Function at 0x10003050
Capabilities:
Delete registry value

Disassembly:
push 0xffffffffffffffff
push 0x1007c8b2
mov eax, dword fs:[0]
push eax
sub esp, 0xc8
mov eax, dword [0x10099060]
xor eax, esp
mov dword [esp + 0xc0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10099060]
xor eax, esp
push eax
lea eax, [esp + 0xdc]
mov dword fs:[0], eax
mov eax, dword [esp + 0xec]
push eax
lea edx, [esp + 0xa0]
xor esi, esi
push edx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], esi
call fcn.10001360
add esp, 8
mov ecx, str.Softwareprojonepodlpworkflow_volatileResults_
lea ebx, [esp + 0x44]
mov dword [esp + 0xe4], esi
call fcn.10001480
mov byte [esp + 0xe4], 1
mov eax, dword [esp + 0x5c]
mov edi, dword [eax]
mov ebp, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], ebp
mov esi, dword [esp + 0x5c]
test ebp, ebp
je 0x100030ee
cmp ebp, dword [esp + 0x44]
je 0x100030f3
call fcn.1005f2e0
cmp edi, esi
je 0x10003386
cmp dword [esp + 0xb4], 8
mov esi, dword [esp + 0xa0]
jae 0x10003113
lea esi, [esp + 0xa0]
test ebp, ebp
jne 0x10003179
call fcn.1005f2e0
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x10003128
call fcn.1005f2e0
mov eax, esi
add edi, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10003130
sub eax, edx
sar eax, 1
mov ebx, eax
push esi
xor eax, eax
mov edx, edi
call fcn.10008640
test eax, eax
jne 0x10003370
xor esi, esi
cmp ebp, esi
jne 0x1000317e
call fcn.1005f2e0
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x18]
jne 0x1000316e
call fcn.1005f2e0
cmp dword [edi + 0x18], 8
jb 0x10003183
mov edx, dword [edi + 4]
jmp 0x10003186
mov eax, dword [ebp]
jmp 0x1000311e
mov eax, dword [ebp]
jmp 0x10003160
lea edx, [edi + 4]
lea eax, [esp + 0xb8]
push eax
mov ecx, str.Softwareprojonepodlpworkflow_volatileResults_
call fcn.1003c6ab
add esp, 4
and dword [esp + 0x34], 0xfffffe00
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
lea ecx, [esp + 0xb8]
push ecx
lea edx, [esp + 0x68]
push edx
mov byte [esp + 0xec], 4
call fcn.100013e0
mov byte [esp + 0xec], 5
mov ebx, dword [esp + 0x20]
push eax
lea eax, [esp + 0x8c]
or ebx, 1
push eax
mov dword [esp + 0x28], ebx
call fcn.1004d884
lea ecx, [esp + 0x3c]
push ecx
mov dword [esp + 0xf8], 6
or ebx, 2
push eax
mov dword [esp + 0x30], ebx
call fcn.10001520
add esp, 0x18
test al, al
je 0x1000321a
cmp byte [esp + 0x34], 7
mov byte [esp + 0x17], 1
je 0x1000321f
mov byte [esp + 0x17], 0
test bl, 2
je 0x1000325f
and ebx, 0xfffffffd
cmp dword [esp + 0x98], 0x10
mov dword [esp + 0x18], ebx
jb 0x10003245
mov edx, dword [esp + 0x84]
push edx
call fcn.1005f31a
add esp, 4
mov dword [esp + 0x98], 0xf
mov dword [esp + 0x94], esi
mov byte [esp + 0x84], 0
mov dword [esp + 0xe4], 4
test bl, 1
je 0x1000328a
and ebx, 0xfffffffe
cmp dword [esp + 0x7c], 0x10
mov dword [esp + 0x18], ebx
jb 0x1000328a
mov eax, dword [esp + 0x68]
push eax
call fcn.1005f31a
add esp, 4
cmp byte [esp + 0x17], 0
je 0x1000333d
push 0x10083c4c
lea ecx, [esp + 0x30]
push ecx
mov ecx, 0x10083c4d
call fcn.1004535c
push eax
lea ecx, [esp + 0x84]
call fcn.10045a67
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x14]
mov ebx, 0x10
cmp dword [eax + 0x18], ebx
jb 0x100032cc
mov eax, dword [eax + 4]
jmp 0x100032cf
add eax, 4
push ecx
push eax
lea edx, [esp + 0x88]
push edx
call fcn.10008470
cmp eax, 0xffffffff
je 0x10003324
cmp ebp, esi
jne 0x10003307
call fcn.1005f2e0
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x18]
jne 0x100032fc
call fcn.1005f2e0
cmp dword [edi + 0x18], 8
jb 0x1000330c
mov eax, dword [edi + 4]
jmp 0x1000330f
mov eax, dword [ebp]
jmp 0x100032ee
lea eax, [edi + 4]
push eax
push str.Softwareprojonepodlpworkflow_volatileResults_
push 0x80000002
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
inc dword [esp + 0x1c]
cmp dword [esp + 0x98], ebx
jb 0x1000333d
mov edx, dword [esp + 0x84]
push edx
call fcn.1005f31a
add esp, 4
lea esi, [esp + 0x2c]
mov byte [esp + 0xe4], 2
call fcn.10044696
mov byte [esp + 0xe4], 1
cmp dword [esp + 0xd0], 8
jb 0x10003370
mov eax, dword [esp + 0xbc]
push eax
call fcn.1005f31a
add esp, 4
lea esi, [esp + 0x20]
call fcn.10009e80
mov ebp, dword [esp + 0x20]
mov edi, dword [esp + 0x24]
jmp 0x100030e0
cmp dword [esp + 0x1c], 0
setne bl
lea esi, [esp + 0x44]
mov byte [esp + 0xe4], 7
call fcn.10008c40
mov ecx, dword [esp + 0x44]
push ecx
call fcn.1005f31a
add esp, 4
cmp dword [esp + 0xb4], 8
jb 0x100033c6
mov edx, dword [esp + 0xa0]
push edx
call fcn.1005f31a
add esp, 4
mov al, bl
mov ecx, dword [esp + 0xdc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc0]
xor ecx, esp
call fcn.1005ebcb
add esp, 0xd4
ret