Function at 0x10005be0
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10020cb0
push eax
mov eax, 0x2230
mov dword fs:[0], esp
call fcn.1001a410
push ebx
xor eax, eax
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp + 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x30], eax
call fcn.10005670
mov edi, dword [esi]
mov al, byte [edi]
test al, al
je 0x10006645
cmp al, 0x27
jne 0x10005cb4
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10005c99
mov ecx, esi
call fcn.100055c0
test eax, eax
jne 0x10005c99
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10005c61
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov edi, dword [esi]
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov ecx, dword [ebp + 8]
lea edx, [ebx + 2]
add ecx, 0x1000
mov dword [esi], eax
cmp edx, ecx
jae 0x10006645
cmp edi, eax
jae 0x10005c92
mov eax, edi
mov cl, byte [eax]
inc eax
mov byte [ebx], cl
mov ecx, dword [esi]
inc ebx
cmp eax, ecx
jb 0x10005c86
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x10005c46
mov eax, dword [esi]
cmp byte [eax], 0
je 0x10006645
mov byte [ebx], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x10005ce4
push eax
mov ecx, esi
call fcn.10005620
test eax, eax
jne 0x10005ce1
push edi
call dword [sym.imp.USER32.dll_CharNextA]
cmp edi, eax
mov dword [esi], eax
jae 0x10005cd9
mov dl, byte [edi]
inc edi
mov byte [ebx], dl
mov eax, dword [esi]
inc ebx
cmp edi, eax
jb 0x10005ccd
mov edi, dword [esi]
mov al, byte [edi]
test al, al
jne 0x10005cb4
mov byte [ebx], 0
mov eax, dword [ebp + 8]
xor edi, edi
cmp byte [eax], 0x7d
je 0x1000660b
mov ecx, dword [str.Delete]
mov edx, dword [ebp + 8]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
push ecx
push edx
call ebx
mov ecx, dword [ebp + 8]
mov edi, eax
mov eax, dword [str.ForceRemove]
neg edi
sbb edi, edi
push eax
inc edi
push ecx
mov dword [ebp - 0x2c], edi
call ebx
test eax, eax
je 0x10005d27
test edi, edi
je 0x10006030
mov ebx, dword [ebp + 8]
mov ecx, esi
call fcn.10005670
mov edi, dword [esi]
mov al, byte [edi]
test al, al
je 0x10006606
cmp al, 0x27
jne 0x10005dc0
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10005da3
mov ecx, esi
call fcn.100055c0
test eax, eax
jne 0x10005da3
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10005d6b
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov edi, dword [esi]
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov ecx, dword [ebp + 8]
lea edx, [ebx + 2]
add ecx, 0x1000
mov dword [esi], eax
cmp edx, ecx
jae 0x10006606
cmp edi, eax
jae 0x10005d9c
mov eax, edi
mov dl, byte [eax]
inc eax
mov byte [ebx], dl
mov ecx, dword [esi]
inc ebx
cmp eax, ecx
jb 0x10005d90
mov eax, dword [esi]
cmp byte [eax], 0
jne 0x10005d50
mov ecx, dword [esi]
cmp byte [ecx], 0
je 0x10006606
mov edi, dword [sym.imp.USER32.dll_CharNextA]
mov byte [ebx], 0
mov edx, dword [esi]
push edx
call edi
mov dword [esi], eax
jmp 0x10005df6
push eax
mov ecx, esi
call fcn.10005620
test eax, eax
jne 0x10005ded
push edi
call dword [sym.imp.USER32.dll_CharNextA]
cmp edi, eax
mov dword [esi], eax
jae 0x10005de5
mov al, byte [edi]
inc edi
mov byte [ebx], al
mov eax, dword [esi]
inc ebx
cmp edi, eax
jb 0x10005dd9
mov edi, dword [esi]
mov al, byte [edi]
test al, al
jne 0x10005dc0
mov edi, dword [sym.imp.USER32.dll_CharNextA]
mov byte [ebx], 0
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x10006030
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov byte [ebp - 4], 1
mov eax, ebx
mov cl, byte [ebx]
test cl, cl
je 0x10005e29
cmp cl, 0x5c
je 0x10006639
push eax
call edi
mov cl, byte [eax]
test cl, cl
jne 0x10005e17
mov edi, 0x10029030
mov ecx, dword [edi]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10005ef8
add edi, 4
cmp edi, str.TYPELIB
jl 0x10005e2e
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], eax
push 0x2001f
push ebx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.10006730
test eax, eax
jne 0x10005ee5
lea edx, [ebp - 0x38]
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push edx
mov edx, dword [ebp - 0x18]
push eax
push eax
push eax
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x23c]
push eax
push ecx
push 0
push edx
mov dword [ebp - 0x20], 0x100
call edi
test eax, eax
jne 0x10005ed2
lea eax, [ebp - 0x23c]
lea ecx, [ebp - 0x18]
push eax
call fcn.10006780
test eax, eax
jne 0x10005ee5
lea ecx, [ebp - 0x38]
lea edx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x18]
push eax
push eax
push eax
lea eax, [ebp - 0x23c]
push edx
push eax
push 0
push ecx
mov dword [ebp - 0x20], 0x100
call edi
test eax, eax
je 0x10005e9a
lea ecx, [ebp - 0x18]
call fcn.100066a0
mov edx, dword [ebp - 0x14]
push ebx
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.100066a0
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x10006022
mov ebx, dword [ebp + 8]
mov ecx, esi
call fcn.10005670
mov edi, dword [esi]
mov al, byte [edi]
test al, al
je 0x100065e3
cmp al, 0x27
jne 0x10005f9a
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10005f7f
mov ecx, esi
call fcn.100055c0
test eax, eax
jne 0x10005f7f
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10005f47
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov edi, dword [esi]
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov edx, dword [ebp + 8]
lea ecx, [ebx + 2]
add edx, 0x1000
mov dword [esi], eax
cmp ecx, edx
jae 0x100065e3
cmp edi, eax
jae 0x10005f78
mov eax, edi
mov cl, byte [eax]
inc eax
mov byte [ebx], cl
mov ecx, dword [esi]
inc ebx
cmp eax, ecx
jb 0x10005f6c
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x10005f2c
mov eax, dword [esi]
cmp byte [eax], 0
je 0x100065e3
mov byte [ebx], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x10005fca
push eax
mov ecx, esi
call fcn.10005620
test eax, eax
jne 0x10005fc7
push edi
call dword [sym.imp.USER32.dll_CharNextA]
cmp edi, eax
mov dword [esi], eax
jae 0x10005fbf
mov dl, byte [edi]
inc edi
mov byte [ebx], dl
mov eax, dword [esi]
inc ebx
cmp edi, eax
jb 0x10005fb3
mov edi, dword [esi]
mov al, byte [edi]
test al, al
jne 0x10005f9a
mov byte [ebx], 0
mov ebx, dword [ebp + 8]
cmp byte [ebx], 0x3d
jne 0x1000600f
push ebx
mov ecx, esi
call fcn.100056c0
test eax, eax
jl 0x100065f6
mov ecx, esi
call fcn.10005670
lea eax, [ebp - 0x123c]
mov ecx, esi
push eax
call fcn.100056c0
test eax, eax
jl 0x100065f6
push ebx
mov ecx, esi
call fcn.100056c0
test eax, eax
jl 0x100065f6
lea ecx, [ebp - 0x14]
xor edi, edi
mov byte [ebp - 4], 0
call fcn.100066a0
jmp 0x10006300
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.100066a0
jmp 0x10006033
mov ebx, dword [ebp + 8]
mov ecx, dword [str.NoRemove]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x10006113
mov ebx, dword [ebp + 8]
mov ecx, esi
mov dword [ebp - 0x28], eax
call fcn.10005670
mov edi, dword [esi]
mov al, byte [edi]
test al, al
je 0x10006606
cmp al, 0x27
jne 0x100060e3
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x100060c8
mov ecx, esi
call fcn.100055c0
test eax, eax
jne 0x100060c8
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10006090
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov edi, dword [esi]
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov ecx, dword [ebp + 8]
lea edx, [ebx + 2]
add ecx, 0x1000
mov dword [esi], eax
cmp edx, ecx
jae 0x10006606
cmp edi, eax
jae 0x100060c1
mov eax, edi
mov dl, byte [eax]
inc eax
mov byte [ebx], dl
mov ecx, dword [esi]
inc ebx
cmp eax, ecx
jb 0x100060b5
mov eax, dword [esi]
cmp byte [eax], 0
jne 0x10006075
mov ecx, dword [esi]
cmp byte [ecx], 0
je 0x10006606
mov byte [ebx], 0
mov edx, dword [esi]
push edx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x10006113
push eax
mov ecx, esi
call fcn.10005620
test eax, eax
jne 0x10006110
push edi
call dword [sym.imp.USER32.dll_CharNextA]
cmp edi, eax
mov dword [esi], eax
jae 0x10006108
mov al, byte [edi]
inc edi
mov byte [ebx], al
mov eax, dword [esi]
inc ebx
cmp edi, eax
jb 0x100060fc
mov edi, dword [esi]
mov al, byte [edi]
test al, al
jne 0x100060e3
mov byte [ebx], 0
mov ecx, dword [0x100233ac]
mov edi, dword [ebp + 8]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x100063c0
mov ecx, esi
lea edi, [ebp - 0x13c]
call fcn.10005670
mov ebx, dword [esi]
mov al, byte [ebx]
test al, al
je 0x10006606
cmp al, 0x27
jne 0x100061bd
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x100061a4
mov ecx, esi
call fcn.100055c0
test eax, eax
jne 0x100061a4
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x10006173
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
lea edx, [edi + 2]
lea ecx, [ebp + 0xec4]
cmp edx, ecx
mov dword [esi], eax
jae 0x10006606
cmp ebx, eax
jae 0x1000619f
mov ecx, ebx
mov dl, byte [ecx]
inc ecx
mov byte [edi], dl
inc edi
cmp ecx, eax
jb 0x10006195
cmp byte [eax], 0
jne 0x10006158
mov eax, dword [esi]
cmp byte [eax], 0
je 0x10006606
push eax
mov byte [edi], 0
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x100061eb
push eax
mov ecx, esi
call fcn.10005620
test eax, eax
jne 0x100061e8
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x100061e0
mov cl, byte [ebx]
inc ebx
mov byte [edi], cl
inc edi
cmp ebx, eax
jb 0x100061d6
mov ebx, eax
mov al, byte [eax]
test al, al
jne 0x100061bd
mov byte [edi], 0
mov ebx, dword [ebp + 8]
mov ecx, esi
call fcn.10005670
mov edi, dword [esi]
mov al, byte [edi]
test al, al
je 0x10006606
cmp al, 0x27
jne 0x10006282
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x10006267
mov ecx, esi
call fcn.100055c0
test eax, eax
jne 0x10006267
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x1000622f
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov edi, dword [esi]
push edi
call dword [sym.imp.USER32.dll_CharNextA]
mov ecx, dword [ebp + 8]
lea edx, [ebx + 2]
add ecx, 0x1000
mov dword [esi], eax
cmp edx, ecx
jae 0x10006606
cmp edi, eax
jae 0x10006260
mov eax, edi
mov dl, byte [eax]
inc eax
mov byte [ebx], dl
mov ecx, dword [esi]
inc ebx
cmp eax, ecx
jb 0x10006254
mov eax, dword [esi]
cmp byte [eax], 0
jne 0x10006214
mov ecx, dword [esi]
cmp byte [ecx], 0
je 0x10006606
mov byte [ebx], 0
mov edx, dword [esi]
push edx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x100062b2
push eax
mov ecx, esi
call fcn.10005620
test eax, eax
jne 0x100062af
push edi
call dword [sym.imp.USER32.dll_CharNextA]
cmp edi, eax
mov dword [esi], eax
jae 0x100062a7
mov al, byte [edi]
inc edi
mov byte [ebx], al
mov eax, dword [esi]
inc ebx
cmp edi, eax
jb 0x1000629b
mov edi, dword [esi]
mov al, byte [edi]
test al, al
jne 0x10006282
mov byte [ebx], 0
mov edi, dword [ebp + 8]
cmp byte [edi], 0x3d
jne 0x1000665b
mov eax, dword [ebp + 0x10]
xor ebx, ebx
cmp eax, ebx
je 0x1000634d
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x13c]
push edi
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ecx
push edx
push eax
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.100068d0
lea ecx, [ebp - 0x14]
mov edi, eax
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], bl
call fcn.100066a0
cmp edi, ebx
jl 0x1000660b
mov ebx, dword [ebp + 8]
cmp byte [ebx], 0x7b
jne 0x10006342
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 1
jne 0x10006342
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x10]
push 0
push eax
push ecx
push ebx
mov ecx, esi
call fcn.10005be0
mov edi, eax
test edi, edi
jl 0x1000660b
mov ecx, esi
push ebx
call fcn.100056c0
mov edi, eax
test edi, edi
jl 0x1000660b
mov edx, dword [ebp + 8]
cmp byte [edx], 0x7d
jmp 0x10005cec
cmp dword [ebp + 0x14], ebx
jne 0x10006371
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x13c]
push ecx
push eax
mov dword [ebp - 0x14], eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
call fcn.100066a0
cmp byte [edi], 0x3d
jne 0x100063b3
push edi
mov ecx, esi
call fcn.100056c0
cmp eax, ebx
jl 0x10006635
mov ecx, esi
call fcn.10005670
lea edx, [ebp - 0x223c]
mov ecx, esi
push edx
call fcn.100056c0
cmp eax, ebx
jl 0x10006635
push edi
mov ecx, esi
call fcn.100056c0
cmp eax, ebx
jl 0x10006635
mov edx, dword [ebp + 8]
xor edi, edi
cmp byte [edx], 0x7d
jmp 0x10005cec
mov cl, byte [edi]
mov eax, edi
test cl, cl
je 0x100063e0
mov ebx, dword [sym.imp.USER32.dll_CharNextA]
cmp cl, 0x5c
je 0x10006645
push eax
call ebx
mov cl, byte [eax]
test cl, cl
jne 0x100063ce
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x10006466
mov ebx, dword [ebp + 0xc]
push 0xf003f
push edi
push ebx
lea ecx, [ebp - 0x10]
call fcn.10006730
test eax, eax
je 0x1000642f
push 0x20019
push edi
push ebx
lea ecx, [ebp - 0x10]
call fcn.10006730
test eax, eax
je 0x1000642f
push 0
push 0
push 0xf003f
push 0
push 0
push edi
push ebx
lea ecx, [ebp - 0x10]
call fcn.100066c0
test eax, eax
jne 0x10006645
mov ebx, dword [ebp + 8]
mov ecx, esi
push ebx
call fcn.100056c0
mov edi, eax
test edi, edi
jl 0x1000660b
cmp byte [ebx], 0x3d
jne 0x10006300
mov eax, ebx
lea ecx, [ebp - 0x10]
push eax
push 0
push ecx
mov ecx, esi
call fcn.100068d0
mov edi, eax
test edi, edi
jmp 0x100062fa
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x1000648a
mov edx, dword [ebp + 0xc]
push 0x20019
push edi
push edx
lea ecx, [ebp - 0x10]
call fcn.10006730
test eax, eax
je 0x1000648a
mov dword [ebp + 0x14], 1
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
jne 0x100064a0
mov eax, 0x104
call fcn.1001a410
mov ebx, esp
mov dword [ebp - 0x1c], ebx
push 0x104
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x100064d6
mov eax, dword [ebp - 0x10]
mov ecx, esi
push eax
call fcn.10006cc0
test eax, eax
jne 0x100064d6
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, esi
call fcn.10006d10
test eax, eax
je 0x10006591
mov ebx, dword [ebp + 8]
mov ecx, esi
push ebx
call fcn.100056c0
mov edi, eax
test edi, edi
jl 0x1000660b
push ebx
mov ecx, esi
call fcn.10006dc0
mov edi, eax
test edi, edi
jl 0x1000660b
cmp byte [ebx], 0x7b
jne 0x10006530
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x10]
push edx
push 0
push eax
push ebx
mov ecx, esi
call fcn.10005be0
mov edi, eax
test edi, edi
jl 0x1000660b
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x1000653e
mov ecx, dword [ebp - 0x30]
mov dword [ebp + 0x14], ecx
jmp 0x100065c8
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x10006342
mov ebx, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
mov ecx, esi
push edx
call fcn.10006cc0
test eax, eax
je 0x10006583
mov edi, 0x10029030
mov eax, dword [edi]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10006330
add edi, 4
cmp edi, str.TYPELIB
jl 0x10006552
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x10]
push edx
call fcn.10006780
jmp 0x10006330
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x10006342
mov ebx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x10]
call fcn.100066a0
test eax, eax
jne 0x1000665b
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x100065c5
mov eax, dword [ebp + 0xc]
push ebx
push eax
mov dword [ebp - 0x24], eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.100066a0
mov ebx, dword [ebp + 8]
push ebx
mov ecx, esi
call fcn.100056c0
mov edi, eax
test edi, edi
jl 0x1000660b
push ebx
mov ecx, esi
call fcn.10006dc0
jmp 0x10006338
lea ecx, [ebp - 0x14]
mov edi, 0x80020009
mov byte [ebp - 4], 0
call fcn.100066a0
jmp 0x1000660b
lea ecx, [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0
call fcn.100066a0
jmp 0x1000660b
mov edi, 0x80020009
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
call fcn.100066a0
mov eax, edi
lea esp, [ebp - 0x2248]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edi, eax
jmp 0x1000660b
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.100066a0
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
call fcn.100066a0
mov eax, 0x80020009
jmp 0x1000661c
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
call fcn.100066a0
mov eax, 0x80020009
jmp 0x1000661c