Function at 0x1004a5f0
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
xor ebx, ebx
mov dword [ebp - 8], 0xe2799ac7
push esi
mov byte [ebp - 1], bl
mov esi, ecx
push edi
cmp byte [ebp - 1], bl
je 0x1004a618
push 0x261b
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 1
mov dword [ebp - 8], ebx
pop edi
jmp 0x1004a6ff
mov dword [ebp - 0xc], 0x19ac196a
mov dword [ebp - 0x14], 6
mov dword [ebp - 0x24], 0xb948214d
mov dword [ebp - 0x28], 0x9892657c
mov dword [ebp - 0x18], ebx
jmp 0x1004a652
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x50], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1004a644
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffff
jle 0x1004a677
mov ecx, edi
cmp dword [ebp - 8], ebx
jne 0x1004a679
mov ecx, ebx
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 8]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xc], 0xffffffe9
jmp 0x1004a6f6
mov dword [ebp - 0x14], ebx
jmp 0x1004a6e2
mov dword [ebp - 0x10], 0xe483bbb6
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x10], ebx
jmp 0x1004a6d9
mov dword [ebp - 0x18], 0x489b467b
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x18], ebx
jmp 0x1004a6d0
dec dword [ebp - 0x24]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1004a6cd
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1004a6ba
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jle 0x1004a6ab
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1c
je 0x1004a698
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 8]
sub ecx, eax
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffed
jg 0x1004a693
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffef
je 0x1004a623
push edi
push 0x1e75
push 0x6ae1
push esi
call fcn.1004633c
add esp, 0x10
mov dword [ebp - 0xc], 0x2bbef7d6
lea ecx, [ebp - 0x40]
push 2
call fcn.10011da1
mov eax, 0xfffa
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x28], edi
push 2
mov dword [ebp - 0x1c], 0x3f045180
pop edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], ebx
jmp 0x1004a758
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1004a74b
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
test eax, eax
mov eax, dword [ebp - 0xc]
sets cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0xc]
je 0x1004a78a
mov eax, edi
cmp dword [ebp - 0xc], ebx
jne 0x1004a78c
mov eax, ebx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x40]
mov dword [eax], 0x5689
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
dec dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], 0xd4938140
mov dword [ebp - 0x18], 0x95cc9e52
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x24], 0x2a6add33
mov eax, dword [ebp - 0x18]
mov edx, dword [ecx + 4]
mov ecx, dword [ebp - 0x18]
sub edx, eax
mov eax, dword [ebp - 0x24]
add ecx, 5
add eax, edx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x18]
cmp ecx, eax
lea ecx, [ebp - 0x40]
setge dl
sub edx, 7
mov dword [ebp - 0x18], edx
call fcn.10012004
push esi
call fcn.10011b7a
mov dword [ebp - 0x14], ebx
xor esi, esi
mov dword [ebp - 0x10], 0xb667f5ae
inc esi
mov dword [ebp - 0x14], ebx
mov edi, eax
pop ecx
mov dword [ebp - 0xc], 0xffffffff
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0x1e6e4042
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x28], ebx
push esi
call fcn.10011da1
mov dword [ebp - 0x20], 0xba5e
mov dword [ebp - 8], 0xe1a0e1c2
mov dword [ebp - 0x18], 0xfdb8
mov dword [ebp - 0xc], ebx
jmp 0x1004a850
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x1004a843
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x14], eax
jge 0x1004a870
mov edx, esi
cmp dword [ebp - 0x14], ebx
jne 0x1004a872
mov edx, ebx
inc dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov dword [eax], ecx
xor eax, eax
cmp edx, 2
sete al
imul eax, ecx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
neg eax
mov dword [ebp - 0xc], eax
jne 0x1004a89c
mov edx, ebx
cmp dword [ebp - 0x10], ebx
je 0x1004a89e
mov edx, esi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
mov eax, 0xffff
setle cl
cmp eax, ecx
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x14]
jne 0x1004a8bf
mov eax, ebx
cmp dword [ebp - 0x1c], ebx
je 0x1004a8c1
mov eax, esi
add eax, 0xfa7a
je 0x1004a8cf
mov eax, dword [ebp - 0x34]
cmp dword [eax], ebx
jne 0x1004a8d6
mov edx, ebx
cmp dword [ebp - 0x24], ebx
je 0x1004a8d8
mov edx, esi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, esi
setle al
cmp eax, dword [ebp - 0x14]
jge 0x1004a8f5
mov eax, esi
cmp dword [ebp - 0xc], ebx
jne 0x1004a8f7
mov eax, ebx
mov dword [ebp - 0x24], eax
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, 0x690
setne cl
mov dword [ebp - 0x14], ecx
mov ecx, 0xfffa
mov eax, dword [ebp - 0x14]
cmp ecx, eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], 0x7528
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
cmp ecx, dword [eax]
setle dl
imul eax, edx, 0x4f89
mov dword [ebp - 0x28], eax
mov dword [ebp - 8], ebx
jmp 0x1004a9e1
mov dword [ebp - 0xc], ebx
jmp 0x1004a970
mov esi, dword [ebp - 0xc]
xor ecx, ecx
mov eax, dword [ebp - 8]
cmp eax, 1
mov eax, dword [ebp - 0x34]
setg cl
xor edx, edx
cmp ecx, 0x8918
setl dl
mov dword [eax + esi*4], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jle 0x1004a94e
mov dword [ebp - 0x10], ebx
jmp 0x1004a9d9
mov dword [ebp - 0x18], ebx
jmp 0x1004a9b5
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1004a98d
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1004a9b2
push ebx
push 0x1cbc
push 0x1455
push ebx
push 0x22ca
push 0x500
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1004a97f
mov dword [ebp - 0x14], ebx
jmp 0x1004a9d1
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x1004a9bf
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x1004a97a
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jle 0x1004a949
lea ecx, [ebp - 0x34]
call fcn.10012004
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret