Function at 0x42afc0
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
call fcn.004607e6
test al, al
je 0x42afe0
adc eax, 0x1a00e7a9
jns 0x42afd5
lodsb al, byte [esi]
push esi
sub edx, 0xffffff98
invalid
lea eax, [ebp - 4]
push eax
push 0xf013f
push 0
push str.SoftWare
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x42b05b
call fcn.004604ef
test al, al
je 0x42b01e
cmp eax, 0xc69505c0
push ss
pop edi
ret 0xab47
call fcn.004605be
test al, al
je 0x42b044
xor bh, byte [ebp - 0x51]
pushfd
pop ss
nop
enter 0xffffffffffffbb23, 0xffffffffffffffc7
jg 0x42b0b2
jae 0x42b08b
dec esi
mov dword [0xf59181c3], eax
push ebx
inc edi
dec esp
sal byte [esi + 0x66], 0x89
xchg ebp, eax
push str.SWHost
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add byte [ebx], dh
lds ecx, [ecx + 0x5653f045]
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00486960
xor eax, eax
mov dword [ebp - 0x27c], 7
add esp, 0xc
mov dword [ebp - 0x280], 0
mov word [ebp - 0x290], ax
push eax
push 0x625f30
lea ecx, [ebp - 0x278]
mov dword [ebp - 4], eax
mov dword [ebp - 0x264], 7
mov dword [ebp - 0x268], eax
mov word [ebp - 0x278], ax
call fcn.00402510
xor eax, eax
mov byte [ebp - 4], 1
push eax
push 0x625f30
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], 7
mov dword [ebp - 0x250], 0
mov word [ebp - 0x260], ax
call fcn.00402510
xor eax, eax
mov byte [ebp - 4], 2
push eax
push 0x625f30
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 7
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
call fcn.00402510
xor eax, eax
mov byte [ebp - 4], 3
push eax
push 0x625f30
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x234], 7
mov dword [ebp - 0x238], 0
mov word [ebp - 0x248], ax
call fcn.00402510
mov byte [ebp - 4], 4
call fcn.00460420
test al, al
je 0x42b1b1
add byte [ebx], dh
rol bh, 0x85
test ch, bh
invalid
xor al, 0xf5
xchg ebx, eax
movsb byte es:[edi], byte [esi]
insd dword es:[edi], dx
mov ah, 0x97
leave
imul dword [ebx + 0x140e728e]
dec ecx
call fcn.004603db
call fcn.004603db
test al, al
je 0x42b1d1
stosb byte es:[edi], al
inc edx
mov dh, 0x71
inc ebp
dec esi
or ch, byte [ebp + 0xd]
mov edx, 0x90e1c67d
int3
lea eax, [ebp - 0x218]
mov ecx, esi
push eax
push str.f9a4f
call int.0042c320
cmp word [ebp - 0x218], 0
jne 0x42b1f2
xor ecx, ecx
jmp 0x42b20f
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b200
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x290]
call fcn.00402510
call fcn.00460648
test al, al
je 0x42b249
invalid
and al, 0x97
lodsd eax, dword [esi]
jbe 0x42b23a
shr ebx, cl
cmp al, 0xa
int 0xa1
invalid
add bh, byte [edi]
pop ebp
mov ch, 0xf7
cmpsb byte [esi], byte es:[edi]
aam 0x21
cmp dword [esi + 0x3d], esi
xchg byte [esi + 0x28], dh
xor ebp, eax
mov ch, 0x53
add eax, dword [eax]
call fcn.00460603
test al, al
je 0x42b262
dec esp
pop esi
jbe 0x42b21b
inc al
cmp dword [edi], 0xc5c93bfb
sub esi, dword [ebp + 0x6be840a5]
push esp
add eax, dword [eax]
call fcn.004606d2
test al, al
je 0x42b288
daa
invalid
cmp dword [ebp - 0x280], 0
jne 0x42b2a0
push 0x74
call fcn.00465785
add esp, 4
jmp 0x42b5f0
call fcn.00460579
test al, al
je 0x42b2c2
pop edx
pushfd
mov esp, 0x3b5d6f9
xchg ebx, eax
sbb eax, 0x87e0bbf8
inc esp
sub eax, 0x8d75c30f
scasb al, byte es:[edi]
popfd
sub byte [ebx - 0x44], al
call fcn.0046082b
test al, al
je 0x42b2e5
add byte [ecx + 0x6bca03d2], bh
mov byte [0x3911bf9f], cl
mov eax, 0x685181c2
xor byte [edi - 0x80], dh
pop esp
fsub dword [ecx + 0x3e]
ret 0x20a1
mov eax, dword [0x63fa20]
test eax, eax
jne 0x42b31d
push 0x158
call fcn.00455626
add esp, 4
mov dword [ebp - 0x294], eax
mov byte [ebp - 4], 5
test eax, eax
je 0x42b312
mov ecx, eax
call fcn.00450f00
jmp 0x42b314
xor eax, eax
mov byte [ebp - 4], 4
mov dword [0x63fa20], eax
mov ecx, eax
call fcn.004617b1
mov edx, eax
cmp word [edx], 0
jne 0x42b330
xor ecx, ecx
jmp 0x42b344
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b335
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x230]
call fcn.00402510
push 0xd
push str.SWWordMgr.exe
lea ecx, [ebp - 0x230]
call fcn.00404190
mov eax, dword [0x63fa20]
test eax, eax
jne 0x42b39b
push 0x158
call fcn.00455626
add esp, 4
mov dword [ebp - 0x294], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x42b390
mov ecx, eax
call fcn.00450f00
jmp 0x42b392
xor eax, eax
mov byte [ebp - 4], 4
mov dword [0x63fa20], eax
mov ecx, eax
call fcn.004617b1
mov edx, eax
cmp word [edx], 0
jne 0x42b3ae
xor ecx, ecx
jmp 0x42b3c2
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b3b3
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x248]
call fcn.00402510
push 0xd
push str.SWWordMgr.dll
lea ecx, [ebp - 0x248]
call fcn.00404190
call fcn.004604ef
test al, al
je 0x42b3ff
mov eax, 0xe8fffffd
inc ecx
jno 0x42b3cb
jmp [edx + 0xd]
sbb ecx, dword [edx + 0x6cfa6e82]
lahf
and eax, 0xe4b5924a
sub al, 0x96
jge 0x42b3c6
and dword [edi - 0x173e6000], eax
popal
call fcn.00460465
push eax
add eax, dword [eax]
test al, al
je 0x42b426
and al, 0xae
wait
mov dl, 0xb2
mov dh, 0xe6
jbe 0x42b445
xchg ebp, eax
in eax, 0xfd
cmpsb byte [esi], byte es:[edi]
pop ss
xor al, 0xf3
push edx
pop esp
or al, 0x4d
pop eax
inc ebx
invalid
call fcn.00460717
test al, al
je 0x42b44f
mov bl, byte [edx + ebp - 0x67ef57d9]
mov eax, dword [0x1a6bae9d]
mov ecx, 0x614e1cd8
out dx, eax
sub al, 0xd7
jbe 0x42b487
jbe 0x42b487
push esi
ja 0x42b401
and ebp, ebx
adc dword [ecx], ecx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x278]
call fcn.00402760
push 0xd
push str.SWWordMgr.exe
lea ecx, [ebp - 0x278]
call fcn.00404190
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x260]
call fcn.00402760
push 0xd
push str.SWWordMgr.dll
lea ecx, [ebp - 0x260]
call fcn.00404190
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x42b4e2
invalid
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
push 0x75
call fcn.00465785
add esp, 8
jmp 0x42b5f0
call fcn.004607a1
test al, al
je 0x42b508
stosb byte es:[edi], al
xor dword [ebp + 0x21], ebx
push edx
inc ebx
out 0x6c, al
push ecx
mov eax, dword [0xba1339ab]
xchg esp, eax
xor byte [esi + 0x3a], cl
cmp ebp, dword [edx - 0x59]
mov ecx, 0xb2c41c5e
dec ebp
jnp 0x42b534
call fcn.00460579
test al, al
je 0x42b52d
add ebx, ecx
popal
adc eax, dword [edx + 0x6470e9f3]
mov ebp, 0xfa7e6e1f
ficomp word [edi + 0x2b]
les ebx, [0x6acf5111]
mov bl, 0xc5
and byte [eax - 0x63427c9d], ah
std
invalid
cmp dword [ebp - 0x264], 8
lea ecx, [ebp - 0x278]
lea eax, [ebp - 0x230]
cmovae ecx, dword [ebp - 0x278]
cmp dword [ebp - 0x21c], 8
push ecx
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.0046396c
cmp dword [ebp - 0x24c], 8
lea ecx, [ebp - 0x260]
lea eax, [ebp - 0x248]
cmovae ecx, dword [ebp - 0x260]
cmp dword [ebp - 0x234], 8
push ecx
cmovae eax, dword [ebp - 0x248]
push eax
call fcn.0046396c
cmp dword [ebp - 0x264], 8
lea ecx, [ebp - 0x278]
lea eax, [ebp - 0x230]
cmovae ecx, dword [ebp - 0x278]
cmp dword [ebp - 0x21c], 8
push ecx
cmovae eax, dword [ebp - 0x230]
push eax
push 0x76
call fcn.00465785
cmp dword [ebp - 0x24c], 8
lea ecx, [ebp - 0x260]
lea eax, [ebp - 0x248]
cmovae ecx, dword [ebp - 0x260]
cmp dword [ebp - 0x234], 8
push ecx
cmovae eax, dword [ebp - 0x248]
push eax
push 0x76
call fcn.00465785
add esp, 0x28
mov eax, dword [ebp - 0x234]
cmp eax, 8
jb 0x42b60e
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.00402610
xor eax, eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x238], 0
cmp eax, 8
jb 0x42b649
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402610
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x220], 0
cmp eax, 8
jb 0x42b684
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00402610
xor eax, eax
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x250], 0
cmp eax, 8
jb 0x42b6bf
inc eax
lea ecx, [ebp - 0x278]
push eax
push dword [ebp - 0x278]
call fcn.00402610
xor eax, eax
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x268], 0
cmp eax, 8
jb 0x42b6fa
inc eax
lea ecx, [ebp - 0x290]
push eax
push dword [ebp - 0x290]
call fcn.00402610
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00455afe
mov esp, ebp
pop ebp
ret