Function at 0x404120
Capabilities:
Delete registry value
Set registry value

Disassembly:
push 0x20
mov eax, 0x40857f
call fcn.0040741f
push dword [ebp + 8]
xor esi, esi
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x18], esi
call fcn.00401ce9
mov dword [ebp - 4], esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004034b9
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00403db3
push esi
push str._nohome
lea ecx, [ebp - 0x1c]
call fcn.004034df
cmp eax, 0xffffffff
je 0x4041ab
call dword [sym.imp.TTUtilWidget.dll_unsigned_long_int___cdecl_Util::Module::IsTTDefaultBrowserEx_void_]
xor edi, edi
inc edi
cmp eax, edi
jne 0x4041ae
mov eax, dword [section.TT_Share]
cmp eax, esi
je 0x4041ae
push eax
push dword [ebp + 8]
call fcn.00402878
pop ecx
pop ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00403496
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00403496
mov eax, edi
call fcn.004074f7
ret
xor edi, edi
inc edi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00403496
push str._resetdef
lea ecx, [ebp - 0x20]
call fcn.00401ce9
mov byte [ebp - 4], 2
push dword [ebp - 0x14]
mov ecx, eax
call fcn.00402fab
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00403496
test bl, bl
je 0x4041f5
call dword [sym.imp.TTUtilWidget.dll_void___cdecl_Util::Module::UnInstallTT_void_]
jmp 0x404197
push str.TTChangeSkin
lea ecx, [ebp - 0x20]
call fcn.00401ce9
mov byte [ebp - 4], 3
push dword [ebp - 0x14]
mov ecx, eax
call fcn.00402fab
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00403496
test bl, bl
je 0x404237
push edi
push 8
call dword [sym.imp.TTUtilWidget.dll_void___cdecl_Util::Module::SetGlobalData_int__unsigned_long_int_]
pop ecx
jmp 0x404571
push str.OnlyRegister_1
lea ecx, [ebp - 0x20]
call fcn.00401ce9
mov byte [ebp - 4], 4
push dword [ebp - 0x14]
mov ecx, eax
call fcn.00402fab
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00403496
test bl, bl
je 0x404277
push edi
call dword [sym.imp.TTUtilWidget.dll_int___cdecl_Util::Module::SetTTAsDefaultInVistaAsAdminPri_int_]
pop ecx
jmp 0x404197
push str.OnlyRegister_0
lea ecx, [ebp - 0x20]
call fcn.00401ce9
mov byte [ebp - 4], 5
push dword [ebp - 0x14]
mov ecx, eax
call fcn.00402fab
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00403496
test bl, bl
je 0x4042ad
push esi
jmp 0x40426b
push str.Reg_TTData
lea ecx, [ebp - 0x20]
call fcn.00401ce9
mov byte [ebp - 4], 6
push dword [ebp - 0x14]
mov ecx, eax
call fcn.00402fab
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00403496
test bl, bl
je 0x404386
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 7
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.TTUtilWidget.dll_int___cdecl_Util::Module::GetBinPath_wchar_t___]
pop ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1c]
call fcn.00401ce9
mov byte [ebp - 4], 8
push 0x4098b4
lea ecx, [ebp - 0x1c]
call fcn.00401c6a
push edi
push dword [ebp - 0x1c]
call dword [sym.imp.TTUtilWidget.dll_struct_HINSTANCE______cdecl_Util::Module::TTLoadLibrary_wchar_t_const___int_]
cmp eax, esi
pop ecx
pop ecx
je 0x404346
push str.DllRegisterServer
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, esi
je 0x40433f
call eax
cmp eax, esi
jge 0x404368
push 0xd3
jmp 0x40434b
push 0xd7
jmp 0x40434b
push 0xdc
push str..TencentTraveler.cpp
push str.file:_s__line:_s
push 0x409638
push 0x1000
call dword [sym.imp.TTUtilWidget.dll_public:_static_void___cdecl_TTLogDef::TT_Log_enum_ENUM_LOG_SERVERITY__wchar_t_const___wchar_t_const__]
add esp, 0x14
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1c]
call fcn.00403496
mov byte [ebp - 4], 0
push dword [ebp - 0x20]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x404197
push 0x16
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x14]
call fcn.004037bf
mov ebx, eax
mov byte [ebp - 4], 9
push str.ModifyConfigPahtBegin_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], edi
call fcn.00401ce9
push 0xa
pop esi
mov dword [ebp - 4], esi
push ebx
push eax
mov dword [ebp - 0x18], 3
call fcn.00403519
test al, al
pop ecx
pop ecx
push 0xb
pop ebx
je 0x404410
push 0x14
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x14]
call fcn.00403767
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], ebx
push str._ModifyConfigPahtEnd
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x18], 7
call fcn.00401ce9
mov dword [ebp - 4], 0xc
push dword [ebp - 0x20]
mov dword [ebp - 0x18], 0xf
push eax
call fcn.00403519
test al, al
pop ecx
pop ecx
mov byte [ebp - 0xd], 1
jne 0x404414
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], ebx
test byte [ebp - 0x18], 8
je 0x404429
and dword [ebp - 0x18], 0xfffffff7
lea ecx, [ebp - 0x1c]
call fcn.00403496
mov dword [ebp - 4], esi
test byte [ebp - 0x18], 4
je 0x40443e
and dword [ebp - 0x18], 0xfffffffb
lea ecx, [ebp - 0x24]
call fcn.00403496
mov dword [ebp - 4], 9
test byte [ebp - 0x18], 2
je 0x404457
and dword [ebp - 0x18], 0xfffffffd
lea ecx, [ebp - 0x28]
call fcn.00403496
and dword [ebp - 4], 0
test byte [ebp - 0x18], 1
je 0x40446d
and dword [ebp - 0x18], 0xfffffffe
lea ecx, [ebp - 0x2c]
call fcn.00403496
cmp byte [ebp - 0xd], 0
je 0x4044ea
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 0xc]
add eax, 0xffffffea
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x14]
call fcn.00403767
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax - 0xc]
add eax, 0xffffffec
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004037bf
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x1c]
call fcn.00403e74
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2c]
call fcn.00403496
push 0x104
lea ecx, [ebp - 0x1c]
call fcn.00401914
push 0x208
push eax
push edi
push str.ConfigPath
push str.SoftwareTencentTTraveler
push SysReAllocStringLen
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
jmp 0x40418b
push str.Reset2DefaultConfigPath
lea ecx, [ebp - 0x2c]
call fcn.00401ce9
mov byte [ebp - 4], 0xf
push dword [ebp - 0x14]
mov ecx, eax
call fcn.00402fab
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00403496
test bl, bl
je 0x404537
push str.ConfigPath
push str.SoftwareTencentTTraveler
push SysReAllocStringLen
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
jmp 0x404197
push str._startbyinstall
lea ecx, [ebp - 0x2c]
call fcn.00401ce9
mov byte [ebp - 4], 0x10
push dword [ebp - 0x14]
mov ecx, eax
call fcn.00402fab
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00403496
test bl, bl
je 0x404574
push edi
call dword [sym.imp.TTUtilWidget.dll_void___cdecl_Util::Module::SetStartbyInstall_bool_]
pop ecx
jmp 0x4045dd
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x20]
call fcn.004034b9
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20]
call fcn.00403db3
push 4
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004037bf
mov byte [ebp - 4], 0x12
push str..tul
lea ecx, [ebp - 0x2c]
call fcn.00401ce9
mov byte [ebp - 4], 0x13
push dword [eax]
lea ecx, [ebp - 0x1c]
call fcn.00402fab
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2c]
call fcn.00403496
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1c]
call fcn.00403496
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00403496
xor edi, edi
jmp 0x404197