Function at 0x140103e30
Capabilities:
Delete registry key
Delete registry value

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x90
mov qword [rbp - 0x29], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rdi, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
xor r12d, r12d
mov qword [rbp - 0x11], r12
mov qword [rbp + 0x2f], 7
mov qword [rbp + 0x27], r12
mov word [rbp + 0x17], r12w
lea r8d, [r12 + 1]
lea rdx, [0x14016da9c]
lea rcx, [rbp + 0x17]
call fcn.14000d340
nop
mov qword [rbp + 0xf], 7
mov qword [rbp + 7], r12
mov word [rbp - 9], r12w
or rsi, 0xffffffffffffffff
cmp word [rdi], r12w
jne 0x140103eaf
mov r8d, r12d
jmp 0x140103ebd
mov r8, rsi
inc r8
cmp word [rdi + r8*2], 0
jne 0x140103eb2
mov rdx, rdi
lea rcx, [rbp - 9]
call fcn.14000d340
nop
lea r8, [rbp + 0x17]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 9]
call fcn.1400b8cc0
mov r15d, eax
cmp qword [rbp + 0xf], 8
jb 0x140103eee
mov rcx, qword [rbp - 9]
call fcn.14011f898
mov qword [rbp + 0xf], 7
mov qword [rbp + 7], r12
mov word [rbp - 9], r12w
cmp qword [rbp + 0x2f], 8
jb 0x140103f0f
mov rcx, qword [rbp + 0x17]
call fcn.14011f898
cmp r15d, 2
jae 0x140103f41
test byte [0x1402d741c], 2
je 0x140103f39
mov r9, rdi
lea r8, str.Not_delete_the_whole__s_n
mov edx, 2
lea rcx, str.DeleteInfStringFormatReg
call fcn.14011a590
mov edi, r12d
jmp 0x1401040e9
mov rdx, qword [rbp - 0x21]
lea r14, [rdx + 0x18]
cmp qword [r14], 8
jb 0x140103f52
mov rdx, qword [rdx]
lea rcx, [rbp + 0x67]
call fcn.140010c50
nop
mov rcx, rax
call fcn.140062d10
mov rcx, rax
call fcn.1400b8ba0
mov rcx, qword [rax]
sub rcx, 0x18
call fcn.1400112f0
add rax, 0x18
mov qword [rbp + 0x6f], rax
mov rdx, qword [rbp + 0x67]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140103f98
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.HKCR
mov rbx, qword [rbp + 0x6f]
mov rcx, rbx
call fcn.140126394
test eax, eax
jne 0x140103fbb
mov rcx, 0xffffffff80000000
jmp 0x140104045
lea rdx, [0x1401a0528]
mov rcx, rbx
call fcn.140126394
test eax, eax
je 0x14010403e
lea rdx, str.HKLM
mov rcx, rbx
call fcn.140126394
test eax, eax
je 0x14010403e
lea rdx, str.HKCU
mov rcx, rbx
call fcn.140126394
test eax, eax
jne 0x140103ffd
mov rcx, 0xffffffff80000001
jmp 0x140104045
test byte [0x1402d741c], 2
je 0x140104036
cmp qword [r14], 8
jb 0x140104015
mov rax, qword [rbp - 0x21]
mov r9, qword [rax]
jmp 0x140104019
mov r9, qword [rbp - 0x21]
mov qword [rsp + 0x20], rdi
lea r8, str._s__Invalid_RootKey_in__s_n
mov edx, 2
lea rcx, str.DeleteInfStringFormatReg
call fcn.14011a590
mov edi, r12d
jmp 0x1401040d4
mov rcx, 0xffffffff80000002
mov rdx, qword [rbp - 0x21]
cmp r15d, 3
jae 0x140104065
add rdx, 0x20
cmp qword [rdx + 0x18], 8
jb 0x14010405d
mov rdx, qword [rdx]
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
jmp 0x140104087
lea r8, [rdx + 0x40]
cmp qword [r8 + 0x18], 8
jb 0x140104073
mov r8, qword [r8]
add rdx, 0x20
cmp qword [rdx + 0x18], 8
jb 0x140104081
mov rdx, qword [rdx]
call qword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
mov r14d, eax
test byte [0x1402d741c], 2
je 0x1401040ca
lea rax, [0x14018af48]
lea r9, [0x14018af58]
test r14d, r14d
cmove r9, rax
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], r14d
lea r8, str._s__status_0x_x__to_delete:__s_n
mov edx, 2
lea rcx, str.DeleteInfStringFormatReg
call fcn.14011a590
mov edi, r12d
test r14d, r14d
sete dil
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1401040e9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov r14, qword [rbp - 0x21]
test r14, r14
je 0x140104130
mov rbx, r14
mov rsi, qword [rbp - 0x19]
cmp r14, rsi
je 0x140104128
nop
cmp qword [rbx + 0x18], 8
jb 0x14010410f
mov rcx, qword [rbx]
call fcn.14011f898
mov qword [rbx + 0x18], 7
mov qword [rbx + 0x10], r12
mov word [rbx], r12w
add rbx, 0x20
cmp rbx, rsi
jne 0x140104100
mov rcx, r14
call fcn.14011f898
mov eax, edi
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret