Function at 0x140116110
Capabilities:
Delete registry key

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov r15, rcx
lea rax, vtable.QWinSettingsPrivate.0
mov qword [rcx], rax
xor r12d, r12d
cmp byte [rcx + 0xb0], r12b
je 0x14011639f
mov rdx, qword [rcx + 0xa8]
cmp dword [rdx + 4], r12d
je 0x14011639f
mov rbx, qword [rdx + 0x10]
add rbx, rdx
mov rcx, rbx
call fcn.140117e80
nop
test rax, rax
je 0x14011639f
cmp byte [rbx + 0x18], r12b
jne 0x14011639f
mov rcx, rbx
call fcn.140117e80
nop
test rax, rax
je 0x14011639f
lea rsi, [0x1401a1e20]
mov qword [rbp + 0x58], rsi
lea rcx, [rbp + 0x58]
call fcn.140046630
nop
mov rdi, rax
mov rcx, qword [r15 + 0xa8]
cmp dword [rcx + 4], r12d
je 0x1401161d8
mov rbx, qword [rcx + 0x10]
add rbx, rcx
mov rcx, rbx
call fcn.140117e80
nop
test rax, rax
je 0x1401161d8
cmp byte [rbx + 0x18], r12b
jne 0x1401161d8
mov rcx, rbx
call fcn.140117e80
nop
jmp 0x1401161db
mov rax, r12
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
nop
mov ebx, 0xffffffff
test eax, eax
je 0x140116371
mov qword [rbp - 0x20], 2
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
lea rcx, [0x1402d77f0]
mov qword [rbp - 8], rcx
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.14009f5f0
nop
mov rcx, qword [rax]
mov r8d, dword [rcx + 4]
cmp rcx, rsi
jne 0x14011622d
mov rdx, r12
jmp 0x140116234
mov rdx, qword [rcx + 0x10]
add rdx, rcx
lea rcx, [rbp + 0x50]
call fcn.140045600
nop
mov rax, qword [rbp + 0x50]
mov rdi, qword [rax + 0x10]
add rdi, rax
mov rcx, qword [r15 + 0xa8]
mov rax, qword [rcx + 0x10]
mov rdx, qword [rax + rcx + 0x10]
mov qword [rbp + 0x48], rdx
mov eax, dword [rdx]
inc eax
cmp eax, 1
jbe 0x14011626f
mov eax, 1
lock xadd dword [rdx], eax
mov rax, qword [rbp + 0x48]
mov r8d, dword [rax + 4]
cmp rax, rsi
jne 0x140116281
mov rdx, r12
jmp 0x140116288
mov rdx, qword [rax + 0x10]
add rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140045600
nop
mov rax, qword [rbp + 0x40]
mov r8, qword [rax + 0x10]
add r8, rax
mov r9, rdi
lea rdx, [0x1402abfe8]
lea rcx, [rbp - 0x20]
call fcn.140035f50
nop
mov rax, qword [rbp + 0x40]
mov ecx, dword [rax]
test ecx, ecx
je 0x1401162ce
cmp ecx, ebx
je 0x1401162e1
mov ecx, ebx
mov rax, qword [rbp + 0x40]
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x1401162e1
mov edx, 1
lea r8d, [rdx + 7]
mov rcx, qword [rbp + 0x40]
call fcn.140049bf0
nop
mov rax, qword [rbp + 0x48]
mov ecx, dword [rax]
test ecx, ecx
je 0x1401162fe
cmp ecx, ebx
je 0x140116311
mov ecx, ebx
mov rax, qword [rbp + 0x48]
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x140116311
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp + 0x48]
call fcn.140049bf0
nop
mov rax, qword [rbp + 0x50]
mov ecx, dword [rax]
test ecx, ecx
je 0x14011632e
cmp ecx, ebx
je 0x140116341
mov ecx, ebx
mov rax, qword [rbp + 0x50]
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x140116341
mov edx, 1
lea r8d, [rdx + 7]
mov rcx, qword [rbp + 0x50]
call fcn.140049bf0
nop
mov rax, qword [rbp - 0x30]
mov ecx, dword [rax]
test ecx, ecx
je 0x14011635e
cmp ecx, ebx
je 0x140116371
mov ecx, ebx
mov rax, qword [rbp - 0x30]
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x140116371
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp - 0x30]
call fcn.140049bf0
nop
mov rax, qword [rbp + 0x58]
mov ecx, dword [rax]
test ecx, ecx
je 0x14011638c
cmp ecx, ebx
je 0x14011639f
mov rax, qword [rbp + 0x58]
lock xadd dword [rax], ebx
cmp ebx, 1
jne 0x14011639f
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp + 0x58]
call fcn.140049bf0
nop
mov esi, r12d
lea rdi, [r15 + 0xa8]
mov rax, qword [rdi]
cmp dword [rax + 4], r12d
jle 0x140116423
mov r14, r12
mov eax, dword [rax]
cmp eax, 1
jbe 0x1401163f4
mov rax, qword [rdi]
mov r8d, dword [rax + 8]
and r8d, 0x7fffffff
jne 0x1401163e5
lea r9d, [r8 + 2]
xor r8d, r8d
lea edx, [r9 + 6]
lea ecx, [rdx + 0x18]
call fcn.140049ae0
nop
mov qword [rdi], rax
jmp 0x1401163f4
mov r9d, r12d
mov edx, dword [rax + 4]
mov rcx, rdi
call fcn.140118e20
nop
mov rax, qword [rdi]
mov rbx, qword [rax + 0x10]
add rbx, r14
add rbx, rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140116411
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov qword [rbx + 8], r12
inc esi
add r14, 0x20
mov rax, qword [rdi]
cmp esi, dword [rax + 4]
jl 0x1401163b5
mov rcx, rdi
call fcn.1401160a0
nop
mov rcx, r15
add rsp, 0x50
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
jmp fcn.1400fd120