Function at 0x10010e1e
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005b094
mov eax, dword fs:[0]
push eax
mov eax, 0x1a5c
call fcn.1004f2f0
mov eax, dword [0x10077060]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x19fc], eax
lea eax, [ebp - 0x1a1c]
mov esi, ecx
push eax
mov dword [ebp - 0x19ec], esi
call fcn.1001164b
and dword [ebp - 4], 0
mov eax, dword [esi + 0x18]
mov eax, dword [eax]
mov ecx, dword [esi]
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19dc], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x19e4], eax
mov eax, dword [esi]
lea edi, [ebp - 0x19e8]
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x19e8], eax
call fcn.1000d610
test al, al
jne 0x10010f6e
call fcn.1000f80e
add eax, 0x9c
push eax
lea esi, [ebp - 0x48]
call fcn.10002030
mov byte [ebp - 4], 1
cmp dword [ebp - 0x30], 8
mov ecx, dword [ebp - 0x44]
jae 0x10010eda
lea ecx, [ebp - 0x44]
mov eax, dword [ebp - 0x34]
add eax, eax
push eax
lea eax, [ebp - 0x1a60]
push eax
call fcn.10038d3a
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.100103e5
add esp, 0xc
push 0
push 1
lea ecx, [ebp - 0x1a60]
mov byte [ebp - 4], 4
call fcn.10002243
lea eax, [ebp - 0x2c]
push eax
lea ebx, [ebp - 0x1a1c]
call fcn.10011681
push 0x198c
lea esi, [ebp - 0x19e0]
mov edi, eax
call fcn.1000f80e
add eax, 0x1c
push eax
push edi
call fcn.10042da0
add esp, 0xc
xor ebx, ebx
push ebx
push 1
lea esi, [ebp - 0x2c]
call fcn.1000233f
push ebx
push 1
lea esi, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.1000233f
lea esi, [ebp - 0x19e0]
call fcn.10011a4a
mov esi, dword [ebp - 0x19ec]
jmp 0x10010e8d
lea eax, [ebp - 0x1a64]
mov esi, str.Softwareprojonepodlp_softwareChangedcache
mov edi, reloc.WS2_32.dll_bind
push eax
mov ecx, esi
mov edx, edi
call fcn.1000e459
cmp dword [eax + 0x1c], 0
pop ecx
lea eax, [ebp - 0x1a64]
push eax
sete bl
call fcn.1000f7e6
test bl, bl
je 0x10010fc9
push str.update_config__delete_old_and_write_new
call fcn.10036ea1
mov dword [esp], str.Softwareprojonepodlp_softwareChanged_
push edi
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea eax, [ebp - 0x1a1c]
push eax
call fcn.10010496
jmp 0x1001123e
lea eax, [ebp - 0x1a3c]
push eax
mov ecx, esi
mov edx, edi
call fcn.1000e459
pop ecx
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1a20], 0
sete al
test al, al
jne 0x10011203
push dword [ebp - 0x1a20]
push str.not_first_check__vNameSet_size:_d
call fcn.10036ea1
mov eax, dword [ebp - 0x1a04]
mov eax, dword [eax]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1a1c]
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x1a1c]
lea edi, [ebp - 0x19e8]
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x19e8], eax
call fcn.1000d610
test al, al
jne 0x100110f6
call fcn.1000f80e
mov ecx, dword [ebp - 0x1a24]
push eax
mov dword [ebp - 0x19ec], ecx
mov ecx, dword [ebp - 0x1a3c]
lea eax, [ebp - 0x1a44]
push eax
lea ebx, [ebp - 0x1a3c]
mov dword [ebp - 0x19f0], ecx
call fcn.100115bf
mov edi, eax
lea esi, [ebp - 0x19f0]
call fcn.1000d610
test al, al
je 0x100110e6
lea esi, [ebp - 0x19e0]
call fcn.1000f80e
add eax, 0x1c
push eax
lea esi, [ebp - 0x2c]
call fcn.10002030
mov eax, esi
mov byte [ebp - 4], 6
mov ebx, dword [ebp - 0x19f4]
push eax
call fcn.10011681
push 0x198c
lea esi, [ebp - 0x19e0]
mov edi, eax
call fcn.1000f80e
add eax, 0x1c
push eax
push edi
call fcn.10042da0
add esp, 0xc
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.1000233f
lea esi, [ebp - 0x19e0]
call fcn.10011a4a
jmp 0x1001101c
mov eax, dword [ebp - 0x1a24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1a3c]
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x1a24]
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x1a3c]
lea edi, [ebp - 0x19e8]
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x19e8], eax
call fcn.1000d610
test al, al
jne 0x10011210
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp - 0x1a1c]
mov dword [ebp - 0x19f8], eax
call fcn.1000f80e
push eax
lea eax, [ebp - 0x1a44]
push eax
lea ebx, [ebp - 0x1a1c]
call fcn.100117a0
mov edi, eax
lea esi, [ebp - 0x19f8]
call fcn.1000d610
test al, al
je 0x100111f3
mov edi, 0x198c
push edi
lea eax, [ebp - 0x19d8]
push 0
push eax
call fcn.10042870
add esp, 0xc
lea esi, [ebp - 0x19e0]
call fcn.1000f80e
push eax
lea ecx, [ebp - 0x19d8]
call fcn.10010655
test eax, eax
je 0x100111f3
lea eax, [ebp - 0x19d8]
push eax
lea esi, [ebp - 0x2c]
call fcn.10002030
mov ebx, dword [ebp - 0x19fc]
push edi
lea eax, [ebp - 0x19d8]
push eax
mov eax, esi
push eax
mov byte [ebp - 4], 7
call fcn.10011681
push eax
call fcn.10042da0
add esp, 0xc
push 0
push 1
mov byte [ebp - 4], 5
call fcn.1000233f
lea esi, [ebp - 0x19e0]
call fcn.1000d700
jmp 0x10011110
push str.first_check
call fcn.10036ea1
pop ecx
jmp 0x1001121a
mov esi, str.Softwareprojonepodlp_softwareChangedcache
mov edi, reloc.WS2_32.dll_bind
push esi
push edi
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea eax, [ebp - 0x1a1c]
push eax
call fcn.10010496
lea eax, [ebp - 0x1a3c]
push eax
mov byte [ebp - 4], 0
call fcn.1000f7e6
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1a1c]
push eax
call fcn.10011778
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004017c
leave
ret 8