Function at 0x440cf0
Capabilities:
Get disk information
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
lea ebp, [esp - 0xc50]
sub esp, 0xc50
push 0xffffffffffffffff
push 0x647e7b
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0xc4c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x44], esi
mov dword [ebp - 4], 0
wait
call fcn.005f6b34
push 0x3ec
push esi
lea ecx, [esi + 0x2dc]
call fcn.004012a0
push 0x3ee
push esi
lea ecx, [esi + 0x2ec]
call fcn.004012a0
push 0x719
push esi
lea ecx, [esi + 0x2fc]
call fcn.004012a0
push 0x649
push esi
lea ecx, [esi + 0x30c]
call fcn.004012a0
push 0x495
push esi
lea ecx, [esi + 0x31c]
call fcn.004012a0
mov eax, dword [esi + 0x20]
push eax
mov ecx, dword [esi + 0x88]
call fcn.005b7c40
push 1
mov ecx, dword [esi + 0x338]
push ecx
mov ecx, esi
call fcn.004015e0
push 0
mov edx, dword [esi + 0x338]
push edx
mov ecx, esi
call fcn.004015e0
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [esi + 0x200]
push ecx
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
call ebx
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.005fdc97
lea edi, [esi + 0x1e0]
push 0
mov ecx, edi
call fcn.005f5caa
call fcn.005fd5a3
mov eax, dword [eax + 8]
push 0
push eax
push 0
mov eax, dword [esi + 0x20]
push eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
sub ecx, eax
push ecx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
sub edx, ecx
push edx
push eax
push ecx
push 0x50010880
push 0
push str.EDIT
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esi + 0x560], eax
test eax, eax
je 0x440e61
push 0x213
push 0
push 0
push 0
push 0
push 2
mov ecx, esi
call fcn.005f5a75
mov eax, dword [eax + 0x20]
push eax
mov ecx, dword [esi + 0x560]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x440e80
mov dword [esi + 0x574], 0
mov edx, dword [esi + 0x200]
mov dword [esi + 0x560], edx
push 5
mov ecx, edi
call fcn.005f5caa
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [esi + 0x1ac]
push ecx
call ebx
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.005fdc97
add dword [ebp - 0x20], 0x64
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
mov dword [esi + 0x570], eax
lea edi, [esi + 0x18c]
push 0
mov ecx, edi
call fcn.005f5caa
call fcn.005fd5a3
mov eax, dword [eax + 8]
push 0
push eax
push 0
mov ecx, dword [esi + 0x20]
push ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
sub edx, eax
push edx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
sub edx, ecx
push edx
push eax
push ecx
push 0x50210142
push 0
push 0x679cc4
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esi + 0x550], eax
xor ecx, ecx
mov dword [esi + 0x554], ecx
mov dword [esi + 0x558], ecx
cmp eax, ecx
je 0x440f71
push 0x213
push ecx
push ecx
push ecx
push ecx
push 0x6a1
mov ecx, esi
call fcn.005f5a75
mov eax, dword [eax + 0x20]
push eax
mov ecx, dword [esi + 0x550]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov dword [ebp - 0x78], 0x34
push 0x30
push 0
lea edx, [ebp - 0x74]
push edx
call fcn.00621270
add esp, 0xc
lea eax, [ebp - 0x78]
push eax
mov ecx, dword [esi + 0x550]
push ecx
call dword [sym.imp.USER32.dll_GetComboBoxInfo]
test eax, eax
je 0x440f8c
mov edx, dword [ebp - 0x4c]
mov dword [esi + 0x554], edx
mov eax, dword [ebp - 0x48]
mov dword [esi + 0x558], eax
jmp 0x440f8c
mov dword [esi + 0x574], ecx
mov ecx, dword [esi + 0x1ac]
mov dword [esi + 0x550], ecx
push 5
mov ecx, edi
call fcn.005f5caa
xor eax, eax
mov dword [esi + 0x568], eax
mov dword [esi + 0x56c], eax
lea ecx, [esi + 0x32c]
push eax
push 0x4b9
push esi
lea edx, [esi + 0x288]
push edx
call fcn.00425ee0
mov edi, dword [esi + 0x330]
test edi, edi
je 0x440ffe
mov dword [ebp - 0xac], 0x34
push 0x30
push 0
lea eax, [ebp - 0xa8]
push eax
call fcn.00621270
add esp, 0xc
lea ecx, [ebp - 0xac]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetComboBoxInfo]
test eax, eax
je 0x440ffe
mov edx, dword [ebp - 0x80]
mov dword [esi + 0x568], edx
mov eax, dword [ebp - 0x7c]
mov dword [esi + 0x56c], eax
lea ecx, [ebp - 0x2c]
push ecx
mov edx, dword [esi + 0x158]
push edx
call ebx
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.005fdc97
lea edi, [esi + 0x138]
push 0
mov ecx, edi
call fcn.005f5caa
call fcn.005fd5a3
mov eax, dword [eax + 8]
push 0
push eax
push 0
mov ecx, dword [esi + 0x20]
push ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
sub edx, eax
push edx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
sub edx, ecx
push edx
push eax
push ecx
push 0x50010880
push 0
push str.EDIT
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esi + 0x564], eax
test eax, eax
je 0x441088
push 0x213
push 0
push 0
push 0
push 0
mov ecx, dword [esi + 0x310]
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x4410a7
mov dword [esi + 0x574], 0
mov edx, dword [esi + 0x158]
mov dword [esi + 0x564], edx
push 5
mov ecx, edi
call fcn.005f5caa
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [esi + 0x254]
push ecx
call ebx
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.005fdc97
lea edi, [esi + 0x234]
push 0
mov ecx, edi
call fcn.005f5caa
call fcn.005fd5a3
mov eax, dword [eax + 8]
push 0
push eax
push 0
mov eax, dword [esi + 0x20]
push eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
sub ecx, eax
push ecx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
sub edx, ecx
push edx
push eax
push ecx
push 0x50010080
push 0
push str.EDIT
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esi + 0x55c], eax
test eax, eax
je 0x441131
push 0x213
push 0
push 0
push 0
push 0
mov ecx, dword [esi + 0x320]
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x441150
mov dword [esi + 0x574], 0
mov edx, dword [esi + 0x254]
mov dword [esi + 0x55c], edx
push 5
mov ecx, edi
call fcn.005f5caa
lea edi, [esi + 0xc4]
mov eax, dword [edi]
push 0
push esi
mov ecx, edi
mov edx, dword [eax + 0x13c]
call edx
push 0
push 0
mov eax, dword [0x75ed18]
push eax
push 0x6a1
mov ecx, esi
call fcn.005f5a75
push eax
mov ecx, edi
call fcn.005fec3e
cmp dword [0x75dd30], 0
je 0x4411b2
mov ecx, dword [0x75ed18]
push ecx
mov edx, dword [esi + 0xe4]
push edx
push 0x6a1
mov ecx, esi
call fcn.005f5a75
mov eax, dword [eax + 0x20]
push eax
call fcn.00425fd0
add esp, 0xc
push 0x3ec
push esi
push edi
call fcn.00403240
push 0x3ee
push esi
push edi
call fcn.00403240
push 0x648
push esi
push edi
call fcn.00403240
add esp, 0x24
push 1
mov ecx, edi
call fcn.00401620
push esi
call fcn.0045bf70
add esp, 4
push 0
mov ecx, esi
call fcn.0043ca60
cmp dword [0x75dd30], 0
je 0x44121c
push 0x82
push esi
mov ecx, 0x75dcf0
call fcn.004e6a60
dec dword [esi + 0x588]
push 1
mov ecx, esi
call fcn.0043ca60
mov ecx, dword [esi + 0x88]
add ecx, 0x20
push ecx
mov ecx, esi
call fcn.0043ea30
mov ecx, dword [esi + 0x88]
cmp dword [ecx + 0x504], 0
jl 0x4412a9
jg 0x441247
cmp dword [ecx + 0x500], 0
jbe 0x4412a9
cmp dword [ecx + 0x354], 0x20
je 0x4412a9
lea ecx, [ebp - 0x14]
call fcn.004024f0
mov byte [ebp - 4], 1
mov edi, vtable.StringConvertor.0
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 2
lea edx, [ebp - 0x14]
push edx
mov eax, dword [esi + 0x88]
mov ecx, dword [eax + 0x504]
push ecx
mov edx, dword [eax + 0x500]
push edx
lea ecx, [ebp - 0x34]
call fcn.0043f860
mov eax, dword [ebp - 0x14]
push eax
push 0x44d
mov ecx, dword [esi + 0x20]
push ecx
call fcn.004245a0
add esp, 0xc
mov byte [ebp - 4], 1
mov dword [ebp - 0x34], edi
jmp 0x4413d7
mov eax, dword [ecx + 0x44]
cmp eax, 4
je 0x4412bf
cmp eax, 5
je 0x4412bf
cmp dword [ecx + 0x354], 0
je 0x4412ea
lea edx, [ecx + 0x3d8]
fldz
fcom qword [edx]
fnstsw ax
test ah, 5
jnp 0x44135c
cmp dword [ecx + 0x40c], 0
jg 0x44135c
jl 0x4412e8
cmp dword [ecx + 0x408], 0
ja 0x44135c
fstp st(0)
cmp dword [ecx + 0x114], 0
jl 0x4413e3
jg 0x441306
cmp dword [ecx + 0x110], 0
jbe 0x4413e3
lea ecx, [ebp - 0x14]
call fcn.004024f0
mov byte [ebp - 4], 5
mov edi, vtable.StringConvertor.0
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 6
lea edx, [ebp - 0x14]
push edx
mov eax, dword [esi + 0x88]
mov ecx, dword [eax + 0x114]
push ecx
mov edx, dword [eax + 0x110]
push edx
lea ecx, [ebp - 0x38]
call fcn.0043f860
mov eax, dword [ebp - 0x14]
push eax
push 0x44d
mov ecx, dword [esi + 0x20]
push ecx
call fcn.004245a0
add esp, 0xc
mov byte [ebp - 4], 5
mov dword [ebp - 0x38], edi
jmp 0x4413d7
fcomp qword [edx]
fnstsw ax
test ah, 5
jp 0x441370
fld qword [edx]
call fcn.00622e26
mov ebx, eax
jmp 0x44137c
mov ebx, dword [ecx + 0x408]
mov edx, dword [ecx + 0x40c]
mov dword [ebp - 0x18], edx
test edx, edx
jl 0x4413e3
jg 0x441389
test ebx, ebx
jbe 0x4413e3
lea ecx, [ebp - 0x14]
call fcn.004024f0
mov byte [ebp - 4], 3
mov edi, vtable.StringConvertor.0
mov dword [ebp + 0xc44], edi
mov byte [ebp - 4], 4
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
push ebx
lea ecx, [ebp + 0xc44]
call fcn.0043fa40
mov edx, dword [ebp - 0x14]
push edx
push 0x44d
mov eax, dword [esi + 0x20]
push eax
call fcn.004245a0
add esp, 0xc
mov byte [ebp - 4], 3
mov dword [ebp + 0xc44], edi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00402560
mov ecx, 0x75db58
call fcn.00523ac0
push 1
lea ecx, [esi + 0xa8]
push ecx
mov edx, dword [esi + 0x74]
push edx
mov ecx, dword [esi + 0x88]
call fcn.005c15f0
mov eax, dword [0x75ed4c]
push eax
lea ebx, [esi + 0x32c]
mov ecx, ebx
call fcn.00424720
xor edi, edi
mov dword [ebp - 0x3c], edi
mov ecx, dword [esi + 0x74]
cmp edi, dword [ecx + 8]
jge 0x44144e
push edi
call fcn.0043c230
add eax, 4
cmp dword [eax], 0
je 0x441440
mov eax, dword [eax]
push eax
mov ecx, ebx
call fcn.00425c40
inc edi
jmp 0x44141a
add eax, 4
push eax
mov ecx, ebx
call fcn.00425c40
inc edi
jmp 0x44141a
cmp dword [esi + 0x9c], 0
je 0x44145f
mov eax, dword [esi + 0x9c]
jmp 0x441465
lea eax, [esi + 0xa0]
lea edx, [eax + 2]
xor edi, edi
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x441470
sub eax, edx
sar eax, 1
jne 0x4414b5
cmp dword [esi + 0x90], edi
je 0x441491
mov eax, dword [esi + 0x90]
jmp 0x441497
lea eax, [esi + 0x94]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4414a0
sub eax, edx
sar eax, 1
je 0x4417c6
cmp dword [esi + 0xa8], edi
je 0x4414c5
mov eax, dword [esi + 0xa8]
jmp 0x4414cb
lea eax, [esi + 0xac]
push 0x100
lea ecx, [ebp + 0x83c]
push ecx
push 0x100
lea edx, [ebp + 0xa3c]
push edx
push 0x100
lea ecx, [ebp + 0x63c]
push ecx
push 3
lea edx, [ebp + 0xc44]
push edx
push eax
call fcn.00623b27
add esp, 0x24
mov dword [ebp + 0x24], edi
mov dword [ebp + 0x2c], edi
xor eax, eax
mov word [ebp + 0x28], ax
mov byte [ebp - 4], 7
xor bl, bl
mov dword [ebp], edi
mov dword [ebp + 8], edi
xor ecx, ecx
mov word [ebp + 4], cx
mov byte [ebp - 4], 8
cmp dword [esi + 0x90], edi
je 0x441533
mov eax, dword [esi + 0x90]
jmp 0x441539
lea eax, [esi + 0x94]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x441540
sub eax, edx
sar eax, 1
je 0x441634
cmp dword [esi + 0x90], edi
je 0x441565
mov eax, dword [esi + 0x90]
jmp 0x44156b
lea eax, [esi + 0x94]
push eax
lea ecx, [ebp + 0x24]
call fcn.004017e0
cmp dword [esi + 0x90], edi
je 0x441584
mov eax, dword [esi + 0x90]
jmp 0x44158a
lea eax, [esi + 0x94]
push 0x2e
push eax
call fcn.006206a1
add esp, 8
mov edi, eax
lea ecx, [ebp - 0x14]
call fcn.004024f0
mov byte [ebp - 4], 9
xor ebx, ebx
cmp edi, ebx
je 0x4415b5
add edi, 2
push edi
lea ecx, [ebp - 0x14]
call fcn.0040e500
mov dword [ebp - 0x18], ebx
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp]
push eax
mov ecx, dword [esi + 0x88]
mov edx, dword [ecx + 0x20]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [esi + 0x74]
call fcn.004c5960
test al, al
jne 0x4415f4
lea ecx, [ebp]
push ecx
call fcn.0044b600
add esp, 4
mov edx, dword [esi + 0x88]
mov dword [edx + 0x334], ebx
jmp 0x441603
mov eax, dword [esi + 0x88]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x334], ecx
mov bl, 1
cmp dword [esi + 0x134], 0
je 0x441626
mov edx, dword [esi + 0x88]
mov byte [edx + 0x1b4], bl
mov eax, dword [esi + 0x88]
mov byte [eax + 0x365], bl
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x14]
call fcn.00402560
jmp 0x441652
lea ecx, [ebp + 0xa3c]
push ecx
lea ecx, [ebp + 0x24]
call fcn.004017e0
lea edx, [ebp + 0x83c]
push edx
lea ecx, [ebp + 0x24]
call fcn.00405310
xor edi, edi
mov dword [ebp + 0x30], edi
mov dword [ebp + 0x38], edi
xor eax, eax
mov word [ebp + 0x34], ax
mov byte [ebp - 4], 0xa
cmp dword [esi + 0x9c], edi
je 0x441674
mov eax, dword [esi + 0x9c]
jmp 0x44167a
lea eax, [esi + 0xa0]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x441680
sub eax, edx
sar eax, 1
je 0x441702
cmp dword [esi + 0x9c], edi
je 0x4416a1
mov eax, dword [esi + 0x9c]
jmp 0x4416a7
lea eax, [esi + 0xa0]
push eax
lea ecx, [ebp + 0x30]
call fcn.004017e0
cmp dword [esi + 0x134], edi
je 0x441739
mov ecx, dword [esi + 0x88]
mov byte [ecx + 0x364], 1
cmp dword [esi + 0x90], edi
je 0x4416d9
mov eax, dword [esi + 0x90]
jmp 0x4416df
lea eax, [esi + 0x94]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4416e2
sub eax, edx
sar eax, 1
je 0x441739
mov edx, dword [esi + 0x88]
mov byte [edx + 0x1b3], 1
jmp 0x441739
test bl, bl
je 0x44171b
mov eax, dword [ebp]
cmp eax, edi
jne 0x441710
lea eax, [ebp + 4]
push eax
lea ecx, [ebp + 0x30]
call fcn.004017e0
jmp 0x441739
lea eax, [ebp + 0xc44]
push eax
lea ecx, [ebp + 0x30]
call fcn.004017e0
lea ecx, [ebp + 0x63c]
push ecx
lea ecx, [ebp + 0x30]
call fcn.00405310
mov edi, dword [ebp + 0x30]
test edi, edi
mov eax, edi
jne 0x441745
lea eax, [ebp + 0x34]
lea edx, [eax + 2]
jmp 0x441750
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x441750
sub eax, edx
sar eax, 1
test edi, edi
mov ecx, edi
jne 0x441768
lea ecx, [ebp + 0x34]
cmp word [ecx + eax*2 - 2], 0x5c
mov edx, 0x679c78
je 0x44177a
mov edx, 0x679980
mov ecx, dword [ebp + 0x24]
test ecx, ecx
jne 0x441784
lea ecx, [ebp + 0x28]
test edi, edi
mov eax, edi
jne 0x44178d
lea eax, [ebp + 0x34]
push 0
push ecx
push edx
push eax
push 0x67d030
lea ecx, [esi + 0xa8]
call fcn.00411c20
mov byte [ebp - 4], 8
lea ecx, [ebp + 0x30]
call fcn.00401210
mov byte [ebp - 4], 7
lea ecx, [ebp]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x24]
call fcn.00401210
lea edi, [esi + 0xa8]
xor ebx, ebx
cmp dword [edi], ebx
je 0x4417d6
mov eax, dword [edi]
jmp 0x4417d9
lea eax, [edi + 4]
push 0x100
lea edx, [ebp + 0x23c]
push edx
push 0x100
lea ecx, [ebp + 0x3c]
push ecx
push 0x100
lea edx, [ebp + 0x43c]
push edx
push 3
lea ecx, [ebp + 0xc3c]
push ecx
push eax
call fcn.00623b27
add esp, 0x24
lea edx, [ebp + 0xc3c]
push edx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 4
je 0x44184b
cmp eax, 1
je 0x44184b
mov eax, dword [esi + 0x88]
add eax, 0xf4
cmp dword [eax], ebx
je 0x441836
mov eax, dword [eax]
jmp 0x441839
add eax, 4
push eax
push 0xffffffffffffffff
push ebx
push edi
mov ecx, dword [esi + 0x80]
call fcn.0049d5f0
jmp 0x441890
mov dword [esi + 0x578], 1
lea eax, [ebp + 0xc3c]
push eax
lea ecx, [esi + 0x57c]
call fcn.004017e0
push ebx
mov ecx, dword [esi + 0x2e0]
push ecx
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
call edi
push ebx
mov edx, dword [esi + 0x2f0]
push edx
call edi
push ebx
push ebx
push ebx
push ebx
push esi
push 0x43c900
call fcn.006005d0
cmp byte [0x75db0d], 0
je 0x441985
push 1
push str.DarkMode_Explorer
mov eax, dword [esi + 0x20]
push eax
mov ecx, 0x75dad0
call fcn.004378a0
mov ecx, dword [esi + 0x20]
push ecx
mov ecx, 0x75dad0
call fcn.00437960
push 1
push str.DarkMode_Explorer
mov edx, dword [esi + 0x2e0]
push edx
mov ecx, 0x75dad0
call fcn.004378a0
push 1
push str.DarkMode_Explorer
mov eax, dword [esi + 0x2f0]
push eax
mov ecx, 0x75dad0
call fcn.004378a0
push 1
push str.DarkMode_Explorer
mov ecx, dword [esi + 0x320]
push ecx
mov ecx, 0x75dad0
call fcn.004378a0
push 1
push str.DarkMode_Explorer
push 2
mov ecx, esi
call fcn.005f5a75
mov edx, dword [eax + 0x20]
push edx
mov ecx, 0x75dad0
call fcn.004378a0
push 1
push str.DarkMode_Explorer
push 0x6a1
mov ecx, esi
call fcn.005f5a75
mov eax, dword [eax + 0x20]
push eax
mov ecx, 0x75dad0
call fcn.004378a0
push 1
push str.DarkMode_Explorer
push 0x648
mov ecx, esi
call fcn.005f5a75
mov ecx, dword [eax + 0x20]
push ecx
mov ecx, 0x75dad0
call fcn.004378a0
push 1
push 0x679c78
push 0x679c78
mov edx, dword [esi + 0x310]
push edx
mov ecx, 0x75dad0
call fcn.004378e0
mov dword [ebp + 0xc], ebx
mov dword [ebp + 0x14], ebx
xor eax, eax
mov word [ebp + 0x10], ax
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0xc]
push ecx
mov edx, dword [esi + 0x88]
mov eax, dword [edx + 0x334]
push eax
mov ecx, dword [esi + 0x74]
call fcn.004c55f0
test al, al
je 0x4419df
mov eax, dword [ebp + 0xc]
cmp eax, ebx
jne 0x4419bc
lea eax, [ebp + 0x10]
push eax
push 0xffffffffffffffff
lea ecx, [esi + 0x32c]
call fcn.00425ca0
mov eax, dword [ebp + 0xc]
cmp eax, ebx
jne 0x4419d4
lea eax, [ebp + 0x10]
push ebx
push eax
mov ecx, esi
call fcn.0043ef40
jmp 0x441a02
mov ecx, dword [0x75ed4c]
push ecx
push 0xffffffffffffffff
lea ecx, [esi + 0x32c]
call fcn.004247e0
push ebx
mov edx, dword [0x75ed4c]
push edx
mov ecx, esi
call fcn.00440830
push 1
mov ecx, esi
call fcn.0043ebf0
mov eax, dword [esi + 0x88]
cmp dword [eax + 0x60], ebx
je 0x441ab4
xor edi, edi
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x20], edi
xor ecx, ecx
mov word [ebp + 0x1c], cx
mov bl, 0xc
mov byte [ebp - 4], bl
mov eax, dword [esi + 0x88]
movzx edx, byte [eax + 0x362]
neg edx
sbb edx, edx
and edx, 0xfde9
push edx
mov eax, dword [eax + 0x60]
push eax
lea ecx, [ebp + 0x18]
call fcn.00401970
mov eax, dword [ebp + 0x18]
cmp dword [esi + 0x574], edi
je 0x441a73
cmp eax, edi
jne 0x441a63
lea eax, [ebp + 0x1c]
push eax
mov ecx, dword [esi + 0x55c]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x441aa8
cmp eax, edi
jne 0x441a7a
lea eax, [ebp + 0x1c]
push edi
push eax
lea edx, [ebp - 0x18]
push edx
call fcn.00402a60
add esp, 0xc
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [esi + 0x55c]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00402560
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x18]
call fcn.00401210
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
push 0x43e7a0
call fcn.006005d0
mov dword [ebp - 0x40], 4
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x30]
push eax
push 0
push 0
push str.ShowTipOnFirstCatch
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x441b26
cmp dword [ebp - 0x30], 1
jne 0x441b26
mov dword [ebp - 0x30], eax
push 4
lea edx, [ebp - 0x30]
push edx
push 4
push eax
push str.ShowTipOnFirstCatch
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0
push 0x1f4
push 2
mov ecx, dword [esi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov edx, dword [esi + 0x88]
cmp dword [edx + 0x504], 0
jg 0x441b49
jl 0x441b40
cmp dword [edx + 0x500], 0
ja 0x441b49
cmp byte [edx + 0x363], 0
je 0x441b99
cmp dword [esi + 0x90], 0
je 0x441b5a
mov eax, dword [esi + 0x90]
jmp 0x441b60
lea eax, [esi + 0x94]
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x441b63
sub eax, edi
sar eax, 1
jne 0x441b99
mov eax, dword [edx + 0x44]
cmp eax, 1
je 0x441b81
cmp eax, 2
jne 0x441b99
mov edx, dword [edx + 0x4f8]
push edx
push 0x14dc
push 0x111
mov ecx, esi
call fcn.0042ec10
push 0
push 0xbb8
push 3
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [esi + 0xb8], 1
mov byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call fcn.00401210
wait
mov dword [ebp - 4], 0xffffffff
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xc4c]
xor ecx, ebp
call fcn.00620b8d
add ebp, 0xc50
mov esp, ebp
pop ebp
ret