Function at 0x406263
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x483637
mov eax, dword fs:[0]
push eax
mov eax, 0x2c58
call fcn.0046dd30
mov eax, dword [0x49e390]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2c10], edi
mov dword [edi], 0x48af14
lea ebx, [edi + 4]
call fcn.0040df39
lea ecx, [ebx + 4]
mov dword [ecx], eax
mov byte [eax + 0x2d], 1
mov eax, dword [ecx]
mov dword [eax + 4], eax
mov eax, dword [ecx]
mov dword [eax], eax
mov ecx, dword [ecx]
mov dword [ecx + 8], ecx
xor ecx, ecx
mov dword [ebx + 8], ecx
lea eax, [edi + 0x70]
push 7
mov dword [ebp - 4], ecx
pop edx
mov dword [eax + 0x18], edx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x2c18], eax
mov word [eax + 4], cx
lea eax, [edi + 0x94]
mov dword [eax + 0x18], edx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x2c2c], eax
mov word [eax + 4], cx
lea eax, [edi + 0xe8]
push eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x2c3c], eax
call fcn.0045adee
lea eax, [edi + 0x160]
push eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x2c44], eax
call fcn.0045adee
lea eax, [edi + 0x1d8]
push eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x2c4c], eax
call fcn.0045adee
lea eax, [edi + 0x250]
push eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x2c54], eax
call fcn.0045adee
lea eax, [edi + 0x2c8]
push eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x2c5c], eax
call fcn.0045b06a
lea eax, [edi + 0x338]
push eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x2c64], eax
call fcn.0045b06a
lea eax, [edi + 0x3a8]
push eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x2c1c], eax
call fcn.0045b06a
lea eax, [edi + 0x418]
push eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x2c28], eax
call fcn.0045b06a
mov byte [ebp - 4], 0xa
lea eax, [edi + 0x488]
push eax
mov dword [ebp - 0x2c34], eax
call fcn.0045b32d
lea esi, [edi + 0x508]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x2c48], esi
call fcn.0045b673
lea esi, [edi + 0x544]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x2c30], esi
call fcn.0045b673
lea esi, [edi + 0x580]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x2c58], esi
call fcn.0045b673
lea esi, [edi + 0x5bc]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2c38], esi
call fcn.0045b673
lea esi, [edi + 0x5f8]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x2c20], esi
call fcn.0045b673
lea esi, [edi + 0x634]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x2c50], esi
call fcn.0045b673
lea esi, [edi + 0x670]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x2c40], esi
call fcn.0045b673
lea eax, [edi + 0x6ac]
push eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x2c24], eax
call fcn.0045adee
mov byte [ebp - 4], 0x13
call fcn.0042a458
and dword [edi + 0x734], 0
mov dword [edi + 0x730], eax
mov eax, str.HKEY_CLASSES_ROOT
lea ecx, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404784
mov dword [ebp - 0x2bf0], 0x80000000
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x15
call fcn.0040cfd4
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, str.HKEY_CURRENT_USER
lea ecx, [ebp - 0x2c0c]
call fcn.00404784
mov dword [ebp - 0x2bf0], 0x80000001
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x16
call fcn.0040cfd4
push 0
mov byte [ebp - 4], 0x14
push 1
lea esi, [ebp - 0x2c0c]
call fcn.00404aa5
mov eax, str.HKEY_LOCAL_MACHINE
lea ecx, [ebp - 0x2c0c]
call fcn.00404784
mov dword [ebp - 0x2bf0], 0x80000002
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x17
call fcn.0040cfd4
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, str.HKEY_USERS
lea ecx, [ebp - 0x2c0c]
call fcn.00404784
mov dword [ebp - 0x2bf0], 0x80000003
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x18
call fcn.0040cfd4
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, str.HKEY_PERFORMANCE_DATA
lea ecx, [ebp - 0x2c0c]
call fcn.00404784
mov dword [ebp - 0x2bf0], 0x80000004
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x19
call fcn.0040cfd4
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, str.HKEY_PERFORMANCE_TEXT
lea ecx, [ebp - 0x2c0c]
call fcn.00404784
mov dword [ebp - 0x2bf0], 0x80000050
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
call fcn.0040cfd4
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, str.HKEY_PERFORMANCE_NLSTEXT
lea ecx, [ebp - 0x2c0c]
call fcn.00404784
mov dword [ebp - 0x2bf0], 0x80000060
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1b
call fcn.0040cfd4
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, 0x48726c
lea ecx, [ebp - 0x2c0c]
call fcn.00404784
mov dword [ebp - 0x2bf0], 0x80000005
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1c
call fcn.0040cfd4
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, str.HKEY_DYN_DATA
lea ecx, [ebp - 0x2c0c]
call fcn.00404784
mov dword [ebp - 0x2bf0], 0x80000006
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1d
call fcn.0040cfd4
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
push 0x103
lea eax, [ebp - 0x3bc]
push eax
push ebx
mov word [ebp - 0x1b6], bx
call dword [0x484320]
mov esi, dword [0x484034]
lea eax, [ebp - 0x2c60]
push eax
push 0x20006
push ebx
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted_
push 0x80000001
call esi
cmp eax, ebx
jne 0x406724
push 4
lea eax, [ebp - 0x2be0]
push eax
push 4
push ebx
lea eax, [ebp - 0x3bc]
push eax
push dword [ebp - 0x2c60]
mov dword [ebp - 0x2be0], edi
call dword [0x484020]
mov edi, dword [ebp - 0x2c10]
push 0x7fe
lea eax, [ebp - 0xbba]
push ebx
push eax
mov byte [edi + 0x760], 1
mov byte [edi + 0x761], 1
mov byte [edi + 0x744], 1
mov dword [edi + 0x770], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], ebx
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x24], ebx
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], ebx
mov dword [edi + 0x34], ebx
mov dword [edi + 0x38], ebx
mov dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
mov dword [edi + 0x44], ebx
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x58], ebx
mov dword [edi + 0x5c], ebx
mov dword [edi + 0x60], ebx
mov dword [edi + 0x64], ebx
mov dword [edi + 0x68], ebx
mov dword [edi + 0x6c], ebx
mov dword [edi + 0x8c], ebx
mov dword [edi + 0x90], ebx
mov dword [edi + 0x724], ebx
mov dword [edi + 0x728], ebx
mov byte [edi + 0x762], bl
mov dword [edi + 0x764], ebx
mov dword [edi + 0x768], ebx
mov dword [edi + 0x76c], ebx
mov byte [edi + 0x745], 1
mov byte [edi + 0x73a], bl
mov word [ebp - 0xbbc], bx
call fcn.0045f120
add esp, 0xc
lea eax, [ebp - 0x2be8]
push eax
push 0x20019
push ebx
push str.SOFTWAREBaiduBaiduPlayer
push 0x80000002
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x40691e
mov esi, dword [0x48401c]
lea eax, [ebp - 0x2bdc]
push eax
push ebx
lea eax, [ebp - 0x2be4]
push eax
push ebx
push str.InstallExe
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2be4], ebx
mov dword [ebp - 0x2bdc], ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x406912
cmp dword [ebp - 0x2be4], 1
jne 0x406912
cmp dword [ebp - 0x2bdc], 2
jb 0x406912
lea eax, [ebp - 0x2bdc]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x2be4]
push eax
push ebx
push str.InstallExe
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2bdc], 0x400
call esi
mov dword [ebp - 0x2be0], eax
lea eax, [ebp - 0xbbc]
push eax
call dword [0x48440c]
test eax, eax
je 0x406912
lea eax, [ebp - 0x2bdc]
push eax
push ebx
lea eax, [ebp - 0x2be4]
push eax
push ebx
push str.InstallDir
push dword [ebp - 0x2be8]
mov byte [edi + 0x73a], 1
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x406912
cmp dword [ebp - 0x2be4], 1
jne 0x406912
cmp dword [ebp - 0x2bdc], 2
jb 0x406912
lea eax, [ebp - 0x2bdc]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x2be4]
push eax
push ebx
push str.InstallDir
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2bdc], 0x400
call esi
mov dword [ebp - 0x2be0], eax
push dword [ebp - 0x2be8]
call dword [0x484024]
cmp byte [edi + 0x73a], bl
je 0x406941
cmp dword [ebp - 0x2be0], ebx
jne 0x406941
mov esi, dword [ebp - 0x2c18]
lea eax, [ebp - 0xbbc]
call fcn.00404a39
jmp 0x406980
mov eax, dword [0x4a9c4c]
cmp byte [eax + 0x102], bl
push 1
lea eax, [ebp - 0x2bbc]
je 0x40695a
push 0x2a
jmp 0x40695c
push 0x26
push eax
push ebx
call dword [0x4843fc]
mov esi, dword [ebp - 0x2c18]
lea eax, [ebp - 0x2bbc]
call fcn.00404a39
push str._baiduBaiduPlayer
push esi
call fcn.004050da
mov eax, dword [ebp - 0x2c18]
push 0xffffffffffffffff
push dword [ebp - 0x2c2c]
xor ebx, ebx
call fcn.00404cdb
push 0x48a5c0
push ebx
mov eax, dword [ebp + 8]
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x190
push ebx
push ebx
push ebx
push 0xfffffffffffffff4
mov byte [edi + 0x739], bl
mov dword [edi + 0x758], ebx
mov dword [edi + 0xb4], eax
mov dword [edi + 0xb8], ebx
mov dword [edi + 0x73c], 0x128
mov dword [edi + 0x740], 0x210
call dword [0x48409c]
push 0xb99d7f
push 1
push ebx
mov dword [edi + 0xbc], eax
mov dword [edi + 0xc4], ebx
mov dword [edi + 0xdc], ebx
mov byte [edi + 0x738], bl
mov dword [edi + 0x748], ebx
mov dword [edi + 0x74c], ebx
mov dword [edi + 0x750], ebx
mov dword [edi + 0x754], ebx
call dword [0x4840ac]
mov dword [edi + 0xc0], eax
cmp dword [0x4a9eb8], 8
mov eax, dword [0x4a9ea4]
jae 0x406a39
mov eax, 0x4a9ea4
push eax
push 0x48a5c8
push 0x5a
push 0x4a09fc
call fcn.00405233
add esp, 0x10
mov eax, edi
call fcn.00409279
push 0x74
call fcn.004061ed
pop ecx
push 0x30
mov dword [edi + 0x10], eax
call fcn.0045fe15
cmp eax, ebx
pop ecx
je 0x406a75
mov esi, eax
call fcn.0040543f
jmp 0x406a77
xor eax, eax
push dword [edi + 0x10]
mov dword [edi + 0xc4], eax
push eax
call fcn.00405753
mov esi, dword [edi + 0xc4]
mov eax, dword [esi + 0x18]
cmp eax, 0x20
jne 0x406a99
call fcn.00407646
push 0x83
call fcn.004061ed
pop ecx
push 0x30
mov dword [edi + 0x14], eax
call fcn.0045fe15
cmp eax, ebx
pop ecx
je 0x406abc
mov esi, eax
call fcn.0040543f
jmp 0x406abe
xor eax, eax
push dword [edi + 0x14]
mov dword [edi + 0xc8], eax
push eax
call fcn.00405753
mov esi, dword [edi + 0xc8]
cmp dword [esi + 0x18], 0x20
jne 0x406ade
call fcn.00407646
push 0x84
call fcn.004061ed
pop ecx
push 0x30
mov dword [edi + 0x18], eax
call fcn.0045fe15
cmp eax, ebx
pop ecx
je 0x406b01
mov esi, eax
call fcn.0040543f
jmp 0x406b03
xor eax, eax
push dword [edi + 0x18]
lea esi, [edi + 0xcc]
push eax
mov dword [esi], eax
call fcn.00405753
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406b21
call fcn.00407646
push 0x85
call fcn.004061ed
pop ecx
push 0x30
mov dword [edi + 0x1c], eax
call fcn.0045fe15
cmp eax, ebx
pop ecx
je 0x406b44
mov esi, eax
call fcn.0040543f
jmp 0x406b46
xor eax, eax
push dword [edi + 0x1c]
lea esi, [edi + 0xd0]
push eax
mov dword [esi], eax
call fcn.00405753
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406b64
call fcn.00407646
push 0x9c
call fcn.004061ed
pop ecx
push 0x30
mov dword [edi + 0x20], eax
call fcn.0045fe15
cmp eax, ebx
pop ecx
je 0x406b87
mov esi, eax
call fcn.0040543f
jmp 0x406b89
xor eax, eax
push dword [edi + 0x20]
lea esi, [edi + 0xd4]
push eax
mov dword [esi], eax
call fcn.00405753
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406ba7
call fcn.00407646
mov eax, dword [edi + 0xc4]
mov ecx, dword [eax + 0x10]
mov edx, dword [edi + 0xc8]
mov edx, dword [edx + 0x10]
lea ecx, [edx + ecx + 1]
mov dword [edi + 0x73c], ecx
mov eax, dword [eax + 0xc]
inc eax
push 0x7f
mov dword [edi + 0x740], eax
call fcn.004061ed
pop ecx
push 0x30
mov dword [edi + 0x90], eax
call fcn.0045fe15
cmp eax, ebx
pop ecx
je 0x406bf0
mov esi, eax
call fcn.0040543f
jmp 0x406bf2
xor eax, eax
push dword [edi + 0x90]
lea esi, [edi + 0xd8]
push eax
mov dword [esi], eax
call fcn.00405753
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406c13
call fcn.00407646
push 0x75
call fcn.004061ed
pop ecx
push 0x9b
mov dword [edi + 0x44], eax
call fcn.004061ed
pop ecx
push 0x9d
mov dword [edi + 0x48], eax
call fcn.004061ed
pop ecx
push eax
push dword [edi + 0x48]
mov dword [edi + 0x4c], eax
push dword [edi + 0x44]
mov edi, dword [ebp - 0x2c34]
call fcn.0045b40c
mov dword [edi + 0x1c], ebx
mov ebx, dword [ebp - 0x2c10]
mov dword [edi + 0x20], 0x118
mov eax, dword [ebx + 0x740]
push 0x78
mov dword [ebx + 0x4c8], eax
mov byte [ebx + 0x4c0], 0
call fcn.004061ed
mov esi, dword [ebp - 0x2c3c]
pop ecx
push 4
pop edi
push edi
mov dword [ebx + 0x50], eax
push eax
mov eax, esi
call fcn.0045aec3
mov eax, dword [ebx + 0x740]
sub eax, 0x1f
push 0x79
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], 0xa
call fcn.004061ed
mov esi, dword [ebp - 0x2c44]
pop ecx
push edi
mov dword [ebx + 0x54], eax
push eax
mov eax, esi
call fcn.0045aec3
mov eax, dword [ebx + 0x740]
sub eax, 0x3e
push 0x94
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], 0xa
call fcn.004061ed
pop ecx
push 0x93
mov dword [ebx + 0x2c], eax
call fcn.004061ed
pop ecx
push 0x95
mov dword [ebx + 0x30], eax
call fcn.004061ed
pop ecx
push 0x96
mov dword [ebx + 0x34], eax
call fcn.004061ed
pop ecx
push 0x97
mov dword [ebx + 0x38], eax
call fcn.004061ed
cmp byte [ebx + 0x73a], 0
pop ecx
mov dword [ebx + 0x3c], eax
je 0x406d20
mov eax, dword [ebx + 0x38]
jmp 0x406d23
mov eax, dword [ebx + 0x30]
mov esi, dword [ebp - 0x2c4c]
push edi
mov dword [ebx + 0x40], eax
push eax
mov eax, esi
call fcn.0045aec3
push 0x9a
mov dword [esi + 0x2c], 0x1a4
mov dword [esi + 0x30], 0xb9
call fcn.004061ed
pop ecx
push 0x98
mov dword [ebx + 0x58], eax
call fcn.004061ed
pop ecx
push 0x99
mov dword [ebx + 0x5c], eax
call fcn.004061ed
pop ecx
push 0x80
mov dword [ebx + 0x60], eax
call fcn.004061ed
mov esi, dword [ebp - 0x2c54]
pop ecx
push edi
mov dword [ebx + 0x8c], eax
push eax
mov eax, esi
call fcn.0045aec3
push 0x7e
mov dword [esi + 0x2c], 0x16c
mov dword [esi + 0x30], 0x121
call fcn.004061ed
pop ecx
push 0x7d
mov dword [ebx + 0x68], eax
call fcn.004061ed
pop ecx
push 0x7b
mov dword [ebx + 0x6c], eax
call fcn.004061ed
mov edi, dword [ebp - 0x2c5c]
pop ecx
push eax
mov dword [ebx + 0x64], eax
call fcn.0045b2b7
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
mov dword [edi + 0x64], ecx
add eax, 0x26
mov dword [edi + 0x60], 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48a5d0
lea ecx, [ebp - 0x30]
call fcn.00404784
lea eax, [ebx + 0x2cc]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x1e
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, edi
call fcn.0045b319
mov dword [ebx + 0x2ec], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c64]
call fcn.0045b2b7
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
add eax, 0xf0
mov dword [edi + 0x60], 0xe6
mov dword [edi + 0x64], ecx
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48a5e4
lea ecx, [ebp - 0x30]
call fcn.00404784
lea eax, [ebx + 0x33c]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, edi
call fcn.0045b319
mov dword [ebx + 0x35c], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c1c]
call fcn.0045b2b7
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
mov dword [edi + 0x64], ecx
add eax, 0x1c8
mov dword [edi + 0x60], 0x1be
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48a5fc
lea ecx, [ebp - 0x30]
call fcn.00404784
lea eax, [ebx + 0x3ac]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, edi
call fcn.0045b319
mov dword [ebx + 0x3cc], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c28]
call fcn.0045b2b7
mov eax, dword [edi + 0x68]
mov ecx, 0x158
mov dword [edi + 0x64], ecx
add eax, 0x1d8
mov dword [edi + 0x60], 0x1ce
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48a60c
lea ecx, [ebp - 0x30]
call fcn.00404784
lea eax, [ebx + 0x41c]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x21
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov eax, edi
call fcn.0045b319
mov dword [ebx + 0x43c], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
mov byte [ebx + 0x475], 1
mov byte [ebx + 0x325], 1
mov byte [ebx + 0x395], 1
mov eax, 0x48a628
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x405], 1
call fcn.00404784
mov edi, dword [ebp - 0x2c48]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x22
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045b6d8
mov dword [ebx + 0x528], 0xc36602
mov dword [edi + 0x24], 0x98
mov dword [edi + 0x28], esi
mov eax, 0x48a634
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x540], 0
call fcn.00404784
mov edi, dword [ebp - 0x2c30]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x23
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045b6d8
mov dword [ebx + 0x564], 0xc36602
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], esi
mov eax, 0x48a63c
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x57c], 0
call fcn.00404784
mov edi, dword [ebp - 0x2c58]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x24
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045b6d8
mov dword [ebx + 0x5a0], 0x464646
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], esi
mov eax, 0x48a654
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x5b8], 0
call fcn.00404784
mov edi, dword [ebp - 0x2c38]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x25
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
push 0x190
push 0xfffffffffffffff4
call fcn.0045b6d8
mov dword [ebx + 0x5dc], 0x464646
mov eax, str.ck_W_vN
lea ecx, [ebp - 0x30]
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
call fcn.00404784
mov edi, dword [ebp - 0x2c50]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x26
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
push 0x190
push 0xfffffffffffffff2
call fcn.0045b6d8
mov dword [ebx + 0x654], 0x464646
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
mov eax, 0x48a684
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x66c], 0
call fcn.00404784
mov edi, dword [ebp - 0x2c40]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x27
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
push 0x190
push 0xfffffffffffffff4
call fcn.0045b6d8
mov dword [ebx + 0x690], 0x9f
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
mov eax, 0x48a69c
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x6a8], 0
call fcn.00404784
mov edi, dword [ebp - 0x2c20]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x28
call fcn.0045b6c6
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aa5
push 0x190
push 0xfffffffffffffff4
call fcn.0045b6d8
mov dword [ebx + 0x618], 0x9f
mov dword [edi + 0x24], 0x1b4
mov dword [edi + 0x28], 0x120
push 0x91
mov byte [ebx + 0x630], 0
call fcn.004061ed
pop ecx
push 0x92
mov dword [ebx + 0x24], eax
call fcn.004061ed
mov esi, dword [ebp - 0x2c24]
pop ecx
push 4
push dword [ebx + 0x24]
mov dword [ebx + 0x28], eax
mov eax, esi
call fcn.0045aec3
and dword [ebp - 0x2c14], 0
lea eax, [ebp - 0x2c14]
push eax
mov dword [esi + 0x2c], 0x25f
mov dword [esi + 0x30], 0x127
call dword [0x484374]
push eax
call dword [0x4843f8]
xor esi, esi
inc esi
cmp dword [ebp - 0x2c14], esi
mov edi, eax
jle 0x407312
push 0x48a6d4
push dword [edi + esi*4]
call fcn.0046327f
test eax, eax
pop ecx
pop ecx
jne 0x40729b
mov byte [ebx + 0x760], al
mov byte [ebx + 0x739], 1
jmp 0x407305
push str._autoStart0
push dword [edi + esi*4]
call fcn.0046327f
test eax, eax
pop ecx
pop ecx
jne 0x4072b6
mov byte [ebx + 0x761], al
jmp 0x407305
push str._desktopIcon0
push dword [edi + esi*4]
call fcn.0046327f
test eax, eax
pop ecx
pop ecx
jne 0x4072d1
mov byte [ebx + 0x325], al
jmp 0x407305
push str._fastIcon0
push dword [edi + esi*4]
call fcn.0046327f
test eax, eax
pop ecx
pop ecx
jne 0x4072ec
mov byte [ebx + 0x395], al
jmp 0x407305
push str._hao1230
push dword [edi + esi*4]
call fcn.0046327f
test eax, eax
pop ecx
pop ecx
jne 0x407305
mov byte [ebx + 0x744], al
inc esi
cmp esi, dword [ebp - 0x2c14]
jl 0x407279
push 0xff
lea eax, [ebp - 0x1b3]
push 0
push eax
mov byte [ebp - 0x1b4], 0
call fcn.0045f120
xor eax, eax
mov byte [ebp - 0x28], 0
lea edi, [ebp - 0x27]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
call fcn.00442aa4
pop ecx
lea ebx, [ebp - 0x28]
lea ecx, [ebp - 0x2bd8]
call fcn.0041b984
push 0x100
xor ebx, ebx
lea eax, [ebp - 0x1b4]
push ebx
push eax
mov byte [ebp - 4], 0x29
call fcn.0045f120
add esp, 0xc
push 0x7e
lea eax, [ebp - 0xb2]
push ebx
push eax
mov word [ebp - 0xb4], bx
call fcn.0045f120
add esp, 0xc
push 0xfde9
lea eax, [ebp - 0xb4]
push 0x40
push eax
lea edi, [ebp - 0x2bd8]
call fcn.0044d625
add esp, 0xc
push str.BDYYID
lea eax, [ebp - 0x2bec]
push eax
call fcn.0040470b
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x2bec]
push eax
mov byte [ebp - 4], 0x2a
call fcn.0040cb32
push str.__domain.baidu.com__path_
lea eax, [ebp - 0x2bec]
push eax
call fcn.0040cb32
push dword [ebp - 0x2bec]
push ebx
push str.http:__ikan.baidu.com_
call dword [0x484524]
mov esi, dword [ebp - 0x2c10]
mov ecx, esi
call fcn.00407e80
mov ecx, esi
call fcn.004076d4
call dword [0x484208]
mov dword [esi + 0x75c], eax
mov eax, dword [ebp - 0x2bec]
add eax, 0xfffffff0
call fcn.00401160
push ebx
push 1
mov ecx, edi
call fcn.00401a4d
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045eaa1
leave
ret 4