Function at 0x14007a590
Capabilities:
Delete registry key
Get installed programs
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f0]
sub rsp, 0x2f0
mov rax, qword [0x14057b900]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov r13, rdx
xor r15b, r15b
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor ebx, ebx
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
lea r8d, [rbx + 0x34]
lea rdx, str.SOFTWAREMICROSOFTWINDOWSCURRENTVERSIONUNINSTALL_
lea rcx, [rbp - 0x50]
call fcn.14001fb40
nop
lea rdi, [r13 + 8]
mov rsi, qword [rdi + 0x10]
mov r9, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14007a609
mov r9, qword [rdi]
mov r14, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x14007a64f
lea rax, [rsi + r14]
mov qword [rbp - 0x40], rax
lea rbx, [rbp - 0x50]
cmp rcx, 7
cmova rbx, qword [rbp - 0x50]
lea rcx, [rbx + r14*2]
lea r8, [rsi + rsi]
mov rdx, r9
call fcn.1403ebbf0
lea rax, [rsi + r14]
xor ecx, ecx
mov word [rbx + rax*2], cx
xor ebx, ebx
jmp 0x14007a666
mov qword [rsp + 0x20], rsi
movzx r8d, byte [rsp + 0x40]
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.14001da20
mov qword [rsp + 0x68], rbx
mov r12d, 0x100
mov r9d, r12d
mov r14d, 0x200
cmp byte [r13 + 0x88], 0
cmovne r9d, r14d
or r9d, 0x20019
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 7
cmova rdx, qword [rbp - 0x50]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
test eax, eax
jne 0x14007ae3c
mov r8d, r14d
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.1403ec370
mov dword [rbp - 0x30], r14d
mov dword [rbp - 0x2c], ebx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x2c]
mov qword [rsp + 0x20], rax
lea r9d, [rsi + 2]
lea r8, str.UninstallString
xor edx, edx
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov edi, eax
test eax, eax
jne 0x14007ad36
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
lea rax, [rbp - 0x20]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14007a730
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x70]
call fcn.14001fb40
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp - 0x20]
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14007a760
mov r8, rbx
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x70]
call fcn.14001fb40
nop
lea rdi, [rbp - 0x70]
mov r14, qword [rbp - 0x70]
mov r15, qword [rbp - 0x58]
cmp r15, 7
cmova rdi, r14
lea rax, [rbp - 0x70]
cmova rax, r14
mov r11, qword [rbp - 0x60]
lea rsi, [rax + r11*2]
lea rbx, [rbp - 0x70]
cmova rbx, r14
cmp rbx, rsi
je 0x14007a7d1
sub rdi, rbx
nop
movzx ecx, word [rbx]
call fcn.140171000
mov word [rdi + rbx], ax
add rbx, 2
cmp rbx, rsi
jne 0x14007a7b0
mov r15, qword [rbp - 0x58]
mov r11, qword [rbp - 0x60]
mov r14, qword [rbp - 0x70]
lea r10, [rbp - 0x70]
cmp r15, 7
cmova r10, r14
xor esi, esi
cmp r11, 7
jb 0x14007a8d3
lea rbx, [r11 - 6]
lea rbx, [r10 + rbx*2]
mov rcx, r10
lea rdi, str.msiexec
nop dword [rax + rax]
mov rax, rbx
sub rax, rcx
sar rax, 1
mov rdx, rsi
je 0x14007a82a
cmp word [rcx], 0x6d
je 0x14007a827
cmp rax, 1
je 0x14007a82a
dec rax
add rcx, 2
cmp word [rcx], 0x6d
jne 0x14007a814
mov rdx, rcx
mov rcx, rdx
test rdx, rdx
je 0x14007a8d3
mov r8d, 7
mov rdx, rdi
mov r9, rcx
sub r9, rdi
movzx eax, word [r9 + rdx]
cmp ax, word [rdx]
jne 0x14007a8b0
add rdx, 2
sub r8, 1
jne 0x14007a845
sub rcx, r10
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je 0x14007a8d3
mov rdi, qword [rbp - 0x80]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
sub rax, rdi
cmp rax, 0x12
jb 0x14007a8b9
lea rax, [rdi + 0x12]
mov qword [rbp - 0x80], rax
lea rbx, [rsp + 0x70]
cmp rcx, 7
cmova rbx, qword [rsp + 0x70]
lea rcx, [rbx + rdi*2]
mov r8d, 0x24
lea rdx, str.__quiet__norestart
call fcn.1403ebbf0
mov word [rbx + rdi*2 + 0x24], si
jmp 0x14007aa3d
add rcx, 2
jmp 0x14007a800
mov qword [rsp + 0x20], 0x12
lea r9, str.__quiet__norestart
mov edx, 0x12
jmp 0x14007aa2d
lea r10, [rbp - 0x70]
cmp r15, 7
cmova r10, r14
cmp r11, 9
jb 0x14007a9d0
add r11, 0xfffffffffffffff8
lea r11, [r10 + r11*2]
mov rcx, r10
lea rbx, str.mbuns.exe
nop dword [rax + rax]
mov rax, r11
sub rax, rcx
sar rax, 1
mov rdx, rsi
je 0x14007a92a
cmp word [rcx], 0x6d
je 0x14007a927
cmp rax, 1
je 0x14007a92a
dec rax
add rcx, 2
cmp word [rcx], 0x6d
jne 0x14007a914
mov rdx, rcx
mov rcx, rdx
test rdx, rdx
je 0x14007a9d0
mov r8d, 9
mov rdx, rbx
mov r9, rcx
sub r9, rbx
movzx eax, word [r9 + rdx]
cmp ax, word [rdx]
jne 0x14007a9b0
add rdx, 2
sub r8, 1
jne 0x14007a945
sub rcx, r10
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je 0x14007a9d0
mov rdi, qword [rbp - 0x80]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
sub rax, rdi
cmp rax, 0x17
jb 0x14007a9b9
lea rax, [rdi + 0x17]
mov qword [rbp - 0x80], rax
lea rbx, [rsp + 0x70]
cmp rcx, 7
cmova rbx, qword [rsp + 0x70]
lea rcx, [rbx + rdi*2]
mov r8d, 0x2e
lea rdx, str.__norestart__verysilent
call fcn.1403ebbf0
mov word [rbx + rdi*2 + 0x2e], si
jmp 0x14007aa3d
add rcx, 2
jmp 0x14007a900
mov qword [rsp + 0x20], 0x17
lea r9, str.__norestart__verysilent
mov edx, 0x17
jmp 0x14007aa2d
mov rdi, qword [rbp - 0x80]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
sub rax, rdi
cmp rax, 0x1c
jb 0x14007aa18
lea rax, [rdi + 0x1c]
mov qword [rbp - 0x80], rax
lea rbx, [rsp + 0x70]
cmp rcx, 7
cmova rbx, qword [rsp + 0x70]
lea rcx, [rbx + rdi*2]
mov r8d, 0x38
lea rdx, str.__VERYSILENT__NORESTART__LOG
call fcn.1403ebbf0
mov word [rbx + rdi*2 + 0x38], si
jmp 0x14007aa3d
mov qword [rsp + 0x20], 0x1c
lea r9, str.__VERYSILENT__NORESTART__LOG
mov edx, 0x1c
movzx r8d, byte [rsp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14001da20
lea rcx, [rsp + 0x48]
call fcn.140067d40
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x14007aa56
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x140594d50]
call fcn.14001df00
lea rdx, str.D:JenkinsworkspaceN_SUCommon_VS2022_srcSUCommonInstalledProducts.cpp
mov rcx, rax
call fcn.140021910
mov rcx, rax
lea rdx, [0x1404df780]
call fcn.140021910
lea rbx, [r13 + 0x28]
mov edx, 0x38d
mov rcx, rax
call fcn.140020fa0
mov rcx, rax
lea rdx, str.:_Uninstalling
call fcn.140021910
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 7
jbe 0x14007aab1
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14001df00
mov rcx, rax
call fcn.14001d5c0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14007ab07
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007ab02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b0f6
call fcn.14014f510
mov dword [rsp + 0x44], esi
lea rdx, [rsp + 0x44]
lea rcx, [rsp + 0x70]
call fcn.140067e00
lea rcx, [rsp + 0x48]
test al, al
je 0x14007abe3
call fcn.140067d40
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x14007ab3b
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x140594d50]
call fcn.14001df00
lea rdx, str.D:JenkinsworkspaceN_SUCommon_VS2022_srcSUCommonInstalledProducts.cpp
mov rcx, rax
call fcn.140021910
mov rcx, rax
lea rdx, [0x1404df780]
call fcn.140021910
mov edx, 0x391
mov rcx, rax
call fcn.140020fa0
mov rcx, rax
lea rdx, str.:_Uninstaller_ExitCode_is
call fcn.140021910
mov edx, dword [rsp + 0x44]
mov rcx, rax
call fcn.14001dd00
mov rcx, rax
call fcn.14001d5c0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14007abdb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007abd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b0fc
call fcn.14014f510
mov r15b, 1
jmp 0x14007ac8e
call fcn.140067d40
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x14007abf7
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x140594d50]
call fcn.14001df00
lea rdx, str.D:JenkinsworkspaceN_SUCommon_VS2022_srcSUCommonInstalledProducts.cpp
mov rcx, rax
call fcn.140021910
mov rcx, rax
lea rdx, [0x1404df780]
call fcn.140021910
mov edx, 0x396
mov rcx, rax
call fcn.140020fa0
mov rcx, rax
lea rdx, str.:_Error_running_uninstaller.
call fcn.140021910
mov rcx, rax
call fcn.14001d5c0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14007ac8b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007ac86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b102
call fcn.14014f510
xor r15b, r15b
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x14007acce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007acc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b108
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x70], si
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x14007ad20
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007ad1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b10e
call fcn.14014f510
mov r14d, 0x200
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14007af56
lea rcx, [rsp + 0x48]
call fcn.140067d40
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x14007ad4f
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x140594d50]
call fcn.14001df00
lea rdx, str.D:JenkinsworkspaceN_SUCommon_VS2022_srcSUCommonInstalledProducts.cpp
mov rcx, rax
call fcn.140021910
mov rcx, rax
lea rdx, [0x1404df780]
call fcn.140021910
lea rbx, [r13 + 0x28]
mov edx, 0x39a
mov rcx, rax
call fcn.140020fa0
mov rcx, rax
lea rdx, str.:_Error_getting_uninstall_command_for
call fcn.140021910
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 7
jbe 0x14007adaa
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14001df00
lea rdx, [0x1404f8ca8]
mov rcx, rax
call fcn.140021910
mov edx, edi
mov rcx, rax
call fcn.140025ce0
mov rcx, rax
lea rdx, [0x1404ef214]
call fcn.140021910
mov rcx, rax
call fcn.14001d5c0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14007ad26
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007ae27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b114
call fcn.14014f510
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14007af56
lea rcx, [rsp + 0x48]
call fcn.140067d40
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x14007ae55
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x140594d50]
call fcn.14001df00
lea rdx, str.D:JenkinsworkspaceN_SUCommon_VS2022_srcSUCommonInstalledProducts.cpp
mov rcx, rax
call fcn.140021910
mov rcx, rax
lea rdx, [0x1404df780]
call fcn.140021910
lea rbx, [r13 + 0x28]
mov edx, 0x3a0
mov rcx, rax
call fcn.140020fa0
mov rcx, rax
lea rdx, str.:_Error_opening_uninstall_key__
call fcn.140021910
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 7
jbe 0x14007aeb0
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.14001df00
lea rdx, str.__for
mov rcx, rax
call fcn.140021910
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 7
jbe 0x14007aed8
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14001df00
lea rdx, [0x1404f8ca8]
mov rcx, rax
call fcn.140021910
mov edx, esi
mov rcx, rax
call fcn.140025ce0
mov rcx, rax
lea rdx, [0x1404ef214]
call fcn.140021910
mov rcx, rax
call fcn.14001d5c0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14007af56
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007af51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b11a
call fcn.14014f510
cmp byte [r13 + 0x88], 0
cmovne r12d, r14d
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 7
cmova rdx, qword [rbp - 0x50]
xor r9d, r9d
mov r8d, r12d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyExW]
mov edi, eax
test eax, eax
je 0x14007b080
lea rcx, [rsp + 0x48]
call fcn.140067d40
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x14007afa6
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x140594d50]
call fcn.14001df00
lea rdx, str.D:JenkinsworkspaceN_SUCommon_VS2022_srcSUCommonInstalledProducts.cpp
mov rcx, rax
call fcn.140021910
mov rcx, rax
lea rdx, [0x1404df780]
call fcn.140021910
lea rbx, [r13 + 0x28]
mov edx, 0x3a5
mov rcx, rax
call fcn.140020fa0
mov rcx, rax
lea rdx, str.:_Error_getting_uninstall_command_for
call fcn.140021910
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 7
jbe 0x14007b001
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14001df00
lea rdx, [0x1404f8ca8]
mov rcx, rax
call fcn.140021910
mov edx, edi
mov rcx, rax
call fcn.140025ce0
mov rcx, rax
lea rdx, [0x1404ef214]
call fcn.140021910
mov rcx, rax
call fcn.14001d5c0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14007b080
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b07a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b120
call fcn.14014f510
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x14007b0bc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b0b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b0f0
call fcn.14014f510
movzx eax, r15b
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.14014f4f0
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
int3
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
int3
call fcn.14015fa1c
int3
call fcn.14015fa1c
int3
call fcn.14015fa1c
int3