Function at 0x473e20
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a6e08
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffed8
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x473e6f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x34
jge 0x473ea0
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x473e85
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x473e95
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
jmp 0x473e9e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x473e66
push 0x498628
push 0x498630
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
jmp 0x473ec9
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 0x1e
jge 0x473eff
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x473eef
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x473efa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x473efd
mov dword [ebp - 0x1c], eax
jmp 0x473ec0
mov dword [ebp - 4], 0xfffffffe
call fcn.00473f0d
jmp 0x473f15
mov dword [ebp - 0x28], 0
jmp 0x473f27
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xf
jge 0x473f58
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jge 0x473f40
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x473f56
mov dword [ebp - 0x1c], 0
jmp 0x473f1e
mov dword [ebp - 0x2c], 0
mov edx, 1
test edx, edx
je 0x473f9a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x473f85
jmp 0x473f9a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x473f5f
mov ecx, dword [ebp - 0x1c]
add ecx, 0x18
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x34], 0
jmp 0x473fbc
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x1b
jge 0x473ff2
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x473fe2
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x473fed
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x473ff0
mov dword [ebp - 0x1c], eax
jmp 0x473fb3
mov dword [ebp - 4], 0xfffffffe
call fcn.00474000
jmp 0x474008
mov dword [ebp - 0x38], 0
mov edx, 1
test edx, edx
je 0x47404a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x474035
jmp 0x47404a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x47400f
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1a
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
jmp 0x474073
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 9
jge 0x47409d
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474091
mov edx, dword [ebp - 0x40]
sub edx, 1
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
jmp 0x47406a
mov dword [ebp - 4], 0xfffffffe
jmp 0x4740d5
mov dword [ebp - 0x48], 0
jmp 0x4740e7
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0xf
jge 0x474117
mov eax, dword [ebp - 0x48]
and eax, 0x80000001
jns 0x4740fc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47410c
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], ecx
jmp 0x474115
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], edx
jmp 0x4740de
push 0x498638
push 0x498640
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 3
mov dword [ebp - 0x4c], 0
jmp 0x474140
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x474176
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x474166
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x474171
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x474174
mov dword [ebp - 0x1c], eax
jmp 0x474137
mov dword [ebp - 4], 0xfffffffe
call fcn.00474184
jmp 0x47418c
mov dword [ebp - 0x50], 0
jmp 0x47419e
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 2
jge 0x4741ce
mov eax, dword [ebp - 0x50]
and eax, 0x80000001
jns 0x4741b3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4741c3
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], ecx
jmp 0x4741cc
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], edx
jmp 0x474195
push 0x498648
push 0x498650
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x54], 0
jmp 0x4741f0
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xd
jge 0x474201
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x54]
mov dword [ebp - 0x1c], ecx
jmp 0x4741e7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474213
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47422b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x58], 0
jmp 0x47423d
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 5
jge 0x47426d
mov eax, dword [ebp - 0x58]
and eax, 0x80000001
jns 0x474252
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x474262
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x58]
mov dword [ebp - 0x1c], ecx
jmp 0x47426b
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x58]
mov dword [ebp - 0x1c], edx
jmp 0x474234
push 0x498658
push 0x498660
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x5c], 0
jmp 0x47428f
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xb
jge 0x4742a1
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], ecx
jmp 0x474286
cmp dword [ebp - 0x1c], 0
jle 0x4742b0
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4742c6
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 4
mov dword [ebp - 0x60], 0
jmp 0x4742e2
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0
jge 0x474318
mov eax, dword [ebp - 0x60]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x474308
mov eax, dword [ebp - 0x60]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x474313
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x474316
mov dword [ebp - 0x1c], eax
jmp 0x4742d9
mov dword [ebp - 4], 0xfffffffe
call fcn.00474326
jmp 0x47432e
mov dword [ebp - 0x64], 0
mov edx, 1
test edx, edx
je 0x474370
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47435b
jmp 0x474370
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x64]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
jmp 0x474335
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6c], 0
jmp 0x47438b
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 8
jge 0x4743bc
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], eax
jge 0x4743a4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4743ba
mov dword [ebp - 0x1c], 0
jmp 0x474382
mov dword [ebp - 0x70], 0
jmp 0x4743ce
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 2
jge 0x4743e0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c], eax
jmp 0x4743c5
cmp dword [ebp - 0x1c], 0
jle 0x4743ef
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x474405
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x74], 0
mov edx, 1
test edx, edx
je 0x47444a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x474435
jmp 0x47444a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x74]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
jmp 0x47440f
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x7c], 0
mov edx, 1
test edx, edx
je 0x474495
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x474480
jmp 0x474495
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x7c]
add eax, 1
mov dword [ebp - 0x7c], eax
jmp 0x47445a
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x84], 0
jmp 0x4744b9
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0
jge 0x4744f0
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x84]
mov dword [ebp - 0x1c], eax
jge 0x4744d8
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4744ee
mov dword [ebp - 0x1c], 0
jmp 0x4744aa
mov dword [ebp - 0x88], 0
jmp 0x47450b
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 6
jge 0x474542
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jge 0x47452a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474540
mov dword [ebp - 0x1c], 0
jmp 0x4744fc
mov dword [ebp - 0x8c], 0
jmp 0x47455d
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 1
jge 0x474594
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
jge 0x47457c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474592
mov dword [ebp - 0x1c], 0
jmp 0x47454e
mov dword [ebp - 4], 5
mov dword [ebp - 0x90], 0
jmp 0x4745b6
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 2
jge 0x4745f5
mov eax, dword [ebp - 0x90]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4745e5
mov eax, dword [ebp - 0x90]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4745f0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4745f3
mov dword [ebp - 0x1c], eax
jmp 0x4745a7
mov dword [ebp - 4], 0xfffffffe
call fcn.00474603
jmp 0x47460b
mov dword [ebp - 0x94], 0
jmp 0x474626
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 8
jge 0x47465d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x94]
mov dword [ebp - 0x1c], eax
jge 0x474645
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47465b
mov dword [ebp - 0x1c], 0
jmp 0x474617
mov dword [ebp - 0x98], 0
jmp 0x474678
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 3
jge 0x4746b4
mov eax, dword [ebp - 0x98]
and eax, 0x80000001
jns 0x474693
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4746a6
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x98]
mov dword [ebp - 0x1c], ecx
jmp 0x4746b2
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x98]
mov dword [ebp - 0x1c], edx
jmp 0x474669
push 0x498668
push 0x498670
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x9c], 0
mov eax, 1
test eax, eax
je 0x474718
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4746fa
jmp 0x474718
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x9c]
add eax, 1
mov dword [ebp - 0x9c], eax
jmp 0x4746ce
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xa4], 0
jmp 0x47473c
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 1
jge 0x474754
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jmp 0x47472d
cmp dword [ebp - 0x1c], 0
jle 0x474763
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x474779
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 6
mov dword [ebp - 0xa8], 0
jmp 0x47479e
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 3
jge 0x4747dd
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4747cd
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4747d8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4747db
mov dword [ebp - 0x1c], eax
jmp 0x47478f
mov dword [ebp - 4], 0xfffffffe
call fcn.004747eb
jmp 0x4747f3
mov dword [ebp - 0xac], 0
mov edx, 1
test edx, edx
je 0x474847
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x474829
jmp 0x474847
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xac]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xac]
add eax, 1
mov dword [ebp - 0xac], eax
jmp 0x4747fd
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb4], 0
jmp 0x47486b
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 1
jge 0x4748a7
mov eax, dword [ebp - 0xb4]
and eax, 0x80000001
jns 0x474886
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x474899
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], ecx
jmp 0x4748a5
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], edx
jmp 0x47485c
push 0x498678
push 0x498680
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xb8], 0
jmp 0x4748d2
mov eax, dword [ebp - 0xb8]
add eax, 1
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 4
jge 0x4748e9
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], ecx
jmp 0x4748c3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4748fb
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474913
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xbc], 0
jmp 0x47492e
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 4
jge 0x474965
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], eax
jge 0x47494d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474963
mov dword [ebp - 0x1c], 0
jmp 0x47491f
mov dword [ebp - 0xc0], 0
jmp 0x474980
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 2
jge 0x474998
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], eax
jmp 0x474971
cmp dword [ebp - 0x1c], 0
jle 0x4749a7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4749bd
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xc4], 0
mov edx, 1
test edx, edx
je 0x474a14
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4749f6
jmp 0x474a14
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc4]
add eax, 1
mov dword [ebp - 0xc4], eax
jmp 0x4749ca
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xcc], 0
jmp 0x474a38
mov edx, dword [ebp - 0xcc]
add edx, 1
mov dword [ebp - 0xcc], edx
cmp dword [ebp - 0xcc], 3
jge 0x474a50
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xcc]
mov dword [ebp - 0x1c], eax
jmp 0x474a29
cmp dword [ebp - 0x1c], 0
jle 0x474a5f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x474a75
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xd0], 0
jmp 0x474a93
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 3
jge 0x474aaa
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], eax
jmp 0x474a84
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474abc
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474ad4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd4], 0
jmp 0x474aef
mov edx, dword [ebp - 0xd4]
add edx, 1
mov dword [ebp - 0xd4], edx
cmp dword [ebp - 0xd4], 2
jge 0x474b06
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], eax
jmp 0x474ae0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474b18
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474b30
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd8], 0
jmp 0x474b4b
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 0
jge 0x474b63
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], eax
jmp 0x474b3c
cmp dword [ebp - 0x1c], 0
jle 0x474b72
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x474b88
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xdc], 0
jmp 0x474ba6
mov edx, dword [ebp - 0xdc]
add edx, 1
mov dword [ebp - 0xdc], edx
cmp dword [ebp - 0xdc], 4
jge 0x474bbe
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], eax
jmp 0x474b97
cmp dword [ebp - 0x1c], 0
jle 0x474bcd
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x474be3
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xe0], 0
jmp 0x474c01
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 4
jge 0x474c38
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xe0]
mov dword [ebp - 0x1c], eax
jge 0x474c20
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474c36
mov dword [ebp - 0x1c], 0
jmp 0x474bf2
mov dword [ebp - 0xe4], 0
jmp 0x474c53
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 1
jge 0x474c8a
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], eax
jge 0x474c72
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474c88
mov dword [ebp - 0x1c], 0
jmp 0x474c44
mov dword [ebp - 0xe8], 0
jmp 0x474ca5
mov edx, dword [ebp - 0xe8]
add edx, 1
mov dword [ebp - 0xe8], edx
cmp dword [ebp - 0xe8], 4
jge 0x474ce1
mov eax, dword [ebp - 0xe8]
and eax, 0x80000001
jns 0x474cc0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x474cd3
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], ecx
jmp 0x474cdf
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], edx
jmp 0x474c96
push 0x498688
push 0x498690
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 7
mov dword [ebp - 0xec], 0
jmp 0x474d13
mov eax, dword [ebp - 0xec]
add eax, 1
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jge 0x474d52
mov eax, dword [ebp - 0xec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x474d42
mov eax, dword [ebp - 0xec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x474d4d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x474d50
mov dword [ebp - 0x1c], eax
jmp 0x474d04
mov dword [ebp - 4], 0xfffffffe
call fcn.00474d60
jmp 0x474d68
mov dword [ebp - 4], 8
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
jmp 0x474d94
mov edx, dword [ebp - 0xf4]
add edx, 1
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], 1
jge 0x474dcd
mov eax, dword [ebp - 0xf4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474dbe
mov edx, dword [ebp - 0xf0]
sub edx, 1
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xf0]
mov dword [ebp - 0x1c], eax
jmp 0x474d85
mov dword [ebp - 4], 0xfffffffe
jmp 0x474e05
mov dword [ebp - 0xf8], 0
jmp 0x474e20
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 2
jge 0x474e37
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x474e11
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x474e49
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x474e61
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xfc], 0
jmp 0x474e7c
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 2
jge 0x474eb8
mov eax, dword [ebp - 0xfc]
and eax, 0x80000001
jns 0x474e97
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x474eaa
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], ecx
jmp 0x474eb6
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], edx
jmp 0x474e6d
push 0x498698
push 0x4986a0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x100], 0
jmp 0x474ee3
mov eax, dword [ebp - 0x100]
add eax, 1
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x474efb
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x100]
mov dword [ebp - 0x1c], ecx
jmp 0x474ed4
cmp dword [ebp - 0x1c], 0
jle 0x474f0a
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x474f20
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x104], 0
jmp 0x474f3e
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
cmp dword [ebp - 0x104], 0
jge 0x474f75
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
jge 0x474f5d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x474f73
mov dword [ebp - 0x1c], 0
jmp 0x474f2f
mov dword [ebp - 0x108], 0
jmp 0x474f90
mov edx, dword [ebp - 0x108]
add edx, 1
mov dword [ebp - 0x108], edx
cmp dword [ebp - 0x108], 3
jge 0x474fa8
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x108]
mov dword [ebp - 0x1c], eax
jmp 0x474f81
cmp dword [ebp - 0x1c], 0
jle 0x474fb7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x474fcd
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x10c], 0
mov edx, 1
test edx, edx
je 0x475024
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x475006
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x114], 0
jmp 0x47504f