Function at 0x47e780
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4a7410
push 0x40d8c0
mov eax, dword fs:[0]
push eax
add esp, 0xfffffe34
push ebx
push esi
push edi
mov eax, dword [0x4a9398]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x24], 0
jmp 0x47e7dd
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1e
jge 0x47e807
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47e7fb
mov edx, dword [ebp - 0x20]
sub edx, 1
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x47e7d4
mov dword [ebp - 4], 0xfffffffe
jmp 0x47e83f
mov dword [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x47e858
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x24
jge 0x47e88e
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47e87e
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47e889
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47e88c
mov dword [ebp - 0x1c], eax
jmp 0x47e84f
mov dword [ebp - 4], 0xfffffffe
call fcn.0047e89c
jmp 0x47e8a4
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 0
jmp 0x47e8bd
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x3b
jge 0x47e8f3
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47e8e3
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47e8ee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47e8f1
mov dword [ebp - 0x1c], eax
jmp 0x47e8b4
mov dword [ebp - 4], 0xfffffffe
call fcn.0047e901
jmp 0x47e909
mov dword [ebp - 4], 3
mov dword [ebp - 0x30], 0
jmp 0x47e922
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x2c
jge 0x47e958
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47e948
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47e953
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47e956
mov dword [ebp - 0x1c], eax
jmp 0x47e919
mov dword [ebp - 4], 0xfffffffe
call fcn.0047e966
jmp 0x47e96e
mov dword [ebp - 4], 4
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
jmp 0x47e98e
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 4
jge 0x47e9b8
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47e9ac
mov edx, dword [ebp - 0x34]
sub edx, 1
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
jmp 0x47e985
mov dword [ebp - 4], 0xfffffffe
jmp 0x47e9f0
mov dword [ebp - 0x3c], 0
jmp 0x47ea02
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 5
jge 0x47ea14
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
jmp 0x47e9f9
cmp dword [ebp - 0x1c], 0
jle 0x47ea23
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x47ea39
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 5
mov dword [ebp - 0x40], 0
jmp 0x47ea55
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xc
jge 0x47ea8b
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47ea7b
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47ea86
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47ea89
mov dword [ebp - 0x1c], eax
jmp 0x47ea4c
mov dword [ebp - 4], 0xfffffffe
call fcn.0047ea99
jmp 0x47eaa1
mov dword [ebp - 0x44], 0
jmp 0x47eab3
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x10
jge 0x47eac5
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jmp 0x47eaaa
cmp dword [ebp - 0x1c], 0
jle 0x47ead4
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x47eaea
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x48], 0
mov edx, 1
test edx, edx
je 0x47eb2f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47eb1a
jmp 0x47eb2f
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
jmp 0x47eaf4
mov ecx, dword [ebp - 0x1c]
add ecx, 0xc
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x50], 0
jmp 0x47eb51
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0x10
jge 0x47eb87
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47eb77
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47eb82
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47eb85
mov dword [ebp - 0x1c], eax
jmp 0x47eb48
mov dword [ebp - 4], 0xfffffffe
call fcn.0047eb95
jmp 0x47eb9d
mov dword [ebp - 0x54], 0
mov edx, 1
test edx, edx
je 0x47ebdf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47ebca
jmp 0x47ebdf
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x54]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
jmp 0x47eba4
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x5c], 0
jmp 0x47ebf7
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 0xa
jge 0x47ec08
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
jmp 0x47ebee
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47ec1a
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47ec32
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x60], 0
mov edx, 1
test edx, edx
je 0x47ec74
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47ec5f
jmp 0x47ec74
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x47ec39
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x68], 0
mov edx, 1
test edx, edx
je 0x47ecbf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47ecaa
jmp 0x47ecbf
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
jmp 0x47ec84
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x70], 0
jmp 0x47ecda
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 7
jge 0x47ed0a
mov eax, dword [ebp - 0x70]
and eax, 0x80000001
jns 0x47ecef
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47ecff
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], ecx
jmp 0x47ed08
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x70]
mov dword [ebp - 0x1c], edx
jmp 0x47ecd1
push 0x4981c8
push 0x4981d0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x74], 0
mov eax, 1
test eax, eax
je 0x47ed5c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47ed47
jmp 0x47ed5c
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x74]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
jmp 0x47ed21
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x7c], 0
jmp 0x47ed77
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 4
jge 0x47eda8
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
jge 0x47ed90
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47eda6
mov dword [ebp - 0x1c], 0
jmp 0x47ed6e
mov dword [ebp - 4], 7
mov dword [ebp - 0x80], 0
jmp 0x47edc1
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 7
jge 0x47edf7
mov eax, dword [ebp - 0x80]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47ede7
mov eax, dword [ebp - 0x80]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47edf2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47edf5
mov dword [ebp - 0x1c], eax
jmp 0x47edb8
mov dword [ebp - 4], 0xfffffffe
call fcn.0047ee05
jmp 0x47ee0d
mov dword [ebp - 0x84], 0
jmp 0x47ee28
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0
jge 0x47ee5f
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x84]
mov dword [ebp - 0x1c], eax
jge 0x47ee47
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47ee5d
mov dword [ebp - 0x1c], 0
jmp 0x47ee19
mov dword [ebp - 0x88], 0
jmp 0x47ee7a
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 1
jge 0x47eeb1
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
jge 0x47ee99
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47eeaf
mov dword [ebp - 0x1c], 0
jmp 0x47ee6b
mov dword [ebp - 4], 8
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], 0
jmp 0x47eedd
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 7
jge 0x47ef16
mov eax, dword [ebp - 0x90]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47ef07
mov edx, dword [ebp - 0x8c]
sub edx, 1
mov dword [ebp - 0x8c], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
jmp 0x47eece
mov dword [ebp - 4], 0xfffffffe
jmp 0x47ef4e
mov dword [ebp - 0x94], 0
jmp 0x47ef69
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 8
jge 0x47ef80
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x94]
mov dword [ebp - 0x1c], eax
jmp 0x47ef5a
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47ef92
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47efaa
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 9
mov dword [ebp - 0x98], 7
mov dword [ebp - 0x9c], 0
jmp 0x47efd6
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
cmp dword [ebp - 0x9c], 1
jge 0x47f00f
mov eax, dword [ebp - 0x9c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47f000
mov edx, dword [ebp - 0x98]
sub edx, 1
mov dword [ebp - 0x98], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x98]
mov dword [ebp - 0x1c], eax
jmp 0x47efc7
mov dword [ebp - 4], 0xfffffffe
jmp 0x47f047
mov dword [ebp - 0xa0], 0
jmp 0x47f062
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 8
jge 0x47f09e
mov eax, dword [ebp - 0xa0]
and eax, 0x80000001
jns 0x47f07d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47f090
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], ecx
jmp 0x47f09c
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], edx
jmp 0x47f053
push 0x4981d8
push 0x4981e0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xa4], 0
jmp 0x47f0c9
mov eax, dword [ebp - 0xa4]
add eax, 1
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x47f106
mov ecx, dword [ebp - 0xa4]
and ecx, 0x80000001
jns 0x47f0e5
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x47f0f8
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], edx
jmp 0x47f104
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
jmp 0x47f0ba
push 0x4981e8
push 0x4981f0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xa8], 0
mov ecx, 1
test ecx, ecx
je 0x47f16a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47f14c
jmp 0x47f16a
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xa8]
add eax, 1
mov dword [ebp - 0xa8], eax
jmp 0x47f120
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xb0], 0
jmp 0x47f18e
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0xb0], 2
jge 0x47f1a5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], eax
jmp 0x47f17f
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47f1b7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47f1cf
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb4], 0
jmp 0x47f1ea
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 4
jge 0x47f226
mov eax, dword [ebp - 0xb4]
and eax, 0x80000001
jns 0x47f205
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47f218
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], ecx
jmp 0x47f224
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb4]
mov dword [ebp - 0x1c], edx
jmp 0x47f1db
push 0x4981f8
push 0x498200
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xb8], 0
jmp 0x47f251
mov eax, dword [ebp - 0xb8]
add eax, 1
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jge 0x47f269
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], ecx
jmp 0x47f242
cmp dword [ebp - 0x1c], 0
jle 0x47f278
mov edx, dword [ebp - 0x1c]
imul edx, edx, 5
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x47f28e
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xbc], 0
jmp 0x47f2ac
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 1
jge 0x47f2c4
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1c], eax
jmp 0x47f29d
cmp dword [ebp - 0x1c], 0
jle 0x47f2d3
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x47f2e9
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0xc0], 0
mov edx, 1
test edx, edx
je 0x47f340
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47f322
jmp 0x47f340
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc0]
add eax, 1
mov dword [ebp - 0xc0], eax
jmp 0x47f2f6
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x47f364
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 1
jge 0x47f37c
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], eax
jmp 0x47f355
cmp dword [ebp - 0x1c], 0
jle 0x47f38b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x47f3a1
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xcc], 7
mov dword [ebp - 0xd0], 0
jmp 0x47f3d0
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 1
jge 0x47f409
mov eax, dword [ebp - 0xd0]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47f3fa
mov edx, dword [ebp - 0xcc]
sub edx, 1
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xcc]
mov dword [ebp - 0x1c], eax
jmp 0x47f3c1
mov dword [ebp - 4], 0xfffffffe
jmp 0x47f441
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xd4], 7
mov dword [ebp - 0xd8], 0
jmp 0x47f46d
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 3
jge 0x47f4a6
mov eax, dword [ebp - 0xd8]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47f497
mov edx, dword [ebp - 0xd4]
sub edx, 1
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xd4]
mov dword [ebp - 0x1c], eax
jmp 0x47f45e
mov dword [ebp - 4], 0xfffffffe
jmp 0x47f4de
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xdc], 0
jmp 0x47f500
mov edx, dword [ebp - 0xdc]
add edx, 1
mov dword [ebp - 0xdc], edx
cmp dword [ebp - 0xdc], 2
jge 0x47f53f
mov eax, dword [ebp - 0xdc]
cdq
mov ecx, 7
idiv ecx
cmp edx, 5
je 0x47f52f
mov eax, dword [ebp - 0xdc]
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 7
jne 0x47f53a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
jmp 0x47f53d
mov dword [ebp - 0x1c], eax
jmp 0x47f4f1
mov dword [ebp - 4], 0xfffffffe
call fcn.0047f54d
jmp 0x47f555
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], 0
jmp 0x47f581
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 2
jge 0x47f5ba
mov eax, dword [ebp - 0xe4]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47f5ab
mov edx, dword [ebp - 0xe0]
sub edx, 1
mov dword [ebp - 0xe0], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xe0]
mov dword [ebp - 0x1c], eax
jmp 0x47f572
mov dword [ebp - 4], 0xfffffffe
jmp 0x47f5f2
mov dword [ebp - 0xe8], 0
jmp 0x47f60d
mov edx, dword [ebp - 0xe8]
add edx, 1
mov dword [ebp - 0xe8], edx
cmp dword [ebp - 0xe8], 2
jge 0x47f649
mov eax, dword [ebp - 0xe8]
and eax, 0x80000001
jns 0x47f628
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47f63b
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], ecx
jmp 0x47f647
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe8]
mov dword [ebp - 0x1c], edx
jmp 0x47f5fe
push 0x498208
push 0x498210
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xec], 0
jmp 0x47f674
mov eax, dword [ebp - 0xec]
add eax, 1
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jge 0x47f68b
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xec]
mov dword [ebp - 0x1c], ecx
jmp 0x47f665
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47f69d
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xfffffffb
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47f6b5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xf0], 0
jmp 0x47f6d0
mov edx, dword [ebp - 0xf0]
add edx, 1
mov dword [ebp - 0xf0], edx
cmp dword [ebp - 0xf0], 4
jge 0x47f70c
mov eax, dword [ebp - 0xf0]
and eax, 0x80000001
jns 0x47f6eb
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x47f6fe
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], ecx
jmp 0x47f70a
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], edx
jmp 0x47f6c1
push 0x498218
push 0x498220
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xf4], 0
jmp 0x47f737
mov eax, dword [ebp - 0xf4]
add eax, 1
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x47f76e
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x1c], ecx
jge 0x47f756
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47f76c
mov dword [ebp - 0x1c], 0
jmp 0x47f728
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xf8], 7
mov dword [ebp - 0xfc], 0
jmp 0x47f79a
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 0
jge 0x47f7d3
mov eax, dword [ebp - 0xfc]
cdq
mov ecx, 7
idiv ecx
test edx, edx
jne 0x47f7c4
mov edx, dword [ebp - 0xf8]
sub edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0xf8]
mov dword [ebp - 0x1c], eax
jmp 0x47f78b
mov dword [ebp - 4], 0xfffffffe
jmp 0x47f80b
mov dword [ebp - 0x100], 0
jmp 0x47f826
mov edx, dword [ebp - 0x100]
add edx, 1
mov dword [ebp - 0x100], edx
cmp dword [ebp - 0x100], 3
jge 0x47f83d
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x100]
mov dword [ebp - 0x1c], eax
jmp 0x47f817
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47f84f
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47f867
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x104], 0
mov edx, 1
test edx, edx
je 0x47f8bb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47f89d
jmp 0x47f8bb
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x104]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x104]
add eax, 1
mov dword [ebp - 0x104], eax
jmp 0x47f871
mov ecx, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x10c], 0
mov edx, 1
test edx, edx
je 0x47f918
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
jne 0x47f8fa
jmp 0x47f918
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x10c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10c]
add eax, 1
mov dword [ebp - 0x10c], eax
jmp 0x47f8ce
mov ecx, dword [ebp - 0x1c]
add ecx, 3
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x114], 0
jmp 0x47f93c
mov edx, dword [ebp - 0x114]
add edx, 1
mov dword [ebp - 0x114], edx
cmp dword [ebp - 0x114], 3
jge 0x47f953
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x114]
mov dword [ebp - 0x1c], eax
jmp 0x47f92d
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47f965
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47f97d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x118], 0
jmp 0x47f998
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
cmp dword [ebp - 0x118], 0
jge 0x47f9af
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x118]
mov dword [ebp - 0x1c], eax
jmp 0x47f989
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47f9c1
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 7
idiv ecx
test edx, edx
je 0x47f9d9
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x11c], 0
jmp 0x47f9f4
mov edx, dword [ebp - 0x11c]
add edx, 1
mov dword [ebp - 0x11c], edx
cmp dword [ebp - 0x11c], 0
jge 0x47fa0c
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1c], eax
jmp 0x47f9e5
cmp dword [ebp - 0x1c], 0
jle 0x47fa1b
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 5
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x47fa31
mov dword [ebp - 0x1c], 0x11
nop
nop
nop
mov dword [ebp - 0x120], 0
jmp 0x47fa4f
cmp dword [ebp - 0x120], 3
jge 0x47fa66
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x120]
mov dword [ebp - 0x1c], eax
jmp 0x47fa40
cmp dword [ebp - 0x1c], 0xffff0001
jge 0x47fa78