Function at 0x14000d914
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, reloc.iertutil.dll_Ordinal_656
mov rax, qword [0x14002e008]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov esi, edx
mov ebx, ecx
mov r13d, 2
xor ecx, ecx
mov edx, r13d
mov edi, r8d
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x14000dbf8
lea r15d, [r13 - 1]
test ebx, ebx
jne 0x14000d997
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x70], 0x11c
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x14000d997
mov al, byte [rbp + 0x8a]
sub al, r13b
cmp al, r15b
jbe 0x14000dbf2
mov rcx, qword [0x140004e18]
mov r8d, ebx
mov edx, 3
xor r14b, r14b
call fcn.14001057c
test edi, edi
jne 0x14000d9ee
mov rcx, qword [0x140004de8]
lea edx, [rdi + 3]
mov r8d, ebx
call fcn.14001057c
mov rcx, qword [0x140004e08]
lea edx, [rdi + 3]
mov r8d, ebx
call fcn.14001057c
mov rcx, qword [0x140004e20]
xor r8d, r8d
test ebx, ebx
lea edx, [rdi + 3]
sete r8b
call fcn.14001057c
mov edx, edi
mov ecx, ebx
call fcn.14000d858
test ebx, ebx
je 0x14000da1d
mov ecx, esi
call fcn.14000ca1c
mov rdi, 0xffffffff80000002
mov r9d, r15d
mov rcx, rdi
mov dword [rsp + 0x20], esi
call fcn.14000b6ac
jmp 0x14000dae7
and dword [rsp + 0x20], 0
mov rdi, 0xffffffff80000002
xor r9d, r9d
mov rcx, rdi
call fcn.14000b6ac
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov r8d, r15d
mov ecx, r13d
mov dword [rsp + 0x30], 0x19
call fcn.14000c7c4
lea rdx, [rsp + 0x30]
mov esi, 0x17
mov r9d, r15d
mov r8d, r13d
mov ecx, r13d
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x34], 6
call fcn.14000c7c4
lea rdx, [rsp + 0x30]
lea ecx, [rsi - 0x13]
mov r9d, r15d
mov r8d, r15d
mov dword [rsp + 0x30], esi
call fcn.14000c7c4
lea rdx, [rsp + 0x38]
xor r9d, r9d
movups xmm0, xmmword [0x140003bd8]
mov r8d, r15d
movdqu xmmword [rsp + 0x38], xmm0
call fcn.14000c854
lea rdx, [rsp + 0x48]
movups xmm0, xmmword [0x140003bb8]
movups xmm1, xmmword [0x140003bf8]
mov r9d, r15d
mov r8d, r13d
movdqu xmmword [rsp + 0x48], xmm0
movdqu xmmword [rsp + 0x58], xmm1
call fcn.14000c854
mov ecx, esi
call fcn.14000c8c8
lea rcx, [0x140003440]
call fcn.14000dcb8
mov r14b, r15b
call fcn.14000b604
test eax, eax
jne 0x14000db9f
mov rsi, 0xffffffff80000001
test ebx, ebx
je 0x14000db08
call fcn.14000e594
test al, al
jne 0x14000db18
and dword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, rsi
call fcn.14000b6ac
call fcn.14000d3fc
lea rdx, [0x140003250]
test ebx, ebx
je 0x14000db8d
lea rax, [rsp + 0x30]
mov r9d, r15d
xor r8d, r8d
mov rcx, rdi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000db56
lea rdx, [rsp + 0x30]
lea rcx, [0x140003120]
call fcn.14000b7dc
lea rax, [rsp + 0x30]
lea rdx, [0x140003250]
mov r9d, r15d
xor r8d, r8d
mov rcx, rdi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000db96
lea rdx, [rsp + 0x30]
lea rcx, [0x140002f58]
call fcn.14000b7dc
jmp 0x14000db96
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
xor ecx, ecx
call fcn.14000b5bc
jmp 0x14000dbb8
xor r8d, r8d
lea r9, [0x140002e50]
mov ecx, 0xffff
lea edx, [r8 + 0x1a]
call qword [sym.imp.USER32.dll_PostMessageW]
test r14b, r14b
je 0x14000dbd0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x8000000
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
lea rcx, [rsp + 0x70]
mov r8d, 0x26
call fcn.14000eec4
test al, al
je 0x14000dbf2
test ebx, ebx
jne 0x14000dbf2
lea rcx, [rsp + 0x70]
call fcn.14000dcb8
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.14002ad70
lea r11, [rsp + reloc.iertutil.dll_Ordinal_656]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret