Function at 0x44aade
Capabilities:
Parse credit card information
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x168
mov eax, dword [0x46c018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, 0x464
push esi
push edi
mov esi, ecx
mov ecx, 0x46ea20
lea edi, [ebx - 0x63]
mov eax, dword [ecx]
cmp eax, 0x400
jae 0x44ab18
mov dword [eax*4 + 0x47b9a0], ecx
jmp 0x44adb5
mov edx, dword [ecx + 8]
cmp edx, 6
jne 0x44ab33
cmp eax, 0x1601
jb 0x44ab33
mov dword [eax*4 + 0x47855c], ecx
jmp 0x44adb5
cmp edx, 8
jne 0x44ab4b
cmp eax, 0x1501
jb 0x44ab4b
mov dword [eax*4 + 0x47893c], ecx
jmp 0x44adb5
cmp edx, 7
jne 0x44ab63
cmp eax, 0x1701
jb 0x44ab63
mov dword [eax*4 + 0x47812c], ecx
jmp 0x44adb5
cmp edx, 8
jne 0x44ab74
mov dword [eax*4 + 0x47c8d8], ecx
jmp 0x44adb5
cmp edx, 0xe
jne 0x44ab85
mov dword [eax*4 + 0x47baa4], ecx
jmp 0x44adb5
cmp edx, 0xd
jne 0x44abaf
cmp eax, ebx
jb 0x44ab9a
mov dword [eax*4 + 0x47c7f0], ecx
jmp 0x44adb5
cmp edx, 0xd
jne 0x44abaf
cmp eax, ebx
jae 0x44abaf
mov dword [eax*4 + 0x47c960], ecx
jmp 0x44adb5
cmp edx, 0x26
jne 0x44abc0
mov dword [eax*4 + 0x47c58c], ecx
jmp 0x44adb5
cmp edx, 0xf
jne 0x44abd5
cmp eax, ebx
jb 0x44abd5
mov dword [eax*4 + 0x47c570], ecx
jmp 0x44adb5
cmp edx, 0x10
jne 0x44abed
cmp eax, 0x1200
jb 0x44abed
mov dword [eax*4 + 0x478e80], ecx
jmp 0x44adb5
cmp edx, 0x11
jne 0x44ac02
cmp eax, edi
jb 0x44ac02
mov dword [eax*4 + 0x47a990], ecx
jmp 0x44adb5
cmp edx, 0x12
jne 0x44ac1a
cmp eax, 0x1000
jb 0x44ac1a
mov dword [eax*4 + 0x479330], ecx
jmp 0x44adb5
cmp edx, 0x13
jne 0x44ac2f
cmp eax, edi
jb 0x44ac2f
mov dword [eax*4 + 0x47c2dc], ecx
jmp 0x44adb5
cmp edx, 0x14
jne 0x44ac44
cmp eax, edi
jb 0x44ac44
mov dword [eax*4 + 0x47c28c], ecx
jmp 0x44adb5
cmp edx, 0x15
jne 0x44ac55
mov dword [eax*4 + 0x47c050], ecx
jmp 0x44adb5
cmp edx, 0x16
jne 0x44ac6a
cmp eax, edi
jb 0x44ac6a
mov dword [eax*4 + 0x47c0dc], ecx
jmp 0x44adb5
cmp edx, 0x17
jne 0x44ac82
cmp eax, 0x1300
jb 0x44ac82
mov dword [eax*4 + 0x478350], ecx
jmp 0x44adb5
cmp edx, 0x18
jne 0x44ac97
cmp eax, edi
jb 0x44ac97
mov dword [eax*4 + 0x47be5c], ecx
jmp 0x44adb5
cmp edx, 0x19
jne 0x44acaf
cmp eax, 0x1100
jb 0x44acaf
mov dword [eax*4 + 0x478930], ecx
jmp 0x44adb5
cmp edx, 0x1a
jne 0x44acc7
cmp eax, 0x465
jb 0x44acc7
mov dword [eax*4 + 0x47bb5c], ecx
jmp 0x44adb5
cmp edx, 0x1d
jne 0x44acdc
cmp eax, edi
jb 0x44acdc
mov dword [eax*4 + 0x47bcac], ecx
jmp 0x44adb5
cmp edx, 0x1e
jne 0x44acf4
cmp eax, 0x1001
jb 0x44acf4
mov dword [eax*4 + 0x478c2c], ecx
jmp 0x44adb5
cmp edx, 0x1f
jne 0x44ad0c
cmp eax, 0x1001
jb 0x44ad0c
mov dword [eax*4 + 0x478b5c], ecx
jmp 0x44adb5
cmp edx, 0x20
jne 0x44ad21
cmp eax, edi
jb 0x44ad21
mov dword [eax*4 + 0x47baac], ecx
jmp 0x44adb5
cmp edx, 0x21
jne 0x44ad36
cmp eax, 0x1401
jb 0x44ad36
mov dword [eax*4 + 0x477a6c], ecx
jmp 0x44adb5
cmp edx, 0x22
jne 0x44ad48
cmp eax, ebx
jb 0x44ad48
mov dword [eax*4 + 0x47b870], ecx
jmp 0x44adb5
cmp edx, 0x23
jne 0x44ad5d
cmp eax, 0x700
jb 0x44ad5d
mov dword [eax*4 + 0x47adf0], ecx
jmp 0x44adb5
cmp edx, 0x24
jne 0x44ad6f
cmp eax, edi
jb 0x44ad6f
mov dword [eax*4 + 0x47b9dc], ecx
jmp 0x44adb5
cmp edx, 0x25
jne 0x44ad84
cmp eax, 0x485
jb 0x44ad84
mov dword [eax*4 + 0x47b7bc], ecx
jmp 0x44adb5
test edx, edx
jne 0x44adb5
cmp eax, 0x2001
jb 0x44ad9f
cmp eax, 0x200c
ja 0x44ad9f
mov dword [eax*4 + 0x47499c], ecx
jmp 0x44adb5
test edx, edx
jne 0x44adb5
cmp eax, edi
jb 0x44adb5
cmp eax, 0x466
ja 0x44adb5
mov dword [eax*4 + 0x47c7bc], ecx
add ecx, 0x1c
cmp ecx, 0x476cb8
jl 0x44ab03
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 0x80
test esi, esi
je 0x44ae2a
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMask
push esi
call edi
test eax, eax
jne 0x44ae2a
xor ebx, ebx
xor edx, edx
inc ebx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x120]
test byte [ecx + 0x40ac64], al
je 0x44ae1f
mov byte [edx + 0x47e2a0], bl
inc edx
cmp edx, 0x400
jl 0x44ae00
jmp 0x44ae40
xor ebx, ebx
push 0x400
inc ebx
push ebx
push 0x47e2a0
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 0x1c
test esi, esi
je 0x44ae9d
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskRichEdit
push esi
call edi
test eax, eax
jne 0x44ae9d
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0xa0]
test byte [ecx + 0x40ac64], al
je 0x44ae92
mov byte [edx + 0x47e1c0], bl
inc edx
cmp edx, 0xdd
jl 0x44ae73
jmp 0x44aeb0
push 0xdd
push ebx
push 0x47e1c0
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 2
mov eax, 0x1010101
test esi, esi
je 0x44af14
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskEditEx
push esi
call edi
test eax, eax
jne 0x44af0f
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x14c]
test byte [ecx + 0x40ac64], al
je 0x44af07
mov byte [edx + 0x47dd28], bl
inc edx
cmp edx, 8
jl 0x44aee8
jmp 0x44af1e
mov eax, 0x1010101
mov dword [0x47dd28], eax
mov dword [0x47dd2c], eax
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44af74
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x135]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskCombo
push esi
call edi
test eax, eax
jne 0x44af74
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x135]
test byte [ecx + 0x40ac64], al
je 0x44af6c
mov byte [edx + 0x47dd24], bl
inc edx
cmp edx, 4
jl 0x44af4d
jmp 0x44af7e
mov dword [0x47dd24], 0x1010101
mov dword [ebp - 0x124], 2
test esi, esi
je 0x44afd8
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskBtn
push esi
call edi
test eax, eax
jne 0x44afd8
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x154]
test byte [ecx + 0x40ac64], al
je 0x44afd0
mov byte [edx + 0x47dd18], bl
inc edx
cmp edx, 0xc
jl 0x44afb1
jmp 0x44afeb
mov edi, 0x47dd18
mov eax, 0x1010101
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 2
test esi, esi
je 0x44b045
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskCCtl
push esi
call edi
test eax, eax
jne 0x44b045
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x148]
test byte [ecx + 0x40ac64], al
je 0x44b03d
mov byte [edx + 0x47d284], bl
inc edx
cmp edx, 0xc
jl 0x44b01e
jmp 0x44b058
mov edi, 0x47d284
mov eax, 0x1010101
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 3
test esi, esi
je 0x44b0b2
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskFM
push esi
call edi
test eax, eax
jne 0x44b0b2
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x15c]
test byte [ecx + 0x40ac64], al
je 0x44b0aa
mov byte [edx + 0x47de00], bl
inc edx
cmp edx, 0x16
jl 0x44b08b
jmp 0x44b0c9
mov edi, 0x47de00
mov eax, 0x1010101
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 0xd
test esi, esi
je 0x44b11d
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskCF
push esi
call edi
test eax, eax
jne 0x44b11d
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x58]
test byte [ecx + 0x40ac64], al
je 0x44b115
mov byte [edx + 0x47dd90], bl
inc edx
cmp edx, 0x66
jl 0x44b0f9
jmp 0x44b12d
push 0x66
push ebx
push 0x47dd90
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44b183
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x12d]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskDlg
push esi
call edi
test eax, eax
jne 0x44b183
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x12d]
test byte [ecx + 0x40ac64], al
je 0x44b17b
mov byte [edx + 0x47dd14], bl
inc edx
cmp edx, 3
jl 0x44b15c
jmp 0x44b193
mov eax, 0x1010101
mov word [0x47dd14], ax
mov byte [0x47dd16], al
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44b1e9
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x137]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskCDlg
push esi
call edi
test eax, eax
jne 0x44b1e9
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x137]
test byte [ecx + 0x40ac64], al
je 0x44b1e1
mov byte [edx + 0x47d958], bl
inc edx
cmp edx, 7
jl 0x44b1c2
jmp 0x44b1fd
mov edi, 0x47d958
mov eax, 0x1010101
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44b253
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x139]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskPSD
push esi
call edi
test eax, eax
jne 0x44b253
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x139]
test byte [ecx + 0x40ac64], al
je 0x44b24b
mov byte [edx + 0x47d714], bl
inc edx
cmp edx, 7
jl 0x44b22c
jmp 0x44b267
mov edi, 0x47d714
mov eax, 0x1010101
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 6
test esi, esi
je 0x44b2bb
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskPSh
push esi
call edi
test eax, eax
jne 0x44b2bb
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x24]
test byte [ecx + 0x40ac64], al
je 0x44b2b3
mov byte [edx + 0x47e190], bl
inc edx
cmp edx, 0x28
jl 0x44b297
jmp 0x44b2d0
push 0xa
pop ecx
mov eax, 0x1010101
mov edi, 0x47e190
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44b326
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskAni
push esi
call edi
test eax, eax
jne 0x44b326
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x138]
test byte [ecx + 0x40ac64], al
je 0x44b31e
mov byte [edx + 0x47d6f8], bl
inc edx
cmp edx, 5
jl 0x44b2ff
jmp 0x44b335
mov eax, 0x1010101
mov dword [0x47d6f8], eax
mov byte [0x47d6fc], al
mov dword [ebp - 0x124], 4
test esi, esi
je 0x44b38f
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskHdr
push esi
call edi
test eax, eax
jne 0x44b38f
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x164]
test byte [ecx + 0x40ac64], al
je 0x44b387
mov byte [edx + 0x47e170], bl
inc edx
cmp edx, 0x1d
jl 0x44b368
jmp 0x44b3a5
push 7
pop ecx
mov eax, 0x1010101
mov edi, 0x47e170
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 0xe
test esi, esi
je 0x44b3f9
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskTB
push esi
call edi
test eax, eax
jne 0x44b3f9
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x68]
test byte [ecx + 0x40ac64], al
je 0x44b3f1
mov byte [edx + 0x47e100], bl
inc edx
cmp edx, 0x69
jl 0x44b3d5
jmp 0x44b409
push 0x69
push ebx
push 0x47e100
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 8
test esi, esi
je 0x44b45d
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskTT
push esi
call edi
test eax, eax
jne 0x44b45d
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x34]
test byte [ecx + 0x40ac64], al
je 0x44b455
mov byte [edx + 0x47e0c0], bl
inc edx
cmp edx, 0x3b
jl 0x44b439
jmp 0x44b46d
push 0x3b
push ebx
push 0x47e0c0
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 3
test esi, esi
je 0x44b4c7
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskStat
push esi
call edi
test eax, eax
jne 0x44b4c7
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x160]
test byte [ecx + 0x40ac64], al
je 0x44b4bf
mov byte [edx + 0x47e0a0], bl
inc edx
cmp edx, 0x14
jl 0x44b4a0
jmp 0x44b4dc
mov edi, 0x47e0a0
mov eax, 0x1010101
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 5
test esi, esi
je 0x44b530
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskTrk
push esi
call edi
test eax, eax
jne 0x44b530
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x14]
test byte [ecx + 0x40ac64], al
je 0x44b528
mov byte [edx + 0x47e070], bl
inc edx
cmp edx, 0x23
jl 0x44b50c
jmp 0x44b548
push 8
pop ecx
mov eax, 0x1010101
mov edi, 0x47e070
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 2
test esi, esi
je 0x44b5a2
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskUpDn
push esi
call edi
test eax, eax
jne 0x44b5a2
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x150]
test byte [ecx + 0x40ac64], al
je 0x44b59a
mov byte [edx + 0x47e054], bl
inc edx
cmp edx, 0xe
jl 0x44b57b
jmp 0x44b5b7
mov edi, 0x47e054
mov eax, 0x1010101
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 3
test esi, esi
je 0x44b611
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskProg
push esi
call edi
test eax, eax
jne 0x44b611
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x158]
test byte [ecx + 0x40ac64], al
je 0x44b609
mov byte [edx + 0x47e040], bl
inc edx
cmp edx, 0x11
jl 0x44b5ea
jmp 0x44b626
mov edi, 0x47e040
mov eax, 0x1010101
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44b67c
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskHK
push esi
call edi
test eax, eax
jne 0x44b67c
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x12c]
test byte [ecx + 0x40ac64], al
je 0x44b674
mov byte [edx + 0x47d6f4], bl
inc edx
cmp edx, 3
jl 0x44b655
jmp 0x44b68c
mov eax, 0x1010101
mov word [0x47d6f4], ax
mov byte [0x47d6f6], al
mov dword [ebp - 0x124], 0x1b
test esi, esi
je 0x44b6e9
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskLV
push esi
call edi
test eax, eax
jne 0x44b6e9
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x84]
test byte [ecx + 0x40ac64], al
je 0x44b6de
mov byte [edx + 0x47df60], bl
inc edx
cmp edx, 0xd4
jl 0x44b6bf
jmp 0x44b6fc
push 0xd4
push ebx
push 0x47df60
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 0xa
test esi, esi
je 0x44b750
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskTV
push esi
call edi
test eax, eax
jne 0x44b750
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x48]
test byte [ecx + 0x40ac64], al
je 0x44b748
mov byte [edx + 0x47df10], bl
inc edx
cmp edx, 0x49
jl 0x44b72c
jmp 0x44b760
push 0x49
push ebx
push 0x47df10
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 8
test esi, esi
je 0x44b7b4
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskTab
push esi
call edi
test eax, eax
jne 0x44b7b4
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x3c]
test byte [ecx + 0x40ac64], al
je 0x44b7ac
mov byte [edx + 0x47ded0], bl
inc edx
cmp edx, 0x3f
jl 0x44b790
jmp 0x44b7c4
push 0x3f
push ebx
push 0x47ded0
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 2
test esi, esi
je 0x44b81e
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskCbEx
push esi
call edi
test eax, eax
jne 0x44b81e
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x144]
test byte [ecx + 0x40ac64], al
je 0x44b816
mov byte [edx + 0x47dec0], bl
inc edx
cmp edx, 0xe
jl 0x44b7f7
jmp 0x44b833
mov edi, 0x47dec0
mov eax, 0x1010101
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 5
test esi, esi
je 0x44b887
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskMC
push esi
call edi
test eax, eax
jne 0x44b887
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0xc]
test byte [ecx + 0x40ac64], al
je 0x44b87f
mov byte [edx + 0x47dea0], bl
inc edx
cmp edx, 0x20
jl 0x44b863
jmp 0x44b89c
push 8
pop ecx
mov eax, 0x1010101
mov edi, 0x47dea0
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], 7
test esi, esi
je 0x44b8f0
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskDT
push esi
call edi
test eax, eax
jne 0x44b8f0
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x2c]
test byte [ecx + 0x40ac64], al
je 0x44b8e8
mov byte [edx + 0x47de60], bl
inc edx
cmp edx, 0x32
jl 0x44b8cc
jmp 0x44b900
push 0x32
push ebx
push 0x47de60
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 6
test esi, esi
je 0x44b954
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskRbr
push esi
call edi
test eax, eax
jne 0x44b954
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x1c]
test byte [ecx + 0x40ac64], al
je 0x44b94c
mov byte [edx + 0x47de30], bl
inc edx
cmp edx, 0x2c
jl 0x44b930
jmp 0x44b964
push 0x2c
push ebx
push 0x47de30
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 2
test esi, esi
je 0x44b9be
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskPgr
push esi
call edi
test eax, eax
jne 0x44b9be
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x140]
test byte [ecx + 0x40ac64], al
je 0x44b9b6
mov byte [edx + 0x47de18], bl
inc edx
cmp edx, 0xd
jl 0x44b997
jmp 0x44b9d2
mov edi, 0x47de18
mov eax, 0x1010101
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44ba28
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x136]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskIP
push esi
call edi
test eax, eax
jne 0x44ba28
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x136]
test byte [ecx + 0x40ac64], al
je 0x44ba20
mov byte [edx + 0x47d324], bl
inc edx
cmp edx, 6
jl 0x44ba01
jmp 0x44ba38
mov eax, 0x1010101
mov dword [0x47d324], eax
mov word [0x47d328], ax
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44ba8e
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x129]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskLink
push esi
call edi
test eax, eax
jne 0x44ba8e
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x129]
test byte [ecx + 0x40ac64], al
je 0x44ba86
mov byte [edx + 0x47d0dc], bl
inc edx
cmp edx, 4
jl 0x44ba67
jmp 0x44ba98
mov eax, 0x1010101
mov dword [0x47d0dc], eax
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44baee
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x12a]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskNAC
push esi
call edi
test eax, eax
jne 0x44baee
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x12a]
test byte [ecx + 0x40ac64], al
je 0x44bae6
mov byte [edx + 0x47d04c], bl
inc edx
cmp edx, 4
jl 0x44bac7
jmp 0x44baf8
mov eax, 0x1010101
mov dword [0x47d04c], eax
mov dword [ebp - 0x124], ebx
test esi, esi
je 0x44bb4e
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x12b]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFiltersMaskDLC
push esi
call edi
test eax, eax
jne 0x44bb4e
xor edx, edx
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
mov al, byte [ebp + eax - 0x12b]
test byte [ecx + 0x40ac64], al
je 0x44bb46
mov byte [edx + 0x47cf4c], bl
inc edx
cmp edx, 4
jl 0x44bb27
jmp 0x44bb58
mov eax, 0x1010101
mov dword [0x47cf4c], eax
mov dword [ebp - 0x124], 4
test esi, esi
je 0x44bbb1
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.MsgFilters
push esi
call edi
test eax, eax
jne 0x44bbb1
test byte [ebp - 0x134], bl
je 0x44bb97
mov dword [0x47de94], ebx
test byte [ebp - 0x134], 2
je 0x44bba6
mov dword [0x47de28], ebx
test byte [ebp - 0x134], 4
je 0x44bbc3
jmp 0x44bbbd
mov dword [0x47de94], ebx
mov dword [0x47de28], ebx
mov dword [0x47ddf8], ebx
mov dword [ebp - 0x124], 4
test esi, esi
je 0x44bc24
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.WinFilters
push esi
call edi
test eax, eax
jne 0x44bc24
mov eax, dword [ebp - 0x134]
test bl, al
je 0x44bc04
mov dword [0x47e064], ebx
test al, 2
je 0x44bc0e
mov dword [0x47e038], ebx
test al, 4
je 0x44bc18
mov dword [0x47de98], ebx
test al, 8
je 0x44bc40
mov dword [0x47e034], ebx
jmp 0x44bc40
and dword [0x47e064], 0
and dword [0x47e038], 0
and dword [0x47de98], 0
and dword [0x47e034], 0
mov dword [ebp - 0x124], 4
test esi, esi
je 0x44bcc2
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.OutputFilters
push esi
call edi
test eax, eax
jne 0x44bcc2
mov eax, dword [ebp - 0x134]
test eax, 0x200
je 0x44bc84
mov dword [0x47ce58], ebx
test al, 2
je 0x44bc8e
mov dword [0x47ce54], ebx
test al, 4
je 0x44bc98
mov dword [0x47cd2c], ebx
test al, 8
je 0x44bca2
mov dword [0x47cd28], ebx
test al, 0x10
je 0x44bcac
mov dword [0x47ccec], ebx
test al, 0x20
je 0x44bcb6
mov dword [0x47cce8], ebx
test al, 0x40
je 0x44bcf0
mov dword [0x47cc2c], ebx
jmp 0x44bcf0
and dword [0x47ce54], 0
and dword [0x47cd28], 0
and dword [0x47cce8], 0
and dword [0x47cc2c], 0
mov dword [0x47ce58], ebx
mov dword [0x47cd2c], ebx
mov dword [0x47ccec], ebx
mov dword [ebp - 0x124], 4
test esi, esi
je 0x44bd37
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
push str.Lines
push esi
call edi
test eax, eax
jne 0x44bd37
mov ecx, dword [ebp - 0x168]
mov dword [0x47cc28], ecx
lea eax, [ecx - 1]
cmp eax, 0xf423f
jbe 0x44bd41
mov dword [0x47cc28], 0x61a8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00466ce7
mov esp, ebp
pop ebp
ret