Function at 0x4050e0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x5b21b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x10]
mov edi, ecx
push eax
lea eax, [ebp - 8]
push eax
push 0
lea ecx, [edi + 4]
call fcn.00405ef0
test eax, eax
jne 0x40516a
push 0x1c
call fcn.00409dd5
mov esi, eax
add esp, 4
test esi, esi
je 0x40516a
xorps xmm0, xmm0
lea ecx, [edi + 4]
movdqu xmmword [esi], xmm0
push 0
movq qword [esi + 0x10], xmm0
mov dword [esi + 0x18], 0
mov dword [esi], vtable.CMap_unsigned_int__unsigned_int__class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____wchar_t_const__.0
mov dword [esi + 4], 0
mov dword [esi + 8], 0x11
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0xa
call fcn.00405710
mov dword [eax], esi
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 8]
push eax
push 1
lea ecx, [edi + 4]
call fcn.00405ef0
test eax, eax
jne 0x4051df
push 0x1c
call fcn.00409dd5
mov esi, eax
add esp, 4
test esi, esi
je 0x4051df
xorps xmm0, xmm0
lea ecx, [edi + 4]
movdqu xmmword [esi], xmm0
push 1
movq qword [esi + 0x10], xmm0
mov dword [esi + 0x18], 0
mov dword [esi], vtable.CMap_unsigned_int__unsigned_int__class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____wchar_t_const__.0
mov dword [esi + 4], 0
mov dword [esi + 8], 0x11
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0xa
call fcn.00405710
mov dword [eax], esi
lea eax, [ebp - 8]
mov dword [ebp - 0xc], 0
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x10], 4
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 8], 4
push eax
push str.fGiaodien
push str.SOFTWAREBkav
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov ecx, dword [ebp - 0xc]
xor edx, edx
test eax, eax
push 0x591b1c
cmovne ecx, edx
push 0xd
mov dword [ebp - 0xc], ecx
mov dword [edi], ecx
mov ecx, edi
push edx
call fcn.00405480
push 0x591b2c
push 0xd
push 1
mov ecx, edi
call fcn.00405480
push 0x591b3c
push 0xe
push 0
mov ecx, edi
call fcn.00405480
push 0x591b44
push 0xe
push 1
mov ecx, edi
call fcn.00405480
push 0x591b4c
push 0xf
push 0
mov ecx, edi
call fcn.00405480
push 0x591b58
push 0xf
push 1
mov ecx, edi
call fcn.00405480
push 0x591b60
push 0x2b
push 0
mov ecx, edi
call fcn.00405480
push str.Do_you_want_to_disable_autorun_
push 0x2b
push 1
mov ecx, edi
call fcn.00405480
push 0x591b3c
push 0x23
push 0
mov ecx, edi
call fcn.00405480
push 0x591b44
push 0x23
push 1
mov ecx, edi
call fcn.00405480
push 0x591b4c
push 0x22
push 0
mov ecx, edi
call fcn.00405480
push 0x591b58
push 0x22
push 1
mov ecx, edi
call fcn.00405480
push 0x591bd8
push 0x24
push 0
mov ecx, edi
call fcn.00405480
push 0x591be8
push 0x24
push 1
mov ecx, edi
call fcn.00405480
push 0x591bf0
push 0x2e
push 0
mov ecx, edi
call fcn.00405480
push str.Turn_off_Autorun_successfully_
push 0x2e
push 1
mov ecx, edi
call fcn.00405480
push 0x591c60
push 0x29
push 0
mov ecx, edi
call fcn.00405480
push 0x591c84
push 0x29
push 1
mov ecx, edi
call fcn.00405480
push 0x591ca8
push 0x28
push 0
mov ecx, edi
call fcn.00405480
push str.Select_folder
push 0x28
push 1
mov ecx, edi
call fcn.00405480
push 0x591ce0
push 0x2a
push 0
mov ecx, edi
call fcn.00405480
push 0x591cec
push 0x2a
push 1
mov ecx, edi
call fcn.00405480
push 0x591cf8
push 0x2d
push 0
mov ecx, edi
call fcn.00405480
push str.Directory_path:
push 0x2d
push 1
mov ecx, edi
call fcn.00405480
push 0x591d40
push 0x30
push 0
mov ecx, edi
call fcn.00405480
push str.The_hidden_file_has_been_shown_successfully
push 0x30
push 1
mov ecx, edi
call fcn.00405480
push 0x591dd0
push 0x31
push 0
mov ecx, edi
call fcn.00405480
push str.Select_the_folder_containing_the_hidden_file
push 0x31
push 1
mov ecx, edi
call fcn.00405480
push 0x591e68
push 0x32
push 0
mov ecx, edi
call fcn.00405480
push 0x591ec8
push 0x32
push 1
mov ecx, edi
call fcn.00405480
push 0x591f40
push 0x2c
push 0
mov ecx, edi
call fcn.00405480
push str.Do_you_want_to_optimize_the_Registry_
push 0x2c
push 1
mov ecx, edi
call fcn.00405480
push 0x591fdc
push 0x2f
push 0
mov ecx, edi
call fcn.00405480
push str.Successful_Registry_Optimization_
push 0x2f
push 1
mov ecx, edi
call fcn.00405480
push str.Bkav
push 0x33
push 0
mov ecx, edi
call fcn.00405480
push 0x5920d8
push 0x33
push 1
mov ecx, edi
call fcn.00405480
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005322c6
mov esp, ebp
pop ebp
ret