Function at 0x448890
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5df154
mov eax, dword fs:[0]
push eax
sub esp, 0x498
mov eax, dword [0x65c428]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
call fcn.00408a20
mov ecx, eax
test ecx, ecx
je 0x44940a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x484], eax
mov dword [ebp - 4], 0
mov dword [ebp - method.mf_bind_t_class_CInstaller__class_CInstaller___void_.virtual_0], vtable.mf_bind_t_class_CInstaller__class_CInstaller___void_.0
mov dword [ebp - 0x478], 0x447ef0
mov dword [ebp - 0x474], edi
lea eax, [ebp - 0x47c]
mov byte [ebp - 4], 1
push eax
call fcn.0043fe40
add esp, 4
mov byte [ebp - 4], 0
call fcn.00441a40
mov esi, eax
call fcn.00441ac0
mov ecx, eax
call fcn.00441c30
mov ecx, dword [esi]
push dword [eax]
push esi
call dword [ecx + 0x24]
push eax
push str.install_type:_d__install_version:_s
call fcn.00443ec0
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x47c], 0x447f00
mov dword [ebp - 0x478], edi
mov dword [ebp - 0x474], 0
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 2
push eax
call fcn.0043fe40
add esp, 0x10
mov byte [ebp - 4], 0
lea ebx, [edi + 4]
push ebx
call fcn.00441ac0
mov ecx, eax
call fcn.00441c40
push eax
call fcn.00453940
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x47c], 0x447f00
mov dword [ebp - 0x478], edi
mov dword [ebp - 0x474], 2
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 3
push eax
call fcn.0043fe40
mov esi, dword [ebx]
lea ecx, [ebp - 0x430]
add esp, 0xc
mov byte [ebp - 4], 0
call fcn.00454060
push esi
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 4
call fcn.00454640
lea ecx, [ebp - 0x430]
call fcn.00454950
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 0
call fcn.00454170
push str.remove_all_pending_files
call fcn.00443ec0
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x47c], 0x447f00
mov dword [ebp - 0x478], edi
mov dword [ebp - 0x474], 3
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 5
push eax
call fcn.0043fe40
push str..tmp
push dword [ebx]
mov byte [ebp - 4], 0
call fcn.00406ef0
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x47c], 0x447f00
mov dword [ebp - 0x478], edi
mov dword [ebp - 0x474], 4
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 6
push eax
call fcn.0043fe40
push dword [ebx]
mov byte [ebp - 4], 0
push str.remove_all_.tmp_files_in__s
call fcn.00443ec0
push str.update
lea eax, [ebp - 0x46c]
push ebx
push eax
call fcn.00416100
push dword [eax]
mov byte [ebp - 4], 7
call fcn.00406c80
mov edx, dword [ebp - 0x46c]
or ebx, 0xffffffff
add esp, 0x2c
mov byte [ebp - 4], 0
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x448ad5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.update
lea esi, [edi + 4]
lea eax, [ebp - 0x46c]
push esi
push eax
call fcn.00416100
push dword [eax]
mov byte [ebp - 4], 8
push str.Delete_directory_recursively:__s
call fcn.00443ec0
mov edx, dword [ebp - 0x46c]
add esp, 0x14
mov byte [ebp - 4], 0
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x448b1e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x47c], 0x447f00
mov dword [ebp - 0x478], edi
mov dword [ebp - 0x474], 5
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 9
push eax
call fcn.0043fe40
add esp, 4
mov byte [ebp - 4], 0
mov ecx, edi
call fcn.004471c0
test al, 1
jne 0x448b76
push 0xf
push str.copy_file_fail
lea ecx, [ebp - 0x484]
call fcn.00407f00
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x47c], 0x447f00
mov dword [ebp - 0x478], edi
mov dword [ebp - 0x474], 0x5d
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0xa
push eax
call fcn.0043fe40
push dword [esi]
mov byte [ebp - 4], 0
call fcn.004558b0
add esp, 8
lea ecx, [ebp - 0x468]
push dword [esi]
call fcn.005baf70
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0xb
push eax
call fcn.005bb7b0
mov ecx, edi
call fcn.004494f0
mov dword [ebp - 0x474], eax
test eax, eax
jne 0x448cef
mov ecx, dword [ebp - 0x484]
mov ecx, dword [ecx - 0x10]
test ecx, ecx
je 0x448c02
mov edx, dword [ecx]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x448c18
call fcn.00408a20
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x449414
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x470], eax
push str.write_open_bookmark_reg_fail
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0xc
call fcn.004082c0
test al, al
jne 0x448cbb
push 0
push 0
push 0xffffffffffffffff
push str.write_open_bookmark_reg_fail
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ebx, [eax - 1]
test ebx, ebx
jle 0x448cad
mov esi, dword [ebp - 0x470]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, ebx
or eax, ecx
jge 0x448c83
push ebx
lea ecx, [ebp - 0x470]
call fcn.00408fc0
mov esi, dword [ebp - 0x470]
push ebx
push esi
push 0xffffffffffffffff
push str.write_open_bookmark_reg_fail
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp ebx, dword [esi - 8]
jg 0x44941e
xor eax, eax
mov dword [esi - 0xc], ebx
mov word [esi + ebx*2], ax
or ebx, 0xffffffff
jmp 0x448cc1
lea ecx, [ebp - 0x470]
call fcn.004084c0
or ebx, 0xffffffff
mov esi, dword [ebp - 0x470]
push dword [esi - 0xc]
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 0xd
push esi
call fcn.00407f00
mov byte [ebp - 4], 0xb
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x448cef
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x42c], 0x447f00
mov dword [ebp - 0x428], edi
mov dword [ebp - 0x424], 0x60
lea eax, [ebp - 0x430]
mov byte [ebp - 4], 0xe
push eax
call fcn.0043fe40
add esp, 4
mov byte [ebp - 4], 0xb
call fcn.00441a40
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x64]
test al, 1
je 0x448d54
call fcn.0041cd30
mov ecx, eax
call fcn.00419800
mov dword [ebp - 0x46c], 1
test eax, eax
je 0x448d5e
mov dword [ebp - 0x46c], 0
call fcn.00441a40
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x64]
test al, 2
je 0x448d83
call fcn.0041cd30
mov ecx, eax
call fcn.00419900
test eax, eax
jne 0x448d83
lea esi, [eax + 1]
jmp 0x448d85
xor esi, esi
push 0
call fcn.0041cd30
mov ecx, eax
call fcn.004199d0
neg eax
sbb eax, eax
inc eax
push eax
call fcn.0041cd30
mov ecx, eax
call fcn.00419960
neg eax
sbb eax, eax
inc eax
push eax
push esi
push dword [ebp - 0x46c]
push ecx
mov esi, esp
mov dword [ebp - 0x46c], esi
mov eax, dword [edi + 4]
sub eax, 0x10
push eax
call fcn.00408320
add esp, 4
lea ecx, [ebp - 0x4a0]
add eax, 0x10
mov dword [esi], eax
call fcn.00442b80
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0xf
call fcn.004436c0
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x42c], 0x447f00
mov dword [ebp - 0x428], edi
mov dword [ebp - 0x424], 0x61
lea eax, [ebp - 0x430]
mov byte [ebp - 4], 0x10
push eax
call fcn.0043fe40
add esp, 4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4a0]
call fcn.00442d60
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x42c], 0x447f00
mov dword [ebp - 0x428], edi
mov dword [ebp - 0x424], 0x62
lea eax, [ebp - 0x430]
mov byte [ebp - 4], 0x11
push eax
call fcn.0043fe40
push 0x208
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0xf
push 0
push eax
call fcn.00537020
add esp, 0x10
lea eax, [ebp - 0x420]
push str.SuperBookmarkTray.exe
push dword [edi + 4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x470]
mov dword [ebp - 0x46c], eax
call fcn.00408a20
mov ecx, eax
test ecx, ecx
je 0x449428
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x470], eax
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x470]
call fcn.004082c0
test al, al
jne 0x448f02
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x448ee0
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x470]
call fcn.00409390
mov byte [ebp - 4], 0x13
call fcn.00408a20
mov ecx, eax
test ecx, ecx
je 0x449432
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x46c], eax
push 0x5fe514
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0x14
call fcn.004082c0
test al, al
jne 0x448f4d
push 0xd
push 0x5fe514
lea ecx, [ebp - 0x46c]
call fcn.00409390
mov esi, dword [ebp - 0x46c]
lea ecx, [ebp - 0x485]
push esi
push dword [ebp - 0x470]
mov byte [ebp - 4], 0x15
call fcn.004475c0
mov byte [ebp - 4], 0x13
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x448f84
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x470]
mov eax, ebx
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x448fa5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, edi
call fcn.00449d80
push 4
lea eax, [ebp - 0x46c]
mov dword [ebp - 0x46c], 0
push eax
push 4
push str.CertificateRevocation
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
test eax, eax
jne 0x448fe1
push str.Ban_Check_Certificate_suc
jmp 0x448fe6
push str.Ban_Check_Certificate_fail
call fcn.00443ec0
add esp, 4
push str.IsWow64Process2
push str.kernelbase.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x44911a
lea eax, [ebp - 0x46c]
mov dword [ebp - 0x470], 0
push eax
lea eax, [ebp - 0x470]
mov dword [ebp - 0x46c], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
test eax, eax
je 0x44911a
mov eax, dword [ebp - 0x46c]
mov ecx, 0xaa64
cmp ax, cx
je 0x44906a
mov ecx, 0x1c0
cmp ax, cx
je 0x44906a
mov ecx, 0x1c4
cmp ax, cx
jne 0x44911a
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00537020
add esp, 0xc
mov dword [ebp - 0x428], 0
xor eax, eax
mov dword [ebp - 0x424], 7
lea ecx, [ebp - 0x438]
mov word [ebp - 0x438], ax
push 0xd
push 0x5fe514
call fcn.00418370
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x450]
push eax
call fcn.004131c0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x4490d1
mov eax, dword [eax]
push str.config.ini
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ecx, [ebp - 0x450]
call fcn.00415bc0
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0xf
call fcn.00415bc0
lea eax, [ebp - 0x218]
push eax
push 0x5ff118
push 0x5ff11c
push str.settings
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
call fcn.0041cd30
mov eax, dword [eax + 0x58]
sub eax, 0x10
push eax
call fcn.00408320
add esp, 4
lea esi, [eax + 0x10]
mov dword [ebp - 0x46c], esi
cmp dword [esi - 0xc], 0
mov byte [ebp - 4], 0x17
je 0x4491ed
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00537020
add esp, 0xc
mov dword [ebp - 0x428], 0
xor eax, eax
mov dword [ebp - 0x424], 7
lea ecx, [ebp - 0x438]
mov word [ebp - 0x438], ax
push 0xd
push 0x5fe514
call fcn.00418370
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x450]
push eax
call fcn.004131c0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x4491ac
mov eax, dword [eax]
push str.config.ini
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ecx, [ebp - 0x450]
call fcn.00415bc0
lea ecx, [ebp - 0x438]
call fcn.00415bc0
lea eax, [ebp - 0x218]
push eax
push esi
push str.theme_mode
push str.settings
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 4], 0xf
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x449208
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0041cd30
mov eax, dword [eax + 0x3c]
sub eax, 0x10
push eax
call fcn.00408320
add esp, 4
add eax, 0x10
mov dword [ebp - 0x46c], eax
mov ecx, str.__fromnewinstall
nop word [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x449256
test dx, dx
je 0x449252
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x449256
add eax, 4
add ecx, 4
test dx, dx
jne 0x449230
xor esi, esi
jmp 0x44925b
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x46c]
mov eax, ebx
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44927c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
jne 0x4492e0
call fcn.0041cd30
mov ecx, eax
call fcn.00419ad0
test al, al
je 0x4492e0
push 0x208
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.00537020
add esp, 0xc
lea eax, [ebp - 0x218]
push str.UtilsTabXHelper.exe
push dword [edi + 4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push str.run_helper
call fcn.00443ec0
add esp, 4
lea eax, [ebp - 0x218]
push 0xffffffffffffffff
push esi
push esi
push 1
push 1
push 0x5f6114
push eax
call fcn.00440d40
mov ecx, edi
call fcn.00449740
test eax, eax
jne 0x449301
push 0x14
push str.write_path_reg_fail
lea ecx, [ebp - 0x484]
xor esi, esi
call fcn.00407f00
jmp 0x449307
mov esi, dword [ebp - 0x474]
push str.install_end.
call fcn.00443ec0
mov eax, dword [ebp - 0x484]
mov dword [ebp - method.mf_bind_t_2_class_CInstaller__class_CInstaller___void__int__wchar_t_const__.virtual_0], vtable.mf_bind_t_2_class_CInstaller__class_CInstaller___void__int__wchar_t_const__.0
mov dword [ebp - 0x430], 0x447ed0
mov dword [ebp - 0x42c], edi
mov dword [ebp - 0x428], esi
mov dword [ebp - 0x424], eax
lea eax, [ebp - 0x434]
mov byte [ebp - 4], 0x1a
push eax
call fcn.0043fe40
push str.real_install_end.
mov byte [ebp - 4], 0xf
call fcn.00443ec0
lea esi, [edi + 0x78]
mov dword [ebp - method._BaseModule::CAutoLocker.virtual_0], vtable._BaseModule::CAutoLocker.0
add esp, 0xc
mov dword [ebp - 0x474], esi
test esi, esi
je 0x44937a
mov eax, dword [esi]
push esi
call dword [eax]
mov ecx, dword [edi + 0x68]
mov byte [ebp - 4], 0x1b
test ecx, ecx
je 0x44938b
mov eax, dword [ecx]
push ecx
call dword [eax + 0x14]
push str.set_install_finish_event
call fcn.00443ec0
add esp, 4
push dword [edi + 0x94]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov byte [ebp - 4], 0x1c
test esi, esi
je 0x4493b2
mov eax, dword [esi]
push esi
call dword [eax + 4]
lea ecx, [ebp - 0x4a0]
call fcn.00442d10
lea ecx, [ebp - 0x468]
call fcn.005bb000
mov edx, dword [ebp - 0x484]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4493ea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00472636
mov esp, ebp
pop ebp
ret 8
push 0x80004005
call fcn.00408260
push 0x80004005
call fcn.00408260
push 0x80070057
call fcn.00408260
push 0x80004005
call fcn.00408260
push 0x80004005
call fcn.00408260
int3