Function at 0x180047dec
Capabilities:
Delete registry key

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
sub rsp, 0xb0
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov rsi, rdx
mov rdi, rcx
lea rdx, [rax - 0x68]
lea rcx, [0x180162940]
call fcn.18002b024
mov r8, qword [rax]
xor ebx, ebx
cmp dword [r8 - 8], ebx
sete bl
mov rdx, qword [rsp + 0x60]
add rdx, 0xfffffffffffffff4
lea r13, [0x18015f758]
or r12d, 0xffffffff
cmp rdx, r13
je 0x180047e66
mov eax, r12d
lock xadd dword [rdx], eax
add eax, r12d
test eax, eax
jg 0x180047e66
mov rcx, qword [rsp + 0x60]
add rcx, 0xfffffffffffffff4
call fcn.1800d1434
test ebx, ebx
je 0x180047e82
lea rdx, str.CDataIESearchRegistryEntity::UninstallEntry_____Search_URL_is_empty._Not_uninstalling...
lea rcx, [0x18015f578]
call fcn.1800098e8
jmp 0x180048132
lea rcx, [0x180162940]
call fcn.180004a24
test eax, eax
jne 0x180047eaa
lea rdx, str.CDataIESearchRegistryEntity::UninstallEntry_____Search_Installed_flag_is_set_to_False._Not_uninstalling...
lea rcx, [0x18015f578]
call fcn.1800098e8
jmp 0x180048132
lea rcx, [0x180162138]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ebx, dword [0x1801620e0]
lea rcx, [0x180162138]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
jne 0x180047ee6
lea rdx, str.CDataIESearchRegistryEntity::UninstallEntry_____IE_Not_enabled._Not_uninstalling...
lea rcx, [0x18015f578]
call fcn.1800098e8
jmp 0x180048132
mov rax, qword [0x18015f768]
mov qword [rsp + 0x58], rax
mov eax, dword [rdi + 0x10]
mov dword [rsp + 0x20], eax
mov r9d, dword [rdi + 0xc]
mov r8d, dword [rdi + 8]
lea rdx, str._d:_d:_d
lea rcx, [rsp + 0x58]
call fcn.180008f64
lea r11, [rsp + 0xe0]
mov qword [rsp + 0x40], r11
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rax
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20019
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x58]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rsi, 0xffffffff80000001
test eax, eax
jne 0x180048085
mov rax, qword [0x18015f768]
mov qword [rsp + 0x50], rax
lea rdx, [0x18010d5e8]
lea rcx, [rsp + 0x88]
call fcn.1800041c0
lea r9, [rsp + 0x50]
mov r8, rax
mov rdx, qword [rsp + 0x78]
lea rcx, [0x180163340]
call fcn.18001b3c0
test eax, eax
je 0x180048064
mov rbx, qword [rsp + 0x50]
cmp dword [rbx - 8], 0
je 0x180048069
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x98], rax
cmp dword [rbx - 0xc], 0
jl 0x180047fe9
mov qword [rsp + 0xe8], rbx
lock add dword [rbx - 0xc], 1
mov rbx, qword [rsp + 0x50]
jmp 0x180048014
mov rax, qword [0x18015f768]
mov qword [rsp + 0xe8], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, rbx
mov edx, eax
lea rcx, [rsp + 0xe8]
call fcn.180003e28
nop
lea rdx, str.DefaultScope
lea rcx, [rsp + 0x80]
call fcn.1800041c0
mov rdi, rax
lea rdx, str.SoftwareMicrosoftInternet_ExplorerSearchScopes
lea rcx, [rsp + 0xa8]
call fcn.1800041c0
nop
lea rdx, [rsp + 0xe8]
mov qword [rsp + 0x20], rdx
mov r9, rdi
mov r8, rax
mov rdx, rsi
lea rcx, [0x180163340]
call fcn.18000895c
jmp 0x180048069
mov rbx, qword [rsp + 0x50]
lea rcx, [rbx - 0xc]
cmp rcx, r13
je 0x180048085
mov eax, r12d
lock xadd dword [rcx], eax
add eax, r12d
test eax, eax
jg 0x180048085
call fcn.1800d1434
mov rax, qword [0x18015f768]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x68]
lea rcx, [0x180162940]
call fcn.1800492a8
nop
mov r8, qword [rax]
lea rdx, str.SoftwareMicrosoftInternet_ExplorerSearchScopes_s
lea rcx, [rsp + 0x70]
call fcn.180008f64
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xfffffffffffffff4
cmp rdx, r13
je 0x1800480e2
mov eax, r12d
lock xadd dword [rdx], eax
add eax, r12d
test eax, eax
jg 0x1800480e2
mov rcx, qword [rsp + 0x68]
add rcx, 0xfffffffffffffff4
call fcn.1800d1434
mov rbx, qword [rsp + 0x70]
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
nop
lea rcx, [rbx - 0xc]
cmp rcx, r13
je 0x180048111
mov eax, r12d
lock xadd dword [rcx], eax
add eax, r12d
test eax, eax
jg 0x180048111
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xfffffffffffffff4
cmp rcx, r13
je 0x180048132
mov eax, r12d
lock xadd dword [rcx], eax
add eax, r12d
test eax, eax
jg 0x180048132
call fcn.1800d1434
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop r13
pop r12
pop rdi
ret