Function at 0x44b3f0
Capabilities:
Check for time delay via gettickcount
Check if file exists
Hide graphical window
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56e477
mov eax, dword fs:[0]
push eax
sub esp, 0x394
mov eax, dword [0x5d7c7c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
mov dword [ebp - 0x3a0], 0x58ba6c
movups xmmword [ebp - 0x39c], xmm0
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x388], 0
mov edi, dword [0x5deb18]
add edi, 0x10
mov dword [ebp - 4], 0
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, dword [0x5deb60]
mov ebx, eax
push 4
mov ecx, dword [esi + 8]
inc ecx
push ecx
push dword [esi]
call fcn.0053dbfa
add esp, 0xc
test eax, eax
je 0x44b4bf
mov dword [esi], eax
mov eax, dword [esi + 8]
push 4
inc eax
push eax
push dword [esi + 4]
call fcn.0053dbfa
add esp, 0xc
test eax, eax
je 0x44b4bf
mov ecx, dword [esi + 8]
mov dword [esi + 4], eax
lea edx, [ecx*4]
mov ecx, dword [esi]
add ecx, edx
je 0x44b4b0
mov dword [ecx], ebx
mov eax, dword [esi + 4]
add eax, edx
je 0x44b4bc
lea ecx, [ebp - 0x3a0]
mov dword [eax], ecx
inc dword [esi + 8]
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x35c]
call fcn.0044dc00
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0
sub esp, 0x28
mov dword [ebp - 0x364], eax
mov ecx, esp
mov dword [ebp - 0x368], esp
mov dword [ecx + 0x24], 0
push 0
push 0
push str.start_inst
mov byte [ebp - 4], 2
call fcn.00434a60
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00430c10
push dword [ebp - 0x364]
lea eax, [ebp - 0x33c]
push eax
push 0x5d7430
push 0x5d60d4
push 0x5df7b0
call fcn.00425110
add esp, 0x14
movzx eax, ax
lea ecx, [ebp - 0x35c]
push 0
push eax
push 0
push 8
push SysReAllocString
push 0
push 0
push 0
call fcn.004256b0
test eax, eax
jne 0x44b55d
xor edi, edi
jmp 0x44b8d0
call fcn.00444d10
mov ecx, eax
call fcn.004400f0
cmp dword [eax], 0
jne 0x44b5b7
push dword [ebp + 0xc]
push dword [ebp - 0x358]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [ebp - 0x358]
call dword [sym.imp.USER32.dll_BringWindowToTop]
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [ebp - 0x358]
call esi
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push dword [ebp - 0x358]
call esi
call fcn.00444d10
mov ecx, eax
call fcn.004400f0
mov edx, str.Create_Main_Wnd_and_show
mov ecx, str.Silent_mode
cmp dword [eax], 0
cmove ecx, edx
push ecx
call fcn.0044d3f0
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00512920
lea eax, [ebp - 0x230]
mov dword [ebp - 0x368], 1
push 1
push eax
mov dword [ebp - 0x360], 0x208
call fcn.00438d50
add esp, 0x18
lea ecx, [ebp - 0x360]
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push ecx
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x368]
push ecx
push str.Setup_Path
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x44b66f
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, dword [0x5d7400]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x5d7400], ecx
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x44b6af
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44b6a5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b93d
push edx
push ecx
call fcn.004acb9e
add esp, 8
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, 1
xor esi, esi
nop dword [eax]
test ebx, ebx
je 0x44b6f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x384]
push eax
call edi
test eax, eax
jne 0x44b6f0
mov eax, dword [ebp - 0x3a0]
lea ecx, [ebp - 0x3a0]
push esi
call dword [eax + 4]
inc esi
test eax, eax
jne 0x44b6c4
xor ebx, ebx
push 0
push 0
push 0
lea eax, [ebp - 0x384]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x44b6c0
test eax, eax
je 0x44b786
lea eax, [ebp - 0x384]
push eax
mov eax, dword [ebp - 0x3a0]
lea ecx, [ebp - 0x3a0]
call dword [eax]
test eax, eax
jne 0x44b73f
lea eax, [ebp - 0x384]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x384]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x380]
cmp eax, 0x118
ja 0x44b75a
je 0x44b776
cmp eax, 0xf
je 0x44b776
cmp eax, 0xa0
jmp 0x44b75f
cmp eax, 0x200
je 0x44b776
mov ecx, 1
xor eax, eax
test ecx, ecx
mov ebx, ecx
cmove eax, esi
mov esi, eax
jmp 0x44b6c0
xor ecx, ecx
xor eax, eax
test ecx, ecx
cmove eax, esi
mov esi, eax
jmp 0x44b6c0
mov edi, dword [ebp - 0x37c]
lea eax, [ebp - 0x230]
push 1
push eax
call fcn.00438d50
mov esi, eax
add esp, 8
cmp dword [esi + 0x14], 8
jb 0x44b7a7
mov esi, dword [esi]
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x44b7e7
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44b7dd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b942
push edx
push ecx
call fcn.004acb9e
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
cmp dword [0x5d7400], eax
je 0x44b826
push 2
push 0x58a164
push 1
push 0x58ba74
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
call fcn.0040cdc0
mov ecx, eax
test ecx, ecx
je 0x44b947
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x360], eax
mov byte [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
sub ecx, dword [ebp - 0x364]
mul ecx
lea eax, [ebp - 0x360]
shr edx, 6
push edx
push str.ex3end:_ld
push eax
call fcn.0040b130
add esp, 0xc
push 0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x364], esp
mov dword [eax + 0x24], 0
mov esi, dword [ebp - 0x360]
push 0
push esi
push str.end_inst
mov byte [ebp - 4], 4
call fcn.00434a60
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00430c10
mov ecx, 0x5deb2c
call fcn.0044b2c0
mov byte [ebp - 4], 1
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x44b8d0
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x35c]
call fcn.0044ddc0
mov eax, dword [ebp - 0x390]
test eax, eax
je 0x44b8f8
push eax
call fcn.0052feeb
add esp, 4
mov dword [ebp - 0x390], 0
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x388], 0
test ecx, ecx
je 0x44b91f
push ecx
call fcn.0052feeb
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004acb88
mov esp, ebp
pop ebp
ret
call fcn.0052fd36
call fcn.0052fd36
push 0x80004005
call fcn.0040ae00
int3