Function at 0x14000ad00
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r14
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov rax, qword [0x14005bed0]
xor rax, rsp
mov qword [rbp + 0x190], rax
mov r12d, edx
mov rsi, rcx
mov rdx, rcx
lea rcx, str.Trying_to_uninstall__s...
call fcn.140008040
xor r14d, r14d
xor ecx, ecx
lea edx, [r14 + 6]
mov ebx, r14d
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov edi, eax
test eax, eax
js 0x14000ae48
lea rax, [rsp + 0x30]
lea r9, [0x14004f7e0]
lea r8d, [r14 + 1]
lea rcx, [0x14004f870]
xor edx, edx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
test eax, eax
js 0x14000ae42
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x38], r14
lea r8, [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, [0x14004f7f0]
call qword [rax]
mov edi, eax
test eax, eax
js 0x14000ae1e
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0x58]
lea r8, str.Sample_Netcfg_Application__netcfg.exe_
mov rax, qword [rcx]
mov edx, 0x3a98
call qword [rax + 0x18]
mov edi, eax
cmp eax, 1
jne 0x14000ade7
mov rdx, qword [rsp + 0x58]
lea rcx, str.Could_not_lock_INetcfg__it_is_already_locked_by__s
mov edi, 0x8004a024
call fcn.140008040
jmp 0x14000ae1e
test eax, eax
js 0x14000ae1e
mov rcx, qword [rsp + 0x30]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x18]
mov edi, eax
test eax, eax
js 0x14000ae0e
mov rbx, qword [rsp + 0x30]
mov rcx, rbx
mov rax, qword [rbx]
call qword [rax + 8]
jmp 0x14000ae1e
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000ae2e
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000ae2e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000ae3e
mov rax, qword [rcx]
call qword [rax + 0x10]
test edi, edi
jns 0x14000ae4c
call qword [sym.imp.ole32.dll_CoUninitialize]
test edi, edi
js 0x14000aecb
mov rdx, rsi
mov rcx, rbx
call fcn.1400086b0
mov edi, eax
test eax, eax
jne 0x14000ae6a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x28]
mov edi, eax
jmp 0x14000ae7c
lea rcx, str...._ws_uninstalling_FAILED____x__
mov r8d, eax
mov rdx, rsi
call fcn.140008040
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
test eax, eax
js 0x14000aebc
mov rax, qword [rbx]
lea r8, [rsp + 0x40]
lea rdx, [0x14004f7f0]
mov rcx, rbx
call qword [rax]
test eax, eax
js 0x14000aebc
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000aebc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
test r12d, r12d
je 0x14000b14c
mov qword [rsp + 0x2d8], r13
test edi, edi
jne 0x14000af2e
lea rcx, str.AviraFirewall
call fcn.14001e1ec
mov rbx, rax
test rax, rax
je 0x14000af06
mov rcx, rax
call fcn.140009130
mov rcx, rbx
call fcn.14001ccf0
jmp 0x14000af1a
lea rcx, str...._ws_uninstalling_FAILED_getFilterClass
mov rdx, rsi
call fcn.140008040
mov edi, 0x10000003
lea rdx, str.SYSTEMCurrentControlSetServices_avfwim
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea rcx, str.Removing_INFs
mov r12, r14
mov r13, r14
call fcn.140008040
lea rcx, [rsp + 0x48]
call fcn.140006000
lea rcx, [rsp + 0x60]
call fcn.140005570
lea rcx, str.InstallationInfs
call fcn.14000e410
lea rcx, [rsp + 0x60]
mov r8d, 1
mov rdx, rax
call fcn.140005b00
lea rcx, [rsp + 0x60]
call fcn.140005920
test rax, rax
je 0x14000b0bd
lea rcx, [rsp + 0x60]
call fcn.140005920
lea rcx, [rsp + 0x48]
xor r8d, r8d
mov rdx, rax
call fcn.140006890
test eax, eax
je 0x14000b097
lea rcx, [rbp - 0x7e]
xor edx, edx
mov r8d, 0x206
mov word [rbp - 0x80], r14w
call fcn.14001d3c0
lea rcx, str.Setupapi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r13, rax
test rax, rax
je 0x14000b0d1
lea rdx, str.SetupUninstallOEMInfW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
je 0x14000b089
mov esi, 2
nop dword [rax + rax]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x48]
mov r8d, 2
lea rbx, [rbp - 0x80]
call fcn.140006010
test eax, eax
je 0x14000b041
nop dword [rax]
cmp r14w, word [rbx]
je 0x14000b041
add rbx, 2
lea rcx, [rsp + 0x48]
mov r8d, 2
mov rdx, rbx
call fcn.140006010
test eax, eax
jne 0x14000b020
xor r8d, r8d
lea rcx, [rbp - 0x80]
lea edx, [r8 + 1]
call r12
test eax, eax
je 0x14000b065
lea rdx, [rbp - 0x80]
lea rcx, str.SetupUninstallOEMInf__ws_SUCCESS
call fcn.140008040
jmp 0x14000b07e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [rbp - 0x80]
lea rcx, str.SetupUninstallOEMInf__ws_FAILED____u__
mov r8d, eax
call fcn.140008040
dec rsi
jne 0x14000b000
jmp 0x14000b0dd
lea rcx, str.SetupUninstallOEMInfW_NOT_FOUND
call fcn.140008040
jmp 0x14000b0d1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x60]
mov ebx, eax
call fcn.140005920
lea rcx, str.Cannot_open__ws____u___n
mov rdx, rax
mov r8d, ebx
call fcn.140008040
jmp 0x14000b0d1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Cannot_get_installinfs_file_path__u_n
mov edx, eax
call fcn.140008040
lea rcx, str.avfwim.sys
call fcn.140009cb0
lea rcx, str.DONE_Removing_INFs
call fcn.140008040
call fcn.14000a490
test r13, r13
je 0x14000b130
test r12, r12
je 0x14000b127
xor r8d, r8d
lea rcx, str.avfwot.inf
lea edx, [r8 + 1]
call r12
lea rdx, str.avfwot.inf
lea rcx, str.SetupUninstallOEMInf__ws_SUCCESS
test eax, eax
jne 0x14000b122
lea rcx, str.SetupUninstallOEMInf__ws_FAILED
call fcn.140008040
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rcx, [rsp + 0x60]
call fcn.140005690
lea rcx, [rsp + 0x48]
call fcn.140006590
mov r13, qword [rsp + 0x2d8]
mov eax, edi
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.14001d550
mov rbx, qword [rsp + 0x2e0]
add rsp, 0x2a0
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret