Function at 0x44bee2
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2250
call fcn.0048ce20
xor eax, eax
push ebx
push esi
mov dword [ebp - 0x38], eax
mov ebx, ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x48], eax
push edi
call fcn.0044b52d
mov esi, eax
test esi, esi
js 0x44c399
push 0x7d
pop eax
cmp word [edi], ax
je 0x44c399
xor eax, eax
push 0x401b5c
inc eax
push edi
mov dword [ebp + 8], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
neg eax
push 0x401b30
sbb esi, esi
inc esi
push edi
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x44bf59
test esi, esi
je 0x44bffb
push edi
mov ecx, ebx
call fcn.0044b52d
mov esi, eax
test esi, esi
js 0x44c399
xor esi, esi
cmp dword [ebp + 0x10], esi
je 0x44bffd
push 0x5c
push edi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
call fcn.0044da05
pop ecx
pop ecx
test eax, eax
jne 0x44c38c
push edi
mov ecx, ebx
call fcn.00449fc8
test eax, eax
je 0x44bfbb
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x1c]
push edi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
call fcn.0044bb16
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
cmp dword [ebp - 4], esi
je 0x44bff1
push edi
mov ecx, ebx
call fcn.0044b52d
mov esi, eax
test esi, esi
js 0x44c387
push edi
mov ecx, ebx
call fcn.0044d943
mov esi, eax
lea ecx, [ebp - 0x1c]
call fcn.0044a1d3
test esi, esi
js 0x44c399
jmp 0x44c333
lea ecx, [ebp - 0x1c]
call fcn.0044a1d3
jmp 0x44bffd
xor esi, esi
push 0x401b48
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44c022
push edi
mov ecx, ebx
mov dword [ebp + 8], esi
call fcn.0044b52d
mov esi, eax
test esi, esi
js 0x44c399
push 0x401b28
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44c10a
lea eax, [ebp - 0x2250]
mov ecx, ebx
push eax
call fcn.0044b52d
mov esi, eax
test esi, esi
js 0x44c399
push edi
mov ecx, ebx
call fcn.0044b52d
mov esi, eax
test esi, esi
js 0x44c399
push 0x3d
pop eax
cmp word [edi], ax
jne 0x44c394
cmp dword [ebp + 0x10], 0
je 0x44c0a8
mov eax, dword [ebp + 0xc]
mov ecx, ebx
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2250]
push edi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00449551
mov esi, eax
lea ecx, [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
jmp 0x44bfdf
cmp dword [ebp + 0x14], 0
jne 0x44c0fd
cmp dword [ebp + 8], 0
je 0x44c0fd
xor eax, eax
lea ecx, [ebp - 0x44]
push 0x20006
push eax
push dword [ebp + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
call fcn.0044b6ac
test eax, eax
jne 0x44c3ac
lea eax, [ebp - 0x2250]
push eax
push dword [ebp - 0x44]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
je 0x44c0f5
cmp eax, 2
jne 0x44c3ac
lea ecx, [ebp - 0x44]
call fcn.0044a1d3
push edi
mov ecx, ebx
call fcn.0044d943
jmp 0x44bf11
push 0x5c
push edi
call fcn.0044da05
pop ecx
pop ecx
test eax, eax
jne 0x44c394
cmp dword [ebp + 0x10], eax
je 0x44c19b
mov esi, dword [ebp + 0xc]
lea ecx, [ebp - 0x10]
push 0x2001f
push edi
push esi
call fcn.0044b6ac
test eax, eax
je 0x44c167
push 0x20019
push edi
push esi
lea ecx, [ebp - 0x10]
call fcn.0044b6ac
test eax, eax
je 0x44c167
xor eax, eax
lea ecx, [ebp - 0x10]
push eax
push eax
push 0x2001f
push eax
push eax
push edi
push esi
call fcn.0044a2e3
test eax, eax
jne 0x44c27c
push edi
mov ecx, ebx
call fcn.0044b52d
mov esi, eax
test esi, esi
js 0x44c399
push 0x3d
pop eax
cmp word [edi], ax
jne 0x44c333
push edi
xor eax, eax
mov ecx, ebx
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00449551
mov esi, eax
jmp 0x44bfe4
mov esi, dword [ebp + 0x14]
test esi, esi
jne 0x44c1b5
push 0x20019
push edi
push dword [ebp + 0xc]
lea ecx, [ebp - 0x10]
call fcn.0044b6ac
jmp 0x44c1b8
push 2
pop eax
push 1
test eax, eax
mov dword [ebp - 4], eax
pop eax
push 0xffffffffffffffff
cmovne esi, eax
lea eax, [ebp - 0x250]
push edi
push 0x104
push eax
mov dword [ebp + 0x14], esi
call fcn.0048d381
push eax
call fcn.00449de1
add esp, 0x14
mov ecx, ebx
push edi
call fcn.0044b52d
mov esi, eax
test esi, esi
js 0x44c399
push edi
mov ecx, ebx
call fcn.0044d943
mov esi, eax
test esi, esi
js 0x44c399
push 0x7b
pop eax
cmp word [edi], ax
jne 0x44c25e
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x38]
jne 0x44c214
sub ecx, edx
xor eax, eax
sar ecx, 1
inc eax
cmp ecx, eax
jne 0x44c25e
push dword [ebp + 0x14]
xor eax, eax
mov ecx, ebx
push eax
push dword [ebp - 0x10]
push edi
call fcn.0044bee2
mov esi, eax
test esi, esi
jns 0x44c24c
cmp dword [ebp + 0x14], 0
je 0x44c399
push edi
mov ecx, ebx
call fcn.0044b52d
mov esi, eax
test esi, esi
js 0x44c399
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x48]
mov dword [ebp + 0x14], ecx
cmp eax, 2
je 0x44bf1b
test eax, eax
je 0x44c28a
test ecx, ecx
jne 0x44bf1b
push eax
call fcn.00449e51
pop ecx
mov esi, eax
jmp 0x44c399
test ecx, ecx
je 0x44c2d0
push dword [ebp - 0x10]
mov ecx, ebx
call fcn.0044aa4b
test eax, eax
je 0x44c2d0
lea eax, [ebp - 0x250]
mov ecx, ebx
push eax
call fcn.00449fc8
test eax, eax
je 0x44bf1b
cmp dword [ebp + 8], 0
je 0x44bf1b
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x10]
call fcn.0044bb16
jmp 0x44bf1b
push dword [ebp - 0x10]
mov ecx, ebx
call fcn.0044aa4b
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], eax
call fcn.0044a1d3
test eax, eax
jne 0x44c27c
cmp dword [ebp + 8], eax
je 0x44bf1b
cmp dword [ebp - 4], eax
jne 0x44bf1b
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x250]
push eax
call fcn.0044a354
xor ecx, ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
test eax, eax
jne 0x44c3bf
lea ecx, [ebp - 0x34]
call fcn.0044a1d3
cmp dword [ebp + 0x10], 0
je 0x44bf1b
push 0x7b
pop eax
cmp word [edi], ax
jne 0x44bf1b
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x38]
jne 0x44c34e
sub ecx, edx
xor eax, eax
sar ecx, 1
inc eax
cmp ecx, eax
jne 0x44bf1b
xor eax, eax
mov ecx, ebx
push eax
push dword [ebp + 0x10]
push dword [ebp - 0x10]
push edi
call fcn.0044bee2
mov esi, eax
test esi, esi
js 0x44c399
mov ecx, ebx
jmp 0x44bf0b
lea ecx, [ebp - 0x1c]
jmp 0x44c3b8
lea ecx, [ebp - 0x1c]
call fcn.0044a1d3
mov esi, 0x80020009
lea ecx, [ebp - 0x10]
call fcn.0044a1d3
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push eax
call fcn.00449e51
pop ecx
lea ecx, [ebp - 0x44]
mov esi, eax
call fcn.0044a1d3
jmp 0x44c399
push eax
call fcn.00449e51
pop ecx
lea ecx, [ebp - 0x34]
jmp 0x44c3b6