Function at 0x300131d1
Capabilities:
Delete registry key

Disassembly:
push ebp
sub esp, 0xf8
lea ebp, [esp - 4]
mov eax, dword [0x3003a6b0]
xor eax, ebp
mov dword [ebp + 0xf8], eax
push 0x1c
mov eax, 0x3002d5cd
call fcn.300153d7
call fcn.30010c4f
test al, al
jne 0x30013489
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x3000eba4
mov edi, eax
call fcn.30017bcf
mov dword [esp], 0x3000eba4
call fcn.30017a70
mov dword [esp], 0x3000e9f0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0x8002
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
xor ebx, ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
push 3
call dword [sym.imp.libcurl.dll_curl_global_init]
pop ecx
call fcn.3000ea02
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.3000ead6
pop ecx
push ebx
push dword [ebp + 0x104]
mov ecx, 0x30042868
push ebx
call fcn.3000edb3
lea ecx, [ebp]
call fcn.3002af00
lea ecx, [ebp]
mov dword [ebp - 4], ebx
call fcn.3002a920
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.3002a8b0
lea eax, [ebp + 0xdc]
push eax
call fcn.30011d10
pop ecx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
sub eax, ecx
push 0x1c
cdq
pop esi
idiv esi
xor esi, esi
inc esi
mov byte [ebp - 4], 2
cmp eax, esi
jne 0x300133a9
push str.regChrome
call fcn.3000ee95
test eax, eax
jne 0x30013372
lea eax, [ebp + 0xa4]
push eax
call fcn.30011d70
pop ecx
push 0xa
push 0x30030ca8
lea ecx, [ebp + 0xc0]
mov byte [ebp - 4], 3
mov dword [ebp + 0xd4], 0xf
mov dword [ebp + 0xd0], ebx
mov byte [ebp + 0xc0], bl
call fcn.30003a20
lea eax, [ebp + 0x88]
push eax
mov byte [ebp - 4], 4
call fcn.30011481
lea ecx, [ebp + 0xa4]
push ecx
push eax
lea eax, [ebp + 0xc0]
push eax
lea eax, [ebp + 0xdc]
push eax
mov byte [ebp - 4], 5
call fcn.30011ed3
add esp, 0x14
push ebx
push esi
lea ecx, [ebp + 0x88]
call fcn.30001a80
push ebx
push esi
lea ecx, [ebp + 0xc0]
call fcn.30001a80
push ebx
push esi
lea ecx, [ebp + 0xa4]
call fcn.30001a80
jmp 0x30013468
mov ecx, dword [ebp - 0x28]
push str.unregChrome
call fcn.3000ee95
test eax, eax
jne 0x300133a9
cmp dword [ebp + 0xf0], 0x10
mov eax, dword [ebp + 0xdc]
jae 0x30013398
lea eax, [ebp + 0xdc]
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyA]
jmp 0x30013468
push 0x7d0
call fcn.30013170
pop ecx
lea ecx, [ebp - 0x11]
call fcn.3000cd68
lea ecx, [ebp - 0x11]
mov byte [ebp - 4], 6
call fcn.3000e7c6
push dword [ebp + 0x110]
mov byte [ebp - 4], 7
push edi
push dword [ebp + 0x104]
call fcn.30012218
add esp, 0xc
mov dword [ebp - 4], 6
jmp 0x300133fc
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, 0x30042868
call fcn.30010bd2
push 0x30033da4
push str.source
lea ecx, [ebp]
call fcn.3002a900
push eax
lea ecx, [ebp - 0x18]
call fcn.30003ca0
push str.installrun
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
call fcn.30003d60
test eax, eax
jne 0x30013443
call fcn.3000ea02
jmp 0x30013451
lea ecx, [ebp - 0x11]
call sub.WS2_32.dll_WSACleanup
call dword [sym.imp.libcurl.dll_curl_global_cleanup]
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.300021d0
lea ecx, [ebp - 0x11]
mov byte [ebp - 4], 2
call fcn.3000cd6b
push ebx
push esi
lea ecx, [ebp + 0xdc]
call fcn.30001a80
lea ecx, [ebp - 0x28]
call fcn.300020d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp]
call fcn.3002adf0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xf8]
xor ecx, ebp
call fcn.30014dbb
add ebp, 0xfc
leave
ret 0x10