Function at 0x5832833d
Capabilities:
Delete registry key

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x4b8
mov eax, dword [0x5832e010]
and dword [ebp - 0x4b8], 0
cmp dword [esi], 0x3c
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push edi
mov dword [ebp - 0x4b4], eax
jne 0x5832878f
lea eax, [ebp - 0x90]
push eax
push dword [esi + 0xc]
call fcn.58327d5b
test eax, eax
pop ecx
pop ecx
je 0x5832878f
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x68]
push 0x58312b70
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [esi + 0x10]
add esp, 0xc
test eax, eax
je 0x5832878f
push 0x104
lea ecx, [ebp - 0x3b0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x5832878f
push dword [esi + 4]
mov ebx, dword [esi + 8]
xor edi, edi
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
push dword [esi + 4]
lea ebx, [ebp - 0x90]
mov edi, 0x58312b68
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
test byte [esi + 0x30], 1
je 0x58328418
push dword [esi + 4]
mov ebx, 0x583112ec
mov edi, 0x58312b5c
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
jmp 0x58328454
mov eax, dword [esi + 4]
test eax, eax
je 0x58328454
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x58328454
push dword [esi + 4]
lea eax, [ebp - 0x4b0]
push 0x58312b4c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x4b0]
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov ebx, dword [esi + 8]
push 0x58312a74
lea edi, [ebp - 0x90]
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
mov ebx, dword [esi + 4]
lea eax, [ebp - 0x68]
push eax
mov edi, 0x58312b44
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
lea eax, [ebp - 0x68]
push eax
lea ebx, [ebp - 0x3b0]
mov edi, 0x58312b34
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
test byte [esi + 0x30], 0x20
lea eax, [ebp - 0x68]
je 0x583284c5
push 0x58312b24
push 0x58312b14
push eax
call fcn.58327e6f
add esp, 0xc
jmp 0x583284e5
push 0x58312b08
push 0x58312b24
push 0x58312b14
push eax
call fcn.58327ddd
add esp, 0x10
test eax, eax
jl 0x5832878f
mov ebx, dword [esi + 0x14]
test ebx, ebx
je 0x58328503
lea eax, [ebp - 0x68]
push eax
mov edi, 0x58312afc
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
mov eax, dword [esi + 0x18]
test eax, eax
jl 0x58328543
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x2ac]
push 0x58312af4
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x68]
push eax
lea ebx, [ebp - 0x2ac]
mov edi, 0x58312ae0
call fcn.583282be
add esp, 0x14
test eax, eax
jl 0x5832878f
mov eax, dword [esi + 0x1c]
test eax, eax
jne 0x5832854f
cmp dword [esi + 0x20], eax
je 0x58328581
push eax
lea eax, [ebp - 0x2ac]
push 0x58312adc
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x68]
push eax
lea ebx, [ebp - 0x2ac]
mov edi, 0x58312ad0
call fcn.583282be
add esp, 0x10
test eax, eax
jl 0x5832878f
mov eax, dword [esi + 0x20]
test eax, eax
je 0x583285ba
push eax
lea eax, [ebp - 0x2ac]
push 0x58312adc
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x68]
push eax
lea ebx, [ebp - 0x2ac]
mov edi, 0x58312ac0
call fcn.583282be
add esp, 0x10
test eax, eax
jl 0x5832878f
test byte [esi + 0x30], 1
je 0x583285dc
lea eax, [ebp - 0x68]
push eax
mov ebx, 0x583112ec
mov edi, 0x58312b5c
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
test byte [esi + 0x30], 2
je 0x583285fe
lea eax, [ebp - 0x68]
push eax
mov ebx, 0x583112ec
mov edi, 0x58312ab4
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
mov edi, dword [ebp - 0x4b4]
mov eax, dword [edi]
push 0x58312c6c
push 1
push dword [esi + 0xc]
push edi
call dword [eax + 0x18]
mov eax, dword [edi]
push 0x58312c5c
push 1
push dword [esi + 0xc]
push edi
call dword [eax + 0x18]
and dword [ebp - 0x4b4], 0
mov ebx, 0x583129f8
mov eax, dword [ebx]
test dword [esi + 0x30], eax
je 0x5832864d
push dword [ebx + 4]
mov eax, dword [edi]
push 1
push dword [esi + 0xc]
push edi
call dword [eax + 0x14]
test eax, eax
jl 0x5832878f
inc dword [ebp - 0x4b4]
add ebx, 8
cmp dword [ebp - 0x4b4], 6
jl 0x58328630
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x2ac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x58312aac
lea eax, [ebp - 0x2ac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x2ac]
push eax
push SysReAllocStringLen
call fcn.58327ee2
push eax
call fcn.58327ff3
add esp, 4
test eax, eax
je 0x5832878f
cmp dword [esi + 0x38], 0
je 0x58328751
lea eax, [ebp - 0x2ac]
push eax
mov ebx, 0x583112ec
xor edi, edi
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
mov eax, dword [esi + 0x38]
push 0x62
lea ecx, [ebp - 0xf3]
push ecx
mov byte [ebp - 0xf4], 0x5c
mov dword [ebp - 0x4b4], eax
push eax
jmp 0x58328744
mov cl, byte [ebp - 0xf4]
test cl, cl
lea eax, [ebp - 0xf4]
je 0x58328707
cmp cl, 0x3d
je 0x58328702
inc eax
mov cl, byte [eax]
test cl, cl
jne 0x583286f6
cmp byte [eax], 0
jne 0x58328709
xor eax, eax
test eax, eax
je 0x58328751
lea ebx, [eax + 1]
mov byte [eax], 0
cmp byte [ebx], 0
je 0x58328751
lea eax, [ebp - 0x2ac]
push eax
lea edi, [ebp - 0xf4]
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
inc dword [ebp - 0x4b4]
push 0x62
lea eax, [ebp - 0xf3]
push eax
push dword [ebp - 0x4b4]
push dword [esi + 0x10]
call dword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
jne 0x583286e6
mov eax, dword [esi + 0x24]
test eax, eax
je 0x58328799
lea ecx, [ebp - 0x11c]
push ecx
push eax
call fcn.58327d5b
test eax, eax
pop ecx
pop ecx
je 0x5832878f
lea eax, [ebp - 0x68]
push eax
lea ebx, [ebp - 0x11c]
mov edi, 0x58312aa0
call fcn.583282be
test eax, eax
pop ecx
jl 0x5832878f
mov ecx, esi
call fcn.58328198
test eax, eax
jne 0x58328799
mov dword [ebp - 0x4b8], 0x80004005
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x4b8]
pop edi
pop ebx
call fcn.5832b47f
leave
ret