Function at 0x1000e67d
Capabilities:
Delete registry value

Disassembly:
mov eax, 0x1006782d
call fcn.10067390
sub esp, 0x4c
push ebx
push edi
xor edi, edi
mov dword [ebp - 0x14], 0x5c68ec0a
inc edi
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x18], edi
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x28], 0xffffffff
push edi
call fcn.10013363
mov dword [ebp - 4], ebx
mov dword [ebp - 0x24], 0xd6b9ec49
mov dword [ebp - 0x20], 0x38d7
mov dword [ebp - 0x14], ebx
jmp 0x1000e6d9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x30], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000e6cb
mov dword [ebp - 0x14], ebx
jmp 0x1000e6f2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], 0x2499e68f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000e6e4
mov dword [ebp - 0x14], ebx
jmp 0x1000e709
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1000e6fd
mov dword [ebp - 0x14], 0xffffffef
cmp dword [ebp - 0x14], 0xffffffe5
jl 0x1000e7ba
push esi
mov dword [ebp - 0x24], 0xffffffff
lea ecx, [ebp - 0x3c]
push 2
call fcn.10013363
mov dword [ebp - 0x1c], ebx
jmp 0x1000e743
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1000e736
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
sete dl
inc edx
neg edx
mov dword [esi + 4], ecx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 0xddd9cd4
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
mov ecx, 0xffff7b65
setle dl
sub ecx, edx
add eax, ecx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [esi + 4]
mov dword [ebp - 0x1c], eax
call fcn.100133e5
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe5
jge 0x1000e720
pop esi
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
inc dword [ebp - 0x20]
cmp eax, ecx
jne 0x1000e7f2
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1000e88b
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
jmp 0x1000e88b
mov dword [ebp - 0x28], 0xa623b0d7
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x18], ebx
jmp 0x1000e882
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x20], 0x2b33
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xdfa8
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x14]
je 0x1000e832
mov ecx, ebx
cmp dword [ebp - 0x14], ebx
je 0x1000e834
mov ecx, edi
mov eax, dword [ebp - 0x28]
sub ecx, eax
je 0x1000e83e
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x14]
cmp eax, 0x7345
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x1000e87f
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1000e87a
push 0x2076
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
dec dword [ebp - 0x14]
jns 0x1000e863
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x1000e805
lea ecx, [ebp - 0x48]
call fcn.100133e5
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ecx, dword [ebp - 0xc]
pop edi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret