317e1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xfec], eax
mov eax, dword [ebp - 0xfec]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4317c3
jmp 0x4317e1
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xfe8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xfe8]
add eax, 1
mov dword [ebp - 0xfe8], eax
jmp 0x431797
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0xff0], 0
jmp 0x43180c
mov edx, dword [ebp - 0xff0]
add edx, 1
mov dword [ebp - 0xff0], edx
cmp dword [ebp - 0xff0], 4
jge 0x431847
mov eax, dword [ebp - 0xff0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x43183b
mov eax, dword [ebp - 0xff0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x431842
and eax, 0xbc614e
jmp 0x431845
mov dword [ebp - 0x1c], eax
jmp 0x4317fd
mov dword [ebp - 4], 0xfffffffe
call fcn.00431855
jmp 0x43185d
mov dword [ebp - 0xff4], 0
jmp 0x431878
cmp dword [ebp - 0xff4], 3
jge 0x4318af
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xff4]
mov dword [ebp - 0x1c], eax
jge 0x431897
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4318ad
mov dword [ebp - 0x1c], 0
jmp 0x431869
mov dword [ebp - 0xff8], 1
mov dword [ebp - 0xffc], 1
mov dword [ebp - 0x1000], 2
mov dword [ebp - 0x1004], 0
mov dword [ebp - 0x1008], 0
jmp 0x4318f2
cmp dword [ebp - 0x1008], 2
jge 0x431933
mov eax, dword [ebp - 0xff8]
add eax, dword [ebp - 0xffc]
mov dword [ebp - 0x1000], eax
mov ecx, dword [ebp - 0xffc]
mov dword [ebp - 0xff8], ecx
mov edx, dword [ebp - 0x1000]
mov dword [ebp - 0xffc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1000]
mov dword [ebp - 0x1c], eax
jmp 0x4318e3
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.00408b45
mov esp, ebp
pop ebp
ret