Function at 0x140079110
Capabilities:
Delete registry value

Disassembly:
xchg rcx, rsp
mov rax, rcx
xchg rcx, rsp
xchg rbp, rbx
mov qword [rax + 0x10], rbp
jmp 0x1400793f1
mov r9, r9
test eax, eax
jne 0x140079358
cmp qword [rdi + 0x18], 0x10
jb 0x14007969b
jmp 0x140079695
xchg rdx, rdx
xor byte [r9 - 1], al
cmp r8d, 0x4d
jl 0x140079869
xchg rsp, rsp
lea rax, [rsp + 0x80]
jmp 0x140079588
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
mov rdi, rdi
packuswb xmm2, xmm2
paddb xmm2, xmm0
jmp 0x1400791dc
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
xchg rbx, rbx
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
jmp 0x140079841
xchg rdi, r11
mov rsp, r11
mov dword [rsp - 0x30], 0x32958384
jmp 0x14007970e
movdqa xmm1, xmm3
mov r9, r9
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
mov dword [rsp - 0xc], 0x2428ea40
jmp 0x140079a03
movd xmm0, dword [rcx - 8]
mov dword [rsp - 0x40], 0x34485811
pxor xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x48
jmp 0x1400792d0
xchg rbp, rcx
nop
mov qword [rsp - 8], rsi
jmp 0x1400796f3
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
xchg r14, r14
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
jmp 0x14007974a
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
jmp 0x14007928a
movsxd rax, ebx
lea r8, [rsp + 0x30]
lea r8, [r8 + rax*2]
nop dword [rax]
mov dword [rsp - 0x38], 0x4499b444
nop word [rax + rax]
mov eax, 0x447aadc7
jmp 0x1400797c0
xchg rcx, rcx
mov r9d, eax
test eax, 0xfffffffd
je 0x140079347
jmp 0x1400799d3
add eax, 0x60f95525
sub eax, 0x4c12b909
sub eax, 0x22e91564
jmp 0x14007996d
mov dword [rsp - 0x34], ecx
movzx eax, r8b
inc r8d
sub al, cl
sub al, 0xce
jmp 0x140079140
mov rax, qword [0x1402567f0]
xor rax, rsp
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [0x14011c4a0]
mov r10, r10
jmp 0x14007981c
mov r8d, ebx
mov esi, dword [0x1402567d0]
xchg r15, rsp
jmp 0x140079909
jl 0x14007948f
mov dword [rsp - 0x18], 0x7ec263d8
cmp r8d, 0x4d
jmp 0x140079651
movdqa xmm5, xmmword [0x140119390]
lea rcx, [rsp + 0x30]
movdqa xmm4, xmmword [0x14011cfb0]
xchg r9, r9
jmp 0x140079804
sar edx, 2
mov eax, edx
xchg rsi, rsi
shr eax, 8
shr eax, 6
shr eax, 2
shr eax, 0xa
jmp 0x14007966a
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
mov dword [rsp - 0x14], edi
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
jmp 0x1400799f2
mov rdx, rdx
call fcn.1400ae360
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rbx, rbx
mov rcx, qword [rsp + 0x90]
jmp 0x14007978d
psrld xmm0, xmm8
paddd xmm0, xmm1
mov dword [rsp - 0x34], 0x291c33ef
pmulld xmm0, xmm7
jmp 0x1400797a5
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
mov dword [rsp - 0x20], 0x1975552b
movd dword [rcx - 0xc], xmm2
jmp 0x14007939b
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
mov dword [rsp - 0x34], 0x70a32a99
jmp 0x1400795dd
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
mov dword [rsp - 0x44], 0x4b06ad50
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
jmp 0x1400795bd
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
xchg r11, r15
movaps xmm6, xmmword [r15 - 0x10]
xchg r11, r15
jmp 0x140079a44
xchg rbx, rbp
xchg rcx, rbp
mov qword [rax + 0x18], rcx
jmp 0x1400791fb
movzx eax, dx
imul ecx, eax, 0x34
mov r12, r12
movzx eax, bx
inc ebx
jmp 0x1400794ee
xchg rcx, rsp
movdqa xmm9, xmmword [str.22222222]
movd xmm6, ebp
mov dword [rsp - 0x20], edi
movd xmm8, r14d
jmp 0x140079431
nop
movd xmm2, ebx
lea eax, [rbx + 4]
mov r8, r8
pshufd xmm2, xmm2, 0
jmp 0x1400798ea
sar edx, 2
sar edx, 2
mov eax, edx
mov r14, r14
shr eax, 0x1d
jmp 0x14007992c
punpckldq xmm1, xmm2
mov rdx, rdx
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x140079946
mov dword [rsp - 0x30], esp
movd xmm6, ebp
movd xmm8, r14d
nop dword [rax]
xchg r11, r11
nop dword [rax + rax]
movd xmm2, r8d
jmp 0x14007931d
mov dword [rsp - 0x20], ecx
xchg rdx, rax
movaps xmmword [rdx - 0x28], xmm6
xchg rdx, rax
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov dword [rsp - 0x1c], 0x2771b2b7
jmp 0x14007929e
jl 0x140079657
movdqa xmm0, xmmword [0x14011b8e0]
lea rcx, [rsp + 0x34]
mov r9, r9
movdqa xmm5, xmmword [0x140119390]
movdqa xmm4, xmmword [0x14011cfb0]
movdqa xmm7, xmmword [str.4444]
jmp 0x140079727
sub ax, cx
mov dword [rsp - 0xc], 0x7050572f
sub ax, 0x3208
add ax, 0x323a
xor word [r8 - 2], ax
mov dword [rsp - 0x40], 0x14c49577
jmp 0x140079555
movups xmmword [r12 + 0x40], xmm1
xchg r12, rsp
movups xmm1, xmmword [0x14011c520]
xchg rbp, rbp
mov dword [rsp + 0x78], eax
movzx eax, word [0x14011c53c]
jmp 0x140079620
paddw xmm3, xmm2
pxor xmm3, xmm0
movq qword [rcx - 8], xmm3
mov dword [rsp - 0x28], ebx
cmp ebx, 0x20
jl 0x140079432
jmp 0x140079882
cmp ebx, 0x27
jl 0x140079256
mov edx, r9d
lea rcx, [rsp + 0x30]
jmp 0x14007933f
xchg rdi, rsp
movups xmmword [rdi + 0x50], xmm0
xchg rsp, rdi
movsd xmm0, qword [0x14011c530]
xchg r8, r8
xchg r12, rsp
jmp 0x140079513
mov r9d, 0x5da6c20b
sub r9d, 0x43c1cbc8
xor r9d, 0x7d4b6e0f
xor r9d, 0x7843616e
add r9d, 0x9dc3686
add r9d, 0x1e290f99
sub r9d, 0x44e33f02
jmp 0x140079956
mov dword [rsp - 0x2c], ebp
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
mov dword [rsp - 0x3c], 0x8382ee7
jmp 0x140079536
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
mov dword [rsp - 0x34], ebx
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
jmp 0x1400799bd
xchg rbx, rsp
movsd qword [rbx + 0x70], xmm0
xchg rbx, rsp
movups xmmword [rsp + 0x60], xmm1
mov byte [rsp + 0x7c], al
cmp esi, 2
xchg rsp, rsp
jmp 0x1400794bb
xchg r13, rsp
movsd qword [r13 + 0x70], xmm0
xchg rsp, r13
jmp 0x1400797e3
add rcx, 0x47613d5c
add rcx, 0x7fffffff
sub rcx, 0x5f490881
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
jmp 0x140079125
jge 0x140079154
movsxd rax, r8d
lea r9, [rsp + 0x30]
mov r11, r11
add r9, rax
jmp 0x140079855
shr eax, 3
shr eax, 1
shr eax, 1
jmp 0x140079228
movups xmm1, xmmword [0x14011c4d0]
mov dword [rsp + 0x78], eax
movzx eax, byte [0x14011c4ec]
mov dword [rsp - 0x28], 0x3b64f3e
jmp 0x140079601
xchg rbp, rbp
mov rdi, qword [rdi]
mov rcx, qword [rsp + 0x80]
xchg rdi, rdx
mov rdi, rdx
xchg rdx, rdi
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
jmp 0x140079260
movabs rcx, 0xffffffff427895eb
xor rcx, 0x69276a3d
add rcx, 0x52669445
jmp 0x14007976c
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x14011c4e0]
movups xmmword [rsp + 0x40], xmm1
mov dword [rsp - 0x20], 0x633eadca
jmp 0x140079676
sub rsp, 8
push rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
sub rsp, 0xe0
jmp 0x140079499
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
add rsp, 8
mov rdi, qword [rsp - 8]
jmp 0x1400798df
mov dword [rsp - 0x1c], 0x4b8a7571
xchg rsp, r11
movdqa xmmword [r11 + 0x80], xmm0
xchg rsp, r11
mov edx, dword [rsp + 0x80]
jmp 0x140079473
mov dword [rsp - 0x18], 0x71534b37
pshufd xmm2, xmm2, 0
pxor xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm5
mov r14, r14
jmp 0x14007917e
xor rcx, 0x5ec01749
xor rcx, 0x7d306274
add rcx, 0xf5ce16f
sub rcx, 0x55abf76e
jmp 0x140079631
xor rcx, rsp
call fcn.1400e9e80
lea r11, [rsp + 0xe0]
mov r9, r9
jmp 0x1400793d9
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
mov dword [rsp - 0x40], 0x507ef68d
movq xmm2, xmm9
jmp 0x140079209
sub eax, 0xa54ccb8
xor eax, 0x4fc67d99
sub eax, 0x7673765
sub eax, 0x22388a1c
xor eax, 0x7550b7c4
add eax, 0x15b17f7e
jmp 0x140079937
xchg rbp, rsp
movups xmmword [rbp + 0x60], xmm1
xchg rsp, rbp
mov word [rsp + 0x7c], ax
cmp esi, 2
mov dword [rsp - 0x14], ecx
jl 0x140079235
jmp 0x1400792e7
movdqa xmm7, xmmword [str.4444]
xchg rsp, rcx
movaps xmmword [rcx + 0xa0], xmm9
jmp 0x140079413
xor ebx, ebx
movups xmm1, xmmword [0x14011c4b0]
xchg rsi, rdi
mov rsi, rcx
xchg rdi, rsi
mov eax, dword [0x14011c4e8]
mov dword [rsp - 0x38], 0x56c57af3
jmp 0x1400792bf
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
xchg rbx, rbx
movdqa xmm0, xmm1
jmp 0x1400793b0
nop dword [rax]
nop dword [rax + rax]
mov dword [rsp - 0x40], 0x1d0b1de8
mov eax, 0x45ec926e
add eax, 0x2aebb9c2
xor eax, 0x39151677
sub eax, 0x39c9433c
jmp 0x140079276
xchg rsp, r9
movaps xmm9, xmmword [r9 + 0xa0]
xchg rsp, r9
cmp ebx, 0x27
jge 0x14007955e
mov dword [rsp - 0x44], edx
jmp 0x140079235
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
mov rcx, rcx
paddd xmm0, xmm1
pmulld xmm0, xmm7
jmp 0x1400799a2
add r8d, 0x4479e834
sub r8d, 0x4479e82c
pmuldq xmm1, xmm4
mov rsp, rsp
shufps xmm1, xmm0, 0xdd
jmp 0x1400798a2
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
lea rcx, [rcx + 0x10]
paddd xmm2, xmm5
sub ebx, 0xfffffff8
xchg rdx, rdx
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
jmp 0x140079459
movups xmmword [r15 + 0x30], xmm0
xchg r15, rsp
lea ebp, [rbx + 4]
movups xmm0, xmmword [0x14011c4c0]
mov dword [rsp - 0x38], 0x523eb230
lea r14d, [rbx + 0x1f]
jmp 0x1400796d4
shr eax, 1
shr eax, 1
add edx, eax
jmp 0x140079400
lea r8, [r8 + 2]
mov dword [rsp - 0x40], ebx
imul ebx
jmp 0x140079446
mov rdi, rdi
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x140079365
xor r8d, r8d
xchg r13, rax
mov qword [rsp + 0x20], r13
xchg r13, rax
lea rdx, [rsp + 0x30]
nop
jmp 0x1400796b7
add eax, 0x4cc34e8c
lea r9, [r9 + 1]
mov dword [rsp - 0x30], ebx
imul r8d
sar edx, 2
jmp 0x140079304
movdqa xmm0, xmm2
mov r8, r8
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
mov r13, r13
nop
jmp 0x1400798c0
psubd xmm2, xmm0
xchg rsi, rsi
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x1400791b3
pshufhw xmm1, xmm0, 0xd8
mov dword [rsp - 0x20], 0x56cb22ce
movd xmm0, edx
jmp 0x140079161
xchg rsp, rsp
movups xmm0, xmmword [0x14011c4f0]
movups xmm1, xmmword [0x14011c500]
mov eax, dword [0x14011c538]
xchg rbp, rbp
jmp 0x140079a25
xchg r9, r9
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
jmp 0x140079985
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
mov dword [rsp - 0x34], 0xc4c43ae
pxor xmm2, xmm0
movdqa xmm0, xmm3
jmp 0x140079380
xchg rsp, r9
movups xmmword [r9 + 0x30], xmm0
xchg rsp, r9
movups xmm0, xmmword [0x14011c510]
mov dword [rsp - 0x24], 0x3facfd60
jmp 0x14007956b
xchg r11, rbp
movaps xmm7, xmmword [rbp - 0x20]
xchg rbp, r11
xchg r11, rdi
movaps xmm8, xmmword [rdi - 0x30]
jmp 0x1400791a0