Function at 0x10007d1a0
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
sub rsp, 0xf8
mov qword [rsp + 0xd0], 0xfffffffffffffffe
mov rax, qword [rsp + 0x110]
mov dword [rax], 0
cmp dword [rsp + 0x100], 5
jne 0x10007d2de
lea rcx, [rsp + 0x38]
call fcn.1000141d0
nop
mov rcx, qword [rsp + 0x108]
call fcn.100013bb0
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.10001c640
lea rcx, [rsp + 0x68]
call fcn.100069bc0
nop
lea rcx, [rsp + 0x68]
call fcn.10007f280
lea rcx, [rsp + 0x68]
call fcn.100053100
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.100083da0
test eax, eax
jne 0x10007d288
mov rax, qword [rsp + 0x108]
mov r8, qword [rax]
lea rdx, [0x100012250]
mov ecx, 3
call fcn.100053cc0
mov dword [rsp + 0x94], 0x643
lea rcx, [rsp + 0x68]
call fcn.10007f260
nop
lea rcx, [rsp + 0x38]
call fcn.100014300
nop
mov rcx, qword [rsp + 0x108]
call fcn.1000144b0
mov eax, dword [rsp + 0x94]
jmp 0x10007d608
mov dword [rsp + 0x34], 0
lea rcx, [rsp + 0x68]
call fcn.100053100
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.1000826e0
cmp dword [rsp + 0x34], 0
je 0x10007d2c4
mov rax, qword [rsp + 0x110]
mov dword [rax], 1
lea rcx, [rsp + 0x68]
call fcn.10007f260
nop
lea rcx, [rsp + 0x38]
call fcn.100014300
jmp 0x10007d3b3
cmp dword [rsp + 0x100], 9
jne 0x10007d3b3
lea rcx, [rsp + 0x78]
call fcn.100069bc0
nop
lea rcx, [rsp + 0x78]
call fcn.10007f280
lea rcx, [rsp + 0x78]
call fcn.100053100
mov rdx, qword [rsp + 0x108]
mov rcx, rax
call fcn.100084570
test eax, eax
jne 0x10007d36a
mov rax, qword [rsp + 0x108]
mov r8, qword [rax]
lea rdx, [0x100012180]
mov ecx, 3
call fcn.100053cc0
mov dword [rsp + 0x98], 0x643
lea rcx, [rsp + 0x78]
call fcn.10007f260
nop
mov rcx, qword [rsp + 0x108]
call fcn.1000144b0
mov eax, dword [rsp + 0x98]
jmp 0x10007d608
mov dword [rsp + 0x70], 0
lea rcx, [rsp + 0x78]
call fcn.100053100
lea r9, [rsp + 0x70]
xor r8d, r8d
mov rdx, qword [rsp + 0x108]
mov rcx, rax
call fcn.100083460
cmp dword [rsp + 0x70], 0
je 0x10007d3a9
mov rax, qword [rsp + 0x110]
mov dword [rax], 1
lea rcx, [rsp + 0x78]
call fcn.10007f260
cmp dword [rsp + 0x100], 5
je 0x10007d3cb
cmp dword [rsp + 0x100], 9
jne 0x10007d51a
lea rcx, [rsp + 0x80]
call fcn.100014450
nop
mov qword [rsp + 0x88], 0
lea rdx, [0x100010df0]
lea rcx, [rsp + 0xa0]
call fcn.100018c00
nop
lea r8, [rsp + 0x80]
mov rdx, qword [rsp + 0x108]
lea rcx, [rsp + 0xa0]
call fcn.100048450
nop
lea rcx, [rsp + 0xa0]
call fcn.1000144b0
lea rcx, [rsp + 0x80]
call fcn.100013bb0
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x20], rcx
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x10007d48e
mov dword [rsp + 0xa8], 0
lea rcx, [rsp + 0x80]
call fcn.1000144b0
nop
mov rcx, qword [rsp + 0x108]
call fcn.1000144b0
mov eax, dword [rsp + 0xa8]
jmp 0x10007d608
lea rdx, [0x100012168]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 0
je 0x10007d4fe
cmp dword [rsp + 0x90], 2
je 0x10007d4fe
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp + 0xac], 0
lea rcx, [rsp + 0x80]
call fcn.1000144b0
nop
mov rcx, qword [rsp + 0x108]
call fcn.1000144b0
mov eax, dword [rsp + 0xac]
jmp 0x10007d608
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x80]
call fcn.1000144b0
mov dword [rsp + 0x30], 0
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xb8], rax
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0xb8]
call fcn.1000148e0
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xe0], rax
lea r8, [rsp + 0x30]
mov edx, dword [rsp + 0x100]
mov rcx, qword [rsp + 0xe0]
call fcn.10007d700
test eax, eax
jne 0x10007d5d4
cmp dword [rsp + 0x100], 5
je 0x10007d590
cmp dword [rsp + 0x100], 9
jne 0x10007d5b3
mov dword [rsp + 0xc0], 0
mov rcx, qword [rsp + 0x108]
call fcn.1000144b0
mov eax, dword [rsp + 0xc0]
jmp 0x10007d608
mov dword [rsp + 0xc4], 0x643
mov rcx, qword [rsp + 0x108]
call fcn.1000144b0
mov eax, dword [rsp + 0xc4]
jmp 0x10007d608
cmp dword [rsp + 0x30], 0
je 0x10007d5e9
mov rax, qword [rsp + 0x110]
mov dword [rax], 1
mov dword [rsp + 0xc8], 0
mov rcx, qword [rsp + 0x108]
call fcn.1000144b0
mov eax, dword [rsp + 0xc8]
add rsp, 0xf8
ret