Function at 0x1000e888
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10050bc0
mov eax, dword fs:[0]
push eax
mov eax, 0x1a5c
call fcn.10045780
mov eax, dword [0x10069060]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x19fc], eax
lea eax, [ebp - 0x1a1c]
mov esi, ecx
push eax
mov dword [ebp - 0x19ec], esi
call fcn.1000f0b5
and dword [ebp - 4], 0
mov eax, dword [esi + 0x18]
mov eax, dword [eax]
mov ecx, dword [esi]
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19dc], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x19e4], eax
mov eax, dword [esi]
lea edi, [ebp - 0x19e8]
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x19e8], eax
call fcn.1000f27c
test al, al
jne 0x1000e9d8
call fcn.1000b132
add eax, 0x9c
push eax
lea esi, [ebp - 0x48]
call fcn.10001ec7
mov byte [ebp - 4], 1
cmp dword [ebp - 0x30], 8
mov ecx, dword [ebp - 0x44]
jae 0x1000e944
lea ecx, [ebp - 0x44]
mov eax, dword [ebp - 0x34]
add eax, eax
push eax
lea eax, [ebp - 0x1a60]
push eax
call fcn.10032192
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.1000de4f
add esp, 0xc
push 0
push 1
lea ecx, [ebp - 0x1a60]
mov byte [ebp - 4], 4
call fcn.100020f3
lea eax, [ebp - 0x2c]
push eax
lea ebx, [ebp - 0x1a1c]
call fcn.1000f0eb
push 0x198c
lea esi, [ebp - 0x19e0]
mov edi, eax
call fcn.1000b132
add eax, 0x1c
push eax
push edi
call fcn.10039220
add esp, 0xc
xor ebx, ebx
push ebx
push 1
lea esi, [ebp - 0x2c]
call fcn.100021ef
push ebx
push 1
lea esi, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.100021ef
lea esi, [ebp - 0x19e0]
call fcn.1000f4d9
mov esi, dword [ebp - 0x19ec]
jmp 0x1000e8f7
lea eax, [ebp - 0x1a64]
mov esi, str.Softwareprojonepodlp_softwareChangedcache
mov edi, reloc.WS2_32.dll_bind
push eax
mov ecx, esi
mov edx, edi
call fcn.1000bf8f
cmp dword [eax + 0x1c], 0
pop ecx
lea eax, [ebp - 0x1a64]
push eax
sete bl
call fcn.1000d31e
test bl, bl
je 0x1000ea33
push str.update_config__delete_old_and_write_new
call fcn.1003048c
mov dword [esp], str.Softwareprojonepodlp_softwareChanged_
push edi
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea eax, [ebp - 0x1a1c]
push eax
call fcn.1000df00
jmp 0x1000eca8
lea eax, [ebp - 0x1a3c]
push eax
mov ecx, esi
mov edx, edi
call fcn.1000bf8f
pop ecx
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1a20], 0
sete al
test al, al
jne 0x1000ec6d
push dword [ebp - 0x1a20]
push str.not_first_check__vNameSet_size:_d
call fcn.1003048c
mov eax, dword [ebp - 0x1a04]
mov eax, dword [eax]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1a1c]
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x1a1c]
lea edi, [ebp - 0x19e8]
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x19e8], eax
call fcn.1000f27c
test al, al
jne 0x1000eb60
call fcn.1000b132
mov ecx, dword [ebp - 0x1a24]
push eax
mov dword [ebp - 0x19ec], ecx
mov ecx, dword [ebp - 0x1a3c]
lea eax, [ebp - 0x1a44]
push eax
lea ebx, [ebp - 0x1a3c]
mov dword [ebp - 0x19f0], ecx
call fcn.1000f029
mov edi, eax
lea esi, [ebp - 0x19f0]
call fcn.1000f27c
test al, al
je 0x1000eb50
lea esi, [ebp - 0x19e0]
call fcn.1000b132
add eax, 0x1c
push eax
lea esi, [ebp - 0x2c]
call fcn.10001ec7
mov eax, esi
mov byte [ebp - 4], 6
mov ebx, dword [ebp - 0x19f4]
push eax
call fcn.1000f0eb
push 0x198c
lea esi, [ebp - 0x19e0]
mov edi, eax
call fcn.1000b132
add eax, 0x1c
push eax
push edi
call fcn.10039220
add esp, 0xc
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.100021ef
lea esi, [ebp - 0x19e0]
call fcn.1000f4d9
jmp 0x1000ea86
mov eax, dword [ebp - 0x1a24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1a3c]
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x1a24]
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x1a3c]
lea edi, [ebp - 0x19e8]
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x19e8], eax
call fcn.1000f27c
test al, al
jne 0x1000ec7a
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp - 0x1a1c]
mov dword [ebp - 0x19f8], eax
call fcn.1000b132
push eax
lea eax, [ebp - 0x1a44]
push eax
lea ebx, [ebp - 0x1a1c]
call fcn.1000f20a
mov edi, eax
lea esi, [ebp - 0x19f8]
call fcn.1000f27c
test al, al
je 0x1000ec5d
mov edi, 0x198c
push edi
lea eax, [ebp - 0x19d8]
push 0
push eax
call fcn.10038cf0
add esp, 0xc
lea esi, [ebp - 0x19e0]
call fcn.1000b132
push eax
lea ecx, [ebp - 0x19d8]
call fcn.1000e0bf
test eax, eax
je 0x1000ec5d
lea eax, [ebp - 0x19d8]
push eax
lea esi, [ebp - 0x2c]
call fcn.10001ec7
mov ebx, dword [ebp - 0x19fc]
push edi
lea eax, [ebp - 0x19d8]
push eax
mov eax, esi
push eax
mov byte [ebp - 4], 7
call fcn.1000f0eb
push eax
call fcn.10039220
add esp, 0xc
push 0
push 1
mov byte [ebp - 4], 5
call fcn.100021ef
lea esi, [ebp - 0x19e0]
call fcn.1000b697
jmp 0x1000eb7a
push str.first_check
call fcn.1003048c
pop ecx
jmp 0x1000ec84
mov esi, str.Softwareprojonepodlp_softwareChangedcache
mov edi, reloc.WS2_32.dll_bind
push esi
push edi
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea eax, [ebp - 0x1a1c]
push eax
call fcn.1000df00
lea eax, [ebp - 0x1a3c]
push eax
mov byte [ebp - 4], 0
call fcn.1000d31e
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1a1c]
push eax
call fcn.1000f1e2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100366e3
leave
ret 8