Function at 0x140099450
Capabilities:
Delete registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3b8
movaps xmmword [rsp + 0x3a0], xmm6
mov r14, rcx
mov rax, qword [0x1401f5028]
xor rax, rsp
mov qword [rsp + 0x398], rax
call sub.chrome_elf.dll_IsBrowserProcess
test al, al
je 0x140099518
lea rsi, [rsp + 0x182]
mov r8d, 0x208
mov rcx, rsi
mov dl, 0xaa
call fcn.1400f5b50
mov word [rsi - 2], 0
lea rsi, [rsp + 0x180]
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x105
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [rax - 1]
cmp ecx, 0x103
ja 0x140099518
mov eax, eax
lea rdx, [rsp + 0x140]
mov qword [rdx], rsi
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x160]
mov rcx, rsi
call fcn.1400dcf00
lea rdi, [rsp + 0x40]
mov rcx, rsi
mov rdx, rdi
call fcn.1400e7140
mov rcx, rdi
call fcn.14003f820
mov rcx, rdi
call fcn.1400dcad0
mov rcx, rsi
call fcn.1400dcad0
call qword [sym.imp.chrome_elf.dll_GetInstallDetailsPayload]
mov rcx, rax
call fcn.140021120
call sub.chrome_elf.dll_SignalInitializeCrashReporting
lea rcx, [0x140147410]
call fcn.1400f0ed4
mov ecx, 1
call fcn.140021100
xor ecx, ecx
xor edx, edx
call fcn.1400078f0
mov rdi, qword [0x1401fcbd0]
movabs r13, 0xaaaaaaaaaaaaaaaa
lea rsi, [rsp + 0x80]
mov qword [rsi + 0x10], r13
movaps xmm6, xmmword [0x1401c8a80]
movaps xmmword [rsi], xmm6
lea rax, [0x1401ce540]
lea r8, [rsp + 0x180]
mov qword [r8], rax
mov qword [r8 + 8], 4
mov rcx, rdi
mov rdx, rsi
call fcn.1400dea30
mov al, byte [rsi + 0x17]
test al, al
mov rcx, qword [rsi + 8]
movzx ebp, al
mov rdx, rbp
cmovs rdx, rcx
cmp rdx, 0x10
jne 0x1400995ef
mov qword [rsp + 0x20], 0x10
lea r9, str.crashpad_handler
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400b8610
test eax, eax
je 0x1400997c3
mov al, byte [rsp + 0x97]
mov rcx, qword [rsp + 0x88]
movzx ebp, al
test al, al
cmovs rbp, rcx
cmp rbp, 0x10
jne 0x140099629
mov qword [rsp + 0x20], 0x10
lea r9, str.fallback_handler
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400b8610
test eax, eax
je 0x14009997b
lea rcx, [rsp + 0xa0]
mov qword [rcx], r13
call qword [fcn.1400e87b0]
call sub.chrome_elf.dll_SignalChromeElf
lea rcx, [rsp + 0x40]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.14009b3d0
movzx eax, byte [rsp + 0x97]
test al, al
jns 0x140099668
mov rax, qword [rsp + 0x88]
test rax, rax
je 0x14009969d
cmp rax, 0xb
jne 0x1400996a2
mov qword [rsp + 0x20], 0xb
lea r9, [0x1401ce52e]
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400b8610
test eax, eax
jne 0x1400996a2
call fcn.140043280
cmp qword [rdi + 0x38], 1
ja 0x140099a42
mov rbx, qword [rdi + 0x28]
add rdi, 0x30
cmp rbx, rdi
je 0x140099738
lea rsi, str.profile_directory
movzx eax, byte [rbx + 0x37]
test al, al
jns 0x1400996cd
mov rax, qword [rbx + 0x28]
cmp rax, 0x11
jne 0x140099a42
lea rcx, [rbx + 0x20]
mov qword [rsp + 0x20], 0x11
xor edx, edx
mov r8, 0xffffffffffffffff
mov r9, rsi
call fcn.1400b8610
test eax, eax
jne 0x140099a42
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140099713
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x140099706
jmp 0x140099730
mov rax, qword [rbx + 0x10]
cmp qword [rax], rbx
je 0x140099730
add rbx, 0x10
mov rcx, qword [rbx]
lea rbx, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x140099720
mov rbx, rax
cmp rax, rdi
jne 0x1400996c1
xorps xmm0, xmm0
lea rcx, [rsp + 0x180]
movaps xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
call fcn.140041960
test al, al
je 0x140099a35
lea rdx, [rsp + 0x180]
mov rcx, 0xffffffff80000002
call fcn.140042150
test al, al
jne 0x140099787
lea rdx, [rsp + 0x180]
mov rcx, 0xffffffff80000001
call fcn.140042150
lea rcx, [rsp + 0x180]
call fcn.14002f930
test rax, rax
je 0x140099a35
mov rcx, rax
call fcn.14014be00
mov esi, eax
lea rcx, [rsp + 0x180]
call fcn.1400dcad0
test esi, esi
jne 0x140099a42
xor esi, esi
jmp 0x14009a099
mov rcx, rdi
call fcn.14000ed90
lea rdx, str.no_periodic_tasks
mov rcx, rdi
call fcn.1400eaf60
test al, al
jne 0x1400998f6
lea rsi, [rsp + 0x180]
mov qword [rsi + 0x40], r13
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.14009cb10
lea r8, str.initial_client_data
lea r14, [rsp + 0x40]
mov rcx, rdi
mov rdx, r14
call fcn.1400dea30
mov rcx, rsi
mov rdx, r14
call fcn.140039c40
mov ebx, eax
cmp byte [r14 + 0x17], 0
jns 0x14009983a
mov rcx, qword [rsp + 0x40]
call fcn.1400f0498
test bl, bl
je 0x1400998f6
lea r14, [rsp + 0x160]
mov qword [r14], 0xffffffffffffffff
mov rbp, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call rbp
mov rbx, rax
mov rsi, qword [rsp + 0x1b8]
call rbp
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x400
mov rcx, rax
mov rdx, rsi
mov r8, rbx
mov r9, r14
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x1400998f6
lea r14, [rsp + 0x40]
movaps xmmword [r14], xmm6
mov rdx, qword [rsp + 0x160]
mov rcx, r14
call fcn.1400eb520
mov ecx, 0xa8
call fcn.1400f045c
mov rbx, rax
mov rcx, rax
call fcn.1400445f0
lea rsi, [rsp + 0x70]
mov rcx, rsi
mov rdx, r14
call fcn.14004ff20
mov rcx, rbx
mov rdx, rsi
call fcn.140043c10
test al, al
je 0x1400998ea
mov rcx, rbx
call fcn.1400205e0
lea rcx, [rsp + 0x40]
call fcn.1400eb220
jmp 0x1400998f8
xor ebx, ebx
lea rsi, [rsp + 0x180]
mov qword [rsi + 0x10], r13
movaps xmmword [rsi], xmm6
lea r14, str.user_data_dir
lea r8, [rsp + 0x40]
mov qword [r8], r14
mov qword [r8 + 8], 0xd
mov rcx, rdi
mov rdx, rsi
call fcn.14000f190
mov rcx, qword [0x1401fcbd0]
lea r8, [0x1401ce540]
mov rdx, rsi
mov r9, r14
call fcn.14009b940
mov esi, eax
test rbx, rbx
je 0x140099955
test esi, esi
je 0x140099955
mov rcx, rbx
call fcn.1401a3830
lea rcx, [rsp + 0x180]
call fcn.1400dcad0
test rbx, rbx
je 0x14009a0a3
mov rcx, rbx
call fcn.14003e7f0
mov rcx, rbx
jmp 0x140099e2f
lea rsi, [rsp + 0x180]
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call fcn.1400f5b50
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14009a0fc
movabs rbx, 0x7fffffffffffffef
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x170], rax
movaps xmmword [rsp + 0x160], xmm0
mov qword [rsp + 0x150], rax
movaps xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x130], rax
movaps xmmword [rsp + 0x120], xmm0
lea rcx, [rsp + 0x180]
call fcn.1400f080c
cmp rax, rbx
ja 0x14009a0ef
mov rsi, rax
cmp rax, 0xb
jae 0x140099c89
lea r15, [rsp + 0x100]
mov byte [r15 + 0x17], sil
mov r14, r15
test rsi, rsi
jne 0x140099cb9
jmp 0x140099ccf
lea rcx, [rsp + 0x180]
call fcn.1400dcad0
xorps xmm0, xmm0
lea rdx, [rsp + 0x180]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov ecx, 7
call fcn.14001f8f0
test al, al
je 0x140099f64
lea rsi, [rsp + 0x180]
mov rcx, rsi
call fcn.14009b410
test al, al
je 0x140099f64
lea rdi, [rsp + 0x160]
mov qword [rdi + 0x10], r13
movaps xmmword [rdi], xmm6
mov rcx, rdi
call fcn.14000e9c0
lea r8, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers
mov rcx, rdi
mov rdx, 0xffffffff80000001
mov r9d, 0x2001f
call fcn.14000ea70
test eax, eax
jne 0x140099f57
xorps xmm0, xmm0
movaps xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], 0
cmp byte [rsp + 0x197], 0
jns 0x140099ae6
mov rsi, qword [rsp + 0x180]
lea rcx, [rsp + 0x160]
lea rdi, [rsp + 0x140]
mov rdx, rsi
mov r8, rdi
call fcn.14000ec70
test eax, eax
jne 0x140099f40
mov qword [rsp + 0x38], r14
lea rcx, [rsp + 0x120]
mov qword [rcx + 0x10], r13
movaps xmmword [rcx], xmm6
lea rdx, [0x1401ce30e]
lea r8, [rsp + 0xc8]
movzx eax, byte [rsp + 0x157]
test al, al
cmovs rdi, qword [rsp + 0x140]
mov qword [r8], rdx
mov qword [r8 + 8], 1
lea rdx, [rsp + 0xb0]
mov qword [rdx], rdi
cmovs rax, qword [rsp + 0x148]
mov qword [rdx + 8], rax
mov dword [rsp + 0x20], 1
mov r9d, 1
call fcn.14004e400
lea rbp, str.WIN95
lea r12, [rsp + 0x100]
lea r14, str.WIN95
mov rbx, qword [rsp + 0x120]
mov r15, qword [rsp + 0x128]
cmp rbx, r15
je 0x140099be3
mov rsi, qword [rbp]
mov rcx, rsi
call fcn.1400f080c
movzx ecx, byte [rbx + 0x17]
test cl, cl
jns 0x140099bb8
mov rcx, qword [rbx + 8]
cmp rax, rcx
jne 0x140099bda
mov qword [rsp + 0x20], rax
mov rcx, rbx
xor edx, edx
mov r8, 0xffffffffffffffff
mov r9, rsi
call fcn.1400dd040
test eax, eax
je 0x140099c0f
add rbx, 0x18
cmp r15, rbx
jne 0x140099ba4
mov rbx, r15
mov r9, qword [rsp + 0x128]
lea rcx, [rsp + 0x120]
mov rdx, r12
mov r8, rbx
call fcn.140049be0
add rbp, 8
cmp rbp, r14
jne 0x140099b8b
jmp 0x140099e39
lea rax, [r15 - 0x18]
cmp rax, rbx
je 0x140099be6
lea rdi, [rbx + 0x18]
mov rcx, rsi
call fcn.1400f080c
movzx ecx, byte [rdi + 0x17]
test cl, cl
jns 0x140099c30
mov rcx, qword [rdi + 8]
cmp rax, rcx
jne 0x140099c52
mov qword [rsp + 0x20], rax
mov rcx, rdi
xor edx, edx
mov r8, 0xffffffffffffffff
mov r9, rsi
call fcn.1400dd040
test eax, eax
je 0x140099c7b
cmp byte [rbx + 0x17], 0
jns 0x140099c60
mov rcx, qword [rbx]
call fcn.1400f0498
mov rax, qword [rdi + 0x10]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rdi]
movups xmmword [rbx], xmm0
mov byte [rdi + 0x17], 0
mov word [rdi], 0
add rbx, 0x18
add rdi, 0x18
cmp r15, rdi
jne 0x140099c1c
jmp 0x140099be6
lea rbp, [rsi + 8]
and rbp, 0xfffffffffffffff8
mov rcx, rbp
add rcx, rbp
call fcn.1400f045c
mov r14, rax
lea r15, [rsp + 0x100]
mov qword [r15], rax
add rbx, 0x11
or rbx, rbp
mov qword [r15 + 0x10], rbx
mov qword [r15 + 8], rsi
mov r8, rsi
add r8, rsi
lea rdx, [rsp + 0x180]
mov rcx, r14
call fcn.1400f5740
mov word [r14 + rsi*2], 0
lea rbp, [rsp + 0x140]
mov qword [rsp + 0x20], rbp
lea rcx, [rsp + 0x100]
lea rsi, [rsp + 0x40]
lea rbx, [rsp + 0x160]
lea r9, [rsp + 0x120]
mov rdx, rsi
mov r8, rbx
call fcn.14009b5a0
cmp byte [r15 + 0x17], 0
jns 0x140099d1f
mov rcx, qword [rsp + 0x100]
call fcn.1400f0498
movzx eax, byte [rsp + 0x157]
test al, al
cmovs rbp, qword [rsp + 0x140]
lea rdx, [rsp + 0xf0]
mov qword [rdx], rbp
cmovs rax, qword [rsp + 0x148]
mov qword [rdx + 8], rax
lea r14, [rsp + 0x100]
mov rcx, r14
call fcn.1400d96e0
movzx eax, byte [rsp + 0x177]
test al, al
cmovs rbx, qword [rsp + 0x160]
lea rdx, [rsp + 0xe0]
mov qword [rdx], rbx
cmovs rax, qword [rsp + 0x168]
mov qword [rdx + 8], rax
lea rbx, [rsp + 0xc8]
mov rcx, rbx
call fcn.1400d96e0
movzx eax, byte [rsp + 0x57]
test al, al
cmovs rsi, qword [rsp + 0x40]
lea rdx, [rsp + 0xa0]
mov qword [rdx], rsi
cmovs rax, qword [rsp + 0x48]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0xb0]
mov rcx, rsi
call fcn.1400d96e0
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
mov r9, r14
call fcn.14014c200
mov esi, eax
cmp byte [rsp + 0x137], 0
jns 0x140099df1
mov rcx, qword [rsp + 0x120]
call fcn.1400f0498
cmp byte [rsp + 0x157], 0
jns 0x140099e08
mov rcx, qword [rsp + 0x140]
call fcn.1400f0498
cmp byte [rsp + 0x177], 0
jns 0x140099e1f
mov rcx, qword [rsp + 0x160]
call fcn.1400f0498
cmp byte [rsp + 0x57], 0
jns 0x14009a0a3
mov rcx, qword [rsp + 0x40]
call fcn.1400f0498
jmp 0x14009a0a3
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x128]
cmp rax, rcx
je 0x140099ed3
mov qword [rsp + 0x110], r13
movaps xmmword [rsp + 0x100], xmm6
lea r8, [rsp + 0xf0]
lea rdx, [0x1401ce30e]
mov qword [r8], rdx
mov qword [r8 + 8], 1
sub rcx, rax
sar rcx, 3
movabs rbp, 0xaaaaaaaaaaaaaaab
imul rbp, rcx
lea rdx, [rsp + 0xe0]
mov qword [rdx], rbp
mov qword [rdx + 8], rax
mov rcx, r12
call fcn.14004e9d0
cmp byte [rsp + 0x117], 0
jns 0x140099eba
mov r12, qword [rsp + 0x100]
cmp byte [rsp + 0x197], 0
mov r14, qword [rsp + 0x38]
jns 0x140099ee7
mov rdx, qword [rsp + 0x180]
jmp 0x140099eef
cmp byte [rsp + 0x197], 0
jns 0x140099f18
mov rdx, qword [rsp + 0x180]
jmp 0x140099f20
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x160]
mov r8, r12
call fcn.14002d930
cmp byte [rsp + 0x117], 0
jns 0x140099f33
mov rcx, qword [rsp + 0x100]
call fcn.1400f0498
jmp 0x140099f33
lea rdx, [rsp + 0x180]
mov r14, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea rcx, [rsp + 0x120]
call fcn.1400ca1b0
cmp byte [rsp + 0x157], 0
jns 0x140099f57
mov rcx, qword [rsp + 0x140]
call fcn.1400f0498
lea rcx, [rsp + 0x160]
call fcn.14000e9e0
lea rcx, [rsp + 0x180]
call fcn.1400dcad0
lea rcx, str..._.._chrome_app_chrome_exe_main_win.cc
mov edx, 0x28
call fcn.1400e83f0
test eax, eax
jle 0x140099fcb
lea rdx, str..._.._chrome_app_chrome_exe_main_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x170
mov r9d, 0xffffffff
call fcn.140002b90
lea rcx, [rsp + 0x190]
lea rdx, str.About_to_load_main_DLL.
mov r8d, 0x17
call fcn.1400d6670
mov rcx, rsi
call fcn.14002ed20
call fcn.140049d20
mov rdi, rax
mov r8, qword [rsp + 0xa0]
mov rcx, rax
mov rdx, r14
call fcn.14009a100
mov esi, eax
mov rcx, rdi
call fcn.14009a520
test rdi, rdi
je 0x14009a002
mov rax, qword [rdi]
mov rcx, rdi
mov edx, 1
call qword [rax]
mov al, byte [rsp + 0x97]
test al, al
mov rcx, qword [rsp + 0x88]
movzx ebp, al
mov rdx, rbp
cmovs rdx, rcx
cmp rdx, 7
jne 0x14009a063
mov qword [rsp + 0x20], 7
lea r9, [0x1401ce545]
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400b8610
test eax, eax
je 0x14009a0e8
mov al, byte [rsp + 0x97]
mov rcx, qword [rsp + 0x88]
movzx ebp, al
test al, al
cmovs rbp, rcx
cmp rbp, 5
jne 0x14009a099
mov qword [rsp + 0x20], 5
lea r9, [0x1401ce53a]
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400b8610
test eax, eax
je 0x14009a0e8
lea rcx, [rsp + 0x40]
call fcn.140042e90
cmp byte [rsp + 0x97], 0
jns 0x14009a0ba
mov rcx, qword [rsp + 0x80]
call fcn.1400f0498
mov rcx, qword [rsp + 0x398]
xor rcx, rsp
call fcn.1400f32c0
mov eax, esi
movaps xmm6, xmmword [rsp + 0x3a0]
add rsp, 0x3b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, esi
call fcn.14009b550
lea rcx, [rsp + 0x100]
call fcn.140126160
int3