Function at 0x5baca185
Capabilities:
Delete registry key

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x130
mov eax, dword [0x5bb70c3c]
push esi
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push edi
mov esi, ecx
mov dword [ebp - 0x128], eax
call fcn.5ba8f946
xor edi, edi
cmp eax, edi
mov dword [ebp - 0x120], eax
jl 0x5baca3c7
cmp dword [esi + 0x124], edi
push ebx
mov ebx, dword [esi + 0x120]
mov dword [ebp - 0x120], 0x80004005
jle 0x5baca3c6
push dword [ebp - 0x128]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x5baca1f9
inc edi
add ebx, 0x14
cmp edi, dword [esi + 0x124]
jl 0x5baca1d7
jmp 0x5baca3c6
lea eax, [esi + 0x110]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
push dword [ebp - 0x128]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x130], eax
lea eax, [esi + 0xc]
push eax
push 0x5ba4cb94
lea eax, [ebp - 0x118]
push 0x104
push eax
call sub.SHLWAPI.dll_wnsprintfA
add esp, 0x14
lea eax, [ebp - 0x118]
push eax
push dword [esi + 8]
call sub.SHLWAPI.dll_SHDeleteKeyA
test eax, eax
jne 0x5baca3a0
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x5baca25d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
and dword [ebx + 0x10], 0
mov eax, dword [esi + 0x124]
lea ecx, [edi + 1]
cmp ecx, eax
jge 0x5baca28e
mov edx, dword [esi + 0x120]
sub eax, edi
lea eax, [eax + eax*4]
lea eax, [eax*4 - 0x14]
lea ecx, [edi + edi*4]
lea ecx, [edx + ecx*4]
push eax
lea eax, [ecx + 0x14]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
dec dword [esi + 0x124]
mov eax, dword [esi + 0x124]
mov ecx, dword [esi + 0x120]
and dword [ebp - 0x120], 0
lea eax, [eax + eax*4]
and dword [ecx + eax*4 + 0x10], 0
mov eax, dword [0x5bb73820]
mov ecx, dword [eax]
lea edx, [ebp - 0x124]
push edx
push 0x2f
push eax
call dword [ecx + 0x14]
test eax, eax
jl 0x5baca3a0
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax]
lea edx, [ebp - 0x11c]
push edx
push eax
call dword [ecx + 0x14]
test eax, eax
jl 0x5baca394
mov ebx, 0xff3b0000
mov edi, 0x143703f0
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax]
lea edx, [ebp - 0x12c]
push edx
push eax
call dword [ecx + 0x34]
push 0x10
lea edx, [ebp - 0x14]
push edx
mov edx, dword [ebp - 0x12c]
dec edx
neg edx
sbb edx, edx
and edx, ebx
add edx, edi
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x14]
test eax, eax
jl 0x5baca36d
push dword [ebp - 0x128]
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x5baca36d
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax]
dec edx
neg edx
sbb edx, edx
and edx, ebx
push 0
add edx, edi
push edx
push eax
call dword [ecx + 0x20]
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax]
lea edx, [ebp - 0x11c]
push edx
push eax
call dword [ecx + 0x14]
test eax, eax
jge 0x5baca2f0
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x130], 0
je 0x5baca3c6
cmp dword [esi + 0x124], 0
mov ecx, esi
jle 0x5baca3bc
push dword [esi + 0x120]
jmp 0x5baca3c1
push 0x5ba44198
call fcn.5bac8fbc
pop ebx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x120]
pop edi
pop esi
call fcn.5bb3f314
leave
ret 4