Function at 0x100152b9
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100730c5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x130
push esi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1001538b
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xb0], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x100]
movzx eax, byte [eax]
test eax, eax
je 0x1001537c
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov esi, dword [eax]
mov eax, dword [ebp - 0xc4]
push dword [eax]
mov ecx, dword [ebp - 0x104]
call fcn.1002d7f4
mov dword [eax], esi
jmp 0x10015386
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
jmp 0x10015a02
lea eax, [ebp + 0x28]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xcc]
movzx eax, byte [eax]
test eax, eax
je 0x100159a2
push 4
lea ecx, [ebp - 0x110]
call fcn.1002d70f
and dword [ebp - 4], 0
push 1
lea ecx, [ebp - 0x88]
call fcn.1002d70f
mov byte [ebp - 4], 1
mov dword [ebp - 0x10], 0
jmp 0x100153f2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1001540e
push dword [ebp - 0x10]
lea ecx, [ebp - 0x110]
call fcn.1002d7f4
mov dword [eax], 0x7571
jmp 0x100153eb
mov dword [ebp - 0x10], 0
jmp 0x1001541e
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1001543a
push dword [ebp - 0x10]
lea ecx, [ebp - 0x88]
call fcn.1002d7f4
mov dword [eax], 0x1febaeef
jmp 0x10015417
mov dword [ebp - 0x10], 0
jmp 0x1001544a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10015460
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x90], 0xe00f6802
jmp 0x10015443
push 0
lea ecx, [ebp - 0x88]
call fcn.1002d7f4
and dword [eax], 0
jmp 0x1001548d
push 0
lea ecx, [ebp - 0x88]
call fcn.1002d7f4
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x88]
call fcn.1002d7f4
cmp dword [eax], 3
jg 0x100157f0
mov dword [ebp - 0xac], 0xfffe
mov dword [ebp - 0xa8], 0xfffe
mov dword [ebp - 0xa4], 0xfffe
mov dword [ebp - 0xa0], 0xfffe
push 4
lea ecx, [ebp - 0x9c]
call fcn.1002d70f
mov byte [ebp - 4], 2
mov dword [ebp - 0x14], 0xa2b441a6
mov dword [ebp - 0x34], 0
jmp 0x100154f3
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1001550c
push dword [ebp - 0x34]
lea ecx, [ebp - 0x9c]
call fcn.1002d7f4
and dword [eax], 0
jmp 0x100154ec
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xac]
mov dword [ebp - 0x114], eax
push 0
lea ecx, [ebp - 0x88]
call fcn.1002d7f4
push 0
lea ecx, [ebp - 0x9c]
call fcn.1002d7f4
mov dword [eax], 0x895196ee
mov dword [ebp - 0x14], 0x895196ee
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x90]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x124], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xac]
mov dword [ebp - 0x12c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x90]
cmp dword [ebp + eax - 0x90], ecx
je 0x100155a4
xor eax, eax
jne 0x100155a4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xac], 0
je 0x100155da
mov dword [ebp - 0x14], 0
jmp 0x100155b4
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x100155d5
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x100155d3
push 0
push 0x19b1
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
jmp 0x100155ad
jmp 0x100157dc
mov dword [ebp - 0x38], 0x60d1
mov dword [ebp - 0xd4], 0x1d4b4ea6
mov dword [ebp - 0x134], 8
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x138], 0x203d7e6d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x90], 1
mov dword [ebp - 0x14], 3
jmp 0x1001562a
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x100157dc
mov dword [ebp - 0x20], 0xc88fed6c
mov dword [ebp - 0x120], 0x99fffbc9
mov dword [ebp - 0x130], 0xfc6bf2a6
mov dword [ebp - 0x44], 0x6852
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x20], eax
jne 0x10015670
mov dword [ebp - 0x68], 1
jmp 0x10015674
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
neg eax
cmp eax, 0x6c1d
je 0x10015698
push 3
lea ecx, [ebp - 0x9c]
call fcn.1002d7f4
cmp dword [eax], 0
jne 0x10015698
and dword [ebp - 0x48], 0
jmp 0x1001569f
mov dword [ebp - 0x48], 1
mov esi, dword [ebp - 0x20]
add esi, dword [ebp - 0x48]
push 0
lea ecx, [ebp - 0x88]
call fcn.1002d7f4
cmp esi, dword [eax]
jl 0x100156bf
mov dword [ebp - 0x3c], 1
jmp 0x100156c3
and dword [ebp - 0x3c], 0
cmp dword [ebp - 0x3c], 0x60d4
jl 0x100156d5
mov dword [ebp - 0x50], 1
jmp 0x100156d9
and dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x50]
je 0x100156f9
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xac], 0
je 0x100156f9
mov dword [ebp - 0x70], 1
jmp 0x100156fd
and dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x70], eax
jle 0x10015714
cmp dword [ebp - 0x20], 0
je 0x10015714
mov dword [ebp - 0x58], 1
jmp 0x10015718
and dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x58], eax
je 0x10015729
mov dword [ebp - 0x7c], 1
jmp 0x1001572d
and dword [ebp - 0x7c], 0
push 2
lea ecx, [ebp - 0x110]
call fcn.1002d7f4
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7c]
jl 0x1001574a
mov dword [ebp - 0x60], 1
jmp 0x1001574e
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x78], eax
push 3
lea ecx, [ebp - 0x9c]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x20]
je 0x10015781
mov dword [ebp - 0xec], 1
jmp 0x10015788
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x118], eax
push 3
lea ecx, [ebp - 0x9c]
call fcn.1002d7f4
imul eax, dword [eax], 0xbb35
add eax, 0x330167c3
sub eax, dword [ebp - 0x20]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xac]
jl 0x100157c3
mov dword [ebp - 0x40], 1
jmp 0x100157c7
and dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
jmp 0x10015623
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9c]
call fcn.1002d7e6
jmp 0x10015472
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.1002d7e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.1002d7e6
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0xf4], 0xfffffff6
mov dword [ebp - 0x1c], 0
jmp 0x1001583b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10015976
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0xdc], 0xc443
mov dword [ebp - 0x30], 0
jmp 0x10015866
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffed
jg 0x10015971
mov dword [ebp - 0x24], 0xfffffffb
mov dword [ebp - 0x18], 0xffffffff
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x24]
je 0x10015927
cmp dword [ebp - 0x1c], 0
jne 0x100158a6
mov eax, 0x7ab6
test eax, eax
jne 0x100158a6
and dword [ebp - 0x4c], 0
jmp 0x100158ad
mov dword [ebp - 0x4c], 1
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x100158c5
cmp dword [ebp - 0x18], 0
jne 0x100158c5
and dword [ebp - 0x54], 0
jmp 0x100158cc
mov dword [ebp - 0x54], 1
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x1c]
jl 0x100158e0
mov dword [ebp - 0x5c], 1
jmp 0x100158e4
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x5c]
jge 0x10015927
mov dword [ebp - 0x24], 0
jmp 0x100158fc
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffffb
je 0x10015916
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x10015914
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x100158f5
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xf4], eax
jmp 0x1001596c
mov dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x18], 0
jmp 0x10015944
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1b
jne 0x1001596c
mov dword [ebp - 0x24], 3
jmp 0x1001595a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xd
jge 0x1001596a
cmp dword [ebp - 0x64], 0
je 0x10015968
jmp 0x1001596a
jmp 0x10015953
jmp 0x1001593d
jmp 0x1001585f
jmp 0x10015834
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x1001598c
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
jmp 0x10015a02
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
jmp 0x100159e5
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 3
jge 0x10015a02
mov eax, dword [ebp - 0x2c]
push dword [eax]
mov ecx, dword [ebp - 0xb4]
call fcn.1002d7f4
or dword [eax], 0xffffffff
jmp 0x100159da
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret