Function at 0x47ca90
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a72f8
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffe84
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x24], 0
jmp 0x47caed
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x30
jge 0x47cb17
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cb0b
mov edx, dword [ebp - 0x20]
sub edx, 1
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x47cae4
mov dword [ebp - 4], 0xfffffffe
jmp 0x47cb4f
mov dword [ebp - 0x28], 0
jmp 0x47cb61
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xd
jge 0x47cb92
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
jge 0x47cb7a
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cb90
mov dword [ebp - 0x1c], 0
jmp 0x47cb58
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
jmp 0x47cbb2
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x17
jge 0x47cbdc
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cbd0
mov edx, dword [ebp - 0x2c]
sub edx, 1
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
jmp 0x47cba9
mov dword [ebp - 4], 0xfffffffe
jmp 0x47cc14
mov dword [ebp - 0x34], 0
mov edx, 1
test edx, edx
je 0x47cc56
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47cc41
jmp 0x47cc56
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
jmp 0x47cc1b
mov ecx, dword [ebp - 0x1c]
add ecx, 0x18
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x40], 0
jmp 0x47cc7f
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x1a
jge 0x47cca9
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cc9d
mov edx, dword [ebp - 0x3c]
sub edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x47cc76
mov dword [ebp - 4], 0xfffffffe
jmp 0x47cce1
mov dword [ebp - 4], 3
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], 0
jmp 0x47cd01
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0xc
jge 0x47cd2b
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cd1f
mov edx, dword [ebp - 0x44]
sub edx, 1
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x47ccf8
mov dword [ebp - 4], 0xfffffffe
jmp 0x47cd63
mov dword [ebp - 0x4c], 0
jmp 0x47cd75
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0x20
jge 0x47cda5
mov eax, dword [ebp - 0x4c]
and eax, 0x80000001
jns 0x47cd8a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47cd9a
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], ecx
jmp 0x47cda3
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], edx
jmp 0x47cd6c
push 0x4982a8
push 0x4982b0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 4
mov dword [ebp - 0x50], 0
jmp 0x47cdce
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x47ce04
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47cdf4
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47cdff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47ce02
mov dword [ebp - 0x1c], eax
jmp 0x47cdc5
mov dword [ebp - 4], 0xfffffffe
call fcn.0047ce12
jmp 0x47ce1a
mov dword [ebp - 0x54], 0
jmp 0x47ce2c
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 8
jge 0x47ce3d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0x1c], eax
jmp 0x47ce23
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47ce4f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47ce67
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x5c], 0
jmp 0x47ce87
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 7
jge 0x47ceb1
mov eax, dword [ebp - 0x5c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cea5
mov edx, dword [ebp - 0x58]
sub edx, 1
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
jmp 0x47ce7e
mov dword [ebp - 4], 0xfffffffe
jmp 0x47cee9
mov dword [ebp - 0x60], 0
jmp 0x47cefb
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 6
jge 0x47cf2b
mov eax, dword [ebp - 0x60]
and eax, 0x80000001
jns 0x47cf10
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47cf20
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], ecx
jmp 0x47cf29
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], edx
jmp 0x47cef2
push 0x4982b8
push 0x4982c0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x64], 0
jmp 0x47cf4d
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x47cf7e
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x64]
mov dword [ebp - 0x1c], ecx
jge 0x47cf66
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47cf7c
mov dword [ebp - 0x1c], 0
jmp 0x47cf44
mov dword [ebp - 4], 6
mov dword [ebp - 0x68], 0
jmp 0x47cf97
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 0x10
jge 0x47cfcd
mov eax, dword [ebp - 0x68]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47cfbd
mov eax, dword [ebp - 0x68]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47cfc8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47cfcb
mov dword [ebp - 0x1c], eax
jmp 0x47cf8e
mov dword [ebp - 4], 0xfffffffe
call fcn.0047cfdb
jmp 0x47cfe3
mov dword [ebp - 0x6c], 0
mov edx, 1
test edx, edx
je 0x47d025
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47d010
jmp 0x47d025
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
jmp 0x47cfea
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x74], 0
mov edx, 1
test edx, edx
je 0x47d070
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47d05b
jmp 0x47d070
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x74]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
jmp 0x47d035
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x7c], 0
jmp 0x47d08b
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0xa
jge 0x47d0bc
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jge 0x47d0a4
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d0ba
mov dword [ebp - 0x1c], 0
jmp 0x47d082
mov dword [ebp - 4], 7
mov dword [ebp - 0x80], 0
jmp 0x47d0d5
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 0xf
jge 0x47d10b
mov eax, dword [ebp - 0x80]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47d0fb
mov eax, dword [ebp - 0x80]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47d106
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47d109
mov dword [ebp - 0x1c], eax
jmp 0x47d0cc
mov dword [ebp - 4], 0xfffffffe
call fcn.0047d119
jmp 0x47d121
mov dword [ebp - 0x84], 0
jmp 0x47d13c
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 3
jge 0x47d178
mov eax, dword [ebp - 0x84]
and eax, 0x80000001
jns 0x47d157
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47d16a
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x84]
mov dword [ebp - 0x1c], ecx
jmp 0x47d176
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x84]
mov dword [ebp - 0x1c], edx
jmp 0x47d12d
push 0x4982c8
push 0x4982d0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x88], 0
jmp 0x47d1a3
mov eax, dword [ebp - 0x88]
add eax, 1
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x47d1e0
mov ecx, dword [ebp - 0x88]
and ecx, 0x80000001
jns 0x47d1bf
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x47d1d2
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x88]
mov dword [ebp - 0x1c], edx
jmp 0x47d1de
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jmp 0x47d194
push 0x4982d8
push 0x4982e0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x8c], 0
jmp 0x47d20b
mov ecx, dword [ebp - 0x8c]
add ecx, 1
mov dword [ebp - 0x8c], ecx
cmp dword [ebp - 0x8c], 7
jge 0x47d248
mov edx, dword [ebp - 0x8c]
and edx, 0x80000001
jns 0x47d227
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x47d23a
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
jmp 0x47d246
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], ecx
jmp 0x47d1fc
push 0x4982e8
push 0x4982f0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x90], 0
mov edx, 1
test edx, edx
je 0x47d2ac
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47d28e
jmp 0x47d2ac
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x90]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
jmp 0x47d262
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x98], 0
jmp 0x47d2d7
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 6
jge 0x47d316
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47d306
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47d311
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47d314
mov dword [ebp - 0x1c], eax
jmp 0x47d2c8
mov dword [ebp - 4], 0xfffffffe
call fcn.0047d324
jmp 0x47d32c
mov dword [ebp - 0x9c], 0
jmp 0x47d347
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
cmp dword [ebp - 0x9c], 3
jge 0x47d35e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
jmp 0x47d338
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47d370
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47d388
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa0], 0
jmp 0x47d3a3
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 6
jge 0x47d3df
mov eax, dword [ebp - 0xa0]
and eax, 0x80000001
jns 0x47d3be
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47d3d1
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], ecx
jmp 0x47d3dd
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], edx
jmp 0x47d394
push 0x4982f8
push 0x498300
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 9
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], 0
jmp 0x47d41b
mov eax, dword [ebp - 0xa8]
add eax, 1
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 4
jge 0x47d454
mov eax, dword [ebp - 0xa8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d445
mov edx, dword [ebp - 0xa4]
sub edx, 1
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jmp 0x47d40c
mov dword [ebp - 4], 0xfffffffe
jmp 0x47d48c
mov dword [ebp - 0xac], 0
jmp 0x47d4a7
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 3
jge 0x47d4de
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xac]
mov dword [ebp - 0x1c], eax
jge 0x47d4c6
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d4dc
mov dword [ebp - 0x1c], 0
jmp 0x47d498
mov dword [ebp - 0xb0], 0
jmp 0x47d4f9
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0xb0], 3
jge 0x47d535
mov eax, dword [ebp - 0xb0]
and eax, 0x80000001
jns 0x47d514
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47d527
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], ecx
jmp 0x47d533
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], edx
jmp 0x47d4ea
push 0x498308
push 0x498310
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xb4], 0
jmp 0x47d560
mov eax, dword [ebp - 0xb4]
add eax, 1
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x47d597
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], ecx
jge 0x47d57f
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d595
mov dword [ebp - 0x1c], 0
jmp 0x47d551
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xb8], 0
jmp 0x47d5b9
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 0
jge 0x47d5f8
mov eax, dword [ebp - 0xb8]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47d5e8
mov eax, dword [ebp - 0xb8]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47d5f3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47d5f6
mov dword [ebp - 0x1c], eax
jmp 0x47d5aa
mov dword [ebp - 4], 0xfffffffe
call fcn.0047d606
jmp 0x47d60e
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xbc], 7
mov dword [ebp - 0xc0], 0
jmp 0x47d63a
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 0
jge 0x47d673
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d664
mov edx, dword [ebp - 0xbc]
sub edx, 1
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xbc]
mov dword [ebp - 0x1c], eax
jmp 0x47d62b
mov dword [ebp - 4], 0xfffffffe
jmp 0x47d6ab
mov dword [ebp - 0xc4], 0
jmp 0x47d6c6
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 1
jge 0x47d6fd
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
jge 0x47d6e5
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d6fb
mov dword [ebp - 0x1c], 0
jmp 0x47d6b7
mov dword [ebp - 0xc8], 0
jmp 0x47d718
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 4
jge 0x47d754
mov eax, dword [ebp - 0xc8]
and eax, 0x80000001
jns 0x47d733
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47d746
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], ecx
jmp 0x47d752
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], edx
jmp 0x47d709
push 0x498318
push 0x498320
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xcc], 0
jmp 0x47d77f
mov eax, dword [ebp - 0xcc]
add eax, 1
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x47d7b6
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x1c], ecx
jge 0x47d79e
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d7b4
mov dword [ebp - 0x1c], 0
jmp 0x47d770
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xd0], 0
jmp 0x47d7d8
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 0
jge 0x47d817
mov eax, dword [ebp - 0xd0]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47d807
mov eax, dword [ebp - 0xd0]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47d812
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47d815
mov dword [ebp - 0x1c], eax
jmp 0x47d7c9
mov dword [ebp - 4], 0xfffffffe
call fcn.0047d825
jmp 0x47d82d
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xd4], 7
mov dword [ebp - 0xd8], 0
jmp 0x47d859
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 2
jge 0x47d892
mov eax, dword [ebp - 0xd8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d883
mov edx, dword [ebp - 0xd4]
sub edx, 1
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xd4]
mov dword [ebp - 0x1c], eax
jmp 0x47d84a
mov dword [ebp - 4], 0xfffffffe
jmp 0x47d8ca
mov dword [ebp - 0xdc], 0
mov edx, 1
test edx, edx
je 0x47d91e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47d900
jmp 0x47d91e
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xdc]
add eax, 1
mov dword [ebp - 0xdc], eax
jmp 0x47d8d4
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xe4], 0
jmp 0x47d93f
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 1
jge 0x47d97b
mov eax, dword [ebp - 0xe4]
and eax, 0x80000001
jns 0x47d95a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47d96d
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], ecx
jmp 0x47d979
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], edx
jmp 0x47d930
push 0x498328
push 0x498330
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xe8], 0
jmp 0x47d9a6
mov eax, dword [ebp - 0xe8]
add eax, 1
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x47d9dd
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], ecx
jge 0x47d9c5
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47d9db
mov dword [ebp - 0x1c], 0
jmp 0x47d997
mov dword [ebp - 0xec], 0
jmp 0x47d9f8
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 2
jge 0x47da0f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xec]
mov dword [ebp - 0x1c], eax
jmp 0x47d9e9
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47da21
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47da39
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf0], 0
jmp 0x47da54
mov edx, dword [ebp - 0xf0]
add edx, 1
mov dword [ebp - 0xf0], edx
cmp dword [ebp - 0xf0], 3
jge 0x47da6c
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], eax
jmp 0x47da45
cmp dword [ebp - 0x1c], 0
jle 0x47da7b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x47da91
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xf4], 0
jmp 0x47daaf
mov edx, dword [ebp - 0xf4]
add edx, 1
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], 1
jge 0x47daeb
mov eax, dword [ebp - 0xf4]
and eax, 0x80000001
jns 0x47daca
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47dadd
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x1c], ecx
jmp 0x47dae9
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xf4]
mov dword [ebp - 0x1c], edx
jmp 0x47daa0
push 0x498338
push 0x498340
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xf8], 0
jmp 0x47db16
mov eax, dword [ebp - 0xf8]
add eax, 1
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x47db53
mov ecx, dword [ebp - 0xf8]
and ecx, 0x80000001
jns 0x47db32
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x47db45
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xf8]
mov dword [ebp - 0x1c], edx
jmp 0x47db51
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x47db07
push 0x498348
push 0x498350
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xfc], 0
mov ecx, 1
test ecx, ecx
je 0x47dbb7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47db99
jmp 0x47dbb7
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xfc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xfc]
add eax, 1
mov dword [ebp - 0xfc], eax
jmp 0x47db6d
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x104], 0
jmp 0x47dbdb
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
cmp dword [ebp - 0x104], 2
jge 0x47dbf2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
jmp 0x47dbcc
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47dc04
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47dc1c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x108], 0
jmp 0x47dc37
mov edx, dword [ebp - 0x108]
add edx, 1
mov dword [ebp - 0x108], edx
cmp dword [ebp - 0x108], 2
jge 0x47dc73
mov eax, dword [ebp - 0x108]
and eax, 0x80000001
jns 0x47dc52
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47dc65
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x108]
mov dword [ebp - 0x1c], ecx
jmp 0x47dc71
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x108]
mov dword [ebp - 0x1c], edx
jmp 0x47dc28
push 0x498358
push 0x498360
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x10c], 0
jmp 0x47dc9e
mov eax, dword [ebp - 0x10c]
add eax, 1
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x47dcdb
mov ecx, dword [ebp - 0x10c]
and ecx, 0x80000001
jns 0x47dcba
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x47dccd
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10c]
mov dword [ebp - 0x1c], edx
jmp 0x47dcd9
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x10c]
mov dword [ebp - 0x1c], eax
jmp 0x47dc8f
push 0x498368
push 0x498370
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x110], 0
mov ecx, 1
test ecx, ecx
je 0x47dd3f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47dd21
jmp 0x47dd3f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x110]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x110]
add eax, 1
mov dword [ebp - 0x110], eax
jmp 0x47dcf5
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x118], 0
jmp 0x47dd6a
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
cmp dword [ebp - 0x118], 3
jge 0x47dda9
mov eax, dword [ebp - 0x118]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47dd99
mov eax, dword [ebp - 0x118]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47dda4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47dda7
mov dword [ebp - 0x1c], eax
jmp 0x47dd5b
mov dword [ebp - 4], 0xfffffffe
call fcn.0047ddb7
jmp 0x47ddbf
mov dword [ebp - 0x11c], 0
jmp 0x47ddda
mov edx, dword [ebp - 0x11c]
add edx, 1
mov dword [ebp - 0x11c], edx
cmp dword [ebp - 0x11c], 3
jge 0x47de11
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1c], eax
jge 0x47ddf9
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47de0f
mov dword [ebp - 0x1c], 0
jmp 0x47ddcb
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x120], 0
jmp 0x47de33
mov edx, dword [ebp - 0x120]
add edx, 1
mov dword [ebp - 0x120], edx
cmp dword [ebp - 0x120], 2
jge 0x47de72
mov eax, dword [ebp - 0x120]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47de62
mov eax, dword [ebp - 0x120]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47de6d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47de70
mov dword [ebp - 0x1c], eax
jmp 0x47de24
mov dword [ebp - 4], 0xfffffffe
call fcn.0047de80
jmp 0x47de88
mov dword [ebp - 0x124], 0
jmp 0x47dea3
mov edx, dword [ebp - 0x124]
add edx, 1
mov dword [ebp - 0x124], edx
cmp dword [ebp - 0x124], 2
jge 0x47dedf
mov eax, dword [ebp - 0x124]
and eax, 0x80000001
jns 0x47debe
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47ded1
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x124]
mov dword [ebp - 0x1c], ecx
jmp 0x47dedd
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x124]
mov dword [ebp - 0x1c], edx
jmp 0x47de94
push 0x498378
push 0x498380
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x128], 0
jmp 0x47df0a
mov eax, dword [ebp - 0x128]
add eax, 1
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jge 0x47df41
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x128]
mov dword [ebp - 0x1c], ecx
jge 0x47df29
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47df3f
mov dword [ebp - 0x1c], 0
jmp 0x47defb
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x12c], 7
mov dword [ebp - 0x130], 0
jmp 0x47df6d
mov edx, dword [ebp - 0x130]
add edx, 1
mov dword [ebp - 0x130], edx
cmp dword [ebp - 0x130], 3
jge 0x47dfa6
mov eax, dword [ebp - 0x130]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47df97
mov edx, dword [ebp - 0x12c]
sub edx, 1
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x12c]
mov dword [ebp - 0x1c], eax
jmp 0x47df5e
mov dword [ebp - 4], 0xfffffffe
jmp 0x47dfde
mov dword [ebp - 0x134], 0
jmp 0x47dff9
cmp dword [ebp - 0x134], 2
jge 0x47e030
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x134]
mov dword [ebp - 0x1c], eax
jge 0x47e018
mov dword [ebp - 0x138], 0
jmp 0x47e04b