Function at 0x53fbca
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x104
mov esi, ecx
lea eax, [ebp - 0x18]
mov dword [eax - 4], esp
mov dword [eax + 8], 0xffffffff
mov dword [eax + 4], 0x541380
mov ecx, dword fs:[0]
mov dword [eax], ecx
mov dword fs:[0], eax
lea ecx, [ebp - 0x68]
call fcn.00401ac4
mov ecx, esi
push 1
call fcn.0053da14
mov bl, 1
test al, al
je 0x53ff65
lea edi, [esi + 8]
mov ecx, edi
call fcn.004400ba
test al, al
je 0x53fcd9
mov dword [ebp - 0x20], esp
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x24], eax
lea ecx, [eax + 4]
mov dword [ebp - 0x28], ecx
mov edx, esi
call fcn.0053f587
lea ecx, [ebp - 0x68]
call fcn.0043fd32
lea ecx, [ebp - 0x9c]
call fcn.0043fd32
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0xbc]
push str.Registry_key__s_is_needed_for_normal_system_operation__ndeleting_it_will_leave_your_system_in_unusable_state:_noperation_aborted.
call fcn.00401278
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.00445492
add esp, 0xc
lea ecx, [ebp - 0xdc]
push eax
call fcn.00447d20
mov eax, dword [ebp - 0x24]
lea esi, [ebp - 0xdc]
mov dword [eax], esi
call fcn.00447d16
add esp, 0x24
mov esp, dword [ebp - 0x20]
mov ecx, esi
call fcn.00440f8a
lea ecx, [ebp - 0xbc]
call fcn.0043fda0
lea ecx, [ebp - 0x9c]
call fcn.0043fda0
lea ecx, [ebp - 0x68]
call fcn.0043fda0
xor ebx, ebx
jmp 0x53ff65
cmp dword [esi + 4], 0x80000000
je 0x53fcf6
mov ecx, edi
push 0
push 0x5c
call fcn.0044a846
cmp eax, 0xffffffff
je 0x53fc28
mov dword [ebp - 0x2c], edi
lea ecx, [ebp - 0x7c]
call fcn.004419f8
lea edi, [ebp - 0x9c]
mov ecx, edi
call fcn.0043fd32
mov dword [ebp - 0x10], 2
lea eax, [ebp - 0x34]
mov dword [ebp - 0x20], esi
mov ecx, esi
push eax
push edi
call fcn.0054011c
lea edx, [ebp - 0x9c]
lea ecx, [ebp - 0x7c]
test al, 1
je 0x53fd4e
push 1
push edx
call fcn.00442fa6
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.00540146
jmp 0x53fd24
call fcn.00441c66
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x10], 2
cmp eax, dword [ebp - 0x28]
jae 0x53fda4
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x24], eax
push eax
call fcn.00441fa4
lea ecx, [ebp - 0x68]
push eax
push dword [ebp - 0x20]
call fcn.0053d4dc
mov dword [ebp - 0x10], 3
lea ecx, [ebp - 0x68]
call fcn.0053fbca
mov ebx, eax
lea ecx, [ebp - 0x68]
call fcn.0053d5ca
mov eax, dword [ebp - 0x24]
inc eax
test bl, bl
jne 0x53fd58
xor ebx, ebx
jmp 0x53ff52
mov ecx, dword [ebp - 0x20]
call fcn.0053d636
lea ecx, [ebp - 0x68]
push str.advapi32
call fcn.00406642
mov dword [ebp - 0x10], 4
lea ecx, [ebp - 0x30]
push 2
lea eax, [ebp - 0x68]
push eax
call fcn.0046e862
lea ecx, [ebp - 0x68]
call fcn.0043fda0
mov dword [ebp - 0x10], 5
lea ecx, [ebp - 0x68]
push str.RegDeleteKeyEx
call fcn.00401278
mov dword [ebp - 0x10], 9
lea ecx, [ebp - 0x30]
lea eax, [ebp - 0x68]
push eax
call fcn.004707f0
mov esi, eax
lea ecx, [ebp - 0x68]
call fcn.0043fda0
test esi, esi
mov eax, dword [ebp - 0x20]
je 0x53fe3f
mov dword [ebp - 0x24], esi
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x10], 5
call fcn.00540545
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x2c]
call fcn.00443c3a
push 0
push dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x20]
push dword [eax + 4]
call dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
jmp 0x53fe5b
mov dword [ebp - 0x10], 5
mov ecx, dword [ebp - 0x2c]
call fcn.00443c3a
push eax
mov esi, dword [ebp - 0x20]
push dword [esi + 4]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [esi + 0x30], eax
mov bl, 1
or eax, 2
cmp eax, 2
je 0x53ff4a
mov ecx, esi
mov dword [ebp - 0x28], esp
push eax
sub esp, 0x10
mov dword [ebp - 0x24], esp
push 1
lea eax, [ebp - 0x68]
push eax
call fcn.0053d95a
mov eax, dword [ebp - 0x24]
add eax, 8
mov dword [ebp - 0x10], 6
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x2c], eax
push eax
call fcn.004415d4
lea ecx, [ebp - 0xbc]
call fcn.0043fd32
lea ecx, [ebp - 0xdc]
call fcn.0043fd32
mov dword [ebp - 0x10], 7
lea ecx, [ebp - 0xfc]
push str.Cant_delete_key__s
call fcn.00401278
mov dword [ebp - 0x10], 8
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.00445492
add esp, 0xc
lea ecx, [ebp - 0x110]
push eax
call fcn.00447d20
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x30]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
lea esi, [ebp - 0x110]
mov dword [ecx + 4], esi
call fcn.0049cae0
add esp, 0x14
mov esp, dword [ebp - 0x28]
mov ecx, esi
call fcn.00440f8a
lea ecx, [ebp - 0xfc]
call fcn.0043fda0
lea ecx, [ebp - 0xdc]
call fcn.0043fda0
lea ecx, [ebp - 0xbc]
call fcn.0043fda0
lea ecx, [ebp - 0x68]
call fcn.0043fda0
xor ebx, ebx
lea ecx, [ebp - 0x30]
call fcn.0046e88a
lea ecx, [ebp - 0x9c]
call fcn.0043fda0
lea ecx, [ebp - 0x7c]
call fcn.004432bc
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret