Function at 0x40197a
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 4], edi
call fcn.00401098
mov eax, dword [ebp + 8]
dec eax
je 0x401a7c
dec eax
je 0x401a12
mov esi, 0xf003f
add edi, 4
push esi
push str.SOFTWAREMicrosoftInternet_ExplorerAdvancedOptions
push 0x80000002
mov ecx, edi
call fcn.00401c2d
test eax, eax
jne 0x4019c7
push str.CDNCLIENT
mov ecx, edi
call fcn.00401c6b
push esi
mov ebx, 0x80000001
push str.SoftwareCNNICCdnClient
push ebx
mov ecx, edi
call fcn.00401c2d
test eax, eax
jne 0x4019ea
push str.CONSOLE
mov ecx, edi
call fcn.00401c6b
push esi
push str.SoftwareMicrosoftInternet_ExplorerMenuExt
push ebx
mov ecx, edi
call fcn.00401c2d
test eax, eax
jne 0x401bc2
mov eax, dword [ebp - 4]
mov ecx, edi
push dword [eax + 0x2c]
call fcn.00401c6b
jmp 0x401bc2
mov esi, 0xf003f
add edi, 4
push esi
push str.SOFTWAREMicrosoftInternet_ExplorerAdvancedOptionsCDNCLIENT
push 0x80000002
mov ecx, edi
call fcn.00401c2d
test eax, eax
jne 0x401a3c
push str.MAIL
mov ecx, edi
call fcn.00401c6b
push esi
push str.SoftwareCNNICCdnClientConsole
push 0x80000001
mov ecx, edi
call fcn.00401c2d
test eax, eax
jne 0x401bc2
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableMail
push dword [edi]
call esi
push str.EnableMailAcc
push dword [edi]
call esi
push str.EnableMailW
push dword [edi]
call esi
jmp 0x401bc2
lea eax, [ebp + 8]
mov esi, 0xf003f
xor ebx, ebx
push eax
push esi
push ebx
push str.SOFTWAREMicrosoftInternet_ExplorerAdvancedOptionsCDNCLIENT
push 0x80000002
add edi, 4
mov dword [ebp + 8], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x401abf
mov ecx, edi
call fcn.00401c16
mov ecx, dword [ebp + 8]
cmp eax, ebx
mov dword [edi], ecx
jne 0x401abf
push str.IDNKW
mov ecx, edi
call fcn.00401c6b
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push esi
push ebx
mov ebx, 0x80000001
push str.SoftwareCNNICCdnClientConsole
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x401b54
mov ecx, edi
call fcn.00401c16
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [edi], ecx
jne 0x401b54
push str.EnableIdn
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableIntRes
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableIdnCmdEx
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableKw
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableAutoMatch
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableKwDisp
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableRestore
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableAddrHint
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push 0x104
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.0040bf70
add esp, 0xc
lea eax, [ebp - 0x108]
push str.SoftwareMicrosoftInternet_ExplorerMenuExt
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x108]
push 0x416058
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 4]
push dword [eax + 0x2c]
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x108]
push esi
push eax
push ebx
mov ecx, edi
call fcn.00401c2d
test eax, eax
jne 0x401bc2
push str.Contexts
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
pop edi
pop esi
pop ebx
leave
ret 4