Function at 0x40bee0
Capabilities:
Delete registry key

Disassembly:
sub esp, 0x630
mov eax, dword [0x42f560]
xor eax, esp
mov dword [esp + 0x62c], eax
push ebp
push esi
push str.Cleaning_up_backup_registry...._n
call fcn.0040b8e0
add esp, 4
push str.SOFTWAREK7_Computing_Backup
push 0x80000002
xor esi, esi
call fcn.00414a40
mov ebp, eax
mov dword [esp + 0x24], ebp
test ebp, ebp
je 0x40c402
cmp byte [0x438f59], 0
push ebx
jne 0x40c39b
push str.CommonInfoAntiVirus
push ebp
call fcn.00414a40
mov esi, eax
test esi, esi
je 0x40bf78
push str.VDefProtectedDir
push esi
call fcn.00414c60
push str.VDefProtectedKeys
push esi
call fcn.00414c60
push str.VDefProtectedProcs
push esi
call fcn.00414c60
push str.VFixRegKeys
push esi
call fcn.00414c60
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push esi
call ebx
jmp 0x40bf7e
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.K7TotalSecurity
push ebp
call fcn.00414a40
mov esi, eax
test esi, esi
je 0x40bf9d
push str.BuildNumber
push esi
call fcn.00414c60
push esi
call ebx
push edi
push str.K7TotalSecurityCommonInfoUpdates
push ebp
call fcn.00414a40
mov edi, eax
test edi, edi
je 0x40bfd6
mov eax, dword [str.AutoUpdateType]
xor esi, esi
test eax, eax
je 0x40bfd3
lea ebx, [ebx]
push eax
push edi
call fcn.00414c60
mov eax, dword [esi*4 + 0x431de4]
inc esi
test eax, eax
jne 0x40bfc0
push edi
call ebx
push str.K7TotalSecurityProductsAntiVirusRTMailScanner
push ebp
call fcn.00414a40
mov esi, eax
test esi, esi
je 0x40bff5
push str.MWBlkAction
push esi
call fcn.00414c60
push esi
call ebx
push str.K7TotalSecurityProductsFireWall
push ebp
call fcn.00414a40
mov edi, dword [sym.imp.SHLWAPI.dll_SHDeleteKeyA]
mov esi, eax
test esi, esi
je 0x40c01f
push str.NetWorks
push esi
call edi
push str.Profiles
push esi
call edi
push esi
call ebx
push str.SharedTechnology
push ebp
call fcn.00414a40
mov esi, eax
test esi, esi
je 0x40c03b
push str.SystemTray
push esi
call edi
push esi
call ebx
push str.K7TotalSecurityProductsFireWallIPZones
push ebp
call fcn.00414a10
xor ecx, ecx
mov dword [esp + 0x28], eax
cmp eax, ecx
je 0x40c20f
lea ebx, [esp + 0x23c]
xor edi, edi
mov esi, eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x30], ecx
mov byte [esp + 0x23c], cl
call fcn.00409d00
cmp eax, 1
jne 0x40c1f0
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [esp + 0x138]
push eax
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x250]
xor esi, esi
push str.d_d_d_s_s
push edx
mov dword [esp + 0x30], esi
mov dword [esp + 0x38], esi
mov byte [esp + 0x154], 0
mov byte [esp + 0x50], 0
call fcn.00414ec0
mov eax, dword [esp + 0x40]
mov ecx, eax
and cl, 4
add esp, 0x1c
cmp cl, 1
je 0x40c1c2
cmp byte [esp + 0x34], 0
je 0x40c1c2
test al, 3
je 0x40c1c2
push 1
lea edx, [esp + 0x240]
and eax, 1
push 0x42a2c0
push edx
mov ebx, eax
call ebp
lea edi, [esp + eax + 0x248]
lea eax, [esp + 0x40]
push eax
push 0x42a2c4
push edi
call ebp
push esi
push esi
push ebx
add edi, eax
push str._d__d__d_
push edi
call ebp
push esi
push esi
push 3
add edi, eax
push str._d__d__d_
push edi
call ebp
add esp, 0x40
push esi
push esi
push 1
add edi, eax
push str._d__d__d_
push edi
call ebp
push esi
push esi
push 1
add edi, eax
push str._d__d__d_
push edi
call ebp
push esi
push esi
push 1
add edi, eax
push str._d__lu__lu_
push edi
call ebp
add edi, eax
mov al, byte [esp + 0x60]
add esp, 0x3c
test al, 0x10
je 0x40c17c
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push ecx
push edx
push 2
jmp 0x40c19a
test al, 0x20
je 0x40c18e
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push eax
push ecx
push 3
jmp 0x40c19a
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
push edx
push eax
push 4
push str._d__lu__lu
push edi
call ebp
mov edi, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
add esp, 0x14
push edi
lea ebx, [esp + 0x240]
call fcn.00409db0
add esp, 4
inc edi
mov dword [esp + 0x30], edi
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x28]
inc edi
lea ebx, [esp + 0x23c]
mov dword [esp + 0x20], edi
mov byte [esp + 0x23c], 0
call fcn.00409d00
cmp eax, 1
je 0x40c082
mov ebp, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [esp + 0x20], 0
jbe 0x40c209
mov eax, ebp
call fcn.00409d70
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.K7TotalSecurityProductsAntiVirus
push ebp
call fcn.00414a40
mov edi, eax
test edi, edi
je 0x40c265
push str.RTFileScanner
push edi
call fcn.00414a40
mov esi, eax
test esi, esi
je 0x40c241
push 1
push str.EnableOnStartUp
push esi
call fcn.00414b40
push esi
call ebx
push str.RTMailScanner
push edi
call fcn.00414a40
mov esi, eax
test esi, esi
je 0x40c262
push 1
push str.EnableOnStartUp
push esi
call fcn.00414b40
push esi
call ebx
push edi
call ebx
push str.K7TotalSecurityProductsFireWallGeneral
push ebp
call fcn.00414a40
mov esi, eax
xor edi, edi
cmp esi, edi
je 0x40c288
push 1
push str.bAutoLoad
push esi
call fcn.00414b40
push esi
call ebx
push str.K7TotalSecurityProductsPrivacyGeneral
push ebp
call fcn.00414a40
mov esi, eax
cmp esi, edi
je 0x40c309
push 1
push str.bAutoLoad
push esi
call fcn.00414b40
lea edx, [esp + 0x10]
push edx
push str.URLFilterMalSites
push esi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x24], edi
call fcn.00414ac0
test eax, eax
je 0x40c306
lea eax, [esp + 0x18]
push eax
push str.URLFilterPhishingSites
push esi
call fcn.00414ac0
test eax, eax
je 0x40c306
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
or eax, ecx
push eax
push str.URLFilterMalSites
or ecx, eax
push esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ecx
call fcn.00414b40
mov ecx, dword [esp + 0x18]
push ecx
push str.URLFilterPhishingSites
push esi
call fcn.00414b40
push esi
call ebx
push str.K7TotalSecurityProductsAntiSpam
push ebp
call fcn.00414a40
mov esi, eax
cmp esi, edi
je 0x40c32a
push 1
push str.bLoadAtStartUp
push esi
call fcn.00414b40
push esi
call ebx
push str.K7TotalSecurityProductsSystemMonitor
push ebp
call fcn.00414a40
mov esi, eax
cmp esi, edi
je 0x40c34b
push 1
push str.EnableOnStartUp
push esi
call fcn.00414b40
push esi
call ebx
push str.K7TotalSecurityProductsK7SRConfig
push ebp
call fcn.00414a40
mov esi, eax
cmp esi, edi
pop edi
je 0x40c3a1
lea edx, [esp + 0xc]
push edx
push str.Enabled
push esi
mov dword [esp + 0x18], 0
call fcn.00414ac0
test eax, eax
je 0x40c396
push 1
push str.Enabled
push esi
call fcn.00414b40
mov eax, dword [esp + 0xc]
push eax
push str.SiteRateEnabled
push esi
call fcn.00414b40
push esi
call ebx
jmp 0x40c3a1
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.K7TotalSecurityCommonInfo
push ebp
call fcn.00414a40
mov esi, eax
test esi, esi
je 0x40c3d6
push str.dwUISchemeId
push esi
call fcn.00414c60
push str.BlockStopSvc
push esi
call fcn.00414c60
push str.bSingleClickControl
push esi
call fcn.00414c60
push esi
call ebx
mov ecx, ebp
call fcn.0040b160
cmp eax, 1
jne 0x40c3f9
mov ecx, ebp
call fcn.0040b2c0
push ebp
call fcn.0040b4f0
add esp, 4
mov ecx, ebp
call fcn.0040b0c0
push ebp
mov esi, 1
call ebx
pop ebx
mov ecx, dword [esp + 0x634]
mov eax, esi
pop esi
pop ebp
xor ecx, esp
call fcn.00416a72
add esp, 0x630
ret