Function at 0x14004da30
Capabilities:
Delete registry key

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x70
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rbp
mov rax, qword [0x14010bfc0]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rdi, rdx
mov rbx, rcx
lea rax, str.NULL
test rdx, rdx
cmovne rax, rdx
mov qword [r11 - 0x78], rax
mov r9, rcx
lea r8, str.Starting_RegDeleteKey_with_HKEY:0x_X__subKey:_s
mov r14d, 0x80
mov edx, r14d
lea r13, [0x14010f570]
mov rcx, r13
call fcn.140001000
call fcn.14005c0a8
test eax, eax
je 0x14004dca3
lea rcx, str.Advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x14004dc8f
lea rdx, str.RegDeleteKeyExA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
je 0x14004dc70
xor ebp, ebp
mov qword [rsp + 0x58], reloc.OLEAUT32.dll_SafeArrayDestroy
and qword [rsp + 0x50], rbp
mov byte [rsp + 0x40], bpl
test rdi, rdi
je 0x14004db0d
mov rcx, rdi
call fcn.1400980d0
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x38]
call fcn.14000352c
lea rcx, str.Wow6432Node
call fcn.1400980d0
mov r9, rax
xor r8d, r8d
lea rdx, str.Wow6432Node
lea rcx, [rsp + 0x38]
call fcn.140005be4
cmp rax, 0xffffffffffffffff
je 0x14004db62
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140001c40
mov ebp, 0x200
lea r8, str.RegDeleteKey_using_KEY_WOW64_32KEY
mov edx, r14d
mov rcx, r13
call fcn.140001000
jmp 0x14004dbb2
cmp rbx, 0xffffffff80000002
je 0x14004db9b
cmp rbx, 0xffffffff80000001
je 0x14004db9b
cmp rbx, 0xffffffff80000000
je 0x14004db9b
cmp rbx, 0xffffffff80000003
je 0x14004db9b
call fcn.14004c8c0
test eax, eax
je 0x14004dbb2
mov rcx, rbx
call fcn.14004cc1c
mov ebp, eax
jmp 0x14004dbb2
mov ebp, 0x100
lea r8, str.RegDeleteKey_using_KEY_WOW64_64KEY
mov edx, r14d
mov rcx, r13
call fcn.140001000
lea rcx, str.KEY_WOW64_64KEY
lea rax, str.KEY_WOW64_32_KEY
bt ebp, 9
cmovae rax, rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov r9, rbx
lea r8, str.Deleting__d:_s_using__s
mov edx, r14d
mov rcx, r13
call fcn.140001000
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
xor r9d, r9d
mov r8d, ebp
mov rcx, rbx
call r12
mov edi, eax
mov r9d, eax
lea r8, str.RegDeleteKeyEx_returned__d
mov edx, r14d
mov rcx, r13
call fcn.140001000
test edi, edi
je 0x14004dc50
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdx
mov r9, rbx
lea r8, str.RegDeleteKeyEx__d___s__failed_with_the_result__d.
mov edx, 0x400
mov rcx, r13
call fcn.140001000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
cmp qword [rsp + 0x58], 0x10
jb 0x14004dc6c
mov rcx, qword [rsp + 0x40]
call fcn.14006127c
mov eax, edi
jmp 0x14004dcc1
lea r8, str.Could_not_get_pointer_to_RegDeleteKeyEx
mov edx, 0x400
mov rcx, r13
call fcn.140001000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x14004dca3
lea r8, str.LoadLibrary__Advapi32.dll___failed
mov edx, 0x400
mov rcx, r13
call fcn.140001000
lea r8, str.Calling_Real_RegDeleteKey
mov edx, r14d
mov rcx, r13
call fcn.140001000
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140061100
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret