Function at 0x1400a2390
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x780]
sub rsp, 0x880
mov rax, qword [0x14026de28]
xor rax, rsp
mov qword [rbp + 0x760], rax
xor esi, esi
mov qword [rsp + 0x48], rdx
mov dword [rsp + 0x40], esi
mov rdi, rdx
mov rdx, qword [rdx + 8]
mov rbx, rcx
mov qword [rsp + 0x8c0], r13
test rdx, rdx
je 0x1400a240a
mov r8, qword [rdx + 8]
test r8, r8
je 0x1400a240a
mov rdx, qword [rdx]
lea rcx, [rbp + 0x3c0]
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x3d0], xmm0
mov word [rbp + 0x3c0], si
call fcn.140025490
jmp 0x1400a2421
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x3d0], xmm0
mov word [rbp + 0x3c0], si
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x1400a245b
mov r8, qword [rdx + 8]
test r8, r8
je 0x1400a245b
mov rdx, qword [rdx]
lea rcx, [rbp + 0x400]
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x410], xmm0
mov word [rbp + 0x400], si
call fcn.140025490
jmp 0x1400a2472
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x410], xmm0
mov word [rbp + 0x400], si
mov r8, qword [rbp + 0x418]
mov rdx, qword [rbp + 0x410]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x1400a24c2
cmp r8, 8
lea rcx, [rdx + 1]
mov qword [rbp + 0x410], rcx
lea rax, [rbp + 0x400]
cmovae rax, qword [rbp + 0x400]
mov r8d, 0x5c
mov word [rax + rdx*2], r8w
mov word [rax + rcx*2], si
lea rax, [rbp + 0x400]
jmp 0x1400a24e8
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020288c]
lea rcx, [rbp + 0x400]
lea edx, [r8 + 1]
call fcn.1400364f0
movups xmm0, xmmword [rax]
mov qword [rsp + 0x878], r14
mov qword [rsp + 0x870], r15
movups xmmword [rbp + 0x3e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x3f0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp + 0x3f8]
mov r13, qword [rbp + 0x3f0]
mov rcx, rdx
mov r12, qword [rbp + 0x3d0]
sub rcx, r13
mov r8, qword [rbp + 0x3d8]
cmp r12, rcx
jbe 0x1400a2638
mov rax, r8
sub rax, r12
cmp rax, r13
jb 0x1400a2638
cmp rdx, 8
lea r14, [rbp + 0x3e0]
cmovae r14, qword [rbp + 0x3e0]
lfence
cmp r13, rax
ja 0x1400a2613
mov rdi, qword [rbp + 0x3f0]
lea r15, [rbp + 0x3c0]
add qword [rbp + 0x3d0], rdi
cmp qword [rbp + 0x3d8], 8
cmovae r15, qword [rbp + 0x3c0]
lea rcx, [rdi + rdi]
lea rax, [rcx + r14]
cmp rax, r15
jbe 0x1400a25c3
lea rax, [r15 + r12*2]
cmp r14, rax
ja 0x1400a25c3
cmp r15, r14
ja 0x1400a25ba
mov rdi, rsi
jmp 0x1400a25c3
mov rdi, r15
sub rdi, r14
sar rdi, 1
lea r8, [r12*2 + 2]
add rcx, r15
mov rdx, r15
call fcn.14017e030
lea rbx, [rdi + rdi]
mov rdx, r14
mov r8, rbx
mov rcx, r15
call fcn.14017e030
lea rax, [rdi + r13]
mov r8, r13
sub r8, rdi
lea rdx, [r14 + rax*2]
add r8, r8
lea rcx, [r15 + rbx]
call fcn.14017e030
mov rdi, qword [rsp + 0x48]
lea rax, [rbp + 0x3c0]
jmp 0x1400a26ad
mov rdx, qword [rbp + 0x3f0]
lea rcx, [rbp + 0x3c0]
mov qword [rsp + 0x28], rdx
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r14
call fcn.1400413e0
jmp 0x1400a26ad
cmp r8, 8
lea r9, [rbp + 0x3c0]
cmovae r9, qword [rbp + 0x3c0]
cmp r12, rcx
ja 0x1400a268f
cmp rdx, 8
lea rax, [r12 + r13]
lea rbx, [rbp + 0x3e0]
mov qword [rbp + 0x3f0], rax
cmovae rbx, qword [rbp + 0x3e0]
lea r8, [r12 + r12]
mov rdx, r9
lea rcx, [rbx + r13*2]
call fcn.14017e030
lea rax, [r12 + r13]
mov word [rbx + rax*2], si
lea rax, [rbp + 0x3e0]
jmp 0x1400a26ad
lfence
mov rdx, qword [rbp + 0x3d0]
lea rcx, [rbp + 0x3e0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400364f0
movups xmm0, xmmword [rax]
mov r13, qword [rsp + 0x8c0]
movups xmmword [rbp + 0x440], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x450], xmm1
mov word [rax], si
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], rsi
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 8
jb 0x1400a271f
mov rcx, qword [rbp + 0x3e0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a271a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2e7d
call fcn.14014e088
mov rdx, qword [rbp + 0x418]
mov qword [rbp + 0x3f0], rsi
mov qword [rbp + 0x3f8], 7
mov word [rbp + 0x3e0], si
cmp rdx, 8
jb 0x1400a277e
mov rcx, qword [rbp + 0x400]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2779
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2e7d
call fcn.14014e088
mov rdx, qword [rbp + 0x3d8]
movdqa xmm0, xmmword [0x1402022e0]
mov word [rbp + 0x400], si
movdqu xmmword [rbp + 0x410], xmm0
cmp rdx, 8
jb 0x1400a27db
mov rcx, qword [rbp + 0x3c0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a27d6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2e7d
call fcn.14014e088
cmp qword [rbp + 0x458], 8
lea rcx, [rbp + 0x440]
cmovae rcx, qword [rbp + 0x440]
xor edx, edx
lea r8d, [rdx + 1]
call fcn.14009c890
mov r12, rax
test rax, rax
je 0x1400a28d1
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x1400a286c
xor r9d, r9d
lea rdx, str.C:uworkspace03_20cefwinauto_srcipccef_plugin_win.cpp
lea rcx, [rbp - 0x40]
lea r8d, [r9 + 0x1b]
call fcn.1400be000
lea rdx, [rbp + 0x460]
mov rcx, rdi
mov rbx, rax
call fcn.1400100d0
lea rcx, [rbx + 8]
mov rdi, rax
lea rdx, str.Loaded_dependency_module
call fcn.140002500
cmp qword [rdi + 0x18], 0x10
mov r8, qword [rdi + 0x10]
jb 0x1400a285c
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140003580
mov esi, 3
test sil, 2
je 0x1400a287e
and esi, 0xfffffffd
lea rcx, [rbp - 0x40]
call fcn.1400be360
test sil, 1
je 0x1400a2df9
mov rdx, qword [rbp + 0x478]
cmp rdx, 0x10
jb 0x1400a2df9
mov rcx, qword [rbp + 0x460]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2df4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2e71
jmp 0x1400a2df4
movaps xmm0, xmmword [str.SOFTWARENVIDIA_CorporationNvContainerModuleMap]
lea rcx, [rbp + 0x550]
movaps xmm1, xmmword [0x1402070a0]
xor edx, edx
mov eax, dword [0x1402070f0]
mov r8d, 0x208
movaps xmmword [rbp + 0x4e0], xmm0
movaps xmm0, xmmword [0x1402070b0]
movaps xmmword [rbp + 0x4f0], xmm1
movaps xmm1, xmmword [0x1402070c0]
movaps xmmword [rbp + 0x500], xmm0
movaps xmm0, xmmword [0x1402070d0]
movaps xmmword [rbp + 0x510], xmm1
movaps xmm1, xmmword [0x1402070e0]
movaps xmmword [rbp + 0x520], xmm0
movaps xmmword [rbp + 0x530], xmm1
mov dword [rbp + 0x540], eax
call fcn.14017e440
mov rdx, qword [rdi + 8]
mov dword [rsp + 0x40], 0x208
test rdx, rdx
je 0x1400a299e
mov r8, qword [rdx + 8]
test r8, r8
je 0x1400a299e
mov rdx, qword [rdx]
lea rcx, [rbp + 0x420]
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x430], xmm0
mov word [rbp + 0x420], si
call fcn.140025490
cmp qword [rbp + 0x438], 8
lea r8, [rbp + 0x420]
cmovae r8, qword [rbp + 0x420]
jmp 0x1400a29bc
movdqa xmm0, xmmword [0x1402022e0]
lea r8, [rbp + 0x420]
movdqu xmmword [rbp + 0x430], xmm0
mov word [rbp + 0x420], si
lea rax, [rsp + 0x40]
mov r9d, 2
mov qword [rsp + 0x30], rax
lea rdx, [rbp + 0x4e0]
lea rax, [rbp + 0x550]
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov rdx, qword [rbp + 0x438]
mov r15d, eax
cmp rdx, 8
jb 0x1400a2a3a
mov rcx, qword [rbp + 0x420]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2a35
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2e83
call fcn.14014e088
test r15d, r15d
jne 0x1400a2b3b
cmp word [rbp + 0x550], si
je 0x1400a2b3b
xor edx, edx
lea r8d, [r15 + 1]
lea rcx, [rbp + 0x550]
call fcn.14009c890
mov r12, rax
test rax, rax
je 0x1400a2d0a
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x1400a2ad3
xor r9d, r9d
lea r8d, [r15 + 0x36]
lea rdx, str.C:uworkspace03_20cefwinauto_srcipccef_plugin_win.cpp
lea rcx, [rbp + 0xc0]
lea esi, [r15 + 0x30]
call fcn.1400be000
lea rdx, [rbp + 0x480]
mov rcx, rdi
mov rbx, rax
call fcn.1400100d0
lea rcx, [rbx + 8]
mov rdi, rax
lea rdx, str.Loaded_dependency_module_from_system_path
call fcn.140002500
cmp qword [rdi + 0x18], 0x10
mov r8, qword [rdi + 0x10]
jb 0x1400a2ac8
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140003580
test sil, 0x20
je 0x1400a2ae8
and esi, 0xffffffdf
lea rcx, [rbp + 0xc0]
call fcn.1400be360
test sil, 0x10
je 0x1400a2df9
mov rdx, qword [rbp + 0x498]
cmp rdx, 0x10
jb 0x1400a2df9
mov rcx, qword [rbp + 0x480]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2df4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2e77
jmp 0x1400a2df4
call sub.libcef.dll_cef_get_min_log_level
cmp eax, 2
jg 0x1400a2cab
mov r9d, 2
lea rdx, str.C:uworkspace03_20cefwinauto_srcipccef_plugin_win.cpp
lea rcx, [rbp + 0x1c0]
lea r8d, [r9 + 0x2f]
call fcn.1400be000
lea rdx, [rbp + 0x4a0]
mov rcx, rdi
mov rbx, rax
call fcn.1400100d0
lea rcx, [rbx + 8]
mov rdi, rax
lea rdx, str.Failed_to_map_module
call fcn.140002500
cmp qword [rdi + 0x18], 0x10
mov r8, qword [rdi + 0x10]
jb 0x1400a2b99
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140003580
lea rdx, str.._Error
mov rcx, rax
call fcn.140002500
mov rdx, rax
lea rcx, [rsp + 0x60]
mov rdi, rax
call fcn.140006d30
cmp byte [rsp + 0x68], sil
je 0x1400a2c6a
mov rcx, qword [rdi]
movsxd rdx, dword [rcx + 4]
mov rcx, qword [rdx + rdi + 0x40]
mov rbx, qword [rcx + 8]
mov rcx, rbx
mov qword [rsp + 0x58], rbx
mov rdx, qword [rbx]
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rsp + 0x50]
call fcn.140004b30
mov r14, rax
test rbx, rbx
je 0x1400a2c1a
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
test rax, rax
je 0x1400a2c1a
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
mov rax, qword [rdi]
lea r8, [rsp + 0x70]
mov r10, qword [r14]
lea rdx, [rbp - 0x80]
mov byte [rsp + 0x50], sil
mov rcx, r14
mov dword [rsp + 0x28], r15d
movsxd r9, dword [rax + 4]
add r9, rdi
mov rax, qword [r9 + 0x48]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movzx eax, byte [r9 + 0x58]
movdqa xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x20], al
call qword [r10 + 0x48]
cmp byte [rbp - 0x80], sil
mov eax, 4
cmovne esi, eax
mov rax, qword [rdi]
movsxd rdx, dword [rax + 4]
add rdx, rdi
mov eax, dword [rdx + 0x10]
or eax, esi
mov ecx, eax
or ecx, 4
cmp qword [rdx + 0x48], 0
cmovne ecx, eax
mov eax, dword [rdx + 0x14]
and ecx, 0x17
mov dword [rdx + 0x10], ecx
and eax, ecx
jne 0x1400a2e89
lea rcx, [rsp + 0x60]
call fcn.1400085c0
mov rdi, qword [rsp + 0x48]
mov esi, reloc.SHLWAPI.dll_SHCreateMemStream
test sil, 8
je 0x1400a2cc0
and esi, 0xfffffff7
lea rcx, [rbp + 0x1c0]
call fcn.1400be360
test sil, 4
je 0x1400a2d0a
mov rdx, qword [rbp + 0x4b8]
and esi, 0xfffffffb
cmp rdx, 0x10
jb 0x1400a2d0a
mov rcx, qword [rbp + 0x4a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2d05
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2ed0
call fcn.14014e088
call sub.libcef.dll_cef_get_min_log_level
cmp eax, 2
jg 0x1400a2d9d
mov r9d, 2
lea rdx, str.C:uworkspace03_20cefwinauto_srcipccef_plugin_win.cpp
lea rcx, [rbp + 0x2c0]
or esi, 0xc0
lea r8d, [r9 + 0x38]
call fcn.1400be000
lea rdx, [rbp + 0x4c0]
mov rcx, rdi
mov rbx, rax
call fcn.1400100d0
lea rcx, [rbx + 8]
mov rdi, rax
lea rdx, str.Failed_to_load_dependency
call fcn.140002500
cmp qword [rdi + 0x18], 0x10
mov r8, qword [rdi + 0x10]
jb 0x1400a2d6e
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140003580
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.._Error
mov rcx, rbx
mov edi, eax
call fcn.140002500
mov rcx, rax
mov edx, edi
call fcn.140049cc0
test sil, sil
jns 0x1400a2db2
btr esi, 7
lea rcx, [rbp + 0x2c0]
call fcn.1400be360
test sil, 0x40
je 0x1400a2df9
mov rdx, qword [rbp + 0x4d8]
cmp rdx, 0x10
jb 0x1400a2df9
mov rcx, qword [rbp + 0x4c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2df4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2ed6
call fcn.14014e088
mov rdx, qword [rbp + 0x458]
cmp rdx, 8
jb 0x1400a2e3b
mov rcx, qword [rbp + 0x440]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2e36
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2e6b
call fcn.14014e088
mov r15, qword [rsp + 0x870]
mov rax, r12
mov r14, qword [rsp + 0x878]
mov rcx, qword [rbp + 0x760]
xor rcx, rsp
call fcn.14014e130
add rsp, 0x880
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3
test al, 4
je 0x1400a2e96
lea rbx, str.ios_base::badbit_set
jmp 0x1400a2eaa
test al, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp - 0x70]
call fcn.1400157c0
mov r8, rax
lea rcx, [rbp - 0x60]
mov rdx, rbx
call fcn.140006be0
mov rcx, rax
call fcn.140012c20
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3