Function at 0x41711f
Capabilities:
Delete registry key
Delete registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x2224
call fcn.0041d2a0
mov eax, dword [0x49d084]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
and dword [ebp - 0x2218], 0
push ebx
push esi
mov dword [ebp - 0x2220], eax
mov eax, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x2210], ecx
mov dword [ebp - 0x2224], eax
jmp 0x417616
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x401388
push edi
mov dword [ebp - 0x221c], 1
call esi
mov ebx, eax
neg ebx
push 0x4013ac
sbb ebx, ebx
push edi
inc ebx
call esi
test eax, eax
je 0x417195
test ebx, ebx
je 0x417246
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.00413f81
mov esi, eax
test esi, esi
jl 0x41768a
cmp dword [ebp + 0x10], 0
je 0x417246
and dword [ebp - 0x2214], 0
push 0x5c
push edi
call fcn.00413ef5
test eax, eax
jne 0x41762e
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.0041408b
test eax, eax
je 0x4171fb
mov eax, dword [ebp - 0x2220]
push edi
lea ecx, [ebp - 0x2214]
mov dword [ebp - 0x2214], eax
call fcn.00414ac4
and dword [ebp - 0x2214], 0
test ebx, ebx
je 0x41723b
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.00413f81
mov esi, eax
test esi, esi
jl 0x417640
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.004140fd
lea ecx, [ebp - 0x2214]
mov esi, eax
call fcn.00413b70
test esi, esi
jl 0x41768a
jmp 0x4175db
lea ecx, [ebp - 0x2214]
call fcn.00413b70
push 0x401398
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x417272
mov ecx, dword [ebp - 0x2210]
and dword [ebp - 0x221c], eax
push edi
call fcn.00413f81
mov esi, eax
test esi, esi
jl 0x41768a
push 0x4013c4
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x41737b
mov ecx, dword [ebp - 0x2210]
lea eax, [ebp - 0x220c]
push eax
call fcn.00413f81
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jl 0x41768a
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.00413f81
mov esi, eax
cmp esi, ebx
jl 0x41768a
cmp word [edi], 0x3d
jne 0x417639
cmp dword [ebp + 0x10], ebx
je 0x417309
mov eax, dword [ebp - 0x2220]
mov ecx, dword [ebp - 0x2210]
mov dword [ebp - 0x221c], eax
push edi
lea eax, [ebp - 0x220c]
push eax
lea eax, [ebp - 0x221c]
push eax
call fcn.00416e2d
lea ecx, [ebp - 0x221c]
mov esi, eax
mov dword [ebp - 0x221c], ebx
call fcn.00413b70
cmp esi, ebx
jmp 0x417230
cmp dword [ebp + 0x14], ebx
jne 0x417366
cmp dword [ebp - 0x221c], ebx
je 0x417366
push 0x20006
push ebx
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x2214]
mov dword [ebp - 0x2214], ebx
call fcn.00413be3
cmp eax, ebx
jne 0x417648
lea eax, [ebp - 0x220c]
push eax
push dword [ebp - 0x2214]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp eax, ebx
je 0x41735b
cmp eax, 2
jne 0x417648
lea ecx, [ebp - 0x2214]
call fcn.00413b70
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.004140fd
mov esi, eax
cmp esi, ebx
jmp 0x417620
push 0x5c
push edi
call fcn.00413ef5
test eax, eax
jne 0x417639
cmp dword [ebp + 0x10], eax
je 0x41742a
mov esi, 0x2001f
push esi
push edi
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x2218]
call fcn.00413be3
test eax, eax
je 0x4173ee
push 0x20019
push edi
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x2218]
call fcn.00413be3
test eax, eax
je 0x4173ee
xor ebx, ebx
push ebx
push ebx
push esi
push ebx
push ebx
push edi
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x2218]
call fcn.00413b8e
mov esi, eax
cmp esi, ebx
jne 0x417656
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.00413f81
mov esi, eax
test esi, esi
jl 0x41768a
cmp word [edi], 0x3d
jne 0x4175db
mov ecx, dword [ebp - 0x2210]
push edi
push 0
lea eax, [ebp - 0x2218]
push eax
call fcn.00416e2d
mov esi, eax
jmp 0x41722e
cmp dword [ebp + 0x14], 0
jne 0x41744b
push 0x20019
push edi
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x2218]
call fcn.00413be3
mov ebx, eax
jmp 0x41744e
push 2
pop ebx
test ebx, ebx
je 0x417459
mov dword [ebp + 0x14], 1
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x20c]
push 0x104
push eax
call sub.msvcrt.dll_wcsncpy_s
add esp, 0x10
push eax
call fcn.0041399a
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.00413f81
mov esi, eax
test esi, esi
jl 0x41768a
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.004140fd
mov esi, eax
test esi, esi
jl 0x41768a
cmp word [edi], 0x7b
jne 0x4174f1
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x4174f1
push dword [ebp + 0x14]
mov ecx, dword [ebp - 0x2210]
push 0
push dword [ebp - 0x2218]
push edi
call fcn.0041711f
mov esi, eax
test esi, esi
jge 0x4174db
cmp dword [ebp + 0x14], 0
je 0x41768a
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.00413f81
mov esi, eax
test esi, esi
jl 0x41768a
cmp ebx, 2
mov eax, dword [ebp - 0x2224]
mov dword [ebp + 0x14], eax
je 0x417622
test ebx, ebx
je 0x41751c
test eax, eax
jne 0x417622
push ebx
call fcn.00413ac1
mov esi, eax
jmp 0x41768a
test eax, eax
je 0x417573
push dword [ebp - 0x2218]
mov ecx, dword [ebp - 0x2210]
call fcn.004140c1
test eax, eax
je 0x417573
mov ecx, dword [ebp - 0x2210]
lea eax, [ebp - 0x20c]
push eax
call fcn.0041408b
test eax, eax
je 0x417622
cmp dword [ebp - 0x221c], 0
je 0x417622
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x2218]
call fcn.00414ac4
jmp 0x417622
push dword [ebp - 0x2218]
mov ecx, dword [ebp - 0x2210]
call fcn.004140c1
lea ecx, [ebp - 0x2218]
mov dword [ebp - 0x2214], eax
call fcn.00413b70
mov ebx, eax
test ebx, ebx
jne 0x417669
cmp dword [ebp - 0x221c], eax
je 0x417622
cmp dword [ebp - 0x2214], eax
jne 0x417622
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x2220]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
and dword [ebp - 0x221c], ebx
test eax, eax
jne 0x417677
lea ecx, [ebp - 0x221c]
call fcn.00413b70
cmp dword [ebp + 0x10], 0
je 0x417622
cmp word [edi], 0x7b
jne 0x417622
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x417622
mov ecx, dword [ebp - 0x2210]
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x2218]
push edi
call fcn.0041711f
mov esi, eax
test esi, esi
jl 0x41768a
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.00413f81
mov esi, eax
test esi, esi
jl 0x41768a
cmp word [edi], 0x7d
jne 0x417162
jmp 0x41768a
lea ecx, [ebp - 0x2214]
call fcn.00413b70
mov esi, 0x80020009
jmp 0x41768a
lea ecx, [ebp - 0x2214]
jmp 0x417685
push eax
call fcn.00413ac1
lea ecx, [ebp - 0x2214]
jmp 0x417683
lea ecx, [ebp - 0x2218]
call fcn.00413b70
push esi
call fcn.00413ac1
jmp 0x417697
lea ecx, [ebp - 0x2218]
call fcn.00413b70
push ebx
jmp 0x417662
push eax
call fcn.00413ac1
lea ecx, [ebp - 0x221c]
mov esi, eax
call fcn.00413b70
lea ecx, [ebp - 0x2218]
call fcn.00413b70
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041d1c7
leave
ret 0x10