Function at 0x403f2d
Capabilities:
Set registry value

Disassembly:
push 0x1c
mov eax, 0x407d24
call fcn.00406ce7
push dword [ebp + 8]
xor esi, esi
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x14], esi
call fcn.00401d24
mov dword [ebp - 4], esi
push str._resetdef
lea ecx, [ebp - 0x20]
call fcn.00401d24
mov byte [ebp - 4], 1
push dword [ebp - 0x18]
mov ecx, eax
call fcn.00402d79
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401848
test bl, bl
je 0x403f9a
call dword [sym.imp.TTUtilWidget.dll_void___cdecl_Util::Module::UnInstallTT_void_]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401848
xor eax, eax
inc eax
call fcn.00406dbf
ret
push str.OnlyRegister_1
lea ecx, [ebp - 0x20]
call fcn.00401d24
mov byte [ebp - 4], 2
push dword [ebp - 0x18]
mov ecx, eax
call fcn.00402d79
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401848
test bl, bl
je 0x403fd8
push 1
call dword [sym.imp.TTUtilWidget.dll_int___cdecl_Util::Module::SetTTAsDefaultInVistaAsAdminPri_int_]
pop ecx
jmp 0x403f85
push str.OnlyRegister_0
lea ecx, [ebp - 0x20]
call fcn.00401d24
mov byte [ebp - 4], 3
push dword [ebp - 0x18]
mov ecx, eax
call fcn.00402d79
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401848
test bl, bl
je 0x40400e
push esi
jmp 0x403fcf
push str.Reg_TTData
lea ecx, [ebp - 0x20]
call fcn.00401d24
mov byte [ebp - 4], 4
push dword [ebp - 0x18]
mov ecx, eax
call fcn.00402d79
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401848
test bl, bl
je 0x4040e8
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.TTUtilWidget.dll_int___cdecl_Util::Module::GetBinPath_wchar_t___]
pop ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x20]
call fcn.00401d24
mov byte [ebp - 4], 6
push 0x4098dc
lea ecx, [ebp - 0x20]
call fcn.00401ca5
push 1
push dword [ebp - 0x20]
call dword [sym.imp.TTUtilWidget.dll_struct_HINSTANCE______cdecl_Util::Module::TTLoadLibrary_wchar_t_const___int_]
cmp eax, esi
pop ecx
pop ecx
je 0x4040a8
push str.DllRegisterServer
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, esi
je 0x4040a1
call eax
cmp eax, esi
jge 0x4040ca
push 0xa5
jmp 0x4040ad
push 0xa9
jmp 0x4040ad
push 0xae
push str..TencentTraveler.cpp
push str.file:_s__line:_s
push str.TencentTraveler
push 0x1000
call dword [sym.imp.TTUtilWidget.dll_public:_static_void___cdecl_TTLogDef::TT_Log_enum_ENUM_LOG_SERVERITY__wchar_t_const___wchar_t_const__]
add esp, 0x14
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x20]
call fcn.00401848
mov byte [ebp - 4], 0
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x403f85
push 0x16
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.004035b2
mov esi, eax
mov byte [ebp - 4], 7
push str.ModifyConfigPahtBegin_
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x14], 1
call fcn.00401d24
push 8
pop ebx
mov dword [ebp - 4], ebx
push esi
push eax
mov dword [ebp - 0x14], 3
call fcn.004032c8
test al, al
pop ecx
pop ecx
push 9
pop esi
je 0x404173
push 0x14
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040355a
mov edi, eax
mov dword [ebp - 4], esi
push str._ModifyConfigPahtEnd
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x14], 7
call fcn.00401d24
mov dword [ebp - 4], 0xa
push edi
push eax
mov dword [ebp - 0x14], 0xf
call fcn.004032c8
test al, al
pop ecx
pop ecx
mov byte [ebp - 0xd], 1
jne 0x404177
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], esi
test byte [ebp - 0x14], bl
je 0x40418b
and dword [ebp - 0x14], 0xfffffff7
lea ecx, [ebp - 0x20]
call fcn.00401848
mov dword [ebp - 4], ebx
test byte [ebp - 0x14], 4
je 0x4041a0
and dword [ebp - 0x14], 0xfffffffb
lea ecx, [ebp - 0x1c]
call fcn.00401848
mov dword [ebp - 4], 7
test byte [ebp - 0x14], 2
je 0x4041b9
and dword [ebp - 0x14], 0xfffffffd
lea ecx, [ebp - 0x24]
call fcn.00401848
and dword [ebp - 4], 0
test byte [ebp - 0x14], 1
je 0x4041cf
and dword [ebp - 0x14], 0xfffffffe
lea ecx, [ebp - 0x28]
call fcn.00401848
cmp byte [ebp - 0xd], 0
je 0x40425d
mov eax, dword [ebp - 0x18]
mov eax, dword [eax - 0xc]
add eax, 0xffffffea
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040355a
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax - 0xc]
add eax, 0xffffffec
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004035b2
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x1c]
call fcn.00403c81
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.00401848
push 0x104
lea ecx, [ebp - 0x1c]
call fcn.00401919
push 0x208
push eax
push 1
push str.ConfigPath
push str.SoftwareTencentTTraveler
push SysReAllocStringLen
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00401848
jmp 0x403f85
push str._startbyinstall
lea ecx, [ebp - 0x28]
call fcn.00401d24
mov byte [ebp - 4], 0xd
push dword [ebp - 0x18]
mov ecx, eax
call fcn.00402d79
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00401848
test bl, bl
je 0x40429e
push 1
call dword [sym.imp.TTUtilWidget.dll_void___cdecl_Util::Module::SetStartbyInstall_bool_]
pop ecx
jmp 0x40435d
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00403534
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1c]
call fcn.00403c59
push 4
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004035b2
mov byte [ebp - 4], 0xf
push str..tul
lea ecx, [ebp - 0x28]
call fcn.00401d24
mov byte [ebp - 4], 0x10
push dword [eax]
lea ecx, [ebp - 0x20]
call fcn.00402d79
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
call fcn.00401848
test bl, bl
je 0x404345
mov eax, dword [ebp - 0x20]
mov eax, dword [eax - 0xc]
cmp eax, 0x105
mov ebx, 0x40f058
jae 0x40431f
push dword [ebp - 0x1c]
push 0x104
push ebx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
xor esi, esi
mov eax, dword [esi*4 + 0x40f008]
test eax, eax
je 0x404337
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x404361
inc esi
cmp esi, 0xa
jl 0x404321
push ebx
call dword [sym.imp.TTUtilWidget.dll_void___cdecl_Util::Module::SetDelayOpenTulFileName_wchar_t_const__]
pop ecx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x20]
call fcn.00401848
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00401848
xor esi, esi
jmp 0x404391
push ebx
push 0
push 0x7b3
push dword [esi*4 + 0x40f008]
call dword [sym.imp.USER32.dll_PostMessageW]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x20]
call fcn.00401848
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00401848
xor esi, esi
inc esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401848
mov eax, esi
jmp 0x403f94