Function at 0x4ca460
Capabilities:
Get installed programs
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb50
mov eax, dword [0x5552b0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0xb40], eax
mov dword [ebp - 0xb50], esi
call fcn.004bc0d0
xor ecx, ecx
push 0x1fe
push ecx
lea edx, [ebp - 0xa02]
push edx
mov dword [ebp - 0xb38], eax
mov word [ebp - 0xa04], cx
call fcn.004e8ba0
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
add esp, 0xc
call edi
movzx eax, ax
mov ecx, eax
and ecx, 0x3ff
cmp ecx, 4
jne 0x4ca526
and eax, 0xfc00
cmp eax, 0x400
jne 0x4ca526
call fcn.004b77d0
test eax, eax
je 0x4ca517
call fcn.004cc110
push str.7.17.1230N1
test eax, eax
je 0x4ca501
push 0x5225b0
push str._s_t_s_t_t_t_tConsole_t_t_t_t
lea edx, [ebp - 0xa04]
push edx
jmp 0x4ca5c4
push 0x522598
push str._s_t_s_t_t_t_tConsole_t_t_t_t
lea eax, [ebp - 0xa04]
push eax
jmp 0x4ca5c4
push str.7.17.1230N1
push 0x54c488
jmp 0x4ca5b8
call edi
movzx eax, ax
mov edx, eax
and edx, 0x3ff
cmp edx, 4
jne 0x4ca592
and eax, 0xfc00
cmp eax, 0x800
jne 0x4ca592
call fcn.004b77d0
test eax, eax
je 0x4ca57a
call fcn.004cc110
push str.7.17.1230N1
test eax, eax
je 0x4ca56e
push 0x54c4b8
push str._s_t_s_t_t_t_tConsole_t_t_t_t
lea eax, [ebp - 0xa04]
push eax
jmp 0x4ca5c4
push 0x54c4d0
push str._s_t_s_t_t_t_tConsole_t_t_t_t
jmp 0x4ca5bd
push str.7.17.1230N1
push 0x54c4e8
push str._s_t_s_t_t_t_t_t_t_t_t
lea edx, [ebp - 0xa04]
push edx
jmp 0x4ca5c4
call fcn.004b77d0
push str.7.17.1230N1
test eax, eax
je 0x4ca5b3
push str.WiNet_Console
push str._s_t_s_t_t_t_tConsole_t_t_t_t
lea eax, [ebp - 0xa04]
push eax
jmp 0x4ca5c4
push str.WiNet_Client
push str._s_t_s_t_t_t_t_t_t_t_t
lea ecx, [ebp - 0xa04]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
mov ebx, dword [ebp - 0xb40]
add esp, 0x10
push 0x25a
lea edi, [ebp - 0xa04]
call fcn.004c2ef0
push 0x11c
lea edx, [ebp - 0xb20]
push 0
push edx
call fcn.004e8ba0
add esp, 0x10
lea eax, [ebp - 0xb20]
push eax
mov dword [ebp - 0xb20], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0xb38], 0
mov dword [ebp - 0xb30], 0
je 0x4ca631
lea ecx, [ebp - 0xb30]
push ecx
push 0x208
jmp 0x4ca63a
lea edx, [ebp - 0xb30]
push edx
push 8
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4cb153
push 0x7fe
push eax
lea ecx, [ebp - 0x802]
push ecx
mov word [ebp - 0x804], ax
call fcn.004e8ba0
push 0x400
mov dword [ebp - 0xb2c], 0
call fcn.004e5420
mov esi, eax
push 0x800
mov dword [ebp - 0xb4c], esi
call fcn.004e5420
mov edi, eax
push 0x208
mov dword [ebp - 0xb34], edi
call fcn.004e5420
push 0x800
lea edx, [ebp - 0x804]
mov ebx, eax
push 0
push edx
mov dword [ebp - 0xb44], ebx
mov dword [ebp - 0xb24], 0
call fcn.004e8ba0
push 0x400
push 0
push esi
call fcn.004e8ba0
mov eax, dword [ebp - 0xb30]
add esp, 0x30
push 0x400
push esi
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
jne 0x4cb131
sub edi, str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
mov dword [ebp - 0xb48], edi
mov edi, dword [ebp - 0xb34]
push 0x800
push 0
push edi
mov dword [ebp - 0xb28], 0
call fcn.004e8ba0
mov edx, dword [ebp - 0xb48]
add esp, 0xc
mov eax, str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
mov edi, edi
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ca730
mov eax, dword [ebp - 0xb4c]
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4ca747
sub eax, edx
add edi, 0xfffffffe
jmp 0x4ca760
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4ca760
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp dword [ebp - 0xb38], 0
rep movsb byte es:[edi], byte [esi]
je 0x4ca79c
mov edx, dword [ebp - 0xb34]
lea ecx, [ebp - 0xb28]
push ecx
push 0x201
push 0
push edx
jmp 0x4ca7ae
mov ecx, dword [ebp - 0xb34]
lea eax, [ebp - 0xb28]
push eax
push 1
push 0
push ecx
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4cb0da
mov ecx, dword [ebp - 0xb28]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edx, [ebp - 0xb24]
push edx
mov dword [ebp - 0xb3c], eax
lea eax, [ebp - 0xb3c]
push eax
push 0
push 0
push str.SystemComponent
push ecx
mov dword [ebp - 0xb24], 4
call esi
test eax, eax
jne 0x4ca820
mov eax, 1
cmp dword [ebp - 0xb3c], eax
jne 0x4ca820
mov edx, dword [ebp - 0xb28]
add dword [ebp - 0xb2c], eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4cb0e0
mov edi, 0x208
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov ecx, dword [ebp - 0xb28]
add esp, 0xc
lea eax, [ebp - 0xb24]
push eax
push ebx
push 0
push 0
push str.ParentKeyName
push ecx
call esi
test eax, eax
jne 0x4ca86d
mov edx, dword [ebp - 0xb28]
inc dword [ebp - 0xb2c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4cb0e0
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov ecx, dword [ebp - 0xb28]
add esp, 0xc
lea eax, [ebp - 0xb24]
push eax
push ebx
push 0
push 0
push str.Winet
push ecx
call esi
test eax, eax
jne 0x4ca8b5
mov edx, dword [ebp - 0xb28]
inc dword [ebp - 0xb2c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4cb0e0
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov ecx, dword [ebp - 0xb28]
add esp, 0xc
lea eax, [ebp - 0xb24]
push eax
push ebx
push 0
push 0
push str.DisplayName
push ecx
call esi
test eax, eax
jne 0x4caa83
mov ecx, 0x522598
mov eax, ebx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4ca916
test dx, dx
je 0x4ca912
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4ca916
add eax, 4
add ecx, 4
test dx, dx
jne 0x4ca8f0
xor eax, eax
jmp 0x4ca91b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4ca89d
mov ecx, 0x5225b0
mov eax, ebx
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4ca956
test dx, dx
je 0x4ca952
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4ca956
add eax, 4
add ecx, 4
test dx, dx
jne 0x4ca930
xor eax, eax
jmp 0x4ca95b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4ca89d
mov ecx, 0x54c4d0
mov eax, ebx
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4ca996
test dx, dx
je 0x4ca992
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4ca996
add eax, 4
add ecx, 4
test dx, dx
jne 0x4ca970
xor eax, eax
jmp 0x4ca99b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4ca89d
mov ecx, 0x54c4b8
mov eax, ebx
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4ca9d6
test dx, dx
je 0x4ca9d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4ca9d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4ca9b0
xor eax, eax
jmp 0x4ca9db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4ca89d
mov ecx, str.WiNet_Console
mov eax, ebx
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4caa16
test dx, dx
je 0x4caa12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4caa16
add eax, 4
add ecx, 4
test dx, dx
jne 0x4ca9f0
xor eax, eax
jmp 0x4caa1b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4ca89d
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.UninstallString
push eax
call esi
test eax, eax
je 0x4caa9b
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.WindowsInstaller
push edx
call esi
test eax, eax
je 0x4caa9b
mov eax, dword [ebp - 0xb28]
inc dword [ebp - 0xb2c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4cb0e0
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.DisplayName
push edx
call esi
test eax, eax
jne 0x4caaef
cmp dword [ebp - 0xb24], eax
jbe 0x4caaef
lea edx, [ebp - 0x804]
mov eax, ebx
sub edx, ebx
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4caae0
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4cab00
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cab00
mov eax, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], eax
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.DisplayVersion
push edx
call esi
test eax, eax
jne 0x4cab92
cmp dword [ebp - 0xb24], eax
jbe 0x4cab92
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cab57
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
lea ecx, [ecx]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cab70
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4caba0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4caba0
mov eax, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], eax
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.Publisher
push edx
call esi
test eax, eax
jne 0x4cac32
cmp dword [ebp - 0xb24], eax
jbe 0x4cac32
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cabf7
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
lea ecx, [ecx]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cac10
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4cac40
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cac40
mov eax, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], eax
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.InstallDate
push edx
call esi
test eax, eax
jne 0x4cacd2
cmp dword [ebp - 0xb24], eax
jbe 0x4cacd2
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cac97
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
lea ecx, [ecx]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cacb0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4cace0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cace0
mov eax, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], eax
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.UninstallString
push edx
call esi
test eax, eax
jne 0x4cad72
cmp dword [ebp - 0xb24], eax
jbe 0x4cad72
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cad37
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
lea ecx, [ecx]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cad50
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4cad80
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cad80
mov eax, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], eax
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.ProductID
push edx
call esi
test eax, eax
jne 0x4cae12
cmp dword [ebp - 0xb24], eax
jbe 0x4cae12
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cadd7
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
lea ecx, [ecx]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cadf0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4cae20
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cae20
mov eax, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], eax
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.RegCompany
push edx
call esi
test eax, eax
jne 0x4caeb2
cmp dword [ebp - 0xb24], eax
jbe 0x4caeb2
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cae77
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
lea ecx, [ecx]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cae90
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4caec0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4caec0
mov eax, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], eax
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.RegOwner
push edx
call esi
test eax, eax
jne 0x4caf52
cmp dword [ebp - 0xb24], eax
jbe 0x4caf52
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4caf17
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
lea ecx, [ecx]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4caf30
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4caf60
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4caf60
mov eax, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], eax
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.URLInfoAbout
push edx
call esi
test eax, eax
jne 0x4caff2
cmp dword [ebp - 0xb24], eax
jbe 0x4caff2
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cafb7
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
lea ecx, [ecx]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cafd0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4cb000
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb000
mov eax, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], eax
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.URLUpdateInfo
push edx
call esi
test eax, eax
jne 0x4cb08c
cmp dword [ebp - 0xb24], eax
jbe 0x4cb08c
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cb057
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
lea ecx, [ecx]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cb070
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb095
mov eax, dword [0x51ccdc]
mov esi, dword [ebp - 0xb50]
mov ebx, dword [ebp - 0xb40]
mov dword [edi], eax
push 0x25b
lea edi, [ebp - 0x804]
call fcn.004c2ef0
mov ecx, dword [ebp - 0xb28]
add esp, 4
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0xb44]
inc dword [ebp - 0xb2c]
push 0x800
lea ecx, [ebp - 0x804]
push 0
push ecx
call fcn.004e8ba0
mov esi, dword [ebp - 0xb4c]
push 0x400
push 0
push esi
call fcn.004e8ba0
mov edx, dword [ebp - 0xb2c]
mov eax, dword [ebp - 0xb30]
add esp, 0x18
push 0x400
push esi
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
je 0x4ca703
mov edi, dword [ebp - 0xb34]
mov ecx, dword [ebp - 0xb30]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push esi
call fcn.004e577a
push edi
call fcn.004e577a
push ebx
call fcn.004e577a
add esp, 0xc
cmp dword [ebp - 0xb38], 0
je 0x4cbbe5
lea edx, [ebp - 0xb30]
push edx
push 0x108
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4cbbe5
push 0x7fe
xor edi, edi
lea ecx, [ebp - 0x802]
push edi
push ecx
mov word [ebp - 0x804], ax
call fcn.004e8ba0
push 0x400
mov dword [ebp - 0xb2c], edi
call fcn.004e5420
mov esi, eax
push 0x800
mov dword [ebp - 0xb38], esi
call fcn.004e5420
push 0x208
mov dword [ebp - 0xb34], eax
call fcn.004e5420
push 0x800
lea edx, [ebp - 0x804]
mov ebx, eax
push edi
push edx
mov dword [ebp - 0xb48], ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
push 0x400
push edi
push esi
call fcn.004e8ba0
mov eax, dword [ebp - 0xb30]
add esp, 0x30
push 0x400
push esi
push edi
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
jne 0x4cbbb7
mov eax, dword [ebp - 0xb34]
sub eax, str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
mov dword [ebp - 0xb44], eax
nop
mov edi, dword [ebp - 0xb34]
push 0x800
push 0
push edi
call fcn.004e8ba0
mov edx, dword [ebp - 0xb44]
add esp, 0xc
mov eax, str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4cb251
mov eax, dword [ebp - 0xb38]
mov edx, eax
jmp 0x4cb270
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cb270
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cb280
mov ecx, eax
shr ecx, 2
mov esi, edx
mov edx, dword [ebp - 0xb34]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0xb28]
push ecx
push 0x101
push 0
push edx
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4cbb66
mov edx, dword [ebp - 0xb28]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0xb3c], eax
lea eax, [ebp - 0xb24]
push eax
lea ecx, [ebp - 0xb3c]
push ecx
push 0
push 0
push str.SystemComponent
push edx
mov dword [ebp - 0xb24], 4
call esi
test eax, eax
jne 0x4cb323
mov eax, 1
cmp dword [ebp - 0xb3c], eax
jne 0x4cb323
add dword [ebp - 0xb2c], eax
mov eax, dword [ebp - 0xb28]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4cbb6c
mov edi, 0x208
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.ParentKeyName
push edx
call esi
test eax, eax
jne 0x4cb370
mov eax, dword [ebp - 0xb28]
inc dword [ebp - 0xb2c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4cbb6c
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.Winet
push edx
call esi
test eax, eax
jne 0x4cb3b8
mov eax, dword [ebp - 0xb28]
inc dword [ebp - 0xb2c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4cbb6c
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov edx, dword [ebp - 0xb28]
add esp, 0xc
lea ecx, [ebp - 0xb24]
push ecx
push ebx
push 0
push 0
push str.DisplayName
push edx
call esi
test eax, eax
jne 0x4cb503
mov ecx, 0x522598
mov eax, ebx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4cb419
test dx, dx
je 0x4cb415
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4cb419
add eax, 4
add ecx, 4
test dx, dx
jne 0x4cb3f3
xor eax, eax
jmp 0x4cb41e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4cb3a0
mov ecx, 0x54c4d0
mov eax, ebx
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4cb456
test dx, dx
je 0x4cb452
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4cb456
add eax, 4
add ecx, 4
test dx, dx
jne 0x4cb430
xor eax, eax
jmp 0x4cb45b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4cb3a0
mov ecx, str.WiNet_Console
mov eax, ebx
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4cb496
test dx, dx
je 0x4cb492
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4cb496
add eax, 4
add ecx, 4
test dx, dx
jne 0x4cb470
xor eax, eax
jmp 0x4cb49b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4cb3a0
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov ecx, dword [ebp - 0xb28]
add esp, 0xc
lea eax, [ebp - 0xb24]
push eax
push ebx
push 0
push 0
push str.UninstallString
push ecx
call esi
test eax, eax
je 0x4cb51b
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.WindowsInstaller
push eax
call esi
test eax, eax
je 0x4cb51b
mov ecx, dword [ebp - 0xb28]
inc dword [ebp - 0xb2c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4cbb6c
push edi
push 0
push ebx
mov dword [ebp - 0xb24], edi
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.DisplayName
push eax
call esi
test eax, eax
jne 0x4cb56f
cmp dword [ebp - 0xb24], eax
jbe 0x4cb56f
lea edx, [ebp - 0x804]
mov eax, ebx
sub edx, ebx
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4cb560
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4cb580
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb580
mov ecx, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], ecx
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.DisplayVersion
push eax
call esi
test eax, eax
jne 0x4cb618
cmp dword [ebp - 0xb24], eax
jbe 0x4cb618
mov eax, ebx
mov edx, ebx
jmp 0x4cb5e0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cb5e0
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cb5f6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb621
mov ecx, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], ecx
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.Publisher
push eax
call esi
test eax, eax
jne 0x4cb6b8
cmp dword [ebp - 0xb24], eax
jbe 0x4cb6b8
mov eax, ebx
mov edx, ebx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cb680
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cb696
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb6c1
mov ecx, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], ecx
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.InstallDate
push eax
call esi
test eax, eax
jne 0x4cb758
cmp dword [ebp - 0xb24], eax
jbe 0x4cb758
mov eax, ebx
mov edx, ebx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cb720
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cb736
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb761
mov ecx, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], ecx
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.UninstallString
push eax
call esi
test eax, eax
jne 0x4cb7f8
cmp dword [ebp - 0xb24], eax
jbe 0x4cb7f8
mov eax, ebx
mov edx, ebx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cb7c0
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cb7d6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb801
mov ecx, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], ecx
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.ProductID
push eax
call esi
test eax, eax
jne 0x4cb898
cmp dword [ebp - 0xb24], eax
jbe 0x4cb898
mov eax, ebx
mov edx, ebx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cb860
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cb876
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb8a1
mov ecx, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], ecx
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.RegCompany
push eax
call esi
test eax, eax
jne 0x4cb938
cmp dword [ebp - 0xb24], eax
jbe 0x4cb938
mov eax, ebx
mov edx, ebx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cb900
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cb916
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb941
mov ecx, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], ecx
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.RegOwner
push eax
call esi
test eax, eax
jne 0x4cb9d8
cmp dword [ebp - 0xb24], eax
jbe 0x4cb9d8
mov eax, ebx
mov edx, ebx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cb9a0
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cb9b6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cb9e1
mov ecx, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], ecx
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.URLInfoAbout
push eax
call esi
test eax, eax
jne 0x4cba78
cmp dword [ebp - 0xb24], eax
jbe 0x4cba78
mov eax, ebx
mov edx, ebx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cba40
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cba56
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cba81
mov ecx, dword [0x51ccdc]
push 0x208
push 0
push ebx
mov dword [edi], ecx
mov dword [ebp - 0xb24], 0x208
call fcn.004e8ba0
mov eax, dword [ebp - 0xb28]
add esp, 0xc
lea edx, [ebp - 0xb24]
push edx
push ebx
push 0
push 0
push str.URLUpdateInfo
push eax
call esi
test eax, eax
jne 0x4cbb12
cmp dword [ebp - 0xb24], eax
jbe 0x4cbb12
mov eax, ebx
mov edx, ebx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4cbae0
lea edi, [ebp - 0x804]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4cbaf6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x804]
add edi, 0xfffffffe
jmp 0x4cbb20
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cbb20
mov ecx, dword [0x51ccdc]
mov esi, dword [ebp - 0xb50]
mov ebx, dword [ebp - 0xb40]
mov dword [edi], ecx
push 0x25b
lea edi, [ebp - 0x804]
call fcn.004c2ef0
mov edx, dword [ebp - 0xb28]
add esp, 4
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0xb48]
inc dword [ebp - 0xb2c]
push 0x800
lea edx, [ebp - 0x804]
push 0
push edx
call fcn.004e8ba0
mov esi, dword [ebp - 0xb38]
push 0x400
push 0
push esi
call fcn.004e8ba0
mov eax, dword [ebp - 0xb2c]
mov ecx, dword [ebp - 0xb30]
add esp, 0x18
push 0x400
push esi
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
je 0x4cb230
mov edx, dword [ebp - 0xb30]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0xb38]
push eax
call fcn.004e577a
mov ecx, dword [ebp - 0xb34]
push ecx
call fcn.004e577a
push ebx
call fcn.004e577a
add esp, 0xc
mov edx, dword [ebp - 0xb50]
mov eax, dword [ebp - 0xb40]
push edx
push eax
call fcn.004cbe10
mov ecx, dword [ebp - 4]
add esp, 8
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e4746
mov esp, ebp
pop ebp
ret