Function at 0x107b2db
Capabilities:
Delete registry value

Disassembly:
mov eax, 0x109a709
call fcn.01077478
sub esp, 0x24
mov eax, dword [0x10a6184]
push ebx
push esi
mov esi, 0x10a6184
cmp eax, esi
push edi
mov edi, ecx
je 0x107b319
test byte [eax + 0x1c], 1
je 0x107b319
cmp byte [eax + 0x19], 5
jb 0x107b319
push 0x1008128
push 0xc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
mov ecx, dword [ebp + 0xc]
call fcn.0100a99f
xor ebx, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov eax, dword [edi]
lea ecx, [ebp - 0x30]
push ecx
mov ecx, edi
mov dword [ebp - 4], ebx
call dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x107b36e
test byte [eax + 0x1c], 2
je 0x107b36e
cmp byte [eax + 0x19], 4
jb 0x107b36e
push dword [ebp - 0x10]
mov edi, 0x1008128
push edi
push 0xd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009b3f
mov eax, dword [0x10a6184]
jmp 0x107b373
mov edi, 0x1008128
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x10], ebx
mov byte [ebp - 4], 1
jne 0x107b488
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
call fcn.01079b9f
mov dword [ebp - 0x10], eax
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x107b3c3
test byte [eax + 0x1c], 2
je 0x107b3c3
cmp byte [eax + 0x19], 4
jb 0x107b3c3
push dword [ebp - 0x10]
push edi
push 0xe
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009b3f
mov eax, dword [0x10a6184]
cmp dword [ebp - 0x10], ebx
jne 0x107b488
cmp dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
jle 0x107b488
push dword [ebp - 0x14]
lea ecx, [ebp - 0x24]
call fcn.01060033
push eax
lea ecx, [ebp - 0x18]
call fcn.0100a517
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.01061496
cmp eax, 0xffffffff
mov ebx, dword [ebp - 0x18]
jne 0x107b437
mov eax, dword [ebp + 8]
push ebx
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov ecx, dword [0x10a6184]
cmp ecx, esi
je 0x107b468
test byte [ecx + 0x1c], 2
je 0x107b468
cmp byte [ecx + 0x19], 4
jb 0x107b468
push eax
push edi
push 0xf
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.01009b3f
jmp 0x107b468
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
call fcn.01064274
mov ecx, dword [0x10a6184]
cmp ecx, esi
je 0x107b468
test byte [ecx + 0x1c], 2
je 0x107b468
cmp byte [ecx + 0x19], 4
jb 0x107b468
push eax
push edi
push 0x10
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.01009b3f
lea ecx, [ebx - 0x10]
mov byte [ebp - 4], 1
call fcn.01009cd1
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x1c]
jl 0x107b3d8
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x107b4b8
test byte [eax + 0x1c], 1
je 0x107b4b8
mov edx, dword [ebp - 0x10]
movzx ecx, byte [eax + 0x19]
neg edx
sbb edx, edx
and edx, 0xfffffffd
add edx, 5
cmp ecx, edx
jl 0x107b4b8
push dword [ebp - 0x10]
push edi
push 0x11
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009b3f
lea ecx, [ebp - 0x24]
call fcn.0100a9de
lea ecx, [ebp - 0x30]
call fcn.0100a99f
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8