Function at 0x472c90
Capabilities:
Delete registry key

Disassembly:
push 0xffffffffffffffff
push 0x56a948
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push ebp
mov ebp, dword [esp + 0x5c]
push esi
push edi
mov edi, ecx
push str.CUTERG01
mov ecx, ebp
call fcn.0052849d
mov esi, eax
mov eax, dword [0x5d2d10]
mov dword [esp + 0x14], eax
mov ecx, dword [edi + 0x1c]
mov dword [esp + 0x5c], 0
push ecx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.0052da16
cmp esi, 0xffffffff
mov ebx, eax
je 0x472d2e
lea edx, [esp + 0x64]
push esi
push edx
mov ecx, ebp
call fcn.005282a3
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x60], 1
call fcn.00530cc8
lea ecx, [esp + 0x64]
mov byte [esp + 0x5c], 0
call fcn.00530b8f
lea eax, [esp + 0x64]
push str.UTRG0123456789ABCDEF
push eax
lea ecx, [esp + 0x1c]
call fcn.00528450
lea ecx, [esp + 0x64]
call fcn.00530b8f
mov eax, dword [0x5d2d10]
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], eax
lea ecx, [esp + 0x64]
push 8
push ecx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x64], 3
mov dword [esp + 0x30], 8
call fcn.005283d8
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x60], 4
call fcn.00530cc8
lea ecx, [esp + 0x64]
mov byte [esp + 0x5c], 3
call fcn.00530b8f
mov edx, dword [esp + 0x18]
xor ebp, ebp
push str.CUTERG01
push edx
mov dword [esp + 0x38], ebp
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x4731f2
push 0xa
lea ecx, [esp + 0x3c]
call fcn.0052cf21
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
mov byte [esp + 0x68], 5
call fcn.0046c890
add esp, 0xc
test eax, eax
je 0x472e10
lea eax, [esp + 0x18]
lea ecx, [esp + 0x28]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.0046c890
add esp, 0xc
test eax, eax
je 0x472e10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x40]
call fcn.0052d0ff
mov ecx, eax
call fcn.00530d18
lea edx, [esp + 0x24]
lea eax, [esp + 0x28]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.0046c890
add esp, 0xc
test eax, eax
jne 0x472dc0
mov edx, dword [0x5d2d10]
mov dword [esp + 0x10], edx
lea eax, [esp + 0x10]
lea ecx, [esp + 0x38]
push eax
push str.command
mov byte [esp + 0x64], 6
call fcn.0052d0d9
test eax, eax
je 0x4731d2
mov ecx, dword [esp + 0x10]
push 0x5c9a94
push ecx
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x473041
mov edx, dword [0x5d2d10]
mov dword [esp + 0x2c], edx
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x38]
push eax
push str.key3
mov byte [esp + 0x64], 7
call fcn.0052d0d9
test eax, eax
je 0x47302e
lea esi, [edi + 0xb4]
mov ebp, 1
mov ecx, esi
call fcn.00528a0b
mov ecx, esi
call fcn.00528914
mov eax, dword [0x5d2d10]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x5c], 9
push ecx
push str.daysusage
lea ecx, [esp + 0x40]
call fcn.0052d0d9
test eax, eax
je 0x472f3b
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x38]
push edx
push str.daysperiod
call fcn.0052d0d9
test eax, eax
je 0x472f3b
mov eax, dword [esp + 0x20]
push 0x5c6d14
push eax
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x472f03
mov ecx, dword [esp + 0x1c]
push 0x5c6d14
push ecx
call fcn.00514e99
add esp, 8
test eax, eax
je 0x472f3b
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.00530904
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
mov byte [esp + 0x68], 0xa
call fcn.00530904
mov ecx, 0x66c0e0
mov byte [esp + 0x64], 9
call fcn.0046e190
jmp 0x472f69
push 0
lea ecx, [esp + 0x30]
call fcn.00530fbf
push eax
mov ecx, 0x66c0e0
call fcn.0046e480
test eax, eax
je 0x472f6d
mov edi, dword [edi + 0xa4]
mov esi, dword [esi]
push edi
push esi
mov ecx, 0x66c0e0
call fcn.0046e520
test eax, eax
jne 0x472f82
push 0xf05a
lea ecx, [ebx + 0x304]
call fcn.00532f94
jmp 0x473012
push 0
mov ecx, 0x66c0e0
call fcn.0046ef30
test eax, eax
jne 0x472fb2
mov ecx, 0x66c0e0
call fcn.0046e170
test eax, eax
jne 0x472fb2
push 0xf04e
lea ecx, [ebx + 0x304]
call fcn.00532f94
jmp 0x473012
mov ecx, dword [0x5d2d10]
mov dword [esp + 0x64], ecx
lea edx, [esp + 0x64]
lea ecx, [esp + 0x38]
push edx
push str.type
mov byte [esp + 0x64], 0xb
call fcn.0052d0d9
mov eax, dword [esp + 0x64]
push str.NEWREGISTR
push eax
call fcn.00514e99
add esp, 8
test eax, eax
je 0x472ffc
mov ecx, dword [esp + 0x64]
push str.REREGISTR
push ecx
call fcn.00514e99
add esp, 8
lea ecx, [esp + 0x64]
mov dword [esp + 0x30], 1
mov byte [esp + 0x5c], 9
call fcn.00530b8f
lea ecx, [esp + 0x1c]
mov byte [esp + 0x5c], 8
call fcn.00530b8f
lea ecx, [esp + 0x20]
mov byte [esp + 0x5c], 7
call fcn.00530b8f
lea ecx, [esp + 0x2c]
mov byte [esp + 0x5c], 6
call fcn.00530b8f
jmp 0x4731d2
mov edx, dword [esp + 0x10]
push str.fail
push edx
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x47316d
mov eax, dword [0x5d2d10]
mov ebp, 1
mov dword [esp + 0x64], eax
lea ecx, [esp + 0x64]
mov byte [esp + 0x5c], 0xc
push ecx
push str.type
lea ecx, [esp + 0x40]
call fcn.0052d0d9
mov edx, dword [esp + 0x64]
push str.SN_NOT_EXIST
push edx
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x4730a1
mov eax, 0xf04f
jmp 0x473136
mov eax, dword [esp + 0x64]
push str.NEWREG_LIMIT
push eax
call fcn.00514e99
add esp, 8
test eax, eax
je 0x47312b
mov ecx, dword [esp + 0x64]
push str.NEW_REGISTRATION_LIMIT
push ecx
call fcn.00514e99
add esp, 8
test eax, eax
je 0x47312b
mov edx, dword [esp + 0x64]
push str.REREG_LIMIT
push edx
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x4730ea
mov eax, 0xf051
jmp 0x473130
mov eax, dword [esp + 0x64]
push str.INVALIDKEY
push eax
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x473107
mov eax, 0xf057
jmp 0x473136
mov ecx, dword [esp + 0x64]
push str.INVALID_PRODUCT_ID
push ecx
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x473124
mov eax, 0xf064
jmp 0x473130
mov eax, 0xf056
jmp 0x473136
mov eax, 0xf050
mov dword [ebx + 0x310], ebp
push eax
lea ecx, [ebx + 0x304]
call fcn.00532f94
mov eax, dword [0x66c0e8]
test eax, eax
je 0x47315d
mov edx, dword [0x66c108]
push edx
push reloc.oledlg.dll_OleUIInsertObjectA
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea ecx, [esp + 0x64]
mov byte [esp + 0x5c], 6
call fcn.00530b8f
jmp 0x4731d2
mov eax, dword [esp + 0x10]
push str.moreinfo
push eax
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x47318a
push 0xf061
jmp 0x4731c2
mov ecx, dword [esp + 0x10]
push str.invaliddata
push ecx
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x4731a7
push 0xf052
jmp 0x4731c2
mov edx, dword [esp + 0x10]
push str.dberror
push edx
call fcn.00514e99
add esp, 8
test eax, eax
jne 0x4731d2
push 0xf060
lea ecx, [ebx + 0x304]
mov ebp, 1
call fcn.00532f94
lea ecx, [esp + 0x10]
mov byte [esp + 0x5c], 5
call fcn.00530b8f
lea ecx, [esp + 0x38]
mov byte [esp + 0x5c], 3
call fcn.0052cfbe
test ebp, ebp
jne 0x473202
push 0xf053
lea ecx, [ebx + 0x304]
call fcn.00532f94
lea ecx, [esp + 0x24]
mov byte [esp + 0x5c], 2
call fcn.00530b8f
lea ecx, [esp + 0x18]
mov byte [esp + 0x5c], 0
call fcn.00530b8f
lea ecx, [esp + 0x14]
mov dword [esp + 0x5c], 0xffffffff
call fcn.00530b8f
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x50
ret 4