Function at 0x402504
Capabilities:
Delete registry key

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0xa8
push ebx
push esi
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
xor eax, eax
lea ecx, [ebp + 0x74]
push ecx
push eax
mov esi, str.AppIDPlaySushi32.DLL
push 0x80000001
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], str.AppIDE89A07B5_BD7A_43F9_BDA4_0DAA48AC4FA5
mov dword [ebp - 0x28], str.CLSID21608B66_026F_4DCB_9244_0DACA328DCEDProgID
mov dword [ebp - 0x24], str.CLSID21608B66_026F_4DCB_9244_0DACA328DCEDInprocServer32
mov dword [ebp - 0x20], str.CLSID21608B66_026F_4DCB_9244_0DACA328DCEDImplemented_Categories
mov dword [ebp - 0x1c], str.CLSID21608B66_026F_4DCB_9244_0DACA328DCED
mov dword [ebp - 0x18], str.CLSIDD6F7A625_9F14_4FC6_A228_F00E674596D3
mov dword [ebp - 0x14], str.PlaySushi32.Helper
mov dword [ebp - 0x10], str.PlaySushi32.Helper.1
mov dword [ebp - 0xc], str.PlaySushi32.PlaySushi
mov dword [ebp - 8], str.PlaySushi32.PlaySushi.1
mov dword [ebp - 4], str.TypeLib975BBCC0_19DF_47C2_9AE2_D78EEFA96821
mov dword [ebp], str.PSText.IEButton.1CLSID
mov dword [ebp + 4], str.PSText.IEButton.1
mov dword [ebp + 8], str.PSText.IEButtonCLSID
mov dword [ebp + 0xc], str.PSText.IEButtonCurVer
mov dword [ebp + 0x10], str.PSText.IEButton
mov dword [ebp + 0x14], str.CLSIDEBD24BD3_E272_4FA3_A8BA_C5D709757CABProgID
mov dword [ebp + 0x18], str.CLSIDEBD24BD3_E272_4FA3_A8BA_C5D709757CABInprocServer32
mov dword [ebp + 0x1c], str.CLSIDEBD24BD3_E272_4FA3_A8BA_C5D709757CABImplemented_Categories
mov dword [ebp + 0x20], str.CLSIDEBD24BD3_E272_4FA3_A8BA_C5D709757CABProgrammable
mov dword [ebp + 0x24], str.CLSIDEBD24BD3_E272_4FA3_A8BA_C5D709757CABTypeLib
mov dword [ebp + 0x28], str.CLSIDEBD24BD3_E272_4FA3_A8BA_C5D709757CABVersionIndependentProgID
mov dword [ebp + 0x2c], str.CLSIDEBD24BD3_E272_4FA3_A8BA_C5D709757CAB
mov dword [ebp + 0x30], eax
mov dword [ebp + 0x34], str.SOFTWAREClassesAppIDE89A07B5_BD7A_43F9_BDA4_0DAA48AC4FA5
mov dword [ebp + 0x38], str.SOFTWAREClassesCLSID21608B66_026F_4DCB_9244_0DACA328DCED
mov dword [ebp + 0x3c], str.SOFTWAREClassesCLSID21608B66_026F_4DCB_9244_0DACA328DCEDInprocServer32
mov dword [ebp + 0x40], str.SOFTWAREClassesCLSID21608B66_026F_4DCB_9244_0DACA328DCEDProgID
mov dword [ebp + 0x44], str.SOFTWAREClassesCLSID21608B66_026F_4DCB_9244_0DACA328DCEDImplemented_Categories
mov dword [ebp + 0x48], str.SOFTWAREClassesCLSIDD6F7A625_9F14_4FC6_A228_F00E674596D3
mov dword [ebp + 0x4c], str.SOFTWAREClassesPlaySushi32.Helper
mov dword [ebp + 0x50], str.SOFTWAREClassesPlaySushi32.Helper.1
mov dword [ebp + 0x54], str.SOFTWAREClassesPlaySushi32.PlaySushi
mov dword [ebp + 0x58], str.SOFTWAREClassesPlaySushi32.PlaySushi.1
mov dword [ebp + 0x5c], str.SOFTWAREClassesTypeLib975BBCC0_19DF_47C2_9AE2_D78EEFA96821
mov dword [ebp + 0x60], str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser_Helper_Objects21608B66_026F_4DCB_9244_0DACA328DCED
mov dword [ebp + 0x64], str.SOFTWAREMicrosoftInternet_ExplorerExtensionsEBD24BD3_E272_4FA3_A8BA_C5D709757CAB
mov dword [ebp + 0x68], str.SOFTWAREWow6432NodeMicrosoftInternet_ExplorerExtensionsEBD24BD3_E272_4FA3_A8BA_C5D709757CAB
mov dword [ebp + 0x6c], eax
call edi
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
test eax, eax
jne 0x402655
call fcn.0040104f
push eax
push dword [ebp + 0x74]
call ebx
push dword [ebp + 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp + 0x74]
push eax
push 0
push 0x80000000
call edi
test eax, eax
jne 0x402686
and dword [ebp + 0x70], eax
push esi
push dword [ebp + 0x74]
call ebx
inc dword [ebp + 0x70]
mov eax, dword [ebp + 0x70]
mov esi, dword [ebp + eax*4 - 0x30]
test esi, esi
jne 0x402669
push dword [ebp + 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp + 0x74]
push eax
xor esi, esi
push esi
push 0x80000002
call edi
test eax, eax
jne 0x4026b5
mov eax, str.SOFTWAREClassesAppIDE89A07B5_BD7A_43F9_BDA4_0DAA48AC4FA5
push eax
push dword [ebp + 0x74]
call ebx
mov eax, dword [ebp + esi*4 + 0x38]
inc esi
test eax, eax
jne 0x40269d
push dword [ebp + 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.00402231
call fcn.004022a7
pop edi
xor eax, eax
pop esi
inc eax
pop ebx
add ebp, 0x78
leave
ret