Function at 0x402c90
Capabilities:
Check if file exists
Get file attributes
Query or enumerate registry value

Disassembly:
sub esp, 0x2c
mov eax, dword [0x42f140]
xor eax, esp
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x30]
push eax
mov dword [esp + 0x18], eax
call fcn.00402840
add esp, 4
test al, al
jne 0x402ee2
lea eax, [esp + 4]
push eax
push 0x201
push 0
push str.SOFTWAREMicrosoftVisualStudioSxSVS7
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x402ee2
push ebp
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
xor ebp, ebp
push ebx
mov dword [esp + 0x24], str.14.0
mov dword [esp + 0x28], str.12.0
mov dword [esp + 0x2c], str.11.0
mov dword [esp + 0x30], str.10.0
push esi
mov esi, dword [esp + ebp*4 + 0x28]
lea eax, [esp + 0x1c]
push eax
push 0
lea eax, [esp + 0x28]
push eax
push 0
push esi
push dword [esp + 0x28]
call edi
cmp eax, 2
je 0x402e4f
cmp dword [esp + 0x20], 1
jne 0x402e4f
push dword [esp + 0x1c]
call fcn.0040a91a
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x402ede
lea eax, [esp + 0x1c]
push eax
push ebx
push 0
push 0
push esi
push dword [esp + 0x28]
call edi
test eax, eax
jne 0x402e4f
mov esi, ebx
lea ecx, [esi + 2]
nop dword [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x402d70
sub esi, ecx
sar esi, 1
lea edi, [esi + esi]
lea eax, [edi + 0x1a]
push eax
call fcn.0040a91a
push edi
push ebx
push eax
mov dword [esp + 0x20], eax
call fcn.00408330
mov eax, dword [esp + 0x20]
add esp, 0x10
movups xmm0, xmmword [str.VCLib_amd64]
xor ecx, ecx
movups xmmword [eax + edi], xmm0
movq xmm0, qword [0x425a4c]
movq qword [eax + edi + 0x10], xmm0
mov edi, eax
mov word [eax + esi*2 + 0x18], cx
lea ecx, [edi + 2]
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x402dc3
sub edi, ecx
sar edi, 1
lea esi, [edi + edi]
lea eax, [esi + 0x1e]
push eax
call fcn.0040a91a
push esi
push dword [esp + 0x18]
mov dword [esp + 0x24], eax
push eax
call fcn.00408330
mov ecx, dword [esp + 0x28]
add esp, 0x10
movups xmm0, xmmword [str._vcruntime.lib]
movups xmmword [esi + ecx], xmm0
push ecx
movq xmm0, qword [0x425990]
movq qword [esi + ecx + 0x10], xmm0
mov eax, dword [0x425998]
mov dword [esi + ecx + 0x18], eax
xor eax, eax
mov word [ecx + edi*2 + 0x1c], ax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x402e2d
test al, 0x10
je 0x402e5b
mov eax, dword [esp + 0x18]
push eax
call fcn.0040a8ff
push dword [esp + 0x14]
call fcn.0040a8ff
push ebx
call fcn.0040a8ff
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
add esp, 0xc
inc ebp
cmp ebp, 4
jl 0x402d07
jmp 0x402ed4
mov eax, dword [esp + 0x18]
push eax
call fcn.0040a8ff
mov ebp, ebx
add esp, 4
lea ecx, [ebp + 2]
nop dword [eax]
mov ax, word [ebp]
add ebp, 2
test ax, ax
jne 0x402e70
sub ebp, ecx
sar ebp, 1
lea eax, [ebp*2 + 0x1a]
push eax
call fcn.0040a91a
lea esi, [ebp*2]
mov edi, eax
push esi
push ebx
push edi
call fcn.00408330
movups xmm0, xmmword [str.VC_bin_amd64]
mov ecx, dword [esp + 0x34]
xor eax, eax
push ebx
movups xmmword [esi + edi], xmm0
movq xmm0, qword [0x425a68]
movq qword [esi + edi + 0x10], xmm0
mov word [edi + ebp*2 + 0x18], ax
mov eax, dword [esp + 0x24]
mov dword [ecx], edi
mov dword [ecx + 4], eax
call fcn.0040a8ff
add esp, 0x14
push dword [esp + 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.00407500
add esp, 0x2c
ret