Function at 0x1400070a0
Capabilities:
Delete registry key
Delete registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov qword [rbp - 0x39], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1400512d0]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rbx, rcx
mov qword [rbp - 0x51], rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x69], xmm0
xor r15d, r15d
mov r14d, r15d
mov qword [rbp - 0x59], r15
mov qword [rbp + 7], 7
mov qword [rbp - 1], r15
mov word [rbp - 0x11], r15w
lea r8d, [r15 + 1]
lea rdx, [0x140042098]
lea rcx, [rbp - 0x11]
call fcn.14000e180
nop
mov qword [rbp - 0x19], 7
mov qword [rbp - 0x21], r15
mov word [rbp - 0x31], r15w
cmp word [rbx], r15w
jne 0x140007134
mov r8d, r15d
jmp 0x14000714b
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140007140
mov rdx, rbx
lea rcx, [rbp - 0x31]
call fcn.14000e180
nop
mov rdi, r15
mov qword [rbp - 0x61], r15
lea r10, [rbp - 0x11]
mov rcx, qword [rbp + 7]
cmp rcx, 8
mov rsi, qword [rbp - 0x11]
cmovae r10, rsi
mov r9, qword [rbp - 1]
mov r13, qword [rbp - 0x31]
mov rbx, qword [rbp - 0x21]
mov r12, qword [rbp - 0x19]
test rbx, rbx
je 0x1400071eb
lea rax, [rbp - 0x31]
cmp r12, 8
cmovae rax, r13
lea r11, [rax + rbx*2]
lea r8, [rbp - 0x31]
cmovae r8, r13
cmp r8, r11
jae 0x1400071eb
test r9, r9
je 0x1400071cf
mov rcx, r9
mov rax, r10
movzx edx, word [r8]
cmp word [rax], dx
je 0x1400071c4
add rax, 2
dec rcx
je 0x1400071cf
jmp 0x1400071b4
add r8, 2
cmp r8, r11
jae 0x1400071e7
jmp 0x1400071a5
lea rax, [rbp - 0x31]
cmp r12, 8
cmovae rax, r13
sub r8, rax
sar r8, 1
mov rcx, qword [rbp + 7]
jmp 0x1400071ef
mov rcx, qword [rbp + 7]
or r8, 0xffffffffffffffff
lea r10, [rbp - 0x11]
cmp rcx, 8
cmovae r10, rsi
test r9, r9
je 0x14000725c
cmp r8, rbx
jae 0x14000725c
lea rax, [rbp - 0x31]
cmp r12, 8
cmovae rax, r13
lea r11, [rax + rbx*2]
lea rax, [rbp - 0x31]
cmovae rax, r13
lea rsi, [rax + r8*2]
cmp rsi, r11
jae 0x14000725c
test r9, r9
je 0x140007242
mov rcx, r9
mov rax, r10
movzx edx, word [rsi]
cmp word [rax], dx
je 0x140007248
add rax, 2
dec rcx
jne 0x140007234
add rsi, 2
jmp 0x140007221
lea rax, [rbp - 0x31]
cmp r12, 8
cmovae rax, r13
sub rsi, rax
sar rsi, 1
jmp 0x140007260
or rsi, 0xffffffffffffffff
mov r12, qword [rbp - 0x69]
cmp rsi, 0xffffffffffffffff
jne 0x140007273
cmp r8, rsi
je 0x140007525
mov r9, rsi
sub r9, r8
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x31]
call fcn.14000d3a0
mov rbx, rax
cmp rax, rdi
jae 0x14000731f
cmp r12, rax
ja 0x14000731f
sub rbx, r12
cmp rdi, r14
jne 0x140007316
mov rax, r14
sub rax, rdi
sar rax, 5
cmp rax, 1
jae 0x140007316
sub rdi, r12
sar rdi, 5
movabs rdx, 0x7ffffffffffffff
mov rax, rdx
sub rax, rdi
cmp rax, 1
jb 0x140007748
inc rdi
sub r14, r12
sar r14, 5
mov rcx, r14
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rax, r14
jae 0x1400072f4
mov r14, r15
jmp 0x1400072f7
add r14, rcx
cmp r14, rdi
cmovb r14, rdi
mov rdx, r14
lea rcx, [rbp - 0x69]
call fcn.14000e460
mov r14, qword [rbp - 0x59]
mov rdi, qword [rbp - 0x61]
mov r12, qword [rbp - 0x69]
and rbx, 0xffffffffffffffe0
add rbx, r12
jmp 0x140007397
cmp rdi, r14
jne 0x140007397
mov rax, r14
sub rax, rdi
sar rax, 5
cmp rax, 1
jae 0x140007397
sub rdi, r12
sar rdi, 5
movabs rdx, 0x7ffffffffffffff
mov rax, rdx
sub rax, rdi
cmp rax, 1
jb 0x140007755
inc rdi
sub r14, r12
sar r14, 5
mov rcx, r14
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rax, r14
jae 0x140007375
mov r14, r15
jmp 0x140007378
add r14, rcx
cmp r14, rdi
cmovb r14, rdi
mov rdx, r14
lea rcx, [rbp - 0x69]
call fcn.14000e460
mov r14, qword [rbp - 0x59]
mov rdi, qword [rbp - 0x61]
mov r12, qword [rbp - 0x69]
test rdi, rdi
je 0x1400073f5
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], r15
mov word [rdi], r15w
cmp qword [rbx + 0x18], 8
jae 0x1400073cc
mov r8, qword [rbx + 0x10]
inc r8
je 0x1400073d5
add r8, r8
mov rdx, rbx
mov rcx, rdi
call fcn.1400218b0
jmp 0x1400073d5
mov rax, qword [rbx]
mov qword [rdi], rax
mov qword [rbx], r15
mov rax, qword [rbx + 0x10]
mov qword [rdi + 0x10], rax
mov rax, qword [rbx + 0x18]
mov qword [rdi + 0x18], rax
mov qword [rbx + 0x18], 7
mov qword [rbx + 0x10], r15
mov word [rbx], r15w
add rdi, 0x20
mov qword [rbp - 0x61], rdi
cmp qword [rbp + 0x27], 8
jb 0x14000740d
mov rcx, qword [rbp + 0xf]
call fcn.140021650
lea r10, [rbp - 0x11]
cmp qword [rbp + 7], 8
mov rcx, qword [rbp - 0x11]
cmovae r10, rcx
mov r9, qword [rbp - 1]
mov r13, qword [rbp - 0x31]
mov rbx, qword [rbp - 0x21]
mov rdx, qword [rbp - 0x19]
cmp rsi, rbx
jae 0x1400074a2
lea rax, [rbp - 0x31]
cmp rdx, 8
cmovae rax, r13
lea r11, [rax + rbx*2]
lea rax, [rbp - 0x31]
cmovae rax, r13
lea r8, [rax + rsi*2]
cmp r8, r11
jae 0x1400074a2
test r9, r9
je 0x14000747e
mov rcx, r9
mov rax, r10
movzx edx, word [r8]
cmp word [rax], dx
je 0x140007473
add rax, 2
dec rcx
je 0x14000747e
jmp 0x140007463
add r8, 2
cmp r8, r11
jae 0x14000749a
jmp 0x140007454
lea rax, [rbp - 0x31]
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
cmovae rax, r13
sub r8, rax
sar r8, 1
mov rcx, qword [rbp - 0x11]
jmp 0x1400074a6
mov rdx, qword [rbp - 0x19]
mov rcx, qword [rbp - 0x11]
or r8, 0xffffffffffffffff
lea r10, [rbp - 0x11]
cmp qword [rbp + 7], 8
cmovae r10, rcx
test r9, r9
je 0x14000751c
cmp r8, rbx
jae 0x14000751c
lea rax, [rbp - 0x31]
cmp rdx, 8
cmovae rax, r13
lea r11, [rax + rbx*2]
lea rax, [rbp - 0x31]
cmovae rax, r13
lea rsi, [rax + r8*2]
cmp rsi, r11
jae 0x14000751c
test r9, r9
je 0x1400074fe
mov rcx, r9
mov rax, r10
movzx edx, word [rsi]
nop dword [rax]
cmp word [rax], dx
je 0x140007504
add rax, 2
dec rcx
jne 0x1400074f0
add rsi, 2
jmp 0x1400074d9
lea rax, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rax, r13
sub rsi, rax
sar rsi, 1
jmp 0x140007264
or rsi, 0xffffffffffffffff
jmp 0x140007264
sub rdi, r12
sar rdi, 5
cmp qword [rbp - 0x19], 8
jb 0x14000753b
mov rcx, r13
call fcn.140021650
mov qword [rbp - 0x19], 7
mov qword [rbp - 0x21], r15
mov word [rbp - 0x31], r15w
cmp qword [rbp + 7], 8
jb 0x14000755c
mov rcx, qword [rbp - 0x11]
call fcn.140021650
cmp edi, 2
jae 0x14000758f
test byte [0x1400512b0], 2
je 0x14000773a
mov r9, qword [rbp - 0x51]
lea r8, str.Not_delete_the_whole__s_n
mov edx, 2
lea rcx, str.DeleteInfStringFormatReg
call fcn.1400206a0
jmp 0x14000773a
lea rsi, [r12 + 0x18]
cmp qword [rsi], 8
jb 0x14000759e
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rbp - 0x49]
call fcn.14000c780
nop
mov rcx, rax
call fcn.14000d750
mov rcx, rax
call fcn.14000cd50
mov rcx, qword [rax]
sub rcx, 0x18
call fcn.14000e0f0
add rax, 0x18
mov qword [rbp - 0x41], rax
mov rdx, qword [rbp - 0x49]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400075e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rdx, [0x140040d50]
mov rbx, qword [rbp - 0x41]
mov rcx, rbx
call fcn.140022158
test eax, eax
jne 0x14000760a
mov rcx, 0xffffffff80000000
jmp 0x140007699
lea rdx, [0x1400420f8]
mov rcx, rbx
call fcn.140022158
test eax, eax
je 0x140007692
lea rdx, str.HKLM
mov rcx, rbx
call fcn.140022158
test eax, eax
je 0x140007692
lea rdx, str.HKCU
mov rcx, rbx
call fcn.140022158
test eax, eax
jne 0x14000764c
mov rcx, 0xffffffff80000001
jmp 0x140007699
test byte [0x1400512b0], 2
je 0x140007724
cmp qword [rsi], 8
jb 0x140007668
mov rax, qword [rbp - 0x69]
mov r9, qword [rax]
jmp 0x14000766c
mov r9, qword [rbp - 0x69]
mov rax, qword [rbp - 0x51]
mov qword [rsp + 0x20], rax
lea r8, str._s__Invalid_RootKey_in__s_n
mov edx, 2
lea rcx, str.DeleteInfStringFormatReg
call fcn.1400206a0
jmp 0x140007724
mov rcx, 0xffffffff80000002
mov rdx, qword [rbp - 0x69]
cmp edi, 3
jae 0x1400076b8
add rdx, 0x20
cmp qword [rdx + 0x18], 8
jb 0x1400076b0
mov rdx, qword [rdx]
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
jmp 0x1400076da
lea r8, [rdx + 0x40]
cmp qword [r8 + 0x18], 8
jb 0x1400076c6
mov r8, qword [r8]
add rdx, 0x20
cmp qword [rdx + 0x18], 8
jb 0x1400076d4
mov rdx, qword [rdx]
call qword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
mov edi, eax
test byte [0x1400512b0], 2
je 0x14000771e
lea rax, str.Succeed
lea r9, str.Fail
test edi, edi
cmove r9, rax
mov rax, qword [rbp - 0x51]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
lea r8, str._s__status_0x_x__to_delete:__s_n
mov edx, 2
lea rcx, str.DeleteInfStringFormatReg
call fcn.1400206a0
test edi, edi
sete r15b
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000773a
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
nop
lea rcx, [rbp - 0x69]
call fcn.14000ddf0
mov eax, r15d
jmp 0x140007762
lea rcx, str.vector_T__too_long
call fcn.140034e84
int3
lea rcx, str.vector_T__too_long
call fcn.140034e84
nop
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140021670
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret