Function at 0x449146
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x440
mov eax, 0x5bf452
call fcn.00598fca
mov eax, dword [ebp + 8]
or dword [ebp - 0x440], 0xffffffff
xor ebx, ebx
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x448], ecx
cmp eax, ebx
je 0x4498e1
cmp word [eax], bx
je 0x4498e1
push 0x7e
pop esi
xor eax, eax
push esi
mov word [ebp - 0x118], ax
lea eax, [ebp - 0x116]
push ebx
push eax
call fcn.00596530
lea eax, [ebp - 0x118]
add esp, 0xc
push eax
call fcn.00428b69
pop ecx
xor eax, eax
push esi
mov word [ebp - 0x98], ax
lea eax, [ebp - 0x96]
push ebx
push eax
call fcn.00596530
add esp, 0xc
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x44c]
push eax
push 0x5df64c
push str.Softwarehao123JuziBrowser
push 0x80000001
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x444], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov eax, dword [0x63696c]
mov esi, 0x63696c
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x408], eax
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x330], ebx
lea edi, [ebp - 0x32c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x330]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jne 0x4492a5
push 0x62
mov word [ebp - 0x3d8], ax
lea eax, [ebp - 0x3d6]
push ebx
push eax
call fcn.00596530
add esp, 0xc
push 0x32
lea eax, [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x330]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
lea eax, [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x408]
push eax
call fcn.00407af8
push 0x2d
lea eax, [ebp - 0x408]
push eax
call fcn.0042e721
push 0x7b
lea eax, [ebp - 0x408]
push eax
call fcn.0042e721
push 0x7d
lea eax, [ebp - 0x408]
push eax
call fcn.0042e721
mov eax, dword [ebp - 0x408]
cmp dword [eax - 0xc], ebx
jne 0x4492c1
push str.274A8E6317E04C28A29563E6BBCE2863
lea eax, [ebp - 0x408]
push eax
call fcn.00407af8
lea eax, [ebp - 0x408]
call fcn.004187e2
mov eax, dword [0x63696c]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x430], eax
xor eax, eax
mov byte [ebp - 4], 1
cmp ax, word [0x63f288]
jne 0x4492f5
call fcn.00404168
jmp 0x4492fa
mov eax, 0x63f288
push dword [ebp - 0x408]
lea ecx, [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x98]
push ecx
push eax
push str.http:__www.hao123.com_juzi_netfavorites_passport_appver_smid_scid_svk_s
lea eax, [ebp - 0x430]
call fcn.00404f66
mov eax, dword [0x63696c]
add esp, 0x14
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 2
push dword [0x6cab30]
lea eax, [ebp - 0x414]
push str.___________________________7d_08x_04x
call fcn.0040c5ed
mov eax, dword [0x63696c]
add esp, 0xc
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x42c], eax
mov byte [ebp - 4], 3
push dword [ebp - 0x414]
lea ebx, [ebp - 0x410]
call fcn.0047f402
pop ecx
mov byte [ebp - 4], 4
push dword [eax]
lea eax, [ebp - 0x42c]
push str.multipart_form_data__boundary_s
call fcn.00404f66
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x410]
pop ecx
pop ecx
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [0x63696c]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x428], eax
mov byte [ebp - 4], 5
push dword [ebp - 0x414]
lea eax, [ebp - 0x428]
push str.___s
call fcn.0040c5ed
mov eax, dword [0x63696c]
pop ecx
pop ecx
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x434], eax
mov byte [ebp - 4], 6
push dword [ebp - 0x414]
lea eax, [ebp - 0x434]
push str.___s__
call fcn.0040c5ed
mov eax, dword [0x63696c]
pop ecx
pop ecx
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x438], eax
push dword [ebp - 0x43c]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x410]
push eax
call fcn.0047f351
mov byte [ebp - 4], 8
push dword [eax]
lea eax, [ebp - 0x438]
push dword [ebp - 0x428]
push str._s_r_nContent_Disposition:_form_data__name_BDUSS__r_n_r_n_s
call fcn.0040c5ed
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x410]
add esp, 0x14
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [0x63696c]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x418], eax
mov byte [ebp - 4], 9
push dword [ebp - 0x438]
lea eax, [ebp - 0x418]
push 0x5deb9c
call fcn.0040c5ed
mov eax, dword [0x63696c]
pop ecx
pop ecx
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x420], eax
mov byte [ebp - 4], 0xa
push dword [ebp - 0x434]
lea eax, [ebp - 0x420]
push str._r_n_s_r_n
call fcn.0040c5ed
mov eax, dword [ebp - 0x418]
mov esi, dword [eax - 0xc]
mov eax, dword [ebp - 0x420]
mov ebx, dword [eax - 0xc]
lea edi, [ebx + esi]
lea eax, [edi + 2]
push eax
call fcn.0058e040
add esp, 0xc
mov dword [ebp - 0x410], eax
test eax, eax
je 0x4497c0
lea ecx, [edi + 2]
push ecx
push 0
push eax
call fcn.00596530
add esp, 0xc
push esi
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.005965b0
add esp, 0xc
push ebx
mov ebx, dword [ebp - 0x410]
push dword [ebp - 0x420]
lea eax, [ebx + esi]
push eax
call fcn.005965b0
add esp, 0xc
xor eax, eax
push 0x206
mov word [ebp - 0x320], ax
xor esi, esi
lea eax, [ebp - 0x31e]
push esi
push eax
call fcn.00596530
add esp, 0xc
push 0x62f48
call fcn.0058f82d
pop ecx
mov dword [ebp - 0x424], eax
mov byte [ebp - 4], 0xb
cmp eax, esi
je 0x44956d
push eax
call fcn.004702c4
mov esi, eax
mov byte [ebp - 4], 0xa
test esi, esi
je 0x4495e7
push dword [ebp - 0x430]
mov eax, esi
call fcn.0040a682
push dword [ebp - 0x42c]
mov ecx, ebx
push edi
mov eax, esi
call fcn.0040a6e4
lea ebx, [ebp - 0x320]
mov dword [esi + 0x2468], 1
mov dword [esi + 0x26b0], 0x4e20
call fcn.0042dfcf
mov eax, ebx
push eax
mov eax, esi
call fcn.0040a6b3
call fcn.00470776
test eax, eax
je 0x4495cd
push 0xa
mov eax, esi
call fcn.00470b1b
cmp dword [esi + 0x5d120], 7
je 0x4495df
xor eax, eax
mov word [ebp - 0x320], ax
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
lea eax, [ebp - 0x400]
push eax
mov byte [ebp - 4], 0xc
call fcn.00548b11
lea eax, [ebp - 0x370]
push eax
xor ebx, ebx
mov byte [ebp - 4], 0xd
call fcn.0054af1d
lea edx, [ebp - 0x320]
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0xe
call fcn.00426b05
lea ecx, [ebp - 0x370]
push ecx
push eax
lea ebx, [ebp - 0x400]
mov byte [ebp - 4], 0xf
call fcn.00548b5a
xor esi, esi
push esi
push 1
lea ecx, [ebp - 0x33c]
mov bl, al
mov byte [ebp - 4], 0xe
call fcn.00407567
test bl, bl
je 0x44978f
cmp byte [ebp - 0x368], 0
je 0x44978f
lea eax, [ebp - 0x370]
call fcn.0054bd37
test al, al
je 0x44978f
mov edx, 0x5e8fdc
lea ecx, [ebp - 0x370]
call fcn.0054b949
mov bl, 4
cmp byte [eax + 8], bl
jne 0x44978f
mov eax, dword [eax]
cmp eax, esi
je 0x44978f
push eax
lea eax, [ebp - 0x404]
push eax
call fcn.0047f54f
pop ecx
pop ecx
mov byte [ebp - 4], 0x10
push dword [ebp - 0x408]
push dword [ebp - 0x404]
call fcn.0058f69a
pop ecx
pop ecx
test eax, eax
jne 0x449781
mov edx, str.errno
lea ecx, [ebp - 0x370]
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x449781
mov ecx, eax
call fcn.0054b340
mov dword [ebp - 0x440], eax
cmp eax, esi
jne 0x449781
mov edx, str.uname
lea ecx, [ebp - 0x370]
call fcn.0054b949
cmp byte [eax + 8], bl
jne 0x449781
mov eax, dword [eax]
cmp eax, esi
je 0x449781
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.0047f54f
pop ecx
pop ecx
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x40c]
cmp dword [eax - 0xc], esi
je 0x449779
mov edx, str.displayname
lea ecx, [ebp - 0x370]
call fcn.0054b949
cmp byte [eax + 8], bl
jne 0x449773
mov eax, dword [eax]
cmp eax, esi
je 0x449773
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.0047f54f
pop ecx
pop ecx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x41c]
cmp dword [eax - 0xc], esi
jne 0x449849
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x40c]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x404]
add eax, 0xfffffff0
call fcn.00407b6b
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0xd
call fcn.0054b1a0
lea eax, [ebp - 0x400]
call fcn.0040b0d5
push dword [ebp - 0x410]
call fcn.0058f807
pop ecx
lea ecx, [ebp - 0x320]
call fcn.0047611f
mov eax, dword [ebp - 0x420]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x418]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x438]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x434]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x428]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x42c]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x414]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x430]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x408]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x440]
jmp 0x4498e4
mov edx, str.headurl
lea ecx, [ebp - 0x370]
call fcn.0054b949
cmp byte [eax + 8], bl
jne 0x44988a
mov eax, dword [eax]
cmp eax, esi
je 0x44988a
push eax
lea eax, [ebp - 0x424]
push eax
call fcn.0047f54f
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x424]
cmp dword [eax - 0xc], esi
jne 0x449895
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x41c]
jmp 0x44976b
mov esi, dword [ebp - 0x448]
lea eax, [ebp - 0x40c]
mov edi, esi
call fcn.0040a3cc
lea edi, [esi + 4]
lea eax, [ebp - 0x41c]
call fcn.0040a3cc
push dword [ebp - 0x43c]
lea eax, [esi + 8]
push eax
call fcn.00407af8
lea edi, [esi + 0xc]
lea eax, [ebp - 0x424]
call fcn.0040a3cc
mov eax, dword [ebp - 0x424]
jmp 0x449882
or eax, 0xffffffff
call fcn.00599026
ret 4