Function at 0x414630
Capabilities:
Delete registry key
Delete registry value
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4349cb
mov eax, dword fs:[0]
push eax
sub esp, 0x334
mov eax, dword [0x4433ec]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x338], ebx
mov dword [ebp - 0x334], ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x54]
mov dword [ebp - 0x58], eax
push str.WujiPlayer.asf_
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 1
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4146b2
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.avi_
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 2
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4146ef
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.wm
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 3
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41472c
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.wmp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 4
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414769
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.wmv
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 5
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4147a6
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.ram
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 6
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4147e3
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rm
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 7
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414820
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rmvb
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 8
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41485d
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 9
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41489a
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rpm
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xa
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4148d7
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rt
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xb
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414914
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.smi
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xc
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414951
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.smil
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xd
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41498e
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.dt
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xe
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4149cb
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m1v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xf
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414a08
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m2p
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x10
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414a45
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m2t
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x11
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414a82
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m2ts
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x12
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414abf
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m2v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x13
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414afc
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mp2v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x14
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414b39
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpe
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x15
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414b76
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpeg
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x16
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414bb3
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpg
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x17
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414bf0
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpv2
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x18
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414c2d
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.pss
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x19
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414c6a
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.pss
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1a
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414ca7
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.tp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1b
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414ce4
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.tpr
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1c
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414d21
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.ts
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1d
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414d5e
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m4b
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1e
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414d9b
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m4p
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1f
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414dd8
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m4v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x20
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414e15
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mp3
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x21
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414e52
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mp4
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x22
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414e8f
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpeg4
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x23
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414ecc
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.3g2
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x24
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414f09
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.3gp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x25
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414f46
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.3gp2
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x26
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414f83
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.2gpp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x27
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414fc0
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mov
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x28
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414ffd
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.qt
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x29
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41503a
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.f4v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2a
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x415077
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.flv
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2b
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4150b4
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.hlv
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2c
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4150f1
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.swf
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2d
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41512e
push eax
call fcn.0041bdf1
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mkv
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410130
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2e
call fcn.00413180
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41516b
push eax
call fcn.0041bdf1
add esp, 4
mov ecx, dword [ebp - 0x338]
sub ecx, dword [ebp - 0x33c]
mov eax, 0x78787879
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x415432
mov edx, dword [ebp - 0x33c]
mov dword [ebp - 0x340], edx
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x340]
mov ecx, dword [eax]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x54], bl
mov esi, ecx
cmp ecx, ebx
jne 0x4151bc
mov esi, 0x43a501
mov edi, esi
lea edx, [edi + 1]
mov cl, byte [edi]
inc edi
cmp cl, bl
jne 0x4151c1
sub edi, edx
cmp edi, 0x3f
jl 0x4151e2
lea ecx, [edi + 1]
push ecx
push ebx
mov dword [ebp - 0x58], ebx
call fcn.0041c895
add esp, 8
mov dword [ebp - 0x58], eax
push edi
push esi
push eax
call fcn.0041c5e5
mov edx, dword [ebp - 0x58]
add esp, 0xc
push str.DefaultIcon
lea eax, [ebp - 0x58]
mov byte [edi + edx], bl
call fcn.00410030
mov eax, dword [ebp - 0x58]
push eax
push 0x80000000
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov ecx, dword [ebp - 0x340]
mov ecx, dword [ecx]
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x130], eax
mov byte [ebp - 0x12c], bl
mov esi, ecx
cmp ecx, ebx
jne 0x415234
mov esi, 0x43a501
mov edi, esi
lea edx, [edi + 1]
lea esp, [esp]
mov cl, byte [edi]
inc edi
cmp cl, bl
jne 0x415240
sub edi, edx
cmp edi, 0x3f
jl 0x415267
lea edx, [edi + 1]
push edx
push ebx
mov dword [ebp - 0x130], ebx
call fcn.0041c895
add esp, 8
mov dword [ebp - 0x130], eax
push edi
push esi
push eax
call fcn.0041c5e5
mov eax, dword [ebp - 0x130]
add esp, 0xc
mov byte [edi + eax], bl
push str.ShellOpenCommand
lea eax, [ebp - 0x130]
call fcn.00410030
mov ecx, dword [ebp - 0x130]
push ecx
push 0x80000000
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edx, dword [ebp - 0x340]
mov ecx, dword [edx]
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 0x1bc], bl
mov esi, ecx
cmp ecx, ebx
jne 0x4152c2
mov esi, 0x43a501
mov edi, esi
lea edx, [edi + 1]
mov cl, byte [edi]
inc edi
cmp cl, bl
jne 0x4152c7
sub edi, edx
cmp edi, 0x3f
jl 0x4152ee
lea eax, [edi + 1]
push eax
push ebx
mov dword [ebp - 0x1c0], ebx
call fcn.0041c895
add esp, 8
mov dword [ebp - 0x1c0], eax
push edi
push esi
push eax
call fcn.0041c5e5
mov ecx, dword [ebp - 0x1c0]
add esp, 0xc
push str.ShellOpen
lea eax, [ebp - 0x1c0]
mov byte [edi + ecx], bl
call fcn.00410030
mov edx, dword [ebp - 0x1c0]
push edx
push 0x80000000
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov eax, dword [ebp - 0x340]
mov ecx, dword [eax]
lea eax, [ebp - 0x174]
mov dword [ebp - 0x178], eax
mov byte [ebp - 0x174], bl
mov esi, ecx
cmp ecx, ebx
jne 0x415349
mov esi, 0x43a501
mov ecx, esi
lea edi, [ecx + 1]
mov edi, edi
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x415350
sub ecx, edi
mov edi, ecx
cmp edi, 0x3f
jl 0x415379
lea ecx, [edi + 1]
push ecx
push ebx
mov dword [ebp - 0x178], ebx
call fcn.0041c895
add esp, 8
mov dword [ebp - 0x178], eax
push edi
push esi
push eax
call fcn.0041c5e5
mov edx, dword [ebp - 0x178]
add esp, 0xc
push str.Shell
lea eax, [ebp - 0x178]
mov byte [edi + edx], bl
call fcn.00410030
mov eax, dword [ebp - 0x178]
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
push eax
push 0x80000000
call esi
mov ecx, dword [ebp - 0x340]
mov edx, dword [ecx]
push edx
push 0x80000000
call esi
mov eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x174]
cmp eax, ecx
je 0x4153da
push eax
call fcn.0041bdf1
add esp, 4
mov eax, dword [ebp - 0x1c0]
lea edx, [ebp - 0x1bc]
cmp eax, edx
je 0x4153f3
push eax
call fcn.0041bdf1
add esp, 4
mov eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x12c]
cmp eax, ecx
je 0x41540c
push eax
call fcn.0041bdf1
add esp, 4
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x54]
cmp eax, edx
je 0x41541f
push eax
call fcn.0041bdf1
add esp, 4
add dword [ebp - 0x340], 0x44
dec dword [ebp - 0x32c]
jne 0x4151a0
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xe4]
push 9
mov ecx, eax
push str.Software_
push ecx
mov dword [ebp - 0xe8], eax
mov byte [ebp - 0xe4], bl
call fcn.0041c5e5
mov edx, dword [ebp - 0xe8]
add esp, 0xc
push str.wjplay
lea eax, [ebp - 0xe8]
mov byte [edx + 9], bl
call fcn.00410030
mov edi, dword [ebp - 0xe8]
mov ebx, 0x43a510
lea ecx, [ebp - 0x2e0]
call fcn.00410d40
lea eax, [ebp - 0x24c]
push 6
mov ecx, eax
push str.wjplay
xor bl, bl
push ecx
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], bl
call fcn.0041c5e5
mov edx, dword [ebp - 0x250]
mov byte [edx + 6], bl
mov eax, dword [ebp - 0x2e0]
add esp, 0xc
push eax
lea eax, [ebp - 0x250]
call fcn.00410030
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov edi, dword [ebp - 0x250]
lea ecx, [ebp - 0x32c]
push ecx
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push 0x80000002
call esi
test eax, eax
jne 0x41550f
mov edx, dword [ebp - 0x32c]
push edi
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, 0x43a510
mov edi, str.Softwarewuji
lea ecx, [ebp - 0x328]
call fcn.00410d40
lea ecx, [ebp - 0x294]
push 0xa
mov edx, ecx
push str.WujiPlayer
xor ebx, ebx
push edx
mov dword [ebp - 0x298], ecx
mov byte [ebp - 0x294], bl
call fcn.0041c5e5
mov eax, dword [ebp - 0x298]
mov byte [eax + 0xa], bl
mov ecx, dword [ebp - 0x328]
add esp, 0xc
push ecx
lea eax, [ebp - 0x298]
call fcn.00410030
mov edi, dword [ebp - 0x298]
lea edx, [ebp - 0x32c]
push edx
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push 0x80000002
call esi
test eax, eax
jne 0x41559d
mov eax, dword [ebp - 0x32c]
push edi
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ecx, dword [ebp - 0x32c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x204]
push 6
mov eax, edx
push str.WJNews
push eax
mov dword [ebp - 0x208], edx
mov byte [ebp - 0x204], bl
call fcn.0041c5e5
mov ecx, dword [ebp - 0x208]
mov byte [ecx + 6], bl
mov edx, dword [ebp - 0x328]
add esp, 0xc
push edx
lea eax, [ebp - 0x208]
call fcn.00410030
mov edi, dword [ebp - 0x208]
lea eax, [ebp - 0x32c]
push eax
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push 0x80000002
call esi
test eax, eax
jne 0x415614
mov ecx, dword [ebp - 0x32c]
push edi
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov edx, dword [ebp - 0x32c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x9c]
push 6
mov ecx, eax
push str.wjplay
push ecx
mov dword [ebp - 0xa0], eax
mov byte [ebp - 0x9c], bl
call fcn.0041c5e5
mov edx, dword [ebp - 0xa0]
add esp, 0xc
push str._News
lea eax, [ebp - 0xa0]
mov byte [edx + 6], bl
call fcn.00410030
mov eax, dword [ebp - 0x2e0]
push eax
lea eax, [ebp - 0xa0]
call fcn.00410030
mov edi, dword [ebp - 0xa0]
lea ecx, [ebp - 0x32c]
push ecx
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push 0x80000002
call esi
test eax, eax
jne 0x41569b
mov edx, dword [ebp - 0x32c]
push edi
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
push str.SOFTWAREWuji
push 0x80000002
call esi
mov ecx, dword [ebp - 0xe8]
push ecx
push 0x80000002
call esi
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push 0x80000002
call esi
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
cmp eax, edx
je 0x4156e0
push eax
call fcn.0041bdf1
add esp, 4
mov eax, dword [ebp - 0x208]
lea ecx, [ebp - 0x204]
cmp eax, ecx
je 0x4156f9
push eax
call fcn.0041bdf1
add esp, 4
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x294]
cmp eax, edx
je 0x415712
push eax
call fcn.0041bdf1
add esp, 4
mov eax, dword [ebp - 0x328]
lea ecx, [ebp - 0x324]
cmp eax, ecx
je 0x41572b
push eax
call fcn.0041bdf1
add esp, 4
mov eax, dword [ebp - 0x250]
lea edx, [ebp - 0x24c]
cmp eax, edx
je 0x415744
push eax
call fcn.0041bdf1
add esp, 4
mov eax, dword [ebp - 0x2e0]
lea ecx, [ebp - 0x2dc]
cmp eax, ecx
je 0x41575d
push eax
call fcn.0041bdf1
add esp, 4
mov eax, dword [ebp - 0xe8]
lea edx, [ebp - 0xe4]
cmp eax, edx
je 0x415776
push eax
call fcn.0041bdf1
add esp, 4
mov edi, dword [ebp - 0x33c]
cmp edi, ebx
je 0x4157b2
mov ebx, dword [ebp - 0x338]
mov esi, edi
cmp edi, ebx
je 0x4157a9
lea esp, [esp]
mov eax, dword [esi]
lea ecx, [esi + 4]
cmp eax, ecx
je 0x4157a2
push eax
call fcn.0041bdf1
add esp, 4
add esi, 0x44
cmp esi, ebx
jne 0x415790
push edi
call fcn.0041b70e
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041b429
mov esp, ebp
pop ebp
ret