Function at 0x48e9c0
Capabilities:
Get geographical location
Identify system language via api
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5685b1
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push ebx
push esi
push edi
mov eax, dword [0x5d6b80]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov ebx, dword [ebp + 8]
mov ecx, ebx
call fcn.0045abd0
mov esi, dword [ebp + 0xc]
mov ecx, esi
call fcn.0045abd0
mov ecx, dword [ebp + 0x10]
call fcn.0045abd0
push 1
mov ecx, edi
call fcn.004948e0
test eax, eax
jne 0x48ea34
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push str.browser.startup.homepage
lea ecx, [ebp - 0x10]
call fcn.0045a3a0
push ebx
lea eax, [ebp - 0x10]
mov dword [ebp - 4], 0
push eax
mov ecx, edi
mov dword [ebp - 0x24], 1
call fcn.00494750
test eax, eax
je 0x48ea6b
mov eax, dword [ebx]
mov byte [ebp - 0x19], 0
cmp dword [eax - 0xc], 0
jne 0x48ea6f
mov byte [ebp - 0x19], 1
mov edx, dword [ebp - 0x10]
or edi, 0xffffffff
add edx, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
xor ebx, ebx
mov eax, edi
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x48ea97
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x19], bl
je 0x48eaab
mov ecx, dword [ebp + 8]
push 0xa
push str.about:home
call fcn.0045b6e0
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], 0x11
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], 0xa
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x78], 0x3f400000
mov dword [ebp - 0x74], 0x3e800000
mov dword [ebp - 0x70], 0x40100000
mov dword [ebp - 0x6c], 0x26
mov dword [ebp - 0x68], ebx
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 4], 1
call fcn.00492a10
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x48eb10
push dword [eax*4 + 0x5d1ce8]
lea ecx, [ebp - 0x10]
call fcn.0045a3a0
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x10]
push esi
or ebx, 2
mov byte [ebp - 4], 2
push eax
mov dword [ebp - 0x24], ebx
call fcn.00494750
test eax, eax
je 0x48eb46
mov eax, dword [esi]
mov byte [ebp + 0xb], 1
cmp dword [eax - 0xc], 0
jne 0x48eb4a
mov byte [ebp + 0xb], 0
mov dword [ebp - 4], 1
test bl, 2
je 0x48eb75
mov edx, dword [ebp - 0x10]
and ebx, 0xfffffffd
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48eb75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp + 0xb], 0
je 0x48ebb2
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x38]
push eax
push dword [esi]
lea ecx, [ebp - 0x84]
call fcn.004e0110
test eax, eax
je 0x48ed44
mov ecx, dword [ebp + 0x10]
add eax, 4
push eax
call fcn.0045a580
mov esi, 1
jmp 0x48f5ca
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x48ed47
call fcn.0045adc0
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48ed66
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x34], edi
push dword [0x5d1ce8]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.0045a3a0
mov byte [ebp - 4], 4
call fcn.0045adc0
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48ed66
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
push str.browser.search.countryCode
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
call fcn.0045a3a0
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 6
or ebx, 4
push eax
mov dword [ebp - 0x24], ebx
call fcn.00494750
mov esi, dword [ebp - 0x30]
test eax, eax
je 0x48ec51
cmp dword [esi - 0xc], 0
mov byte [ebp + 0xb], 1
jne 0x48ec55
mov byte [ebp + 0xb], 0
mov dword [ebp - 4], 5
test bl, 4
je 0x48ec81
mov edx, dword [ebp - 0x18]
and ebx, 0xfffffffb
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48ec81
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp + 0xb], 0
je 0x48ece1
push 1
push 0x57ace8
lea ecx, [ebp - 0x14]
call fcn.00472540
push dword [esi - 0xc]
lea ecx, [ebp - 0x14]
push esi
call fcn.00472540
push dword [ebp + 0xc]
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x14]
push eax
call fcn.00494750
test eax, eax
je 0x48ece1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x48ece1
push dword [ebp + 0x10]
lea ecx, [ebp - 0x84]
push eax
call fcn.0045fe90
test al, al
jne 0x48ed70
cmp dword [ebp + 0x14], 0
jne 0x48ed70
lea edx, [esi - 0x10]
mov byte [ebp - 4], 4
or esi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48ed01
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov ecx, esi
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48ed21
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 1
or edi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48ed41
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 5
jb 0x48eb10
call fcn.0045adc0
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48edd5
push 0x80004005
call fcn.0045a8f0
add esi, 0xfffffff0
mov byte [ebp - 4], 4
or ebx, 0xffffffff
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48ed90
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov ecx, ebx
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48edb0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 1
lea eax, [edi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x48edcb
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, 1
jmp 0x48f5ca
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 8
push eax
push dword [0x5d66f0]
push dword [0x5d67ec]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00511e70
add esp, 0x10
test eax, eax
je 0x48f3bc
mov eax, dword [ebp - 0x20]
cmp dword [eax - 0xc], 0
je 0x48f3bc
mov dword [ebp - 0x10], 0
call fcn.0045adc0
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48ee50
push 0x80004005
call fcn.0045a8f0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov byte [ebp - 4], 9
call fcn.0045adc0
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48ee7d
push 0x80004005
call fcn.0045a8f0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 0x14], eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xa
push eax
push 0x580680
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x20]
call fcn.0045b960
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call fcn.0045a580
mov edx, dword [ebp - 0x2c]
mov ecx, edi
add edx, 0xfffffff0
mov byte [ebp - 4], 0xa
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48eed0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp + 8]
cmp dword [esi - 0xc], 0
je 0x48ef83
lea ecx, [ecx]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x54]
call fcn.0045c610
lea eax, [ebp - 0x10]
push eax
push 0x580680
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
call fcn.0045b960
mov ecx, dword [eax]
lea ebx, [esi - 0x10]
mov byte [ebp - 4], 0xc
lea edx, [ecx - 0x10]
cmp edx, ebx
je 0x48ef59
cmp dword [ebx + 0xc], 0
lea esi, [ebx + 0xc]
jl 0x48ef4a
mov eax, dword [edx]
cmp eax, dword [ebx]
jne 0x48ef4a
push edx
call fcn.0045a950
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x48ef42
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x2c]
lea esi, [eax + 0x10]
mov dword [ebp + 8], esi
jmp 0x48ef59
push dword [ecx - 0xc]
push ecx
lea ecx, [ebp + 8]
call fcn.0045b6e0
mov esi, dword [ebp + 8]
mov edx, dword [ebp - 0x24]
mov ecx, edi
add edx, 0xfffffff0
mov byte [ebp - 4], 0xa
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48ef79
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 0xc], 0
jne 0x48eee0
mov eax, dword [ebp - 0x50]
test eax, eax
jle 0x48efa4
lea ecx, [eax - 1]
test ecx, ecx
js 0x48efcd
cmp ecx, eax
jge 0x48efcd
mov eax, dword [ebp - 0x54]
lea eax, [eax + ecx*4]
push eax
lea ecx, [ebp + 0x14]
call fcn.0045a580
mov eax, dword [ebp + 0x14]
cmp dword [eax - 0xc], 0
je 0x48f37f
call fcn.0045adc0
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48efde
push 0x80004005
call fcn.0045a8f0
push 0
push 0
push 1
push 0xc000008c
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0xd
call fcn.0045adc0
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48f00b
push 0x80004005
call fcn.0045a8f0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
push dword [ebp + 0x14]
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0xe
push dword [0x5d67e8]
push eax
call fcn.0045acb0
mov ebx, dword [ebp - 0x38]
lea eax, [ebp - 0x10]
push eax
push str.XPITitle
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00511e70
mov edi, dword [ebp - 0x10]
add esp, 0x1c
test eax, eax
je 0x48f342
cmp dword [edi - 0xc], 0
je 0x48f342
call fcn.0045adc0
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48f079
push 0x80004005
call fcn.0045a8f0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xf
call fcn.0045adc0
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48f0a6
push 0x80004005
call fcn.0045a8f0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
push edi
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x10
push str.extensions._s.ffcurds
push eax
call fcn.0045acb0
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x30]
add esp, 0xc
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00494750
test eax, eax
je 0x48f149
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x30]
push eax
call fcn.0045a580
lea ecx, [ebp - 0x18]
call fcn.0045a530
lea ecx, [ebp + 0xc]
call fcn.0045a530
push edi
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x12
push str.extensions._s.searchURL
push eax
call fcn.0045acb0
mov ecx, dword [ebp - 0x28]
lea eax, [ebp + 0xc]
add esp, 0xc
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00494750
test eax, eax
je 0x48f12f
mov ecx, dword [ebp + 0x10]
lea eax, [ebp + 0xc]
push eax
call fcn.0045a580
lea ecx, [ebp + 0xc]
call fcn.0048ceb0
lea ecx, [ebp - 0x18]
call fcn.0048ceb0
mov esi, 1
jmp 0x48f2c8
lea ecx, [ebp - 0x18]
call fcn.0045a530
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x18]
push edx
mov byte [ebp - 4], 0x13
mov eax, dword [ecx]
call dword [eax + 4]
test eax, eax
je 0x48f32a
push dword [ebp - 0x18]
call fcn.005275fc
add esp, 4
cmp eax, 0x37
jl 0x48f32a
lea ecx, [ebp - 0x34]
call fcn.0045a530
push dword [ebp + 0x14]
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x14
push dword [0x5d67d4]
push 0x57e340
push eax
call fcn.0045acb0
mov ebx, dword [ebp - 0x34]
push 0
push 0
push str.ff_rt_ds
push ebx
push reloc.WS2_32.dll_accept
call fcn.0051fec0
add esp, 0x24
cmp eax, 1
jne 0x48f31f
lea ecx, [ebp - 0x14]
call fcn.0045a530
lea eax, [ebp + 0x14]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0xbc]
call fcn.005087f0
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x16
call fcn.00508920
push dword [0x5d628c]
lea ecx, [ebp - 0x2c]
call fcn.0045a3a0
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xbc]
call fcn.00519450
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
call fcn.0048ceb0
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
je 0x48f308
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x14]
push 1
push 0
push eax
call fcn.00494180
test eax, eax
je 0x48f308
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
push 0x2001f
push ebx
push reloc.WS2_32.dll_accept
lea ecx, [ebp - 0x48]
call fcn.0045b220
test eax, eax
jne 0x48f300
push 4
lea eax, [ebp + 0xc]
mov dword [ebp + 0xc], 2
push eax
push 4
push 0
push str.ff_rt_ds
push dword [ebp - 0x48]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov esi, eax
lea ecx, [ebp - 0x48]
neg esi
sbb esi, esi
inc esi
call fcn.0045a560
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x15
call fcn.00508860
lea ecx, [ebp - 0x14]
call fcn.0048ceb0
lea ecx, [ebp - 0x34]
call fcn.0048ceb0
lea ecx, [ebp - 0x18]
call fcn.0048ceb0
lea ecx, [ebp - 0x30]
call fcn.0048ceb0
lea ecx, [ebp - 0x24]
call fcn.0048ceb0
lea ecx, [ebp - 0x10]
call fcn.0048ceb0
lea ecx, [ebp - 0x38]
call fcn.0048ceb0
lea ecx, [ebp + 0x14]
call fcn.0048ceb0
lea ecx, [ebp + 8]
call fcn.0048ceb0
or edi, 0xffffffff
jmp 0x48f5a0
lea ecx, [ebp - 0x48]
call fcn.0045a560
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x15
call fcn.00508860
lea ecx, [ebp - 0x14]
call fcn.0048ceb0
lea ecx, [ebp - 0x34]
call fcn.0048ceb0
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x18]
call fcn.0048ceb0
lea ecx, [ebp - 0x30]
call fcn.0048ceb0
lea ecx, [ebp - 0x24]
call fcn.0048ceb0
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xd
or edi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48f362
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 0xa
mov ecx, edi
lea eax, [ebx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48f37f
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 0x14]
mov ecx, edi
add edx, 0xfffffff0
mov byte [ebp - 4], 9
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48f39f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 8
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48f3bc
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0045adc0
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48f3d8
push 0x80004005
call fcn.0045a8f0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp + 0xc]
mov ecx, ebx
push 6
push 0x57f7cc
mov byte [ebp - 4], 0x19
call fcn.0045b6e0
mov esi, dword [ebp - 0x28]
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 4]
test eax, eax
je 0x48f54e
push dword [ebp - 0x3c]
call fcn.005275fc
add esp, 4
cmp eax, 0x22
jl 0x48f54e
push 5
push str.Yahoo
mov ecx, ebx
call fcn.0045b6e0
call fcn.0045adc0
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48f44e
push 0x80004005
call fcn.0045a8f0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x1a
push eax
mov ecx, esi
call fcn.0048e520
mov esi, dword [ebp + 0xc]
test eax, eax
je 0x48f4f7
push 0x57bffc
push esi
call fcn.00526fc5
add esp, 8
test eax, eax
jne 0x48f4be
push 0x580bd0
mov ecx, ebx
call fcn.0045a5f0
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebx]
lea ecx, [ebp - 0x84]
call fcn.004e0110
test eax, eax
je 0x48f4f0
mov ecx, dword [ebp + 0x10]
add eax, 4
push eax
call fcn.0045a580
jmp 0x48f531
push 0x57bf14
push esi
call fcn.00526fc5
add esp, 8
test eax, eax
jne 0x48f531
push 0x57f7cc
mov ecx, ebx
call fcn.0045a5f0
push dword [ebp + 0x10]
lea ecx, [ebp - 0x84]
push dword [ebx]
call fcn.0045fe90
test al, al
jne 0x48f531
push str.Yahoo
jmp 0x48f52a
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
mov ecx, eax
and ecx, 0x3ff
cmp ecx, 0xc
je 0x48f519
cmp ecx, 0x19
jne 0x48f531
push 0x580bd0
jmp 0x48f52a
and eax, 0xfc00
cmp eax, 0xc00
je 0x48f531
push 0x57f7cc
mov ecx, ebx
call fcn.0045a5f0
add esi, 0xfffffff0
mov byte [ebp - 4], 0x19
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48f54e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 0x14]
push eax
push dword [ebx]
lea ecx, [ebp - 0x84]
call fcn.004e0110
test eax, eax
jne 0x48f56f
xor al, al
jmp 0x48f57d
mov ecx, dword [ebp + 0x10]
add eax, 4
push eax
call fcn.0045a580
mov al, 1
mov edx, dword [ebp - 0x3c]
mov ecx, edi
add edx, 0xfffffff0
movzx esi, al
mov byte [ebp - 4], 8
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48f5a0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 7
call fcn.004cdef0
mov ebx, dword [ebp - 0x20]
add ebx, 0xfffffff0
mov byte [ebp - 4], 1
lea eax, [ebx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x48f5ca
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
lea ecx, [ebp - 0x84]
call fcn.005211f0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10