Function at 0x42751b
Capabilities:
Delete registry key

Disassembly:
inc ebx
inc ebp
fcom dword [eax - 1]
jne 0x4274cd
push 0x20
mov eax, 0x59f035
call fcn.005693c7
and dword [ebp - 0x2c], 0
call fcn.0042ae62
test al, al
je 0x427553
in al, 0xbd
xchg dword [eax - 0x3a28693], edi
mov cl, 0xf0
jecxz 0x4275b6
sbb al, 0xc1
jge 0x4274ff
xor dword [edi + esi*2], edx
jne 0x427558
ja 0x4275bd
pop fs
cli
imul ecx
xchg byte [eax + 0x35], ch
cmp ch, dl
test eax, ebp
cmpsb byte [esi], byte es:[edi]
xor eax, dword [eax]
add byte [eax + eax*8 + 0x7f591974], al
lahf
mov eax, dword [0x86e9f7fa]
push 0x85ea3a35
call fcn.0042a8fe
test al, al
je 0x427575
pop ecx
jg 0x4274fe
xchg ebp, eax
cmpsb byte [esi], byte es:[edi]
add al, 0xed
pushal
fild qword [edi]
fcomp qword [ebx - 0x52]
salc
add bh, cl
invd
bound esp, qword [ecx - 0x70bc2bde]
call fcn.0042abb0
test al, al
je 0x42759a
popal
popal
jg 0x4275a5
outsb dx, byte [esi]
rcr bl, cl
mov ecx, 0x7005817e
xchg esi, eax
int1
add dh, byte [ebp + 0x6f]
pop ebx
jle 0x427610
xchg ebx, eax
nop
dec edx
or byte [edi], al
js 0x427546
adc dword [ebx + 0x3300e865], eax
sar byte [esi + str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellIconOverlayIdentifiers_], 0xc7
inc ebp
in al, dx
pop es
add byte [eax], al
add byte [esi + 0x66], dl
mov dword [ebp - 0x28], eax
and dword [ebp - 0x18], 0
xor eax, eax
mov esi, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellIconOverlayIdentifiers_
mov dword [ebp - 0x14], 7
push esi
mov word [ebp - 0x28], ax
call fcn.00578706
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00403772
and dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push ecx
cmovae eax, dword [ebp - 0x28]
push 0xf013f
push 0
mov cl, 0xc1
std
inc dword [ebx - 0x72ff039b]
dec ebp
aam 0x83
jge 0x4275b7
or byte [ebp + 0xf51d845], cl
inc ebx
inc ebp
fsubr dword [eax + 0x3f]
add dword [edi], ecx
add byte [edx], ch
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x427635
mov esi, 0x5a5208
push esi
call fcn.00578706
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00403772
mov esi, str.OverlayIconWanNengWB
dec ebp
fsubr st(0)
jno 0x4275c0
std
invalid
push esi
call fcn.00578706
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00408c34
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x2c]
dec ebp
fsubr st(0)
sbb eax, 0x83fffe16
jge 0x427606
or byte [ebp + 0x430fd845], cl
inc ebp
fcom dword [eax - 1]
jne 0x4275fa
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.0042ae62
test al, al
je 0x42764f
pop esi
pop ss
movsb byte es:[edi], byte [esi]
jno 0x427650
add al, 0xb9
inc esp
sbb al, 0x8f
out dx, al
sbb dh, byte [edx]
fidivr dword [esi + 0x17e84b02]
call fcn.0042ab6b
test al, al
pop ss
xor eax, 0xc0840000
je 0x427677
pop esp
jle 0x4276c5
mov al, 0x10
lahf
cmc
xchg ebx, eax
inc esp
fmul qword [bx + di - 0x62]
cmp al, 0xdf
insd dword es:[edi], dx
into
mov byte [eax + 0x4f], 0x25
insb byte es:[edi], dx
pop edi
adc eax, 0x2364b219
mov gs, word [edi - 0x18]
or al, 0x33
add byte [eax], al
call fcn.0042a988
test al, al
je 0x427696
adc dword [eax + ecx + 0x648d14ac], 0xffffff83
lea eax, [eax]
mov dword [ecx], esp
xchg edi, eax
and eax, 0x75526709
sub byte [edi], ah
push edx
sub byte [edx], 0x6a
add dword [ebp - 0x791727b3], ecx
mov edi, 0xdbe8fffd
sbb al, 0x14
add bl, al
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00403628
call fcn.00569382
ret
add byte [esi - 0x77], dl
pop ebp
rol bh, 1
inc ebp
in al, dx
pop es
add byte [eax], al
add byte [esi - 0x77], ah
inc ebp
fsubr st(0)
sub al, 0x10
adc eax, 0x56505900