Function at 0x40afd4
Capabilities:
Check if file exists
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x874
mov eax, dword [0x6f4e3c]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov al, byte [ecx + 1]
mov byte [ebp - 0x875], al
test al, al
je 0x40b39f
mov dword [ebp - 0x880], ecx
mov esi, 0x208
lea ebx, [ebp - 0x218]
push esi
push 0
push ebx
call fcn.006030b0
add esp, 0xc
lea eax, [ebp - 0x834]
mov dword [eax], 1
lea ecx, [ebp - 0x838]
mov dword [ecx], esi
push ecx
push ebx
push eax
push 0x63a9f4
push str.Software360360se6Chrome
push SysReAllocStringLen
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
mov dword [ebp - 0x87c], eax
push ebx
call fcn.0061fdf0
add esp, 4
lea edi, [ebp - 0x844]
push eax
push ebx
push edi
call fcn.00484c00
add esp, 0xc
movzx eax, byte [edi + 0xb]
test al, al
jns 0x40b078
mov edi, dword [ebp - 0x844]
mov eax, dword [ebp - 0x840]
lea esi, [ebp - 0x850]
mov ecx, esi
push eax
push edi
call fcn.0046ed80
lea ebx, [ebp - 0x628]
mov ecx, esi
push 0x1c
push str.360se6Application360se.exe
push ebx
call fcn.0046fbd0
mov ecx, esi
push ebx
call fcn.0046ee80
mov ecx, ebx
call fcn.0046ee40
cmp dword [ebp - 0x87c], 0
je 0x40b1d5
mov esi, 0x208
xor edi, edi
lea ebx, [ebp - 0x830]
push esi
push edi
push ebx
call fcn.006030b0
add esp, 0xc
mov dword [ebp - 0x838], esi
lea eax, [ebp - 0x838]
push eax
push ebx
lea eax, [ebp - 0x834]
push eax
push edi
push 0x63aa96
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
mov dword [ebp - 0x87c], eax
push ebx
call fcn.0061fdf0
add esp, 4
lea edi, [ebp - 0x85c]
push eax
push ebx
push edi
call fcn.00484c00
add esp, 0xc
movzx eax, byte [edi + 0xb]
test al, al
jns 0x40b12a
mov edi, dword [ebp - 0x85c]
mov eax, dword [ebp - 0x858]
lea esi, [ebp - 0x868]
mov ecx, esi
push eax
push edi
call fcn.0046ed80
cmp dword [ebp - 0x87c], 0
lea edi, [ebp - 0x628]
je 0x40b28a
mov ecx, edi
push 0x639d54
call fcn.00401a6c
lea esi, [ebp - 0x874]
mov ecx, esi
push 0x6390a0
call fcn.00401a6c
push edi
push esi
call fcn.0040b3ba
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x40b188
push dword [ebp - 0x874]
call fcn.00517bd6
add esp, 4
cmp byte [ebp - 0x61d], 0
jns 0x40b19f
push dword [ebp - 0x628]
call fcn.00517bd6
add esp, 4
mov ecx, dword [ebp - 0x880]
call fcn.004080d0
lea ecx, [ebp - 0x868]
call fcn.0046ee40
cmp byte [ebp - 0x851], 0
jns 0x40b37d
push dword [ebp - 0x85c]
call fcn.00517bd6
add esp, 4
jmp 0x40b37d
cmp byte [ebp - 0x845], 0
jns 0x40b1e4
mov esi, dword [ebp - 0x850]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40b0b8
push 0x410
push 0
push ebx
call fcn.006030b0
add esp, 0xc
lea edi, [ebp - 0x850]
cmp byte [edi + 0xb], 0
mov eax, edi
jns 0x40b217
mov eax, dword [ebp - 0x850]
push str.make_default_browser
push eax
push str._s____s
push 0x208
push ebx
call fcn.00404830
add esp, 0x14
lea esi, [ebp - 0x830]
mov ecx, esi
push 0x639d54
call fcn.00401a6c
push esi
push edi
call fcn.0040a899
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x40b260
push dword [ebp - 0x830]
call fcn.00517bd6
add esp, 4
mov ecx, esi
push ebx
call fcn.00401a6c
push 1
push 0
push esi
call fcn.0040a70e
cmp byte [ebp - 0x825], 0
jns 0x40b369
push dword [ebp - 0x830]
jmp 0x40b361
cmp byte [ebp - 0x85d], 0
jns 0x40b299
mov esi, dword [ebp - 0x868]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40b14c
push 0x410
push 0
push edi
call fcn.006030b0
add esp, 0xc
cmp byte [ebp - 0x851], 0
jns 0x40b2c9
mov eax, dword [ebp - 0x85c]
jmp 0x40b2cf
lea eax, [ebp - 0x85c]
push str._tp:2__v:1
push eax
push 0x63aaec
push 0x208
push edi
call fcn.00404830
add esp, 0x14
lea esi, [ebp - 0x874]
mov ecx, esi
push 0x639d54
call fcn.00401a6c
lea eax, [ebp - 0x868]
push esi
push eax
call fcn.0040a899
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x40b31e
push dword [ebp - 0x874]
call fcn.00517bd6
add esp, 4
mov ecx, esi
push edi
call fcn.00401a6c
push 1
push 0
push esi
call fcn.0040a70e
cmp byte [ebp - 0x869], 0
jns 0x40b347
push dword [ebp - 0x874]
call fcn.00517bd6
add esp, 4
lea ecx, [ebp - 0x868]
call fcn.0046ee40
cmp byte [ebp - 0x851], 0
jns 0x40b369
push dword [ebp - 0x85c]
call fcn.00517bd6
add esp, 4
sub esp, 0x10
movaps xmm0, xmmword [0x639de0]
movups xmmword [esp], xmm0
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea ecx, [ebp - 0x850]
call fcn.0046ee40
cmp byte [ebp - 0x839], 0
jns 0x40b39f
push dword [ebp - 0x844]
call fcn.00517bd6
add esp, 4
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00517c1a
mov al, byte [ebp - 0x875]
add esp, 0x874
pop esi
pop edi
pop ebx
pop ebp
ret