Function at 0x18003c6d0
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x180070310]
xor rax, rsp
mov qword [rbp + 0x250], rax
imul ebx, edx, 0x302
mov rax, r9
mov qword [rsp + 0x60], rax
mov r13, r8
mov r12d, edx
mov r14, rcx
mov esi, edx
mov dword [rsp + 0x58], ebx
cmp edx, ebx
ja 0x18003cb30
mov r15, qword [rsp + 0x60]
xor ecx, ecx
movzx edi, byte [rsp + 0x44]
mov r8d, 0x5357
mov edx, 0x616d
cmp esi, 0x6a2f
ja 0x18003c849
je 0x18003c83d
cmp esi, 0xa48
ja 0x18003c7df
je 0x18003cb30
mov eax, esi
sub eax, 0x2f
je 0x18003c7cd
sub eax, 0x4c
je 0x18003c7b9
cmp eax, 0x55
jne 0x18003cbc0
mov rcx, qword [r13]
test rcx, rcx
je 0x18003cb30
mov eax, dword [r14 + 4]
cmp eax, dword [r14]
jb 0x18003cbd8
movups xmm0, xmmword [r14 + 8]
lea rdx, [rsp + 0x70]
mov r8d, 0x3a
movsd xmm1, qword [r14 + 0x18]
movaps xmmword [rsp + 0x70], xmm0
movsd qword [rbp - 0x80], xmm1
call fcn.1800584e0
jmp 0x18003cbbe
mov word [rbp + 0x228], r8w
mov byte [rbp + 0x22a], 0
jmp 0x18003cbc0
cmp qword [r14], 0
mov eax, ecx
sete al
mov dword [rsp + 0x40], eax
jmp 0x18003cbc0
cmp esi, 0x1ae8
je 0x18003c82e
cmp esi, 0x3555
je 0x18003c822
cmp esi, 0x4fc2
jne 0x18003cbc0
movzx eax, word [0x18006a0ce]
mov word [rbp + 0x22f], ax
movzx eax, byte [0x18006a0d0]
mov byte [rbp + 0x231], al
mov byte [rbp + 0x232], 0
jmp 0x18003cbc0
mov byte [rbp + 0x22e], 0x6b
jmp 0x18003cbc0
mov dword [rbp + 0x22a], 0x636f5341
jmp 0x18003cbc0
mov word [rbp + 0x238], cx
jmp 0x18003cbc0
cmp esi, 0xd3e3
ja 0x18003c98a
je 0x18003c925
cmp esi, 0x849c
je 0x18003c8ec
cmp esi, 0x9f09
je 0x18003c8c6
cmp esi, 0xb976
jne 0x18003cbc0
mov qword [rsp + 0x38], rcx
lea rax, [rbp + 0x228]
mov qword [rsp + 0x30], rcx
lea r8, [rbp + 0x238]
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov word [rbp + 0x24c], cx
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov dword [rbp + 0x248], 0x6c006c
lea edx, [r9 + 5]
call fcn.1800561f0
mov qword [rsp + 0x68], rax
jmp 0x18003cbbe
mov eax, dword [0x180069fa0]
mov dword [rbp + 0x242], eax
movzx eax, word [0x180069fa4]
mov word [rbp + 0x246], ax
mov word [rbp + 0x248], cx
jmp 0x18003cbc0
mov r8d, 2
lea rdx, [0x180069eb8]
lea rcx, [rbp + 0x238]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 3
lea rdx, [0x180069f2e]
lea rcx, [rbp + 0x238]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x18003cbbe
mov eax, dword [rax]
lea r9, [rbp - 0x70]
mov qword [rsp + 0x30], rcx
xor edx, edx
mov dword [rsp + 0x48], eax
mov eax, dword [r13]
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea r8d, [rdx + 9]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x50]
call fcn.180025a00
test al, al
je 0x18003cb2b
mov dword [rsp + 0x28], 1
lea r9, [rbp - 0x70]
xor r8d, r8d
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [rsp + 0x68]
mov qword [r14], rax
jmp 0x18003cbbe
cmp esi, 0xee50
je 0x18003c9a3
cmp esi, 0x108bd
je 0x18003cb30
jmp 0x18003cbc0
mov ecx, 0xe0
mov eax, ecx
sub eax, 0x33
je 0x18003c9bd
sub eax, 0xad
je 0x18003c9d1
cmp eax, 0x7c
je 0x18003c9f3
jmp 0x18003c9d9
mov eax, 0x22
cmp eax, 0x22
je 0x18003c9e6
add eax, 0x6e
cmp eax, 0x90
jb 0x18003c9c2
cmp qword [r14], 0xffffffffffffffff
setne dil
add ecx, 0x7c
cmp ecx, 0x254
jb 0x18003c9a8
jmp 0x18003c9f3
mov rcx, qword [r14]
mov rax, qword [r14 + 8]
mov edi, dword [rax + rcx*4]
shr edi, 0x10
movzx eax, dil
test al, al
jne 0x18003cbb9
mov ebx, 4
cmp ebx, 0x9f
ja 0x18003caf6
je 0x18003caea
mov eax, ebx
sub eax, 4
je 0x18003cacb
sub eax, 0x1f
je 0x18003cabf
sub eax, 0x1f
je 0x18003ca80
sub eax, 0x1f
je 0x18003ca5a
cmp eax, 0x1f
jne 0x18003cba6
lea r8d, [rax - 0x1d]
lea rdx, str.isymbolScope
lea rcx, [rbp + 0x219]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18003cba1
mov r8d, 1
lea rdx, [0x18006a099]
lea rcx, [rbp + 0x218]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x219], 0
jmp 0x18003cba1
mov r8d, 1
lea rdx, [0x18006a006]
lea rcx, [rbp + 0x210]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, dword [0x18006a034]
mov dword [rbp + 0x213], eax
movzx eax, byte [0x18006a038]
mov byte [rbp + 0x217], al
mov byte [rbp + 0x218], 0
jmp 0x18003cba1
mov byte [rbp + 0x212], 0
jmp 0x18003cba6
mov r8d, 2
lea rdx, [0x18006a06f]
lea rcx, [rbp + 0x210]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18003cba1
mov byte [rbp + 0x21b], 0
jmp 0x18003cba6
mov eax, ebx
sub eax, 0xbe
je 0x18003cb87
sub eax, 0x1f
je 0x18003cb77
sub eax, 0x1f
je 0x18003cb6e
sub eax, 0x1f
je 0x18003cb5e
cmp eax, 0x1f
jne 0x18003cba6
lea rdx, [rbp + 0x210]
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_SHDeleteEmptyKeyA]
mov byte [rsp + 0x40], 0
mov eax, dword [rsp + 0x40]
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.1800643d0
mov rbx, qword [rsp + 0x3a8]
add rsp, 0x360
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rbp + 0x220], 0
mov r15, 0xffffffff80000001
jmp 0x18003cba6
mov byte [rbp + 0x21f], 0x3a
jmp 0x18003cba6
mov word [rbp + 0x21d], dx
mov byte [rbp + 0x21f], 0
jmp 0x18003cba6
mov r8d, 2
lea rdx, [0x180069fbc]
lea rcx, [rbp + 0x210]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov edx, 0x616d
add ebx, 0x1f
cmp ebx, 0x159
jb 0x18003ca04
mov ebx, dword [rsp + 0x58]
mov byte [rsp + 0x40], 1
xor ecx, ecx
imul eax, r12d, 0x37
add esi, eax
cmp esi, ebx
ja 0x18003cb30
mov rax, qword [rsp + 0x60]
jmp 0x18003c731
movups xmm0, xmmword [r13]
add rax, 2
add rax, rax
movups xmmword [r14 + rax*8], xmm0
inc dword [r14 + 4]
jmp 0x18003cb30