Function at 0x1060add
Capabilities:
Delete registry key
Delete registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x1075fb8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x220], edi
mov eax, dword [0x1075004]
mov esi, 0x1075004
mov ebx, 0x10054f0
cmp eax, esi
je 0x1060b2a
test byte [eax + 0x1c], 2
je 0x1060b2a
cmp byte [eax + 0x19], 5
jb 0x1060b2a
push ebx
push 0x12
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010090c5
push dword [ebp + 8]
lea eax, [ebp - 0x20c]
push 0x100594c
push 0x1005938
push 0x104
push eax
call fcn.01009acc
add esp, 0x14
cmp eax, edi
mov dword [ebp - 0x214], eax
jge 0x1060ba0
mov eax, dword [0x1075004]
cmp eax, esi
je 0x1060b7e
test byte [eax + 0x1c], 2
je 0x1060b7e
cmp byte [eax + 0x19], 2
jb 0x1060b7e
push dword [ebp - 0x214]
push ebx
push 0x13
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
mov eax, dword [ebp - 0x214]
mov ecx, eax
and ecx, 0x1fff0000
cmp ecx, 0x70000
jne 0x1060dc2
movzx eax, ax
jmp 0x1060dc2
push 0x2001f
push edi
lea eax, [ebp - 0x20c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.010600a9
mov dword [ebp - 0x210], eax
cmp eax, edi
jne 0x1060bf4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [0x1075004]
cmp eax, esi
je 0x1060bed
test byte [eax + 0x1c], 2
je 0x1060bed
cmp byte [eax + 0x19], 3
jb 0x1060bed
push edi
push ebx
push 0x14
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
mov eax, edi
jmp 0x1060dc2
push 0x10058e8
push eax
call fcn.01060568
test eax, eax
jne 0x1060c26
mov eax, dword [0x1075004]
cmp eax, esi
je 0x1060c26
test byte [eax + 0x1c], 2
je 0x1060c26
cmp byte [eax + 0x19], 3
jb 0x1060c26
push ebx
push 0x15
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010090c5
push 0x10058c4
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
je 0x1060c5e
mov eax, dword [0x1075004]
cmp eax, esi
je 0x1060c5e
test byte [eax + 0x1c], 2
je 0x1060c5e
cmp byte [eax + 0x19], 3
jb 0x1060c5e
push ebx
push 0x16
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010090c5
push edi
push edi
lea eax, [ebp - 0x220]
push eax
push edi
lea eax, [ebp - 0x21c]
push eax
push edi
push edi
lea eax, [ebp - 0x218]
push eax
push edi
push edi
push edi
push dword [ebp - 0x210]
mov dword [ebp - 0x218], edi
mov dword [ebp - 0x21c], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov dword [ebp - 0x214], eax
cmp eax, edi
je 0x1060cc6
mov eax, dword [0x1075004]
cmp eax, esi
je 0x1060db0
test byte [eax + 0x1c], 2
je 0x1060db0
cmp byte [eax + 0x19], 3
jb 0x1060db0
push ebx
push 0x17
jmp 0x1060da5
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x218], edi
jne 0x1060dbc
cmp dword [ebp - 0x21c], edi
jne 0x1060dbc
push 0x30006
push edi
push 0x100594c
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.010600a9
mov dword [ebp - 0x210], eax
cmp eax, edi
jne 0x1060d46
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [0x1075004]
cmp eax, esi
je 0x1060bed
test byte [eax + 0x1c], 2
je 0x1060bed
cmp byte [eax + 0x19], 2
jb 0x1060bed
push edi
push ebx
push 0x18
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
jmp 0x1060bed
mov eax, dword [0x1075004]
cmp eax, esi
je 0x1060d70
test byte [eax + 0x1c], 2
je 0x1060d70
cmp byte [eax + 0x19], 3
jb 0x1060d70
lea ecx, [ebp - 0x1ce]
push ecx
push ebx
push 0x19
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010091b8
lea eax, [ebp - 0x1ce]
push eax
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [ebp - 0x214], eax
cmp eax, edi
je 0x1060db0
mov eax, dword [0x1075004]
cmp eax, esi
je 0x1060db0
test byte [eax + 0x1c], 2
je 0x1060db0
cmp byte [eax + 0x19], 2
jb 0x1060db0
push ebx
push 0x1a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010090c5
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0105bb63
leave
ret 4