Function at 0x420f80
Capabilities:
Delete registry key

Disassembly:
push 0xffffffffffffffff
push 0x58a235
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x5e173c]
xor eax, esp
mov dword [esp + 0xa0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5e173c]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov eax, ecx
mov dword [esp + 0x18], eax
mov ebp, dword [esp + 0xc8]
lea edx, [eax + 0x4c]
lea ecx, [esp + 0x6c]
lea esi, [ebp + 0x1c]
push esi
call fcn.0042ae90
add esp, 4
mov dword [esp + 0xc0], 0
mov edx, esi
push 0x5a9aa8
lea ecx, [esp + 0xa0]
call fcn.0040cc70
add esp, 4
mov byte [esp + 0xc0], 1
lea eax, [esp + 0x9c]
push eax
lea edx, [esp + 0x70]
lea ecx, [esp + 0x88]
call fcn.004b2290
add esp, 4
mov byte [esp + 0xc0], 2
cmp byte [esp + 0xcc], 0
je 0x421128
lea ecx, [esp + 0x54]
call fcn.004c7e10
mov byte [esp + 0xc0], 3
cmp dword [esp + 0x64], 0
jbe 0x4210ef
push 0x5aad30
lea ecx, [esp + 0x20]
call fcn.00403a70
mov byte [esp + 0xc0], 4
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x58]
lea ecx, [esp + 0x3c]
call fcn.004b2290
add esp, 4
mov byte [esp + 0xc0], 5
mov ecx, eax
call fcn.004c7f60
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x4c], 8
jb 0x4210a6
push dword [esp + 0x38]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
mov byte [esp + 0xc0], 3
cmp dword [esp + 0x30], 8
jb 0x4210d8
push dword [esp + 0x1c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], 0
mov word [esp + 0x1c], ax
mov byte [esp + 0xc0], 2
cmp dword [esp + 0x68], 8
jb 0x42110a
push dword [esp + 0x54]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], 0
mov bl, 1
mov word [esp + 0x54], ax
jmp 0x42139a
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [esp + 0x4c], esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [esp + 0xbc]
push eax
call fcn.00404960
mov byte [esp + 0xd8], 6
mov byte [esp + 0xd8], 2
call fcn.00416b70
add esp, 0x18
test al, al
jne 0x421182
push 0x64
call edi
inc esi
cmp esi, 5
jl 0x421130
lea eax, [esp + 0x50]
mov dword [esp + 0x50], 0
push eax
push 0x20006
push 0
push str.SoftwareAlimamaShortcuts
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4211c3
push str.DesktopShortcuts1006
push dword [esp + 0x54]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push dword [esp + 0x50]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x1f4
call edi
lea ecx, [esp + 0x6c]
call fcn.004b3280
lea ecx, [esp + 0x6c]
call fcn.004b2df0
lea ecx, [esp + 0x6c]
call fcn.004b3760
lea ecx, [esp + 0x84]
call fcn.004b24f0
test al, al
je 0x42125e
mov eax, dword [0x7e2550]
test al, 1
jne 0x42123c
or eax, 1
mov dword [0x7e2550], eax
mov byte [esp + 0xc0], 7
push 0x118
push 0
push 0x7e2438
call fcn.0056cbb0
add esp, 0xc
call fcn.004c3d40
push 0x5a00a0
call fcn.00565027
add esp, 4
mov byte [esp + 0xc0], 2
push str.RC::RCPackagesInstall::InstallAitaobao
push str._s_error:_DeleteFileAlways_Failed.
push 1
push 3
push 0x7e2438
call fcn.004c4520
add esp, 0x14
xor bl, bl
jmp 0x42139a
lea eax, [ebp + 0x68]
xor bl, bl
cmp dword [eax + 0x14], 8
jb 0x42126b
mov eax, dword [eax]
lea ecx, [esp + 0x84]
push ecx
push eax
call fcn.00567674
add esp, 4
add eax, 0x7d0
push eax
call fcn.00422230
test al, al
je 0x421324
push 0xe
xor eax, eax
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea ecx, [esp + 0x58]
push str.__pid12351394
mov dword [esp + 0x70], 7
mov dword [esp + 0x6c], 0
mov word [esp + 0x5c], ax
call fcn.00404a80
mov byte [esp + 0xc0], 8
lea eax, [esp + 0x54]
mov ecx, dword [esp + 0x18]
push 1
push eax
push 0
push dword [ebp + 0x9c]
lea eax, [esp + 0x94]
push eax
call fcn.0041b2c0
mov bl, al
mov byte [esp + 0xc0], 2
cmp dword [esp + 0x68], 8
jb 0x42130b
push dword [esp + 0x54]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], 0
mov word [esp + 0x54], ax
jmp 0x42139a
mov eax, dword [0x7e2550]
test al, 1
jne 0x42136b
or eax, 1
mov dword [0x7e2550], eax
mov byte [esp + 0xc0], 9
push 0x118
push 0
push 0x7e2438
call fcn.0056cbb0
add esp, 0xc
call fcn.004c3d40
push 0x5a00a0
call fcn.00565027
add esp, 4
mov byte [esp + 0xc0], 2
push str.RC::RCPackagesInstall::InstallAitaobao
push str._s_error:_ExtractBinResource_Failed.
push 1
push 3
push 0x7e2438
call fcn.004c4520
add esp, 0x14
push 0
push 0x5a9bfc
push 0x5aae10
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [esp + 0xc0], 1
cmp dword [esp + 0x98], 8
jb 0x4213bb
push dword [esp + 0x84]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], 0
mov word [esp + 0x84], ax
mov byte [esp + 0xc0], al
cmp dword [esp + 0xb0], 8
jb 0x4213fb
push dword [esp + 0x9c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xb0], 7
mov dword [esp + 0xac], 0
mov word [esp + 0x9c], ax
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x80], 8
jb 0x42143c
push dword [esp + 0x6c]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x80], 7
mov word [esp + 0x6c], ax
mov al, bl
mov dword [esp + 0x7c], 0
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.00564de8
add esp, 0xb0
ret 8