Function at 0x44de30
Capabilities:
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x599c2d
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x6204e0]
xor eax, esp
mov dword [esp + 0xd0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6204e0]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
mov esi, dword [esp + 0xf8]
call fcn.00415720
cmp dword [eax + 0xac8], 6
jae 0x44df0e
push 0x74
xor edi, edi
push str.SYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList
lea ecx, [esp + 0x40]
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], edi
mov byte [esp + 0x44], 0
call fcn.0040bad0
push esi
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x5c]
push reloc.WS2_32.dll_bind
push ecx
mov dword [esp + 0x100], edi
call fcn.0043efb0
add esp, 0x10
cmp dword [eax + 0x14], edi
mov ebp, 0x10
setne bl
cmp dword [esp + 0x6c], ebp
jb 0x44dee4
mov edx, dword [esp + 0x58]
push edx
call sub.MSVCR90.dll_void___cdecl_operator_delete_void__
add esp, 4
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], edi
mov byte [esp + 0x58], 0
cmp dword [esp + 0x50], ebp
jb 0x44e1cb
mov eax, dword [esp + 0x3c]
push eax
call sub.MSVCR90.dll_void___cdecl_operator_delete_void__
jmp 0x44e1c8
xor ebp, ebp
push 0x7d0
xor bl, bl
mov edi, 0x3e8
push ebp
mov byte [esp + 0x1f], bl
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], edi
call sub.MSVCR90.dll_realloc
add esp, 8
mov dword [esp + 0x18], eax
push 0x56
push str.SYSTEMCurrentControlSet_servicesSharedAccessParametersFirewallPolicyFirewallRules
lea ecx, [esp + 0x40]
mov dword [esp + 0xf8], 1
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], ebp
mov byte [esp + 0x44], 0
call fcn.0040bad0
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0xf8], 2
call fcn.0043d560
mov ebp, 0x10
add esp, 8
mov byte [esp + 0xf0], 1
cmp dword [esp + 0x50], ebp
jb 0x44df9b
mov eax, dword [esp + 0x3c]
push eax
call sub.MSVCR90.dll_void___cdecl_operator_delete_void__
add esp, 4
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x34]
push ecx
push 0x20019
push 0
push edx
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x44e1ba
push 0x7d0
push eax
mov dword [esp + 0x7c], edi
call sub.MSVCR90.dll_realloc
mov edi, eax
mov dword [esp + 0x78], edi
lea eax, [esp + 0x5c]
push esi
push eax
mov byte [esp + 0x100], 3
call fcn.00443830
push eax
lea ecx, [esp + 0xdc]
push 0x5a4458
push ecx
mov byte [esp + 0x10c], 4
call fcn.0040c620
add esp, 0x1c
mov byte [esp + 0xf0], 6
cmp dword [esp + 0x6c], ebp
jb 0x44e020
mov edx, dword [esp + 0x58]
push edx
call sub.MSVCR90.dll_void___cdecl_operator_delete_void__
add esp, 4
xor esi, esi
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], esi
mov byte [esp + 0x58], 0
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x1c]
push edi
lea edx, [esp + 0x38]
push edx
mov edx, dword [esp + 0x40]
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x3c]
push eax
push ecx
push esi
push edx
mov dword [esp + 0x48], 0x3e8
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x44e162
cmp dword [esp + 0x30], 1
jne 0x44e169
lea eax, [esp + 0x78]
push edi
push eax
call fcn.0043e5b0
add esp, 8
mov byte [esp + 0xf0], 7
cmp dword [eax + 0x18], ebp
jb 0x44e09d
mov ecx, dword [eax + 4]
mov dword [esp + 0x20], ecx
jmp 0x44e0a4
lea edx, [eax + 4]
mov dword [esp + 0x20], edx
mov eax, dword [eax + 0x14]
lea ecx, [esp + 0xc8]
push ecx
lea ecx, [esp + 0x98]
mov dword [esp + 0x28], eax
call fcn.0041fd20
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
push 0x6188dc
lea edx, [esp + 0x60]
push edx
mov ecx, eax
mov byte [esp + 0x134], 8
call fcn.00470380
lea ecx, [esp + 0x94]
mov bl, al
mov byte [esp + 0xf0], 7
call fcn.00470b80
mov byte [esp + 0xf0], 6
cmp dword [esp + 0x90], ebp
jb 0x44e157
mov eax, dword [esp + 0x7c]
push eax
call sub.MSVCR90.dll_void___cdecl_operator_delete_void__
add esp, 4
test bl, bl
je 0x44e169
mov byte [esp + 0x17], 1
jmp 0x44e169
cmp eax, 0x103
je 0x44e176
mov bl, byte [esp + 0x17]
inc esi
test bl, bl
je 0x44e033
cmp dword [esp + 0xe0], ebp
jb 0x44e18f
mov ecx, dword [esp + 0xcc]
push ecx
call sub.MSVCR90.dll_void___cdecl_operator_delete_void__
add esp, 4
mov dword [esp + 0xe0], 0xf
mov dword [esp + 0xdc], 0
mov byte [esp + 0xcc], 0
test edi, edi
je 0x44e1ba
push edi
call sub.MSVCR90.dll_free
add esp, 4
mov eax, dword [esp + 0x18]
test eax, eax
je 0x44e1cb
push eax
call sub.MSVCR90.dll_free
add esp, 4
mov al, bl
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xd0]
xor ecx, esp
call fcn.0058ecc6
add esp, 0xe0
ret