Function at 0x140004ec0
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
lea rdx, [0x140083f58]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeA]
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSavePidlMRUmp4
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeA]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 3
lea rdx, [0x140083ff0]
lea rcx, [rbp - 0x20]
call fcn.14000ce40
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 0x39
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerRunMRU
lea rcx, [rbp - 0x40]
call fcn.14000ce40
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140004bb0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x140004f92
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004f8d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140044800
movdqa xmm0, xmmword [0x14008adb0]
movdqu xmmword [rbp - 0x30], xmm0
xor ebx, ebx
mov word [rbp - 0x40], bx
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140004fe8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004fe3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004fe3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140044800
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 3
lea rdx, [0x140083ff0]
lea rcx, [rbp - 0x20]
call fcn.14000ce40
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 0x39
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerRunMRU
lea rcx, [rbp - 0x40]
call fcn.14000ce40
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.1400048a0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x140005085
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005080
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005080
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140044800
movdqa xmm0, xmmword [0x14008adb0]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], bx
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x1400050d9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400050d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400050d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140044800
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0xc
lea rdx, [0x140084078]
lea rcx, [rbp - 0x20]
call fcn.14000ce40
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 0x59
lea rdx, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantStore
lea rcx, [rbp - 0x40]
call fcn.14000ce40
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.1400048a0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x140005176
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005171
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005171
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140044800
movdqa xmm0, xmmword [0x14008adb0]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], bx
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x1400051ca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400051c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400051c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140044800
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0xc
lea rdx, [0x140084078]
lea rcx, [rbp - 0x20]
call fcn.14000ce40
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 0x59
lea rdx, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantStore
lea rcx, [rbp - 0x40]
call fcn.14000ce40
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.1400048a0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x140005267
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005262
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005262
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140044800
movdqa xmm0, xmmword [0x14008adb0]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], bx
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x1400052bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400052b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400052b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140044800
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rbp
ret