Function at 0x1002a6c6
Capabilities:
Delete registry value

Disassembly:
push 0x488
mov eax, 0x1006cbe6
call fcn.100521f6
push 7
pop esi
xor ebx, ebx
xor eax, eax
mov edi, ecx
mov dword [ebp - 0x430], esi
mov dword [ebp - 0x434], ebx
mov word [ebp - 0x444], ax
lea ecx, [ebp - 0x448]
mov dword [ebp - 4], ebx
call fcn.1002bb86
test al, al
jne 0x1002a82f
cmp byte [0x100a60b8], bl
je 0x1002a80d
cmp dword [0x10093f44], ebx
je 0x1002a80d
mov al, byte [0x10093f48]
mov esi, SysReAllocString
cmp byte [0x10093f0a], bl
je 0x1002a739
cmp al, 4
jae 0x1002a777
cmp al, bl
jmp 0x1002a771
cmp al, 4
jae 0x1002a745
cmp al, bl
jne 0x1002a80d
mov ecx, dword [0x10093f34]
and ecx, esi
xor eax, eax
or eax, ecx
je 0x1002a80d
mov ecx, dword [0x10093f3c]
mov eax, ecx
xor edx, edx
and eax, esi
cmp edx, dword [0x10093f38]
jne 0x1002a80d
cmp eax, ecx
jne 0x1002a80d
mov edi, 0x3ff
push edi
lea eax, [ebp - 0x40f]
push ebx
push eax
mov byte [ebp - 0x410], bl
call fcn.10051a60
add esp, 0xc
push str.RemoveFromDesktop_failed
push edi
lea eax, [ebp - 0x410]
push 0x400
push eax
call fcn.10050e28
add esp, 0x10
cmp byte [0x100a60b8], bl
je 0x1002a80d
cmp dword [0x10093f44], ebx
je 0x1002a80d
mov al, byte [0x10093f48]
cmp byte [0x10093f0a], bl
je 0x1002a7d2
cmp al, 4
jae 0x1002a800
cmp al, bl
jmp 0x1002a7fe
cmp al, 4
jae 0x1002a7da
cmp al, bl
jne 0x1002a80d
mov ecx, dword [0x10093f34]
and ecx, esi
xor eax, eax
or eax, ecx
je 0x1002a80d
mov ecx, dword [0x10093f3c]
mov eax, ecx
xor edx, edx
and eax, esi
cmp edx, dword [0x10093f38]
jne 0x1002a80d
cmp eax, ecx
jne 0x1002a80d
lea eax, [ebp - 0x410]
push eax
call fcn.1002c268
pop ecx
mov byte [ebp - 0x465], bl
push ebx
push 1
lea esi, [ebp - 0x448]
call fcn.1000457f
mov al, byte [ebp - 0x465]
call fcn.10052279
ret 4
cmp dword [ebp + 8], ebx
jne 0x1002a84a
lea eax, [ebp - 0x448]
push eax
mov ecx, edi
call fcn.1002ba03
mov byte [ebp - 0x465], al
jmp 0x1002a813
push 0x2001f
push str.SoftwareTencentQQBrowserLaunch
push reloc.gdiplus.dll_Ordinal_1
lea eax, [ebp - 0x474]
mov dword [ebp - method.Util::RegKey.virtual_0], vtable.Util::RegKey.0
mov dword [ebp - 0x470], ebx
mov dword [ebp - 0x46c], ebx
call fcn.1002733f
mov byte [ebp - 4], 1
cmp dword [ebp - 0x470], ebx
je 0x1002a9b3
push str.UnionLnk
lea eax, [ebp - 0x474]
call fcn.100273b7
test al, al
je 0x1002a9b3
xor eax, eax
mov dword [ebp - 0x414], esi
mov dword [ebp - 0x418], ebx
mov word [ebp - 0x428], ax
lea eax, [ebp - 0x474]
push eax
lea edi, [ebp - 0x42c]
mov ecx, str.UnionLnk
mov byte [ebp - 4], 2
call fcn.1002740a
test al, al
je 0x1002a994
cmp dword [ebp - 0x418], ebx
je 0x1002a994
mov dword [ebp - 0x478], 0x3b
push 1
lea eax, [ebp - 0x478]
push eax
xor eax, eax
lea ecx, [ebp - 0x42c]
call fcn.10004370
mov edi, eax
cmp edi, 0xffffffff
je 0x1002a994
push edi
push ebx
lea eax, [ebp - 0x42c]
push eax
lea esi, [ebp - 0x464]
call fcn.10004135
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x418]
sub eax, edi
push eax
inc edi
push edi
lea eax, [ebp - 0x42c]
push eax
lea esi, [ebp - 0x494]
call fcn.10004135
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 4
call fcn.1000426a
push ebx
push 1
mov byte [ebp - 4], 3
call fcn.1000457f
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x464]
call fcn.1002ba03
push ebx
push 1
lea esi, [ebp - 0x464]
mov byte [ebp - 4], 2
call fcn.1000457f
cmp dword [ebp - 0x418], ebx
jne 0x1002a8f0
push str.UnionLnk
push dword [ebp - 0x470]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push ebx
push 1
lea esi, [ebp - 0x42c]
call fcn.1000457f
lea esi, [ebp - 0x474]
mov dword [ebp - method.Util::RegKey.virtual_0], vtable.Util::RegKey.0
call fcn.10027392
mov byte [ebp - 0x465], 1
jmp 0x1002a813