Function at 0x44df80
Capabilities:
Delete registry key
Encode data using xor
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55c884
mov eax, dword fs:[0]
push eax
sub esp, 0xee4
mov eax, dword [0x5b627c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov dword [ebp - 0xa24], ebx
call fcn.00414250
mov ecx, eax
test ecx, ecx
je 0x44f093
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa2c], eax
mov edx, 0x8903
mov dword [ebp - 4], 0
mov word [ebp - 0x898], dx
mov eax, 0x8919
mov word [ebp - 0x896], ax
mov ecx, 0x8917
mov eax, 0x891b
mov edi, 0x8932
mov word [ebp - 0x894], ax
mov esi, 0x8915
mov eax, 0x8909
mov word [ebp - 0x892], ax
mov eax, 0x8907
mov word [ebp - 0x890], ax
mov eax, 0x8900
mov word [ebp - 0x88e], cx
mov word [ebp - 0x88c], ax
mov eax, 0x8937
mov word [ebp - 0x88a], cx
mov ecx, 0x8906
mov word [ebp - 0x888], dx
mov edx, 0x8912
mov word [ebp - 0x886], dx
mov word [ebp - 0x884], ax
mov eax, 0x8927
mov word [ebp - 0x882], di
mov word [ebp - 0x880], ax
mov eax, 0x8938
mov word [ebp - 0x87e], ax
mov eax, 0x8909
mov word [ebp - 0x87c], si
mov word [ebp - 0x87a], ax
mov eax, 0x8931
mov word [ebp - 0x878], cx
mov word [ebp - 0x876], dx
mov edx, 0x8918
mov word [ebp - 0x874], ax
mov eax, 0x893a
mov word [ebp - 0x872], ax
mov eax, 0x8909
mov word [ebp - 0x870], ax
mov eax, 0x8908
mov word [ebp - 0x86e], ax
mov eax, 0x890d
mov word [ebp - 0x86c], cx
mov ecx, 0x892b
mov word [ebp - 0x86a], ax
mov eax, 0x891c
mov word [ebp - 0x868], dx
mov word [ebp - 0x866], ax
mov eax, 0x8922
mov word [ebp - 0x864], di
mov word [ebp - 0x862], ax
mov eax, 0x8910
mov word [ebp - 0x860], ax
mov eax, 0x8904
mov word [ebp - 0x85e], si
mov word [ebp - 0x85c], ax
mov eax, 0x8913
mov word [ebp - 0x85a], ax
mov eax, 0x891e
mov word [ebp - 0x858], ax
mov eax, 0x8902
mov word [ebp - 0x856], ax
mov word [ebp - 0x854], cx
mov word [ebp - 0x852], dx
mov word [ebp - 0x850], ax
mov eax, 0x8905
mov word [ebp - 0x84e], ax
mov eax, 0x891b
mov word [ebp - 0x84c], ax
mov eax, 0x891d
mov word [ebp - 0x84a], ax
mov eax, 0x8911
mov word [ebp - 0x848], ax
mov eax, 0x8923
mov word [ebp - 0x846], ax
mov edx, 0x89f5
mov word [ebp - 0x844], cx
mov eax, 0x891f
mov word [ebp - 0x842], ax
mov ecx, 0x89e1
mov eax, 0x891c
xor edi, edi
mov word [ebp - 0x840], ax
mov ebx, 0xf
mov eax, 0x8919
mov word [ebp - 0x83e], ax
mov eax, 0x89f2
mov word [ebp - 0x83c], dx
mov word [ebp - 0x83a], ax
mov eax, 0x89ea
mov word [ebp - 0x838], cx
mov word [ebp - 0x836], ax
mov eax, 0x89d1
mov word [ebp - 0x834], cx
mov word [ebp - 0x832], ax
mov eax, 0x89a5
mov word [ebp - 0x830], ax
mov eax, 0x8982
mov word [ebp - 0x82e], dx
mov word [ebp - 0x82c], ax
mov ax, word [ebp - 0x898]
nop word [eax + eax]
mov ax, word [ebp + edi*2 - 0x898]
mov ecx, edi
and ecx, ebx
movzx esi, ax
cmp ecx, ebx
mov eax, 0xba168952
mov edx, 0x768bc245
cmovae ecx, ebx
shl ecx, 2
call fcn.00466140
and ax, 0xf
lea ecx, [edi - 0x76ae]
xor ax, cx
xor ax, si
mov word [ebp + edi*2 - 0x898], ax
inc edi
cmp edi, 0x37
jb 0x44e250
push dword [0x5b6224]
lea eax, [ebp - 0x898]
push eax
lea eax, [ebp - 0xa2c]
push eax
call fcn.00412720
mov esi, dword [ebp - 0xa2c]
add esp, 0xc
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
call fcn.00474150
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
mov ebx, dword [ebp - 0xa24]
movzx eax, al
sub eax, 1
jne 0x44e45b
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0x910]
mov dword [ebp - 0x900], 0
mov dword [ebp - 0x8fc], 0xf
mov byte [ebp - 0x910], 0
call fcn.0041c540
push 3
push 0x56bd98
lea ecx, [ebp - 0x8f8]
mov byte [ebp - 4], 1
mov dword [ebp - 0x8e8], 0
mov dword [ebp - 0x8e4], 0xf
mov byte [ebp - 0x8f8], 0
call fcn.0041c540
mov byte [ebp - 4], 2
call fcn.00474150
mov ebx, eax
lea ecx, [ebp - 0xac8]
push 0x13e
lea eax, [ebp - 0x910]
push eax
lea eax, [ebp - 0x8f8]
push eax
call fcn.004066e0
mov edi, eax
push str.write_uninstall_reg
push edi
mov byte [ebp - 4], 3
call fcn.00405390
test esi, esi
mov ecx, 0x56ba88
cmovne ecx, esi
push ecx
push edi
call fcn.00405390
mov eax, dword [ebx]
add esp, 0x10
mov ecx, ebx
push edi
call dword [eax + 0x1c]
lea ecx, [ebp - 0xac8]
call fcn.00407f30
mov edx, dword [ebp - 0x8e4]
mov byte [ebp - 4], 1
cmp edx, 0x10
jb 0x44e3e1
mov ecx, dword [ebp - 0x8f8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e3d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f09d
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov edx, dword [ebp - 0x8fc]
mov dword [ebp - 0x8e8], 0
mov dword [ebp - 0x8e4], 0xf
mov byte [ebp - 0x8f8], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x44e43a
mov ecx, dword [ebp - 0x910]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e430
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0a2
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov ebx, dword [ebp - 0xa24]
mov dword [ebp - 0x900], 0
mov dword [ebp - 0x8fc], 0xf
mov byte [ebp - 0x910], 0
push 0x800
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.0050fe00
add esp, 0xc
mov eax, ebx
cmp dword [ebx + 0x14], 8
jb 0x44e47b
mov eax, dword [ebx]
push dword [0x5b6220]
push eax
lea eax, [ebp - 0x810]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ebx, [ebp - 0x810]
lea ecx, [ebx + 2]
nop dword [eax + eax]
mov ax, word [ebx]
add ebx, 2
test ax, ax
jne 0x44e4a0
mov eax, 0xba4
sub ebx, ecx
mov word [ebp - 0x828], ax
mov eax, 0xb84
mov word [ebp - 0x826], ax
mov eax, 0xb9c
mov word [ebp - 0x824], ax
mov eax, 0xb95
mov word [ebp - 0x822], ax
mov eax, 0xb8f
mov word [ebp - 0x820], ax
mov eax, 0xb8c
mov word [ebp - 0x81e], ax
mov eax, 0xb9d
mov word [ebp - 0x81c], ax
mov eax, 0xba2
mov word [ebp - 0x81a], ax
mov eax, 0xb83
mov word [ebp - 0x818], ax
mov eax, 0xb89
mov word [ebp - 0x816], ax
mov eax, 0xb82
mov word [ebp - 0x814], ax
mov eax, 0xbee
sar ebx, 1
xor edi, edi
mov dword [ebp - 0xa1c], ebx
mov ebx, 0xf
mov word [ebp - 0x812], ax
mov ax, word [ebp - 0x828]
mov ax, word [ebp + edi*2 - 0x828]
mov ecx, edi
and ecx, ebx
movzx esi, ax
cmp ecx, ebx
mov eax, 0x2ca50be2
mov edx, 0x6e3630da
cmovae ecx, ebx
shl ecx, 2
call fcn.00466140
and ax, 0xf
lea ecx, [edi + 0xbe2]
xor ax, cx
xor ax, si
mov word [ebp + edi*2 - 0x828], ax
inc edi
cmp edi, 0xc
jb 0x44e553
mov ebx, dword [ebp - 0xa1c]
mov esi, dword [ebp - 0xa2c]
lea eax, [ebx + ebx]
mov ebx, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push eax
lea eax, [ebp - 0x810]
push eax
push 1
lea eax, [ebp - 0x828]
push eax
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
call fcn.00474150
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44e74f
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0x8c8]
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x8b4], 0xf
mov byte [ebp - 0x8c8], al
call fcn.0041c540
push 3
push 0x56bd98
lea ecx, [ebp - 0x8b0]
mov byte [ebp - 4], 4
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x89c], 0xf
mov byte [ebp - 0x8b0], 0
call fcn.0041c540
mov byte [ebp - 4], 5
call fcn.00474150
mov ebx, eax
lea ecx, [ebp - 0xb60]
push 0x148
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0x8b0]
push eax
call fcn.004066e0
mov edi, eax
push str.write_DisplayIcon
push edi
mov byte [ebp - 4], 6
call fcn.00405390
lea eax, [ebp - 0x810]
push eax
push edi
call fcn.00405390
mov eax, dword [ebx]
add esp, 0x10
mov ecx, ebx
push edi
call dword [eax + 0x1c]
lea ecx, [ebp - 0xb60]
call fcn.00407f30
mov edx, dword [ebp - 0x89c]
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x44e6d5
mov ecx, dword [ebp - 0x8b0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e6cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0a7
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x89c], 0xf
mov byte [ebp - 0x8b0], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x44e72e
mov ecx, dword [ebp - 0x8c8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e724
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0ac
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov ebx, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov dword [ebp - 0x8b8], 0
mov dword [ebp - 0x8b4], 0xf
mov byte [ebp - 0x8c8], 0
push dword [0x5b621c]
lea ecx, [ebp - 0xa20]
call fcn.00406260
mov eax, dword [ebp - 0xa20]
mov byte [ebp - 4], 7
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
push 1
push str.DisplayName
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
call fcn.00474150
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44e8f9
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0x928]
mov dword [ebp - 0x918], eax
mov dword [ebp - 0x914], 0xf
mov byte [ebp - 0x928], al
call fcn.0041c540
push 3
push 0x56bd98
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 8
mov dword [ebp - 0x8d0], 0
mov dword [ebp - 0x8cc], 0xf
mov byte [ebp - 0x8e0], 0
call fcn.0041c540
mov byte [ebp - 4], 9
call fcn.00474150
mov ebx, eax
lea ecx, [ebp - 0xbf8]
push 0x14e
lea eax, [ebp - 0x928]
push eax
lea eax, [ebp - 0x8e0]
push eax
call fcn.004066e0
mov edi, eax
push str.write_DisplayName
push edi
mov byte [ebp - 4], 0xa
call fcn.00405390
mov ecx, dword [ebp - 0xa20]
mov edx, 0x56ba88
test ecx, ecx
cmovne edx, ecx
push edx
push edi
call fcn.00405390
mov eax, dword [ebx]
add esp, 0x10
mov ecx, ebx
push edi
call dword [eax + 0x1c]
lea ecx, [ebp - 0xbf8]
call fcn.00407f30
mov edx, dword [ebp - 0x8cc]
mov byte [ebp - 4], 8
cmp edx, 0x10
jb 0x44e89a
mov ecx, dword [ebp - 0x8e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e890
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0b1
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov edx, dword [ebp - 0x914]
mov dword [ebp - 0x8d0], 0
mov dword [ebp - 0x8cc], 0xf
mov byte [ebp - 0x8e0], 0
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x44e8f3
mov ecx, dword [ebp - 0x928]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e8e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0b6
push edx
push ecx
call fcn.00465e7d
add esp, 8
mov ebx, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0xa24]
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x44e909
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0xa28]
call fcn.00406260
push 0x56cd8c
lea ecx, [ebp - 0xa28]
mov byte [ebp - 4], 0xb
call fcn.00449490
push dword [0x5b6220]
lea ecx, [ebp - 0xa28]
call fcn.00449490
call fcn.00414250
mov ecx, eax
test ecx, ecx
je 0x44f0bb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa30], eax
lea eax, [ebp - 0xa30]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0xa28]
push eax
call fcn.00449dd0
mov edi, dword [ebp - 0xa30]
add esp, 8
mov ecx, edi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44e980
sub ecx, edx
sar ecx, 1
lea eax, [ecx + ecx]
push eax
push edi
push 1
push str.DisplayVersion
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
call fcn.00474150
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44eaa1
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0x9b8]
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9a4], 0xf
mov byte [ebp - 0x9b8], al
call fcn.0041c540
push 3
push 0x56bd98
lea ecx, [ebp - 0x9a0]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x990], 0
mov dword [ebp - 0x98c], 0xf
mov byte [ebp - 0x9a0], 0
call fcn.0041c540
mov byte [ebp - 4], 0xe
call fcn.00474150
mov dword [ebp - 0xa1c], eax
lea ecx, [ebp - 0xc90]
push 0x158
lea eax, [ebp - 0x9b8]
push eax
lea eax, [ebp - 0x9a0]
push eax
call fcn.004066e0
mov ebx, eax
push str.write_DisplayVersion
push ebx
mov byte [ebp - 4], 0xf
call fcn.00405390
test edi, edi
mov ecx, 0x56ba88
cmovne ecx, edi
push ecx
push ebx
call fcn.00405390
mov ecx, dword [ebp - 0xa1c]
add esp, 0x10
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xc90]
call fcn.00407f30
lea ecx, [ebp - 0x9a0]
call fcn.004070a0
lea ecx, [ebp - 0x9b8]
mov byte [ebp - 4], 0xc
call fcn.004070a0
mov ebx, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov edx, dword [str.sS_R]
test edx, edx
jne 0x44eaaf
xor ecx, ecx
jmp 0x44ead3
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xa1c], eax
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44eac0
sub ecx, dword [ebp - 0xa1c]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xa20]
call fcn.0041a8f0
mov eax, dword [ebp - 0xa20]
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
push 1
push str.Publisher
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
call fcn.00474150
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44ec00
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0x9e8]
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 0x9d4], 0xf
mov byte [ebp - 0x9e8], al
call fcn.0041c540
push 3
push 0x56bd98
lea ecx, [ebp - 0x9d0]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x9c0], 0
mov dword [ebp - 0x9bc], 0xf
mov byte [ebp - 0x9d0], 0
call fcn.0041c540
mov byte [ebp - 4], 0x11
call fcn.00474150
mov dword [ebp - 0xa1c], eax
lea ecx, [ebp - 0xd28]
push 0x15e
lea eax, [ebp - 0x9e8]
push eax
lea eax, [ebp - 0x9d0]
push eax
call fcn.004066e0
mov ebx, eax
push str.write_Publisher
push ebx
mov byte [ebp - 4], 0x12
call fcn.00405390
mov ecx, dword [ebp - 0xa20]
mov edx, 0x56ba88
test ecx, ecx
cmovne edx, ecx
push edx
push ebx
call fcn.00405390
mov ecx, dword [ebp - 0xa1c]
add esp, 0x10
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xd28]
call fcn.00407f30
lea ecx, [ebp - 0x9d0]
call fcn.004070a0
lea ecx, [ebp - 0x9e8]
mov byte [ebp - 4], 0xc
call fcn.004070a0
mov ebx, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0xa24]
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x44ec10
mov ecx, dword [eax]
push str.uninst.exe
push ecx
lea eax, [ebp - 0x810]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ecx, [ebp - 0x810]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44ec30
sub ecx, edx
sar ecx, 1
lea eax, [ecx + ecx]
push eax
lea eax, [ebp - 0x810]
push eax
push 1
push str.UninstallString
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
call fcn.00474150
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44ed53
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0xa18]
mov dword [ebp - 0xa08], eax
mov dword [ebp - 0xa04], 0xf
mov byte [ebp - 0xa18], al
call fcn.0041c540
push 3
push 0x56bd98
lea ecx, [ebp - 0xa00]
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x9f0], 0
mov dword [ebp - 0x9ec], 0xf
mov byte [ebp - 0xa00], 0
call fcn.0041c540
mov byte [ebp - 4], 0x14
call fcn.00474150
mov dword [ebp - 0xa1c], eax
lea ecx, [ebp - 0xdc0]
push 0x164
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0xa00]
push eax
call fcn.004066e0
mov ebx, eax
push str.write_UninstallString
push ebx
mov byte [ebp - 4], 0x15
call fcn.00405390
lea eax, [ebp - 0x810]
push eax
push ebx
call fcn.00405390
mov ecx, dword [ebp - 0xa1c]
add esp, 0x10
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xdc0]
call fcn.00407f30
lea ecx, [ebp - 0xa00]
call fcn.004070a0
lea ecx, [ebp - 0xa18]
mov byte [ebp - 4], 0xc
call fcn.004070a0
mov ebx, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov edx, dword [str.www.taojike.com.cn]
test edx, edx
jne 0x44ed61
xor ecx, ecx
jmp 0x44ed83
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xa1c], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44ed70
sub ecx, dword [ebp - 0xa1c]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xa20]
call fcn.0041a8f0
mov eax, dword [ebp - 0xa20]
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
push 1
push str.URLInfoAbout
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
call fcn.00474150
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44eeb0
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0x958]
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x944], 0xf
mov byte [ebp - 0x958], al
call fcn.0041c540
push 3
push 0x56bd98
lea ecx, [ebp - 0x940]
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x930], 0
mov dword [ebp - 0x92c], 0xf
mov byte [ebp - 0x940], 0
call fcn.0041c540
mov byte [ebp - 4], 0x17
call fcn.00474150
mov dword [ebp - 0xa1c], eax
lea ecx, [ebp - 0xe58]
push 0x16a
lea eax, [ebp - 0x958]
push eax
lea eax, [ebp - 0x940]
push eax
call fcn.004066e0
mov ebx, eax
push str.write_URLInfoAbout
push ebx
mov byte [ebp - 4], 0x18
call fcn.00405390
mov ecx, dword [ebp - 0xa20]
mov eax, 0x56ba88
test ecx, ecx
cmovne eax, ecx
push eax
push ebx
call fcn.00405390
mov ecx, dword [ebp - 0xa1c]
add esp, 0x10
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xe58]
call fcn.00407f30
lea ecx, [ebp - 0x940]
call fcn.004070a0
lea ecx, [ebp - 0x958]
mov byte [ebp - 4], 0xc
call fcn.004070a0
mov ebx, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0xa24]
cmp dword [eax + 0x14], 8
jb 0x44eebe
mov eax, dword [eax]
push 0x569bb8
push eax
lea eax, [ebp - 0x810]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ecx, [ebp - 0x810]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44eee0
sub ecx, edx
sar ecx, 1
lea eax, [ecx + ecx]
push eax
lea eax, [ebp - 0x810]
push eax
push 1
push str.InstallLocation
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
call fcn.00474150
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x44eff9
push 0x5d
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxpush_jkw.cc
lea ecx, [ebp - 0x988]
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], 0xf
mov byte [ebp - 0x988], al
call fcn.0041c540
push 3
push 0x56bd98
lea ecx, [ebp - 0x970]
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x960], 0
mov dword [ebp - 0x95c], 0xf
mov byte [ebp - 0x970], 0
call fcn.0041c540
mov byte [ebp - 4], 0x1a
call fcn.00474150
mov dword [ebp - 0xa1c], eax
lea ecx, [ebp - 0xef0]
push 0x170
lea eax, [ebp - 0x988]
push eax
lea eax, [ebp - 0x970]
push eax
call fcn.004066e0
mov ebx, eax
push str.write_InstallLocation
push ebx
mov byte [ebp - 4], 0x1b
call fcn.00405390
lea eax, [ebp - 0x810]
push eax
push ebx
call fcn.00405390
mov ecx, dword [ebp - 0xa1c]
add esp, 0x10
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xef0]
call fcn.00407f30
lea ecx, [ebp - 0x970]
call fcn.004070a0
lea ecx, [ebp - 0x988]
call fcn.004070a0
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xb
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44f017
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa28]
mov eax, edi
mov byte [ebp - 4], 7
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44f038
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa20]
mov eax, edi
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44f059
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x44f075
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00465d1b
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.0040c140
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
call fcn.005143e9
push 0x80004005
call fcn.0040c140
int3