Function at 0x18001f1f4
Capabilities:
Delete registry key

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x40
xor esi, esi
mov rbx, rcx
cmp qword [rcx + 0xf0], rsi
je 0x18001f22c
mov rdx, qword [rcx + 0x20]
lea r8, [rcx + 0xe0]
xor r9d, r9d
call fcn.18001ecf4
mov rcx, qword [rbx + 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f24b
mov qword [rbx + 0x20], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.629336E3_58D6_633B_5182_576588CF702A
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp qword [rbx + 0x108], rsi
je 0x18001f288
mov rdx, qword [rbx + 0x28]
lea r8, [rbx + 0xf8]
xor r9d, r9d
mov rcx, rbx
call fcn.18001ecf4
mov rcx, qword [rbx + 0x88]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f2a7
mov qword [rbx + 0x28], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.119D263D_68FC_1942_3CA3_46B23FA652A0
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0x88]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp qword [rbx + 0x120], rsi
je 0x18001f2e4
mov rdx, qword [rbx + 0x30]
lea r8, [rbx + 0x110]
xor r9d, r9d
mov rcx, rbx
call fcn.18001ecf4
mov rcx, qword [rbx + 0x90]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f303
mov qword [rbx + 0x30], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.1DC12691_2B24_2265_435D_735D3B118A70
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0x90]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp qword [rbx + 0x138], rsi
je 0x18001f340
mov rdx, qword [rbx + 0x38]
lea r8, [rbx + 0x128]
xor r9d, r9d
mov rcx, rbx
call fcn.18001ecf4
mov rcx, qword [rbx + 0x98]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f35f
mov qword [rbx + 0x38], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.6CEE6FE1_10A2_4C33_7E7F_855A51733C77
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0x98]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x18001f3b0
mov rax, qword [rbx + 0x148]
mov rdx, qword [rbx + 0x40]
lea r8, [rbx + 0x140]
mov rax, qword [rax]
mov rcx, qword [rax + 0x18]
mov r9d, dword [rax + 0x10]
mov qword [rbp - 0x18], rcx
mov rcx, qword [rax + 0x20]
mov qword [rbp - 0x10], rcx
mov rcx, rbx
call fcn.18001ecf4
cmp qword [rbx + 0x150], rsi
jne 0x18001f37f
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f3d8
mov qword [rbx + 0x40], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.31AC34A1_2DE2_36AC_1F6E_86F43772841F
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x18001f429
mov rax, qword [rbx + 0x178]
mov rdx, qword [rbx + 0x48]
lea r8, [rbx + 0x170]
mov rax, qword [rax]
mov rcx, qword [rax + 0x18]
mov r9d, dword [rax + 0x10]
mov qword [rbp - 0x18], rcx
mov rcx, qword [rax + 0x20]
mov qword [rbp - 0x10], rcx
mov rcx, rbx
call fcn.18001ecf4
cmp qword [rbx + 0x180], rsi
jne 0x18001f3f8
mov rcx, qword [rbx + 0xb0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f451
mov qword [rbx + 0x48], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.81A03BF8_60AA_4A56_253C_449121D61CAF
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0xb0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x18001f4a2
mov rax, qword [rbx + 0x190]
mov rdx, qword [rbx + 0x50]
lea r8, [rbx + 0x188]
mov rax, qword [rax]
mov rcx, qword [rax + 0x18]
mov r9d, dword [rax + 0x10]
mov qword [rbp - 0x18], rcx
mov rcx, qword [rax + 0x20]
mov qword [rbp - 0x10], rcx
mov rcx, rbx
call fcn.18001ecf4
cmp qword [rbx + 0x198], rsi
jne 0x18001f471
mov rcx, qword [rbx + 0xb8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f4ca
mov qword [rbx + 0x50], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.8E9810C5_3014_4678_27EE_3B7A7AC346AF
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0xb8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x18001f51b
mov rax, qword [rbx + 0x160]
mov rdx, qword [rbx + 0x58]
lea r8, [rbx + 0x158]
mov rax, qword [rax]
mov rcx, qword [rax + 0x18]
mov r9d, dword [rax + 0x10]
mov qword [rbp - 0x18], rcx
mov rcx, qword [rax + 0x20]
mov qword [rbp - 0x10], rcx
mov rcx, rbx
call fcn.18001ecf4
cmp qword [rbx + 0x168], rsi
jne 0x18001f4ea
mov rcx, qword [rbx + 0xa8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f543
mov qword [rbx + 0x58], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.3CDC155D_398A_646E_1021_23047D9B4366
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0xa8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x18001f594
mov rax, qword [rbx + 0x1a8]
mov rdx, qword [rbx + 0x60]
lea r8, [rbx + 0x1a0]
mov rax, qword [rax]
mov rcx, qword [rax + 0x18]
mov r9d, dword [rax + 0x10]
mov qword [rbp - 0x18], rcx
mov rcx, qword [rax + 0x20]
mov qword [rbp - 0x10], rcx
mov rcx, rbx
call fcn.18001ecf4
cmp qword [rbx + 0x1b0], rsi
jne 0x18001f563
mov rcx, qword [rbx + 0xc0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f5bc
mov qword [rbx + 0x60], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.28E74BDA_4327_31B0_17B9_56A66A818C1D
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0xc0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp qword [rbx + 0x1c8], rsi
je 0x18001f5f9
mov rdx, qword [rbx + 0x68]
lea r8, [rbx + 0x1b8]
xor r9d, r9d
mov rcx, rbx
call fcn.18001ecf4
mov rcx, qword [rbx + 0xc8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f618
mov qword [rbx + 0x68], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.56594FEA_5774_746D_4496_6361266C40D0
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0xc8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp qword [rbx + 0x1e0], rsi
je 0x18001f655
mov rdx, qword [rbx + 0x70]
lea r8, [rbx + 0x1d0]
xor r9d, r9d
mov rcx, rbx
call fcn.18001ecf4
mov rcx, qword [rbx + 0xd0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f674
mov qword [rbx + 0x70], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.4A3130BD_2608_730F_31A7_86D16CE66100
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0xd0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp qword [rbx + 0x1f8], rsi
je 0x18001f6b1
mov rdx, qword [rbx + 0x78]
lea r8, [rbx + 0x1e8]
xor r9d, r9d
mov rcx, rbx
call fcn.18001ecf4
mov rcx, qword [rbx + 0xd8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f6d0
mov qword [rbx + 0x78], rsi
mov rcx, qword [rbx + 0x18]
lea rdx, str.81A03BF8_60AA_4A56_253C_449121D61CAF
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rcx, qword [rbx + 0xd8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rbx + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x18001f700
mov qword [rbx + 0x18], rsi
mov rdx, qword [rbx + 0x10]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
test eax, eax
sete al
add rsp, 0x40
pop rbp
ret