Function at 0x473c97
Capabilities:
Parse pe header

Disassembly:
push 0x3f4
mov eax, 0x6569b4
call fcn.005b47af
mov esi, ecx
mov dword [ebp - 0x178], esi
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x150], eax
call fcn.004733d2
lea ecx, [ebp - 0x148]
call fcn.004c20e0
mov dword [ebp - 4], ebx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x190], ebx
mov edi, str.SOFTWAREClientsStartMenuInternet
mov byte [ebp - 4], 1
push edi
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x9c], reloc.OLEAUT32.dll_SysReAllocString
call fcn.004078a3
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x198]
call fcn.00470c0e
push ebx
push 1
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00409de7
push edi
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x9c], VariantCopy
call fcn.004078a3
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x198]
call fcn.00470c0e
push ebx
push 1
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00409de7
mov edi, dword [ebp - 0x198]
mov dword [ebp - 0x17c], edi
cmp edi, dword [ebp - 0x194]
je 0x474bba
mov eax, dword [edi]
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x9c], eax
lea eax, [edi + 4]
push eax
call fcn.0040bd70
push 0xf003f
push ebx
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x148]
call fcn.004c42c3
test al, al
je 0x474b8d
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x148]
call fcn.004c2f9a
mov esi, dword [ebp - 0x1c8]
mov byte [ebp - 4], 5
cmp esi, dword [ebp - 0x1c4]
je 0x474b82
mov edi, dword [ebp - 0x178]
push esi
lea eax, [ebp - 0x5c]
push str.SOFTWAREClientsStartMenuInternet_
push eax
call fcn.0042ab6c
add esp, 0xc
push 0xf003f
push ebx
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 6
push eax
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x148]
call fcn.004c42de
test al, al
je 0x474b5e
xor eax, eax
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x10c], ebx
mov word [ebp - 0x11c], ax
cmp word [0x684590], ax
jne 0x473e48
mov eax, ebx
jmp 0x473e53
push 0x684590
call fcn.005ff18e
pop ecx
push eax
push 0x684590
lea ecx, [ebp - 0x11c]
call fcn.0040a315
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], ebx
mov word [ebp - 0x28], ax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x148]
call fcn.004c3b47
push eax
lea ecx, [ebp - 0xd4]
call fcn.0040bd4b
push ebx
push 1
lea ecx, [ebp - 0x104]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xb
call fcn.00409de7
cmp dword [ebp - 0xc4], 0
je 0x474b50
push esi
lea eax, [ebp - 0xbc]
push str.SOFTWAREClientsStartMenuInternet_
push eax
call fcn.0042ab6c
push str._shellopencommand
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc
push eax
call fcn.0040bca5
add esp, 0x18
lea ecx, [ebp - 0x5c]
push eax
call fcn.0040c133
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0xb
call fcn.00409de7
push 0xf003f
push ebx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x148]
call fcn.004c42de
test al, al
je 0x474b50
xor eax, eax
mov dword [ebp - 0xa8], 7
mov dword [ebp - 0xac], ebx
mov word [ebp - 0xbc], ax
cmp word [0x684590], ax
jne 0x473f70
mov eax, ebx
jmp 0x473f7b
push 0x684590
call fcn.005ff18e
pop ecx
push eax
push 0x684590
lea ecx, [ebp - 0xbc]
call fcn.0040a315
xor eax, eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x40], ax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x148]
call fcn.004c3b47
push eax
lea ecx, [ebp - 0xec]
call fcn.0040bd4b
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x11
call fcn.00409de7
mov dword [ebp - 0x10c], ebx
xor eax, eax
mov ebx, str.Internet_Explorer
mov dword [ebp - 0x108], 7
push ebx
mov word [ebp - 0x11c], ax
call fcn.005ff18e
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x11c]
call fcn.0040a315
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00424ae7
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x11
mov bl, al
call fcn.00409de7
test bl, bl
je 0x474297
push 5
lea eax, [ebp - 0x1d8]
mov ecx, edi
push eax
call fcn.00475f6d
push 0
push eax
call fcn.004566f6
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1d4]
mov bl, al
test ecx, ecx
je 0x474081
call fcn.00418cb4
test bl, bl
jne 0x474b40
lea eax, [ebp - 0xec]
mov ecx, edi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00476ff2
cmp dword [ebp - 0x18], 0
mov byte [ebp - 4], 0x13
jne 0x4741cf
push esi
lea eax, [ebp - 0x104]
push str.SOFTWAREClientsStartMenuInternet_
push eax
call fcn.0042ab6c
push str._shell_naomcommand
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x14
push eax
call fcn.0040bca5
add esp, 0x18
lea ecx, [ebp - 0x5c]
push eax
call fcn.0040c133
xor ebx, ebx
lea ecx, [ebp - 0x74]
push ebx
push 1
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x13
call fcn.00409de7
push 0xf003f
push ebx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x148]
call fcn.004c42de
test al, al
je 0x4741d1
xor eax, eax
mov dword [ebp - 0xa8], 7
push 0x684590
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xac], ebx
mov word [ebp - 0xbc], ax
call fcn.0040a2ee
push ebx
push ebx
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
call fcn.00409de7
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x148]
call fcn.004c3b47
push eax
lea ecx, [ebp - 0xec]
call fcn.0040c133
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x13
call fcn.00409de7
lea eax, [ebp - 0xec]
mov ecx, edi
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00476ff2
push eax
lea ecx, [ebp - 0x28]
call fcn.0040c133
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.00409de7
jmp 0x4741d1
xor ebx, ebx
push 0x23c
call fcn.005b430b
pop ecx
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 0x17
test eax, eax
je 0x47422b
push str.Internet_Explorer
lea ecx, [ebp - 0x40]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x1a4]
or ebx, 1
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x18
push eax
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x150], ebx
call fcn.004a0ece
mov dword [ebp - 0x150], eax
jmp 0x474237
mov dword [ebp - 0x150], ebx
mov ebx, dword [ebp - 0x14c]
mov dword [ebp - 4], 0x13
test bl, 1
je 0x47425b
and ebx, 0xfffffffe
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
xor ebx, ebx
push ebx
push 1
call fcn.00409de7
jmp 0x47425d
xor ebx, ebx
push dword [ebp - 0x150]
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x19c], ebx
call fcn.00472262
lea eax, [ebp - 0x1a0]
mov byte [ebp - 4], 0x1a
push eax
mov ecx, edi
call fcn.00477010
mov ecx, dword [ebp - 0x19c]
jmp 0x474938
push 0x6922d4
lea ecx, [ebp - 0x28]
call fcn.004078a3
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00424ae7
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
mov bl, al
call fcn.00409de7
test bl, bl
je 0x4743dc
push 1
lea eax, [ebp - 0x1e0]
mov ecx, edi
push eax
call fcn.00475f6d
push 0
push eax
call fcn.004566f6
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1dc]
mov bl, al
test ecx, ecx
je 0x4742ff
call fcn.00418cb4
test bl, bl
jne 0x474b40
lea eax, [ebp - 0xec]
mov ecx, edi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00476ff2
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x80]
call fcn.00411307
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x1d
push eax
call fcn.00414df1
mov bl, al
mov byte [ebp - 4], 0x1c
pop ecx
neg bl
lea ecx, [ebp - 0x80]
sbb bl, bl
call fcn.0040c0b5
add bl, 1
je 0x474355
xor ebx, ebx
jmp 0x474941
push 0x25c
call fcn.005b430b
pop ecx
mov dword [ebp - 0x160], eax
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x474385
push esi
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0xd4]
push ecx
mov ecx, eax
call fcn.0047ca71
xor ebx, ebx
jmp 0x474389
xor ebx, ebx
mov eax, ebx
push eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x180], ebx
call fcn.0047219c
lea eax, [ebp - 0x184]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [edi + 0xc]
call fcn.004571a3
lea eax, [ebp - 0x184]
mov ecx, edi
push eax
push 1
push dword [edi]
lea eax, [ebp - 0x15c]
push eax
call fcn.00472c58
mov ecx, dword [ebp - 0x180]
jmp 0x474938
push str.Mozilla_Firefox
lea ecx, [ebp - 0x28]
call fcn.004078a3
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00424ae7
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
mov bl, al
call fcn.00409de7
test bl, bl
je 0x4745d7
push 2
lea eax, [ebp - 0x1e8]
mov ecx, edi
push eax
call fcn.00475f6d
push 0
push eax
call fcn.004566f6
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1e4]
mov bl, al
test ecx, ecx
je 0x474444
call fcn.00418cb4
test bl, bl
jne 0x474b40
lea eax, [ebp - 0xec]
mov ecx, edi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00476ff2
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x80]
call fcn.00411307
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x22
push eax
call fcn.00414df1
mov bl, al
mov byte [ebp - 4], 0x21
pop ecx
neg bl
lea ecx, [ebp - 0x80]
sbb bl, bl
call fcn.0040c0b5
add bl, 1
jne 0x47434e
push 0x208
call fcn.005b430b
pop ecx
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 0x23
test eax, eax
je 0x4744f2
push str.Mozilla_Firefox
lea ecx, [ebp - 0x40]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x1a8]
or ebx, 2
push esi
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x24
push eax
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x150], ebx
call fcn.00494271
mov dword [ebp - 0x150], eax
jmp 0x4744ff
and dword [ebp - 0x150], 0
mov ebx, dword [ebp - 0x14c]
mov dword [ebp - 4], 0x21
test bl, 2
je 0x474523
and ebx, 0xfffffffd
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
xor ebx, ebx
push ebx
push 1
call fcn.00409de7
jmp 0x474525
xor ebx, ebx
push dword [ebp - 0x150]
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
call fcn.004721ff
push esi
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x26
push str.SOFTWAREClientsStartMenuInternet_
push eax
call fcn.0042ab6c
push str.Capabilities
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x27
push eax
call fcn.0040bca5
add esp, 0x18
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x40]
push eax
call fcn.0040bd4b
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x18c]
mov ecx, edi
push eax
call fcn.00473175
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x26
call fcn.00409de7
lea eax, [ebp - 0x18c]
mov ecx, edi
push eax
call fcn.00477010
mov ecx, dword [ebp - 0x188]
jmp 0x474938
push str.Opera
lea ecx, [ebp - 0x28]
call fcn.004078a3
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00424ae7
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
mov bl, al
call fcn.00409de7
test bl, bl
je 0x47474e
push 3
lea eax, [ebp - 0x1f0]
mov ecx, edi
push eax
call fcn.00475f6d
push 0
push eax
call fcn.004566f6
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1ec]
mov bl, al
test ecx, ecx
je 0x47463f
call fcn.00418cb4
test bl, bl
jne 0x474b40
lea eax, [ebp - 0xec]
mov ecx, edi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00476ff2
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0x80]
call fcn.00411307
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x2c
push eax
call fcn.00414df1
mov bl, al
mov byte [ebp - 4], 0x2b
pop ecx
neg bl
lea ecx, [ebp - 0x80]
sbb bl, bl
call fcn.0040c0b5
add bl, 1
jne 0x47434e
push 0x208
call fcn.005b430b
pop ecx
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 0x2d
test eax, eax
je 0x4746ed
push str.Opera
lea ecx, [ebp - 0x40]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x1ac]
or ebx, 4
push esi
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x2e
push eax
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x150], ebx
call fcn.004a824c
mov dword [ebp - 0x150], eax
jmp 0x4746fa
and dword [ebp - 0x150], 0
mov ebx, dword [ebp - 0x14c]
mov dword [ebp - 4], 0x2b
test bl, 4
je 0x47471e
and ebx, 0xfffffffb
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
xor ebx, ebx
push ebx
push 1
call fcn.00409de7
jmp 0x474720
xor ebx, ebx
push dword [ebp - 0x150]
lea ecx, [ebp - 0x158]
call fcn.0047208c
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x30
push eax
mov ecx, edi
call fcn.00477010
mov ecx, dword [ebp - 0x154]
jmp 0x474938
push str.Opera_Stable
lea ecx, [ebp - 0x28]
call fcn.004078a3
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00424ae7
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
mov bl, al
call fcn.00409de7
test bl, bl
je 0x474951
push 4
lea eax, [ebp - 0x1d0]
mov ecx, edi
push eax
call fcn.00475f6d
push 0
push eax
call fcn.004566f6
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1cc]
mov bl, al
test ecx, ecx
je 0x4747b6
call fcn.00418cb4
test bl, bl
jne 0x474b40
lea eax, [ebp - 0xec]
mov ecx, edi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00476ff2
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x80]
call fcn.00411307
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x33
push eax
call fcn.00414df1
mov bl, al
mov byte [ebp - 4], 0x32
pop ecx
neg bl
lea ecx, [ebp - 0x80]
sbb bl, bl
call fcn.0040c0b5
add bl, 1
jne 0x47434e
push 0x25c
call fcn.005b430b
pop ecx
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 0x34
test eax, eax
je 0x474864
push str.Opera_Stable
lea ecx, [ebp - 0x40]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x1b0]
or ebx, 8
push esi
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x35
push eax
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x150], ebx
call fcn.0047ca71
mov dword [ebp - 0x150], eax
jmp 0x474871
and dword [ebp - 0x150], 0
mov ebx, dword [ebp - 0x14c]
mov dword [ebp - 4], 0x32
test bl, 8
je 0x474895
and ebx, 0xfffffff7
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
xor ebx, ebx
push ebx
push 1
call fcn.00409de7
jmp 0x474897
xor ebx, ebx
push dword [ebp - 0x150]
lea ecx, [ebp - 0x1bc]
call fcn.0047201c
push esi
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x37
push str.SOFTWAREClientsStartMenuInternet_
push eax
call fcn.0042ab6c
push str.Capabilities
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x38
push eax
call fcn.0040bca5
add esp, 0x18
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x40]
push eax
call fcn.0040bd4b
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x1bc]
mov ecx, edi
push eax
call fcn.00473175
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x37
call fcn.00409de7
lea eax, [ebp - 0x1bc]
mov ecx, edi
push eax
call fcn.00477010
mov ecx, dword [ebp - 0x1b8]
test ecx, ecx
je 0x474941
call fcn.00418cb4
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.00409de7
jmp 0x474b42
push 0x692354
lea ecx, [ebp - 0x28]
call fcn.004078a3
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00424ae7
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
mov bl, al
call fcn.00409de7
test bl, bl
je 0x474b40
push 6
lea eax, [ebp - 0x16c]
mov ecx, edi
push eax
call fcn.00475f6d
push 0
push eax
call fcn.004566f6
pop ecx
pop ecx
mov ecx, dword [ebp - 0x168]
mov bl, al
test ecx, ecx
je 0x4749b9
call fcn.00418cb4
test bl, bl
jne 0x474b40
lea eax, [ebp - 0xec]
mov ecx, edi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00476ff2
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x80]
call fcn.00411307
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x3d
push eax
call fcn.00414df1
mov bl, al
mov byte [ebp - 4], 0x3c
pop ecx
neg bl
lea ecx, [ebp - 0x80]
sbb bl, bl
call fcn.0040c0b5
add bl, 1
jne 0x47434e
push 0x25c
call fcn.005b430b
pop ecx
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 4], 0x3e
test eax, eax
je 0x474a67
push 0x692354
lea ecx, [ebp - 0x40]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x1b4]
or ebx, 0x10
push esi
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x3f
push eax
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x150], ebx
call fcn.0047ca71
mov dword [ebp - 0x150], eax
jmp 0x474a74
and dword [ebp - 0x150], 0
mov ebx, dword [ebp - 0x14c]
mov dword [ebp - 4], 0x3c
test bl, 0x10
je 0x474a98
and ebx, 0xffffffef
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
xor ebx, ebx
push ebx
push 1
call fcn.00409de7
jmp 0x474a9a
xor ebx, ebx
push dword [ebp - 0x150]
lea ecx, [ebp - 0x174]
call fcn.0047201c
push esi
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x41
push str.SOFTWAREClientsStartMenuInternet_
push eax
call fcn.0042ab6c
push str.Capabilities
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x42
push eax
call fcn.0040bca5
add esp, 0x18
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x40]
push eax
call fcn.0040bd4b
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x174]
mov ecx, edi
push eax
call fcn.00473175
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x41
call fcn.00409de7
lea eax, [ebp - 0x174]
mov ecx, edi
push eax
call fcn.00477010
mov ecx, dword [ebp - 0x170]
jmp 0x474938
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0xec]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0xd4]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 5
call fcn.00409de7
add esi, 0x18
cmp esi, dword [ebp - 0x1c4]
jne 0x473de9
mov edi, dword [ebp - 0x17c]
lea ecx, [ebp - 0x1c8]
call fcn.00409ec4
push ebx
push 1
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00409de7
add edi, 0x1c
mov dword [ebp - 0x17c], edi
cmp edi, dword [ebp - 0x194]
jne 0x473d80
mov esi, dword [ebp - 0x178]
push 5
lea eax, [ebp - 0x164]
mov ecx, esi
push eax
call fcn.00475f6d
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0x45
push ebx
push eax
call fcn.00452c00
pop ecx
pop ecx
test al, al
je 0x474d0e
lea eax, [ebp - 0x74]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.004769dd
push str.Internet_Exploreriexplore.exe
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x46
push eax
call fcn.0040bca5
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x48
call fcn.00409de7
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411307
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x49
push eax
call fcn.00414df1
pop ecx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x48
mov bl, al
call fcn.0040c0b5
test bl, bl
je 0x474cfd
push 0x23c
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x4a
test edi, edi
je 0x474ca7
push str.Internet_Explorer
lea ecx, [ebp - 0x28]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea eax, [ebp - 0x40]
push eax
or ebx, 0x20
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x28]
mov dword [ebp - 0x14c], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x150], ebx
call fcn.004a0ece
mov edi, eax
jmp 0x474caf
mov ebx, dword [ebp - 0x14c]
xor edi, edi
mov dword [ebp - 4], 0x48
test bl, 0x20
je 0x474cd0
push 0
and ebx, 0xffffffdf
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
push edi
lea ecx, [ebp - 0x158]
call fcn.00472054
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x4d
push eax
mov ecx, esi
call fcn.00477010
mov ecx, dword [ebp - 0x154]
test ecx, ecx
je 0x474cfd
call fcn.00418cb4
xor ebx, ebx
mov byte [ebp - 4], 0x45
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
push 2
lea eax, [ebp - 0x16c]
mov ecx, esi
push eax
call fcn.00475f6d
push eax
lea ecx, [ebp - 0x164]
call fcn.00452f76
mov ecx, dword [ebp - 0x168]
test ecx, ecx
je 0x474d39
call fcn.00418cb4
lea eax, [ebp - 0x164]
push ebx
push eax
call fcn.00452c00
pop ecx
pop ecx
test al, al
je 0x47501f
lea eax, [ebp - 0x74]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.004769dd
mov edi, str.Mozilla_Firefox_firefox.exe
mov byte [ebp - 4], 0x4e
push edi
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0040bca5
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x50
call fcn.00409de7
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411307
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x51
push eax
call fcn.00414df1
pop ecx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x50
mov bl, al
call fcn.0040c0b5
test bl, bl
je 0x474e91
push 0x208
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x52
test edi, edi
je 0x474e37
push str.Mozilla_Firefox
lea ecx, [ebp - 0x28]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea ecx, [ebp - 0x40]
or ebx, 0x40
mov byte [ebp - 4], 0x53
push str.Mozilla_Firefox
mov dword [ebp - 0x150], ebx
call fcn.004078a3
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x5c]
or ebx, 0x80
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x150], ebx
call fcn.00494271
mov edi, eax
jmp 0x474e3f
mov ebx, dword [ebp - 0x14c]
xor edi, edi
test bl, bl
jns 0x474e5b
push 0
and ebx, 0xffffff7f
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
mov dword [ebp - 4], 0x50
test bl, 0x40
je 0x474e7c
push 0
and ebx, 0xffffffbf
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
push edi
lea ecx, [ebp - 0x158]
call fcn.00472038
mov byte [ebp - 4], 0x57
jmp 0x474ff1
lea eax, [ebp - 0x40]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.004769bd
push edi
push eax
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x58
push eax
call fcn.0040bca5
add esp, 0xc
lea ecx, [ebp - 0x5c]
push eax
call fcn.0040c133
push 0
push 1
lea ecx, [ebp - 0x104]
call fcn.00409de7
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x50
call fcn.00409de7
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411307
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x59
push eax
call fcn.00414df1
pop ecx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x50
mov bl, al
call fcn.0040c0b5
test bl, bl
je 0x47500e
push 0x208
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x5a
test edi, edi
je 0x474f92
push str.Mozilla_Firefox
lea ecx, [ebp - 0x28]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea ecx, [ebp - 0x40]
or ebx, 0x100
mov byte [ebp - 4], 0x5b
push str.Mozilla_Firefox
mov dword [ebp - 0x150], ebx
call fcn.004078a3
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x5c
push eax
lea eax, [ebp - 0x5c]
or ebx, 0x200
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x150], ebx
call fcn.00494271
mov edi, eax
jmp 0x474f9a
mov ebx, dword [ebp - 0x14c]
xor edi, edi
test ebx, 0x200
je 0x474fba
push 0
and ebx, 0xfffffdff
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
mov dword [ebp - 4], 0x50
test ebx, 0x100
je 0x474fe1
push 0
and ebx, 0xfffffeff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
push edi
lea ecx, [ebp - 0x158]
call fcn.00472038
mov byte [ebp - 4], 0x5f
lea eax, [ebp - 0x158]
mov ecx, esi
push eax
call fcn.00477010
mov ecx, dword [ebp - 0x154]
test ecx, ecx
je 0x47500e
call fcn.00418cb4
xor ebx, ebx
mov byte [ebp - 4], 0x45
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.00409de7
push 1
lea eax, [ebp - 0x16c]
mov ecx, esi
push eax
call fcn.00475f6d
push eax
lea ecx, [ebp - 0x164]
call fcn.00452f76
mov ecx, dword [ebp - 0x168]
test ecx, ecx
je 0x47504a
call fcn.00418cb4
lea eax, [ebp - 0x164]
push ebx
push eax
call fcn.00452c00
pop ecx
pop ecx
test al, al
je 0x4751f8
lea eax, [ebp - 0x74]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.004769dd
push str.GoogleChromeApplicationchrome.exe
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x60
push eax
call fcn.0040bca5
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x62
call fcn.00409de7
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411307
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x63
push eax
call fcn.00414df1
pop ecx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x62
mov bl, al
call fcn.0040c0b5
test bl, bl
je 0x4751e7
push 0x25c
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x64
test edi, edi
je 0x475150
push 0x6922d4
lea ecx, [ebp - 0xbc]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea ecx, [ebp - 0x28]
or ebx, 0x400
mov byte [ebp - 4], 0x65
push 0x6922d4
mov dword [ebp - 0x150], ebx
call fcn.004078a3
lea eax, [ebp - 0xbc]
mov dword [ebp - 4], 0x66
push eax
lea eax, [ebp - 0x40]
or ebx, 0x800
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x14c], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x150], ebx
call fcn.0047ca71
mov edi, eax
jmp 0x475158
mov ebx, dword [ebp - 0x14c]
xor edi, edi
test ebx, 0x800
je 0x475178
push 0
and ebx, 0xfffff7ff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
mov dword [ebp - 4], 0x62
test ebx, 0x400
je 0x4751a2
push 0
and ebx, 0xfffffbff
lea ecx, [ebp - 0xbc]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
push edi
lea ecx, [ebp - 0x174]
call fcn.0047201c
lea eax, [ebp - 0x174]
mov byte [ebp - 4], 0x69
push eax
push dword [esi]
lea eax, [ebp - 0x15c]
mov ecx, esi
push eax
call fcn.00476a1d
lea eax, [ebp - 0x174]
push eax
lea ecx, [esi + 0xc]
call fcn.004571a3
mov ecx, dword [ebp - 0x170]
test ecx, ecx
je 0x4751e7
call fcn.00418cb4
xor ebx, ebx
mov byte [ebp - 4], 0x45
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
push 3
lea eax, [ebp - 0x16c]
mov ecx, esi
push eax
call fcn.00475f6d
push eax
lea ecx, [ebp - 0x164]
call fcn.00452f76
mov ecx, dword [ebp - 0x168]
test ecx, ecx
je 0x475223
call fcn.00418cb4
lea eax, [ebp - 0x164]
push ebx
push eax
call fcn.00452c00
pop ecx
pop ecx
test al, al
je 0x475519
lea eax, [ebp - 0x74]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.004769dd
push str.Operaopera.exe
push eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x6a
push eax
call fcn.0040bca5
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x6c
call fcn.00409de7
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411307
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x6d
push eax
call fcn.00414df1
pop ecx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x6c
mov bl, al
call fcn.0040c0b5
test bl, bl
je 0x475387
push 0x208
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x6e
test edi, edi
je 0x475323
push str.Opera
lea ecx, [ebp - 0x28]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea ecx, [ebp - 0x40]
or ebx, 0x1000
mov byte [ebp - 4], 0x6f
push str.Opera
mov dword [ebp - 0x150], ebx
call fcn.004078a3
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x70
push eax
lea eax, [ebp - 0x5c]
or ebx, 0x2000
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x150], ebx
call fcn.004a824c
mov edi, eax
jmp 0x47532b
mov ebx, dword [ebp - 0x14c]
xor edi, edi
test ebx, 0x2000
je 0x47534b
push 0
and ebx, 0xffffdfff
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
mov dword [ebp - 4], 0x6c
test ebx, 0x1000
je 0x475372
push 0
and ebx, 0xffffefff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
push edi
lea ecx, [ebp - 0x158]
call fcn.0047208c
mov byte [ebp - 4], 0x73
jmp 0x4754eb
lea eax, [ebp - 0x40]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.004769bd
push str.Opera_x64opera.exe
push eax
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x74
push eax
call fcn.0040bca5
add esp, 0xc
lea ecx, [ebp - 0x5c]
push eax
call fcn.0040c133
push 0
push 1
lea ecx, [ebp - 0x104]
call fcn.00409de7
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x6c
call fcn.00409de7
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411307
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x75
push eax
call fcn.00414df1
pop ecx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x6c
mov bl, al
call fcn.0040c0b5
test bl, bl
je 0x475508
push 0x208
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x76
test edi, edi
je 0x47548c
push str.Opera
lea ecx, [ebp - 0x28]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea ecx, [ebp - 0x40]
or ebx, 0x4000
mov byte [ebp - 4], 0x77
push str.Opera
mov dword [ebp - 0x150], ebx
call fcn.004078a3
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x78
push eax
lea eax, [ebp - 0x5c]
or ebx, 0x8000
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x150], ebx
call fcn.004a824c
mov edi, eax
jmp 0x475494
mov ebx, dword [ebp - 0x14c]
xor edi, edi
test ebx, 0x8000
je 0x4754b4
push 0
and ebx, 0xffff7fff
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
mov dword [ebp - 4], 0x6c
test ebx, 0x4000
je 0x4754db
push 0
and ebx, 0xffffbfff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
push edi
lea ecx, [ebp - 0x158]
call fcn.0047208c
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x158]
mov ecx, esi
push eax
call fcn.00477010
mov ecx, dword [ebp - 0x154]
test ecx, ecx
je 0x475508
call fcn.00418cb4
xor ebx, ebx
mov byte [ebp - 4], 0x45
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.00409de7
push 4
lea eax, [ebp - 0x16c]
mov ecx, esi
push eax
call fcn.00475f6d
push eax
lea ecx, [ebp - 0x164]
call fcn.00452f76
mov ecx, dword [ebp - 0x168]
test ecx, ecx
je 0x475544
call fcn.00418cb4
lea eax, [ebp - 0x164]
push ebx
push eax
call fcn.00452c00
pop ecx
pop ecx
test al, al
je 0x475813
lea eax, [ebp - 0x74]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.004769dd
push str.Operalauncher.exe
push eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x7c
push eax
call fcn.0040bca5
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x7e
call fcn.00409de7
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411307
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x7f
push eax
call fcn.00414df1
pop ecx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x7e
mov bl, al
call fcn.0040c0b5
test bl, bl
je 0x4756b1
push 0x25c
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x80
test edi, edi
je 0x47564d
push str.Opera_Stable
lea ecx, [ebp - 0x28]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea ecx, [ebp - 0x40]
or ebx, 0x10000
mov byte [ebp - 4], 0x81
push str.Opera_Stable
mov dword [ebp - 0x150], ebx
call fcn.004078a3
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x82
push eax
lea eax, [ebp - 0xbc]
or ebx, 0x20000
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x150], ebx
call fcn.0047ca71
mov edi, eax
jmp 0x475655
mov ebx, dword [ebp - 0x14c]
xor edi, edi
test ebx, 0x20000
je 0x475675
push 0
and ebx, 0xfffdffff
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
mov dword [ebp - 4], 0x7e
test ebx, 0x10000
je 0x47569c
push 0
and ebx, 0xfffeffff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
push edi
lea ecx, [ebp - 0x158]
call fcn.0047201c
mov byte [ebp - 4], 0x85
jmp 0x4757e2
lea eax, [ebp - 0x40]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.00471ffc
push str.ProgramsOperalauncher.exe
push eax
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x86
push eax
call fcn.0040bca5
add esp, 0xc
lea ecx, [ebp - 0xbc]
push eax
call fcn.0040c133
push 0
push 1
lea ecx, [ebp - 0x104]
call fcn.00409de7
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x7e
call fcn.00409de7
push 0x25c
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x87
test edi, edi
je 0x475783
push str.Opera_Stable
lea ecx, [ebp - 0x28]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea ecx, [ebp - 0x40]
or ebx, 0x40000
mov byte [ebp - 4], 0x88
push str.Opera_Stable
mov dword [ebp - 0x150], ebx
call fcn.004078a3
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x89
push eax
lea eax, [ebp - 0xbc]
or ebx, 0x80000
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14c], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x150], ebx
call fcn.0047ca71
mov edi, eax
jmp 0x47578b
mov ebx, dword [ebp - 0x14c]
xor edi, edi
test ebx, 0x80000
je 0x4757ab
push 0
and ebx, 0xfff7ffff
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
mov dword [ebp - 4], 0x7e
test ebx, 0x40000
je 0x4757d2
push 0
and ebx, 0xfffbffff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
push edi
lea ecx, [ebp - 0x158]
call fcn.0047201c
mov byte [ebp - 4], 0x8c
lea eax, [ebp - 0x158]
mov ecx, esi
push eax
call fcn.00477010
mov ecx, dword [ebp - 0x154]
test ecx, ecx
je 0x4757ff
call fcn.00418cb4
xor ebx, ebx
mov byte [ebp - 4], 0x45
push ebx
push 1
lea ecx, [ebp - 0xbc]
call fcn.00409de7
push 6
lea eax, [ebp - 0x16c]
mov ecx, esi
push eax
call fcn.00475f6d
push eax
lea ecx, [ebp - 0x164]
call fcn.00452f76
mov ecx, dword [ebp - 0x168]
test ecx, ecx
je 0x47583e
call fcn.00418cb4
lea eax, [ebp - 0x164]
push ebx
push eax
call fcn.00452c00
pop ecx
pop ecx
test al, al
je 0x4759d4
lea eax, [ebp - 0x74]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.00471ffc
push str.YandexYandexBrowserApplication_browser.exe
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x8d
push eax
call fcn.0040bca5
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x8f
call fcn.00409de7
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411307
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x90
push eax
call fcn.00414df1
pop ecx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x8f
mov bl, al
call fcn.0040c0b5
test bl, bl
je 0x4759c3
push 0x25c
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x91
test edi, edi
je 0x475944
push 0x692354
lea ecx, [ebp - 0xbc]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea ecx, [ebp - 0x28]
or ebx, 0x100000
mov byte [ebp - 4], 0x92
push 0x692354
mov dword [ebp - 0x150], ebx
call fcn.004078a3
lea eax, [ebp - 0xbc]
mov dword [ebp - 4], 0x93
push eax
lea eax, [ebp - 0x40]
or ebx, 0x200000
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x14c], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x150], ebx
call fcn.0047ca71
mov edi, eax
jmp 0x47594c
mov ebx, dword [ebp - 0x14c]
xor edi, edi
test ebx, 0x200000
je 0x47596c
push 0
and ebx, 0xffdfffff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
mov dword [ebp - 4], 0x8f
test ebx, 0x100000
je 0x475996
push 0
and ebx, 0xffefffff
lea ecx, [ebp - 0xbc]
push 1
mov dword [ebp - 0x14c], ebx
call fcn.00409de7
push edi
lea ecx, [ebp - 0x158]
call fcn.0047201c
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x96
push eax
mov ecx, esi
call fcn.00477010
mov ecx, dword [ebp - 0x154]
test ecx, ecx
je 0x4759c3
call fcn.00418cb4
xor ebx, ebx
mov byte [ebp - 4], 0x45
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
call fcn.0040ff0c
cmp dword [eax + 4], 3
jl 0x475b7c
push 7
lea eax, [ebp - 0x16c]
mov ecx, esi
push eax
call fcn.00475f6d
push ebx
push eax
call fcn.00452c00
pop ecx
pop ecx
mov ecx, dword [ebp - 0x168]
mov bl, al
test ecx, ecx
je 0x475a0d
call fcn.00418cb4
test bl, bl
je 0x475b7c
lea eax, [ebp - 0x74]
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.00470570
push str.SystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdge.exe
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x97
push eax
call fcn.0040bca5
add esp, 0xc
push 0
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x99
call fcn.00409de7
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411307
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x9a
push eax
call fcn.00414df1
pop ecx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x99
mov bl, al
call fcn.0040c0b5
test bl, bl
je 0x475b6c
push 0x208
call fcn.005b430b
mov edi, eax
pop ecx
mov dword [ebp - 0x15c], edi
mov byte [ebp - 4], 0x9b
test edi, edi
je 0x475aff
push str.Microsoft_Edge
lea ecx, [ebp - 0xbc]
call fcn.004078a3
mov ebx, dword [ebp - 0x14c]
lea ecx, [ebp - 0x28]
or ebx, 0x400000
mov byte [ebp - 4], 0x9c
push str.Microsoft_Edge
mov dword [ebp - 0x150], ebx
call fcn.004078a3
lea eax, [ebp - 0xbc]
mov dword [ebp - 4], 0x9d
push eax
lea eax, [ebp - 0x40]
or ebx, 0x800000
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x150], ebx
push eax
mov ecx, edi
call fcn.004a61b1
mov edi, eax
jmp 0x475b07
mov ebx, dword [ebp - 0x14c]
xor edi, edi
test ebx, 0x800000
je 0x475b21
push 0
push 1
lea ecx, [ebp - 0x28]
and ebx, 0xff7fffff
call fcn.00409de7
mov dword [ebp - 4], 0x99
test ebx, 0x400000
je 0x475b3f
push 0
push 1
lea ecx, [ebp - 0xbc]
call fcn.00409de7
push edi
lea ecx, [ebp - 0x158]
call fcn.00472070
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0xa0
push eax
mov ecx, esi
call fcn.00477010
mov ecx, dword [ebp - 0x154]
test ecx, ecx
je 0x475b6c
call fcn.00418cb4
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x45
call fcn.00409de7
push 1
push 3
lea ecx, [ebp - 0x2a0]
call fcn.004078ff
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 0xa1
push str.Created_browser_list
push eax
call fcn.0040710b
pop ecx
pop ecx
lea eax, [ebp - 0x2a0]
push eax
push str.BrowserList::create
push 0x2e4
push str.D:_build6c589d3ff8507062_src_browserBrowser.cpp
push 1
call fcn.0040b02b
mov ecx, eax
call fcn.0041875b
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x45
call fcn.0040843a
mov edi, dword [ebp - 0x178]
mov esi, dword [esi]
mov edi, dword [edi + 4]
jmp 0x475cc9
push esi
lea ecx, [ebp - 0x174]
call fcn.00456f52
push 1
push 3
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0xa2
call fcn.004078ff
mov ecx, dword [ebp - 0x174]
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 4], 0xa3
call fcn.004704cd
mov ebx, eax
mov ecx, dword [ebp - 0x174]
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0xa4
call fcn.0043f44d
push ebx
push str.__path:
push eax
lea eax, [ebp - 0x340]
mov byte [ebp - 4], 0xa5
push str.Browser:
push eax
call fcn.0040710b
pop ecx
pop ecx
push eax
call fcn.00410ade
pop ecx
pop ecx
push eax
call fcn.0040710b
pop ecx
pop ecx
push eax
call fcn.00410ade
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x74]
call fcn.00409de7
push 0
push 1
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xa3
call fcn.00409de7
lea eax, [ebp - 0x350]
push eax
push str.BrowserList::create
push 0x2e7
push str.D:_build6c589d3ff8507062_src_browserBrowser.cpp
push 1
call fcn.0040b02b
mov ecx, eax
call fcn.0041875b
lea ecx, [ebp - 0x350]
call fcn.0040843a
mov ecx, dword [ebp - 0x170]
mov byte [ebp - 4], 0x45
test ecx, ecx
je 0x475cc6
call fcn.00418cb4
add esi, 8
cmp esi, edi
jne 0x475be5
push 1
push 3
lea ecx, [ebp - 0x400]
call fcn.004078ff
mov ecx, dword [ebp - 0x178]
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0xa6
call fcn.00476680
push eax
lea eax, [ebp - 0x3f0]
mov byte [ebp - 4], 0xa7
push str.Default_browser:
push eax
call fcn.0040710b
pop ecx
pop ecx
push eax
call fcn.00410ade
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xa6
call fcn.00409de7
lea eax, [ebp - 0x400]
push eax
push str.BrowserList::create
push 0x2f3
push str.D:_build6c589d3ff8507062_src_browserBrowser.cpp
push 1
call fcn.0040b02b
mov ecx, eax
call fcn.0041875b
lea ecx, [ebp - 0x400]
call fcn.0040843a
mov ecx, dword [ebp - 0x160]
test ecx, ecx
je 0x475d61
call fcn.00418cb4
lea ecx, [ebp - 0x198]
call fcn.0046f766
lea ecx, [ebp - 0x148]
call fcn.004c211d
call fcn.005b4759
ret