Function at 0x1000219c
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 4], edi
call fcn.100012a7
mov eax, dword [ebp + 8]
dec eax
je 0x1000229e
dec eax
je 0x10002234
mov esi, 0xf003f
add edi, 4
push esi
push str.SOFTWAREMicrosoftInternet_ExplorerAdvancedOptions
push 0x80000002
mov ecx, edi
call fcn.10002402
test eax, eax
jne 0x100021e9
push str.CDNCLIENT
mov ecx, edi
call fcn.10002440
push esi
mov ebx, 0x80000001
push str.SoftwareCNNICCdnClient
push ebx
mov ecx, edi
call fcn.10002402
test eax, eax
jne 0x1000220c
push str.CONSOLE
mov ecx, edi
call fcn.10002440
push esi
push str.SoftwareMicrosoftInternet_ExplorerMenuExt
push ebx
mov ecx, edi
call fcn.10002402
test eax, eax
jne 0x100023e4
mov eax, dword [ebp - 4]
mov ecx, edi
push dword [eax + 0x2c]
call fcn.10002440
jmp 0x100023e4
mov esi, 0xf003f
add edi, 4
push esi
push str.SOFTWAREMicrosoftInternet_ExplorerAdvancedOptionsCDNCLIENT
push 0x80000002
mov ecx, edi
call fcn.10002402
test eax, eax
jne 0x1000225e
push str.MAIL
mov ecx, edi
call fcn.10002440
push esi
push str.SoftwareCNNICCdnClientConsole
push 0x80000001
mov ecx, edi
call fcn.10002402
test eax, eax
jne 0x100023e4
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableMail
push dword [edi]
call esi
push str.EnableMailAcc
push dword [edi]
call esi
push str.EnableMailW
push dword [edi]
call esi
jmp 0x100023e4
lea eax, [ebp + 8]
mov esi, 0xf003f
xor ebx, ebx
push eax
push esi
push ebx
push str.SOFTWAREMicrosoftInternet_ExplorerAdvancedOptionsCDNCLIENT
push 0x80000002
add edi, 4
mov dword [ebp + 8], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x100022e1
mov ecx, edi
call fcn.100023eb
mov ecx, dword [ebp + 8]
cmp eax, ebx
mov dword [edi], ecx
jne 0x100022e1
push str.IDNKW
mov ecx, edi
call fcn.10002440
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push esi
push ebx
mov ebx, 0x80000001
push str.SoftwareCNNICCdnClientConsole
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x10002376
mov ecx, edi
call fcn.100023eb
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [edi], ecx
jne 0x10002376
push str.EnableIdn
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableIntRes
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableIdnCmdEx
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableKw
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableAutoMatch
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableKwDisp
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableRestore
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.EnableAddrHint
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push 0x104
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.1000a550
add esp, 0xc
lea eax, [ebp - 0x108]
push str.SoftwareMicrosoftInternet_ExplorerMenuExt
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x108]
push 0x1000c074
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 4]
push dword [eax + 0x2c]
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x108]
push esi
push eax
push ebx
mov ecx, edi
call fcn.10002402
test eax, eax
jne 0x100023e4
push str.Contexts
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
pop edi
pop esi
pop ebx
leave
ret 4