Function at 0x485510
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a7828
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffdb4
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x48555f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x485571
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x485556
cmp dword [ebp - 0x1c], 0
jle 0x485580
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x485596
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x24], 0
mov edx, 1
test edx, edx
je 0x4855db
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4855c6
jmp 0x4855db
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
jmp 0x4855a0
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], 0
jmp 0x4855f6
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0
jge 0x485607
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x4855ed
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x485619
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x485631
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 0
jmp 0x485643
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x10
jge 0x485674
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jge 0x48565c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x485672
mov dword [ebp - 0x1c], 0
jmp 0x48563a
mov dword [ebp - 0x34], 0
jmp 0x485686
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0xc
jge 0x485698
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
jmp 0x48567d
cmp dword [ebp - 0x1c], 0
jle 0x4856a7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4856bd
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x38], 0
jmp 0x4856d2
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x14
jge 0x4856e4
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x4856c9
cmp dword [ebp - 0x1c], 0
jle 0x4856f3
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x485709
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x3c], 0
jmp 0x48571e
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x1c
jge 0x48572f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x485715
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x485741
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x485759
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x40], 0
jmp 0x48576b
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xf
jge 0x48579c
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
jge 0x485784
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48579a
mov dword [ebp - 0x1c], 0
jmp 0x485762
mov dword [ebp - 4], 0
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], 0
jmp 0x4857bc
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 6
jge 0x4857e6
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4857da
mov edx, dword [ebp - 0x44]
sub edx, 1
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x4857b3
mov dword [ebp - 4], 0xfffffffe
jmp 0x48581e
mov dword [ebp - 0x4c], 0
jmp 0x485830
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 9
jge 0x485841
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
jmp 0x485827
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x485853
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x48586b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x50], 0
jmp 0x48587d
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0
jge 0x48588f
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
jmp 0x485874
cmp dword [ebp - 0x1c], 0
jle 0x48589e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4858b4
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 1
mov dword [ebp - 0x54], 0
jmp 0x4858d0
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0
jge 0x485906
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4858f6
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x485901
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x485904
mov dword [ebp - 0x1c], eax
jmp 0x4858c7
mov dword [ebp - 4], 0xfffffffe
call fcn.00485914
jmp 0x48591c
mov dword [ebp - 0x58], 0
mov edx, 1
test edx, edx
je 0x48595e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x485949
jmp 0x48595e
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x58]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
jmp 0x485923
mov ecx, dword [ebp - 0x1c]
add ecx, 0xc
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x60], 7
mov dword [ebp - 0x64], 0
jmp 0x485987
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 0xf
jge 0x4859b1
mov eax, dword [ebp - 0x64]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4859a5
mov edx, dword [ebp - 0x60]
sub edx, 1
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x60]
mov dword [ebp - 0x1c], eax
jmp 0x48597e
mov dword [ebp - 4], 0xfffffffe
jmp 0x4859e9
mov dword [ebp - 0x68], 0
mov edx, 1
test edx, edx
je 0x485a2b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x485a16
jmp 0x485a2b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
jmp 0x4859f0
mov ecx, dword [ebp - 0x1c]
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x70], 0
jmp 0x485a46
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 6
jge 0x485a76
mov eax, dword [ebp - 0x70]
and eax, 0x80000001
jns 0x485a5b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x485a6b
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], ecx
jmp 0x485a74
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], edx
jmp 0x485a3d
push 0x497f28
push 0x497f30
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 3
mov dword [ebp - 0x74], 0
jmp 0x485a9f
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jge 0x485ad5
mov eax, dword [ebp - 0x74]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x485ac5
mov eax, dword [ebp - 0x74]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x485ad0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x485ad3
mov dword [ebp - 0x1c], eax
jmp 0x485a96
mov dword [ebp - 4], 0xfffffffe
call fcn.00485ae3
jmp 0x485aeb
mov dword [ebp - 0x78], 0
jmp 0x485afd
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 8
jge 0x485b0f
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
jmp 0x485af4
cmp dword [ebp - 0x1c], 0
jle 0x485b1e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x485b34
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 4
mov dword [ebp - 0x7c], 7
mov dword [ebp - 0x80], 0
jmp 0x485b57
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 8
jge 0x485b81
mov eax, dword [ebp - 0x80]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x485b75
mov edx, dword [ebp - 0x7c]
sub edx, 1
mov dword [ebp - 0x7c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jmp 0x485b4e
mov dword [ebp - 4], 0xfffffffe
jmp 0x485bb9
mov dword [ebp - 4], 5
mov dword [ebp - 0x84], 0
jmp 0x485bdb
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 4
jge 0x485c1a
mov eax, dword [ebp - 0x84]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x485c0a
mov eax, dword [ebp - 0x84]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x485c15
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x485c18
mov dword [ebp - 0x1c], eax
jmp 0x485bcc
mov dword [ebp - 4], 0xfffffffe
call fcn.00485c28
jmp 0x485c30
mov dword [ebp - 0x88], 0
jmp 0x485c4b
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 8
jge 0x485c62
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jmp 0x485c3c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x485c74
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x485c8c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c], 0
mov edx, 1
test edx, edx
je 0x485ce0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x485cc2
jmp 0x485ce0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x8c]
add eax, 1
mov dword [ebp - 0x8c], eax
jmp 0x485c96
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x94], 0
jmp 0x485d04
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 4
jge 0x485d40
mov eax, dword [ebp - 0x94]
and eax, 0x80000001
jns 0x485d1f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x485d32
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], ecx
jmp 0x485d3e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], edx
jmp 0x485cf5
push 0x497f38
push 0x497f40
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 6
mov dword [ebp - 0x98], 0
jmp 0x485d72
mov eax, dword [ebp - 0x98]
add eax, 1
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 8
jge 0x485db1
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x485da1
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x485dac
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x485daf
mov dword [ebp - 0x1c], eax
jmp 0x485d63
mov dword [ebp - 4], 0xfffffffe
call fcn.00485dbf
jmp 0x485dc7
mov dword [ebp - 0x9c], 0
mov edx, 1
test edx, edx
je 0x485e1b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x485dfd
jmp 0x485e1b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x9c]
add eax, 1
mov dword [ebp - 0x9c], eax
jmp 0x485dd1
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], 0
jmp 0x485e50
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 3
jge 0x485e89
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x485e7a
mov edx, dword [ebp - 0xa4]
sub edx, 1
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jmp 0x485e41
mov dword [ebp - 4], 0xfffffffe
jmp 0x485ec1
mov dword [ebp - 0xac], 0
jmp 0x485edc
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 4
jge 0x485f13
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xac]
mov dword [ebp - 0x1c], eax
jge 0x485efb
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x485f11
mov dword [ebp - 0x1c], 0
jmp 0x485ecd
mov dword [ebp - 4], 8
mov dword [ebp - 0xb0], 0
jmp 0x485f35
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0xb0], 2
jge 0x485f74
mov eax, dword [ebp - 0xb0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x485f64
mov eax, dword [ebp - 0xb0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x485f6f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x485f72
mov dword [ebp - 0x1c], eax
jmp 0x485f26
mov dword [ebp - 4], 0xfffffffe
call fcn.00485f82
jmp 0x485f8a
mov dword [ebp - 0xb4], 0
jmp 0x485fa5
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 3
jge 0x485fe1
mov eax, dword [ebp - 0xb4]
and eax, 0x80000001
jns 0x485fc0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x485fd3
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], ecx
jmp 0x485fdf
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], edx
jmp 0x485f96
push 0x497f48
push 0x497f50
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xb8], 0
mov eax, 1
test eax, eax
je 0x486045
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x486027
jmp 0x486045
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb8]
add eax, 1
mov dword [ebp - 0xb8], eax
jmp 0x485ffb
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xc0], 0
jmp 0x486069
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 8
jge 0x486080
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], eax
jmp 0x48605a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x486092
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4860aa
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc4], 0
jmp 0x4860c5
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 2
jge 0x4860dd
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
jmp 0x4860b6
cmp dword [ebp - 0x1c], 0
jle 0x4860ec
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x486102
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xc8], 0
mov edx, 1
test edx, edx
je 0x486159
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x48613b
jmp 0x486159
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc8]
add eax, 1
mov dword [ebp - 0xc8], eax
jmp 0x48610f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd0], 0
mov edx, 1
test edx, edx
je 0x4861b6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x486198
jmp 0x4861b6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd0]
add eax, 1
mov dword [ebp - 0xd0], eax
jmp 0x48616c
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0xd8], 7
mov dword [ebp - 0xdc], 0
jmp 0x4861eb
mov edx, dword [ebp - 0xdc]
add edx, 1
mov dword [ebp - 0xdc], edx
cmp dword [ebp - 0xdc], 1
jge 0x486224
mov eax, dword [ebp - 0xdc]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x486215
mov edx, dword [ebp - 0xd8]
sub edx, 1
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xd8]
mov dword [ebp - 0x1c], eax
jmp 0x4861dc
mov dword [ebp - 4], 0xfffffffe
jmp 0x48625c
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xe0], 0
jmp 0x48627e
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 3
jge 0x4862bd
mov eax, dword [ebp - 0xe0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4862ad
mov eax, dword [ebp - 0xe0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4862b8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4862bb
mov dword [ebp - 0x1c], eax
jmp 0x48626f
mov dword [ebp - 4], 0xfffffffe
call fcn.004862cb
jmp 0x4862d3
mov dword [ebp - 0xe4], 0
jmp 0x4862ee
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 2
jge 0x486325
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], eax
jge 0x48630d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x486323
mov dword [ebp - 0x1c], 0
jmp 0x4862df
mov dword [ebp - 0xe8], 0
mov edx, 1
test edx, edx
je 0x486379
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x48635b
jmp 0x486379
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xe8]
add eax, 1
mov dword [ebp - 0xe8], eax
jmp 0x48632f
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xf0], 0
jmp 0x48639d
mov edx, dword [ebp - 0xf0]
add edx, 1
mov dword [ebp - 0xf0], edx
cmp dword [ebp - 0xf0], 6
jge 0x4863b4
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], eax
jmp 0x48638e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4863c6
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4863de
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf4], 0
jmp 0x4863f9
mov edx, dword [ebp - 0xf4]
add edx, 1
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], 8
jge 0x486435
mov eax, dword [ebp - 0xf4]
and eax, 0x80000001
jns 0x486414
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x486427
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x1c], ecx
jmp 0x486433
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xf4]
mov dword [ebp - 0x1c], edx
jmp 0x4863ea
push 0x497f58
push 0x497f60
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xf8], 0
jmp 0x486467
mov eax, dword [ebp - 0xf8]
add eax, 1
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 4
jge 0x4864a6
mov eax, dword [ebp - 0xf8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x486496
mov eax, dword [ebp - 0xf8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4864a1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4864a4
mov dword [ebp - 0x1c], eax
jmp 0x486458
mov dword [ebp - 4], 0xfffffffe
call fcn.004864b4
jmp 0x4864bc
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xfc], 0
jmp 0x4864de
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 8
jge 0x48651d
mov eax, dword [ebp - 0xfc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x48650d
mov eax, dword [ebp - 0xfc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x486518
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x48651b
mov dword [ebp - 0x1c], eax
jmp 0x4864cf
mov dword [ebp - 4], 0xfffffffe
call fcn.0048652b
jmp 0x486533
mov dword [ebp - 0x100], 0
mov edx, 1
test edx, edx
je 0x486587
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x486569
jmp 0x486587
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x100]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x100]
add eax, 1
mov dword [ebp - 0x100], eax
jmp 0x48653d
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x108], 0
jmp 0x4865ab
mov edx, dword [ebp - 0x108]
add edx, 1
mov dword [ebp - 0x108], edx
cmp dword [ebp - 0x108], 4
jge 0x4865c3
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x108]
mov dword [ebp - 0x1c], eax
jmp 0x48659c
cmp dword [ebp - 0x1c], 0
jle 0x4865d2
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4865e8
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x10c], 0
jmp 0x486606
mov edx, dword [ebp - 0x10c]
add edx, 1
mov dword [ebp - 0x10c], edx
cmp dword [ebp - 0x10c], 3
jge 0x486642
mov eax, dword [ebp - 0x10c]
and eax, 0x80000001
jns 0x486621
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x486634
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x1c], ecx
jmp 0x486640
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10c]
mov dword [ebp - 0x1c], edx
jmp 0x4865f7
push 0x497f68
push 0x497f70
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x110], 0
mov eax, 1
test eax, eax
je 0x4866a6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x486688
jmp 0x4866a6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x110]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x110]
add eax, 1
mov dword [ebp - 0x110], eax
jmp 0x48665c
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x118], 0
mov edx, 1
test edx, edx
je 0x486703
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4866e5
jmp 0x486703
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x118]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
jmp 0x4866b9
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x120], 0
jmp 0x486727
mov edx, dword [ebp - 0x120]
add edx, 1
mov dword [ebp - 0x120], edx
cmp dword [ebp - 0x120], 3
jge 0x48675e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x120]
mov dword [ebp - 0x1c], eax
jge 0x486746
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48675c
mov dword [ebp - 0x1c], 0
jmp 0x486718
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x124], 0
jmp 0x486780
mov edx, dword [ebp - 0x124]
add edx, 1
mov dword [ebp - 0x124], edx
cmp dword [ebp - 0x124], 0
jge 0x4867bf
mov eax, dword [ebp - 0x124]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4867af
mov eax, dword [ebp - 0x124]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4867ba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4867bd
mov dword [ebp - 0x1c], eax
jmp 0x486771
mov dword [ebp - 4], 0xfffffffe
call fcn.004867cd
jmp 0x4867d5
mov dword [ebp - 0x128], 0
jmp 0x4867f0
cmp dword [ebp - 0x128], 3
jge 0x486807
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x128]
mov dword [ebp - 0x1c], eax
jmp 0x4867e1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x486819