Function at 0x403260
Capabilities:
Delete registry key
Set registry value

Disassembly:
push ecx
push edi
push str.SOFTWARESybaseMobiLinkActiveSync_Synchronization
push 0x80000002
call fcn.00403150
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 4], edi
jne 0x403281
pop edi
pop ecx
ret
push ebx
push ebp
push esi
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x4032ba
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
push esi
push ecx
call fcn.0040e4de
add esp, 8
test eax, eax
je 0x4032ba
mov eax, dword [0x423040]
test eax, eax
push esi
push edi
je 0x4032b4
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 0x4c]
jmp 0x4032ba
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov ebx, dword [esp + 0x18]
mov eax, dword [ebx]
push eax
push edi
call fcn.004030c0
mov esi, eax
add esp, 8
test esi, esi
jne 0x4032d8
pop esi
pop ebp
pop ebx
xor eax, eax
pop edi
pop ecx
ret
mov edx, dword [ebx + 4]
test edx, edx
mov ebp, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
je 0x403370
mov ebx, dword [0x423040]
test ebx, ebx
mov eax, edx
lea edi, [eax + 1]
je 0x403317
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4032f8
mov ecx, dword [ebx]
sub eax, edi
mov edi, dword [ecx]
inc eax
push eax
push edx
push 1
push 0
push str.Class_Name
push esi
call dword [edi + 0x48]
jmp 0x40332f
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403317
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.Class_Name
push esi
call ebp
test eax, eax
jne 0x4032d0
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 8]
test edx, edx
je 0x4033f0
mov ebx, dword [0x423040]
test ebx, ebx
mov eax, edx
lea edi, [eax + 1]
je 0x403393
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403351
mov ecx, dword [ebx]
sub eax, edi
mov edi, dword [ecx]
inc eax
push eax
push edx
push 1
push 0
push str.Path
push esi
call dword [edi + 0x48]
jmp 0x4033ab
mov eax, dword [0x423040]
test eax, eax
push 1
push 0x41a653
je 0x403323
mov ecx, dword [eax]
mov edx, dword [ecx]
push 1
push 0
push str.Class_Name
push esi
call dword [edx + 0x48]
jmp 0x40332f
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403393
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.Path
push esi
call ebp
test eax, eax
jne 0x4032d0
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0xc]
test edx, edx
je 0x403459
mov ebx, dword [0x423040]
test ebx, ebx
mov eax, edx
lea edi, [eax + 1]
je 0x403413
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4033d1
mov ecx, dword [ebx]
sub eax, edi
mov edi, dword [ecx]
inc eax
push eax
push edx
push 1
push 0
push str.Command_Line
push esi
call dword [edi + 0x48]
jmp 0x40342b
mov eax, dword [0x423040]
test eax, eax
push 1
push 0x41a653
je 0x40339f
mov ecx, dword [eax]
mov edx, dword [ecx]
push 1
push 0
push str.Path
push esi
call dword [edx + 0x48]
jmp 0x4033ab
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403413
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.Command_Line
push esi
call ebp
test eax, eax
jne 0x4032d0
mov eax, dword [0x423040]
test eax, eax
push 4
je 0x40347c
mov edx, dword [esp + 0x1c]
mov ecx, dword [eax]
mov eax, dword [ecx]
add edx, 0x10
push edx
push 4
push 0
push str.Enabled
push esi
call dword [eax + 0x48]
jmp 0x403490
mov eax, dword [0x423040]
test eax, eax
push 1
push 0x41a653
je 0x40341f
mov ecx, dword [eax]
mov edx, dword [ecx]
push 1
push 0
push str.Command_Line
push esi
call dword [edx + 0x48]
jmp 0x40342b
mov eax, dword [esp + 0x1c]
add eax, 0x10
push eax
push 4
push 0
push str.Enabled
push esi
call ebp
test eax, eax
jne 0x4032d0
mov eax, dword [0x423040]
test eax, eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push esi
je 0x4034b1
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 0x40]
jmp 0x4034b3
call edi
mov eax, dword [0x423040]
test eax, eax
je 0x4034d3
mov ecx, dword [eax]
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
push edx
call dword [eax + 0x40]
pop esi
pop ebp
pop ebx
mov eax, 1
pop edi
pop ecx
ret
mov eax, dword [esp + 0x10]
push eax
call edi
pop esi
pop ebp
pop ebx
mov eax, 1
pop edi
pop ecx
ret