Function at 0x140048000
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x238
movaps xmmword [rsp + 0x220], xmm6
mov r13, rdx
mov rdi, rcx
mov rax, qword [0x14034e040]
xor rax, rsp
mov qword [rsp + 0x218], rax
lea rax, [rsp + 0x208]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax - 8], rax
mov rsi, qword [r8]
mov r12, qword [r8 + 8]
lea rcx, [rsp + 0x200]
mov qword [rsp + 0x1c8], rcx
mov qword [rsp + 0x1d0], rax
cmp rsi, r12
je 0x1400480f4
lea rbx, [rsp + 0x50]
lea r14, [rsp + 0x1e0]
lea r15, [rsp + 0x1c8]
jmp 0x140048097
mov rcx, qword [rsp + 0x50]
call fcn.14010f42c
add rsi, 0x18
cmp rsi, r12
je 0x1400480f4
movsx rcx, byte [rsi + 0x17]
mov rax, rsi
test rcx, rcx
jns 0x1400480ab
mov rcx, qword [rsi + 8]
mov rax, qword [rsi]
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], rcx
test rcx, rcx
js 0x1400486bc
sete cl
test rax, rax
setne al
or al, cl
je 0x1400486bc
mov rcx, rbx
mov rdx, r14
call fcn.1400da150
mov rcx, r15
mov rdx, rbx
call fcn.14017b8f0
cmp byte [rsp + 0x67], 0
jns 0x14004808e
jmp 0x140048084
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x1e0]
mov qword [rbx + 0x10], rax
movaps xmm0, xmmword [0x1402cdfe0]
movaps xmmword [rbx], xmm0
mov rcx, rbx
call fcn.14005a2d0
cmp byte [r13 + 0x17], 0
mov r8, r13
jns 0x14004812a
mov r8, qword [r13]
mov rcx, rbx
mov rdx, rdi
mov r9d, ntohl
call fcn.14005a2f0
test eax, eax
jne 0x1400483b6
mov qword [rsp + 0x40], r13
movabs rbx, 0x7fffffffffffffff
lea rax, [rsp + 0x1d0]
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax - 8], rax
mov ecx, 0x208
call fcn.14010f3f0
lea rdi, [rsp + 0x1b0]
mov qword [rdi], rax
lea rsi, [rbx + 0x105]
mov qword [rdi + 0x10], rsi
mov qword [rdi + 8], 0x100
mov r8d, 0x202
mov rcx, rax
xor edx, edx
call fcn.1401496f0
mov al, 0x80
mov ebp, 0xa
lea r14, [rsp + 0x1ac]
mov r13, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov r12, rbx
lea rcx, [rbx - 8]
mov qword [rsp + 0x48], rcx
xor ebx, ebx
xor r15d, r15d
jmp 0x140048257
movsx rcx, byte [rsp + 0x1c7]
test rcx, rcx
mov rax, qword [rsp + 0x1c0]
lea rdx, [rax + rax - 2]
mov r8d, 0x14
cmovs r8, rdx
cmp r8, qword [rsp + 0x48]
ja 0x1400488b9
test cl, cl
js 0x1400488c6
mov rdx, rcx
cmp rdx, r8
cmova r8, rdx
mov r9d, 0xa
mov edx, 0xa
cmp r8, 0xb
jb 0x140048233
mov rdx, r8
and rdx, 0xfffffffffffffffc
add rdx, 4
or r8, 3
cmp r8, 0xb
cmove r8, rdx
mov rdx, r8
test cl, cl
js 0x1400488e5
cmp rdx, r9
je 0x140048248
mov rcx, rdi
call fcn.14017ba60
mov al, byte [rsp + 0x1c7]
mov rsi, qword [rsp + 0x1c0]
and rsi, r12
dec rsi
test al, al
cmovns rsi, rbp
mov rax, rsi
shr rax, 0x20
neg rax
mov edx, 0
sbb edx, edx
or edx, esi
mov dword [rsp + 0x1ac], edx
mov rcx, rdi
xor r8d, r8d
call fcn.140045200
cmp byte [rsp + 0x1c7], 0
mov r8, rdi
jns 0x14004829d
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1e0]
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov edx, ebx
mov r9, r14
call r13
cmp eax, 0xea
je 0x1400481c8
cmp eax, 0x103
jne 0x1400482ef
xor ebx, ebx
test r15b, 1
mov r15d, 0
jne 0x140048248
cmp qword [rsp + 0x1d8], 0
jne 0x1400487dc
jmp 0x140048440
test eax, eax
jne 0x1400482db
mov edx, dword [rsp + 0x1ac]
mov rcx, rdi
xor r8d, r8d
call fcn.140045200
lea rcx, [rsp + 0x1c8]
mov rdx, rdi
call fcn.14017bc00
test rax, rax
je 0x140048321
inc ebx
jmp 0x140048248
movsx rcx, byte [rsp + 0x1c7]
test rcx, rcx
cmovs rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1b0]
cmovns rax, rdi
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x1a0], rcx
test rcx, rcx
js 0x1400486bc
sete cl
test rax, rax
setne al
or al, cl
je 0x1400486bc
lea rcx, [rsp + 0x198]
call fcn.14005b0c0
test al, al
jne 0x1400486be
cmp byte [rsp + 0x1c7], 0
mov rdx, rdi
jns 0x140048396
mov rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x1e0]
mov r8b, 1
call fcn.14017c7f0
test eax, eax
jne 0x140048745
mov r15b, 1
jmp 0x140048248
mov edi, eax
mov ecx, 2
call fcn.14006a140
xor al, 1
cmp edi, 2
sete cl
or cl, al
jne 0x1400484ee
lea rdx, str.....chromeinstaller_setup_setup_util.cc
lea rbx, [rsp + 0x50]
mov rcx, rbx
mov r8d, 0x196
mov r9d, 2
call fcn.14018d7b0
lea rcx, [rsp + 0x60]
lea rdx, str.Failed_to_open
mov r8d, 0xf
call fcn.1400cdd30
mov rcx, rax
mov rdx, r13
call fcn.1401895c0
lea rdx, str.__result_
mov r8d, ntohl
mov rcx, rax
call fcn.1400cdd30
mov rcx, rax
mov edx, edi
call fcn.140149ec0
mov rcx, rbx
call fcn.14018dbe0
jmp 0x1400484ee
lea rdx, [0x1402d8faa]
lea rcx, [rsp + 0x1e0]
mov r8b, 1
call fcn.14017c7f0
test eax, eax
je 0x1400484c6
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 2
call fcn.14006a140
test al, al
je 0x1400484c6
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str.....chromeinstaller_setup_setup_util.cc
lea rdi, [rsp + 0x50]
mov rcx, rdi
mov r8d, 0x1e0
mov r9d, 2
call fcn.14018e580
lea rcx, [rsp + 0x60]
lea rdx, str.Failed_to_delete_key
mov r8d, 0x15
call fcn.1400cdd30
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.1401895c0
mov rcx, rdi
call fcn.14018e5f0
cmp byte [rsp + 0x1c7], 0
jns 0x1400484dd
mov rcx, qword [rsp + 0x1b0]
call fcn.14010f42c
lea rcx, [rsp + 0x1c8]
mov rdx, qword [rcx + 8]
call fcn.14017bbb0
lea rcx, [rsp + 0x1e0]
call fcn.14005a370
lea rcx, [rsp + 0x200]
mov rdx, qword [rcx + 8]
call fcn.14017bbb0
mov rcx, qword [rsp + 0x218]
xor rcx, rsp
call fcn.140110970
movaps xmm6, xmmword [rsp + 0x220]
add rsp, 0x238
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp dword [rsp + 0x1ac], 0x7ffe
ja 0x1400484c6
movsx rcx, byte [rsp + 0x1c7]
test rcx, rcx
mov rax, qword [rsp + 0x1c0]
lea rdx, [rax + rax - 2]
mov r8d, 0x14
cmovs r8, rdx
cmp r8, qword [rsp + 0x48]
ja 0x1400488b9
test cl, cl
js 0x1400488f3
mov rdx, rcx
cmp rdx, r8
cmova r8, rdx
mov r9d, 0xa
mov edx, 0xa
cmp r8, 0xb
jb 0x1400485b0
mov rdx, r8
and rdx, 0xfffffffffffffffc
add rdx, 4
or r8, 3
cmp r8, 0xb
cmove r8, rdx
mov rdx, r8
test cl, cl
js 0x140048912
cmp rdx, r9
je 0x1400485c5
mov rcx, r14
call fcn.14017ba60
mov rax, qword [rsp + 0x1c0]
and rax, r12
dec rax
cmp byte [rsp + 0x1c7], 0
mov ecx, 0xa
cmovns rax, rcx
cmp rax, 0x8000
movsx edx, ax
cmovae edx, r13d
mov dword [rsp + 0x1ac], edx
mov rcx, r14
xor r8d, r8d
call fcn.140045200
cmp byte [rsp + 0x1c7], 0
mov r8, r14
jns 0x140048618
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1e0]
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov edx, ebx
mov r9, r15
call rdi
cmp eax, 0xea
je 0x140048538
cmp eax, 0x103
jne 0x140048659
xor ebx, ebx
test bpl, 1
mov ebp, 0
jne 0x1400485c5
jmp 0x1400484c6
test eax, eax
jne 0x1400484c6
mov edx, dword [rsp + 0x1ac]
mov rcx, r14
xor r8d, r8d
call fcn.140045200
mov rcx, rsi
mov rdx, r14
call fcn.14017bc00
test rax, rax
je 0x14004868a
inc ebx
jmp 0x1400485c5
cmp byte [rsp + 0x1c7], 0
mov rdx, r14
jns 0x14004869f
mov rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x1e0]
call fcn.14017cc20
test eax, eax
jne 0x140048828
mov bpl, 1
jmp 0x1400485c5
ud2
movsx rcx, byte [rsp + 0x1c7]
test rcx, rcx
cmovs rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1b0]
cmovns rax, rdi
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x190], rcx
test rcx, rcx
js 0x1400486bc
sete cl
test rax, rax
setne al
or al, cl
je 0x1400486bc
lea rsi, [rsp + 0x50]
mov rcx, rsi
lea rdx, [rsp + 0x188]
call fcn.1400da150
lea rcx, [rsp + 0x200]
mov rdx, rsi
call fcn.14017bc00
mov rsi, rax
cmp byte [rsp + 0x67], 0
jns 0x14004873a
mov rcx, qword [rsp + 0x50]
call fcn.14010f42c
test rsi, rsi
je 0x140048381
jmp 0x1400487bf
mov ecx, 2
call fcn.14006a140
test al, al
je 0x1400487bf
lea rsi, [rsp + 0x50]
mov rcx, rsi
lea rdx, str.....chromeinstaller_setup_setup_util.cc
mov r8d, 0x1d1
mov r9d, 2
call fcn.14018d7b0
mov r8d, 0x18
lea rcx, [rsp + 0x60]
lea rdx, str.Failed_to_delete_subkey
call fcn.1400cdd30
mov rcx, rax
mov rdx, rdi
call fcn.1401895c0
mov r8d, ntohl
mov rcx, rax
lea rdx, str._under_path
call fcn.1400cdd30
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.1401895c0
mov rcx, rsi
call fcn.14018dbe0
lea rcx, [rsp + 0x1c8]
lea rdx, [rsp + 0x50]
mov r8, rdi
mov r9, rdi
call fcn.14017bca0
jmp 0x14004831a
lea rsi, [rsp + 0x1c8]
mov rdx, qword [rsi + 8]
mov rcx, rsi
call fcn.14017bbb0
lea rax, [rsp + 0x1d0]
mov qword [rsi], rax
xorps xmm6, xmm6
movups xmmword [rsi + 8], xmm6
mov r13d, 0x7fff
lea r14, [rsp + 0x1b0]
lea r15, [rsp + 0x1ac]
mov rdi, qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
xor ebx, ebx
xor ebp, ebp
jmp 0x1400485c5
mov ecx, 2
call fcn.14006a140
test al, al
je 0x1400488a1
lea rcx, [rsp + 0x50]
lea rdx, str.....chromeinstaller_setup_setup_util.cc
mov r8d, 0x20e
mov r9d, 2
call fcn.14018d7b0
mov r8d, 0x17
lea rcx, [rsp + 0x60]
lea rdx, str.Failed_to_delete_value
call fcn.1400cdd30
mov rcx, rax
mov rdx, r14
call fcn.1401895c0
mov r8d, 8
mov rcx, rax
lea rdx, str._in_key
call fcn.1400cdd30
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.1401895c0
lea rcx, [rsp + 0x50]
call fcn.14018dbe0
mov rcx, rsi
lea rdx, [rsp + 0x50]
mov r8, r14
mov r9, r14
call fcn.14017bca0
jmp 0x140048683
lea rcx, [rsp + 0x1b0]
call fcn.14014ae80
mov r9, rax
and r9, r12
dec r9
cmp r9, rdx
jae 0x140048248
mov rdx, qword [rsp + 0x1b8]
jmp 0x140048201
and rax, r12
dec rax
mov r9, rax
jmp 0x14004823b
mov r9, rax
and r9, r12
dec r9
cmp r9, rdx
jae 0x1400485c5
mov rdx, qword [rsp + 0x1b8]
jmp 0x14004857e
and rax, r12
dec rax
mov r9, rax
jmp 0x1400485b8