Function at 0x1004465f
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10065d0f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x2b0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1004564d
lea eax, [ebp + 0x10]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x134], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x17c]
movzx eax, byte [eax]
test eax, eax
je 0x1004560f
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0xe8], eax
push 0x696e
push 0x4c7c
push 1
push 0x4c89
push 0x5713
push 1
call fcn.100422d2
add esp, 0x18
mov eax, dword [0x100848e8]
and eax, 1
jne 0x1004472e
mov eax, dword [0x100848e8]
or eax, 1
mov dword [0x100848e8], eax
and dword [ebp - 4], 0
mov ecx, 0x100848ec
call fcn.10046ce7
push 0x10066040
call fcn.1004da33
pop ecx
or dword [ebp - 4], 0xffffffff
push 2
lea ecx, [ebp - 0x1a8]
call fcn.10007996
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], 0x13638ecf
mov dword [ebp - 0xfc], 0xd68f9855
mov dword [ebp - 0x108], 0x4129b857
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x14], 0
jmp 0x10044777
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10044793
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1a8]
call fcn.100079ee
mov dword [eax], 0x342eb90d
jmp 0x10044770
mov dword [ebp - 0x14], 0
jmp 0x100447a3
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100447b9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2a8], 0
jmp 0x1004479c
mov dword [ebp - 0x2c], 0
jmp 0x100447c9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x10044836
mov dword [ebp - 0x150], 0xb4ef66b1
mov byte [ebp - 0x22], 0
lea eax, [ebp - 0x22]
push eax
push 0
push 1
call fcn.10043a7a
add esp, 0xc
push 1
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x1a8]
push eax
push 0x49b
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x110]
push eax
push 0xfa1
push 0x4db0
push 1
lea eax, [ebp - 0xfc]
push eax
push 0x5aa3
call fcn.100405e0
add esp, 0x30
jmp 0x100447c2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.100079d2
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
call fcn.1003c655
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1cc], 0xfffffff8
mov dword [ebp - 0x20], 0x38ecf54c
mov dword [ebp - 0x1bc], 0xfffffff9
mov dword [ebp - 0x1b8], 0xfffffffb
mov dword [ebp - 0x118], 0x7c7ab89b
mov dword [ebp - 0x78], 0
jmp 0x1004489b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x100448b1
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1b4], 0xac453072
jmp 0x10044894
push 0
push 1
push 0x25b0
push 0x2621
lea eax, [ebp - 0x118]
push eax
push 0x17e3
call fcn.10041298
add esp, 0x18
mov dword [ebp - 0x20], 0
jmp 0x100448e3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x10044928
mov byte [ebp - 0x19], 0
push 1
push 1
lea eax, [ebp - 0x19]
push eax
push 0xf7d
call fcn.10042487
add esp, 0x10
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x1b4]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x1b4]
mov dword [ebp + ecx*4 - 0x1b4], eax
jmp 0x100448dc
cmp dword [ebp - 0x60], 6
jae 0x10044a41
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x1f4]
push eax
mov ecx, 0x100848ec
call fcn.1002df35
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x1fc]
push eax
mov ecx, 0x100848ec
call fcn.1002df4c
mov ecx, eax
call fcn.1002df67
movzx eax, al
test eax, eax
je 0x10044a41
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x120]
push eax
mov ecx, 0x100848ec
call fcn.10046d3b
push eax
mov ecx, dword [ebp - 0xe8]
call fcn.1000759f
mov dword [ebp - 0x188], 0x15a8
cmp dword [ebp - 0x188], 0xa3c
jge 0x10044a3c
lea eax, [ebp - 0x88]
push eax
push 0x1006da3c
call fcn.1004d4db
pop ecx
pop ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x128], 0
je 0x10044a3c
lea eax, [ebp - 0x160]
push eax
push 0x1006da3c
call fcn.1004d4db
pop ecx
pop ecx
mov dword [ebp - 0x80], 1
jmp 0x10044a13
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x160]
jg 0x10044a2f
push dword [ebp - 0x80]
push str._ld
call fcn.1004da5d
pop ecx
pop ecx
jmp 0x10044a0c
push 0x1006d9a9
call fcn.1004dd12
pop ecx
jmp 0x100449ce
jmp 0x100456b9
lea ecx, [ebp - 0x224]
call fcn.10007538
mov dword [ebp - 4], 2
mov dword [ebp - 0xa4], 0x4e21
mov dword [ebp - 0x180], str.ovn_htzkevhk_qnzseuph_zmvdcvasg_dmwck_ysambbswc_ucz_bomydrxir_dryoivjt_hilic
cmp dword [ebp - 0xa4], 0x4f00
jle 0x10044b25
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
and dword [ebp - 0x58], 0
jmp 0x10044a91
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x447f
jge 0x10044b25
and dword [ebp - 0x50], 0
jmp 0x10044aab
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x6684
jge 0x10044b20
and dword [ebp - 0x74], 0
jmp 0x10044ac1
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x4eda
jge 0x10044b1e
mov eax, dword [ebp - 0x50]
and eax, dword [ebp - 0x74]
or eax, dword [ebp - 0x58]
cdq
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], edx
push dword [ebp - 0x18c]
push dword [ebp - 0x190]
lea ecx, [ebp - 0x278]
call fcn.10001aad
pop ecx
pop ecx
mov dword [ebp - 0x130], eax
mov ecx, dword [ebp - 0x130]
call fcn.100071e0
push eax
call fcn.1004da5d
pop ecx
lea ecx, [ebp - 0x278]
call fcn.100071c2
jmp 0x10044aba
jmp 0x10044aa4
jmp 0x10044a8a
mov dword [ebp - 0x138], 0
mov byte [ebp - 4], 3
cmp dword [ebp - 0xa4], 0x4b73
jge 0x10044b4b
push dword [ebp - 0x180]
call fcn.1004da5d
pop ecx
jmp 0x10044b67
mov dword [ebp - 4], 2
jmp 0x10044b77
push 0x3b49
push 0x3b22
push 1
push 1
push 0x73da
push 0x17fe
push 0x788b
push 1
push 0x3f77
lea eax, [ebp - 0x138]
push eax
call fcn.10042b63
add esp, 0x28
mov byte [ebp - 0x24], 0
push 0x4e12
push 0x411a
push 1
push 0x59e6
push 1
lea eax, [ebp - 0x24]
push eax
call fcn.10043256
add esp, 0x18
mov eax, dword [ebp - 0x60]
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
jne 0x1004530b
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x18], 0x94fe5f36
mov dword [ebp - 0x168], 0xfffffff8
push 1
push 0x14ad
lea eax, [ebp - 0x90]
push eax
push 0x191d
push 0
push 0x4ae9
push 0x59f0
lea eax, [ebp - 0x18]
push eax
push 0x1bc1
call fcn.10044431
add esp, 0x24
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x18], eax
jle 0x10044e81
mov dword [ebp - 0x34], 0x8bb4aad9
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x34], eax
jne 0x10044cea
push 6
pop eax
test eax, eax
je 0x10044c6b
cmp dword [ebp - 0x34], 0xeb8e136d
jb 0x10044c6b
mov dword [ebp - 0xf8], 1
jmp 0x10044c72
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xf8], eax
jge 0x10044c89
mov dword [ebp - 0x9c], 1
jmp 0x10044c90
and dword [ebp - 0x9c], 0
cmp dword [ebp - 0x9c], 0x311c3fc0
jg 0x10044caa
xor eax, eax
inc eax
jne 0x10044caa
and dword [ebp - 0xcc], 0
jmp 0x10044cb4
mov dword [ebp - 0xcc], 1
cmp dword [ebp - 0xcc], 0xffff17d4
jg 0x10044ccc
mov dword [ebp - 0x94], 1
jmp 0x10044cd3
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x94], eax
jne 0x10044cea
mov dword [ebp - 0xe4], 1
jmp 0x10044cf1
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0xe4], eax
jne 0x10044d0e
cmp dword [ebp - 0x34], 0
jne 0x10044d0e
and dword [ebp - 0xac], 0
jmp 0x10044d18
mov dword [ebp - 0xac], 1
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x10044d30
mov eax, 0x205f5a2f
test eax, eax
je 0x10044d76
mov dword [ebp - 0x170], 0x22a19820
mov dword [ebp - 0x140], 0x874bdbaf
push 0x5def
push 1
push 1
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x140]
push eax
push 0x266e
lea eax, [ebp - 0x170]
push eax
push 0x5ed
call fcn.10043317
add esp, 0x20
jmp 0x10044e64
push 1
lea ecx, [ebp - 0x20c]
call fcn.10007996
mov byte [ebp - 4], 5
mov dword [ebp - 0x7c], 0
jmp 0x10044d97
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10044db0
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x20c]
call fcn.100079ee
and dword [eax], 0
jmp 0x10044d90
mov dword [ebp - 0x18], 0
jmp 0x10044dc0
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x10044e1d
mov byte [ebp - 0x21], 0
push 0x1cf2
push 0x29a0
push 0xb5e
push 0x6ab8
push 0x3d05
push 0x6a8d
push 0x71a
push 1
push 0x222c
lea eax, [ebp - 0x21]
push eax
push 0x5600
push 0x535d
push 0x27ed
push 0x3a5d
push 1
push 0x5e28
call fcn.100434fc
add esp, 0x40
jmp 0x10044db9
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x10044e55
push 0x5281
push 1
push 1
push 0x2db2
push 0x7e08
push 1
push 0x3d6c
push 0x748a
push 0x729f
call fcn.10043c2d
add esp, 0x24
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20c]
call fcn.100079d2
push 0x178e
push 0
push 1
push 0x1b62
push 0x6177
call fcn.100411c1
add esp, 0x14
jmp 0x10044ed7
push 0x2152
push 0x2ae
push 0x2dfc
push 0x6d97
push 0x6db2
push 1
push 0x6304
push 1
call fcn.10043dbd
add esp, 0x20
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x10044ed7
push 0x5885
push 0x733a
push 1
push 1
push 0x4483
push 0x4b94
call fcn.10040de0
add esp, 0x18
lea eax, [ebp - 0x284]
push eax
call fcn.1003a3fe
pop ecx
mov esi, eax
lea edi, [ebp - 0x244]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x244]
lea edi, [ebp - 0x250]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
call fcn.1003c683
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x250]
push eax
push dword [ebp - 0x148]
push dword [ebp - 0x60]
lea eax, [ebp - 0x29c]
push eax
call fcn.1003eaec
add esp, 0x10
mov dword [ebp - 0x100], eax
push dword [ebp - 0x100]
lea ecx, [ebp - 0x224]
call fcn.10007570
lea ecx, [ebp - 0x29c]
call fcn.10007595
mov dword [ebp - 0xbc], 0xfffffffe
mov dword [ebp - 0xf4], 0x33582f80
mov dword [ebp - 0x104], 0xfffffffa
mov dword [ebp - 0xd4], 0x5fff
mov dword [ebp - 0xdc], 0x79041289
mov dword [ebp - 0xb4], 0x8aae07ea
mov dword [ebp - 0x10c], 0xffffffff
mov dword [ebp - 0x1d4], 0xc653ddb
lea eax, [ebp - 0xd4]
push eax
push 0x5112
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x104]
push eax
push 0x168b
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xdc]
push eax
push 0x7da3
push 1
push 1
push 0
lea eax, [ebp - 0xf4]
push eax
call fcn.1004403a
add esp, 0x30
push 0x1557
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xb4]
push eax
push 1
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.10043e97
add esp, 0x20
cmp dword [ebp - 0x60], 6
jae 0x1004530b
mov dword [ebp - 0x30], 0x5e48d327
push 1
lea ecx, [ebp - 0x19c]
call fcn.10007996
mov byte [ebp - 4], 6
mov dword [ebp - 0x1c4], 0x32e3ca36
mov dword [ebp - 0x84], 0
jmp 0x10045064
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10045086
push dword [ebp - 0x84]
lea ecx, [ebp - 0x19c]
call fcn.100079ee
mov dword [eax], 0x9f30cc2f
jmp 0x10045057
mov dword [ebp - 0x30], 0
jmp 0x10045096
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffed
je 0x100452cd
push 1
lea ecx, [ebp - 0x230]
call fcn.10007996
mov byte [ebp - 4], 7
mov dword [ebp - 0x68], 0xbac04ee7
mov dword [ebp - 0x1dc], 0xfffffff6
mov dword [ebp - 0x1e4], 0x4d2b5f79
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0x1f8], 0xb5af9f7c
push 0x2dcc
push 1
push 0x1774
push 1
push 0x2207
lea eax, [ebp - 0x230]
push eax
push 0x22be
lea eax, [ebp - 0x3c]
push eax
push 0x2da7
call fcn.10040fd3
add esp, 0x24
mov dword [ebp - 0x3c], 0
jmp 0x10045120
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x10045136
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x258], 0x9c23edb3
jmp 0x10045119
mov dword [ebp - 0x68], 0
jmp 0x10045146
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jg 0x100452b9
mov dword [ebp - 0x48], 0x3707822e
mov dword [ebp - 0x1d8], 0xffffffff
mov dword [ebp - 0x114], 0x1022
mov byte [ebp - 0x25], 0
push 0x1f6a
lea eax, [ebp - 0x25]
push eax
push 0x874
push 0x1fc
push 0x2bef
push 0x7d9c
push 0x4531
push 0x1d3f
push 1
push 1
push 1
push 0x5b9e
call fcn.1004403a
add esp, 0x30
mov dword [ebp - 0x48], 0
jmp 0x100451b9
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jg 0x100452b4
mov dword [ebp - 0x38], 0xd5fac122
mov dword [ebp - 0x4c], 0
jmp 0x100451da
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x100451f0
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x260], 0xe2c9bf5e
jmp 0x100451d3
push 0x2a20
push 1
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x30]
push eax
push 0x1184
push 1
push 0x4653
call fcn.100410e0
add esp, 0x20
mov dword [ebp - 0x38], 0
jmp 0x1004522a
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x100452af
mov dword [ebp - 0x238], 0x5a9864ba
mov dword [ebp - 0x1e0], 3
mov dword [ebp - 0x200], 0xfffffffe
mov dword [ebp - 0x1e8], 0x2b5725d3
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x54], 0
jmp 0x10045272
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10045288
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1f0], 0xfffffffd
jmp 0x1004526b
push 1
push 1
lea eax, [ebp - 0x114]
push eax
push 0x264a
push 0xb09
push 0x2265
call fcn.10041298
add esp, 0x18
jmp 0x10045223
jmp 0x100451b2
jmp 0x1004513f
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x230]
call fcn.100079d2
jmp 0x1004508f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19c]
call fcn.100079d2
push 1
push 0x3696
push 0x41ba
lea eax, [ebp - 0x224]
push eax
push 1
push dword [ebp - 0x40]
push 0x100848ec
push 0xe58
push 0x7b20
call fcn.10044431
add esp, 0x24
mov dword [ebp - 0xc4], 0x23de
mov dword [ebp - 0x124], str.yqxmrvqx_gutqz_kkovlv_prdiy_wouszlguu_gsddxpby_epj_rqq_agapxodm_fyxtvepde_tlpv
cmp dword [ebp - 0xc4], 0x25ba
jle 0x100453b4
call dword [sym.imp.KERNEL32.dll_GetVersion]
and dword [ebp - 0x5c], 0
jmp 0x10045342
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x201
jge 0x100453b4
and dword [ebp - 0x64], 0
jmp 0x10045358
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x1361
jge 0x100453b2
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x64]
cdq
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], edx
push dword [ebp - 0x174]
push dword [ebp - 0x178]
lea ecx, [ebp - 0x2c0]
call fcn.10001aad
pop ecx
pop ecx
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
call fcn.100071e0
push eax
call fcn.1004da5d
pop ecx
lea ecx, [ebp - 0x2c0]
call fcn.100071c2
jmp 0x10045351
jmp 0x1004533b
mov byte [ebp - 4], 8
cmp dword [ebp - 0xc4], 0x201e
jge 0x100453d0
push dword [ebp - 0x124]
call fcn.1004da5d
pop ecx
jmp 0x100453ec
mov dword [ebp - 4], 2
jmp 0x100453fc
mov dword [ebp - 0x8c], 0x715f0ed1
mov dword [ebp - 0xa0], 0xa7b09f59
mov dword [ebp - 0xd0], 0x7a10dd66
mov dword [ebp - 0x12c], 6
mov dword [ebp - 0x1c8], 0xffffffff
mov dword [ebp - 0x44], 0
jmp 0x1004543e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10045451
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x70], 0xc4d8
jmp 0x10045437
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x70], 0
je 0x100455c5
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x70]
cmp dword [ebp + eax - 0x70], ecx
je 0x10045484
mov dword [ebp - 0xec], 1
jmp 0x1004548b
and dword [ebp - 0xec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xec]
sub ecx, dword [ebp + eax - 0x70]
cmp ecx, 0xfffffffb
jle 0x100454ac
mov dword [ebp - 0x98], 1
jmp 0x100454b3
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0xa0], eax
jne 0x100454d9
mov dword [ebp - 0xa8], 1
jmp 0x100454e0
and dword [ebp - 0xa8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp eax, dword [ebp - 0xa8]
jle 0x100454fe
mov dword [ebp - 0xb0], 1
jmp 0x10045505
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0xb0], eax
je 0x1004551f
mov dword [ebp - 0xb8], 1
jmp 0x10045526
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x70]
add eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x8c], eax
jne 0x1004554a
mov dword [ebp - 0xc0], 1
jmp 0x10045551
and dword [ebp - 0xc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp - 0xc0], eax
jle 0x1004556f
mov dword [ebp - 0xc8], 1
jmp 0x10045576
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp - 0xd0], eax
je 0x100455a0
mov dword [ebp - 0xd8], 1
jmp 0x100455a7
and dword [ebp - 0xd8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp - 0xd8], eax
jne 0x100455c5
mov dword [ebp - 0xe0], 1
jmp 0x100455cc
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x224]
push eax
mov ecx, dword [ebp - 0xe8]
call fcn.1000759f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call fcn.10007595
jmp 0x100456b9
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x144], eax
push 0
mov ecx, dword [ebp - 0x144]
call fcn.100079ee
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xf0]
mov dword [ecx], eax
jmp 0x100456b9
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x14c]
movzx eax, byte [eax]
test eax, eax
je 0x10045683
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp 0x100456b9
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
movzx eax, byte [eax]
test eax, eax
je 0x100456b9
push 1
push 0x1a5e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret