Function at 0x508d70
Capabilities:
Delete registry key

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0xc34
push ebx
mov ebx, dword [esp + 0xc44]
cmp word [ebx], 0
push ebp
push esi
push edi
push eax
mov esi, 0x104
lea edi, [esp + 0x838]
jne 0x508da7
push str._extfind__s____L_
call fcn.004af0d0
add esp, 8
jmp 0x508db5
push ebx
push str.__s___extfind__s____L_
call fcn.004af0d0
add esp, 0xc
mov eax, dword [esp + 0xc4c]
push eax
push str.SoftwareClasses._s
mov esi, 0x104
lea edi, [esp + 0x42c]
call fcn.004af0d0
add esp, 8
lea ecx, [esp + 0x21c]
push ecx
push 0x6bc0cc
push 0
mov ecx, edi
mov edx, SysReAllocStringLen
call fcn.004af7e0
cmp word [esp + 0x21c], 0
mov ebp, dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
je 0x508f69
lea edx, [esp + 0x21c]
push edx
push str.SoftwareClasses_s_shellopencommand
lea edi, [esp + 0x1c]
call fcn.004af0d0
add esp, 8
lea eax, [esp + 0x62c]
push eax
push 0x6bc0cc
push 0
mov ecx, edi
mov edx, SysReAllocStringLen
call fcn.004af7e0
lea ecx, [esp + 0x834]
push ecx
lea edx, [esp + 0x630]
push edx
call fcn.0069c886
add esp, 8
test eax, eax
je 0x508f69
lea eax, [esp + 0x21c]
push eax
push str.SoftwareClasses_s_shell
call fcn.004af0d0
add esp, 8
push 0
push SysReAllocStringLen
mov esi, 0x6bc0cc
mov edx, edi
call fcn.004af710
lea ecx, [esp + 0x21c]
push ecx
push str.SoftwareClasses_s_shellopen
mov esi, 0x104
call fcn.004af0d0
add esp, 8
cmp word [esp + 0x14], 0
je 0x508eae
mov edx, edi
push edx
push SysReAllocStringLen
call ebp
lea eax, [esp + 0x21c]
push eax
push str.SoftwareClasses_s
lea edi, [esp + 0x1c]
call fcn.004af0d0
add esp, 8
push 0
push SysReAllocStringLen
mov esi, 0x6bc0cc
mov edx, edi
call fcn.004af710
lea ecx, [esp + 0x21c]
push ecx
push str.SoftwareClasses_sDefaultIcon
mov esi, 0x104
call fcn.004af0d0
add esp, 8
cmp word [esp + 0x14], 0
je 0x508f06
mov edx, edi
push edx
push SysReAllocStringLen
call ebp
lea eax, [esp + 0x21c]
push eax
push str.SoftwareClasses_s_shell
lea edx, [esp + 0x1c]
call fcn.00401000
add esp, 8
lea ecx, [esp + 0x10]
push ecx
push 1
push 0
lea edx, [esp + 0x20]
push edx
push SysReAllocStringLen
mov dword [esp + 0x24], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x508f51
lea esi, [esp + 0x10]
call fcn.004965a0
test al, al
jne 0x508f69
push 0
push SysReAllocStringLen
mov esi, 0x6bc0cc
lea edx, [esp + 0x42c]
call fcn.004af710
lea eax, [esp + 0x21c]
push eax
push 0x6bc0cc
push 0
lea ecx, [esp + 0x430]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.004af7e0
cmp word [esp + 0x21c], 0
je 0x5090d9
lea ecx, [esp + 0x21c]
push ecx
push str.SoftwareClasses_s_shellopencommand
mov esi, 0x104
lea edi, [esp + 0x1c]
call fcn.004af0d0
add esp, 8
lea edx, [esp + 0x62c]
push edx
push 0x6bc0cc
push 0
mov ecx, edi
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.004af7e0
lea eax, [esp + 0x834]
push eax
lea ecx, [esp + 0x630]
push ecx
call fcn.0069c886
add esp, 8
test eax, eax
je 0x509071
lea edx, [esp + 0x21c]
push edx
push str.SoftwareClasses_s_shell
call fcn.004af0d0
add esp, 8
push 0
push reloc.OLEAUT32.dll_SysReAllocString
mov esi, 0x6bc0cc
mov edx, edi
call fcn.004af710
lea eax, [esp + 0x21c]
push eax
push str.SoftwareClasses_s_shellopen
mov esi, 0x104
call fcn.004af0d0
add esp, 8
cmp word [esp + 0x14], 0
je 0x509045
mov ecx, edi
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call ebp
lea edx, [esp + 0x21c]
push edx
push str.SoftwareClasses_s
lea edi, [esp + 0x1c]
call fcn.004af0d0
add esp, 8
push 0
push reloc.OLEAUT32.dll_SysReAllocString
mov esi, 0x6bc0cc
mov edx, edi
call fcn.004af710
lea eax, [esp + 0x21c]
push eax
push str.SoftwareClasses_sDefaultIcon
mov esi, 0x104
lea edi, [esp + 0x1c]
call fcn.004af0d0
add esp, 8
lea ecx, [esp + 0xa3c]
push ecx
push 0x6bc0cc
push 0
mov ecx, edi
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.004af7e0
cmp word [ebx], 0
je 0x5090c5
lea edx, [esp + 0xa3c]
push ebx
push edx
call fcn.0069c886
add esp, 8
test eax, eax
je 0x5090d9
cmp word [esp + 0x14], 0
je 0x5090d9
lea eax, [esp + 0x14]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc34
ret 0xc