Function at 0x14015f330
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rdi, rdx
mov rsi, rcx
cmp qword [rdx + 0x18], 0xf
jbe 0x14015f354
mov rdx, qword [rdx]
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14015f3b3
xor edx, edx
mov rcx, qword [rbp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeA]
mov ebx, eax
mov dword [rbp + 0x70], eax
mov rcx, qword [rbp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
jne 0x14015f561
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14015f3a3
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov dword [rbp + 0x70], eax
test eax, eax
jne 0x14015f3c6
mov rbx, qword [rsp + 0x180]
add rsp, 0x150
pop rdi
pop rsi
pop rbp
ret
movabs rax, 0xb0430b3744dd0f9d
mov qword [rbp - 0x70], rax
movabs rax, 0x4559a64c186aca5e
mov qword [rbp - 0x68], rax
movabs rax, 0x32494d1e69ce35e1
mov qword [rbp - 0x60], rax
movabs rax, 0xc41b0d7eedd2d0a2
mov qword [rbp - 0x58], rax
movabs rax, 0x6b84d82b11b0b857
mov qword [rbp - 0x50], rax
movabs rax, 0x5eb3510b93fb06f8
mov qword [rbp - 0x48], rax
movabs rax, 0x6f30858915194da5
mov qword [rbp - 0x40], rax
movabs rax, 0xf6db5247668a0081
mov qword [rbp - 0x38], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0x40], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0x48], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0x50], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0x58], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0x60], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0x68], rax
movabs rax, 0x4f0af7e6676b0885
mov qword [rsp + 0x70], rax
movabs rax, 0xf6db5247668a7dfa
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x40], xmm1
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x18]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea r9, [rbp + 0x70]
mov r8, rdi
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x28]
call fcn.14015f7a0
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x20]
call fcn.140cded0c
nop
movabs rax, 0xb0430b3744dd0f9d
mov qword [rsp + 0x40], rax
movabs rax, 0x4559a64c186aca5e
mov qword [rsp + 0x48], rax
movabs rax, 0x32494d1e69ce35e1
mov qword [rsp + 0x50], rax
movabs rax, 0xc41b0d7eedd2d0a2
mov qword [rsp + 0x58], rax
movabs rax, 0x6a84d82b11b0b857
mov qword [rsp + 0x60], rax
movabs rax, 0x3bb0558cafa23b9
mov qword [rsp + 0x68], rax
movabs rax, 0x6e798e830c097df6
mov qword [rsp + 0x70], rax
movabs rax, 0x8ba0727d1fef36da
mov qword [rsp + 0x78], rax
movabs rax, 0xca99d35364d0edb7
mov qword [rbp - 0x80], rax
movabs rax, 0x562b457d8d666a37
mov qword [rbp - 0x78], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rbp - 0x70], rax
movabs rax, 0x213cca25792cea64
mov qword [rbp - 0x68], rax
movabs rax, 0x5725287a49a141c1
mov qword [rbp - 0x60], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rbp - 0x58], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rbp - 0x50], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rbp - 0x48], rax
movabs rax, 0x4f0af7e6676b0885
mov qword [rbp - 0x40], rax
movabs rax, 0xf6db5247668a7dfa
mov qword [rbp - 0x38], rax
movabs rax, 0xeaa3a13c16a2a897
mov qword [rbp - 0x30], rax
movabs rax, 0x562b457d8d66174c
mov qword [rbp - 0x28], rax
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp - 0x40]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 8]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x18]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea r9, [rbp + 0x70]
mov r8, rdi
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x28]
call fcn.14015f7a0
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x20]
call fcn.140cded0c
int3