Function at 0x1019b3c
Capabilities:
Delete registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x70
mov qword [rsp + 0x30], 0xfffffffffffffffe
xor r13d, r13d
mov dword [rax + 8], r13d
mov rbx, qword [0x01047b88]
lea rcx, [0x0100bf20]
call fcn.01012d38
mov rdx, qword [rbx + 0x130]
cmp rdx, r13
je 0x1019b91
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rbx + 0x130], r13
mov ebp, dword [0x01047b80]
mov r12d, dword [0x01047b84]
mov edi, dword [0x01047db4]
cmp ebp, 9
je 0x1019dcd
lea r14, [0x0100e8d8]
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x40], r13
cmp dword [rbx + 0x38], r13d
je 0x1019bf6
mov dword [rsp + 0x28], 0xf003f
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x0100bf50]
mov rsi, 0xffffffff80000002
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.01021e9c
jmp 0x1019c57
mov rsi, 0xffffffff80000002
cmp dword [rsp + 0x48], r13d
jne 0x1019c29
mov r9d, 0x20019
lea r8, [0x0100bf50]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.01021f34
cmp dword [rsp + 0x48], r13d
je 0x1019dbe
lea rcx, [rsp + 0x38]
call fcn.01021f9c
mov r11d, dword [rsp + 0x48]
cmp r11d, r13d
jne 0x1019c65
mov r9d, 0xf003f
lea r8, [0x0100bf50]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.01021f34
mov r11d, dword [rsp + 0x48]
cmp r11d, r13d
je 0x1019dbe
cmp dword [rbx + 0x38], r13d
je 0x1019cb4
cmp r11d, r13d
je 0x1019cb4
lea rdx, [0x0100bf90]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp dword [rsp + 0x48], r13d
je 0x1019cb4
lea rdx, [0x0100bfb0]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp dword [rsp + 0x48], r13d
je 0x1019cb4
lea rdx, [0x0100bfd8]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea rcx, [rsp + 0x38]
call fcn.01021f9c
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [0x0100bff0]
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.01021df8
nop
cmp dword [rsp + 0x60], r13d
je 0x1019dae
mov r8d, ebp
lea rdx, [0x0100c030]
lea rcx, [rsp + 0x50]
call fcn.01022428
mov r11d, dword [rsp + 0x60]
cmp r11d, r13d
je 0x1019d46
mov r8d, r12d
lea rdx, [0x0100c048]
lea rcx, [rsp + 0x50]
call fcn.01022428
mov r11d, dword [rsp + 0x60]
cmp r11d, r13d
je 0x1019d46
mov r8d, edi
lea rdx, [0x0100c060]
lea rcx, [rsp + 0x50]
call fcn.01022428
mov r11d, dword [rsp + 0x60]
cmp edi, r13d
je 0x1019d86
mov edx, edi
lea rcx, [rsp + 0xb8]
call fcn.0102143c
nop
cmp dword [rsp + 0x60], r13d
je 0x1019d77
mov r8, qword [rax]
lea rdx, [0x0100c078]
lea rcx, [rsp + 0x50]
call fcn.01022368
nop
lea rcx, [rsp + 0xb8]
call fcn.01010940
jmp 0x1019da3
cmp r11d, r13d
je 0x1019da3
lea r8, [0x010063c0]
lea rdx, [0x0100c078]
lea rcx, [rsp + 0x50]
call fcn.01022368
lea rcx, [rsp + 0x50]
call fcn.01021f9c
nop
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x50]
call fcn.01021f9c
nop
mov qword [rsp + 0x38], r14
lea rcx, [rsp + 0x38]
call fcn.01021f9c
cmp edi, r13d
je 0x1019df3
mov edx, edi
lea rcx, [rsp + 0xc0]
call fcn.0102143c
nop
mov ebx, 1
mov dword [rsp + 0xb0], ebx
mov rax, qword [rax]
jmp 0x1019e17
lea rdx, [0x01006540]
lea rcx, [rsp + 0xb8]
call fcn.010109f8
nop
mov ebx, 2
mov dword [rsp + 0xb0], ebx
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9d, edi
mov r8d, r12d
mov edx, ebp
lea rcx, [0x0100c090]
call fcn.01012d38
nop
test bl, 2
je 0x1019e4e
and ebx, 0xfffffffd
mov dword [rsp + 0xb0], ebx
lea rcx, [rsp + 0xb8]
call fcn.01010940
nop
test bl, 1
je 0x1019e60
lea rcx, [rsp + 0xc0]
call fcn.01010940
cmp dword [0x01047dc4], r13d
je 0x1019e8d
mov rcx, qword [0x01047dd0]
cmp rcx, r13
je 0x1019e86
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [0x01047dd0], r13
mov dword [0x01047dc4], r13d
add rsp, 0x70
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret