Function at 0x440360
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a19ce
mov eax, dword fs:[0]
push eax
sub esp, 0xa74
mov eax, dword [0x4c448c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov esi, ecx
mov ecx, 0x4c41fc
mov dword [ebp - 0xa60], esi
call edx
add eax, 0x10
mov dword [ebp - 0xa24], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, dword [0x4c7dd0]
mov dword [ebp - 0xa6c], eax
cmp eax, ebx
jne 0x4403d8
mov eax, dword [str.pl_rsrc_english.dll]
push eax
mov dword [str.pl_rsrc_english.dll], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4c7dd0], eax
lea eax, [esi + 0x2fbc]
push eax
mov dword [ebp - 0xa7c], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
mov dword [ebp - 0xa4c], ebx
mov dword [ebp - 0xa44], ebx
mov dword [ebp - 0xa40], ebx
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa34], ebx
mov dword [ebp - 0xa30], ebx
mov dword [ebp - 0xa2c], ebx
push 0xc35c8
push 0x4acf38
lea edi, [ebp - 0xa24]
mov byte [ebp - 4], 3
call fcn.004020e0
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp dword [eax - 4], 1
jle 0x44045b
mov eax, dword [eax - 0xc]
push eax
mov ecx, edi
push ecx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.Version
mov ecx, str.Administration
call fcn.0044f200
mov eax, dword [esi + 0x30e8]
cmp dword [eax - 4], 1
lea edi, [esi + 0x30e8]
jle 0x44049c
mov eax, dword [eax - 0xc]
push eax
push edi
call fcn.00401ff0
mov edi, dword [edi]
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea eax, [ebp - 0xa54]
push eax
push edi
push str.ConfigPasswordMD5
mov ecx, str.Administration
call fcn.0044f200
cmp byte [esi + 0x3019], 0
mov eax, str.True
jne 0x4404d6
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.OocOn
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3054], 0
mov eax, str.True
jne 0x44050e
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.DisableProBalanceWhenSysIdle
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3057], 0
mov eax, str.True
jne 0x440546
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ProBalanceDropOneRandomCore
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x30aa], 0
mov eax, str.True
jne 0x44057e
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.OocDisableCoreParkingWhileIn
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x30d8], 0
mov eax, str.True
jne 0x4405b6
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.Exp2
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov edx, dword [esi + 0x304c]
push edx
push 0x4b338c
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
lea eax, [ebp - 0x110]
push eax
push str.DisableProBalanceIfSysIdleThisManyMS
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov ecx, dword [esi + 0x3038]
push ecx
push 0x4acf38
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea edx, [ebp - 0xa34]
push edx
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0xa54]
push ecx
lea edx, [ebp - 0x110]
push edx
push str.TotalProcessorUsageBeforeRestraint
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov eax, dword [esi + 0x301c]
push eax
push 0x4b338c
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0x110]
push ecx
push str.PerProcessUsageBeforeRestraint
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov edx, dword [esi + 0x303c]
push edx
push 0x4b338c
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
lea eax, [ebp - 0x110]
push eax
push str.TimeOverQuotaBeforeRestraint
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov ecx, dword [esi + 0x3020]
push ecx
push 0x4b338c
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea edx, [ebp - 0xa34]
push edx
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0xa54]
push ecx
lea edx, [ebp - 0x110]
push edx
push str.PerProcessUsageForRestore
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov eax, dword [esi + 0x30f0]
cmp dword [eax - 4], 1
lea edi, [esi + 0x30f0]
jle 0x440750
mov eax, dword [eax - 0xc]
push eax
push edi
call fcn.00401ff0
mov edi, dword [edi]
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea eax, [ebp - 0xa54]
push eax
push edi
push str.PlayOnRestraint
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov eax, dword [esi + 0x30f4]
cmp dword [eax - 4], 1
lea edi, [esi + 0x30f4]
jle 0x440793
mov ecx, dword [eax - 0xc]
push ecx
push edi
call fcn.00401ff0
mov edi, dword [edi]
lea edx, [ebp - 0xa34]
push edx
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0xa54]
push ecx
push edi
push str.PlayOnRestore
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov edx, dword [esi + 0x3040]
push edx
push 0x4b338c
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
lea eax, [ebp - 0x110]
push eax
push str.MinimumTimeOfRestraint
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov ecx, dword [esi + 0x3044]
push ecx
push 0x4b338c
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea edx, [ebp - 0xa34]
push edx
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0xa54]
push ecx
lea edx, [ebp - 0x110]
push edx
push str.MaximumTimeOfRestraint
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3076], 0
mov eax, str.True
jne 0x440857
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.TameOnlyNormal
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3077], 0
mov eax, str.True
jne 0x44088f
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.LowerToIdleInsteadOfBelowNormal
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3072], 0
mov eax, str.True
jne 0x4408c7
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ExcludeServices
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3098], 0
mov eax, str.True
jne 0x4408ff
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.PlaySoundOnRestraint
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3099], 0
mov eax, str.True
jne 0x440937
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.PlaySoundOnRestore
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3080], 0
mov eax, str.True
jne 0x44096f
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.RestrainByAffinity
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov ecx, dword [esi + 0x308c]
xor eax, eax
mov word [ebp - 0x110], ax
mov eax, dword [esi + 0x3088]
mov edx, eax
or edx, ecx
je 0x4409ce
cmp eax, 0xfffffffe
jne 0x4409b9
cmp ecx, 0xffffffff
je 0x4409ce
push 0x7f
lea edx, [ebp - 0x110]
push edx
push ecx
push eax
call fcn.0042bf10
add esp, 0x10
jmp 0x440a17
cmp eax, 0xfffffffe
jne 0x440a17
cmp ecx, 0xffffffff
jne 0x440a17
mov edx, dword [ebp - 0xa6c]
push 0x339
mov ebx, 0x3ff
lea esi, [ebp - 0xa10]
call fcn.004341a0
lea edx, [ebp - 0x110]
add esp, 4
sub edx, eax
mov edi, edi
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x440a00
mov esi, dword [ebp - 0xa60]
xor ebx, ebx
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
lea eax, [ebp - 0x110]
push eax
push str.RestraintAffinity
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3078], 0
mov eax, str.True
jne 0x440a55
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ExcludeForegroundProcesses
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3087], 0
mov eax, str.True
jne 0x440a8d
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.DoNotLowerPriorityClass
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3068], 0
mov eax, str.True
jne 0x440ac5
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.RoundRobinAffinitySelection
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3055], 0
mov eax, str.True
jne 0x440afd
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.LowerIOPriorityDuringRestraint
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x3056], 0
mov eax, str.True
jne 0x440b35
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.MatchExclusionsByPathnameToo
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
mov ecx, dword [ebp - 0xa24]
mov edi, dword [ecx - 0x10]
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0x10]
je 0x440bba
cmp dword [eax + 0xc], ebx
lea edx, [eax + 0xc]
jge 0x440b92
cmp dword [ecx - 8], ebx
jge 0x440b82
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], ebx
mov eax, dword [ebp - 0xa24]
xor edx, edx
mov word [eax], dx
jmp 0x440bba
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x440ba8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [ebp - 0xa24], eax
lea eax, [esi + 0x30fc]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x32b0]
mov edi, dword [eax]
cmp edi, eax
je 0x440c75
jmp 0x440be0
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
je 0x440c0f
lea edx, [ebp - 0xa24]
push edx
mov ecx, 0x4b37bc
call fcn.004300c0
mov eax, dword [edi + 0xc]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
cmp byte [edi + 0x15], 0
jne 0x440c67
mov eax, dword [edi + 8]
cmp byte [eax + 0x15], 0
jne 0x440c4c
mov edi, eax
mov eax, dword [edi]
cmp byte [eax + 0x15], 0
jne 0x440c67
jmp 0x440c40
mov edi, eax
mov eax, dword [edi]
cmp byte [eax + 0x15], 0
je 0x440c40
jmp 0x440c67
mov eax, dword [edi + 4]
cmp byte [eax + 0x15], 0
jne 0x440c65
cmp edi, dword [eax + 8]
jne 0x440c65
mov edi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0x15], 0
je 0x440c55
mov edi, eax
cmp edi, dword [esi + 0x32b0]
jne 0x440be0
xor ebx, ebx
lea eax, [esi + 0x30fc]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0xa24]
mov edi, dword [edx - 0xc]
cmp edi, ebx
jge 0x440c99
push 0x80070057
call fcn.004018d0
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, edi
or eax, ecx
jge 0x440cbd
mov eax, edi
lea ecx, [ebp - 0xa24]
call fcn.00401f90
mov edx, dword [ebp - 0xa24]
lea eax, [edi + 1]
push eax
push edx
call fcn.00473d4c
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp edi, dword [eax - 8]
jg 0x440b78
mov dword [eax - 0xc], edi
mov edx, dword [ebp - 0xa24]
xor ecx, ecx
mov word [edx + edi*2], cx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x440d0a
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp - 0xa24]
push ecx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push 0x4b37c0
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
lea ecx, [esi + 0x34d4]
call fcn.0043ed80
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
mov ebx, dword [ecx - 0x10]
lea eax, [ecx - 0x10]
je 0x440da7
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jge 0x440d7f
cmp dword [ecx - 8], 0
jge 0x440d65
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], 0
mov ecx, dword [ebp - 0xa24]
xor eax, eax
mov word [ecx], ax
mov ecx, dword [ebp - 0xa24]
jmp 0x440da7
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x440d95
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [ebx]
mov eax, dword [edx + 0xc]
mov ecx, ebx
call eax
lea ecx, [eax + 0x10]
mov dword [ebp - 0xa24], ecx
mov edi, dword [esi + 0x34d4]
cmp edi, dword [esi + 0x34d8]
je 0x440e07
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
je 0x440de4
lea edx, [ebp - 0xa24]
push edx
mov ecx, 0x4b37bc
call fcn.004300c0
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
add edi, 4
cmp edi, dword [esi + 0x34d8]
jne 0x440db5
mov ecx, dword [ebp - 0xa24]
mov edi, dword [ecx - 0xc]
test edi, edi
jns 0x440e18
push 0x80070057
call fcn.004018d0
mov eax, dword [ecx - 8]
mov edx, 1
sub edx, dword [ecx - 4]
sub eax, edi
or eax, edx
jge 0x440e3c
mov eax, edi
lea ecx, [ebp - 0xa24]
call fcn.00401f90
mov ecx, dword [ebp - 0xa24]
lea eax, [edi + 1]
push eax
push ecx
call fcn.00473d4c
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp edi, dword [eax - 8]
jg 0x440b78
mov dword [eax - 0xc], edi
mov edx, dword [ebp - 0xa24]
xor ecx, ecx
mov word [edx + edi*2], cx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x440e89
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp - 0xa24]
push ecx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.OocHardCodedExclusionOverrides
mov ecx, str.OutOfControlProcessRestraint
call fcn.0044f200
cmp byte [esi + 0x30d9], 0
mov eax, str.True
jne 0x440ec1
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push 0x4b381c
mov ecx, str.iolo
call fcn.0044f200
cmp byte [esi + 0x3083], 0
mov eax, str.True
jne 0x440ef9
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.HideProcessIcons
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x307d], 0
mov eax, str.True
jne 0x440f31
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ClearLogAtExit
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x30ab], 0
mov eax, str.True
jne 0x440f69
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ShowMemoryLoadGraph
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x30a8], 0
mov eax, str.True
jne 0x440fa1
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ShowPerCoreUtilGraph
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x30a9], 0
mov eax, str.True
jne 0x440fd9
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ShowPerCoreFreqGraph
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x30a6], 0
mov eax, str.True
jne 0x441011
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ShowGraphLegend
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x30a3], 0
mov eax, str.True
jne 0x441049
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ShowGraphCPU
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x30a2], 0
mov eax, str.True
jne 0x441081
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ShowGraphResponsiveness
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x30a5], 0
mov eax, str.True
jne 0x4410b9
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ShowGraphMemoryLoad
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x30a4], 0
mov eax, str.True
jne 0x4410f1
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ShowGraphProBalanceEvents
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x30a7], 0
mov eax, str.True
jne 0x441129
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ShowGraphSelectedProcessesCPUHistory
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x3086], 0
mov eax, str.True
jne 0x441161
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ShowThreadsAndModulesView
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x301b], 0
mov eax, str.True
jne 0x441199
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ShowGridLinesInListViews
mov ecx, 0x4b3854
call fcn.0044f200
cmp byte [esi + 0x309e], 0
mov eax, str.True
jne 0x4411d1
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.AutomaticUpdate
mov ecx, str.Advanced
call fcn.0044f200
cmp byte [esi + 0x3060], 0
mov eax, str.True
jne 0x441209
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.RoundRobinSkipCore0
mov ecx, str.Advanced
call fcn.0044f200
mov eax, dword [esi + 0x305c]
push eax
push 0x4b338c
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0x110]
push ecx
push str.DelayStartMins
mov ecx, str.Performance
call fcn.0044f200
mov edx, dword [esi + 0x2ffc]
push edx
push 0x4acf38
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
lea eax, [ebp - 0x110]
push eax
push str.DefaultsLevel
mov ecx, str.Performance
call fcn.0044f200
mov ecx, dword [esi + 0x3028]
push ecx
push 0x4acf38
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea edx, [ebp - 0xa34]
push edx
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0xa54]
push ecx
lea edx, [ebp - 0x110]
push edx
push str.UpdateSpeedGUI
mov ecx, str.Performance
call fcn.0044f200
mov eax, dword [esi + 0x302c]
push eax
push 0x4acf38
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0x110]
push ecx
push str.UpdateSpeedCore
mov ecx, str.Performance
call fcn.0044f200
cmp byte [esi + 0x3082], 0
mov eax, str.True
jne 0x441355
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ManageOnlyCurrentUser
mov ecx, str.Performance
call fcn.0044f200
cmp byte [esi + 0x307f], 0
mov eax, str.True
jne 0x44138d
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ExitOnCloseWindow
mov ecx, str.Performance
call fcn.0044f200
cmp byte [esi + 0x307c], 0
mov eax, str.True
jne 0x4413c5
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.SoundsOff
mov ecx, str.Performance
call fcn.0044f200
cmp byte [esi + 0x307b], 0
mov eax, str.True
jne 0x4413fd
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.AggressivelyTrimProcessLassoWorkingSet
mov ecx, str.Performance
call fcn.0044f200
mov edx, dword [esi + 0x3034]
push edx
push 0x4acf38
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
lea eax, [ebp - 0x110]
push eax
push str.CloseApplicationTimeoutSeconds
mov ecx, str.Performance
call fcn.0044f200
cmp byte [esi + 0x3079], 0
mov eax, str.True
jne 0x44147a
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ForcedMode
mov ecx, str.Performance
call fcn.0044f200
cmp byte [esi + 0x3071], 0
mov eax, str.True
jne 0x4414b2
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.IgnoreProtectedProcesses
mov ecx, str.Performance
call fcn.0044f200
cmp byte [esi + 0x3074], 0
mov eax, str.True
jne 0x4414ea
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.BoostForegroundThread
mov ecx, str.ForegroundBoosting
call fcn.0044f200
cmp byte [esi + 0x306f], 0
mov eax, str.True
jne 0x441522
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.BoostForegroundProcess
mov ecx, str.ForegroundBoosting
call fcn.0044f200
lea ecx, [esi + 0x32ec]
call fcn.0043ed80
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
mov ebx, dword [ecx - 0x10]
lea eax, [ecx - 0x10]
je 0x4415bf
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jge 0x441597
cmp dword [ecx - 8], 0
jge 0x44157d
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], 0
mov ecx, dword [ebp - 0xa24]
xor eax, eax
mov word [ecx], ax
mov ecx, dword [ebp - 0xa24]
jmp 0x4415bf
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4415ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [ebx]
mov eax, dword [edx + 0xc]
mov ecx, ebx
call eax
lea ecx, [eax + 0x10]
mov dword [ebp - 0xa24], ecx
mov edi, dword [esi + 0x32ec]
cmp edi, dword [esi + 0x32f0]
je 0x441622
lea ecx, [ecx]
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
je 0x4415ff
lea edx, [ebp - 0xa24]
push edx
mov ecx, 0x4b37bc
call fcn.004300c0
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
add edi, 4
cmp edi, dword [esi + 0x32f0]
jne 0x4415d0
mov ecx, dword [ebp - 0xa24]
mov edi, dword [ecx - 0xc]
test edi, edi
jns 0x441633
push 0x80070057
call fcn.004018d0
mov eax, dword [ecx - 8]
mov edx, 1
sub edx, dword [ecx - 4]
sub eax, edi
or eax, edx
jge 0x441657
mov eax, edi
lea ecx, [ebp - 0xa24]
call fcn.00401f90
mov ecx, dword [ebp - 0xa24]
lea eax, [edi + 1]
push eax
push ecx
call fcn.00473d4c
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp edi, dword [eax - 8]
jg 0x440b78
mov dword [eax - 0xc], edi
mov edx, dword [ebp - 0xa24]
xor ecx, ecx
mov word [edx + edi*2], cx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x4416a4
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp - 0xa24]
push ecx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ForegroundBoostExclusions
mov ecx, str.ForegroundBoosting
call fcn.0044f200
cmp byte [esi + 0x3070], 0
mov eax, str.True
jne 0x4416dc
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.UseStaticIcon
mov ecx, str.SystemTrayIcon
call fcn.0044f200
cmp byte [esi + 0x3073], 0
mov eax, str.True
jne 0x441714
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ShowResponsivnessInTrayInsteadOfProcessorUsage
mov ecx, str.SystemTrayIcon
call fcn.0044f200
cmp byte [esi + 0x309a], 0
mov eax, str.True
jne 0x44174c
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.LogDisable
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x3058], 0
mov eax, str.True
jne 0x441784
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.LogEmitCSV
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x309c], 0
mov eax, str.True
jne 0x4417bc
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.LogPruning
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x309f], 0
mov eax, str.True
jne 0x4417f4
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.LogProBalanceParkingChanges
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x3066], 0
mov eax, str.True
jne 0x44182c
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.LogProcessExecutions
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x306c], 0
mov eax, str.True
jne 0x441864
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.LogProcessTerminations
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x3067], 0
mov eax, str.True
jne 0x44189c
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.LogProcessesDisallowed
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x3069], 0
mov eax, str.True
jne 0x4418d4
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.LogDefaultPriorityAdjustments
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x306d], 0
mov eax, str.True
jne 0x44190c
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.LogDefaultAffinityAdjustments
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x306b], 0
mov eax, str.True
jne 0x441944
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.LogOutOfControlProcessesRestrained
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x3065], 0
mov eax, str.True
jne 0x44197c
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.LogOutOfControlProcessesRestored2
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x306e], 0
mov eax, str.True
jne 0x4419b4
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.LogInstanceLimitTerminations
mov ecx, str.Logging
call fcn.0044f200
cmp byte [esi + 0x309d], 0
mov eax, str.True
jne 0x4419ec
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.LogPowerProfileChanges
mov ecx, str.Logging
call fcn.0044f200
mov edx, dword [esi + 0x3090]
push edx
push 0x4acf38
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
lea eax, [ebp - 0x110]
push eax
push str.TrimAllProcessesAtThisIntervalInMs
mov ecx, str.MemoryManagement
call fcn.0044f200
cmp byte [esi + 0x3061], 0
mov eax, str.True
jne 0x441a69
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.DebugLogging
mov ecx, str.Debug
call fcn.0044f200
cmp byte [esi + 0x3063], 0
mov eax, str.True
jne 0x441aa1
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.EnableSystemTrayNotification
mov ecx, str.SysTrayBalloons
call fcn.0044f200
mov eax, dword [esi + 0x3030]
push eax
push 0x4acf38
lea edx, [ebp - 0x110]
call fcn.00454a30
add esp, 8
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0x110]
push ecx
push str.BalloonTipDuration
mov ecx, str.SysTrayBalloons
call fcn.0044f200
cmp byte [esi + 0x3064], 0
mov eax, str.True
jne 0x441b1e
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ShowBalloonsForOocPriorityRestoration
mov ecx, str.SysTrayBalloons
call fcn.0044f200
cmp byte [esi + 0x309b], 0
mov eax, str.True
jne 0x441b56
mov eax, str.False
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.ApplyInstanceCountLimitsToAllUsers
mov ecx, str.ProcessAllowances
call fcn.0044f200
cmp byte [esi + 0x307a], 0
mov eax, str.True
jne 0x441b8e
mov eax, str.False
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.SendTerminationNotificationMessage
mov ecx, str.ProcessAllowances
call fcn.0044f200
lea ecx, [esi + 0x32cc]
call fcn.0043ed80
mov edi, dword [esi + 0x32cc]
cmp edi, dword [esi + 0x32d0]
je 0x441c1c
lea esp, [esp]
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 0xc], 0
je 0x441bff
lea ecx, [ebp - 0xa24]
push ecx
mov ecx, 0x4b37bc
call fcn.004300c0
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
add edi, 4
cmp edi, dword [esi + 0x32d0]
jne 0x441bd0
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x441c3e
mov edx, dword [eax - 0xc]
push edx
lea eax, [ebp - 0xa24]
push eax
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.AllowedProcesses
mov ecx, str.ProcessAllowances
call fcn.0044f200
lea eax, [esi + 0x321c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [esi + 0x32dc]
call fcn.0043ed80
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
mov ebx, dword [ecx - 0x10]
lea eax, [ecx - 0x10]
je 0x441ce8
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jge 0x441cc0
cmp dword [ecx - 8], 0
jge 0x441ca6
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], 0
mov eax, dword [ebp - 0xa24]
xor edx, edx
mov word [eax], dx
mov ecx, dword [ebp - 0xa24]
jmp 0x441ce8
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x441cd6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [ebx]
mov eax, dword [edx + 0xc]
mov ecx, ebx
call eax
lea ecx, [eax + 0x10]
mov dword [ebp - 0xa24], ecx
mov edi, dword [esi + 0x32dc]
cmp edi, dword [esi + 0x32e0]
je 0x441d52
jmp 0x441d00
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
je 0x441d2f
lea edx, [ebp - 0xa24]
push edx
mov ecx, 0x4b37bc
call fcn.004300c0
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
add edi, 4
cmp edi, dword [esi + 0x32e0]
jne 0x441d00
mov ecx, dword [ebp - 0xa24]
mov edi, dword [ecx - 0xc]
test edi, edi
jns 0x441d63
push 0x80070057
call fcn.004018d0
mov eax, dword [ecx - 8]
mov edx, 1
sub edx, dword [ecx - 4]
sub eax, edi
or eax, edx
jge 0x441d87
mov eax, edi
lea ecx, [ebp - 0xa24]
call fcn.00401f90
mov ecx, dword [ebp - 0xa24]
lea eax, [edi + 1]
push eax
push ecx
call fcn.00473d4c
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp edi, dword [eax - 8]
jg 0x440b78
mov dword [eax - 0xc], edi
mov edx, dword [ebp - 0xa24]
xor ecx, ecx
mov word [edx + edi*2], cx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x441dd4
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp - 0xa24]
push ecx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.DisallowedProcesses
mov ecx, str.ProcessAllowances
call fcn.0044f200
lea eax, [esi + 0x321c]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [esi + 0x3114]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0xa24]
mov edi, dword [ecx - 0x10]
lea eax, [ecx - 0x10]
xor ebx, ebx
cmp dword [eax + 4], ebx
je 0x441e75
cmp dword [eax + 0xc], ebx
lea edx, [eax + 0xc]
jge 0x441e4d
cmp dword [ecx - 8], ebx
jge 0x441e3d
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], ebx
mov ecx, dword [ebp - 0xa24]
xor eax, eax
mov word [ecx], ax
jmp 0x441e75
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x441e63
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [ebp - 0xa24], eax
mov edi, dword [esi + 0x330c]
cmp edi, dword [esi + 0x3310]
je 0x441f42
mov dword [ebp - 0xa64], ebx
lea ecx, [ecx]
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
je 0x441ebf
lea edx, [ebp - 0xa24]
push edx
mov ecx, 0x4b37bc
call fcn.004300c0
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
mov eax, ebx
push eax
mov ecx, 0x4b42fc
call fcn.004300c0
mov eax, dword [esi + 0x331c]
add eax, dword [ebp - 0xa64]
push 0xa
mov edx, dword [eax]
lea ecx, [ebp - 0x110]
push ecx
push edx
call fcn.0047425d
add esp, 0xc
test eax, eax
jne 0x441f06
xor ecx, ecx
jmp 0x441f1f
mov ecx, eax
lea ebx, [ecx + 2]
jmp 0x441f10
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x441f10
sub ecx, ebx
sar ecx, 1
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
add dword [ebp - 0xa64], 4
add edi, 4
cmp edi, dword [esi + 0x3310]
jne 0x441e90
lea eax, [esi + 0x3114]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0xa24]
mov edi, dword [edx - 0xc]
xor ebx, ebx
cmp edi, ebx
jge 0x441f68
push 0x80070057
call fcn.004018d0
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, edi
or eax, ecx
jge 0x441f8c
mov eax, edi
lea ecx, [ebp - 0xa24]
call fcn.00401f90
mov edx, dword [ebp - 0xa24]
lea eax, [edi + 1]
push eax
push edx
call fcn.00473d4c
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp edi, dword [eax - 8]
jg 0x440b78
mov dword [eax - 0xc], edi
mov edx, dword [ebp - 0xa24]
xor ecx, ecx
mov word [edx + edi*2], cx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x441fd9
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp - 0xa24]
push ecx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push 0x4b4300
mov ecx, str.ProcessAllowances
call fcn.0044f200
lea eax, [esi + 0x312c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0xa24]
mov edi, dword [ecx - 0x10]
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0x10]
je 0x44206b
cmp dword [eax + 0xc], ebx
lea edx, [eax + 0xc]
jge 0x442043
cmp dword [ecx - 8], ebx
jge 0x442033
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], ebx
mov ecx, dword [ebp - 0xa24]
xor eax, eax
mov word [ecx], ax
jmp 0x44206b
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x442059
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [ebp - 0xa24], eax
mov edi, dword [esi + 0x332c]
cmp edi, dword [esi + 0x3330]
je 0x442132
mov dword [ebp - 0xa64], ebx
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
je 0x4420b2
lea edx, [ebp - 0xa24]
push edx
mov ecx, 0x4b37bc
call fcn.004300c0
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
mov eax, ebx
push eax
mov ecx, 0x4b42fc
call fcn.004300c0
mov eax, dword [esi + 0x333c]
add eax, dword [ebp - 0xa64]
push 0xa
mov edx, dword [eax]
lea ecx, [ebp - 0x110]
push ecx
push edx
call fcn.0047425d
add esp, 0xc
test eax, eax
jne 0x4420f9
xor ecx, ecx
jmp 0x44210f
mov ecx, eax
lea ebx, [ecx + 2]
mov edi, edi
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x442100
sub ecx, ebx
sar ecx, 1
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
add dword [ebp - 0xa64], 4
add edi, 4
cmp edi, dword [esi + 0x3330]
jne 0x442083
lea eax, [esi + 0x312c]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0xa24]
mov edi, dword [edx - 0xc]
test edi, edi
jns 0x442156
push 0x80070057
call fcn.004018d0
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, edi
or eax, ecx
jge 0x44217a
mov eax, edi
lea ecx, [ebp - 0xa24]
call fcn.00401f90
mov edx, dword [ebp - 0xa24]
lea eax, [edi + 1]
push eax
push edx
call fcn.00473d4c
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp edi, dword [eax - 8]
jg 0x440b78
mov dword [eax - 0xc], edi
mov edx, dword [ebp - 0xa24]
xor ecx, ecx
mov word [edx + edi*2], cx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x4421c7
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp - 0xa24]
push ecx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.ProcessThrottles
mov ecx, str.ProcessAllowances
call fcn.0044f200
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
mov edi, dword [ecx - 0x10]
lea eax, [ecx - 0x10]
je 0x442253
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jge 0x44222b
cmp dword [ecx - 8], 0
jge 0x442217
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], 0
mov ecx, dword [ebp - 0xa24]
xor eax, eax
mov word [ecx], ax
jmp 0x442253
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x442241
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [ebp - 0xa24], eax
lea eax, [esi + 0x3144]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x334c]
mov dword [ebp - 0xa58], eax
cmp eax, dword [esi + 0x3350]
je 0x44238b
xor edi, edi
lea ebx, [ebx]
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
je 0x4422af
lea edx, [ebp - 0xa24]
push edx
mov ecx, 0x4b37bc
call fcn.004300c0
mov eax, dword [ebp - 0xa58]
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
mov ecx, ebx
push ecx
mov ecx, 0x4b42fc
call fcn.004300c0
mov eax, dword [esi + 0x335c]
mov eax, dword [eax + edi]
push 0xa
lea edx, [ebp - 0x110]
push edx
push eax
call fcn.0047425d
add esp, 0xc
test eax, eax
jne 0x4422f7
xor ecx, ecx
jmp 0x44230f
mov ecx, eax
lea ebx, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x442300
sub ecx, ebx
sar ecx, 1
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
mov ecx, ebx
push ecx
mov ecx, 0x4b42fc
call fcn.004300c0
mov eax, dword [esi + 0x336c]
mov eax, dword [eax + edi]
push 0xa
lea edx, [ebp - 0x110]
push edx
push eax
call fcn.0047425d
add esp, 0xc
test eax, eax
jne 0x44234c
xor ecx, ecx
jmp 0x442360
mov ecx, eax
lea ebx, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x442351
sub ecx, ebx
sar ecx, 1
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
mov eax, dword [ebp - 0xa58]
add eax, 4
add edi, 4
mov dword [ebp - 0xa58], eax
cmp eax, dword [esi + 0x3350]
jne 0x442280
lea eax, [esi + 0x3144]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0xa24]
mov edi, dword [edx - 0xc]
test edi, edi
jns 0x4423af
push 0x80070057
call fcn.004018d0
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, edi
or eax, ecx
jge 0x4423d3
mov eax, edi
lea ecx, [ebp - 0xa24]
call fcn.00401f90
mov edx, dword [ebp - 0xa24]
lea ecx, [edi + 1]
push ecx
push edx
call fcn.00473d4c
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp edi, dword [eax - 8]
jg 0x440b78
mov dword [eax - 0xc], edi
mov eax, dword [ebp - 0xa24]
xor edx, edx
mov word [eax + edi*2], dx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x442420
mov ecx, dword [eax - 0xc]
push ecx
lea edx, [ebp - 0xa24]
push edx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.OneTimeProcessThrottles
mov ecx, str.ProcessAllowances
call fcn.0044f200
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
mov edi, dword [ecx - 0x10]
lea eax, [ecx - 0x10]
je 0x4424ac
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jge 0x442484
cmp dword [ecx - 8], 0
jge 0x442470
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], 0
mov eax, dword [ebp - 0xa24]
xor edx, edx
mov word [eax], dx
jmp 0x4424ac
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x44249a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [ebp - 0xa24], eax
lea eax, [esi + 0x315c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [esi + 0x338c]
mov ecx, dword [esi + 0x337c]
mov dword [ebp - 0xa58], ecx
cmp edi, dword [esi + 0x3390]
je 0x442597
jmp 0x4424e0
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov edx, dword [ebp - 0xa24]
cmp dword [edx - 0xc], 0
je 0x44250f
lea eax, [ebp - 0xa24]
push eax
mov ecx, 0x4b37bc
call fcn.004300c0
mov ecx, dword [ebp - 0xa58]
mov eax, dword [ecx]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
mov edx, ebx
push edx
mov ecx, 0x4b37bc
call fcn.004300c0
xor ecx, ecx
cmp dword [str.Real_Time], ecx
je 0x44255b
mov edx, dword [edi]
xor eax, eax
cmp dword [eax + 0x4c5cc0], edx
je 0x4425bb
inc ecx
lea eax, [ecx*4]
cmp dword [eax + 0x4c5cf4], 0
jne 0x442542
mov ecx, str.ERROR
mov eax, ecx
lea ebx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x442565
sub eax, ebx
sar eax, 1
push eax
push ecx
lea ebx, [ebp - 0xa24]
call fcn.00418c50
add dword [ebp - 0xa58], 4
add edi, 4
cmp edi, dword [esi + 0x3390]
jne 0x4424e0
lea eax, [esi + 0x315c]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0xa24]
mov edi, dword [edx - 0xc]
test edi, edi
jns 0x4425ca
push 0x80070057
call fcn.004018d0
mov ecx, dword [ecx*4 + 0x4c5cf4]
test ecx, ecx
jne 0x442560
xor eax, eax
jmp 0x442574
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, edi
or eax, ecx
jge 0x4425ee
mov eax, edi
lea ecx, [ebp - 0xa24]
call fcn.00401f90
mov edx, dword [ebp - 0xa24]
lea eax, [edi + 1]
push eax
push edx
call fcn.00473d4c
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp edi, dword [eax - 8]
jg 0x440b78
mov dword [eax - 0xc], edi
mov edx, dword [ebp - 0xa24]
xor ecx, ecx
mov word [edx + edi*2], cx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x44263b
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp - 0xa24]
push ecx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.DefaultPriorities
mov ecx, str.ProcessDefaults
call fcn.0044f200
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
mov edi, dword [ecx - 0x10]
lea eax, [ecx - 0x10]
je 0x4426c7
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jge 0x44269f
cmp dword [ecx - 8], 0
jge 0x44268b
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], 0
mov ecx, dword [ebp - 0xa24]
xor eax, eax
mov word [ecx], ax
jmp 0x4426c7
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4426b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [ebp - 0xa24], eax
lea eax, [esi + 0x3264]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [esi + 0x348c]
mov ecx, dword [esi + 0x347c]
mov dword [ebp - 0xa58], ecx
cmp edi, dword [esi + 0x3490]
je 0x4427a8
cmp dword [edi], 0x822
je 0x442792
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov edx, dword [ebp - 0xa24]
cmp dword [edx - 0xc], 0
je 0x44272d
lea eax, [ebp - 0xa24]
push eax
mov ecx, 0x4b37bc
call fcn.004300c0
mov ecx, dword [ebp - 0xa58]
mov eax, dword [ecx]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa24]
call fcn.00418c50
mov edx, ebx
push edx
mov ecx, 0x4b37bc
call fcn.004300c0
mov ecx, dword [edi]
push 0xa
lea eax, [ebp - 0x110]
push eax
push ecx
call fcn.0047425d
lea eax, [ebp - 0x110]
add esp, 0xc
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x442770
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x110]
push edx
lea ebx, [ebp - 0xa24]
call fcn.00418c50
add dword [ebp - 0xa58], 4
add edi, 4
cmp edi, dword [esi + 0x3490]
jne 0x4426f2
lea eax, [esi + 0x3264]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0xa24]
mov edi, dword [edx - 0xc]
test edi, edi
jns 0x4427cc
push 0x80070057
call fcn.004018d0
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, edi
or eax, ecx
jge 0x4427f0
mov eax, edi
lea ecx, [ebp - 0xa24]
call fcn.00401f90
mov edx, dword [ebp - 0xa24]
lea eax, [edi + 1]
push eax
push edx
call fcn.00473d4c
mov eax, dword [ebp - 0xa24]
add esp, 8
cmp edi, dword [eax - 8]
jg 0x440b78
mov dword [eax - 0xc], edi
mov edx, dword [ebp - 0xa24]
xor ecx, ecx
mov word [edx + edi*2], cx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x44283d
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp - 0xa24]
push ecx
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa44]
push ecx
lea edx, [ebp - 0xa54]
push edx
push eax
push str.DefaultIOPriorities
mov ecx, str.ProcessDefaults
call fcn.0044f200
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [ebp - 0xa64], eax
mov byte [ebp - 4], 4
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [ebp - 0xa78], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xa24]
mov edi, dword [ecx - 0x10]
or ebx, 0xffffffff
cmp dword [ecx - 0xc], 0
lea eax, [ecx - 0x10]
mov dword [ebp - 0xa58], ebx
mov dword [ebp - 0xa5c], ebx
je 0x44290d
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jge 0x4428e8
cmp dword [ecx - 8], 0
jge 0x4428d4
push 0x80070057
call fcn.004018d0
mov dword [ecx - 0xc], 0
mov ecx, dword [ebp - 0xa24]
xor eax, eax
mov word [ecx], ax
jmp 0x44290d
lock xadd dword [edx], ebx
dec ebx
test ebx, ebx
jg 0x4428fb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [ebp - 0xa24], eax
lea ecx, [esi + 0x34ac]
push ecx
add esi, 0x349c
push esi
call fcn.0043eb70
mov edi, dword [ebp - 0xa60]
add esp, 8
lea edx, [ebp - 0xa64]
push edx
lea eax, [ebp - 0xa5c]
push eax
lea esi, [ebp - 0xa58]
mov ebx, edi
call fcn.00451f90
test al, al
je 0x4429c7
jmp 0x442950
cmp dword [ebp - 0xa58], 1
jle 0x44296b
push 1
push 0x4b1a4c
lea ebx, [ebp - 0xa24]
call fcn.00418c50
mov ecx, dword [ebp - 0xa5c]
mov edx, dword [ebp - 0xa64]
push ecx
push edx
push str._s__d
lea edi, [ebp - 0xa78]
call fcn.004020e0
mov ecx, dword [ebp - 0xa78]
mov eax, dword [ecx - 0xc]
add esp, 0xc
push eax
push ecx
lea ebx, [ebp - 0xa24]
call fcn.00418c50
mov ebx, dword [ebp - 0xa60]
lea eax, [ebp - 0xa64]
push eax
lea ecx, [ebp - 0xa5c]
push ecx
lea esi, [ebp - 0xa58]
call fcn.00451f90
test al, al
jne 0x442950
mov edi, ebx
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 4], 1
jle 0x4429e9
mov edx, dword [eax - 0xc]
push edx
lea eax, [ebp - 0xa24]
push eax
call fcn.00401ff0
mov eax, dword [ebp - 0xa24]
lea ecx, [ebp - 0xa34]
push ecx
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push str.DefaultMemoryPriorities
mov ecx, str.ProcessDefaults
call fcn.0044f200
lea eax, [edi + 0x3234]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [edi + 0x344c]
call fcn.0043ed80
mov ecx, dword [ebp - 0xa24]
cmp dword [ecx - 0xc], 0
mov ebx, dword [ecx - 0x10]
lea eax, [ecx - 0x10]
je 0x442a93
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jge 0x442a6b
cmp dword [ecx - 8], 0
jge 0x442a51
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x442a81
mov edx, dword [edi + 0x3450]
sub edx, dword [edi + 0x344c]
mov dword [ebp - 0xa5c], 0
sar edx, 2
test edx, edx
je 0x442b26
lea ebx, [ebp - 0xa24]
call fcn.00416a10
mov ebx, eax
call fcn.00416a90
mov eax, dword [ebp - 0xa24]
cmp dword [eax - 0xc], 0
je 0x442adf
mov esi, dword [ecx - 0xc]
test esi, esi
jns 0x442b37