Function at 0x1400f87e0
Capabilities:
Delete registry key
Delete registry value

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x60], 0xfffffffffffffffe
mov qword [rsp + 0xc0], rbx
mov rbx, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
xor r15d, r15d
mov qword [rbp - 0x48], r15
mov qword [rbp - 8], 7
mov qword [rbp - 0x10], r15
mov word [rbp - 0x20], r15w
lea r8d, [r15 + 1]
lea rdx, [0x1401577d4]
lea rcx, [rbp - 0x20]
call fcn.140009080
nop
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r15
mov word [rbp - 0x40], r15w
or rsi, 0xffffffffffffffff
cmp word [rbx], r15w
jne 0x1400f885a
mov r8d, r15d
jmp 0x1400f886b
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x1400f8860
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.140009080
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.1400a8240
mov edi, eax
cmp qword [rbp - 0x28], 8
jb 0x1400f889b
mov rcx, qword [rbp - 0x40]
call fcn.14010a7dc
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r15
mov word [rbp - 0x40], r15w
cmp qword [rbp - 8], 8
jb 0x1400f88bc
mov rcx, qword [rbp - 0x20]
call fcn.14010a7dc
cmp edi, 2
jae 0x1400f88c9
mov edi, r15d
jmp 0x1400f89ea
mov rdx, qword [rbp - 0x58]
cmp qword [rdx + 0x18], 8
jb 0x1400f88d7
mov rdx, qword [rdx]
lea rcx, [rbp + 0x30]
call fcn.140007840
nop
mov rcx, rax
call fcn.140065680
mov rcx, rax
call fcn.1400a8120
mov rcx, qword [rax]
sub rcx, 0x18
call fcn.140007d60
add rax, 0x18
mov qword [rbp + 0x38], rax
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400f891d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.HKCR
mov rbx, qword [rbp + 0x38]
mov rcx, rbx
call fcn.140111cac
test eax, eax
jne 0x1400f893d
mov rcx, 0xffffffff80000000
jmp 0x1400f898b
lea rdx, [0x1401744d0]
mov rcx, rbx
call fcn.140111cac
test eax, eax
je 0x1400f8984
lea rdx, str.HKLM
mov rcx, rbx
call fcn.140111cac
test eax, eax
je 0x1400f8984
lea rdx, str.HKCU
mov rcx, rbx
call fcn.140111cac
test eax, eax
jne 0x1400f897f
mov rcx, 0xffffffff80000001
jmp 0x1400f898b
mov edi, r15d
jmp 0x1400f89d5
mov rcx, 0xffffffff80000002
mov rdx, qword [rbp - 0x58]
cmp edi, 3
jae 0x1400f89aa
add rdx, 0x20
cmp qword [rdx + 0x18], 8
jb 0x1400f89a2
mov rdx, qword [rdx]
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
jmp 0x1400f89cc
lea r8, [rdx + 0x40]
cmp qword [r8 + 0x18], 8
jb 0x1400f89b8
mov r8, qword [r8]
add rdx, 0x20
cmp qword [rdx + 0x18], 8
jb 0x1400f89c6
mov rdx, qword [rdx]
call qword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
mov edi, r15d
test eax, eax
sete dil
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400f89ea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov r14, qword [rbp - 0x58]
test r14, r14
je 0x1400f8a30
mov rbx, r14
mov rsi, qword [rbp - 0x50]
cmp r14, rsi
je 0x1400f8a28
nop
cmp qword [rbx + 0x18], 8
jb 0x1400f8a0f
mov rcx, qword [rbx]
call fcn.14010a7dc
mov qword [rbx + 0x18], 7
mov qword [rbx + 0x10], r15
mov word [rbx], r15w
add rbx, 0x20
cmp rbx, rsi
jne 0x1400f8a00
mov rcx, r14
call fcn.14010a7dc
mov eax, edi
mov rbx, qword [rsp + 0xc0]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret