Function at 0x408a1f
Capabilities:
Delete registry key

Disassembly:
push 0x2c
mov eax, 0x595eec
call fcn.004103bb
mov ebx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
call fcn.00411344
test al, al
je 0x408a69
pop ebp
push esi
push esp
pop esp
push ecx
pop esp
push ecx
push eax
pop eax
pop esp
push edx
push esp
pop edx
push esp
push edi
push ebx
pop edi
pop esp
pop ecx
pop ebx
push ebx
push edx
push ebx
pop esp
push edx
push esi
pop esi
push edi
push edx
push esp
pop esi
mov ebx, dword [ebp - 0x38]
xor edi, edi
xor eax, eax
mov dword [ebp - 0x14], 7
mov esi, 0x59b038
mov dword [ebp - 0x18], edi
push esi
mov word [ebp - 0x28], ax
call fcn.00433f51
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00401c7b
mov esi, str.67A399A3_E8A5_484F_9C9D_FC1A60E83D69
mov dword [ebp - 4], edi
push esi
call fcn.00433f51
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00402595
mov esi, 0x59b08c
push esi
call fcn.00433f51
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00402595
call fcn.0041170a
test al, al
je 0x408ad8
push edx
push edi
push edx
pop eax
pop esi
push ebx
pop edx
push ebx
push eax
push esi
pop ebp
pop edx
pop eax
push esi
push ebx
pop ebp
push ebp
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x34]
push ecx
mov esi, 0xf013f
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push esi
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push eax
push ebx
call edi
test eax, eax
jne 0x408c1d
lea eax, [ebp - 0x2c]
push eax
push esi
push 0
push 0x59b15c
push dword [ebp - 0x34]
call edi
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x408b76
lea eax, [ebp - 0x30]
push eax
push 0xf013f
push 0
push 0x59b164
push dword [ebp - 0x2c]
call edi
test eax, eax
jne 0x408b53
push 0x59b168
push dword [ebp - 0x30]
call ebx
push str.win64
push dword [ebp - 0x30]
call ebx
push dword [ebp - 0x30]
call esi
push 0x59b164
push dword [ebp - 0x2c]
call ebx
push str.FLAGS
push dword [ebp - 0x2c]
call ebx
push str.HELPDIR
push dword [ebp - 0x2c]
call ebx
push dword [ebp - 0x2c]
call esi
call fcn.00411863
test al, al
je 0x408b94
pop eax
push ebx
pop ecx
push ebx
pop ebp
push edx
pop ebp
pop edx
pop edi
pop eax
pop esp
push edi
push ecx
push edx
push ebx
push eax
push esp
pop esi
pop ecx
push edx
push esp
call fcn.0041111c
test al, al
je 0x408baf
pop edi
push ebp
push edx
pop esp
push esp
pop esi
pop ebx
pop ebp
pop eax
pop ebx
pop esp
pop edi
pop edx
pop edx
pop ebx
pop ebx
push ebx
push ebp
call fcn.004118a8
test al, al
je 0x408bd6
pop esi
push edi
pop edi
pop edi
pop ebx
push eax
push ebx
pop edi
push edi
push esi
push eax
pop ebx
push ebp
push ecx
push ebp
push ebp
push ecx
pop ecx
pop edx
pop ebp
pop eax
pop eax
pop edx
push edi
push ebx
push eax
push edx
push ecx
pop esp
push edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push 0x59b15c
push dword [ebp - 0x34]
call esi
push dword [ebp - 0x34]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.004113ce
test al, al
je 0x408c0c
push edi
pop ecx
push edi
push edi
push esi
push ebp
pop ebp
push ebx
push eax
pop eax
pop eax
push edx
pop esp
pop edi
push edx
pop edi
pop edi
pop eax
pop edi
pop edi
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x38]
call esi
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00401b31
call fcn.00410376
ret 4