Function at 0x67c72b
Capabilities:
Delete registry key

Disassembly:
push 0x28
mov eax, 0x6a16f7
call fcn.0049be59
mov ebx, ecx
push ebx
lea ecx, [ebp - 0x2c]
call fcn.0045ae92
pop ecx
xor edx, edx
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], edx
cmp dword [ebp - 0x18], 8
mov dword [ebp - 0x30], edx
jb 0x67c757
mov eax, dword [ebp - 0x2c]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x30]
push ecx
push 0xf003f
push edx
push eax
push SysReAllocString
call edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [ebx + 0x48], eax
test eax, eax
jne 0x67c82d
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
jb 0x67c78c
mov eax, dword [ebp - 0x2c]
push eax
push str.Trying_to_delete_keys_from_HKCU_s
call fcn.006778de
pop ecx
pop ecx
push str.DefaultIcon
push dword [ebp - 0x30]
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c829
push str.ShellOpencommand
push dword [ebp - 0x30]
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c829
push str.ShellOpen
push dword [ebp - 0x30]
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c829
push str.Shell
push dword [ebp - 0x30]
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c829
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c829
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
jb 0x67c81c
mov eax, dword [ebp - 0x2c]
push eax
push SysReAllocString
call esi
mov dword [ebx + 0x48], eax
mov ecx, eax
test ecx, ecx
je 0x67c834
mov ecx, ebx
call fcn.0067c658
cmp dword [ebp + 8], 0
je 0x67c927
and dword [ebp - 0x34], 0
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
jb 0x67c84e
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x34]
push ecx
push 0xf003f
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call edi
mov dword [ebx + 0x48], eax
test eax, eax
jne 0x67c920
sub esp, 0x18
lea esi, [ebp - 0x2c]
push 6
pop ecx
mov edi, esp
rep movsd dword es:[edi], dword [esi]
push str.Trying_to_delete_keys_from_HKLM_s
call fcn.006778de
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esp, 0x1c
push str.DefaultIcon
push dword [ebp - 0x34]
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c91c
push str.ShellOpencommand
push dword [ebp - 0x34]
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c91c
push str.ShellOpen
push dword [ebp - 0x34]
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c91c
push str.Shell
push dword [ebp - 0x34]
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c91c
push dword [ebp - 0x34]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebx + 0x48], ecx
test eax, eax
jne 0x67c91c
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
jb 0x67c90f
mov eax, dword [ebp - 0x2c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
mov dword [ebx + 0x48], eax
mov ecx, eax
test ecx, ecx
je 0x67c927
mov ecx, ebx
call fcn.0067c658
mov esi, dword [ebx + 0x48]
lea ecx, [ebp - 0x2c]
call fcn.00451740
mov eax, esi
call fcn.0049be03
ret 4