Function at 0x430810
Capabilities:
Delete registry value

Disassembly:
sub esp, 0x32c
mov eax, dword [0x6aae14]
xor eax, esp
mov dword [esp + 0x328], eax
push ebx
push ebp
push edi
lea eax, [esp + 0x14]
push eax
push str.EPSEnabledBk
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], 1
call fcn.004d5820
mov edi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ebp, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
cmp al, 1
jne 0x430923
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x2c]
push 0x616454
push edx
call fcn.005dfb23
add esp, 0xc
call fcn.004e2c90
test eax, eax
je 0x4308b6
lea eax, [esp + 0x28]
push eax
push str.EPSEnabled
push 0x60c810
call fcn.004ee3d0
lea ecx, [esp + 0x34]
push ecx
call fcn.005e0909
add esp, 0x10
push eax
push str.EPSEnabled
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
jmp 0x4308ef
lea edx, [esp + 0x28]
push edx
call fcn.005e0909
add esp, 4
push eax
push str.EPSEnabled
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
lea eax, [esp + 0x28]
push eax
push str.EPSEnabled
push 0x60c810
call fcn.00430750
add esp, 0xc
push 1
lea ecx, [esp + 0x10]
push ecx
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x1c], ebx
call fcn.004dc050
add esp, 0x10
test eax, eax
jne 0x430923
mov edx, dword [esp + 0xc]
push str.EPSEnabledBk
push edx
call edi
mov eax, dword [esp + 0xc]
push eax
call ebp
lea ecx, [esp + 0x20]
push ecx
push str.DeviceControlEnabledBk
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
cmp al, 1
jne 0x43098d
mov edx, dword [esp + 0x20]
push edx
push str.DeviceControlEnabled
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
push 1
lea eax, [esp + 0x10]
push eax
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x1c], ebx
call fcn.004dc050
add esp, 0x10
test eax, eax
jne 0x43098d
mov ecx, dword [esp + 0xc]
push str.DeviceControlEnabledBk
push ecx
call edi
mov edx, dword [esp + 0xc]
push edx
call ebp
lea eax, [esp + 0x18]
push eax
push str.Consctl_EnableBk
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
cmp al, 1
jne 0x430a06
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x2c]
push 0x616454
push edx
call fcn.005dfb23
lea eax, [esp + 0x34]
push eax
push str.Consctl_Enable
push 0x60c810
call fcn.004ee3d0
push 1
lea ecx, [esp + 0x28]
push ecx
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x34], ebx
call fcn.004dc050
add esp, 0x28
test eax, eax
jne 0x430a06
mov edx, dword [esp + 0xc]
push str.Consctl_EnableBk
push edx
call edi
mov eax, dword [esp + 0xc]
push eax
call ebp
lea ecx, [esp + 0x24]
push ecx
push str.IPChangeAllowedBk
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
cmp al, 1
jne 0x430a70
mov edx, dword [esp + 0x24]
push edx
push str.IPChangeAllowed
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
push 1
lea eax, [esp + 0x10]
push eax
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x1c], ebx
call fcn.004dc050
add esp, 0x10
test eax, eax
jne 0x430a70
mov ecx, dword [esp + 0xc]
push str.IPChangeAllowedBk
push ecx
call edi
mov edx, dword [esp + 0xc]
push edx
call ebp
lea eax, [esp + 0x1c]
push eax
push str.BlockGmailBk
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
cmp al, 1
jne 0x430ada
mov ecx, dword [esp + 0x1c]
push ecx
push str.BlockGmail
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
push 1
lea edx, [esp + 0x10]
push edx
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x1c], ebx
call fcn.004dc050
add esp, 0x10
test eax, eax
jne 0x430ada
mov eax, dword [esp + 0xc]
push str.BlockGmailBk
push eax
call edi
mov ecx, dword [esp + 0xc]
push ecx
call ebp
push 0x103
lea edx, [esp + 0x235]
push ebx
push edx
mov byte [esp + 0x23c], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0x13d]
push ebx
push eax
mov byte [esp + 0x144], bl
call fcn.005dfd60
add esp, 0x18
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x234]
push edx
push str.SectionNameBk
push 0x613dac
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], 0x104
call fcn.004d5770
cmp al, 1
jne 0x430bf8
cmp byte [esp + 0x230], bl
je 0x430bf8
push 1
lea eax, [esp + 0x10]
push eax
push 0x613dac
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x1c], ebx
call fcn.004dc050
add esp, 0x10
test eax, eax
jne 0x430b83
mov ecx, dword [esp + 0xc]
push str.SectionNameBk
push ecx
call edi
mov edx, dword [esp + 0xc]
push edx
call ebp
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x130]
push ecx
push str.MSIni
push 0x613dac
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], 0x104
call fcn.004d5770
cmp al, 1
jne 0x430bf8
cmp byte [esp + 0x12c], bl
je 0x430bf8
lea edx, [esp + 0x12c]
push edx
push 0x615678
lea eax, [esp + 0x238]
push str.ENHTTP
push eax
call fcn.004e0cb0
push ebx
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x144]
push edx
call fcn.004ec3a0
lea eax, [esp + 0x44]
push eax
call fcn.00508130
add esp, 0x20
mov ecx, dword [esp + 0x334]
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.005dfbbe
add esp, 0x32c
ret