Function at 0x1018b3c
Capabilities:
Delete registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x70
mov qword [rsp + 0x30], 0xfffffffffffffffe
xor r13d, r13d
mov dword [rax + 8], r13d
mov rbx, qword [0x01046b88]
lea rcx, [0x0100af20]
call fcn.01011d38
mov rdx, qword [rbx + 0x130]
cmp rdx, r13
je 0x1018b91
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rbx + 0x130], r13
mov ebp, dword [0x01046b80]
mov r12d, dword [0x01046b84]
mov edi, dword [0x01046db4]
cmp ebp, 9
je 0x1018dcd
lea r14, [0x0100d8d8]
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x40], r13
cmp dword [rbx + 0x38], r13d
je 0x1018bf6
mov dword [rsp + 0x28], 0xf003f
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x0100af50]
mov rsi, 0xffffffff80000002
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.01020e9c
jmp 0x1018c57
mov rsi, 0xffffffff80000002
cmp dword [rsp + 0x48], r13d
jne 0x1018c29
mov r9d, 0x20019
lea r8, [0x0100af50]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.01020f34
cmp dword [rsp + 0x48], r13d
je 0x1018dbe
lea rcx, [rsp + 0x38]
call fcn.01020f9c
mov r11d, dword [rsp + 0x48]
cmp r11d, r13d
jne 0x1018c65
mov r9d, 0xf003f
lea r8, [0x0100af50]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.01020f34
mov r11d, dword [rsp + 0x48]
cmp r11d, r13d
je 0x1018dbe
cmp dword [rbx + 0x38], r13d
je 0x1018cb4
cmp r11d, r13d
je 0x1018cb4
lea rdx, [0x0100af90]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp dword [rsp + 0x48], r13d
je 0x1018cb4
lea rdx, [0x0100afb0]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp dword [rsp + 0x48], r13d
je 0x1018cb4
lea rdx, [0x0100afd8]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea rcx, [rsp + 0x38]
call fcn.01020f9c
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [0x0100aff0]
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.01020df8
nop
cmp dword [rsp + 0x60], r13d
je 0x1018dae
mov r8d, ebp
lea rdx, [0x0100b030]
lea rcx, [rsp + 0x50]
call fcn.01021428
mov r11d, dword [rsp + 0x60]
cmp r11d, r13d
je 0x1018d46
mov r8d, r12d
lea rdx, [0x0100b048]
lea rcx, [rsp + 0x50]
call fcn.01021428
mov r11d, dword [rsp + 0x60]
cmp r11d, r13d
je 0x1018d46
mov r8d, edi
lea rdx, [0x0100b060]
lea rcx, [rsp + 0x50]
call fcn.01021428
mov r11d, dword [rsp + 0x60]
cmp edi, r13d
je 0x1018d86
mov edx, edi
lea rcx, [rsp + 0xb8]
call fcn.0102043c
nop
cmp dword [rsp + 0x60], r13d
je 0x1018d77
mov r8, qword [rax]
lea rdx, [0x0100b078]
lea rcx, [rsp + 0x50]
call fcn.01021368
nop
lea rcx, [rsp + 0xb8]
call fcn.0100f940
jmp 0x1018da3
cmp r11d, r13d
je 0x1018da3
lea r8, [0x010053c0]
lea rdx, [0x0100b078]
lea rcx, [rsp + 0x50]
call fcn.01021368
lea rcx, [rsp + 0x50]
call fcn.01020f9c
nop
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x50]
call fcn.01020f9c
nop
mov qword [rsp + 0x38], r14
lea rcx, [rsp + 0x38]
call fcn.01020f9c
cmp edi, r13d
je 0x1018df3
mov edx, edi
lea rcx, [rsp + 0xc0]
call fcn.0102043c
nop
mov ebx, 1
mov dword [rsp + 0xb0], ebx
mov rax, qword [rax]
jmp 0x1018e17
lea rdx, [0x01005540]
lea rcx, [rsp + 0xb8]
call fcn.0100f9f8
nop
mov ebx, 2
mov dword [rsp + 0xb0], ebx
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9d, edi
mov r8d, r12d
mov edx, ebp
lea rcx, [0x0100b090]
call fcn.01011d38
nop
test bl, 2
je 0x1018e4e
and ebx, 0xfffffffd
mov dword [rsp + 0xb0], ebx
lea rcx, [rsp + 0xb8]
call fcn.0100f940
nop
test bl, 1
je 0x1018e60
lea rcx, [rsp + 0xc0]
call fcn.0100f940
cmp dword [0x01046dc4], r13d
je 0x1018e8d
mov rcx, qword [0x01046dd0]
cmp rcx, r13
je 0x1018e86
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [0x01046dd0], r13
mov dword [0x01046dc4], r13d
add rsp, 0x70
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret