Function at 0x463b10
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a63e8
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffebc
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov eax, 1
test eax, eax
je 0x463b8f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x463b7a
jmp 0x463b8f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x463b54
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2d
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], 0
jmp 0x463baa
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x22
jge 0x463bdb
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jge 0x463bc3
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463bd9
mov dword [ebp - 0x1c], 0
jmp 0x463ba1
mov dword [ebp - 0x2c], 0
mov edx, 1
test edx, edx
je 0x463c1d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x463c08
jmp 0x463c1d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x463be2
mov ecx, dword [ebp - 0x1c]
add ecx, 0x40
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], 0
jmp 0x463c38
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 9
jge 0x463c4a
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
jmp 0x463c2f
cmp dword [ebp - 0x1c], 0
jle 0x463c59
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x463c6f
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x38], 0
jmp 0x463c84
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0x1c
jge 0x463c96
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
jmp 0x463c7b
cmp dword [ebp - 0x1c], 0
jle 0x463ca5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x463cbb
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 0
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x40], 0
jmp 0x463cde
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xd
jge 0x463d08
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463cfc
mov edx, dword [ebp - 0x3c]
sub edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x463cd5
mov dword [ebp - 4], 0xfffffffe
jmp 0x463d40
mov dword [ebp - 4], 1
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], 0
jmp 0x463d60
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x17
jge 0x463d8a
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463d7e
mov edx, dword [ebp - 0x44]
sub edx, 1
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x463d57
mov dword [ebp - 4], 0xfffffffe
jmp 0x463dc2
mov dword [ebp - 4], 2
mov dword [ebp - 0x4c], 7
mov dword [ebp - 0x50], 0
jmp 0x463de2
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 6
jge 0x463e0c
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463e00
mov edx, dword [ebp - 0x4c]
sub edx, 1
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
jmp 0x463dd9
mov dword [ebp - 4], 0xfffffffe
jmp 0x463e44
mov dword [ebp - 4], 3
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x58], 0
jmp 0x463e64
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 4
jge 0x463e8e
mov eax, dword [ebp - 0x58]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463e82
mov edx, dword [ebp - 0x54]
sub edx, 1
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x54]
mov dword [ebp - 0x1c], eax
jmp 0x463e5b
mov dword [ebp - 4], 0xfffffffe
jmp 0x463ec6
mov dword [ebp - 4], 4
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x60], 0
jmp 0x463ee6
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 7
jge 0x463f10
mov eax, dword [ebp - 0x60]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x463f04
mov edx, dword [ebp - 0x5c]
sub edx, 1
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
jmp 0x463edd
mov dword [ebp - 4], 0xfffffffe
jmp 0x463f48
mov dword [ebp - 0x64], 0
mov edx, 1
test edx, edx
je 0x463f8a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x463f75
jmp 0x463f8a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x64]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
jmp 0x463f4f
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6c], 0
jmp 0x463fa5
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 3
jge 0x463fd5
mov eax, dword [ebp - 0x6c]
and eax, 0x80000001
jns 0x463fba
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x463fca
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], ecx
jmp 0x463fd3
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], edx
jmp 0x463f9c
push 0x498bc8
push 0x498bd0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x70], 0
jmp 0x463ff7
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xb
jge 0x464028
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], ecx
jge 0x464010
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464026
mov dword [ebp - 0x1c], 0
jmp 0x463fee
mov dword [ebp - 4], 5
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], 0
jmp 0x464048
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0x10
jge 0x464072
mov eax, dword [ebp - 0x78]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464066
mov edx, dword [ebp - 0x74]
sub edx, 1
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x74]
mov dword [ebp - 0x1c], eax
jmp 0x46403f
mov dword [ebp - 4], 0xfffffffe
jmp 0x4640aa
mov dword [ebp - 0x7c], 0
jmp 0x4640bc
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0xd
jge 0x4640cd
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jmp 0x4640b3
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4640df
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x4640f7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x80], 0
mov edx, 1
test edx, edx
je 0x46413f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46412a
jmp 0x46413f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x80]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
jmp 0x4640fe
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x88], 0
jmp 0x464163
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 0xa
jge 0x46419a
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jge 0x464182
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464198
mov dword [ebp - 0x1c], 0
jmp 0x464154
mov dword [ebp - 0x8c], 0
jmp 0x4641b5
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 0xb
jge 0x4641f1
mov eax, dword [ebp - 0x8c]
and eax, 0x80000001
jns 0x4641d0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4641e3
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], ecx
jmp 0x4641ef
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], edx
jmp 0x4641a6
push 0x498bd8
push 0x498be0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 6
mov dword [ebp - 0x90], 0
jmp 0x464223
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xc
jge 0x464262
mov eax, dword [ebp - 0x90]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464252
mov eax, dword [ebp - 0x90]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46425d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464260
mov dword [ebp - 0x1c], eax
jmp 0x464214
mov dword [ebp - 4], 0xfffffffe
call fcn.00464270
jmp 0x464278
mov dword [ebp - 0x94], 0
jmp 0x464293
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 2
jge 0x4642ca
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x94]
mov dword [ebp - 0x1c], eax
jge 0x4642b2
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4642c8
mov dword [ebp - 0x1c], 0
jmp 0x464284
mov dword [ebp - 4], 7
mov dword [ebp - 0x98], 0
jmp 0x4642ec
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 9
jge 0x46432b
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46431b
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464326
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464329
mov dword [ebp - 0x1c], eax
jmp 0x4642dd
mov dword [ebp - 4], 0xfffffffe
call fcn.00464339
jmp 0x464341
mov dword [ebp - 4], 8
mov dword [ebp - 0x9c], 0
jmp 0x464363
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
cmp dword [ebp - 0x9c], 0xa
jge 0x4643a2
mov eax, dword [ebp - 0x9c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464392
mov eax, dword [ebp - 0x9c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46439d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4643a0
mov dword [ebp - 0x1c], eax
jmp 0x464354
mov dword [ebp - 4], 0xfffffffe
call fcn.004643b0
jmp 0x4643b8
mov dword [ebp - 0xa0], 0
jmp 0x4643d3
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 8
jge 0x4643eb
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], eax
jmp 0x4643c4
cmp dword [ebp - 0x1c], 0
jle 0x4643fa
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x464410
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 9
mov dword [ebp - 0xa4], 0
jmp 0x464435
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 7
jge 0x464474
mov eax, dword [ebp - 0xa4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464464
mov eax, dword [ebp - 0xa4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46446f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464472
mov dword [ebp - 0x1c], eax
jmp 0x464426
mov dword [ebp - 4], 0xfffffffe
call fcn.00464482
jmp 0x46448a
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xa8], 0
jmp 0x4644ac
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 8
jge 0x4644eb
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4644db
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4644e6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4644e9
mov dword [ebp - 0x1c], eax
jmp 0x46449d
mov dword [ebp - 4], 0xfffffffe
call fcn.004644f9
jmp 0x464501
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xac], 0
jmp 0x464523
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 0
jge 0x464562
mov eax, dword [ebp - 0xac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464552
mov eax, dword [ebp - 0xac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46455d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464560
mov dword [ebp - 0x1c], eax
jmp 0x464514
mov dword [ebp - 4], 0xfffffffe
call fcn.00464570
jmp 0x464578
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xb0], 0
jmp 0x46459a
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0xb0], 6
jge 0x4645d9
mov eax, dword [ebp - 0xb0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4645c9
mov eax, dword [ebp - 0xb0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4645d4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4645d7
mov dword [ebp - 0x1c], eax
jmp 0x46458b
mov dword [ebp - 4], 0xfffffffe
call fcn.004645e7
jmp 0x4645ef
mov dword [ebp - 0xb4], 0
mov edx, 1
test edx, edx
je 0x464643
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x464625
jmp 0x464643
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb4]
add eax, 1
mov dword [ebp - 0xb4], eax
jmp 0x4645f9
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xbc], 0
mov edx, 1
test edx, edx
je 0x4646a0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x464682
jmp 0x4646a0
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xbc]
add eax, 1
mov dword [ebp - 0xbc], eax
jmp 0x464656
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xc4], 0
jmp 0x4646c4
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 2
jge 0x4646db
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
jmp 0x4646b5
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4646ed
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x464705
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc8], 0
mov edx, 1
test edx, edx
je 0x464759
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46473b
jmp 0x464759
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc8]
add eax, 1
mov dword [ebp - 0xc8], eax
jmp 0x46470f
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xd0], 0
jmp 0x46477d
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 8
jge 0x4647b9
mov eax, dword [ebp - 0xd0]
and eax, 0x80000001
jns 0x464798
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4647ab
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], ecx
jmp 0x4647b7
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xd0]
mov dword [ebp - 0x1c], edx
jmp 0x46476e
push 0x498be8
push 0x498bf0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xd4], 0
jmp 0x4647e4
mov eax, dword [ebp - 0xd4]
add eax, 1
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jge 0x46481b
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], ecx
jge 0x464803
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464819
mov dword [ebp - 0x1c], 0
jmp 0x4647d5
mov dword [ebp - 0xd8], 0
mov edx, 1
test edx, edx
je 0x46486f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x464851
jmp 0x46486f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xd8]
add eax, 1
mov dword [ebp - 0xd8], eax
jmp 0x464825
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], 0
jmp 0x4648a4
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 6
jge 0x4648dd
mov eax, dword [ebp - 0xe4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4648ce
mov edx, dword [ebp - 0xe0]
sub edx, 1
mov dword [ebp - 0xe0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xe0]
mov dword [ebp - 0x1c], eax
jmp 0x464895
mov dword [ebp - 4], 0xfffffffe
jmp 0x464915
mov dword [ebp - 0xe8], 0
jmp 0x464930
mov edx, dword [ebp - 0xe8]
add edx, 1
mov dword [ebp - 0xe8], edx
cmp dword [ebp - 0xe8], 8
jge 0x46496c
mov eax, dword [ebp - 0xe8]
and eax, 0x80000001
jns 0x46494b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x46495e
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], ecx
jmp 0x46496a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], edx
jmp 0x464921
push 0x498bf8
push 0x498c00
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xec], 7
mov dword [ebp - 0xf0], 0
jmp 0x4649a8
mov eax, dword [ebp - 0xf0]
add eax, 1
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 8
jge 0x4649e1
mov eax, dword [ebp - 0xf0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4649d2
mov edx, dword [ebp - 0xec]
sub edx, 1
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xec]
mov dword [ebp - 0x1c], eax
jmp 0x464999
mov dword [ebp - 4], 0xfffffffe
jmp 0x464a19
mov dword [ebp - 0xf4], 0
mov edx, 1
test edx, edx
je 0x464a6d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x464a4f
jmp 0x464a6d
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xf4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xf4]
add eax, 1
mov dword [ebp - 0xf4], eax
jmp 0x464a23
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xfc], 0
jmp 0x464a98
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 3
jge 0x464ad7
mov eax, dword [ebp - 0xfc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464ac7
mov eax, dword [ebp - 0xfc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464ad2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464ad5
mov dword [ebp - 0x1c], eax
jmp 0x464a89
mov dword [ebp - 4], 0xfffffffe
call fcn.00464ae5
jmp 0x464aed
mov dword [ebp - 0x100], 0
jmp 0x464b08
mov edx, dword [ebp - 0x100]
add edx, 1
mov dword [ebp - 0x100], edx
cmp dword [ebp - 0x100], 4
jge 0x464b20
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x100]
mov dword [ebp - 0x1c], eax
jmp 0x464af9
cmp dword [ebp - 0x1c], 0
jle 0x464b2f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x464b45
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x104], 0
jmp 0x464b63
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
cmp dword [ebp - 0x104], 0
jge 0x464b7b
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
jmp 0x464b54
cmp dword [ebp - 0x1c], 0
jle 0x464b8a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x464ba0
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x108], 0
jmp 0x464bbe
mov edx, dword [ebp - 0x108]
add edx, 1
mov dword [ebp - 0x108], edx
cmp dword [ebp - 0x108], 0
jge 0x464bd6
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x108]
mov dword [ebp - 0x1c], eax
jmp 0x464baf
cmp dword [ebp - 0x1c], 0
jle 0x464be5
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x464bfb
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x10c], 0
jmp 0x464c20
mov edx, dword [ebp - 0x10c]
add edx, 1
mov dword [ebp - 0x10c], edx
cmp dword [ebp - 0x10c], 2
jge 0x464c5f
mov eax, dword [ebp - 0x10c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x464c4f
mov eax, dword [ebp - 0x10c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x464c5a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x464c5d
mov dword [ebp - 0x1c], eax
jmp 0x464c11
mov dword [ebp - 4], 0xfffffffe
call fcn.00464c6d
jmp 0x464c75
mov dword [ebp - 0x110], 0
mov edx, 1
test edx, edx
je 0x464cc9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x464cab
jmp 0x464cc9
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x110]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x110]
add eax, 1
mov dword [ebp - 0x110], eax
jmp 0x464c7f
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x118], 0
jmp 0x464ced
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
cmp dword [ebp - 0x118], 4
jge 0x464d29
mov eax, dword [ebp - 0x118]
and eax, 0x80000001
jns 0x464d08
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x464d1b
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x118]
mov dword [ebp - 0x1c], ecx
jmp 0x464d27
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x118]
mov dword [ebp - 0x1c], edx
jmp 0x464cde
push 0x498c08
push 0x498c10
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x11c], 7
mov dword [ebp - 0x120], 0
jmp 0x464d65
mov eax, dword [ebp - 0x120]
add eax, 1
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 4
jge 0x464d9e
mov eax, dword [ebp - 0x120]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464d8f
mov edx, dword [ebp - 0x11c]
sub edx, 1
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x11c]
mov dword [ebp - 0x1c], eax
jmp 0x464d56
mov dword [ebp - 4], 0xfffffffe
jmp 0x464dd6
mov dword [ebp - 0x124], 0
mov edx, 1
test edx, edx
je 0x464e2a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x464e0c
jmp 0x464e2a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x124]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x124]
add eax, 1
mov dword [ebp - 0x124], eax
jmp 0x464de0
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x12c], 0
jmp 0x464e4e
mov edx, dword [ebp - 0x12c]
add edx, 1
mov dword [ebp - 0x12c], edx
cmp dword [ebp - 0x12c], 1
jge 0x464e65
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1c], eax
jmp 0x464e3f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x464e77
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x464e8f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x130], 0
jmp 0x464eaa
mov edx, dword [ebp - 0x130]
add edx, 1
mov dword [ebp - 0x130], edx
cmp dword [ebp - 0x130], 4
jge 0x464ec2
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x130]
mov dword [ebp - 0x1c], eax
jmp 0x464e9b
cmp dword [ebp - 0x1c], 0
jle 0x464ed1
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x464ee7
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x134], 7
mov dword [ebp - 0x138], 0
jmp 0x464f16
cmp dword [ebp - 0x138], 4
jge 0x464f4f
mov eax, dword [ebp - 0x138]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x464f40
mov edx, dword [ebp - 0x134]
sub edx, 1
mov dword [ebp - 0x134], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x134]
mov dword [ebp - 0x1c], eax
jmp 0x464f07
mov dword [ebp - 4], 0xfffffffe
jmp 0x464f87
mov dword [ebp - 0x13c], 0
jmp 0x464fa2