Function at 0x40b820
Capabilities:
Create process on windows
Delete registry key
Delete registry value
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff6c8
push ebx
push esi
push edi
mov dword [ebp - 0x44c], eax
mov eax, 0x54a830
call fcn.004e95f0
xor edx, edx
mov dword [ebp - 0x450], edx
xor ecx, ecx
mov dword [ebp - 0x454], ecx
xor eax, eax
mov dword [ebp - 0x454], eax
mov edx, dword [ebp - 0x454]
cmp dword [edx*4 + 0x547f70], 0
jne 0x40b866
jmp 0x40b874
inc dword [ebp - 0x450]
inc dword [ebp - 0x454]
jmp 0x40b854
xor ecx, ecx
mov dword [ebp - 0x454], ecx
mov eax, dword [ebp - 0x454]
cmp dword [eax*4 + 0x547fa4], 0
jne 0x40b88e
jmp 0x40b89c
inc dword [ebp - 0x450]
inc dword [ebp - 0x454]
jmp 0x40b87c
push dword [ebp - 0x450]
mov edx, dword [ebp - 0x44c]
push dword [edx + 0xc]
mov ecx, dword [ebp - 0x44c]
call dword [ecx]
add esp, 8
mov eax, dword [ebp - 0x44c]
call fcn.0040b7ec
xor edx, edx
mov dword [ebp - 0x450], edx
mov word [ebp - 0x438], 0xc
xor ecx, ecx
mov dword [ebp - 4], ecx
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x18
mov edx, 0x55ca0c
lea eax, [ebp - 4]
call fcn.004f86cc
mov word [ebp - 0x438], 0x24
xor ecx, ecx
mov dword [ebp - 8], ecx
lea ecx, [ebp - 8]
inc dword [ebp - 0x42c]
mov edx, 0x55ca10
mov eax, 0x5491f0
call fcn.004f8ab4
lea eax, [ebp - 8]
push eax
mov edx, str.___kill
lea eax, [ebp - 0xc]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0xc]
xor ecx, ecx
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x10]
inc dword [ebp - 0x42c]
pop eax
call fcn.004f86f4
lea edx, [ebp - 0x10]
lea eax, [ebp - 4]
call fcn.004f86e0
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004f86a4
push 0x44
push 0
lea ecx, [ebp - 0x4c4]
push ecx
call fcn.004e90c7
add esp, 0xc
push 0x10
push 0
lea eax, [ebp - 0x4d4]
push eax
call fcn.004e90c7
add esp, 0xc
mov dword [ebp - 0x4c4], 0x44
mov dword [ebp - 0x498], 1
mov word [ebp - 0x494], 1
lea edx, [ebp - 0x4d4]
push edx
lea ecx, [ebp - 0x4c4]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
cmp dword [ebp - 4], 0
je 0x40b9f3
mov eax, dword [ebp - 4]
jmp 0x40b9f8
mov eax, 0x5491fa
push eax
push 0
call sub.KERNEL32.DLL_CreateProcessW
lea edx, [ebp - 0x458]
push edx
push dword [ebp - 0x4d4]
call sub.KERNEL32.DLL_GetExitCodeProcess
mov ecx, dword [0x55c7bc]
mov eax, dword [ecx]
call fcn.004ae45c
push 0xc8
call sub.KERNEL32.DLL_Sleep
cmp dword [ebp - 0x458], 0x103
je 0x40ba00
push dword [ebp - 0x4d4]
call sub.KERNEL32.DLL_CloseHandle
push dword [ebp - 4]
mov word [ebp - 0x438], 0x30
mov edx, str.Svc_Kill
lea eax, [ebp - 0x14]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x54920c
lea eax, [ebp - 0x18]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x5491fc
lea eax, [ebp - 0x1c]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004f86a4
push 0x3e8
call sub.KERNEL32.DLL_Sleep
mov edx, 0x55ca0c
lea eax, [ebp - 4]
call fcn.004f86cc
mov word [ebp - 0x438], 0x3c
xor ecx, ecx
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x20]
inc dword [ebp - 0x42c]
mov edx, 0x55ca10
mov eax, 0x549221
call fcn.004f8ab4
lea eax, [ebp - 0x20]
push eax
mov edx, str.___uninstall
lea eax, [ebp - 0x24]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x28]
inc dword [ebp - 0x42c]
pop eax
call fcn.004f86f4
lea edx, [ebp - 0x28]
lea eax, [ebp - 4]
call fcn.004f86e0
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004f86a4
push 0x44
push 0
lea ecx, [ebp - 0x518]
push ecx
call fcn.004e90c7
add esp, 0xc
push 0x10
push 0
lea eax, [ebp - 0x528]
push eax
call fcn.004e90c7
add esp, 0xc
mov dword [ebp - 0x518], 0x44
mov dword [ebp - 0x4ec], 1
mov word [ebp - 0x4e8], 1
lea edx, [ebp - 0x528]
push edx
lea ecx, [ebp - 0x518]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
cmp dword [ebp - 4], 0
je 0x40bbe3
mov eax, dword [ebp - 4]
jmp 0x40bbe8
mov eax, 0x549230
push eax
push 0
call sub.KERNEL32.DLL_CreateProcessW
lea edx, [ebp - 0x458]
push edx
push dword [ebp - 0x528]
call sub.KERNEL32.DLL_GetExitCodeProcess
mov ecx, dword [0x55c7bc]
mov eax, dword [ecx]
call fcn.004ae45c
push 0xc8
call sub.KERNEL32.DLL_Sleep
cmp dword [ebp - 0x458], 0x103
je 0x40bbf0
push dword [ebp - 0x528]
call sub.KERNEL32.DLL_CloseHandle
push dword [ebp - 4]
mov word [ebp - 0x438], 0x48
mov edx, str.Svc_Uninstall
lea eax, [ebp - 0x2c]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549242
lea eax, [ebp - 0x30]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549232
lea eax, [ebp - 0x34]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x54
mov esi, 0x5486b8
lea edi, [ebp - 0x730]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x438], 0x54
push 0x208
lea eax, [ebp - 0x730]
push eax
call sub.KERNEL32.DLL_GetSystemDirectoryW
mov word [ebp - 0x438], 0x6c
xor edx, edx
mov dword [ebp - 0x38], edx
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x78
mov word [ebp - 0x438], 0x84
lea edx, [ebp - 0x730]
lea eax, [ebp - 0x44]
call fcn.004f8640
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x38]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x90
mov edx, 0x54925c
lea eax, [ebp - 0x48]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x38]
call fcn.004f86e0
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x9c
xor ecx, ecx
mov dword [ebp - 0x3c], ecx
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x78
mov word [ebp - 0x438], 0xa8
xor eax, eax
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x78
mov word [ebp - 0x438], 0xb4
mov edx, str.PmtRunner.dll
lea eax, [ebp - 0x4c]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x3c]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0xc0
xor ecx, ecx
mov dword [ebp - 0x50], ecx
lea ecx, [ebp - 0x50]
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.004f86f4
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x40]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.004f86a4
cmp dword [ebp - 0x40], 0
je 0x40be42
mov ecx, dword [ebp - 0x40]
jmp 0x40be47
mov ecx, 0x54926e
push ecx
call sub.KERNEL32.DLL_LoadLibraryW
mov dword [ebp - 0x45c], eax
push 0x549270
push dword [ebp - 0x45c]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x460], eax
call dword [ebp - 0x460]
push dword [ebp - 0x45c]
call sub.KERNEL32.DLL_FreeLibrary
push dword [ebp - 0x40]
mov word [ebp - 0x438], 0xcc
mov edx, str.PmtRunner_Uninstall
lea eax, [ebp - 0x54]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549296
lea eax, [ebp - 0x58]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549286
lea eax, [ebp - 0x5c]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0xd8
mov edx, str.runresjnt.dll
lea eax, [ebp - 0x60]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x60]
lea eax, [ebp - 0x3c]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0xe4
xor ecx, ecx
mov dword [ebp - 0x64], ecx
lea ecx, [ebp - 0x64]
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.004f86f4
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x40]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.004f86a4
cmp dword [ebp - 0x40], 0
je 0x40bf8b
mov ecx, dword [ebp - 0x40]
jmp 0x40bf90
mov ecx, 0x5492c4
push ecx
call sub.KERNEL32.DLL_LoadLibraryW
mov dword [ebp - 0x45c], eax
push str.FirstRunner_UnInstall
push dword [ebp - 0x45c]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x460], eax
call dword [ebp - 0x460]
push dword [ebp - 0x45c]
call sub.KERNEL32.DLL_FreeLibrary
push dword [ebp - 0x40]
mov word [ebp - 0x438], 0xf0
mov edx, str.runresjnt_Uninstall
lea eax, [ebp - 0x68]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x5492ec
lea eax, [ebp - 0x6c]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x5492dc
lea eax, [ebp - 0x70]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x54
mov word [ebp - 0x438], 0x18
jmp 0x40c15e
push 0x3e8
call sub.KERNEL32.DLL_Sleep
mov word [ebp - 0x438], 0x120
mov edx, 0x549343
lea eax, [ebp - 0x84]
call fcn.004f8514
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x114
mov word [ebp - 0x438], 0x12c
lea eax, [ebp - 0x88]
call fcn.0053ed34
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x114
xor edx, edx
mov dword [ebp - 0x454], edx
mov ecx, dword [ebp - 0x454]
cmp dword [ecx*4 + 0x547f70], 0
jne 0x40c1d0
jmp 0x40c406
mov word [ebp - 0x438], 0x138
mov eax, dword [ebp - 0x454]
mov edx, dword [eax*4 + 0x547f70]
lea eax, [ebp - 0x8c]
call fcn.004f8640
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x8c]
lea eax, [ebp - 0x84]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x144
xor ecx, ecx
mov dword [ebp - 0x90], ecx
lea ecx, [ebp - 0x90]
inc dword [ebp - 0x42c]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x44c]
call fcn.0040dd58
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x84]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.004f86a4
lea eax, [ebp - 0x88]
mov edx, dword [ebp - 0x84]
call fcn.00540b88
cmp al, 1
jne 0x40c332
push dword [ebp - 0x84]
mov word [ebp - 0x438], 0x150
mov edx, str.Kill_Process_true
lea eax, [ebp - 0x94]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549354
lea eax, [ebp - 0x98]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549344
lea eax, [ebp - 0x9c]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.004f86a4
jmp 0x40c3d3
push dword [ebp - 0x84]
mov word [ebp - 0x438], 0x15c
mov edx, str.Kill_Process_false
lea eax, [ebp - 0xa0]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549382
lea eax, [ebp - 0xa4]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549372
lea eax, [ebp - 0xa8]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.004f86a4
inc dword [ebp - 0x450]
inc dword [ebp - 0x454]
push dword [ebp - 0x450]
mov ecx, dword [ebp - 0x44c]
push dword [ecx + 0xc]
mov eax, dword [ebp - 0x44c]
call dword [eax + 4]
add esp, 8
push 0x64
call sub.KERNEL32.DLL_Sleep
jmp 0x40c1bb
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0053ed84
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x18
push 0x3e8
call sub.KERNEL32.DLL_Sleep
mov word [ebp - 0x438], 0x174
mov edx, 0x5493a1
lea eax, [ebp - 0xac]
call fcn.004f8514
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x168
mov word [ebp - 0x438], 0x180
mov edx, 0x5493a2
lea eax, [ebp - 0xb0]
call fcn.004f8514
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x168
xor ecx, ecx
mov dword [ebp - 0x454], ecx
mov eax, dword [ebp - 0x454]
cmp dword [eax*4 + 0x547fa4], 0
jne 0x40c4b2
jmp 0x40d1cf
mov word [ebp - 0x438], 0x18c
mov edx, dword [ebp - 0x454]
mov edx, dword [edx*4 + 0x547fa4]
lea eax, [ebp - 0xb4]
call fcn.004f8640
inc dword [ebp - 0x42c]
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xac]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.004f86a4
lea edx, [ebp - 0xac]
lea eax, [ebp - 0xb0]
call fcn.004f86cc
mov word [ebp - 0x438], 0x198
xor ecx, ecx
mov dword [ebp - 0xb8], ecx
lea ecx, [ebp - 0xb8]
inc dword [ebp - 0x42c]
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x44c]
call fcn.0040dd58
lea edx, [ebp - 0xb8]
lea eax, [ebp - 0xac]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x1a4
mov word [ebp - 0x438], 0x1b0
xor ecx, ecx
mov dword [ebp - 0xbc], ecx
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x1bc
mov word [ebp - 0x438], 0x1c8
xor eax, eax
mov dword [ebp - 0xc0], eax
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x1bc
mov word [ebp - 0x438], 0x1d4
mov edx, 0x5493a3
lea eax, [ebp - 0xc4]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0xac]
call fcn.004f88a8
test eax, eax
setg dl
and edx, 1
push edx
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.004f86a4
pop ecx
test cl, cl
je 0x40ccb5
mov word [ebp - 0x438], 0x1e0
lea edi, [ebp - 0x334]
xor eax, eax
mov ecx, 0x270
rep stosb byte es:[edi], al
lea eax, [ebp - 0x334]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x464]
add eax, 0x14
call fcn.00406c6c
inc dword [ebp - 0x42c]
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x1ec
mov dword [ebp - 0x468], 0x1ff
mov word [ebp - 0x438], 0x1f8
xor edx, edx
mov dword [ebp - 0x338], edx
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x1ec
mov word [ebp - 0x438], 0x204
xor ecx, ecx
mov dword [ebp - 0x33c], ecx
lea edx, [ebp - 0x33c]
inc dword [ebp - 0x42c]
mov eax, dword [ebp - 0xac]
call fcn.0044f7e8
lea edx, [ebp - 0x33c]
lea eax, [ebp - 0x338]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x33c]
mov edx, 2
call fcn.004f86a4
lea ecx, [ebp - 0x334]
mov edx, dword [ebp - 0x468]
mov eax, dword [ebp - 0xac]
call fcn.0044f64c
test eax, eax
jne 0x40cc6a
test byte [ebp - 0x324], 0x10
je 0x40c6f4
jmp 0x40cc57
mov word [ebp - 0x438], 0x210
mov edx, 0x5493a5
lea eax, [ebp - 0x340]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x340]
lea eax, [ebp - 0xb0]
call fcn.004f88a8
test eax, eax
jle 0x40c731
cmp byte [0x55ca18], 0
jne 0x40c735
xor ecx, ecx
jmp 0x40c73a
mov ecx, 1
push ecx
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x340]
mov edx, 2
call fcn.004f86a4
pop ecx
test cl, cl
je 0x40c828
mov word [ebp - 0x438], 0x21c
mov edx, 0x5493e6
lea eax, [ebp - 0x344]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, str.MayaSetting_no_delete
lea eax, [ebp - 0x348]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x5493c4
lea eax, [ebp - 0x34c]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x5493b4
lea eax, [ebp - 0x350]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x350]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x34c]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x348]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x344]
mov edx, 2
call fcn.004f86a4
jmp 0x40cc57
mov edx, 0x55ca14
lea eax, [ebp - 0xb0]
call fcn.004f88a8
test eax, eax
jle 0x40ca2d
mov word [ebp - 0x438], 0x228
lea edx, [ebp - 0xac]
lea eax, [ebp - 0xbc]
call fcn.004f86cc
mov word [ebp - 0x438], 0x234
mov edx, 0x5493e7
lea eax, [ebp - 0x354]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x354]
xor eax, eax
mov dword [ebp - 0x358], eax
lea ecx, [ebp - 0x358]
inc dword [ebp - 0x42c]
lea eax, [ebp - 0xac]
call fcn.004f86f4
lea edx, [ebp - 0x358]
lea eax, [ebp - 0xc0]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x358]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x354]
mov edx, 2
call fcn.004f86a4
mov dl, 1
mov eax, dword [ebp - 0xc0]
call fcn.0044f380
cmp al, 1
jne 0x40c918
push 0x80
cmp dword [ebp - 0xc0], 0
je 0x40c902
mov ecx, dword [ebp - 0xc0]
jmp 0x40c907
mov ecx, 0x5493ee
push ecx
call sub.KERNEL32.DLL_SetFileAttributesW
mov eax, dword [ebp - 0xc0]
call fcn.004f7ac4
push 0x80
cmp dword [ebp - 0xbc], 0
je 0x40c92e
mov edx, dword [ebp - 0xbc]
jmp 0x40c933
mov edx, 0x5493f0
push edx
call sub.KERNEL32.DLL_SetFileAttributesW
push 0x80
cmp dword [ebp - 0xc0], 0
je 0x40c94f
mov eax, dword [ebp - 0xc0]
jmp 0x40c954
mov eax, 0x5493f2
push eax
call sub.KERNEL32.DLL_SetFileAttributesW
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xbc]
call fcn.0044f738
push dword [ebp - 0xc0]
mov word [ebp - 0x438], 0x240
mov edx, str.Uninstall_Rename
lea eax, [ebp - 0x35c]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549404
lea eax, [ebp - 0x360]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x5493f4
lea eax, [ebp - 0x364]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x364]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x360]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x1ec
jmp 0x40cc57
mov word [ebp - 0x438], 0x258
xor ecx, ecx
mov dword [ebp - 0x368], ecx
lea ecx, [ebp - 0x368]
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x320]
lea eax, [ebp - 0x338]
call fcn.004f86f4
lea edx, [ebp - 0x368]
mov edx, dword [edx]
mov eax, dword [ebp - 0x44c]
call fcn.0040da00
cmp al, 1
sete cl
and ecx, 1
push ecx
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x368]
mov edx, 2
call fcn.004f86a4
pop ecx
test cl, cl
je 0x40cb79
mov word [ebp - 0x438], 0x264
xor eax, eax
mov dword [ebp - 0x36c], eax
lea ecx, [ebp - 0x36c]
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x320]
lea eax, [ebp - 0x338]
call fcn.004f86f4
lea edx, [ebp - 0x36c]
push dword [edx]
mov edx, 0x54943d
lea eax, [ebp - 0x370]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549431
lea eax, [ebp - 0x374]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549421
lea eax, [ebp - 0x378]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x378]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x374]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x370]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x36c]
mov edx, 2
call fcn.004f86a4
jmp 0x40cc57
mov word [ebp - 0x438], 0x270
xor ecx, ecx
mov dword [ebp - 0x37c], ecx
lea ecx, [ebp - 0x37c]
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x320]
lea eax, [ebp - 0x338]
call fcn.004f86f4
lea eax, [ebp - 0x37c]
push dword [eax]
mov edx, 0x54946a
lea eax, [ebp - 0x380]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x54945e
lea eax, [ebp - 0x384]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x54944e
lea eax, [ebp - 0x388]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x388]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x384]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x380]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x37c]
mov edx, 2
call fcn.004f86a4
lea eax, [ebp - 0x334]
call fcn.0044f69c
test eax, eax
je 0x40c6e6
lea eax, [ebp - 0x334]
call fcn.0044f6c0
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x338]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x320]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x1bc
jmp 0x40d14e
mov word [ebp - 0x438], 0x27c
mov edx, str.MayaSetting.db
lea eax, [ebp - 0x38c]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x38c]
lea eax, [ebp - 0xb0]
call fcn.004f88a8
test eax, eax
jle 0x40ccf2
cmp byte [0x55ca18], 0
jne 0x40ccf6
xor ecx, ecx
jmp 0x40ccfb
mov ecx, 1
push ecx
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x38c]
mov edx, 2
call fcn.004f86a4
pop ecx
test cl, cl
je 0x40cde9
mov word [ebp - 0x438], 0x288
mov edx, 0x5494bf
lea eax, [ebp - 0x390]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, str.MayaSetting_no_delete_1
lea eax, [ebp - 0x394]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x54949b
lea eax, [ebp - 0x398]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x54948b
lea eax, [ebp - 0x39c]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x39c]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x398]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x394]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x390]
mov edx, 2
call fcn.004f86a4
jmp 0x40d14e
mov edx, 0x55ca14
lea eax, [ebp - 0xb0]
call fcn.004f88a8
test eax, eax
jle 0x40cfee
mov word [ebp - 0x438], 0x294
lea edx, [ebp - 0xac]
lea eax, [ebp - 0xbc]
call fcn.004f86cc
mov word [ebp - 0x438], 0x2a0
mov edx, 0x5494c0
lea eax, [ebp - 0x3a0]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x3a0]
xor eax, eax
mov dword [ebp - 0x3a4], eax
lea ecx, [ebp - 0x3a4]
inc dword [ebp - 0x42c]
lea eax, [ebp - 0xac]
call fcn.004f86f4
lea edx, [ebp - 0x3a4]
lea eax, [ebp - 0xc0]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3a4]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3a0]
mov edx, 2
call fcn.004f86a4
mov dl, 1
mov eax, dword [ebp - 0xc0]
call fcn.0044f380
cmp al, 1
jne 0x40ced9
push 0x80
cmp dword [ebp - 0xc0], 0
je 0x40cec3
mov ecx, dword [ebp - 0xc0]
jmp 0x40cec8
mov ecx, 0x5494c6
push ecx
call sub.KERNEL32.DLL_SetFileAttributesW
mov eax, dword [ebp - 0xc0]
call fcn.004f7ac4
push 0x80
cmp dword [ebp - 0xbc], 0
je 0x40ceef
mov edx, dword [ebp - 0xbc]
jmp 0x40cef4
mov edx, 0x5494c8
push edx
call sub.KERNEL32.DLL_SetFileAttributesW
push 0x80
cmp dword [ebp - 0xc0], 0
je 0x40cf10
mov eax, dword [ebp - 0xc0]
jmp 0x40cf15
mov eax, 0x5494ca
push eax
call sub.KERNEL32.DLL_SetFileAttributesW
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xbc]
call fcn.0044f738
push dword [ebp - 0xc0]
mov word [ebp - 0x438], 0x2ac
mov edx, str.Uninstall_Rename_1
lea eax, [ebp - 0x3a8]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x5494dc
lea eax, [ebp - 0x3ac]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x5494cc
lea eax, [ebp - 0x3b0]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3b0]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3ac]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3a8]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x1bc
jmp 0x40d14e
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x44c]
call fcn.0040da00
cmp al, 1
jne 0x40d0ad
push dword [ebp - 0xac]
mov word [ebp - 0x438], 0x2c4
mov edx, str.File_delete_true
lea eax, [ebp - 0x3b4]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x54950b
lea eax, [ebp - 0x3b8]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x5494fb
lea eax, [ebp - 0x3bc]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3bc]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3b8]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3b4]
mov edx, 2
call fcn.004f86a4
jmp 0x40d14e
push dword [ebp - 0xac]
mov word [ebp - 0x438], 0x2d0
mov edx, str.File_delete_false
lea eax, [ebp - 0x3c0]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549538
lea eax, [ebp - 0x3c4]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549528
lea eax, [ebp - 0x3c8]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3c8]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3c4]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3c0]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x1a4
mov word [ebp - 0x438], 0x168
jmp 0x40d19c
inc dword [ebp - 0x450]
inc dword [ebp - 0x454]
push dword [ebp - 0x450]
mov ecx, dword [ebp - 0x44c]
push dword [ecx + 0xc]
mov eax, dword [ebp - 0x44c]
call dword [eax + 4]
add esp, 8
push 0x64
call sub.KERNEL32.DLL_Sleep
jmp 0x40c49d
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x18
mov word [ebp - 0x438], 0x2e8
mov word [ebp - 0x438], 0x2f4
xor ecx, ecx
mov dword [ebp - 0x3cc], ecx
inc dword [ebp - 0x42c]
mov word [ebp - 0x438], 0x300
lea eax, [ebp - 0x46c]
push eax
push 0x17
push 0
call sub.SHELL32.DLL_SHGetSpecialFolderLocation
lea edx, [ebp - 0x938]
push edx
push dword [ebp - 0x46c]
call sub.SHELL32.DLL_SHGetPathFromIDListW
mov word [ebp - 0x438], 0x30c
lea edx, [ebp - 0x938]
lea eax, [ebp - 0x3d4]
call fcn.004f8640
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x3d4]
lea eax, [ebp - 0x3cc]
call fcn.004f86cc
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3d4]
mov edx, 2
call fcn.004f86a4
mov byte [ebp - 0x46d], 0
mov word [ebp - 0x438], 0x300
mov word [ebp - 0x438], 0x318
mov edx, 0x549556
lea eax, [ebp - 0x3d8]
call fcn.004f8514
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x3d8]
xor eax, eax
mov dword [ebp - 0x3dc], eax
lea ecx, [ebp - 0x3dc]
inc dword [ebp - 0x42c]
lea eax, [ebp - 0x3cc]
call fcn.004f86f4
lea edx, [ebp - 0x3dc]
lea eax, [ebp - 0x3e0]
xor ecx, ecx
call fcn.004f7d1c
inc dword [ebp - 0x42c]
lea edx, [ebp - 0x3e0]
inc dword [ebp - 0x42c]
mov dword [ebp - 0x474], edx
mov eax, dword [ebp - 0x474]
cmp dword [eax], 0
jne 0x40d327
mov edx, 0x549565
jmp 0x40d32f
mov ecx, dword [ebp - 0x474]
mov edx, dword [ecx]
lea eax, [ebp - 0x3d0]
call fcn.004f8514
inc dword [ebp - 0x42c]
sub dword [ebp - 0x42c], 2
lea eax, [ebp - 0x3e0]
mov edx, 2
call fcn.00402190
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3dc]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3d8]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x300
mov dl, 1
mov eax, dword [ebp - 0x3d0]
call fcn.0044f380
mov byte [ebp - 0x46d], al
cmp byte [ebp - 0x46d], 0
je 0x40d501
push 0x80
cmp dword [ebp - 0x3d0], 0
je 0x40d3c2
mov ecx, dword [ebp - 0x3d0]
jmp 0x40d3c7
mov ecx, 0x549566
push ecx
call sub.KERNEL32.DLL_SetFileAttributesW
mov word [ebp - 0x438], 0x324
lea edx, [ebp - 0x3d0]
lea eax, [ebp - 0x3e4]
xor ecx, ecx
call fcn.004f7d1c
inc dword [ebp - 0x42c]
lea eax, [ebp - 0x3e4]
inc dword [ebp - 0x42c]
mov dword [ebp - 0x478], eax
mov edx, dword [ebp - 0x478]
cmp dword [edx], 0
jne 0x40d413
mov edx, 0x549568
jmp 0x40d41b
mov eax, dword [ebp - 0x478]
mov edx, dword [eax]
lea eax, [ebp - 0x3e8]
call fcn.004f8514
inc dword [ebp - 0x42c]
mov eax, dword [eax]
call fcn.004f7ac4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3e8]
mov edx, 2
call fcn.004f86a4
sub dword [ebp - 0x42c], 2
lea eax, [ebp - 0x3e4]
mov edx, 2
call fcn.00402190
push dword [ebp - 0x3d0]
mov word [ebp - 0x438], 0x330
mov edx, str..lnk_delete
lea eax, [ebp - 0x3ec]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549579
lea eax, [ebp - 0x3f0]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549569
lea eax, [ebp - 0x3f4]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3f4]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3f0]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3ec]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3d0]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x3cc]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x2e8
mov word [ebp - 0x438], 0x18
jmp 0x40d61b
mov word [ebp - 0x438], 0x354
lea ecx, [ebp - 0x47c]
push ecx
push 0xf003f
push 0
push 0x5495c2
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x480], eax
push 0
push dword [ebp - 0x47c]
call sub.ADVAPI32.DLL_RegDeleteValueW
push str.SOFTWAREClassesCLSID012EDFCC_F269_4244_B856_11386C847319ShellOpencommand
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegDeleteKeyW
push dword [ebp - 0x47c]
call sub.ADVAPI32.DLL_RegCloseKey
lea eax, [ebp - 0x47c]
push eax
push 0xf003f
push 0
push 0x549706
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x480], eax
push str.SOFTWAREClassesCLSID012EDFCC_F269_4244_B856_11386C847319ShellOpen
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegDeleteKeyW
push dword [ebp - 0x47c]
call sub.ADVAPI32.DLL_RegCloseKey
lea edx, [ebp - 0x47c]
push edx
push 0xf003f
push 0
push 0x54982a
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x480], eax
push str.SOFTWAREClassesCLSID012EDFCC_F269_4244_B856_11386C847319Shell
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegDeleteKeyW
push dword [ebp - 0x47c]
call sub.ADVAPI32.DLL_RegCloseKey
lea ecx, [ebp - 0x47c]
push ecx
push 0xf003f
push 0
push 0x54993a
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x480], eax
push 0
push dword [ebp - 0x47c]
call sub.ADVAPI32.DLL_RegDeleteValueW
push str.SOFTWAREClassesCLSID012EDFCC_F269_4244_B856_11386C847319DefaultIcon
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegDeleteKeyW
push dword [ebp - 0x47c]
call sub.ADVAPI32.DLL_RegCloseKey
lea eax, [ebp - 0x47c]
push eax
push 0xf003f
push 0
push 0x549a62
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x480], eax
push str.SOFTWAREClassesCLSID012EDFCC_F269_4244_B856_11386C847319
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegDeleteKeyW
push dword [ebp - 0x47c]
call sub.ADVAPI32.DLL_RegCloseKey
lea edx, [ebp - 0x47c]
push edx
push 0xf003f
push 0
push 0x549b5a
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x480], eax
push 0
push dword [ebp - 0x47c]
call sub.ADVAPI32.DLL_RegDeleteValueW
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerControlPanelNameSpace012EDFCC_F269_4244_B856_11386C847319
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegDeleteKeyW
push dword [ebp - 0x47c]
call sub.ADVAPI32.DLL_RegCloseKey
mov word [ebp - 0x438], 0x360
mov edx, 0x549d4a
lea eax, [ebp - 0x408]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, str.Contorl_delete
lea eax, [ebp - 0x40c]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549d2e
lea eax, [ebp - 0x410]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
mov edx, 0x549d1e
lea eax, [ebp - 0x414]
call fcn.004f8514
inc dword [ebp - 0x42c]
push dword [eax]
call fcn.00404274
add esp, 0x10
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x414]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x410]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x40c]
mov edx, 2
call fcn.004f86a4
dec dword [ebp - 0x42c]
lea eax, [ebp - 0x408]
mov edx, 2
call fcn.004f86a4
mov word [ebp - 0x438], 0x18
jmp 0x40d967
mov ecx, dword [ebp - 0x44c]
push dword [ecx + 0xc]
mov eax, dword [ebp - 0x44c]
call dword [eax + 8]
pop ecx
dec dword [ebp - 0x42c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004f86a4
mov ecx, dword [ebp - 0x448]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret