Function at 0x140019c30
Capabilities:
Delete registry value
Query or enumerate registry value

Disassembly:
push rbx
push rdi
sub rsp, 0x58
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov rbx, rcx
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x140019c76
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140019c6d
mov rcx, rax
call fcn.140050830
jmp 0x140019c6f
xor eax, eax
mov qword [0x1401370f0], rax
lea rdx, str.TerminateOldProgressThrd__
mov rcx, rax
call fcn.140050c00
mov qword [rsp + 0x80], 0
mov dword [rsp + 0x70], 8
lea rdi, [rbx + 8]
mov qword [rsp + 0x88], 0
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x140019cdc
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140019cd3
mov rcx, rax
call fcn.140050830
jmp 0x140019cd5
xor eax, eax
mov qword [0x1401370f0], rax
lea r9, str.ProgressHndl
mov r8, rdi
lea rdx, str.GetValueFromHKLM__s__s
mov rcx, rax
call fcn.140050c00
lea r11, [rsp + 0x88]
mov qword [rsp + 0x20], r11
mov r9d, 0x20019
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x140019d66
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
xor r8d, r8d
lea rdx, str.ProgressHndl
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140019daa
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x140019d99
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140019d90
mov rcx, rax
call fcn.140050830
jmp 0x140019d92
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, str.GetValueFromHKLM__RegOpenKeyEx_failed
mov edx, ebx
mov rcx, rax
call fcn.140050e40
mov qword [rsp + 0x30], 0
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x140019de6
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140019ddd
mov rcx, rax
call fcn.140050830
jmp 0x140019ddf
xor eax, eax
mov qword [0x1401370f0], rax
lea r9, str.ProgressHndl
mov r8, rdi
lea rdx, str.DeleteValueFromHKLM__s__s
mov rcx, rax
call fcn.140050c00
lea r11, [rsp + 0x30]
mov qword [rsp + 0x20], r11
mov r9d, 0x20006
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140019e48
lea rdx, str.ProgressHndl
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140019e8c
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x140019e7b
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140019e72
mov rcx, rax
call fcn.140050830
jmp 0x140019e74
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, str.DeleteValueFromHKLM__RegOpenKeyEx_failed
mov edx, ebx
mov rcx, rax
call fcn.140050e40
mov r8, qword [rsp + 0x80]
test r8, r8
je 0x140019efa
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x140019ed4
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140019ec3
mov rcx, rax
call fcn.140050830
jmp 0x140019ec5
xor eax, eax
mov qword [0x1401370f0], rax
mov r8, qword [rsp + 0x80]
lea rdx, str.TerminateOldProgressThrd______found_a_handle_in_the_registry__x__terminating...
mov rcx, rax
call fcn.140050c00
xor r8d, r8d
mov edx, 0x464
mov rcx, qword [rsp + 0x80]
call fcn.140072000
jmp 0x140019f3c
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x140019f2d
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140019f24
mov rcx, rax
call fcn.140050830
jmp 0x140019f26
xor eax, eax
mov qword [0x1401370f0], rax
lea rdx, str._No_old_progress_dialog_found
mov rcx, rax
call fcn.140050c00
add rsp, 0x58
pop rdi
pop rbx
ret