Function at 0x1000e6e4
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10050317
mov eax, dword fs:[0]
push eax
mov eax, 0x1a5c
call fcn.10044f70
mov eax, dword [0x10068060]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x19fc], eax
lea eax, [ebp - 0x1a1c]
mov esi, ecx
push eax
mov dword [ebp - 0x19ec], esi
call fcn.1000ef11
and dword [ebp - 4], 0
mov eax, dword [esi + 0x18]
mov eax, dword [eax]
mov ecx, dword [esi]
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19dc], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x19e4], eax
mov eax, dword [esi]
lea edi, [ebp - 0x19e8]
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x19e8], eax
call fcn.1000af45
test al, al
jne 0x1000e834
call fcn.1001dcad
add eax, 0x9c
push eax
lea esi, [ebp - 0x48]
call fcn.10001eb9
mov byte [ebp - 4], 1
cmp dword [ebp - 0x30], 8
mov ecx, dword [ebp - 0x44]
jae 0x1000e7a0
lea ecx, [ebp - 0x44]
mov eax, dword [ebp - 0x34]
add eax, eax
push eax
lea eax, [ebp - 0x1a60]
push eax
call fcn.100318f0
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.1000dcab
add esp, 0xc
push 0
push 1
lea ecx, [ebp - 0x1a60]
mov byte [ebp - 4], 4
call fcn.100020e6
lea eax, [ebp - 0x2c]
push eax
lea ebx, [ebp - 0x1a1c]
call fcn.1000ef47
push 0x198c
lea esi, [ebp - 0x19e0]
mov edi, eax
call fcn.1001dcad
add eax, 0x1c
push eax
push edi
call fcn.10038a20
add esp, 0xc
xor ebx, ebx
push ebx
push 1
lea esi, [ebp - 0x2c]
call fcn.100021e2
push ebx
push 1
lea esi, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.100021e2
lea esi, [ebp - 0x19e0]
call fcn.1000f310
mov esi, dword [ebp - 0x19ec]
jmp 0x1000e753
lea eax, [ebp - 0x1a64]
mov esi, str.Softwareprojonepodlp_softwareChangedcache
mov edi, reloc.WS2_32.dll_bind
push eax
mov ecx, esi
mov edx, edi
call fcn.1000bca9
cmp dword [eax + 0x1c], 0
pop ecx
lea eax, [ebp - 0x1a64]
push eax
sete bl
call fcn.1000d036
test bl, bl
je 0x1000e88f
push str.update_config__delete_old_and_write_new
call fcn.1002fd9f
mov dword [esp], str.Softwareprojonepodlp_softwareChanged_
push edi
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea eax, [ebp - 0x1a1c]
push eax
call fcn.1000dd5c
jmp 0x1000eb04
lea eax, [ebp - 0x1a3c]
push eax
mov ecx, esi
mov edx, edi
call fcn.1000bca9
pop ecx
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1a20], 0
sete al
test al, al
jne 0x1000eac9
push dword [ebp - 0x1a20]
push str.not_first_check__vNameSet_size:_d
call fcn.1002fd9f
mov eax, dword [ebp - 0x1a04]
mov eax, dword [eax]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1a1c]
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x1a1c]
lea edi, [ebp - 0x19e8]
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x19e8], eax
call fcn.1000af45
test al, al
jne 0x1000e9bc
call fcn.1001dcad
mov ecx, dword [ebp - 0x1a24]
push eax
mov dword [ebp - 0x19ec], ecx
mov ecx, dword [ebp - 0x1a3c]
lea eax, [ebp - 0x1a44]
push eax
lea ebx, [ebp - 0x1a3c]
mov dword [ebp - 0x19f0], ecx
call fcn.1000ee85
mov edi, eax
lea esi, [ebp - 0x19f0]
call fcn.1000af45
test al, al
je 0x1000e9ac
lea esi, [ebp - 0x19e0]
call fcn.1001dcad
add eax, 0x1c
push eax
lea esi, [ebp - 0x2c]
call fcn.10001eb9
mov eax, esi
mov byte [ebp - 4], 6
mov ebx, dword [ebp - 0x19f4]
push eax
call fcn.1000ef47
push 0x198c
lea esi, [ebp - 0x19e0]
mov edi, eax
call fcn.1001dcad
add eax, 0x1c
push eax
push edi
call fcn.10038a20
add esp, 0xc
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.100021e2
lea esi, [ebp - 0x19e0]
call fcn.1000f310
jmp 0x1000e8e2
mov eax, dword [ebp - 0x1a24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1a3c]
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x1a24]
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x1a3c]
lea edi, [ebp - 0x19e8]
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x19e8], eax
call fcn.1000af45
test al, al
jne 0x1000ead6
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp - 0x1a1c]
mov dword [ebp - 0x19f8], eax
call fcn.1001dcad
push eax
lea eax, [ebp - 0x1a44]
push eax
lea ebx, [ebp - 0x1a1c]
call fcn.1000f066
mov edi, eax
lea esi, [ebp - 0x19f8]
call fcn.1000af45
test al, al
je 0x1000eab9
mov edi, 0x198c
push edi
lea eax, [ebp - 0x19d8]
push 0
push eax
call fcn.100384f0
add esp, 0xc
lea esi, [ebp - 0x19e0]
call fcn.1001dcad
push eax
lea ecx, [ebp - 0x19d8]
call fcn.1000df1b
test eax, eax
je 0x1000eab9
lea eax, [ebp - 0x19d8]
push eax
lea esi, [ebp - 0x2c]
call fcn.10001eb9
mov ebx, dword [ebp - 0x19fc]
push edi
lea eax, [ebp - 0x19d8]
push eax
mov eax, esi
push eax
mov byte [ebp - 4], 7
call fcn.1000ef47
push eax
call fcn.10038a20
add esp, 0xc
push 0
push 1
mov byte [ebp - 4], 5
call fcn.100021e2
lea esi, [ebp - 0x19e0]
call fcn.1000d09b
jmp 0x1000e9d6
push str.first_check
call fcn.1002fd9f
pop ecx
jmp 0x1000eae0
mov esi, str.Softwareprojonepodlp_softwareChangedcache
mov edi, reloc.WS2_32.dll_bind
push esi
push edi
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea eax, [ebp - 0x1a1c]
push eax
call fcn.1000dd5c
lea eax, [ebp - 0x1a3c]
push eax
mov byte [ebp - 4], 0
call fcn.1000d036
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1a1c]
push eax
call fcn.1000f03e
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10035ee9
leave
ret 8