Function at 0x1800a47fc
Capabilities:
Delete registry key

Disassembly:
push rbp
push rsi
push rdi
push r12
push r14
sub rsp, 0x310
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x300], rbx
mov rax, qword [0x180122658]
xor rax, rbp
mov qword [rbp + 0x2c0], rax
mov rbx, qword [rbp + 0x320]
mov r10, rdx
mov edx, reloc.combase.dll_Ordinal_104
mov r14, r9
mov esi, r8d
call fcn.18000e9b4
test eax, eax
jne 0x1800a4850
mov eax, 0x80004003
jmp 0x1800a4a7a
test r10, r10
jne 0x1800a485f
mov eax, 0x80070057
jmp 0x1800a4a7a
test esi, esi
je 0x1800a4868
test r14, r14
je 0x1800a4855
mov r8d, 0x28
lea rdx, [rbp + 0x10]
mov rcx, r10
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_StringFromGUID2]
test eax, eax
jne 0x1800a4889
mov eax, 0x8007000e
jmp 0x1800a4a7a
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rbx
lea r9, str.CLSID
mov qword [rsp + 0x20], rax
lea r8, str._s_s_s
mov edx, 0x104
lea rcx, [rbp + 0xb0]
call fcn.18000b8f4
test eax, eax
js 0x1800a4a7a
lea rax, [rbp + 8]
mov r9d, 0xf003f
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0xb0]
mov rcx, 0xffffffff80000000
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
je 0x1800a48f8
jle 0x1800a4a78
movzx ebx, ax
jmp 0x1800a4a72
xor edi, edi
test esi, esi
je 0x1800a4a61
lea r12, [0x180106940]
mov ebx, edi
xor ecx, ecx
shl rbx, 4
add rbx, r14
movsxd rax, ecx
imul rdx, rax, 0x114
mov rax, qword [rbx]
sub rax, qword [rdx + r12]
jne 0x1800a4930
mov rax, qword [rbx + 8]
sub rax, qword [rdx + r12 + 8]
test rax, rax
je 0x1800a493e
inc ecx
cmp ecx, 5
jl 0x1800a4914
jmp 0x1800a4991
lea rax, [r12 + 0x14]
add rax, rdx
lea r9, str.CLSID
mov qword [rsp + 0x28], rax
lea r8, str._s_s_s
lea rax, [rbp + 0x10]
mov edx, 0x104
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
call fcn.18000b8f4
test eax, eax
js 0x1800a4991
xor r9d, r9d
lea rdx, [rbp + 0xb0]
xor r8d, r8d
mov rcx, 0xffffffff80000000
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteKeyExW]
mov r8d, 0x28
lea rdx, [rbp + 0x60]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_StringFromGUID2]
test eax, eax
je 0x1800a487f
and dword [rbp], 0
lea rax, [rbp]
mov qword [rsp + 0x38], rax
lea r8, [rbp + 0x60]
lea rax, [0x1800f2144]
or r9d, 0xffffffff
mov qword [rsp + 0x30], rax
mov edx, 0x400
and dword [rsp + 0x28], 0
xor ecx, ecx
and qword [rsp + 0x20], 0
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_WideCharToMultiByte]
lea edx, [rax + 1]
movsxd rax, edx
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x1800a49fe
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1800245d0
sub rsp, rcx
lea rax, [rbp]
or r9d, 0xffffffff
lea r8, [rbp + 0x60]
xor ecx, ecx
mov qword [rsp + 0x38], rax
lea rbx, [rsp + 0x40]
lea rax, [0x1800f2144]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], edx
mov edx, 0x400
mov qword [rsp + 0x20], rbx
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_WideCharToMultiByte]
mov rcx, qword [rbp + 8]
mov rdx, rbx
call fcn.1800a3f28
mov ebx, eax
test eax, eax
jne 0x1800a4a61
inc edi
cmp edi, esi
jb 0x1800a4909
mov rcx, qword [rbp + 8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test ebx, ebx
jle 0x1800a4a78
movzx ebx, bx
or ebx, 0x80070000
mov eax, ebx
mov rcx, qword [rbp + 0x2c0]
xor rcx, rbp
call fcn.180023ec0
mov rbx, qword [rbp + 0x300]
lea rsp, [rbp + 0x2d0]
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret