Function at 0x4baf60
Capabilities:
Check internet connectivity via wininet
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fb991
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x6b000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x234], ebx
call fcn.0040bf10
mov ecx, eax
test ecx, ecx
je 0x4bb5fe
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x238], esi
mov dword [ebp - 4], 1
or edi, 0xffffffff
cmp dword [0x6b0c54], 4
mov dword [ebp - 0x220], 0
jne 0x4bafe2
cmp dword [ebx + 0xb4c], 0
jne 0x4bb03d
cmp dword [ebx + 0xb50], 0
jmp 0x4baffc
mov eax, dword [ebx + 0xa38]
lea ecx, [ebx + 0xa38]
mov eax, dword [eax]
call eax
test al, al
jne 0x4bb03d
cmp byte [ebx + 0xa79], al
jne 0x4bb03d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x224], esp
push 0x6b12f8
call fcn.00420d90
mov byte [ebp - 4], 2
push 0
mov byte [ebp - 4], 1
mov edx, 0x44
mov ecx, dword [ebx + 4]
call fcn.004e0d20
add esp, 0x1c
cmp eax, 7
je 0x4bb5c6
mov ecx, ebx
call fcn.004b9c10
push 0
push str.RecoverMasterPreviewDlg
call dword [sym.imp.USER32.dll_FindWindowW]
cmp dword [ebx + 0xe58], 0
jne 0x4bb094
cmp dword [ebx + 0xe5c], 0
jne 0x4bb094
test eax, eax
jne 0x4bb094
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x224], esp
push 0x6b1670
call fcn.00420d90
mov byte [ebp - 4], 4
push 0
mov byte [ebp - 4], 1
mov edx, 0x40
mov ecx, dword [ebx + 4]
call fcn.004e0d20
add esp, 0x1c
jmp 0x4bb5c6
cmp byte [ebx + 0xe4d], 0
jne 0x4bb5c6
push 0x1f5
mov byte [ebx + 0xe4d], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x6b0c60], 0x3a8
je 0x4bb362
call fcn.00554fb0
test eax, eax
je 0x4bb362
movzx ecx, byte [0x6b6c1b]
mov eax, ecx
mov dword [ebp - 0x21c], 0
shl cx, 8
or cx, ax
mov byte [ebp - 0x21c], cl
cmp dword [ebp - 0x21c], 0
jne 0x4bb362
mov ecx, 0x6b96f8
call fcn.004ea160
push dword [ebx + 0xe64]
mov ecx, 0x6b96f8
push dword [ebx + 0xe60]
call fcn.004ea790
test al, al
je 0x4bb12d
mov byte [ebp - 0x220], 1
jmp 0x4bb3a8
lea ecx, [ebp - 0x21c]
call fcn.0040c490
mov byte [ebp - 4], 7
mov edx, str.filesLimit
push 0x6508e4
lea ecx, [ebp - 0x228]
call fcn.004db870
add esp, 4
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x228]
cmp dword [eax - 0xc], 0
je 0x4bb2cd
lea ecx, [ebp - 0x230]
call fcn.0040c490
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x22c]
call fcn.0040c490
mov byte [ebp - 4], 0xa
mov ax, word [0x639ee0]
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push 0
push eax
call fcn.00588800
mov eax, dword [0x6b9788]
lea ecx, [ebp - 0x218]
cdq
push 1
push edx
push eax
call fcn.004df240
lea ecx, [ebp - 0x218]
add esp, 0x18
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bb1c7
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.0040c9d0
push 1
push dword [ebx + 0xe64]
lea ecx, [ebp - 0x218]
push dword [ebx + 0xe60]
call fcn.004df240
lea edx, [ebp - 0x218]
add esp, 0xc
lea ecx, [edx + 2]
nop
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x4bb210
sub edx, ecx
lea eax, [ebp - 0x218]
sar edx, 1
lea ecx, [ebp - 0x22c]
push edx
push eax
call fcn.0040c9d0
lea eax, [ebp - 0x224]
mov ecx, 0x6b96f8
push eax
call fcn.004ea680
mov byte [ebp - 4], 0xb
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [eax]
lea eax, [ebp - 0x21c]
push dword [ebp - 0x228]
push eax
call fcn.0040d300
add esp, 0x14
mov byte [ebp - 4], 0xa
mov eax, edi
mov edx, dword [ebp - 0x224]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bb28b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov eax, edi
mov edx, dword [ebp - 0x22c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bb2ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov eax, edi
mov edx, dword [ebp - 0x230]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bb2cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6508e4
mov edx, str.Title
lea ecx, [ebp - 0x224]
call fcn.004db870
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x21c]
mov ecx, dword [ebx + 4]
push 1
push 0
push dword [eax]
call fcn.004dbc50
add esp, 0x10
mov byte [ebp - 4], 8
mov eax, edi
mov edx, dword [ebp - 0x224]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bb31e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
mov eax, edi
mov edx, dword [ebp - 0x228]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bb33f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x21c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bb3a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4bb3a8
mov eax, dword [0x6b9698]
cmp dword [eax - 0xc], 0
je 0x4bb3b5
movzx ecx, byte [0x6b6c1b]
mov eax, ecx
mov dword [ebp - 0x21c], 0
shl cx, 8
or cx, ax
xor eax, eax
mov byte [ebp - 0x21c], cl
cmp dword [ebp - 0x21c], eax
setne cl
movzx eax, cl
shl cx, 8
or cx, ax
mov byte [ebp - 0x220], cl
cmp dword [ebp - 0x220], 0
jne 0x4bb5aa
mov eax, dword [0x6b9698]
cmp dword [eax - 0xc], 0
jne 0x4bb40d
cmp dword [0x6b0c60], 0x3a8
jne 0x4bb590
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x224], esp
push 0x6b11d8
call fcn.00420d90
mov byte [ebp - 4], 0x13
push 0
mov byte [ebp - 4], 1
mov edx, 4
mov ecx, dword [ebx + 4]
call fcn.004e0d20
add esp, 0x1c
cmp eax, 7
jne 0x4bb590
jmp 0x4bb5a3
push 0
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
jne 0x4bb49e
cmp dword [0x6b0c60], 0x3a8
jne 0x4bb49e
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x224], 4
push eax
push 0
push str.CheckNet
push 0x650fc8
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
cmp dword [ebp - 0x21c], 0
je 0x4bb49e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x224], esp
push 0x6b1880
call fcn.00420d90
mov byte [ebp - 4], 0x14
push 0
mov byte [ebp - 4], 1
mov edx, 0x40
mov ecx, dword [ebx + 4]
call fcn.004e0d20
add esp, 0x1c
jmp 0x4bb5a3
movzx ecx, byte [0x6b6c1b]
mov eax, ecx
mov dword [ebp - 0x21c], 0
shl cx, 8
or cx, ax
mov byte [ebp - 0x21c], cl
cmp dword [ebp - 0x21c], 0
je 0x4bb4d3
mov byte [ebp - 0x220], 1
jmp 0x4bb5aa
mov ecx, dword [ebx + 4]
call fcn.004e2480
test al, al
jne 0x4bb5a3
mov edi, dword [ebx + 4]
push 0x908
call fcn.00560437
mov ebx, eax
add esp, 4
mov dword [ebp - 0x224], ebx
mov byte [ebp - 4], 0x15
mov ecx, ebx
call fcn.004dacb0
mov byte [ebp - 4], 0x16
mov dword [ebx], vtable.CMsgPayDlg.3.0
mov dword [ebx + 0x10], vtable.CMsgPayDlg.1.0
mov dword [ebx + 0x24], vtable.CMsgPayDlg.0
mov dword [ebx + 0x28], vtable.CMsgPayDlg.2.0
mov dword [ebx + 0x2c], vtable.CMsgPayDlg.4.0
mov dword [ebx + 0x30], vtable.CMsgPayDlg.5.0
mov dword [ebx + 0x900], 7
mov dword [ebx + 0x904], edi
mov byte [ebp - 4], 1
mov ecx, ebx
push 0
push 0
push 0
push 0
push 0
push 0
push 0x96c80000
push 0x639ee0
push edi
call dword [sym.imp.ycomuiu.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____]
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_]
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_void_]
mov eax, dword [ebx]
mov ecx, ebx
mov edi, dword [ebx + 0x900]
push 1
call dword [eax + 0x1c]
mov ebx, dword [ebp - 0x234]
cmp edi, 7
je 0x4bb5a3
mov ecx, dword [ebx + 4]
xor edx, edx
push 0
call fcn.004dce30
add esp, 4
test al, al
jne 0x4bb5aa
mov byte [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
sub eax, 1
jne 0x4bb5bc
mov ecx, ebx
call fcn.004bb610
mov byte [ebx + 0xe4d], 0
or edi, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x4bb5e2
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055f9be
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.0040b250
int3