Function at 0x140071f10
Capabilities:
Query or enumerate registry key

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x248
movaps xmmword [rsp + 0x230], xmm6
mov r12, rdx
mov rsi, rcx
mov rax, qword [0x1403a7038]
xor rax, rsp
mov qword [rsp + 0x228], rax
lea rax, [rsp + 0x218]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax - 8], rax
lea rcx, [rsp + 0x210]
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rax
mov rbx, qword [r8]
mov rbp, qword [r8 + 8]
cmp rbx, rbp
je 0x140071fe0
lea rdi, [rsp + 0x48]
lea r14, [rsp + 0x1e0]
lea r15, [rsp + 0x200]
movzx eax, byte [rbx + 0x17]
test al, al
mov rcx, qword [rbx]
cmovns rcx, rbx
mov qword [rsp + 0x1e0], rcx
cmovs rax, qword [rbx + 8]
mov qword [rsp + 0x1e8], rax
mov rcx, rdi
mov rdx, r14
call fcn.140189280
mov rcx, r15
mov rdx, rdi
call fcn.14023c090
cmp byte [rsp + 0x5f], 0
jns 0x140071fd7
mov rcx, qword [rsp + 0x48]
call fcn.1401cfdbc
add rbx, 0x18
cmp rbx, rbp
jne 0x140071f8e
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rdi, [rsp + 0x1e0]
mov qword [rdi + 0x10], rax
movaps xmm0, xmmword [0x14033b990]
movaps xmmword [rdi], xmm0
mov rcx, rdi
call fcn.14008b000
cmp byte [r12 + 0x17], 0
mov r8, r12
jns 0x140072017
mov r8, qword [r12]
mov rcx, rdi
mov rdx, rsi
mov r9d, ntohl
call fcn.14008b1a0
test eax, eax
je 0x1400720bb
mov esi, eax
mov ecx, 2
call fcn.14017e5e0
cmp esi, 2
je 0x14007286d
test al, al
je 0x14007286d
lea rdx, str..._.._chrome_installer_setup_setup_util.cc
lea rdi, [rsp + 0x48]
mov rcx, rdi
mov r8d, 0x197
mov r9d, 2
call fcn.14007d0b0
lea rcx, [rsp + 0x58]
lea rdx, str.Failed_to_open
mov r8d, 0xf
call fcn.14020f8f0
mov rcx, rax
mov rdx, r12
call fcn.14007d9a0
lea rdx, str.__result_
mov r8d, ntohl
mov rcx, rax
call fcn.14020f8f0
mov rcx, rax
mov edx, esi
call fcn.14003a2b0
mov rcx, rdi
call fcn.14007d550
jmp 0x14007286d
mov qword [rsp + 0x40], r12
movabs rdi, 0x7fffffffffffffff
lea rax, [rsp + 0x1d0]
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax - 8], rax
mov ecx, 0x210
call fcn.1401cfd80
lea r15, [rsp + 0x1b0]
mov qword [r15], rax
lea rsi, [rdi + 0x109]
mov qword [r15 + 0x10], rsi
mov qword [r15 + 8], 0x100
mov r8d, 0x202
mov rcx, rax
xor edx, edx
call fcn.1401d34c0
mov al, 0x80
mov ebp, 0xa
lea r14, [rsp + 0x1ac]
mov rbx, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
xor r13d, r13d
xor r12d, r12d
and rsi, rdi
dec rsi
test al, al
cmovns rsi, rbp
mov rax, rsi
shr rax, 0x20
neg rax
mov edx, 0
sbb edx, edx
or edx, esi
mov dword [rsp + 0x1ac], edx
mov rcx, r15
xor r8d, r8d
call fcn.14017b4c0
cmp byte [rsp + 0x1c7], 0
mov r8, r15
jns 0x140072176
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1e0]
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov edx, r13d
mov r9, r14
call rbx
test eax, eax
je 0x1400721d1
cmp eax, 0x103
je 0x14007220e
cmp eax, 0xea
jne 0x140072528
cmp byte [rsp + 0x1c7], 0
mov rax, qword [rsp + 0x1c0]
lea rdx, [rax + rax - 2]
mov eax, 0x14
cmovns rdx, rax
mov rcx, r15
call fcn.140063cc0
jmp 0x140072472
mov edx, dword [rsp + 0x1ac]
mov rcx, r15
xor r8d, r8d
call fcn.14017b4c0
mov rsi, qword [rsp + 0x1d0]
movzx r8d, byte [rsp + 0x1c7]
test rsi, rsi
jne 0x140072226
mov r11, qword [rsp + 0x1b0]
mov r10, qword [rsp + 0x1b8]
jmp 0x1400722d7
xor r13d, r13d
test r12b, 1
mov r12d, 0
jne 0x140072472
jmp 0x140072528
test r8b, r8b
mov r10, qword [rsp + 0x1b8]
mov r9, r8
cmovs r9, r10
mov r11, qword [rsp + 0x1b0]
mov rdi, r15
cmovs rdi, r11
movzx ebx, byte [rsi + 0x37]
test bl, bl
jns 0x140072259
mov rbx, qword [rsi + 0x28]
mov rbp, qword [rsi + 0x20]
jmp 0x14007225d
lea rbp, [rsi + 0x20]
cmp rbx, r9
mov rax, r9
cmovb rax, rbx
test rax, rax
je 0x140072283
xor ecx, ecx
movzx edx, word [rbp + rcx*2]
cmp word [rdi + rcx*2], dx
ja 0x140072288
jb 0x1400722b5
inc rcx
cmp rax, rcx
jne 0x14007226e
cmp r9, rbx
jb 0x1400722b5
test rax, rax
je 0x1400722a8
xor ecx, ecx
movzx edx, word [rdi + rcx*2]
cmp word [rbp + rcx*2], dx
ja 0x140072486
jb 0x1400722b1
inc rcx
cmp rax, rcx
jne 0x14007228f
cmp rbx, r9
jae 0x140072486
add rsi, 8
mov ebp, 0xa
mov rbx, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov rsi, qword [rsi]
test rsi, rsi
jne 0x140072247
movabs rdi, 0x7fffffffffffffff
test r8b, r8b
cmovns r11, r15
mov qword [rsp + 0x198], r11
cmovns r10, r8
mov qword [rsp + 0x1a0], r10
lea rcx, [rsp + 0x198]
call fcn.14008a410
test al, al
je 0x14007241e
movzx eax, byte [rsp + 0x1c7]
test al, al
mov rcx, qword [rsp + 0x1b0]
cmovns rcx, r15
mov qword [rsp + 0x188], rcx
cmovs rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x190], rax
lea rbx, [rsp + 0x48]
mov rcx, rbx
lea rdx, [rsp + 0x188]
call fcn.140189280
mov rcx, qword [rsp + 0x218]
movzx r8d, byte [rsp + 0x5f]
test rcx, rcx
jne 0x140072365
xor ebx, ebx
jmp 0x140072404
test r8b, r8b
mov r9, qword [rsp + 0x50]
cmovns r9, r8
mov rsi, qword [rsp + 0x48]
cmovns rsi, rbx
movzx ebp, byte [rcx + 0x37]
test bpl, bpl
jns 0x14007238d
mov rbp, qword [rcx + 0x28]
mov rbx, qword [rcx + 0x20]
jmp 0x140072391
lea rbx, [rcx + 0x20]
cmp rbp, r9
mov rdx, r9
cmovb rdx, rbp
test rdx, rdx
je 0x1400723b6
xor eax, eax
movzx edi, word [rbx + rax*2]
cmp word [rsi + rax*2], di
ja 0x1400723bb
jb 0x1400723e7
inc rax
cmp rdx, rax
jne 0x1400723a2
cmp r9, rbp
jb 0x1400723e7
test rdx, rdx
je 0x1400723da
xor eax, eax
movzx edi, word [rsi + rax*2]
cmp word [rbx + rax*2], di
ja 0x1400724a1
jb 0x1400723e3
inc rax
cmp rdx, rax
jne 0x1400723c2
cmp rbp, r9
jae 0x1400724a1
add rcx, 8
mov rcx, qword [rcx]
xor ebx, ebx
test rcx, rcx
movabs rdi, 0x7fffffffffffffff
mov ebp, 0xa
jne 0x14007237a
test r8b, r8b
jns 0x140072413
mov rcx, qword [rsp + 0x48]
call fcn.1401cfdbc
test bl, bl
mov rbx, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
jne 0x140072452
cmp byte [rsp + 0x1c7], 0
mov rdx, r15
jns 0x140072433
mov rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x1e0]
call fcn.14008b340
test eax, eax
je 0x14007246f
mov ecx, 2
call fcn.14017e5e0
test al, al
jne 0x1400724b7
lea rcx, [rsp + 0x1c8]
lea rdx, [rsp + 0x48]
mov r8, r15
mov r9, r15
call fcn.14017b540
inc r13d
jmp 0x140072472
mov r12b, 1
mov al, byte [rsp + 0x1c7]
mov rsi, qword [rsp + 0x1c0]
jmp 0x140072130
inc r13d
movabs rdi, 0x7fffffffffffffff
mov ebp, 0xa
mov rbx, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
jmp 0x140072472
mov bl, 1
movabs rdi, 0x7fffffffffffffff
mov ebp, 0xa
jmp 0x140072404
lea rsi, [rsp + 0x48]
mov rcx, rsi
lea rdx, str..._.._chrome_installer_setup_setup_util.cc
mov r8d, 0x1d2
mov r9d, 2
call fcn.14007d0b0
mov r8d, 0x18
lea rcx, [rsp + 0x58]
lea rdx, str.Failed_to_delete_subkey
call fcn.14020f8f0
mov rcx, rax
mov rdx, r15
call fcn.14007d9a0
mov r8d, ntohl
mov rcx, rax
lea rdx, str._under_path
call fcn.14020f8f0
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.14007d9a0
mov rcx, rsi
call fcn.14007d550
jmp 0x140072452
cmp qword [rsp + 0x1d8], 0
je 0x140072817
lea rsi, [rsp + 0x1c8]
mov rdx, qword [rsi + 8]
mov rcx, rsi
call fcn.140074680
lea rax, [rsp + 0x1d0]
mov qword [rsi], rax
xorps xmm6, xmm6
movups xmmword [rsi + 8], xmm6
mov esi, 0xa
mov ebx, 0x7fff
lea r12, [rsp + 0x1b0]
lea r15, [rsp + 0x1ac]
mov rbp, qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
xor r14d, r14d
xor r13d, r13d
mov rax, qword [rsp + 0x1c0]
and rax, rdi
dec rax
cmp byte [rsp + 0x1c7], 0
cmovns rax, rsi
cmp rax, 0x8000
movsx edx, ax
cmovae edx, ebx
mov dword [rsp + 0x1ac], edx
mov rcx, r12
xor r8d, r8d
call fcn.14017b4c0
cmp byte [rsp + 0x1c7], 0
mov r8, r12
jns 0x1400725d1
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1e0]
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov edx, r14d
mov r9, r15
call rbp
test eax, eax
je 0x14007263d
cmp eax, 0x103
je 0x140072672
cmp eax, 0xea
jne 0x140072845
cmp dword [rsp + 0x1ac], 0x7ffe
ja 0x140072845
cmp byte [rsp + 0x1c7], 0
mov rax, qword [rsp + 0x1c0]
lea rdx, [rax + rax - 2]
mov eax, 0x14
cmovns rdx, rax
mov rcx, r12
call fcn.140063cc0
jmp 0x140072584
mov edx, dword [rsp + 0x1ac]
mov rcx, r12
xor r8d, r8d
call fcn.14017b4c0
mov rcx, qword [rsp + 0x1d0]
movzx r8d, byte [rsp + 0x1c7]
test rcx, rcx
jne 0x14007268a
mov rdx, qword [rsp + 0x1b0]
jmp 0x14007273a
xor r14d, r14d
test r13b, 1
mov r13d, 0
jne 0x140072584
jmp 0x140072845
test r8b, r8b
mov r9, qword [rsp + 0x1b8]
cmovns r9, r8
mov rdx, qword [rsp + 0x1b0]
mov rbx, r12
cmovs rbx, rdx
mov r11, rbp
movzx r10d, byte [rcx + 0x37]
test r10b, r10b
jns 0x1400726bf
mov r10, qword [rcx + 0x28]
mov rbp, qword [rcx + 0x20]
jmp 0x1400726c3
lea rbp, [rcx + 0x20]
cmp r10, r9
mov rsi, r9
cmovb rsi, r10
test rsi, rsi
je 0x1400726e9
xor eax, eax
movzx edi, word [rbp + rax*2]
cmp word [rbx + rax*2], di
ja 0x1400726ee
jb 0x140072717
inc rax
cmp rsi, rax
jne 0x1400726d4
cmp r9, r10
jb 0x140072717
test rsi, rsi
je 0x14007270e
xor eax, eax
movzx edi, word [rbx + rax*2]
cmp word [rbp + rax*2], di
ja 0x140072788
jb 0x140072713
inc rax
cmp rsi, rax
jne 0x1400726f5
cmp r10, r9
jae 0x140072788
add rcx, 8
movabs rdi, 0x7fffffffffffffff
mov rbp, r11
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400726a8
mov esi, 0xa
mov ebx, 0x7fff
test r8b, r8b
cmovns rdx, r12
lea rcx, [rsp + 0x1e0]
call fcn.14008b5f0
test eax, eax
je 0x140072780
mov ecx, 2
call fcn.14017e5e0
test al, al
jne 0x1400727a7
lea rcx, [rsp + 0x1c8]
lea rdx, [rsp + 0x48]
mov r8, r12
mov r9, r12
call fcn.14017b540
inc r14d
jmp 0x140072584
mov r13b, 1
jmp 0x140072584
inc r14d
movabs rdi, 0x7fffffffffffffff
mov esi, 0xa
mov ebx, 0x7fff
mov rbp, r11
jmp 0x140072584
lea rcx, [rsp + 0x48]
lea rdx, str..._.._chrome_installer_setup_setup_util.cc
mov r8d, 0x20f
mov r9d, 2
call fcn.14007d0b0
mov r8d, 0x17
lea rcx, [rsp + 0x58]
lea rdx, str.Failed_to_delete_value
call fcn.14020f8f0
mov rcx, rax
mov rdx, r12
call fcn.14007d9a0
mov r8d, 8
mov rcx, rax
lea rdx, str._in_key
call fcn.14020f8f0
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.14007d9a0
lea rcx, [rsp + 0x48]
call fcn.14007d550
jmp 0x140072760
lea rdx, [0x14033d5ca]
lea rcx, [rsp + 0x1e0]
call fcn.14008b340
test eax, eax
je 0x140072845
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 2
call fcn.14017e5e0
test al, al
jne 0x1400728b7
cmp byte [rsp + 0x1c7], 0
jns 0x14007285c
mov rcx, qword [rsp + 0x1b0]
call fcn.1401cfdbc
lea rcx, [rsp + 0x1c8]
mov rdx, qword [rcx + 8]
call fcn.140074680
lea rcx, [rsp + 0x1e0]
call fcn.14008b2c0
lea rcx, [rsp + 0x210]
mov rdx, qword [rcx + 8]
call fcn.140074680
mov rcx, qword [rsp + 0x228]
xor rcx, rsp
call fcn.1401d1390
movaps xmm6, xmmword [rsp + 0x230]
add rsp, 0x248
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._chrome_installer_setup_setup_util.cc
lea rsi, [rsp + 0x48]
mov rcx, rsi
mov r8d, 0x1e1
mov r9d, 2
call fcn.14023e670
lea rcx, [rsp + 0x58]
lea rdx, str.Failed_to_delete_key
mov r8d, 0x15
call fcn.14020f8f0
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.14007d9a0
mov rcx, rsi
call fcn.14023e6f0
jmp 0x140072845