Function at 0x100132f9
Capabilities:
Delete registry key

Disassembly:
mov eax, 0x100608a3
call fcn.1005fe44
sub esp, 0x128
cmp byte [ebp + 8], 0
push ebx
push esi
push edi
mov esi, edx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x54], esi
je 0x10013c15
lea eax, [ebp + 0x14]
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], eax
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0xc0], 7
mov dword [ebp - 0xc4], ebx
mov word [ebp - 0xd4], ax
push 0x553b
push 0xe59
push ebx
push 1
push 0x7230
mov dl, 1
mov dword [ebp - 4], ebx
mov ecx, 0x445d
call fcn.10012d73
add esp, 0x10
lea edx, [ebp + 0x14]
lea ecx, [ebp - 0xd4]
call fcn.10012b68
pop ecx
mov dword [ebp - 0x50], ebx
lea ecx, [ebp - 0x100]
push 2
call fcn.1000e06f
push 2
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 1
call fcn.1000e06f
push 0x5428
push 0x5565
push 0x37e2
push 1
push 0x630a
push ebx
push 0xe76
push 0x5b59
push 1
push 0x709d
push 0x3d25
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 2
push 0x5085
mov dword [ebp - 0x50], 0x362
lea ecx, [ebp - 0x64]
push eax
mov edx, 0x67a
call fcn.10013ff7
add esp, 0x30
lea eax, [ebp - 0xbc]
lea edx, [ebp - 0x64]
push eax
call fcn.10012cd2
pop ecx
pop ecx
push 0x1544
push 0x354d
lea eax, [ebp - 0xbc]
mov edx, 0x3e05
push eax
push ecx
mov ecx, 0x6f25
call fcn.100141be
add esp, 8
mov byte [ebp - 0x3d], bl
lea ecx, [ebp - 0x3d]
call fcn.100132e0
pop ecx
pop ecx
lea ecx, [ebp - 0xbc]
call fcn.1000e145
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], bl
call fcn.1000e145
mov eax, dword [0x1007d234]
test al, 1
jne 0x1001346e
or eax, 1
mov dword [0x1007d234], eax
push 0x6fa2
mov byte [ebp - 4], 3
call fcn.1000dcc7
pop ecx
mov word [0x1007d23c], ax
mov byte [ebp - 4], bl
mov dword [ebp - 0x24], 0x90ac204e
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2c], 0xc65b
mov dword [ebp - 0x18], 0x6e3268dd
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x24], 0xffffffe7
cmp dword [ebp - 0x24], 0xfffffff5
je 0x100135dc
mov dword [ebp - 0x18], 0x25ac
cmp dword [ebp - 0x18], 0x2831
jle 0x100134fc
push 0x163c
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x134]
or eax, esi
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100134d5
mov eax, dword [eax]
push eax
call fcn.10047a23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x134]
call fcn.1000e875
inc edi
cmp edi, 0x55fe
jl 0x100134b9
inc esi
cmp esi, 0x3cd4
jl 0x100134b7
mov dword [ebp - 0x30], 0x95e17ca0
cmp dword [ebp - 0x18], 0x2207
jge 0x10013517
push str.gjsayf_xzuud_qtety_ichdwan_brqytf_ijnz_gokiwbmg_thicfsai_udhrbaqm_hknrdr
call fcn.10047a23
pop ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x30], 0xc
cmp dword [ebp - 0x30], 0xffffffe3
jg 0x100135d4
mov dword [ebp - 0x3c], 0x719d8726
mov dword [ebp - 0x18], 0x1fc80ae7
mov dword [ebp - 0x1c], ebx
jmp 0x10013553
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], 0xfffffff6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10013545
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x2cc9105f
setge al
xor edx, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setg dl
cmp edx, dword [ebp - 0x24]
jne 0x1001359d
cmp dword [ebp - 0x28], ebx
je 0x1001359d
xor ebx, ebx
inc ebx
mov dword [ebp - 0x18], ebx
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x70]
push 0
setge bl
xor ecx, ecx
cmp ebx, eax
pop ebx
setge cl
mov dword [ebp - 0x18], ecx
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffe3
jle 0x10013532
inc dword [ebp - 0x24]
jmp 0x10013490
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0x1d
jle 0x10013724
push 2
pop ecx
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0x28], 0x3fa0
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x2c], 0xc
jmp 0x10013682
mov dword [ebp - 0x1c], ebx
jmp 0x10013631
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x10c], 0xb389fa18
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10013620
mov eax, dword [ebp - 0x44]
mov ecx, 0xec2cfccf
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xd8]
cmp ecx, eax
mov eax, dword [ebp - 0x10c]
sbb edx, edx
add edx, 0x81b70039
neg edx
push 2
sbb edx, edx
add edx, 0x495228f9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x2c]
pop ecx
cmp dword [ebp - 0x2c], 0x2b
jl 0x1001361b
mov byte [ebp - 0x1d], bl
mov dword [ebp - 0x28], 0x7ecb
cmp dword [ebp - 0x28], 0x7fa8
jle 0x100136cc
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007bfb8
cdq
push edx
push eax
call fcn.1000dd80
inc edi
cmp edi, 0x6fe7
jl 0x100136a7
inc esi
cmp esi, 0x5e45
jl 0x100136a5
cmp byte [ebp - 0x1d], 0
je 0x100136d9
mov cl, 1
call fcn.10012783
mov byte [ebp - 4], 6
cmp dword [ebp - 0x28], 0x7e53
jge 0x10013719
mov edx, str.ihgbnsg_qta_gwvhdky_mozk_zdjwrix_hnhbcfe_fprodqfc_bqko
mov ecx, 0x1007bfb8
call fcn.10010bec
jmp 0x10013719
mov dword [ebp - 4], ebx
inc dword [ebp - 0x18]
jmp 0x100135df
mov eax, dword [0x1007d234]
test al, 2
jne 0x1001374d
or eax, 2
mov dword [0x1007d234], eax
push 0x7b41
mov byte [ebp - 4], 8
call fcn.1000dcc7
pop ecx
mov word [0x1007e5dc], ax
mov byte [ebp - 4], bl
mov dword [ebp - 0x38], 8
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x74], 0xe18bd2e8
mov dword [ebp - 0x5c], 4
cmp dword [ebp - 0x38], 0xad6
jne 0x10013857
push 1
lea ecx, [ebp - 0x84]
call fcn.1000e06f
mov byte [ebp - 4], 9
mov dword [ebp - 0x48], 2
mov dword [ebp - 0x18], ebx
jmp 0x100137a2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001378f
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jl 0x10013847
mov dword [ebp - 0x34], 0x70a77c87
mov dword [ebp - 0x18], ebx
jmp 0x100137d1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb0], 0xfff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100137c0
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], ebx
jl 0x10013816
dec dword [ebp - 0xb0]
lea eax, [ebp - 0x48]
push ecx
push eax
push ecx
lea eax, [ebp - 0x34]
push eax
push 0x5bd3
push 1
push 0x7fb8
push 0x46c2
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x84]
call fcn.100142fd
add esp, 0x20
dec dword [ebp - 0x34]
jns 0x100137df
mov dword [ebp - 0x48], ebx
jmp 0x10013839
mov dword [ebp - 0x34], ebx
jmp 0x10013831
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x84]
cmp dword [eax + ecx*4], ebx
jne 0x10013836
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jle 0x10013820
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], ebx
jle 0x1001381b
dec dword [ebp - 0x38]
jns 0x100137b4
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], bl
call fcn.1000e145
jmp 0x1001386e
lea eax, [ebp - 0x38]
xor dl, dl
push 0x7942
push eax
mov ecx, 0x19ca
call fcn.10013c47
pop ecx
pop ecx
lea eax, [ebp - 0x5c]
mov cl, 1
push eax
push 1
push 0x327a
push 1
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x38]
call fcn.100128c8
add esp, 0x18
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov eax, dword [ebp - 0x60]
cmp edi, dword [eax]
jae 0x10013bed
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x68], 0x452a26f3
mov dword [ebp - 0x50], 0x1637c1d6
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0x70512a30
mov dword [ebp - 0x18], ebx
jmp 0x100138d8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100138cb
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10013a6e
mov dword [ebp - 0x3c], 1
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x24], 1
push 2
call fcn.1000e06f
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x50], 0x145b
mov dword [ebp - 0x44], 0x35c52658
mov dword [ebp - 0x28], 0x3ea4
cmp dword [ebp - 0x28], 0x420b
jle 0x10013985
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x44], ebx
mov eax, esi
shl eax, cl
mov ecx, 0x1007bfb8
xor eax, edi
cdq
push edx
push eax
call fcn.1000dd80
mov ecx, dword [ebp - 0x44]
inc ecx
mov dword [ebp - 0x44], ecx
cmp ecx, 0x20ad
jl 0x10013934
inc esi
cmp esi, 0x50b6
jl 0x1001392f
inc edi
cmp edi, 0x46dd
jl 0x1001392d
push ebx
push 0x1cf2
push ebx
push 0x26ae
push 0x151b
push ebx
push 0x1857
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
push ecx
lea eax, [ebp - 0x104]
mov dl, 1
push eax
lea ecx, [ebp - 0x9c]
call fcn.10012861
pop ecx
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x28], 0x3c9d
pop ecx
jge 0x100139da
mov edx, str.dkitkx_ftjshovnb_beanfdsq_ftcams
mov ecx, 0x1007bfb8
call fcn.10010bec
jmp 0x100139da
mov dword [ebp - 4], 0xa
xor edx, edx
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x9c]
setl cl
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x90]
je 0x10013a18
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x90]
mov eax, dword [ebp - 0x3c]
dec dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x9c]
setg dl
xor ebx, ebx
cmp edx, dword [eax + 4]
mov eax, dword [ebp - 0x1c]
setg bl
xor ecx, ecx
cmp ebx, eax
sete cl
xor ebx, ebx
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], bl
call fcn.1000e145
dec dword [ebp - 0x18]
jmp 0x100138e5
lea eax, [ebp - 0x3e]
mov byte [ebp - 0x3e], bl
push eax
push 0x71a1
xor dl, dl
mov ecx, 0x326f
call fcn.10012f43
pop ecx
pop ecx
call fcn.10012331
push 0x34
pop ecx
xor edx, edx
div ecx
push 2
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x78], edx
call fcn.1000e06f
push 0x485e
push 0x6662
push 0xf28
push ebx
push 0x4e48
push ebx
push 0x7686
push 0x50a4
push 1
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x18], 9
push eax
mov dword [ebp - 0xf4], 0x6d8ff8cd
mov edx, 0x624
mov dword [ebp - 0xf0], 0x6d8ff8cd
mov ecx, 0x6123
push 0x3c9d
mov dword [ebp - 0xec], 0x6d8ff8cd
mov dword [ebp - 0xe8], 0x6d8ff8cd
push 0x2895
call fcn.10013ff7
add esp, 0x34
mov dword [ebp - 0x4c], ebx
jmp 0x10013b36
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x11c], 0xf3ac9d73
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 4
jl 0x10013b25
mov edx, dword [ebp - 0xa8]
xor ecx, ecx
mov eax, dword [edx]
mov dword [ebp - 0x18], eax
mov eax, dword [edx + 4]
cmp eax, dword [edx]
setge cl
test ecx, ecx
jle 0x10013b61
cmp dword [ebp - 0x18], ebx
jne 0x10013b61
xor ecx, ecx
mov esi, ebx
inc ecx
jmp 0x10013b66
xor ecx, ecx
inc ecx
mov esi, ecx
xor eax, eax
cmp esi, 0xce4b
setge al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x110], ecx
mov esi, dword [eax]
cmp esi, ecx
jle 0x10013b8f
mov eax, ebx
test esi, esi
je 0x10013b91
mov eax, ecx
sub eax, dword [edx + 4]
je 0x10013b9a
test esi, esi
jne 0x10013b9c
mov ecx, ebx
mov dword [ebp - 0xf4], ecx
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], bl
call fcn.1000e145
push 0x4e6c
push 0x148f
lea eax, [ebp - 0xd4]
mov edx, 0x661
push eax
push 0x3869
push 0x1007e5dc
push ebx
push 0x1007d23c
lea ecx, [ebp - 0x78]
call fcn.10013fb9
mov edi, dword [ebp - 0x30]
add esp, 0x1c
inc edi
mov dword [ebp - 0x30], edi
jmp 0x10013895
mov esi, dword [ebp - 0x54]
lea eax, [ebp - 0xd4]
cmp esi, eax
je 0x10013c05
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
call fcn.1000e907
push ebx
push 1
lea ecx, [ebp - 0xd4]
call fcn.1000ea49
jmp 0x10013c36
mov byte [ebp - 0x1d], 0
cmp byte [ebp - 0x1d], 0
je 0x10013c36
push 0
push 0x198d
push 0x15ed
push 0x212f
call dword [sym.imp.GDI32.dll_MoveToEx]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret