Function at 0x409377
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x4d4
mov eax, 0x6cbf01
call fcn.00573bfd
mov esi, ecx
mov dword [ebp - 0x4d8], esi
mov dword [ebp - 0x4d8], esi
lea ecx, [ebp - 0x458]
xor ebx, ebx
mov dword [ebp - 0x444], 0xf
push str.JiSu
mov dword [ebp - 0x448], ebx
mov byte [ebp - 0x458], bl
call fcn.0040249b
push 9
push 0x782c4c
push ebx
lea ecx, [ebp - 0x458]
mov dword [ebp - 4], ebx
call fcn.00402a2a
push eax
lea ecx, [ebp - 0x428]
call fcn.00402334
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 2
call fcn.00402475
push 0x10
pop edi
cmp dword [ebp - 0x414], edi
lea ecx, [ebp - 0x4d4]
push ecx
push 0x20019
lea eax, [ebp - 0x428]
cmovae eax, dword [ebp - 0x428]
push ebx
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x409599
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x440]
call fcn.0040224b
mov edi, eax
mov byte [ebp - 4], 3
cmp dword [edi + 0x14], 0x10
jb 0x409445
mov edi, dword [edi]
push str.JiSu
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x478], ebx
mov dword [ebp - 0x474], 0xf
mov byte [ebp - 0x488], bl
call fcn.0040249b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x470]
push str.HKEY_CURRENT_USER
mov dword [ebp - 0x460], ebx
mov dword [ebp - 0x45c], 0xf
mov byte [ebp - 0x470], bl
call fcn.0040249b
push 0x13
push str.Failed_to_open_key:
push ebx
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 5
call fcn.00402a2a
push eax
lea ecx, [ebp - 0x4b8]
call fcn.00402334
push str.Software_
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 6
call fcn.004022f2
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00402334
lea eax, [ebp - 0x488]
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0x4a0]
lea ecx, [ebp - 0x4d0]
call fcn.0040261f
pop ecx
mov ecx, eax
mov byte [ebp - 4], 8
cmp dword [ecx + 0x14], 0x10
jb 0x409503
mov ecx, dword [ecx]
cmp dword [0x7c5e50], 0x10
mov eax, 0x7c5e3c
push 0x78004c
cmovae eax, dword [0x7c5e3c]
push edi
push 0x782548
push ecx
push str.ERROR:
push 0x51c
push str.Services::GetInstallerResultUIString
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push eax
push str.MYSD_ErrMsg_JiSu
push 2
call fcn.0042384c
add esp, 0x2c
lea ecx, [ebp - 0x4d0]
call fcn.00402475
lea ecx, [ebp - 0x4a0]
call fcn.00402475
lea ecx, [ebp - 0x4b8]
call fcn.00402475
lea ecx, [ebp - 0x470]
call fcn.00402475
lea ecx, [ebp - 0x488]
call fcn.00402475
lea ecx, [ebp - 0x440]
call fcn.00402475
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], 0xf
mov byte [esi], bl
jmp 0x4097f8
push 4
pop eax
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], eax
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x4d8]
mov dword [ebp - 0x4d8], ebx
push eax
lea eax, [ebp - 0x4e0]
push eax
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push str.InstallerResult
push dword [ebp - 0x4d4]
call ebx
test eax, eax
je 0x40966f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x440]
call fcn.0040224b
mov ecx, eax
mov byte [ebp - 4], 9
cmp dword [ecx + 0x14], edi
jb 0x4095ff
mov ecx, dword [ecx]
cmp dword [0x7c5e50], edi
mov eax, 0x7c5e3c
push 0x78004c
cmovae eax, dword [0x7c5e3c]
push ecx
push 0x782548
push str.Failed_to_query_value:InstallerResult
push str.ERROR:
push 0x526
push str.Services::GetInstallerResultUIString
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push eax
push str.MYSD_ErrMsg_JiSu
push 2
call fcn.0042384c
add esp, 0x2c
lea ecx, [ebp - 0x440]
call fcn.00402475
push dword [ebp - 0x4d4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
jmp 0x4097f8
mov edx, dword [ebp - 0x4d8]
test edx, edx
je 0x409650
lea ecx, [ebp - 0x440]
call fcn.004021fe
mov ecx, eax
mov byte [ebp - 4], 0xa
cmp dword [ecx + 0x14], edi
jb 0x409691
mov ecx, dword [ecx]
cmp dword [0x7c5e50], 0x10
mov edi, 0x7c5e3c
push 0x78004c
push ecx
push str.InstallerResult:
push str.INFO:
push 0x531
push str.Services::GetInstallerResultUIString
mov eax, edi
cmovae eax, dword [0x7c5e3c]
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push eax
push str.MYSD_ErrMsg_JiSu
push 1
call fcn.0042384c
add esp, 0x28
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x440]
call fcn.00402475
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.0068d6d0
add esp, 0xc
mov dword [ebp - 0x4e0], 1
lea eax, [ebp - 0x4dc]
mov dword [ebp - 0x4dc], 0x400
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x4e0]
push eax
push 0
push str.InstallerResultUIString
push dword [ebp - 0x4d4]
call ebx
test eax, eax
je 0x40978d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x440]
call fcn.0040224b
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 0x10
jb 0x409755
mov eax, dword [eax]
cmp dword [0x7c5e50], 0x10
push 0x78004c
cmovae edi, dword [0x7c5e3c]
push eax
push 0x782548
push str.Failed_to_query_value:InstallerResultUIString
push str.ERROR:
push 0x539
push str.Services::GetInstallerResultUIString
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push edi
jmp 0x409636
cmp dword [0x7c5e50], 0x10
lea eax, [ebp - 0x410]
push 0x78004c
cmovae edi, dword [0x7c5e3c]
push eax
push str.InstallerResultUIString:
push str.INFO:
push 0x53d
push str.Services::GetInstallerResultUIString
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push edi
push str.MYSD_ErrMsg_JiSu
push 1
call fcn.0042384c
add esp, 0x28
push dword [ebp - 0x4d4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [esi + 0x10], 0
lea eax, [ebp - 0x410]
mov dword [esi + 0x14], 0xf
mov ecx, esi
push eax
mov byte [esi], 0
call fcn.0040249b
lea ecx, [ebp - 0x428]
call fcn.00402475
mov eax, esi
call fcn.00573ba7
ret