Function at 0x18000e014
Capabilities:
Delete registry value

Disassembly:
mov r11, rsp
push rdi
push r12
push r14
sub rsp, 0x130
mov qword [rsp + 0xf0], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov rax, qword [0x1800764c0]
xor rax, rsp
mov qword [rsp + 0x120], rax
mov rsi, rcx
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov rdx, rcx
lea rcx, [r11 - 0x80]
call fcn.18000104c
nop
cmp qword [rax + 0x20], 8
jb 0x18000e06e
mov r9, qword [rax + 8]
jmp 0x18000e072
lea r9, [rax + 8]
lea r8, str.SoftwareWOW6432Nodeprojonepodlpusbmgr_approveds
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xf8]
call fcn.18001c1d4
nop
cmp qword [rsp + 0xe8], 8
jb 0x18000e0a6
mov rcx, qword [rsp + 0xd0]
call fcn.18003c660
mov qword [rsp + 0xe8], 7
mov qword [rsp + 0xe0], r12
mov word [rsp + 0xd0], r12w
cmp qword [rsp + 0x110], r12
jne 0x18000e0ec
cmp qword [rsp + 0x118], 8
jb 0x18000e0e5
mov rcx, qword [rsp + 0x100]
call fcn.18003c660
xor eax, eax
jmp 0x18000e3e2
and dword [rsp + 0x58], 0xfffffe00
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0xa0]
call fcn.180002d54
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.180035f40
nop
mov edi, 1
mov dword [rsp + 0x20], edi
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.1800010d4
lea r14d, [rdi + 0xe]
cmp al, r12b
je 0x18000e18a
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r12
mov byte [rsp + 0x30], r12b
lea r8d, [rdi + 0x19]
lea rdx, str.endTime:_unique:
lea rcx, [rsp + 0x28]
call fcn.1800023b4
nop
lea edi, [r14 - 0xc]
mov dword [rsp + 0x20], edi
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x50]
call fcn.18000d164
cmp al, r12b
je 0x18000e18a
mov bl, 1
jmp 0x18000e18d
mov bl, r12b
test dil, 2
je 0x18000e1b7
and edi, 0xfffffffd
cmp qword [rsp + 0x48], 0x10
jb 0x18000e1a8
mov rcx, qword [rsp + 0x30]
call fcn.18003c660
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r12
mov byte [rsp + 0x30], r12b
test dil, 1
je 0x18000e1d8
and edi, 0xfffffffe
cmp qword [rsp + 0x98], 0x10
jb 0x18000e1d8
mov rcx, qword [rsp + 0x80]
call fcn.18003c660
cmp bl, r12b
je 0x18000e36f
lea rdx, str.unique
lea rcx, [rsp + 0x50]
call fcn.180026aa8
mov rcx, rax
lea rdx, [rsp + 0xa0]
call fcn.1800258ec
nop
or edi, 4
mov dword [rsp + 0x20], edi
cmp qword [rsi + 0x20], 0x10
jb 0x18000e217
mov rdx, qword [rsi + 8]
jmp 0x18000e21b
lea rdx, [rsi + 8]
mov rbx, qword [rax + 0x18]
cmp rbx, rbx
cmovb rbx, rbx
cmp qword [rax + 0x20], 0x10
jb 0x18000e233
mov rcx, qword [rax + 8]
jmp 0x18000e237
lea rcx, [rax + 8]
mov r8, qword [rsi + 0x18]
cmp rbx, r8
cmovb r8, rbx
call fcn.18004afb0
movsxd rcx, eax
mov eax, r12d
cmp rbx, qword [rsi + 0x18]
setne al
or edx, 0xffffffff
cmp rbx, qword [rsi + 0x18]
cmovb eax, edx
cmp rcx, r12
cmovne eax, ecx
cmp eax, r12d
jne 0x18000e2bc
lea rdx, str.endTime
lea rcx, [rsp + 0x50]
call fcn.180026aa8
mov rcx, rax
lea rdx, [rsp + 0x78]
call fcn.1800258ec
mov rbx, rax
or edi, 8
mov dword [rsp + 0x20], edi
mov edx, 1
lea rcx, [rsp + 0x28]
call fcn.18001ae38
nop
or edi, 0x10
mov dword [rsp + 0x20], edi
mov rdx, rax
mov rcx, rbx
call fcn.180008798
cmp al, r12b
jne 0x18000e2bc
mov bl, 1
jmp 0x18000e2bf
mov bl, r12b
test dil, 0x10
je 0x18000e2e9
and edi, 0xffffffef
cmp qword [rsp + 0x48], 0x10
jb 0x18000e2da
mov rcx, qword [rsp + 0x30]
call fcn.18003c660
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r12
mov byte [rsp + 0x30], r12b
test dil, 8
je 0x18000e322
and edi, 0xfffffff7
cmp qword [rsp + 0x98], 0x10
jb 0x18000e30a
mov rcx, qword [rsp + 0x80]
call fcn.18003c660
mov qword [rsp + 0x98], r14
mov qword [rsp + 0x90], r12
mov byte [rsp + 0x80], r12b
test dil, 4
je 0x18000e340
cmp qword [rsp + 0xc0], 0x10
jb 0x18000e340
mov rcx, qword [rsp + 0xa8]
call fcn.18003c660
cmp bl, r12b
je 0x18000e36f
lea rcx, [rsp + 0x50]
call fcn.18002574c
nop
cmp qword [rsp + 0x118], 8
jb 0x18000e368
mov rcx, qword [rsp + 0x100]
call fcn.18003c660
mov eax, 1
jmp 0x18000e3e2
mov rdx, rsi
lea rcx, [rsp + 0xa0]
call fcn.18000104c
cmp qword [rax + 0x20], 8
jb 0x18000e38c
mov r8, qword [rax + 8]
jmp 0x18000e390
lea r8, [rax + 8]
lea rdx, str.SoftwareWOW6432Nodeprojonepodlpusbmgr_approveds
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
cmp qword [rsp + 0xc0], 8
jb 0x18000e3bd
mov rcx, qword [rsp + 0xa8]
call fcn.18003c660
nop
lea rcx, [rsp + 0x50]
call fcn.18002574c
nop
cmp qword [rsp + 0x118], 8
jb 0x18000e3e0
mov rcx, qword [rsp + 0x100]
call fcn.18003c660
xor eax, eax
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.18003c1a0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop r12
pop rdi
ret