Function at 0x4110a5
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4481bc
mov eax, dword fs:[0]
push eax
mov eax, 0x2260
call fcn.0043563c
mov eax, dword [0x40aa1c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x222c], eax
mov ecx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x221c], ecx
xor ecx, ecx
mov dword [ebp - 0x2228], ecx
mov dword [ebp - 0x2224], ecx
mov dword [ebp - 0x2220], ecx
mov dword [ebp - 4], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x226c], ecx
mov ecx, eax
jmp 0x411620
push 0x4014dc
push edi
mov dword [ebp - 0x2240], 1
call dword [0x401110]
neg eax
push 0x4014b0
sbb ebx, ebx
push edi
inc ebx
call dword [0x401110]
test eax, eax
je 0x411145
test ebx, ebx
je 0x411219
mov ecx, dword [ebp - 0x222c]
push edi
call fcn.00410b78
mov esi, eax
test esi, esi
js 0x411652
xor esi, esi
cmp dword [ebp + 0x10], esi
je 0x41121b
push 0x5c
push edi
mov dword [ebp - 0x2238], esi
mov dword [ebp - 0x2234], esi
mov dword [ebp - 0x2230], esi
call fcn.0041176f
test eax, eax
jne 0x411642
mov ecx, dword [ebp - 0x222c]
push edi
call fcn.00411041
test eax, eax
je 0x4111ce
mov eax, dword [ebp - 0x221c]
push edi
lea ecx, [ebp - 0x2238]
mov dword [ebp - 0x2238], eax
mov dword [ebp - 0x2234], esi
mov dword [ebp - 0x2230], esi
call fcn.0041048e
mov dword [ebp - 0x2238], esi
mov dword [ebp - 0x2234], esi
mov dword [ebp - 0x2230], esi
test ebx, ebx
je 0x41120c
mov ebx, dword [ebp - 0x222c]
push edi
mov ecx, ebx
call fcn.00410b78
mov esi, eax
test esi, esi
js 0x41163a
push edi
mov ecx, ebx
call fcn.004116ea
lea ecx, [ebp - 0x2238]
mov esi, eax
call fcn.004103fb
test esi, esi
js 0x411652
jmp 0x4115eb
lea ecx, [ebp - 0x2238]
call fcn.004103fb
jmp 0x41121b
xor esi, esi
push 0x4014c8
push edi
call dword [0x401110]
mov ebx, dword [ebp - 0x222c]
test eax, eax
jne 0x411249
push edi
mov ecx, ebx
mov dword [ebp - 0x2240], esi
call fcn.00410b78
mov esi, eax
test esi, esi
js 0x411652
push 0x4014a8
push edi
call dword [0x401110]
test eax, eax
jne 0x411373
lea eax, [ebp - 0x2218]
push eax
mov ecx, ebx
call fcn.00410b78
mov esi, eax
test esi, esi
js 0x411652
push edi
mov ecx, ebx
call fcn.00410b78
mov esi, eax
test esi, esi
js 0x411652
push 0x3d
pop eax
cmp word [edi], ax
jne 0x41164d
cmp dword [ebp + 0x10], 0
je 0x4112f9
mov eax, dword [ebp - 0x221c]
and dword [ebp - 0x2248], 0
and dword [ebp - 0x2244], 0
mov dword [ebp - 0x224c], eax
push edi
lea eax, [ebp - 0x2218]
push eax
lea eax, [ebp - 0x224c]
push eax
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.00410cb1
mov esi, eax
xor eax, eax
mov dword [ebp - 0x224c], eax
mov dword [ebp - 0x2248], eax
mov dword [ebp - 0x2244], eax
lea ecx, [ebp - 0x224c]
test esi, esi
js 0x411689
mov byte [ebp - 4], al
jmp 0x4115e6
cmp dword [ebp + 0x14], 0
jne 0x411366
cmp dword [ebp - 0x2240], 0
je 0x411366
xor eax, eax
push 0x20006
push eax
push dword [ebp - 0x221c]
lea ecx, [ebp - 0x2264]
mov dword [ebp - 0x2264], eax
mov dword [ebp - 0x2260], eax
mov dword [ebp - 0x225c], eax
call fcn.004103a6
test eax, eax
jne 0x41167b
lea eax, [ebp - 0x2218]
push eax
push dword [ebp - 0x2264]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
je 0x41135b
cmp eax, 2
jne 0x41167b
lea ecx, [ebp - 0x2264]
call fcn.004103fb
push edi
mov ecx, ebx
call fcn.004116ea
jmp 0x411626
push 0x5c
push edi
call fcn.0041176f
test eax, eax
jne 0x41164d
cmp dword [ebp + 0x10], eax
je 0x411416
mov esi, dword [ebp - 0x221c]
push 0x2001f
push edi
push esi
lea ecx, [ebp - 0x2228]
call fcn.004103a6
test eax, eax
je 0x4113e0
push 0x20019
push edi
push esi
lea ecx, [ebp - 0x2228]
call fcn.004103a6
test eax, eax
je 0x4113e0
xor eax, eax
push eax
push eax
push 0x2001f
push eax
push eax
push edi
push esi
lea ecx, [ebp - 0x2228]
call fcn.00410337
mov esi, eax
test esi, esi
jne 0x411690
push edi
mov ecx, ebx
call fcn.00410b78
mov esi, eax
test esi, esi
js 0x411652
push 0x3d
pop eax
cmp word [edi], ax
jne 0x4115eb
push edi
push 0
lea eax, [ebp - 0x2228]
push eax
mov ecx, ebx
call fcn.00410cb1
mov esi, eax
jmp 0x4111ff
cmp dword [ebp + 0x14], 0
jne 0x411435
push 0x20019
push edi
push dword [ebp - 0x221c]
lea ecx, [ebp - 0x2228]
call fcn.004103a6
jmp 0x411438
push 2
pop eax
mov dword [ebp - 0x223c], eax
test eax, eax
je 0x411449
mov dword [ebp + 0x14], 1
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x218]
push 0x104
push eax
call dword [fcn.00401414]
add esp, 0x10
push eax
call fcn.0040fd58
push edi
mov ecx, ebx
call fcn.00410b78
mov esi, eax
test esi, esi
js 0x411652
push edi
mov ecx, ebx
call fcn.004116ea
mov esi, eax
test esi, esi
js 0x411652
push 0x7b
pop eax
cmp word [edi], ax
jne 0x4114d4
push edi
call dword [fcn.0040110c]
cmp eax, 1
jne 0x4114d4
push dword [ebp + 0x14]
mov ecx, ebx
push 0
push dword [ebp - 0x2228]
push edi
call fcn.004110a5
mov esi, eax
test esi, esi
jns 0x4114c2
cmp dword [ebp + 0x14], 0
je 0x411652
push edi
mov ecx, ebx
call fcn.00410b78
mov esi, eax
test esi, esi
js 0x411652
mov eax, dword [ebp - 0x223c]
mov ecx, dword [ebp - 0x226c]
mov dword [ebp + 0x14], ecx
cmp eax, 2
je 0x41162c
test eax, eax
je 0x411505
test ecx, ecx
jne 0x41162c
push eax
call fcn.0040fdd2
mov esi, eax
jmp 0x411652
test ecx, ecx
je 0x411554
push dword [ebp - 0x2228]
mov ecx, ebx
call fcn.00411070
test eax, eax
je 0x411554
lea eax, [ebp - 0x218]
push eax
mov ecx, ebx
call fcn.00411041
test eax, eax
je 0x41162c
cmp dword [ebp - 0x2240], 0
je 0x41162c
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x2228]
call fcn.0041048e
jmp 0x41162c
push dword [ebp - 0x2228]
mov ecx, ebx
call fcn.00411070
lea ecx, [ebp - 0x2228]
mov dword [ebp - 0x223c], eax
call fcn.004103fb
mov dword [ebp - 0x2268], eax
test eax, eax
jne 0x4116b1
cmp dword [ebp - 0x2240], eax
je 0x41162c
cmp dword [ebp - 0x223c], eax
jne 0x41162c
mov eax, dword [ebp - 0x221c]
and dword [ebp - 0x2254], 0
and dword [ebp - 0x2250], 0
mov dword [ebp - 0x2258], eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x2258]
call fcn.00410415
xor ecx, ecx
mov dword [ebp - 0x2258], ecx
mov dword [ebp - 0x2254], ecx
mov dword [ebp - 0x2250], ecx
test eax, eax
jne 0x4116a3
lea ecx, [ebp - 0x2258]
call fcn.004103fb
cmp dword [ebp + 0x10], 0
je 0x41162c
push 0x7b
pop eax
cmp word [edi], ax
jne 0x41162c
push edi
call dword [fcn.0040110c]
cmp eax, 1
jne 0x41162c
push 0
push dword [ebp + 0x10]
mov ecx, ebx
push dword [ebp - 0x2228]
push edi
call fcn.004110a5
mov esi, eax
test esi, esi
js 0x411652
mov ecx, ebx
push edi
call fcn.00410b78
mov esi, eax
test esi, esi
js 0x411652
push 0x7d
pop eax
cmp word [edi], ax
jne 0x411112
jmp 0x411652
lea ecx, [ebp - 0x2238]
jmp 0x411689
lea ecx, [ebp - 0x2238]
call fcn.004103fb
mov esi, 0x80020009
lea ecx, [ebp - 0x2228]
call fcn.004103fb
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00434878
leave
ret 0x10
push eax
call fcn.0040fdd2
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.004103fb
jmp 0x411652
lea ecx, [ebp - 0x2228]
call fcn.004103fb
push esi
call fcn.0040fdd2
jmp 0x41165f
push eax
call fcn.0040fdd2
lea ecx, [ebp - 0x2258]
jmp 0x411687
lea ecx, [ebp - 0x2228]
call fcn.004103fb
push dword [ebp - 0x2268]
jmp 0x41169c