Function at 0x40be10
Capabilities:
Delete registry key
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x413230
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push esi
push edi
mov edi, 0x104
lea ecx, [esp + 8]
mov dword [esp + 0x24], 1
mov dword [esp + 0x10], edi
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 8]
mov byte [esp + 0x24], 3
call sub.MFC42.DLL_CString::Empty
push 0xfd
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::LoadStringA
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x2c]
mov esi, dword [sym.imp.MSVCRT.dll__mbscmp]
push eax
push ecx
call esi
add esp, 8
test eax, eax
jne 0x40be97
push 0x41b4b8
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
jmp 0x40bf07
push 0x89
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::LoadStringA
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x2c]
push edx
push eax
call esi
add esp, 8
test eax, eax
jne 0x40bec8
push 0x41b494
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
jmp 0x40bf07
push 0xff
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::LoadStringA
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x2c]
push ecx
push edx
call esi
add esp, 8
test eax, eax
jne 0x40bef9
push 0x41b4a8
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
jmp 0x40bf07
lea eax, [esp + 0x2c]
lea ecx, [esp + 8]
push eax
call fcn.00411230
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString
push 0x5c
lea ecx, [esp + 0x34]
mov byte [esp + 0x28], 4
call sub.MFC42.DLL_CString::Find_1
cmp eax, 0xffffffff
je 0x40bf41
push 0x7e
push eax
lea ecx, [esp + 0x38]
call sub.MFC42.DLL_CString::SetAt
push 0x5c
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CString::Find_1
cmp eax, 0xffffffff
jne 0x40bf25
push 0x5c
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::Find_1
cmp eax, 0xffffffff
je 0x40bf6d
push 0x7e
push eax
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::SetAt
push 0x5c
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::Find_1
cmp eax, 0xffffffff
jne 0x40bf51
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 8]
push ecx
push edx
push 0x41b4f4
push 0x41b038
lea eax, [esp + 0x28]
push 0x41b520
push eax
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x30]
add esp, 0x18
lea ecx, [esp + 0x14]
push ecx
push 0x20019
push 0
push edx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40c09b
mov esi, dword [esp + 0x38]
push edi
mov ecx, esi
mov dword [esp + 0x14], edi
call sub.MFC42.DLL_CString::GetBuffer
mov edx, dword [esp + 0x14]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea ecx, [esp + 0x10]
push ecx
push eax
push 0
push 0
push 0
push edx
call edi
push 0xffffffffffffffff
mov ecx, esi
call sub.MFC42.DLL_CString::ReleaseBuffer
mov eax, dword [esi]
mov eax, dword [eax - 8]
cmp eax, 0x24
jle 0x40c01c
lea ecx, [esp + 0x38]
push 0x24
push ecx
mov ecx, esi
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, esi
mov byte [esp + 0x28], 5
call fcn.00411230
lea ecx, [esp + 0x38]
mov byte [esp + 0x24], 4
call fcn.00411236
mov esi, dword [esp + 0x34]
push 0x400
mov ecx, esi
mov dword [esp + 0x14], 0x400
call sub.MFC42.DLL_CString::GetBuffer
lea edx, [esp + 0x10]
push edx
push eax
mov eax, dword [esp + 0x1c]
push 0
push 0
push 0x41b514
push eax
call edi
push 0xffffffffffffffff
mov ecx, esi
call sub.MFC42.DLL_CString::ReleaseBuffer
push 0x28
push 0x40
mov dword [esp + 0x18], 0x28
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
mov esi, eax
push ecx
push esi
push 0
push 0
push 0x41b508
push edx
call edi
mov eax, dword [esp + 0x3c]
push eax
push esi
call dword [sym.imp.RPCRT4.dll_UuidFromStringA]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x40]
pop edi
test eax, eax
pop esi
je 0x40c0b5
mov edx, dword [esp + 0x10]
push edx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], 3
call fcn.00411236
lea ecx, [esp + 4]
mov byte [esp + 0x1c], 2
call fcn.00411236
lea ecx, [esp]
mov byte [esp + 0x1c], 1
call fcn.00411236
lea ecx, [esp + 0x24]
mov byte [esp + 0x1c], 0
call fcn.00411236
lea ecx, [esp + 0x28]
mov dword [esp + 0x1c], 0xffffffff
call fcn.00411236
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
add esp, 0x20
ret 0x18