Function at 0x4202d0
Capabilities:
Delete registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x225c
call fcn.00412045
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x2214], eax
mov eax, dword [ebp + 0x14]
push edi
mov dword [ebp - 0x2210], ecx
mov dword [ebp - 0x2220], ebx
mov dword [ebp - 0x221c], ebx
mov dword [ebp - 0x2218], ebx
mov dword [ebp - 0x2258], eax
call fcn.0041dfe1
mov esi, eax
cmp esi, ebx
jmp 0x42082a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x4208b4
push edi
mov dword [ebp - 0x2224], 1
call esi
mov ebx, eax
neg ebx
push 0x4208d8
sbb ebx, ebx
push edi
inc ebx
call esi
test eax, eax
je 0x42035d
test ebx, ebx
je 0x42041a
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041dfe1
mov esi, eax
test esi, esi
jl 0x420893
cmp dword [ebp + 0x10], 0
je 0x42041a
xor esi, esi
push 0x5c
push edi
mov dword [ebp - 0x2230], esi
mov dword [ebp - 0x222c], esi
mov dword [ebp - 0x2228], esi
call fcn.0041df55
test eax, eax
jne 0x420837
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041e0f6
test eax, eax
je 0x4203cf
mov eax, dword [ebp - 0x2214]
push edi
lea ecx, [ebp - 0x2230]
mov dword [ebp - 0x2230], eax
call fcn.0041e453
mov dword [ebp - 0x2230], esi
cmp ebx, esi
je 0x42040f
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041dfe1
mov esi, eax
test esi, esi
jl 0x420849
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041e199
lea ecx, [ebp - 0x2230]
mov esi, eax
call fcn.00405a22
test esi, esi
jge 0x4207e5
jmp 0x420893
lea ecx, [ebp - 0x2230]
call fcn.00405a22
push 0x4208c4
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x420446
mov ecx, dword [ebp - 0x2210]
and dword [ebp - 0x2224], eax
push edi
call fcn.0041dfe1
mov esi, eax
test esi, esi
jl 0x420893
push 0x4208f0
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x420563
mov ecx, dword [ebp - 0x2210]
lea eax, [ebp - 0x220c]
push eax
call fcn.0041dfe1
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jl 0x420893
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041dfe1
mov esi, eax
cmp esi, ebx
jl 0x420893
cmp word [edi], 0x3d
jne 0x420842
cmp dword [ebp + 0x10], ebx
je 0x4204e9
mov eax, dword [ebp - 0x2214]
mov ecx, dword [ebp - 0x2210]
mov dword [ebp - 0x2248], eax
push edi
lea eax, [ebp - 0x220c]
push eax
lea eax, [ebp - 0x2248]
push eax
mov dword [ebp - 0x2244], ebx
mov dword [ebp - 0x2240], ebx
call fcn.0041ffdd
lea ecx, [ebp - 0x2248]
mov esi, eax
mov dword [ebp - 0x2248], ebx
call fcn.00405a22
cmp esi, ebx
jmp 0x420404
cmp dword [ebp + 0x14], ebx
jne 0x420552
cmp dword [ebp - 0x2224], ebx
je 0x420552
push 0x20006
push ebx
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x223c]
mov dword [ebp - 0x223c], ebx
mov dword [ebp - 0x2238], ebx
mov dword [ebp - 0x2234], ebx
call fcn.00405a3a
cmp eax, ebx
jne 0x420851
lea eax, [ebp - 0x220c]
push eax
push dword [ebp - 0x223c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp eax, ebx
je 0x420547
cmp eax, 2
jne 0x420851
lea ecx, [ebp - 0x223c]
call fcn.00405a22
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041e199
jmp 0x420321
push 0x5c
push edi
call fcn.0041df55
test eax, eax
jne 0x420842
cmp dword [ebp + 0x10], eax
je 0x420612
mov esi, 0x2001f
push esi
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2220]
call fcn.00405a3a
test eax, eax
je 0x4205d6
push 0x20019
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2220]
call fcn.00405a3a
test eax, eax
je 0x4205d6
xor ebx, ebx
push ebx
push ebx
push esi
push ebx
push ebx
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2220]
call fcn.0041db27
mov esi, eax
cmp esi, ebx
jne 0x42085f
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041dfe1
mov esi, eax
test esi, esi
jl 0x420893
cmp word [edi], 0x3d
jne 0x4207e5
mov ecx, dword [ebp - 0x2210]
push edi
push 0
lea eax, [ebp - 0x2220]
push eax
call fcn.0041ffdd
mov esi, eax
jmp 0x420402
cmp dword [ebp + 0x14], 0
jne 0x420633
push 0x20019
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2220]
call fcn.00405a3a
mov ebx, eax
jmp 0x420636
push 2
pop ebx
test ebx, ebx
je 0x420641
mov dword [ebp + 0x14], 1
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x20c]
push 0x104
push eax
call sub.msvcrt.dll_wcsncpy_s
add esp, 0x10
push eax
call fcn.0041d68e
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041dfe1
mov esi, eax
test esi, esi
jl 0x420893
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041e199
mov esi, eax
test esi, esi
jl 0x420893
cmp word [edi], 0x7b
jne 0x4206d9
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x4206d9
push dword [ebp + 0x14]
mov ecx, dword [ebp - 0x2210]
push 0
push dword [ebp - 0x2220]
push edi
call fcn.004202d0
mov esi, eax
test esi, esi
jge 0x4206c3
cmp dword [ebp + 0x14], 0
je 0x420893
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041dfe1
mov esi, eax
test esi, esi
jl 0x420893
mov eax, dword [ebp - 0x2258]
mov dword [ebp + 0x14], eax
cmp ebx, 2
je 0x42082c
test ebx, ebx
je 0x420704
test eax, eax
jne 0x42082c
push ebx
call fcn.0041d77b
mov esi, eax
jmp 0x420893
test eax, eax
je 0x42075b
push dword [ebp - 0x2220]
mov ecx, dword [ebp - 0x2210]
call fcn.0041e15d
test eax, eax
je 0x42075b
mov ecx, dword [ebp - 0x2210]
lea eax, [ebp - 0x20c]
push eax
call fcn.0041e0f6
test eax, eax
je 0x42082c
cmp dword [ebp - 0x2224], 0
je 0x42082c
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x2220]
call fcn.0041e453
jmp 0x42082c
push dword [ebp - 0x2220]
mov ecx, dword [ebp - 0x2210]
call fcn.0041e15d
lea ecx, [ebp - 0x2220]
mov dword [ebp - 0x225c], eax
call fcn.00405a22
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x420872
cmp dword [ebp - 0x2224], eax
je 0x42082c
cmp dword [ebp - 0x225c], eax
jne 0x42082c
mov dword [ebp - 0x2250], eax
mov dword [ebp - 0x224c], eax
mov eax, dword [ebp - 0x2214]
mov dword [ebp - 0x2254], eax
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x2254]
call fcn.0041da11
and dword [ebp - 0x2254], 0
test eax, eax
jne 0x420880
lea ecx, [ebp - 0x2254]
call fcn.00405a22
cmp dword [ebp + 0x10], 0
je 0x42082c
cmp word [edi], 0x7b
jne 0x42082c
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x42082c
mov ecx, dword [ebp - 0x2210]
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x2220]
push edi
call fcn.004202d0
mov esi, eax
test esi, esi
jl 0x420893
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041dfe1
mov esi, eax
test esi, esi
jl 0x420893
cmp word [edi], 0x7d
je 0x420893
jmp 0x42032a
lea ecx, [ebp - 0x2230]
call fcn.00405a22
mov esi, 0x80020009
jmp 0x420893
lea ecx, [ebp - 0x2230]
jmp 0x42088e
push eax
call fcn.0041d77b
lea ecx, [ebp - 0x223c]
jmp 0x42088c
lea ecx, [ebp - 0x2220]
call fcn.00405a22
push esi
call fcn.0041d77b
jmp 0x4208a0
lea ecx, [ebp - 0x2220]
call fcn.00405a22
push ebx
jmp 0x42086b
push eax
call fcn.0041d77b
lea ecx, [ebp - 0x2254]
mov esi, eax
call fcn.00405a22
lea ecx, [ebp - 0x2220]
call fcn.00405a22
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004013d7
leave
ret 0x10