Function at 0x3007cc98
Capabilities:
Delete registry key
Delete registry value

Disassembly:
push 0x42c
mov eax, 0x300a6abc
call fcn.30086674
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
and dword [ebp - 0x42c], 0
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x434], eax
mov eax, dword [ebp + 0x14]
and dword [ebp - 4], 0
mov dword [ebp - 0x438], eax
jmp 0x3007d18f
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x30001538
push edi
mov dword [ebp - 0x430], 1
call esi
mov ebx, eax
neg ebx
push 0x3000155c
sbb ebx, ebx
push edi
inc ebx
call esi
test eax, eax
je 0x3007cd05
test ebx, ebx
je 0x3007cdb6
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007be29
mov esi, eax
test esi, esi
jl 0x3007d203
cmp dword [ebp + 0x10], 0
je 0x3007cdb6
and dword [ebp - 0x428], 0
push 0x5c
push edi
call fcn.3007bdb2
test eax, eax
jne 0x3007d1a7
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007bf2c
test eax, eax
je 0x3007cd6b
mov eax, dword [ebp - 0x434]
push edi
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x428], eax
call fcn.3007c0d2
and dword [ebp - 0x428], 0
test ebx, ebx
je 0x3007cdab
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007be29
mov esi, eax
test esi, esi
jl 0x3007d1b9
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007bf90
lea ecx, [ebp - 0x428]
mov esi, eax
call fcn.3007ba7d
test esi, esi
jl 0x3007d203
jmp 0x3007d154
lea ecx, [ebp - 0x428]
call fcn.3007ba7d
push 0x30001548
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x3007cde2
mov ecx, dword [ebp - 0x424]
and dword [ebp - 0x430], eax
push edi
call fcn.3007be29
mov esi, eax
test esi, esi
jl 0x3007d203
push 0x30001574
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x3007cef3
mov ecx, dword [ebp - 0x424]
lea eax, [ebp - 0x420]
push eax
call fcn.3007be29
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jl 0x3007d203
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007be29
mov esi, eax
cmp esi, ebx
jl 0x3007d203
cmp word [edi], 0x3d
jne 0x3007d1b2
cmp dword [ebp + 0x10], ebx
je 0x3007ce81
mov eax, dword [ebp - 0x434]
mov ecx, dword [ebp - 0x424]
mov dword [ebp - 0x430], eax
push edi
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x430]
push eax
mov byte [ebp - 4], 1
call fcn.3007c917
mov esi, eax
cmp esi, ebx
mov dword [ebp - 0x430], ebx
lea ecx, [ebp - 0x430]
jl 0x3007d1fe
mov byte [ebp - 4], bl
jmp 0x3007d14f
cmp dword [ebp + 0x14], ebx
jne 0x3007cede
cmp dword [ebp - 0x430], ebx
je 0x3007cede
push 0x20006
push ebx
push dword [ebp - 0x434]
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x428], ebx
call fcn.3007bae2
cmp eax, ebx
jne 0x3007d1c1
lea eax, [ebp - 0x420]
push eax
push dword [ebp - 0x428]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp eax, ebx
je 0x3007ced3
cmp eax, 2
jne 0x3007d1c1
lea ecx, [ebp - 0x428]
call fcn.3007ba7d
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007bf90
mov esi, eax
cmp esi, ebx
jmp 0x3007d199
push 0x5c
push edi
call fcn.3007bdb2
test eax, eax
jne 0x3007d1b2
cmp dword [ebp + 0x10], eax
je 0x3007cfa2
mov esi, 0x2001f
push esi
push edi
push dword [ebp - 0x434]
lea ecx, [ebp - 0x42c]
call fcn.3007bae2
test eax, eax
je 0x3007cf66
push 0x20019
push edi
push dword [ebp - 0x434]
lea ecx, [ebp - 0x42c]
call fcn.3007bae2
test eax, eax
je 0x3007cf66
xor ebx, ebx
push ebx
push ebx
push esi
push ebx
push ebx
push edi
push dword [ebp - 0x434]
lea ecx, [ebp - 0x42c]
call fcn.3007ba94
mov esi, eax
cmp esi, ebx
jne 0x3007d1cf
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007be29
mov esi, eax
test esi, esi
jl 0x3007d203
cmp word [edi], 0x3d
jne 0x3007d154
mov ecx, dword [ebp - 0x424]
push edi
push 0
lea eax, [ebp - 0x42c]
push eax
call fcn.3007c917
mov esi, eax
jmp 0x3007cd9e
cmp dword [ebp + 0x14], 0
jne 0x3007cfc3
push 0x20019
push edi
push dword [ebp - 0x434]
lea ecx, [ebp - 0x42c]
call fcn.3007bae2
mov ebx, eax
jmp 0x3007cfc6
push 2
pop ebx
test ebx, ebx
je 0x3007cfd1
mov dword [ebp + 0x14], 1
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x218]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcsncpy_s]
add esp, 0x10
push eax
call fcn.3001b6c5
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007be29
mov esi, eax
test esi, esi
jl 0x3007d203
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007bf90
mov esi, eax
test esi, esi
jl 0x3007d203
cmp word [edi], 0x7b
jne 0x3007d06a
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x3007d06a
push dword [ebp + 0x14]
mov ecx, dword [ebp - 0x424]
push 0
push dword [ebp - 0x42c]
push edi
call fcn.3007cc98
mov esi, eax
test esi, esi
jge 0x3007d054
cmp dword [ebp + 0x14], 0
je 0x3007d203
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007be29
mov esi, eax
test esi, esi
jl 0x3007d203
cmp ebx, 2
mov eax, dword [ebp - 0x438]
mov dword [ebp + 0x14], eax
je 0x3007d19b
test ebx, ebx
je 0x3007d095
test eax, eax
jne 0x3007d19b
push ebx
call fcn.3007b9c7
mov esi, eax
jmp 0x3007d203
test eax, eax
je 0x3007d0ec
push dword [ebp - 0x42c]
mov ecx, dword [ebp - 0x424]
call fcn.3007bf5b
test eax, eax
je 0x3007d0ec
mov ecx, dword [ebp - 0x424]
lea eax, [ebp - 0x218]
push eax
call fcn.3007bf2c
test eax, eax
je 0x3007d19b
cmp dword [ebp - 0x430], 0
je 0x3007d19b
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x42c]
call fcn.3007c0d2
jmp 0x3007d19b
push dword [ebp - 0x42c]
mov ecx, dword [ebp - 0x424]
call fcn.3007bf5b
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x428], eax
call fcn.3007ba7d
mov ebx, eax
test ebx, ebx
jne 0x3007d1e2
cmp dword [ebp - 0x430], eax
je 0x3007d19b
cmp dword [ebp - 0x428], eax
jne 0x3007d19b
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x434]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
and dword [ebp - 0x430], ebx
test eax, eax
jne 0x3007d1f0
lea ecx, [ebp - 0x430]
call fcn.3007ba7d
cmp dword [ebp + 0x10], 0
je 0x3007d19b
cmp word [edi], 0x7b
jne 0x3007d19b
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x3007d19b
mov ecx, dword [ebp - 0x424]
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x42c]
push edi
call fcn.3007cc98
mov esi, eax
test esi, esi
jl 0x3007d203
mov ecx, dword [ebp - 0x424]
push edi
call fcn.3007be29
mov esi, eax
test esi, esi
jl 0x3007d203
cmp word [edi], 0x7d
jne 0x3007ccd2
jmp 0x3007d203
lea ecx, [ebp - 0x428]
call fcn.3007ba7d
mov esi, 0x80020009
jmp 0x3007d203
lea ecx, [ebp - 0x428]
jmp 0x3007d1fe
push eax
call fcn.3007b9c7
lea ecx, [ebp - 0x428]
jmp 0x3007d1fc
lea ecx, [ebp - 0x42c]
call fcn.3007ba7d
push esi
call fcn.3007b9c7
jmp 0x3007d210
lea ecx, [ebp - 0x42c]
call fcn.3007ba7d
push ebx
jmp 0x3007d1db
push eax
call fcn.3007b9c7
lea ecx, [ebp - 0x430]
mov esi, eax
call fcn.3007ba7d
lea ecx, [ebp - 0x42c]
call fcn.3007ba7d
mov eax, esi
call fcn.300866f7
ret 0x10