Function at 0x44c681
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2250
call fcn.004903f0
xor eax, eax
push ebx
push esi
mov dword [ebp - 0x38], eax
mov ebx, ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x48], eax
push edi
call fcn.0044bcd4
mov esi, eax
test esi, esi
js 0x44cb38
push 0x7d
pop eax
cmp word [edi], ax
je 0x44cb38
xor eax, eax
push 0x401b90
inc eax
push edi
mov dword [ebp + 8], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
neg eax
push 0x401b64
sbb esi, esi
inc esi
push edi
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x44c6f8
test esi, esi
je 0x44c79a
push edi
mov ecx, ebx
call fcn.0044bcd4
mov esi, eax
test esi, esi
js 0x44cb38
xor esi, esi
cmp dword [ebp + 0x10], esi
je 0x44c79c
push 0x5c
push edi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
call fcn.0044e56b
pop ecx
pop ecx
test eax, eax
jne 0x44cb2b
push edi
mov ecx, ebx
call fcn.0044a14b
test eax, eax
je 0x44c75a
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x1c]
push edi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
call fcn.0044c2b5
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
cmp dword [ebp - 4], esi
je 0x44c790
push edi
mov ecx, ebx
call fcn.0044bcd4
mov esi, eax
test esi, esi
js 0x44cb26
push edi
mov ecx, ebx
call fcn.0044e4a9
mov esi, eax
lea ecx, [ebp - 0x1c]
call fcn.0044a356
test esi, esi
js 0x44cb38
jmp 0x44cad2
lea ecx, [ebp - 0x1c]
call fcn.0044a356
jmp 0x44c79c
xor esi, esi
push 0x401b7c
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44c7c1
push edi
mov ecx, ebx
mov dword [ebp + 8], esi
call fcn.0044bcd4
mov esi, eax
test esi, esi
js 0x44cb38
push 0x401b5c
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44c8a9
lea eax, [ebp - 0x2250]
mov ecx, ebx
push eax
call fcn.0044bcd4
mov esi, eax
test esi, esi
js 0x44cb38
push edi
mov ecx, ebx
call fcn.0044bcd4
mov esi, eax
test esi, esi
js 0x44cb38
push 0x3d
pop eax
cmp word [edi], ax
jne 0x44cb33
cmp dword [ebp + 0x10], 0
je 0x44c847
mov eax, dword [ebp + 0xc]
mov ecx, ebx
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2250]
push edi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004496d4
mov esi, eax
lea ecx, [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
jmp 0x44c77e
cmp dword [ebp + 0x14], 0
jne 0x44c89c
cmp dword [ebp + 8], 0
je 0x44c89c
xor eax, eax
lea ecx, [ebp - 0x44]
push 0x20006
push eax
push dword [ebp + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
call fcn.0044be53
test eax, eax
jne 0x44cb4b
lea eax, [ebp - 0x2250]
push eax
push dword [ebp - 0x44]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
test eax, eax
je 0x44c894
cmp eax, 2
jne 0x44cb4b
lea ecx, [ebp - 0x44]
call fcn.0044a356
push edi
mov ecx, ebx
call fcn.0044e4a9
jmp 0x44c6b0
push 0x5c
push edi
call fcn.0044e56b
pop ecx
pop ecx
test eax, eax
jne 0x44cb33
cmp dword [ebp + 0x10], eax
je 0x44c93a
mov esi, dword [ebp + 0xc]
lea ecx, [ebp - 0x10]
push 0x2001f
push edi
push esi
call fcn.0044be53
test eax, eax
je 0x44c906
push 0x20019
push edi
push esi
lea ecx, [ebp - 0x10]
call fcn.0044be53
test eax, eax
je 0x44c906
xor eax, eax
lea ecx, [ebp - 0x10]
push eax
push eax
push 0x2001f
push eax
push eax
push edi
push esi
call fcn.0044a4b8
test eax, eax
jne 0x44ca1b
push edi
mov ecx, ebx
call fcn.0044bcd4
mov esi, eax
test esi, esi
js 0x44cb38
push 0x3d
pop eax
cmp word [edi], ax
jne 0x44cad2
push edi
xor eax, eax
mov ecx, ebx
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004496d4
mov esi, eax
jmp 0x44c783
mov esi, dword [ebp + 0x14]
test esi, esi
jne 0x44c954
push 0x20019
push edi
push dword [ebp + 0xc]
lea ecx, [ebp - 0x10]
call fcn.0044be53
jmp 0x44c957
push 2
pop eax
push 1
test eax, eax
mov dword [ebp - 4], eax
pop eax
push 0xffffffffffffffff
cmovne esi, eax
lea eax, [ebp - 0x250]
push edi
push 0x104
push eax
mov dword [ebp + 0x14], esi
call fcn.00490951
push eax
call fcn.00449f64
add esp, 0x14
mov ecx, ebx
push edi
call fcn.0044bcd4
mov esi, eax
test esi, esi
js 0x44cb38
push edi
mov ecx, ebx
call fcn.0044e4a9
mov esi, eax
test esi, esi
js 0x44cb38
push 0x7b
pop eax
cmp word [edi], ax
jne 0x44c9fd
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x38]
jne 0x44c9b3
sub ecx, edx
xor eax, eax
sar ecx, 1
inc eax
cmp ecx, eax
jne 0x44c9fd
push dword [ebp + 0x14]
xor eax, eax
mov ecx, ebx
push eax
push dword [ebp - 0x10]
push edi
call fcn.0044c681
mov esi, eax
test esi, esi
jns 0x44c9eb
cmp dword [ebp + 0x14], 0
je 0x44cb38
push edi
mov ecx, ebx
call fcn.0044bcd4
mov esi, eax
test esi, esi
js 0x44cb38
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x48]
mov dword [ebp + 0x14], ecx
cmp eax, 2
je 0x44c6ba
test eax, eax
je 0x44ca29
test ecx, ecx
jne 0x44c6ba
push eax
call fcn.00449fd4
pop ecx
mov esi, eax
jmp 0x44cb38
test ecx, ecx
je 0x44ca6f
push dword [ebp - 0x10]
mov ecx, ebx
call fcn.0044ad71
test eax, eax
je 0x44ca6f
lea eax, [ebp - 0x250]
mov ecx, ebx
push eax
call fcn.0044a14b
test eax, eax
je 0x44c6ba
cmp dword [ebp + 8], 0
je 0x44c6ba
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x10]
call fcn.0044c2b5
jmp 0x44c6ba
push dword [ebp - 0x10]
mov ecx, ebx
call fcn.0044ad71
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], eax
call fcn.0044a356
test eax, eax
jne 0x44ca1b
cmp dword [ebp + 8], eax
je 0x44c6ba
cmp dword [ebp - 4], eax
jne 0x44c6ba
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x250]
push eax
call fcn.0044a529
xor ecx, ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
test eax, eax
jne 0x44cb5e
lea ecx, [ebp - 0x34]
call fcn.0044a356
cmp dword [ebp + 0x10], 0
je 0x44c6ba
push 0x7b
pop eax
cmp word [edi], ax
jne 0x44c6ba
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x38]
jne 0x44caed
sub ecx, edx
xor eax, eax
sar ecx, 1
inc eax
cmp ecx, eax
jne 0x44c6ba
xor eax, eax
mov ecx, ebx
push eax
push dword [ebp + 0x10]
push dword [ebp - 0x10]
push edi
call fcn.0044c681
mov esi, eax
test esi, esi
js 0x44cb38
mov ecx, ebx
jmp 0x44c6aa
lea ecx, [ebp - 0x1c]
jmp 0x44cb57
lea ecx, [ebp - 0x1c]
call fcn.0044a356
mov esi, 0x80020009
lea ecx, [ebp - 0x10]
call fcn.0044a356
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push eax
call fcn.00449fd4
pop ecx
lea ecx, [ebp - 0x44]
mov esi, eax
call fcn.0044a356
jmp 0x44cb38
push eax
call fcn.00449fd4
pop ecx
lea ecx, [ebp - 0x34]
jmp 0x44cb55