Function at 0x1400111cc
Capabilities:
Delete registry value

Disassembly:
jmp 0x14001a950
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x1f8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x42
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x218]
mov rax, qword [0x140035040]
xor rax, rbp
mov qword [rbp + 0x1b0], rax
lea rcx, [0x14003d110]
call fcn.140011acd
nop
mov rdx, qword [rbp + 0x1e8]
lea rcx, [rbp + 0x28]
call fcn.140011901
nop
mov rdx, qword [rbp + 0x1f0]
lea rcx, [rbp + 0x68]
call fcn.140011901
nop
lea rcx, [rbp + 0x28]
call fcn.140011384
lea rcx, [rbp + 8]
mov qword [rsp + 0x20], rcx
mov r9d, 2
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp + 0x1e0]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14001ab1d
lea rcx, [rbp + 0x68]
call fcn.140011384
mov qword [rbp + 0x198], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1a0], rax
mov rdx, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
jne 0x14001aa9d
lea rdx, str.Successfully_deleted_registry_value:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001114a
mov rdx, qword [rbp + 0x1f0]
mov rcx, rax
call fcn.1400119bf
mov qword [rbp + 0x198], rax
lea rdx, [0x140011073]
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov byte [rbp + 0x164], 1
lea rcx, [rbp + 0x68]
call fcn.14001196f
nop
lea rcx, [rbp + 0x28]
call fcn.14001196f
movzx eax, byte [rbp + 0x164]
jmp 0x14001abb1
lea rdx, str.Failed_to_delete_registry_value:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001114a
mov rdx, qword [rbp + 0x1f0]
mov rcx, rax
call fcn.1400119bf
lea rdx, str.._Error:
mov rcx, rax
call fcn.14001114a
mov qword [rbp + 0x198], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x1a0], eax
mov edx, dword [rbp + 0x1a0]
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov qword [rbp + 0x1a8], rax
lea rdx, [0x140011073]
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
jmp 0x14001ab90
lea rdx, str.Failed_to_open_registry_key:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001114a
mov rdx, qword [rbp + 0x1e8]
mov rcx, rax
call fcn.1400119bf
lea rdx, str.._Error:
mov rcx, rax
call fcn.14001114a
mov qword [rbp + 0x198], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x1a0], eax
mov edx, dword [rbp + 0x1a0]
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov qword [rbp + 0x1a8], rax
lea rdx, [0x140011073]
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov byte [rbp + 0x184], 0
lea rcx, [rbp + 0x68]
call fcn.14001196f
nop
lea rcx, [rbp + 0x28]
call fcn.14001196f
movzx eax, byte [rbp + 0x184]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x14002d450]
call fcn.140011910
mov rax, rdi
mov rcx, qword [rbp + 0x1b0]
xor rcx, rbp
call fcn.140011537
lea rsp, [rbp + 0x1c8]
pop rdi
pop rbp
ret