Function at 0x417195
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
lea ebp, [esp - 0x194]
sub esp, 0x214
mov eax, dword [0x52ec00]
xor eax, ebp
mov dword [ebp + 0x190], eax
push ebx
push esi
push edi
xor eax, eax
push 0x206
mov word [ebp - 0x78], ax
xor ebx, ebx
lea eax, [ebp - 0x76]
push ebx
push eax
call fcn.004dbcc0
add esp, 0xc
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x7c]
push eax
push str.Disable_Script_Debugger
xor edi, edi
push str.SoftwareMicrosoftInternet_ExplorerMain
mov esi, 0x80000001
inc edi
push esi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x80], 0x208
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x417250
mov ecx, 0x511d6c
lea eax, [ebp - 0x78]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41722e
cmp dx, bx
je 0x41722a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41722e
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x417208
xor eax, eax
jmp 0x417233
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x417250
push 8
push 0x511d6c
push edi
push str.Disable_Script_Debugger
push str.SoftwareMicrosoftInternet_ExplorerMain
push esi
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov esi, 0x54a1c4
cmp dword [0x54847c], ebx
jne 0x41727b
cmp dword [0x548480], ebx
jne 0x41728e
cmp dword [0x548484], ebx
jne 0x41728e
cmp dword [0x548488], ebx
je 0x4173fc
jmp 0x41728e
push 0x1f40
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_BROWSER_EMULATION
call fcn.00416fba
add esp, 0xc
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_DISABLE_SQM_UPLOAD_FOR_APP
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_XSSFILTER
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_RESTRICT_ABOUT_PROTOCOL_IE7
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_AJAX_CONNECTIONEVENTS
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_FEEDS
call fcn.00416fba
add esp, 0x48
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_VIEWLINKEDWEBOC_IS_UNSAFE
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_PRIVATE_FONT_SETTING
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_USE_QME_FOR_TOPLEVEL_DOCS
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_USE_SECURITY_THUNKS
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_ACTIVEX_REPURPOSEDETECTION
call fcn.00416fba
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_PAINT_INSIDE_WMPAINT
call fcn.00416fba
add esp, 0x48
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_LEGACY_DISPPARAMS
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_HIGH_RESOLUTION_AWARE
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_FORCE_DISABLE_UNTRUSTEDPROTOCOL
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_ENFORCE_BSTR
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_ENABLE_WEB_CONTROL_VISUALS
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_ENABLE_DYNAMIC_OBJECT_CACHING
call fcn.00416fba
add esp, 0x48
cmp dword [0x548480], ebx
jne 0x417556
cmp dword [0x548484], ebx
jne 0x417560
cmp dword [0x548488], ebx
je 0x4173fc
push 0x2af8
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_BROWSER_EMULATION
call fcn.00416fba
add esp, 0xc
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_USE_LEGACY_JSCRIPT
call fcn.00416fba
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_LAYOUT9_QUIRKS_EMULATION
call fcn.00416fba
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_USE_WEBOC_OMNAVIGATOR_IMPLEMENTATION
call fcn.00416fba
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFeature_Enable_Compat_Logging
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_GPU_RENDERING
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_ALIGNED_TIMERS
call fcn.00416fba
add esp, 0x48
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_ALLOW_HIGHFREQ_TIMERS
call fcn.00416fba
add esp, 0xc
cmp dword [0x548474], ebx
jne 0x417413
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_SCRIPTURL_MITIGATION
call fcn.00416fba
add esp, 0xc
cmp dword [0x548460], ebx
je 0x41742a
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_INTERNET_SHELL_FOLDERS
call fcn.00416fba
add esp, 0xc
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_HTTP_USERNAME_PASSWORD_DISABLE
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_BLOCK_LMZ_OBJECT
call fcn.00416fba
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_BLOCK_LMZ_IMG
call fcn.00416fba
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_BLOCK_LMZ_SCRIPT
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_BEHAVIORS
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_DISABLE_ISO_2022_JP_SNIFFING
call fcn.00416fba
add esp, 0x48
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_DISABLE_ISO_2022_JP_SNIFFING_V2
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_DISABLE_MK_PROTOCOL
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_LOCALMACHINE_LOCKDOWN
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_MIME_HANDLING
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_MIME_SNIFFING
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_OBJECT_CACHING
call fcn.00416fba
add esp, 0x48
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_PROTOCOL_LOCKDOWN
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_SAFE_BINDTOOBJECT
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_WINDOW_RESTRICTIONS
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_ZONE_ELEVATION
call fcn.00416fba
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_SECURITYBAND
call fcn.00416fba
add esp, 0x48
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_TABBED_BROWSING
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_VALIDATE_NAVIGATE_URL
call fcn.00416fba
push edi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_WEBOC_DOCUMENT_ZOOM
call fcn.00416fba
push ebx
push esi
push str.SoftwareMicrosoftInternet_ExplorerMainFeatureControlFEATURE_BLOCK_CROSS_PROTOCOL_FILE_NAVIGATION
call fcn.00416fba
mov ecx, dword [ebp + 0x190]
add esp, 0x30
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004d5a7d
add ebp, 0x194
leave
ret
push 0x2328
jmp 0x417394
push 0x2710
jmp 0x417394