Function at 0x40f6da
Capabilities:
Link many functions at runtime

Disassembly:
sub esp, 0xc
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push ebp
push esi
push edi
push 0
call ebx
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebp, 0x2001f
push 0x460cc0
push ebp
push 0
push str.SoftwareKingsoftLBMINIRedirect_
mov edi, SysReAllocStringLen
mov dword [0x45f260], eax
push edi
mov byte [0x460cc4], 1
call esi
push 0x460cc8
push ebp
push 0
push str.SoftwareKingsoftLBMINIRedirectFeatureControl_
push edi
call esi
push str.kernelbase.dll
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebp, eax
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test ebp, ebp
je 0x40f74c
push 0x4511ec
push ebp
call edi
test eax, eax
jne 0x40f755
push str.kernel32.dll
call esi
mov ebp, eax
mov ecx, str.wininet.dll
call fcn.00404e59
push str.advapi32.dll
mov dword [esp + 0x1c], eax
call esi
push str.kernelbase.dll
mov dword [esp + 0x14], eax
call ebx
mov ebx, eax
test ebx, ebx
je 0x40f787
push 0x4511dc
push ebx
call edi
test eax, eax
jne 0x40f7a5
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
push 0x4511dc
push esi
call edi
mov ebx, dword [esp + 0x10]
test eax, eax
cmovne ebx, esi
push str.gdi32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ecx, 0x44f724
mov dword [esp + 0x10], eax
call fcn.00404e59
mov ecx, dword [0x460d18]
mov esi, eax
mov eax, dword [ecx + 4]
mov dword [esp + 0x14], eax
call fcn.0040665f
push str.GetModuleFileNameA
push ebp
call edi
test eax, eax
je 0x40f7f5
sub esp, 0xc
mov dword [0x460d14], eax
mov edx, 0x40e60c
mov ecx, 0x460d14
call fcn.00417b98
push 0x4511ec
push ebp
call edi
test eax, eax
je 0x40f818
sub esp, 0xc
mov dword [0x460cf0], eax
mov edx, 0x40e556
mov ecx, 0x460cf0
call fcn.00417b98
mov eax, dword [0x460d18]
cmp byte [eax + 2], 0
je 0x40f846
push str.LoadLibraryExW
push ebp
call edi
test eax, eax
je 0x40f846
sub esp, 0xc
mov dword [0x460cf4], eax
mov edx, 0x40f575
mov ecx, 0x460cf4
call fcn.00417b98
push 0x451280
push dword [esp + 0x14]
call edi
test eax, eax
je 0x40f86c
sub esp, 0xc
mov dword [0x460ccc], eax
mov edx, 0x40f54b
mov ecx, 0x460ccc
call fcn.00417b98
push 0x4511dc
push ebx
call edi
test eax, eax
je 0x40f88f
sub esp, 0xc
mov dword [0x460d10], eax
mov edx, 0x40e7d6
mov ecx, 0x460d10
call fcn.00417b98
push 0x451290
push ebx
call edi
test eax, eax
je 0x40f8b2
sub esp, 0xc
mov dword [0x460cfc], eax
mov edx, 0x40f1eb
mov ecx, 0x460cfc
call fcn.00417b98
push str.RegOpenKeyExA
push ebx
call edi
test eax, eax
je 0x40f8d5
sub esp, 0xc
mov dword [0x460cbc], eax
mov edx, 0x40e696
mov ecx, 0x460cbc
call fcn.00417b98
push str.RegQueryValueExA
push ebx
call edi
test eax, eax
je 0x40f8f8
sub esp, 0xc
mov dword [0x460cb4], eax
mov edx, 0x40f196
mov ecx, 0x460cb4
call fcn.00417b98
push 0x4512c8
push ebx
call edi
test eax, eax
je 0x40f91b
sub esp, 0xc
mov dword [0x460d0c], eax
mov edx, 0x40ee0d
mov ecx, 0x460d0c
call fcn.00417b98
push str.DefWindowProcA
push esi
call edi
test eax, eax
je 0x40f93e
sub esp, 0xc
mov dword [0x460d08], eax
mov edx, 0x40f66e
mov ecx, 0x460d08
call fcn.00417b98
push 0x4512e4
push esi
call edi
test eax, eax
je 0x40f961
sub esp, 0xc
mov dword [0x460cb8], eax
mov edx, 0x40f6a4
mov ecx, 0x460cb8
call fcn.00417b98
cmp dword [esp + 0x14], 8
jl 0x40f9b2
mov esi, dword [esp + 0x18]
push str.GetUrlCacheEntryInfoA
push esi
call edi
test eax, eax
je 0x40f98f
sub esp, 0xc
mov dword [0x460ce4], eax
mov edx, 0x40f285
mov ecx, 0x460ce4
call fcn.00417b98
push str.GetUrlCacheEntryInfoW
push esi
call edi
test eax, eax
je 0x40f9b2
sub esp, 0xc
mov dword [0x460cec], eax
mov edx, 0x40f3b0
mov ecx, 0x460cec
call fcn.00417b98
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
jmp fcn.00417a66