Function at 0x2e00d1aa
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2248
call fcn.2e0044f0
mov eax, dword [0x2e006e74]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
and dword [ebp - 0x221c], 0
and dword [ebp - 0x2218], 0
push ebx
push esi
mov dword [ebp - 0x2214], eax
mov eax, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x2210], ecx
mov dword [ebp - 0x2244], eax
jmp 0x2e00d6ee
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x2e00d780
push edi
mov dword [ebp - 0x2228], 1
call esi
mov ebx, eax
neg ebx
push 0x2e00d7a4
sbb ebx, ebx
push edi
inc ebx
call esi
test eax, eax
je 0x2e00d225
test ebx, ebx
je 0x2e00d2e8
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b6df
mov esi, eax
test esi, esi
jl 0x2e00d761
cmp dword [ebp + 0x10], 0
je 0x2e00d2e8
push 0x5c
xor esi, esi
push edi
mov dword [ebp - 0x2224], esi
mov dword [ebp - 0x2220], esi
call fcn.2e00b668
test eax, eax
jne 0x2e00d705
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b7ed
test eax, eax
je 0x2e00d29d
mov eax, dword [ebp - 0x2214]
push edi
lea ecx, [ebp - 0x2224]
mov dword [ebp - 0x2224], eax
mov dword [ebp - 0x2220], esi
call fcn.2e00bbc2
mov dword [ebp - 0x2224], esi
mov dword [ebp - 0x2220], esi
cmp ebx, esi
je 0x2e00d2dd
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b6df
mov esi, eax
test esi, esi
jl 0x2e00d717
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b881
lea ecx, [ebp - 0x2224]
mov esi, eax
call fcn.2e00b29e
test esi, esi
jge 0x2e00d6b3
jmp 0x2e00d761
lea ecx, [ebp - 0x2224]
call fcn.2e00b29e
push 0x2e00d790
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x2e00d314
mov ecx, dword [ebp - 0x2210]
and dword [ebp - 0x2228], eax
push edi
call fcn.2e00b6df
mov esi, eax
test esi, esi
jl 0x2e00d761
push 0x2e00d7bc
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x2e00d42f
mov ecx, dword [ebp - 0x2210]
lea eax, [ebp - 0x220c]
push eax
call fcn.2e00b6df
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jl 0x2e00d761
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b6df
mov esi, eax
cmp esi, ebx
jl 0x2e00d761
cmp word [edi], 0x3d
jne 0x2e00d710
cmp dword [ebp + 0x10], ebx
je 0x2e00d3b7
mov eax, dword [ebp - 0x2214]
mov ecx, dword [ebp - 0x2210]
mov dword [ebp - 0x2240], eax
push edi
lea eax, [ebp - 0x220c]
push eax
lea eax, [ebp - 0x2240]
push eax
mov dword [ebp - 0x223c], ebx
call fcn.2e00cebe
lea ecx, [ebp - 0x2240]
mov esi, eax
mov dword [ebp - 0x2240], ebx
mov dword [ebp - 0x223c], ebx
call fcn.2e00b29e
cmp esi, ebx
jmp 0x2e00d2d2
cmp dword [ebp + 0x14], ebx
jne 0x2e00d41a
cmp dword [ebp - 0x2228], ebx
je 0x2e00d41a
push 0x20006
push ebx
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2230]
mov dword [ebp - 0x2230], ebx
mov dword [ebp - 0x222c], ebx
call fcn.2e00b313
cmp eax, ebx
jne 0x2e00d71f
lea eax, [ebp - 0x220c]
push eax
push dword [ebp - 0x2230]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp eax, ebx
je 0x2e00d40f
cmp eax, 2
jne 0x2e00d71f
lea ecx, [ebp - 0x2230]
call fcn.2e00b29e
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b881
mov esi, eax
cmp esi, ebx
jmp 0x2e00d6f8
push 0x5c
push edi
call fcn.2e00b668
test eax, eax
jne 0x2e00d710
cmp dword [ebp + 0x10], eax
je 0x2e00d4de
mov esi, 0x2001f
push esi
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x221c]
call fcn.2e00b313
test eax, eax
je 0x2e00d4a2
push 0x20019
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x221c]
call fcn.2e00b313
test eax, eax
je 0x2e00d4a2
xor ebx, ebx
push ebx
push ebx
push esi
push ebx
push ebx
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x221c]
call fcn.2e00b2b9
mov esi, eax
cmp esi, ebx
jne 0x2e00d72d
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b6df
mov esi, eax
test esi, esi
jl 0x2e00d761
cmp word [edi], 0x3d
jne 0x2e00d6b3
mov ecx, dword [ebp - 0x2210]
push edi
push 0
lea eax, [ebp - 0x221c]
push eax
call fcn.2e00cebe
mov esi, eax
jmp 0x2e00d2d0
cmp dword [ebp + 0x14], 0
jne 0x2e00d4ff
push 0x20019
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x221c]
call fcn.2e00b313
mov ebx, eax
jmp 0x2e00d502
push 2
pop ebx
test ebx, ebx
je 0x2e00d50d
mov dword [ebp + 0x14], 1
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x20c]
push 0x104
push eax
call dword [sym.imp.MSVCR90.dll_wcsncpy_s]
add esp, 0x10
push eax
call fcn.2e004c80
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b6df
mov esi, eax
test esi, esi
jl 0x2e00d761
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b881
mov esi, eax
test esi, esi
jl 0x2e00d761
cmp word [edi], 0x7b
jne 0x2e00d5a6
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x2e00d5a6
push dword [ebp + 0x14]
mov ecx, dword [ebp - 0x2210]
push 0
push dword [ebp - 0x221c]
push edi
call fcn.2e00d1aa
mov esi, eax
test esi, esi
jge 0x2e00d590
cmp dword [ebp + 0x14], 0
je 0x2e00d761
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b6df
mov esi, eax
test esi, esi
jl 0x2e00d761
mov eax, dword [ebp - 0x2244]
mov dword [ebp + 0x14], eax
cmp ebx, 2
je 0x2e00d6fa
test ebx, ebx
je 0x2e00d5d1
test eax, eax
jne 0x2e00d6fa
push ebx
call fcn.2e00b140
mov esi, eax
jmp 0x2e00d761
test eax, eax
je 0x2e00d628
push dword [ebp - 0x221c]
mov ecx, dword [ebp - 0x2210]
call fcn.2e00b84c
test eax, eax
je 0x2e00d628
mov ecx, dword [ebp - 0x2210]
lea eax, [ebp - 0x20c]
push eax
call fcn.2e00b7ed
test eax, eax
je 0x2e00d6fa
cmp dword [ebp - 0x2228], 0
je 0x2e00d6fa
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x221c]
call fcn.2e00bbc2
jmp 0x2e00d6fa
push dword [ebp - 0x221c]
mov ecx, dword [ebp - 0x2210]
call fcn.2e00b84c
lea ecx, [ebp - 0x221c]
mov dword [ebp - 0x2248], eax
call fcn.2e00b29e
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x2e00d740
cmp dword [ebp - 0x2228], eax
je 0x2e00d6fa
cmp dword [ebp - 0x2248], eax
jne 0x2e00d6fa
mov ecx, dword [ebp - 0x2214]
mov dword [ebp - 0x2234], eax
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x2238], ecx
push eax
lea ecx, [ebp - 0x2238]
call fcn.2e00b217
and dword [ebp - 0x2238], 0
and dword [ebp - 0x2234], 0
test eax, eax
jne 0x2e00d74e
lea ecx, [ebp - 0x2238]
call fcn.2e00b29e
cmp dword [ebp + 0x10], 0
je 0x2e00d6fa
cmp word [edi], 0x7b
jne 0x2e00d6fa
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x2e00d6fa
mov ecx, dword [ebp - 0x2210]
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x221c]
push edi
call fcn.2e00d1aa
mov esi, eax
test esi, esi
jl 0x2e00d761
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.2e00b6df
mov esi, eax
test esi, esi
jl 0x2e00d761
cmp word [edi], 0x7d
je 0x2e00d761
jmp 0x2e00d1f2
lea ecx, [ebp - 0x2224]
call fcn.2e00b29e
mov esi, 0x80020009
jmp 0x2e00d761
lea ecx, [ebp - 0x2224]
jmp 0x2e00d75c
push eax
call fcn.2e00b140
lea ecx, [ebp - 0x2230]
jmp 0x2e00d75a
lea ecx, [ebp - 0x221c]
call fcn.2e00b29e
push esi
call fcn.2e00b140
jmp 0x2e00d76e
lea ecx, [ebp - 0x221c]
call fcn.2e00b29e
push ebx
jmp 0x2e00d739
push eax
call fcn.2e00b140
lea ecx, [ebp - 0x2238]
mov esi, eax
call fcn.2e00b29e
lea ecx, [ebp - 0x221c]
call fcn.2e00b29e
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.2e005b14
leave
ret 0x10