Function at 0x43a8c9
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x225c
call fcn.00467f50
mov eax, dword [0x49f270]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov dword [ebp - 0x2214], eax
mov ebx, ecx
xor eax, eax
push esi
mov dword [ebp - 0x2240], eax
mov dword [ebp - 0x2230], eax
mov dword [ebp - 0x222c], eax
mov dword [ebp - 0x2228], eax
mov eax, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x225c], eax
push edi
call fcn.0043a078
mov esi, eax
test esi, esi
js 0x43ae6f
push 0x7d
pop eax
cmp word [edi], ax
je 0x43ae6f
xor eax, eax
push str.Delete
inc eax
push edi
mov dword [ebp - 0x2224], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
neg eax
push 0x4895cc
sbb esi, esi
inc esi
push edi
mov dword [ebp - 0x2210], esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x43a968
test esi, esi
je 0x43aa34
push edi
mov ecx, ebx
call fcn.0043a078
mov esi, eax
test esi, esi
js 0x43ae6f
xor esi, esi
cmp dword [ebp + 0x10], esi
je 0x43aa36
push 0x5c
push edi
mov dword [ebp - 0x2220], esi
mov dword [ebp - 0x221c], esi
mov dword [ebp - 0x2218], esi
call fcn.0043b06a
pop ecx
pop ecx
test eax, eax
jne 0x43ae5f
push edi
mov ecx, ebx
call fcn.00439b86
test eax, eax
je 0x43a9eb
mov eax, dword [ebp - 0x2214]
lea ecx, [ebp - 0x2220]
push edi
mov dword [ebp - 0x2220], eax
mov dword [ebp - 0x221c], esi
mov dword [ebp - 0x2218], esi
call fcn.0043a486
mov dword [ebp - 0x2220], esi
mov dword [ebp - 0x221c], esi
mov dword [ebp - 0x2218], esi
cmp dword [ebp - 0x2210], esi
je 0x43aa27
push edi
mov ecx, ebx
call fcn.0043a078
mov esi, eax
test esi, esi
js 0x43ae57
push edi
mov ecx, ebx
call fcn.0043afe1
mov esi, eax
lea ecx, [ebp - 0x2220]
call fcn.00439c55
test esi, esi
js 0x43ae6f
jmp 0x43adfd
lea ecx, [ebp - 0x2220]
call fcn.00439c55
jmp 0x43aa36
xor esi, esi
push str.NoRemove
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x43aa5e
push edi
mov ecx, ebx
mov dword [ebp - 0x2224], esi
call fcn.0043a078
mov esi, eax
test esi, esi
js 0x43ae6f
push 0x4895c4
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x43ab79
lea eax, [ebp - 0x220c]
mov ecx, ebx
push eax
call fcn.0043a078
mov esi, eax
test esi, esi
js 0x43ae6f
push edi
mov ecx, ebx
call fcn.0043a078
mov esi, eax
test esi, esi
js 0x43ae6f
push 0x3d
pop eax
cmp word [edi], ax
jne 0x43ae6a
cmp dword [ebp + 0x10], 0
je 0x43aaff
mov eax, dword [ebp - 0x2214]
mov ecx, ebx
mov dword [ebp - 0x224c], eax
xor eax, eax
mov dword [ebp - 0x2248], eax
mov dword [ebp - 0x2244], eax
lea eax, [ebp - 0x220c]
push edi
push eax
lea eax, [ebp - 0x224c]
push eax
call fcn.004395cb
mov esi, eax
lea ecx, [ebp - 0x224c]
xor eax, eax
mov dword [ebp - 0x224c], eax
mov dword [ebp - 0x2248], eax
mov dword [ebp - 0x2244], eax
jmp 0x43aa15
cmp dword [ebp + 0x14], 0
jne 0x43ab6c
cmp dword [ebp - 0x2224], 0
je 0x43ab6c
xor eax, eax
lea ecx, [ebp - 0x2258]
push 0x20006
push eax
push dword [ebp - 0x2214]
mov dword [ebp - 0x2258], eax
mov dword [ebp - 0x2254], eax
mov dword [ebp - 0x2250], eax
call fcn.0043a1b3
test eax, eax
jne 0x43ae8f
lea eax, [ebp - 0x220c]
push eax
push dword [ebp - 0x2258]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
je 0x43ab61
cmp eax, 2
jne 0x43ae8f
lea ecx, [ebp - 0x2258]
call fcn.00439c55
push edi
mov ecx, ebx
call fcn.0043afe1
jmp 0x43a91a
push 0x5c
push edi
call fcn.0043b06a
pop ecx
pop ecx
test eax, eax
jne 0x43ae6a
cmp dword [ebp + 0x10], eax
je 0x43ac1d
mov esi, dword [ebp - 0x2214]
lea ecx, [ebp - 0x2230]
push 0x2001f
push edi
push esi
call fcn.0043a1b3
test eax, eax
je 0x43abe6
push 0x20019
push edi
push esi
lea ecx, [ebp - 0x2230]
call fcn.0043a1b3
test eax, eax
je 0x43abe6
xor eax, eax
lea ecx, [ebp - 0x2230]
push eax
push eax
push 0x2001f
push eax
push eax
push edi
push esi
call fcn.00439c6f
test eax, eax
jne 0x43ad13
push edi
mov ecx, ebx
call fcn.0043a078
mov esi, eax
test esi, esi
js 0x43ae6f
push 0x3d
pop eax
cmp word [edi], ax
jne 0x43adfd
push edi
xor eax, eax
mov ecx, ebx
push eax
lea eax, [ebp - 0x2230]
push eax
call fcn.004395cb
mov esi, eax
jmp 0x43aa1a
mov esi, dword [ebp + 0x14]
test esi, esi
jne 0x43ac3d
push 0x20019
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2230]
call fcn.0043a1b3
jmp 0x43ac40
push 2
pop eax
push 1
test eax, eax
mov dword [ebp - 0x2210], eax
pop eax
push 0xffffffffffffffff
cmovne esi, eax
lea eax, [ebp - 0x20c]
push edi
push 0x104
push eax
mov dword [ebp + 0x14], esi
call fcn.00467be4
push eax
call fcn.00439ade
add esp, 0x14
mov ecx, ebx
push edi
call fcn.0043a078
mov esi, eax
test esi, esi
js 0x43ae6f
push edi
mov ecx, ebx
call fcn.0043afe1
mov esi, eax
test esi, esi
js 0x43ae6f
push 0x7b
pop eax
cmp word [edi], ax
jne 0x43acef
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x2240]
jne 0x43ac9f
sub ecx, edx
xor eax, eax
sar ecx, 1
inc eax
cmp ecx, eax
jne 0x43acef
push dword [ebp + 0x14]
xor eax, eax
mov ecx, ebx
push eax
push dword [ebp - 0x2230]
push edi
call fcn.0043a8c9
mov esi, eax
test esi, esi
jns 0x43acdd
cmp dword [ebp + 0x14], 0
je 0x43ae6f
push edi
mov ecx, ebx
call fcn.0043a078
mov esi, eax
test esi, esi
js 0x43ae6f
mov eax, dword [ebp - 0x2210]
mov ecx, dword [ebp - 0x225c]
mov dword [ebp + 0x14], ecx
cmp eax, 2
je 0x43a924
test eax, eax
je 0x43ad21
test ecx, ecx
jne 0x43a924
push eax
call fcn.00439b4e
pop ecx
mov esi, eax
jmp 0x43ae6f
test ecx, ecx
je 0x43ad70
push dword [ebp - 0x2230]
mov ecx, ebx
call fcn.00439edb
test eax, eax
je 0x43ad70
lea eax, [ebp - 0x20c]
mov ecx, ebx
push eax
call fcn.00439b86
test eax, eax
je 0x43a924
cmp dword [ebp - 0x2224], 0
je 0x43a924
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x2230]
call fcn.0043a486
jmp 0x43a924
push dword [ebp - 0x2230]
mov ecx, ebx
call fcn.00439edb
lea ecx, [ebp - 0x2230]
mov dword [ebp - 0x2210], eax
call fcn.00439c55
test eax, eax
jne 0x43ad13
cmp dword [ebp - 0x2224], eax
je 0x43a924
cmp dword [ebp - 0x2210], eax
jne 0x43a924
mov eax, dword [ebp - 0x2214]
lea ecx, [ebp - 0x223c]
mov dword [ebp - 0x223c], eax
xor eax, eax
mov dword [ebp - 0x2238], eax
mov dword [ebp - 0x2234], eax
lea eax, [ebp - 0x20c]
push eax
call fcn.00439ce0
xor ecx, ecx
mov dword [ebp - 0x223c], ecx
mov dword [ebp - 0x2238], ecx
mov dword [ebp - 0x2234], ecx
test eax, eax
jne 0x43aea5
lea ecx, [ebp - 0x223c]
call fcn.00439c55
cmp dword [ebp + 0x10], 0
je 0x43a924
push 0x7b
pop eax
cmp word [edi], ax
jne 0x43a924
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x2240]
jne 0x43ae18
sub ecx, edx
xor eax, eax
sar ecx, 1
inc eax
cmp ecx, eax
jne 0x43a924
xor eax, eax
mov ecx, ebx
push eax
push dword [ebp + 0x10]
push dword [ebp - 0x2230]
push edi
call fcn.0043a8c9
mov esi, eax
test esi, esi
js 0x43ae6f
mov ecx, ebx
jmp 0x43a914
lea ecx, [ebp - 0x2220]
jmp 0x43ae9e
lea ecx, [ebp - 0x2220]
call fcn.00439c55
mov esi, 0x80020009
lea ecx, [ebp - 0x2230]
call fcn.00439c55
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00467f35
mov esp, ebp
pop ebp
ret 0x10
push eax
call fcn.00439b4e
pop ecx
lea ecx, [ebp - 0x2258]
mov esi, eax
call fcn.00439c55
jmp 0x43ae6f
push eax
call fcn.00439b4e
pop ecx
lea ecx, [ebp - 0x223c]
jmp 0x43ae9c