Function at 0x1016bc8
Capabilities:
Delete registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x70
mov qword [rsp + 0x30], 0xfffffffffffffffe
xor r13d, r13d
mov dword [rax + 8], r13d
mov rbx, qword [0x01044b88]
lea rcx, [0x01008f40]
call fcn.0100fdd0
mov rdx, qword [rbx + 0x130]
cmp rdx, r13
je 0x1016c1d
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rbx + 0x130], r13
mov ebp, dword [0x01044b80]
mov r12d, dword [0x01044b84]
mov edi, dword [0x01044db4]
cmp ebp, 9
je 0x1016e59
lea r14, [0x0100b9c0]
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x40], r13
cmp dword [rbx + 0x38], r13d
je 0x1016c82
mov dword [rsp + 0x28], 0xf003f
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x01008f70]
mov rsi, 0xffffffff80000002
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.0101fa88
jmp 0x1016ce3
mov rsi, 0xffffffff80000002
cmp dword [rsp + 0x48], r13d
jne 0x1016cb5
mov r9d, 0x20019
lea r8, [0x01008f70]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.0101fb20
cmp dword [rsp + 0x48], r13d
je 0x1016e4a
lea rcx, [rsp + 0x38]
call fcn.0101fb88
mov r11d, dword [rsp + 0x48]
cmp r11d, r13d
jne 0x1016cf1
mov r9d, 0xf003f
lea r8, [0x01008f70]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.0101fb20
mov r11d, dword [rsp + 0x48]
cmp r11d, r13d
je 0x1016e4a
cmp dword [rbx + 0x38], r13d
je 0x1016d40
cmp r11d, r13d
je 0x1016d40
lea rdx, [0x01008fb0]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp dword [rsp + 0x48], r13d
je 0x1016d40
lea rdx, [0x01008fd0]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
cmp dword [rsp + 0x48], r13d
je 0x1016d40
lea rdx, [0x01008ff8]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea rcx, [rsp + 0x38]
call fcn.0101fb88
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [0x01009010]
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.0101f9e4
nop
cmp dword [rsp + 0x60], r13d
je 0x1016e3a
mov r8d, ebp
lea rdx, [0x01009050]
lea rcx, [rsp + 0x50]
call fcn.01020014
mov r11d, dword [rsp + 0x60]
cmp r11d, r13d
je 0x1016dd2
mov r8d, r12d
lea rdx, [0x01009068]
lea rcx, [rsp + 0x50]
call fcn.01020014
mov r11d, dword [rsp + 0x60]
cmp r11d, r13d
je 0x1016dd2
mov r8d, edi
lea rdx, [0x01009080]
lea rcx, [rsp + 0x50]
call fcn.01020014
mov r11d, dword [rsp + 0x60]
cmp edi, r13d
je 0x1016e12
mov edx, edi
lea rcx, [rsp + 0xb8]
call fcn.0101f578
nop
cmp dword [rsp + 0x60], r13d
je 0x1016e03
mov r8, qword [rax]
lea rdx, [0x01009098]
lea rcx, [rsp + 0x50]
call fcn.0101ff54
nop
lea rcx, [rsp + 0xb8]
call fcn.0100d9e0
jmp 0x1016e2f
cmp r11d, r13d
je 0x1016e2f
lea r8, [0x010033f0]
lea rdx, [0x01009098]
lea rcx, [rsp + 0x50]
call fcn.0101ff54
lea rcx, [rsp + 0x50]
call fcn.0101fb88
nop
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x50]
call fcn.0101fb88
nop
mov qword [rsp + 0x38], r14
lea rcx, [rsp + 0x38]
call fcn.0101fb88
cmp edi, r13d
je 0x1016e7f
mov edx, edi
lea rcx, [rsp + 0xc0]
call fcn.0101f578
nop
mov ebx, 1
mov dword [rsp + 0xb0], ebx
mov rax, qword [rax]
jmp 0x1016ea3
lea rdx, [0x01003570]
lea rcx, [rsp + 0xb8]
call fcn.0100da98
nop
mov ebx, 2
mov dword [rsp + 0xb0], ebx
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9d, edi
mov r8d, r12d
mov edx, ebp
lea rcx, [0x010090b0]
call fcn.0100fdd0
nop
test bl, 2
je 0x1016eda
and ebx, 0xfffffffd
mov dword [rsp + 0xb0], ebx
lea rcx, [rsp + 0xb8]
call fcn.0100d9e0
nop
test bl, 1
je 0x1016eec
lea rcx, [rsp + 0xc0]
call fcn.0100d9e0
cmp dword [0x01044dc4], r13d
je 0x1016f19
mov rcx, qword [0x01044dd0]
cmp rcx, r13
je 0x1016f12
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [0x01044dd0], r13
mov dword [0x01044dc4], r13d
add rsp, 0x70
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret