Function at 0x434c86
Capabilities:
Delete registry value

Disassembly:
push ebp
lea ebp, [esp - 0x164]
sub esp, 0x1e4
mov eax, dword [0x48e610]
xor eax, ebp
mov dword [ebp + 0x160], eax
push ebx
push esi
mov esi, ecx
xor ebx, ebx
cmp dword [esi + 0x54], ebx
jne 0x434fba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x70], eax
cmp dword [esi + 0x470], ebx
je 0x434ccd
cmp dword [esi + 0x46c], ebx
je 0x434fba
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x5c], ebx
cmp dword [esi + 0x2c], ebx
je 0x434ce4
cmp dword [esi + 0x18], ebx
je 0x434fba
push edi
xor edi, edi
inc edi
push esi
lea ecx, [ebp - 0x50]
mov dword [esi + 0x38], edi
call fcn.00409d06
push 9
push 0xae
lea ecx, [ebp - 0x50]
call fcn.00409cbb
dec eax
je 0x434d1e
sub eax, 8
jne 0x434d27
push ebx
mov ecx, esi
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x64], ebx
call fcn.00413efb
jmp 0x434d27
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x64], edi
lea ecx, [ebp - 0x50]
mov dword [esi + 0x38], ebx
call fcn.00409de0
cmp dword [ebp - 0x5c], ebx
je 0x434f86
mov eax, dword [esi + 0x330]
mov dword [esi + 0x34], edi
cmp eax, edi
jb 0x434f26
cmp dword [ebp - 0x60], ebx
je 0x434f26
push eax
push 0x2c
lea eax, [ebp - 0x6c]
push eax
lea ecx, [esi + 0x1c0]
call fcn.00440130
lea eax, [ebp - 0x6c]
push eax
lea ecx, [esi + 0x448]
call fcn.004149de
mov dword [ebp - 0x60], eax
mov eax, dword [esi + 0x3e8]
cmp eax, dword [esi + 0x3ec]
je 0x434def
lea ebx, [eax + 0x4c]
push 0x2c
mov ecx, ebx
call fcn.0043f540
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x5c], edi
cmp eax, edi
jl 0x434dde
push dword [ebp - 0x5c]
lea eax, [ebp - 0x58]
push 0x2c
push eax
mov ecx, ebx
call fcn.00440130
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040cddb
pop ecx
pop ecx
lea ecx, [ebp - 0x58]
test al, al
jne 0x434dd5
call fcn.0043f790
inc dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x80]
jle 0x434d9d
jmp 0x434dde
and dword [ebx - 0x40], 0
call fcn.0043f790
add ebx, 0xd4
lea eax, [ebx - 0x4c]
cmp eax, dword [esi + 0x3ec]
jne 0x434d8a
push str.pkg_downloaded
lea ecx, [ebp - 0x7c]
call fcn.0043f7b0
lea ebx, [esi + 0x340]
mov ecx, ebx
call fcn.00401005
test al, al
je 0x434e14
mov ebx, str.none
jmp 0x434e1c
cmp byte [ebx + 7], 0xff
jne 0x434e1c
mov ebx, dword [ebx]
push ebx
lea ecx, [ebp - 0x7c]
call fcn.0043fc10
mov eax, dword [esi + 0x348]
test eax, eax
je 0x434e6d
mov ebx, dword [ebp - 0x70]
lea ecx, [ebp - 0x58]
sub ebx, eax
call fcn.0043f500
xor edx, edx
mov ecx, 0x3e8
mov eax, ebx
div ecx
push eax
lea eax, [ebp - 0x58]
push str.waittime_d
push eax
call fcn.00440350
add esp, 0xc
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0043fcf0
lea ecx, [ebp - 0x58]
call fcn.0043f790
push edi
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x60]
add eax, 4
cmp dword [ebp + 0x16c], 0
push eax
lea eax, [ebp - 0x74]
je 0x434ebf
push str.actionclosevalue
push eax
call fcn.004400e0
add esp, 0xc
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00440040
add esp, 0xc
push eax
mov ecx, esi
call fcn.00410896
lea ecx, [ebp - 0x58]
call fcn.0043f790
lea ecx, [ebp - 0x74]
call fcn.0043f790
push str.actionpageviewvalueclose
jmp 0x434ef7
push str.actioncancelvalue
push eax
call fcn.004400e0
add esp, 0xc
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00440040
add esp, 0xc
push eax
mov ecx, esi
call fcn.00410896
lea ecx, [ebp - 0x58]
call fcn.0043f790
lea ecx, [ebp - 0x74]
call fcn.0043f790
push str.actionpageviewvaluecancel
lea ecx, [ebp - 0x58]
call fcn.0043f7b0
push 0xa
lea eax, [ebp - 0x58]
push eax
mov ecx, esi
call fcn.00410896
lea ecx, [ebp - 0x58]
call fcn.0043f790
lea ecx, [ebp - 0x7c]
call fcn.0043f790
lea ecx, [ebp - 0x6c]
call fcn.0043f790
xor ebx, ebx
mov ecx, dword [esi + 0x460]
cmp ecx, ebx
je 0x434f35
call fcn.0040b60c
lea ecx, [esi + 0x2c4]
call fcn.0040a9f5
cmp dword [esi + 0x58], 0
mov edi, dword [sym.imp.SHLWAPI.dll_SHDeleteValueA]
mov ebx, 0x80000002
je 0x434f5e
push 0x481730
push str.SOFTWAREGoogleNo_Chrome_Offer_Until
push ebx
call edi
cmp dword [esi + 0x5c], 0
je 0x434f71
push 0x481730
push str.SOFTWAREGoogleNo_Toolbar_Offer_Until
push ebx
call edi
cmp dword [esi + 0x60], 0
je 0x434f84
push 0x481730
push 0x4816b8
push ebx
call edi
xor ebx, ebx
pop edi
cmp dword [ebp - 0x64], ebx
je 0x434fba
mov eax, str.close
cmp dword [ebp + 0x16c], ebx
jne 0x434f9e
mov eax, str.cancel
push eax
lea ecx, [ebp - 0x6c]
call fcn.0043f7b0
lea eax, [ebp - 0x6c]
push eax
mov ecx, esi
call fcn.004126fb
lea ecx, [ebp - 0x6c]
call fcn.0043f790
mov ecx, dword [ebp + 0x160]
pop esi
xor ecx, ebp
pop ebx
call fcn.0045f4ee
add ebp, 0x164
leave
ret 4