Function at 0x46a030
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a6830
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffe74
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x46a07f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x14
jge 0x46a091
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x46a076
cmp dword [ebp - 0x1c], 0
jle 0x46a0a0
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46a0b6
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x24], 0
jmp 0x46a0cb
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1f
jge 0x46a0fc
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jge 0x46a0e4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a0fa
mov dword [ebp - 0x1c], 0
jmp 0x46a0c2
mov dword [ebp - 0x28], 0
jmp 0x46a10e
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x11
jge 0x46a13e
mov eax, dword [ebp - 0x28]
and eax, 0x80000001
jns 0x46a123
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a133
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jmp 0x46a13c
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
jmp 0x46a105
push 0x4989e8
push 0x4989f0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x2c], 0
jmp 0x46a160
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xc
jge 0x46a171
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
jmp 0x46a157
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46a183
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46a19b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 0
jmp 0x46a1ad
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x1a
jge 0x46a1be
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x46a1a4
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46a1d0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46a1e8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], 0
jmp 0x46a1fa
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0xc
jge 0x46a20c
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
jmp 0x46a1f1
cmp dword [ebp - 0x1c], 0
jle 0x46a21b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46a231
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x3c], 0
jmp 0x46a254
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x15
jge 0x46a27e
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a272
mov edx, dword [ebp - 0x38]
sub edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x46a24b
mov dword [ebp - 4], 0xfffffffe
jmp 0x46a2b6
mov dword [ebp - 0x40], 0
mov edx, 1
test edx, edx
je 0x46a2f8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a2e3
jmp 0x46a2f8
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
jmp 0x46a2bd
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x4c], 0
jmp 0x46a321
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0x10
jge 0x46a34b
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a33f
mov edx, dword [ebp - 0x48]
sub edx, 1
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
jmp 0x46a318
mov dword [ebp - 4], 0xfffffffe
jmp 0x46a383
mov dword [ebp - 0x50], 0
mov edx, 1
test edx, edx
je 0x46a3c5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a3b0
jmp 0x46a3c5
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
jmp 0x46a38a
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x58], 0
jmp 0x46a3e0
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 6
jge 0x46a410
mov eax, dword [ebp - 0x58]
and eax, 0x80000001
jns 0x46a3f5
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a405
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x58]
mov dword [ebp - 0x1c], ecx
jmp 0x46a40e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x58]
mov dword [ebp - 0x1c], edx
jmp 0x46a3d7
push 0x4989f8
push 0x498a00
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x5c], 0
mov eax, 1
test eax, eax
je 0x46a462
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46a44d
jmp 0x46a462
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
jmp 0x46a427
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x64], 0
jmp 0x46a484
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 2
jge 0x46a4ba
mov eax, dword [ebp - 0x64]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a4aa
mov eax, dword [ebp - 0x64]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a4b5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46a4b8
mov dword [ebp - 0x1c], eax
jmp 0x46a47b
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a4c8
jmp 0x46a4d0
mov dword [ebp - 4], 3
mov dword [ebp - 0x68], 0
jmp 0x46a4e9
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 4
jge 0x46a51f
mov eax, dword [ebp - 0x68]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a50f
mov eax, dword [ebp - 0x68]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a51a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46a51d
mov dword [ebp - 0x1c], eax
jmp 0x46a4e0
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a52d
jmp 0x46a535
mov dword [ebp - 4], 4
mov dword [ebp - 0x6c], 0
jmp 0x46a54e
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 4
jge 0x46a584
mov eax, dword [ebp - 0x6c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46a574
mov eax, dword [ebp - 0x6c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46a57f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46a582
mov dword [ebp - 0x1c], eax
jmp 0x46a545
mov dword [ebp - 4], 0xfffffffe
call fcn.0046a592
jmp 0x46a59a
mov dword [ebp - 0x70], 0
jmp 0x46a5ac
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 3
jge 0x46a5be
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c], eax
jmp 0x46a5a3
cmp dword [ebp - 0x1c], 0
jle 0x46a5cd
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46a5e3
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x74], 0
jmp 0x46a5f8
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 0
jge 0x46a629
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x74]
mov dword [ebp - 0x1c], eax
jge 0x46a611
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a627
mov dword [ebp - 0x1c], 0
jmp 0x46a5ef
mov dword [ebp - 4], 5
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], 0
jmp 0x46a649
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 2
jge 0x46a673
mov eax, dword [ebp - 0x7c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a667
mov edx, dword [ebp - 0x78]
sub edx, 1
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
jmp 0x46a640
mov dword [ebp - 4], 0xfffffffe
jmp 0x46a6ab
mov dword [ebp - 0x80], 0
jmp 0x46a6bd
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 1
jge 0x46a6ed
mov eax, dword [ebp - 0x80]
and eax, 0x80000001
jns 0x46a6d2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46a6e2
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x80]
mov dword [ebp - 0x1c], ecx
jmp 0x46a6eb
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x80]
mov dword [ebp - 0x1c], edx
jmp 0x46a6b4
push 0x498a08
push 0x498a10
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x84], 0
jmp 0x46a718
mov eax, dword [ebp - 0x84]
add eax, 1
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x46a74f
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x84]
mov dword [ebp - 0x1c], ecx
jge 0x46a737
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a74d
mov dword [ebp - 0x1c], 0
jmp 0x46a709
mov dword [ebp - 4], 6
mov dword [ebp - 0x88], 7
mov dword [ebp - 0x8c], 0
jmp 0x46a77b
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 0
jge 0x46a7b4
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a7a5
mov edx, dword [ebp - 0x88]
sub edx, 1
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jmp 0x46a76c
mov dword [ebp - 4], 0xfffffffe
jmp 0x46a7ec
mov dword [ebp - 0x90], 0
jmp 0x46a807
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 3
jge 0x46a81f
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x90]
mov dword [ebp - 0x1c], eax
jmp 0x46a7f8
cmp dword [ebp - 0x1c], 0
jle 0x46a82e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46a844
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 7
mov dword [ebp - 0x94], 7
mov dword [ebp - 0x98], 0
jmp 0x46a873
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 4
jge 0x46a8ac
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a89d
mov edx, dword [ebp - 0x94]
sub edx, 1
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x94]
mov dword [ebp - 0x1c], eax
jmp 0x46a864
mov dword [ebp - 4], 0xfffffffe
jmp 0x46a8e4
mov dword [ebp - 4], 8
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
jmp 0x46a910
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 4
jge 0x46a949
mov eax, dword [ebp - 0xa0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46a93a
mov edx, dword [ebp - 0x9c]
sub edx, 1
mov dword [ebp - 0x9c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
jmp 0x46a901
mov dword [ebp - 4], 0xfffffffe
jmp 0x46a981
mov dword [ebp - 0xa4], 0
jmp 0x46a99c
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 2
jge 0x46a9b3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jmp 0x46a98d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46a9c5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46a9dd
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa8], 0
jmp 0x46a9f8
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 4
jge 0x46aa34
mov eax, dword [ebp - 0xa8]
and eax, 0x80000001
jns 0x46aa13
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46aa26
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], ecx
jmp 0x46aa32
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], edx
jmp 0x46a9e9
push 0x498a18
push 0x498a20
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xac], 0
jmp 0x46aa5f
mov eax, dword [ebp - 0xac]
add eax, 1
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x46aa96
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xac]
mov dword [ebp - 0x1c], ecx
jge 0x46aa7e
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46aa94
mov dword [ebp - 0x1c], 0
jmp 0x46aa50
mov dword [ebp - 4], 9
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
jmp 0x46aac2
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 4
jge 0x46aafb
mov eax, dword [ebp - 0xb4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46aaec
mov edx, dword [ebp - 0xb0]
sub edx, 1
mov dword [ebp - 0xb0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xb0]
mov dword [ebp - 0x1c], eax
jmp 0x46aab3
mov dword [ebp - 4], 0xfffffffe
jmp 0x46ab33
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xb8], 0
jmp 0x46ab55
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 0
jge 0x46ab94
mov eax, dword [ebp - 0xb8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46ab84
mov eax, dword [ebp - 0xb8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46ab8f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46ab92
mov dword [ebp - 0x1c], eax
jmp 0x46ab46
mov dword [ebp - 4], 0xfffffffe
call fcn.0046aba2
jmp 0x46abaa
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xbc], 0
jmp 0x46abcc
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 0
jge 0x46ac0b
mov eax, dword [ebp - 0xbc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46abfb
mov eax, dword [ebp - 0xbc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46ac06
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46ac09
mov dword [ebp - 0x1c], eax
jmp 0x46abbd
mov dword [ebp - 4], 0xfffffffe
call fcn.0046ac19
jmp 0x46ac21
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xc0], 7
mov dword [ebp - 0xc4], 0
jmp 0x46ac4d
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 2
jge 0x46ac86
mov eax, dword [ebp - 0xc4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ac77
mov edx, dword [ebp - 0xc0]
sub edx, 1
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xc0]
mov dword [ebp - 0x1c], eax
jmp 0x46ac3e
mov dword [ebp - 4], 0xfffffffe
jmp 0x46acbe
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xc8], 7
mov dword [ebp - 0xcc], 0
jmp 0x46acea
mov edx, dword [ebp - 0xcc]
add edx, 1
mov dword [ebp - 0xcc], edx
cmp dword [ebp - 0xcc], 0
jge 0x46ad23
mov eax, dword [ebp - 0xcc]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ad14
mov edx, dword [ebp - 0xc8]
sub edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xc8]
mov dword [ebp - 0x1c], eax
jmp 0x46acdb
mov dword [ebp - 4], 0xfffffffe
jmp 0x46ad5b
mov dword [ebp - 0xd0], 0
jmp 0x46ad76
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 1
jge 0x46adad
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], eax
jge 0x46ad95
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46adab
mov dword [ebp - 0x1c], 0
jmp 0x46ad67
mov dword [ebp - 0xd4], 0
jmp 0x46adc8
mov edx, dword [ebp - 0xd4]
add edx, 1
mov dword [ebp - 0xd4], edx
cmp dword [ebp - 0xd4], 0
jge 0x46ade0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], eax
jmp 0x46adb9
cmp dword [ebp - 0x1c], 0
jle 0x46adef
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46ae05
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xd8], 0
jmp 0x46ae23
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 3
jge 0x46ae5a
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], eax
jge 0x46ae42
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ae58
mov dword [ebp - 0x1c], 0
jmp 0x46ae14
mov dword [ebp - 0xdc], 0
jmp 0x46ae75
mov edx, dword [ebp - 0xdc]
add edx, 1
mov dword [ebp - 0xdc], edx
cmp dword [ebp - 0xdc], 0
jge 0x46aeb1
mov eax, dword [ebp - 0xdc]
and eax, 0x80000001
jns 0x46ae90
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46aea3
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], ecx
jmp 0x46aeaf
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], edx
jmp 0x46ae66
push 0x498a28
push 0x498a30
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xe0], 0
jmp 0x46aedc
mov eax, dword [ebp - 0xe0]
add eax, 1
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 4
jge 0x46af19
mov ecx, dword [ebp - 0xe0]
and ecx, 0x80000001
jns 0x46aef8
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46af0b
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xe0]
mov dword [ebp - 0x1c], edx
jmp 0x46af17
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xe0]
mov dword [ebp - 0x1c], eax
jmp 0x46aecd
push 0x498a38
push 0x498a40
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xe4], 0
jmp 0x46af44
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
cmp dword [ebp - 0xe4], 2
jge 0x46af5c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], edx
jmp 0x46af35
cmp dword [ebp - 0x1c], 0
jle 0x46af6b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 5
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46af81
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xe8], 0
jmp 0x46afa6
mov edx, dword [ebp - 0xe8]
add edx, 1
mov dword [ebp - 0xe8], edx
cmp dword [ebp - 0xe8], 3
jge 0x46afe5
mov eax, dword [ebp - 0xe8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46afd5
mov eax, dword [ebp - 0xe8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46afe0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46afe3
mov dword [ebp - 0x1c], eax
jmp 0x46af97
mov dword [ebp - 4], 0xfffffffe
call fcn.0046aff3
jmp 0x46affb
mov dword [ebp - 0xec], 0
jmp 0x46b016
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 2
jge 0x46b02e
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xec]
mov dword [ebp - 0x1c], eax
jmp 0x46b007
cmp dword [ebp - 0x1c], 0
jle 0x46b03d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46b053
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xf0], 0
jmp 0x46b071
mov edx, dword [ebp - 0xf0]
add edx, 1
mov dword [ebp - 0xf0], edx
cmp dword [ebp - 0xf0], 2
jge 0x46b0ad
mov eax, dword [ebp - 0xf0]
and eax, 0x80000001
jns 0x46b08c
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46b09f
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], ecx
jmp 0x46b0ab
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], edx
jmp 0x46b062
push 0x498a48
push 0x498a50
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xf4], 0
jmp 0x46b0d8
mov eax, dword [ebp - 0xf4]
add eax, 1
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x46b0ef
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x1c], ecx
jmp 0x46b0c9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46b101
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46b119
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf8], 0
jmp 0x46b134
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 0
jge 0x46b14b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x46b125
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46b15d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46b175
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xfc], 0
jmp 0x46b190
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 4
jge 0x46b1cc
mov eax, dword [ebp - 0xfc]
and eax, 0x80000001
jns 0x46b1ab
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46b1be
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], ecx
jmp 0x46b1ca
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], edx
jmp 0x46b181
push 0x498a58
push 0x498a60
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x100], 0
jmp 0x46b1f7
cmp dword [ebp - 0x100], 4
jge 0x46b22e
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x100]
mov dword [ebp - 0x1c], ecx
jge 0x46b216
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46b22c
mov dword [ebp - 0x1c], 0
jmp 0x46b1e8
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x104], 0
jmp 0x46b250
cmp dword [ebp - 0x104], 0
jge 0x46b28f
mov eax, dword [ebp - 0x104]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46b27f
mov dword [ebp - 4], 0xfffffffe
call fcn.0046b29d
jmp 0x46b2a5