Function at 0x4776c0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a7000
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffea8
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x47770f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x3e
jge 0x477720
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x477706
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x477732
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47774a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x47775c
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x2c
jge 0x47776d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jmp 0x477753
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47777f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x477797
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], 0
jmp 0x4777a9
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xf
jge 0x4777bb
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x4777a0
cmp dword [ebp - 0x1c], 0
jle 0x4777ca
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4777e0
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x2c], 0
jmp 0x4777f5
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x1c
jge 0x477825
mov eax, dword [ebp - 0x2c]
and eax, 0x80000001
jns 0x47780a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47781a
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
jmp 0x477823
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
jmp 0x4777ec
push 0x498508
push 0x498510
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x30], 0
mov eax, 1
test eax, eax
je 0x477877
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x477862
jmp 0x477877
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
jmp 0x47783c
mov ecx, dword [ebp - 0x1c]
add ecx, 0x15
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38], 0
jmp 0x477892
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0xa
jge 0x4778a3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x477889
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4778b5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4778cd
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x40], 0
jmp 0x4778ed
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xb
jge 0x477917
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47790b
mov edx, dword [ebp - 0x3c]
sub edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x4778e4
mov dword [ebp - 4], 0xfffffffe
jmp 0x47794f
mov dword [ebp - 4], 1
mov dword [ebp - 0x44], 0
jmp 0x477968
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 2
jge 0x47799e
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47798e
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x477999
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47799c
mov dword [ebp - 0x1c], eax
jmp 0x47795f
mov dword [ebp - 4], 0xfffffffe
call fcn.004779ac
jmp 0x4779b4
mov dword [ebp - 0x48], 0
jmp 0x4779c6
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0xd
jge 0x4779d8
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
jmp 0x4779bd
cmp dword [ebp - 0x1c], 0
jle 0x4779e7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4779fd
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 2
mov dword [ebp - 0x4c], 0
jmp 0x477a19
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 7
jge 0x477a4f
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x477a3f
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x477a4a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x477a4d
mov dword [ebp - 0x1c], eax
jmp 0x477a10
mov dword [ebp - 4], 0xfffffffe
call fcn.00477a5d
jmp 0x477a65
mov dword [ebp - 0x50], 0
jmp 0x477a77
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 2
jge 0x477aa8
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
jge 0x477a90
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x477aa6
mov dword [ebp - 0x1c], 0
jmp 0x477a6e
mov dword [ebp - 4], 3
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x58], 0
jmp 0x477ac8
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 9
jge 0x477af2
mov eax, dword [ebp - 0x58]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x477ae6
mov edx, dword [ebp - 0x54]
sub edx, 1
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x54]
mov dword [ebp - 0x1c], eax
jmp 0x477abf
mov dword [ebp - 4], 0xfffffffe
jmp 0x477b2a
mov dword [ebp - 0x5c], 0
mov edx, 1
test edx, edx
je 0x477b6c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x477b57
jmp 0x477b6c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
jmp 0x477b31
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x64], 0
jmp 0x477b87
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 8
jge 0x477bb8
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x64]
mov dword [ebp - 0x1c], eax
jge 0x477ba0
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x477bb6
mov dword [ebp - 0x1c], 0
jmp 0x477b7e
mov dword [ebp - 4], 4
mov dword [ebp - 0x68], 7
mov dword [ebp - 0x6c], 0
jmp 0x477bd8
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 8
jge 0x477c02
mov eax, dword [ebp - 0x6c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x477bf6
mov edx, dword [ebp - 0x68]
sub edx, 1
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x68]
mov dword [ebp - 0x1c], eax
jmp 0x477bcf
mov dword [ebp - 4], 0xfffffffe
jmp 0x477c3a
mov dword [ebp - 0x70], 0
jmp 0x477c4c
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0
jge 0x477c7d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c], eax
jge 0x477c65
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x477c7b
mov dword [ebp - 0x1c], 0
jmp 0x477c43
mov dword [ebp - 0x74], 0
mov edx, 1
test edx, edx
je 0x477cbf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x477caa
jmp 0x477cbf
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x74]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
jmp 0x477c84
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x7c], 0
jmp 0x477ce1
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 5
jge 0x477d17
mov eax, dword [ebp - 0x7c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x477d07
mov eax, dword [ebp - 0x7c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x477d12
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x477d15
mov dword [ebp - 0x1c], eax
jmp 0x477cd8
mov dword [ebp - 4], 0xfffffffe
call fcn.00477d25
jmp 0x477d2d
mov dword [ebp - 0x80], 0
mov edx, 1
test edx, edx
je 0x477d75
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x477d60
jmp 0x477d75
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x80]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
jmp 0x477d34
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x88], 0
jmp 0x477d99
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 2
jge 0x477db0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jmp 0x477d8a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x477dc2
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x477dda
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c], 0
jmp 0x477df5
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 4
jge 0x477e31
mov eax, dword [ebp - 0x8c]
and eax, 0x80000001
jns 0x477e10
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x477e23
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], ecx
jmp 0x477e2f
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], edx
jmp 0x477de6
push 0x498518
push 0x498520
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x90], 0
jmp 0x477e5c
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jge 0x477e74
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x90]
mov dword [ebp - 0x1c], ecx
jmp 0x477e4d
cmp dword [ebp - 0x1c], 0
jle 0x477e83
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x477e99
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x94], 0
mov edx, 1
test edx, edx
je 0x477ef0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x477ed2
jmp 0x477ef0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x94]
add eax, 1
mov dword [ebp - 0x94], eax
jmp 0x477ea6
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x9c], 0
jmp 0x477f14
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
cmp dword [ebp - 0x9c], 5
jge 0x477f4b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
jge 0x477f33
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x477f49
mov dword [ebp - 0x1c], 0
jmp 0x477f05
mov dword [ebp - 0xa0], 0
jmp 0x477f66
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 1
jge 0x477f9d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], eax
jge 0x477f85
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x477f9b
mov dword [ebp - 0x1c], 0
jmp 0x477f57
mov dword [ebp - 0xa4], 0
mov edx, 1
test edx, edx
je 0x477ff1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x477fd3
jmp 0x477ff1
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xa4]
add eax, 1
mov dword [ebp - 0xa4], eax
jmp 0x477fa7
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0xac], 7
mov dword [ebp - 0xb0], 0
jmp 0x478026
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0xb0], 4
jge 0x47805f
mov eax, dword [ebp - 0xb0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x478050
mov edx, dword [ebp - 0xac]
sub edx, 1
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xac]
mov dword [ebp - 0x1c], eax
jmp 0x478017
mov dword [ebp - 4], 0xfffffffe
jmp 0x478097
mov dword [ebp - 0xb4], 0
jmp 0x4780b2
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 3
jge 0x4780e9
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], eax
jge 0x4780d1
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4780e7
mov dword [ebp - 0x1c], 0
jmp 0x4780a3
mov dword [ebp - 4], 7
mov dword [ebp - 0xb8], 7
mov dword [ebp - 0xbc], 0
jmp 0x478115
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 1
jge 0x47814e
mov eax, dword [ebp - 0xbc]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47813f
mov edx, dword [ebp - 0xb8]
sub edx, 1
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xb8]
mov dword [ebp - 0x1c], eax
jmp 0x478106
mov dword [ebp - 4], 0xfffffffe
jmp 0x478186
mov dword [ebp - 4], 8
mov dword [ebp - 0xc0], 7
mov dword [ebp - 0xc4], 0
jmp 0x4781b2
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 3
jge 0x4781eb
mov eax, dword [ebp - 0xc4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4781dc
mov edx, dword [ebp - 0xc0]
sub edx, 1
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xc0]
mov dword [ebp - 0x1c], eax
jmp 0x4781a3
mov dword [ebp - 4], 0xfffffffe
jmp 0x478223
mov dword [ebp - 0xc8], 0
jmp 0x47823e
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 5
jge 0x47827a
mov eax, dword [ebp - 0xc8]
and eax, 0x80000001
jns 0x478259
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47826c
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], ecx
jmp 0x478278
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], edx
jmp 0x47822f
push 0x498528
push 0x498530
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xcc], 0
jmp 0x4782a5
mov eax, dword [ebp - 0xcc]
add eax, 1
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jge 0x4782dc
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x1c], ecx
jge 0x4782c4
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4782da
mov dword [ebp - 0x1c], 0
jmp 0x478296
mov dword [ebp - 0xd0], 0
mov edx, 1
test edx, edx
je 0x478330
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x478312
jmp 0x478330
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd0]
add eax, 1
mov dword [ebp - 0xd0], eax
jmp 0x4782e6
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0xd8], 0
jmp 0x47835b
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 7
jge 0x47839a
mov eax, dword [ebp - 0xd8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47838a
mov eax, dword [ebp - 0xd8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x478395
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x478398
mov dword [ebp - 0x1c], eax
jmp 0x47834c
mov dword [ebp - 4], 0xfffffffe
call fcn.004783a8
jmp 0x4783b0
mov dword [ebp - 0xdc], 0
mov edx, 1
test edx, edx
je 0x478404
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4783e6
jmp 0x478404
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xdc]
add eax, 1
mov dword [ebp - 0xdc], eax
jmp 0x4783ba
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xe4], 0
jmp 0x478428
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 6
jge 0x478464
mov eax, dword [ebp - 0xe4]
and eax, 0x80000001
jns 0x478443
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x478456
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], ecx
jmp 0x478462
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], edx
jmp 0x478419
push 0x498538
push 0x498540
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xe8], 0
jmp 0x47848f
mov eax, dword [ebp - 0xe8]
add eax, 1
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 4
jge 0x4784a7
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], ecx
jmp 0x478480
cmp dword [ebp - 0x1c], 0
jle 0x4784b6
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4784cc
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xec], 0
mov edx, 1
test edx, edx
je 0x478523
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x478505
jmp 0x478523
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xec]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xec]
add eax, 1
mov dword [ebp - 0xec], eax
jmp 0x4784d9
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xf4], 0
jmp 0x47854e
mov edx, dword [ebp - 0xf4]
add edx, 1
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], 7
jge 0x47858d
mov eax, dword [ebp - 0xf4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47857d
mov eax, dword [ebp - 0xf4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x478588
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47858b
mov dword [ebp - 0x1c], eax
jmp 0x47853f
mov dword [ebp - 4], 0xfffffffe
call fcn.0047859b
jmp 0x4785a3
mov dword [ebp - 0xf8], 0
jmp 0x4785be
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 8
jge 0x4785d6
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x4785af
cmp dword [ebp - 0x1c], 0
jle 0x4785e5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4785fb
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xfc], 0
mov edx, 1
test edx, edx
je 0x478652
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x478634
jmp 0x478652
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xfc]
add eax, 1
mov dword [ebp - 0xfc], eax
jmp 0x478608
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x104], 7
mov dword [ebp - 0x108], 0
jmp 0x478687
mov edx, dword [ebp - 0x108]
add edx, 1
mov dword [ebp - 0x108], edx
cmp dword [ebp - 0x108], 6
jge 0x4786c0
mov eax, dword [ebp - 0x108]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4786b1
mov edx, dword [ebp - 0x104]
sub edx, 1
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
jmp 0x478678
mov dword [ebp - 4], 0xfffffffe
jmp 0x4786f8
mov dword [ebp - 0x10c], 0
jmp 0x478713
mov edx, dword [ebp - 0x10c]
add edx, 1
mov dword [ebp - 0x10c], edx
cmp dword [ebp - 0x10c], 1
jge 0x47872b
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x10c]
mov dword [ebp - 0x1c], eax
jmp 0x478704
cmp dword [ebp - 0x1c], 0
jle 0x47873a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x478750
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x110], 0
jmp 0x47876e
mov edx, dword [ebp - 0x110]
add edx, 1
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 0
jge 0x4787a5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x110]
mov dword [ebp - 0x1c], eax
jge 0x47878d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4787a3
mov dword [ebp - 0x1c], 0
jmp 0x47875f
mov dword [ebp - 0x114], 0
mov edx, 1
test edx, edx
je 0x4787f9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4787db
jmp 0x4787f9
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x114]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
jmp 0x4787af
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x11c], 0
mov edx, 1
test edx, edx
je 0x478856
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x478838
jmp 0x478856
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x11c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x11c]
add eax, 1
mov dword [ebp - 0x11c], eax
jmp 0x47880c
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x124], 0
jmp 0x478877
mov edx, dword [ebp - 0x124]
add edx, 1
mov dword [ebp - 0x124], edx
cmp dword [ebp - 0x124], 0
jge 0x47888e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x124]
mov dword [ebp - 0x1c], eax
jmp 0x478868
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4788a0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4788b8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x128], 0
jmp 0x4788da
mov edx, dword [ebp - 0x128]
add edx, 1
mov dword [ebp - 0x128], edx
cmp dword [ebp - 0x128], 1
jge 0x478919
mov eax, dword [ebp - 0x128]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x478909
mov eax, dword [ebp - 0x128]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x478914
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x478917
mov dword [ebp - 0x1c], eax
jmp 0x4788cb
mov dword [ebp - 4], 0xfffffffe
call fcn.00478927
jmp 0x47892f
mov dword [ebp - 0x12c], 0
jmp 0x47894a
mov edx, dword [ebp - 0x12c]
add edx, 1
mov dword [ebp - 0x12c], edx
cmp dword [ebp - 0x12c], 1
jge 0x478986
mov eax, dword [ebp - 0x12c]
and eax, 0x80000001
jns 0x478965
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x478978
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x1c], ecx
jmp 0x478984
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x12c]
mov dword [ebp - 0x1c], edx
jmp 0x47893b
push 0x498548
push 0x498550
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x130], 7
mov dword [ebp - 0x134], 0
jmp 0x4789c2
mov eax, dword [ebp - 0x134]
add eax, 1
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jge 0x4789fb
mov eax, dword [ebp - 0x134]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4789ec
mov edx, dword [ebp - 0x130]
sub edx, 1
mov dword [ebp - 0x130], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x130]
mov dword [ebp - 0x1c], eax
jmp 0x4789b3
mov dword [ebp - 4], 0xfffffffe
jmp 0x478a33
mov dword [ebp - 0x138], 0
jmp 0x478a4e
cmp dword [ebp - 0x138], 3
jge 0x478a85
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x138]
mov dword [ebp - 0x1c], eax
jge 0x478a6d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x478a83
mov dword [ebp - 0x1c], 0
jmp 0x478a3f
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x13c], 0
jmp 0x478aa7
cmp dword [ebp - 0x13c], 2
jge 0x478ae6
mov eax, dword [ebp - 0x13c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x478ad6
mov dword [ebp - 4], 0xfffffffe
call fcn.00478af4
jmp 0x478afc