Function at 0x4651a0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a64e8
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffdbc
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x4651ef
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x17
jge 0x465200
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jmp 0x4651e6
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x465212
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46522a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
jmp 0x46523c
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x38
jge 0x46526d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jge 0x465255
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46526b
mov dword [ebp - 0x1c], 0
jmp 0x465233
mov dword [ebp - 0x28], 0
jmp 0x46527f
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x3a
jge 0x465291
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x465276
cmp dword [ebp - 0x1c], 0
jle 0x4652a0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4652b6
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x2c], 0
jmp 0x4652cb
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x23
jge 0x4652dd
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x4652c2
cmp dword [ebp - 0x1c], 0
jle 0x4652ec
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x465302
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x30], 0
jmp 0x465317
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 7
jge 0x465329
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x46530e
cmp dword [ebp - 0x1c], 0
jle 0x465338
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46534e
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x34], 0
mov edx, 1
test edx, edx
je 0x465393
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46537e
jmp 0x465393
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
jmp 0x465358
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x40], 0
jmp 0x4653bc
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xb
jge 0x4653e6
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4653da
mov edx, dword [ebp - 0x3c]
sub edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x4653b3
mov dword [ebp - 4], 0xfffffffe
jmp 0x46541e
mov dword [ebp - 0x44], 0
jmp 0x465430
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 7
jge 0x465441
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x465427
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x465453
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46546b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x48], 0
jmp 0x465484
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 5
jge 0x4654ba
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4654aa
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4654b5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4654b8
mov dword [ebp - 0x1c], eax
jmp 0x46547b
mov dword [ebp - 4], 0xfffffffe
call fcn.004654c8
jmp 0x4654d0
mov dword [ebp - 0x4c], 0
jmp 0x4654e2
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0xb
jge 0x465512
mov eax, dword [ebp - 0x4c]
and eax, 0x80000001
jns 0x4654f7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x465507
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], ecx
jmp 0x465510
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], edx
jmp 0x4654d9
push 0x498b38
push 0x498b40
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x50], 0
jmp 0x465534
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 8
jge 0x465545
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], ecx
jmp 0x46552b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x465557
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46556f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x54], 0
jmp 0x465588
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 9
jge 0x4655be
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4655ae
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4655b9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4655bc
mov dword [ebp - 0x1c], eax
jmp 0x46557f
mov dword [ebp - 4], 0xfffffffe
call fcn.004655cc
jmp 0x4655d4
mov dword [ebp - 0x58], 0
mov edx, 1
test edx, edx
je 0x465616
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x465601
jmp 0x465616
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x58]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
jmp 0x4655db
mov ecx, dword [ebp - 0x1c]
add ecx, 0xb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x60], 0
jmp 0x465631
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 7
jge 0x465643
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x60]
mov dword [ebp - 0x1c], eax
jmp 0x465628
cmp dword [ebp - 0x1c], 0
jle 0x465652
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x465668
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 3
mov dword [ebp - 0x64], 7
mov dword [ebp - 0x68], 0
jmp 0x46568b
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 7
jge 0x4656b5
mov eax, dword [ebp - 0x68]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4656a9
mov edx, dword [ebp - 0x64]
sub edx, 1
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x64]
mov dword [ebp - 0x1c], eax
jmp 0x465682
mov dword [ebp - 4], 0xfffffffe
jmp 0x4656ed
mov dword [ebp - 4], 4
mov dword [ebp - 0x6c], 0
jmp 0x465706
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 4
jge 0x46573c
mov eax, dword [ebp - 0x6c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46572c
mov eax, dword [ebp - 0x6c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x465737
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46573a
mov dword [ebp - 0x1c], eax
jmp 0x4656fd
mov dword [ebp - 4], 0xfffffffe
call fcn.0046574a
jmp 0x465752
mov dword [ebp - 0x70], 0
mov edx, 1
test edx, edx
je 0x465794
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46577f
jmp 0x465794
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
jmp 0x465759
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x78], 0
jmp 0x4657af
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0xb
jge 0x4657c1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
jmp 0x4657a6
cmp dword [ebp - 0x1c], 0
jle 0x4657d0
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4657e6
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 5
mov dword [ebp - 0x7c], 7
mov dword [ebp - 0x80], 0
jmp 0x465809
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 0xa
jge 0x465833
mov eax, dword [ebp - 0x80]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465827
mov edx, dword [ebp - 0x7c]
sub edx, 1
mov dword [ebp - 0x7c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jmp 0x465800
mov dword [ebp - 4], 0xfffffffe
jmp 0x46586b
mov dword [ebp - 0x84], 0
jmp 0x465886
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0xb
jge 0x4658bd
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x84]
mov dword [ebp - 0x1c], eax
jge 0x4658a5
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4658bb
mov dword [ebp - 0x1c], 0
jmp 0x465877
mov dword [ebp - 0x88], 0
jmp 0x4658d8
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 6
jge 0x4658ef
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jmp 0x4658c9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x465901
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x465919
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c], 0
mov edx, 1
test edx, edx
je 0x46596d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46594f
jmp 0x46596d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x8c]
add eax, 1
mov dword [ebp - 0x8c], eax
jmp 0x465923
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x94], 0
jmp 0x465991
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 5
jge 0x4659cd
mov eax, dword [ebp - 0x94]
and eax, 0x80000001
jns 0x4659ac
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4659bf
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], ecx
jmp 0x4659cb
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], edx
jmp 0x465982
push 0x498b48
push 0x498b50
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 6
mov dword [ebp - 0x98], 7
mov dword [ebp - 0x9c], 0
jmp 0x465a09
mov eax, dword [ebp - 0x9c]
add eax, 1
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 7
jge 0x465a42
mov eax, dword [ebp - 0x9c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465a33
mov edx, dword [ebp - 0x98]
sub edx, 1
mov dword [ebp - 0x98], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x98]
mov dword [ebp - 0x1c], eax
jmp 0x4659fa
mov dword [ebp - 4], 0xfffffffe
jmp 0x465a7a
mov dword [ebp - 0xa0], 0
jmp 0x465a95
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 5
jge 0x465acc
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], eax
jge 0x465ab4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465aca
mov dword [ebp - 0x1c], 0
jmp 0x465a86
mov dword [ebp - 4], 7
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], 0
jmp 0x465af8
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 2
jge 0x465b31
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465b22
mov edx, dword [ebp - 0xa4]
sub edx, 1
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jmp 0x465ae9
mov dword [ebp - 4], 0xfffffffe
jmp 0x465b69
mov dword [ebp - 0xac], 0
jmp 0x465b84
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 1
jge 0x465b9b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xac]
mov dword [ebp - 0x1c], eax
jmp 0x465b75
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x465bad
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x465bc5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 8
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], 0
jmp 0x465bf1
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 8
jge 0x465c2a
mov eax, dword [ebp - 0xb4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465c1b
mov edx, dword [ebp - 0xb0]
sub edx, 1
mov dword [ebp - 0xb0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xb0]
mov dword [ebp - 0x1c], eax
jmp 0x465be2
mov dword [ebp - 4], 0xfffffffe
jmp 0x465c62
mov dword [ebp - 0xb8], 0
jmp 0x465c7d
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 3
jge 0x465c95
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], eax
jmp 0x465c6e
cmp dword [ebp - 0x1c], 0
jle 0x465ca4
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x465cba
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 9
mov dword [ebp - 0xbc], 7
mov dword [ebp - 0xc0], 0
jmp 0x465ce9
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 3
jge 0x465d22
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465d13
mov edx, dword [ebp - 0xbc]
sub edx, 1
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xbc]
mov dword [ebp - 0x1c], eax
jmp 0x465cda
mov dword [ebp - 4], 0xfffffffe
jmp 0x465d5a
mov dword [ebp - 0xc4], 0
jmp 0x465d75
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 7
jge 0x465dac
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
jge 0x465d94
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465daa
mov dword [ebp - 0x1c], 0
jmp 0x465d66
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xc8], 0
jmp 0x465dce
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 3
jge 0x465e0d
mov eax, dword [ebp - 0xc8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x465dfd
mov eax, dword [ebp - 0xc8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x465e08
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x465e0b
mov dword [ebp - 0x1c], eax
jmp 0x465dbf
mov dword [ebp - 4], 0xfffffffe
call fcn.00465e1b
jmp 0x465e23
mov dword [ebp - 0xcc], 0
jmp 0x465e3e
mov edx, dword [ebp - 0xcc]
add edx, 1
mov dword [ebp - 0xcc], edx
cmp dword [ebp - 0xcc], 4
jge 0x465e56
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xcc]
mov dword [ebp - 0x1c], eax
jmp 0x465e2f
cmp dword [ebp - 0x1c], 0
jle 0x465e65
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x465e7b
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xd0], 0
mov edx, 1
test edx, edx
je 0x465ed2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x465eb4
jmp 0x465ed2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd0]
add eax, 1
mov dword [ebp - 0xd0], eax
jmp 0x465e88
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd8], 0
jmp 0x465ef6
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 0
jge 0x465f2d
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], eax
jge 0x465f15
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465f2b
mov dword [ebp - 0x1c], 0
jmp 0x465ee7
mov dword [ebp - 0xdc], 0
jmp 0x465f48
mov edx, dword [ebp - 0xdc]
add edx, 1
mov dword [ebp - 0xdc], edx
cmp dword [ebp - 0xdc], 1
jge 0x465f7f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], eax
jge 0x465f67
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x465f7d
mov dword [ebp - 0x1c], 0
jmp 0x465f39
mov dword [ebp - 0xe0], 0
jmp 0x465f9a
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 1
jge 0x465fd6
mov eax, dword [ebp - 0xe0]
and eax, 0x80000001
jns 0x465fb5
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x465fc8
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x1c], ecx
jmp 0x465fd4
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe0]
mov dword [ebp - 0x1c], edx
jmp 0x465f8b
push 0x498b58
push 0x498b60
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xe4], 0
jmp 0x466001
mov eax, dword [ebp - 0xe4]
add eax, 1
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 5
jge 0x466019
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], ecx
jmp 0x465ff2
cmp dword [ebp - 0x1c], 0
jle 0x466028
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46603e
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xe8], 0
jmp 0x46605c
mov edx, dword [ebp - 0xe8]
add edx, 1
mov dword [ebp - 0xe8], edx
cmp dword [ebp - 0xe8], 6
jge 0x466073
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], eax
jmp 0x46604d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x466085
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46609d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xec], 0
jmp 0x4660b8
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 1
jge 0x4660d0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xec]
mov dword [ebp - 0x1c], eax
jmp 0x4660a9
cmp dword [ebp - 0x1c], 0
jle 0x4660df
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4660f5
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xf0], 0
mov edx, 1
test edx, edx
je 0x46614c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46612e
jmp 0x46614c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xf0]
add eax, 1
mov dword [ebp - 0xf0], eax
jmp 0x466102
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xf8], 0
jmp 0x46616d
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 5
jge 0x466184
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x46615e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x466196
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4661ae
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xfc], 7
mov dword [ebp - 0x100], 0
jmp 0x4661da
mov edx, dword [ebp - 0x100]
add edx, 1
mov dword [ebp - 0x100], edx
cmp dword [ebp - 0x100], 5
jge 0x466213
mov eax, dword [ebp - 0x100]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x466204
mov edx, dword [ebp - 0xfc]
sub edx, 1
mov dword [ebp - 0xfc], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xfc]
mov dword [ebp - 0x1c], eax
jmp 0x4661cb
mov dword [ebp - 4], 0xfffffffe
jmp 0x46624b
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x104], 0
jmp 0x46626d
cmp dword [ebp - 0x104], 7
jge 0x4662ac
mov eax, dword [ebp - 0x104]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46629c
mov eax, dword [ebp - 0x104]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4662a7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4662aa
mov dword [ebp - 0x1c], eax
jmp 0x46625e
mov dword [ebp - 4], 0xfffffffe
call fcn.004662ba
jmp 0x4662c2
mov dword [ebp - 0x108], 0
jmp 0x4662dd
cmp dword [ebp - 0x108], 2
jge 0x466319