Function at 0x5815d0
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7a43d4
mov eax, dword fs:[0]
push eax
sub esp, 0x2a0
mov eax, dword [0x831184]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, edx
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x13c], ecx
xor esi, esi
xorps xmm0, xmm0
mov dword [ebp - 0x140], esi
xor edi, edi
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
push eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], edi
call fcn.00404120
cmp dword [ebp - 0x13c], 0x80000001
mov byte [ebp - 4], 1
jne 0x581705
call fcn.00465ef0
mov ecx, dword [eax + 0x60]
add eax, 0x64
mov dword [ebp - 0x130], ecx
lea ecx, [ebp - 0x12c]
push eax
call fcn.00404120
lea esi, [edi + 1]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x12c]
push 0x7cf384
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.00421b40
push dword [ebp - 0x138]
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1f4]
call fcn.00413520
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x138], eax
add esp, 0x10
cmp ecx, eax
je 0x5816e0
call fcn.00404490
mov eax, dword [ebp - 0x138]
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x24], xmm0
mov dword [eax + 0x10], edi
mov dword [eax + 0x14], 7
mov word [eax], cx
lea ecx, [ebp - 0x1f4]
call fcn.00404490
lea ecx, [ebp - 0x20c]
call fcn.00404490
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 1
call fcn.00404490
push ecx
push 0x7cf384
lea ecx, [ebp - 0x34]
call fcn.00428540
mov edx, eax
mov dword [ebp - 0x138], edx
cmp edx, 0xffffffff
jne 0x58172c
mov byte [ebp - 0x131], 0
jmp 0x581d0f
xor eax, eax
mov dword [ebp - 0x3c], 0
cmp dword [ebp - 0x24], edx
mov ecx, edx
mov word [ebp - 0x4c], ax
lea eax, [ebp - 0x34]
cmovb ecx, dword [ebp - 0x24]
cmp dword [ebp - 0x20], 8
push ecx
cmovae eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x4c]
push eax
mov dword [ebp - 0x38], 7
call fcn.004044f0
or esi, 2
mov edx, dword [ebp - 0x138]
xor eax, eax
mov byte [ebp - 4], 4
inc edx
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
cmp eax, edx
jb 0x581d43
sub eax, edx
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x64]
lea eax, [eax + edx*2]
push eax
call fcn.004044f0
or esi, 4
mov edi, dword [ebp - 0x13c]
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
cmp dword [ebp - 0x38], 8
push 0xf003f
cmovae eax, dword [ebp - 0x4c]
push eax
push edi
call fcn.0057dd00
test eax, eax
je 0x581972
cmp dword [ebp - 0x38], 8
lea eax, [ebp - 0x4c]
push 0xf013f
cmovae eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
push eax
push edi
call fcn.0057dd00
test eax, eax
je 0x581972
push 0xb0
lea eax, [ebp - 0x114]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x114], 0x7d6f90
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x104], 0x7d7228
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::constructor_void_]
push 0
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 6
or esi, 8
lea ecx, [ebp - 0x114]
push eax
mov dword [ebp - 0x140], esi
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_iostream_wchar_t__struct_std::char_traits_wchar_t__::constructor_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t____]
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0x114]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x114], 0x7c81a4
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x118], eax
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::constructor_void_]
mov dword [ebp - 0xfc], 0x7c8164
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
lea eax, [ebp - 0x1c0]
mov byte [ebp - 4], 8
push eax
call fcn.00581030
mov ecx, eax
call fcn.00403e20
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.00404740
add esp, 8
call fcn.004345f0
mov edi, eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.00581d50
mov ecx, eax
call fcn.00403e20
mov esi, eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.0057fd40
mov ecx, eax
call fcn.00403e20
lea ecx, [ebp - 0x114]
push ecx
push esi
push 0x24f
push eax
push 0
mov ecx, edi
call fcn.00469f50
mov eax, dword [ebp - 0x114]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x114], 0x7c81a4
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x118], eax
lea ecx, [ebp - 0xfc]
call fcn.004073e0
lea ecx, [ebp - 0xf4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_wchar_t__struct_std::char_traits_wchar_t__::destructor_void_]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void_]
mov byte [ebp - 0x131], 0
jmp 0x581cfc
cmp dword [ebp - 0x50], 8
lea eax, [ebp - 0x64]
cmovae eax, dword [ebp - 0x64]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
je 0x581cf5
cmp dword [ebp - 0x38], 8
lea eax, [ebp - 0x4c]
push 0xf013f
cmovae eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
push eax
push edi
call fcn.0057dd00
test eax, eax
jne 0x581ae6
cmp dword [ebp - 0x50], 8
lea eax, [ebp - 0x64]
cmovae eax, dword [ebp - 0x64]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
je 0x581cf5
push 0xb0
lea eax, [ebp - 0x114]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x114], 0x7d6f90
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x104], 0x7d7228
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::constructor_void_]
push 0
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 9
or esi, 0x10
lea ecx, [ebp - 0x114]
push eax
mov dword [ebp - 0x140], esi
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_iostream_wchar_t__struct_std::char_traits_wchar_t__::constructor_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t____]
mov dword [ebp - 4], 0xa
mov eax, dword [ebp - 0x114]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x114], 0x7c81a4
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x118], eax
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::constructor_void_]
mov dword [ebp - 0xfc], 0x7c8164
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
lea eax, [ebp - 0x1bc]
mov byte [ebp - 4], 0xb
push eax
call fcn.00581e90
mov ecx, eax
call fcn.00403e20
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.00404740
add esp, 8
call fcn.004345f0
mov edi, eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.00581f80
mov ecx, eax
call fcn.00403e20
mov esi, eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.0057fd40
mov ecx, eax
call fcn.00403e20
lea ecx, [ebp - 0x114]
push ecx
push esi
push 0x25c
jmp 0x581cd7
push 0xb0
lea eax, [ebp - 0x114]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x114], 0x7d6f90
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x104], 0x7d7228
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::constructor_void_]
push 0
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0xc
or esi, 0x20
lea ecx, [ebp - 0x114]
push eax
mov dword [ebp - 0x140], esi
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_iostream_wchar_t__struct_std::char_traits_wchar_t__::constructor_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t____]
mov dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x114]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x114], 0x7c81a4
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x118], eax
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::constructor_void_]
mov dword [ebp - 0xfc], 0x7c8164
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], 0x2a
mov dword [ebp - 0x198], 0xd800ec
mov dword [ebp - 0x194], 0xc300d9
mov dword [ebp - 0x190], 0x9400df
mov dword [ebp - 0x18c], 0xdb008f
mov dword [ebp - 0x188], 0xcb00d4
mov dword [ebp - 0x184], 0xf0009d
mov dword [ebp - 0x180], 0xda00d0
mov dword [ebp - 0x17c], 0xcc00d2
mov dword [ebp - 0x178], 0xec00dc
mov dword [ebp - 0x174], 0xd000da
mov dword [ebp - 0x170], 0xdb00c8
mov dword [ebp - 0x16c], 0xb60097
mov dword [ebp - 0x168], 0xae00a0
mov dword [ebp - 0x164], 0xa100b6
mov dword [ebp - 0x160], 0xa7008b
mov dword [ebp - 0x15c], 0xad00aa
mov dword [ebp - 0x158], 0xa900e7
mov dword [ebp - 0x154], 0xbf0094
mov dword [ebp - 0x150], 0xbc00b9
mov dword [ebp - 0x14c], 0xf900e7
mov dword [ebp - 0x148], 0xe900f8
mov dword [ebp - 0x144], 0xd3
call fcn.00403e20
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.00404740
add esp, 8
call fcn.004345f0
mov edi, eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.005820c0
mov ecx, eax
call fcn.00403e20
mov esi, eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.0057fd40
mov ecx, eax
call fcn.00403e20
lea ecx, [ebp - 0x114]
push ecx
push esi
push 0x262
push eax
push 0
mov ecx, edi
call fcn.00469f50
lea ecx, [ebp - 0x114]
call fcn.00406480
mov byte [ebp - 0x131], 0
jmp 0x581cfc
mov byte [ebp - 0x131], 1
lea ecx, [ebp - 0x64]
call fcn.00404490
lea ecx, [ebp - 0x4c]
call fcn.00404490
mov edi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x34]
call fcn.00404490
test edi, edi
je 0x581d22
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, byte [ebp - 0x131]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0076eb7e
mov esp, ebp
pop ebp
ret
call fcn.004046a0
int3