Function at 0x440b90
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x480ea0
mov eax, dword fs:[0]
push eax
sub esp, 0x248
mov eax, dword [0x4a30f8]
xor eax, esp
mov dword [esp + 0x244], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a30f8]
xor eax, esp
push eax
lea eax, [esp + 0x25c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x274]
mov esi, ecx
cmp dword [esi + 0x14], 0
mov dword [esp + 0x24], eax
je 0x4412e8
mov ecx, dword [0x4a1014]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x264], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00464724
lea ebp, [esi + 0x18]
add esp, 4
mov ecx, ebp
mov dword [esp + 0x1c], 0x3e8
call fcn.00424950
cmp eax, 1
jne 0x440c27
mov dword [esp + 0x1c], 0xbb8
jmp 0x440c3b
mov ecx, ebp
call fcn.00424940
cmp dword [eax], 1
jne 0x440c3b
mov dword [esp + 0x1c], 0x7d0
push 0x491898
lea ecx, [esp + 0x24]
call fcn.0041deb0
cmp dword [esi + 0xec], 0
mov byte [esp + 0x264], 1
je 0x440c61
push str.uninst
jmp 0x440c89
mov eax, dword [esi + 0x88]
sub eax, 0
je 0x440c84
sub eax, 1
je 0x440c7d
sub eax, 1
jne 0x440c92
push str.coverinst
jmp 0x440c89
push str.update
jmp 0x440c89
push 0x48aa6c
lea ecx, [esp + 0x24]
call fcn.0041ca80
mov eax, dword [esi + 0xec]
test eax, eax
jne 0x440d9d
mov edx, dword [0x4a1014]
push 0x2711
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], edx
call fcn.0041cf30
mov ecx, ebp
mov byte [esp + 0x264], 2
call fcn.00424970
mov edi, dword [eax]
cmp dword [edi - 0xc], 0
jl 0x440cdf
lea eax, [edi - 0xc]
push eax
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x440cf7
mov ecx, dword [0x4a1014]
mov dword [esp + 0x18], ecx
push edi
lea ecx, [esp + 0x1c]
call fcn.0041ca80
mov edi, dword [esp + 0x18]
cmp dword [edi - 8], 0
mov byte [esp + 0x264], 3
jne 0x440d17
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x1c]
call fcn.0041ca20
mov edi, dword [esp + 0x18]
call fcn.00464736
mov ecx, dword [esi + 0x104]
mov edx, dword [esi + 0x100]
mov ebx, dword [esp + 0x26c]
push eax
mov eax, dword [esp + 0x274]
push eax
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push ebx
push eax
push ecx
push edi
lea edx, [esp + 0x48]
push 0xa6
push edx
call fcn.00428aa0
lea eax, [edi - 0xc]
add esp, 0x28
cmp eax, dword [0x4a1010]
je 0x440d7a
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x440d7a
push edi
call fcn.00461ef0
add esp, 4
mov eax, dword [esp + 0x14]
lea ecx, [eax - 0xc]
mov byte [esp + 0x264], 1
cmp ecx, dword [0x4a1010]
je 0x440e43
lea edi, [eax - 0xc]
jmp 0x440e2f
mov edi, dword [esi + 0xf8]
cmp dword [edi - 0xc], 0
jl 0x440db9
lea edx, [edi - 0xc]
push edx
mov dword [esp + 0x18], edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x440dd0
mov eax, dword [0x4a1014]
push edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], eax
call fcn.0041ca80
mov edi, dword [esp + 0x14]
mov byte [esp + 0x264], 4
call fcn.00464736
mov ecx, dword [esp + 0x270]
mov edx, dword [esi + 0x104]
mov ebx, dword [esp + 0x26c]
push eax
mov eax, dword [esi + 0x100]
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ebx
push ecx
push edx
push edi
lea eax, [esp + 0x48]
push 0xa6
push eax
call fcn.00428aa0
lea ecx, [edi - 0xc]
add esp, 0x28
mov byte [esp + 0x264], 1
cmp ecx, dword [0x4a1010]
je 0x440e43
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x440e43
push edi
call fcn.00461ef0
add esp, 4
mov edi, dword [esp + 0x24]
test edi, edi
je 0x440e69
cmp word [edi], 0
je 0x440e69
push 0x48aa68
lea ecx, [esp + 0x2c]
call fcn.0041c3a0
push edi
lea ecx, [esp + 0x2c]
call fcn.0041c3a0
mov ecx, ebp
xor edi, edi
call fcn.00424940
cmp dword [eax], edi
je 0x440e7b
mov edi, 0xbb8
mov eax, dword [esi + 0x14]
mov ecx, dword [esp + 0x28]
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push edi
push ecx
push eax
call edx
cmp ebx, 2
je 0x441171
cmp ebx, 3
je 0x441171
cmp ebx, 0xd
jne 0x440f6f
mov eax, dword [0x4a1014]
push 0x2711
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
call fcn.0041cf30
mov ecx, ebp
mov byte [esp + 0x264], 8
call fcn.00424970
push eax
lea ecx, [esp + 0x20]
call fcn.0041de70
mov ecx, dword [esp + 0x1c]
cmp dword [ecx - 8], 0
mov byte [esp + 0x264], 9
jne 0x440ef7
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x20]
call fcn.0041ca20
mov eax, dword [0x4a1014]
mov dword [esp + 0x14], eax
mov ecx, ebp
mov byte [esp + 0x264], 0xa
call fcn.004249d0
mov ecx, dword [esi + 0x100]
mov edx, dword [esp + 0x1c]
mov eax, dword [eax]
push ecx
mov ecx, dword [esi + 0x104]
push edx
push ecx
mov edx, ecx
push edx
push eax
lea ecx, [esp + 0x28]
push str.http:__stat.apc.360.cn_stat.html_typeopenactiontiyanjihuafrom_dappver_spackagever_suid1pid_sm_s
push ecx
call fcn.0041dfb0
mov esi, dword [esi + 0x14]
mov eax, dword [esp + 0x30]
mov edx, dword [esi]
mov ecx, dword [edx + 0x30]
add esp, 0x1c
push 0xbb8
push eax
push esi
call ecx
lea ecx, [esp + 0x14]
call fcn.0041c130
lea ecx, [esp + 0x1c]
call fcn.0041c130
lea ecx, [esp + 0x18]
call fcn.0041c130
jmp 0x44129c
cmp ebx, 0xa
je 0x44129c
cmp ebx, 0x203
jne 0x441117
lea edx, [esi + 0xf8]
push edx
lea ecx, [esp + 0x28]
call fcn.0041de70
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
xor ebp, ebp
push ebp
call edi
push 1
mov ebx, eax
call edi
mov ecx, dword [0x4a1014]
mov dword [esp + 0x1c], ecx
push eax
push ebx
lea edx, [esp + 0x24]
push str._dx_d
push edx
mov byte [esp + 0x274], 0xc
call fcn.0041dfb0
push 0x208
lea ecx, [esp + 0x62]
xor eax, eax
push ebp
push ecx
xor edi, edi
mov word [esp + 0x68], ax
call fcn.00461880
add esp, 0x1c
push 0x98
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], 0x104
mov dword [esp + 0x38], 1
call fcn.0041d020
lea edx, [esp + 0x38]
push edx
mov edx, dword [esp + 0x34]
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x3c]
push ecx
push str.InstallDate
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jl 0x441093
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x58]
push str._04d_02d_02d
push eax
mov dword [esp + 0x40], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x28], ebp
call fcn.00464702
add esp, 0x14
lea ecx, [esp + 0x3c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edi, dword [esp + 0x14]
movzx edx, word [esp + 0x42]
movzx ecx, word [esp + 0x3e]
movzx eax, word [esp + 0x3c]
push edi
mov edi, dword [esp + 0x1c]
push edi
mov edi, dword [esp + 0x34]
push edi
push edx
push ecx
push eax
call fcn.0043f560
mov edi, eax
add esp, 0x18
cmp edi, ebp
jge 0x441093
xor edi, edi
mov edx, dword [0x4a1014]
mov dword [esp + 0x14], edx
mov eax, dword [0x4a6450]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esi + 0x100]
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esi + 0x104]
push edx
push eax
push edi
push ecx
mov edx, ecx
push edx
lea eax, [esp + 0x30]
push str.http:__stat.apc.360.cn_stat.html_typeopenactionxiezaianquanzhuomianappver_spackagever_stimes_duid1pid_sm_srsl_srmdata_d
push eax
mov byte [esp + 0x288], 0xe
call fcn.0041dfb0
mov esi, dword [esi + 0x14]
mov edx, dword [esp + 0x38]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x30]
add esp, 0x24
push 0xbb8
push edx
push esi
call eax
lea ecx, [esp + 0x14]
call fcn.0041c130
lea ecx, [esp + 0x30]
call fcn.0041c130
lea ecx, [esp + 0x1c]
call fcn.0041c130
lea ecx, [esp + 0x24]
call fcn.0041c130
jmp 0x44129c
cmp ebx, 0x205
jne 0x44129c
mov ecx, dword [0x4a1014]
mov dword [esp + 0x14], ecx
mov edx, dword [esi + 0x104]
push edx
lea eax, [esp + 0x18]
push str.http:__stat.apc.360.cn_xiezai2.html_appver_sr10r20r30r40r50r60r70c0d0e0
push eax
mov byte [esp + 0x270], 0xf
call fcn.0041dfb0
mov esi, dword [esi + 0x14]
mov edx, dword [esp + 0x20]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x30]
add esp, 0xc
push 0xbb8
push edx
push esi
call eax
lea ecx, [esp + 0x14]
call fcn.0041c130
jmp 0x44129c
mov ecx, dword [0x4a1014]
mov dword [esp + 0x14], ecx
push 0x2711
lea ecx, [esp + 0x18]
call fcn.0041cf30
mov ecx, ebp
mov byte [esp + 0x264], 5
call fcn.00424970
mov edi, dword [eax]
cmp dword [edi - 0xc], 0
jl 0x4411b0
lea edx, [edi - 0xc]
push edx
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4411c7
mov eax, dword [0x4a1014]
push edi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
call fcn.0041ca80
mov edi, dword [esp + 0x18]
cmp dword [edi - 8], 0
mov byte [esp + 0x264], 6
jne 0x4411e7
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x1c]
call fcn.0041ca20
mov edi, dword [esp + 0x18]
mov edx, dword [0x4a1014]
mov dword [esp + 0x24], edx
mov eax, dword [esi + 0x100]
mov ecx, dword [esi + 0x104]
push eax
push edi
push ecx
mov edx, ecx
push edx
lea eax, [esp + 0x34]
push str.http:__stat.apc.360.cn_stat.html_typenewactionstartinstallappver_sr1_suid1pid_sm_s
push eax
mov byte [esp + 0x27c], 7
call fcn.0041dfb0
mov esi, dword [esi + 0x14]
mov ebx, dword [esp + 0x3c]
mov ecx, dword [esi]
mov edx, dword [ecx + 0x30]
add esp, 0x18
push 0xbb8
push ebx
push esi
call edx
lea eax, [ebx - 0xc]
cmp eax, dword [0x4a1010]
je 0x441254
lea esi, [ebx - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x441254
push esi
call fcn.00461ef0
add esp, 4
lea ecx, [edi - 0xc]
cmp ecx, dword [0x4a1010]
je 0x441276
lea esi, [edi - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x441276
push esi
call fcn.00461ef0
add esp, 4
mov eax, dword [esp + 0x14]
lea edx, [eax - 0xc]
cmp edx, dword [0x4a1010]
je 0x44129c
lea esi, [eax - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x44129c
push esi
call fcn.00461ef0
add esp, 4
mov esi, dword [esp + 0x20]
lea eax, [esi - 0xc]
cmp eax, dword [0x4a1010]
je 0x4412c2
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4412c2
push esi
call fcn.00461ef0
add esp, 4
mov esi, dword [esp + 0x28]
lea ecx, [esi - 0xc]
cmp ecx, dword [0x4a1010]
je 0x4412e8
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4412e8
push esi
call fcn.00461ef0
add esp, 4
mov ecx, dword [esp + 0x25c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x244]
xor ecx, esp
call fcn.00461862
add esp, 0x254
ret 0xc