Function at 0x4e4e1f
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x1a0]
sub esp, 0x1a0
push 0xffffffffffffffff
push 0x6552b6
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0x19c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov edi, dword [ebp + 0x1ac]
mov dword [ebp - 0x34], edi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, dword [ebp + 0x1a8]
cmp eax, 3
jb 0x4e4a8c
lea ecx, [eax - 0x1394]
cmp ecx, 0xb6
ja case.0x4e4914.5013
movzx ecx, byte [ecx + 0x4e57c8]
jmp dword [ecx*4 + 0x4e5764]
mov edx, dword [esi + 0xae0]
cmp edx, dword [esi + 0xae4]
jne 0x4e4a8c
cmp dword [esi + 0xaf4], ebx
setne al
mov byte [esi + 0xa87], al
cmp dword [esi + 0xaf8], ebx
setne cl
mov byte [esi + 0xa88], cl
lea ecx, [esi + 0xb90]
call fcn.00542ee0
mov edx, dword [0x75f170]
push edx
lea ecx, [esi + 0xe80]
call fcn.00424420
mov byte [esi + 0xa86], 1
mov byte [esi + 0xaac], bl
cmp byte [esi + 0xaad], bl
je 0x4e4a8c
push ebx
push 0x2710
push 3
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [esi + 0x1abc], 1
jmp 0x4e4a8c
mov ecx, dword [esi + 0xad0]
cmp ecx, dword [esi + 0xad4]
jne 0x4e4a8c
mov byte [ebp - 0x25], bl
cmp byte [esi + 0x890], bl
je 0x4e4a41
mov edx, dword [esi + 0xae0]
cmp edx, dword [esi + 0xae4]
jne 0x4e4a8c
cmp dword [esi + 0xaf4], ebx
setne al
mov byte [esi + 0xa87], al
cmp dword [esi + 0xaf8], ebx
setne cl
mov byte [esi + 0xa88], cl
mov byte [ebp - 0x25], 1
lea ecx, [esi + 0xb90]
call fcn.00542ee0
mov byte [esi + 0xa86], 1
mov byte [esi + 0xaac], bl
cmp byte [esi + 0xaad], bl
je 0x4e4a2d
push ebx
push 0x2710
push 3
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [esi + 0x1abc], 1
mov ecx, dword [0x75f170]
push ecx
lea ecx, [esi + 0xe80]
call fcn.00424420
jmp 0x4e4a8c
cmp dword [esi + 0xb10], ebx
jne 0x4e4a78
cmp dword [esi + 0xaf4], ebx
setne al
mov byte [esi + 0xa87], al
cmp dword [esi + 0xaf8], ebx
setne cl
mov byte [esi + 0xa88], cl
lea ecx, [esi + 0xb90]
call fcn.0053d4d0
mov byte [ebp - 0x25], 1
jmp 0x4e49ff
push ebx
push ebx
push 0x1425
mov eax, dword [esi + 0xb50]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x19c]
xor ecx, ebp
call fcn.00620b8d
add ebp, 0x1a0
mov esp, ebp
pop ebp
ret 8
mov ecx, esi
call fcn.004e3080
mov ecx, esi
call fcn.004e3080
mov ecx, esi
call fcn.004e3080
mov ecx, esi
call fcn.004e3080
cmp dword [esi + 0x1730], ebx
jne 0x4e4ae7
lea ecx, [esi + 0x16a8]
call fcn.00535720
add esi, 0x17f0
mov ecx, esi
call fcn.005f5d13
push ebx
push 0xffffffffffffffff
push ebx
mov ecx, esi
call fcn.004e1a80
jmp 0x4e4a8c
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x4e4a8c
cmp dword [esi + 0xaf8], ebx
jne 0x4e4b24
cmp dword [esi + 0xaf4], ebx
je 0x4e4a8c
lea edi, [esi + 0xb90]
mov ecx, edi
cmp byte [esi + 0x890], bl
je 0x4e4b3b
call fcn.00542ee0
jmp 0x4e4b40
call fcn.0053d4d0
cmp dword [esi + 0xaf8], ebx
je 0x4e4b4f
mov ecx, edi
call fcn.00542ee0
mov eax, dword [esi + 0xab0]
push eax
push 0x1449
push 0x111
mov ecx, dword [esi + 0x5ec]
push ecx
jmp 0x4e4a86
lea ecx, [esi + 0x5f0]
call fcn.004dab80
push ebx
push 0x1404
push 0x111
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esi + 0x900]
call fcn.005e8080
mov ecx, esi
call fcn.004e3500
mov eax, dword [esi + 0xae8]
push eax
push 0x142d
push 0x111
mov ecx, dword [esi + 0xc30]
push ecx
mov edi, dword [sym.imp.USER32.dll_PostMessageA]
call edi
mov eax, dword [esi + 0xad4]
mov ecx, dword [esi + 0xae8]
cmp eax, ecx
jl 0x4e4bd0
mov eax, ecx
push eax
push 0x142e
push 0x111
mov edx, dword [esi + 0xc30]
push edx
call edi
mov eax, dword [esi + 0x6a0]
push eax
push 0x1429
push 0x111
mov eax, dword [esi + 0xc30]
push eax
call edi
mov ecx, dword [esi + 0xaec]
push ecx
push 0x142a
push 0x111
mov edx, dword [esi + 0xc30]
push edx
call edi
mov eax, dword [esi + 0xad8]
push eax
push 0x142b
push 0x111
mov ecx, dword [esi + 0xc30]
push ecx
call edi
mov edx, dword [esi + 0xadc]
push edx
push 0x142c
push 0x111
mov eax, dword [esi + 0xc30]
push eax
call edi
jmp 0x4e4a8c
cmp dword [esi + 0x1a20], 5
je 0x4e4cd4
cmp byte [esi + 0x1abd], bl
jne 0x4e4a8c
mov byte [esi + 0x1abd], 1
lea ecx, [ebp - 0x14]
call fcn.004024f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
push ecx
call fcn.0043c830
mov edi, dword [0x75f284]
lea ecx, [ebp - 0x30]
call fcn.00453880
push eax
lea ecx, [ebp - 0x30]
call fcn.00453850
push eax
push edi
lea edx, [ebp - 0x14]
push edx
call fcn.00402f60
push 0x10040
mov eax, dword [0x75f11c]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
push ebx
call fcn.00473680
add esp, 0x20
mov byte [esi + 0x1abd], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00402560
jmp 0x4e4a8c
cmp dword [esi + 0xaf8], ebx
jne 0x4e4dec
cmp dword [esi + 0xaf4], ebx
jne 0x4e4dec
mov byte [esi + 0xaad], 1
mov byte [esi + 0xaae], bl
mov byte [esi + 0xaaf], bl
lea ecx, [esi + 0x5f0]
call fcn.004da8d0
push ebx
push 0x1404
push 0x111
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp byte [esi + 0xaaf], bl
je 0x4e4d32
lea ecx, [esi + 0x900]
call fcn.005e8080
mov ecx, esi
call fcn.004e3500
mov eax, dword [esi + 0xae8]
push eax
push 0x142d
push 0x111
mov ecx, dword [esi + 0xc30]
push ecx
mov edi, dword [sym.imp.USER32.dll_PostMessageA]
call edi
mov eax, dword [esi + 0xad4]
mov ecx, dword [esi + 0xae8]
cmp eax, ecx
jl 0x4e4d6b
mov eax, ecx
push eax
push 0x142e
push 0x111
mov edx, dword [esi + 0xc30]
push edx
call edi
mov eax, dword [esi + 0x6a0]
push eax
push 0x1429
push 0x111
mov eax, dword [esi + 0xc30]
push eax
call edi
mov ecx, dword [esi + 0xaec]
push ecx
push 0x142a
push 0x111
mov edx, dword [esi + 0xc30]
push edx
call edi
mov eax, dword [esi + 0xad8]
push eax
push 0x142b
push 0x111
mov ecx, dword [esi + 0xc30]
push ecx
call edi
mov edx, dword [esi + 0xadc]
push edx
push 0x142c
push 0x111
mov eax, dword [esi + 0xc30]
push eax
call edi
jmp 0x4e4a8c
cmp byte [esi + 0x1abd], bl
jne 0x4e4a8c
mov byte [esi + 0x1abd], 1
lea ecx, [ebp - 0x14]
call fcn.004024f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
push ecx
call fcn.0043c830
mov edi, dword [0x75f280]
jmp 0x4e4c88
mov byte [esi + 0xb04], bl
mov byte [esi + 0xa50], 1
mov dword [esi + 0xa7c], ebx
mov dword [esi + 0xa80], ebx
mov byte [esi + 0xa86], bl
mov byte [esi + 0xa84], bl
mov byte [esi + 0xa87], bl
mov byte [esi + 0xa88], bl
lea ecx, [esi + 0x5f0]
call fcn.004ce390
cmp byte [esi + 0x1ab9], bl
jne 0x4e4e7c
mov byte [esi + 0x1ab9], 1
push ebx
push 0x3e8
push 1
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov bl, 1
mov byte [ebp - 0x26], bl
mov dword [ebp - 0x2c], 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x14]
push ecx
push 0
push 0
push str.GrStVsbt
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4e4eb4
cmp dword [ebp - 0x14], eax
jne 0x4e4eb4
xor bl, bl
mov byte [ebp - 0x26], bl
cmp byte [esi + 0x890], 0
je 0x4e4ec5
mov eax, dword [0x75f16c]
push eax
jmp 0x4e4ecc
mov ecx, dword [0x75f168]
push ecx
lea ecx, [esi + 0xe80]
call fcn.00424420
test bl, bl
je 0x4e4a8c
push 5
lea ecx, [esi + 0xc10]
call fcn.005f5caa
jmp 0x4e4a8c
mov ecx, esi
call fcn.004e3ec0
jmp 0x4e4a8c
mov edi, dword [esi + 0x5ec]
mov ecx, esi
call fcn.005f9992
push esi
push 0x141c
push 0x111
push edi
jmp 0x4e4a86
cmp edi, ebx
jne 0x4e4f26
xor eax, eax
jmp 0x4e4a91
lea eax, [edi + 4]
mov dword [ebp - 0x2c], eax
mov byte [eax], bl
lea eax, [edi + 0x84]
mov dword [ebp - 0x14], eax
mov byte [eax], bl
mov ecx, dword [edi]
mov eax, ecx
lea ebx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4e4f40
sub eax, ebx
mov edx, dword [esi + 0xa30]
push eax
push edx
push ecx
call fcn.006255fd
add esp, 0xc
test eax, eax
je 0x4e4fa1
push 4
push str.www.
mov edx, dword [edi]
push edx
call fcn.006255fd
add esp, 0xc
test eax, eax
jne 0x4e4f1f
mov edx, dword [esi + 0xa30]
mov eax, edx
lea ebx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4e4f80
sub eax, ebx
push eax
push edx
mov eax, dword [edi]
add eax, 4
push eax
call fcn.006255fd
add esp, 0xc
test eax, eax
jne 0x4e4f1f
mov eax, dword [esi + 0xa3c]
push 0x80
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00405470
mov esi, dword [esi + 0xa40]
push 0x80
push esi
mov edx, dword [ebp - 0x14]
push edx
call fcn.00405470
add esp, 0x18
jmp 0x4e4a8c
push edi
lea ecx, [esi + 0x328]
call fcn.004012d0
jmp 0x4e4a8c
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [esi + 0x20]
push ecx
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
call ebx
mov eax, dword [esi + 0x1a24]
mov ecx, dword [esi + 0x1a28]
mov edi, eax
sub edi, ecx
push 2
cmp dword [ebp - 0x34], 0
je 0x4e50f3
push eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
sub edx, eax
push edx
mov ecx, dword [ebp - 0x20]
push ecx
push eax
push 0
mov ecx, esi
call fcn.005f5f3b
lea edx, [ebp - 0x24]
push edx
mov eax, dword [esi + 0x1a84]
push eax
call ebx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, esi
call fcn.005fdc97
add dword [ebp - 0x20], edi
add dword [ebp - 0x18], edi
push 1
lea edx, [ebp - 0x24]
push edx
lea ecx, [esi + 0x1a64]
call fcn.004243b0
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [esi + 0x1a38]
push ecx
call ebx
lea edx, [ebp - 0x24]
push edx
mov ecx, esi
call fcn.005fdc97
add dword [ebp - 0x20], edi
add dword [ebp - 0x18], edi
push 1
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x1a34]
call fcn.0040afd0
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [esi + 0x1a48]
push edx
call ebx
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.005fdc97
add dword [ebp - 0x20], edi
add dword [ebp - 0x18], edi
push 1
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [esi + 0x1a44]
call fcn.0040afd0
lea edx, [ebp - 0x24]
push edx
mov eax, dword [esi + 0x1a58]
push eax
call ebx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, esi
call fcn.005fdc97
add dword [ebp - 0x20], edi
add dword [ebp - 0x18], edi
push 1
lea edx, [ebp - 0x24]
push edx
lea ecx, [esi + 0x1a54]
call fcn.0040afd0
mov dword [esi + 0x1a2c], 1
jmp 0x4e4a8c
push ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
sub ecx, eax
push ecx
mov edx, dword [ebp - 0x20]
push edx
push eax
push 0
mov ecx, esi
call fcn.005f5f3b
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [esi + 0x1a84]
push ecx
call ebx
lea edx, [ebp - 0x24]
push edx
mov ecx, esi
call fcn.005fdc97
sub dword [ebp - 0x20], edi
sub dword [ebp - 0x18], edi
push 1
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x1a64]
call fcn.004243b0
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [esi + 0x1a38]
push edx
call ebx
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.005fdc97
sub dword [ebp - 0x20], edi
sub dword [ebp - 0x18], edi
push 1
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [esi + 0x1a34]
call fcn.0040afd0
lea edx, [ebp - 0x24]
push edx
mov eax, dword [esi + 0x1a48]
push eax
call ebx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, esi
call fcn.005fdc97
sub dword [ebp - 0x20], edi
sub dword [ebp - 0x18], edi
push 1
lea edx, [ebp - 0x24]
push edx
lea ecx, [esi + 0x1a44]
call fcn.0040afd0
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [esi + 0x1a58]
push ecx
call ebx
lea edx, [ebp - 0x24]
push edx
mov ecx, esi
call fcn.005fdc97
sub dword [ebp - 0x20], edi
sub dword [ebp - 0x18], edi
push 1
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x1a54]
call fcn.0040afd0
mov dword [esi + 0x1a2c], 0
jmp 0x4e4a8c
mov ecx, dword [edi + 0xc]
push ecx
mov edx, dword [edi + 8]
push edx
mov eax, dword [edi + 0x10]
cdq
push edx
push eax
mov eax, dword [edi]
push eax
mov ecx, esi
call fcn.004e2800
jmp 0x4e4a8c
mov ecx, esi
call fcn.004e3080
jmp 0x4e4a8c
cmp byte [esi + 0xa79], bl
je 0x4e5219
mov byte [esi + 0x1ab8], 1
lea ecx, [esi + 0x16a8]
call fcn.005344b0
lea ecx, [esi + 0x16a8]
call fcn.005346c0
lea ecx, [esi + 0x378]
call fcn.005376a0
lea ecx, [esi + 0x78]
call fcn.005453d0
lea ecx, [esi + 0x13a8]
call fcn.00539b60
jmp 0x4e4a8c
cmp byte [esi + 0x1ab8], bl
jne 0x4e52c9
cmp byte [esi + 0xa79], bl
jne 0x4e52d1
lea ecx, [esi + 0x9e4]
call fcn.004cdb70
lea ecx, [esi + 0x5f8]
call fcn.005ea340
mov eax, dword [esi + 0xea4]
cmp eax, ebx
je 0x4e5283
push eax
lea ecx, [esi + 0x1164]
call fcn.004546f0
mov dword [esi + 0xea4], ebx
mov byte [esi + 0xeb2], bl
mov byte [esi + 0xeb3], bl
mov byte [esi + 0x9f4], bl
mov eax, dword [esi + 0xea8]
cmp eax, ebx
je 0x4e52b1
push eax
lea ecx, [esi + 0x1164]
call fcn.004546f0
mov dword [esi + 0xea8], ebx
mov byte [esi + 0xeb1], bl
mov byte [esi + 0xeb4], bl
mov byte [esi + 0x9f5], bl
cmp byte [esi + 0xa79], bl
je 0x4e533d
mov dword [ebp + 0x190], ebx
mov dword [ebp + 0x198], ebx
xor ecx, ecx
mov word [ebp + 0x194], cx
mov byte [ebp - 4], 3
cmp dword [esi + 0xa1c], ebx
je 0x4e52fa
mov eax, dword [esi + 0xa1c]
jmp 0x4e5300
lea eax, [esi + 0xa20]
push ebx
push eax
push str._sgrprdb
lea ecx, [ebp + 0x190]
call fcn.004021a0
mov eax, dword [ebp + 0x190]
cmp eax, ebx
jne 0x4e5322
lea eax, [ebp + 0x194]
push eax
lea ecx, [esi + 0xb90]
call fcn.0053d300
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x190]
call fcn.00401210
cmp dword [esi + 0x1a20], 5
jne 0x4e534d
mov ecx, esi
call fcn.004e3500
mov edx, dword [esi + 0xae8]
push edx
push 0x142d
push 0x111
mov eax, dword [esi + 0xc30]
push eax
mov edi, dword [sym.imp.USER32.dll_PostMessageA]
call edi
mov eax, dword [esi + 0xad4]
mov ecx, dword [esi + 0xae8]
cmp eax, ecx
jl 0x4e537f
mov eax, ecx
push eax
push 0x142e
push 0x111
mov ecx, dword [esi + 0xc30]
push ecx
call edi
mov eax, dword [esi + 0x6a0]
push eax
push 0x1429
push 0x111
mov edx, dword [esi + 0xc30]
push edx
call edi
mov eax, dword [esi + 0xaec]
push eax
push 0x142a
push 0x111
mov ecx, dword [esi + 0xc30]
push ecx
call edi
mov edx, dword [esi + 0xad8]
push edx
push 0x142b
push 0x111
mov eax, dword [esi + 0xc30]
push eax
call edi
mov ecx, dword [esi + 0xadc]
push ecx
push 0x142c
push 0x111
mov edx, dword [esi + 0xc30]
push edx
call edi
jmp 0x4e4a8c
push edi
mov ecx, esi
call fcn.004e2280
push edi
call fcn.005f4e52
add esp, 4
jmp 0x4e4a8c
cmp byte [esi + 0xa7a], bl
je 0x4e547d
cmp edi, ebx
jl 0x4e4a8c
cmp edi, dword [esi + 0x6a0]
jge 0x4e4a8c
lea ecx, [ebp]
call fcn.004612c0
mov byte [ebp - 4], 4
lea ebx, [esi + 0x5f8]
push 0
lea eax, [ebp]
push eax
push edi
mov ecx, ebx
call fcn.005ea4c0
test al, al
je 0x4e546c
mov byte [ebp + 0x4c], 0
lea ecx, [ebp]
push ecx
push edi
mov ecx, ebx
call fcn.005e9310
dec dword [esi + 0xad0]
mov byte [ebp - 4], 0
lea ecx, [ebp]
call fcn.00461410
jmp 0x4e4a8c
inc dword [esi + 0xad4]
mov eax, dword [esi + 0xad4]
mov ecx, dword [esi + 0xae8]
cmp eax, ecx
jl 0x4e5495
mov eax, ecx
push eax
push 0x142e
push 0x111
mov edx, dword [esi + 0xc30]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
cmp edi, ebx
jl 0x4e55a2
cmp edi, dword [esi + 0x6a0]
jge 0x4e55a2
lea ecx, [ebp + 0xc8]
call fcn.004612c0
mov byte [ebp - 4], 5
lea ebx, [esi + 0x5f8]
push 0
lea eax, [ebp + 0xc8]
push eax
push edi
mov ecx, ebx
call fcn.005ea4c0
test al, al
je 0x4e554d
mov byte [ebp + 0x10b], 1
lea ecx, [ebp + 0xc8]
push ecx
push edi
mov ecx, ebx
call fcn.005e9310
mov edx, dword [ebp + 0x13c]
test edx, edx
mov eax, edx
jne 0x4e5513
lea eax, [ebp + 0x140]
lea ebx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4e5516
sub eax, ebx
sar eax, 1
je 0x4e553a
test edx, edx
mov eax, edx
jne 0x4e5533
lea eax, [ebp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [ebp + 0xc8]
push edx
push edi
lea ecx, [esi + 0x5f0]
call fcn.004d6580
lea ebx, [esi + 0x998]
xor eax, eax
cmp byte [esi + 0x88d], al
setne al
push eax
push edi
mov ecx, ebx
call fcn.005109d0
cmp byte [esi + 0x1aba], 0
jne 0x4e558a
mov byte [esi + 0x1aba], 1
push 0
push 0xbb8
push 2
mov ecx, dword [esi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, ebx
call fcn.005108b0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0xc8]
call fcn.00461410
xor ebx, ebx
push ebx
push ebx
push 0x1425
mov edx, dword [esi + 0xb50]
push edx
jmp 0x4e4a86
inc dword [esi + 0xadc]
mov eax, dword [esi + 0xadc]
push eax
push 0x142c
push 0x111
mov eax, dword [esi + 0xc30]
jmp 0x4e4a85
mov eax, dword [esi + 0xaf8]
cmp eax, ebx
jne 0x4e55e9
cmp dword [esi + 0xaf4], ebx
je 0x4e55f4
mov ebx, 1
mov byte [esi + 0xb04], bl
mov ecx, dword [esi + 0xaf4]
mov dword [esi + 0xafc], ecx
mov dword [esi + 0xb00], eax
lea edi, [esi + 0xb90]
mov ecx, edi
cmp byte [esi + 0x890], 0
je 0x4e561e
call fcn.00542ee0
jmp 0x4e5623
call fcn.0053d4d0
cmp dword [esi + 0xaf8], 0
je 0x4e5633
mov ecx, edi
call fcn.00542ee0
mov eax, ebx
jmp 0x4e4a91
cmp byte [esi + 0xb04], bl
je 0x4e4a8c
cmp byte [esi + 0x890], bl
jne 0x4e5672
cmp dword [esi + 0xafc], ebx
je 0x4e5672
lea ecx, [esi + 0xb90]
call fcn.0053b0e0
mov dword [esi + 0xafc], ebx
mov dword [esi + 0xb00], ebx
jmp 0x4e4a8c
lea ecx, [esi + 0xb90]
call fcn.0053b220
mov dword [esi + 0xafc], ebx
mov dword [esi + 0xb00], ebx
jmp 0x4e4a8c
cmp byte [esi + 0xa86], bl
je 0x4e4a8c
cmp byte [esi + 0x1abc], bl
je 0x4e56b4
push 3
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov byte [esi + 0x1abc], bl
cmp byte [esi + 0x890], bl
jne 0x4e56d4
cmp byte [esi + 0xa87], bl
je 0x4e56d4
lea ecx, [esi + 0xb90]
call fcn.0053b0e0
jmp 0x4e4a8c
lea ecx, [esi + 0xb90]
call fcn.0053b220
jmp 0x4e4a8c
push ebx
push ebx
push str.wParam__PAGE_COMPLETE
mov ecx, esi
call fcn.005f8939
jmp 0x4e4a8c
mov dword [ebp - 4], 0xffffffff
push edi
push eax
mov ecx, esi
call fcn.005faf78
jmp 0x4e4a91