Function at 0x40279c
Capabilities:
Reference cloudflare dns server

Disassembly:
push ebp
sub esp, 0x118
lea ebp, [esp - 4]
mov eax, dword [0x415194]
xor eax, ebp
mov dword [ebp + 0x118], eax
push 8
mov eax, 0x4105ee
call fcn.00406bc4
mov esi, dword [ebp + 0x124]
lea ecx, [ebp - 0x14]
call fcn.00404798
and dword [ebp - 4], 0
push 0
lea ecx, [ebp - 0x14]
call fcn.004047a2
mov ebx, str.SoftwareMozillaPlugins
push ebx
mov edi, 0x80000001
push edi
lea ecx, [ebp - 0x14]
call fcn.0040480f
test eax, eax
jne 0x40280f
push str.Software
push edi
lea ecx, [ebp - 0x14]
call fcn.004047de
push str.MozillaPlugins
lea ecx, [ebp - 0x14]
call fcn.0040483d
push ebx
push edi
lea ecx, [ebp - 0x14]
call fcn.004047de
test eax, eax
je 0x402a2e
push str._qianwang.com_QianWangGame_version1.0.0.1
lea ecx, [ebp - 0x14]
call fcn.0040483d
test eax, eax
je 0x402a21
push str.Description
lea ecx, [ebp]
call fcn.00401692
push str.Dfzh_Game_1.0.0.1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 1
call fcn.00401692
push str.ProductName
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 2
call fcn.00401692
push str.Dfzh_Game
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 3
call fcn.00401692
push str.Version
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 4
call fcn.00401692
push str.1.0.0.1
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 5
call fcn.00401692
push str.Vendor
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 6
call fcn.00401692
push str.Beijing_Dfzh_Tech_Ltd
lea ecx, [ebp + 0xc4]
mov byte [ebp - 4], 7
call fcn.00401692
push str.Path
lea ecx, [ebp + 0xe0]
mov byte [ebp - 4], 8
call fcn.00401692
push str.D:ProjectwxProject_trunkBinClientGameNPGamePlugin.dll
lea ecx, [ebp + 0xfc]
mov byte [ebp - 4], 9
call fcn.00401692
cmp dword [esi + 0x18], 0x10
mov byte [ebp - 4], 0xa
jb 0x4028fa
mov esi, dword [esi + 4]
jmp 0x4028fd
add esi, 4
push esi
lea ecx, [ebp + 0xfc]
call fcn.00401675
push 0x38
xor ebx, ebx
lea esi, [ebp + 0x20]
pop edi
mov eax, dword [esi + 0x10]
inc eax
cmp dword [esi + 0x14], 0x10
jb 0x40291f
mov edx, dword [esi]
jmp 0x402921
mov edx, esi
cmp dword [esi - 8], 0x10
jb 0x40292c
mov ecx, dword [esi - 0x1c]
jmp 0x40292f
lea ecx, [esi - 0x1c]
push eax
push edx
push 1
push ecx
lea ecx, [ebp - 0x14]
call fcn.00404888
test eax, eax
je 0x402960
inc ebx
add esi, edi
cmp ebx, 5
jb 0x402911
push str.MimeTypes
lea ecx, [ebp - 0x14]
call fcn.0040483d
test eax, eax
jne 0x4029bd
push str.IDS_CREATEKEY_MIMETYPES_ERROR
jmp 0x402965
push str.IDS_WRITEREGISTRY_ERROR
mov ecx, 0x41624c
call fcn.00401675
lea ecx, [ebp - 0x14]
call fcn.004047fa
push fcn.0040202e
push 5
push edi
lea eax, [ebp]
push eax
mov byte [ebp - 4], 0
call fcn.00407283
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004048aa
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x118]
xor ecx, ebp
call fcn.00406bb5
add ebp, 0x11c
leave
ret
push str.application_qianwang_npruntime_plugin
lea ecx, [ebp - 0x14]
call fcn.0040483d
test eax, eax
jne 0x402a0c
push str.IDS_CREATEKEY_SUPPORT_MIMETYPES_ERROR
mov ecx, 0x41624c
call fcn.00401675
lea ecx, [ebp - 0x14]
call fcn.004047fa
push fcn.0040202e
push 5
push edi
lea eax, [ebp]
push eax
mov byte [ebp - 4], 0
call fcn.00407283
xor esi, esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004048aa
mov eax, esi
jmp 0x40299a
push fcn.0040202e
push 5
push edi
lea eax, [ebp]
push eax
mov byte [ebp - 4], 0
call fcn.00407283
lea ecx, [ebp - 0x14]
call fcn.004047fa
xor esi, esi
inc esi
jmp 0x4029fc
push str.IDS_OPEN_MOZILLAPLUGINS_ERROR
mov ecx, 0x41624c
call fcn.00401675
jmp 0x4029fa