Function at 0x435e68
Capabilities:
Create directory
Create thread
Delete registry value
Get common file path
Set registry value

Disassembly:
push ebp
sub esp, 0x8c8
lea ebp, [esp - 4]
mov eax, dword [0x4f3bd0]
xor eax, ebp
mov dword [ebp + 0x8c8], eax
push 0x1c
mov eax, 0x4af960
call fcn.004764c0
mov ebx, ecx
push 0x2860
lea ecx, [ebp - 0x18]
call fcn.004024e0
xor edi, edi
push edi
push edi
push dword [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.00477882
add esp, 0xc
cmp eax, edi
je 0x435eb9
lea ecx, [ebx + 0x38]
call fcn.0046a33e
push 4
lea eax, [ebp - 0x1c]
push eax
push 4
push str.CloseAllFlagForEnt
xor esi, esi
push str.Software360SoftMgrSML
inc esi
push SysReAllocStringLen
mov dword [ebp - 0x1c], esi
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
xor eax, eax
push 0x7fe
mov word [ebp], ax
lea eax, [ebp + 2]
push edi
push eax
call fcn.00475420
add esp, 0xc
push esi
push 0x1a
lea eax, [ebp]
push eax
push edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
push str.360Safe
lea eax, [ebp]
push eax
call esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp]
push eax
call edi
push str.360SoftMgrLite
lea eax, [ebp]
push eax
call esi
push 0
lea eax, [ebp]
push eax
call edi
push str.TaskBarBtn.ini
lea eax, [ebp]
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp]
push eax
mov edi, 0x4b8cb8
push edi
push str.MainWndOrStartMenu
push str.SoftMgrLite
call esi
lea eax, [ebp]
push eax
push edi
push str.CloudNewsNotTipCycle
push str.CloudNews
call esi
lea eax, [ebp]
push eax
push 0x4b8cbc
push str.StartFlag
push str.TaskBarBtn
call esi
push 0x4f9e00
lea ecx, [ebp - 0x14]
call fcn.004027fb
push 0
mov byte [ebp - 4], 1
call fcn.00476089
push edx
push eax
lea eax, [ebp - 0x14]
push str._I64d
push eax
call fcn.00403b2e
add esp, 0x14
lea eax, [ebp]
push eax
push dword [ebp - 0x14]
push str.BNavExitForeverTime
push str.NetSpeed
call esi
lea eax, [ebp]
push eax
push edi
push str.BNavExitForeverCount
push str.NetSpeed
call esi
mov esi, dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
push str.nopop_safe_inst
push str.SOFTWARE360Safe_stat
push reloc.OLEAUT32.dll_SysReAllocString
call esi
push str.safe_jisu
push str.SOFTWARE360Safe
push SysReAllocStringLen
call esi
mov ecx, dword [ebx + 8]
xor esi, esi
cmp ecx, esi
je 0x43601d
call fcn.0045f2f3
cmp dword [eax + 0xd8], esi
je 0x43601d
mov ecx, ebx
call fcn.004357bf
push 2
mov ecx, ebx
call fcn.00432b11
mov ecx, ebx
call fcn.00430614
mov ecx, ebx
call fcn.004319e7
push str.Start_SetModularizeFlag
call fcn.00404da7
mov dword [esp], str.End_SetModularizeFlag
call fcn.00404da7
mov dword [esp], str.Start_SetGuideFlag
call fcn.00404da7
pop ecx
mov ecx, ebx
call fcn.00430adc
push str.End_SetGuideFlag
call fcn.00404da7
mov dword [esp], str.Start_UseSpecificSkin
call fcn.00404da7
pop ecx
mov ecx, ebx
call fcn.0043558b
push str.End_UseSpecificSkin
call fcn.00404da7
mov dword [esp], str.Start_DoCreateShortcuts
call fcn.00404da7
pop ecx
mov ecx, ebx
call fcn.00434ed5
push str.End_DoCreateShortcuts
call fcn.00404da7
mov dword [esp], str.Start_WriteUninstallRegister
call fcn.00404da7
pop ecx
mov ecx, dword [ebx + 8]
call fcn.00460dda
test eax, eax
jne 0x4360c7
mov ecx, dword [ebx + 8]
call fcn.0045f435
test eax, eax
jne 0x4360c7
mov ecx, ebx
call fcn.00433089
push str.End_WriteUninstallRegister
call fcn.00404da7
pop ecx
mov ecx, dword [ebx + 8]
call fcn.0045f2e2
mov edi, eax
cmp edi, esi
je 0x43615a
mov eax, dword [edi]
push edi
call dword [eax + 0x1c]
test eax, eax
jne 0x4360f4
mov eax, dword [edi]
push edi
call dword [eax + 0x38]
test eax, eax
je 0x43615a
lea ecx, [ebp - 0x28]
call fcn.00448233
push 0xbb
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call fcn.004325a7
push dword [eax]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.00402766
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00402820
push esi
lea eax, [ebp - 0x28]
push eax
push 0x3443
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
push esi
push esi
push 0x430853
push esi
push esi
call fcn.00475fd9
add esp, 0x18
lea ecx, [ebp - 0x28]
mov dword [ebx + 4], eax
mov byte [ebp - 4], 1
call fcn.00448259
mov ecx, dword [ebx + 8]
call fcn.0045f262
cmp eax, 1
je 0x4361f4
cmp eax, 2
je 0x4361f4
cmp eax, esi
jne 0x436211
xor eax, eax
push 0xc6
mov word [ebp + 0x800], ax
lea eax, [ebp + 0x802]
push esi
push eax
call fcn.00475420
mov ecx, dword [ebx + 8]
add esp, 0xc
call fcn.0045f2cc
mov ecx, dword [eax]
push 0x64
lea edx, [ebp + 0x800]
push edx
push eax
call dword [ecx + 0x3c]
push str.http:__api.ssl.so.com_recom_history_del_idmid_
lea ecx, [ebp - 0x10]
call fcn.004024e0
lea eax, [ebp + 0x800]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 4
call fcn.00403b09
mov ecx, dword [ebx + 8]
call fcn.0045f2cc
mov ecx, dword [eax]
push 0x7d0
push dword [ebp - 0x10]
push eax
call dword [ecx + 0x38]
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00402820
jmp 0x436211
push str.ClearUpdateFiles_begin
call fcn.00404da7
pop ecx
mov ecx, ebx
call fcn.00431dad
push str.ClearUpdateFiles_end
call fcn.00404da7
pop ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00402820
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402820
xor eax, eax
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8c8]
xor ecx, ebp
call fcn.0047549a
add ebp, 0x8cc
leave
ret