Function at 0x100073c7
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x828
push ebx
xor ebx, ebx
cmp dword [0x1000d2c4], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x3c], ebx
jne 0x100073e8
xor eax, eax
jmp 0x100078f6
push esi
push edi
push 0xf003f
push str.SOFTWARECNNICCdnClientInstallInfo
push 0x80000002
lea ecx, [ebp - 4]
mov dword [ebp - 4], ebx
call fcn.10002402
test eax, eax
jne 0x10007477
push 0x7f
lea edi, [ebp - 0x827]
pop ecx
mov byte [ebp - 0x828], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], 0x200
push eax
lea eax, [ebp - 0x828]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x1000db34
mov dword [ebp - 0x7c], ebx
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x10007466
lea eax, [ebp - 0x828]
push str.c_cnnicrp
push eax
call fcn.1000aab0
pop ecx
test eax, eax
pop ecx
jne 0x10007466
mov dword [ebp - 0x3c], 1
cmp dword [ebp - 4], ebx
je 0x10007477
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], ebx
mov esi, 0x1000e1b8
lea edi, [ebp - 0x44]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x1000e1b0
lea edi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.Close
lea edi, [ebp - 0x60]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x1000e1a0
lea edi, [ebp - 0x90]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x1000e198
lea edi, [ebp - 0x88]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.Cancel
lea edi, [ebp - 0x98]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x1000e184
lea edi, [ebp - 0x78]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x1000e178
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.Reboot
lea edi, [ebp - 0x58]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push 7
mov esi, 0x1000e154
pop ecx
lea edi, [ebp - 0xe8]
rep movsd dword es:[edi], dword [esi]
push 7
mov esi, 0x1000e138
pop ecx
lea edi, [ebp - 0x120]
rep movsd dword es:[edi], dword [esi]
push 0xa
mov esi, str.China_Internet_Network_Information_Center
pop ecx
lea edi, [ebp - 0x15c]
rep movsd dword es:[edi], dword [esi]
push 0x1b
movsw word es:[edi], word [esi]
pop edx
mov esi, 0x1000e0a0
mov ecx, edx
lea edi, [ebp - 0x38c]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov esi, 0x1000e034
lea edi, [ebp - 0x2b4]
push 0x26
rep movsd dword es:[edi], dword [esi]
pop ecx
mov esi, str.You_have_successfully_installed_Chinese_Navigation__You_need_to_restart_Internet_Explorer_Browser_to_activate_the_function_of_CDN_and_Internet_Keyword.
lea edi, [ebp - 0x628]
push 0x1e
rep movsd dword es:[edi], dword [esi]
pop ecx
mov esi, 0x1000df20
lea edi, [ebp - 0x47c]
push 0x1e
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop ecx
mov esi, 0x1000dea4
lea edi, [ebp - 0x4f8]
push 0x1d
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop ecx
mov esi, str.You_have_successfully_installed_Chinese_Navigation__Activate_it_after_Rebooting_your_machine__r_n_r_nDo_you_reboot_now_
lea edi, [ebp - 0x400]
push 6
rep movsd dword es:[edi], dword [esi]
mov esi, 0x1000de24
lea edi, [ebp - 0xcc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x1000de18
lea edi, [ebp - 0xc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.Install_failed.
lea edi, [ebp - 0x130]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop eax
mov esi, 0x1000cf38
mov ecx, eax
lea edi, [ebp - 0x104]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, eax
mov esi, 0x1000cf1c
lea edi, [ebp - 0xb4]
push 8
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop ecx
mov esi, str.Chinese_Navigation_Install_Program
lea edi, [ebp - 0x180]
push 8
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, eax
mov esi, 0x1000ddec
lea edi, [ebp - 0x1b8]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, eax
mov esi, 0x1000ddd0
lea edi, [ebp - 0x19c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop ecx
mov esi, str.Chinese_Navigation_Repair_Program
lea edi, [ebp - 0x1dc]
push 0x25
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, edx
mov esi, 0x1000dd40
lea edi, [ebp - 0x248]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov esi, 0x1000dcd4
lea edi, [ebp - 0x320]
rep movsd dword es:[edi], dword [esi]
pop ecx
mov esi, str.You_have_successfully_repaired_Chinese_Navigation__You_need_to_restart_Internet_Explorer_Browser_to_activate_the_function_of_CDN_and_Internet_Keyword.
lea edi, [ebp - 0x590]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x38]
call fcn.10003f36
mov dword [ebp - 0x38], 0x1000b250
call fcn.10005455
test eax, eax
jne 0x1000775c
mov ax, word [0x10011fb0]
cmp ax, bx
jne 0x100076a4
lea eax, [ebp - 0x104]
mov dword [ebp - 8], 1
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x47c]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0xc], eax
jmp 0x10007702
push 1
pop ecx
cmp ax, cx
jne 0x100076d5
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x4f8]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x88]
jmp 0x100076fc
lea eax, [ebp - 0x180]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x400]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x30]
push eax
push 0x10011ed8
call fcn.10004139
mov eax, dword [0x10011ee0]
push ebx
push 0x10004173
push esi
push 0xcc
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
push 1
pop esi
cmp eax, esi
jne 0x100078e3
cmp dword [0x10011d6c], 2
jne 0x1000774f
call fcn.10007358
jmp 0x10007754
call fcn.1000734d
mov dword [ebp - 0x50], esi
jmp 0x100078e3
cmp dword [ebp + 8], ebx
mov ax, word [0x10011fb0]
je 0x10007830
cmp ax, bx
jne 0x100077af
cmp dword [ebp - 0x3c], ebx
jne 0x10007792
lea eax, [ebp - 0x104]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x38c]
jmp 0x1000784d
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x248]
jmp 0x1000784d
cmp ax, 1
jne 0x100077f4
cmp dword [ebp - 0x3c], ebx
jne 0x100077d7
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x2b4]
jmp 0x10007879
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x320]
jmp 0x10007879
cmp dword [ebp - 0x3c], ebx
jne 0x10007816
lea eax, [ebp - 0x180]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x628]
jmp 0x1000789f
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x590]
jmp 0x1000789f
cmp ax, bx
jne 0x1000785b
lea eax, [ebp - 0x104]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xcc]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x44]
jmp 0x100078ab
cmp ax, 1
jne 0x10007887
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x4c]
jmp 0x100078ab
lea eax, [ebp - 0x180]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x130]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x60]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ebx
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x30]
push eax
push 0x10011ed8
call fcn.10004139
push ebx
push 0x10004173
push esi
push 0xcc
push dword [0x10011ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp dword [ebp - 4], ebx
pop edi
pop esi
je 0x100078f3
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x50]
pop ebx
leave
ret