Function at 0x438d50
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a49b0
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffe68
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov eax, 1
test eax, eax
je 0x438dcf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x438dba
jmp 0x438dcf
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x438d94
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2e
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x28], 0
jmp 0x438df1
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xa
jge 0x438e27
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x438e17
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x438e22
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x438e25
mov dword [ebp - 0x1c], eax
jmp 0x438de8
mov dword [ebp - 4], 0xfffffffe
call fcn.00438e35
jmp 0x438e3d
mov dword [ebp - 0x2c], 0
mov edx, 1
test edx, edx
je 0x438e7f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x438e6a
jmp 0x438e7f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x438e44
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], 0
jmp 0x438e9a
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 5
jge 0x438eac
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
jmp 0x438e91
cmp dword [ebp - 0x1c], 0
jle 0x438ebb
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x438ed1
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x38], 0
jmp 0x438ee6
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 6
jge 0x438ef7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x438edd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x438f09
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x438f21
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x3c], 0
jmp 0x438f33
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x1a
jge 0x438f45
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x438f2a
cmp dword [ebp - 0x1c], 0
jle 0x438f54
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x438f6a
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x40], 0
jmp 0x438f7f
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x20
jge 0x438fb0
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
jge 0x438f98
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x438fae
mov dword [ebp - 0x1c], 0
jmp 0x438f76
mov dword [ebp - 0x44], 0
jmp 0x438fc2
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 6
jge 0x438ff3
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jge 0x438fdb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x438ff1
mov dword [ebp - 0x1c], 0
jmp 0x438fb9
mov dword [ebp - 0x48], 0
jmp 0x439005
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x10
jge 0x439017
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
jmp 0x438ffc
cmp dword [ebp - 0x1c], 0
jle 0x439026
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x43903c
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 1
mov dword [ebp - 0x4c], 7
mov dword [ebp - 0x50], 0
jmp 0x43905f
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0xb
jge 0x439089
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43907d
mov edx, dword [ebp - 0x4c]
sub edx, 1
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
jmp 0x439056
mov dword [ebp - 4], 0xfffffffe
jmp 0x4390c1
mov dword [ebp - 4], 2
mov dword [ebp - 0x54], 0
jmp 0x4390da
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 8
jge 0x439110
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x439100
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x43910b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x43910e
mov dword [ebp - 0x1c], eax
jmp 0x4390d1
mov dword [ebp - 4], 0xfffffffe
call fcn.0043911e
jmp 0x439126
mov dword [ebp - 4], 3
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x5c], 0
jmp 0x439146
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 0
jge 0x439170
mov eax, dword [ebp - 0x5c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439164
mov edx, dword [ebp - 0x58]
sub edx, 1
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
jmp 0x43913d
mov dword [ebp - 4], 0xfffffffe
jmp 0x4391a8
mov dword [ebp - 0x60], 0
jmp 0x4391ba
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 2
jge 0x4391ea
mov eax, dword [ebp - 0x60]
and eax, 0x80000001
jns 0x4391cf
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4391df
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], ecx
jmp 0x4391e8
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], edx
jmp 0x4391b1
push 0x4a11d8
push 0x4a11e0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 4
mov dword [ebp - 0x64], 0
jmp 0x439213
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xa
jge 0x439249
mov eax, dword [ebp - 0x64]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x439239
mov eax, dword [ebp - 0x64]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x439244
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x439247
mov dword [ebp - 0x1c], eax
jmp 0x43920a
mov dword [ebp - 4], 0xfffffffe
call fcn.00439257
jmp 0x43925f
mov dword [ebp - 0x68], 0
jmp 0x439271
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 4
jge 0x439283
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x68]
mov dword [ebp - 0x1c], eax
jmp 0x439268
cmp dword [ebp - 0x1c], 0
jle 0x439292
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4392a8
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x6c], 0
jmp 0x4392bd
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 9
jge 0x4392ed
mov eax, dword [ebp - 0x6c]
and eax, 0x80000001
jns 0x4392d2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4392e2
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], ecx
jmp 0x4392eb
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], edx
jmp 0x4392b4
push 0x4a11e8
push 0x4a11f0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x70], 0
mov eax, 1
test eax, eax
je 0x43933f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43932a
jmp 0x43933f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
jmp 0x439304
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x78], 0
jmp 0x43935a
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 5
jge 0x43938b
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
jge 0x439373
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439389
mov dword [ebp - 0x1c], 0
jmp 0x439351
mov dword [ebp - 0x7c], 0
jmp 0x43939d
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0
jge 0x4393af
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jmp 0x439394
cmp dword [ebp - 0x1c], 0
jle 0x4393be
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4393d4
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x80], 0
jmp 0x4393e9
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 6
jge 0x4393fa
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x1c], eax
jmp 0x4393e0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x43940c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x439424
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x84], 7
mov dword [ebp - 0x88], 0
jmp 0x439450
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 0xb
jge 0x439489
mov eax, dword [ebp - 0x88]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43947a
mov edx, dword [ebp - 0x84]
sub edx, 1
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x84]
mov dword [ebp - 0x1c], eax
jmp 0x439441
mov dword [ebp - 4], 0xfffffffe
jmp 0x4394c1
mov dword [ebp - 0x8c], 0
jmp 0x4394dc
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 1
jge 0x439513
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
jge 0x4394fb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439511
mov dword [ebp - 0x1c], 0
jmp 0x4394cd
mov dword [ebp - 4], 6
mov dword [ebp - 0x90], 7
mov dword [ebp - 0x94], 0
jmp 0x43953f
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 0xa
jge 0x439578
mov eax, dword [ebp - 0x94]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439569
mov edx, dword [ebp - 0x90]
sub edx, 1
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x90]
mov dword [ebp - 0x1c], eax
jmp 0x439530
mov dword [ebp - 4], 0xfffffffe
jmp 0x4395b0
mov dword [ebp - 0x98], 0
mov edx, 1
test edx, edx
je 0x439604
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4395e6
jmp 0x439604
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x98]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x98]
add eax, 1
mov dword [ebp - 0x98], eax
jmp 0x4395ba
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xa0], 0
jmp 0x439628
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 3
jge 0x43965f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], eax
jge 0x439647
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x43965d
mov dword [ebp - 0x1c], 0
jmp 0x439619
mov dword [ebp - 0xa4], 0
jmp 0x43967a
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 5
jge 0x439692
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jmp 0x43966b
cmp dword [ebp - 0x1c], 0
jle 0x4396a1
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4396b7
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xa8], 0
jmp 0x4396d5
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 6
jge 0x4396ec
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], eax
jmp 0x4396c6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4396fe
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x439716
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xac], 0
mov edx, 1
test edx, edx
je 0x43976a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x43974c
jmp 0x43976a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xac]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xac]
add eax, 1
mov dword [ebp - 0xac], eax
jmp 0x439720
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb4], 0
mov edx, 1
test edx, edx
je 0x4397c7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4397a9
jmp 0x4397c7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb4]
add eax, 1
mov dword [ebp - 0xb4], eax
jmp 0x43977d
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xbc], 0
jmp 0x4397eb
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 5
jge 0x439827
mov eax, dword [ebp - 0xbc]
and eax, 0x80000001
jns 0x439806
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x439819
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], ecx
jmp 0x439825
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], edx
jmp 0x4397dc
push 0x4a11f8
push 0x4a1200
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xc0], 0
jmp 0x439852
mov eax, dword [ebp - 0xc0]
add eax, 1
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jge 0x43988f
mov ecx, dword [ebp - 0xc0]
and ecx, 0x80000001
jns 0x43986e
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x439881
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], edx
jmp 0x43988d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], eax
jmp 0x439843
push 0x4a1208
push 0x4a1210
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xc4], 0
jmp 0x4398ba
mov ecx, dword [ebp - 0xc4]
add ecx, 1
mov dword [ebp - 0xc4], ecx
cmp dword [ebp - 0xc4], 2
jge 0x4398d1
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], edx
jmp 0x4398ab
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4398e3
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4398fb
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc8], 0
jmp 0x439916
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 0
jge 0x439952
mov eax, dword [ebp - 0xc8]
and eax, 0x80000001
jns 0x439931
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x439944
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], ecx
jmp 0x439950
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], edx
jmp 0x439907
push 0x4a1218
push 0x4a1220
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xcc], 0
jmp 0x43997d
mov eax, dword [ebp - 0xcc]
add eax, 1
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 5
jge 0x439995
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x1c], ecx
jmp 0x43996e
cmp dword [ebp - 0x1c], 0
jle 0x4399a4
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4399ba
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xd0], 0
jmp 0x4399d8
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 8
jge 0x4399f0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], eax
jmp 0x4399c9
cmp dword [ebp - 0x1c], 0
jle 0x4399ff
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x439a15
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xd4], 0
jmp 0x439a33
mov edx, dword [ebp - 0xd4]
add edx, 1
mov dword [ebp - 0xd4], edx
cmp dword [ebp - 0xd4], 2
jge 0x439a4a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], eax
jmp 0x439a24
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x439a5c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x439a74
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd8], 0
jmp 0x439a8f
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 7
jge 0x439acb
mov eax, dword [ebp - 0xd8]
and eax, 0x80000001
jns 0x439aaa
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x439abd
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], ecx
jmp 0x439ac9
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], edx
jmp 0x439a80
push 0x4a1228
push 0x4a1230
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xdc], 0
jmp 0x439af6
mov eax, dword [ebp - 0xdc]
add eax, 1
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x439b0e
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], ecx
jmp 0x439ae7
cmp dword [ebp - 0x1c], 0
jle 0x439b1d
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x439b33
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xe0], 0
jmp 0x439b51
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 8
jge 0x439b88
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xe0]
mov dword [ebp - 0x1c], eax
jge 0x439b70
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439b86
mov dword [ebp - 0x1c], 0
jmp 0x439b42
mov dword [ebp - 4], 7
mov dword [ebp - 0xe4], 7
mov dword [ebp - 0xe8], 0
jmp 0x439bb4
mov edx, dword [ebp - 0xe8]
add edx, 1
mov dword [ebp - 0xe8], edx
cmp dword [ebp - 0xe8], 3
jge 0x439bed
mov eax, dword [ebp - 0xe8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439bde
mov edx, dword [ebp - 0xe4]
sub edx, 1
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xe4]
mov dword [ebp - 0x1c], eax
jmp 0x439ba5
mov dword [ebp - 4], 0xfffffffe
jmp 0x439c25
mov dword [ebp - 0xec], 0
jmp 0x439c40
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 2
jge 0x439c7c
mov eax, dword [ebp - 0xec]
and eax, 0x80000001
jns 0x439c5b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x439c6e
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xec]
mov dword [ebp - 0x1c], ecx
jmp 0x439c7a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xec]
mov dword [ebp - 0x1c], edx
jmp 0x439c31
push 0x4a1238
push 0x4a1240
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 8
mov dword [ebp - 0xf0], 0
jmp 0x439cae
mov eax, dword [ebp - 0xf0]
add eax, 1
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x439ced
mov eax, dword [ebp - 0xf0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x439cdd
mov eax, dword [ebp - 0xf0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x439ce8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x439ceb
mov dword [ebp - 0x1c], eax
jmp 0x439c9f
mov dword [ebp - 4], 0xfffffffe
call fcn.00439cfb
jmp 0x439d03
mov dword [ebp - 4], 9
mov dword [ebp - 0xf4], 0
jmp 0x439d25
mov edx, dword [ebp - 0xf4]
add edx, 1
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], 3
jge 0x439d64
mov eax, dword [ebp - 0xf4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x439d54
mov eax, dword [ebp - 0xf4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x439d5f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x439d62
mov dword [ebp - 0x1c], eax
jmp 0x439d16
mov dword [ebp - 4], 0xfffffffe
call fcn.00439d72
jmp 0x439d7a
mov dword [ebp - 0xf8], 0
jmp 0x439d95
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 4
jge 0x439dad
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x439d86
cmp dword [ebp - 0x1c], 0
jle 0x439dbc
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x439dd2
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xfc], 0
jmp 0x439df0
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 4
jge 0x439e27
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], eax
jge 0x439e0f
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439e25
mov dword [ebp - 0x1c], 0
jmp 0x439de1
mov dword [ebp - 0x100], 0
mov edx, 1
test edx, edx
je 0x439e7b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x439e5d
jmp 0x439e7b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x100]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x100]
add eax, 1
mov dword [ebp - 0x100], eax
jmp 0x439e31
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x10c], 0
jmp 0x439eb0
cmp dword [ebp - 0x10c], 3
jge 0x439ee9
mov eax, dword [ebp - 0x10c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x439eda
mov edx, dword [ebp - 0x108]
sub edx, 1
mov dword [ebp - 0x108], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x108]
mov dword [ebp - 0x1c], eax
jmp 0x439ea1
mov dword [ebp - 4], 0xfffffffe
jmp 0x439f21
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x110], 7
mov dword [ebp - 0x114], 0
jmp 0x439f4d