Function at 0x467d90
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a6690
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffe3c
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x24], 0
jmp 0x467ded
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xd
jge 0x467e17
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467e0b
mov edx, dword [ebp - 0x20]
sub edx, 1
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x467de4
mov dword [ebp - 4], 0xfffffffe
jmp 0x467e4f
mov dword [ebp - 0x28], 0
jmp 0x467e61
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 6
jge 0x467e72
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jmp 0x467e58
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x467e84
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x467e9c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
jmp 0x467ebc
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 4
jge 0x467ee6
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x467eda
mov edx, dword [ebp - 0x2c]
sub edx, 1
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x467eb3
mov dword [ebp - 4], 0xfffffffe
jmp 0x467f1e
mov dword [ebp - 0x34], 0
jmp 0x467f30
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 6
jge 0x467f60
mov eax, dword [ebp - 0x34]
and eax, 0x80000001
jns 0x467f45
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x467f55
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], ecx
jmp 0x467f5e
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
jmp 0x467f27
push 0x498a98
push 0x498aa0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 2
mov dword [ebp - 0x38], 0
jmp 0x467f89
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xd
jge 0x467fbf
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x467faf
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x467fba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x467fbd
mov dword [ebp - 0x1c], eax
jmp 0x467f80
mov dword [ebp - 4], 0xfffffffe
call fcn.00467fcd
jmp 0x467fd5
mov dword [ebp - 0x3c], 0
mov edx, 1
test edx, edx
je 0x468017
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x468002
jmp 0x468017
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
jmp 0x467fdc
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x44], 0
jmp 0x46802f
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 4
jge 0x468040
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x468026
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x468052
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46806a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], 0
jmp 0x46807c
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0
jge 0x46808e
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
jmp 0x468073
cmp dword [ebp - 0x1c], 0
jle 0x46809d
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4680b3
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x4c], 0
jmp 0x4680c8
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0
jge 0x4680d9
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
jmp 0x4680bf
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x4680eb
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468103
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x50], 0
jmp 0x468115
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 8
jge 0x468126
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
jmp 0x46810c
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x468138
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x468150
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x54], 0
mov edx, 1
test edx, edx
je 0x468192
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46817d
jmp 0x468192
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x54]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
jmp 0x468157
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x5c], 0
jmp 0x4681ad
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 0x10
jge 0x4681dd
mov eax, dword [ebp - 0x5c]
and eax, 0x80000001
jns 0x4681c2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x4681d2
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], ecx
jmp 0x4681db
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], edx
jmp 0x4681a4
push 0x498aa8
push 0x498ab0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x60], 0
jmp 0x4681ff
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 7
jge 0x468211
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], ecx
jmp 0x4681f6
cmp dword [ebp - 0x1c], 0
jle 0x468220
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x468236
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x64], 0
mov edx, 1
test edx, edx
je 0x46827b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x468266
jmp 0x46827b
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x64]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
jmp 0x468240
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6c], 0
mov edx, 1
test edx, edx
je 0x4682c6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x4682b1
jmp 0x4682c6
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
jmp 0x46828b
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x74], 0
jmp 0x4682e1
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 3
jge 0x468312
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x74]
mov dword [ebp - 0x1c], eax
jge 0x4682fa
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468310
mov dword [ebp - 0x1c], 0
jmp 0x4682d8
mov dword [ebp - 0x78], 0
jmp 0x468324
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 3
jge 0x468335
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
jmp 0x46831b
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x468347
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x46835f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x7c], 0
jmp 0x468371
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 8
jge 0x4683a1
mov eax, dword [ebp - 0x7c]
and eax, 0x80000001
jns 0x468386
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468396
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], ecx
jmp 0x46839f
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], edx
jmp 0x468368
push 0x498ab8
push 0x498ac0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x80], 0
jmp 0x4683c3
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 5
jge 0x4683f4
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x80]
mov dword [ebp - 0x1c], ecx
jge 0x4683dc
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x4683f2
mov dword [ebp - 0x1c], 0
jmp 0x4683ba
mov dword [ebp - 0x84], 0
jmp 0x46840f
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 4
jge 0x468427
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x84]
mov dword [ebp - 0x1c], eax
jmp 0x468400
cmp dword [ebp - 0x1c], 0
jle 0x468436
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x46844c
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x88], 0
jmp 0x46846a
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 6
jge 0x468482
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jmp 0x46845b
cmp dword [ebp - 0x1c], 0
jle 0x468491
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4684a7
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 3
mov dword [ebp - 0x8c], 0
jmp 0x4684cc
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 1
jge 0x46850b
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4684fb
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468506
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468509
mov dword [ebp - 0x1c], eax
jmp 0x4684bd
mov dword [ebp - 4], 0xfffffffe
call fcn.00468519
jmp 0x468521
mov dword [ebp - 4], 4
mov dword [ebp - 0x90], 7
mov dword [ebp - 0x94], 0
jmp 0x46854d
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 2
jge 0x468586
mov eax, dword [ebp - 0x94]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468577
mov edx, dword [ebp - 0x90]
sub edx, 1
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x90]
mov dword [ebp - 0x1c], eax
jmp 0x46853e
mov dword [ebp - 4], 0xfffffffe
jmp 0x4685be
mov dword [ebp - 4], 5
mov dword [ebp - 0x98], 0
jmp 0x4685e0
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 8
jge 0x46861f
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x46860f
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46861a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x46861d
mov dword [ebp - 0x1c], eax
jmp 0x4685d1
mov dword [ebp - 4], 0xfffffffe
call fcn.0046862d
jmp 0x468635
mov dword [ebp - 4], 6
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
jmp 0x468661
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 3
jge 0x46869a
mov eax, dword [ebp - 0xa0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x46868b
mov edx, dword [ebp - 0x9c]
sub edx, 1
mov dword [ebp - 0x9c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
jmp 0x468652
mov dword [ebp - 4], 0xfffffffe
jmp 0x4686d2
mov dword [ebp - 4], 7
mov dword [ebp - 0xa4], 0
jmp 0x4686f4
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 5
jge 0x468733
mov eax, dword [ebp - 0xa4]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468723
mov eax, dword [ebp - 0xa4]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x46872e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468731
mov dword [ebp - 0x1c], eax
jmp 0x4686e5
mov dword [ebp - 4], 0xfffffffe
call fcn.00468741
jmp 0x468749
mov dword [ebp - 0xa8], 0
jmp 0x468764
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 5
jge 0x46877c
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], eax
jmp 0x468755
cmp dword [ebp - 0x1c], 0
jle 0x46878b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4687a1
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 8
mov dword [ebp - 0xac], 0
jmp 0x4687c6
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 2
jge 0x468805
mov eax, dword [ebp - 0xac]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4687f5
mov eax, dword [ebp - 0xac]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468800
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468803
mov dword [ebp - 0x1c], eax
jmp 0x4687b7
mov dword [ebp - 4], 0xfffffffe
call fcn.00468813
jmp 0x46881b
mov dword [ebp - 0xb0], 0
mov edx, 1
test edx, edx
je 0x46886f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x468851
jmp 0x46886f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xb0]
add eax, 1
mov dword [ebp - 0xb0], eax
jmp 0x468825
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0xb8], 0
jmp 0x46889a
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 1
jge 0x4688d9
mov eax, dword [ebp - 0xb8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4688c9
mov eax, dword [ebp - 0xb8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4688d4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4688d7
mov dword [ebp - 0x1c], eax
jmp 0x46888b
mov dword [ebp - 4], 0xfffffffe
call fcn.004688e7
jmp 0x4688ef
mov dword [ebp - 0xbc], 0
jmp 0x46890a
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 0
jge 0x468946
mov eax, dword [ebp - 0xbc]
and eax, 0x80000001
jns 0x468925
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468938
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], ecx
jmp 0x468944
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], edx
jmp 0x4688fb
push 0x498ac8
push 0x498ad0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xc0], 0
jmp 0x468978
mov eax, dword [ebp - 0xc0]
add eax, 1
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 7
jge 0x4689b7
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x4689a7
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x4689b2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x4689b5
mov dword [ebp - 0x1c], eax
jmp 0x468969
mov dword [ebp - 4], 0xfffffffe
call fcn.004689c5
jmp 0x4689cd
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xc4], 7
mov dword [ebp - 0xc8], 0
jmp 0x4689f9
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 3
jge 0x468a32
mov eax, dword [ebp - 0xc8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468a23
mov edx, dword [ebp - 0xc4]
sub edx, 1
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
jmp 0x4689ea
mov dword [ebp - 4], 0xfffffffe
jmp 0x468a6a
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xcc], 7
mov dword [ebp - 0xd0], 0
jmp 0x468a96
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 4
jge 0x468acf
mov eax, dword [ebp - 0xd0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468ac0
mov edx, dword [ebp - 0xcc]
sub edx, 1
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xcc]
mov dword [ebp - 0x1c], eax
jmp 0x468a87
mov dword [ebp - 4], 0xfffffffe
jmp 0x468b07
mov dword [ebp - 0xd4], 0
jmp 0x468b22
mov edx, dword [ebp - 0xd4]
add edx, 1
mov dword [ebp - 0xd4], edx
cmp dword [ebp - 0xd4], 4
jge 0x468b5e
mov eax, dword [ebp - 0xd4]
and eax, 0x80000001
jns 0x468b3d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468b50
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], ecx
jmp 0x468b5c
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], edx
jmp 0x468b13
push 0x498ad8
push 0x498ae0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xd8], 0
jmp 0x468b90
mov eax, dword [ebp - 0xd8]
add eax, 1
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jge 0x468bcf
mov eax, dword [ebp - 0xd8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468bbf
mov eax, dword [ebp - 0xd8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468bca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468bcd
mov dword [ebp - 0x1c], eax
jmp 0x468b81
mov dword [ebp - 4], 0xfffffffe
call fcn.00468bdd
jmp 0x468be5
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xdc], 0
jmp 0x468c07
mov edx, dword [ebp - 0xdc]
add edx, 1
mov dword [ebp - 0xdc], edx
cmp dword [ebp - 0xdc], 3
jge 0x468c46
mov eax, dword [ebp - 0xdc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468c36
mov eax, dword [ebp - 0xdc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468c41
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468c44
mov dword [ebp - 0x1c], eax
jmp 0x468bf8
mov dword [ebp - 4], 0xfffffffe
call fcn.00468c54
jmp 0x468c5c
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], 0
jmp 0x468c88
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 2
jge 0x468cc1
mov eax, dword [ebp - 0xe4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468cb2
mov edx, dword [ebp - 0xe0]
sub edx, 1
mov dword [ebp - 0xe0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xe0]
mov dword [ebp - 0x1c], eax
jmp 0x468c79
mov dword [ebp - 4], 0xfffffffe
jmp 0x468cf9
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xe8], 7
mov dword [ebp - 0xec], 0
jmp 0x468d25
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 3
jge 0x468d5e
mov eax, dword [ebp - 0xec]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468d4f
mov edx, dword [ebp - 0xe8]
sub edx, 1
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xe8]
mov dword [ebp - 0x1c], eax
jmp 0x468d16
mov dword [ebp - 4], 0xfffffffe
jmp 0x468d96
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
jmp 0x468dc2
mov edx, dword [ebp - 0xf4]
add edx, 1
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], 1
jge 0x468dfb
mov eax, dword [ebp - 0xf4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468dec
mov edx, dword [ebp - 0xf0]
sub edx, 1
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xf0]
mov dword [ebp - 0x1c], eax
jmp 0x468db3
mov dword [ebp - 4], 0xfffffffe
jmp 0x468e33
mov dword [ebp - 0xf8], 0
jmp 0x468e4e
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 4
jge 0x468e85
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jge 0x468e6d
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x468e83
mov dword [ebp - 0x1c], 0
jmp 0x468e3f
mov dword [ebp - 0xfc], 0
jmp 0x468ea0
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 3
jge 0x468edc
mov eax, dword [ebp - 0xfc]
and eax, 0x80000001
jns 0x468ebb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x468ece
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], ecx
jmp 0x468eda
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], edx
jmp 0x468e91
push 0x498ae8
push 0x498af0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x100], 0
mov eax, 1
test eax, eax
je 0x468f40
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x468f22
jmp 0x468f40
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x100]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x100]
add eax, 1
mov dword [ebp - 0x100], eax
jmp 0x468ef6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x108], 0
jmp 0x468f6b
mov edx, dword [ebp - 0x108]
add edx, 1
mov dword [ebp - 0x108], edx
cmp dword [ebp - 0x108], 0
jge 0x468faa
mov eax, dword [ebp - 0x108]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x468f9a
mov eax, dword [ebp - 0x108]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x468fa5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x468fa8
mov dword [ebp - 0x1c], eax
jmp 0x468f5c
mov dword [ebp - 4], 0xfffffffe
call fcn.00468fb8
jmp 0x468fc0
mov dword [ebp - 0x10c], 0
jmp 0x468fdb
mov edx, dword [ebp - 0x10c]
add edx, 1
mov dword [ebp - 0x10c], edx
cmp dword [ebp - 0x10c], 0
jge 0x469012
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x10c]
mov dword [ebp - 0x1c], eax
jge 0x468ffa
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469010
mov dword [ebp - 0x1c], 0
jmp 0x468fcc
mov dword [ebp - 0x110], 0
jmp 0x46902d
mov edx, dword [ebp - 0x110]
add edx, 1
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 3
jge 0x469064
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x110]
mov dword [ebp - 0x1c], eax
jge 0x46904c
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x469062
mov dword [ebp - 0x1c], 0
jmp 0x46901e
mov dword [ebp - 0x114], 0
mov edx, 1
test edx, edx
je 0x4690b8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x46909a
jmp 0x4690b8
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x114]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
jmp 0x46906e
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x11c], 0
jmp 0x4690dc
cmp dword [ebp - 0x11c], 4
jge 0x469113
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1c], eax
jge 0x4690fb
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x120], 0
jmp 0x469135