Function at 0x44b980
Capabilities:
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
call fcn.005dfd60
mov edi, dword [ebp + 0xc]
xor ebx, ebx
add esp, 0xc
mov byte [ebp - 0x108], bl
mov dword [ebp - 0x110], 0x104
test edi, edi
jne 0x44b9e8
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x108]
push edx
push str.10018
push str.SOFTWAREPoliciesGoogleChromeURLBlacklist
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5770
jmp 0x44ba40
push 1
lea eax, [ebp - 0x10c]
push eax
push str.SOFTWAREPoliciesGoogleChromeURLBlacklist
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004faef0
add esp, 0x10
test eax, eax
jne 0x44ba40
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x108]
push edx
push eax
push eax
mov eax, dword [ebp - 0x10c]
push str.10018
push eax
mov dword [ebp - 0x114], 0x104
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [ebp - 0x10c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp + 8]
cmp eax, 1
jne 0x44ba70
lea edx, [ebp - 0x108]
push str.chrome:__settings
push edx
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x44baa5
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0x44bb4e
lea eax, [ebp - 0x108]
push str.chrome:__
push eax
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x44bb1c
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret
mov ecx, dword [str.chrome:__settings]
mov edx, dword [0x623250]
mov eax, dword [0x623254]
mov dword [ebp - 0x108], ecx
mov ecx, dword [0x623258]
mov dword [ebp - 0x104], edx
mov dx, word [0x62325c]
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], ecx
mov word [ebp - 0xf8], dx
mov ebx, 1
test edi, edi
jne 0x44bbc3
lea ecx, [ebp - 0x108]
push ecx
push str.10018
push str.SOFTWAREPoliciesGoogleChromeURLBlacklist
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
pop edi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret
mov eax, dword [str.chrome:__]
mov ecx, dword [0x623244]
mov dx, word [0x623248]
mov dword [ebp - 0x108], eax
mov al, byte [0x62324a]
mov dword [ebp - 0x104], ecx
mov word [ebp - 0x100], dx
mov byte [ebp - 0xfe], al
jmp 0x44bae2
test eax, eax
jne 0x44bc1b
push str.10018
push str.SOFTWAREPoliciesGoogleChromeURLBlacklist
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e9430
call fcn.004d96c0
test eax, eax
je 0x44bbb1
push 1
lea ecx, [ebp - 0x10c]
push ecx
push str.SOFTWAREPoliciesGoogleChromeURLBlacklist
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004faef0
add esp, 0x10
test eax, eax
jne 0x44bbb1
mov edx, dword [ebp - 0x10c]
push str.10018
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x10c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret
push 1
lea edx, [ebp - 0x10c]
push edx
push str.SOFTWAREPoliciesGoogleChromeURLBlacklist
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004faef0
add esp, 0x10
test eax, eax
jne 0x44bc1b
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, dword [ebp - 0x10c]
inc eax
push eax
lea ecx, [ebp - 0x108]
push ecx
push 1
push 0
push str.10018
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [ebp - 0x10c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
pop edi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret