Function at 0x1002a404
Capabilities:
Delete registry value

Disassembly:
mov eax, 0x1005bc67
call fcn.1005a768
sub esp, 0x38
cmp byte [ebp + 0x10], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x18], dl
mov dword [ebp - 0x2c], ecx
je 0x1002a544
xor ebx, ebx
test dl, dl
je 0x1002a464
mov esi, dword [ebp + 0xc]
mov dword [esi], ebx
cmp dword [esi], 0xffffffec
jge 0x1002a692
mov edi, dword [ebp + 0x30]
push ebx
push 0x214c
mov edx, 0x7f34
call fcn.10027c77
pop ecx
pop ecx
cmp dword [edi], ebx
jne 0x1002a692
dec dword [esi]
cmp dword [esi], 0xffffffec
jl 0x1002a43e
jmp 0x1002a692
mov dword [ebp - 0x28], 0x5943
cmp dword [ebp - 0x28], 0x5a34
jle 0x1002a4ee
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
mov dword [ebp - 0x1c], 0x14af
cdq
idiv ecx
mov esi, edx
mov eax, esi
lea ecx, [ebp - 0x44]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a41
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a4af
mov eax, dword [eax]
push eax
call fcn.100425d6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.10001f96
inc esi
dec dword [ebp - 0x1c]
jne 0x1002a496
mov ecx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x6304
jl 0x1002a488
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x424a
jl 0x1002a483
inc edi
cmp edi, 0x313f
jl 0x1002a47e
mov esi, dword [ebp + 0x24]
mov dword [esi], ebx
cmp dword [esi], ebx
jg 0x1002a527
mov edi, dword [ebp + 0x2c]
mov dword [edi], ebx
jmp 0x1002a51d
push ecx
push ecx
push 0x46ac
push ecx
mov byte [ebp + 0x13], bl
lea edx, [ebp + 0x13]
push 0x181c
xor cl, cl
call fcn.10027d21
add esp, 0x14
dec dword [edi]
cmp dword [edi], ebx
jge 0x1002a4fe
inc dword [esi]
cmp dword [esi], ebx
jle 0x1002a4fa
cmp dword [ebp - 0x28], 0x578e
jge 0x1002a692
push str.oychjl_czhup_lntvh_ekqmszdgo_aaecm
call fcn.100425d6
pop ecx
jmp 0x1002a692
cmp byte [ebp + 0x34], 0
je 0x1002a559
mov eax, dword [ebp + 0x20]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax], ecx
jmp 0x1002a692
mov dword [ebp - 0x20], 0x6b77
xor ebx, ebx
cmp dword [ebp - 0x20], 0x6c45
jle 0x1002a5bf
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
lea eax, [edi + esi]
mov dword [ebp - 0x28], 0x1be8
mov dword [ebp - 0x1c], eax
mov esi, eax
mov dword [ebp - 0x1c], ebx
mov eax, esi
mov ecx, 0x10075b18
or eax, ebx
cdq
push edx
push eax
call fcn.10001b85
inc ebx
cmp ebx, 0x76a1
jl 0x1002a584
dec esi
dec dword [ebp - 0x28]
push 0
pop ebx
jne 0x1002a581
mov esi, dword [ebp - 0x24]
inc edi
cmp edi, 0x2104
jl 0x1002a572
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x5601
jl 0x1002a570
mov dword [ebp - 4], 2
cmp dword [ebp - 0x20], 0x6b00
jge 0x1002a5fc
mov edx, str.yzxb_bicau_edzmufkk_oamtuxzq_qnzrbunu_qysquevxw_drr_zcgivmfvr_ecwkkxsxd_psunejte_gvlcsqc_nkwbus_fugyfcug_cxjvkluor
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x1002a5fc
mov edx, dword [ebp + 0x28]
cmp dword [edx], ebx
je 0x1002a605
mov eax, dword [edx]
mov eax, dword [edx]
mov esi, dword [ebp + 0x3c]
mov ecx, dword [ebp + 0x38]
mov edi, dword [ebp + 0x1c]
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov dword [ecx], eax
mov edx, dword [edx]
mov eax, dword [ecx]
xor ecx, ecx
cmp eax, edx
mov eax, dword [esi]
sete cl
mov edx, dword [eax + 8]
mov eax, dword [edi]
sub ecx, eax
xor eax, eax
cmp edx, ecx
setne al
xor ecx, ecx
cmp edx, eax
mov eax, dword [edi]
setne cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [esi]
mov esi, dword [ebp + 0x28]
setle bl
xor edx, edx
mov dword [eax + 8], ebx
mov eax, dword [esi]
cmp ebx, eax
mov eax, dword [esi]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
cmp ecx, 1
mov ecx, dword [edi]
mov eax, dword [esi]
setle dl
add ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
mov dword [eax], edx
mov eax, dword [eax]
cmp eax, 0x628e
mov eax, dword [ebp + 0x14]
sete cl
mov dword [eax], ecx
mov eax, dword [eax]
mov eax, dword [ebp + 0x18]
mov dword [eax], 1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret