Function at 0x465570
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f2d4f
mov eax, dword fs:[0]
push eax
sub esp, 0x164
mov eax, dword [0x54b1b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
test byte [0x54f018], 1
mov eax, dword [ebp + 8]
mov dword [ebp - 0x170], eax
mov edi, ecx
jne 0x4655cb
or dword [0x54f018], 1
call fcn.00443940
push 0x4f5ff0
call fcn.004bc45e
add esp, 4
cmp byte [0x54eff7], 0
je 0x4656a5
test byte [0x54f318], 1
jne 0x4655fa
or dword [0x54f318], 1
call fcn.0045c110
push 0x4f6020
call fcn.004bc45e
add esp, 4
mov edx, 0x54c674
lea ecx, [ebp - 0x48]
call fcn.00403940
lea ecx, [ebp - 0x16c]
push ecx
push 0xf003f
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
push reloc.OLEAUT32.dll_SysReAllocString
mov esi, eax
mov dword [ebp - 0x16c], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x46564a
mov eax, dword [ebp - 0x16c]
test eax, eax
je 0x465646
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
jmp 0x465678
cmp dword [esi + 0x14], 8
jb 0x465652
mov esi, dword [esi]
mov edx, dword [ebp - 0x16c]
push esi
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
test eax, eax
mov eax, dword [ebp - 0x16c]
sete bl
test eax, eax
je 0x465676
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, bl
test al, al
sete bl
cmp dword [ebp - 0x34], 8
jb 0x46568f
mov eax, dword [ebp - 0x48]
push eax
call fcn.004ba3a4
add esp, 4
test bl, bl
je 0x4656a1
push 3
push 0x51a6d0
mov ecx, edi
call fcn.00408440
mov byte [ebp + 0xc], 1
test byte [0x54f12c], 1
jne 0x4656d5
or dword [0x54f12c], 1
mov dword [ebp - 4], 0
call fcn.00440710
push 0x4f6010
call fcn.004bc45e
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov ebx, dword [ebp - 0x170]
add ebx, 0x24
push 1
mov ecx, edi
push ebx
mov edi, 0x54f304
mov dword [ebp - 0x16c], ebx
call fcn.004425c0
add esp, 8
lea eax, [ebp - 0x168]
call fcn.0044fae0
mov edx, 0x54c674
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 1
call fcn.00403940
mov edi, eax
lea esi, [ebp - 0x168]
mov byte [ebp - 4], 2
call fcn.00407640
mov byte [ebp - 4], 1
cmp dword [ebp - 0x34], 8
jb 0x46573c
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004ba3a4
add esp, 4
lea esi, [ebp - 0x2c]
call fcn.00403d70
mov ecx, eax
mov eax, ebx
lea ebx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.00452410
mov edi, eax
lea esi, [ebp - 0x14c]
mov byte [ebp - 4], 4
call fcn.00407640
mov esi, 8
cmp dword [ebp - 0x34], esi
jb 0x46577b
mov edx, dword [ebp - 0x48]
push edx
call fcn.004ba3a4
add esp, 4
mov ebx, 1
xor eax, eax
mov byte [ebp - 4], bl
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], ax
cmp dword [ebp - 0x18], esi
jb 0x4657a8
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004ba3a4
add esp, 4
lea esi, [ebp - 0x2c]
call fcn.00403e00
mov edi, eax
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 5
call fcn.00407640
mov edi, 8
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], edi
jb 0x4657da
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004ba3a4
add esp, 4
cmp byte [ebp + 0xc], 0
je 0x46584d
test byte [0x54f59c], bl
jne 0x465813
or dword [0x54f59c], ebx
push 0x54f520
mov byte [ebp - 4], 6
call fcn.00433a60
push 0x4f5f80
mov byte [0x54f598], 0
call fcn.004bc45e
add esp, 4
mov byte [ebp - 4], bl
push 0x517350
push 0x54f520
mov edx, str.Setup
lea ecx, [ebp - 0x2c]
call fcn.0042b380
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 7
call fcn.00407350
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], edi
jb 0x4658c0
mov eax, dword [ebp - 0x2c]
push eax
jmp 0x4658b8
test byte [0x54f59c], bl
jne 0x465880
or dword [0x54f59c], ebx
push 0x54f520
mov byte [ebp - 4], 8
call fcn.00433a60
push 0x4f5f80
mov byte [0x54f598], 0
call fcn.004bc45e
add esp, 4
mov byte [ebp - 4], bl
push 0x517d50
push 0x54f520
mov edx, str.Setup
lea ecx, [ebp - 0x2c]
call fcn.0042b380
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 9
call fcn.00407350
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], edi
jb 0x4658c0
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004ba3a4
add esp, 4
mov edx, dword [ebp - 0x170]
push 0xffffffffffffffff
push 0
add edx, 8
push edx
lea ecx, [ebp - 0x114]
call fcn.00407f10
lea esi, [ebp - 0x2c]
call fcn.00403ae0
mov edi, eax
lea esi, [ebp - 0xf8]
mov byte [ebp - 4], 0xa
call fcn.00407640
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], 8
jb 0x465907
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004ba3a4
add esp, 4
lea esi, [ebp - 0x2c]
call fcn.00403ce0
mov byte [ebp - 4], 0xb
mov ecx, eax
mov eax, dword [ebp - 0x16c]
lea ebx, [ebp - 0x48]
call fcn.00452410
mov edi, eax
lea esi, [ebp - 0xdc]
mov byte [ebp - 4], 0xc
call fcn.00407640
mov esi, 8
cmp dword [ebp - 0x34], esi
jb 0x46594a
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004ba3a4
add esp, 4
mov ebx, 1
xor edx, edx
mov byte [ebp - 4], bl
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], dx
cmp dword [ebp - 0x18], esi
jb 0x465977
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004ba3a4
add esp, 4
lea esi, [ebp - 0x2c]
call fcn.00403b00
mov edi, eax
lea esi, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00407640
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], 8
jb 0x4659a5
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004ba3a4
add esp, 4
mov edx, dword [ebp - 0x170]
push 0xffffffffffffffff
push 0
add edx, 0x40
push edx
lea ecx, [ebp - 0x88]
call fcn.00407f10
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x54c690
call fcn.00467250
add esp, 4
mov edi, eax
lea esi, [ebp - 0x6c]
mov byte [ebp - 4], 0xe
call fcn.00407640
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], 8
jb 0x4659f2
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004ba3a4
add esp, 4
mov esi, dword [ebp + 0xc]
push esi
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x50], ebx
call fcn.00408690
add esp, 4
mov edx, 0x54c674
lea ecx, [ebp - 0x2c]
call fcn.00403940
mov edi, eax
mov byte [ebp - 4], 0xf
test byte [0x54f12c], bl
jne 0x465a42
or dword [0x54f12c], ebx
mov byte [ebp - 4], 0x10
call fcn.00440710
push 0x4f6010
call fcn.004bc45e
add esp, 4
mov byte [ebp - 4], 0xf
push esi
push 0
mov edx, 0x54f304
mov ecx, edi
call fcn.00409dd0
add esp, 8
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], 8
jb 0x465a69
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004ba3a4
add esp, 4
mov edx, 0x54c674
lea ecx, [ebp - 0x2c]
call fcn.00403940
mov edi, eax
mov byte [ebp - 4], 0x11
test byte [0x54f12c], bl
jne 0x465aa4
or dword [0x54f12c], ebx
mov byte [ebp - 4], 0x12
call fcn.00440710
push 0x4f6010
call fcn.004bc45e
add esp, 4
mov byte [ebp - 4], 0x11
push esi
push ebx
mov edx, 0x54f2b4
mov ecx, edi
call fcn.00409dd0
add esp, 8
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], 8
jb 0x465aca
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004ba3a4
add esp, 4
mov edx, 0x54c674
lea ecx, [ebp - 0x2c]
call fcn.00403940
mov edi, eax
mov byte [ebp - 4], 0x13
test byte [0x54f12c], bl
jne 0x465b05
or dword [0x54f12c], ebx
mov byte [ebp - 4], 0x14
call fcn.00440710
push 0x4f6010
call fcn.004bc45e
add esp, 4
mov byte [ebp - 4], 0x13
push esi
push 2
mov edx, 0x54f2d4
mov ecx, edi
call fcn.00409dd0
add esp, 8
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], 8
jb 0x465b2c
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004ba3a4
add esp, 4
mov edx, dword [ebp - 0x170]
push edx
call fcn.00465c90
lea esi, [ebp - 0x168]
call fcn.0044fb90
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ba3af
mov esp, ebp
pop ebp
ret 8