Function at 0x436430
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry value
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x1d0
mov ebx, dword [ebp + 8]
mov eax, dword [0x49503c]
xor eax, ebp
mov dword [esp + 0x1c8], eax
mov esi, 0x80070057
cmp ebx, 2
jl 0x4366d7
mov edi, dword [ebp + 0xc]
cmp dword [edi + 4], 0
je 0x4366d7
xor eax, eax
push eax
push eax
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x436578
mov dword [esp + 0x20], 0
mov byte [esp + 0x24], 0
push str.uninstall
push dword [edi + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x43657f
push str.unregister_task
push dword [edi + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x43660f
push str.debug_remote_disabled
push dword [edi + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x43662b
mov ecx, 0x48d7bf
mov edx, str.DisableDefaultBrowserAgent
call fcn.0042d550
mov esi, 0x800704ec
test al, al
jne 0x436676
push 0x48f7f0
push dword [edi + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x4366ef
push str.update_task
push dword [edi + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x436757
push str.do_task
push dword [edi + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x436929
push str.set_default_browser_user_choice
push dword [edi + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
mov esi, 0x80070057
cmp ebx, 3
jl 0x436676
test eax, eax
jne 0x436676
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x436676
call fcn.00430280
jmp 0x436627
mov esi, eax
jmp 0x4366d7
mov esi, 0x80070057
cmp ebx, 3
jl 0x436676
cmp dword [edi + 8], 0
je 0x436676
lea ecx, [esp + 0x20]
call fcn.00437750
lea esi, [esp + 0xa8]
push 0
push esi
call fcn.00401df0
add esp, 8
push dword [esi]
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x4365e8
xor esi, esi
lea eax, [esp + 0x80]
mov dword [eax], esi
push eax
push 0x20107
push esi
push str.SOFTWAREMozillaFirefoxDefault_Browser_Agent
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x4368d2
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xa8], 0
test eax, eax
je 0x436607
push eax
call fcn.0044fc0e
add esp, 4
mov ecx, dword [edi + 8]
xor edx, edx
inc edx
jmp 0x436622
mov esi, 0x80070057
cmp ebx, 3
jl 0x436676
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x436676
xor edx, edx
call fcn.0042fcf0
mov esi, eax
jmp 0x436676
call fcn.0042e2d0
movzx esi, al
mov eax, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
push str.default_browser_agent:_IsAgentRemoteDisabled:
push eax
call fcn.00406c20
add esp, 8
mov ecx, eax
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov esi, eax
mov eax, dword [eax]
mov ecx, dword [eax + 4]
add ecx, esi
push 0xa
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movsx eax, al
mov ecx, esi
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::put_char_]
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::flush_void_]
xor esi, esi
cmp byte [esp + 0x24], 0
mov edi, dword [esp + 0x20]
je 0x4366c2
test edi, edi
je 0x4366a9
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x4366c2
push 0xc7
push str.Release
push str.Failed_to_release_registry_mutex
call fcn.00429d90
add esp, 0xc
jmp 0x4366c2
push 0xc2
push str.Release
push str.Unexpectedly_missing_registry_mutex
call fcn.00429d90
add esp, 0xc
xor edi, edi
lea eax, [edi + 1]
cmp eax, 2
jb 0x4366d1
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [esp + 0x1c8]
xor ecx, ebp
call fcn.004503b0
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, 0x80070057
cmp ebx, 3
jl 0x436676
cmp dword [edi + 8], 0
je 0x436676
lea ecx, [esp + 0x20]
call fcn.00437750
lea esi, [esp + 0xa8]
mov ecx, esi
xor edx, edx
push 1
push str.Installed
call fcn.0042dd70
add esp, 8
mov eax, dword [esi]
test eax, eax
je 0x436748
push eax
push 0x81
push str.WriteInstallationRegistryEntry
push str.Failed_to_write_installation_registry_entry:__X
call fcn.00429d90
add esp, 0x10
mov ecx, dword [edi + 8]
xor edx, edx
call fcn.0042e8c0
jmp 0x436627
mov esi, 0x80070057
cmp ebx, 3
jl 0x436676
cmp dword [edi + 8], 0
je 0x436676
lea ecx, [esp + 0x20]
call fcn.00437750
lea esi, [esp + 0xa8]
xor ebx, ebx
mov ecx, esi
xor edx, edx
push 1
push str.Installed
call fcn.0042dd70
add esp, 8
mov eax, dword [esi]
test eax, eax
je 0x4367b2
push eax
push 0x81
push str.WriteInstallationRegistryEntry
push str.Failed_to_write_installation_registry_entry:__X
call fcn.00429d90
add esp, 0x10
mov edi, dword [edi + 8]
lea eax, [esp + 0x7c]
mov dword [eax], ebx
push eax
push 0x45d020
push 1
push ebx
push 0x45d030
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x436ab0
mov esi, dword [esp + 0x7c]
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
mov eax, dword [esi]
mov ecx, dword [eax + 0x28]
call dword [section..00cfg]
sub esp, 0x44
movaps xmm0, xmmword [esp + 0xc4]
movups xmmword [esp + 0x34], xmm0
movaps xmm0, xmmword [esp + 0xa4]
movups xmmword [esp + 0x24], xmm0
movaps xmm0, xmmword [esp + 0x94]
movups xmmword [esp + 0x14], xmm0
movaps xmm0, xmmword [esp + 0x84]
movups xmmword [esp + 4], xmm0
mov dword [esp], esi
call ecx
test eax, eax
js 0x436ac0
mov dword [esp + 8], edi
xor edi, edi
mov dword [esp + 0x3c], edi
push 0x4900e8
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0xc], eax
mov esi, dword [esp + 0x7c]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x3c], edi
test ebx, ebx
je 0x43687b
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
mov eax, dword [esi]
mov ecx, dword [eax + 0x1c]
call dword [section..00cfg]
lea eax, [esp + 0x3c]
push eax
mov edi, dword [esp + 0x10]
push edi
push esi
call ecx
test eax, eax
jns 0x436bd7
mov ecx, dword [esp + 8]
xor edx, edx
call fcn.0042e8c0
mov esi, eax
test edi, edi
je 0x4368b3
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [esp + 0x3c]
test edi, edi
je 0x436ad6
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
jmp 0x436ad6
mov ecx, dword [esp + 0x80]
lea eax, [esp + 0x60]
mov dword [eax], esi
sub esp, 0x30
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], esi
mov esi, ecx
xorps xmm0, xmm0
movups xmmword [esp + 4], xmm0
mov dword [esp], ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
je 0x436983
test esi, esi
je 0x4365e8
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4365e8
mov esi, 0x80070057
cmp ebx, 3
jl 0x436676
cmp dword [edi + 8], 0
je 0x436676
lea ecx, [esp + 0x20]
call fcn.00437750
mov esi, 0x80070020
test al, al
je 0x436676
lea esi, [esp + 0xa8]
mov ecx, esi
xor edx, edx
push str.AppLastRunTime
call fcn.0042def0
add esp, 4
cmp dword [esi + 0x10], 0
je 0x436af5
mov esi, 0x80041324
jmp 0x436676
mov ebx, dword [esp + 0x60]
inc ebx
mov dword [esp + 8], ebx
mov dword [esp + 0x60], ebx
xor eax, eax
dec eax
add ebx, ebx
cmovb ebx, eax
push ebx
call fcn.0044fc05
add esp, 4
mov edi, eax
push ebx
xor ebx, ebx
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x50]
mov ecx, dword [esp + 8]
mov dword [eax], ecx
sub esp, 0x20
xorps xmm0, xmm0
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov dword [esp + 8], 0
test eax, eax
jne 0x436a7d
mov dword [esp + 8], 0
mov dword [esp + 0xc], esi
mov esi, dword [esp + 0xa8]
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
push eax
push esi
push edi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x436a3d
inc ebx
push 0x7c
push edi
call sub.VCRUNTIME140.dll_wcschr
add esp, 8
test eax, eax
mov eax, dword [esp + 8]
movzx eax, al
mov ecx, 1
cmovne eax, ecx
mov dword [esp + 8], eax
mov esi, dword [esp + 0xc]
jmp 0x436a49
push edi
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x50], eax
sub esp, 0x20
xorps xmm0, xmm0
movups xmmword [esp + 0x10], xmm0
lea eax, [esp + 0x70]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
je 0x4369f6
test esi, esi
je 0x436a88
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test byte [esp + 8], 1
jne 0x436a9f
push str.SOFTWAREMozillaFirefoxDefault_Browser_Agent
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteTreeW]
push edi
call fcn.0044fc0e
add esp, 4
mov edi, dword [ebp + 0xc]
jmp 0x4365e8
mov esi, eax
mov ecx, eax
mov edx, str.UpdateTask
push 0xf9
jmp 0x436ace
mov esi, eax
mov ecx, eax
mov edx, str.UpdateTask
push 0xfb
call fcn.0042bc70
add esp, 4
mov edi, dword [esp + 0x7c]
test edi, edi
je 0x436676
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
jmp 0x436676
cmp byte [esp + 0xb0], 0
je 0x436979
mov edi, dword [esp + 0xa8]
mov ebx, dword [esp + 0xac]
lea esi, [esp + 0x80]
push esi
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov edx, dword [esi]
mov esi, dword [esi + 4]
mov ecx, edx
sub ecx, edi
mov eax, esi
sbb eax, ebx
cmp edi, edx
sbb ebx, esi
jae 0x436b4b
mov esi, 0x80041324
mov edx, 0xe92d7fff
cmp edx, ecx
mov ecx, 0x46b8
sbb ecx, eax
jb 0x436676
xor esi, esi
call fcn.0042e2d0
test al, al
jne 0x436676
xor ecx, ecx
lea eax, [esp + 0x50]
mov dword [eax], ecx
push eax
push str._n_vSN
push 3
mov dword [esp + 0x14], 0
push ecx
push 0x45d08c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x436c64
mov esi, dword [esp + 0x50]
mov eax, dword [esi]
mov ecx, dword [eax + 0xc]
call dword [section..00cfg]
lea eax, [esp + 0x40]
xor edx, edx
inc edx
push eax
push edx
push edx
push str.http
push esi
call ecx
test eax, eax
jns 0x437035
mov esi, eax
mov ecx, eax
mov edx, str.GetDefaultBrowser
push 0x56
call fcn.0042bc70
add esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
jmp 0x436c7f
lea esi, [esp + 0xa8]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], 0
sub esp, 0xc
mov al, byte [esp + 0x44]
mov byte [esp + 4], al
mov dword [esp + 8], 0x490c7a
mov dword [esp], 0x1e
mov ecx, esi
call fcn.00452270
push dword [esp + 8]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov edi, edx
sub edi, ecx
cmp edi, eax
jb 0x436e15
lea edi, [ecx + eax]
mov dword [esp + 0xb8], edi
cmp edx, 7
jbe 0x436c46
mov esi, dword [esp + 0xa8]
lea ecx, [esi + ecx*2]
add eax, eax
push eax
push dword [esp + 0xc]
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esi + edi*2], 0
jmp 0x436e3b
mov esi, eax
mov ecx, eax
mov edx, str.GetDefaultBrowser
push 0x4d
call fcn.0042bc70
add esp, 4
mov dword [esp + 0xc], 0
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x436c95
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
test esi, esi
jne 0x436676
mov eax, dword [esp + 8]
shl eax, 8
movzx ebx, byte [esp + 0xc]
or ebx, eax
lea esi, [esp + 0xa8]
mov ecx, esi
mov edx, ebx
call fcn.0042b6a0
mov edi, esi
mov esi, dword [esi + 4]
test esi, esi
jne 0x436676
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], ebx
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp + 8], eax
mov eax, dword [0x495640]
cmp eax, 0x9ffffff
ja 0x436d84
mov eax, dword [0x495064]
cmp eax, 0xa000001
jb 0x43764a
lea esi, [esp + 0xb4]
xor ebx, ebx
push 0x110
push ebx
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi - 0xc], 0x11c
mov dword [esi - 8], 0xa
mov dword [esi - 4], ebx
mov dword [esi + 0x108], ebx
sub esp, 0x10
movaps xmm0, xmmword [0x461880]
movups xmmword [esp], xmm0
mov esi, dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
call esi
mov ebx, 3
push ebx
push 1
push edx
push eax
call esi
push ebx
push 0x20
push edx
push eax
call esi
push ebx
push 0x10
push edx
push eax
call esi
push edx
push eax
push 0x33
push edi
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
test eax, eax
je 0x43763f
mov eax, 0xa000000
xchg dword [0x495640], eax
lea esi, [esp + 0xa8]
xor edx, edx
inc edx
mov ecx, esi
push str.InitialNotificationShown
call fcn.0042dbc0
add esp, 4
cmp dword [esi + 4], 0
jne 0x4376f7
movzx eax, word [esp + 0xa8]
cmp byte [esp + 0xa9], 0
je 0x436dc1
mov byte [esp + 0xa9], 0
test ah, ah
je 0x436fff
test al, al
je 0x436fff
lea esi, [esp + 0xa8]
xor edx, edx
inc edx
mov ecx, esi
push str.FollowupRequestTime
call fcn.0042def0
add esp, 4
cmp dword [esi + 0x10], 0
jne 0x43756f
cmp byte [esp + 0xb0], 0
je 0x43756f
mov ebx, dword [esp + 0xa8]
mov edi, dword [esp + 0xac]
jmp 0x437573
sub esp, 0x10
mov cl, byte [esp + 0x48]
mov byte [esp + 4], cl
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 8], ecx
mov dword [esp], eax
lea ecx, [esp + 0xb8]
call fcn.004520d0
cmp dword [esp + 0xbc], 7
jbe 0x436e4e
mov eax, dword [esp + 0xa8]
jmp 0x436e55
lea eax, [esp + 0xa8]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, eax
mov esi, dword [esp + 0x3c]
lea edi, [esp + 0x38]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x34]
call dword [section..00cfg]
push edi
push ebx
push esi
call ecx
test eax, eax
js 0x436f2a
mov esi, dword [esp + 0x38]
lea edi, [esp + 0x34]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x4c]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x436f39
mov esi, dword [esp + 0x34]
lea edi, [esp + 0x30]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x24]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x436f6d
mov esi, dword [esp + 0x30]
lea edi, [esp + 0x2c]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x20]
call dword [section..00cfg]
push edi
push 1
push esi
call ecx
test eax, eax
js 0x436f48
mov esi, dword [esp + 0x2c]
mov eax, dword [esi]
mov ecx, dword [eax + 0x38]
call dword [section..00cfg]
lea eax, [esp + 0x28]
push eax
push esi
call ecx
test eax, eax
js 0x436f48
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 8]
mov edx, edi
call fcn.0042e8c0
mov esi, eax
test edi, edi
je 0x436f55
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x436f55
mov ecx, dword [esp + 8]
xor edx, edx
call fcn.0042e8c0
mov esi, eax
jmp 0x436fa6
mov ecx, dword [esp + 8]
xor edx, edx
call fcn.0042e8c0
mov esi, eax
jmp 0x436f90
mov ecx, dword [esp + 8]
xor edx, edx
call fcn.0042e8c0
mov esi, eax
mov edi, dword [esp + 0x2c]
test edi, edi
je 0x436f7a
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
jmp 0x436f7a
mov ecx, dword [esp + 8]
xor edx, edx
call fcn.0042e8c0
mov esi, eax
mov edi, dword [esp + 0x30]
test edi, edi
je 0x436f90
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
mov edi, dword [esp + 0x34]
test edi, edi
je 0x436fa6
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
mov edi, dword [esp + 0x38]
test edi, edi
je 0x436fbc
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
test ebx, ebx
je 0x436fc7
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [esp + 0xbc]
cmp ecx, 8
jb 0x436ff6
mov eax, dword [esp + 0xa8]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x437722
push edx
push eax
call fcn.0044fbc2
add esp, 8
mov edi, dword [esp + 0xc]
jmp 0x4368a8
cmp dword [esp + 0x80], 4
jne 0x43764a
cmp dword [esp + 0x84], 1
jne 0x43764a
lea ecx, [esp + 0xa8]
xor edx, edx
push dword [esp + 8]
call fcn.0042bd30
add esp, 4
jmp 0x43766b
mov edi, 7
lea esi, [esp + 0xfc]
mov dword [esi - 0x40], edi
mov dword [esi - 0x44], edi
movsd xmm0, qword [0x48e9e0]
movsd qword [esi - 0x54], xmm0
movsd xmm0, qword [0x48e9e6]
movsd qword [esi - 0x4e], xmm0
xor ebx, ebx
mov word [esi - 0x46], bx
mov dword [esi - 0x3c], 1
mov eax, 6
mov dword [esi - 0x28], eax
movaps xmm0, xmmword [0x4618c0]
movups xmmword [esi - 0x24], xmm0
movsd xmm0, qword [str.Chrome]
movsd qword [esi - 0x38], xmm0
mov eax, dword [0x48fa3a]
mov dword [esi - 0x30], eax
mov word [esi - 0x2c], bx
mov dword [esi - 8], edi
mov eax, 4
mov dword [esi - 0xc], eax
mov word [esi - 0x14], bx
mov eax, 3
mov dword [esi - 4], eax
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], 0
mov word [esi], bx
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
sub esp, 0xc
mov al, byte [esp + 0x8c]
mov byte [esp + 4], al
mov dword [esp + 8], str.MSEdgeHTM
mov dword [esp], 9
mov ecx, esi
call fcn.00452270
mov eax, 4
mov dword [esi + 0x18], eax
mov dword [esi + 0x30], edi
mov eax, 3
mov dword [esi + 0x2c], eax
mov eax, dword [0x490b30]
mov dword [esi + 0x1c], eax
movzx eax, word [0x490b34]
mov word [esi + 0x20], ax
mov word [esi + 0x22], bx
mov eax, 5
mov dword [esi + 0x34], eax
mov dword [esi + 0x4c], edi
mov dword [esi + 0x48], eax
movzx ecx, word [0x4900e4]
mov word [esi + 0x40], cx
movsd xmm0, qword [0x4900dc]
movsd qword [esi + 0x38], xmm0
mov word [esi + 0x42], bx
mov ecx, 6
mov dword [esi + 0x50], ecx
mov dword [esi + 0x68], edi
mov dword [esi + 0x64], eax
movzx eax, word [0x48f9c2]
mov word [esi + 0x5c], ax
movsd xmm0, qword [str.Brave]
movsd qword [esi + 0x54], xmm0
mov word [esi + 0x5e], bx
mov dword [esi + 0x6c], edi
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
push 0x24
call fcn.0044fbd0
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x80], 0x3f800000
push 0x40
call fcn.0044fbd0
add esp, 4
mov esi, eax
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
cmp ecx, eax
je 0x4371e5
sub eax, ecx
mov edx, dword [ecx + ebx]
mov dword [esi + ebx], edx
add ebx, 4
cmp eax, ebx
jne 0x4371d6
mov eax, ecx
test eax, eax
je 0x43721a
mov ecx, dword [esp + 0x94]
sub ecx, eax
cmp ecx, 0x1000
jb 0x437210
mov edx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, edx
cmp eax, 0x20
jae 0x43773d
add ecx, 0x23
mov eax, edx
push ecx
push eax
call fcn.0044fbc2
add esp, 8
lea ebx, [esp + 0x8c]
mov dword [ebx], esi
mov dword [ebx + 4], esi
add esi, 0x40
mov dword [ebx + 8], esi
mov eax, dword [ebx - 8]
lea esi, [esp + 0x60]
mov dword [esi], eax
mov ecx, ebx
mov edx, 0x10
push esi
call fcn.00437df0
add esp, 4
mov dword [ebx + 0xc], 7
mov dword [ebx + 0x10], 8
mov dword [esp + 8], 0
mov eax, dword [esp + 0x84]
mov esi, dword [eax]
mov edi, dword [esi + 4]
push 0x24
call fcn.0044fbd0
add esp, 4
mov ebx, eax
test esi, esi
mov dword [esp + 0x1c], esi
mov eax, esi
cmove eax, ebx
mov dword [ebx], eax
mov dword [esp + 0x18], edi
cmove edi, ebx
mov dword [ebx + 4], edi
xor eax, eax
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 8]
cmp dword [esp + eax + 0xbc], 7
jbe 0x4372ad
mov eax, dword [esp + 8]
mov eax, dword [esp + eax + 0xa8]
jmp 0x4372b8
mov eax, dword [esp + 8]
add eax, esp
add eax, 0xa8
mov dword [esp + 0xc], eax
lea eax, [ebx + 8]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 8]
mov edi, dword [esp + eax + 0xb8]
cmp edi, 7
jbe 0x437319
mov esi, edi
or esi, 7
mov eax, SysReAllocString
cmp esi, eax
cmovae esi, eax
lea eax, [esi + esi]
cmp esi, 0x7ff
jae 0x4373a3
add eax, 2
push eax
call fcn.0044fbd0
add esp, 4
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
lea ecx, [edi + edi]
add ecx, 2
push ecx
push dword [esp + 0x10]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x43732c
mov eax, dword [esp + 0xc]
movups xmm0, xmmword [eax]
mov eax, dword [esp + 0x14]
movups xmmword [eax], xmm0
mov esi, 7
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x1c], esi
mov eax, dword [esp + 8]
mov eax, dword [esp + eax + 0xc0]
mov dword [ebx + 0x20], eax
mov eax, dword [esp + 0x88]
cmp eax, 0x71c71c6
je 0x437718
inc eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x1c]
mov dword [eax + 4], ebx
mov eax, dword [esp + 0x18]
mov dword [eax], ebx
mov eax, dword [esp + 0x84]
mov eax, dword [eax]
lea ecx, [esp + 0x80]
lea edx, [esp + 0x60]
push eax
add eax, 8
push eax
call fcn.00438040
add esp, 8
mov ecx, dword [esp + 8]
add ecx, 0x1c
mov eax, ecx
mov dword [esp + 8], ecx
cmp ecx, 0xc4
jne 0x43725b
jmp 0x4373cd
add eax, 0x25
cmp esi, 0x7fffffee
mov ecx, 0xffffffff
cmovae eax, ecx
push eax
call fcn.0044fbd0
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x4372fd
mov esi, 0xa8
mov ecx, dword [esp + esi + 0xbc]
cmp ecx, 8
jb 0x4373fd
mov eax, dword [esp + esi + 0xa8]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x437427
push edx
push eax
call fcn.0044fbc2
add esp, 8
mov dword [esp + esi + 0xb8], 0
mov dword [esp + esi + 0xbc], 7
mov word [esp + esi + 0xa8], 0
add esi, 0xffffffe4
cmp esi, 0xffffffe4
jne 0x4373d2
jmp 0x437443
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x43773d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x4373f3
mov esi, dword [esp + 0x84]
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
mov ebx, esi
mov ebx, dword [ebx]
cmp ebx, esi
je 0x437484
lea eax, [ebx + 8]
cmp dword [ebx + 0x1c], 8
jb 0x437463
mov eax, dword [eax]
push dword [ebx + 0x18]
push eax
push dword [esp + 0x18]
call edi
add esp, 0xc
test eax, eax
jne 0x437452
mov eax, dword [ebx + 0x20]
mov dword [esp + 0xc], eax
shr eax, 8
mov dword [esp + 8], eax
jmp 0x437494
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov ecx, dword [esp + 0x8c]
test ecx, ecx
je 0x4374e6
mov eax, dword [esp + 0x94]
sub eax, ecx
cmp eax, 0x1000
jb 0x4374c5
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x43773d
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x84]
mov esi, dword [eax]
mov dword [eax], eax
mov eax, dword [esp + 0x84]
mov dword [eax + 4], eax
mov dword [esp + 0x88], 0
cmp esi, dword [esp + 0x84]
je 0x437616
mov ebx, dword [esi]
mov ecx, dword [esi + 0x1c]
cmp ecx, 8
jb 0x437538
mov eax, dword [esi + 8]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x437553
push edx
push eax
call fcn.0044fbc2
add esp, 8
push 0x24
push esi
call fcn.0044fbc2
add esp, 8
mov esi, ebx
cmp ebx, dword [esp + 0x84]
jne 0x437513
jmp 0x437618
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x43773d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x43752e
xor ebx, ebx
xor edi, edi
lea esi, [esp + 0xa8]
xor edx, edx
inc edx
mov ecx, esi
push str.FollowupNotificationShown
call fcn.0042dbc0
add esp, 4
cmp dword [esi + 4], 0
jne 0x437702
movzx eax, word [esp + 0xa8]
cmp byte [esp + 0xa9], 0
je 0x4375b0
mov byte [esp + 0xa9], 0
test ah, ah
setne cl
test al, al
setne al
mov edx, ebx
or edx, edi
je 0x437609
and cl, al
jne 0x437609
lea esi, [esp + 0xa8]
xor edx, edx
inc edx
mov ecx, esi
push str.FollowupNotificationSuppressed
call fcn.0042dbc0
add esp, 4
cmp dword [esi + 4], 0
jne 0x43770d
movzx eax, word [esp + 0xa8]
cmp byte [esp + 0xa9], 0
je 0x437601
mov byte [esp + 0xa9], 0
test ah, ah
je 0x437683
test al, al
je 0x437683
mov dword [esp + 0xa8], 1
jmp 0x437655
mov ebx, esi
push 0x24
push ebx
call fcn.0044fbc2
add esp, 8
xor esi, esi
cmp dword [esp + 0x10], 0
je 0x436c7f
push dword [esp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x436c7f
mov eax, 0xa000000
xchg dword [0x495064], eax
mov dword [esp + 0xa8], 0
mov dword [esp + 0xb0], 7
mov dword [esp + 0xac], 0
lea ecx, [esp + 0x80]
lea edx, [esp + 0xa8]
call fcn.00431660
jmp 0x436627
push esi
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov edx, dword [esp + 0xa8]
mov esi, dword [esp + 0xac]
mov ecx, edx
sub ecx, ebx
mov eax, esi
sbb eax, edi
cmp ebx, edx
sbb edi, esi
jae 0x437609
shrd ecx, eax, 0xe
shr eax, 0xe
cmp ecx, 0x1600a391
sbb eax, 0
jb 0x437609
cmp dword [esp + 0x80], 4
jne 0x4376d9
lea ecx, [esp + 0xa8]
xor edx, edx
inc edx
jmp 0x437024
lea ecx, [esp + 0xa8]
xor edx, edx
inc edx
push 1
push str.FollowupNotificationSuppressed
call fcn.0042dd70
add esp, 8
jmp 0x437609
mov ah, 1
xor ecx, ecx
mov al, cl
jmp 0x436dc1
mov ah, 1
xor ecx, ecx
mov al, cl
jmp 0x4375b0
mov ah, 1
xor ecx, ecx
mov al, cl
jmp 0x437601
push str.list_T__too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x43773d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x436fec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3