Function at 0x10006237
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
cmp byte [ebp + 8], 0
push ebx
push esi
push edi
push 0
pop esi
mov ebx, edx
push 1
mov dword [ebp - 0x18], ebx
pop edi
je 0x10006391
mov dword [ebp - 0x14], 0x1398
cmp dword [ebp - 0x14], 0x1623
jle 0x100062c8
mov dword [ebp - 0x10], esi
mov eax, esi
mov dword [ebp - 0xc], 0x2897
mov dword [ebp - 8], eax
mov ebx, esi
mov ecx, ebx
shl eax, cl
lea ecx, [ebp - 0x30]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000628f
mov eax, dword [eax]
push eax
call fcn.1004139c
pop ecx
push esi
push edi
lea ecx, [ebp - 0x30]
call fcn.1000c8ef
mov eax, dword [ebp - 8]
inc ebx
cmp ebx, 0x2e2f
jl 0x10006276
mov ebx, dword [ebp - 0x10]
add eax, ebx
dec dword [ebp - 0xc]
mov dword [ebp - 8], eax
jne 0x10006274
inc ebx
mov dword [ebp - 0x10], ebx
cmp ebx, 0x3b55
jl 0x10006268
mov ebx, dword [ebp - 0x18]
mov edx, dword [ebp + 0x24]
mov dword [edx], esi
jmp 0x100062f8
mov dword [ebp - 8], 0x858f9c25
mov ecx, dword [edx]
mov eax, dword [ebx]
cmp dword [eax + ecx*4], esi
jne 0x100062fc
mov dword [ebp - 8], esi
jmp 0x100062f1
mov ecx, dword [ebp - 8]
mov eax, dword [ebx]
cmp dword [eax + ecx*4], esi
jne 0x100062f6
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jle 0x100062e4
inc dword [edx]
cmp dword [edx], edi
jle 0x100062cf
mov dword [ebp - 8], 0x2e31
cmp dword [ebp - 8], 0x2fba
jle 0x1000635c
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_SetClassLongA]
mov dword [ebp - 0xc], esi
mov ebx, esi
mov dword [ebp - 0x10], 0x6971
mov esi, ebx
mov edi, 0x3556
mov eax, esi
mov ecx, 0x1006cbb8
cdq
push edx
push eax
call fcn.1000c318
dec esi
dec edi
jne 0x10006328
mov edi, dword [ebp - 0xc]
add ebx, edi
dec dword [ebp - 0x10]
jne 0x10006321
inc edi
mov dword [ebp - 0xc], edi
push 0
pop esi
cmp edi, 0x3049
jl 0x10006318
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
cmp dword [ebp - 0x14], 0x1125
jge 0x10006370
push str.iacihk_cbho_olmlf_ddthvgr_bdhb
call fcn.1004139c
pop ecx
cmp dword [ebp - 8], 0x2cd7
jge 0x10006432
mov edx, str.qkcmoful_skucsxje_vtnaox_prrnax_kadvyucn_cmhlqi_ekhuuym_mtowkqc_hska_laslay_iawflsyt_nnked_glfiajpih
mov ecx, 0x1006cbb8
call fcn.1000e58f
jmp 0x10006432
mov dword [ebp - 0xc], 0x5c3a
cmp dword [ebp - 0xc], 0x5d20
jle 0x10006401
mov dword [ebp - 0x10], esi
mov eax, esi
mov dword [ebp - 0x14], 0x4b03
mov dword [ebp - 8], eax
mov ebx, esi
mov ecx, ebx
shl eax, cl
lea ecx, [ebp - 0x48]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100063cb
mov eax, dword [eax]
push eax
call fcn.1004139c
pop ecx
push esi
push edi
lea ecx, [ebp - 0x48]
call fcn.1000c8ef
mov eax, dword [ebp - 8]
inc ebx
cmp ebx, 0x60af
jl 0x100063b2
mov ebx, dword [ebp - 0x10]
add eax, ebx
dec dword [ebp - 0x14]
mov dword [ebp - 8], eax
jne 0x100063b0
inc ebx
mov dword [ebp - 0x10], ebx
cmp ebx, 0x1d6a
jl 0x100063a4
cmp dword [ebp - 0xc], 0x59dc
jge 0x10006415
push str.cbotspb_caufw_ldewlgof_fodcbq_lqybqur_xhsifgpn_akcsvck_knfxm_wtoygmk_fbqrhoc_fvtbhkd
call fcn.1004139c
pop ecx
mov edx, dword [ebp + 0x10]
mov dword [edx], esi
cmp dword [edx], edi
jge 0x10006432
mov esi, dword [ebp + 0x20]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x6a485bf2
inc dword [edx]
cmp dword [edx], edi
jl 0x10006421
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret