Function at 0x14002dd10
Capabilities:
Delete registry key

Disassembly:
push rbx
sub rsp, 0xcc0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov rax, qword [0x14012ce40]
xor rax, rsp
mov qword [rsp + 0xcb0], rax
mov rbx, rdx
mov word [rsp + 0x260], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x262]
call fcn.1400b57e0
mov word [rsp + 0x890], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x892]
call fcn.1400b57e0
mov word [rsp + 0x470], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x472]
call fcn.1400b57e0
mov word [rsp + 0x680], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x682]
call fcn.1400b57e0
mov word [rsp + 0xaa0], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0xaa2]
call fcn.1400b57e0
mov word [rsp + 0x50], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x52]
call fcn.1400b57e0
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14002de1e
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14002de15
mov rcx, rax
call fcn.140050830
jmp 0x14002de17
xor eax, eax
mov qword [0x1401370f0], rax
lea rdx, str.ScrubRegistryUSB__...
mov rcx, rax
call fcn.140050c00
lea r8, str.SYSTEMCurrentControlSetEnumUSB_
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.1400b1b70
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x50]
lea r8, str._s_s
mov edx, 0x104
lea rcx, [rsp + 0x260]
call fcn.1400b1010
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x50]
lea r8, str._s_sMI_00
mov edx, 0x104
lea rcx, [rsp + 0x890]
call fcn.1400b1010
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x50]
lea r8, str._s_sMI_01
mov edx, 0x104
lea rcx, [rsp + 0x470]
call fcn.1400b1010
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x50]
lea r8, str._s_sMI_02
mov edx, 0x104
lea rcx, [rsp + 0x680]
call fcn.1400b1010
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x50]
lea r8, str._s_sMI_03
mov edx, 0x104
lea rcx, [rsp + 0xaa0]
call fcn.1400b1010
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14002df25
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14002df1c
mov rcx, rax
call fcn.140050830
jmp 0x14002df1e
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, [rsp + 0x260]
lea rdx, str.CReg::DeleteSecureKeyFromHKLM__s_
mov rcx, rax
call fcn.140050c00
lea r8, [rsp + 0x260]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.140048f20
lea r8, [rsp + 0x260]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.1400489d0
lea rdx, [rsp + 0x260]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14002dfb6
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14002dfad
mov rcx, rax
call fcn.140050830
jmp 0x14002dfaf
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, [rsp + 0x890]
lea rdx, str.CReg::DeleteSecureKeyFromHKLM__s_
mov rcx, rax
call fcn.140050c00
lea r8, [rsp + 0x890]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.140048f20
lea r8, [rsp + 0x890]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.1400489d0
lea rdx, [rsp + 0x890]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14002e047
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14002e03e
mov rcx, rax
call fcn.140050830
jmp 0x14002e040
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, [rsp + 0x470]
lea rdx, str.CReg::DeleteSecureKeyFromHKLM__s_
mov rcx, rax
call fcn.140050c00
lea r8, [rsp + 0x470]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.140048f20
lea r8, [rsp + 0x470]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.1400489d0
lea rdx, [rsp + 0x470]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14002e0d8
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14002e0cf
mov rcx, rax
call fcn.140050830
jmp 0x14002e0d1
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, [rsp + 0x680]
lea rdx, str.CReg::DeleteSecureKeyFromHKLM__s_
mov rcx, rax
call fcn.140050c00
lea r8, [rsp + 0x680]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.140048f20
lea r8, [rsp + 0x680]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.1400489d0
lea rdx, [rsp + 0x680]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14002e169
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14002e160
mov rcx, rax
call fcn.140050830
jmp 0x14002e162
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, [rsp + 0xaa0]
lea rdx, str.CReg::DeleteSecureKeyFromHKLM__s_
mov rcx, rax
call fcn.140050c00
lea r8, [rsp + 0xaa0]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.140048f20
lea r8, [rsp + 0xaa0]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.1400489d0
lea rdx, [rsp + 0xaa0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov rcx, qword [rsp + 0xcb0]
xor rcx, rsp
call fcn.1400b09d0
add rsp, 0xcc0
pop rbx
ret