Function at 0x1004a32
Capabilities:
Delete registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x225c
call fcn.010074b0
mov eax, dword [0x100906c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x2214], eax
mov eax, dword [ebp + 0x14]
push edi
mov dword [ebp - 0x2210], ecx
mov dword [ebp - 0x2220], ebx
mov dword [ebp - 0x221c], ebx
mov dword [ebp - 0x2218], ebx
mov dword [ebp - 0x2258], eax
call fcn.01002b9b
mov esi, eax
cmp esi, ebx
jmp 0x1004f8c
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x10013d8
push edi
mov dword [ebp - 0x2224], 1
call esi
mov ebx, eax
neg ebx
push 0x10013fc
sbb ebx, ebx
push edi
inc ebx
call esi
test eax, eax
je 0x1004abf
test ebx, ebx
je 0x1004b7c
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002b9b
mov esi, eax
test esi, esi
jl 0x1004ff6
cmp dword [ebp + 0x10], 0
je 0x1004b7c
xor esi, esi
push 0x5c
push edi
mov dword [ebp - 0x2230], esi
mov dword [ebp - 0x222c], esi
mov dword [ebp - 0x2228], esi
call fcn.01002b0f
test eax, eax
jne 0x1004f9a
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002cb0
test eax, eax
je 0x1004b31
mov eax, dword [ebp - 0x2214]
push edi
lea ecx, [ebp - 0x2230]
mov dword [ebp - 0x2230], eax
call fcn.010035b9
mov dword [ebp - 0x2230], esi
cmp ebx, esi
je 0x1004b71
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002b9b
mov esi, eax
test esi, esi
jl 0x1004fac
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002d22
lea ecx, [ebp - 0x2230]
mov esi, eax
call fcn.01002782
test esi, esi
jl 0x1004ff6
jmp 0x1004f47
lea ecx, [ebp - 0x2230]
call fcn.01002782
push 0x10013e8
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1004ba8
mov ecx, dword [ebp - 0x2210]
and dword [ebp - 0x2224], eax
push edi
call fcn.01002b9b
mov esi, eax
test esi, esi
jl 0x1004ff6
push 0x1001414
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1004cc5
mov ecx, dword [ebp - 0x2210]
lea eax, [ebp - 0x220c]
push eax
call fcn.01002b9b
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jl 0x1004ff6
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002b9b
mov esi, eax
cmp esi, ebx
jl 0x1004ff6
cmp word [edi], 0x3d
jne 0x1004fa5
cmp dword [ebp + 0x10], ebx
je 0x1004c4b
mov eax, dword [ebp - 0x2214]
mov ecx, dword [ebp - 0x2210]
mov dword [ebp - 0x2248], eax
push edi
lea eax, [ebp - 0x220c]
push eax
lea eax, [ebp - 0x2248]
push eax
mov dword [ebp - 0x2244], ebx
mov dword [ebp - 0x2240], ebx
call fcn.0100473f
lea ecx, [ebp - 0x2248]
mov esi, eax
mov dword [ebp - 0x2248], ebx
call fcn.01002782
cmp esi, ebx
jmp 0x1004b66
cmp dword [ebp + 0x14], ebx
jne 0x1004cb4
cmp dword [ebp - 0x2224], ebx
je 0x1004cb4
push 0x20006
push ebx
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x223c]
mov dword [ebp - 0x223c], ebx
mov dword [ebp - 0x2238], ebx
mov dword [ebp - 0x2234], ebx
call fcn.010027f5
cmp eax, ebx
jne 0x1004fb4
lea eax, [ebp - 0x220c]
push eax
push dword [ebp - 0x223c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp eax, ebx
je 0x1004ca9
cmp eax, 2
jne 0x1004fb4
lea ecx, [ebp - 0x223c]
call fcn.01002782
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002d22
jmp 0x1004a83
push 0x5c
push edi
call fcn.01002b0f
test eax, eax
jne 0x1004fa5
cmp dword [ebp + 0x10], eax
je 0x1004d74
mov esi, 0x2001f
push esi
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2220]
call fcn.010027f5
test eax, eax
je 0x1004d38
push 0x20019
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2220]
call fcn.010027f5
test eax, eax
je 0x1004d38
xor ebx, ebx
push ebx
push ebx
push esi
push ebx
push ebx
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2220]
call fcn.010027a0
mov esi, eax
cmp esi, ebx
jne 0x1004fc2
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002b9b
mov esi, eax
test esi, esi
jl 0x1004ff6
cmp word [edi], 0x3d
jne 0x1004f47
mov ecx, dword [ebp - 0x2210]
push edi
push 0
lea eax, [ebp - 0x2220]
push eax
call fcn.0100473f
mov esi, eax
jmp 0x1004b64
cmp dword [ebp + 0x14], 0
jne 0x1004d95
push 0x20019
push edi
push dword [ebp - 0x2214]
lea ecx, [ebp - 0x2220]
call fcn.010027f5
mov ebx, eax
jmp 0x1004d98
push 2
pop ebx
test ebx, ebx
je 0x1004da3
mov dword [ebp + 0x14], 1
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x20c]
push 0x104
push eax
call sub.msvcrt.dll_wcsncpy_s
add esp, 0x10
push eax
call fcn.0100234f
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002b9b
mov esi, eax
test esi, esi
jl 0x1004ff6
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002d22
mov esi, eax
test esi, esi
jl 0x1004ff6
cmp word [edi], 0x7b
jne 0x1004e3b
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x1004e3b
push dword [ebp + 0x14]
mov ecx, dword [ebp - 0x2210]
push 0
push dword [ebp - 0x2220]
push edi
call fcn.01004a32
mov esi, eax
test esi, esi
jge 0x1004e25
cmp dword [ebp + 0x14], 0
je 0x1004ff6
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002b9b
mov esi, eax
test esi, esi
jl 0x1004ff6
mov eax, dword [ebp - 0x2258]
mov dword [ebp + 0x14], eax
cmp ebx, 2
je 0x1004f8e
test ebx, ebx
je 0x1004e66
test eax, eax
jne 0x1004f8e
push ebx
call fcn.010024a3
mov esi, eax
jmp 0x1004ff6
test eax, eax
je 0x1004ebd
push dword [ebp - 0x2220]
mov ecx, dword [ebp - 0x2210]
call fcn.01002ce6
test eax, eax
je 0x1004ebd
mov ecx, dword [ebp - 0x2210]
lea eax, [ebp - 0x20c]
push eax
call fcn.01002cb0
test eax, eax
je 0x1004f8e
cmp dword [ebp - 0x2224], 0
je 0x1004f8e
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x2220]
call fcn.010035b9
jmp 0x1004f8e
push dword [ebp - 0x2220]
mov ecx, dword [ebp - 0x2210]
call fcn.01002ce6
lea ecx, [ebp - 0x2220]
mov dword [ebp - 0x225c], eax
call fcn.01002782
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x1004fd5
cmp dword [ebp - 0x2224], eax
je 0x1004f8e
cmp dword [ebp - 0x225c], eax
jne 0x1004f8e
mov dword [ebp - 0x2250], eax
mov dword [ebp - 0x224c], eax
mov eax, dword [ebp - 0x2214]
mov dword [ebp - 0x2254], eax
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x2254]
call fcn.010026fc
and dword [ebp - 0x2254], 0
test eax, eax
jne 0x1004fe3
lea ecx, [ebp - 0x2254]
call fcn.01002782
cmp dword [ebp + 0x10], 0
je 0x1004f8e
cmp word [edi], 0x7b
jne 0x1004f8e
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x1004f8e
mov ecx, dword [ebp - 0x2210]
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x2220]
push edi
call fcn.01004a32
mov esi, eax
test esi, esi
jl 0x1004ff6
mov ecx, dword [ebp - 0x2210]
push edi
call fcn.01002b9b
mov esi, eax
test esi, esi
jl 0x1004ff6
cmp word [edi], 0x7d
jne 0x1004a8c
jmp 0x1004ff6
lea ecx, [ebp - 0x2230]
call fcn.01002782
mov esi, 0x80020009
jmp 0x1004ff6
lea ecx, [ebp - 0x2230]
jmp 0x1004ff1
push eax
call fcn.010024a3
lea ecx, [ebp - 0x223c]
jmp 0x1004fef
lea ecx, [ebp - 0x2220]
call fcn.01002782
push esi
call fcn.010024a3
jmp 0x1005003
lea ecx, [ebp - 0x2220]
call fcn.01002782
push ebx
jmp 0x1004fce
push eax
call fcn.010024a3
lea ecx, [ebp - 0x2254]
mov esi, eax
call fcn.01002782
lea ecx, [ebp - 0x2220]
call fcn.01002782
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0100748c
leave
ret 0x10