Function at 0x41adb0
Capabilities:
Delete registry key

Disassembly:
sub esp, 0xc38
mov eax, dword [0x4bc7b8]
xor eax, esp
mov dword [esp + 0xc34], eax
push esi
push edi
xor edi, edi
push 0x206
lea eax, [esp + 0x832]
push edi
push eax
mov esi, ecx
mov word [esp + 0x838], di
call fcn.0046adc0
push 0x206
lea ecx, [esp + 0x226]
push edi
push ecx
mov word [esp + 0x22c], di
call fcn.0046adc0
push 0x206
lea edx, [esp + 0x43a]
push edi
push edx
mov word [esp + 0x440], di
call fcn.0046adc0
push 0x206
lea eax, [esp + 0x64e]
push edi
push eax
mov word [esp + 0x654], di
call fcn.0046adc0
push 0x206
lea ecx, [esp + 0xa6a]
push edi
push ecx
mov word [esp + 0xa70], di
call fcn.0046adc0
push 0x206
lea edx, [esp + 0x4e]
push edi
push edx
mov word [esp + 0x54], di
call fcn.0046adc0
add esp, 0x48
push str.ScrubRegistryUSB__...
call fcn.00426a70
mov edi, eax
call fcn.00426f90
push str.SYSTEMCurrentControlSetEnumUSB_
lea eax, [esp + 0x14]
push 0x104
push eax
call fcn.00467e2b
push esi
lea ecx, [esp + 0x20]
push ecx
push str._s_s
lea edx, [esp + 0x848]
push 0x104
push edx
call fcn.00468098
push esi
lea eax, [esp + 0x34]
push eax
push str._s_sMI_00
lea ecx, [esp + 0x244]
push 0x104
push ecx
call fcn.00468098
push esi
lea edx, [esp + 0x48]
push edx
push str._s_sMI_01
lea eax, [esp + 0x460]
push 0x104
push eax
call fcn.00468098
add esp, 0x4c
push esi
lea ecx, [esp + 0x10]
push ecx
push str._s_sMI_02
push 0x104
lea edx, [esp + 0x634]
push edx
call fcn.00468098
push esi
lea eax, [esp + 0x24]
push eax
push str._s_sMI_03
lea ecx, [esp + 0xa54]
push 0x104
push ecx
call fcn.00468098
add esp, 0x28
lea edx, [esp + 0x82c]
push edx
push str.CReg::DeleteSecureKeyFromHKLM__s_
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 8
lea ecx, [esp + 0x82c]
call fcn.00432090
lea eax, [esp + 0x82c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x13]
call fcn.00431e60
mov esi, dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea ecx, [esp + 0x82c]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call esi
lea edx, [esp + 0x214]
push edx
push str.CReg::DeleteSecureKeyFromHKLM__s_
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 8
lea ecx, [esp + 0x214]
call fcn.00432090
lea eax, [esp + 0x214]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x13]
call fcn.00431e60
lea ecx, [esp + 0x214]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call esi
lea edx, [esp + 0x41c]
push edx
push str.CReg::DeleteSecureKeyFromHKLM__s_
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 8
lea ecx, [esp + 0x41c]
call fcn.00432090
lea eax, [esp + 0x41c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x13]
call fcn.00431e60
lea ecx, [esp + 0x41c]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call esi
lea edx, [esp + 0x624]
push edx
push str.CReg::DeleteSecureKeyFromHKLM__s_
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 8
lea ecx, [esp + 0x624]
call fcn.00432090
lea eax, [esp + 0x624]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x13]
call fcn.00431e60
lea ecx, [esp + 0x624]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call esi
lea edx, [esp + 0xa34]
push edx
push str.CReg::DeleteSecureKeyFromHKLM__s_
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 8
lea ecx, [esp + 0xa34]
call fcn.00432090
lea eax, [esp + 0xa34]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x13]
call fcn.00431e60
lea ecx, [esp + 0xa34]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call esi
mov ecx, dword [esp + 0xc3c]
pop edi
pop esi
xor ecx, esp
call fcn.004677d8
add esp, 0xc38
ret