Function at 0x140066730
Capabilities:
Delete registry key
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2c8
movaps xmmword [rsp + 0x2b0], xmm7
movaps xmmword [rsp + 0x2a0], xmm6
mov r14, r8
mov rsi, rdx
mov rdi, rcx
mov rax, qword [0x1401e8038]
xor rax, rsp
mov qword [rsp + 0x298], rax
lea rcx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
mov edx, 0x4f
call fcn.1400f2090
test eax, eax
jg 0x1400677f5
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rcx, [rsp + 0x140]
mov qword [rcx + 0x10], rax
movaps xmm6, xmmword [0x1401bc9e0]
movaps xmmword [rcx], xmm6
call fcn.140084810
mov dword [rsp + 0x13c], 0
mov ecx, 0x40
call fcn.140125da0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xor ecx, ecx
mov qword [rax + 0x10], rcx
movups xmmword [rax + 0x18], xmm0
movups xmmword [rax + 0x28], xmm0
mov qword [rax + 0x38], rcx
mov qword [rsp + 0x130], rax
cmp rax, rsi
je 0x14006680d
cmp byte [rax + 0x17], 0
movzx r8d, byte [rsi + 0x17]
js 0x140067894
test r8b, r8b
jns 0x14006694a
mov rdx, qword [rsi]
mov r8, qword [rsi + 8]
mov rcx, rax
call fcn.14007e5f0
mov r9d, 0x3001f
or r9d, dword [rdi + 0x40]
cmp byte [rsi + 0x17], 0
mov r8, rsi
jns 0x140066823
mov r8, qword [rsi]
mov rdx, qword [rdi + 0x20]
lea rcx, [rsp + 0x140]
call fcn.140084910
cmp eax, 5
je 0x140066886
test eax, eax
jne 0x140066988
mov rcx, qword [0x140201ef8]
test rcx, rcx
jne 0x14006685c
call fcn.1400471c0
mov rcx, rax
mov qword [0x140201ef8], rax
xor eax, eax
cmp dword [rdi + 0x40], 0x200
sete al
lea r8d, [rax*8 + 4]
mov rdx, r14
mov r9d, 0x30019
call fcn.1400474b0
test al, al
jne 0x140066a08
lea rcx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
mov edx, 0x4f
call fcn.1400f2090
test eax, eax
jg 0x14006784a
mov rcx, qword [0x140201ef8]
test rcx, rcx
jne 0x1400668ba
call fcn.1400471c0
mov rcx, rax
mov qword [0x140201ef8], rax
mov rax, qword [rsp + 0x130]
add rax, 0x20
xor edx, edx
cmp dword [rdi + 0x40], 0x200
sete dl
lea r8d, [rdx*8 + 4]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], 1
mov ebx, 0x3001f
mov rdx, r14
mov r9d, 0x3001f
call fcn.140047c90
test al, al
jne 0x14006695d
mov ecx, 2
call fcn.1400f2060
test al, al
je 0x14006699a
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
lea rsi, [rsp + 0x160]
mov rcx, rsi
mov r8d, 0x41
mov r9d, 2
call fcn.140096e70
lea rcx, [rsp + 0x170]
lea rdx, str.Unable_to_obtain_sufficient_permissions_on_key
mov r8d, 0x2e
jmp 0x140066abb
mov rcx, qword [rsi + 0x10]
mov qword [rax + 0x10], rcx
movups xmm0, xmmword [rsi]
movups xmmword [rax], xmm0
jmp 0x14006680d
or ebx, dword [rdi + 0x40]
cmp byte [rsi + 0x17], 0
mov r8, rsi
jns 0x14006696c
mov r8, qword [rsi]
mov rdx, qword [rdi + 0x20]
lea rcx, [rsp + 0x140]
mov r9d, ebx
call fcn.140084910
test eax, eax
je 0x140066a08
mov ecx, 2
call fcn.1400f2060
test al, al
jne 0x140066a83
xor esi, esi
mov rdi, qword [rsp + 0x130]
mov qword [rsp + 0x130], 0
test rdi, rdi
je 0x1400669c5
mov rcx, rdi
call fcn.140067f60
mov rcx, rdi
call fcn.140125ddc
lea rcx, [rsp + 0x140]
call fcn.140084990
mov rcx, qword [rsp + 0x298]
xor rcx, rsp
call fcn.140126950
mov eax, esi
movaps xmm6, xmmword [rsp + 0x2a0]
movaps xmm7, xmmword [rsp + 0x2b0]
add rsp, 0x2c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x140]
lea r9, [rsp + 0x13c]
mov edx, reloc.WS2_32.dll_shutdown
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
test eax, eax
je 0x140066ad8
cmp eax, 0x7a
je 0x140066ad8
mov ecx, 2
call fcn.1400f2060
test al, al
je 0x14006699a
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
lea rsi, [rsp + 0x160]
mov rcx, rsi
mov r8d, 0x54
mov r9d, 2
call fcn.140096e70
lea rcx, [rsp + 0x170]
lea rdx, str.Failed_to_obtain_security_descriptor_for
mov r8d, 0x29
jmp 0x140066abb
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
lea rsi, [rsp + 0x160]
mov rcx, rsi
mov r8d, VarR8FromUI1
mov r9d, 2
call fcn.140096e70
lea rcx, [rsp + 0x170]
lea rdx, str.Failed_to_open_key
mov r8d, shutdown
call fcn.140161780
mov rcx, rax
mov rdx, r14
call fcn.140091ca0
mov rcx, rsi
call fcn.1400974b0
jmp 0x14006699a
mov rbx, qword [rsp + 0x130]
mov ecx, dword [rsp + 0x13c]
call fcn.140125e1c
mov rcx, qword [rbx + 0x18]
mov qword [rbx + 0x18], rax
test rcx, rcx
je 0x140066b0a
call fcn.140125e24
mov rax, qword [rsp + 0x130]
mov rax, qword [rax + 0x18]
mov rcx, qword [rsp + 0x140]
lea r9, [rsp + 0x13c]
mov edx, reloc.WS2_32.dll_shutdown
mov r8, rax
call qword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
test eax, eax
je 0x140066ba0
mov ecx, 2
call fcn.1400f2060
test al, al
je 0x14006699a
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
lea rsi, [rsp + 0x160]
mov rcx, rsi
mov r8d, 0x64
mov r9d, 2
call fcn.140096e70
lea rcx, [rsp + 0x170]
lea rdx, str.Failed_to_obtain_security_descriptor_for
mov r8d, 0x29
call fcn.140161780
mov rcx, rax
mov rdx, r14
call fcn.140091ca0
lea rdx, str._but_we_succeeded_earlier_
mov r8d, reloc.OLEAUT32.dll_SafeArrayCopy
mov rcx, rax
call fcn.140161780
jmp 0x140066acb
mov eax, 0xaaaaaaaa
lea rdx, [rsp + 0x12c]
mov dword [rdx], eax
lea r8, [rsp + 0x128]
mov dword [r8], eax
lea r9, [rsp + 0x124]
mov dword [r9], eax
mov rcx, qword [rsp + 0x140]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], rdx
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], 0
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
je 0x140066c53
mov ecx, 2
call fcn.1400f2060
test al, al
je 0x14006699a
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
lea rsi, [rsp + 0x160]
mov rcx, rsi
mov r8d, WSAStartup
mov r9d, 2
call fcn.140096e70
lea rcx, [rsp + 0x170]
lea rdx, str.Failed_to_obtain_key_info_for
mov r8d, 0x1e
jmp 0x140066abb
mov qword [rsp + 0x68], r14
lea rcx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
mov edx, 0x4f
call fcn.1400f2090
test eax, eax
jg 0x140067917
mov ecx, dword [rsp + 0x128]
inc ecx
mov dword [rsp + 0x128], ecx
add rcx, rcx
call fcn.140125e1c
mov r12, rax
mov ecx, dword [rsp + 0x124]
call fcn.140125e1c
mov r15, rax
cmp dword [rsp + 0x12c], 0
jle 0x140066ed1
xorps xmm7, xmm7
xor ebp, ebp
jmp 0x140066da6
mov qword [r13 + 8], r12
jmp 0x140066ce3
mov rbx, r13
test r12, r12
je 0x140066cd6
mov r8, r12
add r8, r12
mov rcx, rbx
mov rdx, r14
call fcn.140129230
mov al, byte [r13 + 0x17]
test al, al
js 0x140066cb3
mov eax, r12d
and al, 0x7f
mov byte [r13 + 0x17], al
mov word [rbx + r12*2], 0
mov ecx, dword [rsp + 0xe0]
mov rax, qword [rsp + 0x160]
mov dword [rax + 0x28], ecx
mov r13, qword [rax + 0x20]
mov qword [rax + 0x20], r15
mov rcx, qword [rsp + 0x130]
mov rdx, qword [rcx + 0x30]
cmp rdx, qword [rcx + 0x38]
jae 0x140066d3b
test rdx, rdx
je 0x140067a5c
mov r12, r14
mov qword [rsp + 0x160], 0
mov qword [rdx], rax
add rdx, 8
mov qword [rcx + 0x30], rdx
jmp 0x140066d4f
add rcx, 0x28
lea rdx, [rsp + 0x160]
call fcn.140068140
mov r12, r14
mov rbx, qword [rsp + 0x160]
mov qword [rsp + 0x160], 0
test rbx, rbx
je 0x140066d94
mov rcx, qword [rbx + 0x20]
mov qword [rbx + 0x20], 0
test rcx, rcx
je 0x140066d7e
call fcn.140125e24
cmp byte [rbx + 0x17], 0
jns 0x140066d8c
mov rcx, qword [rbx]
call fcn.140125ddc
mov rcx, rbx
call fcn.140125ddc
inc ebp
mov r15, r13
cmp ebp, dword [rsp + 0x12c]
jge 0x140066ed4
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0x124]
mov dword [rsp + 0xe0], eax
mov dword [rsp + 0xc0], 0xaaaaaaaa
mov rcx, qword [rsp + 0x140]
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov edx, ebp
mov r8, r12
lea r9, [rsp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x140066f12
mov ecx, 0x30
call fcn.140125da0
mov r13, rax
movups xmmword [rax], xmm7
xor eax, eax
mov qword [r13 + 0x10], rax
mov qword [r13 + 0x20], rax
mov qword [rsp + 0x160], r13
mov eax, dword [rsp + 0xc0]
mov dword [r13 + 0x18], eax
test r12, r12
je 0x140067a88
mov r14, r12
mov rcx, r12
call fcn.1401486d4
mov r12, rax
mov al, byte [r13 + 0x17]
test al, al
js 0x140066ea2
cmp r12, 0xa
jbe 0x140066cb9
movzx r9d, al
mov edx, 0xa
mov r8, r12
sub r8, rdx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x20], 0
mov rcx, r13
call fcn.14007da50
jmp 0x140066cea
mov rax, qword [r13 + 0x10]
mov rdx, rax
movabs rcx, 0x7fffffffffffffff
and rdx, rcx
dec rdx
cmp rdx, r12
jb 0x140066ecb
shr rax, 0x38
mov rbx, qword [r13]
jmp 0x140066cbc
mov r9, qword [r13 + 8]
jmp 0x140066e77
mov r13, r15
mov rax, qword [rdi + 0x30]
cmp rax, qword [rdi + 0x38]
jae 0x140066f2b
test rax, rax
movabs rbx, 0xaaaaaaaaaaaaaaaa
je 0x140067a5c
mov rcx, qword [rsp + 0x130]
mov qword [rsp + 0x130], 0
mov qword [rax], rcx
add rax, 8
mov qword [rdi + 0x30], rax
jmp 0x140066f46
mov ecx, 2
call fcn.1400f2060
test al, al
jne 0x140067a08
xor esi, esi
jmp 0x1400672b7
lea rcx, [rdi + 0x28]
lea rdx, [rsp + 0x130]
call fcn.140068330
movabs rbx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x110], rbx
movaps xmmword [rsp + 0x100], xmm6
cmp byte [rsi + 0x17], 0
js 0x1400678cc
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x110], rax
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x100], xmm0
movzx eax, byte [rsp + 0x117]
mov ecx, eax
and ecx, 0x7f
test al, al
mov r15, qword [rsp + 0x108]
cmovs rcx, r15
test rcx, rcx
je 0x140067002
test al, al
jns 0x1400678fe
test r15, r15
je 0x140067ab4
mov rcx, qword [rsp + 0x100]
mov rdx, r15
cmp word [rcx + rdx*2 - 2], 0x5c
je 0x140067002
test al, al
jns 0x140067970
mov rax, qword [rsp + 0x110]
movabs rcx, 0x7fffffffffffffff
and rax, rcx
dec rax
cmp r15, rax
je 0x140067991
mov rcx, qword [rsp + 0x100]
lea rax, [r15 + 1]
mov qword [rsp + 0x108], rax
mov rax, r15
mov dword [rcx + rax*2], 0x5c
mov qword [rsp + 0xf0], rbx
movaps xmmword [rsp + 0xe0], xmm6
mov rcx, qword [rsp + 0x68]
cmp byte [rcx + 0x17], 0
js 0x1400678e5
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0xe0], xmm0
mov al, byte [rsp + 0xf7]
movzx ecx, al
mov edx, ecx
and edx, 0x7f
test cl, cl
mov r14, qword [rsp + 0xe8]
mov r9, rdx
cmovs rdx, r14
test rdx, rdx
je 0x1400670e3
test al, al
jns 0x1400678b6
test r14, r14
je 0x140067ab4
mov rdx, qword [rsp + 0xe0]
mov r8, r14
cmp word [rdx + r8*2 - 2], 0x5c
je 0x1400670e3
test al, al
jns 0x1400679bc
mov rax, qword [rsp + 0xf0]
movabs rcx, 0x7fffffffffffffff
and rax, rcx
dec rax
cmp r14, rax
je 0x1400679dd
mov rdx, qword [rsp + 0xe0]
lea rax, [r14 + 1]
mov qword [rsp + 0xe8], rax
mov dword [rdx + r14*2], 0x5c
movzx eax, byte [rsp + 0xf7]
mov r14, qword [rsp + 0xe8]
mov ecx, eax
and ecx, 0x7f
mov r9, rcx
movzx ecx, byte [rsp + 0x117]
test cl, cl
mov qword [rsp + 0x80], r12
js 0x1400670fc
and ecx, 0x7f
jmp 0x140067104
mov rcx, qword [rsp + 0x108]
test al, al
cmovs r9, r14
lea r14, [rsp + 0xc0]
movsxd rax, ecx
mov qword [rsp + 0x68], rax
and cl, 0x7f
mov qword [rsp + 0x90], rcx
movsxd rax, r9d
mov qword [rsp + 0x78], rax
and r9b, 0x7f
mov qword [rsp + 0x88], r9
xorps xmm6, xmm6
lea r12, [rsp + 0xdc]
mov r15, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
jmp 0x140067162
mov rcx, qword [rsp + 0xc0]
call fcn.140125ddc
test ebx, ebx
jne 0x140067240
mov dword [rsp + 0xdc], 0x104
movaps xmmword [rsp + 0xc0], xmm6
mov qword [rsp + 0xd0], 0
mov edx, 0x104
mov rcx, r14
call fcn.140087240
mov rcx, qword [rsp + 0x140]
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
xor edx, edx
mov r8, rax
mov r9, r12
call r15
mov ebx, 5
cmp eax, 0x103
je 0x1400671d2
test eax, eax
je 0x1400672da
mov ecx, 2
call fcn.1400f2060
mov ebx, 1
test al, al
jne 0x1400671e5
cmp byte [rsp + 0xd7], 0
jns 0x14006715a
jmp 0x14006714d
mov rbp, r12
mov r12, r15
lea r15, [rsp + 0x160]
mov rcx, r15
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
mov r8d, 0xa7
mov r9d, 2
call fcn.140096e70
mov r8d, SafeArrayCopy
lea rcx, [rsp + 0x170]
lea rdx, str.Failed_to_read_a_subkey
call fcn.140161780
mov rcx, r15
mov r15, r12
mov r12, rbp
lea r14, [rsp + 0xc0]
call fcn.1400974b0
jmp 0x1400671d2
cmp ebx, 5
je 0x140067251
xor esi, esi
mov r12, qword [rsp + 0x80]
jmp 0x140067286
lea rcx, [rsp + 0x140]
call fcn.14018a970
mov r8d, dword [rdi + 0x40]
cmp byte [rsi + 0x17], 0
mov r12, qword [rsp + 0x80]
jns 0x140067273
mov rsi, qword [rsi]
mov rcx, qword [rdi + 0x20]
mov rdx, rsi
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyExW]
mov sil, 1
cmp byte [rsp + 0xf7], 0
jns 0x14006729d
mov rcx, qword [rsp + 0xe0]
call fcn.140125ddc
cmp byte [rsp + 0x117], 0
jns 0x1400672b4
mov rcx, qword [rsp + 0x100]
call fcn.140125ddc
mov r15, r13
test r15, r15
je 0x1400672c4
mov rcx, r15
call fcn.140125e24
test r12, r12
je 0x14006699c
mov rcx, r12
call fcn.140125e24
jmp 0x14006699c
mov ecx, dword [rsp + 0xdc]
mov al, byte [rsp + 0xd7]
test al, al
jns 0x140067541
mov rbp, qword [rsp + 0xc8]
mov rbx, rcx
sub rbx, rbp
ja 0x1400676a4
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rcx
lea rax, [rax + rcx*2]
mov rcx, qword [rsp + 0x68]
mov word [rax], 0
mov al, byte [rsp + 0x117]
test al, al
jns 0x140067516
mov rbp, qword [rsp + 0x108]
mov rbx, rcx
sub rbx, rbp
ja 0x1400675f3
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x108], rcx
lea rax, [rax + rcx*2]
mov rcx, qword [rsp + 0x78]
mov word [rax], 0
mov al, byte [rsp + 0xf7]
test al, al
jns 0x1400674eb
mov rbp, qword [rsp + 0xe8]
mov rbx, rcx
sub rbx, rbp
ja 0x140067563
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xe8], rcx
lea rax, [rax + rcx*2]
mov word [rax], 0
mov r8d, 0x104
lea rbx, [rsp + 0x160]
mov rcx, rbx
xor edx, edx
call fcn.1401298e0
movzx ecx, byte [rsp + 0x117]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x100]
lea rdx, [rsp + 0x100]
cmovns rcx, rdx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rax
test rax, rax
js 0x140067ae0
test rcx, rcx
jne 0x14006740a
test rax, rax
jne 0x140067b0c
lea rbp, [rsp + 0xa8]
mov rcx, rbp
lea rdx, [rsp + 0x98]
call fcn.1400e76b0
cmp byte [rsp + 0xbf], 0
jns 0x140067434
mov rbp, qword [rsp + 0xa8]
mov r8d, 0x104
mov rcx, rbx
mov rdx, rbp
call fcn.1400e98c0
cmp byte [rsp + 0xbf], 0
jns 0x14006745c
mov rcx, qword [rsp + 0xa8]
call fcn.140125ddc
mov rcx, rbx
call fcn.1400c9a70
movzx eax, byte [rsp + 0xd7]
mov r8d, eax
and r8d, 0x7f
test al, al
cmovs r8, qword [rsp + 0xc8]
mov rdx, qword [rsp + 0xc0]
cmovns rdx, r14
lea rcx, [rsp + 0x100]
call fcn.14007e160
movzx r8d, byte [rsp + 0xd7]
test r8b, r8b
js 0x1400674ae
and r8d, 0x7f
mov rdx, r14
jmp 0x1400674be
mov r8, qword [rsp + 0xc8]
mov rdx, qword [rsp + 0xc0]
lea rbx, [rsp + 0xe0]
mov rcx, rbx
call fcn.14007e160
mov rcx, rdi
lea rdx, [rsp + 0x100]
mov r8, rbx
call fcn.140066730
xor al, 1
movzx ebx, al
jmp 0x1400671d2
movzx ebp, al
mov rbx, rcx
sub rbx, rbp
ja 0x1400675e6
mov rax, qword [rsp + 0x88]
mov byte [rsp + 0xf7], al
lea rax, [rsp + 0xe0]
jmp 0x140067396
movzx ebp, al
mov rbx, rcx
sub rbx, rbp
ja 0x140067680
mov rax, qword [rsp + 0x90]
mov byte [rsp + 0x117], al
lea rax, [rsp + 0x100]
jmp 0x140067355
movzx ebp, al
mov rbx, rcx
sub rbx, rbp
ja 0x140067692
mov eax, ecx
and al, 0x7f
mov byte [rsp + 0xd7], al
mov rax, r14
jmp 0x140067314
je 0x14006739f
mov rax, qword [rsp + 0xf0]
mov rdx, rax
movabs rcx, 0x7fffffffffffffff
and rdx, rcx
dec rdx
shr rax, 0x38
mov rcx, rdx
sub rcx, rbp
cmp rcx, rbx
jb 0x14006778e
lea rcx, [rsp + 0xe0]
test al, al
jns 0x1400675ab
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0x70], rcx
lea rcx, [rcx + rbp*2]
lea r8, [rbx + rbx]
xor edx, edx
call fcn.1401298e0
add rbp, rbx
cmp byte [rsp + 0xf7], 0
jns 0x1400677e5
mov qword [rsp + 0xe8], rbp
mov rax, qword [rsp + 0x70]
lea rax, [rax + rbp*2]
jmp 0x14006739a
je 0x14006739f
mov edx, 0xa
jmp 0x140067588
mov rcx, qword [rsp + 0x78]
je 0x140067363
mov rax, qword [rsp + 0x110]
mov rdx, rax
movabs rcx, 0x7fffffffffffffff
and rdx, rcx
dec rdx
shr rax, 0x38
mov rcx, rdx
sub rcx, rbp
cmp rcx, rbx
jb 0x140067757
lea rcx, [rsp + 0x100]
test al, al
jns 0x140067640
mov rcx, qword [rsp + 0x100]
mov qword [rsp + 0x70], rcx
lea rcx, [rcx + rbp*2]
lea r8, [rbx + rbx]
xor edx, edx
call fcn.1401298e0
add rbp, rbx
cmp byte [rsp + 0x117], 0
jns 0x1400677d5
mov qword [rsp + 0x108], rbp
mov rcx, qword [rsp + 0x78]
mov rax, qword [rsp + 0x70]
lea rax, [rax + rbp*2]
jmp 0x14006735e
mov rcx, qword [rsp + 0x78]
je 0x140067363
mov edx, 0xa
jmp 0x14006761d
mov rcx, qword [rsp + 0x68]
je 0x140067322
mov edx, 0xa
jmp 0x1400676ce
mov rcx, qword [rsp + 0x68]
je 0x140067322
mov rax, qword [rsp + 0xd0]
mov rdx, rax
movabs rcx, 0x7fffffffffffffff
and rdx, rcx
dec rdx
shr rax, 0x38
mov rcx, rdx
sub rcx, rbp
cmp rcx, rbx
jb 0x140067728
mov rcx, r14
test al, al
jns 0x1400676e8
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0x70], rcx
lea rcx, [rcx + rbp*2]
lea r8, [rbx + rbx]
xor edx, edx
call fcn.1401298e0
add rbp, rbx
cmp byte [rsp + 0xd7], 0
jns 0x1400677c5
mov qword [rsp + 0xc8], rbp
mov rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x70]
lea rax, [rax + rbp*2]
jmp 0x14006731d
mov r8, rbx
sub r8, rdx
add r8, rbp
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rbp
mov rcx, r14
mov r9, rbp
call fcn.1400d68c0
mov qword [rsp + 0xc8], rbp
mov al, byte [rsp + 0xd7]
jmp 0x1400676d9
mov r8, rbx
sub r8, rdx
add r8, rbp
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rbp
lea rcx, [rsp + 0x100]
mov r9, rbp
call fcn.1400d68c0
mov qword [rsp + 0x108], rbp
mov al, byte [rsp + 0x117]
jmp 0x14006762c
mov r8, rbx
sub r8, rdx
add r8, rbp
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rbp
lea rcx, [rsp + 0xe0]
mov r9, rbp
call fcn.1400d68c0
mov qword [rsp + 0xe8], rbp
mov al, byte [rsp + 0xf7]
jmp 0x140067597
mov eax, ebp
and al, 0x7f
mov byte [rsp + 0xd7], al
jmp 0x140067715
mov eax, ebp
and al, 0x7f
mov byte [rsp + 0x117], al
jmp 0x14006766d
mov eax, ebp
and al, 0x7f
mov byte [rsp + 0xf7], al
jmp 0x1400675d8
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x26
mov r9d, 0xffffffff
call fcn.140096e70
lea rcx, [rsp + 0x170]
lea rdx, str.DeleteAndSaveRecursive_:
mov r8d, SafeArrayCopy
call fcn.140161780
mov rcx, rax
mov rdx, rsi
call fcn.140091ca0
mov rcx, rbx
call fcn.1400974b0
jmp 0x140066787
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x3a
mov r9d, 0xffffffff
call fcn.140096e70
lea rcx, [rsp + 0x170]
lea rdx, str.Insufficient_permissions_on_the_key
mov r8d, 0x23
call fcn.140161780
mov rcx, rbx
call fcn.1400974b0
jmp 0x14006689f
test r8b, r8b
js 0x1400678a2
and r8d, 0x7f
mov rdx, rsi
jmp 0x1400678a9
mov r8, qword [rsi + 8]
mov rdx, qword [rsi]
mov rcx, rax
call fcn.14007e500
jmp 0x14006680d
je 0x140067ab4
lea rdx, [rsp + 0xe0]
mov r8, rcx
jmp 0x14006707d
mov rdx, qword [rsi]
mov r8, qword [rsi + 8]
lea rcx, [rsp + 0x100]
call fcn.14007ddd0
jmp 0x140066f77
mov rdx, qword [rcx]
mov r8, qword [rcx + 8]
lea rcx, [rsp + 0xe0]
call fcn.14007ddd0
jmp 0x140067038
test rax, rax
je 0x140067ab4
lea rcx, [rsp + 0x100]
mov rdx, rax
jmp 0x140066fb3
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x75
mov r9d, 0xffffffff
call fcn.140096e70
lea rcx, [rsp + 0x170]
mov edx, dword [rsp + 0x12c]
call fcn.140025500
lea rdx, str._values
mov r8d, 7
mov rcx, rax
call fcn.140161780
mov rcx, rbx
call fcn.1400974b0
jmp 0x140066c71
cmp eax, 0xa
je 0x14006798b
lea edx, [rax + 1]
and dl, 0x7f
lea rcx, [rsp + 0x100]
mov byte [rcx + 0x17], dl
jmp 0x140066ffb
mov r15d, 0xa
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x100]
mov r8d, 1
mov rdx, r15
mov r9, r15
call fcn.1400d68c0
jmp 0x140066fe4
cmp al, 0xa
je 0x1400679d7
inc al
and al, 0x7f
lea rdx, [rsp + 0xe0]
mov byte [rdx + 0x17], al
mov r14, rcx
jmp 0x1400670c3
mov r14d, 0xa
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], r14
lea rcx, [rsp + 0xe0]
mov r8d, 1
mov rdx, r14
mov r9, r14
call fcn.1400d68c0
jmp 0x1400670af
lea rdx, str.....operadesktopwindowsinstaller_transactionsdelete_reg_key_operation.cc
lea rsi, [rsp + 0x160]
mov rcx, rsi
mov r8d, 0x84
mov r9d, 2
call fcn.140096e70
lea rcx, [rsp + 0x170]
lea rdx, str.Failed_to_obtain_value_nr
mov r8d, reloc.OLEAUT32.dll_SafeArrayCopy
call fcn.140161780
mov rcx, rax
mov edx, ebp
call fcn.1400252c0
mov rcx, rsi
call fcn.1400974b0
jmp 0x140066f24
lea rax, str.null_pointer_given_to_construct_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__location___nullptr
mov r8d, 0x28
call fcn.1401623d0
lea rax, str.string::assign_received_nullptr
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_string
lea r9, str.__s___nullptr
mov r8d, 0xa57
call fcn.1401623d0
lea rax, str.string::back__:_string_is_empty
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_string
lea r9, str._empty__
mov r8d, 0x528
call fcn.1401623d0
lea rax, str.string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_string_view
lea r9, str.__len___static_cast_size_type__numeric_limits_difference_type_::max___
mov r8d, 0x13a
call fcn.1401623d0
lea rax, str.string_view::string_view__CharT___size_t_:_received_nullptr
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_string_view
lea r9, str.__len__0____s___nullptr
mov r8d, 0x13c
call fcn.1401623d0
int3