Function at 0x428140
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x566b28
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x5c0490]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0
lea eax, [ebp - 0x40]
push str.Tool_DeletePrinterSubForFax
push eax
call fcn.00401190
add esp, 0xc
mov ecx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
push ecx
push esi
push ebx
push str.lpszPrinter___s__lpszDriver___s__lpszVersion___s
lea edx, [ebp - 0x40]
push 1
push edx
mov dword [ebp - 4], 0
call fcn.00401410
add esp, 0x18
call fcn.0044b52d
mov edi, dword [eax + 4]
mov dword [ebp - 0x1c], edi
call fcn.00448c3f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4281c5
push 0x80004005
call fcn.00404160
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00404f00
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x28]
push ecx
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x38], esp
mov esi, esp
push eax
call fcn.00406410
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.00420c40
add esp, 8
call fcn.00448c3f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x428225
push 0x80004005
call fcn.00404160
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 3
call fcn.00448c3f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x428252
push 0x80004005
call fcn.00404160
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 4
call fcn.00448c3f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x42827f
push 0x80004005
call fcn.00404160
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x38], eax
push ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.00404f00
push 2
push 0x5983c8
push ebx
mov byte [ebp - 4], 6
call fcn.0053da48
add esp, 0xc
test eax, eax
jne 0x4285ee
call fcn.00448c3f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4282d1
push 0x80004005
call fcn.00404160
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov esi, dword [ecx - 0xc]
push str.NONE
push edx
mov dword [ebp - 0x34], esi
call fcn.0053d3bf
add esp, 8
test eax, eax
je 0x42847d
push str._FAX
add edi, 0xf8
lea eax, [ebp - 0x2c]
push edi
push eax
call fcn.004105a0
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.004063a0
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42834e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
dec esi
push esi
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x20]
call fcn.004103e0
push eax
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x2c]
mov bl, 9
push eax
mov byte [ebp - 4], bl
call fcn.004104e0
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xa
call fcn.004063a0
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4283a1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4283c4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x10]
push 0x5c
push esi
call fcn.0053dda2
add esp, 8
test eax, eax
jne 0x4283db
or eax, 0xffffffff
jmp 0x4283df
sub eax, esi
sar eax, 1
push eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00410460
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
call fcn.004063a0
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42841c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
push SysReAllocString
call fcn.0041dd40
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esp, 8
push esi
push SysReAllocString
call ebx
mov edi, dword [ebp - 0x18]
mov esi, SysReAllocString
call fcn.0041df30
cmp eax, 1
jne 0x42844e
push edi
push esi
call ebx
mov edi, dword [ebp - 0x14]
call fcn.0041df30
cmp eax, 1
jne 0x42847a
push edi
push SysReAllocString
call ebx
mov edi, str.SOFTWARECANON_
call fcn.0041df30
cmp eax, 1
jne 0x42847a
push edi
push SysReAllocString
call ebx
mov edi, dword [ebp - 0x1c]
lea esi, [edi + 0xf8]
push esi
lea ecx, [ebp - 0x14]
call fcn.004063a0
mov ecx, dword [ebp - 0x34]
dec ecx
push ecx
lea edx, [ebp - 0x30]
push edx
lea ecx, [ebp - 0x20]
call fcn.004103e0
push eax
lea eax, [ebp - 0x34]
push esi
mov bl, 0xc
push eax
mov byte [ebp - 4], bl
call fcn.004104e0
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xd
call fcn.004063a0
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4284df
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x428502
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x10]
push 0x5c
push esi
call fcn.0053dda2
add esp, 8
test eax, eax
jne 0x428519
or eax, 0xffffffff
jmp 0x42851d
sub eax, esi
sar eax, 1
push eax
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00410460
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.004063a0
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42855a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
push SysReAllocString
call fcn.0041dd40
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esp, 8
push esi
push SysReAllocString
call ebx
mov edi, dword [ebp - 0x18]
mov esi, SysReAllocString
call fcn.0041df30
cmp eax, 1
jne 0x42858c
push edi
push esi
call ebx
mov ebx, dword [ebp - 0x14]
mov edi, ebx
call fcn.0041df30
cmp eax, 1
jne 0x4285c2
push ebx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov edi, str.SOFTWARECANON_
call fcn.0041df30
cmp eax, 1
jne 0x4285c2
push edi
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x428818
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x428818
mov ecx, dword [ebp - 0x24]
push str.NONE
push ecx
call fcn.0053d3bf
add esp, 8
test eax, eax
je 0x42891f
push str._FAX
add edi, 0xf8
lea edx, [ebp - 0x34]
push edi
push edx
call fcn.004105a0
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
call fcn.004063a0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42864f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00404f00
mov esi, eax
push 0x5958c8
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x30]
push edx
mov byte [ebp - 4], 0x10
call fcn.004105a0
add esp, 0xc
push esi
push eax
lea eax, [ebp - 0x34]
mov bl, 0x11
push eax
mov byte [ebp - 4], bl
call fcn.004104e0
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x12
call fcn.004063a0
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4286b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4286d8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4286fb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x10]
push esi
push SysReAllocString
call fcn.0041dd40
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esp, 8
push esi
push SysReAllocString
call ebx
mov edi, dword [ebp - 0x14]
mov esi, SysReAllocString
call fcn.0041df30
cmp eax, 1
jne 0x428743
push edi
push esi
call ebx
mov edi, str.SOFTWARECANON_
call fcn.0041df30
cmp eax, 1
jne 0x428743
push edi
push esi
call ebx
mov edi, dword [ebp - 0x1c]
lea ecx, [edi + 0xf8]
push ecx
lea ecx, [ebp - 0x14]
call fcn.004063a0
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x30]
call fcn.00404f00
push eax
add edi, 0xf4
lea eax, [ebp - 0x34]
push edi
push eax
mov byte [ebp - 4], 0x13
call fcn.004104e0
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x14
call fcn.004063a0
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4287a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4287cc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x10]
push esi
push SysReAllocString
call fcn.0041dd40
add esp, 8
push esi
push SysReAllocString
call ebx
mov ebx, dword [ebp - 0x14]
mov edi, ebx
mov esi, SysReAllocString
call fcn.0041df30
cmp eax, 1
jne 0x428818
push ebx
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov edi, str.SOFTWARECANON_
call fcn.0041df30
cmp eax, 1
jne 0x428818
push edi
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push 0
push str.return___08x
lea ecx, [ebp - 0x40]
push 2
push ecx
call fcn.00401410
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
add esp, 0x10
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x428850
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x428873
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add ebx, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [ebx + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x428893
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4288b6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4288d9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4288fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.00401370
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
jmp 0x428746