Function at 0x435c2a
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x1674]
mov eax, 0x16f4
call fcn.0050c890
mov eax, dword [0x58569c]
xor eax, ebp
mov dword [ebp + 0x1670], eax
push ebx
push esi
push edi
xor eax, eax
push 0x1046
mov word [ebp - 0x70], ax
xor ebx, ebx
lea eax, [ebp - 0x6e]
push ebx
push eax
call fcn.00506540
push 0x7f
lea eax, [ebp + 0x15f1]
push ebx
push eax
mov byte [ebp + 0x15f0], bl
call fcn.00506540
lea eax, [ebp + 0x15f0]
push eax
call fcn.0045481b
xor eax, eax
mov edi, 0x206
push edi
mov word [ebp + 0x13e8], ax
lea eax, [ebp + 0x13ea]
push ebx
push eax
mov dword [ebp - 0x7c], 1
call fcn.00506540
add esp, 0x28
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp + 0x13e8]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0x543e90
push str.Software360360se6chrome
push 0x80000001
mov dword [ebp - 0x80], edi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
xor eax, eax
cmp ax, word [ebp + 0x13e8]
jne 0x435cfa
push str.360se
push 0x544738
lea eax, [ebp + 0x13e8]
push 0x103
push eax
call fcn.004ff336
add esp, 0x10
cmp dword [0x58818c], 0x10
jb 0x435d0d
mov eax, dword [0x588178]
mov dword [ebp - 0x74], eax
jmp 0x435d14
mov dword [ebp - 0x74], 0x588178
cmp dword [ebp - 0x74], ebx
je 0x435d2d
push dword [ebp - 0x74]
call dword [0x52b114]
lea esi, [eax + 1]
cmp esi, 0x3fffffff
jle 0x435d32
mov dword [ebp - 0x74], ebx
jmp 0x435d4c
lea eax, [esi + esi]
call fcn.00511970
mov eax, esp
push 3
push esi
push dword [ebp - 0x74]
mov esi, eax
call fcn.00406464
mov dword [ebp - 0x74], eax
lea eax, [ebp + 0x15f0]
push eax
call dword [0x52b114]
lea esi, [eax + 1]
cmp esi, 0x3fffffff
jle 0x435d69
mov dword [ebp - 0x78], ebx
jmp 0x435d87
lea eax, [esi + esi]
call fcn.00511970
mov eax, esp
push 3
push esi
lea ecx, [ebp + 0x15f0]
push ecx
mov esi, eax
call fcn.00406464
mov dword [ebp - 0x78], eax
lea eax, [ebp + 0x15f0]
push eax
call dword [0x52b114]
lea esi, [eax + 1]
cmp esi, 0x3fffffff
jle 0x435da3
xor eax, eax
jmp 0x435dbe
lea eax, [esi + esi]
call fcn.00511970
mov eax, esp
push 3
push esi
lea ecx, [ebp + 0x15f0]
push ecx
mov esi, eax
call fcn.00406464
lea ecx, [ebp + 0x13e8]
push ecx
push dword [ebp - 0x74]
mov ecx, 0x59e260
push dword [ebp - 0x78]
push 0x59f098
push 0x59ee90
push 0x59ec88
push 0x59ea80
push 0x59e878
push 0x59e670
push ecx
push 0x59de50
push ebx
push ebx
push ecx
push eax
push str.http:__pvstat.qihoo.com_dimana.gif__pdt360se6bq_dim_kpid__guid__ver_dim_v360se6___s___sm_dmts_diname_sifver_simod_simodver_sicode_sioff_sios_siie_smid_spt_spid_s
lea eax, [ebp - 0x70]
push 0x823
push eax
call fcn.004ff336
add esp, 0x48
lea eax, [ebp - 0x70]
push eax
mov esi, 0x665590
mov eax, esi
call fcn.00406497
xor eax, eax
push edi
mov word [ebp + 0xfd8], ax
lea eax, [ebp + 0xfda]
push ebx
push eax
call fcn.00506540
xor eax, eax
push edi
mov word [ebp + 0x11e0], ax
lea eax, [ebp + 0x11e2]
push ebx
push eax
call fcn.00506540
add esp, 0x18
lea eax, [ebp + 0xfd8]
push eax
push 0x103
call dword [0x52b168]
lea eax, [ebp + 0x11e0]
push eax
call dword [0x52b13c]
push eax
push 0x549b48
lea eax, [ebp + 0xfd8]
push eax
call dword [0x52b104]
lea eax, [ebp + 0x11e0]
push eax
mov eax, esi
call fcn.004064c6
mov dword [0x6679f8], 1
mov dword [0x667c38], 0x1388
call fcn.0042f6bc
mov eax, esi
call fcn.0042f9ff
lea eax, [ebp + 0x11e0]
push eax
call dword [0x52b288]
mov edi, esi
call fcn.0042f743
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1670]
xor ecx, ebp
call fcn.004fe191
add ebp, 0x1674
leave
ret