Function at 0x41efc4
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
cmp dword [esi + 0x40], 0
push edi
je 0x41f2a2
lea eax, [ebp + 8]
push eax
lea ecx, [esi + 0x68]
call fcn.00428667
cmp dword [esi + 0x80], 0
mov edi, str.....Config_newui_themesdefault360RealPro12xmlMainFrame.xml
jne 0x41f02b
mov eax, dword [0x4845e8]
test eax, eax
jne 0x41f006
push 0x80004003
call fcn.0044c560
push ecx
mov ecx, esp
push edi
mov ebx, eax
call fcn.0040e06c
push ecx
mov ecx, esp
push str.360Realpro12imageopen.png
call fcn.0040e06c
mov ecx, ebx
call fcn.0041e0ef
mov dword [esi + 0x80], eax
cmp dword [esi + 0x84], 0
jne 0x41f062
mov eax, dword [0x4845e8]
test eax, eax
je 0x41effc
push ecx
mov ecx, esp
push edi
mov ebx, eax
call fcn.0040e06c
push ecx
mov ecx, esp
push str.360Realpro12imagedataprot_close.png
call fcn.0040e06c
mov ecx, ebx
call fcn.0041e0ef
mov dword [esi + 0x84], eax
cmp dword [esi + 0x88], 0
jne 0x41f099
mov eax, dword [0x4845e8]
test eax, eax
je 0x41effc
push ecx
mov ecx, esp
push edi
mov ebx, eax
call fcn.0040e06c
push ecx
mov ecx, esp
push str.360Realpro12image12_setting_green.png
call fcn.0040e06c
mov ecx, ebx
call fcn.0041e0ef
mov dword [esi + 0x88], eax
cmp dword [esi + 0x8c], 0
jne 0x41f0d4
mov eax, dword [0x4845e8]
test eax, eax
je 0x41effc
push ecx
mov ecx, esp
push edi
mov ebx, eax
call fcn.0040e06c
push ecx
mov ecx, esp
push str.360Realpro12image12_setting_org.png
call fcn.0040e06c
mov ecx, ebx
call fcn.0041e0ef
mov dword [esi + 0x8c], eax
mov eax, dword [ebp + 8]
push dword [eax]
lea ecx, [ebp - 4]
call fcn.0040b6b5
push 0
push 1
lea ecx, [ebp - 4]
push ecx
push dword [ebp + 0xc]
lea ebx, [esi + 0x2c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 8]
lea ecx, [ebp - 4]
call fcn.00408318
mov eax, dword [0x47d024]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
cmp dword [eax + 8], 0x29
jne 0x41f12a
mov ecx, 0x4845f0
call fcn.00417679
test eax, eax
je 0x41f12a
mov eax, dword [ebp + 8]
push dword [eax + 8]
push str.IDS_ProtDesc_d_2
jmp 0x41f135
mov eax, dword [ebp + 8]
push dword [eax + 8]
push str.IDS_ProtDesc_d
lea eax, [ebp - 4]
push eax
call fcn.00413acf
add esp, 0xc
push edi
push ecx
mov ecx, esp
push dword [ebp - 4]
call fcn.0040e06c
lea eax, [ebp - 0x10]
push eax
call fcn.00413ebe
mov eax, dword [eax]
xor edi, edi
add esp, 0xc
cmp eax, edi
je 0x41f165
mov eax, dword [eax]
jmp 0x41f167
xor eax, eax
push eax
lea ecx, [ebp - 8]
call fcn.0040b6b5
mov eax, dword [ebx]
push edi
push 1
lea ecx, [ebp - 8]
push ecx
push dword [ebp + 0x10]
mov ecx, ebx
call dword [eax + 8]
lea ecx, [ebp - 8]
call fcn.00408318
mov ecx, dword [ebp - 0x10]
cmp ecx, edi
je 0x41f195
call fcn.0040e5f0
mov ebx, dword [ebp + 8]
cmp dword [ebx + 8], 0x18
jne 0x41f1c8
push 4
pop eax
mov dword [ebp + 8], eax
mov dword [ebp + 0x10], eax
lea eax, [ebp + 8]
push eax
lea eax, [esi + 0x48]
push eax
lea eax, [ebp + 0x10]
push eax
push str.DisableWebCam
push str.SOFTWARE360Safe360Ent
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov ecx, dword [esi + 0x40]
cmp ecx, edi
je 0x41effc
push 1
push dword [ebp + 0xc]
lea eax, [ebp + 0x10]
push eax
call fcn.0040e1dc
push eax
lea ecx, [ebp + 8]
call fcn.0040e56b
mov eax, dword [ebp + 0x10]
cmp eax, edi
je 0x41f1f7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0x44]
cmp eax, edi
je 0x41f214
cmp dword [ebx + 0x10], edi
je 0x41f214
mov ecx, dword [ebp + 8]
cmp ecx, edi
je 0x41effc
push eax
call fcn.0041d9fd
push dword [ebp + 0x14]
mov ecx, esi
push ebx
call fcn.0041dc0a
mov ecx, dword [esi + 0x40]
mov dword [ebp - 0xc], edi
cmp ecx, edi
je 0x41effc
push 1
push dword [ebp + 0xc]
lea eax, [ebp + 0xc]
push eax
call fcn.0040e1dc
lea ecx, [ebp - 0xc]
push ecx
mov edi, 0x469810
push edi
push esi
push dword [eax]
call fcn.0040e0bb
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x41f25a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [esi + 0x40]
test ecx, ecx
je 0x41effc
push 1
push dword [ebp + 0x14]
lea eax, [ebp + 0xc]
push eax
call fcn.0040e1dc
lea ecx, [ebp - 0xc]
push ecx
push edi
push esi
push dword [eax]
call fcn.0040e0bb
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x41f28d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 8]
test eax, eax
je 0x41f29a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 4]
call fcn.00408318
pop edi
pop esi
pop ebx
leave
ret 0x10