Function at 0x8fbce0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1328
call fcn.00a91950
mov eax, dword [0xb196ec]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov esi, ecx
push 0xfff
lea ecx, [ebp - 0x130f]
mov edi, edx
push 0
push ecx
mov dword [ebp - 0x1318], esi
mov dword [ebp - 0x1324], edi
mov dword [ebp - 0x1320], eax
mov byte [ebp - 0x1310], 0
call fcn.00a7ffb0
add esp, 0xc
mov ecx, esi
call fcn.00a55580
mov ebx, eax
mov dword [ebp - 0x131c], ebx
test ebx, ebx
je 0x8fbd73
movsx edx, byte [ebp + 0xc]
push esi
push edi
push edx
lea eax, [ebp - 0x1310]
push str._Browser__Chrome__Removed_Extension__c:__s___s_
push eax
call fcn.00a78f30
push 0
push 1
lea ecx, [ebp - 0x1310]
push ecx
push 0xb54ce8
call fcn.008808e0
add esp, 0x24
cmp dword [0xbd4ab0], 0
je 0x8fbfd6
lea edx, [ebp - 0x1314]
push edx
push 0xf003f
push 0
push str.SOFTWAREPoliciesGoogleChromeExtensionInstallForceList
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ebx, dword [sym.imp.KERNEL32.dll_SetLastError]
mov edi, eax
push edi
call ebx
test edi, edi
jne 0x8fbdcb
mov edi, dword [ebp - 0x1314]
push 1
push esi
call fcn.008fba30
mov eax, dword [ebp - 0x1314]
add esp, 8
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.00968110
test eax, eax
je 0x8fbe3e
call fcn.00968110
test eax, eax
jne 0x8fbdfc
lea ecx, [ebp - 0x1314]
push ecx
push 0xf003f
push eax
push str.SOFTWAREPoliciesGoogleChromeExtensionInstallForceList
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
jmp 0x8fbe17
lea edx, [ebp - 0x1314]
push edx
push 0xf013f
push str.SOFTWAREPoliciesGoogleChromeExtensionInstallForceList
push 0x80000002
call fcn.0097eda0
mov edi, eax
push edi
call ebx
test edi, edi
jne 0x8fbe3e
mov edi, dword [ebp - 0x1314]
push 1
push esi
call fcn.008fba30
mov eax, dword [ebp - 0x1314]
add esp, 8
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x1328]
push ecx
xor ebx, ebx
lea edx, [ebp - 0x1314]
push edx
push ebx
push 0xf003f
push ebx
push 0xaa1543
push ebx
push str.SOFTWAREPoliciesGoogleChromeExtensionInstallBlacklist
push 0x80000002
mov dword [ebp - 0x1328], ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
test edi, edi
jne 0x8fbefa
push edi
mov edi, dword [ebp - 0x1314]
push esi
call fcn.008fba30
add esp, 8
test eax, eax
jne 0x8fbeed
call fcn.00987cf0
cdq
mov ecx, 0x3e8
idiv ecx
mov edi, edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x3e8
div ecx
add edx, edi
push edx
lea edx, [ebp - 0x310]
push str.2719_lu
push edx
call fcn.00a78f30
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebp - 0x1314]
inc eax
push eax
push esi
push 1
push ebx
lea eax, [ebp - 0x310]
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ebx, 1
mov edx, dword [ebp - 0x1314]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.00968110
test eax, eax
je 0x8fbfb0
push 0
lea eax, [ebp - 0x1314]
push eax
push 0xf013f
push 0
push str.SOFTWAREPoliciesGoogleChromeExtensionInstallBlacklist
push 0x80000002
call fcn.0097ee40
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
test edi, edi
jne 0x8fbfb0
push edi
mov edi, dword [ebp - 0x1314]
push esi
call fcn.008fba30
add esp, 8
test eax, eax
jne 0x8fbfa3
call fcn.00987cf0
cdq
mov ecx, 0x3e8
idiv ecx
mov edi, edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x3e8
div ecx
add edx, edi
push edx
lea edx, [ebp - 0x310]
push str.2719_lu
push edx
call fcn.00a78f30
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebp - 0x1314]
inc eax
push eax
push esi
push 1
push 0
lea eax, [ebp - 0x310]
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ebx, 1
mov edx, dword [ebp - 0x1314]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x8fbfd0
mov eax, ebx
mov esi, str.ChromeBLAdded
mov ebx, 0xaa21e4
mov ecx, 0x80000002
call fcn.0094be90
mov esi, dword [ebp - 0x1318]
mov ebx, dword [ebp - 0x131c]
xor eax, eax
mov dword [ebp - 0x1318], eax
mov edi, edi
mov cl, byte [eax + str.C:UsersAdministratorAppDataLocalGoogleChromeUser_DataDefaultExtensions]
mov byte [ebp + eax - 0x20c], cl
inc eax
test cl, cl
jne 0x8fbfe0
cmp byte [ebp - 0x20c], cl
je 0x8fc028
lea eax, [ebp - 0x20c]
inc eax
cmp byte [eax], 0
jne 0x8fc000
lea ecx, [ebp - 0x20c]
sub eax, ecx
je 0x8fc028
cmp byte [ebp + eax - 0x20d], 0x5c
je 0x8fc028
push 0xaa1564
mov edx, ecx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, esi
mov edx, esi
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x8fc030
lea edi, [ebp - 0x20c]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x8fc040
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x20c]
call fcn.0095a450
test eax, eax
je 0x8fc0c5
mov edi, dword [ebp - 0x1320]
mov esi, 1
push esi
push 0x2c
lea eax, [ebp - 0x20c]
push eax
call fcn.0098d640
test eax, eax
je 0x8fc0cb
test ebx, ebx
jne 0x8fc0cb
mov ecx, dword [ebp - 0x1324]
movsx eax, byte [ebp + 0xc]
push ecx
lea edx, [ebp - 0x20c]
push edx
push eax
lea ecx, [ebp - 0x1310]
push str._Browser__Chrome__Removed_Extension_Folder__c:__s___s_
push ecx
call fcn.00a78f30
push ebx
push esi
lea edx, [ebp - 0x1310]
push edx
push 0xb54ce8
call fcn.008808e0
add esp, 0x24
jmp 0x8fc0cb
mov esi, dword [ebp - 0x1318]
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
or eax, ebx
pop esi
xor ecx, ebp
pop ebx
call fcn.00a78f21
mov esp, ebp
pop ebp
ret