Function at 0x40b69c
Capabilities:
Delete registry key
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x424004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 2
pop edi
push edi
push 0
mov esi, edx
mov ebx, ecx
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x40b9ce
test ebx, ebx
jne 0x40b6fe
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0x11c
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x40b6fe
mov al, byte [ebp - 6]
cmp al, 3
je 0x40b9c8
cmp al, 2
je 0x40b9c8
push dword [0x4041ec]
mov edx, ebx
mov byte [ebp - 0x23d], 0
push 3
pop ecx
call fcn.0040dddd
cmp dword [ebp + 8], 0
jne 0x40b757
push dword [0x4041d4]
mov edx, ebx
push 3
pop ecx
call fcn.0040dddd
push dword [0x4041e4]
mov edx, ebx
push 3
pop ecx
call fcn.0040dddd
push dword [0x4041f0]
xor edx, edx
test ebx, ebx
push 3
sete dl
pop ecx
call fcn.0040dddd
mov ecx, ebx
call fcn.0040b60e
test ebx, ebx
je 0x40b776
mov ecx, esi
call fcn.0040ac83
push esi
push 1
push ecx
push ecx
mov ecx, reloc.SHLWAPI.dll_ParseURLW
call fcn.00409b61
jmp 0x40b8ae
lea eax, [ebp - 0x244]
push eax
push 3
push 0
push 0x402978
push reloc.SHLWAPI.dll_ParseURLW
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40b7f4
lea eax, [ebp - 0x248]
mov dword [ebp - 0x248], 0x208
push eax
lea eax, [ebp - 0x20c]
push eax
push ecx
mov ecx, dword [ebp - 0x244]
call fcn.00409a57
test eax, eax
jne 0x40b7e8
lea eax, [ebp - 0x20c]
push eax
push 0x402f5c
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x40b7e8
push eax
push 0x4021bc
push 1
push eax
push dword [ebp - 0x244]
call dword [sym.imp.ADVAPI32.dll_RegSetValueW]
push dword [ebp - 0x244]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
push 1
lea edx, [ebp - 0x248]
mov dword [ebp - 0x248], 0x19
mov ecx, edi
call fcn.0040aaab
push 0x17
pop esi
push 1
push edi
lea edx, [ebp - 0x24c]
mov dword [ebp - 0x24c], esi
mov ecx, edi
mov dword [ebp - 0x248], 6
call fcn.0040aaab
push 1
push 1
push 4
lea edx, [ebp - 0x248]
mov dword [ebp - 0x248], esi
pop ecx
call fcn.0040aaab
mov esi, 0x4033c0
lea edi, [ebp - 0x21c]
push 0
push 1
lea edx, [ebp - 0x21c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040ab16
mov esi, 0x4033a0
lea edi, [ebp - 0x23c]
push 1
push 2
lea edx, [ebp - 0x23c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x4033e0
lea edi, [ebp - 0x22c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040ab16
push 0x17
pop ecx
call fcn.0040ab66
mov ecx, 0x402d78
call fcn.0040bbdd
mov byte [ebp - 0x23d], 1
call fcn.00409af0
test eax, eax
jne 0x40b97b
mov esi, SysReAllocStringLen
test ebx, ebx
je 0x40b8cd
call fcn.0040c3d8
test al, al
jne 0x40b947
lea eax, [ebp - 0x244]
push eax
push 3
push 0
push 0x402978
push esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40b947
lea eax, [ebp - 0x248]
mov dword [ebp - 0x248], 0x208
push eax
lea eax, [ebp - 0x20c]
push eax
push ecx
mov ecx, dword [ebp - 0x244]
call fcn.00409a57
test eax, eax
jne 0x40b93b
lea eax, [ebp - 0x20c]
push eax
push 0x402f5c
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x40b93b
push eax
push 0x4021bc
push 1
push eax
push dword [ebp - 0x244]
call dword [sym.imp.ADVAPI32.dll_RegSetValueW]
push dword [ebp - 0x244]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.0040b355
test ebx, ebx
je 0x40b966
mov edx, 0x402a74
call fcn.00409c4e
mov edx, 0x4028fc
call fcn.00409c4e
jmp 0x40b972
push 0x402ba0
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
xor ecx, ecx
call fcn.00409aaf
jmp 0x40b98f
push 0x402800
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_PostMessageW]
cmp byte [ebp - 0x23d], 0
je 0x40b9a8
xor eax, eax
push eax
push eax
push eax
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
push ecx
push ecx
lea ecx, [ebp - 0x20c]
call fcn.0040ca87
test al, al
je 0x40b9c8
test ebx, ebx
jne 0x40b9c8
lea ecx, [ebp - 0x20c]
call fcn.0040bbdd
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00423440
mov esp, ebp
pop ebp
ret 4