Function at 0x4aac3d
Capabilities:
Set registry value

Disassembly:
push 0xc4
mov eax, 0x551185
call fcn.0053655e
call fcn.00403d03
lea eax, [ebp - 0xb8]
push eax
call fcn.004a7c96
pop ecx
xor ebx, ebx
lea ecx, [ebp - 0x64]
push eax
mov dword [ebp - 4], ebx
call fcn.0040a64a
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 2
call fcn.00403ae4
lea ecx, [ebp - 0xb8]
call fcn.0040257a
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
lea ecx, [ebp - 0x40]
call fcn.00401cd4
mov esi, 0x565fa4
mov byte [ebp - 4], 3
push esi
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.004030d5
add esp, 0xc
lea ecx, [ebp - 0x40]
call fcn.0040257a
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
cmp dword [ebp - 0x80], 8
lea eax, [ebp - 0x94]
push ebx
cmovae eax, dword [ebp - 0x94]
lea ecx, [ebp - 0xc8]
push ebx
push 0x2001f
push ebx
push ebx
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 4], 6
call fcn.00492621
test eax, eax
jne 0x4aaf38
lea eax, [ebp - 0x64]
mov dword [ebp - 0x30], ebx
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], ebx
call fcn.00403913
push str.__uninstall
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004030d5
add esp, 0xc
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.0040257a
push ebx
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0xd0]
lea eax, [ebp - 0xbc]
mov dword [esp], str._Y_m_d
push eax
mov dword [ebp - 0xcc], edx
call fcn.00405d1e
push dword [eax]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xa
call fcn.00401cd4
mov ecx, dword [ebp - 0xbc]
mov byte [ebp - 4], 0xc
lea ecx, [ecx - 0x10]
call fcn.0040642f
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
pop ecx
lea eax, [eax*2 + 2]
push eax
push esi
mov esi, dword [ebp - 0xc8]
push 1
push ebx
push str.Publisher
push esi
call edi
push 0x565fa4
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
pop ecx
lea eax, [eax*2 + 2]
push eax
push 0x565fa4
push 1
push ebx
push str.DisplayName
push esi
call edi
cmp dword [ebp - 0x50], 8
lea eax, [ebp - 0x64]
push 1
cmovae eax, dword [ebp - 0x64]
lea ecx, [ebp - 0xc8]
push eax
push str.DisplayIcon
call fcn.00492d3e
call fcn.00403d03
push 1
call fcn.004a7dde
push eax
push str.DisplayVersion
lea ecx, [ebp - 0xc8]
call fcn.00492d3e
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x64]
call fcn.0040ac85
cmp dword [eax + 0x14], 8
jb 0x4aae1f
mov eax, dword [eax]
push 1
push eax
push str.InstallLocation
lea ecx, [ebp - 0xc8]
call fcn.00492d3e
lea ecx, [ebp - 0xa0]
call fcn.00403ae4
lea ecx, [ebp - 0xb8]
call fcn.0040257a
cmp dword [ebp - 0x68], 8
lea eax, [ebp - 0x7c]
push 1
cmovae eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0xc8]
push eax
push str.InstallDate
call fcn.00492d3e
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 1
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xc8]
push eax
push str.QuietUninstallString
call fcn.00492d3e
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 1
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xc8]
push eax
push str.UninstallString
call fcn.00492d3e
push str.http:__chistilka.com
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
pop ecx
lea eax, [eax*2 + 2]
push eax
push str.http:__chistilka.com
push 1
push ebx
push str.URLUpdateInfo
push esi
call edi
push str.http:__chistilka.com
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
pop ecx
lea eax, [eax*2 + 2]
push eax
push str.http:__chistilka.com
push 1
push ebx
push str.URLInfoAbout
push esi
call edi
push 4
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], 1
push eax
push 4
push ebx
push str.NoModify
push esi
call edi
push 4
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], 1
push eax
push 4
push ebx
push str.NoRepair
push esi
call edi
lea ecx, [ebp - 0x7c]
mov bl, 1
call fcn.0040257a
lea ecx, [ebp - 0x28]
call fcn.0040257a
lea ecx, [ebp - 0xc8]
call fcn.004056f5
lea ecx, [ebp - 0x94]
call fcn.0040257a
lea ecx, [ebp - 0x4c]
call fcn.00403ae4
lea ecx, [ebp - 0x64]
call fcn.0040257a
mov al, bl
call fcn.00536508
ret