Function at 0x41d79c
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ae163
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xa4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x41d917
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x58], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
movzx eax, byte [eax]
test eax, eax
je 0x41d7f8
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x41d912
mov dword [ebp - 0x48], 0x36ed
mov dword [ebp - 0x64], str.cxqtsub_cxijdh_hywfywa_awvupek_wxtnxh_jryuieu_qqbvnjubi_qdbwj_tmz_rmwjm_vndzbst
cmp dword [ebp - 0x48], 0x3a8c
jle 0x41d8a8
and dword [ebp - 0x38], 0
jmp 0x41d820
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x5436
jge 0x41d8a8
and dword [ebp - 0x44], 0
jmp 0x41d836
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x6ef4
jge 0x41d8a3
and dword [ebp - 0x28], 0
jmp 0x41d84c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x22ca
jge 0x41d8a1
and dword [ebp - 0x40], 0
jmp 0x41d862
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x30c4
jge 0x41d89f
mov eax, dword [ebp - 0x38]
cdq
idiv dword [ebp - 0x44]
xor edx, dword [ebp - 0x28]
or edx, dword [ebp - 0x40]
mov eax, edx
cdq
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], edx
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x41d85b
jmp 0x41d845
jmp 0x41d82f
jmp 0x41d819
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xac], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x48], 0x3698
jge 0x41d8cb
mov edx, dword [ebp - 0x64]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x41d8e7
or dword [ebp - 4], 0xffffffff
jmp 0x41d8f1
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x6c], eax
push 0
mov ecx, dword [ebp - 0x6c]
call fcn.0042fc2d
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
jmp 0x41dbbe
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x70], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x8c]
movzx eax, byte [eax]
test eax, eax
je 0x41d99e
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
jmp 0x41d97f
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax], 4
jge 0x41d999
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x5c]
call fcn.0042fc2d
or dword [eax], 0xffffffff
jmp 0x41d974
jmp 0x41dbbe
mov dword [ebp - 0x4c], 0x3e52
mov dword [ebp - 0x68], str.yrf_qxqpxk_tubpmxknt
cmp dword [ebp - 0x4c], 0x403f
jle 0x41da53
and dword [ebp - 0x30], 0
jmp 0x41d9c6
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x34dd
jge 0x41da53
and dword [ebp - 0x3c], 0
jmp 0x41d9e0
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x7ce8
jge 0x41da4e
and dword [ebp - 0x1c], 0
jmp 0x41d9f6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x57c0
jge 0x41da4c
and dword [ebp - 0x20], 0
jmp 0x41da0c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x69c0
jge 0x41da4a
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x3c]
sar eax, cl
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x20]
xor eax, ecx
cdq
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], edx
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x41da05
jmp 0x41d9ef
jmp 0x41d9d9
jmp 0x41d9bf
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x80], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x4c], 0x3b59
jge 0x41da76
mov edx, dword [ebp - 0x68]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x41da92
or dword [ebp - 4], 0xffffffff
jmp 0x41da9c
mov dword [ebp - 0x54], 0x7f68
mov dword [ebp - 0x78], str.qgl_rtuqpf_jtc_vapawoyvs_nzgtax_robuijum_sjnfr_hpvopvpvu_moligcsm_uzznisvz_dadgiief_buqqauft_abfexf_zkmirlqcq
cmp dword [ebp - 0x54], 0x832f
jle 0x41db2a
and dword [ebp - 0x24], 0
jmp 0x41dac0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x5752
jge 0x41db2a
and dword [ebp - 0x2c], 0
jmp 0x41dad6
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x78d1
jge 0x41db28
and dword [ebp - 0x34], 0
jmp 0x41daec
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x4531
jge 0x41db26
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x2c]
and edx, dword [ebp - 0x34]
mov eax, edx
cdq
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], edx
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x41dae5
jmp 0x41dacf
jmp 0x41dab9
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x54], 0x7f2c
jge 0x41db50
mov edx, dword [ebp - 0x78]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x41db6c
or dword [ebp - 4], 0xffffffff
jmp 0x41db76
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
jmp 0x41db9e
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax], 1
jge 0x41dbbe
mov eax, dword [ebp - 0x18]
push dword [eax]
mov ecx, dword [ebp - 0x90]
call fcn.0042fc2d
mov dword [eax], 7
jmp 0x41db93
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret