Function at 0x475340
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a6ea0
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffe30
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x47538f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1e
jge 0x4753a0
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x475386
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4753b2
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4753ca
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x4753dc
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1e
jge 0x47540c
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x4753f1
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x475401
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], ecx
jmp 0x47540a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x4753d3
push 0x498558
push 0x498560
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x28], 0
jmp 0x47542e
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 8
jge 0x47543f
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jmp 0x475425
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x475451
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x475469
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0
jmp 0x47547b
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x37
jge 0x47548d
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x475472
cmp dword [ebp - 0x1c], 0
jle 0x47549c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4754b2
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x30], 0
jmp 0x4754c7
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 5
jge 0x4754f7
mov eax, dword [ebp - 0x30]
and eax, 0x80000001
jns 0x4754dc
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4754ec
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], ecx
jmp 0x4754f5
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], edx
jmp 0x4754be
push 0x498568
push 0x498570
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
jmp 0x475527
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x475551
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x475545
mov edx, dword [ebp - 0x34]
sub edx, 1
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
jmp 0x47551e
mov dword [ebp - 4], 0xfffffffe
jmp 0x475589
mov dword [ebp - 4], 1
mov dword [ebp - 0x3c], 0
jmp 0x4755a2
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0xf
jge 0x4755d8
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4755c8
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4755d3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4755d6
mov dword [ebp - 0x1c], eax
jmp 0x475599
mov dword [ebp - 4], 0xfffffffe
call fcn.004755e6
jmp 0x4755ee
mov dword [ebp - 0x40], 0
jmp 0x475600
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xa
jge 0x475611
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
jmp 0x4755f7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x475623
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47563b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44], 0
jmp 0x47564d
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 2
jge 0x47567e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jge 0x475666
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47567c
mov dword [ebp - 0x1c], 0
jmp 0x475644
mov dword [ebp - 0x48], 0
mov edx, 1
test edx, edx
je 0x4756c0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4756ab
jmp 0x4756c0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
jmp 0x475685
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x50], 0
jmp 0x4756e2
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 9
jge 0x475718
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x475708
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x475713
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x475716
mov dword [ebp - 0x1c], eax
jmp 0x4756d9
mov dword [ebp - 4], 0xfffffffe
call fcn.00475726
jmp 0x47572e
mov dword [ebp - 4], 3
mov dword [ebp - 0x54], 0
jmp 0x475747
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0x10
jge 0x47577d
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47576d
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x475778
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47577b
mov dword [ebp - 0x1c], eax
jmp 0x47573e
mov dword [ebp - 4], 0xfffffffe
call fcn.0047578b
jmp 0x475793
mov dword [ebp - 4], 4
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x5c], 0
jmp 0x4757b3
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 0xc
jge 0x4757dd
mov eax, dword [ebp - 0x5c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4757d1
mov edx, dword [ebp - 0x58]
sub edx, 1
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
jmp 0x4757aa
mov dword [ebp - 4], 0xfffffffe
jmp 0x475815
mov dword [ebp - 4], 5
mov dword [ebp - 0x60], 0
jmp 0x47582e
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 8
jge 0x475864
mov eax, dword [ebp - 0x60]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x475854
mov eax, dword [ebp - 0x60]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47585f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x475862
mov dword [ebp - 0x1c], eax
jmp 0x475825
mov dword [ebp - 4], 0xfffffffe
call fcn.00475872
jmp 0x47587a
mov dword [ebp - 0x64], 0
jmp 0x47588c
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 0xd
jge 0x4758bd
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x64]
mov dword [ebp - 0x1c], eax
jge 0x4758a5
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4758bb
mov dword [ebp - 0x1c], 0
jmp 0x475883
mov dword [ebp - 0x68], 0
jmp 0x4758cf
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 0xc
jge 0x4758ff
mov eax, dword [ebp - 0x68]
and eax, 0x80000001
jns 0x4758e4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4758f4
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], ecx
jmp 0x4758fd
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], edx
jmp 0x4758c6
push 0x498578
push 0x498580
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 6
mov dword [ebp - 0x6c], 0
jmp 0x475928
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x47595e
mov eax, dword [ebp - 0x6c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47594e
mov eax, dword [ebp - 0x6c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x475959
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47595c
mov dword [ebp - 0x1c], eax
jmp 0x47591f
mov dword [ebp - 4], 0xfffffffe
call fcn.0047596c
jmp 0x475974
mov dword [ebp - 0x70], 0
jmp 0x475986
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0xb
jge 0x475997
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c], eax
jmp 0x47597d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4759a9
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4759c1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x74], 0
jmp 0x4759d3
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 5
jge 0x4759e4
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x74]
mov dword [ebp - 0x1c], eax
jmp 0x4759ca
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4759f6
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x475a0e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x78], 0
jmp 0x475a20
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0xb
jge 0x475a50
mov eax, dword [ebp - 0x78]
and eax, 0x80000001
jns 0x475a35
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x475a45
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x78]
mov dword [ebp - 0x1c], ecx
jmp 0x475a4e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x78]
mov dword [ebp - 0x1c], edx
jmp 0x475a17
push 0x498588
push 0x498590
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x7c], 0
mov eax, 1
test eax, eax
je 0x475aa2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x475a8d
jmp 0x475aa2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x7c]
add eax, 1
mov dword [ebp - 0x7c], eax
jmp 0x475a67
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x84], 0
jmp 0x475acd
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0xb
jge 0x475b0c
mov eax, dword [ebp - 0x84]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x475afc
mov eax, dword [ebp - 0x84]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x475b07
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x475b0a
mov dword [ebp - 0x1c], eax
jmp 0x475abe
mov dword [ebp - 4], 0xfffffffe
call fcn.00475b1a
jmp 0x475b22
mov dword [ebp - 0x88], 0
jmp 0x475b3d
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 8
jge 0x475b54
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jmp 0x475b2e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x475b66
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x475b7e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c], 0
jmp 0x475b99
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 6
jge 0x475bb1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
jmp 0x475b8a
cmp dword [ebp - 0x1c], 0
jle 0x475bc0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x475bd6
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 8
mov dword [ebp - 0x90], 0
jmp 0x475bfb
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 2
jge 0x475c3a
mov eax, dword [ebp - 0x90]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x475c2a
mov eax, dword [ebp - 0x90]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x475c35
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x475c38
mov dword [ebp - 0x1c], eax
jmp 0x475bec
mov dword [ebp - 4], 0xfffffffe
call fcn.00475c48
jmp 0x475c50
mov dword [ebp - 0x94], 0
jmp 0x475c6b
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 2
jge 0x475c82
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x94]
mov dword [ebp - 0x1c], eax
jmp 0x475c5c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x475c94
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x475cac
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x98], 0
jmp 0x475cc7
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 4
jge 0x475cdf
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x98]
mov dword [ebp - 0x1c], eax
jmp 0x475cb8
cmp dword [ebp - 0x1c], 0
jle 0x475cee
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x475d04
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 9
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
jmp 0x475d33
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 6
jge 0x475d6c
mov eax, dword [ebp - 0xa0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x475d5d
mov edx, dword [ebp - 0x9c]
sub edx, 1
mov dword [ebp - 0x9c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
jmp 0x475d24
mov dword [ebp - 4], 0xfffffffe
jmp 0x475da4
mov dword [ebp - 0xa4], 0
jmp 0x475dbf
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 3
jge 0x475df6
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jge 0x475dde
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x475df4
mov dword [ebp - 0x1c], 0
jmp 0x475db0
mov dword [ebp - 0xa8], 0
jmp 0x475e11
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 3
jge 0x475e28
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], eax
jmp 0x475e02
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x475e3a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x475e52
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xac], 0
jmp 0x475e74
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 3
jge 0x475eb3
mov eax, dword [ebp - 0xac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x475ea3
mov eax, dword [ebp - 0xac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x475eae
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x475eb1
mov dword [ebp - 0x1c], eax
jmp 0x475e65
mov dword [ebp - 4], 0xfffffffe
call fcn.00475ec1
jmp 0x475ec9
mov dword [ebp - 0xb0], 0
jmp 0x475ee4
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0xb0], 6
jge 0x475efc
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], eax
jmp 0x475ed5
cmp dword [ebp - 0x1c], 0
jle 0x475f0b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x475f21
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xb4], 0
jmp 0x475f3f
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 4
jge 0x475f56
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], eax
jmp 0x475f30
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x475f68
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x475f80
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xb8], 0
jmp 0x475fa2
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 6
jge 0x475fe1
mov eax, dword [ebp - 0xb8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x475fd1
mov eax, dword [ebp - 0xb8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x475fdc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x475fdf
mov dword [ebp - 0x1c], eax
jmp 0x475f93
mov dword [ebp - 4], 0xfffffffe
call fcn.00475fef
jmp 0x475ff7
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xbc], 0
jmp 0x476019
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 8
jge 0x476058
mov eax, dword [ebp - 0xbc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x476048
mov eax, dword [ebp - 0xbc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x476053
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x476056
mov dword [ebp - 0x1c], eax
jmp 0x47600a
mov dword [ebp - 4], 0xfffffffe
call fcn.00476066
jmp 0x47606e
mov dword [ebp - 0xc0], 0
jmp 0x476089
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 7
jge 0x4760a1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], eax
jmp 0x47607a
cmp dword [ebp - 0x1c], 0
jle 0x4760b0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4760c6
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xc4], 7
mov dword [ebp - 0xc8], 0
jmp 0x4760f5
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 5
jge 0x47612e
mov eax, dword [ebp - 0xc8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47611f
mov edx, dword [ebp - 0xc4]
sub edx, 1
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
jmp 0x4760e6
mov dword [ebp - 4], 0xfffffffe
jmp 0x476166
mov dword [ebp - 0xcc], 0
mov edx, 1
test edx, edx
je 0x4761ba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47619c
jmp 0x4761ba
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xcc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xcc]
add eax, 1
mov dword [ebp - 0xcc], eax
jmp 0x476170
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd4], 0
jmp 0x4761de
mov edx, dword [ebp - 0xd4]
add edx, 1
mov dword [ebp - 0xd4], edx
cmp dword [ebp - 0xd4], 4
jge 0x47621a
mov eax, dword [ebp - 0xd4]
and eax, 0x80000001
jns 0x4761f9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47620c
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], ecx
jmp 0x476218
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], edx
jmp 0x4761cf
push 0x498598
push 0x4985a0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xd8], 0
jmp 0x476245
mov eax, dword [ebp - 0xd8]
add eax, 1
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 5
jge 0x476282
mov ecx, dword [ebp - 0xd8]
and ecx, 0x80000001
jns 0x476261
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x476274
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], edx
jmp 0x476280
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], eax
jmp 0x476236
push 0x4985a8
push 0x4985b0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xdc], 0
jmp 0x4762ad
mov ecx, dword [ebp - 0xdc]
add ecx, 1
mov dword [ebp - 0xdc], ecx
cmp dword [ebp - 0xdc], 7
jge 0x4762e4
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], edx
jge 0x4762cc
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4762e2
mov dword [ebp - 0x1c], 0
jmp 0x47629e
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], 0
jmp 0x476310
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 7
jge 0x476349
mov eax, dword [ebp - 0xe4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47633a
mov edx, dword [ebp - 0xe0]
sub edx, 1
mov dword [ebp - 0xe0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xe0]
mov dword [ebp - 0x1c], eax
jmp 0x476301
mov dword [ebp - 4], 0xfffffffe
jmp 0x476381
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xe8], 0
jmp 0x4763a3
cmp dword [ebp - 0xe8], 7
jge 0x4763e2
mov eax, dword [ebp - 0xe8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4763d2
mov eax, dword [ebp - 0xe8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4763dd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4763e0
mov dword [ebp - 0x1c], eax
jmp 0x476394
mov dword [ebp - 4], 0xfffffffe
call fcn.004763f0
jmp 0x4763f8
mov dword [ebp - 0xec], 0
jmp 0x476413
cmp dword [ebp - 0xec], 5
jge 0x47642a