Function at 0x414500
Capabilities:
Delete registry key
Delete registry value
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x434a6b
mov eax, dword fs:[0]
push eax
sub esp, 0x334
mov eax, dword [0x4433ec]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x338], ebx
mov dword [ebp - 0x334], ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x54]
mov dword [ebp - 0x58], eax
push str.WujiPlayer.asf_
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 1
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414582
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.avi_
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 2
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4145bf
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.wm
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 3
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4145fc
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.wmp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 4
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414639
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.wmv
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 5
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414676
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.ram
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 6
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4146b3
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rm
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 7
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4146f0
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rmvb
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 8
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41472d
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 9
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41476a
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rpm
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xa
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4147a7
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.rt
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xb
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4147e4
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.smi
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xc
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414821
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.smil
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xd
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41485e
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.dt
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xe
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41489b
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m1v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0xf
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4148d8
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m2p
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x10
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414915
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m2t
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x11
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414952
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m2ts
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x12
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41498f
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m2v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x13
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x4149cc
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mp2v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x14
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414a09
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpe
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x15
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414a46
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpeg
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x16
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414a83
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpg
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x17
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414ac0
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpv2
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x18
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414afd
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.pss
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x19
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414b3a
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.pss
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1a
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414b77
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.tp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1b
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414bb4
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.tpr
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1c
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414bf1
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.ts
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1d
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414c2e
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m4b
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1e
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414c6b
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m4p
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x1f
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414ca8
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.m4v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x20
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414ce5
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mp3
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x21
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414d22
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mp4
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x22
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414d5f
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mpeg4
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x23
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414d9c
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.3g2
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x24
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414dd9
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.3gp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x25
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414e16
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.3gp2
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x26
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414e53
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.2gpp
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x27
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414e90
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mov
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x28
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414ecd
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.qt
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x29
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414f0a
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.f4v
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2a
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414f47
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.flv
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2b
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414f84
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.hlv
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2c
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414fc1
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.swf
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2d
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x414ffe
push eax
call fcn.0041be61
add esp, 4
lea edx, [ebp - 0x54]
push str.WujiPlayer.mkv
or eax, 0xffffffff
lea esi, [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], bl
call fcn.00410060
mov eax, esi
lea edi, [ebp - 0x33c]
mov byte [ebp - 4], 0x2e
call fcn.00415cc0
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
cmp eax, ecx
je 0x41503b
push eax
call fcn.0041be61
add esp, 4
mov ecx, dword [ebp - 0x338]
sub ecx, dword [ebp - 0x33c]
mov eax, 0x78787879
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x415302
mov edx, dword [ebp - 0x33c]
mov dword [ebp - 0x340], edx
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x340]
mov ecx, dword [eax]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x54], bl
mov esi, ecx
cmp ecx, ebx
jne 0x41508c
mov esi, 0x43a501
mov edi, esi
lea edx, [edi + 1]
mov cl, byte [edi]
inc edi
cmp cl, bl
jne 0x415091
sub edi, edx
cmp edi, 0x3f
jl 0x4150b2
lea ecx, [edi + 1]
push ecx
push ebx
mov dword [ebp - 0x58], ebx
call fcn.0041c905
add esp, 8
mov dword [ebp - 0x58], eax
push edi
push esi
push eax
call fcn.0041c655
mov edx, dword [ebp - 0x58]
add esp, 0xc
push str.DefaultIcon
lea eax, [ebp - 0x58]
mov byte [edi + edx], bl
call fcn.0040ff60
mov eax, dword [ebp - 0x58]
push eax
push 0x80000000
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov ecx, dword [ebp - 0x340]
mov ecx, dword [ecx]
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x130], eax
mov byte [ebp - 0x12c], bl
mov esi, ecx
cmp ecx, ebx
jne 0x415104
mov esi, 0x43a501
mov edi, esi
lea edx, [edi + 1]
lea esp, [esp]
mov cl, byte [edi]
inc edi
cmp cl, bl
jne 0x415110
sub edi, edx
cmp edi, 0x3f
jl 0x415137
lea edx, [edi + 1]
push edx
push ebx
mov dword [ebp - 0x130], ebx
call fcn.0041c905
add esp, 8
mov dword [ebp - 0x130], eax
push edi
push esi
push eax
call fcn.0041c655
mov eax, dword [ebp - 0x130]
add esp, 0xc
mov byte [edi + eax], bl
push str.ShellOpenCommand
lea eax, [ebp - 0x130]
call fcn.0040ff60
mov ecx, dword [ebp - 0x130]
push ecx
push 0x80000000
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edx, dword [ebp - 0x340]
mov ecx, dword [edx]
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 0x1bc], bl
mov esi, ecx
cmp ecx, ebx
jne 0x415192
mov esi, 0x43a501
mov edi, esi
lea edx, [edi + 1]
mov cl, byte [edi]
inc edi
cmp cl, bl
jne 0x415197
sub edi, edx
cmp edi, 0x3f
jl 0x4151be
lea eax, [edi + 1]
push eax
push ebx
mov dword [ebp - 0x1c0], ebx
call fcn.0041c905
add esp, 8
mov dword [ebp - 0x1c0], eax
push edi
push esi
push eax
call fcn.0041c655
mov ecx, dword [ebp - 0x1c0]
add esp, 0xc
push str.ShellOpen
lea eax, [ebp - 0x1c0]
mov byte [edi + ecx], bl
call fcn.0040ff60
mov edx, dword [ebp - 0x1c0]
push edx
push 0x80000000
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov eax, dword [ebp - 0x340]
mov ecx, dword [eax]
lea eax, [ebp - 0x174]
mov dword [ebp - 0x178], eax
mov byte [ebp - 0x174], bl
mov esi, ecx
cmp ecx, ebx
jne 0x415219
mov esi, 0x43a501
mov ecx, esi
lea edi, [ecx + 1]
mov edi, edi
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x415220
sub ecx, edi
mov edi, ecx
cmp edi, 0x3f
jl 0x415249
lea ecx, [edi + 1]
push ecx
push ebx
mov dword [ebp - 0x178], ebx
call fcn.0041c905
add esp, 8
mov dword [ebp - 0x178], eax
push edi
push esi
push eax
call fcn.0041c655
mov edx, dword [ebp - 0x178]
add esp, 0xc
push str.Shell
lea eax, [ebp - 0x178]
mov byte [edi + edx], bl
call fcn.0040ff60
mov eax, dword [ebp - 0x178]
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
push eax
push 0x80000000
call esi
mov ecx, dword [ebp - 0x340]
mov edx, dword [ecx]
push edx
push 0x80000000
call esi
mov eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x174]
cmp eax, ecx
je 0x4152aa
push eax
call fcn.0041be61
add esp, 4
mov eax, dword [ebp - 0x1c0]
lea edx, [ebp - 0x1bc]
cmp eax, edx
je 0x4152c3
push eax
call fcn.0041be61
add esp, 4
mov eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x12c]
cmp eax, ecx
je 0x4152dc
push eax
call fcn.0041be61
add esp, 4
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x54]
cmp eax, edx
je 0x4152ef
push eax
call fcn.0041be61
add esp, 4
add dword [ebp - 0x340], 0x44
dec dword [ebp - 0x32c]
jne 0x415070
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xe4]
push 9
mov ecx, eax
push str.Software_
push ecx
mov dword [ebp - 0xe8], eax
mov byte [ebp - 0xe4], bl
call fcn.0041c655
mov edx, dword [ebp - 0xe8]
add esp, 0xc
push str.wjplay
lea eax, [ebp - 0xe8]
mov byte [edx + 9], bl
call fcn.0040ff60
mov edi, dword [ebp - 0xe8]
mov ebx, 0x43a510
lea ecx, [ebp - 0x2e0]
call fcn.00410c70
lea eax, [ebp - 0x24c]
push 6
mov ecx, eax
push str.wjplay
xor bl, bl
push ecx
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], bl
call fcn.0041c655
mov edx, dword [ebp - 0x250]
mov byte [edx + 6], bl
mov eax, dword [ebp - 0x2e0]
add esp, 0xc
push eax
lea eax, [ebp - 0x250]
call fcn.0040ff60
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov edi, dword [ebp - 0x250]
lea ecx, [ebp - 0x32c]
push ecx
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push 0x80000002
call esi
test eax, eax
jne 0x4153df
mov edx, dword [ebp - 0x32c]
push edi
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, 0x43a510
mov edi, str.Softwarewuji
lea ecx, [ebp - 0x328]
call fcn.00410c70
lea ecx, [ebp - 0x294]
push 0xa
mov edx, ecx
push str.WujiPlayer
xor ebx, ebx
push edx
mov dword [ebp - 0x298], ecx
mov byte [ebp - 0x294], bl
call fcn.0041c655
mov eax, dword [ebp - 0x298]
mov byte [eax + 0xa], bl
mov ecx, dword [ebp - 0x328]
add esp, 0xc
push ecx
lea eax, [ebp - 0x298]
call fcn.0040ff60
mov edi, dword [ebp - 0x298]
lea edx, [ebp - 0x32c]
push edx
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push 0x80000002
call esi
test eax, eax
jne 0x41546d
mov eax, dword [ebp - 0x32c]
push edi
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ecx, dword [ebp - 0x32c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x204]
push 6
mov eax, edx
push str.WJNews
push eax
mov dword [ebp - 0x208], edx
mov byte [ebp - 0x204], bl
call fcn.0041c655
mov ecx, dword [ebp - 0x208]
mov byte [ecx + 6], bl
mov edx, dword [ebp - 0x328]
add esp, 0xc
push edx
lea eax, [ebp - 0x208]
call fcn.0040ff60
mov edi, dword [ebp - 0x208]
lea eax, [ebp - 0x32c]
push eax
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push 0x80000002
call esi
test eax, eax
jne 0x4154e4
mov ecx, dword [ebp - 0x32c]
push edi
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov edx, dword [ebp - 0x32c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x9c]
push 6
mov ecx, eax
push str.wjplay
push ecx
mov dword [ebp - 0xa0], eax
mov byte [ebp - 0x9c], bl
call fcn.0041c655
mov edx, dword [ebp - 0xa0]
add esp, 0xc
push str._News
lea eax, [ebp - 0xa0]
mov byte [edx + 6], bl
call fcn.0040ff60
mov eax, dword [ebp - 0x2e0]
push eax
lea eax, [ebp - 0xa0]
call fcn.0040ff60
mov edi, dword [ebp - 0xa0]
lea ecx, [ebp - 0x32c]
push ecx
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push 0x80000002
call esi
test eax, eax
jne 0x41556b
mov edx, dword [ebp - 0x32c]
push edi
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
push str.SOFTWAREWuji
push 0x80000002
call esi
mov ecx, dword [ebp - 0xe8]
push ecx
push 0x80000002
call esi
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push 0x80000002
call esi
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
cmp eax, edx
je 0x4155b0
push eax
call fcn.0041be61
add esp, 4
mov eax, dword [ebp - 0x208]
lea ecx, [ebp - 0x204]
cmp eax, ecx
je 0x4155c9
push eax
call fcn.0041be61
add esp, 4
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x294]
cmp eax, edx
je 0x4155e2
push eax
call fcn.0041be61
add esp, 4
mov eax, dword [ebp - 0x328]
lea ecx, [ebp - 0x324]
cmp eax, ecx
je 0x4155fb
push eax
call fcn.0041be61
add esp, 4
mov eax, dword [ebp - 0x250]
lea edx, [ebp - 0x24c]
cmp eax, edx
je 0x415614
push eax
call fcn.0041be61
add esp, 4
mov eax, dword [ebp - 0x2e0]
lea ecx, [ebp - 0x2dc]
cmp eax, ecx
je 0x41562d
push eax
call fcn.0041be61
add esp, 4
mov eax, dword [ebp - 0xe8]
lea edx, [ebp - 0xe4]
cmp eax, edx
je 0x415646
push eax
call fcn.0041be61
add esp, 4
mov edi, dword [ebp - 0x33c]
cmp edi, ebx
je 0x415682
mov ebx, dword [ebp - 0x338]
mov esi, edi
cmp edi, ebx
je 0x415679
lea esp, [esp]
mov eax, dword [esi]
lea ecx, [esi + 4]
cmp eax, ecx
je 0x415672
push eax
call fcn.0041be61
add esp, 4
add esi, 0x44
cmp esi, ebx
jne 0x415660
push edi
call fcn.0041b77e
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041b499
mov esp, ebp
pop ebp
ret