Function at 0x1400240b0
Capabilities:
Check if file exists
Delete registry key

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x1400922d0]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rdi, rcx
call fcn.140002950
mov rcx, rax
test rax, rax
je 0x1400242f0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x1f], rax
xor r8d, r8d
lea rdx, [rbp + 0x1f]
mov rcx, rdi
call fcn.1400242fc
mov ebx, eax
test eax, eax
js 0x1400242ab
lea rdx, [rbp + 0x1f]
lea rcx, [0x1400934f8]
call fcn.1400068a0
mov rcx, qword [0x1400934f8]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14002413a
call fcn.140024500
test al, al
je 0x140024141
xor ebx, ebx
jmp 0x1400242ab
and qword [rbp + 0x17], 0
lea rdx, str.Software
lea rcx, [rbp + 0x17]
call fcn.140002f00
nop
lea rcx, [rbp + 0x37]
call qword [sym.imp.ole32.dll_CoCreateGuid]
mov ebx, eax
test eax, eax
js 0x140024289
lea rdx, [rbp + 0x2f]
lea rcx, [rbp + 0x37]
call qword [sym.imp.ole32.dll_StringFromCLSID]
mov ebx, eax
test eax, eax
js 0x140024289
mov rdx, qword [rbp + 0x2f]
lea rcx, [rbp + 0x17]
call fcn.14000a324
mov rcx, qword [rbp + 0x2f]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
and qword [rsp + 0x40], 0
lea rax, [rbp + 0x27]
mov qword [rsp + 0x38], rax
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp + 0x17]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
movsxd rcx, eax
test eax, eax
je 0x1400241ed
movzx ebx, cx
or ebx, 0x80070000
test eax, eax
cmovle ebx, ecx
jmp 0x140024289
mov rcx, qword [rbp + 0x27]
call fcn.140058a54
mov ebx, eax
test eax, eax
jns 0x14002426d
lfence
mov dword [0x1400932d0], eax
mov r8b, 1
lea rdx, [rbp + 0x1f]
mov rcx, rdi
call fcn.1400242fc
mov ebx, eax
test eax, eax
js 0x140024289
lea rdx, [rbp + 0x1f]
lea rcx, [0x1400934f8]
call fcn.1400068a0
mov rbx, qword [rbp + 0x27]
mov dl, 1
call fcn.14005884c
test al, al
je 0x14002426b
xor r8d, r8d
mov rdx, qword [0x1400934f8]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSaveKeyW]
test eax, eax
je 0x140024264
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x14002426d
jmp 0x140024289
xor edx, edx
call fcn.14005884c
xor ebx, ebx
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0x17]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeW]
nop
mov rdx, qword [rbp + 0x17]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400242ab
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1f]
add rdx, 0xffffffffffffffe8
or ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x1400242cd
lfence
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, ebx
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140001020
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400327c0
int3