Function at 0x44a3d0
Capabilities:
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xb080
call fcn.004ad6f0
mov eax, dword [0x521e28]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xb080], ecx
mov byte [ebp - 0xacd5], 0
mov word [ebp - 0x3690], 0
push 0x206
push 0
lea eax, [ebp - 0x368e]
push eax
call fcn.004ad2c0
add esp, 0xc
mov word [ebp - 0xa980], 0
push 0x206
push 0
lea ecx, [ebp - 0xa97e]
push ecx
call fcn.004ad2c0
add esp, 0xc
mov dword [ebp - 0xacd4], 0
lea ecx, [ebp - 0xb028]
call fcn.00440200
lea ecx, [ebp - 0xacd0]
call fcn.00440200
mov dword [ebp - 0x3484], 0
mov word [ebp - 0x2638], 0
push 0x206
push 0
lea edx, [ebp - 0x2636]
push edx
call fcn.004ad2c0
add esp, 0xc
push 0x2424
push 0
lea eax, [ebp - 0x2430]
push eax
call fcn.004ad2c0
add esp, 0xc
mov word [ebp - 0x2840], 0
push 0x206
push 0
lea ecx, [ebp - 0x283e]
push ecx
call fcn.004ad2c0
add esp, 0xc
mov ecx, dword [ebp - 0xb080]
call fcn.0044b880
movzx edx, al
test edx, edx
je 0x44a4de
push str._DownloadUpdateFiles__opening__Update_Stop_Signal_
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
xor al, al
jmp 0x44b14a
lea eax, [ebp - 0x2638]
push eax
push 2
call fcn.00428a40
test eax, eax
jne 0x44a50c
push str._DownloadUpdateFiles__GetNssInfo_faield_
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
xor al, al
jmp 0x44b14a
lea ecx, [ebp - 0xb028]
call fcn.004401e0
lea ecx, [ebp - 0xacd0]
call fcn.004401e0
mov dword [ebp - 0xb024], 0x7e3
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xb018], ecx
mov byte [ebp - 0xaefc], 1
mov dword [ebp - 0xaf04], 0xbd1
mov dword [ebp - 0xaf00], 1
mov edx, dword [ebp - 0xacd4]
mov dword [ebp - 0xaef0], edx
mov dword [ebp - 0xaef8], 0
mov dword [ebp - 0xaef4], 0
lea eax, [ebp - 0x2430]
push eax
push str.SoftwareINCAInternet_
push 0x4fd5cc
push 0x104
lea ecx, [ebp - 0x2840]
push ecx
call fcn.004adeef
add esp, 0x14
mov ecx, dword [ebp - 0xb080]
call fcn.0044e970
movzx edx, al
test edx, edx
jne 0x44a715
mov byte [ebp - 0xb041], 0
mov byte [ebp - 0xb042], 0
lea eax, [ebp - 0xb041]
push eax
lea ecx, [ebp - 0xb042]
push ecx
mov edx, dword [ebp + 0xc]
push edx
push 0
mov ecx, dword [ebp - 0xb080]
call fcn.00447fa0
mov dword [ebp - 0xb034], 1
mov dword [ebp - 0xb030], 4
mov dword [ebp - 0xb02c], 4
lea eax, [ebp - 0xb02c]
push eax
lea ecx, [ebp - 0xb034]
push ecx
lea edx, [ebp - 0xb030]
push edx
push 0x4fd5d8
lea eax, [ebp - 0x2840]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x44a715
mov ecx, dword [ebp - 0xb080]
add ecx, 0x28
call fcn.0044e820
mov dword [ebp - 0x3484], eax
cmp dword [ebp - 0x3484], 0
je 0x44a70b
push 0x4fd5f8
mov ecx, dword [ebp - 0x3484]
call fcn.00453c10
push eax
call fcn.004ad71b
add esp, 8
test eax, eax
jne 0x44a6e0
mov dword [ebp - 0xb034], 1
mov dword [ebp - 0xb02c], 4
mov ecx, dword [ebp - 0xb02c]
push ecx
lea edx, [ebp - 0xb034]
push edx
push 4
push 0x4fd608
lea eax, [ebp - 0x2840]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push str._au_notify__showui
call fcn.004472a0
mov cl, byte [eax + 9]
push ecx
push 1
call fcn.00439f90
mov ecx, eax
call fcn.0043e160
push 0x4fd650
push str._DownloadUpdateFiles__Exist_Plugin__s___Stop_For_SelfUpdate_
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0x10
xor al, al
jmp 0x44b14a
push 0
push 0x51c858
push 0x51c838
push 0
mov edx, dword [ebp - 0x3484]
mov eax, dword [edx + 4]
push eax
call fcn.004b5109
add esp, 0x14
mov dword [ebp - 0x3484], eax
jmp 0x44a63e
mov dword [ebp - 0x3484], 0
cmp dword [ebp + 8], 0
jne 0x44a727
mov ecx, dword [ebp - 0xb080]
add ecx, 0x28
mov dword [ebp + 8], ecx
mov ecx, dword [ebp - 0xb080]
add ecx, 0x28
call fcn.0044e8b0
test eax, eax
jne 0x44a7f2
push str.No_new_update_items.
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
mov dword [ebp - 0xb024], 0x7e3
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0xb018], edx
mov byte [ebp - 0xaefc], 1
mov dword [ebp - 0xaf04], 0xbd1
mov dword [ebp - 0xaf00], 3
mov eax, dword [ebp - 0xacd4]
mov dword [ebp - 0xaef0], eax
mov dword [ebp - 0xaef8], 0
mov dword [ebp - 0xaef4], 0
call fcn.00440720
mov ecx, eax
call fcn.0044e7c0
push 0x4fd710
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
mov dword [ebp - 0xb048], 1
lea ecx, [ebp - 0xb048]
push ecx
lea edx, [ebp - 0xacd0]
push edx
lea eax, [ebp - 0xb028]
push eax
mov ecx, dword [ebp - 0xb080]
call fcn.0044b6e0
mov al, 1
jmp 0x44b14a
mov ecx, dword [ebp + 8]
call fcn.0044e8b0
mov dword [ebp - 0xacdc], eax
cmp dword [ebp - 0xacdc], 0
je 0x44a877
mov dword [ebp - 0xb024], 0x7e3
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xb018], ecx
mov byte [ebp - 0xaefc], 1
mov dword [ebp - 0xaf04], 0x1789
mov dword [ebp - 0xaf00], 0
mov dword [ebp - 0xaef8], 0
mov edx, dword [ebp - 0xacdc]
mov dword [ebp - 0xaef4], edx
mov dword [ebp - 0xb04c], 1
lea eax, [ebp - 0xb04c]
push eax
lea ecx, [ebp - 0xacd0]
push ecx
lea edx, [ebp - 0xb028]
push edx
mov ecx, dword [ebp - 0xb080]
call fcn.0044b6e0
lea eax, [ebp - 0xa778]
push eax
push 0x60
call fcn.00442f90
mov ecx, eax
call fcn.00444c30
lea ecx, [ebp - 0x38a4]
push ecx
push 0x208
lea edx, [ebp - 0x3690]
push edx
call fcn.00445290
mov ecx, eax
call fcn.00445340
test eax, eax
jne 0x44a8f1
push str.Cannot_retrieve_path_of_the_server_information_file.
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
mov dword [ebp - 0xb050], 6
lea eax, [ebp + 0xc]
push eax
push 0
lea ecx, [ebp - 0xb050]
push ecx
mov ecx, dword [ebp - 0xb080]
call fcn.0044b330
mov al, byte [ebp - 0xacd5]
jmp 0x44b14a
call fcn.00442f90
mov ecx, eax
call fcn.00443e20
test eax, eax
je 0x44a96e
push 0xc3c
push 0
lea edx, [ebp - 0x3480]
push edx
call fcn.004ad2c0
add esp, 0xc
lea eax, [ebp - 0x3480]
push eax
call fcn.00445290
mov ecx, eax
call fcn.00445530
test eax, eax
jne 0x44a96c
push str.Cannot_retrieve_manual_update_server_setting_information_from_the_option_file.
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
mov dword [ebp - 0xb054], 6
lea ecx, [ebp + 0xc]
push ecx
push 0
lea edx, [ebp - 0xb054]
push edx
mov ecx, dword [ebp - 0xb080]
call fcn.0044b330
xor al, al
jmp 0x44b14a
jmp 0x44a9d9
push 0xc3c
push 0
lea eax, [ebp - 0x3480]
push eax
call fcn.004ad2c0
add esp, 0xc
lea ecx, [ebp - 0x3480]
push ecx
call fcn.00445290
mov ecx, eax
call fcn.00445830
test eax, eax
jne 0x44a9d9
push str.Cannot_retrieve_Auto_update_server_setting_information_from_the_option_file.
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
mov dword [ebp - 0xb058], 4
lea edx, [ebp + 0xc]
push edx
push 0
lea eax, [ebp - 0xb058]
push eax
mov ecx, dword [ebp - 0xb080]
call fcn.0044b330
xor al, al
jmp 0x44b14a
mov dword [ebp - 0x3694], 0
mov dword [ebp - 0xa984], 0
mov ecx, dword [ebp - 0xb080]
call fcn.0044db30
mov dword [ebp - 0x3694], eax
cmp dword [ebp - 0x3694], 0
jne 0x44aa0e
mov al, 1
jmp 0x44b14a
mov ecx, dword [ebp + 8]
call fcn.0044e820
mov dword [ebp - 0x3484], eax
mov ecx, dword [ebp - 0xb080]
mov edx, dword [ebp + 0xc]
mov dword [ecx + 0x1c], edx
mov dword [ebp - 0xa984], 0
jmp 0x44aa43
mov eax, dword [ebp - 0xa984]
add eax, 1
mov dword [ebp - 0xa984], eax
mov ecx, dword [ebp - 0xa984]
cmp ecx, dword [ebp - 0xacdc]
jge 0x44ac0c
mov ecx, dword [ebp - 0xb080]
call fcn.0044b880
movzx edx, al
test edx, edx
je 0x44aa83
push str._DownloadUpdateFiles__Download_Loop__Update_Stop_Signal_
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
xor al, al
jmp 0x44b14a
mov eax, dword [ebp - 0x3484]
mov dword [ebp - 0x2848], eax
cmp dword [ebp - 0x3484], 0
jne 0x44aa9d
jmp 0x44ac0c
lea ecx, [ebp - 0x3480]
push ecx
mov ecx, dword [ebp - 0x3484]
call fcn.00453fc0
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x3484]
call fcn.00453c10
push eax
mov ecx, dword [ebp - 0x3484]
call fcn.00453f80
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3690]
push ecx
call fcn.00440720
mov ecx, eax
call fcn.00440580
movzx edx, al
test edx, edx
jne 0x44ab27
call fcn.00440720
mov ecx, eax
call fcn.00440220
shr eax, 0x10
and eax, 0xffff
movzx eax, ax
mov dword [ebp - 0xb05c], eax
lea ecx, [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x3484]
push edx
lea eax, [ebp - 0xb05c]
push eax
mov ecx, dword [ebp - 0xb080]
call fcn.0044b330
xor al, al
jmp 0x44b14a
mov dword [ebp - 0x2850], 0x44b1b0
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x284c], ecx
call fcn.00442f90
mov ecx, eax
call fcn.00443f10
movsx edx, ax
cmp edx, 8
jne 0x44ab6b
lea eax, [ebp - 0x347c]
push eax
call fcn.00442f90
mov ecx, eax
call fcn.00444010
mov dword [ebp - 0x3480], 3
mov dword [ebp - 0xb060], 2
mov ecx, dword [ebp - 0xb080]
mov edx, dword [ecx + 0x18]
push edx
lea eax, [ebp - 0xb060]
push eax
lea ecx, [ebp - 0x3480]
push ecx
call fcn.00440720
mov ecx, eax
call fcn.0044e900
movzx edx, al
test edx, edx
jne 0x44abe1
call fcn.00440720
mov ecx, eax
call fcn.00440220
shr eax, 0x10
and eax, 0xffff
movzx eax, ax
mov dword [ebp - 0xb064], eax
lea ecx, [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x3484]
push edx
lea eax, [ebp - 0xb064]
push eax
mov ecx, dword [ebp - 0xb080]
call fcn.0044b330
xor al, al
jmp 0x44b14a
push 0
push 0x51c858
push 0x51c838
push 0
mov ecx, dword [ebp - 0x3484]
mov edx, dword [ecx + 4]
push edx
call fcn.004b5109
add esp, 0x14
mov dword [ebp - 0x3484], eax
jmp 0x44aa34
mov eax, dword [ebp - 0xb080]
movzx ecx, byte [eax + 8]
test ecx, ecx
jne 0x44adbd
mov dword [ebp - 0xb024], 0x7e3
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0xb018], edx
mov byte [ebp - 0xaefc], 1
mov dword [ebp - 0xaf04], 0x1789
mov dword [ebp - 0xaef8], 0
mov dword [ebp - 0xaef4], 2
mov dword [ebp - 0xb068], 1
lea eax, [ebp - 0xb068]
push eax
lea ecx, [ebp - 0xacd0]
push ecx
lea edx, [ebp - 0xb028]
push edx
mov ecx, dword [ebp - 0xb080]
call fcn.0044b6e0
call fcn.00439f90
mov ecx, eax
call fcn.0043a020
mov byte [ebp - 0xb035], al
mov dword [ebp - 0xb03c], 0
call fcn.00439f90
mov ecx, eax
call fcn.0043a020
movzx eax, al
test eax, eax
je 0x44ad10
call fcn.00439f90
mov ecx, eax
call fcn.0043a120
mov ecx, dword [ebp - 0xb03c]
add ecx, 1
mov dword [ebp - 0xb03c], ecx
cmp dword [ebp - 0xb03c], 0xf
jbe 0x44acd5
jmp 0x44ad10
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0xb080]
call fcn.0044b880
movzx edx, al
test edx, edx
je 0x44ad0e
push str._DownloadUpdateFiles__Close_Product_Loop__Update_Stop_Signal_
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
xor al, al
jmp 0x44b14a
jmp 0x44ac9c
push str.Exited_NSP_Main__Service.
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
mov dword [ebp - 0xb024], 0x7e3
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xb018], eax
mov byte [ebp - 0xaefc], 0
mov dword [ebp - 0xaf04], 0x178a
mov dword [ebp - 0xaef8], 1
mov dword [ebp - 0xaef4], 2
mov cl, byte [ebp - 0xb035]
mov byte [ebp - 0xaefb], cl
mov dword [ebp - 0xb06c], 1
lea edx, [ebp - 0xb06c]
push edx
lea eax, [ebp - 0xacd0]
push eax
lea ecx, [ebp - 0xb028]
push ecx
mov ecx, dword [ebp - 0xb080]
call fcn.0044b6e0
cmp dword [ebp - 0xb03c], 0xf
jb 0x44adbd
push str.Terminating_NSP_Main__Service.
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
call fcn.00439f90
mov ecx, eax
call fcn.0043a390
mov dword [ebp - 0xb024], 0x7e3
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0xb018], edx
mov byte [ebp - 0xaefc], 1
mov dword [ebp - 0xaf04], 0x1789
mov dword [ebp - 0xaf00], 0
mov dword [ebp - 0xaef8], 0
mov eax, dword [ebp - 0x3694]
mov dword [ebp - 0xaef4], eax
mov dword [ebp - 0xb070], 1
lea ecx, [ebp - 0xb070]
push ecx
lea edx, [ebp - 0xacd0]
push edx
lea eax, [ebp - 0xb028]
push eax
mov ecx, dword [ebp - 0xb080]
call fcn.0044b6e0
cmp dword [ebp - 0xacdc], 0
jle 0x44b144
mov ecx, dword [ebp + 8]
call fcn.0044e820
mov dword [ebp - 0x3484], eax
push str.Backup_Update_Files.
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
mov ecx, dword [ebp - 0xb080]
mov edx, dword [ecx + 0x18]
push edx
mov eax, dword [ebp - 0xacdc]
push eax
mov ecx, dword [ebp - 0x3484]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.00439f90
mov ecx, eax
call fcn.0043bac0
mov dword [ebp - 0xb024], 0x7e3
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xb018], ecx
mov byte [ebp - 0xaefc], 1
mov dword [ebp - 0xaf04], 0x1789
mov dword [ebp - 0xaf00], 0
mov dword [ebp - 0xaef8], 0
mov edx, dword [ebp - 0x3694]
mov dword [ebp - 0xaef4], edx
mov dword [ebp - 0xb074], 1
lea eax, [ebp - 0xb074]
push eax
lea ecx, [ebp - 0xacd0]
push ecx
lea edx, [ebp - 0xb028]
push edx
mov ecx, dword [ebp - 0xb080]
call fcn.0044b6e0
mov ecx, dword [ebp + 8]
call fcn.0044e820
mov dword [ebp - 0x3484], eax
push str.Copy_Update_Files.
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
lea eax, [ebp - 0x2638]
push eax
mov ecx, dword [ebp - 0xb080]
mov edx, dword [ecx + 0x18]
push edx
mov eax, dword [ebp - 0xacdc]
push eax
mov ecx, dword [ebp - 0x3484]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.00439f90
mov ecx, eax
call fcn.0043cba0
mov dword [ebp - 0xb040], eax
cmp dword [ebp - 0xb040], 0
jne 0x44b095
call fcn.00440720
mov ecx, eax
call fcn.0044e7c0
call fcn.004472a0
mov ecx, eax
call fcn.0044db80
mov dword [ebp - 0xb024], 0x7e3
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xb018], eax
mov byte [ebp - 0xaefc], 1
mov dword [ebp - 0xaf04], 0xbd1
mov dword [ebp - 0xaf00], 3
mov ecx, dword [ebp - 0xacd4]
mov dword [ebp - 0xaef0], ecx
mov edx, dword [ebp - 0xa984]
mov dword [ebp - 0xaef8], edx
mov eax, dword [ebp - 0xacdc]
mov dword [ebp - 0xaef4], eax
mov dword [ebp - 0xb078], 1
lea ecx, [ebp - 0xb078]
push ecx
lea edx, [ebp - 0xacd0]
push edx
lea eax, [ebp - 0xb028]
push eax
mov ecx, dword [ebp - 0xb080]
call fcn.0044b6e0
mov ecx, dword [ebp - 0xb080]
movzx edx, byte [ecx + 8]
test edx, edx
je 0x44b051
push str.Reload_Service
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
call fcn.00439f90
mov ecx, eax
call fcn.0043f9b0
mov eax, dword [ebp - 0xb080]
movzx ecx, byte [eax + 0xa]
cmp ecx, 1
jne 0x44b051
call fcn.00439f90
mov ecx, eax
call fcn.0043a020
movzx edx, al
test edx, edx
jne 0x44b051
call fcn.00439f90
mov ecx, eax
call fcn.0043dc00
push 0xffffffffffffffff
call fcn.0042e630
add esp, 4
push str.Update_Procedure_Completed
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call sub.PSAPI.DLL_EmptyWorkingSet
push str.RetrySelfUpdate
lea eax, [ebp - 0x2840]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
mov byte [ebp - 0xacd5], 1
jmp 0x44b144
mov ecx, dword [ebp - 0xb080]
call fcn.0044e270
call fcn.004472a0
mov ecx, eax
call fcn.0044db80
lea ecx, [ebp - 0xb028]
call fcn.004401e0
lea ecx, [ebp - 0xacd0]
call fcn.004401e0
mov dword [ebp - 0xb024], 0x7e3
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xb018], ecx
mov byte [ebp - 0xaefc], 0
mov dword [ebp - 0xaf04], 0xbd1
mov edx, dword [ebp - 0xb040]
mov dword [ebp - 0xaf00], edx
mov dword [ebp - 0xb07c], 1
lea eax, [ebp - 0xb07c]
push eax
lea ecx, [ebp - 0xacd0]
push ecx
lea edx, [ebp - 0xb028]
push edx
mov ecx, dword [ebp - 0xb080]
call fcn.0044b6e0
push str.Update_Procedure_Failed
push 3
call fcn.00442530
push eax
call fcn.00442bb0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call sub.PSAPI.DLL_EmptyWorkingSet
mov byte [ebp - 0xacd5], 0
mov al, byte [ebp - 0xacd5]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ad2aa
mov esp, ebp
pop ebp
ret 0xc