Function at 0x432b90
Capabilities:
Delete file
Delete registry key
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53e9eb
mov eax, dword fs:[0]
push eax
sub esp, 0x638
mov eax, dword [0x596334]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x208
lea eax, [ebp - 0x420]
mov dword [ebp - 0x644], 1
push 0
push eax
mov dword [ebp - 0x640], 0x104
call fcn.004b0810
add esp, 0xc
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x644]
push eax
push str.InstallDate
push str.SOFTWAREPCStoreX
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
push str.SOFTWAREPCStoreX
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432c30
mov edi, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
sub ecx, edx
sar ecx, 1
lea eax, [ecx + ecx]
push eax
lea eax, [ebp - 0x420]
push eax
push 1
push str.InstallDate
push str.SOFTWAREPCStoreX
push reloc.OLEAUT32.dll_SysReAllocString
call edi
lea eax, [ebp - 0x638]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x638], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call fcn.00420520
mov ecx, eax
test ecx, ecx
je 0x432df1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x63c], eax
movzx eax, word [ebp - 0x62c]
push eax
movzx eax, word [ebp - 0x62e]
push eax
movzx eax, word [ebp - 0x630]
push eax
movzx eax, word [ebp - 0x632]
push eax
movzx eax, word [ebp - 0x636]
push eax
movzx eax, word [ebp - 0x638]
push eax
lea eax, [ebp - 0x63c]
mov dword [ebp - 4], 0
push str._04d__02d__02d__02d:_02d:_02d
push eax
call fcn.0040bd20
mov esi, dword [ebp - 0x63c]
add esp, 0x20
mov eax, dword [esi - 0xc]
add eax, eax
push eax
push esi
push 1
push str.LastUninstallDate
push str.SOFTWAREPCStoreX
push reloc.OLEAUT32.dll_SysReAllocString
call edi
push 0x208
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.004b0810
add esp, 0xc
lea eax, [ebp - 0x628]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004b0810
lea eax, [ebp - 0x218]
add esp, 0xc
lea edi, [ebp - 0x628]
mov ecx, eax
mov edx, 0x104
sub edi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x432d7e
movzx ecx, word [edi + eax]
test cx, cx
je 0x432d7e
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x432d60
lea ecx, [eax - 2]
test edx, edx
cmovne ecx, eax
xor eax, eax
mov word [ecx], ax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0x556678
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x432dd6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00455d1a
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00404c40
int3