Function at 0x44b900
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4671c0
push eax
mov eax, 0x2230
mov dword fs:[0], esp
call fcn.00465990
push ebx
xor eax, eax
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x30], eax
call fcn.0044b380
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x44c379
cmp al, 0x27
jne 0x44b9d4
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x44b9b9
mov ecx, esi
call fcn.0044b2d0
test eax, eax
jne 0x44b9b9
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x44b981
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov ecx, dword [ebp + 8]
lea edx, [edi + 2]
add ecx, 0x1000
mov dword [esi], eax
cmp edx, ecx
jae 0x44c379
cmp ebx, eax
jae 0x44b9b2
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44b9a6
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x44b966
mov eax, dword [esi]
cmp byte [eax], 0
je 0x44c379
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x44ba08
push eax
mov ecx, esi
call fcn.0044b330
test eax, eax
jne 0x44ba05
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x44b9fd
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44b9f1
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x44b9d4
mov byte [edi], 0
mov ecx, dword [ebp + 8]
xor edi, edi
cmp byte [ecx], 0x7d
je 0x44c331
mov edx, dword [str.Delete]
mov eax, dword [ebp + 8]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
push edx
push eax
call ebx
mov ecx, dword [str.ForceRemove]
mov edx, dword [ebp + 8]
mov edi, eax
push ecx
neg edi
sbb edi, edi
push edx
inc edi
mov dword [ebp - 0x2c], edi
call ebx
test eax, eax
je 0x44ba4c
test edi, edi
je 0x44bdac
mov edi, dword [ebp + 8]
mov ecx, esi
call fcn.0044b380
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x44c366
cmp al, 0x27
jne 0x44bae3
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x44bac8
mov ecx, esi
call fcn.0044b2d0
test eax, eax
jne 0x44bac8
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x44ba90
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov edx, dword [ebp + 8]
lea ecx, [edi + 2]
add edx, 0x1000
mov dword [esi], eax
cmp ecx, edx
jae 0x44c366
cmp ebx, eax
jae 0x44bac1
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44bab5
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x44ba75
mov eax, dword [esi]
cmp byte [eax], 0
je 0x44c366
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x44bb17
push eax
mov ecx, esi
call fcn.0044b330
test eax, eax
jne 0x44bb14
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x44bb0c
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44bb00
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x44bae3
mov byte [edi], 0
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x44bdac
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov byte [ebp - 4], 1
mov eax, ebx
mov cl, byte [ebx]
test cl, cl
je 0x44bb56
mov edi, dword [sym.imp.USER32.dll_CharNextA]
cmp cl, 0x5c
je 0x44bb4e
push eax
call edi
mov cl, byte [eax]
test cl, cl
jne 0x44bb3e
jmp 0x44bb56
test eax, eax
jne 0x44c36d
mov edi, 0x48871c
mov ecx, dword [edi]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x44bc25
add edi, 4
cmp edi, str.TYPELIB
jl 0x44bb5b
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], eax
push 0x2001f
push ebx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.0044c400
test eax, eax
jne 0x44bc12
lea edx, [ebp - 0x38]
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push edx
mov edx, dword [ebp - 0x18]
push eax
push eax
push eax
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x23c]
push eax
push ecx
push 0
push edx
mov dword [ebp - 0x20], 0x100
call edi
test eax, eax
jne 0x44bbff
lea eax, [ebp - 0x23c]
lea ecx, [ebp - 0x18]
push eax
call fcn.0044c450
test eax, eax
jne 0x44bc12
lea ecx, [ebp - 0x38]
lea edx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x18]
push eax
push eax
push eax
lea eax, [ebp - 0x23c]
push edx
push eax
push 0
push ecx
mov dword [ebp - 0x20], 0x100
call edi
test eax, eax
je 0x44bbc7
lea ecx, [ebp - 0x18]
call fcn.00447250
mov edx, dword [ebp - 0x14]
push ebx
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.00447250
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x44bda0
mov ecx, esi
mov edi, ebx
call fcn.0044b380
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x44c35f
cmp al, 0x27
jne 0x44bcc6
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x44bcab
mov ecx, esi
call fcn.0044b2d0
test eax, eax
jne 0x44bcab
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x44bc73
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov edx, dword [ebp + 8]
lea ecx, [edi + 2]
add edx, 0x1000
mov dword [esi], eax
cmp ecx, edx
jae 0x44c35f
cmp ebx, eax
jae 0x44bca4
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44bc98
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x44bc58
mov eax, dword [esi]
cmp byte [eax], 0
je 0x44c35f
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x44bcfa
push eax
mov ecx, esi
call fcn.0044b330
test eax, eax
jne 0x44bcf7
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x44bcef
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44bce3
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x44bcc6
mov byte [edi], 0
mov ebx, dword [ebp + 8]
cmp byte [ebx], 0x3d
jne 0x44bd3f
push ebx
mov ecx, esi
call fcn.0044b3d0
test eax, eax
jl 0x44c323
mov ecx, esi
call fcn.0044b380
lea ecx, [ebp - 0x123c]
push ecx
mov ecx, esi
call fcn.0044b3d0
test eax, eax
jl 0x44c323
push ebx
mov ecx, esi
call fcn.0044b3d0
test eax, eax
jl 0x44c323
xor edi, edi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00447250
mov ebx, dword [ebp + 8]
cmp byte [ebx], 0x7b
jne 0x44bd8f
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 1
jne 0x44bd8f
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x10]
push 0
push edx
push eax
push ebx
mov ecx, esi
call fcn.0044b900
mov edi, eax
test edi, edi
jl 0x44c331
push ebx
mov ecx, esi
call fcn.0044b3d0
mov edi, eax
test edi, edi
jl 0x44c331
mov ecx, dword [ebp + 8]
cmp byte [ecx], 0x7d
je 0x44c331
jmp 0x44ba16
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00447250
mov edx, dword [str.NoRemove]
mov eax, dword [ebp + 8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x44be93
mov edi, dword [ebp + 8]
mov ecx, esi
mov dword [ebp - 0x28], eax
call fcn.0044b380
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x44c366
cmp al, 0x27
jne 0x44be5f
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x44be44
mov ecx, esi
call fcn.0044b2d0
test eax, eax
jne 0x44be44
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x44be0c
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov edx, dword [ebp + 8]
lea ecx, [edi + 2]
add edx, 0x1000
mov dword [esi], eax
cmp ecx, edx
jae 0x44c366
cmp ebx, eax
jae 0x44be3d
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44be31
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x44bdf1
mov eax, dword [esi]
cmp byte [eax], 0
je 0x44c366
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x44be93
push eax
mov ecx, esi
call fcn.0044b330
test eax, eax
jne 0x44be90
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x44be88
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44be7c
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x44be5f
mov byte [edi], 0
mov ecx, dword [0x47c6c4]
mov ebx, dword [ebp + 8]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x44c0f5
mov ecx, esi
lea edi, [ebp - 0x13c]
call fcn.0044b380
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x44c366
cmp al, 0x27
jne 0x44bf41
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x44bf28
mov ecx, esi
call fcn.0044b2d0
test eax, eax
jne 0x44bf28
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x44bef3
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
lea edx, [edi + 2]
lea ecx, [ebp + 0xec4]
cmp edx, ecx
mov dword [esi], eax
jae 0x44c366
cmp ebx, eax
jae 0x44bf1f
mov ecx, ebx
mov dl, byte [ecx]
inc ecx
mov byte [edi], dl
inc edi
cmp ecx, eax
jb 0x44bf15
mov cl, byte [eax]
mov ebx, dword [ebp + 8]
test cl, cl
jne 0x44bed8
mov eax, dword [esi]
cmp byte [eax], 0
je 0x44c366
push eax
mov byte [edi], 0
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x44bf74
push eax
mov ecx, esi
call fcn.0044b330
test eax, eax
jne 0x44bf71
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x44bf68
mov ecx, ebx
mov dl, byte [ecx]
inc ecx
mov byte [edi], dl
inc edi
cmp ecx, eax
jb 0x44bf5e
mov al, byte [eax]
mov ebx, dword [ebp + 8]
test al, al
jne 0x44bf41
mov byte [edi], 0
mov ecx, esi
mov edi, ebx
call fcn.0044b380
mov ecx, dword [esi]
mov al, byte [ecx]
test al, al
je 0x44c366
cmp al, 0x27
jne 0x44c00a
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov cl, byte [eax]
test cl, cl
je 0x44bfef
mov ecx, esi
call fcn.0044b2d0
test eax, eax
jne 0x44bfef
mov eax, dword [esi]
cmp byte [eax], 0x27
jne 0x44bfb7
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov edx, dword [ebp + 8]
lea ecx, [edi + 2]
add edx, 0x1000
mov dword [esi], eax
cmp ecx, edx
jae 0x44c366
cmp ebx, eax
jae 0x44bfe8
mov eax, ebx
mov cl, byte [eax]
inc eax
mov byte [edi], cl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44bfdc
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x44bf9c
mov eax, dword [esi]
cmp byte [eax], 0
je 0x44c366
mov byte [edi], 0
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esi], eax
jmp 0x44c03e
push eax
mov ecx, esi
call fcn.0044b330
test eax, eax
jne 0x44c03b
mov ebx, dword [esi]
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, eax
mov dword [esi], eax
jae 0x44c033
mov eax, ebx
mov dl, byte [eax]
inc eax
mov byte [edi], dl
mov ecx, dword [esi]
inc edi
cmp eax, ecx
jb 0x44c027
mov eax, dword [esi]
mov al, byte [eax]
test al, al
jne 0x44c00a
mov byte [edi], 0
mov edi, dword [ebp + 8]
cmp byte [edi], 0x3d
jne 0x44c379
mov eax, dword [ebp + 0x10]
xor ebx, ebx
cmp eax, ebx
je 0x44c088
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x13c]
push edi
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ecx
push edx
push eax
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.0044c5b0
mov edi, eax
mov dword [ebp - 0x14], ebx
cmp edi, ebx
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
jl 0x44c32c
jmp 0x44bd48
cmp dword [ebp + 0x14], ebx
jne 0x44c0ac
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x13c]
push ecx
push eax
mov dword [ebp - 0x14], eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
call fcn.00447250
cmp byte [edi], 0x3d
jne 0x44c0ee
push edi
mov ecx, esi
call fcn.0044b3d0
cmp eax, ebx
jl 0x44c35b
mov ecx, esi
call fcn.0044b380
lea edx, [ebp - 0x223c]
mov ecx, esi
push edx
call fcn.0044b3d0
cmp eax, ebx
jl 0x44c35b
push edi
mov ecx, esi
call fcn.0044b3d0
cmp eax, ebx
jl 0x44c35b
xor edi, edi
jmp 0x44bd8f
mov cl, byte [ebx]
mov eax, ebx
test cl, cl
je 0x44c11b
mov edi, dword [sym.imp.USER32.dll_CharNextA]
cmp cl, 0x5c
je 0x44c113
push eax
call edi
mov cl, byte [eax]
test cl, cl
jne 0x44c103
jmp 0x44c11b
test eax, eax
jne 0x44c379
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x44c1a9
mov edi, dword [ebp + 0xc]
push 0xf003f
push ebx
push edi
lea ecx, [ebp - 0x10]
call fcn.0044c400
test eax, eax
je 0x44c16e
push 0x20019
push ebx
push edi
lea ecx, [ebp - 0x10]
call fcn.0044c400
test eax, eax
je 0x44c16e
push 0
push 0
push 0xf003f
push 0
push 0
push ebx
push edi
lea ecx, [ebp - 0x10]
call fcn.0044c390
test eax, eax
jne 0x44c379
push ebx
mov ecx, esi
call fcn.0044b3d0
mov edi, eax
test edi, edi
jl 0x44c331
cmp byte [ebx], 0x3d
jne 0x44bd4d
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x10]
push eax
push 0
push ecx
mov ecx, esi
call fcn.0044c5b0
mov edi, eax
test edi, edi
jl 0x44c331
jmp 0x44bd4d
mov edi, dword [ebp + 0x14]
test edi, edi
jne 0x44c1ce
mov edx, dword [ebp + 0xc]
push 0x20019
push ebx
push edx
lea ecx, [ebp - 0x10]
call fcn.0044c400
test eax, eax
je 0x44c1ce
mov edi, 1
mov dword [ebp + 0x14], edi
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x44c1e4
mov eax, 0x104
call fcn.00465990
mov eax, esp
mov dword [ebp - 0x1c], eax
push 0x104
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
test edi, edi
jne 0x44c217
mov eax, dword [ebp - 0x10]
mov ecx, esi
push eax
call fcn.0044c9c0
test eax, eax
jne 0x44c217
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, esi
call fcn.0044ca10
test eax, eax
je 0x44c2cb
push ebx
mov ecx, esi
call fcn.0044b3d0
mov edi, eax
test edi, edi
jl 0x44c331
push ebx
mov ecx, esi
call fcn.0044cac0
mov edi, eax
test edi, edi
jl 0x44c331
cmp byte [ebx], 0x7b
jne 0x44c26e
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x10]
push edx
push 0
push eax
push ebx
mov ecx, esi
call fcn.0044b900
mov edi, eax
test edi, edi
jl 0x44c331
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x44c27c
mov ecx, dword [ebp - 0x30]
mov dword [ebp + 0x14], ecx
jmp 0x44c302
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x44bd8f
mov ebx, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
mov ecx, esi
push edx
call fcn.0044c9c0
test eax, eax
je 0x44c2cb
mov edi, 0x48871c
mov eax, dword [edi]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x44c2b8
add edi, 4
cmp edi, str.TYPELIB
jl 0x44c290
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x10]
push edx
call fcn.0044c450
push ebx
mov ecx, esi
call fcn.0044b3d0
mov edi, eax
test edi, edi
jl 0x44c331
jmp 0x44bd8f
lea ecx, [ebp - 0x10]
call fcn.00447250
test eax, eax
jne 0x44c379
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x44c302
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
push ecx
push eax
mov dword [ebp - 0x24], eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.00447250
push ebx
mov ecx, esi
call fcn.0044b3d0
mov edi, eax
test edi, edi
jl 0x44c331
push ebx
mov ecx, esi
call fcn.0044cac0
mov edi, eax
test edi, edi
jl 0x44c331
jmp 0x44bd8f
mov edi, eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00447250
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
call fcn.00447250
mov eax, edi
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x2248]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edi, eax
jmp 0x44c331
mov edi, 0x80020009
jmp 0x44c325
mov edi, 0x80020009
jmp 0x44c331
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00447250
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
call fcn.00447250
mov eax, 0x80020009
jmp 0x44c342