Function at 0x43ed50
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45cf5b
mov eax, dword fs:[0]
push eax
sub esp, 0x9c
mov eax, dword [0x476458]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor ebx, ebx
xor ecx, ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], cx
push ebx
mov eax, 0x106
lea edi, [ebp - 0x2c]
mov dword [ebp - 4], ebx
call fcn.0042a330
mov edi, 8
cmp dword [ebp - 0x18], edi
jb 0x43edce
mov eax, dword [ebp - 0x2c]
mov esi, eax
cmp eax, ebx
jne 0x43edd1
push ebx
call fcn.004410cb
add esp, 4
or eax, 0xffffffff
jmp 0x43efe7
lea esi, [ebp - 0x2c]
lea edx, [ebp - 0x9c]
push edx
push 1
push ebx
mov eax, 0x105
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
push connect
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa4], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x43ee42
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 0xa0]
push eax
push esi
lea ecx, [ebp - 0xa4]
push ecx
push ebx
push str.InstallLocation
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
dec eax
push ecx
mov dword [ebp - 0x98], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x43ee4d
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x1c]
push edx
push eax
call fcn.00441639
mov edx, dword [ebp - 0x1c]
mov ecx, eax
add esp, 8
cmp ecx, edx
ja 0x43ee70
or eax, 0xffffffff
lea esi, [ebp - 0x2c]
call fcn.00403110
jmp 0x43ee7d
mov eax, ecx
push ebx
sub eax, edx
lea edi, [ebp - 0x2c]
call fcn.0042a330
cmp dword [ebp - 0x1c], ebx
jne 0x43efc0
push ebx
mov eax, 0x106
lea edi, [ebp - 0x2c]
call fcn.0042a330
mov eax, dword [ebp - 0x2c]
mov edi, 8
cmp dword [ebp - 0x18], edi
jae 0x43eea4
lea eax, [ebp - 0x2c]
push eax
push str.InstallLocation
push reloc.WS2_32.dll_bind
lea esi, [ebp - 0x98]
mov edx, str.SoftwareMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
call fcn.0043e4a0
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x43eecd
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
push ecx
push eax
call fcn.00441639
mov edx, dword [ebp - 0x1c]
mov ecx, eax
add esp, 8
cmp ecx, edx
ja 0x43eef0
or eax, 0xffffffff
lea esi, [ebp - 0x2c]
call fcn.00403110
jmp 0x43eefd
mov eax, ecx
push ebx
sub eax, edx
lea edi, [ebp - 0x2c]
call fcn.0042a330
cmp dword [ebp - 0x1c], ebx
jne 0x43efc0
lea edx, [ebp - 0x74]
mov ebx, vtable.af_path_temp_class_af_path_impl_win_tempW__class_af_stringW_.0
push edx
mov dword [ebp - 0x78], ebx
call fcn.004038f0
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 1
call fcn.0043f130
add esp, 4
cmp byte [ebp - 0x70], 0
je 0x43ef39
lea edi, [ebp - 0x74]
call fcn.00403b60
mov byte [ebp - 0x70], 0
cmp dword [ebp - 0x38], 0
jne 0x43ef5a
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x78], ebx
call fcn.00403ac0
lea esi, [ebp - 0x2c]
call fcn.004337f0
or eax, 0xffffffff
jmp 0x43efe7
mov eax, str.GoogleChromeApplication
lea ecx, [ebp - 0x94]
call fcn.00409080
lea ecx, [ebp - 0x94]
push ecx
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 2
call fcn.00403d20
lea esi, [ebp - 0x94]
mov byte [ebp - 4], 1
call fcn.004337f0
cmp byte [ebp - 0x70], 0
je 0x43ef9e
lea edi, [ebp - 0x74]
call fcn.00403b60
mov byte [ebp - 0x70], 0
push 0
lea edx, [ebp - 0x48]
push edx
or eax, 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402ec0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x78], ebx
call fcn.00403ac0
xor ebx, ebx
mov ecx, dword [ebp - 0xa8]
push ebx
lea eax, [ebp - 0x2c]
push eax
or eax, 0xffffffff
call fcn.00402ec0
cmp dword [ebp - 0x18], 8
jb 0x43efe5
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004410cb
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00440ba3
mov esp, ebp
pop ebp
ret