Function at 0x10045702
Capabilities:
Check os version
Set registry value

Disassembly:
mov eax, 0x1006a815
call fcn.10069418
sub esp, 0x16c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 2
pop edi
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x30], 0x13b28858
mov dword [ebp - 0x40], 0xfffffff9
push edi
mov byte [ebp - 0x3c], dl
call fcn.1000b069
xor ebx, ebx
mov dword [ebp - 0x18], 0x4ea885c8
mov dword [ebp - 0x20], ebx
jmp 0x10045763
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], 0x1dbdae4f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10045750
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
je 0x10045785
cmp dword [ebp - 0x24], 0x52a26f3f
jne 0x1004577e
cmp dword [ebp - 0x24], ebx
je 0x10045785
xor esi, esi
inc esi
mov edx, esi
jmp 0x1004578a
xor esi, esi
mov edx, ebx
inc esi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
mov eax, 0xa41637c1
sete cl
cmp eax, ecx
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 0xd0b0
setl dl
xor ecx, ecx
add edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 0xffffffff
setne al
sub eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x87fc
mov eax, dword [ebp - 0x24]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], esi
jg 0x100458bb
mov eax, dword [ebp - 0xa8]
push 3
mov dword [ebp - 0x44], eax
pop ecx
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1004581f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x148], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1004580e
mov dword [ebp - 0x1c], ebx
jmp 0x10045836
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x13c], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10045829
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
add ecx, 0x4395979
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, 0xfffffffb
jle 0x1004585c
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x144]
push 0xfffffffffffffffe
setge cl
xor edx, edx
neg ecx
cmp ecx, 0x35c5
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
setg cl
mov dword [ebp - 0x40], ecx
xor ecx, ecx
cmp dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x38]
setne cl
sub edx, ecx
sub edx, eax
mov eax, dword [ebp - 0x44]
mov dword [eax + 4], edx
pop eax
cmp eax, edx
push 3
sbb eax, eax
inc eax
mov dword [ebp - 0x138], eax
inc dword [ebp - 0x24]
pop ecx
cmp dword [ebp - 0x24], esi
jle 0x100457ff
lea ecx, [ebp - 0xa8]
call fcn.1000b0c5
mov dword [ebp - 0x20], ebx
jmp 0x100458d8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x160], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100458cb
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x100458ed
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x100458fd
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommState]
mov eax, dword [0x1006f8fc]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x24], 0x51ad386c
mov dword [ebp - 0x20], 7
push edi
mov dword [ebp - 0x48], 4
mov dword [ebp - 0x30], eax
call fcn.1000b069
mov dword [ebp - 0x1c], ebx
jmp 0x1004593a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1004592b
imul eax, dword [ebp - 0x24], 0x6941
test eax, eax
je 0x10045964
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x24]
imul eax, eax, 0xe305
test eax, eax
je 0x10045964
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setl dl
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], ebx
jmp 0x10045a29
mov dword [ebp - 0x2c], 0xfffffffd
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10045995
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 0x20], ebx
jmp 0x10045a1d
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x4c], 0xc509ca4f
mov dword [ebp - 0x4c], 0x3372585f
mov dword [ebp - 0x18], ebx
jmp 0x10045a15
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x1c], ebx
jmp 0x100459e4
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], ebx
jmp 0x100459dc
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x100459d9
push ebx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x100459ca
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x100459c2
mov dword [ebp - 0x1c], ebx
jmp 0x10045a0d
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10045a07
push 0x2f6
push 0x105
push ebx
call dword [sym.imp.USER32.dll_RemoveMenu]
inc dword [ebp - 0x2c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x100459ee
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x100459b3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x1004599d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x1004597c
lea ecx, [ebp - 0x110]
call fcn.1000b0c5
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], 0xbf3
mov dword [ebp - 0x28], 0xefb6f65e
mov dword [ebp - 0x20], 0x3735b263
mov dword [ebp - 0x18], 0x14f4e797
mov dword [ebp - 0x24], 0x7d266845
mov dword [ebp - 0x2c], 0xd505
mov dword [ebp - 0x40], 0xeac84c92
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10045a8f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x58], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10045a81
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp eax, 0x6b471dfd
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
jne 0x10045ab8
mov edx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10045aba
mov edx, esi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
sub edx, eax
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
test eax, eax
jne 0x10045b4d
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x20], eax
jle 0x10045b2f
mov edx, ebx
cmp dword [ebp - 0x40], ebx
je 0x10045b31
mov edx, esi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, edx
setg cl
xor eax, eax
cmp ecx, 0x2b63
setle al
cmp dword [ebp - 0x58], eax
mov eax, ebx
jle 0x10045b4f
mov eax, esi
mov dword [ebp - 0x18], eax
cmp byte [ebp - 0x3c], bl
je 0x10045d07
cmp dword [ebp - 0x30], esi
jne 0x10045d07
mov dword [ebp - 0x28], 0x928c176b
mov dword [ebp - 0x28], 0x15
jmp 0x10045b97
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10045b8e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10045b8b
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x10
jl 0x10045b7c
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff1
jge 0x10045b74
mov dword [ebp - 0x28], 0x172
cmp dword [ebp - 0x28], 0x3e9
jle 0x10045c02
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
sar eax, cl
lea ecx, [ebp - 0x178]
cdq
push edx
push eax
call fcn.1000cf11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10045bd1
mov eax, dword [eax]
push eax
call fcn.100507d6
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x178]
call fcn.1000b3b8
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x5fde
jl 0x10045bb7
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0xea7
jl 0x10045bb2
cmp dword [ebp - 0x28], 0xfffffd8f
mov eax, dword [ebp + 8]
mov dword [eax + 8], 4
jge 0x10045c20
push 0x10008fac
call fcn.100507d6
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x3ca9
cmp dword [ebp - 0x18], 0x4070
jle 0x10045c6a
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x2c]
mov ecx, esi
mov eax, ebx
sar eax, cl
mov ecx, 0x106112b8
cdq
push edx
push eax
call fcn.1000af54
inc esi
cmp esi, 0x615c
jl 0x10045c3c
inc ebx
push 0
mov dword [ebp - 0x2c], ebx
cmp ebx, 0x6b63
pop ebx
jl 0x10045c37
xor esi, esi
inc esi
mov dword [ebp - 4], edi
cmp dword [ebp - 0x18], 0x3937
jge 0x10045c85
mov edx, 0x10008fc0
mov ecx, 0x106112b8
call fcn.1000c9c4
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x4c], 0xb8faaaeb
mov dword [ebp - 0x18], ebx
jmp 0x10045cd5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x120], 0x39beb064
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10045cc4
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10045cef
push ebx
push 0x3b5
call dword [sym.imp.GDI32.dll_RectVisible]
mov eax, 0xa6318529
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp + 8]
mov dword [eax + 0xc], 0x1006f8fc
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], ebx
jmp 0x10045d20
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xec], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10045d0f
mov dword [ebp - 0x20], ebx
jmp 0x10045d3b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xec], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10045d2a
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10045d5b
push ebx
push ebx
push 0x174c
push 0xb82
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 0x40], 0x47ac
cmp dword [ebp - 0x40], 0x4a4b
mov dword [ebp - 0x4c], 0x10009018
jle 0x10045da6
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x2c]
mov eax, esi
mov ecx, 0x106112b8
or eax, ebx
cdq
push edx
push eax
call fcn.1000af54
inc esi
cmp esi, 0xae5
jl 0x10045d7a
inc ebx
push 0
mov dword [ebp - 0x2c], ebx
cmp ebx, 0x2d0e
pop ebx
jl 0x10045d75
xor esi, esi
inc esi
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x30]
jge 0x1004646d
push edi
lea ecx, [ebp - 0xf8]
call fcn.1000b069
mov dword [ebp - 4], 4
lea eax, [ebp - 0x120]
push dword [ebp + 8]
movdqa xmm0, xmmword [0x10009270]
lea ecx, [ebp - 0x80]
push eax
lea eax, [ebp - 0x130]
mov dword [ebp - 0x80], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x130], xmm0
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
call fcn.100240e8
mov dword [ebp - 0x18], ebx
jmp 0x10045e0c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10045dfd
mov eax, dword [ebp - 0x80]
mov dword [eax], ebx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10045e26
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x80]
call fcn.1000b0c5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf8]
call fcn.1000b0c5
mov dword [ebp - 0x1c], ebx
mov eax, 0x4bda99da
mov dword [ebp - 0x90], eax
mov edi, 0x1006f900
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x38], 0x90f3bd79
mov dword [ebp - 0x18], ebx
jmp 0x10045e7c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], 0x648261f9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10045e6e
push 2
mov dword [ebp - 0x1c], ebx
pop ecx
jmp 0x10045ea6
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], ebx
jmp 0x10045e9e
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x70], ebx
jne 0x10045ea3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x10045e92
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jle 0x10045e8a
cmp dword [ebp - 0x6c], ebx
jne 0x10045eb7
mov eax, ebx
cmp dword [ebp - 0x68], ebx
je 0x10045eb9
mov eax, esi
cmp eax, dword [ebp - 0x68]
jl 0x10045ec1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x70]
xor edx, edx
mov ecx, dword [ebp - 0x68]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
push 5
setl dl
sub edx, dword [ebp - 0x1c]
neg edx
pop eax
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
cmp eax, edx
sbb eax, eax
neg eax
cmp eax, 0x9f4f9a02
jne 0x10045efd
mov eax, ebx
cmp dword [ebp - 0x90], ebx
je 0x10045eff
mov eax, esi
mov dword [ebp - 0x1c], eax
xor edx, edx
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setl dl
xor eax, eax
cmp edx, 0x3d37a5b7
setle al
cmp eax, dword [ebp - 0x84]
jne 0x10045f2b
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x38], 0xfffffffd
mov eax, ebx
mov dword [ebp - 0x38], ebx
cmp eax, dword [ebp - 0x54]
mov eax, dword [edi]
jge 0x1004624a
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x18], ebx
jmp 0x10045f5b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9c], 0xd41e5596
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10045f4a
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x10045fb1
mov dword [ebp - 0x20], 0x70ade216
mov dword [ebp - 0x2c], 0x963ba20b
mov dword [ebp - 0x20], ebx
jmp 0x10045fa9
mov eax, dword [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x94]
mov dword [ebp - 0x94], edx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff1
je 0x10045f84
jmp 0x10045fc1
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10045fc1
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
add edi, dword [ebp - 0x48]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x34], edi
mov eax, dword [edi]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], ebx
jmp 0x10045fe2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x50], 0xc0ae9714
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10045fd4
mov dword [ebp - 0x1c], 0x2df7
cmp dword [ebp - 0x1c], 0x2f28
jle 0x10046062
mov dword [ebp - 0x28], ebx
mov edi, dword [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x2c], ecx
mov eax, esi
cdq
idiv ecx
mov eax, ebx
mov ecx, edx
shl eax, cl
mov ecx, 0x106112b8
or eax, edi
cdq
push edx
push eax
call fcn.1000af54
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x6c18
jl 0x1004600a
inc esi
push 0
pop ebx
cmp esi, 0x4945
jl 0x10046002
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x66a
jl 0x10046000
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x30f
jl 0x10045ffa
mov edi, dword [ebp - 0x20]
xor esi, esi
inc esi
mov dword [ebp - 0x50], ebx
jmp 0x1004608f
mov dword [ebp - 0x18], ebx
jmp 0x1004607d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x154], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1004606c
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x14c], eax
dec dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0xffffffe7
jle 0x10046067
mov dword [ebp - 4], 5
cmp dword [ebp - 0x1c], 0x2abc
jge 0x100460b4
mov edx, 0x10009050
mov ecx, 0x106112b8
call fcn.1000c9c4
or dword [ebp - 4], 0xffffffff
add edi, dword [ebp - 0x48]
lea ecx, [ebp - 0xb4]
push 3
call fcn.1000b069
mov dword [ebp - 4], 7
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x20], 8
push 3
call fcn.1000b069
push 3
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x10046126
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0xb9b55bb2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10046113
mov dword [ebp - 0x1c], ebx
jmp 0x10046143
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 0x8795010f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10046130
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], ebx
jl 0x1004617b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb4]
cmp dword [eax + ecx*4], ebx
jne 0x1004617b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb4]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0xcc]
mov dword [eax], ecx
dec dword [ebp - 0x20]
jns 0x10046154
lea ecx, [ebp - 0xcc]
call fcn.1000b0c5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4]
call fcn.1000b0c5
cmp dword [ebp - 0x24], 0
jne 0x100461a1
mov eax, dword [ebp - 0x48]
lea edi, [edi + eax*2]
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0x2cb13638
mov dword [ebp - 0x34], 0x3c69aed2
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x20], 0x516a205b
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x18], ebx
jmp 0x100461e8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x118], 0x3126ff23
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100461d7
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
neg eax
jne 0x10046225
cmp dword [ebp - 0x1c], 0x4df8e3bf
jge 0x10046208
mov ecx, ebx
cmp dword [ebp - 0x28], ebx
je 0x1004620a
mov ecx, esi
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, ebx
setg cl
add ecx, dword [ebp - 0x20]
je 0x10046227
mov eax, esi
add edi, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x114], ecx
mov eax, dword [ebp - 0x28]
add eax, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
jmp 0x10045f37
add edi, dword [ebp - 0x48]
mov dword [ebp - 0x34], ebx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edi
je 0x10046268
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1004627b
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov eax, dword [edi]
lea ecx, [ebp - 0xe4]
push 3
mov dword [ebp - 0x34], eax
call fcn.1000b069
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x38], 0x6318d581
push 2
call fcn.1000b069
mov byte [ebp - 4], 9
mov dword [ebp - 0x1c], ebx
jmp 0x100462c0
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100462b1
mov dword [ebp - 0x1c], ebx
jmp 0x100462de
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 0x9fb023ed
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100462cb
mov edi, dword [ebp - 0xe4]
mov dword [edi + 4], ebx
push esi
lea ecx, [ebp - 0xd8]
call fcn.1000b069
mov dword [ebp - 0x18], ebx
jmp 0x10046311
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100462fe
mov eax, dword [ebp - 0xd8]
inc dword [eax]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10046338
push 0x2128
push 0x10e9
push ebx
call dword [sym.imp.GDI32.dll_OffsetRgn]
lea ecx, [ebp - 0xd8]
call fcn.1000b0c5
inc dword [edi + 4]
cmp dword [edi + 4], 6
jle 0x100462ed
lea ecx, [ebp - 0x104]
call fcn.1000b0c5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4]
call fcn.1000b0c5
mov edi, dword [ebp - 0x20]
add edi, dword [ebp - 0x48]
mov dword [ebp - 0x38], 0xfff8
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10046384
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10046399
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [ebp - 0x34], 0
jne 0x1004646d
cmp byte [ebp - 0x3c], 0
je 0x100463bd
cmp dword [ebp - 0x30], esi
jne 0x100463bd
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp + 8]
add dword [ecx + 8], eax
mov eax, dword [edi]
add edi, dword [ebp - 0x48]
push dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
mov eax, dword [edi]
add edi, dword [ebp - 0x48]
mov dword [ebp - 0x34], eax
call fcn.1004bcf1
pop ecx
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x74]
mov dword [ebp - 0x74], ebx
push eax
push dword [ebp - 0x24]
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
call fcn.1004ada9
mov eax, dword [ebp - 0x24]
mov edx, ebx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x44], ebx
test eax, eax
jle 0x1004644e
mov eax, edx
and eax, 0x80000001
jns 0x10046411
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x38]
add eax, edx
add eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x34]
jmp 0x10046426
lea eax, [edx + 1]
cdq
idiv dword [ebp - 0x24]
cmp word [ecx + edx*2], bx
jne 0x10046423
mov word [ecx + edx*2], si
mov al, byte [edx + edi]
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x54]
mov byte [edx + ecx], al
inc edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x44], edx
cmp edx, eax
jl 0x10046403
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov eax, dword [ebp - 0x54]
mov dword [edx + 4], eax
test ecx, ecx
je 0x1004646d
push ecx
call fcn.10050947
pop ecx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x40], 0x44c4
jge 0x1004648a
mov edx, dword [ebp - 0x4c]
mov ecx, 0x106112b8
call fcn.1000c9c4
or dword [ebp - 4], 0xffffffff
push 3
lea ecx, [ebp - 0xc0]
call fcn.1000b069
mov dword [ebp - 0x30], ebx
jmp 0x100464d5
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0x2e91a049
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jl 0x100464c2
mov eax, dword [ebp - 0xc0]
mov dword [eax], 0xfffffff9
mov eax, dword [eax]
mov dword [ebp - 0x4c], 0x8c0a
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10046504
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov eax, dword [ebp - 0xc0]
inc dword [eax]
cmp dword [eax], 0x16
jne 0x100464e7
lea ecx, [ebp - 0xc0]
call fcn.1000b0c5
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret