Function at 0x1006212
Capabilities:
Delete registry key
Delete registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x124
mov eax, dword [0x101a0bc]
and dword [ebp - 0x114], 0
and dword [ebp - 0x11c], 0
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov dword [ebp - 0x118], eax
mov eax, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x124], eax
jmp 0x10066fd
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
push 0x100146c
push edi
call esi
mov ebx, eax
neg ebx
push 0x1001480
sbb ebx, ebx
push edi
inc ebx
call esi
test eax, eax
je 0x1006289
test ebx, ebx
je 0x1006332
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005646
mov esi, eax
test esi, esi
jl 0x1006724
cmp dword [ebp + 0x10], 0
je 0x1006332
and dword [ebp - 0x10c], 0
push 0x5c
push edi
call fcn.010055c6
test eax, eax
jne 0x1006714
mov ecx, dword [ebp - 0x110]
push edi
call fcn.010058f1
test eax, eax
je 0x10062ef
mov eax, dword [ebp - 0x118]
push edi
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x10c], eax
call fcn.0100614f
and dword [ebp - 0x10c], 0
test ebx, ebx
je 0x1006327
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005646
mov esi, eax
test esi, esi
jl 0x1006756
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005a02
lea ecx, [ebp - 0x10c]
mov esi, eax
call fcn.010050dc
jmp 0x10066bf
lea ecx, [ebp - 0x10c]
call fcn.010050dc
push 0x1001474
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x100635e
mov ecx, dword [ebp - 0x110]
and dword [ebp - 0x120], eax
push edi
call fcn.01005646
mov esi, eax
test esi, esi
jl 0x1006724
push 0x100148c
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x100645e
mov ecx, dword [ebp - 0x110]
lea eax, [ebp - 0x108]
push eax
call fcn.01005646
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jl 0x1006724
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005646
mov esi, eax
cmp esi, ebx
jl 0x1006724
cmp byte [edi], 0x3d
jne 0x100671f
cmp dword [ebp + 0x10], ebx
je 0x10063f4
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x110]
mov dword [ebp - 0x10c], eax
push edi
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.01005726
lea ecx, [ebp - 0x10c]
mov esi, eax
mov dword [ebp - 0x10c], ebx
call fcn.010050dc
cmp esi, ebx
jmp 0x10066c1
cmp dword [ebp + 0x14], ebx
jne 0x1006449
push 0x20006
push ebx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x10c], ebx
call fcn.0100514f
cmp eax, ebx
jne 0x1006748
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
cmp eax, ebx
je 0x100643e
cmp eax, 2
jne 0x1006746
lea ecx, [ebp - 0x10c]
call fcn.010050dc
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005a02
mov esi, eax
cmp esi, ebx
jmp 0x1006707
push 0x5c
push edi
call fcn.010055c6
test eax, eax
jne 0x100671f
xor esi, esi
cmp dword [ebp + 0x10], esi
je 0x100650a
mov esi, 0xf003f
push esi
push edi
push dword [ebp - 0x118]
lea ecx, [ebp - 0x114]
call fcn.0100514f
test eax, eax
je 0x10064d1
push 0x20019
push edi
push dword [ebp - 0x118]
lea ecx, [ebp - 0x114]
call fcn.0100514f
test eax, eax
je 0x10064d1
xor eax, eax
push eax
push eax
push esi
push eax
push eax
push edi
push dword [ebp - 0x118]
lea ecx, [ebp - 0x114]
call fcn.010050fa
test eax, eax
jne 0x100671f
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005646
mov esi, eax
test esi, esi
jl 0x1006724
cmp byte [edi], 0x3d
jne 0x10066c3
mov ecx, dword [ebp - 0x110]
push edi
push 0
lea eax, [ebp - 0x114]
push eax
call fcn.01005726
jmp 0x10066bd
cmp dword [ebp + 0x14], esi
jne 0x1006531
push 0x20019
push edi
push dword [ebp - 0x118]
lea ecx, [ebp - 0x114]
call fcn.0100514f
test eax, eax
je 0x1006531
mov dword [ebp + 0x14], 1
cmp dword [ebp - 0x11c], esi
jne 0x1006549
mov eax, 0x104
call fcn.01007910
mov dword [ebp - 0x11c], esp
push 0x104
push edi
push dword [ebp - 0x11c]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
cmp dword [ebp + 0x14], esi
jne 0x100658e
push dword [ebp - 0x114]
mov ecx, dword [ebp - 0x110]
call fcn.01005927
test eax, eax
jne 0x100658e
push dword [ebp - 0x114]
mov ecx, dword [ebp - 0x110]
call fcn.01005963
test eax, eax
je 0x1006660
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005646
mov esi, eax
test esi, esi
jl 0x1006724
mov ebx, dword [ebp - 0x110]
push edi
mov ecx, ebx
call fcn.01005a02
mov esi, eax
test esi, esi
jl 0x1006724
cmp byte [edi], 0x7b
jne 0x100660c
push dword [ebp + 0x14]
mov ecx, ebx
push 0
push dword [ebp - 0x114]
push edi
call fcn.01006212
mov esi, eax
test esi, esi
jl 0x1006724
cmp dword [ebp + 0x14], 0
je 0x100661c
mov eax, dword [ebp - 0x124]
push edi
mov ecx, ebx
mov dword [ebp + 0x14], eax
call fcn.01005646
mov esi, eax
test esi, esi
jl 0x1006724
push edi
mov ecx, ebx
call fcn.01005a02
jmp 0x1006703
cmp dword [ebp + 0x14], 0
jne 0x1006709
mov ebx, dword [ebp - 0x110]
push dword [ebp - 0x114]
mov ecx, ebx
call fcn.01005927
test eax, eax
je 0x1006656
push dword [ebp - 0x11c]
mov ecx, ebx
call fcn.010058f1
test eax, eax
je 0x100664f
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x114]
call fcn.0100614f
mov ecx, ebx
jmp 0x10066fd
cmp dword [ebp + 0x14], 0
jne 0x1006709
lea ecx, [ebp - 0x114]
call fcn.010050dc
test eax, eax
jne 0x100671f
cmp dword [ebp - 0x120], eax
je 0x100669f
push dword [ebp - 0x11c]
push dword [ebp - 0x118]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
and dword [ebp - 0x10c], 0
lea ecx, [ebp - 0x10c]
call fcn.010050dc
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005646
mov esi, eax
test esi, esi
jl 0x1006724
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005a02
mov esi, eax
test esi, esi
jl 0x1006724
cmp dword [ebp + 0x10], 0
je 0x1006709
cmp byte [edi], 0x7b
jne 0x1006709
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 1
jne 0x1006709
mov ecx, dword [ebp - 0x110]
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x114]
push edi
call fcn.01006212
mov esi, eax
test esi, esi
jl 0x1006724
mov ecx, dword [ebp - 0x110]
push edi
call fcn.01005646
mov esi, eax
test esi, esi
jl 0x1006724
cmp byte [edi], 0x7d
jne 0x1006260
jmp 0x1006724
lea ecx, [ebp - 0x10c]
call fcn.010050dc
mov esi, 0x80020009
lea ecx, [ebp - 0x114]
call fcn.010050dc
mov eax, esi
lea esp, [ebp - 0x130]
mov ecx, dword [ebp - 4]
call fcn.01007613
pop edi
pop esi
pop ebx
leave
ret 0x10
cmp eax, ebx
jle 0x1006754
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
lea ecx, [ebp - 0x10c]
call fcn.010050dc
jmp 0x1006724