Function at 0x140006df0
Capabilities:
Delete registry key
Delete registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov qword [rbp - 0x41], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14004e2d0]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rbx, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x69], xmm0
xor r15d, r15d
mov r14d, r15d
mov qword [rbp - 0x59], r15
mov qword [rbp - 1], 7
mov qword [rbp - 9], r15
mov word [rbp - 0x19], r15w
lea r8d, [r15 + 1]
lea rdx, [0x140040804]
lea rcx, [rbp - 0x19]
call fcn.14000e0d0
nop
mov qword [rbp - 0x21], 7
mov qword [rbp - 0x29], r15
mov word [rbp - 0x39], r15w
cmp word [rbx], r15w
jne 0x140006e80
mov r8d, r15d
jmp 0x140006e8f
or r8, 0xffffffffffffffff
inc r8
cmp word [rbx + r8*2], 0
jne 0x140006e84
mov rdx, rbx
lea rcx, [rbp - 0x39]
call fcn.14000e0d0
nop
mov rdi, r15
mov qword [rbp - 0x61], r15
lea r10, [rbp - 0x19]
mov rcx, qword [rbp - 1]
cmp rcx, 8
mov rsi, qword [rbp - 0x19]
cmovae r10, rsi
mov r9, qword [rbp - 9]
mov r13, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x29]
mov r12, qword [rbp - 0x21]
test rbx, rbx
je 0x140006f37
lea rax, [rbp - 0x39]
cmp r12, 8
cmovae rax, r13
lea r11, [rax + rbx*2]
lea r8, [rbp - 0x39]
cmovae r8, r13
cmp r8, r11
jae 0x140006f37
nop dword [rax]
test r9, r9
je 0x140006f1b
mov rcx, r9
mov rax, r10
movzx edx, word [r8]
nop
cmp word [rax], dx
je 0x140006f10
add rax, 2
dec rcx
je 0x140006f1b
jmp 0x140006f00
add r8, 2
cmp r8, r11
jae 0x140006f33
jmp 0x140006ef0
lea rax, [rbp - 0x39]
cmp r12, 8
cmovae rax, r13
sub r8, rax
sar r8, 1
mov rcx, qword [rbp - 1]
jmp 0x140006f3b
mov rcx, qword [rbp - 1]
or r8, 0xffffffffffffffff
lea r10, [rbp - 0x19]
cmp rcx, 8
cmovae r10, rsi
test r9, r9
je 0x140006fa8
cmp r8, rbx
jae 0x140006fa8
lea rax, [rbp - 0x39]
cmp r12, 8
cmovae rax, r13
lea r11, [rax + rbx*2]
lea rax, [rbp - 0x39]
cmovae rax, r13
lea rsi, [rax + r8*2]
cmp rsi, r11
jae 0x140006fa8
test r9, r9
je 0x140006f8e
mov rcx, r9
mov rax, r10
movzx edx, word [rsi]
cmp word [rax], dx
je 0x140006f94
add rax, 2
dec rcx
jne 0x140006f80
add rsi, 2
jmp 0x140006f6d
lea rax, [rbp - 0x39]
cmp r12, 8
cmovae rax, r13
sub rsi, rax
sar rsi, 1
jmp 0x140006fac
or rsi, 0xffffffffffffffff
mov r12, qword [rbp - 0x69]
cmp rsi, 0xffffffffffffffff
jne 0x140006fbf
cmp r8, rsi
je 0x140007275
mov r9, rsi
sub r9, r8
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x39]
call fcn.14000d270
mov rbx, rax
cmp rax, rdi
jae 0x14000706b
cmp r12, rax
ja 0x14000706b
sub rbx, r12
cmp rdi, r14
jne 0x140007062
mov rax, r14
sub rax, rdi
sar rax, 5
cmp rax, 1
jae 0x140007062
sub rdi, r12
sar rdi, 5
movabs rdx, 0x7ffffffffffffff
mov rax, rdx
sub rax, rdi
cmp rax, 1
jb 0x1400073de
inc rdi
sub r14, r12
sar r14, 5
mov rcx, r14
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rax, r14
jae 0x140007040
mov r14, r15
jmp 0x140007043
add r14, rcx
cmp r14, rdi
cmovb r14, rdi
mov rdx, r14
lea rcx, [rbp - 0x69]
call fcn.14000e3b0
mov r14, qword [rbp - 0x59]
mov rdi, qword [rbp - 0x61]
mov r12, qword [rbp - 0x69]
and rbx, 0xffffffffffffffe0
add rbx, r12
jmp 0x1400070e3
cmp rdi, r14
jne 0x1400070e3
mov rax, r14
sub rax, rdi
sar rax, 5
cmp rax, 1
jae 0x1400070e3
sub rdi, r12
sar rdi, 5
movabs rdx, 0x7ffffffffffffff
mov rax, rdx
sub rax, rdi
cmp rax, 1
jb 0x1400073eb
inc rdi
sub r14, r12
sar r14, 5
mov rcx, r14
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rax, r14
jae 0x1400070c1
mov r14, r15
jmp 0x1400070c4
add r14, rcx
cmp r14, rdi
cmovb r14, rdi
mov rdx, r14
lea rcx, [rbp - 0x69]
call fcn.14000e3b0
mov r14, qword [rbp - 0x59]
mov rdi, qword [rbp - 0x61]
mov r12, qword [rbp - 0x69]
test rdi, rdi
je 0x140007141
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], r15
mov word [rdi], r15w
cmp qword [rbx + 0x18], 8
jae 0x140007118
mov r8, qword [rbx + 0x10]
inc r8
je 0x140007121
add r8, r8
mov rdx, rbx
mov rcx, rdi
call fcn.140020ce0
jmp 0x140007121
mov rax, qword [rbx]
mov qword [rdi], rax
mov qword [rbx], r15
mov rax, qword [rbx + 0x10]
mov qword [rdi + 0x10], rax
mov rax, qword [rbx + 0x18]
mov qword [rdi + 0x18], rax
mov qword [rbx + 0x18], 7
mov qword [rbx + 0x10], r15
mov word [rbx], r15w
add rdi, 0x20
mov qword [rbp - 0x61], rdi
cmp qword [rbp + 0x1f], 8
jb 0x140007159
mov rcx, qword [rbp + 7]
call fcn.140020a7c
lea r10, [rbp - 0x19]
cmp qword [rbp - 1], 8
mov rcx, qword [rbp - 0x19]
cmovae r10, rcx
mov r9, qword [rbp - 9]
mov r13, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x29]
mov rdx, qword [rbp - 0x21]
cmp rsi, rbx
jae 0x1400071ef
lea rax, [rbp - 0x39]
cmp rdx, 8
cmovae rax, r13
lea r11, [rax + rbx*2]
lea rax, [rbp - 0x39]
cmovae rax, r13
lea r8, [rax + rsi*2]
cmp r8, r11
jae 0x1400071ef
test r9, r9
je 0x1400071cb
mov rcx, r9
mov rax, r10
movzx edx, word [r8]
nop
cmp word [rax], dx
je 0x1400071c0
add rax, 2
dec rcx
je 0x1400071cb
jmp 0x1400071b0
add r8, 2
cmp r8, r11
jae 0x1400071e7
jmp 0x1400071a0
lea rax, [rbp - 0x39]
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
cmovae rax, r13
sub r8, rax
sar r8, 1
mov rcx, qword [rbp - 0x19]
jmp 0x1400071f3
mov rdx, qword [rbp - 0x21]
mov rcx, qword [rbp - 0x19]
or r8, 0xffffffffffffffff
lea r10, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae r10, rcx
test r9, r9
je 0x14000726c
cmp r8, rbx
jae 0x14000726c
lea rax, [rbp - 0x39]
cmp rdx, 8
cmovae rax, r13
lea r11, [rax + rbx*2]
lea rax, [rbp - 0x39]
cmovae rax, r13
lea rsi, [rax + r8*2]
cmp rsi, r11
jae 0x14000726c
test r9, r9
je 0x14000724e
mov rcx, r9
mov rax, r10
movzx edx, word [rsi]
nop dword [rax]
cmp word [rax], dx
je 0x140007254
add rax, 2
dec rcx
jne 0x140007240
add rsi, 2
jmp 0x140007226
lea rax, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rax, r13
sub rsi, rax
sar rsi, 1
jmp 0x140006fb0
or rsi, 0xffffffffffffffff
jmp 0x140006fb0
sub rdi, r12
sar rdi, 5
cmp qword [rbp - 0x21], 8
jb 0x14000728b
mov rcx, r13
call fcn.140020a7c
mov qword [rbp - 0x21], 7
mov qword [rbp - 0x29], r15
mov word [rbp - 0x39], r15w
cmp qword [rbp - 1], 8
jb 0x1400072ac
mov rcx, qword [rbp - 0x19]
call fcn.140020a7c
cmp edi, 2
jb 0x1400073d0
cmp qword [r12 + 0x18], 8
jb 0x1400072c1
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rbp - 0x51]
call fcn.14000c650
nop
mov rcx, rax
call fcn.14000d620
mov rcx, rax
call fcn.14000cc20
mov rcx, qword [rax]
sub rcx, 0x18
call fcn.14000e040
add rax, 0x18
mov qword [rbp - 0x49], rax
mov rdx, qword [rbp - 0x51]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000730a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rdx, [0x14003f720]
mov rbx, qword [rbp - 0x49]
mov rcx, rbx
call fcn.140021588
test eax, eax
jne 0x14000732a
mov rcx, 0xffffffff80000000
jmp 0x140007373
lea rdx, [0x140040808]
mov rcx, rbx
call fcn.140021588
test eax, eax
je 0x14000736c
lea rdx, str.HKLM
mov rcx, rbx
call fcn.140021588
test eax, eax
je 0x14000736c
lea rdx, str.HKCU
mov rcx, rbx
call fcn.140021588
test eax, eax
jne 0x1400073ba
mov rcx, 0xffffffff80000001
jmp 0x140007373
mov rcx, 0xffffffff80000002
mov rdx, qword [rbp - 0x69]
cmp edi, 3
jae 0x140007392
add rdx, 0x20
cmp qword [rdx + 0x18], 8
jb 0x14000738a
mov rdx, qword [rdx]
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
jmp 0x1400073b4
lea r8, [rdx + 0x40]
cmp qword [r8 + 0x18], 8
jb 0x1400073a0
mov r8, qword [r8]
add rdx, 0x20
cmp qword [rdx + 0x18], 8
jb 0x1400073ae
mov rdx, qword [rdx]
call qword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
test eax, eax
sete r15b
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400073d0
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
nop
lea rcx, [rbp - 0x69]
call fcn.14000dd40
mov eax, r15d
jmp 0x1400073f8
lea rcx, str.vector_T__too_long
call fcn.140034074
int3
lea rcx, str.vector_T__too_long
call fcn.140034074
nop
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140020aa0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret