Function at 0x433a70
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry value
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x1d0
mov eax, dword [0x49803c]
mov edi, dword [ebp + 8]
mov esi, 0x80070057
xor eax, ebp
cmp edi, 2
mov dword [esp + 0x1c8], eax
jl 0x433d37
mov ebx, dword [ebp + 0xc]
cmp dword [ebx + 4], 0
je 0x433d37
xor eax, eax
push eax
push eax
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x433c7f
mov dword [esp + 0x20], 0
mov byte [esp + 0x24], 0
push str.uninstall
push dword [ebx + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x433bd6
push str.unregister_task
push dword [ebx + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x433bd6
push str.debug_remote_disabled
push dword [ebx + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x433c86
mov ecx, 0x49155f
mov edx, str.DisableDefaultBrowserAgent
call fcn.0042a7b0
mov esi, 0x800704ec
test al, al
jne 0x433cd1
push 0x4932a4
push dword [ebx + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x433d4f
push str.update_task
push dword [ebx + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
je 0x433db7
push str.do_task
push dword [ebx + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
cmp edi, 3
mov esi, 0x80070057
jl 0x433cd1
test eax, eax
jne 0x433cd1
cmp dword [ebx + 8], 0
je 0x433cd1
lea ecx, [esp + 0x20]
call fcn.00434d60
mov esi, 0x80070020
test al, al
je 0x433cd1
lea esi, [esp + 0xa8]
xor edx, edx
mov ecx, esi
push str.AppLastRunTime
call fcn.0042b1c0
add esp, 4
cmp dword [esi + 0x10], 0
je 0x4340e5
mov esi, 0x80041324
jmp 0x433cd1
mov esi, 0x80070057
cmp edi, 3
jl 0x433cd1
cmp dword [ebx + 8], 0
je 0x433cd1
push str.uninstall
push dword [ebx + 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
add esp, 8
test eax, eax
jne 0x433c73
lea ecx, [esp + 0x20]
call fcn.00434d60
lea esi, [esp + 0xa8]
push 0
push esi
call fcn.0041d900
add esp, 8
push dword [esi]
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x433c54
xor esi, esi
lea eax, [esp + 0x80]
mov dword [eax], esi
push eax
push 0x20107
push esi
push str.SOFTWAREMozillaFirefoxDefault_Browser_Agent
push SysReAllocString
call dword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
je 0x433f78
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xa8], 0
test eax, eax
je 0x433c73
push eax
call fcn.0045f40c
add esp, 4
mov ecx, dword [ebx + 8]
call fcn.0042d430
mov esi, eax
jmp 0x433cd1
mov esi, eax
jmp 0x433d37
call fcn.0042b5e0
movzx esi, al
mov eax, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
push str.default_browser_agent:_IsAgentRemoteDisabled:
push eax
call fcn.0042b700
add esp, 8
mov ecx, eax
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov esi, eax
mov eax, dword [eax]
mov ecx, dword [eax + 4]
add ecx, esi
push 0xa
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movsx eax, al
mov ecx, esi
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::put_char_]
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::flush_void_]
xor esi, esi
cmp byte [esp + 0x24], 0
mov edi, dword [esp + 0x20]
je 0x433d22
test edi, edi
je 0x433d09
push edi
call dword [sym.imp.kernel32.dll_ReleaseMutex]
test eax, eax
jne 0x433d02
push 0xc6
push str.Release
push str.Failed_to_release_registry_mutex
call fcn.00426ce0
add esp, 0xc
mov byte [esp + 0x24], 0
jmp 0x433d22
push 0xc1
push str.Release
push str.Unexpectedly_missing_registry_mutex
call fcn.00426ce0
add esp, 0xc
xor edi, edi
lea eax, [edi + 1]
cmp eax, 2
jb 0x433d31
push edi
call dword [sym.imp.kernel32.dll_CloseHandle]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [esp + 0x1c8]
xor ecx, ebp
call fcn.0045fb40
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, 0x80070057
cmp edi, 3
jl 0x433cd1
cmp dword [ebx + 8], 0
je 0x433cd1
lea ecx, [esp + 0x20]
call fcn.00434d60
lea esi, [esp + 0xa8]
xor edx, edx
mov ecx, esi
push 1
push str.Installed
call fcn.0042b020
add esp, 8
mov eax, dword [esi]
test eax, eax
je 0x433da8
push eax
push 0x80
push str.WriteInstallationRegistryEntry
push str.Failed_to_write_installation_registry_entry:__X
call fcn.00426ce0
add esp, 0x10
mov ecx, dword [ebx + 8]
xor edx, edx
call fcn.0042be70
jmp 0x433c7b
mov esi, 0x80070057
cmp edi, 3
jl 0x433cd1
cmp dword [ebx + 8], 0
je 0x433cd1
lea ecx, [esp + 0x20]
call fcn.00434d60
lea esi, [esp + 0xa8]
xor edi, edi
xor edx, edx
mov ecx, esi
push 1
push str.Installed
call fcn.0042b020
add esp, 8
mov eax, dword [esi]
test eax, eax
je 0x433e12
push eax
push 0x80
push str.WriteInstallationRegistryEntry
push str.Failed_to_write_installation_registry_entry:__X
call fcn.00426ce0
add esp, 0x10
mov ebx, dword [ebx + 8]
lea eax, [esp + 0x7c]
mov dword [eax], edi
push eax
push 0x461020
push 1
push edi
push 0x461030
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4340d2
mov esi, dword [esp + 0x7c]
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
mov eax, dword [esi]
mov ecx, dword [eax + 0x28]
call dword [section..00cfg]
sub esp, 0x44
movsd xmm0, qword [esp + 0xc4]
movsd xmm1, qword [esp + 0xcc]
movsd qword [esp + 0x3c], xmm1
movsd qword [esp + 0x34], xmm0
movsd xmm0, qword [esp + 0xa4]
movsd xmm1, qword [esp + 0xac]
movsd qword [esp + 0x2c], xmm1
movsd qword [esp + 0x24], xmm0
movsd xmm0, qword [esp + 0x94]
movsd xmm1, qword [esp + 0x9c]
movsd qword [esp + 0x1c], xmm1
movsd qword [esp + 0x14], xmm0
movsd xmm0, qword [esp + 0x84]
movsd xmm1, qword [esp + 0x8c]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 4], xmm0
mov dword [esp], esi
call ecx
test eax, eax
js 0x4341bf
mov dword [esp + 4], ebx
xor ebx, ebx
mov dword [esp + 0x3c], ebx
push 0x4939f4
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0x3c], ebx
test edi, edi
je 0x433f1f
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
mov eax, dword [esi]
mov ecx, dword [eax + 0x1c]
call dword [section..00cfg]
lea eax, [esp + 0x3c]
push eax
mov edi, dword [esp + 0xc]
push edi
push esi
call ecx
mov ebx, dword [esp + 4]
test eax, eax
jns 0x4341f4
mov ecx, ebx
xor edx, edx
call fcn.0042be70
mov esi, eax
test edi, edi
je 0x433f59
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [esp + 0x3c]
test edi, edi
je 0x4341d5
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
jmp 0x4341d5
mov edi, dword [esp + 0x80]
lea eax, [esp + 0x60]
mov dword [eax], esi
push esi
push esi
push esi
push eax
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push edi
call dword [sym.imp.advapi32.dll_RegQueryInfoKeyW]
test eax, eax
je 0x433faf
test edi, edi
je 0x433c54
push edi
call dword [sym.imp.advapi32.dll_RegCloseKey]
jmp 0x433c54
mov ebx, dword [esp + 0x60]
inc ebx
xor eax, eax
mov ecx, ebx
dec eax
mov dword [esp + 0x60], ebx
add ecx, ebx
cmovb ecx, eax
mov dword [esp + 4], ecx
push ecx
call fcn.0045fd21
add esp, 4
mov esi, eax
xor eax, eax
push dword [esp + 4]
push eax
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x50]
xor ecx, ecx
mov dword [eax], ebx
push ecx
push ecx
push ecx
push ecx
mov ecx, 0
push eax
push esi
push ecx
push edi
call dword [sym.imp.advapi32.dll_RegEnumValueW]
test eax, eax
mov dword [esp + 8], 0
jne 0x43409f
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0xa8]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
push eax
push edi
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x43406b
mov ebx, dword [esp + 4]
inc ebx
push 0x7c
push esi
call sub.VCRUNTIME140.dll_wcschr
add esp, 8
test eax, eax
mov eax, dword [esp + 8]
mov edi, dword [esp + 0xc]
mov ecx, 1
movzx eax, al
cmovne eax, ecx
mov dword [esp + 8], eax
jmp 0x43407b
push esi
mov edi, dword [esp + 0x10]
push edi
call dword [sym.imp.advapi32.dll_RegDeleteValueW]
mov ebx, dword [esp + 4]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x50], eax
xor eax, eax
push eax
push eax
push eax
push eax
lea eax, [esp + 0x60]
push eax
push esi
mov dword [esp + 0x1c], ebx
push ebx
push edi
call dword [sym.imp.advapi32.dll_RegEnumValueW]
test eax, eax
je 0x434020
test edi, edi
je 0x4340aa
push edi
call dword [sym.imp.advapi32.dll_RegCloseKey]
test byte [esp + 8], 1
mov ebx, dword [ebp + 0xc]
jne 0x4340c4
push str.SOFTWAREMozillaFirefoxDefault_Browser_Agent
push SysReAllocString
call dword [sym.imp.advapi32.dll_RegDeleteTreeW]
push esi
call fcn.0045f40c
add esp, 4
jmp 0x433c54
mov esi, eax
mov ecx, eax
mov edx, str.UpdateTask
push 0xf8
jmp 0x4341cd
cmp byte [esp + 0xb0], 0
je 0x433bcc
mov ebx, dword [esp + 0xa8]
mov edi, dword [esp + 0xac]
lea esi, [esp + 0x80]
push esi
call dword [sym.imp.kernel32.dll_GetSystemTimeAsFileTime]
mov edx, dword [esi]
mov esi, dword [esi + 4]
mov ecx, edx
mov eax, esi
sub ecx, ebx
sbb eax, edi
cmp ebx, edx
sbb edi, esi
jae 0x43413b
mov edx, 0xe92d7fff
mov esi, 0x80041324
cmp edx, ecx
mov edx, 0x46b8
sbb edx, eax
jb 0x433cd1
xor esi, esi
call fcn.0042b5e0
test al, al
jne 0x433cd1
lea eax, [esp + 0x50]
xor ecx, ecx
mov dword [eax], ecx
push eax
push str._n_vSN
push 3
mov dword [esp + 0x10], 0
push ecx
push 0x46108c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x434293
mov esi, dword [esp + 0x50]
mov eax, dword [esi]
mov ecx, dword [eax + 0xc]
call dword [section..00cfg]
xor edx, edx
lea eax, [esp + 0x40]
inc edx
push eax
push edx
push edx
push str.http
push esi
call ecx
test eax, eax
jns 0x434657
mov esi, eax
mov ecx, eax
mov edx, str.GetDefaultBrowser
push 0x56
call fcn.00428eb0
add esp, 4
mov dword [esp + 4], 0
jmp 0x4342a6
mov esi, eax
mov ecx, eax
mov edx, str.UpdateTask
push 0xfa
call fcn.00428eb0
add esp, 4
mov edi, dword [esp + 0x7c]
test edi, edi
je 0x433cd1
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
jmp 0x433cd1
lea esi, [esp + 0xa8]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], 0
sub esp, 0xc
mov al, byte [esp + 0x44]
mov ecx, esi
mov byte [esp + 4], al
mov dword [esp + 8], 0x4944cc
mov dword [esp], 0x1e
call fcn.00424520
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 0x10]
mov edi, edx
sub edi, ecx
cmp edi, eax
jb 0x434541
lea edi, [ecx + eax]
cmp edx, 7
mov dword [esp + 0xb8], edi
jbe 0x434260
mov esi, dword [esp + 0xa8]
add eax, eax
lea ecx, [esi + ecx*2]
push eax
push dword [esp + 8]
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esi + edi*2], 0
cmp dword [esp + 0xbc], 7
jbe 0x434440
mov eax, dword [esp + 0xa8]
jmp 0x434447
mov esi, eax
mov ecx, eax
mov edx, str.GetDefaultBrowser
push 0x4d
call fcn.00428eb0
add esp, 4
mov edi, dword [esp + 0x50]
test edi, edi
je 0x4342bc
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
test esi, esi
jne 0x433cd1
mov edx, dword [esp + 4]
lea edi, [esp + 0xa8]
mov ecx, edi
call fcn.00428840
mov esi, dword [edi + 4]
test esi, esi
jne 0x433cd1
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp + 4], eax
mov eax, dword [0x498650]
cmp eax, 0x9ffffff
ja 0x4343a7
mov eax, dword [0x498070]
cmp eax, 0xa000001
jb 0x434b64
lea esi, [esp + 0xb4]
xor ebx, ebx
push 0x110
push ebx
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi - 0xc], 0x11c
mov dword [esi - 8], 0xa
mov dword [esi - 4], ebx
mov dword [esi + 0x108], ebx
mov esi, dword [sym.imp.kernel32.dll_VerSetConditionMask]
mov eax, 3
push eax
push 2
push ebx
push ebx
call esi
mov ecx, 3
push ecx
push 1
push edx
push eax
call esi
mov ecx, 3
push ecx
mov ebx, 3
push 0x20
push edx
push eax
call esi
push ebx
push 0x10
push edx
push eax
call esi
push edx
push eax
push 0x33
push edi
call dword [sym.imp.kernel32.dll_VerifyVersionInfoW]
test eax, eax
je 0x434b59
mov eax, 0xa000000
xchg dword [0x498650], eax
xor edx, edx
lea esi, [esp + 0xa8]
inc edx
mov ecx, esi
push str.InitialNotificationShown
call fcn.0042ae50
add esp, 4
cmp dword [esi + 4], 0
jne 0x434d13
movzx eax, word [esp + 0xa8]
cmp byte [esp + 0xa9], 0
je 0x4343e4
mov byte [esp + 0xa9], 0
test ah, ah
je 0x434621
test al, al
je 0x434621
xor edx, edx
lea esi, [esp + 0xa8]
inc edx
mov ecx, esi
push str.FollowupRequestTime
call fcn.0042b1c0
add esp, 4
cmp dword [esi + 0x10], 0
jne 0x434aaa
cmp byte [esp + 0xb0], 0
je 0x434aaa
mov edi, dword [esp + 0xa8]
mov ebx, dword [esp + 0xac]
mov byte [esp + 0xb0], 0
jmp 0x434aae
lea eax, [esp + 0xa8]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x3c]
lea edi, [esp + 0x38]
mov ebx, eax
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x34]
call dword [section..00cfg]
push edi
push ebx
push esi
call ecx
test eax, eax
js 0x434520
mov esi, dword [esp + 0x38]
lea edi, [esp + 0x34]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x4c]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x434532
mov esi, dword [esp + 0x34]
lea edi, [esp + 0x30]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x24]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x434591
mov esi, dword [esp + 0x30]
lea edi, [esp + 0x2c]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x20]
call dword [section..00cfg]
push edi
push 1
push esi
call ecx
test eax, eax
js 0x43456c
mov esi, dword [esp + 0x2c]
mov eax, dword [esi]
mov ecx, dword [eax + 0x38]
call dword [section..00cfg]
lea eax, [esp + 0x28]
push eax
push esi
call ecx
test eax, eax
js 0x43456c
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 4]
mov edx, edi
call fcn.0042be70
mov esi, eax
test edi, edi
je 0x434579
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x434579
mov ecx, dword [esp + 4]
xor edx, edx
call fcn.0042be70
mov esi, eax
jmp 0x4345ca
mov ecx, dword [esp + 4]
xor edx, edx
call fcn.0042be70
mov esi, eax
jmp 0x4345b4
sub esp, 0x10
mov cl, byte [esp + 0x48]
mov byte [esp + 4], cl
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 8], ecx
lea ecx, [esp + 0xb8]
call fcn.00423e40
jmp 0x434279
mov ecx, dword [esp + 4]
xor edx, edx
call fcn.0042be70
mov esi, eax
mov edi, dword [esp + 0x2c]
test edi, edi
je 0x43459e
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
jmp 0x43459e
mov ecx, dword [esp + 4]
xor edx, edx
call fcn.0042be70
mov esi, eax
mov edi, dword [esp + 0x30]
test edi, edi
je 0x4345b4
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
mov edi, dword [esp + 0x34]
test edi, edi
je 0x4345ca
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
mov edi, dword [esp + 0x38]
test edi, edi
je 0x4345e0
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
test ebx, ebx
je 0x4345eb
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [esp + 0xbc]
cmp ecx, 8
jb 0x434618
mov eax, dword [esp + 0xa8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x434d3e
push edx
push eax
call fcn.0045fd21
add esp, 8
mov edi, dword [esp + 8]
jmp 0x433f4e
cmp dword [esp + 0x80], 4
jne 0x434b64
cmp dword [esp + 0x84], 1
jne 0x434b64
lea ecx, [esp + 0xa8]
xor edx, edx
push dword [esp + 4]
call fcn.00428f70
add esp, 4
jmp 0x434b85
movsd xmm0, qword [0x49269e]
mov eax, 7
lea ebx, [esp + 0xfc]
xor esi, esi
mov edi, 7
mov dword [ebx - 0x40], eax
mov dword [ebx - 0x44], eax
mov eax, 6
movsd qword [ebx - 0x54], xmm0
movsd xmm0, qword [0x4926a4]
movsd qword [ebx - 0x4e], xmm0
mov word [ebx - 0x46], si
mov dword [ebx - 0x3c], 1
mov dword [ebx - 0x28], eax
mov eax, dword [0x4934b2]
movsd xmm0, qword [str.Chrome]
mov dword [ebx - 0x24], edi
mov dword [ebx - 0x30], eax
mov eax, 4
movsd qword [ebx - 0x38], xmm0
mov word [ebx - 0x2c], si
mov dword [ebx - 0x20], 2
mov dword [ebx - 8], edi
mov dword [ebx - 0xc], eax
mov eax, 3
mov dword [ebx - 0x18], 0x580070
mov dword [ebx - 0x1c], 0x700041
mov word [ebx - 0x14], si
mov dword [ebx - 4], eax
mov eax, dword [esp + 0x40]
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x10], 0
mov word [ebx], si
mov dword [esp + 0x10], eax
sub esp, 0xc
mov al, byte [esp + 0x6c]
mov ecx, ebx
mov byte [esp + 4], al
mov dword [esp + 8], str.MSEdgeHTM
mov dword [esp], 9
call fcn.00424520
mov eax, 4
movzx ecx, word [0x4939f0]
movsd xmm0, qword [0x4939e8]
mov edx, 6
mov dword [esp + 0x80], esi
mov dword [esp + 0x84], esi
mov dword [esp + 0x88], esi
mov dword [ebx + 0x18], eax
mov eax, 3
mov dword [ebx + 0x30], edi
mov dword [ebx + 0x2c], eax
mov eax, dword [0x494382]
mov dword [ebx + 0x1c], eax
movzx eax, word [0x494386]
mov word [ebx + 0x20], ax
mov eax, 5
mov word [ebx + 0x22], si
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x4c], edi
mov dword [ebx + 0x48], eax
movsd qword [ebx + 0x38], xmm0
mov word [ebx + 0x40], cx
mov word [ebx + 0x42], si
mov dword [ebx + 0x50], edx
mov dword [ebx + 0x64], eax
movzx eax, word [0x49343a]
movsd xmm0, qword [str.Brave]
mov dword [ebx + 0x68], edi
mov word [ebx + 0x5c], ax
movsd qword [ebx + 0x54], xmm0
mov word [ebx + 0x5e], si
mov dword [ebx + 0x6c], edi
push 0x24
call fcn.0045fd21
add esp, 4
mov dword [eax], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], esi
mov dword [eax + 4], eax
mov dword [esp + 0x80], 0x3f800000
push 0x40
call fcn.0045fd21
add esp, 4
mov edi, eax
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
cmp ecx, eax
je 0x43481b
sub eax, ecx
mov edx, dword [ecx + esi]
mov dword [edi + esi], edx
add esi, 4
cmp eax, esi
jne 0x434807
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x434850
mov ecx, dword [esp + 0x94]
sub ecx, eax
cmp ecx, 0x1000
jb 0x434846
mov edx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, edx
cmp eax, 0x20
jae 0x434d59
add ecx, 0x23
mov eax, edx
push ecx
push eax
call fcn.0045fd21
add esp, 8
lea ebx, [esp + 0x8c]
lea esi, [esp + 0x60]
mov edx, 0x10
mov dword [ebx], edi
mov dword [ebx + 4], edi
add edi, 0x40
mov ecx, ebx
mov dword [ebx + 8], edi
mov eax, dword [ebx - 8]
mov dword [esi], eax
push esi
call fcn.004353b0
add esp, 4
lea edi, [esp + 0xa8]
mov dword [ebx + 0xc], 7
mov dword [ebx + 0x10], 8
mov dword [esp + 0x14], 0xc4
mov eax, dword [esp + 0x84]
mov esi, dword [eax]
mov ebx, dword [esi + 4]
push 0x24
call fcn.0045fd21
add esp, 4
test esi, esi
mov edx, ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov ebx, edi
cmove esi, eax
cmove edx, eax
xor ecx, ecx
cmp dword [edi + 0x14], 7
mov dword [eax], esi
mov dword [eax + 4], edx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], ecx
mov ecx, dword [edi + 0x10]
jbe 0x4348da
mov ebx, dword [edi]
mov dword [esp + 0x1c], edi
mov edi, eax
mov dword [esp + 0x18], eax
add edi, 8
cmp ecx, 7
jbe 0x4349a1
mov esi, ecx
or ecx, 7
mov eax, SysReAllocString
cmp ecx, eax
cmovae ecx, eax
lea eax, [ecx + ecx]
cmp ecx, 0x7ff
mov dword [esp + 4], ecx
jae 0x4349c2
add eax, 2
push eax
call fcn.0045fd21
add esp, 4
mov dword [edi], eax
mov edi, esi
lea ecx, [esi + esi + 2]
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 4]
mov dword [esi + 0x18], edi
mov edi, dword [esp + 0x1c]
mov dword [esi + 0x1c], eax
mov eax, dword [edi + 0x18]
mov dword [esi + 0x20], eax
mov eax, dword [esp + 0x88]
cmp eax, 0x71c71c6
je 0x434d34
inc eax
lea ecx, [esp + 0x80]
lea edx, [esp + 0x60]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 8]
mov dword [eax + 4], esi
mov eax, dword [esp + 0xc]
mov dword [eax], esi
mov eax, dword [esp + 0x84]
mov eax, dword [eax]
push eax
add eax, 8
push eax
call fcn.004355e0
add esp, 8
add edi, 0x1c
add dword [esp + 0x14], 0xffffffe4
jne 0x434898
jmp 0x4349ee
movsd xmm0, qword [ebx]
movsd xmm1, qword [ebx + 8]
mov dword [esp + 4], 7
movsd qword [edi + 8], xmm1
movsd qword [edi], xmm0
mov edi, ecx
jmp 0x434931
add eax, 0x25
cmp dword [esp + 4], 0x7fffffee
mov ecx, 0xffffffff
cmovae eax, ecx
push eax
call fcn.0045fd21
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x43491e
mov esi, 0xc4
mov ecx, dword [esp + esi + 0xa0]
cmp ecx, 8
jb 0x434a1c
mov eax, dword [esp + esi + 0x8c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x434a43
push edx
push eax
call fcn.0045fd21
add esp, 8
mov dword [esp + esi + 0x9c], 0
mov dword [esp + esi + 0xa0], 7
mov word [esp + esi + 0x8c], 0
add esi, 0xffffffe4
jne 0x4349f3
jmp 0x434a5f
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x434d59
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x434a12
mov edi, dword [esp + 0x84]
mov dword [esp + 4], 0
mov esi, dword [edi]
cmp esi, edi
je 0x434ba4
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
mov ecx, dword [esi + 0x18]
cmp dword [esi + 0x1c], 8
lea eax, [esi + 8]
jb 0x434a8c
mov eax, dword [eax]
push ecx
push eax
push dword [esp + 0x18]
call ebx
add esp, 0xc
test eax, eax
je 0x434b9d
mov esi, dword [esi]
cmp esi, edi
jne 0x434a7e
jmp 0x434ba4
xor edi, edi
xor ebx, ebx
xor edx, edx
lea esi, [esp + 0xa8]
inc edx
mov ecx, esi
push str.FollowupNotificationShown
call fcn.0042ae50
add esp, 4
cmp dword [esi + 4], 0
jne 0x434d1e
movzx eax, word [esp + 0xa8]
cmp byte [esp + 0xa9], 0
je 0x434aeb
mov byte [esp + 0xa9], 0
test ah, ah
mov edx, edi
setne cl
test al, al
setne al
or edx, ebx
je 0x434b4c
and cl, al
jne 0x434b4c
xor edx, edx
lea esi, [esp + 0xa8]
inc edx
mov ecx, esi
push str.FollowupNotificationSuppressed
call fcn.0042ae50
add esp, 4
cmp dword [esi + 4], 0
jne 0x434d29
movzx eax, word [esp + 0xa8]
cmp byte [esp + 0xa9], 0
je 0x434b3c
mov byte [esp + 0xa9], 0
test ah, ah
je 0x434c9f
test al, al
je 0x434c9f
mov dword [esp + 0xa8], 1
jmp 0x434b6f
mov eax, 0xa000000
xchg dword [0x498070], eax
mov dword [esp + 0xa8], 0
mov dword [esp + 0xb0], 7
mov dword [esp + 0xac], 0
lea ecx, [esp + 0x80]
lea edx, [esp + 0xa8]
call fcn.0042e520
jmp 0x433c7b
mov eax, dword [esi + 0x20]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x8c]
test ecx, ecx
je 0x434bf6
mov eax, dword [esp + 0x94]
sub eax, ecx
cmp eax, 0x1000
jb 0x434bd5
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x434d59
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0045fd21
add esp, 8
xor eax, eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x84]
mov esi, dword [eax]
mov dword [eax], eax
mov eax, dword [esp + 0x84]
mov dword [eax + 4], eax
mov dword [esp + 0x88], 0
cmp esi, dword [esp + 0x84]
je 0x434c76
mov ecx, dword [esi + 0x1c]
mov edi, dword [esi]
cmp ecx, 8
jb 0x434c42
mov eax, dword [esi + 8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x434c5a
push edx
push eax
call fcn.0045fd21
add esp, 8
push 0x24
push esi
call fcn.0045fd21
add esp, 8
cmp edi, dword [esp + 0x84]
mov esi, edi
jne 0x434c1f
jmp 0x434c78
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x434d59
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x434c38
mov edi, esi
push 0x24
push edi
call fcn.0045fd21
add esp, 8
xor esi, esi
cmp dword [esp + 0x10], 0
je 0x4342a6
push dword [esp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x4342a6
push esi
call dword [sym.imp.kernel32.dll_GetSystemTimeAsFileTime]
mov edx, dword [esp + 0xa8]
mov esi, dword [esp + 0xac]
mov ecx, edx
mov eax, esi
sub ecx, edi
sbb eax, ebx
cmp edi, edx
sbb ebx, esi
jae 0x434b4c
shrd ecx, eax, 0xe
shr eax, 0xe
cmp ecx, 0x1600a391
sbb eax, 0
jb 0x434b4c
cmp dword [esp + 0x80], 4
jne 0x434cf5
xor edx, edx
lea ecx, [esp + 0xa8]
inc edx
jmp 0x434646
xor edx, edx
lea ecx, [esp + 0xa8]
inc edx
push 1
push str.FollowupNotificationSuppressed
call fcn.0042b020
add esp, 8
jmp 0x434b4c
xor ecx, ecx
mov ah, 1
mov al, cl
jmp 0x4343e4
xor ecx, ecx
mov ah, 1
mov al, cl
jmp 0x434aeb
xor ecx, ecx
mov ah, 1
mov al, cl
jmp 0x434b3c
push str.list_T__too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x434d59
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x43460e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3