Function at 0x4e1739
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
sub esp, 0x2c8
lea ebp, [esp - 4]
mov eax, dword [0x61dc40]
xor eax, ebp
mov dword [ebp + 0x2c8], eax
push 0x4c
mov eax, 0x5be4d3
call fcn.00598f5e
mov eax, dword [ebp + 0x2d4]
mov dword [ebp - 0x1c], eax
xor eax, eax
xor ebx, ebx
push 0x206
mov word [ebp + 0xc0], ax
lea eax, [ebp + 0xc2]
push ebx
push eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], ebx
call fcn.00596530
add esp, 0xc
push str.speedup.dat
call fcn.004040a8
push eax
lea eax, [ebp + 0xc0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp + 0xc0]
push eax
lea esi, [ebp - 0x14]
lea edi, [ebp - 0x20]
call fcn.00418d13
pop ecx
test eax, eax
je 0x4e1da0
mov dword [ebp - 0x3c], 0x5eb080
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x14]
inc eax
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x3c]
call fcn.0045e834
mov eax, dword [ebp - 0x38]
mov dword [0x6ccbec], eax
lea eax, [ebp + 0x90]
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov byte [ebp - 4], 1
call fcn.0054af1d
lea eax, [ebp]
push eax
mov byte [ebp - 4], 2
call fcn.00548b11
mov byte [ebp - 4], 3
push dword [ebp - 0x20]
lea ecx, [ebp - 0x58]
call fcn.004050c6
lea eax, [ebp + 0x90]
push eax
lea eax, [ebp - 0x58]
push eax
lea ebx, [ebp]
mov byte [ebp - 4], 4
call fcn.00548b5a
push 0
push 1
lea ecx, [ebp - 0x58]
mov bl, al
mov byte [ebp - 4], 3
call fcn.00407567
test bl, bl
je 0x4e1d72
cmp byte [ebp + 0x98], 0
je 0x4e1d72
lea eax, [ebp + 0x90]
call fcn.0054bd37
test al, al
je 0x4e1d72
mov edx, 0x5e6520
lea ecx, [ebp + 0x90]
call fcn.0054b949
cmp byte [eax + 8], 0
mov dword [ebp - 0x18], eax
je 0x4e1d72
call fcn.0054bd37
test al, al
je 0x4e1d72
mov edx, str.sites
lea ecx, [ebp + 0x90]
call fcn.0054b949
mov dword [ebp - 0x28], eax
call fcn.0054bd25
test al, al
je 0x4e1d72
and dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x28]
call fcn.0054b6cc
cmp dword [ebp - 0x14], eax
jae 0x4e19c0
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
call fcn.0054b71c
mov edi, eax
cmp byte [edi + 8], 0
je 0x4e19b8
call fcn.0054bd37
test al, al
je 0x4e19b8
mov edx, 0x5e7120
mov ecx, edi
call fcn.0054b949
mov esi, eax
cmp byte [esi + 8], 4
jne 0x4e19b8
cmp dword [esi], 0
je 0x4e19b8
mov edx, str.accel
mov ecx, edi
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4e19b8
mov ecx, eax
call fcn.0054b340
mov edi, eax
cmp edi, 4
ja 0x4e19b8
push dword [esi]
lea eax, [ebp - 0x24]
push eax
call fcn.0047f54f
pop ecx
pop ecx
mov byte [ebp - 4], 5
mov ebx, dword [ebp - 0x24]
call fcn.004e24ba
mov esi, eax
test esi, esi
je 0x4e19a9
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x1c]
add eax, 0x28
call fcn.004402ba
mov eax, esi
call fcn.004e253b
or dword [0x6ccc04], eax
cmp edi, 1
je 0x4e1988
cmp edi, 2
je 0x4e1988
cmp edi, 3
jne 0x4e1999
or dword [0x6ccc08], eax
cmp edi, 3
je 0x4e1999
or dword [0x6ccc0c], eax
cmp edi, 1
je 0x4e19a3
cmp edi, 4
jne 0x4e19a9
or dword [0x6ccc10], eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
call fcn.00407b6b
inc dword [ebp - 0x14]
jmp 0x4e18c4
mov eax, dword [0x63696c]
mov ecx, 0x63696c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 6
xor edi, edi
mov esi, dword [ebp - 0x1c]
mov ecx, dword [esi + 0x38]
sub ecx, dword [esi + 0x34]
add esi, 0x28
sar ecx, 2
cmp edi, ecx
jae 0x4e1a2d
call fcn.004750c1
mov ebx, dword [eax]
call fcn.004e24ba
call fcn.004e253b
test dword [0x6ccc08], eax
je 0x4e1a27
call fcn.004750c1
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x14]
call fcn.0040a5cb
push 1
push 0x5df204
lea eax, [ebp - 0x14]
call fcn.0040a5cb
mov eax, dword [ebp - 0x14]
inc edi
jmp 0x4e19d9
cmp dword [eax - 0xc], 0
je 0x4e1a5d
push eax
push 0x5db9e0
push 0x207
mov esi, 0x6ccc30
push esi
call fcn.0058f42f
push 0x7c
push esi
call fcn.0058feb5
add esp, 0x18
test eax, eax
je 0x4e1a5d
xor ecx, ecx
mov word [eax], cx
mov esi, dword [ebp - 0x18]
mov edx, str.baiduvideo
mov ecx, esi
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4e1a86
mov ecx, eax
call fcn.0054b340
xor ecx, ecx
test eax, eax
setne cl
mov dword [0x6ccbf4], ecx
mov edx, str.hao123
mov ecx, esi
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4e1aac
mov ecx, eax
call fcn.0054b340
xor ecx, ecx
test eax, eax
setne cl
mov dword [0x6ccbf0], ecx
mov edx, str.duanvideo
mov ecx, esi
call fcn.0054b949
mov edx, str.duanflagname
mov ecx, esi
mov edi, eax
call fcn.0054b949
mov edx, str.duansp
lea ecx, [ebp + 0x90]
mov esi, eax
call fcn.0054b949
cmp byte [edi + 8], 1
mov ebx, eax
jne 0x4e1b16
mov ecx, edi
call fcn.0054b340
test eax, eax
je 0x4e1b16
cmp byte [esi + 8], 4
jne 0x4e1b16
cmp dword [esi], 0
je 0x4e1b16
mov eax, ebx
call fcn.0054bd25
test al, al
je 0x4e1b16
mov eax, ebx
call fcn.0054b6cc
test eax, eax
je 0x4e1b16
mov dword [0x6ccbf8], 1
mov ecx, dword [ebp - 0x18]
mov edx, str.switchplaceholder
call fcn.0054b949
mov ebx, dword [ebp - 0x18]
mov edx, str.switchflagname
mov ecx, ebx
mov esi, eax
call fcn.0054b949
mov edx, str.videoswitchcode
lea ecx, [ebp + 0x90]
mov edi, eax
call fcn.0054b949
cmp byte [esi + 8], 4
jne 0x4e1bb4
xor ecx, ecx
cmp dword [esi], ecx
je 0x4e1bb4
cmp byte [edi + 8], 4
jne 0x4e1bb4
cmp dword [edi], ecx
je 0x4e1bb4
cmp byte [eax + 8], 4
jne 0x4e1bb4
cmp dword [eax], ecx
je 0x4e1bb4
mov edx, str.haovideoswitch
mov ecx, ebx
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4e1b8d
mov ecx, eax
call fcn.0054b340
test eax, eax
je 0x4e1b8d
mov dword [0x6ccbfc], 1
mov edx, str.baiduvideoswitch
mov ecx, ebx
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4e1bb4
mov ecx, eax
call fcn.0054b340
test eax, eax
je 0x4e1bb4
mov dword [0x6ccc00], 1
mov edx, str.flashcrashfix
mov ecx, ebx
call fcn.0054b949
mov edx, str.flashcrashfixcode
lea ecx, [ebp + 0x90]
mov edi, eax
call fcn.0054b949
cmp byte [edi + 8], 1
mov esi, eax
jne 0x4e1bfa
mov ecx, edi
call fcn.0054b340
test eax, eax
je 0x4e1bfa
cmp byte [esi + 8], 4
jne 0x4e1bfa
cmp dword [esi], 0
je 0x4e1bfa
mov dword [0x6ccc2c], 1
mov edx, str.speeditemsflag
mov ecx, ebx
call fcn.0054b949
mov edx, str.speeditems
lea ecx, [ebp + 0x90]
mov esi, eax
call fcn.0054b949
cmp byte [esi + 8], 1
mov edi, eax
jne 0x4e1c46
mov ecx, esi
call fcn.0054b340
test eax, eax
je 0x4e1c46
cmp byte [edi + 8], 0
je 0x4e1c46
mov eax, edi
call fcn.0054bd25
test al, al
je 0x4e1c46
mov dword [0x6cd040], 1
mov edx, str.speeditemfbdtn
mov ecx, ebx
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4e1c64
mov ecx, eax
call fcn.0054b340
mov dword [0x6cd044], eax
mov edx, str.haoexternflag
mov ecx, ebx
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4e1c9d
mov ecx, eax
call fcn.0054b340
push 4
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 4
push str.dfnvurlflag
push str.Softwarehao123JuziBrowser
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov edx, str.haoexternsite
mov ecx, ebx
call fcn.0054b949
mov esi, eax
cmp byte [esi + 8], 4
jne 0x4e1d67
cmp dword [esi], 0
je 0x4e1d67
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x54]
push eax
call fcn.00440517
mov byte [ebp - 4], 7
push dword [esi]
lea eax, [ebp - 0x28]
push eax
call fcn.0047f54f
pop ecx
pop ecx
lea ecx, [ebp - 0x54]
push ecx
mov byte [ebp - 4], 8
mov eax, dword [eax]
push 0x5df204
push eax
call fcn.0042694d
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x28]
add esp, 0xc
add eax, 0xfffffff0
call fcn.00407b6b
xor edi, edi
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x48]
push 0x1c
cdq
pop ecx
idiv ecx
cmp edi, eax
jae 0x4e1d39
push edi
lea esi, [ebp - 0x54]
call fcn.00404e8b
cmp dword [eax + 0x18], 8
jb 0x4e1d29
mov eax, dword [eax + 4]
jmp 0x4e1d2c
add eax, 4
push eax
call fcn.0042dc31
or dword [ebp - 0x18], eax
pop ecx
inc edi
jmp 0x4e1d05
push 4
lea eax, [ebp - 0x18]
push eax
push 4
push str.extrnurlbtmsk
push str.Softwarehao123JuziBrowser
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
lea esi, [ebp - 0x54]
call fcn.00404ef6
push dword [ebp - 0x54]
call fcn.0058f3c4
pop ecx
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.00407b6b
lea eax, [ebp]
call fcn.0040b0d5
lea ecx, [ebp + 0x90]
mov byte [ebp - 4], 1
call fcn.0054b1a0
push dword [ebp - 0x20]
call fcn.0058f807
or dword [ebp - 4], 0xffffffff
pop ecx
lea ecx, [ebp - 0x3c]
call fcn.0045e784
xor ebx, ebx
cmp dword [0x63a5b0], ebx
jne 0x4e1db4
push ebx
call fcn.004e1017
pop ecx
mov dword [0x6ccc14], eax
mov esi, str.accelsites
push esi
push str.Softwarehao123JuziBrowser
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
cmp dword [0x6ccbf0], ebx
je 0x4e1e0a
cmp word [0x6ccc30], bx
je 0x4e1e0a
mov edi, 0x6ccc30
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x4e1de5
sub eax, edx
sar eax, 1
add eax, eax
push eax
push edi
push 1
push esi
push str.Softwarehao123JuziBrowser
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2c8]
xor ecx, ebp
call fcn.0058f3cf
add ebp, 0x2cc
leave
ret 4