Function at 0x43ffa0
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x4838a0
mov eax, dword fs:[0]
push eax
sub esp, 0x458
mov eax, dword [0x4a60f8]
xor eax, esp
mov dword [esp + 0x454], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a60f8]
xor eax, esp
push eax
lea eax, [esp + 0x46c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x484]
mov esi, ecx
cmp dword [esi + 0x14], 0
mov dword [esp + 0x24], eax
je 0x440747
mov ecx, dword [0x4a4014]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x474], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.004659e9
lea ebx, [esi + 0x18]
add esp, 4
mov ecx, ebx
mov dword [esp + 0x1c], 0x3e8
call fcn.00423f10
cmp eax, 1
jne 0x440037
mov dword [esp + 0x1c], 0xbb8
jmp 0x44004b
mov ecx, ebx
call fcn.00423f00
cmp dword [eax], 1
jne 0x44004b
mov dword [esp + 0x1c], 0x7d0
push 0x494900
lea ecx, [esp + 0x24]
call fcn.0041d2c0
cmp dword [esi + 0xec], 0
mov byte [esp + 0x474], 1
je 0x440071
push str.uninst
jmp 0x440099
mov eax, dword [esi + 0x88]
sub eax, 0
je 0x440094
sub eax, 1
je 0x44008d
sub eax, 1
jne 0x4400a2
push str.coverinst
jmp 0x440099
push str.update
jmp 0x440099
push 0x48d9c4
lea ecx, [esp + 0x24]
call fcn.0041be90
mov eax, dword [esi + 0xec]
test eax, eax
jne 0x4401ad
mov edx, dword [0x4a4014]
push 0x2711
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], edx
call fcn.0041c340
mov ecx, ebx
mov byte [esp + 0x474], 2
call fcn.00423f30
mov edi, dword [eax]
cmp dword [edi - 0xc], 0
jl 0x4400ef
lea eax, [edi - 0xc]
push eax
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x440107
mov ecx, dword [0x4a4014]
mov dword [esp + 0x18], ecx
push edi
lea ecx, [esp + 0x1c]
call fcn.0041be90
mov edi, dword [esp + 0x18]
cmp dword [edi - 8], 0
mov byte [esp + 0x474], 3
jne 0x440127
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x1c]
call fcn.0041be30
mov edi, dword [esp + 0x18]
call fcn.004659fb
mov ecx, dword [esi + 0x104]
mov edx, dword [esi + 0x100]
mov ebp, dword [esp + 0x47c]
push eax
mov eax, dword [esp + 0x484]
push eax
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push ebp
push eax
push ecx
push edi
lea edx, [esp + 0x48]
push 0xa6
push edx
call fcn.00428080
lea eax, [edi - 0xc]
add esp, 0x28
cmp eax, dword [0x4a4010]
je 0x44018a
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x44018a
push edi
call fcn.00462471
add esp, 4
mov eax, dword [esp + 0x14]
lea ecx, [eax - 0xc]
mov byte [esp + 0x474], 1
cmp ecx, dword [0x4a4010]
je 0x440253
lea edi, [eax - 0xc]
jmp 0x44023f
mov edi, dword [esi + 0xf8]
cmp dword [edi - 0xc], 0
jl 0x4401c9
lea edx, [edi - 0xc]
push edx
mov dword [esp + 0x18], edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4401e0
mov eax, dword [0x4a4014]
push edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], eax
call fcn.0041be90
mov edi, dword [esp + 0x14]
mov byte [esp + 0x474], 4
call fcn.004659fb
mov ecx, dword [esp + 0x480]
mov edx, dword [esi + 0x104]
mov ebp, dword [esp + 0x47c]
push eax
mov eax, dword [esi + 0x100]
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ebp
push ecx
push edx
push edi
lea eax, [esp + 0x48]
push 0xa6
push eax
call fcn.00428080
lea ecx, [edi - 0xc]
add esp, 0x28
mov byte [esp + 0x474], 1
cmp ecx, dword [0x4a4010]
je 0x440253
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x440253
push edi
call fcn.00462471
add esp, 4
mov edi, dword [esp + 0x24]
test edi, edi
je 0x440279
cmp word [edi], 0
je 0x440279
push 0x48d9c0
lea ecx, [esp + 0x2c]
call fcn.0041b7c0
push edi
lea ecx, [esp + 0x2c]
call fcn.0041b7c0
mov ecx, ebx
xor edi, edi
call fcn.00423f00
cmp dword [eax], edi
je 0x44028b
mov edi, 0xbb8
mov eax, dword [esi + 0x14]
mov ecx, dword [esp + 0x28]
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push edi
push ecx
push eax
call edx
cmp ebp, 2
je 0x4405d0
cmp ebp, 3
je 0x4405d0
cmp ebp, 0xd
jne 0x44037f
mov eax, dword [0x4a4014]
push 0x2711
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
call fcn.0041c340
mov ecx, ebx
mov byte [esp + 0x474], 8
call fcn.00423f30
push eax
lea ecx, [esp + 0x20]
call fcn.0041d280
mov ecx, dword [esp + 0x1c]
cmp dword [ecx - 8], 0
mov byte [esp + 0x474], 9
jne 0x440307
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x20]
call fcn.0041be30
mov eax, dword [0x4a4014]
mov dword [esp + 0x14], eax
mov ecx, ebx
mov byte [esp + 0x474], 0xa
call fcn.00423fa0
mov ecx, dword [esi + 0x100]
mov edx, dword [esp + 0x1c]
mov eax, dword [eax]
push ecx
mov ecx, dword [esi + 0x104]
push edx
push ecx
mov edx, ecx
push edx
push eax
lea ecx, [esp + 0x28]
push str.http:__stat.apc.360.cn_stat.html_typeopenactiontiyanjihuafrom_dappver_spackagever_suid1pid_sm_s
push ecx
call fcn.0041d3c0
mov esi, dword [esi + 0x14]
mov eax, dword [esp + 0x30]
mov edx, dword [esi]
mov ecx, dword [edx + 0x30]
add esp, 0x1c
push 0xbb8
push eax
push esi
call ecx
lea ecx, [esp + 0x14]
call fcn.0041b2e0
lea ecx, [esp + 0x1c]
call fcn.0041b2e0
lea ecx, [esp + 0x18]
call fcn.0041b2e0
jmp 0x4406fb
cmp ebp, 0xa
je 0x4406fb
cmp ebp, 0x203
jne 0x440576
lea edx, [esi + 0xf8]
push edx
lea ecx, [esp + 0x28]
call fcn.0041d280
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
xor ebx, ebx
push ebx
call edi
push 1
mov ebp, eax
call edi
mov ecx, dword [0x4a4014]
mov dword [esp + 0x1c], ecx
push eax
push ebp
lea edx, [esp + 0x24]
push str._dx_d
push edx
mov byte [esp + 0x484], 0xc
call fcn.0041d3c0
push 0x208
lea ecx, [esp + 0x66]
xor eax, eax
push ebx
push ecx
xor edi, edi
mov word [esp + 0x6c], ax
call fcn.00461950
add esp, 0x1c
push 0x98
lea ecx, [esp + 0x38]
mov dword [esp + 0x44], 0x104
mov dword [esp + 0x48], 1
call fcn.0041c430
lea edx, [esp + 0x40]
push edx
mov edx, dword [esp + 0x38]
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x4c]
push ecx
push 0x48a368
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jl 0x4404f2
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x5c]
push str._04d_02d_02d
push eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ebx
call fcn.004659c7
lea ecx, [esp + 0x5c]
push ecx
call fcn.00461ca9
lea edx, [esp + 0x60]
push edx
call fcn.00461c82
push eax
push str._Y_m_d
lea eax, [esp + 0x280]
push 0x104
push eax
call fcn.0046593a
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x88]
push str._04d_02d_02d
push ecx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x7c], ebx
call fcn.004659c7
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x78]
add esp, 0x40
push edx
mov edx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x3c]
push edx
push eax
push ecx
call fcn.0043ead0
mov edi, eax
add esp, 0x18
cmp edi, ebx
jge 0x4404f2
xor edi, edi
mov edx, dword [0x4a4014]
mov dword [esp + 0x14], edx
mov eax, dword [0x4a9468]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esi + 0x100]
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esi + 0x104]
push edx
push eax
push edi
push ecx
mov edx, ecx
push edx
lea eax, [esp + 0x30]
push str.http:__stat.apc.360.cn_stat.html_typeopenactionxiezaianquanzhuomianappver_spackagever_stimes_duid1pid_sm_srsl_srmdata_d
push eax
mov byte [esp + 0x498], 0xe
call fcn.0041d3c0
mov esi, dword [esi + 0x14]
mov edx, dword [esp + 0x38]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x30]
add esp, 0x24
push 0xbb8
push edx
push esi
call eax
lea ecx, [esp + 0x14]
call fcn.0041b2e0
lea ecx, [esp + 0x34]
call fcn.0041b2e0
lea ecx, [esp + 0x1c]
call fcn.0041b2e0
lea ecx, [esp + 0x24]
call fcn.0041b2e0
jmp 0x4406fb
cmp ebp, 0x205
jne 0x4406fb
mov ecx, dword [0x4a4014]
mov dword [esp + 0x14], ecx
mov edx, dword [esi + 0x104]
push edx
lea eax, [esp + 0x18]
push str.http:__stat.apc.360.cn_xiezai2.html_appver_sr10r20r30r40r50r60r70c0d0e0
push eax
mov byte [esp + 0x480], 0xf
call fcn.0041d3c0
mov esi, dword [esi + 0x14]
mov edx, dword [esp + 0x20]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x30]
add esp, 0xc
push 0xbb8
push edx
push esi
call eax
lea ecx, [esp + 0x14]
call fcn.0041b2e0
jmp 0x4406fb
mov ecx, dword [0x4a4014]
mov dword [esp + 0x14], ecx
push 0x2711
lea ecx, [esp + 0x18]
call fcn.0041c340
mov ecx, ebx
mov byte [esp + 0x474], 5
call fcn.00423f30
mov edi, dword [eax]
cmp dword [edi - 0xc], 0
jl 0x44060f
lea edx, [edi - 0xc]
push edx
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x440626
mov eax, dword [0x4a4014]
push edi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
call fcn.0041be90
mov edi, dword [esp + 0x18]
cmp dword [edi - 8], 0
mov byte [esp + 0x474], 6
jne 0x440646
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x1c]
call fcn.0041be30
mov edi, dword [esp + 0x18]
mov edx, dword [0x4a4014]
mov dword [esp + 0x24], edx
mov eax, dword [esi + 0x100]
mov ecx, dword [esi + 0x104]
push eax
push edi
push ecx
mov edx, ecx
push edx
lea eax, [esp + 0x34]
push str.http:__stat.apc.360.cn_stat.html_typenewactionstartinstallappver_sr1_suid1pid_sm_s
push eax
mov byte [esp + 0x48c], 7
call fcn.0041d3c0
mov esi, dword [esi + 0x14]
mov ebp, dword [esp + 0x3c]
mov ecx, dword [esi]
mov edx, dword [ecx + 0x30]
add esp, 0x18
push 0xbb8
push ebp
push esi
call edx
lea eax, [ebp - 0xc]
cmp eax, dword [0x4a4010]
je 0x4406b3
lea esi, [ebp - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4406b3
push esi
call fcn.00462471
add esp, 4
lea ecx, [edi - 0xc]
cmp ecx, dword [0x4a4010]
je 0x4406d5
lea esi, [edi - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4406d5
push esi
call fcn.00462471
add esp, 4
mov eax, dword [esp + 0x14]
lea edx, [eax - 0xc]
cmp edx, dword [0x4a4010]
je 0x4406fb
lea esi, [eax - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4406fb
push esi
call fcn.00462471
add esp, 4
mov esi, dword [esp + 0x20]
lea eax, [esi - 0xc]
cmp eax, dword [0x4a4010]
je 0x440721
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x440721
push esi
call fcn.00462471
add esp, 4
mov esi, dword [esp + 0x28]
lea ecx, [esi - 0xc]
cmp ecx, dword [0x4a4010]
je 0x440747
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x440747
push esi
call fcn.00462471
add esp, 4
mov ecx, dword [esp + 0x46c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x454]
xor ecx, esp
call fcn.00461932
add esp, 0x464
ret 0xc