Function at 0x434425
Capabilities:
Check if file exists
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x308
mov eax, dword [0x4a02f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
mov dword [ebp - 0x2f4], ebx
call fcn.0040ff60
mov dword [ebp - 0x300], eax
cmp eax, ebx
je 0x434e51
push esi
mov esi, 0x48f8d4
mov eax, esi
push edi
mov byte [ebp - 0x2ed], bl
mov dword [ebp - 0x268], 0xf
mov dword [ebp - 0x26c], ebx
mov byte [ebp - 0x27c], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x43447c
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x27c]
call fcn.00402dd0
mov ecx, dword [ebp - 0x300]
lea eax, [ebp - 0x27c]
push eax
call fcn.004105c0
push ebx
push 1
lea ecx, [ebp - 0x27c]
mov byte [ebp - 0x2f5], al
call fcn.00402540
cmp byte [ebp - 0x2f5], bl
je 0x4344c7
mov byte [ebp - 0x2ed], 1
call fcn.00432e49
mov ecx, eax
call fcn.0042cef0
test al, al
je 0x4344ed
call fcn.00432e49
call fcn.00432e49
cmp dword [eax + 0x64], ebx
jbe 0x4344ed
mov byte [ebp - 0x2ed], 1
or dword [ebp - 0x2fc], 0xffffffff
cmp byte [ebp - 0x2ed], bl
je 0x434563
mov esi, str.ignore_check_init_theme
mov eax, esi
mov dword [ebp - 0x268], 0xf
mov dword [ebp - 0x26c], ebx
mov byte [ebp - 0x27c], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x43451c
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x27c]
call fcn.00402dd0
mov ecx, dword [ebp - 0x300]
xor edi, edi
lea eax, [ebp - 0x27c]
inc edi
push eax
mov dword [ebp - 0x2f4], edi
call fcn.004105c0
test al, al
jne 0x434566
call fcn.0042d9fe
test al, al
jne 0x434566
mov byte [ebp - 0x2ed], 1
jmp 0x43456c
xor edi, edi
inc edi
mov byte [ebp - 0x2ed], bl
test byte [ebp - 0x2f4], 1
je 0x434589
and dword [ebp - 0x2f4], 0xfffffffe
push ebx
push edi
lea ecx, [ebp - 0x27c]
call fcn.00402540
cmp byte [ebp - 0x2ed], bl
je 0x434d01
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push ebx
push eax
call fcn.0046e0e0
add esp, 0xc
call fcn.0042c877
add eax, 0x58
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00401f50
cmp dword [ebp - 0x2a4], edi
jbe 0x434612
cmp dword [ebp - 0x2a0], 8
mov eax, dword [ebp - 0x2b4]
jae 0x4345e4
lea eax, [ebp - 0x2b4]
cmp word [eax], 0x22
jne 0x434612
cmp dword [ebp - 0x2a0], 8
mov eax, dword [ebp - 0x2b4]
jae 0x4345ff
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00426354
mov eax, dword [ebp - 0x2a4]
cmp eax, ebx
jbe 0x434667
cmp dword [ebp - 0x2a0], 8
mov ecx, dword [ebp - 0x2b4]
jae 0x434631
lea ecx, [ebp - 0x2b4]
add eax, eax
cmp word [ecx + eax - 2], 0x22
jne 0x434667
cmp dword [ebp - 0x2a0], 8
mov ecx, dword [ebp - 0x2b4]
jae 0x434650
lea ecx, [ebp - 0x2b4]
lea eax, [ecx + eax - 2]
push eax
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00426354
lea eax, [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00401f50
lea eax, [ebp - 0x2ec]
push eax
call fcn.00417aa0
mov esi, eax
pop ecx
mov dword [ebp - 0x304], esi
cmp esi, ebx
je 0x434ce9
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x2ec]
call fcn.004018f0
mov eax, dword [esi]
lea ecx, [ebp - 0x260]
push ecx
mov ecx, esi
call dword [eax + 0x30]
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401a30
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401490
lea ecx, [ebp - 0x228]
call fcn.00401f80
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.00402b70
push 7
pop esi
xor eax, eax
push str.extensions
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov word [ebp - 0x244], ax
call fcn.00401fb0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401a30
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401490
lea ecx, [ebp - 0x228]
call fcn.00401f80
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00402b70
xor eax, eax
mov dword [ebp - 0x284], esi
mov dword [ebp - 0x288], ebx
mov word [ebp - 0x298], ax
call fcn.0042c402
mov ecx, eax
call fcn.0042c423
test al, al
je 0x434831
xor eax, eax
push 0x492524
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov word [ebp - 0x244], ax
call fcn.00401fb0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401a30
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401490
lea ecx, [ebp - 0x228]
call fcn.00401f80
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00402b70
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x298]
call fcn.00402710
cmp dword [ebp - 0x284], 8
mov eax, dword [ebp - 0x298]
jae 0x434807
lea eax, [ebp - 0x298]
mov ecx, dword [ebp - 0x288]
lea eax, [eax + ecx*2]
cmp word [eax - 2], 0x5c
lea ecx, [ebp - 0x298]
jne 0x434827
push str.se3.crx
jmp 0x4348f3
push str._se3.crx
jmp 0x4348f3
call fcn.0042c402
mov ecx, eax
call fcn.00430535
test al, al
je 0x4348fe
xor eax, eax
push 0x4924f8
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov word [ebp - 0x244], ax
call fcn.00401fb0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401a30
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401490
lea ecx, [ebp - 0x228]
call fcn.00401f80
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00402b70
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x298]
call fcn.00402710
cmp dword [ebp - 0x284], 8
mov eax, dword [ebp - 0x298]
jae 0x4348d1
lea eax, [ebp - 0x298]
mov ecx, dword [ebp - 0x288]
lea eax, [eax + ecx*2]
cmp word [eax - 2], 0x5c
lea ecx, [ebp - 0x298]
jne 0x4348ee
push str.ie8.crx
jmp 0x4348f3
push 0x4924d4
call fcn.00406d00
mov dword [ebp - 0x2fc], edi
xor eax, eax
push str.SogouExplorer.HTTP
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00401fb0
or dword [ebp - 0x2f4], 2
xor eax, eax
mov edi, str.SogouExplorer.exe
push edi
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
mov word [ebp - 0x260], ax
call fcn.00401fb0
or dword [ebp - 0x2f4], 4
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.004441fc
pop ecx
pop ecx
cmp al, 1
je 0x4349e3
xor eax, eax
push str.SogouExplorerHTML
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2bc], esi
mov dword [ebp - 0x2c0], ebx
mov word [ebp - 0x2d0], ax
call fcn.00401fb0
or dword [ebp - 0x2f4], 8
xor eax, eax
push edi
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov word [ebp - 0x244], ax
call fcn.00401fb0
or dword [ebp - 0x2f4], 0x10
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.004441fc
pop ecx
pop ecx
mov byte [ebp - 0x2ed], bl
cmp al, 1
jne 0x4349ea
mov byte [ebp - 0x2ed], 1
xor edi, edi
inc edi
test byte [ebp - 0x2f4], 0x10
je 0x434a0a
and dword [ebp - 0x2f4], 0xffffffef
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00402b70
test byte [ebp - 0x2f4], 8
je 0x434a27
and dword [ebp - 0x2f4], 0xfffffff7
push ebx
push edi
lea ecx, [ebp - 0x2d0]
call fcn.00402b70
test byte [ebp - 0x2f4], 4
je 0x434a44
and dword [ebp - 0x2f4], 0xfffffffb
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.00402b70
test byte [ebp - 0x2f4], 2
je 0x434a61
and dword [ebp - 0x2f4], 0xfffffffd
push ebx
push edi
lea ecx, [ebp - 0x228]
call fcn.00402b70
cmp byte [ebp - 0x2ed], bl
jne 0x434c73
xor eax, eax
push str.Max2.Association.HTML
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
mov word [ebp - 0x260], ax
call fcn.00401fb0
xor eax, eax
push str.Maxthon.exe
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00401fb0
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.004441fc
dec al
pop ecx
pop ecx
neg al
sbb al, al
push ebx
inc al
push edi
lea ecx, [ebp - 0x228]
mov byte [ebp - 0x2f5], al
call fcn.00402b70
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.00402b70
cmp byte [ebp - 0x2f5], bl
jne 0x434c73
xor eax, eax
push str.TTraveler.HTTP
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov word [ebp - 0x244], ax
call fcn.00401fb0
or dword [ebp - 0x2f4], 0x20
xor eax, eax
push str.TTraveler.exe
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2bc], esi
mov dword [ebp - 0x2c0], ebx
mov word [ebp - 0x2d0], ax
call fcn.00401fb0
or dword [ebp - 0x2f4], 0x40
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004441fc
pop ecx
pop ecx
cmp al, 1
je 0x434bee
xor eax, eax
push str.QQBrowserHTML
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
mov word [ebp - 0x260], ax
call fcn.00401fb0
or dword [ebp - 0x2f4], 0x80
xor eax, eax
push str.QQBrowser.exe
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00401fb0
or dword [ebp - 0x2f4], 0x100
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.004441fc
pop ecx
pop ecx
mov byte [ebp - 0x2ed], bl
cmp al, 1
jne 0x434bf5
mov byte [ebp - 0x2ed], 1
test dword [ebp - 0x2f4], 0x100
je 0x434c18
and dword [ebp - 0x2f4], 0xfffffeff
push ebx
push edi
lea ecx, [ebp - 0x228]
call fcn.00402b70
test byte [ebp - 0x2f4], 0x80
je 0x434c38
and dword [ebp - 0x2f4], 0xffffff7f
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.00402b70
test byte [ebp - 0x2f4], 0x40
je 0x434c55
and dword [ebp - 0x2f4], 0xffffffbf
push ebx
push edi
lea ecx, [ebp - 0x2d0]
call fcn.00402b70
test byte [ebp - 0x2f4], 0x20
je 0x434c6b
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00402b70
cmp byte [ebp - 0x2ed], bl
je 0x434c79
mov dword [ebp - 0x2fc], edi
cmp dword [ebp - 0x288], ebx
jbe 0x434cc3
cmp dword [ebp - 0x284], 8
mov eax, dword [ebp - 0x298]
jae 0x434c96
lea eax, [ebp - 0x298]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x434cc3
push 0x206
lea eax, [ebp - 0x20c]
push eax
push edi
push str.init_theme
push str.Software360Chromechrome
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push ebx
push edi
lea ecx, [ebp - 0x298]
call fcn.00402b70
lea ecx, [ebp - 0x27c]
call fcn.00401f80
mov ecx, dword [ebp - 0x304]
mov eax, dword [ecx]
push edi
call dword [eax]
xor edi, edi
inc edi
lea ecx, [ebp - 0x2ec]
call fcn.00401f80
push ebx
push edi
lea ecx, [ebp - 0x2b4]
call fcn.00402b70
mov esi, str.tab_pos
mov eax, esi
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], ebx
mov byte [ebp - 0x228], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x434d21
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x228]
call fcn.00402dd0
mov ecx, dword [ebp - 0x300]
lea eax, [ebp - 0x228]
push eax
call fcn.004105c0
push ebx
push 1
lea ecx, [ebp - 0x228]
mov byte [ebp - 0x2f5], al
call fcn.00402540
cmp byte [ebp - 0x2f5], bl
je 0x434e26
mov eax, esi
mov dword [ebp - 0x24c], 0xf
mov dword [ebp - 0x250], ebx
mov byte [ebp - 0x260], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x434d84
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x260]
call fcn.00402dd0
mov ecx, dword [ebp - 0x300]
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.00410640
or dword [ebp - 0x2f4], 0xffffffff
cmp dword [ebp - 0x214], 0x10
mov eax, dword [ebp - 0x228]
jae 0x434dcf
lea eax, [ebp - 0x228]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x304], eax
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.0040c5f0
pop ecx
pop ecx
test al, al
je 0x434e0a
mov eax, dword [ebp - 0x2f4]
cmp eax, ebx
jle 0x434e0a
mov dword [ebp - 0x2fc], eax
push ebx
push 1
lea ecx, [ebp - 0x228]
call fcn.00402540
push ebx
push 1
lea ecx, [ebp - 0x260]
call fcn.00402540
cmp dword [ebp - 0x2fc], 0xa
pop edi
pop esi
jae 0x434e51
push 4
lea eax, [ebp - 0x2fc]
push eax
push 4
push str.tabpos
push str.Software360Chromechrome
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.0046e0cd
leave
ret