Function at 0x100098d0
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100106c0
push eax
mov eax, 0x222c
mov dword fs:[0], esp
call fcn.1000f1e0
push ebx
xor eax, eax
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x2c], eax
call fcn.10009370
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x1000a317
cmp al, 0x27
jne 0x100099a4
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10009989
mov ecx, esi
call fcn.100092c0
test eax, eax
jne 0x10009989
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10009951
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov ecx, dword [ebp + 8]
lea edx, [edi + 2]
add ecx, 0x1000
mov dword [esi], eax
cmp edx, ecx
jae 0x1000a317
cmp ebx, eax
jae 0x10009982
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x10009976
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x10009936
mov eax, dword [esi]
cmp byte [eax], 0
je 0x1000a317
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x100099d8
push eax
mov ecx, esi
call fcn.10009320
test eax, eax
jne 0x100099d5
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x100099cd
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x100099c1
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x100099a4
mov byte [edi], 0
mov ecx, dword [ebp + 8]
xor edi, edi
cmp byte [ecx], 0x7d
je 0x1000a32e
mov edx, dword [str.Delete]
mov eax, dword [ebp + 8]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
push edx
push eax
call ebx
mov ecx, dword [str.ForceRemove]
mov edx, dword [ebp + 8]
mov edi, eax
push ecx
neg edi
sbb edi, edi
push edx
inc edi
mov dword [ebp - 0x28], edi
call ebx
test eax, eax
je 0x10009a1c
test edi, edi
je 0x10009d7c
mov edi, dword [ebp + 8]
mov ecx, esi
call fcn.10009370
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x1000a308
cmp al, 0x27
jne 0x10009ab3
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10009a98
mov ecx, esi
call fcn.100092c0
test eax, eax
jne 0x10009a98
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10009a60
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov edx, dword [ebp + 8]
lea ecx, [edi + 2]
add edx, 0x1000
mov dword [esi], eax
cmp ecx, edx
jae 0x1000a308
cmp ebx, eax
jae 0x10009a91
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x10009a85
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x10009a45
mov eax, dword [esi]
cmp byte [eax], 0
je 0x1000a308
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x10009ae7
push eax
mov ecx, esi
call fcn.10009320
test eax, eax
jne 0x10009ae4
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x10009adc
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x10009ad0
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x10009ab3
mov byte [edi], 0
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x10009d7c
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov byte [ebp - 4], 1
mov eax, ebx
mov cl, byte [ebx]
test cl, cl
je 0x10009b26
mov edi, dword [sym.imp.USER32.dll_CharNextA]
cmp cl, 0x5c
je 0x10009b1e
push eax
call edi
mov cl, byte [eax]
test cl, cl
jne 0x10009b0e
jmp 0x10009b26
test eax, eax
jne 0x1000a30f
mov edi, 0x1001546c
mov ecx, dword [edi]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10009bf5
add edi, 4
cmp edi, str.TYPELIB
jl 0x10009b2b
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], eax
push 0x2001f
push ebx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.1000a360
test eax, eax
jne 0x10009be2
lea edx, [ebp - 0x34]
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push edx
mov edx, dword [ebp - 0x18]
push eax
push eax
push eax
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x238]
push eax
push ecx
push 0
push edx
mov dword [ebp - 0x20], 0x100
call edi
test eax, eax
jne 0x10009bcf
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x18]
push eax
call fcn.1000a3b0
test eax, eax
jne 0x10009be2
lea ecx, [ebp - 0x34]
lea edx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x18]
push eax
push eax
push eax
lea eax, [ebp - 0x238]
push edx
push eax
push 0
push ecx
mov dword [ebp - 0x20], 0x100
call edi
test eax, eax
je 0x10009b97
lea ecx, [ebp - 0x18]
call fcn.10008a60
mov edx, dword [ebp - 0x14]
push ebx
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.10008a60
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x10009d70
mov ecx, esi
mov edi, ebx
call fcn.10009370
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x1000a2fe
cmp al, 0x27
jne 0x10009c96
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10009c7b
mov ecx, esi
call fcn.100092c0
test eax, eax
jne 0x10009c7b
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10009c43
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov edx, dword [ebp + 8]
lea ecx, [edi + 2]
add edx, 0x1000
mov dword [esi], eax
cmp ecx, edx
jae 0x1000a2fe
cmp ebx, eax
jae 0x10009c74
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x10009c68
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x10009c28
mov eax, dword [esi]
cmp byte [eax], 0
je 0x1000a2fe
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x10009cca
push eax
mov ecx, esi
call fcn.10009320
test eax, eax
jne 0x10009cc7
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x10009cbf
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x10009cb3
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x10009c96
mov byte [edi], 0
mov ebx, dword [ebp + 8]
cmp byte [ebx], 0x3d
jne 0x10009d0f
push ebx
mov ecx, esi
call fcn.100093c0
test eax, eax
jl 0x1000a2f3
mov ecx, esi
call fcn.10009370
lea ecx, [ebp - 0x1238]
push ecx
mov ecx, esi
call fcn.100093c0
test eax, eax
jl 0x1000a2f3
push ebx
mov ecx, esi
call fcn.100093c0
test eax, eax
jl 0x1000a2f3
xor edi, edi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.10008a60
mov ebx, dword [ebp + 8]
cmp byte [ebx], 0x7b
jne 0x10009d5f
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 1
jne 0x10009d5f
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x10]
push 0
push edx
push eax
push ebx
mov ecx, esi
call fcn.100098d0
mov edi, eax
test edi, edi
jl 0x1000a32e
push ebx
mov ecx, esi
call fcn.100093c0
mov edi, eax
test edi, edi
jl 0x1000a32e
mov ecx, dword [ebp + 8]
cmp byte [ecx], 0x7d
je 0x1000a32e
jmp 0x100099e6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.10008a60
mov edx, dword [str.NoRemove]
mov eax, dword [ebp + 8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x10009e63
mov edi, dword [ebp + 8]
mov ecx, esi
mov dword [ebp - 0x24], eax
call fcn.10009370
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x1000a308
cmp al, 0x27
jne 0x10009e2f
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10009e14
mov ecx, esi
call fcn.100092c0
test eax, eax
jne 0x10009e14
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10009ddc
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov edx, dword [ebp + 8]
lea ecx, [edi + 2]
add edx, 0x1000
mov dword [esi], eax
cmp ecx, edx
jae 0x1000a308
cmp ebx, eax
jae 0x10009e0d
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x10009e01
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x10009dc1
mov eax, dword [esi]
cmp byte [eax], 0
je 0x1000a308
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x10009e63
push eax
mov ecx, esi
call fcn.10009320
test eax, eax
jne 0x10009e60
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x10009e58
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x10009e4c
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x10009e2f
mov byte [edi], 0
mov ecx, dword [0x1001145c]
mov ebx, dword [ebp + 8]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x1000a0c5
mov ecx, esi
lea edi, [ebp - 0x138]
call fcn.10009370
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x1000a308
cmp al, 0x27
jne 0x10009f11
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10009ef8
mov ecx, esi
call fcn.100092c0
test eax, eax
jne 0x10009ef8
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10009ec3
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
lea edx, [edi + 2]
lea ecx, [ebp + 0xec8]
cmp edx, ecx
mov dword [esi], eax
jae 0x1000a308
cmp ebx, eax
jae 0x10009eef
mov ecx, ebx
mov dl, byte [ecx]
inc ecx
mov byte [edi], dl
inc edi
cmp ecx, eax
jb 0x10009ee5
mov cl, byte [eax]
mov ebx, dword [ebp + 8]
test cl, cl
jne 0x10009ea8
mov eax, dword [esi]
cmp byte [eax], 0
je 0x1000a308
push eax
mov byte [edi], 0
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x10009f44
push eax
mov ecx, esi
call fcn.10009320
test eax, eax
jne 0x10009f41
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x10009f38
mov ecx, ebx
mov dl, byte [ecx]
inc ecx
mov byte [edi], dl
inc edi
cmp ecx, eax
jb 0x10009f2e
mov al, byte [eax]
mov ebx, dword [ebp + 8]
test al, al
jne 0x10009f11
mov byte [edi], 0
mov ecx, esi
mov edi, ebx
call fcn.10009370
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x1000a308
cmp al, 0x27
jne 0x10009fda
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10009fbf
mov ecx, esi
call fcn.100092c0
test eax, eax
jne 0x10009fbf
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10009f87
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov edx, dword [ebp + 8]
lea ecx, [edi + 2]
add edx, 0x1000
mov dword [esi], eax
cmp ecx, edx
jae 0x1000a308
cmp ebx, eax
jae 0x10009fb8
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x10009fac
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x10009f6c
mov eax, dword [esi]
cmp byte [eax], 0
je 0x1000a308
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x1000a00e
push eax
mov ecx, esi
call fcn.10009320
test eax, eax
jne 0x1000a00b
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x1000a003
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x10009ff7
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x10009fda
mov byte [edi], 0
mov edi, dword [ebp + 8]
cmp byte [edi], 0x3d
jne 0x1000a317
mov eax, dword [ebp + 0x10]
xor ebx, ebx
cmp eax, ebx
je 0x1000a058
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x138]
push edi
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ecx
push edx
push eax
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.1000a510
mov edi, eax
mov dword [ebp - 0x14], ebx
cmp edi, ebx
jl 0x1000a326
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
jmp 0x10009d18
cmp dword [ebp + 0x14], ebx
jne 0x1000a07c
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x138]
push ecx
push eax
mov dword [ebp - 0x14], eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
call fcn.10008a60
cmp byte [edi], 0x3d
jne 0x1000a0be
push edi
mov ecx, esi
call fcn.100093c0
cmp eax, ebx
jl 0x1000a2fa
mov ecx, esi
call fcn.10009370
lea edx, [ebp - 0x2238]
mov ecx, esi
push edx
call fcn.100093c0
cmp eax, ebx
jl 0x1000a2fa
push edi
mov ecx, esi
call fcn.100093c0
cmp eax, ebx
jl 0x1000a2fa
xor edi, edi
jmp 0x10009d5f
mov cl, byte [ebx]
mov eax, ebx
test cl, cl
je 0x1000a0eb
mov edi, dword [sym.imp.USER32.dll_CharNextA]
cmp cl, 0x5c
je 0x1000a0e3
push eax
call edi
mov cl, byte [eax]
test cl, cl
jne 0x1000a0d3
jmp 0x1000a0eb
test eax, eax
jne 0x1000a317
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x1000a179
mov edi, dword [ebp + 0xc]
push 0xf003f
push ebx
push edi
lea ecx, [ebp - 0x10]
call fcn.1000a360
test eax, eax
je 0x1000a13e
push 0x20019
push ebx
push edi
lea ecx, [ebp - 0x10]
call fcn.1000a360
test eax, eax
je 0x1000a13e
push 0
push 0
push 0xf003f
push 0
push 0
push ebx
push edi
lea ecx, [ebp - 0x10]
call fcn.10008a80
test eax, eax
jne 0x1000a317
push ebx
mov ecx, esi
call fcn.100093c0
mov edi, eax
test edi, edi
jl 0x1000a32e
cmp byte [ebx], 0x3d
jne 0x10009d1d
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x10]
push eax
push 0
push ecx
mov ecx, esi
call fcn.1000a510
mov edi, eax
test edi, edi
jl 0x1000a32e
jmp 0x10009d1d
mov edi, dword [ebp + 0x14]
test edi, edi
jne 0x1000a19e
mov edx, dword [ebp + 0xc]
push 0x20019
push ebx
push edx
lea ecx, [ebp - 0x10]
call fcn.1000a360
test eax, eax
je 0x1000a19e
mov edi, 1
mov dword [ebp + 0x14], edi
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x1000a1b4
mov eax, 0x104
call fcn.1000f1e0
mov eax, esp
mov dword [ebp - 0x1c], eax
push 0x104
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
test edi, edi
jne 0x1000a1e7
mov eax, dword [ebp - 0x10]
mov ecx, esi
push eax
call fcn.1000a920
test eax, eax
jne 0x1000a1e7
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, esi
call fcn.1000a970
test eax, eax
je 0x1000a29f
push ebx
mov ecx, esi
call fcn.100093c0
mov edi, eax
test edi, edi
jl 0x1000a32e
push ebx
mov ecx, esi
call fcn.1000aa20
mov edi, eax
test edi, edi
jl 0x1000a32e
cmp byte [ebx], 0x7b
jne 0x1000a23e
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x10]
push edx
push 0
push eax
push ebx
mov ecx, esi
call fcn.100098d0
mov edi, eax
test edi, edi
jl 0x1000a32e
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x1000a24c
mov ecx, dword [ebp - 0x2c]
mov dword [ebp + 0x14], ecx
jmp 0x1000a2d2
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x10009d5f
mov ebx, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
mov ecx, esi
push edx
call fcn.1000a920
test eax, eax
je 0x1000a29f
mov edi, 0x1001546c
mov eax, dword [edi]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1000a288
add edi, 4
cmp edi, str.TYPELIB
jl 0x1000a260
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x10]
push edx
call fcn.1000a3b0
push ebx
mov ecx, esi
call fcn.100093c0
mov edi, eax
test edi, edi
jl 0x1000a32e
jmp 0x10009d5f
lea ecx, [ebp - 0x10]
call fcn.10008a60
test eax, eax
jne 0x1000a317
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x1000a2d2
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
push ecx
push eax
mov dword [ebp - 0x14], eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0
call fcn.10008a60
push ebx
mov ecx, esi
call fcn.100093c0
mov edi, eax
test edi, edi
jl 0x1000a32e
push ebx
mov ecx, esi
call fcn.1000aa20
mov edi, eax
test edi, edi
jl 0x1000a32e
jmp 0x10009d5f
mov edi, eax
lea ecx, [ebp - 0x14]
jmp 0x1000a329
mov edi, eax
jmp 0x1000a32e
mov edi, 0x80020009
lea ecx, [ebp - 0x14]
jmp 0x1000a329
mov edi, 0x80020009
jmp 0x1000a32e
lea ecx, [ebp - 0x14]
call fcn.10008a60
lea ecx, [ebp - 0x10]
call fcn.10008a60
mov eax, 0x80020009
jmp 0x1000a338
lea ecx, [ebp - 0x14]
call fcn.10008a60
lea ecx, [ebp - 0x10]
call fcn.10008a60
mov eax, edi
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x2244]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10