Function at 0x44d210
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xfc
mov eax, dword [ebp + 0x10]
mov ecx, dword [0x5ff014]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x18]
xor edx, edx
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx - 4], ecx
mov edi, dword [eax]
mov ebx, dword [eax + 4]
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
cmp edi, ebx
je 0x44d290
lea esi, [ebp - 0xec]
movzx eax, byte [edi + 0xb]
mov ecx, edi
test al, al
jns 0x44d25e
mov ecx, dword [edi]
mov eax, dword [edi + 4]
push eax
push ecx
push esi
call fcn.004e8360
add esp, 0xc
lea ecx, [ebp - 0x28]
push esi
call fcn.005502a0
cmp byte [ebp - 0xe1], 0
jns 0x44d289
push dword [ebp - 0xec]
call fcn.00503da5
add esp, 4
add edi, 0xc
cmp edi, ebx
jne 0x44d24f
mov edi, dword [ebp + 8]
xor eax, eax
dec eax
lea esi, [ebp - 0x28]
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov ecx, esi
call fcn.0045a3c0
mov eax, dword [ebp + 0xc]
cmp byte [eax + 0xb], 0
jns 0x44d2b6
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, esi
push 0xb
push eax
push edi
call fcn.0045ed90
test eax, eax
je 0x44d341
mov esi, eax
push 2
call fcn.004deac0
add esp, 4
test al, al
je 0x44da1b
cmp esi, 2
je 0x44da1b
lea edi, [ebp - 0xec]
mov ecx, edi
push 2
push 0x1bb
push str..._.._chrome_installer_setup_setup_util.cc
call fcn.00454e90
lea eax, [ebp - 0xe4]
push 0xf
push str.Failed_to_open
push eax
call fcn.004d4870
add esp, 0xc
push dword [ebp + 0xc]
push eax
call fcn.00455670
add esp, 8
push 0xb
push str.__result_
push eax
call fcn.004d4870
add esp, 0xc
mov ecx, eax
push esi
call fcn.0042ab10
mov ecx, edi
call fcn.00455270
jmp 0x44da1b
lea eax, [ebp - 0x30]
xor edi, edi
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax - 4], eax
push 0x210
call fcn.00503d75
add esp, 4
lea esi, [ebp - 0x40]
mov dword [esi], eax
mov dword [esi + 8], 0x80000108
mov dword [esi + 4], 0x100
push 0x202
push edi
push eax
call fcn.00508060
add esp, 0xc
lea ebx, [ebp - 0x44]
mov dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x38]
mov ecx, SysReAllocString
and eax, ecx
dec eax
cmp byte [ebp - 0x35], 0
mov ecx, 4
cmovns eax, ecx
mov dword [ebp - 0x44], eax
mov ecx, esi
push 0
push eax
call fcn.004db8e0
cmp byte [ebp - 0x35], 0
mov eax, esi
jns 0x44d3b9
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x28]
sub esp, 0x20
xorps xmm0, xmm0
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp eax, 0xea
jne 0x44d400
cmp byte [ebp - 0x35], 0
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax - 2]
mov ecx, 8
cmovns eax, ecx
mov ecx, esi
push eax
call fcn.00442df0
jmp 0x44d38a
test eax, eax
je 0x44d42d
cmp eax, 0x103
jne 0x44d717
xor edi, edi
cmp byte [ebp - 0x100], 0
mov dword [ebp - 0x100], 0
jne 0x44d38a
jmp 0x44d717
mov ecx, esi
push 0
push dword [ebp - 0x44]
call fcn.004db8e0
movzx eax, byte [ebp - 0x35]
mov ecx, esi
mov dword [ebp - 0xf0], eax
test al, al
jns 0x44d455
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x44d506
mov dword [ebp - 0xf8], edi
movzx edx, byte [eax + 0x1b]
test dl, dl
mov dword [ebp - 0xf4], eax
jns 0x44d47c
mov edx, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
jmp 0x44d47f
add eax, 0x10
mov ebx, dword [ebp - 0xf0]
cmp edx, ebx
mov dword [ebp - 0xfc], edx
cmovb ebx, edx
test ebx, ebx
je 0x44d4a7
xor edi, edi
movzx edx, word [eax + edi*2]
cmp word [ecx + edi*2], dx
ja 0x44d4bd
jb 0x44d4b5
inc edi
cmp ebx, edi
jne 0x44d496
mov edx, dword [ebp - 0xfc]
cmp dword [ebp - 0xf0], edx
jae 0x44d4bd
mov eax, dword [ebp - 0xf4]
jmp 0x44d4f3
test ebx, ebx
je 0x44d4d8
xor edi, edi
movzx edx, word [ecx + edi*2]
cmp word [eax + edi*2], dx
ja 0x44d675
jb 0x44d4ea
inc edi
cmp ebx, edi
jne 0x44d4c3
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0xf0]
jae 0x44d675
mov eax, dword [ebp - 0xf4]
add eax, 4
mov eax, dword [eax]
test eax, eax
lea ebx, [ebp - 0x44]
mov edi, dword [ebp - 0xf8]
jne 0x44d466
push dword [ebp - 0xf0]
push ecx
call fcn.0045e2f0
add esp, 8
test al, al
je 0x44d650
movzx eax, byte [ebp - 0x35]
mov ecx, esi
test al, al
jns 0x44d52d
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
push eax
push ecx
lea ebx, [ebp - 0xec]
push ebx
call fcn.004e8360
add esp, 0xc
movzx ebx, byte [ebp - 0xe1]
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], ebx
lea eax, [ebp - 0xec]
test bl, bl
jns 0x44d573
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x44d62d
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0x104], ebx
movzx ecx, byte [edx + 0x1b]
test cl, cl
mov dword [ebp - 0xfc], edx
jns 0x44d5a0
mov ecx, dword [edx + 0x14]
mov edx, dword [edx + 0x10]
jmp 0x44d5a3
add edx, 0x10
mov ebx, dword [ebp - 0xf0]
cmp ecx, ebx
mov dword [ebp - 0x108], ecx
cmovb ebx, ecx
test ebx, ebx
je 0x44d5cb
xor edi, edi
movzx ecx, word [edx + edi*2]
cmp word [eax + edi*2], cx
ja 0x44d5e1
jb 0x44d5d9
inc edi
cmp ebx, edi
jne 0x44d5ba
mov ecx, dword [ebp - 0x108]
cmp dword [ebp - 0xf0], ecx
jae 0x44d5e1
mov edx, dword [ebp - 0xfc]
jmp 0x44d613
test ebx, ebx
je 0x44d5fc
xor edi, edi
movzx ecx, word [eax + edi*2]
cmp word [edx + edi*2], cx
ja 0x44d684
jb 0x44d60a
inc edi
cmp ebx, edi
jne 0x44d5e7
mov ecx, dword [ebp - 0x108]
cmp ecx, dword [ebp - 0xf0]
jae 0x44d684
mov edx, dword [ebp - 0xfc]
add edx, 4
mov edx, dword [edx]
xor ecx, ecx
test edx, edx
mov edi, dword [ebp - 0xf8]
mov ebx, dword [ebp - 0x104]
jne 0x44d58a
jmp 0x44d62f
xor ecx, ecx
test bl, bl
jns 0x44d645
push dword [ebp - 0xf4]
mov ebx, ecx
call fcn.00503da5
mov ecx, ebx
add esp, 4
test cl, cl
lea ebx, [ebp - 0x44]
jne 0x44d700
cmp byte [ebp - 0x35], 0
mov eax, esi
jns 0x44d65b
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x28]
push eax
call fcn.0045ee70
test eax, eax
jne 0x44d694
mov al, 1
mov dword [ebp - 0x100], eax
jmp 0x44d38a
mov edi, dword [ebp - 0xf8]
inc edi
lea ebx, [ebp - 0x44]
jmp 0x44d38a
mov cl, 1
mov edi, dword [ebp - 0xf8]
mov ebx, dword [ebp - 0x104]
jmp 0x44d62f
push 2
call fcn.004deac0
add esp, 4
test al, al
je 0x44d700
lea ecx, [ebp - 0xec]
push 2
push 0x1f6
push str..._.._chrome_installer_setup_setup_util.cc
call fcn.00454e90
push 0x18
push str.Failed_to_delete_subkey
lea eax, [ebp - 0xe4]
push eax
call fcn.004d4870
add esp, 0xc
push esi
push eax
call fcn.00455670
add esp, 8
push 0xc
push str._under_path
push eax
call fcn.004d4870
add esp, 0xc
push dword [ebp + 0xc]
push eax
call fcn.00455670
add esp, 8
lea ecx, [ebp - 0xec]
call fcn.00455270
lea ecx, [ebp - 0x34]
push esi
push esi
lea eax, [ebp - 0xec]
push eax
call fcn.0044ebf0
inc edi
jmp 0x44d38a
cmp dword [ebp - 0x2c], 0
je 0x44d991
lea esi, [ebp - 0x34]
mov ecx, esi
push dword [esi + 4]
call fcn.0044eba0
xor ecx, ecx
mov dword [esi + 8], ecx
lea eax, [ebp - 0x30]
mov dword [esi], eax
mov dword [ebp - 0x100], 0
mov dword [esi + 4], ecx
lea edi, [ebp - 0x40]
mov dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x38]
mov ecx, SysReAllocString
and eax, ecx
dec eax
cmp byte [ebp - 0x35], 0
mov ecx, 4
cmovns eax, ecx
mov ecx, 0x7fff
cmp eax, ecx
cmovae eax, ecx
mov dword [ebp - 0x44], eax
mov ecx, edi
push 0
push eax
call fcn.004db8e0
cmp byte [ebp - 0x35], 0
mov eax, edi
jns 0x44d78b
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x28]
sub esp, 0x20
xorps xmm0, xmm0
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x100]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
cmp eax, 0xea
jne 0x44d7e8
cmp dword [ebp - 0x44], 0x7ffe
ja 0x44d9ff
cmp byte [ebp - 0x35], 0
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax - 2]
mov ecx, 8
cmovns eax, ecx
mov ecx, edi
push eax
call fcn.00442df0
jmp 0x44d752
test eax, eax
je 0x44d81d
cmp eax, 0x103
jne 0x44d9ff
mov dword [ebp - 0x100], 0
cmp byte [ebp - 0xf0], 0
mov dword [ebp - 0xf0], 0
jne 0x44d752
jmp 0x44d9ff
mov ecx, edi
push 0
push dword [ebp - 0x44]
call fcn.004db8e0
movzx ecx, byte [ebp - 0x35]
mov edx, edi
test cl, cl
jns 0x44d839
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x44d8df
mov dword [ebp - 0xf4], ecx
movzx ebx, byte [eax + 0x1b]
test bl, bl
mov dword [ebp - 0xf8], eax
jns 0x44d860
mov ebx, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
jmp 0x44d863
add eax, 0x10
cmp ebx, ecx
mov dword [ebp - 0xfc], ebx
cmovb ecx, ebx
test ecx, ecx
je 0x44d885
xor ebx, ebx
movzx esi, word [eax + ebx*2]
cmp word [edx + ebx*2], si
ja 0x44d89b
jb 0x44d893
inc ebx
cmp ecx, ebx
jne 0x44d874
mov esi, dword [ebp - 0xfc]
cmp dword [ebp - 0xf4], esi
jae 0x44d89b
mov eax, dword [ebp - 0xf8]
jmp 0x44d8c9
test ecx, ecx
je 0x44d8b2
xor ebx, ebx
movzx esi, word [edx + ebx*2]
cmp word [eax + ebx*2], si
ja 0x44d8f9
jb 0x44d8c0
inc ebx
cmp ecx, ebx
jne 0x44d8a1
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0xf4]
jae 0x44d8f9
mov eax, dword [ebp - 0xf8]
add eax, 4
mov eax, dword [eax]
test eax, eax
lea ebx, [ebp - 0x44]
lea esi, [ebp - 0x34]
mov ecx, dword [ebp - 0xf4]
jne 0x44d84a
lea ecx, [ebp - 0x28]
push edx
call fcn.0045f120
test eax, eax
jne 0x44d90a
mov al, 1
mov dword [ebp - 0xf0], eax
jmp 0x44d752
inc dword [ebp - 0x100]
lea ebx, [ebp - 0x44]
lea esi, [ebp - 0x34]
jmp 0x44d752
push 2
call fcn.004deac0
add esp, 4
test al, al
je 0x44d976
lea ecx, [ebp - 0xec]
push 2
push 0x233
push str..._.._chrome_installer_setup_setup_util.cc
call fcn.00454e90
push 0x17
push str.Failed_to_delete_value
lea eax, [ebp - 0xe4]
push eax
call fcn.004d4870
add esp, 0xc
push edi
push eax
call fcn.00455670
add esp, 8
push 8
push str._in_key
push eax
call fcn.004d4870
add esp, 0xc
push dword [ebp + 0xc]
push eax
call fcn.00455670
add esp, 8
lea ecx, [ebp - 0xec]
call fcn.00455270
mov ecx, esi
push edi
push edi
lea eax, [ebp - 0xec]
push eax
call fcn.0044ebf0
inc dword [ebp - 0x100]
jmp 0x44d752
lea ecx, [ebp - 0x28]
push 0x5dc5ba
call fcn.0045ee70
test eax, eax
je 0x44d9ff
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 2
call fcn.004deac0
add esp, 4
test al, al
je 0x44d9ff
call fcn.00551fb0
lea esi, [ebp - 0xec]
mov ecx, esi
push eax
push 2
push 0x205
push str..._.._chrome_installer_setup_setup_util.cc
call fcn.005520e0
push 0x15
push str.Failed_to_delete_key
lea eax, [ebp - 0xe4]
push eax
call fcn.004d4870
add esp, 0xc
push dword [ebp + 0xc]
push eax
call fcn.00455670
add esp, 8
mov ecx, esi
call fcn.00552140
cmp byte [ebp - 0x35], 0
jns 0x44da10
push dword [ebp - 0x40]
call fcn.00503da5
add esp, 4
lea ecx, [ebp - 0x34]
push dword [ecx + 4]
call fcn.0044eba0
lea ecx, [ebp - 0x28]
call fcn.0045ee00
lea ecx, [ebp - 0x1c]
push dword [ecx + 4]
call fcn.0044eba0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00504596
add esp, 0xfc
pop esi
pop edi
pop ebx
pop ebp
ret