Function at 0x44f980
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x570952
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0x5edd38]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x18], 0
xor eax, eax
push 0x13
push str.bDisableCryptBroker
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
call fcn.00408f30
push 0x39
xor eax, eax
mov dword [ebp - 4], 0
push str.SoftwarePoliciesAdobeAcrobat_ReaderDCFeatureLockDown
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.00408f30
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x48]
mov dword [ebp - 0x18], 3
push eax
lea eax, [ebp - 0x30]
push eax
push 0x80000002
call fcn.004167d0
add esp, 0x10
test al, al
je 0x44fa44
cmp dword [ebp - 0x14], 0
je 0x44fa44
mov bl, 1
jmp 0x44fa46
xor bl, bl
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], 2
cmp eax, 8
jb 0x44fa69
inc eax
lea ecx, [ebp - 0x30]
push eax
push dword [ebp - 0x30]
call fcn.0040a2e0
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 4], 3
cmp eax, 8
jb 0x44fa99
inc eax
lea ecx, [ebp - 0x48]
push eax
push dword [ebp - 0x48]
call fcn.0040a2e0
push 0x2b
push 0x5669b0
push 2
push 0x5b2bfc
xor eax, eax
mov dword [ebp - 0x38], 0
push 0x5b2c10
mov ecx, esi
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov dword [ebp - 4], 0xffffffff
call fcn.0044eb60
test al, al
je 0x4501da
push 0x2c
push 0x5647d0
push 2
push 0x5b2c28
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x2d
push 0x423da0
push 2
push 0x5b2c40
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x2e
push 0x425670
push 2
push 0x5b2c58
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x2f
push 0x565d80
push 2
push 0x5b2c6c
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x30
push 0x565250
push 2
push 0x5b2c7c
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x31
push 0x5657f0
push 2
push 0x5b2c8c
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x32
push 0x566f50
push 2
push 0x5b2ca0
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x33
push 0x424630
push 2
push 0x5b2cb4
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
mov al, 1
test bl, bl
jne 0x4501dc
push 0x37
push 0x564510
push 2
push 0x5b2cc4
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x38
push 0x563340
push 2
push 0x5b2cdc
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x39
push 0x562f20
push 2
push 0x5b2cf8
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x3a
push 0x563010
push 2
push 0x5b2d18
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x3b
push 0x563b40
push 2
push 0x5b2d38
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x3c
push 0x562a60
push 2
push 0x5b2d5c
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x3d
push 0x5637b0
push 2
push 0x5b2d6c
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x3e
push 0x562860
push 2
push 0x5b2d88
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x3f
push 0x5626b0
push 2
push 0x5b2dac
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x40
push 0x563170
push 2
push 0x5b2dd0
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x41
push 0x563900
push 2
push 0x5b2dec
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x42
push 0x563620
push 2
push 0x5b2e04
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x43
push 0x562cd0
push 2
push 0x5b2e20
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x44
push 0x562e00
push 2
push 0x5b2e30
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x45
push 0x563cb0
push 2
push 0x5b2e44
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x46
push 0x563e10
push 2
push 0x5b2e58
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x47
push 0x563f70
push 2
push 0x5b2e6c
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x48
push 0x564210
push 2
push 0x5b2e7c
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x49
push 0x565370
push 2
push 0x5b2ea0
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x4a
push 0x566110
push 2
push 0x5b2eb8
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x4b
push 0x566250
push 2
push 0x5b2ec8
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x4c
push 0x5663a0
push 2
push 0x5b2edc
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x4d
push 0x566500
push 2
push 0x5b2ef4
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x4e
push 0x566810
push 2
push 0x5b2f0c
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x4f
push 0x424960
push 2
push 0x5b2f1c
push 0x5b2c10
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x34
push 0x565960
push 2
push 0x5b2f30
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x35
push 0x564f00
push 2
push 0x5b2f40
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x36
push 0x566dc0
push 2
push 0x5b2f50
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x50
push 0x564bb0
push 2
push 0x5b2f64
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x51
push 0x565bc0
push 2
push 0x5b2f74
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x52
push 0x565130
push 2
push 0x5b2f84
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x53
push 0x567230
push 2
push 0x5b2f98
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x54
push 0x567470
push 2
push 0x5b2fa8
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x55
push 0x565670
push 2
push 0x5b2fb8
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x56
push 0x566c40
push 2
push 0x5b2fcc
push str.Advapi32.dll
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x57
push 0x5683a0
push 2
push 0x5b2fe0
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x58
push 0x567cd0
push 2
push 0x5b3014
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x59
push 0x568740
push 2
push 0x5b3028
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x5a
push 0x5681a0
push 2
push 0x5b303c
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x5b
push 0x567f40
push 2
push 0x5b304c
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x5c
push 0x567920
push 2
push 0x5b305c
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x5d
push 0x568550
push 2
push 0x5b306c
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x5e
push 0x5676b0
push 2
push 0x5b3084
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x5f
push 0x568930
push 2
push 0x5b3094
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
push 0x60
push 0x567bc0
push 2
push 0x5b30a4
push 0x5b2ffc
mov ecx, esi
call fcn.0044eb60
test al, al
je 0x4501da
mov al, 1
jmp 0x4501dc
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401682
mov esp, ebp
pop ebp
ret