Function at 0x180007650
Capabilities:
Delete registry key
Delete registry value

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
sub rsp, 0x350
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov rax, qword [0x1800654c0]
xor rax, rsp
mov qword [rsp + 0x340], rax
mov rbx, rcx
xor r12d, r12d
mov word [r11 - 0x238], r12w
xor edx, edx
mov r8d, 0x206
lea rcx, [r11 - 0x236]
call fcn.180035e00
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
movabs r11, 0x58028e44000
sub qword [rsp + 0x40], r11
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx r11d, word [rsp + 0x66]
movzx eax, word [rsp + 0x62]
movzx r9d, word [rsp + 0x60]
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], eax
lea r8, str._04d__02d__02d
mov edx, 0x104
lea rcx, [rsp + 0x130]
call qword [sym.imp.SHLWAPI.dll_wnsprintfW]
lea rdx, [rsp + 0x130]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
mov esi, r12d
test eax, eax
sets sil
test esi, esi
je 0x180007741
mov rdx, rbx
lea rcx, [0x180052690]
call fcn.18003005c
mov r8, rbx
lea rdx, str.SoftwareWOW6432Nodeprojonepodlp_rptcache_rptstore_s
lea rcx, [rsp + 0xc8]
call fcn.18002cf08
nop
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x70]
call fcn.180003d80
nop
mov rbp, qword [rsp + 0xa0]
mov rbx, qword [rbp]
mov rdi, qword [rsp + 0x70]
movsxd rsi, esi
nop dword [rax]
test rdi, rdi
je 0x1800077aa
cmp rdi, rdi
je 0x1800077af
call fcn.180033b38
cmp rbx, rbp
je 0x180007a03
test rdi, rdi
jne 0x1800077c7
call fcn.180033b38
mov r11, r12
jmp 0x1800077ca
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x30]
jne 0x1800077d5
call fcn.180033b38
cmp qword [rbx + 0x38], 8
jb 0x1800077e2
mov r9, qword [rbx + 0x20]
jmp 0x1800077e6
lea r9, [rbx + 0x20]
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xf0]
call fcn.18002d0d8
nop
test rsi, rsi
je 0x180007881
lea rcx, [rsp + 0xf0]
call fcn.180006910
test rdi, rdi
jne 0x180007836
call fcn.180033b38
mov r11, r12
jmp 0x180007839
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x30]
jne 0x180007844
call fcn.180033b38
cmp qword [rbx + 0x38], 8
jb 0x180007851
mov r8, qword [rbx + 0x20]
jmp 0x180007855
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae rdx, qword [rsp + 0xd0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
jmp 0x180007961
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xf0]
call fcn.1800063b0
test eax, eax
je 0x1800078f3
test rdi, rdi
jne 0x1800078ab
call fcn.180033b38
mov r11, r12
jmp 0x1800078ae
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x30]
jne 0x1800078b9
call fcn.180033b38
cmp qword [rbx + 0x38], 8
jb 0x1800078c6
mov r8, qword [rbx + 0x20]
jmp 0x1800078ca
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae rdx, qword [rsp + 0xd0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
jmp 0x180007961
cmp byte [rsp + 0x30], 0
je 0x1800079eb
lea rcx, [rsp + 0xf0]
call fcn.180006910
test rdi, rdi
jne 0x18000791a
call fcn.180033b38
mov r11, r12
jmp 0x18000791d
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x30]
jne 0x180007928
call fcn.180033b38
cmp qword [rbx + 0x38], 8
jb 0x180007935
mov r8, qword [rbx + 0x20]
jmp 0x180007939
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae rdx, qword [rsp + 0xd0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
nop
cmp qword [rsp + 0x110], 8
jb 0x180007979
mov rcx, qword [rsp + 0xf8]
call fcn.180033b90
test rdi, rdi
jne 0x180007983
call fcn.180033b38
cmp byte [rbx + 0x41], 0
je 0x180007993
call fcn.180033b38
jmp 0x1800077a0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x41], 0
jne 0x1800079c1
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x41], 0
jne 0x1800077a0
nop dword [rax]
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x41], 0
je 0x1800079b0
jmp 0x1800077a0
mov rax, qword [rbx + 8]
cmp byte [rax + 0x41], 0
jne 0x1800079e3
nop dword [rax + rax]
cmp rbx, qword [rax + 0x10]
jne 0x1800079e3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x41], 0
je 0x1800079d0
mov rbx, rax
jmp 0x1800077a0
cmp qword [rsp + 0x110], 8
jb 0x180007a03
mov rcx, qword [rsp + 0xf8]
call fcn.180033b90
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xf0]
call fcn.180003d80
mov rbx, rax
lea rax, [rsp + 0x70]
cmp rax, rbx
je 0x180007aa2
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x48], rcx
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0x40], rdx
mov rcx, qword [rcx]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rdx
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
movaps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm1
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x70]
call fcn.180009a10
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.180009be0
nop
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x50], rcx
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rcx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm1
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xf0]
call fcn.180009a10
mov rcx, qword [rsp + 0x120]
call fcn.180033b90
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r12
mov rcx, qword [rsp + 0xf0]
call fcn.180033b90
cmp qword [rsp + 0xa8], 0
jne 0x180007b5b
lea rdx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae rdx, qword [rsp + 0xd0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
nop
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x50], rcx
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rcx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm1
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x70]
call fcn.180009a10
mov rcx, qword [rsp + 0xa0]
call fcn.180033b90
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], r12
mov rcx, qword [rsp + 0x70]
call fcn.180033b90
nop
cmp qword [rsp + 0xe8], 8
jb 0x180007bf1
mov rcx, qword [rsp + 0xd0]
call fcn.180033b90
mov rcx, qword [rsp + 0x340]
xor rcx, rsp
call fcn.1800336d0
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r12
pop rdi
pop rsi
ret