Function at 0x44fd3c
Capabilities:
Delete registry value
Query or enumerate registry value

Disassembly:
push 0x7c
mov eax, 0x492999
call fcn.00474ec1
xor edi, edi
push edi
push dword [0x4c001c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x44fd88
cmp dword [0x4bfb94], edi
je 0x44fd81
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str.PIP_UI_event_happened_locally__no_need_to_wait
call fcn.00409f78
mov ecx, 0x4bfcf0
call fcn.004437f6
xor eax, eax
jmp 0x450178
mov ecx, dword [0x4c0030]
xor eax, eax
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x50], eax
cmp ecx, edi
je 0x44fdbf
mov dword [ebp - 0x50], 1
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x88], ecx
mov ecx, dword [0x4c0028]
cmp ecx, edi
je 0x44fdd4
mov dword [ebp + eax*4 - 0x88], ecx
inc eax
mov dword [ebp - 0x50], eax
mov ecx, dword [0x4c0020]
cmp ecx, edi
je 0x44fde9
mov dword [ebp + eax*4 - 0x88], ecx
inc eax
mov dword [ebp - 0x50], eax
mov ecx, dword [0x4bff38]
cmp ecx, edi
je 0x44fdfe
mov dword [ebp + eax*4 - 0x88], ecx
inc eax
mov dword [ebp - 0x50], eax
mov ecx, dword [0x4c002c]
cmp ecx, edi
je 0x44fe13
mov dword [ebp + eax*4 - 0x88], ecx
inc eax
mov dword [ebp - 0x50], eax
mov ecx, dword [0x4c0024]
cmp ecx, edi
je 0x44fe28
mov dword [ebp + eax*4 - 0x88], ecx
inc eax
mov dword [ebp - 0x50], eax
cmp eax, edi
je 0x44fd81
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x88]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov ebx, eax
cmp dword [0x4bfb94], edi
je 0x44fecf
mov eax, dword [section..data]
mov ecx, section..data
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x4c], eax
push ebx
push str.Wait_result_for_DefaultUiReadyTimeout_returned__d
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], edi
call fcn.00418ebf
mov esi, dword [ebp - 0x4c]
cmp dword [esi - 4], 1
pop ecx
pop ecx
jle 0x44fe8d
push dword [esi - 0xc]
lea eax, [ebp - 0x4c]
push eax
call fcn.00418cc4
mov esi, dword [ebp - 0x4c]
push esi
lea ecx, [ebp - 0x2c]
call fcn.0040a4c4
push 1
sub esp, 0x1c
mov byte [ebp - 4], 1
mov eax, esp
mov dword [ebp - 0x68], esp
push eax
lea ecx, [ebp - 0x2c]
call fcn.00456a76
pop ecx
mov ecx, 0x4bfcf0
call fcn.004437f6
push edi
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040bba0
or dword [ebp - 4], 0xffffffff
lea eax, [esi - 0x10]
call fcn.00404bd4
cmp ebx, edi
je 0x44fd81
cmp ebx, 1
jne 0x450175
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 4], 2
cmp dword [0x4bfff0], 8
mov eax, dword [0x4bffdc]
mov dword [ebp - 0x68], edi
jae 0x44ff06
mov eax, 0x4bffdc
push eax
push SysReAllocStringLen
mov eax, 0x2001f
lea ebx, [ebp - 0x64]
call fcn.0040248f
test eax, eax
je 0x44ff34
cmp dword [ebp - 0x64], edi
je 0x44fd81
push dword [ebp - 0x64]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x44fd81
push 4
pop ebx
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x4c]
push eax
push edi
mov esi, str.Uirt
push esi
push dword [ebp - 0x64]
mov dword [ebp - 0x54], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, edi
jne 0x44ff1d
cmp dword [ebp - 0x4c], ebx
jne 0x44ff1d
xor eax, eax
cmp eax, edi
jne 0x44ff1d
push esi
push dword [ebp - 0x64]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov eax, dword [ebp - 0x68]
mov ecx, 0x3e8
mul ecx
mov esi, eax
mov ebx, edx
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], ebx
call fcn.00458a5b
sub eax, dword [0x4bffc0]
sbb edx, dword [0x4bffc4]
sub esi, eax
sbb ebx, edx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], edx
cmp dword [0x4bfb94], edi
je 0x45003c
mov eax, dword [section..data]
mov ecx, section..data
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x4c], eax
push ebx
push esi
push dword [ebp - 0x6c]
mov byte [ebp - 4], 3
push dword [ebp - 0x70]
lea eax, [ebp - 0x4c]
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push str.Resetting_timer_to_honour_server_uiready_of__I64d_ms._Local_UIReady_time_expired:__I64u_ms__UIReady_time_remaining__relative_to_remote_server_data_:__I64d_ms.
call fcn.00418ebf
mov eax, dword [ebp - 0x4c]
add esp, 0x1c
cmp dword [eax - 4], 1
jle 0x44fff7
push dword [eax - 0xc]
lea eax, [ebp - 0x4c]
push eax
call fcn.00418cc4
mov eax, dword [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040a4c4
push 1
sub esp, 0x1c
mov byte [ebp - 4], 4
mov eax, esp
mov dword [ebp - 0x54], esp
push eax
lea ecx, [ebp - 0x2c]
call fcn.00456a76
pop ecx
mov ecx, 0x4bfcf0
call fcn.004437f6
push edi
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040bba0
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x4c]
add eax, 0xfffffff0
call fcn.00404bd4
cmp ebx, edi
jg 0x45004a
jl 0x450046
cmp esi, edi
ja 0x45004a
push edi
push edi
jmp 0x45004c
push ebx
push esi
call fcn.00453da8
mov esi, dword [sym.imp.USER32.dll_PeekMessageW]
xor ebx, ebx
mov dword [ebp - 0x4c], edi
inc ebx
jmp 0x45007c
inc dword [ebp - 0x4c]
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [ebp - 0x4c], 0x14
jg 0x45008a
push ebx
push edi
push edi
push edi
lea eax, [ebp - 0x2c]
push eax
call esi
test eax, eax
jg 0x45005f
cmp dword [0x4bfb94], edi
je 0x4500af
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str.Handling_pip_ui_ready_remote_data
call fcn.00409f78
mov ecx, 0x4bfcf0
call fcn.004437f6
push 0xfa
push edi
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x50]
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x54], eax
cmp dword [0x4bfb94], edi
je 0x450154
mov eax, dword [section..data]
mov ecx, section..data
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 5
push dword [ebp - 0x54]
lea eax, [ebp - 0x4c]
push str.Wait_result_on_new_time_returned__d
call fcn.00418ebf
mov esi, dword [ebp - 0x4c]
pop ecx
pop ecx
cmp dword [esi - 4], ebx
jle 0x450114
push dword [esi - 0xc]
lea eax, [ebp - 0x4c]
push eax
call fcn.00418cc4
mov esi, dword [ebp - 0x4c]
push esi
lea ecx, [ebp - 0x48]
call fcn.0040a4c4
push ebx
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x6c], esp
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 6
call fcn.00456a76
pop ecx
mov ecx, 0x4bfcf0
call fcn.004437f6
push edi
push ebx
lea ecx, [ebp - 0x48]
call fcn.0040bba0
lea eax, [esi - 0x10]
mov byte [ebp - 4], 2
call fcn.00404bd4
cmp dword [ebp - 0x54], 5
je 0x45017e
cmp dword [ebp - 0x54], 0x102
je 0x450051
cmp dword [ebp - 0x64], edi
je 0x450175
push dword [ebp - 0x64]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
inc eax
call fcn.00474f44
ret
cmp dword [ebp - 0x64], edi
je 0x45018c
push dword [ebp - 0x64]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
or eax, 0xffffffff
jmp 0x450178