Function at 0x441650
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a4e88
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffe5c
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x44169f
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 6
jge 0x4416b0
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x441696
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4416c2
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4416da
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x4416ec
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x1b
jge 0x44171c
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x441701
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x441711
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], ecx
jmp 0x44171a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x4416e3
push 0x4998a8
push 0x4998b0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x2c], 0
jmp 0x44174c
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x441776
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44176a
mov edx, dword [ebp - 0x28]
sub edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x441743
mov dword [ebp - 4], 0xfffffffe
jmp 0x4417ae
mov dword [ebp - 0x30], 0
jmp 0x4417c0
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 2
jge 0x4417d1
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x4417b7
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4417e3
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4417fb
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], 0
jmp 0x44180d
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 6
jge 0x44183e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
jge 0x441826
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44183c
mov dword [ebp - 0x1c], 0
jmp 0x441804
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x3c], 0
jmp 0x44185e
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 1
jge 0x441888
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44187c
mov edx, dword [ebp - 0x38]
sub edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x441855
mov dword [ebp - 4], 0xfffffffe
jmp 0x4418c0
mov dword [ebp - 0x40], 0
jmp 0x4418d2
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 1
jge 0x441902
mov eax, dword [ebp - 0x40]
and eax, 0x80000001
jns 0x4418e7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4418f7
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], ecx
jmp 0x441900
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
jmp 0x4418c9
push 0x4998b8
push 0x4998c0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x44], 0
jmp 0x441924
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xe
jge 0x441955
mov ecx, dword [ebp - 0x44]
and ecx, 0x80000001
jns 0x44193a
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x44194a
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edx
jmp 0x441953
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x44191b
push 0x4998c8
push 0x4998d0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x48], 0
jmp 0x441977
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 0x10
jge 0x4419a8
mov edx, dword [ebp - 0x48]
and edx, 0x80000001
jns 0x44198d
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x44199d
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
jmp 0x4419a6
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], ecx
jmp 0x44196e
push 0x4998d8
push 0x4998e0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x4c], 0
jmp 0x4419ca
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0xf
jge 0x4419fa
mov eax, dword [ebp - 0x4c]
and eax, 0x80000001
jns 0x4419df
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4419ef
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], ecx
jmp 0x4419f8
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], edx
jmp 0x4419c1
push 0x4998e8
push 0x4998f0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x50], 0
jmp 0x441a1c
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xb
jge 0x441a4d
mov ecx, dword [ebp - 0x50]
and ecx, 0x80000001
jns 0x441a32
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x441a42
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], edx
jmp 0x441a4b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
jmp 0x441a13
push 0x4998f8
push 0x499900
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 2
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x58], 0
jmp 0x441a7d
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 0x58], 0xb
jge 0x441aa7
mov eax, dword [ebp - 0x58]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441a9b
mov edx, dword [ebp - 0x54]
sub edx, 1
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x54]
mov dword [ebp - 0x1c], eax
jmp 0x441a74
mov dword [ebp - 4], 0xfffffffe
jmp 0x441adf
mov dword [ebp - 0x5c], 0
jmp 0x441af1
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 7
jge 0x441b21
mov eax, dword [ebp - 0x5c]
and eax, 0x80000001
jns 0x441b06
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x441b16
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], ecx
jmp 0x441b1f
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], edx
jmp 0x441ae8
push 0x499908
push 0x499910
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x60], 0
jmp 0x441b43
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jge 0x441b74
mov ecx, dword [ebp - 0x60]
and ecx, 0x80000001
jns 0x441b59
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x441b69
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], edx
jmp 0x441b72
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x60]
mov dword [ebp - 0x1c], eax
jmp 0x441b3a
push 0x499918
push 0x499920
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x64], 0
jmp 0x441b96
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 8
jge 0x441ba7
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x64]
mov dword [ebp - 0x1c], edx
jmp 0x441b8d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441bb9
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x441bd1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x68], 0
jmp 0x441be3
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 5
jge 0x441bf4
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x68]
mov dword [ebp - 0x1c], eax
jmp 0x441bda
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x441c06
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x441c1e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6c], 0
jmp 0x441c30
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 5
jge 0x441c60
mov eax, dword [ebp - 0x6c]
and eax, 0x80000001
jns 0x441c45
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x441c55
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], ecx
jmp 0x441c5e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], edx
jmp 0x441c27
push 0x499928
push 0x499930
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 3
mov dword [ebp - 0x70], 0
jmp 0x441c89
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 6
jge 0x441cbf
mov eax, dword [ebp - 0x70]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441caf
mov eax, dword [ebp - 0x70]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441cba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x441cbd
mov dword [ebp - 0x1c], eax
jmp 0x441c80
mov dword [ebp - 4], 0xfffffffe
call fcn.00441ccd
jmp 0x441cd5
mov dword [ebp - 0x74], 0
mov edx, 1
test edx, edx
je 0x441d17
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x441d02
jmp 0x441d17
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x74]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
jmp 0x441cdc
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x7c], 0
jmp 0x441d32
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 4
jge 0x441d44
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jmp 0x441d29
cmp dword [ebp - 0x1c], 0
jle 0x441d53
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x441d69
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x80], 0
mov edx, 1
test edx, edx
je 0x441db4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x441d9f
jmp 0x441db4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x80]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
jmp 0x441d73
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x88], 0
jmp 0x441dd5
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 2
jge 0x441e0c
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jge 0x441df4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441e0a
mov dword [ebp - 0x1c], 0
jmp 0x441dc6
mov dword [ebp - 4], 4
mov dword [ebp - 0x8c], 0
jmp 0x441e2e
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 5
jge 0x441e6d
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x441e5d
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x441e68
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x441e6b
mov dword [ebp - 0x1c], eax
jmp 0x441e1f
mov dword [ebp - 4], 0xfffffffe
call fcn.00441e7b
jmp 0x441e83
mov dword [ebp - 0x90], 0
jmp 0x441e9e
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 2
jge 0x441ed5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x90]
mov dword [ebp - 0x1c], eax
jge 0x441ebd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x441ed3
mov dword [ebp - 0x1c], 0
jmp 0x441e8f
mov dword [ebp - 0x94], 0
jmp 0x441ef0
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 7
jge 0x441f08
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x94]
mov dword [ebp - 0x1c], eax
jmp 0x441ee1
cmp dword [ebp - 0x1c], 0
jle 0x441f17
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x441f2d
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x98], 0
mov edx, 1
test edx, edx
je 0x441f84
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x441f66
jmp 0x441f84
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x98]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x98]
add eax, 1
mov dword [ebp - 0x98], eax
jmp 0x441f3a
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xa0], 0
jmp 0x441fa8
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 7
jge 0x441fe4
mov eax, dword [ebp - 0xa0]
and eax, 0x80000001
jns 0x441fc3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x441fd6
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], ecx
jmp 0x441fe2
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], edx
jmp 0x441f99
push 0x499938
push 0x499940
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 5
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], 0
jmp 0x442020
mov eax, dword [ebp - 0xa8]
add eax, 1
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x442059
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44204a
mov edx, dword [ebp - 0xa4]
sub edx, 1
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jmp 0x442011
mov dword [ebp - 4], 0xfffffffe
jmp 0x442091
mov dword [ebp - 0xac], 0
jmp 0x4420ac
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 2
jge 0x4420c3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xac]
mov dword [ebp - 0x1c], eax
jmp 0x44209d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4420d5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4420ed
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb0], 0
mov edx, 1
test edx, edx
je 0x442141
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x442123
jmp 0x442141
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb0]
add eax, 1
mov dword [ebp - 0xb0], eax
jmp 0x4420f7
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb8], 0
jmp 0x442162
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 0
jge 0x44219e
mov eax, dword [ebp - 0xb8]
and eax, 0x80000001
jns 0x44217d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x442190
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], ecx
jmp 0x44219c
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], edx
jmp 0x442153
push 0x499948
push 0x499950
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 6
mov dword [ebp - 0xbc], 0
jmp 0x4421d0
mov eax, dword [ebp - 0xbc]
add eax, 1
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x44220f
mov eax, dword [ebp - 0xbc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4421ff
mov eax, dword [ebp - 0xbc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x44220a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x44220d
mov dword [ebp - 0x1c], eax
jmp 0x4421c1
mov dword [ebp - 4], 0xfffffffe
call fcn.0044221d
jmp 0x442225
mov dword [ebp - 0xc0], 0
jmp 0x442240
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 0
jge 0x442258
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], eax
jmp 0x442231
cmp dword [ebp - 0x1c], 0
jle 0x442267
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x44227d
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 7
mov dword [ebp - 0xc4], 7
mov dword [ebp - 0xc8], 0
jmp 0x4422ac
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 0
jge 0x4422e5
mov eax, dword [ebp - 0xc8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4422d6
mov edx, dword [ebp - 0xc4]
sub edx, 1
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
jmp 0x44229d
mov dword [ebp - 4], 0xfffffffe
jmp 0x44231d
mov dword [ebp - 0xcc], 0
jmp 0x442338
mov edx, dword [ebp - 0xcc]
add edx, 1
mov dword [ebp - 0xcc], edx
cmp dword [ebp - 0xcc], 3
jge 0x44236f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xcc]
mov dword [ebp - 0x1c], eax
jge 0x442357
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x44236d
mov dword [ebp - 0x1c], 0
jmp 0x442329
mov dword [ebp - 4], 8
mov dword [ebp - 0xd0], 0
jmp 0x442391
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 2
jge 0x4423d0
mov eax, dword [ebp - 0xd0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4423c0
mov eax, dword [ebp - 0xd0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4423cb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4423ce
mov dword [ebp - 0x1c], eax
jmp 0x442382
mov dword [ebp - 4], 0xfffffffe
call fcn.004423de
jmp 0x4423e6
mov dword [ebp - 0xd4], 0
mov edx, 1
test edx, edx
je 0x44243a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44241c
jmp 0x44243a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd4]
add eax, 1
mov dword [ebp - 0xd4], eax
jmp 0x4423f0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xdc], 0
jmp 0x44245e
mov edx, dword [ebp - 0xdc]
add edx, 1
mov dword [ebp - 0xdc], edx
cmp dword [ebp - 0xdc], 2
jge 0x442495
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], eax
jge 0x44247d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442493
mov dword [ebp - 0x1c], 0
jmp 0x44244f
mov dword [ebp - 0xe0], 0
jmp 0x4424b0
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 0
jge 0x4424c7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xe0]
mov dword [ebp - 0x1c], eax
jmp 0x4424a1
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4424d9
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4424f1
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 9
mov dword [ebp - 0xe4], 7
mov dword [ebp - 0xe8], 0
jmp 0x44251d
mov edx, dword [ebp - 0xe8]
add edx, 1
mov dword [ebp - 0xe8], edx
cmp dword [ebp - 0xe8], 4
jge 0x442556
mov eax, dword [ebp - 0xe8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x442547
mov edx, dword [ebp - 0xe4]
sub edx, 1
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xe4]
mov dword [ebp - 0x1c], eax
jmp 0x44250e
mov dword [ebp - 4], 0xfffffffe
jmp 0x44258e
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xec], 0
jmp 0x4425b0
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 1
jge 0x4425ef
mov eax, dword [ebp - 0xec]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4425df
mov eax, dword [ebp - 0xec]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4425ea
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4425ed
mov dword [ebp - 0x1c], eax
jmp 0x4425a1
mov dword [ebp - 4], 0xfffffffe
call fcn.004425fd
jmp 0x442605
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xf0], 0
jmp 0x442627
mov edx, dword [ebp - 0xf0]
add edx, 1
mov dword [ebp - 0xf0], edx
cmp dword [ebp - 0xf0], 0
jge 0x442666
mov eax, dword [ebp - 0xf0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x442656
mov eax, dword [ebp - 0xf0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x442661
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x442664
mov dword [ebp - 0x1c], eax
jmp 0x442618
mov dword [ebp - 4], 0xfffffffe
call fcn.00442674
jmp 0x44267c
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xf4], 7
mov dword [ebp - 0xf8], 0
jmp 0x4426a8
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 0
jge 0x4426e1
mov eax, dword [ebp - 0xf8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4426d2
mov edx, dword [ebp - 0xf4]
sub edx, 1
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xf4]
mov dword [ebp - 0x1c], eax
jmp 0x442699
mov dword [ebp - 4], 0xfffffffe
jmp 0x442719
mov dword [ebp - 0xfc], 0
jmp 0x442734
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 0
jge 0x44274b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], eax
jmp 0x442725
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x44275d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x442775
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x100], 0
jmp 0x442797
mov edx, dword [ebp - 0x100]
add edx, 1
mov dword [ebp - 0x100], edx
cmp dword [ebp - 0x100], 4
jge 0x4427d6
mov eax, dword [ebp - 0x100]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4427c6
mov eax, dword [ebp - 0x100]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4427d1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4427d4
mov dword [ebp - 0x1c], eax
jmp 0x442788
mov dword [ebp - 4], 0xfffffffe
call fcn.004427e4
jmp 0x4427ec
mov dword [ebp - 0x104], 0
jmp 0x442807
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
cmp dword [ebp - 0x104], 0
jge 0x44281f
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
jmp 0x4427f8
cmp dword [ebp - 0x1c], 0
jle 0x44282e
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x442844
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x108], 0
mov edx, 1
test edx, edx
je 0x44289b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x44287d
jmp 0x44289b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x108]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x108]
add eax, 1
mov dword [ebp - 0x108], eax
jmp 0x442851
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x110], 7
mov dword [ebp - 0x114], 0
jmp 0x4428d0
mov edx, dword [ebp - 0x114]
add edx, 1
mov dword [ebp - 0x114], edx
cmp dword [ebp - 0x114], 2
jge 0x442909
mov eax, dword [ebp - 0x114]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4428fa
mov edx, dword [ebp - 0x110]
sub edx, 1
mov dword [ebp - 0x110], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x110]
mov dword [ebp - 0x1c], eax
jmp 0x4428c1
mov dword [ebp - 4], 0xfffffffe
jmp 0x442941
mov dword [ebp - 0x118], 0
jmp 0x44295c
cmp dword [ebp - 0x118], 2
jge 0x442993