Function at 0x140136bdc
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rdi, rdx
mov rsi, rcx
cmp qword [rdx + 0x18], 0xf
jbe 0x140136c00
mov rdx, qword [rdx]
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140136c5f
xor edx, edx
mov rcx, qword [rbp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeA]
mov ebx, eax
mov dword [rbp + 0x70], eax
mov rcx, qword [rbp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
jne 0x140136e0d
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140136c4f
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov dword [rbp + 0x70], eax
test eax, eax
jne 0x140136c72
mov rbx, qword [rsp + 0x180]
add rsp, 0x150
pop rdi
pop rsi
pop rbp
ret
movabs rax, 0x583db2a5f0007781
mov qword [rbp - 0x70], rax
movabs rax, 0x1813c94a2d31c8a6
mov qword [rbp - 0x68], rax
movabs rax, 0xd8d2243ca5fd1e5d
mov qword [rbp - 0x60], rax
movabs rax, 0x3f8dc628a235f1ca
mov qword [rbp - 0x58], rax
movabs rax, 0xb7d70309deeffb73
mov qword [rbp - 0x50], rax
movabs rax, 0xe2505595e932bf20
mov qword [rbp - 0x48], rax
movabs rax, 0x7ea10b0bf6120d01
mov qword [rbp - 0x40], rax
movabs rax, 0x727de8a9b5412af9
mov qword [rbp - 0x38], rax
movabs rax, 0x214fc6d6996712d3
mov qword [rsp + 0x40], rax
movabs rax, 0x7c76a5234c77e89c
mov qword [rsp + 0x48], rax
movabs rax, 0xbdbe415885926a7d
mov qword [rsp + 0x50], rax
movabs rax, 0x4ce4a14dd01594be
mov qword [rsp + 0x58], rax
movabs rax, 0x96ae6662fe968907
mov qword [rsp + 0x60], rax
movabs rax, 0x9f2b75af9057f400
mov qword [rsp + 0x68], rax
movabs rax, 0x5e9b796484604821
mov qword [rsp + 0x70], rax
movabs rax, 0x727de8a9b5415782
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x40], xmm1
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x18]
call fcn.14012d810
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 8]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 8]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea r9, [rbp + 0x70]
mov r8, rdi
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x28]
call fcn.14013704c
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140135d10
lea rdx, [0x140db1a28]
lea rcx, [rbp - 0x20]
call fcn.140c4d970
nop
movabs rax, 0x583db2a5f0007781
mov qword [rsp + 0x40], rax
movabs rax, 0x1813c94a2d31c8a6
mov qword [rsp + 0x48], rax
movabs rax, 0xd8d2243ca5fd1e5d
mov qword [rsp + 0x50], rax
movabs rax, 0x3f8dc628a235f1ca
mov qword [rsp + 0x58], rax
movabs rax, 0xb6d70309deeffb73
mov qword [rsp + 0x60], rax
movabs rax, 0xbf5801c6b0339a61
mov qword [rsp + 0x68], rax
movabs rax, 0x7fe80001ef023d52
mov qword [rsp + 0x70], rax
movabs rax, 0xf06c893cc241ca2
mov qword [rsp + 0x78], rax
movabs rax, 0xc2a030518ba7a5fb
mov qword [rbp - 0x80], rax
movabs rax, 0xdcf99a8b24ef1edf
mov qword [rbp - 0x78], rax
movabs rax, 0x214fc6d6996712d3
mov qword [rbp - 0x70], rax
movabs rax, 0x7c76a5234c77e89c
mov qword [rbp - 0x68], rax
movabs rax, 0xbdbe415885926a7d
mov qword [rbp - 0x60], rax
movabs rax, 0x4ce4a14dd01594be
mov qword [rbp - 0x58], rax
movabs rax, 0x96ae6662fe968907
mov qword [rbp - 0x50], rax
movabs rax, 0x9f2b75af9057f400
mov qword [rbp - 0x48], rax
movabs rax, 0x5e9b796484604821
mov qword [rbp - 0x40], rax
movabs rax, 0x727de8a9b5415782
mov qword [rbp - 0x38], rax
movabs rax, 0xe29a423ef9d5e0db
mov qword [rbp - 0x30], rax
movabs rax, 0xdcf99a8b24ef63a4
mov qword [rbp - 0x28], rax
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp - 0x40]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 8]
call fcn.14012d810
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 8]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x18]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea r9, [rbp + 0x70]
mov r8, rdi
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x28]
call fcn.14013704c
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140135d10
lea rdx, [0x140db1a28]
lea rcx, [rbp - 0x20]
call fcn.140c4d970
int3