Function at 0x4a734c
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x594
mov eax, 0x5bead4
call fcn.00598fca
xor eax, eax
xor edi, edi
push 0x7e
mov word [ebp - 0x98], ax
lea eax, [ebp - 0x96]
push edi
push eax
mov esi, ecx
mov dword [ebp - 0x580], edi
call fcn.00596530
add esp, 0xc
lea eax, [ebp - 0x98]
push 0x40
push eax
call fcn.0042e250
mov eax, dword [0x63696c]
pop ecx
pop ecx
mov ecx, 0x63696c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x570], eax
xor eax, eax
mov dword [ebp - 4], edi
cmp ax, word [0x63f288]
jne 0x4a73bb
call fcn.00404168
jmp 0x4a73c0
mov eax, 0x63f288
lea ecx, [ebp - 0x98]
push ecx
push eax
push str.http:__update.123juzi.net_ntads.php
push str._s_ver_scid_s
lea eax, [ebp - 0x570]
call fcn.00404f66
xor eax, eax
push 0x206
mov word [ebp - 0x4a8], ax
lea eax, [ebp - 0x4a6]
push edi
push eax
call fcn.00596530
mov ecx, dword [ebp - 0x570]
add esp, 0x1c
lea eax, [ebp - 0x4a8]
push eax
push edi
push edi
push 0x1388
push 1
push edi
push edi
push edi
xor edx, edx
call fcn.0047b304
add esp, 0x20
test eax, eax
jne 0x4a7438
mov eax, dword [ebp - 0x570]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, edi
call fcn.00599026
ret
lea eax, [ebp - 0x568]
push eax
mov byte [ebp - 4], 1
call fcn.00548b11
lea eax, [ebp - 0x4d8]
push eax
xor ebx, ebx
mov byte [ebp - 4], 2
call fcn.0054af1d
lea edx, [ebp - 0x4a8]
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 3
call fcn.00426b05
lea ecx, [ebp - 0x4d8]
push ecx
push eax
lea ebx, [ebp - 0x568]
mov byte [ebp - 4], 4
call fcn.00548b5a
push 0
push 1
lea ecx, [ebp - 0x5a0]
mov bl, al
mov byte [ebp - 4], 3
call fcn.00407567
test bl, bl
je 0x4a7835
cmp byte [ebp - 0x4d0], 0
je 0x4a7835
lea eax, [ebp - 0x4d8]
call fcn.0054bd37
test al, al
je 0x4a7835
mov edx, str.addsk
lea ecx, [ebp - 0x4d8]
call fcn.0054b949
mov edi, eax
cmp byte [edi + 8], 0
je 0x4a7835
call fcn.0054bd25
test al, al
je 0x4a7835
mov eax, edi
call fcn.0054b6cc
test eax, eax
je 0x4a7835
push 0
mov ecx, edi
call fcn.0054b71c
mov edi, eax
cmp byte [edi + 8], 0
mov dword [ebp - 0x57c], edi
je 0x4a7835
call fcn.0054bd37
test al, al
je 0x4a7835
mov edx, 0x5e9b14
mov ecx, edi
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4a7835
mov ecx, eax
call fcn.0054b340
and dword [ebp - 0x574], 0
push 4
pop ebx
mov dword [esi + 0x4b4], eax
lea eax, [ebp - 0x584]
push eax
lea eax, [ebp - 0x574]
push eax
lea eax, [ebp - 0x578]
push eax
push str.dsktolver
push str.Softwarehao123JuziBrowser
push 0x80000001
mov dword [ebp - 0x578], ebx
mov dword [ebp - 0x584], ebx
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x4a7592
cmp dword [ebp - 0x578], ebx
je 0x4a7599
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x574]
cmp eax, dword [esi + 0x4b4]
je 0x4a7835
mov edx, 0x5defbc
mov ecx, edi
call fcn.0054b949
cmp byte [eax + 8], bl
jne 0x4a7835
mov eax, dword [eax]
test eax, eax
je 0x4a7835
push eax
lea eax, [ebp - 0x56c]
push eax
call fcn.0047f54f
pop ecx
pop ecx
lea edi, [esi + 0x4ac]
mov byte [ebp - 4], 5
call fcn.0040a3cc
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x56c]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
je 0x4a7835
mov ecx, dword [ebp - 0x57c]
mov edx, 0x5e99e8
call fcn.0054b949
cmp byte [eax + 8], bl
jne 0x4a7835
mov eax, dword [eax]
test eax, eax
je 0x4a7835
push eax
lea eax, [ebp - 0x56c]
push eax
call fcn.0047f54f
pop ecx
pop ecx
lea ebx, [esi + 0x4b0]
mov edi, ebx
mov byte [ebp - 4], 6
call fcn.0040a3cc
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x56c]
add eax, 0xfffffff0
call fcn.00407b6b
mov edi, dword [ebx]
cmp dword [edi - 0xc], 0
je 0x4a7835
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x2a0], ax
lea eax, [ebp - 0x29e]
push eax
call fcn.00596530
add esp, 0xc
lea eax, [ebp - 0x2a0]
push eax
xor eax, eax
push eax
push eax
push 0xea60
push 1
push eax
push eax
push eax
xor edx, edx
mov ecx, edi
call fcn.0047b304
add esp, 0x20
test eax, eax
je 0x4a7835
lea eax, [ebp - 0x2a0]
push eax
push ebx
call fcn.00407af8
mov ebx, dword [ebp - 0x57c]
mov edx, str.width
mov ecx, ebx
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4a7835
mov ecx, eax
call fcn.0054b340
mov edi, 0x190
cmp eax, edi
mov dword [esi + 0x4b8], eax
jg 0x4a7835
mov edx, str.height
mov ecx, ebx
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4a7835
mov ecx, eax
call fcn.0054b340
cmp eax, edi
mov dword [esi + 0x4bc], eax
jg 0x4a7835
mov edx, str.arrowx
mov ecx, ebx
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4a7835
mov ecx, eax
call fcn.0054b340
mov edx, str.arrowy
mov ecx, ebx
mov dword [esi + 0x4c0], eax
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4a7835
mov ecx, eax
call fcn.0054b340
mov edx, str.closeleft
mov ecx, ebx
mov dword [esi + 0x4c4], eax
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4a7835
mov ecx, eax
call fcn.0054b340
mov edx, str.closetop
mov ecx, ebx
mov dword [esi + 0x4c8], eax
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4a7835
mov ecx, eax
call fcn.0054b340
mov edx, str.closeright
mov ecx, ebx
mov dword [esi + 0x4cc], eax
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4a7835
mov ecx, eax
call fcn.0054b340
mov edx, str.closebottom
mov ecx, ebx
mov dword [esi + 0x4d0], eax
call fcn.0054b949
cmp byte [eax + 8], 1
jne 0x4a7835
mov ecx, eax
call fcn.0054b340
mov edi, 0x15180
mov edx, str.timerclose
mov ecx, ebx
mov dword [esi + 0x4d4], eax
mov dword [esi + 0x4d8], edi
call fcn.0054b949
mov ebx, eax
cmp byte [ebx + 8], 1
jne 0x4a782b
mov ecx, ebx
call fcn.0054b340
test eax, eax
jle 0x4a782b
mov ecx, ebx
call fcn.0054b340
cmp eax, edi
jge 0x4a782b
mov ecx, ebx
call fcn.0054b340
imul eax, eax, 0x3c
mov dword [esi + 0x4d8], eax
mov dword [ebp - 0x580], 1
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 2
call fcn.0054b1a0
lea eax, [ebp - 0x568]
call fcn.0040b0d5
mov edi, dword [ebp - 0x580]
jmp 0x4a7422