Function at 0x406850
Capabilities:
Delete registry key
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffe0
sub esp, 0x298
push esi
lea esi, [esp + 0x14]
mov dword [esp + 0x14], 0x41b58ab3
shr esi, 3
mov eax, 0xf1f1
mov dword [esp + 0x18], 0x4617a8
push edi
mov dword [esp + 0x20], fcn.00406850
mov word [esi + 0x30000000], ax
add esi, 0x30000002
push 0x41
push esi
call sym.Uninstaller.exe___asan_set_shadow_00
mov edi, dword [ebp + 8]
add esp, 8
mov dword [esi + 0x41], 0xf2f2f2f2
mov dword [esi + 0x45], 0xf204f204
mov dword [esi + 0x49], 0xf3f3f300
mov byte [esi + 0x4d], 0xf3
mov esi, dword [ebp + 0xc]
push esi
push edi
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
test eax, eax
je 0x406b58
lea eax, [esp + 0x250]
push eax
push 0x20019
push 0
push esi
push edi
call fcn.00403a80
add esp, 0x14
test eax, eax
je 0x406916
cmp eax, 2
je 0x406b58
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x45e0360e
shr eax, 3
add eax, 0x30000000
push 0x50
push eax
call sym.Uninstaller.exe___asan_set_shadow_00
add esp, 8
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esi + eax*2]
lea edx, [ecx - 2]
mov dword [esp + 0x298], ecx
mov eax, edx
mov dword [esp + 0x29c], edx
shr eax, 3
mov ah, byte [eax + 0x30000000]
test ah, ah
je 0x406961
mov al, dl
and al, 7
inc al
cmp al, ah
jl 0x406961
push edx
call sym.Uninstaller.exe___asan_report_load2
mov ecx, dword [esp + 0x29c]
add esp, 4
mov edx, dword [esp + 0x29c]
cmp word [edx], 0x5c
je 0x4069d0
mov eax, ecx
shr eax, 3
mov dl, byte [eax + 0x30000000]
test dl, dl
je 0x406990
mov al, cl
and al, 7
inc al
cmp al, dl
jl 0x406990
push ecx
call sym.Uninstaller.exe___asan_report_store2
mov ecx, dword [esp + 0x29c]
add esp, 4
mov eax, 0x5c
mov word [ecx], ax
add ecx, 2
mov eax, ecx
mov dword [esp + 0x298], ecx
shr eax, 3
mov dl, byte [eax + 0x30000000]
test dl, dl
je 0x4069cb
mov al, cl
and al, 7
inc al
cmp al, dl
jl 0x4069cb
push ecx
call sym.Uninstaller.exe___asan_report_store2
mov ecx, dword [esp + 0x29c]
add esp, 4
xor eax, eax
mov word [ecx], ax
lea edx, [esp + 0x260]
mov eax, edx
shr eax, 3
mov cl, byte [eax + 0x30000000]
test cl, cl
je 0x4069f9
mov al, dl
and al, 7
add al, 3
cmp al, cl
jl 0x4069f9
push edx
call sym.Uninstaller.exe___asan_report_store4
add esp, 4
lea eax, [esp + 0x270]
mov dword [esp + 0x260], 0x104
push eax
push 0
push 0
push 0
lea eax, [esp + 0x270]
push eax
lea eax, [esp + 0x3c]
push eax
push 0
push dword [esp + 0x26c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x406afb
nop word [eax + eax]
mov ecx, dword [esp + 0x298]
mov eax, ecx
shr eax, 3
mov dl, byte [eax + 0x30000000]
test dl, dl
je 0x406a70
mov al, cl
and al, 7
inc al
cmp al, dl
jl 0x406a70
push ecx
call sym.Uninstaller.exe___asan_report_store2
mov ecx, dword [esp + 0x29c]
add esp, 4
xor eax, eax
mov word [ecx], ax
lea eax, [esp + 0x28]
push 0xffffffffffffffff
push eax
push 0x208
push esi
call fcn.00451f19
push esi
push edi
call fcn.00406850
add esp, 0x18
test eax, eax
je 0x406afb
lea edx, [esp + 0x260]
mov eax, edx
shr eax, 3
mov cl, byte [eax + 0x30000000]
test cl, cl
je 0x406abe
mov al, dl
and al, 7
add al, 3
cmp al, cl
jl 0x406abe
push edx
call sym.Uninstaller.exe___asan_report_store4
add esp, 4
lea eax, [esp + 0x270]
mov dword [esp + 0x260], 0x104
push eax
push 0
push 0
push 0
lea eax, [esp + 0x270]
push eax
lea eax, [esp + 0x3c]
push eax
push 0
push dword [esp + 0x26c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x406a40
mov ecx, dword [esp + 0x298]
sub ecx, 2
mov eax, ecx
mov dword [esp + 0x298], ecx
shr eax, 3
mov dl, byte [eax + 0x30000000]
test dl, dl
je 0x406b35
mov al, cl
and al, 7
inc al
cmp al, dl
jl 0x406b35
push ecx
call sym.Uninstaller.exe___asan_report_store2
mov ecx, dword [esp + 0x29c]
add esp, 4
xor eax, eax
mov word [ecx], ax
push dword [esp + 0x250]
call fcn.004037c0
add esp, 4
push esi
push edi
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
test eax, eax
jmp 0x4068e9
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x45e0360e
shr eax, 3
add eax, 0x30000000
push 0x50
push eax
call sym.Uninstaller.exe___asan_set_shadow_00
add esp, 8
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret