Function at 0x40686e
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x423600
push 0x420e8c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x26c
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp + 8], eax
je 0x406add
cmp dword [ebp + 0xc], eax
je 0x406add
mov word [ebp - 0x228], ax
mov ecx, 0x81
lea edi, [ebp - 0x226]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 1
pop ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x22c], 0x206
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x20]
push eax
push str.biduid
push str.Softwarehao123JuziBrowser
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x4069a4
lea eax, [ebp - 0x228]
push eax
mov esi, dword [sym.imp.MSVCRT.dll_wcslen]
call esi
pop ecx
cmp eax, 8
jbe 0x4069a4
lea eax, [ebp - 0x228]
push eax
call esi
mov esi, eax
lea eax, [esi + esi - 0x10]
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.00414f51
mov dword [ebp - 0x250], eax
push 0x7c
push 4
lea eax, [ebp - 0x250]
push eax
call fcn.004050d9
add esp, 0x18
and word [ebp - 0x24c], 0
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x24a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push dword [ebp - 0x250]
push str._08X
push 0xf
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
lea esi, [ebp + esi*2 - 0x238]
push esi
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.MSVCRT.dll_wcscmp]
add esp, 0x18
test eax, eax
jne 0x4069a4
and word [esi], ax
mov dword [ebp - 0x1c], ebx
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x406ab7
mov dword [ebp - 4], eax
push 0x208
push eax
lea eax, [ebp - 0x228]
push eax
call sub.MSVCRT.dll_memset
push 0x103
lea eax, [ebp - 0x228]
push eax
call fcn.004052c6
add esp, 0x14
test eax, eax
je 0x4069e8
mov dword [ebp - 0x1c], ebx
jmp 0x4069e8
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1c], 0
je 0x406ad8
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.MSVCRT.dll_wcslen]
mov ebx, eax
lea esi, [ebx + ebx]
push esi
lea eax, [ebp - 0x228]
push eax
call fcn.00414f51
mov dword [ebp - 0x278], eax
push 0x7c
push 4
lea eax, [ebp - 0x278]
push eax
call fcn.004050d9
add esp, 0x18
and word [ebp - 0x274], 0
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x272]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push dword [ebp - 0x278]
push str._08X
push 0xf
lea eax, [ebp - 0x274]
push eax
mov edi, dword [sym.imp.MSVCRT.dll__snwprintf]
call edi
add esp, 0x10
lea esi, [ebp + esi - 0x228]
lea eax, [ebp - 0x274]
push eax
push 0x4280b8
mov eax, 0x103
sub eax, ebx
push eax
push esi
call edi
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 0x14
shl eax, 1
push eax
lea eax, [ebp - 0x228]
push eax
push 1
push str.biduid
push str.Softwarehao123JuziBrowser
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
and word [esi], 0
cmp dword [ebp - 0x1c], 0
je 0x406ad8
lea eax, [ebp - 0x228]
push eax
push 0x4280b8
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x10
mov eax, dword [ebp - 0x1c]
jmp 0x406adf
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret