Function at 0x421040
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55cfe8
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x5b4450]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0
lea eax, [ebp - 0x40]
push str.Tool_DeletePrinterSubForFax
push eax
call fcn.0040ac70
add esp, 0xc
mov ecx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
push ecx
push esi
push ebx
push str.lpszPrinter___s__lpszDriver___s__lpszVersion___s
lea edx, [ebp - 0x40]
push 1
push edx
mov dword [ebp - 4], 0
call fcn.0040aed0
add esp, 0x18
call fcn.00442c4d
mov edi, dword [eax + 4]
mov dword [ebp - 0x1c], edi
call fcn.0040bea0
call fcn.0044033f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4210ca
push 0x80004005
call fcn.004010a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00401210
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x28]
push ecx
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x38], esp
mov esi, esp
push eax
call fcn.004017c0
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.00417dc0
add esp, 8
call fcn.0044033f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x42112a
push 0x80004005
call fcn.004010a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 3
call fcn.0044033f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x421157
push 0x80004005
call fcn.004010a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 4
call fcn.0044033f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x421184
push 0x80004005
call fcn.004010a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x38], eax
push ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.00401210
push 2
push 0x58d4d0
push ebx
mov byte [ebp - 4], 6
call fcn.00534305
add esp, 0xc
test eax, eax
jne 0x4214f3
call fcn.0044033f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4211d6
push 0x80004005
call fcn.004010a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov esi, dword [ecx - 0xc]
push str.NONE
push edx
mov dword [ebp - 0x34], esi
call fcn.00533c47
add esp, 8
test eax, eax
je 0x421382
push str._FAX
add edi, 0xf8
lea eax, [ebp - 0x2c]
push edi
push eax
call fcn.004063e0
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.00401520
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x421253
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
dec esi
push esi
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x20]
call fcn.00413980
push eax
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x2c]
mov bl, 9
push eax
mov byte [ebp - 4], bl
call fcn.00413a80
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xa
call fcn.00401520
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4212a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4212c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x10]
push 0x5c
push esi
call fcn.00534819
add esp, 8
test eax, eax
jne 0x4212e0
or eax, 0xffffffff
jmp 0x4212e4
sub eax, esi
sar eax, 1
push eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00413a00
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
call fcn.00401520
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x421321
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
push SysReAllocString
call fcn.00414fb0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esp, 8
push esi
push SysReAllocString
call ebx
mov edi, dword [ebp - 0x18]
mov esi, SysReAllocString
call fcn.00415170
cmp eax, 1
jne 0x421353
push edi
push esi
call ebx
mov edi, dword [ebp - 0x14]
call fcn.00415170
cmp eax, 1
jne 0x42137f
push edi
push SysReAllocString
call ebx
mov edi, str.SOFTWARECANON_
call fcn.00415170
cmp eax, 1
jne 0x42137f
push edi
push SysReAllocString
call ebx
mov edi, dword [ebp - 0x1c]
lea esi, [edi + 0xf8]
push esi
lea ecx, [ebp - 0x14]
call fcn.00401520
mov ecx, dword [ebp - 0x34]
dec ecx
push ecx
lea edx, [ebp - 0x30]
push edx
lea ecx, [ebp - 0x20]
call fcn.00413980
push eax
lea eax, [ebp - 0x34]
push esi
mov bl, 0xc
push eax
mov byte [ebp - 4], bl
call fcn.00413a80
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xd
call fcn.00401520
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4213e4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x421407
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x10]
push 0x5c
push esi
call fcn.00534819
add esp, 8
test eax, eax
jne 0x42141e
or eax, 0xffffffff
jmp 0x421422
sub eax, esi
sar eax, 1
push eax
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00413a00
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.00401520
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42145f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
push SysReAllocString
call fcn.00414fb0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esp, 8
push esi
push SysReAllocString
call ebx
mov edi, dword [ebp - 0x18]
mov esi, SysReAllocString
call fcn.00415170
cmp eax, 1
jne 0x421491
push edi
push esi
call ebx
mov ebx, dword [ebp - 0x14]
mov edi, ebx
call fcn.00415170
cmp eax, 1
jne 0x4214c7
push ebx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov edi, str.SOFTWARECANON_
call fcn.00415170
cmp eax, 1
jne 0x4214c7
push edi
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42171d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x42171d
mov ecx, dword [ebp - 0x24]
push str.NONE
push ecx
call fcn.00533c47
add esp, 8
test eax, eax
je 0x421824
push str._FAX
add edi, 0xf8
lea edx, [ebp - 0x34]
push edi
push edx
call fcn.004063e0
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
call fcn.00401520
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x421554
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00401210
mov esi, eax
push 0x58abe4
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x30]
push edx
mov byte [ebp - 4], 0x10
call fcn.004063e0
add esp, 0xc
push esi
push eax
lea eax, [ebp - 0x34]
mov bl, 0x11
push eax
mov byte [ebp - 4], bl
call fcn.00413a80
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x12
call fcn.00401520
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4215ba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4215dd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x421600
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x10]
push esi
push SysReAllocString
call fcn.00414fb0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esp, 8
push esi
push SysReAllocString
call ebx
mov edi, dword [ebp - 0x14]
mov esi, SysReAllocString
call fcn.00415170
cmp eax, 1
jne 0x421648
push edi
push esi
call ebx
mov edi, str.SOFTWARECANON_
call fcn.00415170
cmp eax, 1
jne 0x421648
push edi
push esi
call ebx
mov edi, dword [ebp - 0x1c]
lea ecx, [edi + 0xf8]
push ecx
lea ecx, [ebp - 0x14]
call fcn.00401520
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x30]
call fcn.00401210
push eax
add edi, 0xf4
lea eax, [ebp - 0x34]
push edi
push eax
mov byte [ebp - 4], 0x13
call fcn.00413a80
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x14
call fcn.00401520
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4216ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4216d1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x10]
push esi
push SysReAllocString
call fcn.00414fb0
add esp, 8
push esi
push SysReAllocString
call ebx
mov ebx, dword [ebp - 0x14]
mov edi, ebx
mov esi, SysReAllocString
call fcn.00415170
cmp eax, 1
jne 0x42171d
push ebx
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov edi, str.SOFTWARECANON_
call fcn.00415170
cmp eax, 1
jne 0x42171d
push edi
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push 0
push str.return___08x
lea ecx, [ebp - 0x40]
push 2
push ecx
call fcn.0040aed0
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
add esp, 0x10
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x421755
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x421778
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add ebx, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [ebx + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x421798
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4217bb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4217de
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x421801
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ae50
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
jmp 0x42164b