Function at 0x1400393c0
Capabilities:
Delete registry key

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x70], rbx
mov r13, rcx
xor r8d, r8d
lea rdx, str.CUNINSTALLERDlg::CleanUpRegistryPDL
lea rcx, [rsp + 0x28]
call fcn.14000b870
nop
call fcn.140050920
mov rdi, qword [rax + 8]
call fcn.14004cde4
mov rcx, rax
xor ebp, ebp
mov edx, ebp
test rax, rax
setne dl
test edx, edx
jne 0x14003941c
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x78], rbx
call fcn.14004cde4
mov r11, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x14003944a
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x88], rax
call fcn.14004cde4
mov r11, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x14003947e
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x80], rax
mov rdx, qword [rdi + 0x1d8]
lea rcx, [rdx - 0x18]
lea rdi, [rbx - 0x18]
or r12d, 0xffffffff
cmp rcx, rdi
je 0x1400394fa
cmp dword [rdi + 0x10], 0
jl 0x1400394e7
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400394e7
call fcn.140001620
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x1400394dc
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
add rbx, 0x18
mov qword [rsp + 0x78], rbx
jmp 0x1400394fa
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x78]
call fcn.1400014d0
mov rbx, qword [rsp + 0x78]
mov rcx, rbx
call fcn.14003b580
mov rdx, rbx
mov rcx, 0xffffffff80000001
call fcn.140018670
cmp eax, 1
jne 0x140039526
mov rdx, rbx
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdi, rbp
cmp qword [r13 + 0x208], rbp
jle 0x140039680
test rdi, rdi
js 0x14003967a
cmp rdi, qword [r13 + 0x208]
jge 0x14003967a
mov rax, qword [r13 + 0x200]
mov rbx, qword [rax + rdi*8]
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rbx - 8], 0
jl 0x14003957a
cmp rax, qword [rbx - 0x18]
jne 0x14003957a
lea rsi, [rbx - 0x18]
lock inc dword [rbx - 8]
jmp 0x1400395b5
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [rbx - 0x10]
call qword [rax]
mov rsi, rax
test rax, rax
je 0x140039674
mov ecx, dword [rbx - 0x10]
mov dword [rax + 8], ecx
mov ecx, dword [rbx - 0x10]
inc ecx
movsxd rdx, ecx
lea r9, [rdx + rdx]
mov r8, rbx
add rdx, rdx
lea rcx, [rax + 0x18]
call fcn.14018e7d0
lea rbx, [rsi + 0x18]
cmp dword [rbx - 0x10], 0
jl 0x1400395dd
lea rdx, str.PCL6
mov rcx, rbx
call fcn.140190f4c
test rax, rax
je 0x1400395dd
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x14003960e
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400395f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc ebp
inc rdi
movsxd rax, ebp
cmp rax, qword [r13 + 0x208]
jge 0x140039680
jmp 0x140039536
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140039629
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r8, str.PCL6
lea rdx, str.PCL5e
lea rcx, [rsp + 0x78]
call fcn.140009d30
mov rbx, qword [rsp + 0x78]
mov rcx, rbx
call fcn.14003b580
mov rdx, rbx
mov rcx, 0xffffffff80000001
call fcn.140018670
cmp eax, 1
jne 0x140039680
mov rdx, rbx
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
jmp 0x140039680
call fcn.1400016b0
int3
call fcn.14004d690
int3
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call fcn.140018670
cmp eax, 1
jne 0x1400396ac
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov r9d, 1
lea r8, str.return___08x
lea edx, [r9 + 1]
lea rcx, [rsp + 0x28]
call fcn.14000ba50
nop
mov rdx, qword [rsp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400396ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140039710
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
dec r12d
test r12d, r12d
jg 0x140039732
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
lea rcx, [rsp + 0x28]
call fcn.14000ba00
mov eax, 1
mov rbx, qword [rsp + 0x70]
add rsp, 0x40
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret