Function at 0x14003a2a0
Capabilities:
Delete registry value

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0xc0
mov rax, qword [0x140073010]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rax, qword [0x140074e28]
test rax, rax
je 0x14003aa0f
cmp qword [rax + 8], 0
jbe 0x14003aa0f
mov qword [r11 + 8], rbx
lea rcx, [rbp - 0x11]
mov qword [r11 + 0x10], rsi
xor esi, esi
mov qword [r11 + 0x18], rdi
mov qword [r11 - 0x10], r12
mov qword [r11 - 0x28], r15
mov qword [rbp - 0x11], rsi
call fcn.14003bfb0
lea rcx, [rbp - 0x31]
mov qword [rbp - 0x31], rsi
call fcn.14003cc30
mov rcx, qword [0x140074e28]
mov r12d, esi
mov qword [rbp + 0x17], rsi
mov dword [rbp - 0x39], esi
cmp qword [rcx + 8], rsi
jbe 0x14003a94c
mov qword [rsp + 0xb0], r13
lea r15, [rsi - 1]
mov qword [rsp + 0xa8], r14
mov r13d, esi
mov r14, qword [rbp - 0x31]
mov qword [rbp - 0x29], rsi
mov rax, qword [rcx]
lea rdx, [rbp - 0x31]
lea rcx, str.6VVYqCAosWjD4erSfQbAx91EFQc26S_xXK4ucMY5S8k
mov qword [rbp - 0x31], rsi
mov rdi, qword [rax + r13*8]
mov qword [rbp - 0x21], rdi
call fcn.140036bf0
cmp dword [0x140074e20], 1
jne 0x14003a38f
mov rax, qword [rdi]
mov r8, qword [rbp - 0x31]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14003a387
inc rax
test ecx, ecx
jne 0x14003a374
test edx, edx
jne 0x14003a87c
mov rcx, qword [rdi]
call fcn.140004150
mov rax, qword [rbp - 0x11]
xor ebx, ebx
test rax, rax
je 0x14003a71c
mov r11, qword [rax + 8]
mov r10d, ebx
test r11, r11
je 0x14003a71c
mov r9, qword [rax]
nop dword [rax]
mov r13, qword [r9]
mov rax, qword [r13]
test rax, rax
je 0x14003a3f7
mov r8, qword [rdi]
test r8, r8
je 0x14003a3f7
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14003a3f3
inc rax
test ecx, ecx
jne 0x14003a3e0
test edx, edx
je 0x14003a40b
inc r10d
add r9, 8
movsxd rax, r10d
cmp rax, r11
jb 0x14003a3c0
jmp 0x14003a718
mov rcx, qword [r13 + 8]
mov rsi, r13
test rcx, rcx
je 0x14003a718
mov r15d, ebx
cmp qword [rcx + 8], rbx
jbe 0x14003a711
xor edi, edi
mov r12d, edi
nop dword [rax]
mov rcx, qword [rcx]
lea rdx, [0x14006d404]
mov rcx, qword [r12 + rcx]
call fcn.140038290
mov r11, qword [r14 + 8]
mov rsi, rax
mov r10d, edi
test r11, r11
je 0x14003a4aa
mov r9, rdi
test rsi, rsi
je 0x14003a49b
cmp qword [rsi + 8], 3
jb 0x14003a49b
mov rax, qword [rsi]
mov rax, qword [rax + 0x10]
test rax, rax
je 0x14003a49b
mov rcx, qword [r14]
mov r8, qword [r9 + rcx]
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14003a493
inc rax
test ecx, ecx
jne 0x14003a480
test edx, edx
je 0x14003a563
inc r10d
add r9, 8
movsxd rax, r10d
cmp rax, r11
jb 0x14003a455
test rsi, rsi
je 0x14003a6ec
cmp qword [rsi + 8], 3
jb 0x14003a6a8
mov rcx, qword [rsi]
mov rdx, qword [rcx + 0x10]
test rdx, rdx
je 0x14003a6a8
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], 0
jne 0x14003a4d5
test rax, rax
je 0x14003a67d
lea r8, [0x14006d81c]
lea rcx, [rbp + 0x1f]
call fcn.14004cd44
test eax, eax
jne 0x14003a67a
mov rcx, qword [rbp + 0x1f]
test rcx, rcx
je 0x14003a50d
call fcn.14004c82c
cmp dword [r14 + 0x18], 0
jne 0x14003a54c
mov ecx, 0x20
call fcn.1400462e4
mov r14, rax
test rax, rax
je 0x14003a54c
mov ecx, 0x40
mov qword [rax + 8], rdi
call fcn.1400462e4
mov qword [r14], rax
test rax, rax
je 0x14003a54c
mov qword [r14 + 0x10], 8
mov dword [r14 + 0x18], 0x100
mov rcx, qword [rsi]
mov rcx, qword [rcx + 0x10]
call fcn.1400463c8
mov rdx, rax
mov rcx, r14
call section..text
cmp qword [rsi + 8], 3
jb 0x14003a6a8
mov ecx, 0x10
call fcn.1400462e4
mov ecx, 0x10
mov rdi, rax
call fcn.1400462e4
mov rcx, qword [rsi]
mov rdx, rdi
mov rbx, rax
mov rcx, qword [rcx + 0x10]
call fcn.14003d3c0
mov rcx, qword [rsi]
mov rdx, rbx
mov rcx, qword [rcx + 8]
call fcn.14003d7e0
movups xmm1, xmmword [rdi]
movups xmm0, xmmword [rbx]
movq rbx, xmm1
movaps xmmword [rbp + 7], xmm1
movaps xmmword [rbp - 9], xmm0
test ebx, ebx
js 0x14003a657
mov rax, rbx
shr rax, 0x20
test eax, eax
js 0x14003a657
mov r10, qword [rbp + 0xf]
test r10d, r10d
js 0x14003a657
mov rcx, r10
shr rcx, 0x20
test ecx, ecx
js 0x14003a657
mov r11, qword [rbp - 9]
test r11d, r11d
js 0x14003a657
mov r8, r11
shr r8, 0x20
test r8d, r8d
js 0x14003a657
mov r9, qword [rbp - 1]
test r9d, r9d
js 0x14003a657
mov rdx, r9
shr rdx, 0x20
test edx, edx
js 0x14003a657
test ebx, ebx
jne 0x14003a61e
test eax, eax
jne 0x14003a61e
test r10d, r10d
jne 0x14003a61e
test ecx, ecx
je 0x14003a657
test r11d, r11d
jne 0x14003a631
test r8d, r8d
jne 0x14003a631
test r9d, r9d
jne 0x14003a631
test edx, edx
je 0x14003a657
cmp ecx, edx
jg 0x14003a657
cmp r10d, r9d
jg 0x14003a657
cmp eax, r8d
jg 0x14003a657
cmp ebx, r11d
jg 0x14003a657
cmp ecx, edx
jne 0x14003a657
cmp r10d, r9d
jne 0x14003a657
cmp eax, r8d
jne 0x14003a657
cmp ebx, r11d
je 0x14003a6a6
mov r9, qword [rsi]
xor edi, edi
mov qword [rsp + 0x28], rdi
xor r8d, r8d
mov rax, qword [r9 + 8]
lea ecx, [rdi + 6]
mov r9, qword [r9]
mov qword [rsp + 0x20], rax
call fcn.140040480
jmp 0x14003a6a8
mov rcx, qword [rsi]
mov r9, qword [rcx]
test r9, r9
je 0x14003a6a8
mov rax, qword [rcx + 8]
test rax, rax
je 0x14003a6a8
xor r8d, r8d
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
lea ecx, [r8 + 6]
call fcn.140040480
jmp 0x14003a6a8
xor edi, edi
cmp qword [rsi + 8], 0
mov rbx, rdi
jbe 0x14003a6ce
mov rcx, qword [rsi]
mov rcx, qword [rcx + rbx*8]
call fcn.1400462d0
mov rax, qword [rsi]
mov qword [rax + rbx*8], rdi
inc rbx
cmp rbx, qword [rsi + 8]
jb 0x14003a6b2
mov rcx, qword [rsi]
call fcn.1400462d0
mov rcx, rsi
mov qword [rsi], rdi
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rdi
mov dword [rsi + 0x18], edi
call fcn.1400462d0
mov rcx, qword [r13 + 8]
inc r15d
add r12, 8
movsxd rax, r15d
cmp rax, qword [rcx + 8]
jb 0x14003a430
mov rdi, qword [rbp - 0x21]
mov rsi, r13
mov r12d, dword [rbp - 0x39]
xor ebx, ebx
mov r15, 0xffffffffffffffff
mov r13, qword [rbp - 0x29]
mov rdx, qword [rdi + 8]
lea r8, [rbp - 0x19]
mov rcx, r14
call fcn.140037df0
test r14, r14
je 0x14003a779
cmp qword [r14 + 8], 0
jbe 0x14003a760
nop dword [rax + rax]
mov rcx, qword [r14]
mov rcx, qword [rcx + rbx*8]
call fcn.1400462d0
mov rax, qword [r14]
mov qword [rax + rbx*8], 0
inc rbx
cmp rbx, qword [r14 + 8]
jb 0x14003a740
mov rcx, qword [r14]
call fcn.1400462d0
xor ebx, ebx
mov qword [r14], rbx
mov qword [r14 + 8], rbx
mov qword [r14 + 0x10], rbx
mov dword [r14 + 0x18], ebx
mov rcx, r14
call fcn.1400462d0
mov qword [rbp - 0x31], rbx
lea rax, [rbp - 0x29]
mov qword [rbp - 0x29], rbx
lea r9, [rbp - 0x31]
mov r14, rbx
mov qword [rsp + 0x20], rax
mov rbx, qword [rbp - 0x19]
mov r8, rsi
mov rcx, rbx
mov edx, 2
call fcn.140039a80
xor esi, esi
test rbx, rbx
je 0x14003a7f6
mov edi, esi
cmp qword [rbx + 8], rsi
jbe 0x14003a7dc
nop dword [rax]
mov rcx, qword [rbx]
mov rcx, qword [rcx + rdi*8]
call fcn.1400462d0
mov rax, qword [rbx]
mov qword [rax + rdi*8], rsi
inc rdi
cmp rdi, qword [rbx + 8]
jb 0x14003a7c0
mov rcx, qword [rbx]
call fcn.1400462d0
mov rdi, qword [rbp - 0x21]
mov qword [rbx], rsi
mov qword [rbx + 8], rsi
mov qword [rbx + 0x10], rsi
mov dword [rbx + 0x18], esi
mov rcx, rbx
call fcn.1400462d0
mov rbx, qword [rbp - 0x31]
mov qword [rbp - 0x19], rsi
test rbx, rbx
je 0x14003a838
mov rax, r15
nop
inc rax
cmp byte [rbx + rax], 0
jne 0x14003a810
cmp rax, 0xfa0
jb 0x14003a838
mov eax, 0xf9f
cmp byte [rax + rbx], 0x7c
je 0x14003a834
sub rax, 1
jns 0x14003a826
jmp 0x14003a838
mov byte [rax + rbx], 0
xor r9d, r9d
mov qword [rsp + 0x28], rbx
xor r8d, r8d
mov qword [rsp + 0x20], rsi
lea ecx, [r9 + 5]
call fcn.140040480
mov r9, qword [rdi]
lea rax, [0x14006d410]
mov rdx, qword [rbp - 0x29]
lea r8, [0x14006d40c]
lea rcx, [rbp + 0x17]
mov qword [rsp + 0x20], rax
call fcn.1400398f0
mov rcx, rbx
call fcn.1400462d0
mov rcx, qword [0x140074e28]
inc r12d
inc r13
movsxd rax, r12d
mov dword [rbp - 0x39], r12d
mov qword [rbp - 0x29], r13
cmp rax, qword [rcx + 8]
jb 0x14003a342
mov rbx, qword [rbp + 0x17]
mov r14, qword [rsp + 0xa8]
mov r13, qword [rsp + 0xb0]
test rbx, rbx
je 0x14003a94c
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rsi
lea rcx, str.6VVYqCAosWjD4erSfQbAx30ciMPAfyREg_YVFGxqQN0
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x19], rsi
mov dword [rbp - 0x39], esi
call fcn.14003aa30
mov rdi, qword [rbp + 0x17]
lea r9, [rbp - 0x39]
mov rdx, rdi
lea r8, [rbp - 0x21]
lea rcx, [rbp - 0x19]
call fcn.14003b3c0
mov rax, r15
inc rax
cmp byte [rbx + rax], 0
jne 0x14003a8f5
mov rsi, qword [rbp - 0x19]
test rax, rax
je 0x14003a92b
nop word [rax + rax]
inc r15
cmp byte [rbx + r15], 0
jne 0x14003a910
mov r9, r15
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.14003b2e0
mov rcx, rdi
call fcn.1400462d0
mov rcx, qword [rbp - 0x21]
call fcn.1400462d0
mov rcx, rsi
call fcn.1400462d0
mov rcx, rbx
jmp 0x14003a9e2
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rsi
lea rcx, str.6VVYqCAosWjD4erSfQbAx30ciMPAfyREg_YVFGxqQN0
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x19], rsi
mov dword [rbp - 0x39], esi
call fcn.14003aa30
mov rbx, qword [rbp + 0x17]
lea r9, [rbp - 0x39]
mov rdx, rbx
lea r8, [rbp - 0x21]
lea rcx, [rbp - 0x19]
call fcn.14003b3c0
mov rdi, qword [rbp - 0x19]
test rdi, rdi
je 0x14003a9ce
test rbx, rbx
je 0x14003a9ce
lea rax, [rbp + 0x17]
mov r9d, 0xf003f
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14003a9ce
mov rcx, qword [rbp + 0x17]
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov rcx, qword [rbp + 0x17]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rbx
call fcn.1400462d0
mov rcx, qword [rbp - 0x21]
call fcn.1400462d0
mov rcx, rdi
call fcn.1400462d0
mov r12, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0xd0]
mov r15, qword [rsp + 0xa0]
mov eax, 1
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140043fc0
add rsp, 0xc0
pop rbp
ret