Function at 0x1013eb6
Capabilities:
Delete registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1022f37
mov eax, dword fs:[0]
push eax
mov eax, 0x225c
call fcn.0100e49c
mov eax, dword [0x102a024]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x221c], ecx
mov dword [ebp - 0x2220], eax
mov dword [ebp - 0x222c], ebx
mov dword [ebp - 0x2228], ebx
mov dword [ebp - 0x2224], ebx
mov eax, dword [ebp + 0x14]
push edi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2264], eax
call fcn.01012f01
mov esi, eax
cmp esi, ebx
jmp 0x1014433
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x10144c8
push edi
mov dword [ebp - 0x2230], 1
call esi
mov ebx, eax
neg ebx
push 0x10144ec
sbb ebx, ebx
push edi
inc ebx
call esi
test eax, eax
je 0x1013f5e
test ebx, ebx
je 0x101401b
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.01012f01
mov esi, eax
test esi, esi
jl 0x101449c
cmp dword [ebp + 0x10], 0
je 0x101401b
xor esi, esi
push 0x5c
push edi
mov dword [ebp - 0x223c], esi
mov dword [ebp - 0x2238], esi
mov dword [ebp - 0x2234], esi
call fcn.01012e75
test eax, eax
jne 0x1014440
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.01013016
test eax, eax
je 0x1013fd0
mov eax, dword [ebp - 0x2220]
push edi
lea ecx, [ebp - 0x223c]
mov dword [ebp - 0x223c], eax
call fcn.010132aa
mov dword [ebp - 0x223c], esi
cmp ebx, esi
je 0x1014010
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.01012f01
mov esi, eax
test esi, esi
jl 0x1014452
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.010130b9
lea ecx, [ebp - 0x223c]
mov esi, eax
call fcn.01007440
test esi, esi
jge 0x10143ee
jmp 0x101449c
lea ecx, [ebp - 0x223c]
call fcn.01007440
push 0x10144d8
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1014047
mov ecx, dword [ebp - 0x221c]
and dword [ebp - 0x2230], eax
push edi
call fcn.01012f01
mov esi, eax
test esi, esi
jl 0x101449c
push 0x1014504
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x101416c
mov ecx, dword [ebp - 0x221c]
lea eax, [ebp - 0x2218]
push eax
call fcn.01012f01
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jl 0x101449c
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.01012f01
mov esi, eax
cmp esi, ebx
jl 0x101449c
cmp word [edi], 0x3d
jne 0x101444b
cmp dword [ebp + 0x10], ebx
je 0x10140f2
mov dword [ebp - 0x2250], ebx
mov dword [ebp - 0x224c], ebx
mov eax, dword [ebp - 0x2220]
mov ecx, dword [ebp - 0x221c]
mov dword [ebp - 0x2254], eax
push edi
lea eax, [ebp - 0x2218]
push eax
lea eax, [ebp - 0x2254]
push eax
mov byte [ebp - 4], 1
call fcn.01013b63
mov esi, eax
cmp esi, ebx
mov dword [ebp - 0x2254], ebx
lea ecx, [ebp - 0x2254]
jl 0x1014497
mov byte [ebp - 4], bl
jmp 0x10143e9
cmp dword [ebp + 0x14], ebx
jne 0x101415b
cmp dword [ebp - 0x2230], ebx
je 0x101415b
push 0x20006
push ebx
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x2248]
mov dword [ebp - 0x2248], ebx
mov dword [ebp - 0x2244], ebx
mov dword [ebp - 0x2240], ebx
call fcn.01007b57
cmp eax, ebx
jne 0x101445a
lea eax, [ebp - 0x2218]
push eax
push dword [ebp - 0x2248]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp eax, ebx
je 0x1014150
cmp eax, 2
jne 0x101445a
lea ecx, [ebp - 0x2248]
call fcn.01007440
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.010130b9
jmp 0x1013f22
push 0x5c
push edi
call fcn.01012e75
test eax, eax
jne 0x101444b
cmp dword [ebp + 0x10], eax
je 0x101421b
mov esi, 0x2001f
push esi
push edi
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x222c]
call fcn.01007b57
test eax, eax
je 0x10141df
push 0x20019
push edi
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x222c]
call fcn.01007b57
test eax, eax
je 0x10141df
xor ebx, ebx
push ebx
push ebx
push esi
push ebx
push ebx
push edi
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x222c]
call fcn.01012aaf
mov esi, eax
cmp esi, ebx
jne 0x1014468
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.01012f01
mov esi, eax
test esi, esi
jl 0x101449c
cmp word [edi], 0x3d
jne 0x10143ee
mov ecx, dword [ebp - 0x221c]
push edi
push 0
lea eax, [ebp - 0x222c]
push eax
call fcn.01013b63
mov esi, eax
jmp 0x1014003
cmp dword [ebp + 0x14], 0
jne 0x101423c
push 0x20019
push edi
push dword [ebp - 0x2220]
lea ecx, [ebp - 0x222c]
call fcn.01007b57
mov ebx, eax
jmp 0x101423f
push 2
pop ebx
test ebx, ebx
je 0x101424a
mov dword [ebp + 0x14], 1
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x218]
push 0x104
push eax
call sub.msvcrt.dll_wcsncpy_s
add esp, 0x10
push eax
call fcn.010025b8
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.01012f01
mov esi, eax
test esi, esi
jl 0x101449c
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.010130b9
mov esi, eax
test esi, esi
jl 0x101449c
cmp word [edi], 0x7b
jne 0x10142e2
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x10142e2
push dword [ebp + 0x14]
mov ecx, dword [ebp - 0x221c]
push 0
push dword [ebp - 0x222c]
push edi
call fcn.01013eb6
mov esi, eax
test esi, esi
jge 0x10142cc
cmp dword [ebp + 0x14], 0
je 0x101449c
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.01012f01
mov esi, eax
test esi, esi
jl 0x101449c
mov eax, dword [ebp - 0x2264]
mov dword [ebp + 0x14], eax
cmp ebx, 2
je 0x1014435
test ebx, ebx
je 0x101430d
test eax, eax
jne 0x1014435
push ebx
call fcn.010094ac
mov esi, eax
jmp 0x101449c
test eax, eax
je 0x1014364
push dword [ebp - 0x222c]
mov ecx, dword [ebp - 0x221c]
call fcn.0101307d
test eax, eax
je 0x1014364
mov ecx, dword [ebp - 0x221c]
lea eax, [ebp - 0x218]
push eax
call fcn.01013016
test eax, eax
je 0x1014435
cmp dword [ebp - 0x2230], 0
je 0x1014435
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x222c]
call fcn.010132aa
jmp 0x1014435
push dword [ebp - 0x222c]
mov ecx, dword [ebp - 0x221c]
call fcn.0101307d
lea ecx, [ebp - 0x222c]
mov dword [ebp - 0x2268], eax
call fcn.01007440
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x101447b
cmp dword [ebp - 0x2230], eax
je 0x1014435
cmp dword [ebp - 0x2268], eax
jne 0x1014435
mov dword [ebp - 0x225c], eax
mov dword [ebp - 0x2258], eax
mov eax, dword [ebp - 0x2220]
mov dword [ebp - 0x2260], eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x2260]
call fcn.01012995
and dword [ebp - 0x2260], 0
test eax, eax
jne 0x1014489
lea ecx, [ebp - 0x2260]
call fcn.01007440
cmp dword [ebp + 0x10], 0
je 0x1014435
cmp word [edi], 0x7b
jne 0x1014435
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jne 0x1014435
mov ecx, dword [ebp - 0x221c]
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x222c]
push edi
call fcn.01013eb6
mov esi, eax
test esi, esi
jl 0x101449c
mov ecx, dword [ebp - 0x221c]
push edi
call fcn.01012f01
mov esi, eax
test esi, esi
jl 0x101449c
cmp word [edi], 0x7d
je 0x101449c
jmp 0x1013f2b
lea ecx, [ebp - 0x223c]
call fcn.01007440
mov esi, 0x80020009
jmp 0x101449c
lea ecx, [ebp - 0x223c]
jmp 0x1014497
push eax
call fcn.010094ac
lea ecx, [ebp - 0x2248]
jmp 0x1014495
lea ecx, [ebp - 0x222c]
call fcn.01007440
push esi
call fcn.010094ac
jmp 0x10144a9
lea ecx, [ebp - 0x222c]
call fcn.01007440
push ebx
jmp 0x1014474
push eax
call fcn.010094ac
lea ecx, [ebp - 0x2260]
mov esi, eax
call fcn.01007440
lea ecx, [ebp - 0x222c]
call fcn.01007440
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.01001bab
leave
ret 0x10