Function at 0x488ad0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a7a10
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffeb8
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
jmp 0x488b26
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x26
jge 0x488b5c
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488b4c
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488b57
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x488b5a
mov dword [ebp - 0x1c], eax
jmp 0x488b1d
mov dword [ebp - 4], 0xfffffffe
call fcn.00488b6a
jmp 0x488b72
mov dword [ebp - 0x24], 0
jmp 0x488b84
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x34
jge 0x488bb5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jge 0x488b9d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x488bb3
mov dword [ebp - 0x1c], 0
jmp 0x488b7b
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x2c], 0
jmp 0x488bd5
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 3
jge 0x488bff
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x488bf3
mov edx, dword [ebp - 0x28]
sub edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x488bcc
mov dword [ebp - 4], 0xfffffffe
jmp 0x488c37
mov dword [ebp - 4], 2
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], 0
jmp 0x488c57
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 5
jge 0x488c81
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x488c75
mov edx, dword [ebp - 0x30]
sub edx, 1
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x488c4e
mov dword [ebp - 4], 0xfffffffe
jmp 0x488cb9
mov dword [ebp - 0x38], 0
jmp 0x488ccb
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 4
jge 0x488cdd
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x488cc2
cmp dword [ebp - 0x1c], 0
jle 0x488cec
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x488d02
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 3
mov dword [ebp - 0x3c], 0
jmp 0x488d1e
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x17
jge 0x488d54
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488d44
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488d4f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x488d52
mov dword [ebp - 0x1c], eax
jmp 0x488d15
mov dword [ebp - 4], 0xfffffffe
call fcn.00488d62
jmp 0x488d6a
mov dword [ebp - 0x40], 0
jmp 0x488d7c
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x11
jge 0x488d8d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
jmp 0x488d73
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x488d9f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x488db7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44], 0
jmp 0x488dc9
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x12
jge 0x488dda
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x488dc0
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x488dec
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x488e04
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], 0
jmp 0x488e16
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 4
jge 0x488e27
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
jmp 0x488e0d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x488e39
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x488e51
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], 0
jmp 0x488e63
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 4
jge 0x488e75
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
jmp 0x488e5a
cmp dword [ebp - 0x1c], 0
jle 0x488e84
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x488e9a
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x50], 0
jmp 0x488eaf
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 3
jge 0x488ec1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
jmp 0x488ea6
cmp dword [ebp - 0x1c], 0
jle 0x488ed0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x488ee6
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x54], 0
jmp 0x488efb
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0xa
jge 0x488f0d
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x54]
mov dword [ebp - 0x1c], eax
jmp 0x488ef2
cmp dword [ebp - 0x1c], 0
jle 0x488f1c
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x488f32
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x58], 0
jmp 0x488f47
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 3
jge 0x488f59
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
jmp 0x488f3e
cmp dword [ebp - 0x1c], 0
jle 0x488f68
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x488f7e
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 4
mov dword [ebp - 0x5c], 0
jmp 0x488f9a
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 6
jge 0x488fd0
mov eax, dword [ebp - 0x5c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x488fc0
mov eax, dword [ebp - 0x5c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x488fcb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x488fce
mov dword [ebp - 0x1c], eax
jmp 0x488f91
mov dword [ebp - 4], 0xfffffffe
call fcn.00488fde
jmp 0x488fe6
mov dword [ebp - 0x60], 0
jmp 0x488ff8
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0x10
jge 0x489029
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x60]
mov dword [ebp - 0x1c], eax
jge 0x489011
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489027
mov dword [ebp - 0x1c], 0
jmp 0x488fef
mov dword [ebp - 4], 5
mov dword [ebp - 0x64], 0
jmp 0x489042
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 0xe
jge 0x489078
mov eax, dword [ebp - 0x64]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489068
mov eax, dword [ebp - 0x64]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x489073
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x489076
mov dword [ebp - 0x1c], eax
jmp 0x489039
mov dword [ebp - 4], 0xfffffffe
call fcn.00489086
jmp 0x48908e
mov dword [ebp - 4], 6
mov dword [ebp - 0x68], 0
jmp 0x4890a7
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 0xe
jge 0x4890dd
mov eax, dword [ebp - 0x68]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4890cd
mov eax, dword [ebp - 0x68]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4890d8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4890db
mov dword [ebp - 0x1c], eax
jmp 0x48909e
mov dword [ebp - 4], 0xfffffffe
call fcn.004890eb
jmp 0x4890f3
mov dword [ebp - 0x6c], 0
jmp 0x489105
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 0xb
jge 0x489136
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], eax
jge 0x48911e
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489134
mov dword [ebp - 0x1c], 0
jmp 0x4890fc
mov dword [ebp - 0x70], 0
jmp 0x489148
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0xe
jge 0x489178
mov eax, dword [ebp - 0x70]
and eax, 0x80000001
jns 0x48915d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48916d
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], ecx
jmp 0x489176
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], edx
jmp 0x48913f
push 0x497e88
push 0x497e90
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x74], 0
mov eax, 1
test eax, eax
je 0x4891ca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4891b5
jmp 0x4891ca
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x74]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
jmp 0x48918f
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x7c], 7
mov dword [ebp - 0x80], 0
jmp 0x4891f3
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 0xb
jge 0x48921d
mov eax, dword [ebp - 0x80]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489211
mov edx, dword [ebp - 0x7c]
sub edx, 1
mov dword [ebp - 0x7c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jmp 0x4891ea
mov dword [ebp - 4], 0xfffffffe
jmp 0x489255
mov dword [ebp - 4], 8
mov dword [ebp - 0x84], 7
mov dword [ebp - 0x88], 0
jmp 0x489281
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 7
jge 0x4892ba
mov eax, dword [ebp - 0x88]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4892ab
mov edx, dword [ebp - 0x84]
sub edx, 1
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x84]
mov dword [ebp - 0x1c], eax
jmp 0x489272
mov dword [ebp - 4], 0xfffffffe
jmp 0x4892f2
mov dword [ebp - 0x8c], 0
jmp 0x48930d
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 4
jge 0x489349
mov eax, dword [ebp - 0x8c]
and eax, 0x80000001
jns 0x489328
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48933b
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], ecx
jmp 0x489347
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], edx
jmp 0x4892fe
push 0x497e98
push 0x497ea0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 9
mov dword [ebp - 0x90], 7
mov dword [ebp - 0x94], 0
jmp 0x489385
mov eax, dword [ebp - 0x94]
add eax, 1
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x4893be
mov eax, dword [ebp - 0x94]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4893af
mov edx, dword [ebp - 0x90]
sub edx, 1
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x90]
mov dword [ebp - 0x1c], eax
jmp 0x489376
mov dword [ebp - 4], 0xfffffffe
jmp 0x4893f6
mov dword [ebp - 0x98], 0
jmp 0x489411
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 1
jge 0x489428
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x98]
mov dword [ebp - 0x1c], eax
jmp 0x489402
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x48943a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x489452
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x9c], 0
jmp 0x48946d
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
cmp dword [ebp - 0x9c], 6
jge 0x4894a9
mov eax, dword [ebp - 0x9c]
and eax, 0x80000001
jns 0x489488
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48949b
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], ecx
jmp 0x4894a7
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], edx
jmp 0x48945e
push 0x497ea8
push 0x497eb0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xa0], 0
jmp 0x4894d4
mov eax, dword [ebp - 0xa0]
add eax, 1
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jge 0x48950b
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], ecx
jge 0x4894f3
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489509
mov dword [ebp - 0x1c], 0
jmp 0x4894c5
mov dword [ebp - 0xa4], 0
jmp 0x489526
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 0
jge 0x48955d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jge 0x489545
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x48955b
mov dword [ebp - 0x1c], 0
jmp 0x489517
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xa8], 0
jmp 0x48957f
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 8
jge 0x4895be
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4895ae
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4895b9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4895bc
mov dword [ebp - 0x1c], eax
jmp 0x489570
mov dword [ebp - 4], 0xfffffffe
call fcn.004895cc
jmp 0x4895d4
mov dword [ebp - 0xac], 0
jmp 0x4895ef
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 4
jge 0x48962b
mov eax, dword [ebp - 0xac]
and eax, 0x80000001
jns 0x48960a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x48961d
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xac]
mov dword [ebp - 0x1c], ecx
jmp 0x489629
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xac]
mov dword [ebp - 0x1c], edx
jmp 0x4895e0
push 0x497eb8
push 0x497ec0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xb0], 0
jmp 0x489656
mov eax, dword [ebp - 0xb0]
add eax, 1
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 6
jge 0x489693
mov ecx, dword [ebp - 0xb0]
and ecx, 0x80000001
jns 0x489672
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x489685
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], edx
jmp 0x489691
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], eax
jmp 0x489647
push 0x497ec8
push 0x497ed0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xb4], 0
mov ecx, 1
test ecx, ecx
je 0x4896f7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4896d9
jmp 0x4896f7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb4]
add eax, 1
mov dword [ebp - 0xb4], eax
jmp 0x4896ad
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xbc], 7
mov dword [ebp - 0xc0], 0
jmp 0x48972c
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 0
jge 0x489765
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489756
mov edx, dword [ebp - 0xbc]
sub edx, 1
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xbc]
mov dword [ebp - 0x1c], eax
jmp 0x48971d
mov dword [ebp - 4], 0xfffffffe
jmp 0x48979d
mov dword [ebp - 0xc4], 0
jmp 0x4897b8
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 5
jge 0x4897f4
mov eax, dword [ebp - 0xc4]
and eax, 0x80000001
jns 0x4897d3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4897e6
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], ecx
jmp 0x4897f2
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], edx
jmp 0x4897a9
push 0x497ed8
push 0x497ee0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xc8], 0
jmp 0x48981f
mov eax, dword [ebp - 0xc8]
add eax, 1
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 5
jge 0x48985c
mov ecx, dword [ebp - 0xc8]
and ecx, 0x80000001
jns 0x48983b
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x48984e
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], edx
jmp 0x48985a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], eax
jmp 0x489810
push 0x497ee8
push 0x497ef0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xcc], 0
jmp 0x489887
mov ecx, dword [ebp - 0xcc]
add ecx, 1
mov dword [ebp - 0xcc], ecx
cmp dword [ebp - 0xcc], 1
jge 0x4898be
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0xcc]
mov dword [ebp - 0x1c], edx
jge 0x4898a6
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4898bc
mov dword [ebp - 0x1c], 0
jmp 0x489878
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xd0], 7
mov dword [ebp - 0xd4], 0
jmp 0x4898ea
mov edx, dword [ebp - 0xd4]
add edx, 1
mov dword [ebp - 0xd4], edx
cmp dword [ebp - 0xd4], 7
jge 0x489923
mov eax, dword [ebp - 0xd4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x489914
mov edx, dword [ebp - 0xd0]
sub edx, 1
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xd0]
mov dword [ebp - 0x1c], eax
jmp 0x4898db
mov dword [ebp - 4], 0xfffffffe
jmp 0x48995b
mov dword [ebp - 0xd8], 0
mov edx, 1
test edx, edx
je 0x4899af
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x489991
jmp 0x4899af
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd8]
add eax, 1
mov dword [ebp - 0xd8], eax
jmp 0x489965
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xe0], 0
jmp 0x4899da
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 1
jge 0x489a19
mov eax, dword [ebp - 0xe0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489a09
mov eax, dword [ebp - 0xe0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x489a14
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x489a17
mov dword [ebp - 0x1c], eax
jmp 0x4899cb
mov dword [ebp - 4], 0xfffffffe
call fcn.00489a27
jmp 0x489a2f
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xe4], 0
jmp 0x489a51
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 2
jge 0x489a90
mov eax, dword [ebp - 0xe4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489a80
mov eax, dword [ebp - 0xe4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x489a8b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x489a8e
mov dword [ebp - 0x1c], eax
jmp 0x489a42
mov dword [ebp - 4], 0xfffffffe
call fcn.00489a9e
jmp 0x489aa6
mov dword [ebp - 0xe8], 0
jmp 0x489ac1
mov edx, dword [ebp - 0xe8]
add edx, 1
mov dword [ebp - 0xe8], edx
cmp dword [ebp - 0xe8], 5
jge 0x489ad9
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], eax
jmp 0x489ab2
cmp dword [ebp - 0x1c], 0
jle 0x489ae8
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x489afe
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xec], 0
jmp 0x489b1c
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 7
jge 0x489b58
mov eax, dword [ebp - 0xec]
and eax, 0x80000001
jns 0x489b37
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x489b4a
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xec]
mov dword [ebp - 0x1c], ecx
jmp 0x489b56
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xec]
mov dword [ebp - 0x1c], edx
jmp 0x489b0d
push 0x497ef8
push 0x497f00
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xf0], 0
mov eax, 1
test eax, eax
je 0x489bbc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x489b9e
jmp 0x489bbc
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xf0]
add eax, 1
mov dword [ebp - 0xf0], eax
jmp 0x489b72
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xf8], 0
jmp 0x489bdd
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 1
jge 0x489bf5
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x489bce
cmp dword [ebp - 0x1c], 0
jle 0x489c04
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x489c1a
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xfc], 0
mov edx, 1
test edx, edx
je 0x489c71
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x489c53
jmp 0x489c71
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xfc]
add eax, 1
mov dword [ebp - 0xfc], eax
jmp 0x489c27
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x104], 0
jmp 0x489c92
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
cmp dword [ebp - 0x104], 5
jge 0x489cce
mov eax, dword [ebp - 0x104]
and eax, 0x80000001
jns 0x489cad
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x489cc0
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x104]
mov dword [ebp - 0x1c], ecx
jmp 0x489ccc
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x104]
mov dword [ebp - 0x1c], edx
jmp 0x489c83
push 0x497f08
push 0x497f10
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x108], 0
mov eax, 1
test eax, eax
je 0x489d32
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x489d14
jmp 0x489d32
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x108]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x108]
add eax, 1
mov dword [ebp - 0x108], eax
jmp 0x489ce8
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x110], 0
jmp 0x489d5d
cmp dword [ebp - 0x110], 8
jge 0x489d9c
mov eax, dword [ebp - 0x110]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x489d8c
mov eax, dword [ebp - 0x110]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x489d97
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x489d9a
mov dword [ebp - 4], 0xfffffffe
call fcn.00489daa
jmp 0x489db2
mov dword [ebp - 0x114], 0
jmp 0x489dcd