Function at 0x4031f4
Capabilities:
Delete registry key
Delete registry value

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffdc
mov esi, eax
sub esi, 0x10
call fcn.00402bd4
mov eax, esi
mov edx, dword [eax]
mov dword [esp], edx
mov edx, dword [eax + 4]
mov dword [esp + 4], edx
mov edx, dword [eax + 0xc]
test dl, 8
jne 0x402cc1
push 0x8000
push 0
push esi
call sub.advapi32.dll_RegDeleteKeyW
test eax, eax
je 0x402cbc
xor edi, edi
jmp 0x402cfb
or edi, 0xffffffff
jmp 0x402cfb
mov ebx, esi
mov ebp, edx
and ebp, 0xfffffff0
xor edi, edi
push 0x1c
lea eax, [esp + 0xc]
push eax
push ebx
call fcn.004026e0
push 0x8000
push 0
push ebx
call sub.advapi32.dll_RegDeleteKeyW
test eax, eax
jne 0x402ced
or edi, 0xffffffff
jmp 0x402cfb
mov esi, dword [esp + 0x14]
cmp ebp, esi
jbe 0x402cfb
sub ebp, esi
add ebx, esi
jmp 0x402cca
test edi, edi
jne 0x402d12
mov eax, dword [esp + 4]
mov edx, dword [esp]
mov dword [eax], edx
mov eax, dword [esp]
mov edx, dword [esp + 4]
mov dword [eax + 4], edx
mov byte [0x4bdac4], 0
mov eax, edi
add esp, 0x24
pop ebp
pop edi
pop esi
pop ebx
ret
mov edx, dword [eax - 4]
test dl, 7
mov ecx, eax
push ebx
mov bl, byte [0x4bb051]
jne 0x4032ec
test bl, bl
mov ebx, dword [edx]
jne 0x403270
sub dword [edx + 0xc], 1
mov eax, dword [edx + 8]
je 0x403244
test eax, eax
mov dword [edx + 8], ecx
lea eax, [eax + 1]
mov dword [ecx - 4], eax
je 0x40322c
xor eax, eax
mov byte [ebx], al
pop ebx
ret
mov ecx, dword [ebx + 4]
mov dword [edx + 0x14], ebx
mov dword [edx + 4], ecx
mov dword [ecx + 0x14], edx
mov dword [ebx + 4], edx
mov byte [ebx], 0
xor eax, eax
pop ebx
ret
test eax, eax
je 0x40325b
mov eax, dword [edx + 0x14]
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov dword [ecx + 0x14], eax
xor eax, eax
cmp dword [ebx + 0x10], edx
jne 0x40325e
mov dword [ebx + 0xc], eax
mov byte [ebx], al
mov eax, edx
mov edx, dword [edx - 4]
mov bl, byte [0x4bb051]
jmp 0x4032f5
mov eax, 0x100
lock cmpxchg byte [ebx], ah
je 0x40320f
pause
cmp byte [0x4bb8d9], 0
jne 0x403270
push ecx
push edx
push 0
call sub.advapi32.dll_RegDeleteValueW
pop edx
pop ecx
mov eax, 0x100
lock cmpxchg byte [ebx], ah
je 0x40320f
push ecx
push edx
push 0xa
call sub.advapi32.dll_RegDeleteValueW
pop edx
pop ecx
jmp 0x403270
mov eax, 0x100
lock cmpxchg byte [0x4bba37], ah
je 0x403301
pause
cmp byte [0x4bb8d9], 0
jne 0x4032b0
push 0
call sub.advapi32.dll_RegDeleteValueW
mov eax, 0x100
lock cmpxchg byte [0x4bba37], ah
je 0x403301
push 0xa
call sub.advapi32.dll_RegDeleteValueW
jmp 0x4032b0
test dl, 5
jne 0x4033dc
and edx, 0xfffffff0
test bl, bl
mov ebx, edx
push esi
mov esi, eax
jne 0x4032b0
test dword [ebx + esi - 4], 1
mov ecx, dword [ebx + esi - 4]
jne 0x403344
or ecx, 8
mov dword [ebx + esi - 4], ecx
test byte [esi - 4], 8
jne 0x40335c
cmp ebx, 0x13ffe0
je 0x403374
lea eax, [ebx + 3]
mov dword [esi - 4], eax
mov dword [ebx + esi - 8], ebx
mov eax, esi
mov edx, ebx
call fcn.00402a90
mov byte [0x4bba37], 0
xor eax, eax
pop esi
pop ebx
ret
lea eax, [ebx + esi]
and ecx, 0xfffffff0
add ebx, ecx
cmp ecx, 0xb30
jb 0x403316
call fcn.00402a50
jmp 0x403316
mov ecx, dword [esi - 8]
sub esi, ecx
add ebx, ecx
cmp ecx, 0xb30
jb 0x40331c
mov eax, esi
call fcn.00402a50
jmp 0x40331c
cmp dword [0x4bba3c], 0x13ffe0
jne 0x4033ac
sub esi, 0x10
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [eax + 4], edx
mov dword [edx], eax
mov byte [0x4bba37], 0
push 0x8000
push 0
push esi
call sub.advapi32.dll_RegDeleteKeyW
cmp eax, 1
sbb eax, eax
pop esi
pop ebx
ret
lea ebx, [esi + 0x13ffe0]
call fcn.00402af0
mov dword [ebx - 4], 2
mov dword [0x4bba3c], 0x13ffe0
mov dword [0x4bba38], ebx
mov byte [0x4bba37], 0
xor eax, eax
pop esi
pop ebx
ret
pop ebx
test dl, 3
je 0x402c80
mov eax, 0xffffffff
ret