Function at 0x409bd0
Capabilities:
Contain obfuscated stackstrings
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ed0c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc84
push ebx
mov ebx, ecx
push esi
push edi
lea ecx, [ebp - 0x50]
call fcn.004272c0
mov esi, dword [ebx + 0x98]
xor edi, edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], edi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x44], edi
call fcn.004272c0
push str.QvodPlayer
lea ecx, [ebp - 0x3c]
mov word [ebp - 0x3c], di
call fcn.004067a0
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x3c]
push eax
push ecx
push str.selectSingleNode
lea ecx, [esi + 4]
mov byte [ebp - 4], 2
call fcn.00407e00
lea edx, [ebp - 0x3c]
mov dword [esi + 8], eax
mov esi, dword [0x4f936c]
push edx
mov byte [ebp - 4], 1
call esi
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 8], edi
jl 0x409c70
mov eax, dword [ebp - 0x40]
cmp eax, edi
je 0x409c70
push eax
lea ecx, [ebp - 0x50]
call fcn.00407de0
mov dword [ebp - 0x44], 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.004282a0
cmp dword [ebp - 0x44], edi
je 0x40ae4e
lea ecx, [ebp - 0x30]
call fcn.004272c0
cmp dword [ebp + 8], edi
jne 0x409d01
mov ecx, dword [ebx + 0x98]
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x48]
call fcn.004272c0
push str.General
lea ecx, [ebp - 0x1c]
mov word [ebp - 0x1c], di
call fcn.004067a0
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x1c]
push edx
push eax
push str.createElement
add ecx, 4
mov byte [ebp - 4], 5
call fcn.00407e00
mov edx, dword [ebp - 0x40]
mov byte [ebp - 4], 4
mov dword [edx + 8], eax
lea eax, [ebp - 0x1c]
push eax
call esi
mov ecx, dword [ebp - 0x40]
cmp dword [ecx + 8], edi
jl 0x409cf8
mov eax, dword [ebp - 0x48]
cmp eax, edi
je 0x409cf8
push eax
lea ecx, [ebp - 0x30]
call fcn.00407de0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x48]
jmp 0x409d5c
lea ecx, [ebp - 0x40]
call fcn.004272c0
push str.General
lea ecx, [ebp - 0x1c]
mov word [ebp - 0x1c], di
call fcn.004067a0
lea edx, [ebp - 0x40]
lea eax, [ebp - 0x1c]
push edx
push eax
push str.selectSingleNode
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 7
call fcn.00407e00
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x54], eax
push ecx
mov byte [ebp - 4], 6
call esi
cmp dword [ebp - 0x54], edi
jl 0x409d55
mov eax, dword [ebp - 0x40]
cmp eax, edi
je 0x409d55
push eax
lea ecx, [ebp - 0x30]
call fcn.00407de0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.004282a0
mov eax, dword [ebx + 0x28]
lea ecx, [ebp - 0x2c]
push eax
mov word [ebp - 0x2c], di
call fcn.004067a0
push str.Insertpath
lea ecx, [ebp - 0x1c]
mov word [ebp - 0x1c], di
call fcn.004067a0
lea edx, [ebp - 0x2c]
push edi
lea eax, [ebp - 0x1c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 9
call fcn.00406870
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x2c]
push edx
call esi
mov eax, dword [ebx + 0x2c]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.Insertexe
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xb
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov eax, dword [ebx + 0x30]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.StartupMinimize
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xd
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
mov eax, dword [ebx + 0x34]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Autorun
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xf
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov eax, dword [ebx + 0x38]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Opensave
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov eax, dword [ebx + 0x3c]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Connnum
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x13
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
push ecx
call esi
cmp dword [ebp + 8], edi
jne 0x409f40
mov edx, dword [ebx + 0x40]
cmp dword [edx - 8], edi
jne 0x409f40
mov eax, str.C:Media_
test eax, eax
je 0x409f32
push str.C:Media_
call dword [0x4f9318]
push str.C:Media_
push eax
lea ecx, [ebx + 0x40]
call fcn.00402200
mov eax, dword [ebx + 0x40]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.Defaultsavepath
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x15
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
push ecx
call esi
cmp dword [ebp + 8], edi
jne 0x409fa8
mov edx, dword [ebx + 0x28]
lea eax, [ebx + 0x44]
push edx
push str._sFavorite_
push eax
call fcn.004073f0
add esp, 0xc
mov eax, dword [ebx + 0x44]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.Defaultfavpath
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x17
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
push ecx
call esi
mov eax, dword [ebx + 0x44]
push edi
push eax
call dword [0x4f9300]
test eax, eax
je 0x40a1ca
mov edx, dword [0x50a0e0]
mov dword [ebp - 0x48], edx
mov eax, dword [ebx + 0x44]
lea ecx, [ebp - 0x48]
push eax
push 0x50adb0
push ecx
mov byte [ebp - 4], 0x18
call fcn.004073f0
mov eax, dword [ebp - 0x48]
add esp, 0xc
cmp eax, edi
mov dword [ebp - 0x44], eax
jne 0x40a039
xor eax, eax
jmp 0x40a062
push eax
call dword [0x4f9318]
lea eax, [eax + eax + 2]
mov dword [ebp - 0x4c], eax
add eax, 3
and al, 0xfc
call fcn.004dd3c0
mov edx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x44]
mov eax, esp
push edi
push edx
push ecx
push eax
call fcn.00406740
push 0x50adac
push eax
call fcn.004dd238
add esp, 8
cmp eax, edi
mov dword [ebp - 0x58], eax
je 0x40a16c
mov edx, dword [0x50a0e0]
mov dword [ebp - 0x40], edx
mov eax, dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x28]
push eax
push ecx
lea edx, [ebp - 0x40]
push 0x50b3cc
push edx
mov byte [ebp - 4], 0x19
call fcn.004073f0
mov eax, dword [ebp - 0x40]
add esp, 0x10
cmp eax, edi
mov dword [ebp - 0x44], eax
jne 0x40a0b0
mov dword [ebp - 0x44], edi
jmp 0x40a0dc
push eax
call dword [0x4f9318]
lea eax, [eax + eax + 2]
mov dword [ebp - 0x4c], eax
add eax, 3
and al, 0xfc
call fcn.004dd3c0
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x44]
mov eax, esp
push edi
push ecx
push edx
push eax
call fcn.00406740
mov dword [ebp - 0x44], eax
mov edi, dword [ebp - 0x44]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._.ShellClassInfo__r_nIconFile_s_r_nIconIndex26_r_nInfoTipQvod_Player
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [edx + ecx + 0x104]
push edi
call fcn.004dcb8f
mov edx, eax
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebp - 0x44]
mov edi, dword [ebp - 0x58]
push eax
push str._.ShellClassInfo__r_nIconFile_s_r_nIconIndex26_r_nInfoTipQvod_Player
push edi
call fcn.004dd1cb
push edi
call fcn.004dd14e
mov eax, dword [ebp - 0x40]
mov edx, dword [0x50a0e4]
add esp, 0x10
mov byte [ebp - 4], 0x18
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x40a16a
add eax, 0xfffffff4
push eax
call dword [0x4f9320]
test eax, eax
jg 0x40a16a
mov edx, dword [ebp - 0x40]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
xor edi, edi
mov eax, dword [ebx + 0x44]
lea ecx, [ebp - 0x48]
push eax
push 0x50adb0
push ecx
call fcn.004073f0
mov edx, dword [ebp - 0x48]
add esp, 0xc
push 2
push edx
call dword [0x4f9304]
mov eax, dword [ebx + 0x44]
push 4
push eax
call dword [0x4f9304]
mov eax, dword [ebp - 0x48]
mov edx, dword [0x50a0e4]
mov byte [ebp - 4], 3
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x40a1ca
add eax, 0xfffffff4
push eax
call dword [0x4f9320]
test eax, eax
jg 0x40a1ca
mov edx, dword [ebp - 0x48]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
cmp dword [ebp + 8], edi
jne 0x40a1e4
mov eax, dword [ebx + 0x28]
lea ecx, [ebx + 0x48]
push eax
push str._sSkin_
push ecx
call fcn.004073f0
add esp, 0xc
mov eax, dword [ebx + 0x48]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.Defaultskinpath
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1b
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov eax, dword [ebx + 0x58]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Opentorrentpath
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1d
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 3
push eax
call esi
cmp dword [ebp + 8], edi
jne 0x40a292
mov ecx, dword [ebx + 0x28]
lea edx, [ebx + 0x4c]
push ecx
push str._sLang_
push edx
call fcn.004073f0
add esp, 0xc
mov eax, dword [ebx + 0x4c]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.Defaultlangpath
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov eax, dword [ebx + 0x54]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Langid
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x21
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
push ecx
call esi
lea ecx, [ebp - 0xc90]
call fcn.004c3680
mov eax, dword [ebx + 0x19c]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Clickpause
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x24
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov eax, dword [ebx + 0x60]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Connlimit
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x26
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov eax, dword [ebx + 0x1b8]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Exitlimit
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x28
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
mov eax, dword [ebx + 0x1bc]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Mediashowother
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2a
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov eax, dword [ebx + 0x64]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
mov word [ebp - 0x2c], di
push str.Viewframe
lea ecx, [ebp - 0x2c]
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2c
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov eax, dword [ebx + 0x68]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Soundtrack
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2e
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
mov eax, dword [ebx + 0x6c]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Bosskey
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x30
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov eax, dword [ebx + 0x70]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Bossvalue
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
mov byte [ebp - 4], 0x32
push edi
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov eax, dword [ebx + 0x74]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Bossctrl
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x34
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
mov eax, dword [ebx + 0x78]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Closeandexit
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x36
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov eax, dword [ebx + 0x7c]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Menutip
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x38
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov eax, dword [ebx + 0x80]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Mute
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3a
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
mov eax, dword [ebx + 0x88]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Volume
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3c
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov eax, dword [ebx + 0xe0]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Mediaindex
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3e
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov eax, dword [ebx + 0x1a0]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.SendMsn
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x40
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
mov eax, dword [ebx + 0x528]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.exitclearlist
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x42
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
mov byte [ebp - 4], 0x22
push edx
call esi
cmp dword [ebp + 8], edi
jne 0x40a7ca
mov eax, dword [ebx + 0x28]
lea ecx, [ebx + 0x8c]
push eax
push str._sPicture_
push ecx
call fcn.004073f0
add esp, 0xc
mov eax, dword [ebx + 0x8c]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.Snapshotpath
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x44
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
mov byte [ebp - 4], 0x22
push edx
call esi
cmp dword [ebp + 8], edi
jne 0x40a835
mov eax, dword [ebx + 0x28]
lea ecx, [ebx + 0x50]
push eax
push str._sResmenuselect.bmp
push ecx
call fcn.004073f0
add esp, 0xc
mov eax, dword [ebx + 0x50]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.Menulistimage
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x46
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
mov byte [ebp - 4], 0x22
push edx
call esi
cmp dword [ebp + 8], edi
jne 0x40a8f2
mov ecx, dword [ebx + 0x28]
lea eax, [ebx + 0x184]
push ecx
push str._sSkinlogo.bmp
push eax
call fcn.004073f0
mov edx, dword [ebx + 0x18c]
mov eax, dword [ebx + 0x184]
lea ecx, [ebx + 0x18c]
add esp, 0xc
cmp edx, eax
je 0x40a8f2
cmp dword [edx - 0xc], edi
jge 0x40a8c6
add edx, 0xfffffff4
cmp edx, dword [0x50a0e4]
jne 0x40a8cb
cmp dword [eax - 0xc], edi
jge 0x40a8d7
mov edx, dword [eax - 8]
push eax
push edx
call fcn.00402200
jmp 0x40a8f2
call fcn.004020f0
mov eax, dword [ebx + 0x184]
mov dword [ebx + 0x18c], eax
add eax, 0xfffffff4
push eax
call dword [0x4f9310]
mov eax, dword [ebx + 0x184]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.BgDefault
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x48
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov eax, dword [ebx + 0x18c]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.BgSetfiles
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea ecx, [ebp - 0x1c]
push edi
lea edx, [ebp - 0x2c]
push ecx
push edx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x4a
call fcn.00406870
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
mov eax, dword [ebx + 0x188]
lea ecx, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], di
call fcn.004067a0
push str.BgUserselect
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea edx, [ebp - 0x1c]
push edi
lea eax, [ebp - 0x2c]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x4c
call fcn.00406870
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov eax, dword [ebx + 0x180]
mov word [ebp - 0x1c], 3
mov dword [ebp - 0x14], eax
push str.Keshisuji
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], di
call fcn.004067a0
lea eax, [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x2c]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x4e
call fcn.00406870
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x34], eax
push edx
call esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x22
push eax
call esi
mov ecx, dword [ebx + 0x198]
push ecx
push str.ImagePlaytimes
lea ecx, [ebp - 0x34]
call fcn.00408260
mov edx, dword [ebx + 0x190]
lea ecx, [ebp - 0x34]
push edx
push str.VideoAdjust
call fcn.00408260
cmp dword [ebp + 8], edi
jne 0x40ab57
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x54]
push eax
call fcn.00409940
mov ecx, dword [ebx + 0x118]
lea esi, [ebx + 0x118]
cmp dword [ecx - 8], edi
jne 0x40aa99
mov edx, 0x50aa04
test edx, edx
jne 0x40aa81
xor eax, eax
jmp 0x40aa8c
push 0x50aa04
call dword [0x4f9318]
push 0x50aa04
push eax
mov ecx, esi
call fcn.00402200
mov eax, dword [ebx + 0x11c]
lea esi, [ebx + 0x11c]
cmp dword [eax - 8], edi
jne 0x40ab57
push 0x51d42c
push 0x80000001
lea ecx, [ebp - 0x87c]
call fcn.004c36c0
push 0x208
lea ecx, [ebp - 0x468]
push edi
push ecx
mov byte [ebp - 4], 0x4f
call fcn.00406700
add esp, 0xc
lea edx, [ebp - 0x468]
lea ecx, [ebp - 0x87c]
push 0x208
push edx
push str.Desktop
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders_
call fcn.004c3710
lea eax, [ebp - 0x468]
mov ecx, esi
push eax
call fcn.00406d00
lea ecx, [ebp - 0x468]
push ecx
call fcn.004dd4cc
add esp, 4
cmp word [ebp + eax*2 - 0x468], 0x5c
je 0x40ab48
push 0x50b02c
lea edx, [ebp + 8]
push esi
push edx
call fcn.00402910
push eax
mov ecx, esi
mov byte [ebp - 4], 0x50
call fcn.004022b0
lea ecx, [ebp + 8]
call fcn.004021d0
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 0x22
call fcn.004c3700
mov eax, dword [ebx + 0x10c]
lea ecx, [ebp - 0x34]
push eax
push str.imagerows
call fcn.00408260
mov ecx, dword [ebx + 0x110]
push ecx
push str.imagecols
lea ecx, [ebp - 0x34]
call fcn.00408260
mov edx, dword [ebx + 0x114]
lea ecx, [ebp - 0x34]
push edx
push str.imagewidth
call fcn.00408260
mov eax, dword [ebx + 0x118]
lea ecx, [ebp - 0x34]
push eax
push str.imagepoint
call fcn.00408090
mov eax, dword [ebx + 0x11c]
lea ecx, [ebp - 0x34]
push eax
push str.imagepath
call fcn.00408090
mov eax, dword [ebx + 0x1c0]
lea ecx, [ebp - 0x34]
push eax
push str.bsavepro
call fcn.00408260
mov eax, dword [ebx + 0x1c4]
lea ecx, [ebp - 0x34]
push eax
push str.strsavepro
call fcn.00408090
mov ecx, dword [ebx + 0x1c8]
push ecx
push str.nsavepro
lea ecx, [ebp - 0x34]
call fcn.00408260
mov edx, dword [ebx + 0x534]
lea ecx, [ebp - 0x34]
push edx
push str.bEveryday
call fcn.00408260
mov eax, dword [ebx + 0x640]
cmp dword [eax - 8], edi
je 0x40ac24
push eax
push str.AboutTitle
lea ecx, [ebp - 0x34]
call fcn.00408090
lea eax, [ebx + 0x538]
lea ecx, [ebp + 8]
push eax
call fcn.0040ae80
mov eax, dword [ebx + 0x63c]
mov byte [ebp - 4], 0x51
cmp eax, edi
je 0x40ac5a
cmp dword [ebx + 0x6c8], edi
jne 0x40ac5a
mov ecx, dword [ebp + 8]
push ecx
push str.Terminalip
lea ecx, [ebp - 0x34]
call fcn.00408090
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x22
call fcn.004021d0
mov eax, dword [ebx + 0x644]
lea ecx, [ebp - 0x34]
push eax
push str.AudioOut
call fcn.00408090
mov edx, dword [ebx + 0x650]
lea ecx, [ebp - 0x34]
push edx
push str.PingBao
call fcn.00408260
mov eax, dword [ebx + 0x654]
lea ecx, [ebp - 0x34]
push eax
push str.ClickClose
call fcn.00408260
mov ecx, dword [ebx + 0x658]
push ecx
push str.PlayTiao
lea ecx, [ebp - 0x34]
call fcn.00408260
mov edx, dword [ebx + 0x65c]
lea ecx, [ebp - 0x34]
push edx
push str.GaoQing
call fcn.00408260
mov eax, dword [ebx + 0x660]
lea ecx, [ebp - 0x34]
push eax
push str.ConnBTFile
call fcn.00408260
mov eax, dword [ebx + 0x664]
lea ecx, [ebp - 0x34]
push eax
push str.SubAddpath
call fcn.00408090
mov ecx, dword [ebx + 0x668]
push ecx
push str.Savevideof
lea ecx, [ebp - 0x34]
call fcn.00408260
mov edx, dword [ebx + 0x668]
lea ecx, [ebp - 0x34]
push edx
push str.Savevideofenbian
call fcn.00408260
mov eax, dword [ebx + 0x670]
lea ecx, [ebp - 0x34]
push eax
push str.Savevideopath
call fcn.00408090
mov eax, dword [ebx + 0x680]
lea ecx, [ebp - 0x34]
push eax
push str.adupdatetime
call fcn.00408090
mov eax, dword [ebx + 0x684]
lea ecx, [ebp - 0x34]
push eax
push str.pauseadshow
call fcn.00408260
cmp dword [ebx + 0x63c], edi
je 0x40ad72
mov eax, dword [ebx + 0x678]
lea ecx, [ebp - 0x34]
push eax
push str.webadder
call fcn.00408090
mov ecx, dword [ebx + 0x688]
push ecx
push str.autovideosize
lea ecx, [ebp - 0x34]
call fcn.00408260
mov edx, dword [ebx + 0x68c]
lea ecx, [ebp - 0x34]
push edx
push str.autodeletefile
call fcn.00408260
mov eax, dword [ebx + 0x690]
lea esi, [ebx + 0x690]
cmp eax, edi
jg 0x40adb3
push esi
call fcn.004dcf72
add esp, 4
mov eax, dword [esi]
lea ecx, [ebp - 0x34]
push eax
push str.autodeletetime
call fcn.00409a60
mov ecx, dword [ebx + 0x6a0]
push ecx
push str.Nextdownplay
lea ecx, [ebp - 0x34]
call fcn.00408260
mov edx, dword [ebx + 0x6a4]
lea ecx, [ebp - 0x34]
push edx
push str.Xuanran
call fcn.00408260
mov eax, dword [ebx + 0x6b0]
lea ecx, [ebp - 0x34]
push eax
push str.protocol
call fcn.00408260
mov ecx, dword [ebx + 0x6b4]
push ecx
push str.exitall
lea ecx, [ebp - 0x34]
call fcn.00408260
mov edx, dword [ebx + 0x6c0]
lea ecx, [ebp - 0x34]
push edx
push str.stopad
call fcn.00408260
mov ecx, dword [ebx + 0x98]
push edi
call fcn.00402b80
lea ecx, [ebp - 0xc90]
mov byte [ebp - 4], 3
call fcn.004c3700
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0
call fcn.004282a0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xffffffff
call fcn.004282a0
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0xc9c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4