Function at 0x419ef0
Capabilities:
Delete registry key
Delete registry value

Disassembly:
mov eax, 0x2254
call fcn.00421840
mov eax, dword [0x445030]
xor eax, esp
mov dword [esp + 0x224c], eax
mov eax, dword [esp + 0x225c]
mov edx, dword [esp + 0x2264]
push ebx
push ebp
mov ebp, dword [esp + 0x2260]
push esi
mov dword [esp + 0x20], eax
xor esi, esi
push edi
mov eax, ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x4c], edx
call fcn.00419d80
mov edi, eax
cmp edi, esi
jl 0x41a580
cmp word [ebp], 0x7d
je 0x41a57e
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x43c1b4
push ebp
xor ebx, ebx
mov dword [esp + 0x38], 1
call edi
mov esi, eax
neg esi
push 0x43c180
sbb esi, esi
push ebp
inc esi
call edi
test eax, eax
je 0x419f86
cmp esi, ebx
je 0x41a0af
mov ecx, dword [esp + 0x18]
mov eax, ebp
call fcn.00419d80
mov edi, eax
cmp edi, ebx
jl 0x41a56f
cmp dword [esp + 0x2270], ebx
je 0x41a0af
movzx ecx, word [ebp]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov eax, ebp
cmp cx, bx
je 0x419fdf
mov edi, dword [sym.imp.USER32.dll_CharNextW]
movzx ecx, cx
cmp cx, 0x5c
je 0x419fd7
push eax
call edi
movzx ecx, word [eax]
cmp cx, bx
jne 0x419fc4
jmp 0x419fdf
cmp eax, ebx
jne 0x41a4ef
mov edi, 0x43f104
mov eax, dword [edi]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x41a01b
add edi, 4
cmp edi, 0x43f134
jl 0x419fe4
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x28], ecx
push ebp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x30], ebx
call fcn.00419bb0
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
cmp esi, ebx
je 0x41a0ab
mov esi, dword [esp + 0x18]
mov eax, ebp
mov ecx, esi
call fcn.00419d80
mov edi, eax
cmp edi, ebx
jl 0x41a508
mov edi, ebp
mov ecx, esi
call fcn.00419b00
mov edi, eax
cmp edi, ebx
jl 0x41a508
mov dword [esp + 0x2c], ebx
cmp word [ebp], 0x7b
jne 0x41a09b
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x41a09b
mov ecx, dword [esp + 0x2270]
mov edx, dword [esp + 0x1c]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ebp
call fcn.00419ef0
mov edi, eax
cmp edi, ebx
jl 0x41a56f
mov ecx, dword [esp + 0x18]
mov eax, ebp
call fcn.00419d80
mov edi, eax
cmp edi, ebx
jl 0x41a56f
cmp word [ebp], 0x7d
jne 0x419f53
jmp 0x41a56d
mov dword [esp + 0x2c], ebx
push 0x43c19c
push ebp
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x41a0d8
mov ecx, dword [esp + 0x18]
mov eax, ebp
mov dword [esp + 0x30], ebx
call fcn.00419d80
mov edi, eax
cmp edi, ebx
jl 0x41a56f
push 0x43c174
push ebp
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x41a1f1
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x258]
call fcn.00419d80
mov edi, eax
cmp edi, ebx
jl 0x41a56f
mov ecx, dword [esp + 0x18]
mov eax, ebp
call fcn.00419d80
mov edi, eax
cmp edi, ebx
jl 0x41a56f
cmp word [ebp], 0x3d
jne 0x41a4f8
cmp dword [esp + 0x2270], ebx
je 0x41a16c
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
push ebp
lea eax, [esp + 0x40]
mov dword [esp + 0x40], edx
push eax
lea edx, [esp + 0x260]
mov dword [esp + 0x48], ebx
call fcn.00419810
mov edi, eax
cmp edi, ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
jl 0x41a513
mov dword [esp + 0x40], ebx
jmp 0x41a051
cmp dword [esp + 0x2274], ebx
jne 0x41a1e1
cmp dword [esp + 0x30], ebx
je 0x41a1e1
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x14]
push ecx
push 0x20006
push ebx
push ebx
push edx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x28], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x41a527
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x258]
push eax
push esi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp eax, ebx
je 0x41a1ce
cmp eax, 2
jne 0x41a527
cmp esi, ebx
je 0x41a1dd
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x18]
mov edi, ebp
call fcn.00419b00
jmp 0x41a091
movzx ecx, word [ebp]
mov eax, ebp
cmp cx, bx
je 0x41a220
mov esi, dword [sym.imp.USER32.dll_CharNextW]
movzx ecx, cx
cmp cx, 0x5c
je 0x41a218
push eax
call esi
movzx ecx, word [eax]
cmp cx, bx
jne 0x41a205
jmp 0x41a220
cmp eax, ebx
jne 0x41a4f8
cmp dword [esp + 0x2270], ebx
je 0x41a307
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push ebp
push edx
mov dword [esp + 0x28], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x41a26d
mov ecx, dword [esp + 0x1c]
xor eax, eax
cmp ecx, ebx
je 0x41a25d
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ecx
cmp eax, ebx
je 0x41a2c7
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x14]
push edx
push 0x20019
push ebx
push ebp
push eax
mov dword [esp + 0x28], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x41a2ad
mov ecx, dword [esp + 0x1c]
xor eax, eax
cmp ecx, ebx
je 0x41a29d
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ecx
cmp eax, ebx
je 0x41a2c7
mov edx, dword [esp + 0x24]
push edx
mov edx, ebp
lea esi, [esp + 0x20]
call fcn.0040d960
mov edi, eax
cmp edi, ebx
jne 0x41a539
mov ecx, dword [esp + 0x18]
mov eax, ebp
call fcn.00419d80
mov edi, eax
cmp edi, ebx
jl 0x41a56f
cmp word [ebp], 0x3d
jne 0x41a051
mov ecx, dword [esp + 0x18]
push ebp
lea eax, [esp + 0x20]
push eax
xor edx, edx
call fcn.00419810
mov edi, eax
cmp edi, ebx
jl 0x41a56f
jmp 0x41a051
cmp dword [esp + 0x2274], ebx
jne 0x41a42a
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x14]
push ecx
push 0x20019
push ebx
push ebp
push edx
mov dword [esp + 0x28], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x41a350
mov ecx, dword [esp + 0x1c]
xor eax, eax
cmp ecx, ebx
je 0x41a344
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ecx
mov esi, eax
mov dword [esp + 0x14], esi
cmp eax, ebx
je 0x41a365
mov dword [esp + 0x2274], 1
push 0xffffffffffffffff
push ebp
lea edx, [esp + 0x58]
push 0x104
push edx
call fcn.0041c2c6
push eax
call fcn.00401e80
mov ecx, dword [esp + 0x2c]
add esp, 0x14
mov eax, ebp
call fcn.00419d80
mov edi, eax
cmp edi, ebx
jl 0x41a56f
mov ecx, dword [esp + 0x18]
mov edi, ebp
call fcn.00419b00
mov edi, eax
cmp edi, ebx
jl 0x41a56f
cmp word [ebp], 0x7b
jne 0x41a3fc
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x41a3fc
mov esi, dword [esp + 0x2274]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push esi
push ebx
push eax
push ebp
call fcn.00419ef0
mov edi, eax
cmp edi, ebx
jge 0x41a3e3
cmp esi, ebx
je 0x41a56f
mov ecx, dword [esp + 0x18]
mov eax, ebp
call fcn.00419d80
mov edi, eax
cmp edi, ebx
jl 0x41a56f
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x2274], eax
cmp esi, 2
je 0x41a09b
cmp esi, ebx
je 0x41a43b
cmp eax, ebx
jne 0x41a09b
mov eax, esi
call fcn.00419d40
mov edi, eax
jmp 0x41a56f
mov dword [esp + 0x14], 2
mov esi, dword [esp + 0x14]
jmp 0x41a35a
cmp eax, ebx
je 0x41a479
mov ecx, dword [esp + 0x1c]
call fcn.00419d00
test eax, eax
je 0x41a479
lea ebx, [esp + 0x50]
call fcn.00419b70
test eax, eax
je 0x41a09b
cmp dword [esp + 0x30], 0
je 0x41a09b
mov ecx, ebx
push ecx
lea ecx, [esp + 0x20]
call fcn.00419bb0
jmp 0x41a09b
mov esi, dword [esp + 0x1c]
mov ecx, esi
call fcn.00419d00
xor ebx, ebx
mov dword [esp + 0x14], eax
test esi, esi
je 0x41a49f
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
test ebx, ebx
jne 0x41a54b
cmp dword [esp + 0x30], ebx
je 0x41a09b
cmp dword [esp + 0x14], ebx
jne 0x41a09b
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x50]
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
xor ecx, ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ecx
cmp eax, ecx
jne 0x41a55d
lea esi, [esp + 0x44]
call fcn.00401fc0
jmp 0x41a09b
lea esi, [esp + 0x28]
call fcn.00401fc0
lea esi, [esp + 0x1c]
call fcn.00401fc0
mov eax, 0x80020009
jmp 0x41a580
lea esi, [esp + 0x28]
call fcn.00401fc0
jmp 0x41a56f
lea esi, [esp + 0x3c]
call fcn.00401fc0
lea esi, [esp + 0x1c]
call fcn.00401fc0
jmp 0x41a57e
call fcn.00419d40
lea esi, [esp + 0x34]
mov edi, eax
call fcn.00401fc0
jmp 0x41a56f
lea esi, [esp + 0x1c]
call fcn.00401fc0
mov eax, edi
call fcn.00419d40
jmp 0x41a580
lea esi, [esp + 0x1c]
call fcn.00401fc0
mov eax, ebx
call fcn.00419d40
jmp 0x41a580
call fcn.00419d40
lea esi, [esp + 0x44]
mov edi, eax
call fcn.00401fc0
xor ebx, ebx
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x41a57e
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
mov ecx, dword [esp + 0x225c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0041b3f1
add esp, 0x2254
ret 0x10