Function at 0x10030c8a
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100665dc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x1e4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x10030cdf
mov eax, dword [ebp + 8]
mov dword [ebp - 0x104], eax
push 0x3cc
push 0x5faf
push 0
push dword [ebp - 0x104]
call fcn.10036c0f
add esp, 0x10
jmp 0x100318bc
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xf0], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0xf4]
movzx eax, byte [eax]
test eax, eax
je 0x10030d51
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
movzx eax, byte [eax]
test eax, eax
je 0x10030d4c
push 0x445a
push 0
call fcn.10035e7d
pop ecx
pop ecx
jmp 0x100318bc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x1c], 0xc93b4e1a
mov dword [ebp - 0x1c], 0
jmp 0x10030d86
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jne 0x10031111
mov dword [ebp - 0x158], 3
mov dword [ebp - 0x154], 3
mov dword [ebp - 0x150], 3
mov dword [ebp - 0x14c], 3
lea ecx, [ebp - 0x75]
call fcn.1000156b
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x1b4]
call fcn.1000156e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1ac]
call fcn.1000151a
and dword [ebp - 4], 0
mov dword [ebp - 0x60], 0
jmp 0x10030dfe
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x10030e14
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x1c4], 0
jmp 0x10030df7
mov byte [ebp - 0x18], 0
push 0
push 0x2b69
lea eax, [ebp - 0x18]
push eax
call fcn.1003685f
add esp, 0xc
mov eax, dword [ebp - 0x1c]
inc eax
je 0x100310ec
mov dword [ebp - 0x94], 0x23b6
mov dword [ebp - 0x120], str.vyvfunb_ptujan_mwk_eoenywf_tlgmogohu_nhti_juxw_ify_iag_pmifglm_zccpzv_vvlwirzxc_ivyrhor
cmp dword [ebp - 0x94], 0x24bf
jle 0x10030eed
and dword [ebp - 0x44], 0
jmp 0x10030e66
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x2a8d
jge 0x10030eed
and dword [ebp - 0x3c], 0
jmp 0x10030e7c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x268d
jge 0x10030ee8
and dword [ebp - 0x4c], 0
jmp 0x10030e92
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x2228
jge 0x10030ee6
and dword [ebp - 0x54], 0
jmp 0x10030ea8
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x3e32
jge 0x10030ee4
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x44]
shl eax, cl
and eax, dword [ebp - 0x54]
cdq
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], edx
push dword [ebp - 0xfc]
push dword [ebp - 0x100]
mov ecx, 0x10081dd8
call fcn.1000c947
jmp 0x10030ea1
jmp 0x10030e8b
jmp 0x10030e75
jmp 0x10030e5f
mov dword [ebp - 0x30], 0
jmp 0x10030efd
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10030f10
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x28], 0xffffffff
jmp 0x10030ef6
mov byte [ebp - 4], 1
cmp dword [ebp - 0x94], 0x201c
jge 0x10030f30
mov edx, dword [ebp - 0x120]
mov ecx, 0x10081dd8
call fcn.1000fdbf
jmp 0x10030f4c
and dword [ebp - 4], 0
jmp 0x10030f56
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x28], 0
jmp 0x10030f7b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x28], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 4
jge 0x100310c5
mov dword [ebp - 0xd0], 0xf21
mov dword [ebp - 0x11c], str.llklvao_bfktoiucw_rjxigk_zwg
cmp dword [ebp - 0xd0], 0xfa9
jle 0x10031063
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
and dword [ebp - 0x58], 0
jmp 0x10030fc7
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x62c7
jge 0x10031063
and dword [ebp - 0x5c], 0
jmp 0x10030fe1
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x7046
jge 0x1003105e
and dword [ebp - 0x70], 0
jmp 0x10030ff7
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x27e4
jge 0x10031059
mov eax, dword [ebp - 0x5c]
cdq
idiv dword [ebp - 0x70]
mov eax, dword [ebp - 0x58]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], edx
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x1dc]
call fcn.10001301
pop ecx
pop ecx
mov dword [ebp - 0xdc], eax
mov ecx, dword [ebp - 0xdc]
call fcn.100014b2
push eax
call fcn.1004c2d0
pop ecx
lea ecx, [ebp - 0x1dc]
call fcn.100014a8
jmp 0x10030ff0
jmp 0x10030fda
jmp 0x10030fc0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x28]
lea ecx, [ebp - 0x1ac]
call fcn.1000155c
mov dword [eax], 0x3e31551d
mov byte [ebp - 4], 3
cmp dword [ebp - 0xd0], 0xb58
jge 0x1003109a
push dword [ebp - 0x11c]
call fcn.1004c2d0
pop ecx
jmp 0x100310b6
and dword [ebp - 4], 0
jmp 0x100310c0
jmp 0x10030f66
mov byte [ebp - 0x17], 0
push 0
push 1
lea eax, [ebp - 0x17]
push eax
push 0x752b
push 0x541b
push 0x526c
push 0
call fcn.1003490a
add esp, 0x1c
jmp 0x100310fd
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x1c4], 4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ac]
call fcn.10001540
jmp 0x10030d7f
mov ecx, dword [ebp - 0x7c]
call fcn.10045eb0
movzx eax, al
test eax, eax
je 0x1003112e
mov eax, dword [ebp - 0x88]
mov byte [eax], 0
jmp 0x100318bc
mov dword [ebp - 0x14], 0
mov dword [ebp - 0xc8], 0xfffffff7
mov dword [ebp - 0x48], 0xfffffffb
mov dword [ebp - 0x98], 0x22dc
mov dword [ebp - 0x12c], str.grif_cofbk_iwag_lixa_jbnudlmfi_nav
cmp dword [ebp - 0x98], 0x2453
jle 0x10031235
and dword [ebp - 0x38], 0
jmp 0x10031177
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x7129
jge 0x10031235
and dword [ebp - 0x68], 0
jmp 0x10031191
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x3318
jge 0x10031230
and dword [ebp - 0x34], 0
jmp 0x100311ab
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x3444
jge 0x1003122b
and dword [ebp - 0x40], 0
jmp 0x100311c1
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x5606
jge 0x10031226
mov eax, dword [ebp - 0x68]
cdq
idiv dword [ebp - 0x34]
add edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], edx
push dword [ebp - 0x114]
push dword [ebp - 0x118]
lea ecx, [ebp - 0x1f4]
call fcn.10001301
pop ecx
pop ecx
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
call fcn.100014b2
push eax
call fcn.1004c2d0
pop ecx
lea ecx, [ebp - 0x1f4]
call fcn.100014a8
jmp 0x100311ba
jmp 0x100311a4
jmp 0x1003118a
jmp 0x10031170
mov dword [ebp - 0x90], 0x716e289a
mov dword [ebp - 4], 5
cmp dword [ebp - 0x98], 0x210f
jge 0x1003125e
push dword [ebp - 0x12c]
call fcn.1004c2d0
pop ecx
jmp 0x1003127a
or dword [ebp - 4], 0xffffffff
jmp 0x10031284
mov dword [ebp - 0x84], 0
push 4
lea ecx, [ebp - 0x144]
call fcn.100014bd
mov dword [ebp - 4], 7
mov dword [ebp - 0x24], 0xfd89d684
mov dword [ebp - 0xe4], 0xf2c67a95
mov dword [ebp - 0x20], 0
jmp 0x100312c3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x100312d6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x64], 0xffff
jmp 0x100312bc
push 0xd2
lea eax, [ebp - 0x20]
push eax
push 0x39b1
lea eax, [ebp - 0x144]
push eax
push 0
push 0
call fcn.10030440
add esp, 0x18
push 0
push 0x4f57
push 0
push 0x2b2b
lea eax, [ebp - 0x14]
push eax
call fcn.100300a0
add esp, 0x14
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x10031325
mov dword [ebp - 0xa4], 1
jmp 0x1003132c
and dword [ebp - 0xa4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0xd6b5
je 0x10031348
mov dword [ebp - 0xb8], 1
jmp 0x1003134f
and dword [ebp - 0xb8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb8]
sub ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax - 0x64]
jl 0x10031370
mov dword [ebp - 0xa0], 1
jmp 0x10031377
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xa0]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x48]
inc eax
inc eax
cmp eax, dword [ebp - 0x14]
jne 0x100313b1
mov dword [ebp - 0xa8], 1
jmp 0x100313b8
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0xa8]
cmp eax, 0xfffffff8
jl 0x100313d3
mov dword [ebp - 0xc0], 1
jmp 0x100313da
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xc0], eax
jne 0x100313f1
mov dword [ebp - 0xb0], 1
jmp 0x100313f8
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x14]
jle 0x10031427
mov dword [ebp - 0x8c], 1
jmp 0x1003142e
and dword [ebp - 0x8c], 0
cmp dword [ebp - 0x8c], 0x9e68
jg 0x10031446
mov dword [ebp - 0x9c], 1
jmp 0x1003144d
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x9c]
je 0x10031464
mov dword [ebp - 0xac], 1
jmp 0x1003146b
and dword [ebp - 0xac], 0
mov esi, dword [ebp - 0xa4]
imul esi, dword [ebp - 0xac]
push 1
lea ecx, [ebp - 0x144]
call fcn.1000155c
mov dword [eax], esi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x198], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x24]
jle 0x100314b7
mov dword [ebp - 0xb4], 1
jmp 0x100314be
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xb4], eax
je 0x100314db
cmp dword [ebp - 0x24], 0
je 0x100314db
mov dword [ebp - 0xbc], 1
jmp 0x100314e2
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x48]
jne 0x100314fc
mov dword [ebp - 0xc4], 1
jmp 0x10031503
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 9
jne 0x10031518
mov dword [ebp - 0xe0], 1
jmp 0x1003151f
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18c], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x64]
push 1
lea ecx, [ebp - 0x144]
call fcn.1000155c
cmp dword [eax], esi
jl 0x1003154f
mov dword [ebp - 0xcc], 1
jmp 0x10031556
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.10001540
push 0x2a00
push 0x4e6e
push 0x5c35
lea eax, [ebp - 0x50]
push eax
push 0x6945
push 0
call fcn.10045ab9
add esp, 0x18
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x7c]
call fcn.1001f1a2
jmp 0x100315a9
lea ecx, [ebp - 0x2c]
call fcn.10045eb9
lea eax, [ebp - 0x1a0]
push eax
mov ecx, dword [ebp - 0x7c]
call fcn.1001f1b6
push eax
lea ecx, [ebp - 0x2c]
call fcn.1001edab
movzx eax, al
test eax, eax
je 0x100318b3
lea ecx, [ebp - 0x2c]
call fcn.1000cef4
movsx eax, byte [eax]
cmp eax, 0x30
jl 0x10031749
lea ecx, [ebp - 0x2c]
call fcn.1000cef4
movsx eax, byte [eax]
cmp eax, 0x39
jg 0x10031749
mov dword [ebp - 0x6c], 0
jmp 0x10031604
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1003161a
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xd8], 0x6a53d06c
jmp 0x100315fd
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xd8], 0xffffffec
jmp 0x10031648
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xd8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd8], 0xfffffffb
jg 0x100316f2
mov dword [ebp - 0x74], 0
jmp 0x1003166c
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x10031682
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x138], 0x7b1891f7
jmp 0x10031665
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x138], 0
jmp 0x100316ad
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x138]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x138], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x138], 0xfffffff6
jge 0x100316ed
mov byte [ebp - 0x15], 0
push 0
push 0x20f5
push 1
push 0
lea eax, [ebp - 0x15]
push eax
push 0x467e
push 0x15b7
push 0x2bf4
push 0x6b79
call fcn.1004272f
add esp, 0x24
jmp 0x10031694
jmp 0x1003162d
mov byte [ebp - 0x16], 0
movzx eax, byte [ebp - 0x16]
test eax, eax
je 0x1003172a
push 1
push 0x4440
push 1
push 0
push 0x6afc
push 0x66bd
push 0x30b5
push 0x19fa
push 0x2a4a
call fcn.1004272f
add esp, 0x24
lea ecx, [ebp - 0x2c]
call fcn.1000cef4
movsx eax, byte [eax]
mov ecx, dword [ebp - 0x50]
imul ecx, dword [ecx], 0xa
lea eax, [ecx + eax - 0x30]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
jmp 0x100318ae
push 3
lea ecx, [ebp - 0x188]
call fcn.100014bd
mov dword [ebp - 4], 8
push 2
lea ecx, [ebp - 0x170]
call fcn.100014bd
mov byte [ebp - 4], 9
push 1
lea ecx, [ebp - 0x164]
call fcn.100014bd
mov byte [ebp - 4], 0xa
push 3
lea ecx, [ebp - 0x17c]
call fcn.100014bd
mov byte [ebp - 4], 0xb
push 0xe75
push 0x209
lea eax, [ebp - 0x80]
push eax
push 0x5aa4
push 0x16f7
push 0
push 0x65bb
lea eax, [ebp - 0x188]
push eax
push 0x189c
call fcn.10037344
add esp, 0x24
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x170]
push eax
push 0x79c9
push 0x16ee
push 0
call fcn.1003870b
add esp, 0x14
lea eax, [ebp - 0x164]
push eax
push 0x6c18
push 0x1bc3
push 0
push 0x10d6
push 0x1a21
lea eax, [ebp - 0x80]
push eax
push 0x52b2
push 0x42cb
push 0
call fcn.1003453a
add esp, 0x28
push 0x11a
push 0
push 0x754e
lea eax, [ebp - 0x17c]
push eax
push 0x16c3
lea eax, [ebp - 0x80]
push eax
call fcn.10042707
add esp, 0x18
push 0
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.10034e3d
add esp, 0x14
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x17c]
call fcn.10001540
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x164]
call fcn.10001540
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x170]
call fcn.10001540
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.10001540
mov eax, dword [ebp - 0x50]
and dword [eax], 0
mov eax, dword [ebp - 0x88]
mov byte [eax], 0
jmp 0x100318bc
jmp 0x100315a1
mov eax, dword [ebp - 0x88]
mov byte [eax], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret