Function at 0x404ea0
Capabilities:
Delete registry key
Get installed programs
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x407efa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x244
lea ecx, [ebp - 0x134]
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 4], 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
lea ecx, [ebp - 0x134]
call sub.MFC42.DLL_CString::operator_1
lea eax, [ebp - 0x1c]
push eax
push 0xf003f
push 0
lea ecx, [ebp - 0x134]
call fcn.00406850
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4050a4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0
push 0
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
test eax, eax
jne 0x40509a
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x10]
jae 0x40509a
mov dword [ebp - 0x14], 0xc8
lea ecx, [ebp - 0x12c]
push ecx
push 0
push 0
push 0
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x124]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x405095
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x240]
call sub.MFC42.DLL_CString::CString_1
mov byte [ebp - 4], 1
push 0x104
push 0
lea ecx, [ebp - 0x23c]
push ecx
call sub.msvcrt.dll_memset
add esp, 0xc
push str.ce65a3b9_08c3_4a2f_b2cb_8eac3f17f440
lea ecx, [ebp - 0x240]
call fcn.00406860
test eax, eax
je 0x40500c
push str.c28d7189_6d42_4812_aa67_06783152787b
lea ecx, [ebp - 0x240]
call fcn.00406860
test eax, eax
je 0x40500c
push str.a20c66d4_69ce_4421_adfc_2759cf0a24fd
lea ecx, [ebp - 0x240]
call fcn.00406860
test eax, eax
je 0x40500c
push str.0BEDBD4E_2D34_47B5_9973_57E62B29307C
lea ecx, [ebp - 0x240]
call fcn.00406860
test eax, eax
je 0x40500c
push str.ATI_Display_Driver
lea ecx, [ebp - 0x240]
call fcn.00406860
test eax, eax
jne 0x40507d
lea edx, [ebp - 0x124]
push edx
mov eax, dword [ebp - 0x134]
push eax
push 0x409d30
lea ecx, [ebp - 0x23c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [ebp - 0x130]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x23c]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40507b
push 0x409d36
mov ecx, dword [ebp - 0x130]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edx, dword [ebp - 0x10]
sub edx, 1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x130]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x405086
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x240]
call sub.MFC42.DLL_CString::CString
jmp 0x404f3b
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
mov ecx, esp
mov dword [ebp - 0x244], esp
push str.SOFTWARE_
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0x24c], eax
call fcn.00405ef0
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x248], esp
push str.SOFTWAREInstalledOptions_
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0x250], eax
call fcn.00405ef0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x134]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret