Function at 0x46beb0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a6960
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffed8
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x46beff
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 9
jge 0x46bf30
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jge 0x46bf18
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46bf2e
mov dword [ebp - 0x1c], 0
jmp 0x46bef6
mov dword [ebp - 0x24], 0
jmp 0x46bf42
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1f
jge 0x46bf54
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jmp 0x46bf39
cmp dword [ebp - 0x1c], 0
jle 0x46bf63
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46bf79
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x28], 0
mov edx, 1
test edx, edx
je 0x46bfbe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46bfa9
jmp 0x46bfbe
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
jmp 0x46bf83
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x30], 0
mov edx, 1
test edx, edx
je 0x46c009
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46bff4
jmp 0x46c009
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
jmp 0x46bfce
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], 0
jmp 0x46c02b
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x16
jge 0x46c061
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c051
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c05c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46c05f
mov dword [ebp - 0x1c], eax
jmp 0x46c022
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c06f
jmp 0x46c077
mov dword [ebp - 0x3c], 0
jmp 0x46c089
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 9
jge 0x46c0b9
mov eax, dword [ebp - 0x3c]
and eax, 0x80000001
jns 0x46c09e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c0ae
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], ecx
jmp 0x46c0b7
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
jmp 0x46c080
push 0x498958
push 0x498960
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x40], 0
jmp 0x46c0db
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xa
jge 0x46c10c
mov ecx, dword [ebp - 0x40]
and ecx, 0x80000001
jns 0x46c0f1
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46c101
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
jmp 0x46c10a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
jmp 0x46c0d2
push 0x498968
push 0x498970
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x44], 0
jmp 0x46c12e
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0
jge 0x46c140
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edx
jmp 0x46c125
cmp dword [ebp - 0x1c], 0
jle 0x46c14f
mov eax, dword [ebp - 0x1c]
imul eax, eax, 5
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46c165
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x48], 0
jmp 0x46c17a
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0xc
jge 0x46c18c
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
jmp 0x46c171
cmp dword [ebp - 0x1c], 0
jle 0x46c19b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46c1b1
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 1
mov dword [ebp - 0x4c], 7
mov dword [ebp - 0x50], 0
jmp 0x46c1d4
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 4
jge 0x46c1fe
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c1f2
mov edx, dword [ebp - 0x4c]
sub edx, 1
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
jmp 0x46c1cb
mov dword [ebp - 4], 0xfffffffe
jmp 0x46c236
mov dword [ebp - 4], 2
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x58], 0
jmp 0x46c256
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 9
jge 0x46c280
mov eax, dword [ebp - 0x58]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c274
mov edx, dword [ebp - 0x54]
sub edx, 1
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x54]
mov dword [ebp - 0x1c], eax
jmp 0x46c24d
mov dword [ebp - 4], 0xfffffffe
jmp 0x46c2b8
mov dword [ebp - 0x5c], 0
mov edx, 1
test edx, edx
je 0x46c2fa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46c2e5
jmp 0x46c2fa
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
jmp 0x46c2bf
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x64], 0
jmp 0x46c315
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 7
jge 0x46c327
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x64]
mov dword [ebp - 0x1c], eax
jmp 0x46c30c
cmp dword [ebp - 0x1c], 0
jle 0x46c336
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46c34c
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x68], 0
jmp 0x46c361
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 4
jge 0x46c392
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x68]
mov dword [ebp - 0x1c], eax
jge 0x46c37a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c390
mov dword [ebp - 0x1c], 0
jmp 0x46c358
mov dword [ebp - 0x6c], 0
jmp 0x46c3a4
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 0xf
jge 0x46c3d5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], eax
jge 0x46c3bd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c3d3
mov dword [ebp - 0x1c], 0
jmp 0x46c39b
mov dword [ebp - 4], 3
mov dword [ebp - 0x70], 7
mov dword [ebp - 0x74], 0
jmp 0x46c3f5
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 6
jge 0x46c41f
mov eax, dword [ebp - 0x74]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c413
mov edx, dword [ebp - 0x70]
sub edx, 1
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x70]
mov dword [ebp - 0x1c], eax
jmp 0x46c3ec
mov dword [ebp - 4], 0xfffffffe
jmp 0x46c457
mov dword [ebp - 0x78], 0
jmp 0x46c469
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 8
jge 0x46c47a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
jmp 0x46c460
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46c48c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46c4a4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x7c], 0
jmp 0x46c4b6
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0xa
jge 0x46c4e7
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jge 0x46c4cf
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c4e5
mov dword [ebp - 0x1c], 0
jmp 0x46c4ad
mov dword [ebp - 0x80], 0
jmp 0x46c4f9
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 0xd
jge 0x46c529
mov eax, dword [ebp - 0x80]
and eax, 0x80000001
jns 0x46c50e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c51e
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x80]
mov dword [ebp - 0x1c], ecx
jmp 0x46c527
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x80]
mov dword [ebp - 0x1c], edx
jmp 0x46c4f0
push 0x498978
push 0x498980
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 4
mov dword [ebp - 0x84], 0
jmp 0x46c55b
mov eax, dword [ebp - 0x84]
add eax, 1
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 6
jge 0x46c59a
mov eax, dword [ebp - 0x84]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c58a
mov eax, dword [ebp - 0x84]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c595
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46c598
mov dword [ebp - 0x1c], eax
jmp 0x46c54c
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c5a8
jmp 0x46c5b0
mov dword [ebp - 0x88], 0
jmp 0x46c5cb
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 8
jge 0x46c607
mov eax, dword [ebp - 0x88]
and eax, 0x80000001
jns 0x46c5e6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c5f9
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x88]
mov dword [ebp - 0x1c], ecx
jmp 0x46c605
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x88]
mov dword [ebp - 0x1c], edx
jmp 0x46c5bc
push 0x498988
push 0x498990
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x8c], 0
jmp 0x46c632
mov eax, dword [ebp - 0x8c]
add eax, 1
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 5
jge 0x46c649
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], ecx
jmp 0x46c623
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46c65b
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46c673
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x90], 0
jmp 0x46c68e
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 2
jge 0x46c6c5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x90]
mov dword [ebp - 0x1c], eax
jge 0x46c6ad
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c6c3
mov dword [ebp - 0x1c], 0
jmp 0x46c67f
mov dword [ebp - 0x94], 0
jmp 0x46c6e0
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 3
jge 0x46c71c
mov eax, dword [ebp - 0x94]
and eax, 0x80000001
jns 0x46c6fb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c70e
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], ecx
jmp 0x46c71a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], edx
jmp 0x46c6d1
push 0x498998
push 0x4989a0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x98], 0
jmp 0x46c747
mov eax, dword [ebp - 0x98]
add eax, 1
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 5
jge 0x46c75e
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x98]
mov dword [ebp - 0x1c], ecx
jmp 0x46c738
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46c770
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46c788
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x9c], 0
jmp 0x46c7a3
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
cmp dword [ebp - 0x9c], 4
jge 0x46c7bb
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
jmp 0x46c794
cmp dword [ebp - 0x1c], 0
jle 0x46c7ca
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46c7e0
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 5
mov dword [ebp - 0xa0], 0
jmp 0x46c805
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 5
jge 0x46c844
mov eax, dword [ebp - 0xa0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46c834
mov eax, dword [ebp - 0xa0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46c83f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46c842
mov dword [ebp - 0x1c], eax
jmp 0x46c7f6
mov dword [ebp - 4], 0xfffffffe
call fcn.0046c852
jmp 0x46c85a
mov dword [ebp - 0xa4], 0
jmp 0x46c875
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 3
jge 0x46c8b1
mov eax, dword [ebp - 0xa4]
and eax, 0x80000001
jns 0x46c890
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46c8a3
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], ecx
jmp 0x46c8af
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], edx
jmp 0x46c866
push 0x4989a8
push 0x4989b0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xa8], 0
jmp 0x46c8dc
mov eax, dword [ebp - 0xa8]
add eax, 1
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x46c8f3
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], ecx
jmp 0x46c8cd
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46c905
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46c91d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xac], 0
jmp 0x46c938
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 8
jge 0x46c96f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xac]
mov dword [ebp - 0x1c], eax
jge 0x46c957
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c96d
mov dword [ebp - 0x1c], 0
jmp 0x46c929
mov dword [ebp - 4], 6
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
jmp 0x46c99b
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 1
jge 0x46c9d4
mov eax, dword [ebp - 0xb4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46c9c5
mov edx, dword [ebp - 0xb0]
sub edx, 1
mov dword [ebp - 0xb0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xb0]
mov dword [ebp - 0x1c], eax
jmp 0x46c98c
mov dword [ebp - 4], 0xfffffffe
jmp 0x46ca0c
mov dword [ebp - 0xb8], 0
jmp 0x46ca27
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 4
jge 0x46ca63
mov eax, dword [ebp - 0xb8]
and eax, 0x80000001
jns 0x46ca42
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46ca55
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], ecx
jmp 0x46ca61
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], edx
jmp 0x46ca18
push 0x4989b8
push 0x4989c0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xbc], 0
jmp 0x46ca8e
mov eax, dword [ebp - 0xbc]
add eax, 1
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x46cacb
mov ecx, dword [ebp - 0xbc]
and ecx, 0x80000001
jns 0x46caaa
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x46cabd
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], edx
jmp 0x46cac9
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], eax
jmp 0x46ca7f
push 0x4989c8
push 0x4989d0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xc0], 0
jmp 0x46caf6
mov ecx, dword [ebp - 0xc0]
add ecx, 1
mov dword [ebp - 0xc0], ecx
cmp dword [ebp - 0xc0], 5
jge 0x46cb0d
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], edx
jmp 0x46cae7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46cb1f
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46cb37
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc4], 0
jmp 0x46cb52
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 4
jge 0x46cb89
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
jge 0x46cb71
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46cb87
mov dword [ebp - 0x1c], 0
jmp 0x46cb43
mov dword [ebp - 0xc8], 0
jmp 0x46cba4
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 3
jge 0x46cbbc
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], eax
jmp 0x46cb95
cmp dword [ebp - 0x1c], 0
jle 0x46cbcb
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46cbe1
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xcc], 0
jmp 0x46cbff
mov edx, dword [ebp - 0xcc]
add edx, 1
mov dword [ebp - 0xcc], edx
cmp dword [ebp - 0xcc], 1
jge 0x46cc16
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xcc]
mov dword [ebp - 0x1c], eax
jmp 0x46cbf0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46cc28
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46cc40
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xd0], 0
mov edx, 1
test edx, edx
je 0x46cc94
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46cc76
jmp 0x46cc94
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd0]
add eax, 1
mov dword [ebp - 0xd0], eax
jmp 0x46cc4a
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd8], 0
jmp 0x46ccb8
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 3
jge 0x46cccf
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], eax
jmp 0x46cca9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46cce1
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46ccf9
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xdc], 0
mov edx, 1
test edx, edx
je 0x46cd4d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46cd2f
jmp 0x46cd4d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xdc]
add eax, 1
mov dword [ebp - 0xdc], eax
jmp 0x46cd03
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xe4], 0
jmp 0x46cd6e
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 1
jge 0x46cd85
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], eax
jmp 0x46cd5f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46cd97
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46cdaf
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 7
mov dword [ebp - 0xe8], 7
mov dword [ebp - 0xec], 0
jmp 0x46cddb
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 4
jge 0x46ce14
mov eax, dword [ebp - 0xec]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ce05
mov edx, dword [ebp - 0xe8]
sub edx, 1
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xe8]
mov dword [ebp - 0x1c], eax
jmp 0x46cdcc
mov dword [ebp - 4], 0xfffffffe
jmp 0x46ce4c
mov dword [ebp - 0xf0], 0
jmp 0x46ce67
mov edx, dword [ebp - 0xf0]
add edx, 1
mov dword [ebp - 0xf0], edx
cmp dword [ebp - 0xf0], 6
jge 0x46ce9e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], eax
jge 0x46ce86
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ce9c
mov dword [ebp - 0x1c], 0
jmp 0x46ce58
mov dword [ebp - 0xf4], 0
jmp 0x46ceb9
mov edx, dword [ebp - 0xf4]
add edx, 1
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], 6
jge 0x46cef0
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xf4]
mov dword [ebp - 0x1c], eax
jge 0x46ced8
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46ceee
mov dword [ebp - 0x1c], 0
jmp 0x46ceaa
mov dword [ebp - 4], 8
mov dword [ebp - 0xf8], 7
mov dword [ebp - 0xfc], 0
jmp 0x46cf1c
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 6
jge 0x46cf55
mov eax, dword [ebp - 0xfc]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46cf46
mov edx, dword [ebp - 0xf8]
sub edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x46cf0d
mov dword [ebp - 4], 0xfffffffe
jmp 0x46cf8d
mov dword [ebp - 4], 9
mov dword [ebp - 0x100], 7
mov dword [ebp - 0x104], 0
jmp 0x46cfb9
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
cmp dword [ebp - 0x104], 1
jge 0x46cff2
mov eax, dword [ebp - 0x104]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46cfe3
mov edx, dword [ebp - 0x100]
sub edx, 1
mov dword [ebp - 0x100], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x100]
mov dword [ebp - 0x1c], eax
jmp 0x46cfaa
mov dword [ebp - 4], 0xfffffffe
jmp 0x46d02a
mov dword [ebp - 0x108], 0
jmp 0x46d045
mov edx, dword [ebp - 0x108]
add edx, 1
mov dword [ebp - 0x108], edx
cmp dword [ebp - 0x108], 4
jge 0x46d05c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x108]
mov dword [ebp - 0x1c], eax
jmp 0x46d036
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x46d06e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46d086