Function at 0x44b4eb
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push 0x24c
mov eax, 0x670ca9
call fcn.00626857
lea ecx, [ebp - 0x188]
call fcn.004499cc
xor edi, edi
lea ecx, [ebp - 0x1e0]
xor ebx, ebx
inc edi
mov dword [ebp - 4], edi
push ebx
mov byte [ebp - 0x1e8], bl
call fcn.00423df6
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 2
call fcn.00449a01
sub esp, 0x10
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x1cc], esp
push eax
call fcn.0044cbc0
push 0x6d5860
push ecx
push str.head
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 4
call fcn.00438b4a
pop ecx
mov ecx, eax
call fcn.00438b4a
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.004235d6
push ebx
push edi
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 2
call fcn.00429656
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x1cc], esp
mov dword [ebp - 0x1d0], eax
push edi
mov dword [eax + 8], ebx
push 0x18
mov dword [eax + 0xc], ebx
push edi
mov byte [eax], 3
call fcn.004294a3
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x121]
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x1d4], esi
mov dword [ebp - 0x1d8], esi
mov byte [ebp - 4], 6
test esi, esi
je 0x44b5db
push str.AuthName
mov ecx, esi
call fcn.004292cc
mov eax, dword [ebp - 0x1d0]
mov dword [eax + 8], esi
push str.businessId
push ecx
push str.authInfo
push ecx
push str.head
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 7
call fcn.00438b4a
pop ecx
mov ecx, eax
call fcn.00438b4a
pop ecx
mov ecx, eax
call fcn.00438b4a
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.004235d6
call fcn.00429293
mov byte [ebp - 0x1d4], bl
lea ecx, [ebp - 0x144]
push dword [ebp - 0x1d4]
mov dword [ebp - 0x144], ebx
mov eax, dword [eax + 8]
mov dword [ebp - 0x1d0], eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x140], ebx
push eax
mov dword [ebp - 0x13c], ebx
call fcn.00432c7f
sub esp, 0x10
mov byte [ebp - 4], 8
mov eax, esp
mov dword [ebp - 0x1d8], esp
mov dword [ebp - 0x1cc], eax
push edi
mov dword [eax + 8], ebx
push 0xc
mov dword [eax + 0xc], ebx
push edi
mov byte [eax], 2
call fcn.004294a3
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x121]
mov dword [ebp - 0x128], esi
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x1ec], esi
mov dword [ebp - 0x130], esi
mov byte [ebp - 4], 0xa
test esi, esi
je 0x44b6dd
mov byte [ebp - 0x1d4], bl
mov ecx, esi
push dword [ebp - 0x1d4]
mov dword [esi], ebx
push dword [ebp - 0x140]
mov dword [esi + 4], ebx
push dword [ebp - 0x144]
mov dword [esi + 8], ebx
call fcn.0044c39d
mov eax, dword [ebp - 0x1cc]
mov dword [eax + 8], esi
push str.repInt
push ecx
push str.international
push ecx
push str.listI
push ecx
push str.condition
push ecx
push str.body
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0xb
call fcn.00438b4a
pop ecx
mov ecx, eax
call fcn.00438b4a
pop ecx
mov ecx, eax
call fcn.00438b4a
pop ecx
mov ecx, eax
call fcn.00438b4a
pop ecx
mov ecx, eax
call fcn.00438b4a
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004235d6
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 2
call fcn.0041e1f8
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x130], esp
mov dword [ebp - 0x1cc], eax
push edi
mov dword [eax + 8], ebx
push 0x18
mov dword [eax + 0xc], ebx
push edi
mov byte [eax], 3
call fcn.004294a3
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x121]
mov dword [ebp - 0x128], esi
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x1ec], esi
mov dword [ebp - 0x1d8], esi
mov byte [ebp - 4], 0xd
test esi, esi
je 0x44b7a6
push str.GetAreaConfig
mov ecx, esi
call fcn.004292cc
mov eax, dword [ebp - 0x1cc]
mov dword [eax + 8], esi
push str.operateId
push ecx
push str.condition
push ecx
push str.body
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0xe
call fcn.00438b4a
pop ecx
mov ecx, eax
call fcn.00438b4a
pop ecx
mov ecx, eax
call fcn.00438b4a
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.004235d6
push 0x6d2e1f
lea ecx, [ebp - 0x150]
call fcn.004292cc
sub esp, 0x10
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x1a0]
lea ecx, [ebp - 0x1e8]
push eax
call fcn.00423018
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x10
push ecx
push eax
lea edx, [ebp - 0x188]
lea ecx, [ebp - 0x1c4]
call fcn.00428fb4
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1a0]
call fcn.00429656
push ebx
push edi
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x13
call fcn.00429656
sub esp, 0x24
lea eax, [ebp - 0x1c4]
mov ecx, esp
push eax
call fcn.004248ea
call fcn.0042491c
add esp, 0x24
test al, al
je 0x44bab3
xor eax, eax
mov dword [ebp - 0x154], 7
mov dword [ebp - 0x158], ebx
mov word [ebp - 0x168], ax
lea eax, [ebp - 0x1b8]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x12c]
call fcn.0043e978
sub esp, 0x28
mov byte [ebp - 4], 0x16
mov eax, esp
lea edx, [ebp - 0x12c]
lea ecx, [ebp - 0x148]
push edi
mov dword [eax + 0x24], ebx
call fcn.0041b5dd
add esp, 0x2c
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x128]
test ecx, ecx
je 0x44b8d4
call fcn.0042358b
push str.queue
lea ecx, [ebp - 0x148]
call fcn.00438b4a
push ecx
mov ecx, eax
call fcn.0044bb2a
push str.items
mov ecx, eax
call fcn.00438b4a
push ecx
mov ecx, eax
call fcn.0044bb2a
push str.fieldS
mov ecx, eax
call fcn.00438b4a
push str.region
mov ecx, eax
call fcn.00438b4a
lea ecx, [ebp - 0x1a0]
push ecx
mov ecx, eax
call fcn.0044c1a1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x19
call fcn.0044cae2
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x1a
push ecx
lea ecx, [ebp - 0x204]
push ecx
mov ecx, eax
call fcn.0044bc07
push eax
lea ecx, [ebp - 0x168]
call fcn.0042525f
push ebx
push edi
lea ecx, [ebp - 0x204]
call fcn.00428ecb
lea ecx, [ebp - 0x258]
call fcn.0044c444
push ebx
push edi
lea ecx, [ebp - 0x1a0]
call fcn.00429656
lea ecx, [ebp - 0x148]
call fcn.004243ad
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x158], 0
je 0x44baa6
lea eax, [ebp - 0x204]
mov dword [ebp - 0x1c8], ebx
push eax
call fcn.0041b3ce
mov ecx, eax
call fcn.0042166f
cmp dword [eax + 0x14], 8
jb 0x44b9bf
mov eax, dword [eax]
push ebx
lea ecx, [ebp - 0x1c8]
push ecx
push ebx
push 0x2001f
push ebx
push ebx
push ebx
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push ebx
push edi
lea ecx, [ebp - 0x204]
mov esi, eax
call fcn.00428ecb
test esi, esi
jne 0x44baa6
mov eax, 0x104
mov dword [ebp - 0x170], edi
push eax
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x120]
push ebx
push eax
call fcn.0063e3a0
add esp, 0xc
lea eax, [ebp - 0x16c]
mov esi, str.Region
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x170]
push eax
push ebx
push esi
push dword [ebp - 0x1c8]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x44ba52
lea eax, [ebp - 0x120]
push eax
call fcn.00643138
pop ecx
test eax, eax
jne 0x44ba84
mov eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x168]
cmp dword [ebp - 0x154], 8
cmovae ecx, dword [ebp - 0x168]
lea eax, [eax*2 + 2]
push eax
push ecx
push edi
push ebx
push esi
push dword [ebp - 0x1c8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [ebp - 0x1c8], 0
je 0x44baa6
push dword [ebp - 0x1c8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x44baa6
push ebx
push edi
lea ecx, [ebp - 0x168]
call fcn.00428ecb
push ebx
push edi
lea ecx, [ebp - 0x1b8]
call fcn.00429656
lea ecx, [ebp - 0x1e8]
call fcn.004243ad
push ebx
push edi
lea ecx, [ebp - 0x188]
call fcn.00429656
call fcn.006267a4
ret