Function at 0x1001126f
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10059adf
mov eax, dword fs:[0]
push eax
mov eax, 0x1a20
call fcn.1004f2f0
mov eax, dword [0x10077060]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19b0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x19bc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x19cc], eax
lea eax, [ebp - 0x1a10]
mov ebx, ecx
push eax
mov dword [ebp - 0x19c8], ebx
call fcn.1000fd8c
and dword [ebp - 4], 0
mov eax, dword [ebx + 0x18]
mov eax, dword [eax]
mov ecx, dword [ebx]
mov dword [ebp - 0x19ac], ecx
mov dword [ebp - 0x19a8], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x19b4], eax
mov eax, dword [ebx]
lea edi, [ebp - 0x19b8]
lea esi, [ebp - 0x19ac]
mov dword [ebp - 0x19b8], eax
call fcn.1000d610
test al, al
jne 0x100113ac
call fcn.1000f80e
mov ebx, dword [ebp - 0x19b0]
mov ecx, dword [ebx + 0x1c]
add ebx, 4
push eax
mov dword [ebp - 0x19c0], ecx
mov ecx, dword [ebx]
lea eax, [ebp - 0x19d4]
push eax
mov dword [ebp - 0x19c4], ecx
call fcn.100115bf
mov edi, eax
lea esi, [ebp - 0x19c4]
call fcn.1000d610
test al, al
je 0x1001137e
lea esi, [ebp - 0x19ac]
call fcn.1000f80e
mov ebx, dword [ebp - 0x19bc]
push eax
call fcn.10011681
push 0x198c
mov edi, eax
call fcn.1000f80e
add eax, 0x1c
push eax
push edi
call fcn.10042da0
add esp, 0xc
lea esi, [ebp - 0x19ac]
call fcn.1000f80e
push eax
lea eax, [ebp - 0x1a10]
push eax
lea ebx, [ebp - 0x19f0]
call fcn.10010171
call fcn.10011a4a
mov ebx, dword [ebp - 0x19c8]
jmp 0x100112e7
mov eax, dword [ebp - 0x19b0]
mov ecx, dword [eax + 0x1c]
mov ecx, dword [ecx]
add eax, 4
mov edx, dword [eax]
mov dword [ebp - 0x19b0], eax
mov dword [ebp - 0x19ac], edx
mov dword [ebp - 0x19a8], ecx
mov ecx, dword [eax + 0x18]
mov eax, dword [eax]
lea edi, [ebp - 0x19c4]
lea esi, [ebp - 0x19ac]
mov dword [ebp - 0x19c0], ecx
mov dword [ebp - 0x19c4], eax
call fcn.1000d610
test al, al
jne 0x10011539
call fcn.1000f80e
mov dword [ebp - 0x19bc], eax
push eax
mov eax, ebx
call fcn.10011e2b
mov ecx, dword [ebx + 0x18]
mov dword [ebp - 0x19b4], eax
mov eax, dword [ebx]
lea edi, [ebp - 0x19e4]
lea esi, [ebp - 0x19b8]
mov dword [ebp - 0x19b8], eax
mov dword [ebp - 0x19e0], ecx
mov dword [ebp - 0x19e4], eax
call fcn.1000d610
test al, al
jne 0x10011459
mov ecx, dword [ebp - 0x19b4]
mov eax, dword [ebp - 0x19bc]
add ecx, 0xc
call fcn.1000d8f5
test al, al
jne 0x10011459
mov eax, esi
jmp 0x10011470
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x19d8], eax
mov eax, dword [ebx]
mov dword [ebp - 0x19dc], eax
lea eax, [ebp - 0x19dc]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x19e8], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x19d0], eax
mov eax, dword [ebx]
lea edi, [ebp - 0x19ec]
lea esi, [ebp - 0x19d4]
mov dword [ebp - 0x19ec], ecx
mov dword [ebp - 0x19d4], eax
call fcn.1000d610
test al, al
je 0x10011523
mov edi, 0x198c
push edi
lea eax, [ebp - 0x19a4]
push 0
push eax
call fcn.10042870
add esp, 0xc
lea eax, [ebp - 0x19a4]
push eax
lea esi, [ebp - 0x19ac]
call fcn.1000f80e
mov ecx, eax
call fcn.1001093b
test eax, eax
je 0x10011523
lea eax, [ebp - 0x19a4]
push eax
lea esi, [ebp - 0x1a2c]
call fcn.10002030
mov ebx, dword [ebp - 0x19cc]
push edi
lea eax, [ebp - 0x19a4]
push eax
mov eax, esi
push eax
mov byte [ebp - 4], 1
call fcn.10011681
push eax
call fcn.10042da0
add esp, 0xc
push 0
push 1
mov byte [ebp - 4], 0
call fcn.1000233f
mov ebx, dword [ebp - 0x19c8]
lea esi, [ebp - 0x19ac]
call fcn.1000d700
mov eax, dword [ebp - 0x19b0]
jmp 0x100113ce
mov esi, dword [ebp - 0x19b0]
lea eax, [ebp - 0x1a10]
push eax
call fcn.1001158e
push str.Softwareprojonepodlp_software_
push reloc.WS2_32.dll_bind
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov ecx, ebx
call fcn.10010c1b
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1a10]
push eax
call fcn.1000f7e6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1004017c
leave
ret 0xc