Function at 0x30076d24
Capabilities:
Delete registry key
Delete registry value

Disassembly:
push 0x430
mov eax, 0x300ecbd6
call fcn.30005a2f
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x42c], ebx
mov eax, dword [ebp + 0x14]
push 0xc
push 0x30077440
push 2
mov dword [ebp - 0x438], eax
lea eax, [ebp - 0x43c]
push ebx
push eax
mov dword [ebp - 4], ebx
call fcn.3002735c
mov ecx, dword [ebp - 0x424]
add esp, 0x14
push edi
call fcn.30075d47
mov esi, eax
cmp esi, ebx
jmp 0x300772c7
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x30077348
push edi
mov dword [ebp - 0x430], 1
call esi
mov ebx, eax
neg ebx
push 0x3007736c
sbb ebx, ebx
push edi
inc ebx
call esi
test eax, eax
je 0x30076dba
test ebx, ebx
je 0x30076e6b
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075d47
mov esi, eax
test esi, esi
jl 0x30077330
cmp dword [ebp + 0x10], 0
je 0x30076e6b
and dword [ebp - 0x428], 0
push 0x5c
push edi
call fcn.30075cd0
test eax, eax
jne 0x300772d4
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075e4a
test eax, eax
je 0x30076e20
mov eax, dword [ebp - 0x434]
push edi
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x428], eax
call fcn.3007601f
and dword [ebp - 0x428], 0
test ebx, ebx
je 0x30076e60
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075d47
mov esi, eax
test esi, esi
jl 0x300772e6
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075ee1
lea ecx, [ebp - 0x428]
mov esi, eax
call fcn.30072867
test esi, esi
jge 0x30077282
jmp 0x30077330
lea ecx, [ebp - 0x428]
call fcn.30072867
push 0x30077358
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x30076e97
mov ecx, dword [ebp - 0x424]
and dword [ebp - 0x430], eax
push edi
call fcn.30075d47
mov esi, eax
test esi, esi
jl 0x30077330
push 0x30077384
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x30076fc2
mov ecx, dword [ebp - 0x424]
lea eax, [ebp - 0x420]
push eax
call fcn.30075d47
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jl 0x30077330
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075d47
mov esi, eax
cmp esi, ebx
jl 0x30077330
cmp word [edi], 0x3d
jne 0x300772df
cmp dword [ebp + 0x10], ebx
je 0x30076f36
mov eax, dword [ebp - 0x434]
mov ecx, dword [ebp - 0x424]
mov dword [ebp - 0x430], eax
push edi
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x430]
push eax
mov byte [ebp - 4], 1
call fcn.3007687d
mov esi, eax
cmp esi, ebx
mov dword [ebp - 0x430], ebx
lea ecx, [ebp - 0x430]
jl 0x3007732b
mov byte [ebp - 4], bl
jmp 0x3007727d
cmp dword [ebp + 0x14], ebx
jne 0x30076fb1
cmp dword [ebp - 0x430], ebx
je 0x30076fb1
lea eax, [ebp - 0x420]
push eax
push 0x30077424
push 1
lea eax, [ebp - 0x43c]
push ebx
push eax
call fcn.3002735c
add esp, 0x14
push 0x20006
push ebx
push dword [ebp - 0x434]
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x428], ebx
call fcn.3007287e
cmp eax, ebx
jne 0x300772ee
lea eax, [ebp - 0x420]
push eax
push dword [ebp - 0x428]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp eax, ebx
je 0x30076fa6
cmp eax, 2
jne 0x300772ee
lea ecx, [ebp - 0x428]
call fcn.30072867
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075ee1
jmp 0x30076d7e
push 0x5c
push edi
call fcn.30075cd0
test eax, eax
jne 0x300772df
cmp dword [ebp + 0x10], eax
je 0x30077089
mov esi, 0x2001f
push esi
push edi
push dword [ebp - 0x434]
lea ecx, [ebp - 0x42c]
call fcn.3007287e
test eax, eax
je 0x3007704d
push 0x20019
push edi
push dword [ebp - 0x434]
lea ecx, [ebp - 0x42c]
call fcn.3007287e
test eax, eax
je 0x3007704d
push edi
push 0x30077400
push 2
xor ebx, ebx
lea eax, [ebp - 0x43c]
push ebx
push eax
call fcn.3002735c
add esp, 0x14
push ebx
push ebx
push esi
push ebx
push ebx
push edi
push dword [ebp - 0x434]
lea ecx, [ebp - 0x42c]
call fcn.30075963
mov esi, eax
cmp esi, ebx
jne 0x300772fc
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075d47
mov esi, eax
test esi, esi
jl 0x30077330
cmp word [edi], 0x3d
jne 0x30077282
mov ecx, dword [ebp - 0x424]
push edi
push 0
lea eax, [ebp - 0x42c]
push eax
call fcn.3007687d
mov esi, eax
jmp 0x30076e53
cmp dword [ebp + 0x14], 0
jne 0x300770aa
push 0x20019
push edi
push dword [ebp - 0x434]
lea ecx, [ebp - 0x42c]
call fcn.3007287e
mov ebx, eax
jmp 0x300770ad
push 2
pop ebx
test ebx, ebx
je 0x300770b8
mov dword [ebp + 0x14], 1
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x218]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcsncpy_s]
add esp, 0x10
push eax
call fcn.300727be
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075d47
mov esi, eax
test esi, esi
jl 0x30077330
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075ee1
mov esi, eax
test esi, esi
jl 0x30077330
cmp word [edi], 0x7b
jne 0x30077151
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x30077151
push dword [ebp + 0x14]
mov ecx, dword [ebp - 0x424]
push 0
push dword [ebp - 0x42c]
push edi
call fcn.30076d24
mov esi, eax
test esi, esi
jge 0x3007713b
cmp dword [ebp + 0x14], 0
je 0x30077330
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075d47
mov esi, eax
test esi, esi
jl 0x30077330
cmp ebx, 2
mov eax, dword [ebp - 0x438]
mov dword [ebp + 0x14], eax
je 0x300772c9
test ebx, ebx
je 0x3007717c
test eax, eax
jne 0x300772c9
push ebx
call fcn.30075886
mov esi, eax
jmp 0x30077330
test eax, eax
je 0x300771f2
push dword [ebp - 0x42c]
mov ecx, dword [ebp - 0x424]
call fcn.30075eac
test eax, eax
je 0x300771f2
mov ecx, dword [ebp - 0x424]
lea eax, [ebp - 0x218]
push eax
call fcn.30075e4a
test eax, eax
je 0x300772c9
cmp dword [ebp - 0x430], 0
je 0x300772c9
lea eax, [ebp - 0x218]
push eax
push 0x300773b0
push 0
lea eax, [ebp - 0x43c]
push 0
push eax
call fcn.3002735c
add esp, 0x14
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x42c]
call fcn.3007601f
jmp 0x300772c9
push dword [ebp - 0x42c]
mov ecx, dword [ebp - 0x424]
call fcn.30075eac
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x428], eax
call fcn.30072867
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x3007730f
cmp dword [ebp - 0x430], eax
je 0x300772c9
cmp dword [ebp - 0x428], eax
jne 0x300772c9
lea ecx, [ebp - 0x218]
push ecx
push 0x3007738c
push eax
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.3002735c
add esp, 0x14
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x434]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
and dword [ebp - 0x430], 0
test eax, eax
jne 0x3007731d
lea ecx, [ebp - 0x430]
call fcn.30072867
cmp dword [ebp + 0x10], 0
je 0x300772c9
cmp word [edi], 0x7b
jne 0x300772c9
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x300772c9
mov ecx, dword [ebp - 0x424]
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x42c]
push edi
call fcn.30076d24
mov esi, eax
test esi, esi
jl 0x30077330
mov ecx, dword [ebp - 0x424]
push edi
call fcn.30075d47
mov esi, eax
test esi, esi
jl 0x30077330
cmp word [edi], 0x7d
je 0x30077330
jmp 0x30076d87
lea ecx, [ebp - 0x428]
call fcn.30072867
mov esi, 0x80020009
jmp 0x30077330
lea ecx, [ebp - 0x428]
jmp 0x3007732b
push eax
call fcn.30075886
lea ecx, [ebp - 0x428]
jmp 0x30077329
lea ecx, [ebp - 0x42c]
call fcn.30072867
push esi
call fcn.30075886
jmp 0x3007733d
lea ecx, [ebp - 0x42c]
call fcn.30072867
push ebx
jmp 0x30077308
push eax
call fcn.30075886
lea ecx, [ebp - 0x430]
mov esi, eax
call fcn.30072867
lea ecx, [ebp - 0x42c]
call fcn.30072867
mov eax, esi
call fcn.30005a65
ret 0x10