Function at 0x100265cb
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x94
movzx eax, byte [ebp + 8]
test eax, eax
je 0x100265ee
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x1002691f
mov dword [ebp - 4], 0x2e91a049
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x18], 0
jmp 0x1002660c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10026622
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x88], 1
jmp 0x10026605
mov byte [ebp - 0xd], 0
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x10026638
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov dword [ebp - 4], 0
jmp 0x10026648
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffec
jg 0x10026910
mov dword [ebp - 8], 0x2124f84b
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x3c], 0x92357994
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x48], 0x4384f3ac
mov dword [ebp - 0x14], 0
jmp 0x10026685
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002669b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x90], 9
jmp 0x1002667e
mov dword [ebp - 8], 0xfffffff3
jmp 0x100266ab
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x1002690b
mov dword [ebp - 0xc], 0xe19f
mov dword [ebp - 0x1c], 0x1db95674
mov dword [ebp - 0x30], 0xfffffffa
mov eax, 0x8d5f
test eax, eax
je 0x1002679d
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
jne 0x100266eb
cmp dword [ebp - 0xc], 0
jne 0x100266eb
and dword [ebp - 0x4c], 0
jmp 0x100266f2
mov dword [ebp - 0x4c], 1
cmp dword [ebp - 0x4c], 0xffffffff
jle 0x10026701
mov dword [ebp - 0x2c], 1
jmp 0x10026705
and dword [ebp - 0x2c], 0
cmp dword [ebp - 0x2c], 0xc3e1b8d8
jne 0x10026717
mov dword [ebp - 0x80], 1
jmp 0x1002671b
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x80], eax
jge 0x1002672c
mov dword [ebp - 0x34], 1
jmp 0x10026730
and dword [ebp - 0x34], 0
cmp dword [ebp - 0x34], 0xea1b1489
jbe 0x10026742
mov dword [ebp - 0x64], 1
jmp 0x10026746
and dword [ebp - 0x64], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x7c], eax
jl 0x10026763
mov dword [ebp - 0x44], 1
jmp 0x10026767
and dword [ebp - 0x44], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x44], eax
jge 0x10026778
mov dword [ebp - 0x6c], 1
jmp 0x1002677c
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x6c], eax
jg 0x1002678d
mov dword [ebp - 0x24], 1
jmp 0x10026791
and dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x100267a9
cmp dword [ebp - 4], 0
jne 0x100267a9
and dword [ebp - 0x78], 0
jmp 0x100267b0
mov dword [ebp - 0x78], 1
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x78], eax
jne 0x100267c7
cmp dword [ebp - 0x1c], 0
je 0x100267c7
mov dword [ebp - 0x54], 1
jmp 0x100267cb
and dword [ebp - 0x54], 0
cmp dword [ebp - 0x54], 0xf7d5
jle 0x100267dd
mov dword [ebp - 0x74], 1
jmp 0x100267e1
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x74]
cmp dword [ebp - 0xc], eax
je 0x100267f5
mov dword [ebp - 0x5c], 1
jmp 0x100267f9
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0xc]
jge 0x1002680e
mov dword [ebp - 0x28], 1
jmp 0x10026812
and dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 4]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x40], eax
jge 0x10026839
mov dword [ebp - 0x20], 1
jmp 0x1002683d
and dword [ebp - 0x20], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp + eax - 0x90], ecx
mov eax, dword [ebp - 0x20]
sub eax, 0x1cf0b513
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
sub eax, 0xffff
je 0x1002686b
mov dword [ebp - 0x50], 1
jmp 0x1002686f
and dword [ebp - 0x50], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x50], eax
jge 0x10026880
mov dword [ebp - 0x58], 1
jmp 0x10026884
and dword [ebp - 0x58], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x58], eax
jle 0x10026895
mov dword [ebp - 0x60], 1
jmp 0x10026899
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x60], eax
jle 0x100268ba
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x90], 0
je 0x100268ba
mov dword [ebp - 0x68], 1
jmp 0x100268be
and dword [ebp - 0x68], 0
cmp dword [ebp - 0x68], 0xc33490ce
jne 0x100268d0
mov dword [ebp - 0x70], 1
jmp 0x100268d4
and dword [ebp - 0x70], 0
cmp dword [ebp - 0x70], 0xffffffff
jbe 0x100268e6
mov dword [ebp - 0x84], 1
jmp 0x100268ed
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x94], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc]
mov dword [ebp + eax - 0x88], ecx
jmp 0x100266a4
jmp 0x10026641
push 0x1381
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esp, ebp
pop ebp
ret