Function at 0x10000e94c
Capabilities:
Delete registry key

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x60
xor r12d, r12d
lea rax, [rax + 0x10]
and qword [rax], r12
mov dword [rax - 8], r12d
test rax, rax
jne 0x10000e97e
lea esi, [rax + 0x57]
jmp 0x10000ec6e
lea rcx, [rsp + 0x98]
call fcn.10000e670
mov rbp, qword [rsp + 0x98]
mov esi, eax
test eax, eax
jne 0x10000ec55
test rbp, rbp
je 0x10000ec6e
call sub.KERNEL32.dll_GetLastError
mov edi, eax
call sub.WDSCORE.dll_CurrentIP
lea rdx, [0x1000050b8]
mov r8, rbp
mov ecx, 0x4000000
mov rbx, rax
call fcn.1000092e8
and dword [rsp + 0x50], r12d
and qword [rsp + 0x48], r12
mov dword [rsp + 0x40], edi
mov rcx, rax
mov qword [rsp + 0x38], rbx
lea rax, [0x100005080]
lea r14, [0x100001e78]
mov r15d, 0x70000
mov qword [rsp + 0x30], rax
lea rax, [0x100004f20]
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov r8, r14
mov edx, r15d
mov dword [rsp + 0x20], 0x98
call sub.WDSCORE.dll_WdsSetupLogMessageW
lea r11, [rsp + 0x90]
test r11, r11
jne 0x10000ea2d
lea esi, [r11 + 0x57]
jmp 0x10000ea48
lea rcx, [rsp + 0x90]
call fcn.10000e80c
mov r12d, dword [rsp + 0x90]
mov esi, eax
test eax, eax
je 0x10000eab0
call sub.KERNEL32.dll_GetLastError
mov edi, eax
call sub.WDSCORE.dll_CurrentIP
lea rdx, [0x1000050d0]
mov r8d, esi
mov ecx, 0x300008b
mov rbx, rax
call fcn.1000092e8
and dword [rsp + 0x50], 0
and qword [rsp + 0x48], 0
mov dword [rsp + 0x40], edi
mov rcx, rax
mov qword [rsp + 0x38], rbx
lea rax, [0x100005080]
xor r9d, r9d
mov r8, r14
mov qword [rsp + 0x30], rax
lea rax, [0x100004f20]
mov edx, r15d
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x9e
call sub.WDSCORE.dll_WdsSetupLogMessageW
lea rdx, [0x100004fd0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov esi, eax
test eax, eax
je 0x10000eb34
call sub.KERNEL32.dll_GetLastError
mov edi, eax
call sub.WDSCORE.dll_CurrentIP
lea rdx, [0x100005108]
mov r8d, esi
mov ecx, 0x4000000
mov rbx, rax
call fcn.1000092e8
and dword [rsp + 0x50], 0
and qword [rsp + 0x48], 0
mov dword [rsp + 0x40], edi
mov rcx, rax
mov qword [rsp + 0x38], rbx
lea rax, [0x100005080]
xor r9d, r9d
mov r8, r14
mov qword [rsp + 0x30], rax
lea rax, [0x100004f20]
mov edx, r15d
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xaa
call sub.WDSCORE.dll_WdsSetupLogMessageW
xor esi, esi
inc r12d
call sub.KERNEL32.dll_GetLastError
mov edi, eax
call sub.WDSCORE.dll_CurrentIP
lea rdx, [0x100005148]
mov r9d, r12d
mov r8, rbp
mov ecx, 0x4000000
mov rbx, rax
call fcn.1000092e8
and dword [rsp + 0x50], 0
and qword [rsp + 0x48], 0
mov dword [rsp + 0x40], edi
mov rcx, rax
mov qword [rsp + 0x38], rbx
lea rax, [0x100005080]
xor r9d, r9d
mov qword [rsp + 0x30], rax
lea rax, [0x100004f20]
mov r8, r14
mov qword [rsp + 0x28], rax
mov edx, r15d
mov dword [rsp + 0x20], 0xb5
call sub.WDSCORE.dll_WdsSetupLogMessageW
lea rax, [rsp + 0x90]
mov r9d, 4
mov dword [rsp + 0x28], r9d
lea rdx, [0x100004fd0]
mov r8, rbp
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x90], r12d
call fcn.10000e094
test eax, eax
jne 0x10000ec55
call sub.KERNEL32.dll_GetLastError
mov esi, eax
mov eax, 0x1f
test esi, esi
cmove esi, eax
call sub.KERNEL32.dll_GetLastError
mov edi, eax
call sub.WDSCORE.dll_CurrentIP
lea rdx, [0x100005178]
mov r8d, esi
mov ecx, 0x300008c
mov rbx, rax
call fcn.1000092e8
and dword [rsp + 0x50], 0
and qword [rsp + 0x48], 0
mov dword [rsp + 0x40], edi
mov rcx, rax
mov qword [rsp + 0x38], rbx
lea rax, [0x100005080]
xor r9d, r9d
mov r8, r14
mov qword [rsp + 0x30], rax
lea rax, [0x100004f20]
mov edx, r15d
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xbe
call sub.WDSCORE.dll_WdsSetupLogMessageW
test rbp, rbp
je 0x10000ec6e
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbp
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea r11, [rsp + 0x60]
mov eax, esi
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret