Function at 0x48b680
Capabilities:
Delete registry key
Delete registry value
Disable system features via registry on windows
Get geographical location
Query or enumerate registry key
Query or enumerate registry value
Resolve function by parsing pe exports
Set registry value

Disassembly:
push ebp
lea ebp, [esp - 0x240]
sub esp, 0x240
push 0xffffffffffffffff
push 0x64dcde
mov eax, dword fs:[0]
push eax
sub esp, 0x29c
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0x23c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x30], ebx
xor esi, esi
mov dword [ebp - 4], esi
wait
mov dword [ebp - 0x44], esi
mov eax, dword [ebx + 0x74]
cmp byte [eax + 0x4f], 0
je 0x48b6e7
cmp dword [0x75dbac], esi
je 0x48b6e7
mov dword [ebp - 0x44], 1
jmp 0x48b6f6
push esi
push esi
push esi
push esi
push esi
push 0x45adc0
call fcn.006005d0
push 0x501
push ebx
lea ecx, [ebx + 0x360]
call fcn.004012a0
xor ecx, ecx
mov dword [ebp - 0x1a4], ecx
xor edx, edx
lea esi, [ebx + 0x1258]
mov edi, dword [esi]
push 0xe800
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
push 0x50002834
push 0x8820
push ebx
mov ecx, esi
mov edx, dword [edi + 0x180]
call edx
push 1
mov ecx, esi
call fcn.004545b0
push 0xa6
mov ecx, esi
call fcn.00609f9d
mov byte [ebp - 0x90], 0
mov eax, 0x60
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
lea ecx, [ebp - 0x90]
call fcn.004361d0
cmp eax, 0x90
jl 0x48b789
mov ecx, 1
jmp 0x48b7ae
cmp dword [0x75ddc8], 0
je 0x48b7ac
fld qword [0x685120]
fcomp qword [0x752d60]
fnstsw ax
test ah, 5
jp 0x48b7ac
mov ecx, 1
jmp 0x48b7ae
xor ecx, ecx
mov edx, ecx
neg edx
sbb edx, edx
and edx, 3
add edx, 0x1ef
mov eax, ecx
neg eax
sbb eax, eax
and eax, 3
add eax, 0x1f0
cmp byte [0x75db0d], 0
je 0x48b7e3
neg ecx
sbb ecx, ecx
and ecx, 3
add ecx, 0x1f1
mov eax, ecx
push 0
push 0
push eax
push 0
push edx
mov ecx, ebx
call fcn.0046f5d0
push 1
mov ecx, ebx
call fcn.0045d750
mov eax, dword [ebx + 0x19ac]
mov dword [ebx + 0x1948], eax
mov ecx, dword [ebx + 0x19a8]
mov dword [ebx + 0x19b8], ecx
mov edx, eax
mov dword [ebx + 0x19bc], edx
cmp byte [ebx + 0x281], 0
je 0x48b898
lea esi, [ebx + 0x11b0]
mov eax, dword [esi]
push 0xe801
push 0x50008200
push ebx
mov ecx, esi
mov edx, dword [eax + 0x17c]
call edx
push 1
push 0x753044
mov ecx, esi
call fcn.006110a0
push 0
mov ecx, esi
cmp dword [0x75dbb8], 0
je 0x48b863
push 0x8001000
jmp 0x48b868
push 0x8000000
push 0x70
push 0
call fcn.00610f84
push 1
push 0
push 0
push 0
push 0x70
push 0xe8ff
push 0xe800
mov ecx, ebx
call fcn.005f9dfd
push str.IDM_Status_:_
mov ecx, esi
call fcn.004faf60
mov ecx, ebx
call fcn.004581d0
add dword [ebx + 0x1e8], 0x137
lea ecx, [ebx + 0x180c]
call fcn.0045ef90
lea esi, [ebx + 0x1314]
mov eax, dword [esi]
push 0xe804
push 0x56012800
push 0x400
push ebx
mov ecx, esi
mov edx, dword [eax + 0x17c]
call edx
lea edi, [ebx + 0x13b0]
mov eax, dword [edi]
push 0x1f9
push 0x2800
push 0x1f9
push esi
mov ecx, edi
mov edx, dword [eax + 0x17c]
call edx
push 0x1a0
push 0
push 0
push edi
mov ecx, esi
call fcn.006102ec
lea eax, [ebp - 0x194]
push eax
mov ecx, dword [ebx + 0x13d0]
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebp - 0x188]
sub edx, dword [ebp - 0x190]
mov dword [ebx + 0x15b4], edx
push 0
push 0
mov ecx, esi
call fcn.00455450
lea eax, [ebx + 0x180c]
mov dword [ebx + 0x69c], eax
add dword [ebx + 0x1f0], 0xff
lea eax, [ebp - 0xf4]
push eax
mov ecx, dword [ebx + 0x20]
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
push 1
push 0
lea edx, [ebp - 0xe4]
push edx
push 1
push 0
push 0xe8ff
push 0xe800
mov ecx, ebx
call fcn.005f9dfd
mov esi, dword [ebp - 0xe0]
sub esi, dword [ebp - 0xf0]
sub esi, 2
mov eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0xf4]
mov dword [ebp - 0x144], eax
push 5
mov ecx, ebx
call fcn.00454470
mov edi, eax
test edi, edi
je 0x48b9fe
lea eax, [ebp - 0x164]
push eax
mov ecx, dword [edi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
lea edx, [ebp - 0x164]
push edx
mov ecx, ebx
call fcn.005fdc97
push esi
mov eax, dword [ebp - 0x144]
push eax
lea ecx, [ebp - 0x164]
call fcn.00453970
push 0
lea ecx, [ebp - 0x164]
push ecx
mov ecx, edi
call fcn.004243b0
push 2
mov ecx, edi
call fcn.00454470
jmp 0x48b9ab
lea edx, [ebp - 0x104]
push edx
mov eax, dword [ebx + 0x20]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0xec]
sub eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0xe4]
add dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0xe0]
add dword [ebp - 0xf8], eax
xor esi, esi
push esi
lea ecx, [ebp - 0x104]
push ecx
mov ecx, ebx
call fcn.004243b0
push 1
push esi
push esi
push esi
push esi
push 0xe8ff
push 0xe800
mov ecx, ebx
call fcn.005f9dfd
mov ecx, ebx
call fcn.005f6b34
push 0x75e24c
call fcn.00624331
add esp, 4
mov byte [ebp - 0x21], 0
mov byte [ebp - 4], 1
wait
mov dword [ebp - 0x20], esi
mov dword [ebp - 0xc0], 4
lea edx, [ebp - 0xc0]
push edx
lea eax, [ebp - 0x20]
push eax
push esi
push esi
push str.radxcnt
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [ebp - 0x20]
test eax, eax
jne 0x48bade
cmp ecx, 6
jbe 0x48bade
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
mov eax, ecx
sub eax, edx
je 0x48bade
mov byte [ebp - 0x21], 1
inc ecx
mov dword [ebp - 0x20], ecx
push 4
lea ecx, [ebp - 0x20]
push ecx
push 4
push esi
push str.radxcnt
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
wait
mov dword [ebp - 4], esi
jmp 0x48bb13
lea eax, [ebp - 0x184]
push eax
mov ecx, dword [ebx + 0x1278]
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebp - 0x184]
mov dword [ebp - 0xa8], edx
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xa4], eax
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebx + 0x20]
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
push 0
push 0
push 0
push 1
mov eax, dword [ebp - 0xa4]
push eax
push ebx
call fcn.0045b550
add esp, 0x18
cmp dword [0x75e210], 0
je 0x48bb81
cmp dword [ebx + 0x804], 0
je 0x48bb81
mov ecx, ebx
call fcn.00470690
cmp dword [0x75dd30], 0
je 0x48bbab
push 0x66
push ebx
mov ecx, 0x75dcf0
call fcn.004e6a60
mov edx, dword [ebx]
mov ecx, ebx
mov eax, dword [edx + 0x6c]
call eax
push eax
mov ecx, 0x75dcf0
call fcn.004e6cd0
mov edx, dword [ebx]
mov ecx, ebx
mov eax, dword [edx + 0x6c]
call eax
push eax
mov ecx, 0x75dcf0
call fcn.004e6ef0
mov byte [ebp - 4], 3
wait
mov esi, vtable.CProtection.0
mov dword [ebp - 0x38], esi
mov byte [ebp - 4], 4
mov eax, 0x752e5c
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48bbd8
sub eax, edx
push 9
push str.506938841
push eax
push 0x752e5c
lea ecx, [ebp - 0x38]
call fcn.00448e40
mov byte [ebp - 4], 3
mov dword [ebp - 0x38], esi
wait
mov dword [ebp - 4], 0
jmp 0x48bc17
mov esi, 0x60
mov ecx, dword [ebx + 0x20]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
mov dword [ebx + 0x200], eax
push eax
lea ecx, [ebx + 0x3e0]
call fcn.00603bdc
mov edx, dword [ebx]
mov ecx, ebx
mov eax, dword [edx + 0x6c]
call eax
push eax
lea ecx, [ebx + 0x7dc]
call fcn.00436240
push 0
push 0x84db
push 0x84db
push 0x84da
mov ecx, dword [ebx + 0x200]
push ecx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov byte [ebp - 4], 6
wait
push str.ToolbarState_v5.11
push str.SoftwareDownloadManager_
push 0x80000001
lea ecx, [ebx + 0x1258]
call fcn.00600eac
mov dword [ebp - 0x98], 0x10
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x94]
push eax
push 0
push 0
push str.drTbInfo2
mov ecx, dword [0x75dbe4]
push ecx
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call edi
test eax, eax
jne 0x48bd33
mov byte [ebp - 0x84], al
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
lea ecx, [ebp - 0x84]
call fcn.004361d0
mov esi, dword [ebp - 0x8c]
cmp esi, eax
jne 0x48bdb2
fld qword [0x752d60]
fmul qword [0x6828a0]
call fcn.00622df0
mov ecx, dword [ebp - 0x88]
cmp ecx, eax
jne 0x48bdb2
mov edx, dword [ebp - 0x94]
mov dword [ebx + 0x1938], edx
mov eax, dword [ebp - 0x90]
mov dword [ebx + 0x193c], eax
mov dword [ebx + 0x1940], esi
mov dword [ebx + 0x1944], ecx
wait
mov dword [ebp - 4], 0
jmp 0x48bdcc
cmp dword [0x75ddc8], 0
jne 0x48bdb2
mov dword [ebp - 0xb8], 0xc
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0x84]
push edx
push 0
push 0
push str.drTbInfo
mov eax, dword [0x75dbe4]
push eax
call edi
test eax, eax
jne 0x48bdb2
mov byte [ebp - 0x128], al
mov dword [ebp - 0x124], esi
mov dword [ebp - 0x120], esi
lea ecx, [ebp - 0x128]
call fcn.004361d0
mov ecx, dword [ebp - 0x7c]
cmp ecx, eax
jne 0x48bdb2
mov edx, dword [ebp - 0x84]
mov dword [ebx + 0x1938], edx
mov eax, dword [ebp - 0x80]
mov dword [ebx + 0x193c], eax
mov dword [ebx + 0x1940], ecx
mov dword [ebx + 0x1944], 0x64
wait
mov dword [ebp - 4], 0
jmp 0x48bdcc
lea ecx, [ebx + 0x1e8]
mov dword [ebx + 0x1e4], ecx
lea esi, [ebx + 0x1258]
xor edi, edi
push edi
push 0x8016
mov ecx, esi
call fcn.004544d0
push edi
push 0x8017
mov ecx, esi
call fcn.004544d0
push edi
push 0x8019
mov ecx, esi
call fcn.004544d0
push edi
push 0x8018
mov ecx, esi
call fcn.004544d0
mov ecx, ebx
call fcn.0045e990
mov ecx, ebx
cmp byte [0x75de88], 0
je 0x48be2d
call fcn.004587f0
jmp 0x48be32
call fcn.00458840
mov ecx, ebx
call fcn.004675e0
mov ecx, ebx
call fcn.0045f720
lea edx, [ebx + 0x1f0]
mov dword [ebx + 0x1ec], edx
push 1
mov eax, dword [ebx + 0x15b8]
push eax
mov ecx, ebx
call fcn.004015e0
push edi
mov ecx, dword [ebx + 0x15b8]
push ecx
mov ecx, ebx
call fcn.004015e0
mov edx, dword [ebx + 0x17e0]
mov dword [ebp - 0x74], edx
mov dword [ebp - 0xbc], 4
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x74]
push ecx
push edi
push edi
push str.TrayIcon
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x48beaa
mov eax, dword [ebp - 0x74]
mov dword [ebx + 0x17e0], eax
cmp dword [ebp - 0x44], edi
jne 0x48beb6
mov ecx, ebx
call fcn.00459050
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 1
mov ecx, ebx
call fcn.005ff1b3
lea esi, [ebx + 0x370]
mov edx, dword [esi]
push edi
push ebx
mov ecx, esi
mov eax, dword [edx + 0x13c]
call eax
push 0x4fe
push ebx
push esi
call fcn.00403240
add esp, 0xc
push 1
mov ecx, esi
call fcn.00401620
push 0x3ea
mov ecx, ebx
call fcn.005f5a75
mov dword [ebx + 0x1fc], eax
lea ecx, [ebx + 0x1a0]
call fcn.0049a8b0
mov ecx, 0x75dc64
call fcn.00523610
push 0x28
call fcn.005f4e18
add esp, 4
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 8
cmp eax, edi
je 0x48bf36
mov ecx, eax
call fcn.004c3910
jmp 0x48bf38
xor eax, eax
mov byte [ebp - 4], 0
mov dword [0x75e25c], eax
push 0x28
call fcn.005f4e18
add esp, 4
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 9
cmp eax, edi
je 0x48bf5f
mov ecx, eax
call fcn.00519340
jmp 0x48bf61
xor eax, eax
mov byte [ebp - 4], 0
mov dword [0x75e260], eax
mov edx, dword [ebx]
mov ecx, ebx
mov eax, dword [edx + 0x6c]
call eax
push eax
mov ecx, ebx
call fcn.00460a90
cmp byte [0x75db11], 0
je 0x48bfa7
movzx eax, byte [0x75db0c]
neg eax
sbb eax, eax
and eax, 8
push eax
push 0x84fa
mov ecx, dword [ebx + 0x200]
push ecx
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x48bfba
push edi
push 0x84fa
mov edx, dword [ebx + 0x200]
push edx
call dword [sym.imp.USER32.dll_RemoveMenu]
mov dword [ebp - 0x78], edi
cmp byte [0x75db0d], 0
je 0x48c08d
mov byte [ebx + 0x282], 1
push 1
push str.DarkMode_Explorer
mov eax, dword [ebx + 0x20]
push eax
mov ecx, 0x75dad0
call fcn.004378a0
mov ecx, dword [ebx + 0x20]
push ecx
mov ecx, 0x75dad0
call fcn.00437960
mov edx, dword [ebx + 0x528]
push edx
mov ecx, 0x75dad0
call fcn.004380f0
push edi
push edi
push edi
push edi
mov eax, dword [ebx + 0x648]
push eax
mov ecx, dword [ebx + 0x5f0]
push ecx
mov ecx, 0x75dad0
call fcn.00437e70
lea esi, [ebx + 0x5d0]
mov ecx, esi
call fcn.00454c30
and eax, 0xfffffffe
push eax
mov ecx, esi
call fcn.0040d0b0
movzx edx, byte [0x75db0d]
push edx
push str.DarkMode_Explorer
mov eax, dword [ebx + 0x1278]
push eax
mov ecx, 0x75dad0
call fcn.004378a0
push 1
mov ecx, dword [ebx + 0x20]
push ecx
lea ecx, [ebx + 0x3e0]
call fcn.004fc6a0
mov eax, dword [ebx + 0x7fc]
cmp eax, edi
je 0x48c08d
cmp dword [ebx + 0x80c], edi
jne 0x48c08d
mov dword [ebx + 0x800], eax
mov dword [ebx + 0x7fc], edi
mov dword [ebp - 0x78], 1
mov ecx, 0x75e2a4
call fcn.005457b0
lea esi, [ebx + 0x508]
lea edx, [ebx + 0x81c]
push edx
mov ecx, esi
call fcn.004cb300
lea edi, [ebx + 0x5d0]
push esi
mov ecx, edi
call fcn.004c87b0
mov dword [ebx + 0x5b8], edi
mov dword [ebx + 0x5bc], esi
lea eax, [ebx + 0x240]
mov dword [ebx + 0x694], eax
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0x690], eax
mov ecx, dword [ebx + 0x198]
mov dword [ecx + 0x18], eax
mov edx, dword [ebx + 0x198]
mov dword [0x75e228], edx
lea eax, [ebx + 0x15c0]
mov dword [0x75e22c], eax
lea ecx, [ebx + 0x810]
mov dword [0x75e200], ecx
lea edx, [ebx + 0x2e0]
mov dword [0x75e1fc], edx
lea eax, [ebx + 0x330]
mov dword [0x75e19c], eax
push 0x160
push 0
lea ecx, [ebp]
push ecx
call fcn.00621270
add esp, 0xc
push 0x4011
push 0x160
lea edx, [ebp]
push edx
push 0x80
push 0x67ad18
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
push eax
push 1
push 0x1003
mov ecx, dword [ebx + 0x1fc]
call fcn.004015a0
cmp dword [ebx + 0x6f4], 0
je 0x48c172
mov eax, dword [ebx + 0x6f0]
jmp 0x48c174
xor eax, eax
push eax
mov eax, dword [0x75ee84]
push eax
xor esi, esi
push esi
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x6fc], esi
je 0x48c195
mov eax, dword [ebx + 0x6f8]
jmp 0x48c197
xor eax, eax
push eax
mov ecx, dword [0x75ee9c]
push ecx
push 1
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x704], esi
je 0x48c1b8
mov eax, dword [ebx + 0x700]
jmp 0x48c1ba
xor eax, eax
push eax
mov edx, dword [0x75ee80]
push edx
push 2
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x70c], esi
je 0x48c1db
mov eax, dword [ebx + 0x708]
jmp 0x48c1dd
xor eax, eax
push eax
mov eax, dword [0x75ee8c]
push eax
push 3
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x714], esi
je 0x48c1fd
mov eax, dword [ebx + 0x710]
jmp 0x48c1ff
xor eax, eax
push eax
mov ecx, dword [0x75ee88]
push ecx
push 4
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x71c], esi
je 0x48c220
mov eax, dword [ebx + 0x718]
jmp 0x48c222
xor eax, eax
push eax
mov edx, dword [0x75ee90]
push edx
push 5
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x724], esi
je 0x48c243
mov eax, dword [ebx + 0x720]
jmp 0x48c245
xor eax, eax
push eax
mov eax, dword [0x75ee94]
push eax
push 6
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x72c], esi
je 0x48c265
mov eax, dword [ebx + 0x728]
jmp 0x48c267
xor eax, eax
push eax
mov ecx, dword [0x75eea0]
push ecx
push 7
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x734], esi
je 0x48c288
mov eax, dword [ebx + 0x730]
jmp 0x48c28a
xor eax, eax
push eax
mov edx, dword [0x75ee98]
push edx
push 8
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x73c], esi
je 0x48c2ab
mov eax, dword [ebx + 0x738]
jmp 0x48c2ad
xor eax, eax
push eax
mov eax, dword [0x75eea4]
push eax
push 9
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x744], esi
je 0x48c2cd
mov eax, dword [ebx + 0x740]
jmp 0x48c2cf
xor eax, eax
push eax
mov ecx, dword [0x75eea8]
push ecx
push 0xa
mov ecx, ebx
call fcn.0045c980
cmp dword [ebx + 0x74c], esi
je 0x48c2f0
mov eax, dword [ebx + 0x748]
jmp 0x48c2f2
xor eax, eax
push eax
mov edx, dword [0x75f7c0]
push edx
push 0xb
mov ecx, ebx
call fcn.0045c980
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0x67c], eax
lea ecx, [ebx + 0x750]
push ecx
push 0xc
mov ecx, edi
call fcn.00603cab
push 8
lea edx, [ebp + 0x234]
push edx
push 0xe
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
jne 0x48c342
mov eax, 0x2c
mov word [ebp + 0x234], ax
mov byte [ebp - 0x22], 0
mov ecx, dword [0x75e260]
cmp ecx, esi
je 0x48c35c
push 1
call fcn.00518a40
mov dword [ebp - 0x3c], eax
jmp 0x48c35f
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0xcc], 0x20
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp + 0x184]
push edx
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
je 0x48d5f3
cmp byte [ebp - 0x22], 0
je 0x48c3a8
mov ecx, ebx
call fcn.00458530
lea ecx, [ebx + 0x5d0]
call fcn.004ca810
mov dword [ebp - 0xb0], 4
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0xd0]
push eax
push 0
push 0
push str.sortOrder
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x48c3f1
mov edx, dword [ebp - 0xd0]
mov dword [ebx + 0x294], edx
mov eax, dword [ebx + 0x294]
push eax
mov ecx, ebx
call fcn.00456c40
push 1
push 0x8008
mov ecx, dword [ebx + 0x200]
push ecx
mov esi, dword [sym.imp.USER32.dll_EnableMenuItem]
call esi
push 1
push 0x8006
mov edx, dword [ebx + 0x200]
push edx
call esi
push 1
push 0x8007
mov eax, dword [ebx + 0x200]
push eax
call esi
push 1
push 0x800b
mov ecx, dword [ebx + 0x200]
push ecx
call esi
push 1
push 0x800a
mov edx, dword [ebx + 0x200]
push edx
call esi
push 1
push 0x271d
mov eax, dword [ebx + 0x20c]
push eax
call esi
push 1
push 0x271b
mov ecx, dword [ebx + 0x20c]
push ecx
call esi
push 1
push 0x271c
mov edx, dword [ebx + 0x20c]
push edx
call esi
push 1
push 0x271e
mov eax, dword [ebx + 0x20c]
push eax
call esi
cmp dword [0x752d2c], 0
jne 0x48c5f5
mov edi, 0x32
mov dword [ebp - 0x14], edi
lea ecx, [ebp - 0x18]
push ecx
push 1
push 0
push 0x678e18
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, eax
test esi, esi
je 0x48c4d1
mov edx, dword [0x75dbe4]
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x200]
push ecx
push 0
push 0
mov edx, dword [0x75f490]
push edx
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x48c522
mov dword [ebp - 0x14], edi
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp + 0x200]
push edx
push 0
push 0
mov eax, dword [0x75f490]
push eax
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x48c5df
mov dword [ebp - 0x14], edi
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp + 0x1cc]
push eax
push 0
push 0
mov ecx, dword [0x75f494]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x48c579
mov dword [ebp - 0x14], edi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x1cc]
push ecx
push 0
push 0
mov edx, dword [0x75f494]
push edx
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x48c579
mov byte [ebp + 0x1cc], 0
lea ecx, [ebp + 0x1cc]
push ecx
call fcn.0045a450
add esp, 4
test al, al
je 0x48c5df
lea edx, [ebp + 0x200]
push edx
call fcn.0045a7d0
add esp, 4
test al, al
je 0x48c5df
mov eax, dword [0x75f79c]
push eax
push 0x800f
push 0
push 0x800f
mov ecx, dword [ebx + 0x200]
push ecx
call fcn.0045bf90
mov edx, dword [0x75f79c]
push edx
push 0x2719
push 0
push 0x2719
mov eax, dword [ebx + 0x204]
push eax
call fcn.0045bf90
add esp, 0x28
test esi, esi
jne 0x48c5f5
mov eax, dword [ebp - 0x18]
cmp eax, dword [0x75dbe4]
je 0x48c5f5
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x60]
push ecx
mov edx, dword [ebx + 0x20]
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebx + 0x528]
push ecx
mov esi, dword [sym.imp.USER32.dll_GetWindowRect]
call esi
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x6c]
sub edx, dword [ebp - 0x64]
add edx, eax
mov dword [ebx + 0x11a0], edx
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebx + 0x410]
push ecx
call esi
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x6c]
sub edx, dword [ebp - 0x64]
add edx, eax
mov dword [ebx + 0x11a4], edx
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebx + 0x5f0]
push ecx
call esi
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x70]
sub edx, dword [ebp - 0x68]
add edx, eax
mov dword [ebx + 0x11a8], edx
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x6c]
sub ecx, dword [ebp - 0x64]
add ecx, eax
mov dword [ebx + 0x119c], ecx
lea edx, [ebp - 0x60]
push edx
mov eax, dword [ebx + 0x528]
push eax
call esi
mov ecx, dword [ebp - 0x70]
sub ecx, dword [ebp - 0x60]
mov dword [ebx + 0x11ac], ecx
lea edx, [ebp - 0x60]
push edx
mov eax, dword [ebx + 0x4b8]
push eax
call esi
mov ecx, dword [ebp - 0x70]
sub ecx, dword [ebp - 0x60]
mov dword [ebx + 0x1980], ecx
lea edx, [ebp - 0x174]
push edx
mov eax, dword [ebx + 0x1278]
push eax
call esi
mov ecx, dword [ebp - 0x16c]
sub ecx, dword [ebp - 0x174]
mov dword [ebx + 0x17e8], ecx
push 3
push 0
push 0
push 0
push 0
push 0x7611b8
lea ecx, [ebx + 0x3f0]
call fcn.005f5f3b
push 3
push 0
push 0
push 0
push 0
push 0x7611b8
lea ecx, [ebx + 0x444]
call fcn.005f5f3b
mov edx, dword [ebx + 0x20]
mov dword [0x75e284], edx
mov byte [ebx + 0x1951], 0
cmp dword [ebx + 0x238], 0
je 0x48c72a
mov byte [ebx + 0x1951], 1
jmp 0x48c757
cmp dword [ebx + 0x1f4], 0
jne 0x48c757
cmp dword [ebp - 0x44], 0
jne 0x48c757
push 0
push 0x1f4
push 0xc
mov eax, dword [ebx + 0x20]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
je 0x48c757
mov byte [ebx + 0x26d], 1
mov dword [ebp - 0x50], 4
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x34]
push edx
push 0
push 0
push str.nDESC7
mov eax, dword [0x75dbe4]
push eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call edi
test eax, eax
je 0x48c82d
mov dword [ebp - 0x34], 1
push 4
lea ecx, [ebp - 0x34]
push ecx
push 4
push 0
push str.nDESC7
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea esi, [ebx + 0x810]
push str.siteseal.thawte.com
mov ecx, esi
call fcn.004acd50
test eax, eax
jne 0x48c82d
mov byte [ebp - 0x2a], 1
mov eax, dword [ebx + 0x814]
test eax, eax
je 0x48c821
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48c7d0
sub eax, edx
je 0x48c821
lea ecx, [ebp - 0x18]
call fcn.004024f0
mov byte [ebp - 4], 0xb
push str.siteseal.thawte.com
mov eax, dword [ebx + 0x814]
push eax
push 0x67acc0
lea ecx, [ebp - 0x18]
push ecx
call fcn.00402f60
add esp, 0x10
mov edx, dword [ebp - 0x18]
push edx
mov ecx, esi
call fcn.004acb10
mov byte [ebp - 0x2a], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.00402560
jmp 0x48c82d
push str.siteseal.thawte.com
mov ecx, esi
call fcn.004acb10
mov dword [ebp - 0x50], 4
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x34]
push ecx
push 0
push 0
push str.nDESC8
mov edx, dword [0x75dbe4]
push edx
call edi
test eax, eax
je 0x48c8eb
mov dword [ebp - 0x34], 1
push 4
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push str.nDESC8
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea esi, [ebx + 0x810]
push str.ecom.cimetz.com
mov ecx, esi
call fcn.004acd50
test eax, eax
jne 0x48c8eb
mov eax, dword [ebx + 0x814]
test eax, eax
je 0x48c8eb
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48c8a0
sub eax, edx
je 0x48c8eb
lea ecx, [ebp - 0x18]
call fcn.004024f0
mov byte [ebp - 4], 0xc
push str.ecom.cimetz.com
mov edx, dword [ebx + 0x814]
push edx
push 0x67acc0
lea eax, [ebp - 0x18]
push eax
call fcn.00402f60
add esp, 0x10
mov ecx, dword [ebp - 0x18]
push ecx
mov ecx, esi
call fcn.004acb10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.00402560
mov byte [ebp - 4], 0xd
wait
push ebx
call fcn.0046bb60
add esp, 4
wait
mov dword [ebp - 4], 0
jmp 0x48c913
mov esi, dword [sym.imp.USER32.dll_SetTimer]
mov dword [ebp - 0x9c], 4
lea edx, [ebp - 0x9c]
push edx
lea eax, [ebp - 0xa0]
push eax
push 0
push 0
push str.MonitorUrlClipboard
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x48c96a
cmp dword [ebp - 0xa0], eax
je 0x48c96a
mov byte [ebx + 0x283], 1
mov edx, dword [ebx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SetClipboardViewer]
mov dword [ebx + 0x23c], eax
mov eax, dword [ebx + 0x74]
cmp byte [eax + 0x52], 0
jne 0x48c9f9
cmp dword [ebp - 0x44], 0
jne 0x48c9f9
push 0
push 0
push 0
push 0
push 0
push 0x4734d0
call fcn.006005d0
mov ecx, ebx
call fcn.00455df0
test eax, eax
je 0x48c9ba
push 0
push 0xea60
push 5
mov ecx, dword [ebx + 0x20]
push ecx
call esi
test eax, eax
je 0x48c9ba
mov byte [ebx + 0x26a], 1
push 0
push 0x7d0
push 7
mov edx, dword [ebx + 0x20]
push edx
call esi
test eax, eax
je 0x48c9d4
mov byte [ebx + 0x26c], 1
mov ecx, ebx
call fcn.00457450
test eax, eax
je 0x48c9f9
push 0
push 0x2710
push 0x11
mov eax, dword [ebx + 0x20]
push eax
call esi
test eax, eax
je 0x48c9f9
mov byte [ebx + 0x271], 1
cmp dword [0x752d2c], 0
jne 0x48ca2f
mov ecx, ebx
call fcn.00465730
test eax, eax
jne 0x48ca28
push eax
push 0xea60
push 6
mov ecx, dword [ebx + 0x20]
push ecx
call esi
test eax, eax
je 0x48ca2f
mov byte [ebx + 0x26b], 1
jmp 0x48ca2f
mov ecx, ebx
call fcn.004671b0
call fcn.0052c860
test eax, eax
jne 0x48ca51
push eax
push 0x2bf20
push 0x15
mov edx, dword [ebx + 0x20]
push edx
call esi
test eax, eax
je 0x48ca51
mov byte [ebx + 0x272], 1
push 0
push 0x2710
push 4
mov eax, dword [ebx + 0x20]
push eax
call esi
test eax, eax
je 0x48ca6b
mov byte [ebx + 0x269], 1
cmp dword [0x75e750], 0
je 0x48ca8e
push 0
push 0x5265c00
push 0x20
mov ecx, dword [ebx + 0x20]
push ecx
call esi
test eax, eax
je 0x48ca8e
mov byte [ebx + 0x278], 1
lea eax, [ebx + 0x5d0]
mov dword [ebx + 0x6d8], eax
lea esi, [ebx + 0x7c]
mov edi, dword [esi]
add edi, 0x13c
call fcn.00411530
push eax
push 0xbb
mov ecx, esi
mov edx, dword [edi]
call edx
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0xf0], eax
lea ecx, [ebx + 0xf4]
call fcn.004a52f0
lea eax, [ebx + 0x5d0]
mov dword [ebx + 0x180], eax
mov ecx, ebx
call fcn.004561f0
movzx ecx, al
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
mov ecx, esi
call fcn.005f5caa
mov ecx, ebx
call fcn.004561f0
movzx esi, al
neg esi
sbb esi, esi
and esi, 8
push esi
push 0x8029
mov edx, dword [ebx + 0x200]
push edx
mov edi, dword [sym.imp.USER32.dll_CheckMenuItem]
call edi
push esi
push 0x8029
mov eax, dword [ebx + 0x204]
push eax
call edi
push 0
push 0x36ee8
push 0x22
mov ecx, dword [ebx + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
je 0x48cb42
mov byte [ebx + 0x27a], 1
xor esi, esi
mov dword [ebp - 0xac], esi
push 4
lea edx, [ebp - 0xac]
push edx
push 4
push esi
push str.isSSW_OK
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [ebp - 4], 0xf
wait
cmp byte [ebp - 0x21], 0
je 0x48cb7b
push ebx
call fcn.0046c660
add esp, 4
wait
mov dword [ebp - 4], esi
jmp 0x48cb91
mov dword [ebp - 0xb4], 4
lea ecx, [ebp - 0xb4]
push ecx
lea edx, [ebp - 0x13c]
push edx
xor esi, esi
push esi
push esi
push str.bExPnEd
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x48ccc9
push str.PanelExceptionServers
lea ecx, [ebp + 0x178]
call fcn.004ad330
mov byte [ebp - 4], 0x11
mov eax, dword [ebp + 0x17c]
cmp eax, esi
sete byte [ebp - 0x29]
mov byte [ebp - 0x1a], 1
mov byte [ebp - 0x19], 1
cmp eax, esi
je 0x48cc24
push str..gstatic.com
push eax
call fcn.00622230
add esp, 8
test eax, eax
je 0x48cc08
mov byte [ebp - 0x1a], 0
push str.media.tenor.co_media.giphy.com
mov ecx, dword [ebp + 0x17c]
push ecx
call fcn.00622230
add esp, 8
test eax, eax
je 0x48cc24
mov byte [ebp - 0x19], 0
cmp byte [ebp - 0x29], 0
jne 0x48cc3a
cmp byte [ebp - 0x1a], 0
jne 0x48cc3a
cmp byte [ebp - 0x19], 0
je 0x48ccba
lea ecx, [ebp - 0x18]
call fcn.004024f0
mov byte [ebp - 4], 0x12
cmp byte [ebp - 0x19], 0
mov edi, str.media.tenor.co_media.giphy.com
jne 0x48cc56
mov edi, 0x67997c
cmp byte [ebp - 0x1a], 0
je 0x48cc68
mov esi, 0x678e14
mov edx, str..gstatic.com
jmp 0x48cc6f
mov esi, 0x67997c
mov edx, esi
mov eax, dword [ebp + 0x17c]
test eax, eax
je 0x48cc80
mov ecx, 0x678e14
jmp 0x48cc87
mov ecx, 0x67997c
mov eax, ecx
push edi
push esi
push edx
push ecx
push eax
push 0x686198
lea edx, [ebp - 0x18]
push edx
call fcn.00402f60
add esp, 0x1c
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp + 0x178]
call fcn.004acb10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x18]
call fcn.00402560
xor esi, esi
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x178]
call fcn.004acca0
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x75e5b8
push 0x70d21c
push 1
push esi
push 0x70d14c
call dword [sym.imp.ole32.dll_CoCreateInstance]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x75e198], eax
cmp dword [ebx + 0x1a8], esi
je 0x48cd49
mov eax, dword [ebx + 0x1b0]
cmp eax, esi
jle 0x48cd49
cmp eax, 0x17
jg 0x48cd49
push 0x2d68
call fcn.005f4e18
add esp, 4
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x13
cmp eax, esi
je 0x48cd3c
mov ecx, dword [ebx + 0x1b0]
push ecx
mov ecx, eax
call fcn.004f79c0
mov byte [ebp - 4], 0
mov dword [ebx + 0x116c], eax
jmp 0x48cd4f
xor eax, eax
mov byte [ebp - 4], al
mov dword [ebx + 0x116c], eax
jmp 0x48cd4f
mov dword [ebx + 0x1a8], esi
mov eax, dword [ebx + 0x74]
cmp byte [eax + 0x48], 0
je 0x48ce89
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48cd62
sub eax, edx
cmp eax, 6
jbe 0x48ce89
mov dword [ebx + 0x238], 1
mov dword [ebp + 0x160], esi
mov dword [ebp + 0x168], esi
xor edx, edx
mov word [ebp + 0x164], dx
mov byte [ebp - 4], 0x14
mov eax, dword [ebx + 0x74]
add eax, 0x3c
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x160]
call fcn.004017e0
mov dword [ebp + 0x16c], esi
mov dword [ebp + 0x174], esi
xor ecx, ecx
mov word [ebp + 0x170], cx
mov byte [ebp - 4], 0x15
mov eax, dword [ebx + 0x74]
add eax, 0x30
mov edx, dword [eax]
push edx
lea ecx, [ebp + 0x16c]
call fcn.004017e0
cmp dword [ebp + 0x168], esi
je 0x48cdf0
mov esi, dword [ebp + 0x160]
test esi, esi
jne 0x48cdf0
lea esi, [ebp + 0x164]
cmp dword [ebp + 0x174], 0
je 0x48ce0b
mov edx, dword [ebp + 0x16c]
test edx, edx
jne 0x48ce0d
lea edx, [ebp + 0x170]
jmp 0x48ce0d
xor edx, edx
mov eax, dword [ebx + 0x74]
mov ecx, dword [eax + 0x2c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
movzx edi, byte [eax + 0x4d]
push edi
push esi
push edx
movzx eax, byte [eax + 0x4b]
push eax
push 0
push ecx
push 1
mov ecx, ebx
call fcn.00488a10
mov byte [ebp - 4], 0x14
lea ecx, [ebp + 0x16c]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x160]
call fcn.00401210
xor esi, esi
mov ecx, dword [ebx + 0x74]
cmp byte [ecx + 0x49], 0
je 0x48cea3
mov dword [ebx + 0x238], 1
mov ecx, ebx
call fcn.00470220
mov edx, dword [ebx + 0x74]
cmp byte [edx + 0x4e], 0
je 0x48ceb6
mov dword [ebx + 0x238], 1
push esi
push 0x12c
push 0xf
mov eax, dword [ebx + 0x20]
push eax
mov edi, dword [sym.imp.USER32.dll_SetTimer]
call edi
test eax, eax
je 0x48ced5
mov byte [ebx + 0x26f], 1
push esi
push 0x3e418
push 0x23
mov ecx, dword [ebx + 0x20]
push ecx
call edi
test eax, eax
je 0x48ceee
mov byte [ebx + 0x27b], 1
lea edx, [ebp - 0x11c]
push edx
mov eax, dword [ebx + 0x410]
push eax
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
call edi
lea ecx, [ebp - 0x154]
push ecx
mov edx, dword [ebx + 0x5f0]
push edx
call edi
lea eax, [ebp - 0x11c]
push eax
mov ecx, ebx
call fcn.005fdc97
lea ecx, [ebp - 0x154]
push ecx
mov ecx, ebx
call fcn.005fdc97
mov edx, dword [ebp - 0x11c]
mov dword [ebx + 0x1994], edx
mov eax, dword [ebp - 0x118]
mov dword [ebx + 0x1998], eax
mov ecx, dword [ebp - 0x114]
mov dword [ebx + 0x199c], ecx
mov eax, dword [ebp - 0x148]
mov dword [ebx + 0x19a0], eax
add dword [ebx + 0x1994], 0x32
mov ecx, dword [ebp - 0x14c]
add ecx, 0xffffffa6
mov dword [ebx + 0x199c], ecx
cmp dword [ebx + 0x834], esi
jne 0x48cf87
push esi
push esi
mov ecx, ebx
call fcn.0045ca80
lea edx, [ebp - 0x10c]
push edx
call fcn.0043c830
lea ecx, [ebp - 0x10c]
call fcn.0043bfd0
lea eax, [eax + eax*2]
lea esi, [eax*4 - 0x5911]
lea ecx, [ebp - 0x10c]
call fcn.0043c000
add eax, esi
cmp eax, 0x5b4
jle 0x48cfc4
fld qword [0x686190]
jmp 0x48cfcd
cmp eax, 0x5af
jle 0x48cfd3
fld1
fstp qword [0x75e278]
mov ecx, ebx
call fcn.00456230
mov eax, dword [ebx + 0x7fc]
xor edi, edi
cmp eax, edi
je 0x48cfe9
push eax
jmp 0x48d000
cmp dword [ebx + 0x804], edi
jne 0x48cffa
mov ecx, ebx
call fcn.00470470
jmp 0x48d007
cmp dword [ebp - 0x78], edi
je 0x48d007
push edi
mov ecx, ebx
call fcn.00470b10
mov esi, 1
push esi
push edi
push edi
push edi
push 0x70
push 0xe8ff
push 0xe800
mov ecx, ebx
call fcn.005f9dfd
mov ecx, 0x75e7e8
call fcn.0054f790
mov eax, dword [ebx + 0x74]
cmp byte [eax + 0x52], 0
je 0x48d06c
mov dword [ebx + 0x238], esi
push 0x50030
mov eax, dword [0x75f01c]
push eax
mov ecx, dword [0x75f070]
push ecx
push edi
call fcn.00473680
push esi
call fcn.004117c0
add esp, 0x14
mov ecx, ebx
call fcn.00487790
mov eax, esi
wait
jmp 0x48d75c
cmp dword [ebp - 0x44], edi
jne 0x48d144
mov edx, dword [ebx + 0x78]
cmp dword [edx + 0x1c], edi
je 0x48d10b
cmp dword [0x75dbcc], edi
jne 0x48d05d
cmp byte [eax + 0x50], 0
jne 0x48d117
mov dword [ebp - 0x40], 4
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x4c]
push ecx
push edi
push edi
push str.bShInstChromeExtTip
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x48d10b
cmp dword [ebp - 0x4c], esi
jne 0x48d10b
mov dword [ebp - 0x4c], edi
push 4
lea eax, [ebp - 0x4c]
push eax
push 4
push edi
push str.bShInstChromeExtTip
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x48d10b
push edi
lea ecx, [ebp - 0x2a8]
call fcn.004abcf0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x2a8]
call fcn.005f6e33
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a8]
call fcn.00454320
cmp dword [0x75dbcc], edi
jne 0x48d05d
cmp dword [0x75da04], edi
je 0x48d3c9
cmp dword [0x75e288], edi
jne 0x48d3e4
mov ecx, dword [0x75e974]
push ecx
push edi
call fcn.004b4570
add esp, 8
jmp 0x48d3e4
cmp byte [eax + 0x50], 0
je 0x48d32f
push 0x50001
mov edx, dword [0x75f3b4]
push edx
mov eax, dword [0x75f3b0]
push eax
push edi
call fcn.00473680
add esp, 0x10
cmp eax, esi
jne 0x48d32f
call fcn.00447df0
mov esi, eax
neg esi
sbb esi, esi
and esi, 0x100
add esi, 0xf003f
mov dword [ebp - 0x40], esi
lea ecx, [ebp - 0x20]
push ecx
push esi
push edi
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShellIconOverlayIdentifiers
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x48d309
lea edx, [ebp - 0x14]
push edx
push esi
push edi
push str.IDM_Shell_Extension
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x48d254
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
lea edx, [ebp - 0x14]
push edx
push edi
push esi
push edi
push 0x67997c
push edi
push str.___IDM_Shell_Extension
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x48d254
mov ecx, 9
mov esi, str.CDC95B92_E27C_4745_A8C5_64A52A78855D
lea edi, [ebp + 0x1a4]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp + 0x1a4]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48d210
sub eax, edx
inc eax
push eax
lea ecx, [ebp + 0x1a4]
push ecx
push 1
push 0
push 0
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x48d245
push str.IDM_Shell_Extension
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp - 0x40]
xor edi, edi
lea edx, [ebp - 0x14]
push edx
push esi
push edi
push str.__IDM_Shell_Extension
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x48d2ff
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
lea edx, [ebp - 0x14]
push edx
push edi
push esi
push edi
push 0x67997c
push edi
push str.___IDM_Shell_Extension
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x48d2ff
mov ecx, 9
mov esi, str.CDC95B92_E27C_4745_A8C5_64A52A78855D
lea edi, [ebp + 0x208]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp + 0x208]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48d2c0
sub eax, edx
inc eax
push eax
lea ecx, [ebp + 0x208]
push ecx
push 1
push 0
push 0
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x48d2f5
push str.__IDM_Shell_Extension
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebx + 0x238], 1
push 1
call fcn.004117c0
add esp, 4
mov ecx, ebx
call fcn.00487790
mov eax, 1
wait
jmp 0x48d75c
mov dword [ebx + 0x238], esi
cmp dword [0x75dbcc], edi
jne 0x48d39e
mov dword [ebp + 0x178], edi
mov dword [ebp + 0x180], edi
xor eax, eax
mov word [ebp + 0x17c], ax
mov byte [ebp - 4], 0x17
mov eax, dword [0x75dc58]
cmp eax, edi
jne 0x48d364
mov eax, 0x75dc5c
push edi
push eax
push str._sMediumILStart.exe
lea ecx, [ebp + 0x178]
call fcn.004021a0
mov eax, dword [ebp + 0x178]
cmp eax, edi
jne 0x48d386
lea eax, [ebp + 0x17c]
push eax
call fcn.004aa610
add esp, 4
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x178]
call fcn.00401210
mov eax, dword [0x75e248]
cmp eax, edi
je 0x48d3ba
dec eax
push eax
push 0x14bb
push 0x111
mov ecx, ebx
call fcn.004015a0
mov ecx, ebx
call fcn.00487790
mov eax, esi
wait
jmp 0x48d75c
mov edx, dword [ebx + 0x74]
cmp byte [edx + 0x54], 0
je 0x48d3e4
push edi
push 0x2710
push 0x24
mov eax, dword [ebx + 0x20]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x75dbac], edi
je 0x48d4de
cmp dword [0x75e5ac], edi
jne 0x48d408
call fcn.004aa550
mov dword [0x75e4a4], eax
mov dword [0x75e5ac], esi
cmp dword [0x75e4a4], edi
je 0x48d4c4
lea ecx, [ebp - 0x38]
push ecx
push esi
push edi
push str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x48d4c4
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0xc4], 4
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0x3c]
push eax
push edi
push edi
push str.EnableLUA
mov ecx, dword [ebp - 0x38]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x48d4ba
cmp dword [ebp - 0x3c], edi
je 0x48d4ba
mov dword [ebp - 0x28], 4
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x40]
push eax
push edi
push edi
push str.bShVistaAsAdmWarn
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x48d490
cmp dword [ebp - 0x40], esi
je 0x48d4ba
push edi
lea ecx, [ebp - 0x228]
call fcn.00552350
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x228]
call fcn.005f6e33
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x228]
call fcn.004543d0
mov edx, dword [ebp - 0x38]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebx + 0x78]
cmp dword [eax + 0x4c], edi
je 0x48d4de
push edi
push 0xea60
push 0x1b
mov ecx, dword [ebx + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [0x75e260]
cmp eax, edi
je 0x48d521
xor esi, esi
lea esp, [esp]
cmp esi, dword [eax + 0x1c]
jge 0x48d521
push esi
lea ecx, [eax + 0x14]
call fcn.0045ee00
mov eax, dword [eax]
cmp byte [eax + 0x68], 0
je 0x48d519
cmp dword [eax + 0xc], edi
je 0x48d519
mov edx, dword [eax + 0x84]
push edx
mov ecx, ebx
call fcn.00470130
inc esi
mov eax, dword [0x75e260]
jmp 0x48d4f0
push edi
call fcn.004f4bd0
add esp, 4
mov eax, dword [0x75e248]
cmp eax, edi
je 0x48d546
dec eax
push eax
push 0x14bb
push 0x111
mov ecx, ebx
call fcn.0042ec10
push edi
push 0x7530
push 0x18
mov eax, dword [ebx + 0x20]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
je 0x48d563
mov byte [ebx + 0x274], 1
push edi
push 0x124f80
push 0x2b
mov ecx, dword [ebx + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
xor esi, esi
mov dword [ebp - 0xd4], 4
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xc8]
push eax
push edi
push edi
push str.bShMsgInstFFExt2
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x48d5e1
cmp dword [ebp - 0xc8], 1
jne 0x48d5b3
lea esi, [eax + 1]
push str.bShMsgInstFFExt2
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
cmp esi, edi
je 0x48d5e1
call fcn.00412720
test eax, eax
jne 0x48d5e1
push edi
push edi
push edi
push edi
push edi
push fcn.00416510
call fcn.006005d0
mov byte [ebx + 0x1952], 0
mov eax, 1
wait
jmp 0x48d75c
inc dword [ebp - 0x48]
lea eax, [ebp + 0x184]
push eax
call fcn.006223ab
add esp, 4
mov edi, eax
test edi, edi
jle 0x48c362
xor esi, esi
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x12c], esi
push 0xd30
call fcn.005f4e18
add esp, 4
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0xa
cmp eax, esi
je 0x48d640
mov ecx, eax
call fcn.005b9780
mov esi, eax
jmp 0x48d642
xor esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x138], esi
test esi, esi
je 0x48c362
mov dword [esi + 0x4f8], edi
mov ecx, dword [ebp - 0x3c]
push ecx
push edi
mov ecx, esi
call fcn.005c70c0
test eax, eax
je 0x48d678
push 1
mov ecx, esi
call fcn.004212d0
jmp 0x48d6fe
lea edx, [ebp - 0x138]
push edx
mov ecx, dword [ebx + 0x234]
call fcn.0045ef60
mov eax, dword [ebx + 0x198]
mov dword [esi], eax
push 0
push 0
push esi
lea ecx, [ebx + 0x5d0]
call fcn.004c9dc0
cmp dword [esi + 0x4fc], 0
je 0x48d6af
mov byte [ebp - 0x22], 1
cmp dword [esi + 0x34c], 0
jne 0x48d6ca
mov eax, dword [esi + 0x354]
cmp eax, 0x40
je 0x48d6ca
cmp eax, 0x800
jne 0x48d6fe
mov eax, dword [esi + 0x344]
test eax, eax
je 0x48d6fe
push eax
mov ecx, dword [ebx + 0x234]
call fcn.0045eed0
test eax, eax
jl 0x48d6fe
push eax
mov ecx, dword [ebx + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov dword [esi + 0x340], eax
mov dword [eax + 0x348], esi
cmp edi, dword [0x75e250]
jbe 0x48c362
mov dword [0x75e250], edi
jmp 0x48c362
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x23c]
xor ecx, ebp
call fcn.00620b8d
add ebp, 0x240
mov esp, ebp
pop ebp
ret