Function at 0x10001b20
Capabilities:
Delete registry key

Disassembly:
mov eax, 0x1200
call fcn.100030d0
push ebx
push ebp
push esi
push edi
mov ecx, 0xf
mov esi, str.CLSID536CEFDC_8B0F_4373_92B3_17B97B1C99E7InprocServer32
lea edi, [esp + 0x10]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x11
lea edi, [esp + 0x4c]
rep stosd dword es:[edi], eax
mov ecx, 0xd
mov esi, str.CLSID536CEFDC_8B0F_4373_92B3_17B97B1C99E7ProgID
lea edi, [esp + 0x90]
mov ebp, 1
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x13
lea edi, [esp + 0xc4]
rep stosd dword es:[edi], eax
mov ecx, 0xe
mov esi, str.CLSID536CEFDC_8B0F_4373_92B3_17B97B1C99E7Programmable
lea edi, [esp + 0x110]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x11
lea edi, [esp + 0x14a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xd
mov esi, str.CLSID536CEFDC_8B0F_4373_92B3_17B97B1C99E7TypeLib
lea edi, [esp + 0x190]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x12
lea edi, [esp + 0x1c5]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x11
mov esi, str.CLSID536CEFDC_8B0F_4373_92B3_17B97B1C99E7VersionIndependentProgID
lea edi, [esp + 0x210]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0xe
lea edi, [esp + 0x256]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xb
mov esi, str.CLSID536CEFDC_8B0F_4373_92B3_17B97B1C99E7
lea edi, [esp + 0x290]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x14
lea edi, [esp + 0x2bd]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xf
mov esi, str.CLSID8BF5A87D_D626_4B3A_84F9_1D9571695F58InprocServer32
lea edi, [esp + 0x310]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x11
lea edi, [esp + 0x34c]
rep stosd dword es:[edi], eax
mov ecx, 0xd
mov esi, str.CLSID8BF5A87D_D626_4B3A_84F9_1D9571695F58ProgID
lea edi, [esp + 0x390]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x13
lea edi, [esp + 0x3c4]
rep stosd dword es:[edi], eax
mov ecx, 0xe
mov esi, str.CLSID8BF5A87D_D626_4B3A_84F9_1D9571695F58Programmable
lea edi, [esp + 0x410]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x11
lea edi, [esp + 0x44a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xd
mov esi, str.CLSID8BF5A87D_D626_4B3A_84F9_1D9571695F58TypeLib
lea edi, [esp + 0x490]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x12
lea edi, [esp + 0x4c5]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x11
mov esi, str.CLSID8BF5A87D_D626_4B3A_84F9_1D9571695F58VersionIndependentProgID
lea edi, [esp + 0x510]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0xe
lea edi, [esp + 0x556]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xb
mov esi, str.CLSID8BF5A87D_D626_4B3A_84F9_1D9571695F58
lea edi, [esp + 0x590]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x14
lea edi, [esp + 0x5bd]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x10
mov esi, str.Interface29197564_0920_4F34_B7FF_5FC126F41522ProxyStubClsid
lea edi, [esp + 0x610]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x10
lea edi, [esp + 0x650]
rep stosd dword es:[edi], eax
mov ecx, 0x10
mov esi, str.Interface29197564_0920_4F34_B7FF_5FC126F41522ProxyStubClsid32
lea edi, [esp + 0x690]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0xf
lea edi, [esp + 0x6d2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xe
mov esi, str.Interface29197564_0920_4F34_B7FF_5FC126F41522TypeLib
lea edi, [esp + 0x710]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x11
lea edi, [esp + 0x749]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xc
mov esi, str.Interface29197564_0920_4F34_B7FF_5FC126F41522
lea edi, [esp + 0x790]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x13
lea edi, [esp + 0x7c1]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x10
mov esi, str.Interface04DD48B9_F638_4112_8990_2F6767018A01ProxyStubClsid
lea edi, [esp + 0x810]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x850]
mov esi, str.Interface04DD48B9_F638_4112_8990_2F6767018A01ProxyStubClsid32
rep stosd dword es:[edi], eax
mov ecx, 0x10
lea edi, [esp + 0x890]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0xf
lea edi, [esp + 0x8d2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xe
mov esi, str.Interface04DD48B9_F638_4112_8990_2F6767018A01TypeLib
lea edi, [esp + 0x910]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x11
lea edi, [esp + 0x949]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xc
mov esi, str.Interface04DD48B9_F638_4112_8990_2F6767018A01
lea edi, [esp + 0x990]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x13
lea edi, [esp + 0x9c1]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 8
mov esi, str.ThunderWorkAPI.ThunderCallCLSID
lea edi, [esp + 0xa10]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x17
lea edi, [esp + 0xa31]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 8
mov esi, str.ThunderWorkAPI.ThunderCallCurVer
lea edi, [esp + 0xa90]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x17
lea edi, [esp + 0xab2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 6
mov esi, str.ThunderWorkAPI.ThunderCall
lea edi, [esp + 0xb10]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x19
lea edi, [esp + 0xb2b]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 8
mov esi, str.ThunderWorkAPI.ThunderCall.1CLSID
lea edi, [esp + 0xb90]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x17
lea edi, [esp + 0xbb3]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 7
mov esi, str.ThunderWorkAPI.ThunderCall.1
lea edi, [esp + 0xc10]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x18
xor eax, eax
lea edi, [esp + 0xc2d]
mov esi, str.ThunderWorkAPI.CatchClickCLSID
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 8
lea edi, [esp + 0xc90]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x18
xor eax, eax
lea edi, [esp + 0xcb0]
mov esi, str.ThunderWorkAPI.CatchClickCurVer
rep stosd dword es:[edi], eax
mov ecx, 8
lea edi, [esp + 0xd10]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x17
lea edi, [esp + 0xd31]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 6
mov esi, str.ThunderWorkAPI.CatchClick
lea edi, [esp + 0xd90]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x19
lea edi, [esp + 0xdaa]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 8
mov esi, str.ThunderWorkAPI.CatchClick.1CLSID
lea edi, [esp + 0xe10]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x17
lea edi, [esp + 0xe32]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 7
mov esi, str.ThunderWorkAPI.CatchClick.1
lea edi, [esp + 0xe90]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x19
lea edi, [esp + 0xeac]
rep stosd dword es:[edi], eax
mov ecx, 0xe
mov esi, str.TypeLibDB452F2A_0F93_4118_AF75_60F9D5B9FE691.0HELPDIR
lea edi, [esp + 0xf10]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x11
lea edi, [esp + 0xf4b]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0xe
mov esi, str.TypeLibDB452F2A_0F93_4118_AF75_60F9D5B9FE691.0FLAGS
lea edi, [esp + 0xf90]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x11
lea edi, [esp + 0xfc9]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xe
mov esi, str.TypeLibDB452F2A_0F93_4118_AF75_60F9D5B9FE691.00win32
lea edi, [esp + 0x1010]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x11
xor eax, eax
lea edi, [esp + 0x104b]
mov esi, str.TypeLibDB452F2A_0F93_4118_AF75_60F9D5B9FE691.00
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0xd
lea edi, [esp + 0x1090]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x12
xor eax, eax
lea edi, [esp + 0x10c5]
mov esi, str.TypeLibDB452F2A_0F93_4118_AF75_60F9D5B9FE691.0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xc
lea edi, [esp + 0x1110]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x13
xor eax, eax
lea edi, [esp + 0x1143]
mov esi, str.TypeLibDB452F2A_0F93_4118_AF75_60F9D5B9FE69
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0xb
lea edi, [esp + 0x1190]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x14
xor eax, eax
lea edi, [esp + 0x11bf]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
lea esi, [esp + 0x10]
mov edi, 0x24
push esi
push 0x80000000
call ebx
test eax, eax
je 0x1000209b
cmp eax, 2
je 0x1000209b
xor ebp, ebp
add esi, 0x80
dec edi
jne 0x10002088
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallThunder
push 0x80000002
call ebx
test eax, eax
je 0x100020bb
cmp eax, 2
je 0x100020bb
xor ebp, ebp
push str.SoftwareMicrosoftInternet_ExplorerMenuExt
push 0x80000001
call ebx
test eax, eax
je 0x100020d2
cmp eax, 2
je 0x100020d2
xor ebp, ebp
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser_Helper_Objects8BF5A87D_D626_4B3A_84F9_1D9571695F58
push 0x80000002
call ebx
test eax, eax
je 0x100020f4
cmp eax, 2
je 0x100020f4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1200
ret
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
add esp, 0x1200
ret