Function at 0x1000a720
Capabilities:
Check if file exists
Delete file
Delete registry key
Delete registry value
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003bc26
mov eax, dword fs:[0]
push eax
sub esp, 0x224
mov eax, dword [0x1004f0a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.10025160
call fcn.10024e30
push 0
call fcn.10025380
add esp, 4
mov ecx, 0x10051264
call fcn.1001b4a0
push eax
lea ecx, [ebp - 0x22c]
call fcn.100077d0
mov eax, dword [ebp - 0x22c]
push 0
push 0xf003f
push eax
push SysReAllocString
mov dword [ebp - 4], 0
call fcn.1001dc20
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x10
push 0x100418d4
call edi
push 0x100418d4
push eax
lea ecx, [ebp - 0x22c]
call fcn.10002360
mov ecx, 0x10051284
call fcn.1001b4a0
mov esi, eax
test esi, esi
je 0x1000a7cb
push esi
call edi
push esi
push eax
lea ecx, [ebp - 0x22c]
call fcn.10002360
mov ecx, dword [ebp - 0x22c]
push 0
push 0xf003f
push ecx
push SysReAllocString
call fcn.1001dc20
mov edi, dword [ebp + 8]
add esp, 0x10
test edi, edi
jne 0x1000a803
push edi
call fcn.10024ed0
add esp, 4
xor edx, edx
test edi, edi
sete dl
push 1
mov esi, edx
push esi
push 0
call fcn.10009ba0
push 1
push 1
push 8
call fcn.10009ba0
push 1
push esi
push 0xc
call fcn.10009ba0
push 1
push 0
push 0x13
call fcn.10009ba0
push 0xa
call fcn.10028c60
push 0xe
call fcn.10028c60
push 0xf
call fcn.10028c60
push 1
push 0
push 3
call fcn.10009ba0
add esp, 0x48
push 3
call fcn.10028b50
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x216]
push ecx
mov word [ebp - 0x218], ax
call fcn.1000ae30
add esp, 0x10
push 0x104
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0xc
call fcn.10028ab0
add esp, 4
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x104
lea ecx, [ebp - 0x218]
push 0x100420e0
push ecx
call fcn.1001e290
lea edx, [ebp - 0x218]
push edx
call fcn.1001c920
add esp, 0x10
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000a8eb
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.1000a0e0
call fcn.1000a1b0
test edi, edi
jne 0x1000a903
call fcn.10009d80
call fcn.10009e00
mov ecx, 0x10051364
call fcn.1001b4a0
push eax
mov ecx, 0x100511e4
call fcn.1001b4a0
mov esi, dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
mov ecx, 0x10051374
call fcn.1001b4a0
push eax
mov ecx, 0x100511e4
call fcn.1001b4a0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
push str.Install
mov ecx, 0x100511e4
call fcn.1001b4a0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
push str.InstallType
mov ecx, 0x100511e4
call fcn.1001b4a0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
mov ecx, 0x10051294
call fcn.1001b4a0
push eax
call fcn.10023f10
push eax
call fcn.10023f00
push eax
call esi
call fcn.1001d960
mov esi, dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
test eax, eax
je 0x1000a9ab
mov ecx, 0x10051354
call fcn.1001b4a0
push eax
push SysReAllocString
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test edi, edi
jne 0x1000ab55
call fcn.1000a380
push 2
mov ecx, 0x10053e48
call fcn.10027e40
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x216]
push eax
mov word [ebp - 0x218], dx
call fcn.1000ae30
add esp, 0xc
call fcn.1001d960
test eax, eax
je 0x1000aa1a
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push 6
call fcn.10023c60
add esp, 0xc
test eax, eax
je 0x1000aa1a
lea edx, [ebp - 0x218]
push edx
call fcn.10009f10
add esp, 4
call fcn.1001d960
test eax, eax
je 0x1000aa31
call fcn.10023f10
push eax
call fcn.10023f00
push eax
call esi
mov ecx, dword [0x1004223c]
mov eax, dword [0x10042238]
mov edx, dword [0x10042240]
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x228], eax
mov eax, dword [0x10042244]
lea ecx, [ebp - 0x230]
push ecx
mov dword [ebp - 0x220], edx
mov dword [ebp - 0x21c], eax
call fcn.1001fa30
add esp, 4
mov eax, dword [ebp - 0x230]
mov byte [ebp - 4], 1
test eax, eax
jne 0x1000ab95
xor edi, edi
lea edx, [ebp - 0x228]
push edx
push edi
call dword [sym.imp.ole32.dll_CLSIDFromString]
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [ebp - 0x228]
push eax
call fcn.1001e0d0
push 0x10041dd0
call fcn.1001e0d0
push 0x10041df0
call fcn.1001e0d0
push 0x10041de0
call fcn.1001e1f0
add esp, 0x10
mov ecx, 0x100512c4
call fcn.1001b4a0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
mov ecx, 0x100511e4
call fcn.1001b4a0
push eax
push SysReAllocString
call esi
mov ecx, 0x100511e4
call fcn.1001b4a0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
mov ecx, 0x100512c4
call fcn.1001b4a0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
mov ecx, 0x100511f4
call fcn.1001b4a0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
push 2
call fcn.1002deee
mov eax, dword [ebp - 0x230]
lea ecx, [eax - 0xc]
add esp, 4
cmp ecx, dword [0x10050de4]
je 0x1000ab55
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x1000ab55
mov edx, dword [ebp - 0x230]
add edx, 0xfffffff4
push edx
call fcn.1000b015
add esp, 4
mov esi, dword [ebp - 0x22c]
lea eax, [esi - 0xc]
cmp eax, dword [0x10050de4]
je 0x1000ab79
add esi, 0xfffffff4
push esi
call ebx
test eax, eax
jg 0x1000ab79
push esi
call fcn.1000b015
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000ae1e
mov esp, ebp
pop ebp
ret
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
test edi, edi
jne 0x1000aa82
push 0x8007000e
call fcn.10001e60
int3