Function at 0x10049fe0
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007d5a2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x224
push esi
mov dword [ebp - 0x44], 0x61928c17
mov dword [ebp - 0x18], 0xc3099cf
mov dword [ebp - 0x1e8], 0xfffffff7
mov dword [ebp - 0x1c0], 0xdfe9f486
mov dword [ebp - 0x1d0], 0xcb314b81
mov dword [ebp - 0x1f0], 0xffffffff
mov dword [ebp - 0x7c], 5
mov dword [ebp - 0x44], 1
jmp 0x1004a04c
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffe2
jg 0x1004a350
mov dword [ebp - 0x30], 0x66bc657e
mov dword [ebp - 0x64], 0
jmp 0x1004a06d
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1004a083
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x228], 0xb6084edc
jmp 0x1004a066
cmp dword [ebp - 0x18], 0
je 0x1004a1b1
mov dword [ebp - 0x18], 0
jmp 0x1004a09d
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe2
jge 0x1004a1ac
mov dword [ebp - 0x178], 0x4bc662a2
mov dword [ebp - 0x174], 0x4bc662a2
mov dword [ebp - 0x170], 0x4bc662a2
mov dword [ebp - 0x16c], 0x4bc662a2
lea ecx, [ebp - 0x89]
call fcn.10008b73
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x230]
call fcn.10015060
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x150]
call fcn.10015026
and dword [ebp - 4], 0
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x1004a11c
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
push 2
lea ecx, [ebp - 0x150]
call fcn.10015051
mov dword [eax], 0xffffffed
jmp 0x1004a155
push 2
lea ecx, [ebp - 0x150]
call fcn.10015051
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xa0]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x150]
call fcn.10015051
cmp dword [eax], 0xb
jne 0x1004a198
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x1004a182
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 2
lea ecx, [ebp - 0x150]
call fcn.10015051
cmp dword [eax], 0
je 0x1004a196
jmp 0x1004a198
jmp 0x1004a131
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x150]
call fcn.1001504c
jmp 0x1004a096
jmp 0x1004a34b
mov dword [ebp - 0x88], 0xf7c2f5a2
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x18], 0xffffffe4
jmp 0x1004a1d5
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe6
jne 0x1004a303
mov dword [ebp - 0x58], 0
jmp 0x1004a1ef
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1004a205
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x164], 0xffffffff
jmp 0x1004a1e8
cmp dword [ebp - 0x88], 0
je 0x1004a22a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x164], 0
je 0x1004a22a
mov dword [ebp - 0x130], 1
jmp 0x1004a231
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1e0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x88]
cmp dword [ebp + eax - 0x164], ecx
jle 0x1004a262
mov dword [ebp - 0x9c], 1
jmp 0x1004a269
and dword [ebp - 0x9c], 0
imul eax, dword [ebp - 0x9c], 0xcf5
neg eax
jne 0x1004a286
cmp dword [ebp - 0x44], 0
jne 0x1004a286
and dword [ebp - 0x144], 0
jmp 0x1004a290
mov dword [ebp - 0x144], 1
mov eax, dword [ebp - 0x30]
inc eax
xor ecx, ecx
inc ecx
sub ecx, eax
cmp dword [ebp - 0x30], ecx
jne 0x1004a2aa
mov dword [ebp - 0x108], 1
jmp 0x1004a2b1
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x108], eax
jne 0x1004a2cb
mov dword [ebp - 0x98], 1
jmp 0x1004a2d2
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
neg eax
cmp eax, 0xffffffff
jge 0x1004a2eb
mov dword [ebp - 0xd4], 1
jmp 0x1004a2f2
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xa4], eax
jmp 0x1004a1ce
mov dword [ebp - 0x30], 0
jmp 0x1004a313
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x17
je 0x1004a34b
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x18], eax
jl 0x1004a330
mov dword [ebp - 0xfc], 1
jmp 0x1004a337
and dword [ebp - 0xfc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x228], ecx
jmp 0x1004a30c
jmp 0x1004a045
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1004a5ec
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x13c], 0xbacd7953
mov dword [ebp - 0x3c], 0xfffffff9
jmp 0x1004a37d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffffb
jl 0x1004a3ba
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x13c], eax
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x1004a3b8
push 0
push 0x1b85
push 0x490
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
jmp 0x1004a376
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x38], 0x62d5e48d
mov dword [ebp - 0x20c], 1
mov dword [ebp - 0x120], 0xbac04ee7
mov dword [ebp - 0x208], 0x5b40194d
mov dword [ebp - 0x204], 0x5b40194d
mov dword [ebp - 0x200], 0x5b40194d
mov dword [ebp - 0x1fc], 0x5b40194d
push 3
lea ecx, [ebp - 0x1bc]
call fcn.10014fc7
mov dword [ebp - 4], 1
mov dword [ebp - 0xac], 0x42f3
mov dword [ebp - 0x68], 0
jmp 0x1004a434
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1004a450
push dword [ebp - 0x68]
lea ecx, [ebp - 0x1bc]
call fcn.10015051
mov dword [eax], 0xfffffffb
jmp 0x1004a42d
mov dword [ebp - 0x38], 0
jmp 0x1004a460
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x18
jg 0x1004a4cb
mov dword [ebp - 0x1e4], 0x867b8f5f
push 3
lea ecx, [ebp - 0x1b0]
call fcn.10014fc7
mov byte [ebp - 4], 2
mov dword [ebp - 0x60], 0
jmp 0x1004a491
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1004a4ad
push dword [ebp - 0x60]
lea ecx, [ebp - 0x1b0]
call fcn.10015051
mov dword [eax], 0x5fac1226
jmp 0x1004a48a
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1b0]
call fcn.1001504c
jmp 0x1004a459
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x38], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1bc]
call fcn.1001504c
push 2
lea ecx, [ebp - 0x15c]
call fcn.10014fc7
mov dword [ebp - 4], 3
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x1ec], 0x43250e6d
mov dword [ebp - 0x4c], 0
jmp 0x1004a518
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1004a534
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x15c]
call fcn.10015051
mov dword [eax], 0xa684
jmp 0x1004a511
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x1004a54a
push 0
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [ebp - 0x34], 1
jmp 0x1004a55a
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1004a584
push dword [ebp - 0x34]
lea ecx, [ebp - 0x15c]
call fcn.10015051
mov esi, eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x15c]
call fcn.10015051
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1004a553
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15c]
call fcn.1001504c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
jmp 0x1004a5c7
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
cmp dword [eax], 4
jge 0x1004a5e7
mov eax, dword [ebp - 0x40]
push dword [eax]
mov ecx, dword [ebp - 0x140]
call fcn.10015051
mov dword [eax], 0x6eae1177
jmp 0x1004a5bc
jmp 0x1004ad20
mov dword [ebp - 0x48], 0x62d5e48d
mov dword [ebp - 0x1f4], 1
mov dword [ebp - 0x134], 0xbac04ee7
mov dword [ebp - 0x21c], 0x5b40194d
mov dword [ebp - 0x218], 0x5b40194d
mov dword [ebp - 0x214], 0x5b40194d
mov dword [ebp - 0x210], 0x5b40194d
push 3
lea ecx, [ebp - 0x1dc]
call fcn.10014fc7
mov dword [ebp - 4], 4
mov dword [ebp - 0xdc], 0x42f3
mov dword [ebp - 0x6c], 0
jmp 0x1004a65d
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1004a679
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1dc]
call fcn.10015051
mov dword [eax], 0xfffffffb
jmp 0x1004a656
mov dword [ebp - 0x48], 0
jmp 0x1004a689
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x18
jg 0x1004a6f4
mov dword [ebp - 0x1a4], 0x867b8f5f
push 3
lea ecx, [ebp - 0x1cc]
call fcn.10014fc7
mov byte [ebp - 4], 5
mov dword [ebp - 0x50], 0
jmp 0x1004a6ba
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1004a6d6
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1cc]
call fcn.10015051
mov dword [eax], 0x5fac1226
jmp 0x1004a6b3
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1cc]
call fcn.1001504c
jmp 0x1004a682
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x48], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1dc]
call fcn.1001504c
push 3
lea ecx, [ebp - 0x78]
call fcn.10014fc7
mov dword [ebp - 4], 6
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x118], 0xfffffff8
mov dword [ebp - 0x114], 0xfffffff8
mov dword [ebp - 0x110], 0xfffffff8
mov dword [ebp - 0x10c], 0xfffffff8
mov dword [ebp - 0xd0], 0xffffffff
mov dword [ebp - 0x14], 0xa55b90cb
push 3
lea ecx, [ebp - 0x190]
call fcn.10014fc7
mov byte [ebp - 4], 7
mov dword [ebp - 0x1c], 0
jmp 0x1004a77e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1004a797
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x78]
call fcn.10015051
mov dword [eax], 0x7f825e7a
jmp 0x1004a777
mov dword [ebp - 0x1c], 0
jmp 0x1004a7a7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1004a7c3
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x190]
call fcn.10015051
mov dword [eax], 1
jmp 0x1004a7a0
mov dword [ebp - 0x10], 2
jmp 0x1004a7d3
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1004abf6
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0xa8], 0xbe776e9f
mov dword [ebp - 0x54], 0
jmp 0x1004a7fe
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1004a814
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1a0], 0x94d03572
jmp 0x1004a7f7
push 0
lea ecx, [ebp - 0x78]
call fcn.10015051
mov ecx, dword [ebp - 0x10]
cmp dword [eax], ecx
je 0x1004a82e
mov dword [ebp - 0x80], 1
jmp 0x1004a832
and dword [ebp - 0x80], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x80]
mov dword [ebp + eax - 0x1a0], ecx
cmp dword [ebp - 0x80], 0x18d3
jne 0x1004a857
mov dword [ebp - 0xb4], 1
jmp 0x1004a85e
and dword [ebp - 0xb4], 0
push 1
lea ecx, [ebp - 0x78]
call fcn.10015051
mov ecx, dword [ebp - 0xb4]
cmp ecx, dword [eax]
jg 0x1004a87e
mov dword [ebp - 0xf4], 1
jmp 0x1004a885
and dword [ebp - 0xf4], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x78]
call fcn.10015051
mov esi, dword [ebp - 0xf4]
imul esi, dword [eax]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x78]
call fcn.10015051
cmp esi, dword [eax]
jne 0x1004a8b4
mov dword [ebp - 0xbc], 1
jmp 0x1004a8bb
and dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 0xc2d6
je 0x1004a8d3
mov dword [ebp - 0xe4], 1
jmp 0x1004a8da
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x10], eax
jg 0x1004a8f7
mov dword [ebp - 0xc4], 1
jmp 0x1004a8fe
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 0xfffa
jne 0x1004a916
mov dword [ebp - 0x104], 1
jmp 0x1004a91d
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0xa6c84902
je 0x1004a935
mov dword [ebp - 0xcc], 1
jmp 0x1004a93c
and dword [ebp - 0xcc], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x78]
call fcn.10015051
mov eax, dword [eax]
sub eax, dword [ebp - 0xcc]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x118]
jle 0x1004ab9e
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x138], 0xb39
mov dword [ebp - 0x20], 0
jmp 0x1004a985
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x1004ab9c
mov dword [ebp - 0x28], 0xc8a52b4b
mov dword [ebp - 0x28], 0
jmp 0x1004a9a6
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x1004a9c9
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1004a9c7
push 0x1b44
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
jmp 0x1004a99f
cmp dword [ebp - 0x28], 0
jne 0x1004aaea
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x84]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1a0]
jl 0x1004aa04
mov dword [ebp - 0xec], 1
jmp 0x1004aa0b
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 7
jne 0x1004aa20
mov dword [ebp - 0x94], 1
jmp 0x1004aa27
and dword [ebp - 0x94], 0
imul eax, dword [ebp - 0x94], 0x69a0
cmp eax, dword [ebp - 0xa8]
jl 0x1004aa45
mov dword [ebp - 0x90], 1
jmp 0x1004aa4c
and dword [ebp - 0x90], 0
imul esi, dword [ebp - 0x90], 5
push dword [ebp - 0x10]
lea ecx, [ebp - 0x78]
call fcn.10015051
add esi, dword [eax]
cmp esi, dword [ebp - 0xa8]
jl 0x1004aa74
mov dword [ebp - 0xb0], 1
jmp 0x1004aa7b
and dword [ebp - 0xb0], 0
imul eax, dword [ebp - 0xb0], 0xe487
cmp eax, dword [ebp - 0x84]
jle 0x1004aa99
mov dword [ebp - 0xb8], 1
jmp 0x1004aaa0
and dword [ebp - 0xb8], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x78]
call fcn.10015051
mov ecx, dword [ebp - 0xb8]
add ecx, dword [eax]
push 4
pop eax
shl eax, 1
cmp ecx, dword [ebp + eax - 0x118]
jne 0x1004aacd
mov dword [ebp - 0xc0], 1
jmp 0x1004aad4
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
add eax, 0x1d1bedd5
jne 0x1004aaea
and dword [ebp - 0xc8], 0
jmp 0x1004aaf4
mov dword [ebp - 0xc8], 1
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0xd0], eax
jle 0x1004ab1a
mov dword [ebp - 0xd8], 1
jmp 0x1004ab21
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xd8], eax
je 0x1004ab38
mov dword [ebp - 0xe0], 1
jmp 0x1004ab3f
and dword [ebp - 0xe0], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x78]
call fcn.10015051
mov ecx, dword [ebp - 0xe0]
sub ecx, dword [eax]
mov dword [ebp - 0xe8], ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x78]
call fcn.10015051
mov ecx, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
sub eax, 0xa672
cmp eax, dword [ebp - 0x28]
je 0x1004ab87
mov dword [ebp - 0xf0], 1
jmp 0x1004ab8e
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x14], eax
jmp 0x1004a97e
jmp 0x1004abe0
mov dword [ebp - 0x14], 0
jmp 0x1004abae
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x11
jge 0x1004abcb
mov dword [ebp - 0x124], 0xd727ab81
cmp dword [ebp - 0x124], 0
je 0x1004abc9
jmp 0x1004abcb
jmp 0x1004aba7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0
je 0x1004abe0
jmp 0x1004a7cc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1a0], 0xfac86e89
jmp 0x1004a7cc
mov dword [ebp - 0x14], 0
jmp 0x1004ac06
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x1004acfb
push 2
lea ecx, [ebp - 0x184]
call fcn.10014fc7
mov byte [ebp - 4], 8
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x5c], 0
jmp 0x1004ac3b
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1004ac57
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x184]
call fcn.10015051
mov dword [eax], 3
jmp 0x1004ac34
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x118], 0
je 0x1004acc1
push 0
lea ecx, [ebp - 0x190]
call fcn.10015051
mov dword [eax], 0xfffffffd
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x118]
mov dword [ebp - 0xf8], eax
push 0
lea ecx, [ebp - 0x184]
call fcn.10015051
mov ecx, dword [ebp - 0xf8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
sub eax, 0x5ae2b100
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + ecx*4 - 0x118], eax
jg 0x1004acc1
mov dword [ebp - 0x100], 1
jmp 0x1004acc8
and dword [ebp - 0x100], 0
push 2
lea ecx, [ebp - 0x78]
call fcn.10015051
mov eax, dword [eax]
mov ecx, dword [ebp - 0x100]
lea eax, [ecx + eax - 0x226996dc]
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x184]
call fcn.1001504c
jmp 0x1004abff
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x190]
call fcn.1001504c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.1001504c
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret