Function at 0x44dfa0
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x6fbc
call fcn.00418810
mov eax, dword [0x46fc68]
xor eax, ebp
mov dword [ebp - 0xc], eax
push esi
push edi
lea eax, [ebp - 4]
push eax
push 8
push 0
mov ecx, dword [str.SoftwareCreative_TechAudioMonitoringOutput]
push ecx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44e591
mov dword [ebp - 0x814], 0
jmp 0x44dffb
mov edx, dword [ebp - 0x814]
add edx, 1
mov dword [ebp - 0x814], edx
mov dword [ebp - 0x818], 0x400
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x818]
push eax
lea ecx, [ebp - 0x810]
push ecx
mov edx, dword [ebp - 0x814]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44e574
mov ecx, dword [str.SoftwareCreative_TechAudioMonitoringOutput]
push ecx
lea edx, [ebp - 0x1648]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x46864c
lea eax, [ebp - 0x1648]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea ecx, [ebp - 0x810]
push ecx
lea edx, [ebp - 0x1648]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, dword [0x46841c]
mov dword [ebp - 0x820], eax
mov ecx, dword [0x46842c]
mov dword [ebp - 0xa24], ecx
mov edx, dword [0x468458]
mov dword [ebp - 0x1658], edx
mov eax, dword [0x468438]
mov dword [ebp - 0x1654], eax
mov ecx, dword [0x468444]
mov dword [ebp - 0x165c], ecx
mov edx, dword [0x468474]
mov dword [ebp - 0xe48], edx
mov eax, dword [0x4686fc]
mov dword [ebp - 0xe44], eax
mov ecx, dword [0x468700]
mov dword [ebp - 0xe40], ecx
mov edx, dword [0x468704]
mov dword [ebp - 0xe3c], edx
mov eax, dword [0x468708]
mov dword [ebp - 0xe38], eax
mov ecx, dword [str.OutVol]
mov dword [ebp - 0xe34], ecx
fld1
fstp dword [ebp - 0x1650]
lea edx, [ebp - 0xe30]
push edx
push 0x100
lea eax, [ebp - 0x1860]
push eax
mov ecx, dword [ebp - 0x820]
push ecx
lea edx, [ebp - 0x1648]
push edx
push 0x80000002
call fcn.0044ad10
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44e163
lea eax, [ebp - 0xe30]
push eax
push 0x100
lea ecx, [ebp - 0xa20]
push ecx
mov edx, dword [ebp - 0xa24]
push edx
lea eax, [ebp - 0x1648]
push eax
push 0x80000002
call fcn.0044ad10
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44e1c9
lea ecx, [ebp - 0x186c]
push ecx
push 4
lea edx, [ebp - 0x164c]
push edx
lea eax, [ebp - 0x1864]
push eax
mov ecx, dword [ebp - 0x1654]
push ecx
lea edx, [ebp - 0x1648]
push edx
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x1868], eax
cmp dword [ebp - 0x1868], 0
jne 0x44e1bf
cmp dword [ebp - 0x1864], 1
je 0x44e1bd
mov dword [ebp - 0x164c], 0xffffffff
jmp 0x44e1c9
mov dword [ebp - 0x164c], 0xffffffff
cmp dword [ebp - 8], 0
jne 0x44e22f
lea eax, [ebp - 0x1878]
push eax
push 4
lea ecx, [ebp - 0x81c]
push ecx
lea edx, [ebp - 0x1870]
push edx
mov eax, dword [ebp - 0x165c]
push eax
lea ecx, [ebp - 0x1648]
push ecx
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x1874], eax
cmp dword [ebp - 0x1874], 0
jne 0x44e225
cmp dword [ebp - 0x1870], 1
je 0x44e223
mov dword [ebp - 0x81c], 0xffffffff
jmp 0x44e22f
mov dword [ebp - 0x81c], 0xffffffff
cmp dword [ebp - 8], 0
jne 0x44e2a6
lea edx, [ebp - 0x1884]
push edx
push 4
lea eax, [ebp - 0xe2c]
push eax
lea ecx, [ebp - 0x187c]
push ecx
mov edx, dword [ebp - 0x1658]
push edx
lea eax, [ebp - 0x1648]
push eax
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x1880], eax
cmp dword [ebp - 0x1880], 0
jne 0x44e29c
cmp dword [ebp - 0x187c], 1
je 0x44e28b
mov dword [ebp - 0xe2c], 0
jmp 0x44e29a
mov ecx, dword [ebp - 0xe2c]
and ecx, 0xfffffffd
mov dword [ebp - 0xe2c], ecx
jmp 0x44e2a6
mov dword [ebp - 0xe2c], 0
cmp dword [ebp - 8], 0
jne 0x44e2fd
lea edx, [ebp - 0xe30]
push edx
push 0x200
lea eax, [ebp - 0xe28]
push eax
mov ecx, dword [ebp - 0xe48]
push ecx
lea edx, [ebp - 0x1648]
push edx
push 0x80000002
call fcn.0044ad10
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44e2fd
lea eax, [ebp - 0xe44]
push eax
lea ecx, [ebp - 0xe28]
push ecx
call dword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [ebp - 0x1888], eax
cmp dword [ebp - 8], 0
jne 0x44e572
cmp dword [ebp + 8], 0xffff0001
je 0x44e31a
cmp dword [ebp + 8], 4
jne 0x44e474
cmp dword [ebp + 0xc], 0
je 0x44e343
mov edx, dword [ebp + 0xc]
movzx eax, word [edx]
test eax, eax
je 0x44e343
lea ecx, [ebp - 0x1860]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44e474
cmp dword [ebp + 0x10], 0
je 0x44e36c
mov eax, dword [ebp + 0x10]
movzx ecx, word [eax]
test ecx, ecx
je 0x44e36c
lea edx, [ebp - 0xa20]
push edx
mov eax, dword [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44e474
mov dword [ebp - 0x20d8], 0x850
mov dword [ebp - 0x20d4], 4
lea ecx, [ebp - 0x1860]
push ecx
lea edx, [ebp - 0x20d0]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xa20]
push eax
lea ecx, [ebp - 0x1ed0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebp + 0x14], 0
je 0x44e3c2
mov edx, dword [ebp - 0xe2c]
or edx, dword [0x471a78]
mov dword [ebp - 0x1ccc], edx
jmp 0x44e3ce
mov eax, dword [ebp - 0xe2c]
mov dword [ebp - 0x1ccc], eax
mov ecx, dword [ebp - 0xe44]
mov dword [ebp - 0x1cc4], ecx
mov edx, dword [ebp - 0xe40]
mov dword [ebp - 0x1cc0], edx
mov eax, dword [ebp - 0xe3c]
mov dword [ebp - 0x1cbc], eax
mov ecx, dword [ebp - 0xe38]
mov dword [ebp - 0x1cb8], ecx
push 0x46870c
lea edx, [ebp - 0x1cc4]
push edx
call fcn.00401020
add esp, 8
test eax, eax
je 0x44e418
jmp 0x44e42c
push 0x46871c
lea eax, [ebp - 0x1cc4]
push eax
call fcn.00401020
add esp, 8
mov ecx, dword [ebp - 0x164c]
mov dword [ebp - 0x1cd0], ecx
mov edx, dword [ebp - 0x81c]
mov dword [ebp - 0x1c94], edx
mov dword [ebp - 0x1c90], 0
fld dword [ebp - 0x1650]
fstp dword [ebp - 0x188c]
lea eax, [ebp - 0x20d8]
push eax
call fcn.0044cbe0
add esp, 4
mov dword [ebp - 0x20dc], eax
jmp 0x44e572
cmp dword [ebp + 8], 0xffff0002
je 0x44e487
cmp dword [ebp + 8], 5
jne 0x44e572
cmp dword [ebp + 0xc], 0
je 0x44e4b0
mov ecx, dword [ebp + 0xc]
movzx edx, word [ecx]
test edx, edx
je 0x44e4b0
lea eax, [ebp - 0x1860]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44e572
cmp dword [ebp + 0x10], 0
je 0x44e4d9
mov edx, dword [ebp + 0x10]
movzx eax, word [edx]
test eax, eax
je 0x44e4d9
lea ecx, [ebp - 0xa20]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44e572
mov dword [ebp - 0x2930], 0x850
mov dword [ebp - 0x292c], 5
lea eax, [ebp - 0x1860]
push eax
lea ecx, [ebp - 0x2928]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [ebp - 0xa20]
push edx
lea eax, [ebp - 0x2728]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebp + 0x14], 0
je 0x44e52f
mov ecx, dword [ebp - 0xe2c]
or ecx, dword [0x471a78]
mov dword [ebp - 0x2524], ecx
jmp 0x44e53b
mov edx, dword [ebp - 0xe2c]
mov dword [ebp - 0x2524], edx
mov eax, dword [ebp - 0x164c]
mov dword [ebp - 0x2528], eax
mov ecx, dword [ebp - 0x81c]
mov dword [ebp - 0x24ec], ecx
lea edx, [ebp - 0x2930]
push edx
call fcn.0044cbe0
add esp, 4
mov dword [ebp - 0x2934], eax
mov dword [ebp - 0x814], 0xffffffff
jmp 0x44e57f
cmp dword [ebp - 8], 0x103
jne 0x44e57f
jmp 0x44e584
jmp 0x44dfec
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 8], eax
lea ecx, [ebp - 4]
push ecx
push 8
push 0
mov edx, dword [0x4684b4]
push edx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44ebf8
mov dword [ebp - 0x2938], 0
jmp 0x44e5d3
mov eax, dword [ebp - 0x2938]
add eax, 1
mov dword [ebp - 0x2938], eax
mov dword [ebp - 0x293c], 0x400
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x293c]
push ecx
lea edx, [ebp - 0x810]
push edx
mov eax, dword [ebp - 0x2938]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44ebdb
mov edx, dword [0x4684b4]
push edx
lea eax, [ebp - 0x3b78]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x468650
lea ecx, [ebp - 0x3b78]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x810]
push edx
lea eax, [ebp - 0x3b78]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov ecx, dword [0x46851c]
mov dword [ebp - 0x2944], ecx
mov edx, dword [0x46852c]
mov dword [ebp - 0x2f54], edx
mov eax, dword [0x468558]
mov dword [ebp - 0x3b90], eax
mov ecx, dword [0x468538]
mov dword [ebp - 0x3b8c], ecx
mov edx, dword [0x468544]
mov dword [ebp - 0x3b94], edx
mov eax, dword [0x468574]
mov dword [ebp - 0x3378], eax
mov ecx, dword [0x4686fc]
mov dword [ebp - 0x3374], ecx
mov edx, dword [0x468700]
mov dword [ebp - 0x3370], edx
mov eax, dword [0x468704]
mov dword [ebp - 0x336c], eax
mov ecx, dword [0x468708]
mov dword [ebp - 0x3368], ecx
mov edx, dword [0x4685a0]
mov dword [ebp - 0x3b80], edx
mov eax, dword [0x4685b4]
mov dword [ebp - 0x3364], eax
fld1
fstp dword [ebp - 0x3b88]
lea ecx, [ebp - 0x3360]
push ecx
push 0x100
lea edx, [ebp - 0x3d98]
push edx
mov eax, dword [ebp - 0x2944]
push eax
lea ecx, [ebp - 0x3b78]
push ecx
push 0x80000002
call fcn.0044ad10
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44e747
lea edx, [ebp - 0x3360]
push edx
push 0x100
lea eax, [ebp - 0x2f50]
push eax
mov ecx, dword [ebp - 0x2f54]
push ecx
lea edx, [ebp - 0x3b78]
push edx
push 0x80000002
call fcn.0044ad10
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44e7ad
lea eax, [ebp - 0x3da4]
push eax
push 4
lea ecx, [ebp - 0x3b7c]
push ecx
lea edx, [ebp - 0x3d9c]
push edx
mov eax, dword [ebp - 0x3b8c]
push eax
lea ecx, [ebp - 0x3b78]
push ecx
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x3da0], eax
cmp dword [ebp - 0x3da0], 0
jne 0x44e7a3
cmp dword [ebp - 0x3d9c], 1
je 0x44e7a1
mov dword [ebp - 0x3b7c], 0xffffffff
jmp 0x44e7ad
mov dword [ebp - 0x3b7c], 0xffffffff
cmp dword [ebp - 8], 0
jne 0x44e813
lea edx, [ebp - 0x3db0]
push edx
push 4
lea eax, [ebp - 0x2940]
push eax
lea ecx, [ebp - 0x3da8]
push ecx
mov edx, dword [ebp - 0x3b94]
push edx
lea eax, [ebp - 0x3b78]
push eax
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x3dac], eax
cmp dword [ebp - 0x3dac], 0
jne 0x44e809
cmp dword [ebp - 0x3da8], 1
je 0x44e807
mov dword [ebp - 0x2940], 0xffffffff
jmp 0x44e813
mov dword [ebp - 0x2940], 0xffffffff
cmp dword [ebp - 8], 0
jne 0x44e88a
lea ecx, [ebp - 0x3dbc]
push ecx
push 4
lea edx, [ebp - 0x335c]
push edx
lea eax, [ebp - 0x3db4]
push eax
mov ecx, dword [ebp - 0x3b90]
push ecx
lea edx, [ebp - 0x3b78]
push edx
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x3db8], eax
cmp dword [ebp - 0x3db8], 0
jne 0x44e880
cmp dword [ebp - 0x3db4], 1
je 0x44e86f
mov dword [ebp - 0x335c], 0
jmp 0x44e87e
mov eax, dword [ebp - 0x335c]
and eax, 0xfffffffd
mov dword [ebp - 0x335c], eax
jmp 0x44e88a
mov dword [ebp - 0x335c], 0
cmp dword [ebp - 8], 0
jne 0x44e8e1
lea ecx, [ebp - 0x3360]
push ecx
push 0x200
lea edx, [ebp - 0x3358]
push edx
mov eax, dword [ebp - 0x3378]
push eax
lea ecx, [ebp - 0x3b78]
push ecx
push 0x80000002
call fcn.0044ad10
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44e8e1
lea edx, [ebp - 0x3374]
push edx
lea eax, [ebp - 0x3358]
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [ebp - 0x3dc0], eax
cmp dword [ebp - 8], 0
jne 0x44e92f
lea ecx, [ebp - 0x3b84]
push ecx
push 0x404
lea edx, [ebp - 0x2d50]
push edx
lea eax, [ebp - 0x3dc4]
push eax
mov ecx, dword [ebp - 0x3b80]
push ecx
lea edx, [ebp - 0x3b78]
push edx
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x44e92f
mov dword [ebp - 0x2d50], 0
cmp dword [ebp - 8], 0
jne 0x44e991
lea eax, [ebp - 0x3dd0]
push eax
push 4
lea ecx, [ebp - 0x3b88]
push ecx
lea edx, [ebp - 0x3dc8]
push edx
mov eax, dword [ebp - 0x3364]
push eax
lea ecx, [ebp - 0x3b78]
push ecx
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x3dcc], eax
cmp dword [ebp - 0x3dcc], 0
jne 0x44e989
cmp dword [ebp - 0x3dc8], 0
je 0x44e987
fld1
fstp dword [ebp - 0x3b88]
jmp 0x44e991
fld1
fstp dword [ebp - 0x3b88]
cmp dword [ebp - 8], 0
jne 0x44ebd9
cmp dword [ebp + 8], 0xffff0001
je 0x44e9ae
cmp dword [ebp + 8], 1
jne 0x44eb11
cmp dword [ebp + 0xc], 0
je 0x44e9d7
mov edx, dword [ebp + 0xc]
movzx eax, word [edx]
test eax, eax
je 0x44e9d7
lea ecx, [ebp - 0x3d98]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44eb11
cmp dword [ebp + 0x10], 0
je 0x44ea00
mov eax, dword [ebp + 0x10]
movzx ecx, word [eax]
test ecx, ecx
je 0x44ea00
lea edx, [ebp - 0x2f50]
push edx
mov eax, dword [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44eb11
mov dword [ebp - 0x4620], 0x850
mov dword [ebp - 0x461c], 1
lea ecx, [ebp - 0x3d98]
push ecx
lea edx, [ebp - 0x4618]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x2f50]
push eax
lea ecx, [ebp - 0x4418]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebp + 0x14], 0
je 0x44ea56
mov edx, dword [ebp - 0x335c]
or edx, dword [0x471a78]
mov dword [ebp - 0x4214], edx
jmp 0x44ea62
mov eax, dword [ebp - 0x335c]
mov dword [ebp - 0x4214], eax
mov ecx, dword [ebp - 0x3374]
mov dword [ebp - 0x420c], ecx
mov edx, dword [ebp - 0x3370]
mov dword [ebp - 0x4208], edx
mov eax, dword [ebp - 0x336c]
mov dword [ebp - 0x4204], eax
mov ecx, dword [ebp - 0x3368]
mov dword [ebp - 0x4200], ecx
push 0x46870c
lea edx, [ebp - 0x420c]
push edx
call fcn.00401020
add esp, 8
test eax, eax
je 0x44eaac
jmp 0x44eac0
push 0x46871c
lea eax, [ebp - 0x420c]
push eax
call fcn.00401020
add esp, 8
mov ecx, dword [ebp - 0x3b7c]
mov dword [ebp - 0x4218], ecx
mov edx, dword [ebp - 0x2940]
mov dword [ebp - 0x41dc], edx
mov ecx, 0x101
lea esi, [ebp - 0x2d50]
lea edi, [ebp - 0x41d8]
rep movsd dword es:[edi], dword [esi]
fld dword [ebp - 0x3b88]
fstp dword [ebp - 0x3dd4]
lea eax, [ebp - 0x4620]
push eax
call fcn.0044cbe0
add esp, 4
mov dword [ebp - 0x4624], eax
jmp 0x44ebd9
cmp dword [ebp + 8], 0xffff0002
je 0x44eb24
cmp dword [ebp + 8], 2
jne 0x44ebd9
cmp dword [ebp + 0xc], 0
je 0x44eb4d
mov ecx, dword [ebp + 0xc]
movzx edx, word [ecx]
test edx, edx
je 0x44eb4d
lea eax, [ebp - 0x3d98]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44ebd9
cmp dword [ebp + 0x10], 0
je 0x44eb72
mov edx, dword [ebp + 0x10]
movzx eax, word [edx]
test eax, eax
je 0x44eb72
lea ecx, [ebp - 0x2f50]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44ebd9
mov dword [ebp - 0x4e78], 0x850
mov dword [ebp - 0x4e74], 2
lea eax, [ebp - 0x3d98]
push eax
lea ecx, [ebp - 0x4e70]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [ebp - 0x2f50]
push edx
lea eax, [ebp - 0x4c70]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [ebp - 0x3b7c]
mov dword [ebp - 0x4a70], ecx
lea edx, [ebp - 0x4e78]
push edx
call fcn.0044cbe0
add esp, 4
mov dword [ebp - 0x4e7c], eax
mov dword [ebp - 0x2938], 0xffffffff
jmp 0x44ebe6
cmp dword [ebp - 8], 0x103
jne 0x44ebe6
jmp 0x44ebeb
jmp 0x44e5c4
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 8], eax
lea ecx, [ebp - 4]
push ecx
push 8
push 0
mov edx, dword [0x468618]
push edx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44f295
mov dword [ebp - 0x4e80], 0
jmp 0x44ec3a
mov eax, dword [ebp - 0x4e80]
add eax, 1
mov dword [ebp - 0x4e80], eax
mov dword [ebp - 0x4e84], 0x400
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x4e84]
push ecx
lea edx, [ebp - 0x810]
push edx
mov eax, dword [ebp - 0x4e80]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44f278
mov edx, dword [0x468618]
push edx
lea eax, [ebp - 0x5cb8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x468654
lea ecx, [ebp - 0x5cb8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x810]
push edx
lea eax, [ebp - 0x5cb8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov ecx, dword [0x46851c]
mov dword [ebp - 0x4e8c], ecx
mov edx, dword [0x46852c]
mov dword [ebp - 0x5094], edx
mov eax, dword [0x468558]
mov dword [ebp - 0x5cc8], eax
mov ecx, dword [0x468538]
mov dword [ebp - 0x5cc4], ecx
mov edx, dword [0x468544]
mov dword [ebp - 0x5ccc], edx
mov eax, dword [0x468574]
mov dword [ebp - 0x54b8], eax
mov ecx, dword [0x4686fc]
mov dword [ebp - 0x54b4], ecx
mov edx, dword [0x468700]
mov dword [ebp - 0x54b0], edx
mov eax, dword [0x468704]
mov dword [ebp - 0x54ac], eax
mov ecx, dword [0x468708]
mov dword [ebp - 0x54a8], ecx
mov edx, dword [0x4685b4]
mov dword [ebp - 0x54a4], edx
fld1
fstp dword [ebp - 0x5cc0]
lea eax, [ebp - 0x54a0]
push eax
push 0x100
lea ecx, [ebp - 0x5ed0]
push ecx
mov edx, dword [ebp - 0x4e8c]
push edx
lea eax, [ebp - 0x5cb8]
push eax
push 0x80000002
call fcn.0044ad10
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44eda3
lea ecx, [ebp - 0x54a0]
push ecx
push 0x100
lea edx, [ebp - 0x5090]
push edx
mov eax, dword [ebp - 0x5094]
push eax
lea ecx, [ebp - 0x5cb8]
push ecx
push 0x80000002
call fcn.0044ad10
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44ee09
lea edx, [ebp - 0x5edc]
push edx
push 4
lea eax, [ebp - 0x5cbc]
push eax
lea ecx, [ebp - 0x5ed4]
push ecx
mov edx, dword [ebp - 0x5cc4]
push edx
lea eax, [ebp - 0x5cb8]
push eax
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x5ed8], eax
cmp dword [ebp - 0x5ed8], 0
jne 0x44edff
cmp dword [ebp - 0x5ed4], 1
je 0x44edfd
mov dword [ebp - 0x5cbc], 0xffffffff
jmp 0x44ee09
mov dword [ebp - 0x5cbc], 0xffffffff
cmp dword [ebp - 8], 0
jne 0x44ee6f
lea ecx, [ebp - 0x5ee8]
push ecx
push 4
lea edx, [ebp - 0x4e88]
push edx
lea eax, [ebp - 0x5ee0]
push eax
mov ecx, dword [ebp - 0x5ccc]
push ecx
lea edx, [ebp - 0x5cb8]
push edx
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x5ee4], eax
cmp dword [ebp - 0x5ee4], 0
jne 0x44ee65
cmp dword [ebp - 0x5ee0], 1
je 0x44ee63
mov dword [ebp - 0x4e88], 0xffffffff
jmp 0x44ee6f
mov dword [ebp - 0x4e88], 0xffffffff
cmp dword [ebp - 8], 0
jne 0x44eee6
lea eax, [ebp - 0x5ef4]
push eax
push 4
lea ecx, [ebp - 0x549c]
push ecx
lea edx, [ebp - 0x5eec]
push edx
mov eax, dword [ebp - 0x5cc8]
push eax
lea ecx, [ebp - 0x5cb8]
push ecx
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x5ef0], eax
cmp dword [ebp - 0x5ef0], 0
jne 0x44eedc
cmp dword [ebp - 0x5eec], 1
je 0x44eecb
mov dword [ebp - 0x549c], 0
jmp 0x44eeda
mov edx, dword [ebp - 0x549c]
and edx, 0xfffffffd
mov dword [ebp - 0x549c], edx
jmp 0x44eee6
mov dword [ebp - 0x549c], 0
cmp dword [ebp - 8], 0
jne 0x44ef3d
lea eax, [ebp - 0x54a0]
push eax
push 0x200
lea ecx, [ebp - 0x5498]
push ecx
mov edx, dword [ebp - 0x54b8]
push edx
lea eax, [ebp - 0x5cb8]
push eax
push 0x80000002
call fcn.0044ad10
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44ef3d
lea ecx, [ebp - 0x54b4]
push ecx
lea edx, [ebp - 0x5498]
push edx
call dword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [ebp - 0x5ef8], eax
cmp dword [ebp + 8], 0xffff0001
je 0x44ef50
cmp dword [ebp + 8], 0x33
jne 0x44efe2
cmp dword [ebp - 8], 0
jne 0x44efe2
lea eax, [ebp - 0x5f00]
push eax
push 4
lea ecx, [ebp - 0x5f08]
push ecx
lea edx, [ebp - 0x5efc]
push edx
push 0
lea eax, [ebp - 0x5cb8]
push eax
push 0x80000002
call fcn.0044ade0
add esp, 0x1c
mov dword [ebp - 0x5f04], eax
cmp dword [ebp - 0x5f04], 0
jne 0x44efdb
cmp dword [ebp - 0x5efc], 1
jne 0x44efd2
lea ecx, [ebp - 0x5090]
push ecx
lea edx, [ebp - 0x5ed0]
push edx
call fcn.0044bb90
add esp, 8
mov dword [ebp - 0x5f0c], eax
mov eax, dword [ebp - 0x5f0c]
cmp eax, dword [ebp - 0x5f08]
je 0x44efd0
mov dword [ebp - 8], 0x3f1
jmp 0x44efd9
mov dword [ebp - 8], 0x3f1
jmp 0x44efe2
mov dword [ebp - 8], 0x3f1
cmp dword [ebp - 8], 0
jne 0x44f276
cmp dword [ebp + 8], 0xffff0001
je 0x44efff
cmp dword [ebp + 8], 0x33
jne 0x44f159
cmp dword [ebp + 0xc], 0
je 0x44f028
mov ecx, dword [ebp + 0xc]
movzx edx, word [ecx]
test edx, edx
je 0x44f028
lea eax, [ebp - 0x5ed0]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44f159
cmp dword [ebp + 0x10], 0
je 0x44f051
mov edx, dword [ebp + 0x10]
movzx eax, word [edx]
test eax, eax
je 0x44f051
lea ecx, [ebp - 0x5090]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44f159
mov dword [ebp - 0x6760], 0x850
mov dword [ebp - 0x675c], 0x33
lea eax, [ebp - 0x5ed0]
push eax
lea ecx, [ebp - 0x6758]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [ebp - 0x5090]
push edx
lea eax, [ebp - 0x6558]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebp + 0x14], 0
je 0x44f0a7
mov ecx, dword [ebp - 0x549c]
or ecx, dword [0x471a78]
mov dword [ebp - 0x6354], ecx
jmp 0x44f0b3
mov edx, dword [ebp - 0x549c]
mov dword [ebp - 0x6354], edx
mov eax, dword [ebp - 0x54b4]
mov dword [ebp - 0x634c], eax
mov ecx, dword [ebp - 0x54b0]
mov dword [ebp - 0x6348], ecx
mov edx, dword [ebp - 0x54ac]
mov dword [ebp - 0x6344], edx
mov eax, dword [ebp - 0x54a8]
mov dword [ebp - 0x6340], eax
push 0x46870c
lea ecx, [ebp - 0x634c]
push ecx
call fcn.00401020
add esp, 8
test eax, eax
je 0x44f0fd
jmp 0x44f111
push 0x46871c
lea edx, [ebp - 0x634c]
push edx
call fcn.00401020
add esp, 8
mov eax, dword [ebp - 0x5cbc]
mov dword [ebp - 0x6358], eax
mov ecx, dword [ebp - 0x4e88]
mov dword [ebp - 0x631c], ecx
mov dword [ebp - 0x6318], 0
fld dword [ebp - 0x5cc0]
fstp dword [ebp - 0x5f14]
lea edx, [ebp - 0x6760]
push edx
call fcn.0044cbe0
add esp, 4
mov dword [ebp - 0x6764], eax
jmp 0x44f276
cmp dword [ebp + 8], 0xffff0002
je 0x44f16c
cmp dword [ebp + 8], 0x34
jne 0x44f276
cmp dword [ebp + 0xc], 0
je 0x44f195
mov eax, dword [ebp + 0xc]
movzx ecx, word [eax]
test ecx, ecx
je 0x44f195
lea edx, [ebp - 0x5ed0]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44f276
cmp dword [ebp + 0x10], 0
je 0x44f1be
mov ecx, dword [ebp + 0x10]
movzx edx, word [ecx]
test edx, edx
je 0x44f1be
lea eax, [ebp - 0x5090]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44f276
mov dword [ebp - 0x6fb8], 0x850
mov dword [ebp - 0x6fb4], 0x34
lea edx, [ebp - 0x5ed0]
push edx
lea eax, [ebp - 0x6fb0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x5090]
push ecx
lea edx, [ebp - 0x6db0]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebp + 0x14], 0
je 0x44f214
mov eax, dword [ebp - 0x549c]
or eax, dword [0x471a78]
mov dword [ebp - 0x6bac], eax
jmp 0x44f220
mov ecx, dword [ebp - 0x549c]
mov dword [ebp - 0x6bac], ecx
mov edx, dword [ebp - 0x5cbc]
mov dword [ebp - 0x6bb0], edx
mov eax, dword [ebp - 0x4e88]
mov dword [ebp - 0x6b74], eax
lea ecx, [ebp - 0x6fb8]
push ecx
call fcn.0044cbe0
add esp, 4
mov dword [ebp - 0x6fbc], eax
mov edx, dword [ebp - 0x6bac]
and edx, dword [0x471a78]
je 0x44f26c
mov eax, dword [ebp - 0x4e80]
add eax, 1
mov dword [ebp - 0x4e80], eax
jmp 0x44f276
mov dword [ebp - 0x4e80], 0xffffffff
jmp 0x44f283
cmp dword [ebp - 8], 0x103
jne 0x44f283
jmp 0x44f288
jmp 0x44ec2b
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 8], eax
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.004148bc
mov esp, ebp
pop ebp
ret