Function at 0x478bb0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov eax, dword [0x55800c]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ebx, ecx
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x124], edi
mov eax, dword [ebx + 0x1a4]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x120], 4
push eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 4
push eax
push 0
push str.FileTransferEnabled
push edi
call esi
test eax, eax
je 0x478c1f
mov eax, dword [ebp - 0x118]
jmp 0x478c41
cmp dword [ebp - 0x120], 4
je 0x478c30
mov eax, dword [ebp - 0x118]
jmp 0x478c41
cmp dword [ebp - 0x11c], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x1a4], eax
mov eax, dword [ebx + 0x1a8]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.FTUserImpersonation
push edi
call esi
test eax, eax
je 0x478c8f
mov eax, dword [ebp - 0x118]
jmp 0x478cb1
cmp dword [ebp - 0x11c], 4
je 0x478ca0
mov eax, dword [ebp - 0x118]
jmp 0x478cb1
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x1a8], eax
mov eax, dword [ebx + 0x1ac]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.BlankMonitorEnabled
push edi
call esi
test eax, eax
je 0x478cff
mov eax, dword [ebp - 0x118]
jmp 0x478d21
cmp dword [ebp - 0x11c], 4
je 0x478d10
mov eax, dword [ebp - 0x118]
jmp 0x478d21
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x1ac], eax
mov eax, dword [ebx + 0x1b0]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.BlankInputsOnly
push edi
call esi
test eax, eax
je 0x478d6f
mov eax, dword [ebp - 0x118]
jmp 0x478d91
cmp dword [ebp - 0x11c], 4
je 0x478d80
mov eax, dword [ebp - 0x118]
jmp 0x478d91
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x1b0], eax
mov eax, dword [ebx + 0x1b4]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.DefaultScale
push edi
call esi
test eax, eax
je 0x478ddf
mov eax, dword [ebp - 0x118]
jmp 0x478e01
cmp dword [ebp - 0x11c], 4
je 0x478df0
mov eax, dword [ebp - 0x118]
jmp 0x478e01
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x1b4], eax
mov eax, dword [ebx + 0xc74]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.primary
push edi
call esi
test eax, eax
je 0x478e4f
mov eax, dword [ebp - 0x118]
jmp 0x478e71
cmp dword [ebp - 0x11c], 4
je 0x478e60
mov eax, dword [ebp - 0x118]
jmp 0x478e71
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0xc74], eax
mov eax, dword [ebx + 0xc78]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.secondary
push edi
call esi
test eax, eax
je 0x478ebf
mov eax, dword [ebp - 0x118]
jmp 0x478ee1
cmp dword [ebp - 0x11c], 4
je 0x478ed0
mov eax, dword [ebp - 0x118]
jmp 0x478ee1
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0xc78], eax
mov eax, dword [ebx + 0x1c4]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.UseDSMPlugin
push edi
call esi
test eax, eax
je 0x478f2f
mov eax, dword [ebp - 0x118]
jmp 0x478f51
cmp dword [ebp - 0x11c], 4
je 0x478f40
mov eax, dword [ebp - 0x118]
jmp 0x478f51
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x1c4], eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0xc], 3
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 0x100
push eax
push 0
push str.DSMPlugin
push edi
call esi
test eax, eax
jne 0x478fb3
cmp dword [ebp - 0x11c], 0x100
jg 0x478fb3
lea edi, [ebx + 0x1c8]
mov ecx, 0x40
lea esi, [ebp - 0x114]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x124]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebx + 0x138]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.SocketConnect
push edi
call esi
test eax, eax
je 0x478ffe
mov eax, dword [ebp - 0x118]
jmp 0x479023
cmp dword [ebp - 0x11c], 4
je 0x47900f
mov eax, dword [ebp - 0x118]
jmp 0x479023
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x138], eax
mov eax, dword [ebx + 0x13c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.HTTPConnect
push edi
call esi
test eax, eax
je 0x479074
mov eax, dword [ebp - 0x118]
jmp 0x479099
cmp dword [ebp - 0x11c], 4
je 0x479085
mov eax, dword [ebp - 0x118]
jmp 0x479099
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x13c], eax
mov eax, dword [ebx + 0x140]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.AutoPortSelect
push edi
call esi
test eax, eax
je 0x4790ea
mov eax, dword [ebp - 0x118]
jmp 0x47910f
cmp dword [ebp - 0x11c], 4
je 0x4790fb
mov eax, dword [ebp - 0x118]
jmp 0x47910f
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x140], eax
mov eax, dword [ebx + 0x144]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.PortNumber
push edi
call esi
test eax, eax
je 0x479160
mov eax, dword [ebp - 0x118]
jmp 0x479185
cmp dword [ebp - 0x11c], 4
je 0x479171
mov eax, dword [ebp - 0x118]
jmp 0x479185
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x144], eax
add eax, 0xffffff9c
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.HTTPPortNumber
push edi
call esi
test eax, eax
je 0x4791d3
mov eax, dword [ebp - 0x118]
jmp 0x4791f8
cmp dword [ebp - 0x11c], 4
je 0x4791e4
mov eax, dword [ebp - 0x118]
jmp 0x4791f8
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x148], eax
mov eax, dword [ebx + 0x170]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.IdleTimeout
push edi
call esi
test eax, eax
je 0x479249
mov eax, dword [ebp - 0x118]
jmp 0x47926e
cmp dword [ebp - 0x11c], 4
je 0x47925a
mov eax, dword [ebp - 0x118]
jmp 0x47926e
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x170], eax
mov eax, dword [ebx + 0x174]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.RemoveWallpaper
push edi
call esi
test eax, eax
je 0x4792bf
mov eax, dword [ebp - 0x118]
jmp 0x4792e4
cmp dword [ebp - 0x11c], 4
je 0x4792d0
mov eax, dword [ebp - 0x118]
jmp 0x4792e4
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x174], eax
mov eax, dword [ebx + 0x178]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.RemoveEffects
push edi
call esi
test eax, eax
je 0x479335
mov eax, dword [ebp - 0x118]
jmp 0x47935a
cmp dword [ebp - 0x11c], 4
je 0x479346
mov eax, dword [ebp - 0x118]
jmp 0x47935a
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x178], eax
mov eax, dword [ebx + 0x17c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.RemoveFontSmoothing
push edi
call esi
test eax, eax
je 0x4793ab
mov eax, dword [ebp - 0x118]
jmp 0x4793d0
cmp dword [ebp - 0x11c], 4
je 0x4793bc
mov eax, dword [ebp - 0x118]
jmp 0x4793d0
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x17c], eax
mov eax, dword [ebx + 0x180]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.RemoveAero
push edi
call esi
test eax, eax
je 0x479421
mov eax, dword [ebp - 0x118]
jmp 0x479446
cmp dword [ebp - 0x11c], 4
je 0x479432
mov eax, dword [ebp - 0x118]
jmp 0x479446
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov esi, dword [ebx + 0x15c]
mov dword [ebx + 0x180], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.QuerySetting
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4794a8
cmp dword [ebp - 0x11c], 4
jne 0x4794a8
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, esi
mov esi, eax
mov ecx, dword [ebx + 0x10c]
mov dword [ebx + 0x15c], esi
mov eax, dword [ecx]
cmp eax, vtable.vncServer.0
jne 0x479aba
mov dword [ecx + 0xc4], esi
mov esi, dword [ebx + 0x168]
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.QueryTimeout
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x479523
cmp dword [ebp - 0x11c], 4
jne 0x479523
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, esi
mov esi, eax
mov ecx, dword [ebx + 0x10c]
mov dword [ebx + 0x168], esi
mov eax, dword [ecx]
cmp eax, vtable.vncServer.0
jne 0x479ac6
mov dword [ecx + 0xcc], esi
mov esi, dword [ebx + 0x16c]
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.QueryDisableTime
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x47959e
cmp dword [ebp - 0x11c], 4
jne 0x47959e
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
dec dword [edi]
inc ebp
invalid
mov esi, eax
mov ecx, dword [ebx + 0x10c]
mov dword [ebx + 0x16c], esi
mov eax, dword [ecx]
cmp eax, vtable.vncServer.0
jne 0x479ad2
mov dword [ecx + 0xd0], esi
mov esi, dword [ebx + 0x164]
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.QueryAccept
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x479619
cmp dword [ebp - 0x11c], 4
jne 0x479619
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, esi
mov esi, eax
mov ecx, dword [ebx + 0x10c]
mov dword [ebx + 0x164], esi
mov eax, dword [ecx]
cmp eax, vtable.vncServer.0
jne 0x479ade
mov dword [ecx + 0xc8], esi
mov esi, dword [ebx + 0x160]
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.QueryIfNoLogon
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x479694
cmp dword [ebp - 0x11c], 4
jne 0x479694
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, esi
mov esi, eax
mov ecx, dword [ebx + 0x10c]
mov dword [ebx + 0x160], esi
mov eax, dword [ecx]
cmp eax, vtable.vncServer.0
jne 0x479aea
xor eax, eax
test esi, esi
setne al
mov dword [ecx + 0xd4], eax
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x124], 3
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 8
push eax
push 0
push str.Password
push edi
call esi
test eax, eax
jne 0x47970f
cmp dword [ebp - 0x11c], 8
jg 0x47970f
mov eax, dword [ebp - 0x10]
mov dword [ebx + 0x14c], eax
mov eax, dword [ebp - 0xc]
mov dword [ebx + 0x150], eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x124], 3
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x11c], 8
push eax
lea eax, [ebp - 0x124]
push eax
push 0
push str.Password2
push edi
call esi
test eax, eax
jne 0x47975e
cmp dword [ebp - 0x11c], 8
jg 0x47975e
mov eax, dword [ebp - 0x10]
mov dword [ebx + 0x154], eax
mov eax, dword [ebp - 0xc]
mov dword [ebx + 0x158], eax
mov eax, dword [ebx + 0x184]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.InputsEnabled
push edi
call esi
test eax, eax
je 0x4797a9
mov eax, dword [ebp - 0x118]
jmp 0x4797ce
cmp dword [ebp - 0x11c], 4
je 0x4797ba
mov eax, dword [ebp - 0x118]
jmp 0x4797ce
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x184], eax
mov eax, dword [ebx + 0x188]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.LockSetting
push edi
call esi
test eax, eax
je 0x47981f
mov eax, dword [ebp - 0x118]
jmp 0x479844
cmp dword [ebp - 0x11c], 4
je 0x479830
mov eax, dword [ebp - 0x118]
jmp 0x479844
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x188], eax
mov eax, dword [ebx + 0x18c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.LocalInputsDisabled
push edi
call esi
test eax, eax
je 0x479895
mov eax, dword [ebp - 0x118]
jmp 0x4798ba
cmp dword [ebp - 0x11c], 4
je 0x4798a6
mov eax, dword [ebp - 0x118]
jmp 0x4798ba
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x18c], eax
mov eax, dword [ebx + 0x190]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.EnableJapInput
push edi
call esi
test eax, eax
je 0x47990b
mov eax, dword [ebp - 0x118]
jmp 0x479930
cmp dword [ebp - 0x11c], 4
je 0x47991c
mov eax, dword [ebp - 0x118]
jmp 0x479930
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x190], eax
mov eax, dword [ebx + 0x194]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.EnableUnicodeInput
push edi
call esi
test eax, eax
je 0x479981
mov eax, dword [ebp - 0x118]
jmp 0x4799a6
cmp dword [ebp - 0x11c], 4
je 0x479992
mov eax, dword [ebp - 0x118]
jmp 0x4799a6
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x194], eax
mov eax, dword [ebx + 0x198]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.EnableWin8Helper
push edi
call esi
test eax, eax
je 0x4799f7
mov eax, dword [ebp - 0x118]
jmp 0x479a1c
cmp dword [ebp - 0x11c], 4
je 0x479a08
mov eax, dword [ebp - 0x118]
jmp 0x479a1c
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x198], eax
mov eax, dword [ebx + 0x19c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.clearconsole
push edi
call esi
test eax, eax
je 0x479a84
mov ecx, dword [ebp - 0x118]
mov dword [ebx + 0x19c], ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004cbf27
mov esp, ebp
pop ebp
ret 4
cmp dword [ebp - 0x11c], 4
jne 0x479a65
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 8]
pop edi
pop esi
mov dword [ebx + 0x19c], eax
xor ecx, ebp
pop ebx
call fcn.004cbf27
mov esp, ebp
pop ebp
ret 4
push esi
call dword [eax + 0x1b4]
jmp 0x4794c7
push esi
call dword [eax + 0x1cc]
jmp 0x479542
push esi
call dword [eax + 0x1d4]
jmp 0x4795bd
push esi
call dword [eax + 0x1bc]
jmp 0x479638
push esi
call dword [eax + 0x1dc]
jmp 0x4796ba