Function at 0x4062de
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48395e
mov eax, dword fs:[0]
push eax
mov eax, 0x2c68
call fcn.0046e040
mov eax, dword [0x49f390]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2c14], edi
mov dword [edi], vtable.TiXmlPrinter.0
lea ebx, [edi + 4]
call fcn.0045d8e8
lea ecx, [ebx + 4]
mov dword [ecx], eax
mov byte [eax + 0x2d], 1
mov eax, dword [ecx]
mov dword [eax + 4], eax
mov eax, dword [ecx]
mov dword [eax], eax
mov ecx, dword [ecx]
mov dword [ecx + 8], ecx
xor ecx, ecx
mov dword [ebx + 8], ecx
lea eax, [edi + 0x70]
push 7
mov dword [ebp - 4], ecx
pop edx
mov dword [eax + 0x18], edx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x2bf0], eax
mov word [eax + 4], cx
lea eax, [edi + 0x94]
mov dword [eax + 0x18], edx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x2c1c], eax
mov word [eax + 4], cx
lea eax, [edi + 0xe8]
push eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x2c30], eax
call fcn.0045b113
lea eax, [edi + 0x160]
push eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x2c38], eax
call fcn.0045b113
lea eax, [edi + 0x1d8]
push eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x2c40], eax
call fcn.0045b113
lea eax, [edi + 0x250]
push eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x2c48], eax
call fcn.0045b113
lea eax, [edi + 0x2c8]
push eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x2c50], eax
call fcn.0045b38f
lea eax, [edi + 0x338]
push eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x2c58], eax
call fcn.0045b38f
lea eax, [edi + 0x3a8]
push eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x2c28], eax
call fcn.0045b38f
lea eax, [edi + 0x418]
push eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x2c54], eax
call fcn.0045b38f
mov byte [ebp - 4], 0xa
lea eax, [edi + 0x488]
push eax
mov dword [ebp - 0x2c2c], eax
call fcn.0045b652
lea esi, [edi + 0x508]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x2c4c], esi
call fcn.0045b998
lea esi, [edi + 0x544]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x2c34], esi
call fcn.0045b998
lea esi, [edi + 0x580]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x2c5c], esi
call fcn.0045b998
lea esi, [edi + 0x5bc]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2c3c], esi
call fcn.0045b998
lea esi, [edi + 0x5f8]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x2c70], esi
call fcn.0045b998
lea esi, [edi + 0x634]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x2c44], esi
call fcn.0045b998
lea esi, [edi + 0x670]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x2c68], esi
call fcn.0045b998
lea eax, [edi + 0x6ac]
mov byte [ebp - 4], 0x12
push eax
mov dword [ebp - 0x2c20], eax
call fcn.0045b113
mov byte [ebp - 4], 0x13
call fcn.004472f6
and dword [edi + 0x734], 0
mov dword [edi + 0x730], eax
mov eax, str.HKEY_CLASSES_ROOT
lea ecx, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.004047b7
mov dword [ebp - 0x2bf4], 0x80000000
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x15
call fcn.0040d29e
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, str.HKEY_CURRENT_USER
lea ecx, [ebp - 0x2c10]
call fcn.004047b7
mov dword [ebp - 0x2bf4], 0x80000001
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x16
call fcn.0040d29e
push 0
mov byte [ebp - 4], 0x14
push 1
lea esi, [ebp - 0x2c10]
call fcn.00404ae2
mov eax, str.HKEY_LOCAL_MACHINE
lea ecx, [ebp - 0x2c10]
call fcn.004047b7
mov dword [ebp - 0x2bf4], 0x80000002
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x17
call fcn.0040d29e
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, str.HKEY_USERS
lea ecx, [ebp - 0x2c10]
call fcn.004047b7
mov dword [ebp - 0x2bf4], 0x80000003
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x18
call fcn.0040d29e
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, str.HKEY_PERFORMANCE_DATA
lea ecx, [ebp - 0x2c10]
call fcn.004047b7
mov dword [ebp - 0x2bf4], 0x80000004
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x19
call fcn.0040d29e
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, str.HKEY_PERFORMANCE_TEXT
lea ecx, [ebp - 0x2c10]
call fcn.004047b7
mov dword [ebp - 0x2bf4], 0x80000050
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
call fcn.0040d29e
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, str.HKEY_PERFORMANCE_NLSTEXT
lea ecx, [ebp - 0x2c10]
call fcn.004047b7
mov dword [ebp - 0x2bf4], 0x80000060
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1b
call fcn.0040d29e
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, 0x48826c
lea ecx, [ebp - 0x2c10]
call fcn.004047b7
mov dword [ebp - 0x2bf4], 0x80000005
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1c
call fcn.0040d29e
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, str.HKEY_DYN_DATA
lea ecx, [ebp - 0x2c10]
call fcn.004047b7
mov dword [ebp - 0x2bf4], 0x80000006
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1d
call fcn.0040d29e
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
push 0x103
lea eax, [ebp - 0x3bc]
push eax
push ebx
mov word [ebp - 0x1b6], bx
call dword [0x485320]
mov esi, dword [0x485034]
lea eax, [ebp - 0x2c60]
push eax
push 0x20006
push ebx
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted_
push 0x80000001
call esi
cmp eax, ebx
jne 0x40679f
push 4
lea eax, [ebp - 0x2be0]
push eax
push 4
push ebx
lea eax, [ebp - 0x3bc]
push eax
push dword [ebp - 0x2c60]
mov dword [ebp - 0x2be0], edi
call dword [0x485020]
mov edi, dword [ebp - 0x2c14]
push 0x7fe
lea eax, [ebp - 0xbba]
push ebx
push eax
mov byte [edi + 0x760], 1
mov byte [edi + 0x761], 1
mov byte [edi + 0x744], 1
mov dword [edi + 0x770], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], ebx
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x24], ebx
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], ebx
mov dword [edi + 0x34], ebx
mov dword [edi + 0x38], ebx
mov dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
mov dword [edi + 0x44], ebx
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x58], ebx
mov dword [edi + 0x5c], ebx
mov dword [edi + 0x60], ebx
mov dword [edi + 0x64], ebx
mov dword [edi + 0x68], ebx
mov dword [edi + 0x6c], ebx
mov dword [edi + 0x8c], ebx
mov dword [edi + 0x90], ebx
mov dword [edi + 0x724], ebx
mov dword [edi + 0x728], ebx
mov byte [edi + 0x762], bl
mov dword [edi + 0x764], ebx
mov dword [edi + 0x768], ebx
mov dword [edi + 0x76c], ebx
mov byte [edi + 0x745], 1
mov byte [edi + 0x73a], bl
mov word [ebp - 0xbbc], bx
call fcn.0045f3f0
add esp, 0xc
lea eax, [ebp - 0x2be8]
push eax
push 0x20019
push ebx
push str.SOFTWAREBaiduBaiduPlayer
push 0x80000002
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x406999
mov esi, dword [0x48501c]
lea eax, [ebp - 0x2bdc]
push eax
push ebx
lea eax, [ebp - 0x2be4]
push eax
push ebx
push str.InstallExe
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2be4], ebx
mov dword [ebp - 0x2bdc], ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x40698d
cmp dword [ebp - 0x2be4], 1
jne 0x40698d
cmp dword [ebp - 0x2bdc], 2
jb 0x40698d
lea eax, [ebp - 0x2bdc]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x2be4]
push eax
push ebx
push str.InstallExe
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2bdc], 0x400
call esi
mov dword [ebp - 0x2be0], eax
lea eax, [ebp - 0xbbc]
push eax
call dword [0x48540c]
test eax, eax
je 0x40698d
lea eax, [ebp - 0x2bdc]
push eax
push ebx
lea eax, [ebp - 0x2be4]
push eax
push ebx
push str.InstallDir
push dword [ebp - 0x2be8]
mov byte [edi + 0x73a], 1
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x40698d
cmp dword [ebp - 0x2be4], 1
jne 0x40698d
cmp dword [ebp - 0x2bdc], 2
jb 0x40698d
lea eax, [ebp - 0x2bdc]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x2be4]
push eax
push ebx
push str.InstallDir
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2bdc], 0x400
call esi
mov dword [ebp - 0x2be0], eax
push dword [ebp - 0x2be8]
call dword [0x485024]
cmp byte [edi + 0x73a], bl
je 0x4069bc
cmp dword [ebp - 0x2be0], ebx
jne 0x4069bc
mov esi, dword [ebp - 0x2bf0]
lea eax, [ebp - 0xbbc]
call fcn.00404a76
jmp 0x4069fb
mov eax, dword [0x4aac4c]
cmp byte [eax + 0x102], bl
push 1
lea eax, [ebp - 0x2bbc]
je 0x4069d5
push 0x2a
jmp 0x4069d7
push 0x26
push eax
push ebx
call dword [0x4853fc]
mov esi, dword [ebp - 0x2bf0]
lea eax, [ebp - 0x2bbc]
call fcn.00404a76
push str._baiduBaiduPlayer
push esi
call fcn.00405117
mov eax, dword [ebp - 0x2bf0]
push 0xffffffffffffffff
push dword [ebp - 0x2c1c]
xor ebx, ebx
call fcn.00404d18
push 0x48b5e8
push ebx
mov eax, dword [ebp + 8]
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x190
push ebx
push ebx
push ebx
push 0xfffffffffffffff4
mov byte [edi + 0x739], bl
mov dword [edi + 0x758], ebx
mov dword [edi + 0xb4], eax
mov dword [edi + 0xb8], ebx
mov dword [edi + 0x73c], 0x128
mov dword [edi + 0x740], 0x210
call dword [0x48509c]
push 0xb99d7f
push 1
push ebx
mov dword [edi + 0xbc], eax
mov dword [edi + 0xc4], ebx
mov dword [edi + 0xdc], ebx
mov byte [edi + 0x738], bl
mov dword [edi + 0x748], ebx
mov dword [edi + 0x74c], ebx
mov dword [edi + 0x750], ebx
mov dword [edi + 0x754], ebx
call dword [0x4850ac]
mov dword [edi + 0xc0], eax
cmp dword [0x4aaec0], 8
mov eax, dword [0x4aaeac]
jae 0x406ab4
mov eax, 0x4aaeac
push eax
push 0x48b5f0
push 0x5a
push 0x4a19fc
call fcn.00405270
add esp, 0x10
mov eax, edi
call fcn.0040938f
push 0x74
call fcn.00406207
pop ecx
push 0x30
mov dword [edi + 0x10], eax
call fcn.004600e5
cmp eax, ebx
pop ecx
je 0x406af0
mov esi, eax
call fcn.0040547d
jmp 0x406af2
xor eax, eax
push dword [edi + 0x10]
mov dword [edi + 0xc4], eax
push eax
call fcn.00405791
mov esi, dword [edi + 0xc4]
mov eax, dword [esi + 0x18]
cmp eax, 0x20
jne 0x406b14
call fcn.00407751
push 0x83
call fcn.00406207
pop ecx
push 0x30
mov dword [edi + 0x14], eax
call fcn.004600e5
cmp eax, ebx
pop ecx
je 0x406b37
mov esi, eax
call fcn.0040547d
jmp 0x406b39
xor eax, eax
push dword [edi + 0x14]
mov dword [edi + 0xc8], eax
push eax
call fcn.00405791
mov esi, dword [edi + 0xc8]
cmp dword [esi + 0x18], 0x20
jne 0x406b59
call fcn.00407751
push 0x84
call fcn.00406207
pop ecx
push 0x30
mov dword [edi + 0x18], eax
call fcn.004600e5
cmp eax, ebx
pop ecx
je 0x406b7c
mov esi, eax
call fcn.0040547d
jmp 0x406b7e
xor eax, eax
push dword [edi + 0x18]
lea esi, [edi + 0xcc]
push eax
mov dword [esi], eax
call fcn.00405791
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406b9c
call fcn.00407751
push 0x85
call fcn.00406207
pop ecx
push 0x30
mov dword [edi + 0x1c], eax
call fcn.004600e5
cmp eax, ebx
pop ecx
je 0x406bbf
mov esi, eax
call fcn.0040547d
jmp 0x406bc1
xor eax, eax
push dword [edi + 0x1c]
lea esi, [edi + 0xd0]
push eax
mov dword [esi], eax
call fcn.00405791
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406bdf
call fcn.00407751
push 0x9c
call fcn.00406207
pop ecx
push 0x30
mov dword [edi + 0x20], eax
call fcn.004600e5
cmp eax, ebx
pop ecx
je 0x406c02
mov esi, eax
call fcn.0040547d
jmp 0x406c04
xor eax, eax
push dword [edi + 0x20]
lea esi, [edi + 0xd4]
push eax
mov dword [esi], eax
call fcn.00405791
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406c22
call fcn.00407751
mov eax, dword [edi + 0xc4]
mov ecx, dword [eax + 0x10]
mov edx, dword [edi + 0xc8]
mov edx, dword [edx + 0x10]
lea ecx, [edx + ecx + 1]
mov dword [edi + 0x73c], ecx
mov eax, dword [eax + 0xc]
inc eax
push 0x7f
mov dword [edi + 0x740], eax
call fcn.00406207
pop ecx
push 0x30
mov dword [edi + 0x90], eax
call fcn.004600e5
cmp eax, ebx
pop ecx
je 0x406c6b
mov esi, eax
call fcn.0040547d
jmp 0x406c6d
xor eax, eax
push dword [edi + 0x90]
lea esi, [edi + 0xd8]
push eax
mov dword [esi], eax
call fcn.00405791
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406c8e
call fcn.00407751
push 0x75
call fcn.00406207
pop ecx
push 0x9b
mov dword [edi + 0x44], eax
call fcn.00406207
pop ecx
push 0x9d
mov dword [edi + 0x48], eax
call fcn.00406207
pop ecx
push eax
push dword [edi + 0x48]
mov dword [edi + 0x4c], eax
push dword [edi + 0x44]
mov edi, dword [ebp - 0x2c2c]
call fcn.0045b731
mov dword [edi + 0x1c], ebx
mov ebx, dword [ebp - 0x2c14]
mov dword [edi + 0x20], 0x118
mov eax, dword [ebx + 0x740]
push 0x78
mov dword [ebx + 0x4c8], eax
mov byte [ebx + 0x4c0], 0
call fcn.00406207
mov esi, dword [ebp - 0x2c30]
pop ecx
push 4
pop edi
push edi
mov dword [ebx + 0x50], eax
push eax
mov eax, esi
call fcn.0045b1e8
mov eax, dword [ebx + 0x740]
sub eax, 0x1f
push 0x79
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], 0xa
call fcn.00406207
mov esi, dword [ebp - 0x2c38]
pop ecx
push edi
mov dword [ebx + 0x54], eax
push eax
mov eax, esi
call fcn.0045b1e8
mov eax, dword [ebx + 0x740]
sub eax, 0x3e
push 0x94
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], 0xa
call fcn.00406207
pop ecx
push 0x93
mov dword [ebx + 0x2c], eax
call fcn.00406207
pop ecx
push 0x95
mov dword [ebx + 0x30], eax
call fcn.00406207
pop ecx
push 0x96
mov dword [ebx + 0x34], eax
call fcn.00406207
pop ecx
push 0x97
mov dword [ebx + 0x38], eax
call fcn.00406207
cmp byte [ebx + 0x73a], 0
pop ecx
mov dword [ebx + 0x3c], eax
je 0x406d9b
mov eax, dword [ebx + 0x38]
jmp 0x406d9e
mov eax, dword [ebx + 0x30]
mov esi, dword [ebp - 0x2c40]
push edi
mov dword [ebx + 0x40], eax
push eax
mov eax, esi
call fcn.0045b1e8
push 0x9a
mov dword [esi + 0x2c], 0x1a4
mov dword [esi + 0x30], 0xb9
call fcn.00406207
pop ecx
push 0x98
mov dword [ebx + 0x58], eax
call fcn.00406207
pop ecx
push 0x99
mov dword [ebx + 0x5c], eax
call fcn.00406207
pop ecx
push 0x80
mov dword [ebx + 0x60], eax
call fcn.00406207
mov esi, dword [ebp - 0x2c48]
pop ecx
push edi
mov dword [ebx + 0x8c], eax
push eax
mov eax, esi
call fcn.0045b1e8
push 0x7e
mov dword [esi + 0x2c], 0x16c
mov dword [esi + 0x30], 0x121
call fcn.00406207
pop ecx
push 0x7d
mov dword [ebx + 0x68], eax
call fcn.00406207
pop ecx
push 0x7b
mov dword [ebx + 0x6c], eax
call fcn.00406207
mov edi, dword [ebp - 0x2c50]
pop ecx
push eax
mov dword [ebx + 0x64], eax
call fcn.0045b5dc
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
mov dword [edi + 0x64], ecx
add eax, 0x26
mov dword [edi + 0x60], 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48b5f8
lea ecx, [ebp - 0x30]
call fcn.004047b7
lea eax, [ebx + 0x2cc]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x1e
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, edi
call fcn.0045b63e
mov dword [ebx + 0x2ec], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c58]
call fcn.0045b5dc
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
add eax, 0xf0
mov dword [edi + 0x60], 0xe6
mov dword [edi + 0x64], ecx
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48b60c
lea ecx, [ebp - 0x30]
call fcn.004047b7
lea eax, [ebx + 0x33c]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, edi
call fcn.0045b63e
mov dword [ebx + 0x35c], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c28]
call fcn.0045b5dc
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
mov dword [edi + 0x64], ecx
add eax, 0x1c8
mov dword [edi + 0x60], 0x1be
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48b624
lea ecx, [ebp - 0x30]
call fcn.004047b7
lea eax, [ebx + 0x3ac]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, edi
call fcn.0045b63e
mov dword [ebx + 0x3cc], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c54]
call fcn.0045b5dc
mov eax, dword [edi + 0x68]
mov ecx, 0x158
mov dword [edi + 0x64], ecx
add eax, 0x1d8
mov dword [edi + 0x60], 0x1ce
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48b634
lea ecx, [ebp - 0x30]
call fcn.004047b7
lea eax, [ebx + 0x41c]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x21
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov eax, edi
call fcn.0045b63e
mov dword [ebx + 0x43c], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
mov byte [ebx + 0x475], 1
mov byte [ebx + 0x325], 1
mov byte [ebx + 0x395], 1
mov eax, 0x48b650
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x405], 1
call fcn.004047b7
mov edi, dword [ebp - 0x2c4c]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x22
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045b9fd
mov dword [ebx + 0x528], 0xc36602
mov dword [edi + 0x24], 0x98
mov dword [edi + 0x28], esi
mov eax, 0x48b65c
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x540], 0
call fcn.004047b7
mov edi, dword [ebp - 0x2c34]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x23
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045b9fd
mov dword [ebx + 0x564], 0xc36602
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], esi
mov eax, 0x48b664
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x57c], 0
call fcn.004047b7
mov edi, dword [ebp - 0x2c5c]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x24
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045b9fd
mov dword [ebx + 0x5a0], 0x464646
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], esi
mov eax, 0x48b67c
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x5b8], 0
call fcn.004047b7
mov edi, dword [ebp - 0x2c3c]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x25
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
push 0x190
push 0xfffffffffffffff4
call fcn.0045b9fd
mov dword [ebx + 0x5dc], 0x464646
mov eax, str.ck_W_vN
lea ecx, [ebp - 0x30]
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
call fcn.004047b7
mov edi, dword [ebp - 0x2c44]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x26
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
push 0x190
push 0xfffffffffffffff2
call fcn.0045b9fd
mov dword [ebx + 0x654], 0x464646
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
mov eax, 0x48b6a4
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x66c], 0
call fcn.004047b7
mov byte [ebp - 4], 0x27
mov edi, dword [ebp - 0x2c68]
push edi
lea eax, [ebp - 0x30]
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
push 0x190
push 0xfffffffffffffff4
call fcn.0045b9fd
mov dword [ebx + 0x690], 0x9f
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
mov eax, 0x48b6bc
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x6a8], 0
call fcn.004047b7
mov byte [ebp - 4], 0x28
mov edi, dword [ebp - 0x2c70]
push edi
lea eax, [ebp - 0x30]
call fcn.0045b9eb
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
push 0x190
push 0xfffffffffffffff4
call fcn.0045b9fd
mov dword [ebx + 0x618], 0x9f
mov dword [edi + 0x24], 0x1b4
mov dword [edi + 0x28], 0x120
push 0x91
mov byte [ebx + 0x630], 0
call fcn.00406207
pop ecx
push 0x92
mov dword [ebx + 0x24], eax
call fcn.00406207
mov esi, dword [ebp - 0x2c20]
pop ecx
push 4
push dword [ebx + 0x24]
mov dword [ebx + 0x28], eax
mov eax, esi
call fcn.0045b1e8
and dword [ebp - 0x2c18], 0
lea eax, [ebp - 0x2c18]
push eax
mov dword [esi + 0x2c], 0x25f
mov dword [esi + 0x30], 0x127
call dword [0x485374]
push eax
call dword [0x4853f8]
xor esi, esi
inc esi
cmp dword [ebp - 0x2c18], esi
mov edi, eax
jle 0x40738d
push 0x48b6f4
push dword [edi + esi*4]
call fcn.0046354f
test eax, eax
pop ecx
pop ecx
jne 0x407316
mov byte [ebx + 0x760], al
mov byte [ebx + 0x739], 1
jmp 0x407380
push str._autoStart0
push dword [edi + esi*4]
call fcn.0046354f
test eax, eax
pop ecx
pop ecx
jne 0x407331
mov byte [ebx + 0x761], al
jmp 0x407380
push str._desktopIcon0
push dword [edi + esi*4]
call fcn.0046354f
test eax, eax
pop ecx
pop ecx
jne 0x40734c
mov byte [ebx + 0x325], al
jmp 0x407380
push str._fastIcon0
push dword [edi + esi*4]
call fcn.0046354f
test eax, eax
pop ecx
pop ecx
jne 0x407367
mov byte [ebx + 0x395], al
jmp 0x407380
push str._hao1230
push dword [edi + esi*4]
call fcn.0046354f
test eax, eax
pop ecx
pop ecx
jne 0x407380
mov byte [ebx + 0x744], al
inc esi
cmp esi, dword [ebp - 0x2c18]
jl 0x4072f4
cmp byte [ebx + 0x760], 0
jne 0x407427
mov edi, dword [ebp - 0x2bf0]
cmp dword [edi + 0x18], 8
jb 0x4073ab
mov eax, dword [edi + 4]
jmp 0x4073ae
lea eax, [edi + 4]
lea ecx, [ebp - 0x2c24]
push ecx
lea ecx, [ebp - 0x2c74]
push ecx
lea ecx, [ebp - 0x2c6c]
push ecx
push eax
call dword [0x4850f0]
test eax, eax
je 0x4073f3
cmp dword [ebp - 0x2c20], 0
ja 0x407427
jb 0x4073e5
cmp dword [ebp - 0x2c24], 0x19000000
jae 0x407427
lea ecx, [ebp - 0x30]
call fcn.0040627d
mov byte [ebp - 4], 0x29
jmp 0x4073ff
lea ecx, [ebp - 0x30]
call fcn.0040627d
mov byte [ebp - 4], 0x2a
push 0xffffffffffffffff
push edi
xor ebx, ebx
call fcn.00404d18
push ebx
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ae2
push 0xffffffffffffffff
push dword [ebp - 0x2c1c]
mov eax, edi
call fcn.00404d18
push 0xff
lea eax, [ebp - 0x1b3]
push 0
push eax
mov byte [ebp - 0x1b4], 0
call fcn.0045f3f0
xor eax, eax
mov byte [ebp - 0x28], 0
lea edi, [ebp - 0x27]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
call fcn.00442651
pop ecx
lea ebx, [ebp - 0x28]
lea ecx, [ebp - 0x2bd8]
call fcn.0041bce0
push 0x100
xor ebx, ebx
lea eax, [ebp - 0x1b4]
push ebx
push eax
mov byte [ebp - 4], 0x2b
call fcn.0045f3f0
add esp, 0xc
push 0x7e
lea eax, [ebp - 0xb2]
push ebx
push eax
mov word [ebp - 0xb4], bx
call fcn.0045f3f0
add esp, 0xc
push 0xfde9
lea eax, [ebp - 0xb4]
push 0x40
push eax
lea edi, [ebp - 0x2bd8]
call fcn.0044d7b4
add esp, 0xc
push str.BDYYID
lea eax, [ebp - 0x2bec]
push eax
call fcn.0040473e
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x2bec]
push eax
mov byte [ebp - 4], 0x2c
call fcn.0040cdfc
push str.__domain.baidu.com__path_
lea eax, [ebp - 0x2bec]
push eax
call fcn.0040cdfc
push dword [ebp - 0x2bec]
push ebx
push str.http:__ikan.baidu.com_
call dword [0x485524]
mov esi, dword [ebp - 0x2c14]
mov ecx, esi
call fcn.00407f8b
mov ecx, esi
call fcn.004077df
call dword [0x485208]
mov dword [esi + 0x75c], eax
mov eax, dword [ebp - 0x2bec]
add eax, 0xfffffff0
call fcn.00401160
push ebx
push 1
mov ecx, edi
call fcn.00401a96
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045ed6b
leave
ret 4