Function at 0x428320
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a3fd0
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffe34
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x24], 0
jmp 0x42837d
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xd
jge 0x4283a7
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42839b
mov edx, dword [ebp - 0x20]
sub edx, 1
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x428374
mov dword [ebp - 4], 0xfffffffe
jmp 0x4283df
mov dword [ebp - 0x28], 0
jmp 0x4283f1
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 7
jge 0x428402
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x4283e8
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x428414
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42842c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0
jmp 0x42843e
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x15
jge 0x42846f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jge 0x428457
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42846d
mov dword [ebp - 0x1c], 0
jmp 0x428435
mov dword [ebp - 4], 1
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], 0
jmp 0x42848f
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 2
jge 0x4284b9
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4284ad
mov edx, dword [ebp - 0x30]
sub edx, 1
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x428486
mov dword [ebp - 4], 0xfffffffe
jmp 0x4284f1
mov dword [ebp - 4], 2
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x3c], 0
jmp 0x428511
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0xd
jge 0x42853b
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42852f
mov edx, dword [ebp - 0x38]
sub edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x428508
mov dword [ebp - 4], 0xfffffffe
jmp 0x428573
mov dword [ebp - 0x40], 0
jmp 0x428585
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x1e
jge 0x4285b5
mov eax, dword [ebp - 0x40]
and eax, 0x80000001
jns 0x42859a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4285aa
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], ecx
jmp 0x4285b3
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
jmp 0x42857c
push 0x4a1708
push 0x4a1710
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x44], 0
jmp 0x4285d7
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xb
jge 0x4285e8
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], ecx
jmp 0x4285ce
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4285fa
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x428612
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], 0
jmp 0x428624
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x10
jge 0x428635
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
jmp 0x42861b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x428647
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x42865f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], 0
jmp 0x428671
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 3
jge 0x4286a1
mov eax, dword [ebp - 0x4c]
and eax, 0x80000001
jns 0x428686
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x428696
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], ecx
jmp 0x42869f
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], edx
jmp 0x428668
push 0x4a1718
push 0x4a1720
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x50], 0
jmp 0x4286c3
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x4286f4
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], ecx
jge 0x4286dc
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4286f2
mov dword [ebp - 0x1c], 0
jmp 0x4286ba
mov dword [ebp - 4], 3
mov dword [ebp - 0x54], 0
jmp 0x42870d
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 4
jge 0x428743
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x428733
mov eax, dword [ebp - 0x54]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x42873e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x428741
mov dword [ebp - 0x1c], eax
jmp 0x428704
mov dword [ebp - 4], 0xfffffffe
call fcn.00428751
jmp 0x428759
mov dword [ebp - 4], 4
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x5c], 0
jmp 0x428779
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 0xc
jge 0x4287a3
mov eax, dword [ebp - 0x5c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428797
mov edx, dword [ebp - 0x58]
sub edx, 1
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
jmp 0x428770
mov dword [ebp - 4], 0xfffffffe
jmp 0x4287db
mov dword [ebp - 4], 5
mov dword [ebp - 0x60], 7
mov dword [ebp - 0x64], 0
jmp 0x4287fb
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 3
jge 0x428825
mov eax, dword [ebp - 0x64]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428819
mov edx, dword [ebp - 0x60]
sub edx, 1
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x60]
mov dword [ebp - 0x1c], eax
jmp 0x4287f2
mov dword [ebp - 4], 0xfffffffe
jmp 0x42885d
mov dword [ebp - 0x68], 0
jmp 0x42886f
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 5
jge 0x42889f
mov eax, dword [ebp - 0x68]
and eax, 0x80000001
jns 0x428884
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x428894
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], ecx
jmp 0x42889d
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], edx
jmp 0x428866
push 0x4a1728
push 0x4a1730
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x6c], 0
jmp 0x4288c1
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x4288f2
mov ecx, dword [ebp - 0x6c]
and ecx, 0x80000001
jns 0x4288d7
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x4288e7
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], edx
jmp 0x4288f0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], eax
jmp 0x4288b8
push 0x4a1738
push 0x4a1740
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x70], 0
mov ecx, 1
test ecx, ecx
je 0x428944
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x42892f
jmp 0x428944
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
jmp 0x428909
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], 0
jmp 0x42896d
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0xd
jge 0x428997
mov eax, dword [ebp - 0x7c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42898b
mov edx, dword [ebp - 0x78]
sub edx, 1
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
jmp 0x428964
mov dword [ebp - 4], 0xfffffffe
jmp 0x4289cf
mov dword [ebp - 4], 7
mov dword [ebp - 0x80], 7
mov dword [ebp - 0x84], 0
jmp 0x4289f8
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 5
jge 0x428a28
mov eax, dword [ebp - 0x84]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428a1c
mov edx, dword [ebp - 0x80]
sub edx, 1
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x80]
mov dword [ebp - 0x1c], eax
jmp 0x4289e9
mov dword [ebp - 4], 0xfffffffe
jmp 0x428a60
mov dword [ebp - 0x88], 0
mov edx, 1
test edx, edx
je 0x428ab4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x428a96
jmp 0x428ab4
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x88]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x88]
add eax, 1
mov dword [ebp - 0x88], eax
jmp 0x428a6a
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x90], 0
jmp 0x428ad5
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 2
jge 0x428b11
mov eax, dword [ebp - 0x90]
and eax, 0x80000001
jns 0x428af0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x428b03
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x90]
mov dword [ebp - 0x1c], ecx
jmp 0x428b0f
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x90]
mov dword [ebp - 0x1c], edx
jmp 0x428ac6
push 0x4a1748
push 0x4a1750
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x94], 0
jmp 0x428b3c
mov eax, dword [ebp - 0x94]
add eax, 1
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 9
jge 0x428b54
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], ecx
jmp 0x428b2d
cmp dword [ebp - 0x1c], 0
jle 0x428b63
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x428b79
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x98], 0
jmp 0x428b97
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 1
jge 0x428baf
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x98]
mov dword [ebp - 0x1c], eax
jmp 0x428b88
cmp dword [ebp - 0x1c], 0
jle 0x428bbe
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x428bd4
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x9c], 0
mov edx, 1
test edx, edx
je 0x428c2b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x428c0d
jmp 0x428c2b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x9c]
add eax, 1
mov dword [ebp - 0x9c], eax
jmp 0x428be1
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xa4], 0
jmp 0x428c4f
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 8
jge 0x428c8b
mov eax, dword [ebp - 0xa4]
and eax, 0x80000001
jns 0x428c6a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x428c7d
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], ecx
jmp 0x428c89
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], edx
jmp 0x428c40
push 0x4a1758
push 0x4a1760
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xa8], 0
jmp 0x428cb6
mov eax, dword [ebp - 0xa8]
add eax, 1
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 7
jge 0x428ced
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], ecx
jge 0x428cd5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428ceb
mov dword [ebp - 0x1c], 0
jmp 0x428ca7
mov dword [ebp - 0xac], 0
jmp 0x428d08
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 8
jge 0x428d20
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xac]
mov dword [ebp - 0x1c], eax
jmp 0x428cf9
cmp dword [ebp - 0x1c], 0
jle 0x428d2f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x428d45
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xb0], 0
jmp 0x428d63
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0xb0], 7
jge 0x428d7b
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], eax
jmp 0x428d54
cmp dword [ebp - 0x1c], 0
jle 0x428d8a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x428da0
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xb4], 0
jmp 0x428dbe
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 5
jge 0x428df5
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], eax
jge 0x428ddd
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428df3
mov dword [ebp - 0x1c], 0
jmp 0x428daf
mov dword [ebp - 4], 8
mov dword [ebp - 0xb8], 7
mov dword [ebp - 0xbc], 0
jmp 0x428e21
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 6
jge 0x428e5a
mov eax, dword [ebp - 0xbc]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428e4b
mov edx, dword [ebp - 0xb8]
sub edx, 1
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xb8]
mov dword [ebp - 0x1c], eax
jmp 0x428e12
mov dword [ebp - 4], 0xfffffffe
jmp 0x428e92
mov dword [ebp - 0xc0], 0
jmp 0x428ead
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 8
jge 0x428ee9
mov eax, dword [ebp - 0xc0]
and eax, 0x80000001
jns 0x428ec8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x428edb
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], ecx
jmp 0x428ee7
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], edx
jmp 0x428e9e
push 0x4a1768
push 0x4a1770
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 9
mov dword [ebp - 0xc4], 0
jmp 0x428f1b
mov eax, dword [ebp - 0xc4]
add eax, 1
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x428f5a
mov eax, dword [ebp - 0xc4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x428f4a
mov eax, dword [ebp - 0xc4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x428f55
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x428f58
mov dword [ebp - 0x1c], eax
jmp 0x428f0c
mov dword [ebp - 4], 0xfffffffe
call fcn.00428f68
jmp 0x428f70
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xc8], 7
mov dword [ebp - 0xcc], 0
jmp 0x428f9c
mov edx, dword [ebp - 0xcc]
add edx, 1
mov dword [ebp - 0xcc], edx
cmp dword [ebp - 0xcc], 4
jge 0x428fd5
mov eax, dword [ebp - 0xcc]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x428fc6
mov edx, dword [ebp - 0xc8]
sub edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xc8]
mov dword [ebp - 0x1c], eax
jmp 0x428f8d
mov dword [ebp - 4], 0xfffffffe
jmp 0x42900d
mov dword [ebp - 0xd0], 0
jmp 0x429028
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 4
jge 0x42905f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], eax
jge 0x429047
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x42905d
mov dword [ebp - 0x1c], 0
jmp 0x429019
mov dword [ebp - 0xd4], 0
jmp 0x42907a
mov edx, dword [ebp - 0xd4]
add edx, 1
mov dword [ebp - 0xd4], edx
cmp dword [ebp - 0xd4], 1
jge 0x429091
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], eax
jmp 0x42906b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4290a3
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4290bb
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xd8], 0
jmp 0x4290dd
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 5
jge 0x42911c
mov eax, dword [ebp - 0xd8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x42910c
mov eax, dword [ebp - 0xd8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x429117
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x42911a
mov dword [ebp - 0x1c], eax
jmp 0x4290ce
mov dword [ebp - 4], 0xfffffffe
call fcn.0042912a
jmp 0x429132
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xdc], 7
mov dword [ebp - 0xe0], 0
jmp 0x42915e
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 1
jge 0x429197
mov eax, dword [ebp - 0xe0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429188
mov edx, dword [ebp - 0xdc]
sub edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xdc]
mov dword [ebp - 0x1c], eax
jmp 0x42914f
mov dword [ebp - 4], 0xfffffffe
jmp 0x4291cf
mov dword [ebp - 0xe4], 0
jmp 0x4291ea
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 3
jge 0x429226
mov eax, dword [ebp - 0xe4]
and eax, 0x80000001
jns 0x429205
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x429218
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], ecx
jmp 0x429224
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], edx
jmp 0x4291db
push 0x4a1778
push 0x4a1780
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xe8], 0
jmp 0x429251
mov eax, dword [ebp - 0xe8]
add eax, 1
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 6
jge 0x429269
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], ecx
jmp 0x429242
cmp dword [ebp - 0x1c], 0
jle 0x429278
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x42928e
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xec], 0
jmp 0x4292ac
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 6
jge 0x4292e8
mov eax, dword [ebp - 0xec]
and eax, 0x80000001
jns 0x4292c7
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4292da
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xec]
mov dword [ebp - 0x1c], ecx
jmp 0x4292e6
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xec]
mov dword [ebp - 0x1c], edx
jmp 0x42929d
push 0x4a1788
push 0x4a1790
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xf0], 0
jmp 0x42931a
mov eax, dword [ebp - 0xf0]
add eax, 1
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 8
jge 0x429359
mov eax, dword [ebp - 0xf0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x429349
mov eax, dword [ebp - 0xf0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x429354
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x429357
mov dword [ebp - 0x1c], eax
jmp 0x42930b
mov dword [ebp - 4], 0xfffffffe
call fcn.00429367
jmp 0x42936f
mov dword [ebp - 0xf4], 0
jmp 0x42938a
mov edx, dword [ebp - 0xf4]
add edx, 1
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], 1
jge 0x4293c1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xf4]
mov dword [ebp - 0x1c], eax
jge 0x4293a9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4293bf
mov dword [ebp - 0x1c], 0
jmp 0x42937b
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xf8], 7
mov dword [ebp - 0xfc], 0
jmp 0x4293ed
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 5
jge 0x429426
mov eax, dword [ebp - 0xfc]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429417
mov edx, dword [ebp - 0xf8]
sub edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x4293de
mov dword [ebp - 4], 0xfffffffe
jmp 0x42945e
mov dword [ebp - 0x100], 0
mov edx, 1
test edx, edx
je 0x4294b2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x429494
jmp 0x4294b2
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x100]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x100]
add eax, 1
mov dword [ebp - 0x100], eax
jmp 0x429468
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x10c], 0
jmp 0x4294e7
mov edx, dword [ebp - 0x10c]
add edx, 1
mov dword [ebp - 0x10c], edx
cmp dword [ebp - 0x10c], 5
jge 0x429520
mov eax, dword [ebp - 0x10c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x429511
mov edx, dword [ebp - 0x108]
sub edx, 1
mov dword [ebp - 0x108], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x108]
mov dword [ebp - 0x1c], eax
jmp 0x4294d8
mov dword [ebp - 4], 0xfffffffe
jmp 0x429558
mov dword [ebp - 0x110], 0
jmp 0x429573
mov edx, dword [ebp - 0x110]
add edx, 1
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 0
jge 0x4295af
mov eax, dword [ebp - 0x110]
and eax, 0x80000001
jns 0x42958e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4295a1
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x110]
mov dword [ebp - 0x1c], ecx
jmp 0x4295ad
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x110]
mov dword [ebp - 0x1c], edx
jmp 0x429564
push 0x4a1798
push 0x4a17a0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x114], 0
jmp 0x4295da
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 5
jge 0x429617
mov ecx, dword [ebp - 0x114]
and ecx, 0x80000001
jns 0x4295f6
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x429609
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x114]
mov dword [ebp - 0x1c], edx
jmp 0x429615
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x114]
mov dword [ebp - 0x1c], eax
jmp 0x4295cb
push 0x4a17a8
push 0x4a17b0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x118], 0
jmp 0x429642
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
cmp dword [ebp - 0x118], 0
jge 0x42965a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x118]
mov dword [ebp - 0x1c], edx
jmp 0x429633
cmp dword [ebp - 0x1c], 0
jle 0x429669
mov eax, dword [ebp - 0x1c]
imul eax, eax, 5
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x42967f
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x11c], 0
jmp 0x42969d
cmp dword [ebp - 0x11c], 3
jge 0x4296b4
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1c], eax
jmp 0x42968e
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4296c6