Function at 0x40ad5b
Capabilities:
Delete registry value
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1b4
mov eax, dword [0x41e004]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x134], 0
lea eax, [ebp - 0x134]
push ebx
push esi
push edi
push eax
push 0x402dbc
push 1
push 0
push 0x402ea0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x40af7c
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x160]
push eax
call ebx
lea esi, [ebp - 0x160]
lea edi, [ebp - 0x1a0]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x150]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call ebx
lea esi, [ebp - 0x150]
lea edi, [ebp - 0x190]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x180]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call ebx
lea esi, [ebp - 0x180]
lea edi, [ebp - 0x1b0]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x170]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call ebx
sub esp, 0x10
mov eax, dword [ebp - 0x134]
mov edi, esp
lea esi, [ebp - 0x1a0]
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x190]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x1b0]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x170]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, eax
lea eax, [ebp - 0x170]
push eax
call esi
test eax, eax
js 0x40af9d
lea eax, [ebp - 0x180]
push eax
call esi
test eax, eax
js 0x40af9d
lea eax, [ebp - 0x150]
push eax
call esi
test eax, eax
js 0x40af9d
lea eax, [ebp - 0x160]
push eax
call esi
test eax, eax
js 0x40af9d
test edi, edi
js 0x40af7c
mov esi, dword [ebp - 0x134]
lea ecx, [ebp - 0x138]
xor ebx, ebx
push 0x402c68
mov dword [ebp - 0x13c], ebx
call fcn.0040a9ef
mov ecx, dword [eax]
test ecx, ecx
je 0x40aebb
mov ecx, dword [ecx]
jmp 0x40aebd
mov ecx, ebx
mov eax, dword [esi]
lea edx, [ebp - 0x13c]
push edx
push ecx
push esi
call dword [eax + 0x1c]
mov ecx, dword [ebp - 0x138]
mov esi, eax
test ecx, ecx
je 0x40aedc
call fcn.0040aa48
test esi, esi
js 0x40af6c
push 0x18
pop ecx
push 0x60
lea eax, [ebp - 0x68]
mov dword [ebp - 0x138], 0xc8
push eax
push 1
lea eax, [ebp - 0x138]
mov esi, 0x402ca8
push eax
lea eax, [ebp - 0x130]
push eax
lea edi, [ebp - 0x68]
rep movsd dword es:[edi], dword [esi]
push ebx
mov edi, 0x402d08
push edi
push 0x402308
call dword [sym.imp.SHLWAPI.dll_SHRegGetUSValueW]
mov esi, dword [ebp - 0x13c]
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x140]
call fcn.0040a9ef
mov ecx, dword [eax]
test ecx, ecx
je 0x40af45
mov ecx, dword [ecx]
jmp 0x40af47
mov ecx, ebx
mov eax, dword [esi]
push ebx
push ecx
push esi
call dword [eax + 0x3c]
mov ecx, dword [ebp - 0x140]
test ecx, ecx
je 0x40af5e
call fcn.0040aa48
push 0x10
push edi
push 0x402308
call dword [sym.imp.SHLWAPI.dll_SHRegDeleteUSValueW]
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x40af7c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x134]
test eax, eax
je 0x40af8c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041ce8b
mov esp, ebp
pop ebp
ret
mov ecx, eax
call fcn.0040b1a9
int3