Function at 0x4029f6
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x19c
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
push eax
call fcn.00405400
xor eax, eax
mov al, byte [0x408640]
mov esi, 0x4065ac
push eax
lea eax, [ebp - 8]
push esi
push eax
call fcn.00403460
add esp, 0x10
mov ecx, eax
call fcn.004047a0
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
lea ecx, [ebp - 8]
call fcn.00404930
xor eax, eax
mov al, byte [0x408640]
push eax
lea eax, [ebp - 4]
push 0x40659c
push eax
call fcn.00403460
add esp, 0xc
mov ecx, eax
call fcn.004047a0
push eax
xor eax, eax
mov al, byte [0x408640]
push eax
lea eax, [ebp - 8]
push esi
push eax
call fcn.00403460
add esp, 0xc
mov ecx, eax
call fcn.004047a0
push eax
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea ecx, [ebp - 8]
mov esi, eax
call fcn.00404930
lea ecx, [ebp - 4]
call fcn.00404930
lea eax, [ebp - 0x19c]
push eax
push 2
call esi
lea eax, [ebp - 4]
push eax
call fcn.00404f30
pop ecx
mov ecx, eax
call fcn.004047a0
mov edi, 0x4086a4
push eax
mov ecx, edi
call fcn.00404b60
lea ecx, [ebp - 4]
call fcn.00404930
lea eax, [ebp - 4]
push eax
call fcn.004023b3
pop ecx
mov ecx, eax
call fcn.004047a0
mov ebx, 0x4086a0
push eax
mov ecx, ebx
call fcn.00404b60
lea ecx, [ebp - 4]
call fcn.00404930
lea eax, [ebp - 0xc]
push eax
xor eax, eax
mov al, byte [0x408640]
push eax
lea eax, [ebp - 4]
push 0x406568
push eax
call fcn.00403460
add esp, 0xc
mov ecx, eax
call fcn.004047a0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
lea ecx, [ebp - 4]
call fcn.00404930
xor eax, eax
mov al, byte [0x408640]
push eax
lea eax, [ebp - 4]
push 0x406554
push eax
call fcn.00403460
add esp, 0xc
mov ecx, eax
call fcn.004047a0
push eax
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
lea ecx, [ebp - 4]
call fcn.00404930
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.00402f8e
test eax, eax
je 0x402cca
call fcn.0040247e
xor eax, eax
mov al, byte [0x408640]
push eax
lea eax, [ebp - 4]
push 0x406540
push eax
call fcn.00403460
add esp, 0xc
mov ecx, eax
call fcn.004047a0
mov esi, 0x40898c
push eax
mov ecx, esi
call fcn.00404b60
lea ecx, [ebp - 4]
call fcn.00404930
mov ecx, esi
call fcn.00403fd0
test eax, eax
jne 0x402bc5
mov ecx, ebx
call fcn.004047a0
push eax
call fcn.00402565
pop ecx
push 0x4010aa
push 0xbb8
push 0x161
push dword [0x4086b4]
call dword [sym.imp.USER32.dll_SetTimer]
call fcn.004030eb
test eax, eax
jne 0x402bee
call fcn.0040318e
mov ecx, esi
call fcn.00403fd0
test eax, eax
je 0x402cc7
push 0x5c
mov ecx, ebx
call fcn.004047a0
push eax
lea eax, [ebp - 4]
push eax
call fcn.00405240
add esp, 0xc
mov ecx, eax
call fcn.004047a0
push eax
mov ecx, esi
call fcn.004040a0
lea ecx, [ebp - 4]
call fcn.00404930
push 0x5c
mov ecx, edi
call fcn.004047a0
push eax
lea eax, [ebp - 4]
push eax
call fcn.00405240
add esp, 0xc
mov ecx, eax
call fcn.004047a0
push eax
mov ecx, esi
call fcn.004040a0
lea ecx, [ebp - 4]
call fcn.00404930
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcessId]
push eax
mov ecx, esi
call fcn.00404060
xor eax, eax
mov al, byte [0x408640]
push eax
lea eax, [ebp - 4]
push 0x406554
push eax
call fcn.00403460
add esp, 0xc
mov ecx, eax
call fcn.004047a0
push eax
mov ecx, esi
call fcn.00404100
lea ecx, [ebp - 4]
call fcn.00404930
push 0x5c
mov ecx, edi
call fcn.004047a0
push eax
lea eax, [ebp - 4]
push eax
call fcn.00405240
add esp, 0xc
mov ecx, eax
call fcn.004047a0
push eax
mov ecx, esi
call fcn.00404100
lea ecx, [ebp - 4]
call fcn.00404930
call fcn.00402972
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret