Function at 0x414910
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45860f
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
push ebx
push esi
push edi
mov eax, dword [0x47c9a0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x48], esi
xor bh, bh
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x30], 0x46b7ac
lea ecx, [ebp - 0x5c]
mov dword [ebp - 4], 0
call fcn.0042cc09
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.0042cc09
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 2
call fcn.0042cc09
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 3
call fcn.0042cc09
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 4
call fcn.0042cc09
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 5
call fcn.0042cc09
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 6
call fcn.0042cc09
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0x30]
mov ecx, esi
call fcn.00414780
add esp, 4
test al, al
je 0x414c42
lea eax, [ebp - 0x10]
push eax
push 0xf003f
push 0
push dword [0x4da7e4]
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x414c42
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x44]
push eax
call fcn.004125d0
mov bh, al
add esp, 4
test bh, bh
je 0x414c42
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0xc0]
call fcn.00411ba0
mov bh, al
test bh, bh
je 0x414c42
lea eax, [ebp - 0xac]
push eax
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x5c]
call fcn.00414060
add esp, 4
lea eax, [ebp - 0x98]
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x44]
push eax
call fcn.00414060
add esp, 4
lea eax, [ebp - 0xd4]
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x5c]
push eax
call fcn.00414060
add esp, 4
lea eax, [ebp - 0x84]
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0xc0]
push eax
call fcn.00414060
xor bl, bl
xor esi, esi
add esp, 4
mov byte [ebp - 0x11], bl
cmp dword [ebp - 0x28], esi
jle 0x414b1c
lea ebx, [ebx]
mov eax, dword [ebp - 0x2c]
movzx edi, word [eax + esi*2]
test esi, esi
js 0x414b80
cmp esi, dword [ebp - 0x54]
jge 0x414b80
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x1c]
push ecx
push dword [eax + esi*4]
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x414c42
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x18]
push eax
push edi
call fcn.00430350
push dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov edx, edi
call fcn.004143d0
add esp, 4
mov bl, al
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test bl, bl
je 0x414c42
inc esi
cmp esi, dword [ebp - 0x28]
jl 0x414ab0
mov bl, byte [ebp - 0x11]
mov eax, dword [ebp - 0x7c]
test eax, eax
je 0x414b9f
xor edi, edi
mov dword [ebp - 0x18], eax
test eax, eax
jle 0x414b9f
lea esp, [esp]
test edi, edi
js 0x414b80
cmp edi, eax
jge 0x414b80
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + edi*4]
sub eax, 0x10
push eax
call fcn.00404190
add esp, 4
lea esi, [eax + 0x10]
push esi
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esi, 0xfffffff0
or ecx, 0xffffffff
test eax, eax
lea eax, [esi + 0xc]
jne 0x414b85
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414b75
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
inc edi
cmp edi, dword [ebp - 0x18]
jge 0x414b9f
mov eax, dword [ebp - 0x7c]
jmp 0x414b30
call fcn.0042c9be
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414c42
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x414c42
cmp dword [ebp - 0xa4], 0
je 0x414be3
lea ecx, [ebp - 0x70]
call fcn.0042cc09
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 8
push eax
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x44]
call fcn.004140d0
add esp, 4
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x44]
push eax
call fcn.0042cd1d
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 7
mov bl, 1
call fcn.0042cc20
cmp dword [ebp - 0x90], 0
je 0x414c27
lea ecx, [ebp - 0x70]
call fcn.0042cc09
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0x98]
lea ecx, [ebp - 0x44]
call fcn.00414060
add esp, 4
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x44]
push eax
call fcn.0042cd1d
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 7
call fcn.0042cc20
jmp 0x414c2b
test bl, bl
je 0x414c40
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x44]
push eax
call fcn.004127e0
mov bh, al
add esp, 4
test bh, bh
je 0x414c42
mov bh, 1
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x414c50
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 6
call fcn.0042cc20
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 5
call fcn.0042cc20
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 4
call fcn.0042cc20
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 3
call fcn.0042cc20
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 2
call fcn.0042cc20
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.0042cc20
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0
call fcn.0042cc20
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x414cca
push eax
call fcn.0042b706
add esp, 4
mov al, bh
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret