Function at 0x1400758bd
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x258
movaps xmmword [rsp + 0x240], xmm6
mov r12, rdx
mov r14, rcx
mov rax, qword [0x14030d038]
xor rax, rsp
mov qword [rsp + 0x238], rax
lea rax, [rsp + 0x228]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax - 8], rax
lea rcx, [rsp + 0x220]
mov qword [rsp + 0x210], rcx
mov qword [rsp + 0x218], rax
mov rsi, qword [r8]
mov rbx, qword [r8 + 8]
cmp rsi, rbx
je 0x14007598d
lea rdi, [rsp + 0x58]
lea r15, [rsp + 0x1f0]
lea rbp, [rsp + 0x210]
movzx eax, byte [rsi + 0x17]
test al, al
mov rcx, qword [rsi]
cmovns rcx, rsi
mov qword [rsp + 0x1f0], rcx
cmovs rax, qword [rsi + 8]
mov qword [rsp + 0x1f8], rax
mov rcx, rdi
mov rdx, r15
call fcn.1400bf660
mov rcx, rbp
mov rdx, rdi
call fcn.1401c5108
cmp byte [rsp + 0x6f], 0
jns 0x140075984
mov rcx, qword [rsp + 0x58]
call fcn.140112038
add rsi, 0x18
cmp rbx, rsi
jne 0x14007593b
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rdi, [rsp + 0x1f0]
mov qword [rdi + 0x10], rax
movaps xmm0, xmmword [0x1402ae190]
movaps xmmword [rdi], xmm0
mov rcx, rdi
call fcn.1400e6d60
cmp byte [r12 + 0x17], 0
mov r8, r12
jns 0x1400759c4
mov r8, qword [r12]
mov rcx, rdi
mov rdx, r14
mov r9d, 0xb
call fcn.140009250
test eax, eax
jne 0x140075cbc
mov qword [rsp + 0x50], r12
movabs r15, 0x7fffffffffffffff
lea rax, [rsp + 0x1e0]
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax - 8], rax
mov ecx, 0x210
call fcn.140112048
lea rdi, [rsp + 0x1c0]
mov qword [rdi], rax
lea r13, [r15 + 0x109]
mov qword [rdi + 0x10], r13
mov qword [rdi + 8], 0x100
mov r8d, 0x202
mov rcx, rax
xor edx, edx
call fcn.140117f60
mov al, 0x80
mov r12d, 0xa
lea rbx, [rsp + 0x1bc]
mov rbp, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
xor r14d, r14d
xor esi, esi
and r13, r15
dec r13
test al, al
cmovns r13, r12
mov rax, r13
shr rax, 0x20
cmp rax, 1
mov edx, 0
sbb edx, edx
not edx
or edx, r13d
mov dword [rsp + 0x1bc], edx
mov rcx, rdi
xor r8d, r8d
call fcn.1400edcba
cmp byte [rsp + 0x1d7], 0
mov r8, rdi
jns 0x140075a9c
mov r8, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1f0]
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov edx, r14d
mov r9, rbx
call rbp
cmp eax, 0xea
je 0x140075ad6
cmp eax, 0x103
jne 0x140075b10
xor r14d, r14d
test sil, sil
mov esi, 0
jne 0x140075afc
jmp 0x140075d47
cmp byte [rsp + 0x1d7], 0
mov rax, qword [rsp + 0x1d0]
lea rdx, [rax + rax - 2]
mov eax, 0x14
cmovns rdx, rax
mov rcx, rdi
call fcn.140162806
mov al, byte [rsp + 0x1d7]
mov r13, qword [rsp + 0x1d0]
jmp 0x140075a52
test eax, eax
jne 0x140075d47
mov edx, dword [rsp + 0x1bc]
mov rcx, rdi
xor r8d, r8d
call fcn.1400edcba
lea rcx, [rsp + 0x1d8]
mov rdx, rdi
call fcn.1401c549e
test rax, rax
je 0x140075b44
inc r14d
jmp 0x140075afc
movzx eax, byte [rsp + 0x1d7]
test al, al
mov rcx, qword [rsp + 0x1c0]
cmovns rcx, rdi
mov qword [rsp + 0x1a8], rcx
cmovs rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x1b0], rax
lea rcx, [rsp + 0x1a8]
call fcn.140111620
test al, al
jne 0x140075bb2
cmp byte [rsp + 0x1d7], 0
mov rdx, rdi
jns 0x140075b99
mov rdx, qword [rsp + 0x1c0]
lea rcx, [rsp + 0x1f0]
call fcn.14018f630
test eax, eax
jne 0x140075c25
mov sil, 1
jmp 0x140075afc
movzx eax, byte [rsp + 0x1d7]
test al, al
mov rcx, qword [rsp + 0x1c0]
cmovns rcx, rdi
mov qword [rsp + 0x198], rcx
cmovs rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x1a0], rax
lea r13, [rsp + 0x58]
mov rcx, r13
lea rdx, [rsp + 0x198]
call fcn.1400bf660
lea rcx, [rsp + 0x220]
mov rdx, r13
call fcn.1401c549e
mov r13, rax
cmp byte [rsp + 0x6f], 0
jns 0x140075c1a
mov rcx, qword [rsp + 0x58]
call fcn.140112038
test r13, r13
je 0x140075b84
jmp 0x140075c9f
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x140075c9f
lea r13, [rsp + 0x58]
mov rcx, r13
lea rdx, str..._.._chrome_installer_setup_setup_util.cc
mov r8d, 0x34d
mov r9d, 2
call fcn.14019a740
mov r8d, 0x18
lea rcx, [rsp + 0x68]
lea rdx, str.Failed_to_delete_subkey
call fcn.1400ff874
mov rcx, rax
mov rdx, rdi
call fcn.1401834e0
mov r8d, 0xc
mov rcx, rax
lea rdx, str._under_path
call fcn.1400ff874
mov rcx, rax
mov rdx, qword [rsp + 0x50]
call fcn.1401834e0
mov rcx, r13
call fcn.140001d00
lea rcx, [rsp + 0x1d8]
lea rdx, [rsp + 0x58]
mov r8, rdi
mov r9, rdi
call fcn.140169bdc
jmp 0x140075b3f
mov esi, eax
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x140075e02
cmp esi, 2
je 0x140075e02
lea rdx, str..._.._chrome_installer_setup_setup_util.cc
lea rdi, [rsp + 0x58]
mov rcx, rdi
mov r8d, 0x312
mov r9d, 2
call fcn.14019a740
lea rcx, [rsp + 0x68]
lea rdx, str.Failed_to_open
mov r8d, 0xf
call fcn.1400ff874
mov rcx, rax
mov rdx, r12
call fcn.1401834e0
lea rdx, str.__result_
mov r8d, 0xb
mov rcx, rax
call fcn.1400ff874
mov rcx, rax
mov edx, esi
call fcn.1401d8722
mov rcx, rdi
call fcn.140001d00
jmp 0x140075e02
cmp qword [rsp + 0x1e8], 0
jne 0x140075e4c
lea rdx, [0x1402b0402]
lea rcx, [rsp + 0x1f0]
call fcn.14018f630
test eax, eax
je 0x140075dda
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x140075dda
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._chrome_installer_setup_setup_util.cc
lea rsi, [rsp + 0x58]
mov rcx, rsi
mov r8d, 0x35c
mov r9d, 2
call fcn.14019f9e0
lea rcx, [rsp + 0x68]
lea rdx, str.Failed_to_delete_key
mov r8d, 0x15
call fcn.1400ff874
mov rcx, rax
mov rdx, qword [rsp + 0x50]
call fcn.1401834e0
mov rcx, rsi
call fcn.140183e60
cmp byte [rsp + 0x1d7], 0
jns 0x140075df1
mov rcx, qword [rsp + 0x1c0]
call fcn.140112038
lea rcx, [rsp + 0x1d8]
mov rdx, qword [rcx + 8]
call fcn.140159e62
lea rcx, [rsp + 0x1f0]
call fcn.1400e6d80
lea rcx, [rsp + 0x220]
mov rdx, qword [rcx + 8]
call fcn.140159e62
mov rcx, qword [rsp + 0x238]
xor rcx, rsp
call fcn.140115e50
movaps xmm6, xmmword [rsp + 0x240]
add rsp, 0x258
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rsi, [rsp + 0x1d8]
mov rdx, qword [rsi + 8]
mov rcx, rsi
call fcn.140159e62
lea rax, [rsp + 0x1e0]
mov qword [rsi], rax
xorps xmm6, xmm6
movups xmmword [rsi + 8], xmm6
mov r14d, 0xa
mov r12d, 0x7fff
lea rbx, [rsp + 0x1c0]
lea rbp, [rsp + 0x1bc]
mov rdi, qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov esi, 0x14
xor r13d, r13d
mov dword [rsp + 0x4c], 0
mov rax, qword [rsp + 0x1d0]
and rax, r15
dec rax
cmp byte [rsp + 0x1d7], 0
cmovns rax, r14
cmp rax, 0x8000
movsx edx, ax
cmovae edx, r12d
mov dword [rsp + 0x1bc], edx
mov rcx, rbx
xor r8d, r8d
call fcn.1400edcba
cmp byte [rsp + 0x1d7], 0
mov r8, rbx
jns 0x140075ef3
mov r8, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1f0]
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov edx, r13d
mov r9, rbp
call rdi
cmp eax, 0xea
jne 0x140075f4b
cmp dword [rsp + 0x1bc], 0xfffe
ja 0x140075dda
cmp byte [rsp + 0x1d7], 0
mov rax, qword [rsp + 0x1d0]
lea rdx, [rax + rax - 2]
cmovns rdx, rsi
mov rcx, rbx
call fcn.140162806
jmp 0x140075ea5
cmp eax, 0x103
jne 0x140075f6d
xor r13d, r13d
cmp byte [rsp + 0x4c], 0
mov dword [rsp + 0x4c], 0
jne 0x140075ea5
jmp 0x140075dda
test eax, eax
jne 0x140075dda
mov edx, dword [rsp + 0x1bc]
mov rcx, rbx
xor r8d, r8d
call fcn.1400edcba
lea rcx, [rsp + 0x1d8]
mov rdx, rbx
call fcn.1401c549e
test rax, rax
jne 0x140076062
cmp byte [rsp + 0x1d7], 0
mov rdx, rbx
jns 0x140075fb5
mov rdx, qword [rsp + 0x1c0]
lea rcx, [rsp + 0x1f0]
call fcn.1401d0200
test eax, eax
jne 0x140075fd1
mov al, 1
mov dword [rsp + 0x4c], eax
jmp 0x140075ea5
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x14007604a
lea rcx, [rsp + 0x58]
lea rdx, str..._.._chrome_installer_setup_setup_util.cc
mov r8d, 0x38a
mov r9d, 2
call fcn.14019a740
mov r8d, 0x17
lea rcx, [rsp + 0x68]
lea rdx, str.Failed_to_delete_value
call fcn.1400ff874
mov rcx, rax
mov rdx, rbx
call fcn.1401834e0
mov r8d, 8
mov rcx, rax
lea rdx, str._in_key
call fcn.1400ff874
mov rcx, rax
mov rdx, qword [rsp + 0x50]
call fcn.1401834e0
lea rcx, [rsp + 0x58]
call fcn.140001d00
lea rcx, [rsp + 0x1d8]
lea rdx, [rsp + 0x58]
mov r8, rbx
mov r9, rbx
call fcn.140169bdc
inc r13d
jmp 0x140075ea5