Function at 0x140080170
Capabilities:
Delete registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x140144038]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x30], eax
lea rax, str.Telemetry_Thread_Id:_d
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x81
lea r9, str.Telemetry::Process
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibutilsTelemetry.cpp
mov edx, 4
mov rcx, qword [0x14014a4e8]
call fcn.1400823a0
lea rcx, str.true
lea rax, str.false
cmp byte [rdi + 0xe8], 0
cmovne rax, rcx
mov qword [rsp + 0x30], rax
lea rax, str.Telemetry_Global_Server:_s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x82
lea r9, str.Telemetry::Process
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibutilsTelemetry.cpp
mov edx, 4
mov rcx, qword [0x14014a4e8]
call fcn.1400823a0
lea rax, str.dc.applicationinsights.azure.com
lea rdx, str.dc.applicationinsights.azure.cn
cmp byte [rdi + 0xe8], 0
cmovne rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x28], xmm1
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x140080262
lea rcx, [rbp + 0x18]
call fcn.1400049c0
nop
lea rax, str.066b3572_6927_4afd_86e4_008726fb9f24
lea rdx, str.9b9d4f82_ca80_c63d_9125_922d69161c3e
cmp byte [rdi + 0xe8], 0
cmovne rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400802b0
lea rcx, [rbp - 8]
call fcn.1400049c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movups xmmword [rbp - 0x18], xmm0
lea r8, [rbp - 8]
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 0x28]
call fcn.1400940e0
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0x20
lea rcx, [rbp - 0x80]
call fcn.140003de0
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140094df0
test al, al
je 0x140080390
lea rdx, str.DisableTracking
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
je 0x140080386
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, reloc.WS2_32.dll_gethostbyname
lea rdx, str.ERROR:_Failed_to_remove_reg_key_for_disable_tracking
lea rcx, [rsp + 0x40]
call fcn.1400049c0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140080386
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140080381
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140080734
call fcn.1400a2410
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
lea rcx, [rdi + 0x18]
mov qword [rbp - 0x58], rcx
mov byte [rbp - 0x50], 0
call fcn.1400a19b0
test eax, eax
jne 0x14008073a
mov byte [rbp - 0x50], 1
xor r13d, r13d
nop word [rax + rax]
lea rcx, [rdi + 0x90]
call fcn.1400a1a84
mov rdx, qword [rbp - 0x58]
lea rcx, [rdi + 0x90]
call fcn.1400a1a9c
cmp qword [rdi + 0x88], 0
je 0x140080620
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov rcx, qword [rdi + 0x78]
dec rcx
and rcx, qword [rdi + 0x80]
mov rax, qword [rdi + 0x70]
mov rsi, qword [rax + rcx*8]
mov rax, qword [rsi + 8]
test rax, rax
je 0x14008041a
lock inc dword [rax + 8]
mov r14, qword [rsi]
mov qword [rbp - 0x38], r14
mov rsi, qword [rsi + 8]
mov qword [rbp - 0x30], rsi
mov rbx, qword [rdi + 0x78]
dec rbx
and rbx, qword [rdi + 0x80]
mov rax, qword [rdi + 0x70]
mov rbx, qword [rax + rbx*8]
mov rbx, qword [rbx + 8]
test rbx, rbx
je 0x14008047f
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140080477
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140080477
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r14, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x30]
sub qword [rdi + 0x88], 1
jne 0x140080492
mov qword [rdi + 0x80], r13
jmp 0x140080499
inc qword [rdi + 0x80]
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x140080756
call fcn.1400a19d4
mov byte [rbp - 0x50], 0
lea r8, [r14 + 8]
cmp qword [r14 + 0x20], 8
jb 0x1400804be
mov r8, qword [r14 + 8]
mov edx, dword [r14]
lea rcx, str.Get_Telemetry:___d__s
call fcn.140084a70
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.14007f7c0
nop
cmp qword [rax + 0x18], 8
jb 0x1400804e5
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x96
lea r9, str.Telemetry::Process
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibutilsTelemetry.cpp
mov edx, 4
mov rcx, qword [0x14014a4e8]
call fcn.1400823a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140080554
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008054f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140080748
call fcn.1400a2410
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], r13
mov ecx, 0x48
call fcn.1400a2514
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x48], rax
lea r9, [rbp - 0x48]
lea r8, [r14 + 0x28]
lea rdx, [r14 + 8]
lea rcx, [rbp - 0x28]
call fcn.1400943e0
nop
mov r8, qword [rbp - 0x48]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x48]
call fcn.1400947c0
mov edx, 0x48
mov rcx, qword [rbp - 0x48]
call fcn.1400a2410
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x140080756
call fcn.1400a19b0
test eax, eax
jne 0x14008074e
mov byte [rbp - 0x50], 1
test rsi, rsi
je 0x140080612
mov eax, 0xffffffff
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x140080612
mov rbx, qword [rbp - 0x30]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140080612
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp qword [rdi + 0x88], 0
jne 0x1400803f0
movzx eax, byte [rdi + 0x10]
test al, al
je 0x1400803c0
mov rcx, qword [rbp - 0x58]
call fcn.1400a19d4
nop
lea rax, vtable.ApplicationInsights::core::TelemetryClient.0
mov qword [rbp - 0x28], rax
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x140080662
call fcn.1400967b0
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x140080662
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140080675
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x140080684
call fcn.1400946f0
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x1400806c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400806bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140080742
call fcn.1400a2410
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 8
jb 0x140080701
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400806fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008072e
call fcn.1400a2410
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1400a23f0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400a92b0
nop
call fcn.1400a92b0
nop
mov ecx, eax
call fcn.1400a16a4
nop
call fcn.1400a92b0
nop
call fcn.1400a92b0
int3
mov ecx, eax
call fcn.1400a16a4
int3
mov ecx, 1
call fcn.14007f5e0
int3