Function at 0x405570
Capabilities:
Delete registry key
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x450
mov eax, dword [0x42b21c]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x418], 0
mov al, byte [0x421437]
mov byte [ebp - 0x42c], al
xor ecx, ecx
mov word [ebp - 0x42b], cx
mov byte [ebp - 0x429], cl
lea edx, [ebp - 0x420]
push edx
push 0xf003f
push 0
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
jne 0x405912
cmp dword [ebp + 8], 3
jge 0x405723
mov dword [ebp - 0x424], 0x103
lea edx, [ebp - 0x448]
push edx
push 0
push 0
push 0
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x418]
push edx
mov eax, dword [ebp - 0x420]
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0x103
je 0x40568f
mov dword [ebp - 0x424], 0x103
mov ecx, dword [ebp - 0x418]
add ecx, 1
mov dword [ebp - 0x418], ecx
lea edx, [ebp - 0x448]
push edx
push 0
push 0
push 0
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x418]
push edx
mov eax, dword [ebp - 0x420]
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov dword [ebp - 0x41c], eax
jmp 0x405633
cmp dword [ebp - 0x418], 0
je 0x405721
mov dword [ebp - 0x424], 0x103
mov ecx, dword [ebp - 0x418]
sub ecx, 1
mov dword [ebp - 0x418], ecx
lea edx, [ebp - 0x448]
push edx
push 0
push 0
push 0
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x418]
push edx
mov eax, dword [ebp - 0x420]
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
jne 0x40571c
lea ecx, [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x420]
push edx
mov eax, dword [ebp + 8]
add eax, 1
push eax
call fcn.00405570
add esp, 0xc
add eax, dword [ebp - 0x428]
mov dword [ebp - 0x428], eax
jmp 0x40568f
jmp 0x4057a0
mov dword [ebp - 0x440], 0x421324
mov dword [ebp - 0x424], 0x103
lea ecx, [ebp - 0x424]
push ecx
lea edx, [ebp - 0x414]
push edx
lea eax, [ebp - 0x450]
push eax
push 0
mov ecx, dword [ebp - 0x440]
push ecx
mov edx, dword [ebp - 0x420]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
jne 0x4057a0
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x414]
push ecx
push str.Delete
push str.DELE
call fcn.004044c0
add esp, 0x10
mov edx, dword [ebp - 0x428]
add edx, 1
mov dword [ebp - 0x428], edx
cmp dword [ebp + 8], 1
jne 0x4058f7
mov dword [ebp - 0x434], 0x103
mov dword [ebp - 0x430], 0x103
mov dword [ebp - 0x438], 1
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x418], 0
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0x438]
push edx
mov eax, dword [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x434]
push ecx
lea edx, [ebp - 0x310]
push edx
mov eax, dword [ebp - 0x418]
push eax
mov ecx, dword [ebp - 0x420]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0x103
je 0x4058f7
push str.plugins
lea edx, [ebp - 0x310]
push edx
call fcn.00412e61
add esp, 4
push eax
call fcn.00401320
add esp, 8
test eax, eax
je 0x405889
lea eax, [ebp - 0x42c]
push eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0x20c]
push eax
push str.Delete
push str.DELE
call fcn.004044c0
add esp, 0x10
mov ecx, dword [ebp - 0x428]
add ecx, 1
mov dword [ebp - 0x428], ecx
mov dword [ebp - 0x430], 0x103
mov edx, dword [ebp - 0x430]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x418]
add eax, 1
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x430]
push ecx
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x438]
push eax
mov ecx, dword [ebp - 0x43c]
push ecx
lea edx, [ebp - 0x434]
push edx
lea eax, [ebp - 0x310]
push eax
mov ecx, dword [ebp - 0x418]
push ecx
mov edx, dword [ebp - 0x420]
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov dword [ebp - 0x41c], eax
jmp 0x405820
mov eax, dword [ebp - 0x420]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov eax, dword [ebp - 0x428]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040af7c
mov esp, ebp
pop ebp
ret