Function at 0x1003e7b
Capabilities:
Delete registry value

Disassembly:
push 0x268
mov eax, 0x10072c7
call fcn.01005f91
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x244], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x230], ebx
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov eax, dword [ebp + 0x14]
mov byte [ebp - 4], 1
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x274], eax
push edi
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jge 0x100446c
lea ecx, [ebp - 0x230]
call fcn.010022b9
lea ecx, [ebp - 0x244]
call fcn.01002e07
mov eax, esi
lea esp, [ebp - 0x284]
call fcn.01005fe5
ret 0x10
push 0x1001268
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov esi, eax
neg esi
sbb esi, esi
push 0x100128c
inc esi
push edi
mov dword [ebp - 0x264], esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x1003f3d
cmp esi, ebx
je 0x1004003
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
cmp dword [ebp + 0x10], ebx
je 0x1004003
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x234], ebx
push 0x5c
push edi
mov byte [ebp - 4], 2
call fcn.010026d8
test eax, eax
jne 0x100447b
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.0100291c
test eax, eax
je 0x1003fac
mov eax, dword [ebp - 0x224]
push edi
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x23c], eax
call fcn.01003220
mov dword [ebp - 0x23c], ebx
cmp dword [ebp - 0x264], ebx
je 0x1003ff4
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jl 0x1004490
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.01002a19
mov esi, eax
cmp esi, ebx
lea ecx, [ebp - 0x23c]
jl 0x10044ae
mov byte [ebp - 4], 1
call fcn.010022b9
jmp 0x100442a
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 1
call fcn.010022b9
push 0x1001278
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100402f
mov ecx, dword [ebp - 0x21c]
push edi
mov dword [ebp - 0x240], ebx
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x10012a4
push edi
call esi
test eax, eax
jne 0x1004144
mov ecx, dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
push eax
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
cmp word [edi], 0x3d
jne 0x1004486
cmp dword [ebp + 0x10], ebx
je 0x10040d1
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x21c]
push ebx
mov dword [ebp - 0x260], eax
push edi
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x260]
push eax
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x258], ebx
call fcn.01003b86
lea ecx, [ebp - 0x260]
mov esi, eax
mov dword [ebp - 0x260], ebx
call fcn.010022b9
jmp 0x1004422
cmp dword [ebp + 0x14], ebx
jne 0x1004133
push ebx
push 0x20006
push ebx
push dword [ebp - 0x224]
lea ecx, [ebp - 0x254]
mov dword [ebp - 0x254], ebx
mov dword [ebp - 0x250], ebx
mov dword [ebp - 0x24c], ebx
call fcn.0100232c
cmp eax, ebx
jne 0x100449a
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x254]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp eax, ebx
je 0x1004128
cmp eax, 2
jne 0x1004498
lea ecx, [ebp - 0x254]
call fcn.010022b9
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.01002a19
jmp 0x1003edc
push 0x5c
push edi
call fcn.010026d8
test eax, eax
jne 0x1004486
cmp dword [ebp + 0x10], ebx
je 0x100421f
push ebx
push 0xf003f
push edi
push dword [ebp - 0x224]
lea ecx, [ebp - 0x230]
call fcn.0100232c
test eax, eax
je 0x10041b8
push ebx
push 0x20019
push edi
push dword [ebp - 0x224]
lea ecx, [ebp - 0x230]
call fcn.0100232c
test eax, eax
je 0x10041b8
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push edi
push dword [ebp - 0x224]
lea ecx, [ebp - 0x230]
call fcn.010022d7
test eax, eax
jne 0x1004486
movzx eax, word [edi]
mov byte [ebp - 0x248], bl
cmp ax, 0x4c
je 0x10041cd
cmp ax, 0x6c
jne 0x10041e0
push 0x1001674
push edi
call esi
test eax, eax
jne 0x10041e0
mov byte [ebp - 0x248], 1
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
cmp word [edi], 0x3d
jne 0x100442a
push dword [ebp - 0x248]
mov ecx, dword [ebp - 0x21c]
push edi
push ebx
lea eax, [ebp - 0x230]
push eax
call fcn.01003b86
jmp 0x1004420
cmp dword [ebp + 0x14], ebx
jne 0x1004247
push ebx
push 0x20019
push edi
push dword [ebp - 0x224]
lea ecx, [ebp - 0x230]
call fcn.0100232c
test eax, eax
je 0x1004247
mov dword [ebp + 0x14], 1
cmp dword [ebp - 0x220], ebx
jne 0x100428b
mov esi, 0x208
push esi
call fcn.01001ffd
test al, al
je 0x100426d
mov eax, esi
call fcn.01005eb0
mov dword [ebp - 0x220], esp
jmp 0x100427f
push esi
lea ecx, [ebp - 0x244]
call fcn.010039db
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], ebx
je 0x10044b8
push 0x104
push edi
push dword [ebp - 0x220]
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
cmp dword [ebp + 0x14], ebx
jne 0x10042d0
push dword [ebp - 0x230]
mov ecx, dword [ebp - 0x21c]
call fcn.01002952
test eax, eax
jne 0x10042d0
push dword [ebp - 0x230]
mov ecx, dword [ebp - 0x21c]
call fcn.0100298e
test eax, eax
je 0x10043a1
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.01002a19
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
cmp word [edi], 0x7b
jne 0x100434b
push dword [ebp + 0x14]
mov ecx, dword [ebp - 0x21c]
push ebx
push dword [ebp - 0x230]
push edi
call fcn.01003e7b
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
cmp dword [ebp + 0x14], ebx
je 0x1004354
mov eax, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x21c]
push edi
mov dword [ebp + 0x14], eax
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
jmp 0x1004133
cmp dword [ebp + 0x14], ebx
jne 0x100446c
push dword [ebp - 0x230]
mov ecx, dword [ebp - 0x21c]
call fcn.01002952
test eax, eax
je 0x1004398
push dword [ebp - 0x220]
mov ecx, dword [ebp - 0x21c]
call fcn.0100291c
test eax, eax
je 0x1004461
push dword [ebp - 0x220]
lea ecx, [ebp - 0x230]
call fcn.01003220
jmp 0x1004461
cmp dword [ebp + 0x14], ebx
jne 0x100446c
lea ecx, [ebp - 0x230]
call fcn.010022b9
test eax, eax
jne 0x1004486
cmp dword [ebp - 0x240], ebx
je 0x10043fe
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
mov eax, dword [ebp - 0x224]
push dword [ebp - 0x220]
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 3
mov dword [ebp - 0x270], eax
call fcn.01002233
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x270], ebx
mov byte [ebp - 4], 1
call fcn.010022b9
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.010027fd
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
mov ecx, dword [ebp - 0x21c]
push edi
call fcn.01002a19
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
cmp dword [ebp + 0x10], ebx
je 0x100446c
cmp word [edi], 0x7b
jne 0x100446c
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x100446c
mov ecx, dword [ebp - 0x21c]
push ebx
push dword [ebp + 0x10]
push dword [ebp - 0x230]
push edi
call fcn.01003e7b
mov esi, eax
cmp esi, ebx
jl 0x1003ee6
mov ecx, dword [ebp - 0x21c]
jmp 0x1003ed6
cmp word [edi], 0x7d
jne 0x1003f0c
jmp 0x1003ee6
lea ecx, [ebp - 0x23c]
call fcn.010022b9
mov esi, 0x80020009
jmp 0x1003ee6
lea ecx, [ebp - 0x23c]
jmp 0x10044ae
cmp eax, ebx
jle 0x10044a6
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
lea ecx, [ebp - 0x254]
call fcn.010022b9
jmp 0x1003ee6
mov esi, 0x8007000e
jmp 0x1003ee6