Function at 0x424930
Capabilities:
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42692b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push esi
xor ebx, ebx
push edi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x10], ebx
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
cmp dword [ebp + 8], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ebx
je 0x424b9f
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x424b9f
lea edi, [eax + 0x2c]
mov esi, str.ValueName
call fcn.0040d860
cmp eax, ebx
je 0x424b9f
mov ebx, dword [eax + 0x18]
add ebx, 8
je 0x424b9f
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
add esi, 1
lea eax, [esi + esi]
call fcn.004263b0
mov edi, esp
push esi
push edi
push 0xffffffffffffffff
push ebx
push 0
push 0
mov word [edi], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push edi
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov edi, dword [ebp + 0xc]
mov esi, str.Exist
add edi, 0x2c
call fcn.0040d860
test eax, eax
je 0x4249e7
mov eax, dword [eax + 0x18]
add eax, 8
jmp 0x4249e9
xor eax, eax
xor ecx, ecx
test eax, eax
sete cl
mov eax, ecx
test eax, eax
mov dword [ebp - 0x18], eax
je 0x424a3c
mov esi, str.ValueType
call fcn.0040d860
test eax, eax
je 0x424b9f
mov eax, dword [eax + 0x18]
add eax, 8
je 0x424b9f
push 0xa
push 0
push eax
call dword [sym.imp.MSVCR80.dll_strtoul]
mov ebx, eax
add esp, 0xc
test ebx, ebx
jne 0x424a3f
call dword [sym.imp.MSVCR80.dll__errno]
cmp dword [eax], 0x22
je 0x424b9f
jmp 0x424a3f
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov edi, 8
cmp dword [ebp - 0x1c], edi
jae 0x424a4f
lea eax, [ebp - 0x30]
mov esi, dword [ebp + 8]
push 0
push 0
push 0
push 0
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
neg eax
sbb eax, eax
add eax, 1
cmp dword [ebp - 0x18], 0
jne 0x424a97
test eax, eax
je 0x424b98
cmp dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x30]
jae 0x424a82
lea eax, [ebp - 0x30]
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
jne 0x424b9f
jmp 0x424b98
lea edx, [ebp - 0x78]
push edx
call fcn.00417930
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea eax, [ebp - 0x34]
push eax
lea esi, [ebp - 0x78]
mov byte [ebp - 4], 2
call fcn.00417820
mov eax, dword [ebp - 0x58]
xor edi, edi
cmp eax, edi
je 0x424ad2
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x58], edi
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x54], edi
call fcn.0040c7e0
mov esi, eax
cmp esi, edi
jne 0x424aeb
mov esi, 0x43a55c
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
add edi, 1
lea eax, [edi + edi]
call fcn.004263b0
mov edx, esp
mov ecx, esi
mov eax, edi
mov esi, edx
call fcn.00411a80
push eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
push ebx
lea ecx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0x50]
call fcn.00417980
test eax, eax
mov eax, dword [ebp - 0x58]
jne 0x424b46
test eax, eax
je 0x424b3c
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x54], 0
cmp dword [ebp - 0x1c], 8
mov ecx, dword [ebp - 0x30]
jae 0x424b52
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 0x54]
push edx
push eax
mov eax, dword [ebp + 8]
push ebx
push 0
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
je 0x424b85
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [ebp - 0x78]
push ecx
mov byte [ebp - 4], 0
call fcn.00417a90
jmp 0x424b9f
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [ebp - 0x78]
push edx
mov byte [ebp - 4], 0
call fcn.00417a90
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, dword [ebp - 0x10]
lea esp, [ebp - 0x84]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret