Function at 0x414440
Capabilities:
Delete registry key

Disassembly:
push 0xffffffffffffffff
push 0x459260
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x46e3d8]
xor eax, esp
mov dword [esp + 0x44], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x46e3d8]
xor eax, esp
push eax
lea eax, [esp + 0x5c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x6c]
mov edi, ecx
mov edx, 0x45c9c0
mov dword [esp + 0x1c], edi
mov byte [esp + 0x1b], 0
call fcn.00401ee0
test eax, eax
setne al
mov byte [ebp + 0x3c], al
mov eax, edi
lea edx, [eax + 2]
jmp 0x4144a0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4144a0
sub eax, edx
sar eax, 1
push eax
push edi
lea esi, [ebp + 0x18]
call fcn.00404170
cmp byte [ebp + 0x3c], 0
jne 0x4144d1
cmp byte [ebp + 0x3e], 0
je 0x4144d1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov ecx, ebp
call fcn.00421ed0
mov ecx, ebp
call fcn.004141d0
push str.Sorting_action_list_for_installation
push 0x46fa40
xor eax, eax
call fcn.00431730
mov ecx, dword [esp + 0x24]
add esp, 8
push ecx
push ebp
call fcn.00424c40
mov edx, str.dump
call fcn.00401ee0
test eax, eax
je 0x41453e
mov ecx, str.dump
call fcn.00401f80
push eax
push str.Dumping_action_list_to__s
push 0x46fa40
xor eax, eax
call fcn.00431730
add esp, 0xc
mov ecx, str.dump
call fcn.00401f80
mov edx, eax
mov ecx, ebp
call fcn.00421700
mov eax, dword [ebp + 4]
mov eax, dword [eax]
mov ebx, eax
test ebp, ebp
mov esi, dword [ebp + 4]
je 0x414550
cmp ebp, ebp
je 0x414555
call fcn.0043e955
cmp ebx, esi
je 0x4147e5
test ebp, ebp
jne 0x414566
call fcn.0043e955
cmp ebx, dword [ebp + 4]
jne 0x414570
call fcn.0043e955
lea edx, [esp + 0x3c]
push edx
lea esi, [ebx + 8]
push esi
mov ecx, 0x45e578
call fcn.00412d30
mov dword [esp + 0x64], 0
cmp dword [esp + 0x50], 0
je 0x4145c6
lea eax, [esp + 0x3c]
call fcn.0043bb70
cmp dword [esp + 0x54], 8
mov eax, dword [esp + 0x40]
jae 0x4145aa
lea eax, [esp + 0x40]
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.00413150
test al, al
jne 0x4145c6
cmp ebx, dword [ebp + 4]
jne 0x4145c2
call fcn.0043e955
mov byte [ebx + 0x1c], 1
cmp ebx, dword [ebp + 4]
jne 0x4145d0
call fcn.0043e955
cmp byte [ebx + 0x1c], 0
jne 0x414776
mov dword [ebp + 0x38], 0
cmp ebx, dword [ebp + 4]
jne 0x4145eb
call fcn.0043e955
lea ecx, [esp + 0x20]
push ecx
push esi
mov ecx, 0x45e618
call fcn.00412d30
mov ecx, eax
mov byte [esp + 0x64], 1
mov eax, dword [ecx + 0x14]
push str.ignore
mov edi, 6
call fcn.004052d0
test eax, eax
sete dl
mov byte [esp + 0x64], 0
cmp dword [esp + 0x38], 8
mov byte [ebp + 0x3d], dl
jb 0x414635
mov eax, dword [esp + 0x24]
push eax
call fcn.0043e965
add esp, 4
xor eax, eax
cmp ebx, dword [ebp + 4]
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], eax
mov word [esp + 0x24], ax
jne 0x414652
call fcn.0043e955
mov eax, dword [esi]
add eax, 0xffffffff
cmp eax, 0xb
ja case.default.0x414660
jmp dword [eax*4 + 0x414814]
cmp ebx, dword [ebp + 4]
jne 0x414671
call fcn.0043e955
push esi
mov ecx, ebp
call fcn.004152c0
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x414688
call fcn.0043e955
push esi
push ebp
call fcn.00415d70
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x41469e
call fcn.0043e955
push esi
mov ecx, ebp
call fcn.00416870
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x4146b5
call fcn.0043e955
push ebp
mov ecx, esi
call fcn.00417200
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x4146cc
call fcn.0043e955
push esi
mov ecx, ebp
call fcn.00418230
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x4146e3
call fcn.0043e955
push ebp
mov ecx, esi
call fcn.00418e60
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x4146f7
call fcn.0043e955
push esi
mov ecx, ebp
call fcn.00419de0
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x41470b
call fcn.0043e955
push esi
mov ecx, ebp
call fcn.0041a360
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x41471f
call fcn.0043e955
push esi
mov ecx, ebp
call fcn.0041b0a0
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x414733
call fcn.0043e955
mov edi, ebp
call fcn.0041c720
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x414746
call fcn.0043e955
push esi
push ebp
call fcn.0041bb80
jmp 0x414761
cmp ebx, dword [ebp + 4]
jne 0x414759
call fcn.0043e955
push esi
mov ecx, ebp
call fcn.0041bff0
mov byte [esp + 0x1b], al
cmp byte [esp + 0x1b], 0
jne 0x414772
cmp byte [ebp + 0x3d], 0
je 0x4147b6
mov byte [ebp + 0x3d], 0
cmp ebx, dword [ebp + 4]
jne 0x414780
call fcn.0043e955
mov ebx, dword [ebx]
mov dword [esp + 0x64], 0xffffffff
cmp dword [esp + 0x54], 8
jb 0x41479e
mov ecx, dword [esp + 0x40]
push ecx
call fcn.0043e965
add esp, 4
xor eax, eax
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], eax
mov word [esp + 0x40], ax
jmp 0x414545
mov dword [esp + 0x64], 0xffffffff
cmp dword [esp + 0x54], 8
jb 0x4147d2
mov edx, dword [esp + 0x40]
push edx
call fcn.0043e965
add esp, 4
xor eax, eax
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], eax
mov word [esp + 0x40], ax
mov eax, dword [esp + 0x1c]
push eax
mov ecx, ebp
call fcn.00414850
mov ecx, dword [esp + 0x5c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x44]
xor ecx, esp
call fcn.0043d02a
add esp, 0x54
ret 4