Function at 0x40abf0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
mov eax, dword [0x450008]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
lea eax, [ebp - 0x118]
mov dword [0x452970], 0x44c4c0
push eax
push 0x20019
push 0
push str.SoftwareHTTPNet
push 0x80000001
mov dword [0x452974], 0
mov byte [0x452ee4], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40b0aa
push 0x104
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00419080
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x10c]
add esp, 0xc
mov dword [ebp - 0x10c], 0x104
mov dword [ebp - 0x110], 1
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x110]
push eax
push 0
push str.address
push dword [ebp - 0x118]
call edi
test eax, eax
jne 0x40acb5
push ecx
lea eax, [ebp - 0x108]
mov edx, 0x104
push eax
push ecx
mov ecx, 0x452760
call fcn.0040a960
push 0x104
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.00419080
add esp, 0xc
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x110]
push eax
push 0
push str.path
push dword [ebp - 0x118]
call edi
test eax, eax
jne 0x40af97
push ecx
lea eax, [ebp - 0x108]
mov edx, 0x104
push eax
push ecx
mov ecx, 0x452130
call fcn.0040a960
mov ecx, 0x104
mov eax, 0x452130
nop dword [eax]
cmp byte [eax], 0
je 0x40ad2b
inc eax
sub ecx, 1
jne 0x40ad20
mov eax, 0x104
mov esi, ecx
sub eax, ecx
neg esi
sbb esi, esi
and esi, eax
test ecx, ecx
je 0x40ad57
push ecx
push str._client_external_fncConfig
push ecx
mov edx, 0x104
lea ecx, [esi + 0x452130]
sub edx, esi
call fcn.0040a960
push ecx
lea eax, [ebp - 0x108]
mov edx, 0x104
push eax
push ecx
mov ecx, 0x452448
call fcn.0040a960
mov ecx, 0x104
mov eax, 0x452448
nop dword [eax]
cmp byte [eax], 0
je 0x40ad8b
inc eax
sub ecx, 1
jne 0x40ad80
mov eax, 0x104
mov esi, ecx
sub eax, ecx
neg esi
sbb esi, esi
and esi, eax
test ecx, ecx
je 0x40adb7
push ecx
push str._client_external_fncBusiness
push ecx
mov edx, 0x104
lea ecx, [esi + 0x452448]
sub edx, esi
call fcn.0040a960
push ecx
lea eax, [ebp - 0x108]
mov edx, 0x104
push eax
push ecx
mov ecx, 0x452658
call fcn.0040a960
mov ecx, 0x104
mov eax, 0x452658
nop dword [eax]
cmp byte [eax], 0
je 0x40adeb
inc eax
sub ecx, 1
jne 0x40ade0
mov eax, 0x104
mov esi, ecx
sub eax, ecx
neg esi
sbb esi, esi
and esi, eax
test ecx, ecx
je 0x40ae17
push ecx
push str._client_external_uninstallConfig
push ecx
mov edx, 0x104
lea ecx, [esi + 0x452658]
sub edx, esi
call fcn.0040a960
push ecx
lea eax, [ebp - 0x108]
mov edx, 0x104
push eax
push ecx
mov ecx, 0x452550
call fcn.0040a960
mov ecx, 0x104
mov eax, 0x452550
nop dword [eax]
cmp byte [eax], 0
je 0x40ae4b
inc eax
sub ecx, 1
jne 0x40ae40
mov eax, 0x104
mov esi, ecx
sub eax, ecx
neg esi
sbb esi, esi
and esi, eax
test ecx, ecx
je 0x40ae77
push ecx
push str._client_external_uninstallBusiness
push ecx
mov edx, 0x104
lea ecx, [esi + 0x452550]
sub edx, esi
call fcn.0040a960
push ecx
lea eax, [ebp - 0x108]
mov edx, 0x104
push eax
push ecx
mov ecx, 0x452238
call fcn.0040a960
mov ecx, 0x104
mov eax, 0x452238
nop dword [eax]
cmp byte [eax], 0
je 0x40aeab
inc eax
sub ecx, 1
jne 0x40aea0
mov eax, 0x104
mov esi, ecx
sub eax, ecx
neg esi
sbb esi, esi
and esi, eax
test ecx, ecx
je 0x40aed7
push ecx
push str._client_external_report
push ecx
mov edx, 0x104
lea ecx, [esi + 0x452238]
sub edx, esi
call fcn.0040a960
push ecx
lea eax, [ebp - 0x108]
mov edx, 0x104
push eax
push ecx
mov ecx, 0x451e28
call fcn.0040a960
mov ecx, 0x104
mov eax, 0x451e28
nop dword [eax]
cmp byte [eax], 0
je 0x40af0b
inc eax
sub ecx, 1
jne 0x40af00
mov eax, 0x104
mov esi, ecx
sub eax, ecx
neg esi
sbb esi, esi
and esi, eax
test ecx, ecx
je 0x40af37
push ecx
push str._client_external_initInterval
push ecx
mov edx, 0x104
lea ecx, [esi + 0x451e28]
sub edx, esi
call fcn.0040a960
push ecx
lea eax, [ebp - 0x108]
mov edx, 0x104
push eax
push ecx
mov ecx, 0x452868
call fcn.0040a960
mov ecx, 0x104
mov eax, 0x452868
nop dword [eax]
cmp byte [eax], 0
je 0x40af6b
inc eax
sub ecx, 1
jne 0x40af60
mov eax, 0x104
mov esi, ecx
sub eax, ecx
neg esi
sbb esi, esi
and esi, eax
test ecx, ecx
je 0x40af97
push ecx
push str._client_external_siteConfig
push ecx
mov edx, 0x104
lea ecx, [esi + 0x452868]
sub edx, esi
call fcn.0040a960
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x110], 4
push eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x10c], 4
push eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x114], 0
push eax
push 0
push str.port
push dword [ebp - 0x118]
call edi
movzx ecx, word [ebp - 0x114]
test eax, eax
movzx edx, word [0x452e8c]
mov esi, 0x200
push ecx
cmove edx, ecx
push str.Accept_Encoding:gzip__deflate__br_r_nContent_Type:application_json_r_nHost:
mov word [0x452e8c], dx
mov edx, esi
push ecx
mov ecx, 0x451f30
call fcn.0040a960
mov ecx, esi
mov eax, 0x451f30
cmp byte [eax], 0
je 0x40b01d
inc eax
sub ecx, 1
jne 0x40b012
mov eax, esi
mov edi, ecx
sub eax, ecx
neg edi
sbb edi, edi
and edi, eax
test ecx, ecx
je 0x40b043
push ecx
push 0x452760
push ecx
mov edx, esi
lea ecx, [edi + 0x451f30]
sub edx, edi
call fcn.0040a960
mov ecx, esi
mov eax, 0x451f30
nop word [eax + eax]
cmp byte [eax], 0
je 0x40b05b
inc eax
sub ecx, 1
jne 0x40b050
mov eax, esi
mov edx, ecx
sub eax, ecx
neg edx
sbb edx, edx
and edx, eax
test ecx, ecx
je 0x40b081
push ecx
push str._r_nConnection:keep___alive_r_nsourceId:294a5c34_ada0_11ed_96fa_0ea40d537b6e_r_npid:22c86a44_b1d9_11ed_badb_9c81b402ed9f_r_n_r_n
push ecx
sub esi, edx
lea ecx, [edx + 0x451f30]
mov edx, esi
call fcn.0040a960
movzx eax, word [0x452e8c]
push eax
push 0x452760
push str.http:___s:_d
push 0x104
push 0x452340
call fcn.0040a8e0
add esp, 0x14
jmp 0x40b20a
push ecx
push str.api.bs.0dpd.cn
push ecx
mov edx, 0x104
mov ecx, 0x452760
call fcn.0040a960
push ecx
push str.Accept_Encoding:gzip__deflate__br_r_nContent_Type:application_json_r_nHost:
push ecx
mov esi, 0x200
mov ecx, 0x451f30
mov edx, esi
call fcn.0040a960
mov ecx, esi
mov eax, 0x451f30
nop
cmp byte [eax], 0
je 0x40b0eb
inc eax
sub ecx, 1
jne 0x40b0e0
mov eax, esi
mov edi, ecx
sub eax, ecx
neg edi
sbb edi, edi
and edi, eax
test ecx, ecx
je 0x40b111
push ecx
push 0x452760
push ecx
mov edx, esi
lea ecx, [edi + 0x451f30]
sub edx, edi
call fcn.0040a960
mov ecx, esi
mov eax, 0x451f30
cmp byte [eax], 0
je 0x40b123
inc eax
sub ecx, 1
jne 0x40b118
mov eax, esi
mov edx, ecx
sub eax, ecx
neg edx
sbb edx, edx
and edx, eax
test ecx, ecx
je 0x40b149
push ecx
push str._r_nConnection:keep___alive_r_nsourceId:294a5c34_ada0_11ed_96fa_0ea40d537b6e_r_npid:22c86a44_b1d9_11ed_badb_9c81b402ed9f_r_n_r_n
push ecx
sub esi, edx
lea ecx, [edx + 0x451f30]
mov edx, esi
call fcn.0040a960
mov eax, 0x50
push eax
push 0x452760
push str.http:___s:_d
push 0x104
push 0x452340
mov word [0x452e8c], ax
call fcn.0040a8e0
add esp, 0x10
mov edx, 0x104
push str._client_external_fncConfig
push ecx
mov ecx, 0x452130
call fcn.0040a960
push ecx
push str._client_external_fncBusiness
push ecx
mov edx, 0x104
mov ecx, 0x452448
call fcn.0040a960
push ecx
push str._client_external_uninstallConfig
push ecx
mov edx, 0x104
mov ecx, 0x452658
call fcn.0040a960
push ecx
push str._client_external_uninstallBusiness
push ecx
mov edx, 0x104
mov ecx, 0x452550
call fcn.0040a960
push ecx
push str._client_external_report
push ecx
mov edx, 0x104
mov ecx, 0x452238
call fcn.0040a960
push ecx
push str._client_external_initInterval
push ecx
mov edx, 0x104
mov ecx, 0x451e28
call fcn.0040a960
push ecx
push str._client_external_siteConfig
push ecx
mov edx, 0x104
mov ecx, 0x452868
call fcn.0040a960
push ecx
push 0x44c6a8
push ecx
mov edx, 0x104
mov ecx, 0x452978
call fcn.0040a960
push ecx
push str.000000
push ecx
mov edx, 0x104
mov ecx, 0x452a7c
call fcn.0040a960
push ecx
push 0x44c6b4
push ecx
mov edx, 0x104
mov ecx, 0x452b80
call fcn.0040a960
push ecx
push 0x44c6b4
push ecx
mov edx, 0x104
mov ecx, 0x452c84
call fcn.0040a960
push ecx
push 0x44c6b4
push ecx
mov edx, 0x104
mov ecx, 0x452d88
call fcn.0040a960
mov ecx, dword [ebp - 4]
mov eax, 0x452970
pop edi
xor ecx, ebp
pop esi
call fcn.00416291
mov esp, ebp
pop ebp
ret