Function at 0x1003eefb
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov dword [ebp - 8], 0x57976326
push ebx
mov dword [ebp - 0x14], 0x4543beb7
push esi
mov dword [ebp - 0x28], 0x737e0d1b
xor esi, esi
mov dword [ebp - 0x28], 0x5bb00289
inc esi
mov dword [ebp - 0x24], 0x5cfe
xor ebx, ebx
mov dword [ebp - 0x28], esi
push edi
mov dword [ebp - 0x28], 0xffffffff
mov edi, ecx
mov dword [ebp - 8], ebx
jmp 0x1003ef4b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x30], 3
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1003ef3d
mov dword [ebp - 8], ebx
jmp 0x1003ef64
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x60], 0x164f943a
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1003ef56
mov dword [ebp - 8], esi
cmp dword [ebp - 8], ebx
jl 0x1003f06b
mov dword [ebp - 0x28], 0x5e2de4bf
mov dword [ebp - 0x10], 0x3c017f21
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x20], 0xe401d933
mov dword [ebp - 0x20], 0x18ebdb88
mov dword [ebp - 0x18], 0x27142b62
mov dword [ebp - 0x20], 0x795c380a
mov dword [ebp - 0x20], 0x4e3473ed
mov dword [ebp - 0xc], 3
mov dword [ebp - 0x1c], 0x9c74e37a
mov dword [ebp - 0x10], ebx
jmp 0x1003efcf
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x40], 7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1003efc1
mov eax, dword [ebp - 0x14]
xor edx, edx
inc dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
imul edx, ecx
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], ebx
je 0x1003f005
mov edx, esi
cmp dword [ebp - 0x20], ebx
jne 0x1003f007
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
setle cl
add ecx, 0x148c
jne 0x1003f025
cmp dword [ebp - 0x2c], ebx
jne 0x1003f025
mov ecx, ebx
cmp dword [ebp - 0xc], ebx
je 0x1003f027
mov ecx, esi
mov eax, dword [ebp - 0x24]
sub ecx, eax
cmp ecx, dword [ebp - 0x28]
je 0x1003f038
mov ecx, esi
cmp dword [ebp - 8], ebx
jne 0x1003f03a
mov ecx, ebx
mov dword [ebp - 0x5c], ecx
xor edx, edx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 8]
setne dl
sub edx, 7
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x28], ecx
dec dword [ebp - 8]
jns 0x1003ef76
push edi
push 0x5aa2
push esi
call fcn.1003a20b
mov dword [ebp - 8], 0xfffffff9
add esp, 0xc
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x18], 0xb785b647
mov dword [ebp - 0x28], 0x93cc
mov dword [ebp - 8], ebx
jmp 0x1003f0ad
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1003f0aa
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffffc
jge 0x1003f09b
mov dword [ebp - 8], 0x1a
jmp 0x1003f144
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x10], ebx
jmp 0x1003f0d9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x50], 0xfffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1003f0cb
cmp dword [ebp - 0x44], ebx
jne 0x1003f102
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x1a4e
setge cl
cmp ecx, 0x38ec
jne 0x1003f0fe
cmp dword [ebp - 0x18], ebx
jne 0x1003f102
mov edx, ebx
jmp 0x1003f104
mov edx, esi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x14]
cmp edx, 0x6c31
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
neg edx
cmp edx, eax
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
setg cl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff8
jne 0x1003f0bf
push edi
call fcn.1002873e
mov dword [ebp - 8], 0x5043c4ab
mov edi, eax
mov dword [ebp - 0xc], 5
mov dword [ebp - 0x10], ebx
pop ecx
mov dword [ebp - 0x10], ebx
jmp 0x1003f17b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x70], 0xd5d70512
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1003f16d
cmp dword [ebp - 8], ebx
je 0x1003f1af
mov eax, dword [ebp - 8]
xor ecx, ecx
cmp eax, 0xfffffffa
setle cl
cmp ecx, dword [ebp - 8]
jl 0x1003f199
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 8], 0x31f1
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xfffffffb
jle 0x1003f1b1
mov esi, ebx
lea ecx, [esi - 5]
mov dword [ebp - 0x70], ecx
mov eax, dword [ebp - 8]
add eax, ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0xfffffff4
jmp 0x1003f213
mov dword [ebp - 0x28], 0xbd52
mov dword [ebp - 0xc], ebx
jmp 0x1003f1e2
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x38], 0xadf86095
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x1003f1d4
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1003f1f8
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov dword [ebp - 0xc], 0xfffffffc
jmp 0x1003f20a
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], ebx
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffea
jl 0x1003f201
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffeb
jg 0x1003f1c8
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret