Function at 0x180064380
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x500
mov rax, qword [0x180122658]
xor rax, rsp
mov qword [rsp + 0x4f0], rax
mov qword [rsp + 0x68], rsp
mov rbx, rcx
and qword [rsp + 0x48], 0
and qword [rsp + 0x30], 0
and qword [rsp + 0x38], 0
and qword [rsp + 0x58], 0
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0xd0]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
lea rdx, [rsp + 0x80]
mov rcx, rbx
call fcn.180063614
mov rcx, qword [rbx + 0x18]
test rcx, rcx
jne 0x180064410
mov dword [rsp + 0x60], 0x80070057
lea rdx, [0x180064406]
mov rcx, rsp
call sub.api_ms_win_crt_private_l1_1_0.dll__local_unwind
nop
nop
mov eax, 0x80070057
jmp 0x1800647dc
mov r8d, 0x104
lea rdx, [rsp + 0x2e0]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleFileNameW]
test eax, eax
je 0x180064435
lea rcx, [rsp + 0x2e0]
call fcn.180064240
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.CLSID
mov rsi, 0xffffffff80000000
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov dword [rsp + 0x40], eax
test eax, eax
jne 0x1800646bb
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov dword [rsp + 0x40], eax
test eax, eax
jne 0x180064698
cmp qword [rbx + 0x28], 0
jne 0x1800644c1
lea r9, [rsp + 0xd0]
lea rdx, str.ProgID
mov rcx, qword [rsp + 0x30]
call fcn.180063700
mov qword [rbx + 0x28], rax
cmp qword [rbx + 0x30], 0
jne 0x1800644e5
lea r9, [rsp + 0xd0]
lea rdx, str.VersionIndependentProgID
mov rcx, qword [rsp + 0x30]
call fcn.180063700
mov qword [rbx + 0x30], rax
lea r8, str.AppID
xor edx, edx
mov rcx, qword [rsp + 0x30]
call fcn.1800635a0
lea r8, str.ThreadingModel
lea rdx, str.InprocServer32
mov rcx, qword [rsp + 0x30]
call fcn.1800635a0
lea rdx, str.InprocServer32
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, str.LocalServer
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, str.InprocHandler
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, str.LocalServer32
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, str.InprocHandler32
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, [0x180103f30]
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, [0x180103f40]
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, [0x180103f60]
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, [0x180103f78]
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, [0x180103f90]
mov rcx, qword [rsp + 0x30]
call fcn.180063780
xor r9d, r9d
xor r8d, r8d
lea rdx, str.MiscStatus
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteKeyExW]
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x180103fc0]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteKeyExW]
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x180103fd0]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteKeyExW]
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Conversion
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteKeyExW]
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DataFormats
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteKeyExW]
lea rdx, str.ToolBoxBitmap32
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, str.DefaultIcon
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, str.Version
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, str.ProgID
mov rcx, qword [rsp + 0x30]
call fcn.180063780
lea rdx, str.VersionIndependentProgID
mov rcx, qword [rsp + 0x30]
call fcn.180063780
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
and qword [rsp + 0x30], 0
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x48]
call fcn.180063780
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
and qword [rsp + 0x48], 0
mov rdx, qword [rbx + 0x28]
test rdx, rdx
je 0x180064716
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov dword [rsp + 0x40], eax
test eax, eax
jne 0x180064716
lea rdx, str.CLSID
mov rcx, qword [rsp + 0x38]
call fcn.180063780
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
and qword [rsp + 0x38], 0
mov rdx, qword [rbx + 0x28]
mov rcx, rsi
call fcn.180063780
mov rdx, qword [rbx + 0x30]
test rdx, rdx
je 0x180064783
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov dword [rsp + 0x40], eax
test eax, eax
jne 0x180064783
lea rdx, str.CLSID
mov rcx, qword [rsp + 0x38]
call fcn.180063780
lea rdx, str.CurVer
mov rcx, qword [rsp + 0x38]
call fcn.180063780
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
and qword [rsp + 0x38], 0
mov rdx, qword [rbx + 0x30]
mov rcx, rsi
call fcn.180063780
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x180064793
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1800647a3
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1800647b3
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
xor eax, eax
jmp 0x1800647dc
mov rcx, qword [rsp + 0x4f0]
xor rcx, rsp
call fcn.180023ec0
mov rbx, qword [rsp + 0x518]
add rsp, 0x500
pop rsi
ret