Function at 0x44b610
Capabilities:
Delete file
Encode data using xor
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55c476
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x5b627c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
cmp dword [edi + 0x5c], 8
lea eax, [edi + 0x48]
mov dword [ebp - 0x144], edi
mov byte [ebp - 0x131], 0
jb 0x44b658
mov eax, dword [eax]
push eax
call fcn.0046e7f0
test eax, eax
je 0x44bfb5
cmp dword [edi + 0x74], 8
lea esi, [edi + 0x60]
mov dword [ebp - 0x13c], esi
mov eax, esi
jb 0x44b679
mov eax, dword [esi]
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x44b683
mov ecx, dword [edi]
push 0
push eax
push ecx
call fcn.0046ece0
test eax, eax
jns 0x44b774
call fcn.00474150
mov ecx, eax
push 2
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44bfb5
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], 0xf
mov byte [ebp - 0x130], al
call fcn.0041c540
push 3
push 0x56bba4
lea ecx, [ebp - 0x118]
mov dword [ebp - 4], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
call fcn.0041c540
mov byte [ebp - 4], 1
call fcn.00474150
mov edi, eax
lea ecx, [ebp - 0x1dc]
push 0x7d
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.004066e0
mov esi, eax
push str.DownloadAndUnzipResZip__TrayUnzip7zFile__un_zip_failed_path:
push esi
mov byte [ebp - 4], 2
call fcn.00407a90
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x1dc]
call fcn.00407f30
lea ecx, [ebp - 0x118]
call fcn.004070a0
lea ecx, [ebp - 0x130]
call fcn.004070a0
jmp 0x44bfb5
cmp dword [esi + 0x14], 8
mov edx, esi
jb 0x44b77e
mov edx, dword [esi]
mov ecx, edx
mov dword [ebp - 0x90], 0
xor eax, eax
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44b7a0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xa0]
call fcn.0041c630
push 1
push 0x56cd8c
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 3
call fcn.0042d5c0
mov eax, dword [str.YxhGamebox.exe]
mov ecx, 0xf59a
xor eax, 0xf590
mov word [ebp - 0x48], ax
mov eax, ecx
xor ax, word [0x56ccb2]
xor cx, word [0x56ccb6]
mov word [ebp - 0x46], ax
mov eax, dword [0x56ccb4]
xor eax, 0xf591
mov word [ebp - 0x44], ax
mov eax, dword [0x56ccb8]
xor eax, 0xf59c
mov word [ebp - 0x42], cx
mov word [ebp - 0x40], ax
mov ecx, 0xf593
mov eax, 0xf591
xor ax, word [0x56ccba]
mov word [ebp - 0x3e], ax
mov eax, dword [0x56ccbc]
xor eax, 0xf59c
mov word [ebp - 0x3c], ax
mov eax, 0xf59b
xor ax, word [0x56ccbe]
mov word [ebp - 0x3a], ax
mov eax, dword [0x56ccc0]
xor eax, 0xf59f
mov word [ebp - 0x38], ax
mov eax, 0xf597
xor ax, word [0x56ccc2]
mov word [ebp - 0x36], ax
mov eax, dword [0x56ccc4]
xor eax, 0xf59c
mov word [ebp - 0x34], ax
mov eax, ecx
xor ax, word [0x56ccc6]
xor cx, word [0x56ccca]
mov word [ebp - 0x32], ax
mov eax, dword [0x56ccc8]
xor eax, 0xf59d
mov word [ebp - 0x30], ax
mov eax, 0xf5a8
xor ax, word [0x56cccc]
xor edi, edi
mov word [ebp - 0x2e], cx
mov word [ebp - 0x2c], ax
mov ax, word [ebp - 0x48]
lea edx, [edi + 0xf]
nop word [eax + eax]
mov ax, word [ebp + edi*2 - 0x48]
mov ecx, edi
and ecx, 0xf
movzx esi, ax
cmp ecx, 0xf
mov eax, 0x246af592
cmovae ecx, edx
mov edx, 0xc8c3e0c5
shl ecx, 2
call fcn.00466140
mov cx, ax
mov edx, 0xf
and cx, 0xf
lea eax, [edi - 0xa6e]
xor cx, ax
xor cx, si
mov word [ebp + edi*2 - 0x48], cx
inc edi
cmp edi, 0xf
jb 0x44b8c0
lea ecx, [ebp - 0x48]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44b910
sub ecx, edx
lea eax, [ebp - 0x48]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.0042d5c0
lea eax, [ebp - 0x88]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x88], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call fcn.00414250
mov ecx, eax
test ecx, ecx
je 0x44bfeb
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x140], eax
movzx eax, word [ebp - 0x7c]
push eax
movzx eax, word [ebp - 0x7e]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x86]
push eax
movzx eax, word [ebp - 0x88]
push eax
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 4
push 0x5700c0
push eax
call fcn.00412720
mov esi, dword [ebp - 0x140]
add esp, 0x20
mov edi, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [esi - 0xc]
add eax, eax
push eax
push esi
push 1
push str.InstallDate
push str.SoftwareYxhGamebox
push reloc.OLEAUT32.dll_SysReAllocString
call edi
push 6
xor eax, eax
mov dword [ebp - 0x68], 0
push str.normal
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.0041c630
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
mov eax, dword [ebp - 0x68]
cmovae ecx, dword [ebp - 0x78]
add eax, eax
push eax
push ecx
push 1
push str.AppType
push str.SoftwareYxhGamebox
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 4], 5
call edi
cmp dword [ebp - 0x8c], 8
lea ecx, [ebp - 0xa0]
mov eax, dword [ebp - 0x90]
cmovae ecx, dword [ebp - 0xa0]
add eax, eax
push eax
push ecx
push 1
push 0
push str.SoftwareYxhGamebox
push reloc.OLEAUT32.dll_SysReAllocString
call edi
mov edi, dword [ebp - 0x13c]
mov ecx, edi
cmp dword [edi + 0x14], 8
mov eax, dword [edi + 0x10]
jb 0x44ba57
mov ecx, dword [edi]
add eax, eax
push eax
push ecx
push 1
push str.Setup_Path
push str.SoftwareYxhGamebox
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0x144]
cmp dword [eax + 0x2c], 8
lea ecx, [eax + 0x18]
mov edx, dword [eax + 0x28]
jb 0x44ba86
mov ecx, dword [ecx]
lea eax, [edx + edx]
push eax
push ecx
push 1
push str.VendorID
push str.SoftwareYxhGamebox
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push 1
xor eax, eax
mov dword [ebp - 0x50], 0
push 0x56bd00
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
call fcn.0041c630
cmp dword [ebp - 0x4c], 8
lea ecx, [ebp - 0x60]
mov eax, dword [ebp - 0x50]
cmovae ecx, dword [ebp - 0x60]
add eax, eax
push eax
push ecx
push 1
push str.Type
push str.SoftwareYxhGamebox
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 4], 6
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push edi
call fcn.0044df80
mov eax, dword [edi + 0x10]
add esp, 4
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x138], eax
jb 0x44bb20
mov edi, dword [edi]
mov dword [ebp - 0x13c], edi
cmp eax, 8
jae 0x44bb35
movups xmm0, xmmword [edi]
mov dword [ebp - 0x14], 7
movups xmmword [ebp - 0x28], xmm0
jmp 0x44bb7b
mov edi, eax
lea ecx, [ebp - 0x28]
mov eax, SysReAllocString
or edi, 7
cmp edi, eax
cmova edi, eax
lea eax, [edi + 1]
push eax
call fcn.0041c060
mov ecx, eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x28], ecx
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x13c]
push ecx
call fcn.00510830
mov eax, dword [ebp - 0x138]
add esp, 0xc
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], eax
push 1
push 0x56cd8c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.0042d5c0
push 0x17
push 0x56fedc
lea ecx, [ebp - 0x28]
call fcn.0042d5c0
xor eax, eax
mov dword [ebp - 0xd8], 0
push eax
push 0x569bb8
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xd4], 7
mov word [ebp - 0xe8], ax
call fcn.0041c630
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 8
cmovae edx, dword [ebp - 0x28]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], ax
lea edi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44bc00
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xb8]
call fcn.0041c630
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00459110
mov edx, dword [ebp - 0xa4]
add esp, 8
mov byte [ebp - 4], 8
cmp edx, 8
jb 0x44bc7a
mov ecx, dword [ebp - 0xb8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44bc70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44bff5
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov edx, dword [ebp - 0xd4]
xor eax, eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], ax
mov byte [ebp - 4], 7
cmp edx, 8
jb 0x44bcdb
mov ecx, dword [ebp - 0xe8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44bcd1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44bffa
push edx
push ecx
call fcn.00465e7d
add esp, 8
call fcn.00474150
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44be5b
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0x100]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], 0xf
mov byte [ebp - 0x100], al
call fcn.0041c540
push 3
push 0x56bd98
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
call fcn.0041c540
mov byte [ebp - 4], 0xb
call fcn.00474150
mov dword [ebp - 0x138], eax
lea ecx, [ebp - 0x274]
push 0xa9
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.004066e0
mov edi, eax
push str.SimplePushWnd::OnDownloadEnd._install_succ_launch_helper
push edi
mov byte [ebp - 4], 0xc
call fcn.00407a90
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
mov eax, 0x56ba88
cmovae ecx, dword [ebp - 0x28]
test ecx, ecx
cmovne eax, ecx
push eax
push edi
call fcn.00405390
mov ecx, dword [ebp - 0x138]
add esp, 0x10
mov eax, dword [ecx]
push edi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x274]
call fcn.00407f30
mov edx, dword [ebp - 0xbc]
mov byte [ebp - 4], 0xa
cmp edx, 0x10
jb 0x44be02
mov ecx, dword [ebp - 0xd0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44bdf8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44bfff
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov edx, dword [ebp - 0xec]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x44be5b
mov ecx, dword [ebp - 0x100]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44be51
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44c004
push edx
push ecx
call fcn.00465e7d
add esp, 8
call fcn.0046ecc0
mov edx, dword [ebp - 0x14]
mov byte [ebp - 0x131], 1
mov byte [ebp - 4], 6
cmp edx, 8
jb 0x44bea5
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44be9b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44c009
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov edx, dword [ebp - 0x4c]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 5
cmp edx, 8
jb 0x44bef7
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44beed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44c00e
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov byte [ebp - 4], 4
cmp edx, 8
jb 0x44bf49
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44bf3f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44c013
push edx
push ecx
call fcn.00465e7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov word [ebp - 0x78], ax
add esi, 0xfffffff0
mov dword [ebp - 0x64], 7
or eax, 0xffffffff
mov byte [ebp - 4], 3
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x44bf79
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x8c]
cmp edx, 8
jb 0x44bfb5
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44bfab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44c018
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov eax, dword [ebp - 0x144]
cmp dword [eax + 0x14], 8
jb 0x44bfc3
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov al, byte [ebp - 0x131]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00465d1b
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.0040c140
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
int3