Function at 0x465890
Capabilities:
Access peb ldr_data
Delete file
Delete registry value
Get process heap flags
Move file
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x1c]
sub esp, 0x5c
mov dword [ebp - 0x3c], eax
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], str.PendingFileRenameOperations
mov dword [esp], eax
call sub.advapi32.dll_RegQueryValueExA
sub esp, 0x18
mov esi, eax
mov dword [esp + 4], 0x1493
mov dword [esp], str..._wine_dlls_msi_tests_install.c
call fcn.0052ae70
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.RegQueryValueExA_failed__d_n
mov dword [esp], eax
mov edi, dword fs:[0x18]
call fcn.0052b0e0
mov ecx, dword [ebp - 0x1c]
mov dword [esp + 4], 0
mov esi, dword [sym.imp.kernel32.dll_HeapAlloc]
lea eax, [ecx + 1]
mov dword [esp + 8], eax
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call esi
mov ecx, dword [ebp - 0x1c]
sub esp, 0xc
mov dword [ebp - 0x34], eax
lea eax, [ecx + 1]
mov dword [esp + 4], 8
mov dword [esp + 8], eax
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call esi
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub esp, 0xc
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], str.PendingFileRenameOperations
mov dword [esp], eax
call sub.advapi32.dll_RegQueryValueExA
mov ebx, eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x1c]
sub esp, 0x18
mov byte [esi + eax], 0
mov dword [esp + 4], 0x149a
mov dword [esp], str..._wine_dlls_msi_tests_install.c
call fcn.0052ae70
xor eax, eax
test ebx, ebx
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], str.RegQueryValueExA_failed__d_n
mov dword [esp], eax
call fcn.0052b0e0
test ebx, ebx
jne 0x465be5
movzx ecx, byte [esi]
mov eax, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x40], eax
mov edx, ecx
test cl, cl
jne 0x465a61
jmp 0x465b55
test al, al
je 0x465ae0
cmp al, 0x5c
je 0x465bf0
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_MoveFileExA]
sub esp, 0xc
mov esi, eax
mov dword [esp + 4], 0x14b9
mov dword [esp], str..._wine_dlls_msi_tests_install.c
call fcn.0052ae70
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 0x10], eax
mov dword [esp + 4], str.Failed_to_move_file__s_____s___u__n
mov dword [esp], esi
call fcn.0052b0e0
mov dword [esp], ebx
call dword [sym.imp.msvcrt.dll_strlen]
mov dword [ebp - 0x30], 1
lea edx, [eax + 1]
lea edi, [ebx + edx]
movzx edx, byte [edi]
test dl, dl
je 0x465b55
mov byte [ebp - 0x2c], dl
mov dword [esp], edi
call dword [sym.imp.msvcrt.dll_strlen]
mov dword [esp + 4], 0x550026
lea esi, [eax + 1]
mov dword [esp], edi
call dword [sym.imp.msvcrt.dll_strstr]
lea ebx, [edi + esi]
movzx edx, byte [ebp - 0x2c]
test eax, eax
je 0x465c40
movzx eax, byte [ebx]
mov esi, 2
cmp al, 0x21
jne 0x465aa8
movzx eax, byte [ebx + 1]
mov esi, 3
add ebx, 1
cmp dl, 0x5c
jne 0x4659e1
cmp byte [edi + 1], 0x3f
jne 0x4659e1
cmp byte [edi + 2], 0x3f
jne 0x4659e1
cmp byte [edi + 3], 0x5c
jne 0x4659e1
add edi, 4
jmp 0x4659e1
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x2c], eax
mov dword [esp + 4], 0x14be
mov dword [esp], str..._wine_dlls_msi_tests_install.c
call fcn.0052ae70
mov edx, dword [ebp - 0x2c]
mov ecx, 1
mov eax, dword fs:[0x18]
mov esi, dword [eax + 0x34]
test edx, edx
je 0x465c20
mov dword [esp + 8], edi
mov dword [esp], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 4], str.Failed_to_delete_file__s___u__n
call fcn.0052b0e0
mov dword [esp], ebx
call dword [sym.imp.msvcrt.dll_strlen]
mov dword [ebp - 0x30], 1
lea edx, [eax + 1]
lea edi, [ebx + edx]
movzx edx, byte [edi]
test dl, dl
jne 0x465a61
mov dword [esp + 4], 0x14c2
mov dword [esp], str..._wine_dlls_msi_tests_install.c
call fcn.0052ae70
mov eax, dword [ebp - 0x30]
mov dword [esp + 4], str.Expected_a_msitest_entry_n
mov dword [esp], eax
call fcn.0052b0e0
mov eax, dword [ebp - 0x38]
cmp byte [eax], 0
jne 0x465c80
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.PendingFileRenameOperations
mov dword [esp], eax
call sub.advapi32.dll_RegDeleteValueA
sub esp, 8
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], 0
mov esi, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x30]
mov ebx, dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x38]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp byte [ebx + 1], 0x3f
jne 0x4659f1
cmp byte [ebx + 2], 0x3f
jne 0x4659f1
cmp byte [ebx + 3], 0x5c
jne 0x4659f1
add ebx, 4
jmp 0x4659f1
mov dword [esp], 1
call fcn.0052af50
xor ecx, ecx
test eax, eax
setne cl
jmp 0x465b1c
mov dword [esp + 4], edi
mov edi, dword [ebp - 0x40]
mov dword [esp + 8], esi
mov dword [esp], edi
add esi, edi
call sub.msvcrt.dll_memcpy
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.msvcrt.dll_strcpy]
mov dword [esp], ebx
call dword [sym.imp.msvcrt.dll_strlen]
lea edx, [eax + 1]
lea eax, [esi + edx]
mov dword [ebp - 0x40], eax
jmp 0x465a53
mov esi, dword [ebp - 0x40]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 7
add esi, 1
mov dword [esp + 8], 0
sub esi, eax
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.PendingFileRenameOperations
mov dword [esp + 0x14], esi
mov dword [esp], eax
call sub.advapi32.dll_RegSetValueExA
sub esp, 0x18
jmp 0x465b9e