Function at 0x18000caf0
Capabilities:
Delete registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x1800a3d18]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov ebx, ecx
mov qword [rbp - 0x71], rdx
mov rdi, qword [rbp - 0x71]
lea r13d, [rcx + 0xf]
xor r9d, r9d
mov dword [rsp + 0x34], ecx
mov qword [rbp - 0x61], r8
mov r12d, ecx
lea rcx, [0x180000000]
cmp ebx, r13d
jae 0x18000ce30
mov r15, qword [rbp - 0x69]
lea r14d, [rbx - 0xf9]
mov rsi, qword [rbp - 0x69]
lea r10d, [r9 + 0x61]
lea r11d, [r9 + 0x64]
lea r8d, [r9 + 0x6d]
lea rdx, [0x180028940]
cmp r14d, 0x17
ja case.default.0x18000cb84
mov ecx, dword [rcx + r14*4 + 0xcfd8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 1], xmm0
mov dword [rbp + 0xf], eax
jmp case.0x18000cb84.6
mov dword [rbp - 0x1d], 0x650074
mov word [rbp - 0x19], r10w
jmp case.0x18000cb84.6
mov word [rbp - 0x29], r11w
mov dword [rbp - 0x27], 0x690072
jmp case.0x18000cb84.6
mov dword [rbp - 0x15], 0x720044
jmp case.0x18000cb84.6
xor edx, edx
mov qword [rsp + 0x20], r9
lea r9, [rbp - 0x59]
xor ecx, ecx
lea r8d, [rdx + 0x7f]
call fcn.1800773e0
mov ebx, 0x6d
cmp ebx, 0x6d
jne 0x18000cc5b
inc dword [0x1800a3e40]
lea r9, [rbp - 1]
lea r8, [0x180095a9c]
xor ecx, ecx
lea edx, [rbx + 0x4d]
call fcn.180028ac0
test eax, eax
jne 0x18000cc5b
mov eax, 0xef
nop dword [rax]
cmp eax, 0xef
je 0x18000cc48
cmp eax, 0xbab8
jne 0x18000cc4f
mov rax, rdi
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.18008f350
mov rbx, qword [rsp + 0x120]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdi, str.false
add eax, 0xb9c9
cmp eax, 0x17392
jbe 0x18000cc10
add ebx, 0x1ea8
cmp ebx, 0x1ea8
jbe 0x18000cbe0
xor r9d, r9d
lea r8d, [r9 + 0x6d]
lea r10d, [r9 + 0x61]
lea r11d, [r9 + 0x64]
jmp case.0x18000cb84.6
lea r15, str.gradientCenter
jmp case.0x18000cb84.6
mov rdi, r9
jmp case.0x18000cb84.6
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov ecx, 0xc2
call fcn.180041b80
lea rax, [rbp - 1]
mov qword [rsi + 0xa0], rax
jmp 0x18000cc6d
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov ecx, 0xc2
call fcn.180041b80
jmp 0x18000cc6d
mov word [rbp - 0x17], r8w
jmp case.0x18000cb84.6
xor r9d, r9d
lea rdx, [rbp - 0x59]
xor r8d, r8d
lea ecx, [r9 + 0x22]
call fcn.180030220
inc dword [0x1800a3e40]
lea rax, [0x1800288e0]
mov r9, r15
mov qword [rbp - 0x79], rax
lea r8, [rbp - 0x79]
mov edx, 0xd4
lea rcx, [rbp - 0x59]
call fcn.1800596b0
mov rsi, rax
test rax, rax
jne 0x18000cc6d
mov ecx, 0xfc
nop
mov eax, ecx
sub eax, 0xfb
je case.0x18000ce7c.27
cmp eax, 1
jne 0x18000cd39
lea rdi, str.false
dec ecx
cmp ecx, 0xfa
ja 0x18000cd20
jmp 0x18000cc6d
mov eax, 0x76
mov word [rbp - 0x23], ax
jmp case.0x18000cb84.6
mov ebx, 0x37
nop dword [rax + rax]
cmp ebx, 0x37
je 0x18000cd9b
cmp ebx, 0x58
jne 0x18000cda1
mov qword [rsp + 0x38], rdx
lea r9, [rbp - 0x59]
mov rdx, r15
lea rcx, [rsp + 0x38]
mov r8d, 0xd8
call fcn.18005a8d0
mov rsi, rax
test rax, rax
je 0x18000ce80
lea rdx, [0x180028940]
jmp 0x18000cda1
inc dword [0x1800a3e40]
add ebx, 0x21
cmp ebx, 0x79
jb 0x18000cd60
jmp 0x18000cc6d
mov qword [rsp + 0x20], r9
lea r8, [0x180095ab0]
mov r9d, 0x81
xor edx, edx
mov rcx, rsi
call fcn.18008d340
lea rax, [0x180092c27]
mov dword [rsp + 0x38], 0x3e8
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x59]
lea rax, [rsp + 0x38]
mov r9d, 0xba
lea rdx, [0x180027960]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 1]
call fcn.180053dd0
jmp 0x18000cc6d
mov dword [rbp - 0x21], 0x230065
lea rcx, [0x180000000]
inc r12d
inc r14d
cmp r12d, r13d
jb 0x18000cb61
mov ebx, dword [rsp + 0x34]
mov r8, qword [rbp - 0x61]
mov rdx, qword [rbp - 0x71]
lea r15d, [rbx - 0xe]
cmp ebx, r15d
jbe case.0x18000ce7c.27
movzx r12d, byte [rsp + 0x30]
lea r14d, [rbx - 0xed]
mov rsi, qword [rbp - 0x69]
mov r9d, 0x74
mov r13d, dword [rbp - 0x79]
lea r10d, [r9 - 1]
lea r11d, [r9 - 0xb]
cmp r14d, 0x1b
ja case.0x18000ce7c.7
mov ecx, dword [rcx + r14*4 + 0xd038]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
lea rax, str.false
jmp 0x18000cc21
mov word [rbp - 5], r9w
jmp case.0x18000ce7c.7
test r12b, r12b
je case.0x18000ce7c.7
mov rcx, qword [rbp - 0x69]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.SHLWAPI.dll_SHRegDeleteUSValueW]
mov r9d, 0x74
lea r10d, [r9 - 1]
lea r11d, [r9 - 0xb]
jmp case.0x18000ce7c.7
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
mov dword [rsp + 0x38], 0xf003f
jmp 0x18000ceae
xor eax, eax
mov ecx, eax
movzx eax, r12b
cmp dword [rbp - 0x79], ecx
cmove ecx, eax
movzx r12d, cl
jmp case.0x18000ce7c.7
mov dword [rbp - 0xb], 0x69004c
mov word [rbp - 7], r10w
jmp case.0x18000ce7c.7
test rsi, rsi
jne case.0x18000ce7c.7
mov eax, 0x84
nop dword [rax]
cmp eax, 0x84
je 0x18000cf24
cmp eax, 0x110
je case.0x18000ce7c.27
jmp 0x18000cf28
xor ecx, ecx
mov edi, ecx
add eax, 0x8c
cmp eax, 0x19c
jb 0x18000cf10
jmp case.0x18000ce7c.7
xor eax, eax
mov r13d, eax
jmp case.0x18000ce7c.7
mov dword [rbp - 0xf], 0x650076
jmp case.0x18000ce7c.7
mov edx, dword [rsp + 0x38]
lea r9, [rbp - 0x69]
xor r8d, r8d
mov dword [rsp + 0x20], r13d
lea rcx, [rbp - 0x29]
call qword [sym.imp.SHLWAPI.dll_SHRegCreateUSKeyW]
mov dword [rbp - 0x79], eax
jmp 0x18000ceae
mov word [rbp - 0x11], r11w
jmp case.0x18000ce7c.7
mov ebx, 9
mov eax, ebx
sub eax, 8
je case.0x18000ce7c.27
cmp eax, 1
jne 0x18000cf93
mov rdx, r8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov r8, qword [rbp - 0x61]
dec ebx
cmp ebx, 7
ja 0x18000cf74
mov ebx, dword [rsp + 0x34]
jmp 0x18000ceae
xor eax, eax
mov r12b, 1
mov word [rbp - 3], ax
dec ebx
dec r14d
mov dword [rsp + 0x34], ebx
cmp ebx, r15d
jbe case.0x18000ce7c.27
mov r8, qword [rbp - 0x61]
lea rcx, [0x180000000]
mov rdx, qword [rbp - 0x71]
jmp 0x18000ce60