Function at 0x14000bec0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
sub rsp, 0x580
mov rax, qword [0x1400c8090]
xor rax, rsp
mov qword [rsp + 0x570], rax
mov ebx, ecx
xor edx, edx
lea rcx, [rsp + 0x80]
mov r8d, 0xc8
call fcn.140042570
xor ebp, ebp
mov esi, ebp
sub ebx, 7
je 0x14000c12f
sub ebx, 0x7ff9
je 0x14000c12f
cmp ebx, 4
jne 0x14000c159
mov qword [rsp + 0x590], rdi
nop word [rax + rax]
xor edx, edx
mov dword [rsp + 0x70], 0x104
mov r8d, 0x208
lea rcx, [rsp + 0x150]
call fcn.140042570
xor edx, edx
lea rcx, [rsp + 0x360]
mov r8d, 0x208
call fcn.140042570
mov edx, 0x10000000
lea rcx, [0x14009ef68]
call qword [sym.imp.SETUPAPI.dll_SetupDiOpenClassRegKey]
mov rdi, rax
test rax, rax
je 0x14000c0a7
mov qword [rsp + 0x58], rbp
lea rax, [rsp + 0x60]
mov qword [rsp + 0x50], rbp
xor r9d, r9d
mov qword [rsp + 0x48], rbp
xor r8d, r8d
mov qword [rsp + 0x40], rbp
xor edx, edx
mov qword [rsp + 0x38], rbp
mov rcx, rdi
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x14000c09e
mov eax, dword [rsp + 0x60]
test eax, eax
je 0x14000c09e
mov ebx, ebp
nop dword [rax]
nop dword [rax + rax]
mov r9d, 0x104
lea r8, [rsp + 0x150]
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
jne 0x14000c09e
lea rax, [rsp + 0x68]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x150]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov rcx, qword [rsp + 0x68]
test eax, eax
jne 0x14000c098
lea rax, [rsp + 0x70]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea rdx, str.DriverDesc
lea rax, [rsp + 0x360]
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000c075
lea rdx, str.Dell_Touchpad
lea rcx, [rsp + 0x360]
call qword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x14000c093
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc ebx
cmp ebx, dword [rsp + 0x60]
jb 0x14000bfe0
mov ebx, 1
jmp 0x14000c0a9
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, ebp
mov ecx, 0x64
inc esi
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, 0x14
jge 0x14000c0c4
cmp ebx, 1
jne 0x14000bf30
mov r9d, ebx
mov dword [rsp + 0x20], esi
lea r8, str.Driver_Uninstallation_Status_:__d___iter_:__d._n
mov edx, 0x64
lea rcx, [rsp + 0x80]
call fcn.140002e00
lea r8, [rsp + 0x80]
mov ecx, 0x400
lea rdx, [0x14009ecc8]
call fcn.14000b010
mov rdi, qword [rsp + 0x590]
test ebx, ebx
je 0x14000c159
cmp dword [0x1400ca48c], ebp
je 0x14000c159
mov dword [0x1400ca5a4], 1
call fcn.140007350
mov rcx, qword [0x1400ca468]
call qword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x14000c159
mov eax, dword [0x1400ca5b0]
cmp eax, 1
jne 0x14000c150
movzx edx, al
mov ecx, eax
call fcn.140002870
test ax, ax
jne 0x14000c154
call fcn.1400069d0
jmp 0x14000c159
test eax, eax
jne 0x14000c159
call fcn.140006760
mov rcx, qword [rsp + 0x570]
xor rcx, rsp
call fcn.1400403f0
lea r11, [rsp + 0x580]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsp, r11
pop rsi
ret