Function at 0x4f9e90
Capabilities:
Check if file exists
Get common file path
Get program files directory
Persist via app paths registry key
Persist via default file association registry key
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50a8c0
mov eax, dword fs:[0]
push eax
sub esp, 0x678
mov eax, dword [0x531304]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x175], 0
mov dword [ebp - 0x174], 0
mov byte [ebp - 0x134], 0
push 0x103
push 0
lea eax, [ebp - 0x133]
push eax
call fcn.00415fc0
add esp, 0xc
mov dword [ebp - 0x28c], 0x104
push 0x51eee0
lea ecx, [ebp - 0x170]
call fcn.00401e20
mov dword [ebp - 4], 0
push str.TheWorld.ini
lea ecx, [ebp - 0x2c]
call fcn.00401e20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x154]
call fcn.004011e0
mov byte [ebp - 4], 2
cmp dword [0x55b9f4], 0
jne 0x4f9f82
push 0x51ef00
call fcn.004e4170
add esp, 4
mov dword [ebp - 0x4ac], 0xfffffffc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x154]
call fcn.00401260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00401260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00401260
mov eax, dword [ebp - 0x4ac]
jmp 0x4fad30
mov ecx, dword [ebp + 8]
push ecx
call fcn.004f9c00
add esp, 4
mov dword [ebp - 0x288], eax
mov edx, dword [ebp - 0x288]
push edx
call fcn.00415e20
add esp, 4
test eax, eax
jne 0x4f9fe9
mov dword [ebp - 0x4b0], 0xfffffffd
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x154]
call fcn.00401260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00401260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00401260
mov eax, dword [ebp - 0x4b0]
jmp 0x4fad30
mov eax, dword [ebp - 0x288]
push eax
push str._DEBUGINFO__LOCK__SET_LockTheWorldIE_url___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x284], 0
push 0x103
push 0
lea ecx, [ebp - 0x283]
push ecx
call fcn.00415fc0
add esp, 0xc
mov edx, dword [ebp - 0x288]
push edx
call fcn.00415e20
add esp, 4
push eax
mov eax, dword [ebp - 0x288]
push eax
mov ecx, dword [ebp - 0x288]
push ecx
call fcn.00415e20
add esp, 4
add eax, 2
xor edx, edx
mov ecx, 3
div ecx
lea edx, [eax*4 + 1]
push edx
lea eax, [ebp - 0x284]
push eax
call fcn.004f6180
add esp, 0x10
lea ecx, [ebp - 0x284]
push ecx
call fcn.00415e20
add esp, 4
push eax
lea edx, [ebp - 0x284]
push edx
push 1
push 0x51ef54
push str.Software360360se3
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00415fc0
add esp, 0xc
lea ecx, [ebp - 0x28c]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x138]
push eax
push 0x513de5
push str.TheWorldURL_shellopencommand
push 0x80000000
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4fa237
lea ecx, [ebp - 0x134]
push ecx
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4fa237
lea edx, [ebp - 0x134]
push edx
lea ecx, [ebp - 0x154]
call fcn.004012a0
push 0
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x154]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4fa237
push 0
lea ecx, [ebp - 0x170]
push ecx
lea ecx, [ebp - 0x154]
call fcn.00413640
push eax
push 0
lea edx, [ebp - 0x4cc]
push edx
lea ecx, [ebp - 0x154]
call fcn.00401320
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x664], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x664]
push ecx
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4cc]
call fcn.00401260
push 0x513de6
lea ecx, [ebp - 0x4e8]
call fcn.00401e20
mov byte [ebp - 4], 4
push 0x51ef94
lea ecx, [ebp - 0x504]
call fcn.00401e20
mov byte [ebp - 4], 5
lea edx, [ebp - 0x4e8]
push edx
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x154]
push ecx
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x504]
call fcn.00401260
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4e8]
call fcn.00401260
lea edx, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x154]
call fcn.004013e0
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4fa237
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockTheWorldIE_path1___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x175], 1
movzx eax, byte [ebp - 0x175]
test eax, eax
jne 0x4fa3ec
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00415fc0
add esp, 0xc
lea edx, [ebp - 0x28c]
push edx
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x138]
push ecx
push 0x513de7
push str.SOFTWAREClientsStartMenuInternetTheWorld.exe_shellopencommand
push 0x80000002
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4fa3ec
lea edx, [ebp - 0x134]
push edx
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4fa3ec
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x154]
call fcn.004012a0
push 0
lea ecx, [ebp - 0x170]
push ecx
lea ecx, [ebp - 0x154]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4fa3ec
push 0
lea edx, [ebp - 0x170]
push edx
lea ecx, [ebp - 0x154]
call fcn.00413640
push eax
push 0
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x154]
call fcn.00401320
mov dword [ebp - 0x668], eax
mov ecx, dword [ebp - 0x668]
mov dword [ebp - 0x66c], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x66c]
push edx
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x520]
call fcn.00401260
push 0x513dee
lea ecx, [ebp - 0x53c]
call fcn.00401e20
mov byte [ebp - 4], 7
push 0x51f014
lea ecx, [ebp - 0x558]
call fcn.00401e20
mov byte [ebp - 4], 8
lea eax, [ebp - 0x53c]
push eax
lea ecx, [ebp - 0x558]
push ecx
lea edx, [ebp - 0x154]
push edx
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x558]
call fcn.00401260
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x53c]
call fcn.00401260
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x154]
call fcn.004013e0
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4fa3ec
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockTheWorldIE_path2___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x175], 1
movzx ecx, byte [ebp - 0x175]
test ecx, ecx
jne 0x4fa5a1
push 0x104
push 0
lea edx, [ebp - 0x134]
push edx
call fcn.00415fc0
add esp, 0xc
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x138]
push edx
push 0x513def
push str.http_shellTheWorld.execommand
push 0x80000000
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4fa5a1
lea eax, [ebp - 0x134]
push eax
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4fa5a1
lea ecx, [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x154]
call fcn.004012a0
push 0
lea edx, [ebp - 0x170]
push edx
lea ecx, [ebp - 0x154]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4fa5a1
push 0
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x154]
call fcn.00413640
push eax
push 0
lea ecx, [ebp - 0x574]
push ecx
lea ecx, [ebp - 0x154]
call fcn.00401320
mov dword [ebp - 0x670], eax
mov edx, dword [ebp - 0x670]
mov dword [ebp - 0x674], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x674]
push eax
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x574]
call fcn.00401260
push 0x513df2
lea ecx, [ebp - 0x590]
call fcn.00401e20
mov byte [ebp - 4], 0xa
push 0x51f06c
lea ecx, [ebp - 0x5ac]
call fcn.00401e20
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x590]
push ecx
lea edx, [ebp - 0x5ac]
push edx
lea eax, [ebp - 0x154]
push eax
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5ac]
call fcn.00401260
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x590]
call fcn.00401260
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x154]
call fcn.004013e0
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4fa5a1
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockTheWorldIE_path3___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x175], 1
movzx edx, byte [ebp - 0x175]
test edx, edx
jne 0x4fa756
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00415fc0
add esp, 0xc
lea ecx, [ebp - 0x28c]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x138]
push eax
push 0x513df3
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_PathsTheWorld.exe
push 0x80000002
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4fa756
lea ecx, [ebp - 0x134]
push ecx
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4fa756
lea edx, [ebp - 0x134]
push edx
lea ecx, [ebp - 0x154]
call fcn.004012a0
push 0
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x154]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4fa756
push 0
lea ecx, [ebp - 0x170]
push ecx
lea ecx, [ebp - 0x154]
call fcn.00413640
push eax
push 0
lea edx, [ebp - 0x5c8]
push edx
lea ecx, [ebp - 0x154]
call fcn.00401320
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x67c], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x67c]
push ecx
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5c8]
call fcn.00401260
push 0x513dfe
lea ecx, [ebp - 0x5e4]
call fcn.00401e20
mov byte [ebp - 4], 0xd
push 0x51f0ec
lea ecx, [ebp - 0x600]
call fcn.00401e20
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x5e4]
push edx
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x154]
push ecx
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x600]
call fcn.00401260
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5e4]
call fcn.00401260
lea edx, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x154]
call fcn.004013e0
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4fa756
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockTheWorldIE_path4___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x175], 1
movzx eax, byte [ebp - 0x175]
test eax, eax
jne 0x4fa7e6
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00415fc0
add esp, 0xc
push 0
push 0x1a
lea edx, [ebp - 0x134]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x154]
call fcn.004012a0
push str.TheWorldTheWorld.ini
lea ecx, [ebp - 0x154]
call fcn.0040bb70
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4fa7e6
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockTheWorldIE_path5___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x175], 1
movzx ecx, byte [ebp - 0x175]
test ecx, ecx
jne 0x4fabc8
mov byte [ebp - 0x39c], 0
push 0x103
push 0
lea edx, [ebp - 0x39b]
push edx
call fcn.00415fc0
add esp, 0xc
mov byte [ebp - 0x4a4], 0
push 0x103
push 0
lea eax, [ebp - 0x4a3]
push eax
call fcn.00415fc0
add esp, 0xc
lea ecx, [ebp - 0x290]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
jl 0x4fa898
lea edx, [ebp - 0x4a8]
push edx
push 0
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
jl 0x4fa884
lea eax, [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x4a8]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
mov edx, dword [ebp - 0x4a8]
push edx
mov eax, dword [ebp - 0x290]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x290]
push edx
mov eax, dword [ecx + 0x14]
call eax
mov ecx, dword [ebp - 0x290]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x290]
push eax
mov ecx, dword [edx + 8]
call ecx
lea edx, [ebp - 0x39c]
push edx
lea eax, [ebp - 0x4a4]
push eax
call fcn.00415eb0
add esp, 8
push 0x51f170
lea ecx, [ebp - 0x4a4]
push ecx
call fcn.00415ec0
add esp, 8
lea edx, [ebp - 0x4a4]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x4fa913
push 0x104
push 0
lea eax, [ebp - 0x4a4]
push eax
call fcn.00415fc0
add esp, 0xc
lea ecx, [ebp - 0x39c]
push ecx
lea edx, [ebp - 0x4a4]
push edx
call fcn.00415eb0
add esp, 8
push 0x51f180
lea eax, [ebp - 0x4a4]
push eax
call fcn.00415ec0
add esp, 8
lea ecx, [ebp - 0x4a4]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x4faa38
push 0x104
push 0
lea edx, [ebp - 0x39c]
push edx
call fcn.00415fc0
add esp, 0xc
lea eax, [ebp - 0x290]
push eax
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
jl 0x4fa9a7
lea ecx, [ebp - 0x4a8]
push ecx
push 0x19
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
jl 0x4fa993
lea edx, [ebp - 0x39c]
push edx
mov eax, dword [ebp - 0x4a8]
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
mov ecx, dword [ebp - 0x4a8]
push ecx
mov edx, dword [ebp - 0x290]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x290]
push ecx
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [ebp - 0x290]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x290]
push edx
mov eax, dword [ecx + 8]
call eax
push 0x104
push 0
lea ecx, [ebp - 0x4a4]
push ecx
call fcn.00415fc0
add esp, 0xc
lea edx, [ebp - 0x39c]
push edx
lea eax, [ebp - 0x4a4]
push eax
call fcn.00415eb0
add esp, 8
push 0x51f190
lea ecx, [ebp - 0x4a4]
push ecx
call fcn.00415ec0
add esp, 8
lea edx, [ebp - 0x4a4]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x4faa38
push 0x104
push 0
lea eax, [ebp - 0x4a4]
push eax
call fcn.00415fc0
add esp, 0xc
lea ecx, [ebp - 0x39c]
push ecx
lea edx, [ebp - 0x4a4]
push edx
call fcn.00415eb0
add esp, 8
push 0x51f1a0
lea eax, [ebp - 0x4a4]
push eax
call fcn.00415ec0
add esp, 8
lea ecx, [ebp - 0x4a4]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4fabc8
push 0x104
push 0
lea edx, [ebp - 0x134]
push edx
call fcn.00415fc0
add esp, 0xc
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x4a4]
push ecx
call fcn.004f5130
add esp, 4
push eax
call fcn.004de630
add esp, 8
lea edx, [ebp - 0x134]
push edx
lea ecx, [ebp - 0x154]
call fcn.004012a0
push 0
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x154]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4fabc8
push 0
lea ecx, [ebp - 0x170]
push ecx
lea ecx, [ebp - 0x154]
call fcn.00413640
push eax
push 0
lea edx, [ebp - 0x61c]
push edx
lea ecx, [ebp - 0x154]
call fcn.00401320
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x684], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x684]
push ecx
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x61c]
call fcn.00401260
push 0x513dff
lea ecx, [ebp - 0x638]
call fcn.00401e20
mov byte [ebp - 4], 0x10
push 0x51f1b0
lea ecx, [ebp - 0x654]
call fcn.00401e20
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0x638]
push edx
lea eax, [ebp - 0x654]
push eax
lea ecx, [ebp - 0x154]
push ecx
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x154]
call fcn.00401280
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x654]
call fcn.00401260
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x638]
call fcn.00401260
lea edx, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x154]
call fcn.004013e0
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4fabc8
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockTheWorldIE_path6___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x175], 1
movzx eax, byte [ebp - 0x175]
test eax, eax
jne 0x4fac58
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00415fc0
add esp, 0xc
push 0
push 0x26
lea edx, [ebp - 0x134]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x154]
call fcn.004012a0
push str.ApplicationTheWorld.ini
lea ecx, [ebp - 0x154]
call fcn.0040bb70
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4fac58
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockTheWorldIE_path7___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x175], 1
movzx ecx, byte [ebp - 0x175]
test ecx, ecx
jne 0x4faca5
mov dword [ebp - 0x658], 0xffffffff
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x154]
call fcn.00401260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00401260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00401260
mov eax, dword [ebp - 0x658]
jmp 0x4fad30
lea ecx, [ebp - 0x154]
call fcn.004012e0
push eax
mov edx, dword [ebp - 0x288]
push edx
push str.HomePage
push str.Option
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
test eax, eax
jne 0x4facd8
mov dword [ebp - 0x174], 0
jmp 0x4face2
mov dword [ebp - 0x174], 1
mov eax, dword [ebp - 0x288]
push eax
call fcn.00415c75
add esp, 4
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x65c], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x154]
call fcn.00401260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00401260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00401260
mov eax, dword [ebp - 0x65c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004158f4
mov esp, ebp
pop ebp
ret 4