Function at 0x408490
Capabilities:
Delete registry value

Disassembly:
sub esp, 0x214
xor eax, eax
push ebx
push ebp
push esi
mov ebx, ecx
push edi
mov ecx, 0x41
lea edi, [esp + 0x1c]
push str.SoftwareSSPrint_
rep stosd dword es:[edi], eax
lea eax, [esp + 0x20]
push 0x4158e8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea edi, [esp + 0x28]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x120]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x1c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebx + 0x86f4]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ebp, dword [esp + 0x228]
mov esi, str.RcpCntCode
mov eax, ebp
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x40852d
test cl, cl
je 0x408529
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x40852d
add eax, 2
add esi, 2
test cl, cl
jne 0x408509
xor eax, eax
jmp 0x408532
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40856f
mov eax, dword [esp + 0x230]
lea edx, [esp + 0x10]
cmp eax, 0x80000001
mov edi, str.HKCU
je 0x408552
mov edi, str.HKLM
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, str.SmCntCode
mov eax, ebp
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x40859a
test cl, cl
je 0x408596
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x40859a
add eax, 2
add esi, 2
test cl, cl
jne 0x408576
xor eax, eax
jmp 0x40859f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4085c7
mov edi, str.HKLM
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x10]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, str.RcpCntCode
mov eax, ebp
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4085f2
test cl, cl
je 0x4085ee
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4085f2
add eax, 2
add esi, 2
test cl, cl
jne 0x4085ce
xor eax, eax
jmp 0x4085f7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x408633
mov esi, str.SmCntCode
mov eax, ebp
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x408626
test cl, cl
je 0x408622
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x408626
add eax, 2
add esi, 2
test cl, cl
jne 0x408602
xor eax, eax
jmp 0x40862b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4086c6
mov edi, dword [esp + 0x230]
lea eax, [esp + 0x18]
push eax
push 0xf003f
lea ecx, [esp + 0x24]
push 0
push ecx
push edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, eax
test esi, esi
jne 0x408681
mov edx, dword [esp + 0x18]
push ebp
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
test eax, eax
push ebp
je 0x408675
lea eax, [esp + 0x20]
push eax
push str.Cant_Delete_REG_KEY__s_s_
jmp 0x408692
lea ecx, [esp + 0x20]
push ecx
push str.REG_KEY__s_s__is_removed
jmp 0x408692
lea edx, [ebx + 0x8460]
lea eax, [esp + 0x10]
push edx
push eax
push str.Cant_open_registry_key_for_multilang__s:_s_
push 0
push ebx
call fcn.00404400
mov ecx, dword [esp + 0x2c]
add esp, 0x14
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [esp + 0x1c]
push 0
push edx
push edi
mov ecx, ebx
call fcn.00408290
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x214
ret 0xc
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x214
ret 0xc