Function at 0x40b136
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x24
mov eax, 0x4643be
call fcn.0046320f
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ecx + 0x94]
and dword [ebp - 0x14], 0
or dword [ebp - 0x20], 0xffffffff
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00414c84
cmp dword [ebp + 8], 0
mov ebx, str.Autoupdate
mov edi, str.CQQUpdateApp::CheckIfNeedStartUpdateModule
mov esi, str.R:TempViewQQ1.82MiscAUClientQQUpdate.cpp
je 0x40b232
xor eax, eax
cmp dword [0x4ab404], eax
setne al
push eax
push str.hahahahahahhah
push ebx
push 3
push edi
push 0x247
push esi
call fcn.0040afba
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x94]
add esp, 0x1c
call fcn.00414cc1
mov dword [ebp + 8], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x94]
call fcn.00414363
push eax
push dword [ebp + 8]
mov dword [ebp - 0x24], eax
push str.strategy:_d____startmode:_d
push ebx
push 3
push edi
push 0x24a
push esi
call fcn.0040afba
xor eax, eax
cmp dword [0x4ab404], eax
setne al
push eax
push str.hahahahahahhah2222222
push ebx
push 3
push edi
push 0x24b
push esi
call fcn.0040afba
add esp, 0x3c
cmp dword [0x4ab404], 0
jne 0x40b232
mov eax, dword [ebp + 8]
and dword [ebp - 0x14], 0
cmp eax, 3
je 0x40b221
cmp eax, 5
je 0x40b221
cmp eax, 0x17
je 0x40b221
cmp eax, 0x16
jne 0x40b559
cmp dword [ebp - 0x24], 4
jne 0x40b559
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x14], 0
je 0x40b559
lea eax, [ebp - 0x24]
push eax
push 0x47218c
push ebx
push 3
push edi
push 0x260
push esi
mov dword [ebp - 0x24], str.bStartFlag
call fcn.00409f94
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x94]
add esp, 0x1c
call fcn.004136e8
lea ecx, [ebp + 8]
mov dword [ebp - 0x24], eax
call dword [0x471490]
mov ecx, dword [ebp - 0x24]
and dword [ebp - 4], 0
add ecx, 4
mov dword [ebp - 0x24], ecx
call dword [0x4714a0]
push eax
call fcn.0045e210
test eax, eax
pop ecx
je 0x40b2e0
mov ecx, dword [ebp - 0x24]
call dword [0x4714a0]
push eax
lea eax, [ebp + 8]
push str.__s_
push eax
call dword [0x47149c]
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push dword [ebp - 0x24]
call dword [0x4714a8]
push 0x472b3c
mov ebx, str.Autoupdate::
push ebx
push 3
push edi
push 0x268
push esi
call fcn.0040af7d
add esp, 0x1c
jmp 0x40b4a7
lea eax, [ebp - 0x18]
push eax
push 0x47218c
push ebx
push 3
push edi
push 0x26c
push esi
mov dword [ebp - 0x18], 0x472b0c
call fcn.00409f94
add esp, 0x1c
lea ecx, [ebp - 0x1c]
call dword [0x471490]
mov ebx, 0x4ab410
push 0x472b04
mov ecx, ebx
mov byte [ebp - 4], 1
call dword [0x4715ac]
test eax, eax
jne 0x40b32c
push str.SOFTWARETencentQQ2009
jmp 0x40b342
push 0x472acc
mov ecx, ebx
call dword [0x4715ac]
test eax, eax
jne 0x40b34b
push str.SOFTWARETencentTM2008
lea ecx, [ebp - 0x1c]
call dword [0x4714e8]
and dword [ebp - 0x24], 0
lea eax, [ebp - 0x24]
push eax
push 1
push 0
lea ecx, [ebp - 0x1c]
call dword [0x4714a0]
push eax
push 0x80000002
call dword [0x47100c]
test eax, eax
jne 0x40b473
and dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x10]
call dword [0x471490]
lea ecx, [ebp - 0x18]
call dword [0x471490]
lea ecx, [ebp - 0x28]
mov eax, 0x208
push ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
mov dword [ebp - 0x28], eax
call dword [0x4714bc]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0
push str.Install
push dword [ebp - 0x24]
call dword [0x471008]
push 0xffffffffffffffff
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x30], eax
call dword [0x4714b8]
cmp dword [ebp - 0x30], 0
jne 0x40b410
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x10]
call dword [0x471498]
push 0x472b04
mov ecx, ebx
call dword [0x4715ac]
test eax, eax
jne 0x40b3f1
push 0x472a74
jmp 0x40b407
push 0x472acc
mov ecx, ebx
call dword [0x4715ac]
test eax, eax
jne 0x40b410
push str.BinTM.exe
lea ecx, [ebp - 0x10]
call dword [0x4714a4]
push dword [ebp - 0x24]
call dword [0x471004]
lea ecx, [ebp - 0x10]
call dword [0x4714a0]
push eax
lea eax, [ebp + 8]
push str.__s_
push eax
call dword [0x47149c]
pop ecx
pop ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x30], esp
push eax
call dword [0x4714a8]
push 0x472b3c
mov ebx, str.Autoupdate::
push ebx
push 3
push edi
push 0x291
push esi
call fcn.0040af7d
add esp, 0x1c
lea ecx, [ebp - 0x18]
call dword [0x471494]
lea ecx, [ebp - 0x10]
call dword [0x471494]
jmp 0x40b49a
lea eax, [ebp - 0x30]
push eax
push 0x47218c
mov ebx, str.Autoupdate::
push ebx
push 3
push edi
push 0x295
push esi
mov dword [ebp - 0x30], str.b_rN0R
call fcn.00409f94
add esp, 0x1c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call dword [0x471494]
cmp dword [ebp - 0x20], 0
jne 0x40b4b4
push str.__U1
jmp 0x40b4cc
cmp dword [ebp - 0x20], 1
jne 0x40b4c1
push str.__U2
jmp 0x40b4cc
cmp dword [ebp - 0x20], 2
jne 0x40b4d5
push 0x472a14
lea ecx, [ebp + 8]
call dword [0x4714a4]
and dword [ebp - 0x24], 0
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x30], esp
push eax
call dword [0x4714a8]
push 0x472a00
push ebx
push 3
push edi
push 0x2ad
push esi
call fcn.0040af7d
add esp, 0x1c
push 5
lea ecx, [ebp + 8]
call dword [0x4714a0]
push eax
call fcn.0045f140
cmp eax, 0x1f
pop ecx
pop ecx
ja 0x40b54e
push 0x3e8
call dword [0x471358]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x40b4d9
lea eax, [ebp - 0x30]
push eax
push 0x47218c
push ebx
push 3
push edi
push 0x2b7
push esi
mov dword [ebp - 0x30], 0x4729e8
call fcn.00409f94
add esp, 0x1c
lea ecx, [ebp + 8]
call dword [0x471494]
jmp 0x40b57b
lea eax, [ebp - 0x30]
push eax
push 0x47218c
push ebx
push 3
push edi
push 0x2bb
push esi
mov dword [ebp - 0x30], 0x4729cc
call fcn.00409f94
add esp, 0x1c
call fcn.004632e7
ret 4