Function at 0x40b1a7
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x4d4
mov eax, 0x6e03d4
call fcn.005770f8
mov esi, ecx
mov dword [ebp - 0x4d8], esi
mov dword [ebp - 0x4d8], esi
lea ecx, [ebp - 0x458]
xor ebx, ebx
mov dword [ebp - 0x444], 0xf
push str.JiSu
mov dword [ebp - 0x448], ebx
mov byte [ebp - 0x458], bl
call fcn.0040259b
push 9
push 0x7987bc
push ebx
lea ecx, [ebp - 0x458]
mov dword [ebp - 4], ebx
call fcn.00402b88
push eax
lea ecx, [ebp - 0x428]
call fcn.00402434
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 2
call fcn.00402575
push 0x10
pop edi
cmp dword [ebp - 0x414], edi
lea ecx, [ebp - 0x4d4]
push ecx
push 0x20019
lea eax, [ebp - 0x428]
cmovae eax, dword [ebp - 0x428]
push ebx
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x40b3c9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x440]
call fcn.0040234b
mov edi, eax
mov byte [ebp - 4], 3
cmp dword [edi + 0x14], 0x10
jb 0x40b275
mov edi, dword [edi]
push str.JiSu
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x478], ebx
mov dword [ebp - 0x474], 0xf
mov byte [ebp - 0x488], bl
call fcn.0040259b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x470]
push str.HKEY_CURRENT_USER
mov dword [ebp - 0x460], ebx
mov dword [ebp - 0x45c], 0xf
mov byte [ebp - 0x470], bl
call fcn.0040259b
push 0x13
push str.Failed_to_open_key:
push ebx
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 5
call fcn.00402b88
push eax
lea ecx, [ebp - 0x4b8]
call fcn.00402434
push str.Software_
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 6
call fcn.004023f2
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00402434
lea eax, [ebp - 0x488]
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0x4a0]
lea ecx, [ebp - 0x4d0]
call fcn.0040271f
pop ecx
mov ecx, eax
mov byte [ebp - 4], 8
cmp dword [ecx + 0x14], 0x10
jb 0x40b333
mov ecx, dword [ecx]
cmp dword [0x7df278], 0x10
mov eax, 0x7df264
push 0x79579c
cmovae eax, dword [0x7df264]
push edi
push 0x79808c
push ecx
push str.ERROR:
push 0x50e
push str.Services::GetInstallerResultUIString
push str.e:hongzhenqian03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push eax
push str.MYSD_ErrMsg_JiSu
push 2
call fcn.004254b1
add esp, 0x2c
lea ecx, [ebp - 0x4d0]
call fcn.00402575
lea ecx, [ebp - 0x4a0]
call fcn.00402575
lea ecx, [ebp - 0x4b8]
call fcn.00402575
lea ecx, [ebp - 0x470]
call fcn.00402575
lea ecx, [ebp - 0x488]
call fcn.00402575
lea ecx, [ebp - 0x440]
call fcn.00402575
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], 0xf
mov byte [esi], bl
jmp 0x40b628
push 4
pop eax
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], eax
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x4d8]
mov dword [ebp - 0x4d8], ebx
push eax
lea eax, [ebp - 0x4e0]
push eax
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push str.InstallerResult
push dword [ebp - 0x4d4]
call ebx
test eax, eax
je 0x40b49f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x440]
call fcn.0040234b
mov ecx, eax
mov byte [ebp - 4], 9
cmp dword [ecx + 0x14], edi
jb 0x40b42f
mov ecx, dword [ecx]
cmp dword [0x7df278], edi
mov eax, 0x7df264
push 0x79579c
cmovae eax, dword [0x7df264]
push ecx
push 0x79808c
push str.Failed_to_query_value:InstallerResult
push str.ERROR:
push 0x518
push str.Services::GetInstallerResultUIString
push str.e:hongzhenqian03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push eax
push str.MYSD_ErrMsg_JiSu
push 2
call fcn.004254b1
add esp, 0x2c
lea ecx, [ebp - 0x440]
call fcn.00402575
push dword [ebp - 0x4d4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
jmp 0x40b628
mov edx, dword [ebp - 0x4d8]
test edx, edx
je 0x40b480
lea ecx, [ebp - 0x440]
call fcn.004022fe
mov ecx, eax
mov byte [ebp - 4], 0xa
cmp dword [ecx + 0x14], edi
jb 0x40b4c1
mov ecx, dword [ecx]
cmp dword [0x7df278], 0x10
mov edi, 0x7df264
push 0x79579c
push ecx
push str.InstallerResult:
push str.INFO:
push 0x523
push str.Services::GetInstallerResultUIString
mov eax, edi
cmovae eax, dword [0x7df264]
push str.e:hongzhenqian03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push eax
push str.MYSD_ErrMsg_JiSu
push 1
call fcn.004254b1
add esp, 0x28
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x440]
call fcn.00402575
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.0069f590
add esp, 0xc
mov dword [ebp - 0x4e0], 1
lea eax, [ebp - 0x4dc]
mov dword [ebp - 0x4dc], 0x400
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x4e0]
push eax
push 0
push str.InstallerResultUIString
push dword [ebp - 0x4d4]
call ebx
test eax, eax
je 0x40b5bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x440]
call fcn.0040234b
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 0x10
jb 0x40b585
mov eax, dword [eax]
cmp dword [0x7df278], 0x10
push 0x79579c
cmovae edi, dword [0x7df264]
push eax
push 0x79808c
push str.Failed_to_query_value:InstallerResultUIString
push str.ERROR:
push 0x52b
push str.Services::GetInstallerResultUIString
push str.e:hongzhenqian03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push edi
jmp 0x40b466
cmp dword [0x7df278], 0x10
lea eax, [ebp - 0x410]
push 0x79579c
cmovae edi, dword [0x7df264]
push eax
push str.InstallerResultUIString:
push str.INFO:
push 0x52f
push str.Services::GetInstallerResultUIString
push str.e:hongzhenqian03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push edi
push str.MYSD_ErrMsg_JiSu
push 1
call fcn.004254b1
add esp, 0x28
push dword [ebp - 0x4d4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [esi + 0x10], 0
lea eax, [ebp - 0x410]
mov dword [esi + 0x14], 0xf
mov ecx, esi
push eax
mov byte [esi], 0
call fcn.0040259b
lea ecx, [ebp - 0x428]
call fcn.00402575
mov eax, esi
call fcn.005770a2
ret