Function at 0x435df4
Capabilities:
Create directory
Create thread
Delete registry value
Get common file path
Set registry value

Disassembly:
push ebp
sub esp, 0x8c8
lea ebp, [esp - 4]
mov eax, dword [0x4f3bd0]
xor eax, ebp
mov dword [ebp + 0x8c8], eax
push 0x1c
mov eax, 0x4af8f7
call fcn.004764b0
mov ebx, ecx
push 0x2860
lea ecx, [ebp - 0x18]
call fcn.0040260e
xor edi, edi
push edi
push edi
push dword [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.00477872
add esp, 0xc
cmp eax, edi
je 0x435e45
lea ecx, [ebx + 0x38]
call fcn.0046a2cc
push 4
lea eax, [ebp - 0x1c]
push eax
push 4
push str.CloseAllFlagForEnt
xor esi, esi
push str.Software360SoftMgrSML
inc esi
push SysReAllocStringLen
mov dword [ebp - 0x1c], esi
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
xor eax, eax
push 0x7fe
mov word [ebp], ax
lea eax, [ebp + 2]
push edi
push eax
call fcn.00475410
add esp, 0xc
push esi
push 0x1a
lea eax, [ebp]
push eax
push edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
push str.360Safe
lea eax, [ebp]
push eax
call esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp]
push eax
call edi
push str.360SoftMgrLite
lea eax, [ebp]
push eax
call esi
push 0
lea eax, [ebp]
push eax
call edi
push str.TaskBarBtn.ini
lea eax, [ebp]
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp]
push eax
mov edi, 0x4b8cb8
push edi
push str.MainWndOrStartMenu
push str.SoftMgrLite
call esi
lea eax, [ebp]
push eax
push edi
push str.CloudNewsNotTipCycle
push str.CloudNews
call esi
lea eax, [ebp]
push eax
push 0x4b8cbc
push str.StartFlag
push str.TaskBarBtn
call esi
push 0x4f9e00
lea ecx, [ebp - 0x14]
call fcn.0040293e
push 0
mov byte [ebp - 4], 1
call fcn.00476079
push edx
push eax
lea eax, [ebp - 0x14]
push str._I64d
push eax
call fcn.00403b17
add esp, 0x14
lea eax, [ebp]
push eax
push dword [ebp - 0x14]
push str.BNavExitForeverTime
push str.NetSpeed
call esi
lea eax, [ebp]
push eax
push edi
push str.BNavExitForeverCount
push str.NetSpeed
call esi
mov esi, dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
push str.nopop_safe_inst
push str.SOFTWARE360Safe_stat
push reloc.OLEAUT32.dll_SysReAllocString
call esi
push str.safe_jisu
push str.SOFTWARE360Safe
push SysReAllocStringLen
call esi
mov ecx, dword [ebx + 8]
xor esi, esi
cmp ecx, esi
je 0x435fa9
call fcn.0045e7a8
cmp dword [eax + 0xd4], esi
je 0x435fa9
mov ecx, ebx
call fcn.0043574a
push 2
mov ecx, ebx
call fcn.00432a9f
mov ecx, ebx
call fcn.00430664
mov ecx, ebx
call fcn.004319d4
push str.Start_SetModularizeFlag
call fcn.00404d2e
mov dword [esp], str.End_SetModularizeFlag
call fcn.00404d2e
mov dword [esp], str.Start_SetGuideFlag
call fcn.00404d2e
pop ecx
mov ecx, ebx
call fcn.00430b36
push str.End_SetGuideFlag
call fcn.00404d2e
mov dword [esp], str.Start_UseSpecificSkin
call fcn.00404d2e
pop ecx
mov ecx, ebx
call fcn.00435516
push str.End_UseSpecificSkin
call fcn.00404d2e
mov dword [esp], str.Start_DoCreateShortcuts
call fcn.00404d2e
pop ecx
mov ecx, ebx
call fcn.00434e60
push str.End_DoCreateShortcuts
call fcn.00404d2e
mov dword [esp], str.Start_WriteUninstallRegister
call fcn.00404d2e
pop ecx
mov ecx, dword [ebx + 8]
call fcn.004602ab
test eax, eax
jne 0x436053
mov ecx, dword [ebx + 8]
call fcn.0045e8ea
test eax, eax
jne 0x436053
mov ecx, ebx
call fcn.00433017
push str.End_WriteUninstallRegister
call fcn.00404d2e
pop ecx
mov ecx, dword [ebx + 8]
call fcn.0045e797
mov edi, eax
cmp edi, esi
je 0x4360e6
mov eax, dword [edi]
push edi
call dword [eax + 0x1c]
test eax, eax
jne 0x436080
mov eax, dword [edi]
push edi
call dword [eax + 0x38]
test eax, eax
je 0x4360e6
lea ecx, [ebp - 0x28]
call fcn.00454128
push 0xbb
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call fcn.00432535
push dword [eax]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.00402894
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00402963
push esi
lea eax, [ebp - 0x28]
push eax
push 0x3443
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
push esi
push esi
push 0x4308a3
push esi
push esi
call fcn.00475fc9
add esp, 0x18
lea ecx, [ebp - 0x28]
mov dword [ebx + 4], eax
mov byte [ebp - 4], 1
call fcn.00447c1c
mov ecx, dword [ebx + 8]
call fcn.0045e717
cmp eax, 1
je 0x436180
cmp eax, 2
je 0x436180
cmp eax, esi
jne 0x43619d
xor eax, eax
push 0xc6
mov word [ebp + 0x800], ax
lea eax, [ebp + 0x802]
push esi
push eax
call fcn.00475410
mov ecx, dword [ebx + 8]
add esp, 0xc
call fcn.0045e781
mov ecx, dword [eax]
push 0x64
lea edx, [ebp + 0x800]
push edx
push eax
call dword [ecx + 0x3c]
push str.http:__api.ssl.so.com_recom_history_del_idmid_
lea ecx, [ebp - 0x10]
call fcn.0040260e
lea eax, [ebp + 0x800]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 4
call fcn.00403af2
mov ecx, dword [ebx + 8]
call fcn.0045e781
mov ecx, dword [eax]
push 0x7d0
push dword [ebp - 0x10]
push eax
call dword [ecx + 0x38]
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00402963
jmp 0x43619d
push str.ClearUpdateFiles_begin
call fcn.00404d2e
pop ecx
mov ecx, ebx
call fcn.00431d9a
push str.ClearUpdateFiles_end
call fcn.00404d2e
pop ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00402963
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402963
xor eax, eax
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8c8]
xor ecx, ebp
call fcn.0047548a
add ebp, 0x8cc
leave
ret