Function at 0x100010d3
Capabilities:
Delete file
Delete registry key
Query or enumerate registry value

Disassembly:
mov eax, 0x1000c787
call fcn.1000c520
sub esp, 0x938
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x18], edi
mov al, byte [0x10012218]
push 1
pop ebx
lea ecx, [ebp - 0x30]
push edi
mov dword [ebp - 4], ebx
mov byte [ebp - 0x30], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
lea ecx, [ebp - 0x30]
push dword [eax]
push edi
push 0x10012218
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
mov esi, 0x100110a4
mov byte [ebp - 4], 2
push esi
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push esi
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const___unsigned_int_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
lea ecx, [ebp - 0x30]
push dword [eax]
lea eax, [ebp + 0xc]
push edi
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
mov eax, dword [ebp - 0x2c]
cmp eax, edi
jne 0x10001155
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [ebp - 0x20]
push ecx
push 0xf003f
push edi
push eax
push dword [0x10012254]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x100011b9
mov eax, dword [ebp + 0x10]
cmp eax, edi
jne 0x1000117c
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push 0x10011094
push ebx
call fcn.10002b6f
mov ecx, dword [ebp + 8]
mov al, byte [ebp + 0xb]
add esp, 0xc
mov byte [ecx], al
push edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov esi, 0x100121b8
push esi
call sub.MSVCRT.dll_strlen
pop ecx
mov ecx, dword [ebp + 8]
push eax
push esi
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
mov dword [ebp - 0x18], ebx
jmp 0x10001416
push dword [ebp - 0x20]
lea eax, [ebp - 0x3c]
push dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
call fcn.10003989
add esp, 0xc
lea eax, [ebp - 0x14]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push eax
lea eax, [ebp - 0x544]
push eax
lea eax, [ebp - 0x1c]
push eax
push edi
push str.LocalPath
mov byte [ebp - 4], 3
push dword [ebp - 0x20]
mov dword [ebp - 0x14], 0x3ff
call esi
test eax, eax
jne 0x100013e3
cmp dword [ebp - 0x1c], ebx
jne 0x100013e3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x3ff
push eax
lea eax, [ebp - 0x944]
push eax
lea eax, [ebp - 0x1c]
push eax
push edi
push str.ID3Path
push dword [ebp - 0x20]
call esi
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0xff
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x1c]
push eax
push edi
push str.ModifyTime
push dword [ebp - 0x20]
call esi
test eax, eax
jne 0x100013de
cmp dword [ebp - 0x1c], ebx
jne 0x100013de
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 4
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x1c]
push eax
push edi
push str.Length
push dword [ebp - 0x20]
call esi
test eax, eax
jne 0x100013d9
cmp dword [ebp - 0x1c], 4
jne 0x100013d9
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 2
push eax
call fcn.100039a7
lea eax, [ebp - 0x544]
push eax
call fcn.10005e6e
pop ecx
test al, al
pop ecx
je 0x10001368
mov al, byte [ebp + 0xb]
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x40], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea eax, [ebp - 0x144]
push eax
call sub.MSVCRT.dll_strlen
pop ecx
push eax
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x544]
push dword [ebp - 0x44]
push eax
call fcn.10005de1
add esp, 0xc
lea ecx, [ebp - 0x40]
neg al
sbb al, al
push ebx
inc al
mov byte [ebp - 4], 2
mov byte [ebp - 0xd], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
cmp byte [ebp - 0xd], 0
je 0x10001368
mov esi, dword [ebp + 8]
mov al, byte [ebp + 0xb]
push edi
mov ecx, esi
mov byte [esi], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea eax, [ebp - 0x544]
push eax
call sub.MSVCRT.dll_strlen
pop ecx
push eax
lea eax, [ebp - 0x544]
push eax
mov ecx, esi
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
push ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
and byte [ebp - 4], 0
push ebx
lea ecx, [ebp + 0xc]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, esi
jmp 0x10001434
lea eax, [ebp - 0x944]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
lea eax, [ebp - 0x944]
push eax
je 0x10001387
push 0x10011058
jmp 0x1000138c
push str._failed_
push ebx
call fcn.10002b6f
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp eax, edi
jne 0x100013a1
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push dword [0x10012254]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov ecx, dword [ebp + 8]
mov al, byte [ebp + 0xb]
push edi
mov byte [ecx], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov esi, 0x100121b8
push esi
call sub.MSVCRT.dll_strlen
pop ecx
mov ecx, dword [ebp + 8]
push eax
push esi
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
mov dword [ebp - 0x18], ebx
jmp 0x10001416
mov al, byte [ebp + 0xb]
jmp 0x100013e6
mov al, byte [ebp + 0xb]
jmp 0x100013e6
mov al, byte [ebp + 0xb]
mov ecx, dword [ebp + 8]
push edi
mov byte [ecx], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov esi, 0x100121b8
push esi
call sub.MSVCRT.dll_strlen
pop ecx
mov ecx, dword [ebp + 8]
push eax
push esi
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x18], ebx
push eax
call fcn.100039a7
pop ecx
push ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
and byte [ebp - 4], 0
push ebx
lea ecx, [ebp + 0xc]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x14