Function at 0x14008feb0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0x90
mov rax, qword [0x14022e2a0]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov rdi, rdx
mov qword [rbp + 7], rdx
xor r14d, r14d
mov dword [rbp - 9], r14d
lea rax, vtable.CefStructBase_struct_CefBrowserSettingsTraits_.0
mov qword [rdx], rax
mov qword [rdx + 0x128], r14
xor edx, edx
mov r8d, 0x120
lea rcx, [rdi + 8]
call fcn.14013dae0
mov qword [rdi + 0x128], r14
mov qword [rdi + 8], 0x120
mov esi, 1
mov dword [rbp - 9], esi
call fcn.140098880
test al, al
je 0x14009002c
mov qword [rbp + 0x1f], r14
lea ecx, [rsi + 0x1f]
call fcn.14013b3b0
mov rcx, rax
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], SafeArrayUnaccessData
mov qword [rbp + 0x2f], 0x1f
movups xmm0, xmmword [str.bEnableJSCloseWindows]
movups xmmword [rax], xmm0
mov eax, dword [0x1401bc588]
mov dword [rcx + 0x10], eax
movzx eax, byte [0x1401bc58c]
mov byte [rcx + 0x14], al
mov byte [rcx + 0x15], r14b
xor bl, bl
mov qword [rbp - 0x11], r14
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREAdobeAdobe_NGLCEF1.0RestrictedSecuritySettings
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14008ffef
mov dword [rbp - 0x19], r14d
mov dword [rbp - 0x15], 4
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0x10
cmovae rdx, qword [rbp + 0x17]
lea rax, [rbp - 0x15]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x14008ffe5
cmp dword [rbp - 0x19], eax
setne bl
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x14009002e
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140090025
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400904cd
call fcn.14013b70c
jmp 0x14009002e
xor bl, bl
movzx eax, bl
xor eax, esi
inc eax
mov dword [rdi + 0xd8], eax
call fcn.140098880
test al, al
je 0x140090141
mov qword [rbp + 0x1f], r14
mov ecx, 0x20
call fcn.14013b3b0
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], 0x18
mov qword [rbp + 0x2f], 0x1f
movups xmm0, xmmword [str.bEnableJSAccessClipBoard]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1401bc568]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], 0
xor bl, bl
mov qword [rbp - 0x11], r14
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREAdobeAdobe_NGLCEF1.0RestrictedSecuritySettings
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140090104
mov dword [rbp - 0x19], r14d
mov dword [rbp - 0x15], 4
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0x10
cmovae rdx, qword [rbp + 0x17]
lea rax, [rbp - 0x15]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x1400900fa
cmp dword [rbp - 0x19], eax
setne bl
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x140090143
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009013a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400904d3
call fcn.14013b70c
jmp 0x140090143
xor bl, bl
movzx eax, bl
xor eax, esi
inc eax
mov dword [rdi + 0xdc], eax
call fcn.140098880
test al, al
je 0x140090256
mov qword [rbp + 0x1f], r14
mov ecx, 0x20
call fcn.14013b3b0
mov rcx, rax
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], SafeArrayGetLBound
mov qword [rbp + 0x2f], 0x1f
movups xmm0, xmmword [str.bEnableJSDomPaste]
movups xmmword [rax], xmm0
movzx eax, byte [0x1401bc550]
mov byte [rcx + 0x10], al
mov byte [rcx + 0x11], 0
xor bl, bl
mov qword [rbp - 0x11], r14
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREAdobeAdobe_NGLCEF1.0RestrictedSecuritySettings
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140090219
mov dword [rbp - 0x19], r14d
mov dword [rbp - 0x15], 4
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0x10
cmovae rdx, qword [rbp + 0x17]
lea rax, [rbp - 0x15]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x14009020f
cmp dword [rbp - 0x19], eax
setne bl
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x140090258
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009024f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400904d9
call fcn.14013b70c
jmp 0x140090258
xor bl, bl
movzx eax, bl
xor eax, esi
inc eax
mov dword [rdi + 0xe0], eax
call fcn.140098880
test al, al
je 0x140090377
mov qword [rbp + 0x1f], r14
mov ecx, 0x20
call fcn.14013b3b0
mov rcx, rax
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.OLEAUT32.dll_SafeArrayGetLBound
mov qword [rbp + 0x2f], 0x1f
movups xmm0, xmmword [str.bEnableLocalStorage]
movups xmmword [rax], xmm0
movzx eax, word [0x1401bc538]
mov word [rcx + 0x10], ax
movzx eax, byte [0x1401bc53a]
mov byte [rcx + 0x12], al
mov byte [rcx + 0x13], 0
movzx ebx, sil
mov qword [rbp - 0x11], r14
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREAdobeAdobe_NGLCEF1.0RestrictedSecuritySettings
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14009033a
mov dword [rbp - 0x19], esi
mov dword [rbp - 0x15], 4
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0x10
cmovae rdx, qword [rbp + 0x17]
lea rax, [rbp - 0x15]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x140090330
cmp dword [rbp - 0x19], eax
setne bl
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x14009037b
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140090370
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400904df
call fcn.14013b70c
jmp 0x14009037b
movzx ebx, sil
movzx eax, bl
xor eax, esi
inc eax
mov dword [rdi + 0xf4], eax
call fcn.140098880
test al, al
je 0x14009047d
mov qword [rbp + 0x1f], r14
mov ecx, 0x20
call fcn.14013b3b0
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], SafeArrayGetLBound
mov qword [rbp + 0x2f], 0x1f
movups xmm0, xmmword [str.bEnableDatabases]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
xor bl, bl
mov qword [rbp - 0x11], r14
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREAdobeAdobe_NGLCEF1.0RestrictedSecuritySettings
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140090444
mov dword [rbp - 0x19], r14d
mov dword [rbp - 0x15], 4
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0x10
cmovae rdx, qword [rbp + 0x17]
lea rax, [rbp - 0x15]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x14009043a
cmp dword [rbp - 0x19], eax
setne bl
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x14009047f
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140090476
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400904c7
call fcn.14013b70c
jmp 0x14009047f
xor bl, bl
movzx eax, bl
xor eax, esi
inc eax
mov dword [rdi + 0xf8], eax
call fcn.140098920
test al, al
jne 0x14009049a
mov esi, 2
mov dword [rdi + 0xfc], esi
mov rax, rdi
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14013b390
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.1401408a0
int3
call fcn.1401408a0
int3
call fcn.1401408a0
int3
call fcn.1401408a0
int3
call fcn.1401408a0
int3