Function at 0x1400763fc
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x238
movaps xmmword [rsp + 0x220], xmm6
mov r13, rdx
mov rdi, rcx
mov rax, qword [0x14021f030]
xor rax, rsp
mov qword [rsp + 0x218], rax
lea rax, [rsp + 0x208]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax - 8], rax
lea rcx, [rsp + 0x200]
mov qword [rsp + 0x1c8], rcx
mov qword [rsp + 0x1d0], rax
mov rsi, qword [r8]
mov r12, qword [r8 + 8]
cmp rsi, r12
je 0x1400764cc
lea rbx, [rsp + 0x48]
lea r14, [rsp + 0x1e0]
lea r15, [rsp + 0x1c8]
movzx eax, byte [rsi + 0x17]
test al, al
mov rcx, qword [rsi]
cmovns rcx, rsi
mov qword [rsp + 0x1e0], rcx
cmovs rax, qword [rsi + 8]
mov qword [rsp + 0x1e8], rax
mov rcx, rbx
mov rdx, r14
call fcn.14008d050
mov rcx, r15
mov rdx, rbx
call fcn.140077a9a
cmp byte [rsp + 0x5f], 0
jns 0x1400764c3
mov rcx, qword [rsp + 0x48]
call fcn.14019d34c
add rsi, 0x18
cmp rsi, r12
jne 0x14007647a
movaps xmm0, xmmword [0x1401e7440]
lea rbx, [rsp + 0x1e0]
movaps xmmword [rbx + 0x10], xmm0
movaps xmmword [rbx], xmm0
mov rcx, rbx
call fcn.14008b410
cmp byte [r13 + 0x17], 0
mov r8, r13
jns 0x1400764f8
mov r8, qword [r13]
mov rcx, rbx
mov rdx, rdi
mov r9d, ntohl
call fcn.14008aa20
test eax, eax
je 0x14007659c
mov edi, eax
mov ecx, 2
call fcn.1400ad460
cmp edi, 2
je 0x140076b40
test al, al
je 0x140076b40
lea rdx, str.....chromeinstaller_setup_setup_util.cc
lea rbx, [rsp + 0x48]
mov rcx, rbx
mov r8d, 0x192
mov r9d, 2
call fcn.1400ad510
lea rcx, [rsp + 0x58]
lea rdx, str.Failed_to_open
mov r8d, 0xf
call fcn.14002e9c2
mov rcx, rax
mov rdx, r13
call fcn.1400ae5c0
lea rdx, str.__result_
mov r8d, ntohl
mov rcx, rax
call fcn.14002e9c2
mov rcx, rax
mov edx, edi
call fcn.1400256d2
mov rcx, rbx
call fcn.1400ad9f0
jmp 0x140076b40
mov qword [rsp + 0x40], r13
movabs rbp, 0x7fffffffffffffff
lea r12, [rsp + 0x1d0]
xorps xmm6, xmm6
movups xmmword [r12], xmm6
mov qword [r12 - 8], r12
mov ecx, 0x210
call fcn.14019d310
lea rdi, [rsp + 0x1b0]
mov qword [rdi], rax
lea rcx, [rbp + 0x109]
mov qword [rdi + 0x10], rcx
mov qword [rdi + 8], 0x100
mov r8d, 0x202
mov rcx, rax
xor edx, edx
call fcn.1401a0cc0
lea r14, [rsp + 0x1ac]
mov r13, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov r15d, 0x14
xor ebx, ebx
xor esi, esi
mov eax, 0xa
cmp byte [rsp + 0x1c7], 0
jns 0x14007663c
mov rax, qword [rsp + 0x1c0]
and rax, rbp
dec rax
mov rcx, rax
shr rcx, 0x20
mov ecx, 0xffffffff
jne 0x14007663e
mov ecx, eax
mov dword [rsp + 0x1ac], ecx
mov edx, ecx
mov rcx, rdi
xor r8d, r8d
call fcn.140071bd4
cmp byte [rsp + 0x1c7], 0
mov r8, rdi
jns 0x140076667
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1e8]
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov edx, ebx
mov r9, r14
call r13
cmp eax, 0xea
jne 0x1400766ae
cmp byte [rsp + 0x1c7], 0
mov rax, qword [rsp + 0x1c0]
lea rdx, [rax + rax - 2]
cmovns rdx, r15
mov rcx, rdi
call fcn.140071050
jmp 0x140076611
test eax, eax
je 0x1400766d3
cmp eax, 0x103
jne 0x140076889
xor ebx, ebx
test sil, 1
mov esi, 0
jne 0x140076611
jmp 0x140076889
mov edx, dword [rsp + 0x1ac]
mov rcx, rdi
xor r8d, r8d
call fcn.140071bd4
lea rcx, [rsp + 0x1c8]
mov rdx, rdi
call fcn.140077ca6
test rax, rax
jne 0x140076882
movzx eax, byte [rsp + 0x1c7]
test al, al
mov rcx, qword [rsp + 0x1b0]
cmovns rcx, rdi
mov qword [rsp + 0x198], rcx
cmovs rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x1a0], rax
lea rcx, [rsp + 0x198]
call fcn.14008cf50
test al, al
je 0x1400767c3
mov rbp, r12
movzx eax, byte [rsp + 0x1c7]
test al, al
mov rcx, qword [rsp + 0x1b0]
cmovns rcx, rdi
mov qword [rsp + 0x188], rcx
cmovs rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x190], rax
lea r12, [rsp + 0x48]
mov rcx, r12
lea rdx, [rsp + 0x188]
call fcn.14008d050
lea rcx, [rsp + 0x200]
mov rdx, r12
call fcn.140077ca6
mov r12, rax
cmp byte [rsp + 0x5f], 0
jns 0x1400767ad
mov rcx, qword [rsp + 0x48]
call fcn.14019d34c
test r12, r12
mov r12, rbp
movabs rbp, 0x7fffffffffffffff
jne 0x14007686a
cmp byte [rsp + 0x1c7], 0
mov rdx, rdi
jns 0x1400767d8
mov rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x1e0]
call fcn.14008aba0
test eax, eax
jne 0x1400767f1
mov sil, 1
jmp 0x140076611
mov ecx, 2
call fcn.1400ad460
test al, al
je 0x14007686a
lea rcx, [rsp + 0x48]
lea rdx, str.....chromeinstaller_setup_setup_util.cc
mov r8d, 0x1cd
mov r9d, 2
call fcn.1400ad510
mov r8d, 0x18
lea rcx, [rsp + 0x58]
lea rdx, str.Failed_to_delete_subkey
call fcn.14002e9c2
mov rcx, rax
mov rdx, rdi
call fcn.1400ae5c0
mov r8d, ntohl
mov rcx, rax
lea rdx, str._under_path
call fcn.14002e9c2
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.1400ae5c0
lea rcx, [rsp + 0x48]
call fcn.1400ad9f0
lea rcx, [rsp + 0x1c8]
lea rdx, [rsp + 0x48]
mov r8, rdi
mov r9, rdi
call fcn.140077d40
inc ebx
jmp 0x140076611
cmp qword [rsp + 0x1d8], 0
je 0x140076a95
lea rdi, [rsp + 0x1c8]
mov rdx, qword [rdi + 8]
mov rcx, rdi
call fcn.140077c62
mov qword [rdi], r12
xorps xmm6, xmm6
movups xmmword [rdi + 8], xmm6
lea r14, [rsp + 0x1b0]
lea r15, [rsp + 0x1ac]
mov rsi, qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov r13d, 0x14
xor ebx, ebx
xor r12d, r12d
mov eax, 0xa
cmp byte [rsp + 0x1c7], 0
jns 0x140076902
mov rax, qword [rsp + 0x1c0]
and rax, rbp
dec rax
mov ecx, 0x7fff
cmp rax, 0x7fff
ja 0x140076904
mov ecx, eax
movsx edx, cx
mov dword [rsp + 0x1ac], edx
mov rcx, r14
xor r8d, r8d
call fcn.140071bd4
cmp byte [rsp + 0x1c7], 0
mov r8, r14
jns 0x14007692e
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1e8]
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov edx, ebx
mov r9, r15
call rsi
cmp eax, 0xea
jne 0x140076985
cmp dword [rsp + 0x1ac], 0x7ffe
ja 0x140076b18
cmp byte [rsp + 0x1c7], 0
mov rax, qword [rsp + 0x1c0]
lea rdx, [rax + rax - 2]
cmovns rdx, r13
mov rcx, r14
call fcn.140071050
jmp 0x1400768d8
test eax, eax
je 0x1400769ab
cmp eax, 0x103
jne 0x140076b18
xor ebx, ebx
test r12b, 1
mov r12d, 0
jne 0x1400768d8
jmp 0x140076b18
mov edx, dword [rsp + 0x1ac]
mov rcx, r14
xor r8d, r8d
call fcn.140071bd4
mov rcx, rdi
mov rdx, r14
call fcn.140077ca6
test rax, rax
jne 0x140076a8e
cmp byte [rsp + 0x1c7], 0
mov rdx, r14
jns 0x1400769e6
mov rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x1e0]
call fcn.14008b0a0
test eax, eax
jne 0x1400769ff
mov r12b, 1
jmp 0x1400768d8
mov ecx, 2
call fcn.1400ad460
test al, al
lea rdx, [rsp + 0x48]
je 0x140076a80
mov rcx, rdx
lea rdx, str.....chromeinstaller_setup_setup_util.cc
mov r8d, 0x20a
mov r9d, 2
call fcn.1400ad510
mov r8d, 0x17
lea rcx, [rsp + 0x58]
lea rdx, str.Failed_to_delete_value
call fcn.14002e9c2
mov rcx, rax
mov rdx, r14
call fcn.1400ae5c0
mov r8d, 8
mov rcx, rax
lea rdx, str._in_key
call fcn.14002e9c2
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.1400ae5c0
lea rcx, [rsp + 0x48]
call fcn.1400ad9f0
lea rdx, [rsp + 0x48]
mov rcx, rdi
mov r8, r14
mov r9, r14
call fcn.140077d40
inc ebx
jmp 0x1400768d8
lea rdx, [0x1401ee5aa]
lea rcx, [rsp + 0x1e0]
call fcn.14008aba0
test eax, eax
je 0x140076b18
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 2
call fcn.1400ad460
test al, al
je 0x140076b18
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str.....chromeinstaller_setup_setup_util.cc
lea rdi, [rsp + 0x48]
mov rcx, rdi
mov r8d, 0x1dc
mov r9d, 2
call fcn.1400ae3b0
lea rcx, [rsp + 0x58]
lea rdx, str.Failed_to_delete_key
mov r8d, 0x15
call fcn.14002e9c2
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.1400ae5c0
mov rcx, rdi
call fcn.1400ae4a0
cmp byte [rsp + 0x1c7], 0
jns 0x140076b2f
mov rcx, qword [rsp + 0x1b0]
call fcn.14019d34c
lea rcx, [rsp + 0x1c8]
mov rdx, qword [rcx + 8]
call fcn.140077c62
lea rcx, [rsp + 0x1e0]
call fcn.14008b520
lea rcx, [rsp + 0x200]
mov rdx, qword [rcx + 8]
call fcn.140077c62
mov rcx, qword [rsp + 0x218]
xor rcx, rsp
call fcn.14019eb90
movaps xmm6, xmmword [rsp + 0x220]
add rsp, 0x238
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret