Function at 0x44b4b0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5016cc
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x5732cc]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], ebx
push 0x468ad0
call fcn.004dbbc8
push 0x10
call fcn.004dc69d
add esp, 8
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x44b50f
push 1
mov ecx, eax
call fcn.004973b0
jmp 0x44b511
xor eax, eax
mov byte [ebp - 4], 0
push eax
lea ecx, [ebp - 0x24]
call fcn.0045c070
mov byte [ebp - 4], 2
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x54]
call fcn.00447f30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x24]
call fcn.00447ed0
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov byte [ebp - 4], 3
cmp dword [esi + 0x54], ebx
je 0x44b55e
mov edi, dword [esi + 0x54]
cmp dword [edi], ebx
je 0x44b55e
lea ecx, [ebp - 0x40]
push ecx
mov ecx, dword [edi]
call fcn.00497870
lea ecx, [esi + 0x4c]
call fcn.00447720
mov edi, dword [ebp - 0x40]
mov dword [ebp - 0x28], edi
cmp edi, dword [ebp - 0x3c]
je 0x44b581
mov eax, dword [edi]
push eax
lea ecx, [esi + 0x4c]
call fcn.00447740
add edi, 4
jmp 0x44b569
push 0xcd
mov edx, dword [esi + 4]
push edx
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
call edi
push 0
push 0x10
push 0xc5
push eax
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
call ebx
push 0xcf
mov eax, dword [esi + 4]
push eax
call edi
xor edi, edi
push edi
push 0x10
push 0xc5
push eax
call ebx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x18], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x514264
call fcn.0041ad50
mov byte [ebp - 4], 4
mov byte [ebp - 4], 3
call fcn.0046a780
add esp, 4
test al, al
jne 0x44b62f
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x1c]
push eax
push 0x5143cc
push str.SoftwareUSAirwaysToolbar
push reloc.WS2_32.dll_accept
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x44b626
mov eax, 4
cmp dword [ebp - 0x18], eax
jne 0x44b626
cmp dword [ebp - 0x1c], eax
jne 0x44b626
cmp dword [ebp - 0x20], edi
je 0x44b6a2
mov dword [esi + 0x5c], 1
jmp 0x44b6ae
lea ecx, [ebp - 0x24]
push ecx
call fcn.0046b160
add esp, 4
mov byte [ebp - 4], 5
mov edi, 1
or dword [ebp - 0x14], edi
mov eax, dword [eax]
lea edx, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x1c]
push edx
push 0x5143cc
push eax
push reloc.WS2_32.dll_accept
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x44b67d
mov eax, 4
cmp dword [ebp - 0x18], eax
jne 0x44b67d
cmp dword [ebp - 0x1c], eax
jne 0x44b67d
mov bl, 1
jmp 0x44b67f
xor bl, bl
mov dword [ebp - 4], 3
test byte [ebp - 0x14], 1
je 0x44b698
and dword [ebp - 0x14], 0xfffffffe
lea ecx, [ebp - 0x24]
call fcn.00416630
test bl, bl
je 0x44b6ab
cmp dword [ebp - 0x20], 0
jne 0x44b6ab
mov dword [esi + 0x5c], 0
jmp 0x44b6ae
mov dword [esi + 0x5c], edi
mov eax, dword [esi + 0x5c]
mov dword [esi + 0x70], eax
lea ecx, [esi + 0x44]
call fcn.0042d080
lea ecx, [esi + 0x30]
call fcn.0042d080
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [esi + 0x44]
call fcn.004199b0
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x44b6e5
cmp byte [eax], 0
je 0x44b6e5
push eax
lea ecx, [esi + 0x30]
call fcn.004199b0
lea eax, [esi + 0x20]
test eax, eax
je 0x44b6f1
lea edi, [eax - 0x20]
jmp 0x44b6f3
xor edi, edi
mov eax, dword [esi + 0x44]
push eax
push 0xcd
mov edx, dword [edi + 4]
push edx
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextA]
call ebx
test eax, eax
jne 0x44b73d
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBeep]
add edi, 0x20
je 0x44b71e
lea eax, [edi - 0x20]
jmp 0x44b720
xor eax, eax
push 0xcd
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov edi, dword [sym.imp.USER32.dll_SetFocus]
call edi
jmp 0x44b825
lea eax, [esi + 0x20]
test eax, eax
je 0x44b748
mov edi, esi
jmp 0x44b74a
xor edi, edi
mov eax, dword [esi + 0x30]
push eax
push 0xcf
mov ecx, dword [edi + 4]
push ecx
call ebx
test eax, eax
jne 0x44b78e
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBeep]
add edi, 0x20
je 0x44b76f
lea eax, [edi - 0x20]
jmp 0x44b771
xor eax, eax
push 0xcf
mov edx, dword [eax + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov edi, dword [sym.imp.USER32.dll_SetFocus]
call edi
jmp 0x44b825
lea edi, [esi + 0x20]
test edi, edi
je 0x44b79a
add edi, 0xffffffe0
jmp 0x44b79c
xor edi, edi
mov eax, dword [esi + 0x2c]
push eax
push 0xd6
mov eax, dword [edi + 4]
push eax
call ebx
test eax, eax
jne 0x44b7dd
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBeep]
add edi, 0x20
je 0x44b7c1
lea eax, [edi - 0x20]
jmp 0x44b7c3
xor eax, eax
push 0xd6
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov edi, dword [sym.imp.USER32.dll_SetFocus]
call edi
jmp 0x44b825
lea eax, [esi + 0x20]
test eax, eax
je 0x44b7e9
add eax, 0xffffffe0
jmp 0x44b7eb
xor eax, eax
push 0xd3
mov edx, dword [eax + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [esi + 0x5c]
test ecx, ecx
js 0x44b806
cmp ecx, 2
jle 0x44b80d
mov dword [esi + 0x5c], 0
push 0
mov ecx, dword [esi + 0x5c]
push ecx
push 0xf1
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov edi, dword [sym.imp.USER32.dll_SetFocus]
mov ecx, esi
call fcn.004487f0
push 0
lea ecx, [esi + 0x4c]
call fcn.004476c0
mov edx, dword [esi + 0x44]
cmp dword [edx - 8], 0
jne 0x44b84a
push 0xcd
mov eax, dword [esi + 4]
push eax
jmp 0x44b853
push 0xcf
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call edi
push 0
mov ecx, esi
call fcn.004484d0
call fcn.00447840
mov byte [esi + 0x58], al
test al, al
jne 0x44b88e
cmp dword [esi + 0x54], 0
je 0x44b88e
mov eax, dword [esi + 0x54]
cmp dword [eax], 0
je 0x44b88e
mov ecx, dword [eax]
call fcn.00497a00
test eax, eax
jle 0x44b88e
mov byte [esi + 0x58], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00423740
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8