Function at 0x14001ff8c
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x1402ef1f8]
xor rax, rsp
mov qword [rbp + 0x120], rax
xor r13d, r13d
mov r12d, r8d
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x68], r13
test rdx, rdx
je 0x1400203a7
mov eax, dword [0x14028a510]
cmp dword [rcx], eax
jne 0x140020007
mov eax, dword [0x14028a514]
cmp dword [rcx + 4], eax
jne 0x140020007
mov eax, dword [0x14028a518]
cmp dword [rcx + 8], eax
jne 0x140020007
mov eax, dword [0x14028a51c]
cmp dword [rcx + 0xc], eax
je 0x1400203a7
lea rax, [rsp + 0x68]
mov r14d, 1
lea r9, [0x14022c0e8]
lea rcx, [0x14028a5a0]
xor edx, edx
mov r8d, r14d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x140020397
cmp dword [rbx], r13d
je 0x14002009d
mov rax, qword [rbx + 8]
mov rcx, qword [rsp + 0x68]
lea r9, [rbp - 0x78]
mov r8d, r14d
mov rdx, rdi
movups xmm0, xmmword [rax]
movdqu xmmword [rbp - 0x78], xmm0
mov rax, qword [rcx]
test r12d, r12d
je 0x14002008a
cmp dword [rbx], r14d
jne 0x14002006a
call qword [rax + 0x28]
jmp 0x14002006d
call qword [rax + 0x38]
mov esi, eax
test eax, eax
jns 0x140020097
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140020083
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov eax, esi
jmp 0x1400203a9
cmp dword [rbx], r14d
jne 0x140020094
call qword [rax + 0x30]
jmp 0x140020097
call qword [rax + 0x40]
add rbx, 0x10
jmp 0x140020038
test r12d, r12d
jne 0x140020397
lea r8d, [r12 + 0x40]
lea rdx, [rbp + 0xa0]
mov rcx, rdi
call qword [sym.imp.ole32.dll_StringFromGUID2]
mov ebx, 0x80
lea r8, str.CLSID_
lea rcx, [rbp - 0x60]
mov edx, ebx
call fcn.1401c0390
lea r14d, [r12 + 0xc]
lea esi, [rbx - 0x30]
lea r12d, [rbx - 0x5e]
test eax, eax
je 0x140020107
cmp eax, r14d
je 0x140020101
cmp eax, 0x16
je 0x1400200fb
cmp eax, r12d
je 0x1400200fb
cmp eax, esi
je 0x140020107
call fcn.14006619c
int3
call fcn.14006619c
int3
call fcn.140066154
int3
lea r8, [rbp + 0xa0]
lea rcx, [rbp - 0x60]
mov rdx, rbx
call fcn.1401c0d1c
test eax, eax
je 0x140020143
cmp eax, r14d
je 0x14002013d
cmp eax, 0x16
je 0x140020137
cmp eax, r12d
je 0x140020137
cmp eax, esi
je 0x140020143
call fcn.14006619c
int3
call fcn.14006619c
int3
call fcn.140066154
int3
lea r8, str.Required_Categories
lea rcx, [rbp - 0x60]
mov rdx, rbx
call fcn.1401c0d1c
test eax, eax
je 0x14002017f
cmp eax, r14d
je 0x140020179
cmp eax, 0x16
je 0x140020173
cmp eax, r12d
je 0x140020173
cmp eax, esi
je 0x14002017f
call fcn.14006619c
int3
call fcn.14006619c
int3
call fcn.140066154
int3
lea r8, [rbp - 0x60]
lea rcx, [rsp + 0x70]
mov r9d, 0x20019
mov rdx, 0xffffffff80000000
mov qword [rsp + 0x70], r13
mov dword [rsp + 0x78], r13d
mov qword [rbp - 0x80], r13
mov dword [rsp + 0x60], r13d
call fcn.140008f94
test eax, eax
jne 0x140020235
mov rbx, qword [rsp + 0x70]
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], r13
mov rcx, rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
movsxd rdi, eax
test rbx, rbx
je 0x14002020e
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x70], r13
mov dword [rsp + 0x78], r13d
test rdi, rdi
jne 0x140020230
cmp dword [rsp + 0x60], r13d
jne 0x140020230
lea rdx, [rbp - 0x60]
mov rcx, 0xffffffff80000000
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov ebx, 0x80
lea r8, str.CLSID_
lea rcx, [rbp - 0x60]
mov rdx, rbx
call fcn.1401c0390
test eax, eax
je 0x140020271
cmp eax, r14d
je 0x14002026b
cmp eax, 0x16
je 0x140020265
cmp eax, r12d
je 0x140020265
cmp eax, esi
je 0x140020271
call fcn.14006619c
int3
call fcn.14006619c
int3
call fcn.140066154
int3
lea r8, [rbp + 0xa0]
lea rcx, [rbp - 0x60]
mov rdx, rbx
call fcn.1401c0d1c
test eax, eax
je 0x1400202ad
cmp eax, r14d
je 0x1400202a7
cmp eax, 0x16
je 0x1400202a1
cmp eax, r12d
je 0x1400202a1
cmp eax, esi
je 0x1400202ad
call fcn.14006619c
int3
call fcn.14006619c
int3
call fcn.140066154
int3
lea r8, str.Implemented_Categories
lea rcx, [rbp - 0x60]
mov rdx, rbx
call fcn.1401c0d1c
test eax, eax
je 0x1400202e9
cmp eax, r14d
je 0x1400202e3
cmp eax, 0x16
je 0x1400202dd
cmp eax, r12d
je 0x1400202dd
cmp eax, esi
je 0x1400202e9
call fcn.14006619c
int3
call fcn.14006619c
int3
call fcn.140066154
int3
lea r8, [rbp - 0x60]
lea rcx, [rsp + 0x70]
mov r9d, 0x20019
mov rdx, 0xffffffff80000000
call fcn.140008f94
mov rbx, qword [rsp + 0x70]
test eax, eax
jne 0x14002037c
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
movsxd rdi, eax
test rbx, rbx
je 0x14002035f
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rbx, r13
test rdi, rdi
jne 0x14002037c
cmp dword [rsp + 0x60], r13d
jne 0x14002037c
lea rdx, [rbp - 0x60]
mov rcx, 0xffffffff80000000
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
test rbx, rbx
je 0x14002038a
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, 0xffffffff80000000
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400203a7
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
xor eax, eax
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.1401be840
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret