Function at 0x14006e8b0
Capabilities:
Delete registry key
Delete registry value

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov rsi, rcx
lea r14, vtable.StringStorage.0
mov qword [rsp + 0x20], r14
mov ecx, 8
call fcn.1400797fc
xor r13d, r13d
test rax, rax
je 0x14006e906
lea rcx, [rsp + 0x28]
mov qword [rax], rcx
jmp 0x14006e909
mov rax, r13
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x1400d1b20]
repne scasw ax, word [rdi]
not rcx
mov rdx, rcx
xor r8d, r8d
lea rcx, [rsp + 0x28]
call fcn.14002bfc0
mov rdx, qword [rsp + 0x48]
mov rdi, rdx
mov rbx, qword [rsp + 0x40]
sub rdi, rbx
sar rdi, 1
add rdi, rdi
cmp rbx, rdx
jbe 0x14006e960
call fcn.1400796a8
mov rax, qword [rsp + 0x28]
test rax, rax
jne 0x14006e974
call fcn.1400796a8
mov rdx, r13
jmp 0x14006e977
mov rdx, qword [rax]
cmp rbx, qword [rdx + 0x20]
jb 0x14006e982
call fcn.1400796a8
mov r8, rdi
lea rdx, [0x1400d1b20]
mov rcx, rbx
call fcn.14007ad70
nop
mov qword [rsp + 0x58], r14
mov ecx, 8
call fcn.1400797fc
test rax, rax
je 0x14006e9b3
lea rcx, [rsp + 0x60]
mov qword [rax], rcx
jmp 0x14006e9b6
mov rax, r13
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x88], r13
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x1400d1b20]
repne scasw ax, word [rdi]
not rcx
mov rdx, rcx
xor r8d, r8d
lea rcx, [rsp + 0x60]
call fcn.14002bfc0
mov rdx, qword [rsp + 0x80]
mov rdi, rdx
mov rbx, qword [rsp + 0x78]
sub rdi, rbx
sar rdi, 1
add rdi, rdi
cmp rbx, rdx
jbe 0x14006ea16
call fcn.1400796a8
mov rax, qword [rsp + 0x60]
test rax, rax
jne 0x14006ea2a
call fcn.1400796a8
mov rdx, r13
jmp 0x14006ea2d
mov rdx, qword [rax]
cmp rbx, qword [rdx + 0x20]
jb 0x14006ea38
call fcn.1400796a8
mov r8, rdi
lea rdx, [0x1400d1b20]
mov rcx, rbx
call fcn.14007ad70
nop
mov rbp, qword [rsi + 0x38]
mov r8, rbp
lea rdx, [0x1400d3e88]
lea rcx, [rsp + 0x20]
call fcn.14002ecb0
mov rcx, qword [rsi + 0x28]
sub rcx, qword [rsi + 0x20]
movabs r15, 0x4924924924924925
mov rax, r15
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbp, rdx
jae 0x14006ec67
mov rdx, rbp
lea rcx, [rsi + 8]
call fcn.14006f4e0
mov rdi, rax
mov rbx, qword [rax + 0x20]
cmp rbx, qword [rax + 0x28]
jbe 0x14006eab0
call fcn.1400796a8
mov rdx, qword [rdi + 8]
test rdx, rdx
jne 0x14006eac3
call fcn.1400796a8
mov rdx, r13
jmp 0x14006eac6
mov rdx, qword [rdx]
cmp rbx, qword [rdx + 0x20]
jb 0x14006ead1
call fcn.1400796a8
mov rdx, rbx
mov rcx, rsi
call fcn.14006f280
mov rdi, qword [rsp + 0x40]
cmp rdi, qword [rsp + 0x48]
jbe 0x14006eaed
call fcn.1400796a8
mov rax, qword [rsp + 0x28]
test rax, rax
jne 0x14006eb01
call fcn.1400796a8
mov r11, r13
jmp 0x14006eb04
mov r11, qword [rax]
cmp rdi, qword [r11 + 0x20]
jb 0x14006eb0f
call fcn.1400796a8
lea r8, [rsp + 0x58]
mov rdx, rdi
mov rcx, qword [rsi + 0x40]
call fcn.140040c80
test al, al
je 0x14006ebfb
mov rdi, qword [rsp + 0x78]
cmp rdi, qword [rsp + 0x80]
jbe 0x14006eb3c
call fcn.1400796a8
mov rax, qword [rsp + 0x60]
test rax, rax
jne 0x14006eb50
call fcn.1400796a8
mov r11, r13
jmp 0x14006eb53
mov r11, qword [rax]
cmp rdi, qword [r11 + 0x20]
jb 0x14006eb5e
call fcn.1400796a8
mov rax, qword [rsi + 0x40]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14006eb74
mov rdx, rdi
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdi, qword [rsp + 0x40]
cmp rdi, qword [rsp + 0x48]
jbe 0x14006eb85
call fcn.1400796a8
mov rax, qword [rsp + 0x28]
test rax, rax
jne 0x14006eb99
call fcn.1400796a8
mov r11, r13
jmp 0x14006eb9c
mov r11, qword [rax]
cmp rdi, qword [r11 + 0x20]
jb 0x14006eba7
call fcn.1400796a8
mov rax, qword [rsi + 0x40]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14006ebbd
mov rdx, rdi
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
inc rbp
mov r8, rbp
lea rdx, [0x1400d3e88]
lea rcx, [rsp + 0x20]
call fcn.14002ecb0
mov rcx, qword [rsi + 0x28]
sub rcx, qword [rsi + 0x20]
mov rax, r15
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbp, rdx
jb 0x14006ea92
jmp 0x14006ec67
mov rcx, rsi
call fcn.14006e3a0
nop
mov qword [rsp + 0x58], r14
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14006ec18
call fcn.140078e60
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x88], r13
mov rcx, qword [rsp + 0x60]
call fcn.140078e60
nop
mov qword [rsp + 0x20], r14
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14006ec4c
call fcn.140078e60
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov rcx, qword [rsp + 0x28]
call fcn.140078e60
jmp 0x14006ecc8
mov qword [rsp + 0x58], r14
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14006ec7b
call fcn.140078e60
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x88], r13
mov rcx, qword [rsp + 0x60]
call fcn.140078e60
nop
mov qword [rsp + 0x20], r14
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14006ecaf
call fcn.140078e60
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov rcx, qword [rsp + 0x28]
call fcn.140078e60
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret