Function at 0x582640
Capabilities:
Contain obfuscated stackstrings
Get graphical window text
Shutdown system

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fd874
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x218
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x208], esi
mov eax, dword [ebx + 8]
mov edi, dword [ebx + 0xc]
mov ecx, edi
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x1f8], edi
mov dword [ebp - 0x200], eax
mov dword [esi], edi
call fcn.005c4310
push eax
lea ecx, [esi + 0x420]
mov dword [esi + 0x278], eax
call fcn.005b7660
push dword [esi + 0x278]
lea ecx, [esi + 0x6c8]
call fcn.005b6130
push 0
mov ecx, edi
call fcn.005c5730
push 0x433
mov ecx, edi
mov dword [esi + 0x3c8], eax
call fcn.005c4340
push 8
call fcn.005c61f0
push 0x10024
push 0x1000004d
push 0x226
push 0x258
push 0
push 0
push 0x627824
push str._Device_name_n_Status_n_Class_n_Manufacturer_n_Driver_date_n_Driver_version_n_Service_name_n_Hardware_ID_n_Inf_path_n_Instance_ID
mov ecx, edi
call fcn.005c0620
sub esp, 8
mov dword [esi + 0x2bc], eax
mov ecx, edi
push 0x10
push eax
call fcn.005ba470
mov ecx, dword [esi]
push 0
push 0
push 0x1000
push dword [esi + 0x2bc]
call fcn.005befd0
mov ecx, dword [esi]
mov edi, eax
push 0
push 0
push 0x1023
push dword [esi + 0x2bc]
call fcn.005befd0
push edi
mov edi, dword [ebp - 0x1f8]
mov esi, eax
mov ecx, edi
call fcn.005c4720
push esi
mov ecx, edi
call fcn.005c44a0
push esi
push 0xffffffffffffffff
call fcn.005bec70
mov edi, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x1f8]
mov esi, dword [edi + 0x2bc]
push esi
call fcn.005c5730
push 0x10e
push 0
push 0x101e
push esi
mov esi, dword [ebp - 0x1f8]
mov ecx, esi
mov dword [edi + 0x3d0], eax
call fcn.005befd0
push 0x78
push 1
push 0x101e
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005befd0
push 0x78
push 2
push 0x101e
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005befd0
push 0x96
push 3
push 0x101e
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005befd0
push 0x64
push 4
push 0x101e
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005befd0
push 0x78
push 5
push 0x101e
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005befd0
push 0x64
push 6
push 0x101e
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005befd0
push 0xc8
push 7
push 0x101e
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005befd0
push 0x64
push 8
push 0x101e
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005befd0
push 0x12c
push 9
push 0x101e
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005befd0
push 0x32
mov ecx, esi
call fcn.005c4340
push ecx
push 0x10800000
push 0x229
push 0x98
push 0xffffffffffffffff
push 0x258
call fcn.005bfd30
push 0
mov ecx, esi
mov dword [edi + 0x2c0], eax
call fcn.005c4340
push 0x47
call dword [sym.imp.USER32.dll_GetSystemMetrics]
sub esp, 8
mov esi, eax
mov edx, 1
mov dword [ebp - 0x210], esi
mov ecx, esi
push 0xff005f00
call fcn.005d28c0
push eax
lea ecx, [ebp - 0x218]
call fcn.005c6510
sub esp, 8
mov dword [ebp - 4], 0
push 0xff005f00
xor edx, edx
mov ecx, esi
call fcn.005d28c0
push eax
lea ecx, [ebp - 0x214]
call fcn.005c6510
push ecx
mov ecx, dword [ebp - 0x1f8]
push 0xffffffffffffffff
push 0x1c
push 0x82
push 0xf
push 0xa
push str.Rescan
mov byte [ebp - 4], 1
call fcn.005c1a50
push 0
push 0
push ecx
push 0x14
push 0x14
push 0xfb
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x2c4], eax
call fcn.00582600
mov ecx, dword [ebp - 0x1f8]
push eax
push 0
push 0xffffffffffffffff
call fcn.005be310
push ecx
push esi
push esi
push 0xfb
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1b4]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
mov byte [ebp - 4], 2
push dword [ebp - 0x1b4]
push str.Just_refresh_the_list_tF5
push dword [edi + 0x2c4]
call fcn.005c1450
push ecx
push esi
push esi
push 0xfa
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x2f4], eax
call fcn.00582600
push eax
lea ecx, [ebp - 0x1d8]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 3
push dword [ebp - 0x1d8]
push 0
push 0x64
push str.Scan_for_hardware_changes_tCtrlF5
push dword [edi + 0x2c4]
call fcn.005c0400
push ecx
push esi
push esi
push 0xe9
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x2f8], eax
call fcn.00582600
push eax
lea ecx, [ebp - 0x1d4]
call fcn.005c6520
mov esi, dword [ebp - 0x1f8]
mov ecx, esi
push 0
mov byte [ebp - 4], 4
push dword [ebp - 0x1d4]
push 0
push 0x64
push str.Scan_and_install_missing_devices_tAltF5
push dword [edi + 0x2c4]
call fcn.005c0400
push ecx
push 0xffffffffffffffff
push 0x1c
push 0x82
push 0x32
push 0xa
push str.View
mov ecx, esi
mov dword [edi + 0x2fc], eax
call fcn.005c1a50
push 0
push 0
push ecx
push 0x14
push 0x14
push 0xac
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x2c8], eax
call fcn.00582600
push eax
push 0
push 0xffffffffffffffff
mov ecx, esi
call fcn.005be310
push 0
push str.Show_devices_not_present_tCtrlS
push dword [edi + 0x2c8]
mov ecx, esi
call fcn.005c1450
mov esi, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x1f8]
mov dword [edi + 0x300], eax
mov edi, dword [ebp - 0x218]
push edi
push esi
push 0
push eax
mov eax, dword [ebp - 0x208]
push dword [eax + 0x2c8]
call fcn.005c56e0
push eax
call dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
mov ecx, dword [ebp - 0x1f8]
push edi
push esi
mov esi, dword [ebp - 0x208]
push 0
push 0x64
push str.Group_by_device_type_tCtrlT
push dword [esi + 0x2c8]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [esi + 0x2c8]
mov dword [esi + 0x304], eax
call fcn.005c0400
mov esi, dword [ebp - 0x210]
push ecx
mov ecx, dword [ebp - 0x208]
push esi
push esi
push 0x105
push dword [ebp - 0x1fc]
call fcn.00582600
push eax
lea ecx, [ebp - 0x1a4]
call fcn.005c6520
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 5
push dword [ebp - 0x1a4]
push 0
push 0x64
push str.Expand_all_groups_tAltE
push dword [eax + 0x2c8]
call fcn.005c0400
mov ecx, dword [ebp - 0x208]
push ecx
push esi
push esi
push 0x104
push dword [ebp - 0x1fc]
mov dword [ecx + 0x308], eax
call fcn.00582600
push eax
lea ecx, [ebp - 0x1a8]
call fcn.005c6520
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 6
push dword [ebp - 0x1a8]
push 0
push 0x64
push str.Collapse_all_groups_tAltC
push dword [eax + 0x2c8]
call fcn.005c0400
mov ecx, dword [ebp - 0x208]
push ecx
push 0xffffffffffffffff
push 0x1c
push 0x82
push 0x55
push 0xa
mov dword [ecx + 0x30c], eax
mov ecx, dword [ebp - 0x1f8]
push str.Select...
call fcn.005c1a50
mov ecx, dword [ebp - 0x208]
mov edx, 0x14
push 2
push 0x14
mov dword [ecx + 0x2cc], eax
mov ecx, edi
call fcn.005d0d50
push eax
lea ecx, [ebp - 0x210]
call fcn.005c6510
mov ecx, dword [ebp - 0x1f8]
push 0x14
push 0x14
mov byte [ebp - 4], 7
push dword [ebp - 0x210]
push 0
push 0xffffffffffffffff
call fcn.005bdc60
push dword [ebp - 0x1a4]
mov edi, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x1f8]
push str.Check_all_tCtrlA
push dword [edi + 0x2cc]
call fcn.005c1450
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1a8]
mov dword [edi + 0x310], eax
push 0
push 0x64
push str.Check_none_tCtrlN
push dword [edi + 0x2cc]
call fcn.005c0400
mov dword [edi + 0x314], eax
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2cc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1a4]
push 0
push 0x64
push str.Check_all_in_this_group_tAltA
push dword [edi + 0x2cc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1a8]
mov dword [edi + 0x318], eax
push 0
push 0x64
push str.Check_none_in_this_group_tAltN
push dword [edi + 0x2cc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2cc]
mov dword [edi + 0x31c], eax
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1a4]
push 0
push 0x64
push str.Check_all_not_present_tCtrlP
push dword [edi + 0x2cc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1a4]
mov dword [edi + 0x320], eax
push 0
push 0x64
push str.Check_all_physical_devices_tCtrlL
push dword [edi + 0x2cc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1a4]
mov dword [edi + 0x324], eax
push 0
push 0x64
push str.Check_all_disabled_tCtrlD
push dword [edi + 0x2cc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1a4]
mov dword [edi + 0x328], eax
push 0
push 0x64
push str.Check_all_with_errors_tCtrlW
push dword [edi + 0x2cc]
call fcn.005c0400
push ecx
mov ecx, dword [ebp - 0x1f8]
push 0xffffffffffffffff
push 0x1c
push 0x82
push 0x78
push 0xa
push 0x633224
mov dword [edi + 0x32c], eax
call fcn.005c1a50
mov dword [edi + 0x2d0], eax
push 0
push 0
push ecx
push 0x14
push 0x14
push 0x72
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
mov ecx, dword [ebp - 0x1f8]
push eax
push 0
push 0xffffffffffffffff
call fcn.005be310
push ecx
push esi
push esi
push 0x72
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1d0]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
mov byte [ebp - 4], 8
push dword [ebp - 0x1d0]
push str.Uninstall_checked_tCtrlX
push dword [edi + 0x2d0]
call fcn.005c1450
push ecx
push esi
push esi
push 0x73
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x330], eax
call fcn.00582600
push eax
lea ecx, [ebp - 0x1cc]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 9
push dword [ebp - 0x1cc]
push 0
push 0x64
push str.Uninstall_and_delete_drivers_tAltX
push dword [edi + 0x2d0]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2d0]
mov dword [edi + 0x334], eax
call fcn.005c0400
push ecx
push esi
push esi
push 0xff
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1dc]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 0xa
push dword [ebp - 0x1dc]
push 0
push 0x64
push str.Uninstall_all_devices_not_present_tAltP
push dword [edi + 0x2d0]
call fcn.005c0400
mov dword [edi + 0x338], eax
push ecx
mov ecx, dword [ebp - 0x1f8]
push 0xffffffffffffffff
push 0x1c
push 0x82
push 0x9b
push 0xa
push str.Install
call fcn.005c1a50
push 0
push 0
push ecx
push 0x14
push 0x14
push 0xbc
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x2d4], eax
call fcn.00582600
mov ecx, dword [ebp - 0x1f8]
push eax
push 0
push 0xffffffffffffffff
call fcn.005be310
push dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1f8]
push str.Add_a_device_tAltI
push dword [edi + 0x2d4]
call fcn.005c1450
push ecx
push esi
push esi
push 0xbc
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x33c], eax
call fcn.00582600
push eax
lea ecx, [ebp - 0x1c8]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 0xb
push dword [ebp - 0x1c8]
push 0
push 0x64
push str.Update_checked_devices_tCtrlU
push dword [edi + 0x2d4]
call fcn.005c0400
push ecx
push esi
push esi
push 0x8b
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x340], eax
call fcn.00582600
push eax
lea ecx, [ebp - 0x1b0]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 0xc
push dword [ebp - 0x1b0]
push 0
push 0x64
push str.Change_checked_device_drivers_tAltU
push dword [edi + 0x2d4]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2d4]
mov dword [edi + 0x344], eax
call fcn.005c0400
push ecx
push esi
push esi
push 0x13a
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1c4]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 0xd
push dword [ebp - 0x1c4]
push 0
push 0x64
push str.Reinstall_checked_devices_tCtrlR
push dword [edi + 0x2d4]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2d4]
mov dword [edi + 0x348], eax
call fcn.005c0400
push ecx
push esi
push esi
push 0x7a
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1e0]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 0xe
push dword [ebp - 0x1e0]
push 0
push 0x64
push str.Install_drivers_from_folder_tCtrlI
push dword [edi + 0x2d4]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2d4]
mov dword [edi + 0x34c], eax
call fcn.005c0400
push ecx
push esi
push esi
push 0x12d
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1e4]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 0xf
push dword [ebp - 0x1e4]
push 0
push 0x64
push str.Update_drivers_with_WAU_Manager_tCtrlM
push dword [edi + 0x2d4]
call fcn.005c0400
push ecx
push 0xffffffffffffffff
mov dword [edi + 0x350], eax
push 0x1c
mov ecx, dword [ebp - 0x1f8]
push 0x82
push 0xbe
push 0xa
push str.Set_state
call fcn.005c1a50
push 0
push 0
push ecx
push 0x14
push 0x14
push 0x138
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x2d8], eax
call fcn.00582600
mov ecx, dword [ebp - 0x1f8]
push eax
push 0
push 0xffffffffffffffff
call fcn.005be310
push dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1f8]
push str.Disable_checked_tCtrlQ
push dword [edi + 0x2d8]
call fcn.005c1450
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1a4]
mov dword [edi + 0x354], eax
push 0
push 0x64
push str.Enable_checked_tAltQ
push dword [edi + 0x2d8]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2d8]
mov dword [edi + 0x358], eax
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1b4]
push 0
push 0x64
push str.Restart_checked_tAltR
push dword [edi + 0x2d8]
call fcn.005c0400
push ecx
mov ecx, dword [ebp - 0x1f8]
push 0xffffffffffffffff
push 0x1c
push 0x82
push 0xe1
push 0xa
push str.Get_info
mov dword [edi + 0x35c], eax
call fcn.005c1a50
push 0
push 0
push ecx
push 0x14
push 0x14
push 0x80
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x2dc], eax
call fcn.00582600
mov ecx, dword [ebp - 0x1f8]
push eax
push 0
push 0xffffffffffffffff
call fcn.005be310
push ecx
push esi
push esi
push 0x7c
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1ac]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
mov byte [ebp - 4], 0x10
push dword [ebp - 0x1ac]
push str.Google_hardware_ID_tCtrlG
push dword [edi + 0x2dc]
call fcn.005c1450
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1ac]
mov dword [edi + 0x364], eax
push 0
push 0x64
push str.Google_device_name_tAltG
push dword [edi + 0x2dc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1ac]
mov dword [edi + 0x360], eax
push 0
push 0x64
push str.Google_name_and_hardware_ID_tCtrlH
push dword [edi + 0x2dc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2dc]
mov dword [edi + 0x368], eax
call fcn.005c0400
push ecx
push esi
push esi
push 0x70
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1c0]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 0x11
push dword [ebp - 0x1c0]
push 0
push 0x64
push str.Copy_hardware_ID_tCtrlC
push dword [edi + 0x2dc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1c0]
mov dword [edi + 0x36c], eax
push 0
push 0x64
push str.Copy_device_name_tAltD
push dword [edi + 0x2dc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2dc]
mov dword [edi + 0x370], eax
call fcn.005c0400
push 0
push dword [ebp - 0x1b0]
push 0
mov ecx, dword [ebp - 0x1f8]
push 0x64
push str.Device_properties_tAltEnter
push dword [edi + 0x2dc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push 0
push 8
push 0x64
push 0
push dword [edi + 0x2dc]
mov dword [edi + 0x374], eax
call fcn.005c0400
push ecx
push esi
push esi
push 0x99
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1bc]
call fcn.005c6520
mov ecx, dword [ebp - 0x1f8]
push 0
mov byte [ebp - 4], 0x12
push dword [ebp - 0x1bc]
push 0
push 0x64
push str.Find_a_device_tCtrlF
push dword [edi + 0x2dc]
call fcn.005c0400
mov ecx, dword [ebp - 0x1f8]
push 0
push dword [ebp - 0x1bc]
mov dword [edi + 0x378], eax
push 0
push 0x64
push str.Find_next_t_tF3
push dword [edi + 0x2dc]
call fcn.005c0400
push ecx
mov ecx, dword [ebp - 0x1f8]
push 0xffffffffffffffff
push 0x1c
push 0x82
push 0x104
push 0xa
push str.Backup
mov dword [edi + 0x37c], eax
call fcn.005c1a50
push 0
push 0
push ecx
push 0x14
push 0x14
push 0x98
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x2e0], eax
call fcn.00582600
mov ecx, dword [ebp - 0x1f8]
push eax
push 0
push 0xffffffffffffffff
call fcn.005be310
push ecx
push esi
push esi
push 0x98
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [ebp - 0x1b8]
call fcn.005c6520
mov byte [ebp - 4], 0x13
push dword [ebp - 0x1b8]
mov esi, dword [ebp - 0x1f8]
mov ecx, esi
push str.Backup_checked_tCtrlB
push dword [edi + 0x2e0]
call fcn.005c1450
push 0
push dword [ebp - 0x1b8]
mov ecx, esi
mov dword [edi + 0x380], eax
push 0
push 0x64
push str.Backup_all_tAltB
push dword [edi + 0x2e0]
call fcn.005c0400
sub esp, 8
mov dword [edi + 0x384], eax
mov ecx, esi
push 0x12
push 0x82
push 0x136
push 0xa
push str.Show_startup_tooltip
call fcn.005c19a0
push 0xffffffffffffffff
push 0x10000101
push 0x12
push 0x82
push 0x159
push 0xa
push str.Legend:
mov ecx, esi
mov dword [edi + 0x2e4], eax
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000301
push 0x14
push 0x82
push 0x16d
push 0xa
push str.Disabled
mov ecx, esi
call fcn.005c0890
push 0x808080
push 0xffffff
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bec10
push 0xffffffffffffffff
push 0x10000301
push 0x14
push 0x82
push 0x186
push 0xa
push str.Not_working
mov ecx, esi
call fcn.005c0890
push 0x5050a0
push 0xffffff
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bec10
push 0xffffffffffffffff
push 0x10000301
push 0x14
push 0x82
push 0x19f
push 0xa
push str.Not_present
mov ecx, esi
call fcn.005c0890
push 0xa05050
push 0xffffff
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bec10
push 0xffffffffffffffff
push 0x10000301
push 0x14
push 0x82
push 0x1b8
push 0xa
push str.No_drivers_installed
mov ecx, esi
call fcn.005c0890
push 0x507090
push 0xffffff
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bec10
movsd xmm1, qword [0x6edaf8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x2bc
call fcn.005c42b0
xorps xmm0, xmm0
mov dword [ebp - 0x114], 0
lea ecx, [ebp - 0x11c]
movq qword [ebp - 0x11c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x164], 0
lea ecx, [ebp - 0x16c]
movq qword [ebp - 0x16c], xmm0
call fcn.005dc5e0
push ecx
push 0xffffffffffffffff
push 0x1c
push 0x82
push 0x1db
push 0xa
push str.Home__Esc_
mov ecx, esi
mov byte [ebp - 4], 0x15
call fcn.005c1a50
push 0
push 0
push ecx
push 0x14
push 0x14
push 0xb3
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x2e8], eax
call fcn.00582600
push eax
push 0
push 0xffffffffffffffff
mov ecx, esi
call fcn.005be310
test byte [ebx + 0x14], 2
je 0x5836e0
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bd3f0
push dword [ebp - 0x1c8]
mov ecx, esi
push str.Update_device_driver
push dword [edi + 0x2bc]
call fcn.005c1450
push 0
push dword [ebp - 0x1a8]
mov ecx, esi
mov dword [edi + 0x398], eax
push 0
push 0x3c
push str.Disable_device
push dword [edi + 0x2bc]
call fcn.005c0400
push 0
push dword [ebp - 0x1d0]
mov ecx, esi
mov dword [edi + 0x39c], eax
push 0
push 0x3c
push str.Uninstall_device
push dword [edi + 0x2bc]
call fcn.005c0400
push 0
push dword [ebp - 0x1cc]
mov ecx, esi
mov dword [edi + 0x3a0], eax
push 0
push 0x3c
push str.Uninstall_and_delete_driver
push dword [edi + 0x2bc]
call fcn.005c0400
push 0
push dword [ebp - 0x1c4]
mov ecx, esi
mov dword [edi + 0x3a4], eax
push 0
push 0x3c
push str.Reinstall_device
push dword [edi + 0x2bc]
call fcn.005c0400
push 0
push dword [ebp - 0x1b4]
mov ecx, esi
mov dword [edi + 0x3a8], eax
push 0
push 0x3c
push str.Restart_device
push dword [edi + 0x2bc]
call fcn.005c0400
push 0
push 0
push 8
push 0x3c
push 0
push dword [edi + 0x2bc]
mov ecx, esi
mov dword [edi + 0x3ac], eax
call fcn.005c0400
push 0
push dword [ebp - 0x1d8]
mov ecx, esi
push 0
push 0x3c
push str.Scan_for_hardware_changes
push dword [edi + 0x2bc]
call fcn.005c0400
push 0
push 0
push 8
push 0x3c
push 0
push dword [edi + 0x2bc]
mov ecx, esi
mov dword [edi + 0x3b0], eax
call fcn.005c0400
push 0
push dword [ebp - 0x1b0]
push 0
push 0x3c
push str.Device_properties
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005c0400
push 0
push dword [ebp - 0x1ac]
mov ecx, esi
mov dword [edi + 0x3b4], eax
push 0
push 0x3c
push str.Google_name_and_hardware_ID
push dword [edi + 0x2bc]
call fcn.005c0400
push 0xc20
push 0xfffffffffffffffd
push 0x18
push 0x18
push ecx
push 0x18
push 0x18
push 0xf9
push dword [ebp - 0x1fc]
mov ecx, edi
mov dword [edi + 0x3b8], eax
call fcn.00582600
push eax
mov ecx, esi
call fcn.005c0000
mov ecx, edi
call fcn.0057e4c0
test byte [edi + 0x3bc], 1
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x20c], 0xffffffff
je 0x5838a5
push 4
push dword [edi + 0x300]
mov ecx, esi
call fcn.005bd3f0
test dword [edi + 0x3bc], 2
jne 0x5838c0
push 4
push dword [edi + 0x304]
mov ecx, esi
call fcn.005bd3f0
push ecx
mov ecx, edi
call fcn.0057ecb0
mov eax, dword [edi + 0x3d0]
push edi
push eax
push 0x5c8050
push eax
call dword [sym.imp.COMCTL32.dll_SetWindowSubclass]
push 8
mov ecx, esi
call fcn.005c61f0
movzx eax, word [edi + 0x2f4]
mov ecx, 0x74
mov word [ebp - 0x10c], ax
mov edx, 0x41
movzx eax, word [edi + 0x2f8]
mov word [ebp - 0x106], ax
movzx eax, word [edi + 0x2fc]
mov word [ebp - 0x100], ax
mov eax, 0x53
mov word [ebp - 0xfc], ax
movzx eax, word [edi + 0x300]
mov word [ebp - 0xfa], ax
mov eax, 0x54
mov word [ebp - 0xf6], ax
movzx eax, word [edi + 0x304]
mov word [ebp - 0xf4], ax
mov eax, 0x45
mov word [ebp - 0xf0], ax
movzx eax, word [edi + 0x308]
mov word [ebp - 0xee], ax
mov eax, 0x43
mov word [ebp - 0xea], ax
movzx eax, word [edi + 0x30c]
mov word [ebp - 0xe8], ax
movzx eax, word [edi + 0x310]
mov word [ebp - 0xe2], ax
movzx eax, word [edi + 0x314]
mov word [ebp - 0xdc], ax
movzx eax, word [edi + 0x318]
mov word [ebp - 0xd6], ax
movzx eax, word [edi + 0x31c]
mov word [ebp - 0xd0], ax
movzx eax, word [edi + 0x320]
mov word [ebp - 0xca], ax
mov eax, 0x4c
mov word [ebp - 0xc6], ax
movzx eax, word [edi + 0x324]
mov word [ebp - 0xc4], ax
mov eax, 0x44
mov word [ebp - 0xc0], ax
movzx eax, word [edi + 0x328]
mov word [ebp - 0x10e], cx
mov word [ebp - 0x108], cx
mov word [ebp - 0x102], cx
mov ecx, 0x4e
mov word [ebp - 0xe4], dx
mov word [ebp - 0xd8], dx
mov edx, 0x50
mov word [ebp - 0xbe], ax
mov eax, 0x57
mov byte [ebp - 0x110], 1
mov byte [ebp - 0x10a], 9
mov byte [ebp - 0x104], 0x11
mov byte [ebp - 0xfe], 9
mov byte [ebp - 0xf8], 9
mov byte [ebp - 0xf2], 0x11
mov byte [ebp - 0xec], 0x11
mov byte [ebp - 0xe6], 9
mov byte [ebp - 0xe0], 9
mov word [ebp - 0xde], cx
mov byte [ebp - 0xda], 0x11
mov byte [ebp - 0xd4], 0x11
mov word [ebp - 0xd2], cx
mov byte [ebp - 0xce], 9
mov word [ebp - 0xcc], dx
mov byte [ebp - 0xc8], 9
mov byte [ebp - 0xc2], 9
mov byte [ebp - 0xbc], 9
mov word [ebp - 0xba], ax
movzx eax, word [edi + 0x32c]
mov ecx, 0x58
mov word [ebp - 0xb8], ax
movzx eax, word [edi + 0x330]
mov word [ebp - 0xb2], ax
movzx eax, word [edi + 0x334]
mov word [ebp - 0xac], ax
movzx eax, word [edi + 0x338]
mov word [ebp - 0xa6], ax
movzx eax, word [edi + 0x33c]
mov word [ebp - 0xa0], ax
movzx eax, word [edi + 0x340]
mov word [ebp - 0x9a], ax
movzx eax, word [edi + 0x344]
mov word [ebp - 0x94], ax
mov eax, 0x52
mov word [ebp - 0x90], ax
movzx eax, word [edi + 0x348]
mov word [ebp - 0x8e], ax
movzx eax, word [edi + 0x34c]
mov word [ebp - 0x88], ax
mov eax, 0x4d
mov word [ebp - 0x84], ax
movzx eax, word [edi + 0x350]
mov word [ebp - 0x82], ax
movzx eax, word [edi + 0x354]
mov word [ebp - 0x7c], ax
movzx eax, word [edi + 0x358]
mov word [ebp - 0x76], ax
mov eax, 0x52
mov word [ebp - 0x72], ax
movzx eax, word [edi + 0x35c]
mov word [ebp - 0x70], ax
movzx eax, word [edi + 0x364]
mov word [ebp - 0x6a], ax
movzx eax, word [edi + 0x360]
mov word [ebp - 0x64], ax
mov eax, 0x48
mov word [ebp - 0x60], ax
movzx eax, word [edi + 0x368]
mov word [ebp - 0x5e], ax
mov eax, 0x43
mov word [ebp - 0xb4], cx
mov word [ebp - 0xae], cx
mov ecx, 0x55
mov word [ebp - 0x5a], ax
movzx eax, word [edi + 0x36c]
mov word [ebp - 0x9c], cx
mov word [ebp - 0x96], cx
mov ecx, 0x51
mov word [ebp - 0x58], ax
mov eax, 0x44
mov word [ebp - 0xa8], dx
mov edx, 0x49
mov word [ebp - 0x7e], cx
mov word [ebp - 0x78], cx
mov ecx, 0x47
mov word [ebp - 0x54], ax
movzx eax, word [edi + 0x370]
mov byte [ebp - 0xb6], 9
mov byte [ebp - 0xb0], 0x11
mov byte [ebp - 0xaa], 0x11
mov byte [ebp - 0xa4], 0x11
mov word [ebp - 0xa2], dx
mov byte [ebp - 0x9e], 9
mov byte [ebp - 0x98], 0x11
mov byte [ebp - 0x92], 9
mov byte [ebp - 0x8c], 9
mov word [ebp - 0x8a], dx
mov byte [ebp - 0x86], 9
mov byte [ebp - 0x80], 9
mov byte [ebp - 0x7a], 0x11
mov byte [ebp - 0x74], 0x11
mov byte [ebp - 0x6e], 9
mov word [ebp - 0x6c], cx
mov byte [ebp - 0x68], 0x11
mov word [ebp - 0x66], cx
mov byte [ebp - 0x62], 9
mov byte [ebp - 0x5c], 9
mov byte [ebp - 0x56], 0x11
mov word [ebp - 0x52], ax
mov eax, 0xd
mov byte [ebp - 0x50], 0x11
mov word [ebp - 0x4e], ax
mov ecx, 0x42
movzx eax, word [edi + 0x374]
mov word [ebp - 0x4c], ax
mov eax, 0x46
mov word [ebp - 0x48], ax
movzx eax, word [edi + 0x378]
mov word [ebp - 0x46], ax
mov eax, 0x72
mov word [ebp - 0x42], ax
movzx eax, word [edi + 0x37c]
mov word [ebp - 0x40], ax
movzx eax, word [edi + 0x380]
mov word [ebp - 0x3a], ax
movzx eax, word [edi + 0x384]
mov word [ebp - 0x34], ax
mov eax, 0x1b
mov word [ebp - 0x30], ax
movzx eax, word [edi + 0x2e8]
mov word [ebp - 0x2e], ax
lea eax, [ebp - 0x110]
push 0x26
mov word [ebp - 0x3c], cx
mov word [ebp - 0x36], cx
mov ecx, esi
push eax
mov byte [ebp - 0x4a], 9
mov byte [ebp - 0x44], 1
mov byte [ebp - 0x3e], 9
mov byte [ebp - 0x38], 0x11
mov byte [ebp - 0x32], 1
call fcn.005c47a0
lea eax, [ebp - 0x1f4]
push eax
push dword [edi + 0x3c8]
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [edi + 0x278]
lea ecx, [edi + 8]
call fcn.005c4320
mov eax, dword [ebp - 0x1f0]
push ecx
push dword [edi + 0x3c8]
add eax, 7
push 0xffffffffffffffff
push SysReAllocString
push eax
mov eax, dword [ebp - 0x1f4]
add eax, 0x12c
push eax
push 0x16
push 0xff
push str.Find_a_device
push str.__DeviceRescueFindWnd__
call fcn.005c5d10
push 1
push 2
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xff000000
push 0x16
push 0xff
lea ecx, [edi + 8]
mov dword [edi + 0x3cc], eax
call fcn.005b9530
push dword [edi + 0x3cc]
mov ecx, esi
call fcn.005c6150
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0xc8
push 1
push 1
push 0
lea ecx, [edi + 8]
call fcn.005c0a40
push ecx
mov dword [edi + 0x38c], eax
push 0xffffffffffffffff
push 0x12
push 0x12
push 2
push 0xcd
push ecx
push 0x13
push 0x13
push 0x99
push dword [ebp - 0x1fc]
mov ecx, edi
call fcn.00582600
push eax
lea ecx, [edi + 8]
call fcn.005c0240
push 0x186a0
push ecx
push str.Find_next__F3_
push 0xffffffffffffffff
lea ecx, [edi + 8]
mov dword [edi + 0x390], eax
call fcn.005bcaf0
push dword [edi + 0x390]
lea ecx, [edi + 8]
call fcn.005c4370
push 0xff000000
push 0x14
push 0x14
push 1
push 0xe6
lea ecx, [edi + 8]
call fcn.005c1810
push 0x186a0
push ecx
push str.Close_find__Esc_
push 0xffffffffffffffff
lea ecx, [edi + 8]
mov dword [edi + 0x394], eax
call fcn.005bcaf0
mov eax, 0x46
mov byte [ebp - 0x28], 9
mov word [ebp - 0x26], ax
lea ecx, [edi + 8]
movzx eax, word [edi + 0x38c]
mov word [ebp - 0x24], ax
mov eax, 0x72
mov word [ebp - 0x20], ax
movzx eax, word [edi + 0x390]
mov word [ebp - 0x1e], ax
mov eax, 0x1b
mov word [ebp - 0x1a], ax
movzx eax, word [edi + 0x394]
mov word [ebp - 0x18], ax
lea eax, [ebp - 0x28]
push 3
push eax
mov byte [ebp - 0x22], 1
mov byte [ebp - 0x1c], 1
call fcn.005c47a0
push 1
push 1
mov ecx, esi
call fcn.005c3f80
mov ecx, dword [edi]
call fcn.005c6c50
cmp dword [ebp - 0x200], 0
je 0x583eeb
nop word [eax + eax]
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x583ed0
mov ecx, dword [ebp - 0x200]
push 1
push eax
call fcn.005c3f80
push 0
call dword [sym.imp.SETUPAPI.dll_SetupSetNonInteractiveMode]
mov eax, dword [edi + 0x3bc]
mov ecx, edi
push eax
mov dword [edi + 0x3bc], 0
call fcn.00581130
push 0
lea ecx, [ebp - 0x1a0]
call fcn.005d0610
cmp dword [ebp - 0x120], 0
jne 0x583f3f
sub esp, 0xc
mov ecx, edi
push 1
push str.You_seem_to_be_using_DeviceRescue_for_the_first_time_in_this_PC_r_n_r_nDo_you_want_to_create_a_driver_backup_
call fcn.00580fb0
cmp eax, 1
jne 0x583f3f
push eax
mov ecx, edi
call fcn.005800a0
test dword [edi + 0x3c0], 1
jne 0x583f5c
sub esp, 0xc
mov ecx, edi
push 4
push str.Click_a_group_header_to_expand_collapse_it._Double_click_a_devices_line_to_tick_it_out._r_nClick_a_button_in_the_right_pane_to_display_the_associated_menu._Click_again_to_hide_the_menu._r_nUncheck_Show_startup_tooltip_to_disable_this_tip.
call fcn.00580fb0
push 0
mov ecx, edi
call fcn.00580e20
test eax, eax
je 0x5862e7
nop dword [eax]
cmp byte [edi + 0x2b9], 0
je 0x583f9a
sub esp, 0xc
mov ecx, edi
push 1
push str.This_computer_needs_to_be_rebooted_in_order_to_finish_setting_up_one_or_more_devices._r_n_r_nDo_you_want_to_reboot_now_
call fcn.00580fb0
cmp eax, 1
je 0x586404
mov byte [edi + 0x2b9], 0
mov ecx, dword [edi + 0x278]
mov eax, dword [ecx]
mov dword [ebp - 0x1fc], eax
cmp eax, 0xfffffffa
je 0x5862e7
mov edx, dword [ecx + 0x30]
cmp edx, dword [edi]
jne 0x58619f
cmp eax, 0xffffff30
jne 0x583feb
push ecx
push dword [edi + 0x2bc]
mov ecx, dword [edi]
call fcn.005bb420
test eax, eax
jns 0x5862d6
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
jmp 0x5862d6
cmp eax, dword [edi + 0x2e8]
je 0x586426
cmp eax, 0xffffff31
jne 0x58400e
lea ecx, [ebp - 0x1a0]
call fcn.005d05f0
jmp 0x5862d6
cmp eax, 0xfffffff2
jne 0x58408e
mov edx, dword [edi + 0x2bc]
cmp dword [ecx + 0xc], edx
jne 0x58408e
push 2
push 0xffffffffffffffff
push edx
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x204], eax
test eax, eax
js 0x5862d6
push 0xf000
push eax
push 0x102c
push dword [edi + 0x3d0]
mov dword [ebp - 0x14c], 0xf000
call dword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xd
not eax
and eax, 1
inc eax
shl eax, 0xc
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x204]
push 0x102b
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x5862d6
mov edx, dword [edi + 0x2c4]
cmp eax, edx
je 0x5860ff
cmp eax, dword [edi + 0x2d4]
je 0x5860ff
cmp eax, dword [edi + 0x2c8]
je 0x5860ff
cmp eax, dword [edi + 0x2cc]
je 0x5860ff
cmp eax, dword [edi + 0x2d0]
je 0x5860ff
cmp eax, dword [edi + 0x2d8]
je 0x5860ff
cmp eax, dword [edi + 0x2dc]
je 0x5860ff
cmp eax, dword [edi + 0x2e0]
je 0x5860ff
cmp eax, 0xffffffea
jne 0x58426a
mov ecx, dword [ecx + 0xc]
cmp ecx, edx
je 0x5860ff
cmp ecx, dword [edi + 0x2d4]
je 0x5860ff
cmp ecx, dword [edi + 0x2c8]
je 0x5860ff
cmp ecx, dword [edi + 0x2cc]
je 0x5860ff
cmp ecx, dword [edi + 0x2d0]
je 0x5860ff
cmp ecx, dword [edi + 0x2d8]
je 0x5860ff
cmp ecx, dword [edi + 0x2dc]
je 0x5860ff
cmp ecx, dword [edi + 0x2e0]
je 0x5860ff
mov edx, dword [edi + 0x2bc]
cmp ecx, edx
jne 0x58426a
push 2
push 0xffffffffffffffff
push edx
mov ecx, esi
call fcn.005bb4c0
mov edx, eax
mov eax, dword [edi + 0x398]
mov ecx, edx
mov dword [ebp - 0x1fc], edx
sar ecx, 0x1f
and ecx, 0x20
mov dword [ebp - 0x200], eax
add ecx, 0x20
mov dword [ebp - 0x204], ecx
cmp eax, dword [edi + 0x3b8]
jg 0x5841d2
nop
cmp eax, dword [edi + 0x3b0]
je 0x5841bd
push ecx
push eax
mov ecx, esi
call fcn.005bd3f0
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x200], eax
cmp eax, dword [edi + 0x3b8]
jle 0x5841a0
mov edx, dword [ebp - 0x1fc]
test edx, edx
js 0x58421e
push str.Disabled
push 1
push edx
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dc4c0
test al, al
jne 0x58421e
push 0
push str.Disable_device
push dword [edi + 0x39c]
mov ecx, esi
call fcn.005bcd30
mov eax, dword [ebp - 0x1a8]
jmp 0x584238
push 0
push str.Enable_device
push dword [edi + 0x39c]
mov ecx, esi
call fcn.005bcd30
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [edi + 0x39c]
push eax
push eax
push 0
push ecx
push ecx
mov ecx, esi
call fcn.005c56e0
push eax
call dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bbfd0
jmp 0x5862d6
cmp eax, dword [edi + 0x2f4]
jne 0x584284
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
jmp 0x5862d6
cmp eax, dword [edi + 0x2f8]
je 0x5860e1
cmp eax, dword [edi + 0x3b0]
je 0x5860e1
cmp eax, dword [edi + 0x2fc]
jne 0x5842c2
push 0
push ecx
push 2
mov ecx, edi
call fcn.0057ee00
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
jmp 0x5862d6
mov ecx, dword [edi + 0x300]
cmp eax, ecx
jne 0x58431e
push 4
push ecx
mov ecx, esi
call fcn.005bc500
xor ecx, ecx
mov esi, eax
test esi, esi
setne cl
lea ecx, [ecx*4 + 4]
push ecx
push dword [edi + 0x300]
mov ecx, dword [ebp - 0x1f8]
call fcn.005bd3f0
mov ecx, dword [edi + 0x3bc]
mov eax, ecx
or ecx, 1
and eax, 0xfffffffe
test esi, esi
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.00581130
mov esi, dword [ebp - 0x1f8]
jmp 0x5862d6
mov ecx, dword [edi + 0x304]
cmp eax, ecx
jne 0x5843b2
push 4
push ecx
mov ecx, esi
call fcn.005bc500
xor ecx, ecx
mov esi, eax
test esi, esi
setne cl
lea ecx, [ecx*4 + 4]
push ecx
push dword [edi + 0x304]
mov ecx, dword [ebp - 0x1f8]
call fcn.005bd3f0
mov ecx, dword [edi + 0x3bc]
mov eax, ecx
or ecx, 2
and eax, 0xfffffffd
test esi, esi
cmove ecx, eax
push ecx
mov ecx, edi
call fcn.00581130
test byte [edi + 0x3bc], 2
mov eax, 0x40
mov ecx, dword [ebp - 0x1f8]
mov esi, 0x20
cmovne esi, eax
push esi
push dword [edi + 0x308]
call fcn.005bd3f0
push esi
push dword [edi + 0x30c]
mov esi, dword [ebp - 0x1f8]
mov ecx, esi
call fcn.005bd3f0
jmp 0x5862d6
mov ecx, dword [edi + 0x308]
cmp eax, ecx
je 0x5860ce
cmp eax, dword [edi + 0x30c]
je 0x5860cc
mov ecx, dword [edi + 0x310]
cmp eax, ecx
je 0x5860a6
cmp eax, dword [edi + 0x314]
je 0x5860a6
mov ecx, dword [edi + 0x318]
mov dword [ebp - 0x220], ecx
cmp eax, ecx
je 0x585fae
cmp eax, dword [edi + 0x31c]
je 0x585fae
mov edx, dword [edi + 0x320]
cmp eax, edx
je 0x585eef
cmp eax, dword [edi + 0x328]
je 0x585eef
cmp eax, dword [edi + 0x324]
jne 0x584555
xorps xmm0, xmm0
mov dword [ebp - 0x17c], 0
movq qword [ebp - 0x184], xmm0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0
push 0
push 0
push 0x1004
mov byte [ebp - 4], 0x16
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x204], 0
test eax, eax
je 0x5844fb
mov esi, dword [ebp - 0x204]
push esi
mov ecx, edi
call fcn.00580d20
test al, al
je 0x5844ec
mov ecx, dword [edi + 0x3d4]
lea eax, [ebp - 0x184]
push eax
push 0x6ed844
lea edx, [edi + 0x3e8]
call fcn.0057dcc0
test eax, eax
je 0x5844ec
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x14c], 0xf000
push eax
push esi
push 0x102b
push dword [edi + 0x3d0]
mov dword [ebp - 0x150], 0x2000
call dword [sym.imp.USER32.dll_SendMessageW]
inc esi
cmp esi, dword [ebp - 0x200]
jb 0x584492
mov esi, dword [ebp - 0x1f8]
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x204], eax
test eax, eax
je 0x5862d6
ret
invalid
add byte [eax], al
push fcn.005dc430
lea esi, [eax - 4]
mov byte [ebp - 4], 0x17
push dword [esi]
push 0xc
push eax
call fcn.0041e45b
mov ecx, dword [ebp - 0x204]
mov eax, dword [ecx - 4]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
mov esi, dword [ebp - 0x1f8]
add esp, 8
mov byte [ebp - 4], 0x15
jmp 0x5862d6
cmp eax, dword [edi + 0x32c]
jne 0x584638
push 0
push 0
push 0x1004
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x1fc], eax
test ecx, ecx
je 0x5862d6
nop
push 1
push eax
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
push str.Working_properly
lea ecx, [ebp - 0x11c]
call fcn.005dc480
test al, al
je 0x58461a
push str.Disabled
lea ecx, [ebp - 0x11c]
call fcn.005dc480
test al, al
je 0x58461a
push str.Not_present
lea ecx, [ebp - 0x11c]
call fcn.005dc480
test al, al
je 0x58461a
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x14c], 0xf000
push eax
push dword [ebp - 0x1fc]
mov dword [ebp - 0x150], 0x2000
push 0x102b
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp eax, dword [ebp - 0x204]
jb 0x584590
jmp 0x5862d6
cmp eax, dword [edi + 0x330]
je 0x585c4f
cmp eax, dword [edi + 0x3a0]
je 0x585c4f
cmp eax, dword [edi + 0x334]
je 0x585970
cmp eax, dword [edi + 0x3a4]
je 0x585970
cmp eax, dword [edi + 0x348]
je 0x585831
cmp eax, dword [edi + 0x3a8]
je 0x585831
cmp eax, dword [edi + 0x34c]
jne 0x584694
mov ecx, edi
call fcn.0057f400
jmp 0x5862d6
cmp eax, dword [edi + 0x350]
jne 0x5846a8
mov ecx, edi
call fcn.0057f720
jmp 0x5862d6
cmp eax, dword [edi + 0x338]
jne 0x5846bc
mov ecx, edi
call fcn.00580920
jmp 0x5862d6
cmp eax, dword [edi + 0x33c]
jne 0x584719
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.DevicePairingWizard.exe
push 0x624284
push 0
push 0
push 0x25
lea ecx, [ebp - 0x11c]
call fcn.005dbbc0
mov ecx, eax
call fcn.005da780
push 0
push 5
push 0
lea ecx, [ebp - 0x11c]
call fcn.005dc190
xor edx, edx
mov ecx, eax
call fcn.005e2a10
jmp 0x5862d6
cmp eax, dword [edi + 0x340]
je 0x5856bd
cmp eax, dword [edi + 0x398]
je 0x5856bd
cmp eax, dword [edi + 0x344]
jne 0x584adf
push 0xd
push 0
push dword [edi + 0x2c0]
xorps xmm0, xmm0
lea ecx, [ebp - 0x140]
push dword [edi + 0x2bc]
movups xmmword [ebp - 0x140], xmm0
push esi
movups xmmword [ebp - 0x130], xmm0
call fcn.005b8800
mov byte [ebp - 4], 0x1c
mov ecx, esi
mov byte [edi + 0x2b8], 0
push dword [edi + 0x2bc]
call fcn.005bb7f0
push eax
lea ecx, [edi + 0x9c4]
call fcn.00404210
mov eax, dword [edi + 0x9c4]
test eax, eax
je 0x585698
cmp dword [eax], 0
je 0x585698
sub esp, 8
lea ecx, [edi + 0x6c8]
xor eax, eax
mov dword [ebp - 0x200], eax
push eax
push str.Cancel
push eax
push 0xffffffffffffffb0
sub esp, 0xc
push 0x28a
push dword [edi]
push str.Preparing...
call fcn.005b6870
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
mov ecx, eax
call fcn.005b62b0
mov eax, dword [edi + 0x9c4]
lea ecx, [edi + 0x9c4]
mov eax, dword [eax]
mov dword [ebp - 0x1fc], eax
test eax, eax
jle 0x584a85
lea edx, [eax*4]
mov eax, dword [ecx]
mov ecx, edi
mov dword [ebp - 0x204], edx
push dword [eax + edx]
call fcn.00580d20
test al, al
je 0x584a44
mov eax, dword [edi + 0x9c4]
xorps xmm0, xmm0
add eax, dword [ebp - 0x204]
mov ecx, esi
push 0
push 0
mov dword [ebp - 0x160], 0
push dword [eax]
movq qword [ebp - 0x178], xmm0
push dword [edi + 0x2bc]
mov dword [ebp - 0x170], 0
call fcn.005bb510
push eax
lea ecx, [ebp - 0x178]
call fcn.005dc570
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x1d
call fcn.005dc190
push eax
push str.Select_driver_INF_file_for
lea ecx, [ebp - 0x16c]
call fcn.005dc200
mov eax, dword [edi + 0x9c4]
lea ecx, [ebp - 0x16c]
mov eax, dword [eax]
push eax
sub eax, dword [ebp - 0x1fc]
inc eax
push eax
call fcn.005dc190
push eax
push str.Changing_driver_for
mov ecx, edi
call fcn.0057ef80
nop dword [eax]
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x5848d0
cmp byte [edi + 0x2b8], al
jne 0x584a60
lea ecx, [edi + 0x6c8]
call fcn.005b6bd0
push eax
push 0x63448c
push 0
push 0x1000
push str.INF_files__.inf_
push 0
lea ecx, [ebp - 0x16c]
call fcn.005dc190
mov edx, eax
lea ecx, [ebp - 0x11c]
call fcn.005e1e60
test al, al
je 0x584a35
mov eax, dword [edi + 0x9c4]
mov ecx, esi
add eax, dword [ebp - 0x204]
push 7
push dword [eax]
push dword [edi + 0x2bc]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x16c]
call fcn.005dc1c0
lea eax, [ebp - 0x160]
push eax
push 0
lea ecx, [ebp - 0x11c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x16c]
call fcn.005dc190
push eax
push dword [edi + 0x3c8]
call dword [sym.imp.newdev.dll_UpdateDriverForPlugAndPlayDevicesW]
test eax, eax
jne 0x5849e8
sub esp, 0xc
mov ecx, edi
push 1
push str.This_INF_file_contains_a_valid_driver_for_your_device__but_the_one_currently_installed_is_a_better_match._r_n_r_nDo_you_want_to_force_installing_this_driver_
call fcn.00580fb0
test eax, eax
je 0x5849c8
lea eax, [ebp - 0x160]
push eax
push 1
lea ecx, [ebp - 0x11c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x16c]
call fcn.005dc190
push eax
push dword [edi + 0x3c8]
call dword [sym.imp.newdev.dll_UpdateDriverForPlugAndPlayDevicesW]
test eax, eax
jne 0x5849e8
push ecx
push str._could_not_be_changed.
lea ecx, [ebp - 0x178]
call fcn.005dc190
push eax
push str.The_driver_for
mov ecx, edi
call fcn.0057ef30
jmp 0x584a20
push ecx
push str._was_successfully_changed.
lea ecx, [ebp - 0x178]
call fcn.005dc190
push eax
push str.The_driver_for
mov ecx, edi
call fcn.0057ef30
inc dword [ebp - 0x200]
cmp dword [ebp - 0x160], 0
je 0x584a20
mov byte [edi + 0x2b9], 1
nop dword [eax]
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x584a20
cmp byte [edi + 0x2b8], al
jne 0x584a60
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x1c
call fcn.005dc430
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
test eax, eax
jle 0x584a6f
lea ecx, [edi + 0x9c4]
jmp 0x584804
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x1c
call fcn.005dc430
cmp dword [ebp - 0x200], 0
je 0x584a85
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
push 0x628f54
push 1
push str.Operation_complete._Results_are_displayed_in_the_list_above.
push 0x64
lea ecx, [edi + 0x6c8]
call fcn.005b66e0
mov ecx, eax
call fcn.005b6150
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
je 0x585679
nop word [eax + eax]
cmp byte [edi + 0x2b8], 0
jne 0x585679
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x584ac0
jmp 0x585679
cmp eax, dword [edi + 0x354]
jne 0x584d4f
push 0xd
push 0
push dword [edi + 0x2c0]
xorps xmm0, xmm0
lea ecx, [ebp - 0x140]
push dword [edi + 0x2bc]
movups xmmword [ebp - 0x140], xmm0
push esi
movups xmmword [ebp - 0x130], xmm0
call fcn.005b8800
sub esp, 0xc
mov byte [ebp - 4], 0x1e
mov ecx, edi
push 1
push str.Are_you_sure_you_want_to_disable_the_selected_device_s__
call fcn.00580fb0
test eax, eax
jne 0x584b45
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
jmp 0x5862d6
mov byte [edi + 0x2b8], 0
mov ecx, esi
push dword [edi + 0x2bc]
call fcn.005bb7f0
push eax
lea ecx, [edi + 0x9c4]
call fcn.00404210
mov eax, dword [edi + 0x9c4]
test eax, eax
je 0x585698
cmp dword [eax], 0
je 0x585698
sub esp, 8
lea ecx, [edi + 0x6c8]
xor eax, eax
mov dword [ebp - 0x1fc], eax
push eax
push str.Cancel
push eax
push 0xffffffffffffffb0
sub esp, 0xc
push 0x28a
push dword [edi]
push str.Preparing...
call fcn.005b6870
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
mov ecx, eax
call fcn.005b62b0
mov eax, dword [edi + 0x9c4]
lea ecx, [edi + 0x9c4]
mov eax, dword [eax]
mov dword [ebp - 0x200], eax
test eax, eax
jle 0x584cf6
nop dword [eax + eax]
lea edx, [eax*4]
mov eax, dword [ecx]
mov ecx, edi
mov dword [ebp - 0x204], edx
push dword [eax + edx]
call fcn.00580d20
test al, al
je 0x584cc5
mov eax, dword [edi + 0x9c4]
mov ecx, esi
add eax, dword [ebp - 0x204]
push 0
push dword [eax]
push dword [edi + 0x2bc]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
mov eax, dword [edi + 0x9c4]
lea ecx, [ebp - 0x11c]
mov eax, dword [eax]
push eax
sub eax, dword [ebp - 0x200]
inc eax
push eax
call fcn.005dc190
push eax
push 0x6346dc
mov ecx, edi
call fcn.0057ef80
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x584c53
mov eax, dword [edi + 0x9c4]
mov ecx, edi
add eax, dword [ebp - 0x204]
push 0
push dword [eax]
call fcn.0057f1a0
push ecx
lea ecx, [ebp - 0x11c]
push 0
test al, al
je 0x584c9e
push str._was_successfully_disabled.
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0057ef30
inc dword [ebp - 0x1fc]
jmp 0x584cb0
push str._could_not_be_disabled.
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0057ef30
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x584cb0
cmp byte [edi + 0x2b8], al
jne 0x584ce0
mov eax, dword [ebp - 0x200]
lea ecx, [edi + 0x9c4]
dec eax
mov dword [ebp - 0x200], eax
test eax, eax
jg 0x584be0
cmp dword [ebp - 0x1fc], 0
je 0x584cf6
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
push 0x628f54
push 1
push str.Operation_complete._Results_are_displayed_in_the_list_above.
push 0x64
lea ecx, [edi + 0x6c8]
call fcn.005b66e0
mov ecx, eax
call fcn.005b6150
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
je 0x585679
nop word [eax + eax]
cmp byte [edi + 0x2b8], 0
jne 0x585679
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x584d30
jmp 0x585679
mov eax, dword [edi + 0x278]
mov eax, dword [eax]
mov dword [ebp - 0x204], eax
cmp eax, dword [edi + 0x358]
jne 0x584fcf
push 0xd
push 0
push dword [edi + 0x2c0]
xorps xmm0, xmm0
lea ecx, [ebp - 0x140]
push dword [edi + 0x2bc]
movups xmmword [ebp - 0x140], xmm0
push esi
movups xmmword [ebp - 0x130], xmm0
call fcn.005b8800
sub esp, 0xc
mov byte [ebp - 4], 0x1f
mov ecx, edi
push 1
push str.Are_you_sure_you_want_to_enable_the_selected_device_s__
call fcn.00580fb0
test eax, eax
jne 0x584dc3
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
jmp 0x5862d6
mov byte [edi + 0x2b8], 0
mov ecx, esi
push dword [edi + 0x2bc]
call fcn.005bb7f0
push eax
lea ecx, [edi + 0x9c4]
call fcn.00404210
mov eax, dword [edi + 0x9c4]
test eax, eax
je 0x585698
cmp dword [eax], 0
je 0x585698
sub esp, 8
lea ecx, [edi + 0x6c8]
xor eax, eax
mov dword [ebp - 0x200], eax
push eax
push str.Cancel
push eax
push 0xffffffffffffffb0
sub esp, 0xc
push 0x28a
push dword [edi]
push str.Preparing...
call fcn.005b6870
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
mov ecx, eax
call fcn.005b62b0
mov eax, dword [edi + 0x9c4]
lea ecx, [edi + 0x9c4]
mov eax, dword [eax]
mov dword [ebp - 0x1fc], eax
test eax, eax
jle 0x584f77
nop dword [eax]
lea edx, [eax*4]
mov eax, dword [ecx]
mov ecx, edi
mov dword [ebp - 0x204], edx
push dword [eax + edx]
call fcn.00580d20
test al, al
je 0x584f46
mov eax, dword [edi + 0x9c4]
mov ecx, esi
add eax, dword [ebp - 0x204]
push 0
push dword [eax]
push dword [edi + 0x2bc]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
mov eax, dword [edi + 0x9c4]
lea ecx, [ebp - 0x11c]
mov eax, dword [eax]
push eax
sub eax, dword [ebp - 0x1fc]
inc eax
push eax
call fcn.005dc190
push eax
push 0x6347d0
mov ecx, edi
call fcn.0057ef80
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x584ed3
mov eax, dword [edi + 0x9c4]
mov ecx, dword [ebp - 0x1fc]
push 1
push dword [eax + ecx*4]
mov ecx, edi
call fcn.0057f1a0
push ecx
lea ecx, [ebp - 0x11c]
push 0
test al, al
je 0x584f1f
push str._was_successfully_enabled.
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0057ef30
inc dword [ebp - 0x200]
jmp 0x584f31
push str._could_not_be_enabled.
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0057ef30
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x584f31
cmp byte [edi + 0x2b8], al
jne 0x584f61
mov eax, dword [ebp - 0x1fc]
lea ecx, [edi + 0x9c4]
dec eax
mov dword [ebp - 0x1fc], eax
test eax, eax
jg 0x584e60
cmp dword [ebp - 0x200], 0
je 0x584f77
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
push 0x628f54
push 1
push str.Operation_complete._Results_are_displayed_in_the_list_above.
push 0x64
lea ecx, [edi + 0x6c8]
call fcn.005b66e0
mov ecx, eax
call fcn.005b6150
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
je 0x585679
nop dword [eax + eax]
cmp byte [edi + 0x2b8], 0
jne 0x585679
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x584fb0
jmp 0x585679
cmp eax, dword [edi + 0x39c]
jne 0x585065
push 2
push 0xffffffffffffffff
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x204], eax
test eax, eax
js 0x5852d0
push str.Disabled
push 1
push eax
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dc4c0
mov byte [ebp - 0x224], al
mov ecx, edi
push dword [ebp - 0x224]
push dword [ebp - 0x204]
call fcn.0057f1a0
mov ecx, edi
test al, al
je 0x585051
push dword [edi + 0x3bc]
call fcn.00581130
jmp 0x5862d6
sub esp, 0xc
push 0
push str.Sorry__the_requested_device_state_could_not_be_set.
call fcn.00580fb0
jmp 0x5862d6
cmp eax, dword [edi + 0x35c]
je 0x5853be
cmp eax, dword [edi + 0x3ac]
je 0x5853be
cmp eax, dword [edi + 0x360]
jne 0x5850a2
push 2
push 0xffffffffffffffff
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb4c0
test eax, eax
js 0x5852d0
push 0
jmp 0x5850c5
cmp eax, dword [edi + 0x364]
jne 0x5850f2
push 2
push 0xffffffffffffffff
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb4c0
test eax, eax
js 0x5852d0
push 7
push eax
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dc190
mov ecx, eax
call fcn.005b0bf0
jmp 0x5862d6
cmp eax, dword [edi + 0x368]
je 0x585326
cmp eax, dword [edi + 0x3b8]
je 0x585326
mov edx, dword [edi + 0x36c]
cmp eax, edx
je 0x5852a3
cmp eax, dword [edi + 0x370]
je 0x5852a3
mov eax, dword [edi + 0x278]
mov eax, dword [eax]
cmp eax, dword [edi + 0x374]
je 0x585254
cmp eax, dword [edi + 0x3b4]
je 0x585254
cmp eax, dword [edi + 0x378]
jne 0x58515d
push 1
push 1
lea ecx, [edi + 8]
call fcn.005c3f80
jmp 0x5861dc
cmp eax, dword [edi + 0x37c]
jne 0x585197
push dword [edi + 0x38c]
lea ecx, [edi + 8]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
lea ecx, [ebp - 0x11c]
call fcn.005dbeb0
test al, al
jne 0x5861dc
jmp 0x586202
cmp eax, dword [edi + 0x380]
jne 0x5851f9
push dword [edi + 0x2bc]
mov ecx, dword [ebp - 0x1f8]
call fcn.005bb7f0
push eax
lea ecx, [edi + 0x9c4]
call fcn.00404210
mov eax, dword [edi + 0x9c4]
test eax, eax
je 0x5851dd
cmp dword [eax], 0
je 0x5851dd
mov ecx, edi
call fcn.00580390
mov esi, dword [ebp - 0x1f8]
jmp 0x5862d6
sub esp, 0xc
mov ecx, edi
push 0
push str.Please_check_one_or_more_items_before_using_this_feature.
call fcn.00580fb0
mov esi, dword [ebp - 0x1f8]
jmp 0x5862d6
cmp eax, dword [edi + 0x384]
jne 0x58520f
push 2
mov ecx, edi
call fcn.005800a0
jmp 0x5862d6
mov ecx, dword [edi + 0x2e4]
cmp eax, ecx
jne 0x5862d6
push 4
push ecx
mov ecx, esi
call fcn.005bc500
test eax, eax
je 0x585248
sub esp, 0xc
mov ecx, edi
push 4
push str.Click_a_group_header_to_expand_collapse_it._Double_click_a_devices_line_to_tick_it_out_r_nClick_a_button_in_the_right_pane_to_display_the_associated_menu._Click_again_to_hide_the_menu
call fcn.00580fb0
and dword [edi + 0x3c0], 0xfffffffe
jmp 0x5862d6
or dword [edi + 0x3c0], 1
jmp 0x5862d6
push 2
push 0xffffffffffffffff
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb4c0
mov ecx, edi
test eax, eax
jns 0x58527f
sub esp, 0xc
push 0
push str.Please_select_one_item_before_using_this_feature._To_select_an_item__click_one_row
call fcn.00580fb0
jmp 0x5862d6
push eax
call fcn.0057f0d0
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585285
push dword [edi + 0x3c8]
call dword [sym.imp.USER32.dll_BringWindowToTop]
jmp 0x5862d6
mov eax, dword [edi + 0x278]
xor ecx, ecx
push 2
push 0xffffffffffffffff
push dword [edi + 0x2bc]
cmp dword [eax], edx
mov eax, 7
cmove ecx, eax
mov dword [ebp - 0x204], ecx
mov ecx, esi
call fcn.005bb4c0
test eax, eax
jns 0x5852e6
sub esp, 0xc
mov ecx, edi
push 0
push str.Please_select_one_item_before_using_this_feature._To_select_an_item__click_one_row
call fcn.00580fb0
jmp 0x5862d6
push dword [ebp - 0x204]
mov ecx, esi
push eax
push dword [edi + 0x2bc]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
push ecx
push 0
lea ecx, [ebp - 0x11c]
call fcn.005dc190
mov ecx, dword [edi + 0x3c8]
mov edx, eax
call fcn.005cd9a0
jmp 0x5862d6
push 2
push 0xffffffffffffffff
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb4c0
mov dword [ebp - 0x204], eax
test eax, eax
js 0x5852d0
push 7
push eax
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
push 0
push dword [ebp - 0x204]
mov ecx, esi
push dword [edi + 0x2bc]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x16c]
call fcn.005dc1c0
sub esp, 0xc
lea ecx, [ebp - 0x16c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62438c
call fcn.005dc190
push eax
lea ecx, [ebp - 0x11c]
call fcn.005da510
mov ecx, eax
call fcn.005dc190
mov ecx, eax
call fcn.005b0bf0
jmp 0x5862d6
mov esi, dword [edi + 0x3ac]
lea ecx, [ebp - 0x140]
push 0xd
push 0
push dword [edi + 0x2c0]
xorps xmm0, xmm0
push dword [edi + 0x2bc]
movups xmmword [ebp - 0x140], xmm0
push dword [ebp - 0x1f8]
movups xmmword [ebp - 0x130], xmm0
call fcn.005b8800
cmp dword [ebp - 0x204], esi
mov esi, dword [ebp - 0x1f8]
mov ecx, esi
mov byte [ebp - 4], 0x20
mov byte [edi + 0x2b8], 0
mov eax, dword [edi + 0x2bc]
push eax
jne 0x58541f
call fcn.005bb360
jmp 0x585424
call fcn.005bb7f0
mov ecx, eax
push ecx
lea ecx, [edi + 0x9c4]
call fcn.00404210
mov eax, dword [edi + 0x9c4]
test eax, eax
je 0x585698
mov ecx, dword [eax]
test ecx, ecx
je 0x585698
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp ecx, 1
mov eax, 0x624a00
push 0
mov ecx, 0x633f74
push 0
cmovne eax, ecx
lea ecx, [ebp - 0x11c]
push eax
push str.Are_you_sure_you_want_to_restart_the_selected_device
call fcn.005dc200
sub esp, 0xc
lea ecx, [ebp - 0x11c]
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00580fb0
test eax, eax
jne 0x5854af
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
jmp 0x5862d6
sub esp, 8
lea ecx, [edi + 0x6c8]
xor eax, eax
mov dword [ebp - 0x200], eax
push eax
push str.Cancel
push eax
push 0xffffffffffffffb0
sub esp, 0xc
push 0x28a
push dword [edi]
push str.Preparing...
call fcn.005b6870
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
mov ecx, eax
call fcn.005b62b0
mov eax, dword [edi + 0x9c4]
lea ecx, [edi + 0x9c4]
mov eax, dword [eax]
mov dword [ebp - 0x1fc], eax
test eax, eax
jle 0x585636
nop
lea edx, [eax*4]
mov eax, dword [ecx]
mov ecx, edi
mov dword [ebp - 0x204], edx
push dword [eax + edx]
call fcn.00580d20
test al, al
je 0x585605
mov eax, dword [edi + 0x9c4]
mov ecx, esi
add eax, dword [ebp - 0x204]
push 0
push dword [eax]
push dword [edi + 0x2bc]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
mov eax, dword [edi + 0x9c4]
lea ecx, [ebp - 0x11c]
mov eax, dword [eax]
push eax
sub eax, dword [ebp - 0x1fc]
inc eax
push eax
call fcn.005dc190
push eax
push str.Restarting
mov ecx, edi
call fcn.0057ef80
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585583
cmp byte [edi + 0x2b8], al
jne 0x585620
mov eax, dword [edi + 0x9c4]
mov ecx, dword [ebp - 0x1fc]
push dword [eax + ecx*4]
mov ecx, edi
call fcn.0057f1f0
push ecx
lea ecx, [ebp - 0x11c]
push 0
test al, al
je 0x5855d9
push str._was_successfully_restarted.
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0057ef30
inc dword [ebp - 0x200]
jmp 0x5855f0
push str._could_not_be_restarted.
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0057ef30
nop dword [eax + eax]
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x5855f0
cmp byte [edi + 0x2b8], al
jne 0x585620
mov eax, dword [ebp - 0x1fc]
lea ecx, [edi + 0x9c4]
dec eax
mov dword [ebp - 0x1fc], eax
test eax, eax
jg 0x585510
cmp dword [ebp - 0x200], 0
je 0x585636
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
push 0x628f54
push 1
push str.Operation_complete._Results_are_displayed_in_the_list_above.
push 0x64
lea ecx, [edi + 0x6c8]
call fcn.005b66e0
mov ecx, eax
call fcn.005b6150
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
je 0x585679
cmp byte [edi + 0x2b8], 0
jne 0x585679
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585663
lea ecx, [edi + 0x6c8]
call fcn.005b6b30
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
jmp 0x5862d6
sub esp, 0xc
mov ecx, edi
push 0
push str.Please_check_one_or_more_items_before_using_this_feature.
call fcn.00580fb0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
jmp 0x5862d6
mov esi, dword [edi + 0x398]
lea ecx, [ebp - 0x140]
push 0xd
push 0
mov byte [edi + 0x2b8], 0
xorps xmm0, xmm0
push dword [edi + 0x2c0]
movups xmmword [ebp - 0x140], xmm0
push dword [edi + 0x2bc]
movups xmmword [ebp - 0x130], xmm0
push dword [ebp - 0x1f8]
call fcn.005b8800
cmp dword [ebp - 0x1fc], esi
mov esi, dword [ebp - 0x1f8]
mov ecx, esi
mov byte [ebp - 4], 0x1b
mov eax, dword [edi + 0x2bc]
push eax
jne 0x58571e
call fcn.005bb360
jmp 0x585723
call fcn.005bb7f0
lea ecx, [edi + 0x9c4]
push eax
call fcn.00404210
mov eax, dword [edi + 0x9c4]
lea ecx, [edi + 0x9c4]
test eax, eax
je 0x585698
mov eax, dword [eax]
mov dword [ebp - 0x204], eax
test eax, eax
je 0x585698
mov dword [ebp - 0x200], 0
jle 0x5857e6
mov esi, eax
mov eax, dword [ecx]
mov ecx, edi
push dword [eax + esi*4]
call fcn.00580d20
test al, al
je 0x5857d5
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0
push eax
push 0
lea eax, [edi + 0x3e8]
push eax
push dword [edi + 0x3d4]
push dword [edi + 0x3c8]
call dword [sym.imp.newdev.dll_DiShowUpdateDevice]
neg eax
sbb eax, eax
neg eax
add dword [ebp - 0x200], eax
cmp dword [ebp - 0x120], 0
je 0x5857c0
mov byte [edi + 0x2b9], 1
nop dword [eax]
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x5857c0
cmp byte [edi + 0x2b8], al
jne 0x5857e0
dec esi
lea ecx, [edi + 0x9c4]
test esi, esi
jg 0x585765
mov esi, dword [ebp - 0x1f8]
push dword [edi + 0x3c8]
call dword [sym.imp.USER32.dll_BringWindowToTop]
cmp dword [ebp - 0x200], 0
je 0x585810
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
nop dword [eax + eax]
push 3
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585810
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
jmp 0x5862d6
mov esi, dword [edi + 0x3a8]
lea ecx, [ebp - 0x140]
push 0xd
push 0
push dword [edi + 0x2c0]
xorps xmm0, xmm0
push dword [edi + 0x2bc]
movups xmmword [ebp - 0x140], xmm0
push dword [ebp - 0x1f8]
movups xmmword [ebp - 0x130], xmm0
call fcn.005b8800
mov ecx, dword [ebp - 0x1f8]
mov byte [ebp - 4], 0x1a
mov byte [edi + 0x2b8], 0
mov eax, dword [edi + 0x2bc]
push eax
cmp dword [ebp - 0x1fc], esi
jne 0x585890
call fcn.005bb360
jmp 0x585895
call fcn.005bb7f0
push eax
lea ecx, [edi + 0x9c4]
call fcn.00404210
mov eax, dword [edi + 0x9c4]
test eax, eax
je 0x585945
mov ecx, dword [eax]
test ecx, ecx
je 0x585945
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp ecx, 1
mov eax, 0x624a00
push 0
mov ecx, 0x633f74
push 0
cmovne eax, ecx
lea ecx, [ebp - 0x11c]
push eax
push str.Are_you_sure_you_want_to_reinstall_the_selected_device
call fcn.005dc200
sub esp, 0xc
lea ecx, [ebp - 0x11c]
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00580fb0
test eax, eax
jne 0x585924
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
mov esi, dword [ebp - 0x1f8]
jmp 0x5862d6
mov ecx, edi
call fcn.00580630
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
mov esi, dword [ebp - 0x1f8]
jmp 0x5862d6
sub esp, 0xc
mov ecx, edi
push 0
push str.Please_check_one_or_more_items_before_using_this_feature.
call fcn.00580fb0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
mov esi, dword [ebp - 0x1f8]
jmp 0x5862d6
mov eax, dword [edi + 0x278]
lea ecx, [ebp - 0x140]
push 0xd
push 0
xorps xmm0, xmm0
mov edi, dword [eax]
mov eax, dword [ebp - 0x208]
movups xmmword [ebp - 0x140], xmm0
movups xmmword [ebp - 0x130], xmm0
mov esi, dword [eax + 0x3a4]
push dword [eax + 0x2c0]
push dword [eax + 0x2bc]
push dword [ebp - 0x1f8]
call fcn.005b8800
mov eax, dword [ebp - 0x208]
xor ecx, ecx
mov byte [ebp - 4], 0x19
cmp edi, esi
mov esi, dword [ebp - 0x1f8]
mov dword [ebp - 0x200], ecx
mov ecx, esi
mov byte [eax + 0x2b8], 0
mov eax, dword [eax + 0x2bc]
push eax
jne 0x5859e9
call fcn.005bb360
jmp 0x5859ee
call fcn.005bb7f0
mov edi, dword [ebp - 0x208]
mov ecx, eax
push ecx
lea ecx, [edi + 0x9c4]
call fcn.00404210
mov eax, dword [edi + 0x9c4]
test eax, eax
je 0x585698
mov ecx, dword [eax]
test ecx, ecx
je 0x585698
cmp ecx, 1
mov eax, str.device
mov ecx, str.devices
cmovne eax, ecx
lea ecx, [ebp - 0x11c]
push eax
call fcn.005dc510
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._after_this_operation._r_n_r_nAre_you_sure_you_want_to_proceed_
lea ecx, [ebp - 0x11c]
call fcn.005dc190
push eax
push str._drivers_and_also_remove_them_from_the_driver_store.You_may_need_to_install_a_new_driver_for_the_selected
lea ecx, [ebp - 0x11c]
call fcn.005dc190
push eax
push str.This_will_uninstall_the_selected
lea ecx, [ebp - 0x11c]
call fcn.005dc200
sub esp, 0xc
lea ecx, [ebp - 0x11c]
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00580fb0
test eax, eax
jne 0x585aa6
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
jmp 0x5862d6
sub esp, 8
lea ecx, [edi + 0x6c8]
push 0
push str.Cancel
push 0
push 0xffffffffffffffb0
sub esp, 0xc
push 0x28a
push dword [edi]
push str.Preparing_to_remove_drivers
call fcn.005b6870
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
mov ecx, eax
call fcn.005b62b0
mov eax, dword [edi + 0x9c4]
lea edx, [edi + 0x9c4]
mov ecx, dword [eax]
mov dword [ebp - 0x1fc], ecx
test ecx, ecx
jle 0x585bf7
nop
mov eax, dword [edx]
push 0
push dword [eax + ecx*4]
mov ecx, esi
push dword [edi + 0x2bc]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
mov eax, dword [edi + 0x9c4]
lea ecx, [ebp - 0x11c]
mov eax, dword [eax]
push eax
sub eax, dword [ebp - 0x1fc]
inc eax
push eax
call fcn.005dc190
push eax
push str.Removing_driver_for
mov ecx, edi
call fcn.0057ef80
nop dword [eax]
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585b50
cmp byte [edi + 0x2b8], al
jne 0x585be1
mov eax, dword [edi + 0x9c4]
mov ecx, dword [ebp - 0x1fc]
push dword [eax + ecx*4]
mov ecx, edi
call fcn.0057f230
movzx ecx, al
add dword [ebp - 0x200], ecx
push ecx
lea ecx, [ebp - 0x11c]
test al, al
jne 0x585b9a
push str._could_not_be_uninstalled.
jmp 0x585b9f
push str._was_successfully_uninstalled.
call fcn.005dc190
push eax
push str.The_driver_for
mov ecx, edi
call fcn.0057ef30
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585bb1
cmp byte [edi + 0x2b8], al
jne 0x585be1
mov ecx, dword [ebp - 0x1fc]
lea edx, [edi + 0x9c4]
dec ecx
mov dword [ebp - 0x1fc], ecx
test ecx, ecx
jg 0x585b00
cmp dword [ebp - 0x200], 0
je 0x585bf7
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
push 0x628f54
push 1
push str.Operation_complete._Results_are_displayed_in_the_list_above.
push 0x64
lea ecx, [edi + 0x6c8]
call fcn.005b66e0
mov ecx, eax
call fcn.005b6150
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
je 0x585679
nop dword [eax + eax]
cmp byte [edi + 0x2b8], 0
jne 0x585679
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585c30
jmp 0x585679
mov esi, dword [edi + 0x3a0]
lea ecx, [ebp - 0x140]
push 0xd
push 0
push dword [edi + 0x2c0]
xorps xmm0, xmm0
push dword [edi + 0x2bc]
movups xmmword [ebp - 0x140], xmm0
push dword [ebp - 0x1f8]
movups xmmword [ebp - 0x130], xmm0
call fcn.005b8800
xor eax, eax
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x1fc], esi
mov esi, dword [ebp - 0x1f8]
mov ecx, esi
mov byte [edi + 0x2b8], 0
mov dword [ebp - 0x200], eax
mov eax, dword [edi + 0x2bc]
push eax
jne 0x585cb8
call fcn.005bb360
jmp 0x585cbd
call fcn.005bb7f0
mov ecx, eax
push ecx
lea ecx, [edi + 0x9c4]
call fcn.00404210
mov eax, dword [edi + 0x9c4]
test eax, eax
je 0x585698
mov ecx, dword [eax]
test ecx, ecx
je 0x585698
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp ecx, 1
mov eax, 0x624a00
push 0
mov ecx, 0x633f74
push 0
cmovne eax, ecx
lea ecx, [ebp - 0x11c]
push eax
push str.Are_you_sure_you_want_to_uninstall_the_selected_device
call fcn.005dc200
sub esp, 0xc
lea ecx, [ebp - 0x11c]
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00580fb0
test eax, eax
jne 0x585d48
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.005b8790
jmp 0x5862d6
sub esp, 8
lea ecx, [edi + 0x6c8]
push 0
push str.Cancel
push 0
push 0xffffffffffffffb0
sub esp, 0xc
push 0x28a
push dword [edi]
push str.Preparing_to_uninstall
call fcn.005b6870
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
mov ecx, eax
call fcn.005b62b0
mov eax, dword [edi + 0x9c4]
lea edx, [edi + 0x9c4]
mov ecx, dword [eax]
mov dword [ebp - 0x1fc], ecx
test ecx, ecx
jle 0x585e96
mov eax, dword [edx]
push 0
push dword [eax + ecx*4]
mov ecx, esi
push dword [edi + 0x2bc]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
mov eax, dword [edi + 0x9c4]
lea ecx, [ebp - 0x11c]
mov eax, dword [eax]
push eax
sub eax, dword [ebp - 0x1fc]
inc eax
push eax
call fcn.005dc190
push eax
push str.Uninstalling
mov ecx, edi
call fcn.0057ef80
nop word [eax + eax]
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585df0
cmp byte [edi + 0x2b8], al
jne 0x585e80
mov eax, dword [edi + 0x9c4]
mov ecx, dword [ebp - 0x1fc]
push dword [eax + ecx*4]
mov ecx, edi
call fcn.005808a0
movzx ecx, al
add dword [ebp - 0x200], ecx
push ecx
lea ecx, [ebp - 0x11c]
push 0
test al, al
jne 0x585e3c
push str._could_not_be_uninstalled.
jmp 0x585e41
push str._was_successfully_uninstalled.
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0057ef30
nop
push 1
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585e50
cmp byte [edi + 0x2b8], al
jne 0x585e80
mov ecx, dword [ebp - 0x1fc]
lea edx, [edi + 0x9c4]
dec ecx
mov dword [ebp - 0x1fc], ecx
test ecx, ecx
jg 0x585da1
cmp dword [ebp - 0x200], 0
je 0x585e96
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
push 0x628f54
push 1
push str.Operation_complete._Results_are_displayed_in_the_list_above.
push 0x64
lea ecx, [edi + 0x6c8]
call fcn.005b66e0
mov ecx, eax
call fcn.005b6150
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
je 0x585679
nop word [eax + eax]
cmp byte [edi + 0x2b8], 0
jne 0x585679
push 2
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x585ed0
jmp 0x585679
push 0
push 0
cmp eax, edx
mov ecx, str.Not_present
mov eax, str.Disabled
push 0x1004
push dword [edi + 0x3d0]
cmovne ecx, eax
mov dword [ebp - 0x204], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x200], eax
test ecx, ecx
je 0x5862d6
push 1
push eax
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
push dword [ebp - 0x204]
lea ecx, [ebp - 0x11c]
call fcn.005dc4c0
test al, al
je 0x585f94
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x14c], 0xf000
push eax
push dword [ebp - 0x200]
mov dword [ebp - 0x150], 0x2000
push 0x102b
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp eax, dword [ebp - 0x1fc]
jb 0x585f31
jmp 0x5862d6
test byte [edi + 0x3bc], 2
jne 0x5862d6
push 2
push 1
push 0x100c
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x200], eax
test eax, eax
js 0x5852d0
push 0
push 0
push 0x1004
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [ebp - 0x200]
mov ecx, dword [edi + 0x3d0]
mov dword [ebp - 0x204], eax
call fcn.005c9b10
mov dword [ebp - 0x21c], eax
xor eax, eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x204], eax
jbe 0x5862d6
mov esi, dword [ebp - 0x1fc]
nop word [eax + eax]
mov ecx, dword [edi + 0x3d0]
mov edx, eax
call fcn.005c9b10
cmp eax, dword [ebp - 0x21c]
jne 0x586086
cmp esi, dword [ebp - 0x220]
mov ecx, 0x2000
mov eax, 0x1000
mov dword [ebp - 0x14c], 0xf000
cmove eax, ecx
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x200]
push 0x102b
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp eax, dword [ebp - 0x204]
jb 0x586030
mov esi, dword [ebp - 0x1f8]
jmp 0x5862d6
mov eax, dword [edi + 0x278]
push ecx
push 0xffffffffffffffff
push 0
cmp dword [eax], ecx
mov ecx, esi
sete al
movzx eax, al
push eax
push dword [edi + 0x2bc]
call fcn.005bba40
jmp 0x5862d6
cmp eax, ecx
sete al
mov ecx, edi
movzx eax, al
push eax
call fcn.0057ebe0
jmp 0x5862d6
push 0
push ecx
push 0
mov ecx, edi
call fcn.0057ee00
push dword [edi + 0x3bc]
mov ecx, edi
call fcn.00581130
jmp 0x5862d6
mov ecx, dword [edi + 0x278]
mov eax, dword [ecx]
mov dword [ebp - 0x200], eax
cmp eax, 0xffffffea
jne 0x58611b
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x200], eax
cmp dword [edi + 0x388], eax
jne 0x58614e
xorps xmm1, xmm1
lea ecx, [ebp - 0x1a0]
call fcn.005d05a0
movsd xmm1, qword [0x6edba0]
comisd xmm1, xmm0
jbe 0x58614e
mov dword [edi + 0x388], 0
jmp 0x5862d6
push ecx
mov ecx, edi
call fcn.0057ecb0
mov ecx, dword [ebp - 0x200]
lea eax, [edi + 0x3d8]
push eax
mov dword [edi + 0x388], ecx
push ecx
mov ecx, esi
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [edi + 0x3e4]
mov eax, dword [edi + 0x3e0]
mov ecx, esi
add eax, 5
push eax
push 0x1008
push dword [ebp - 0x200]
call fcn.005bbfd0
jmp 0x5862d6
lea ecx, [edi + 8]
cmp edx, ecx
jne 0x5862d6
cmp eax, dword [edi + 0x390]
jne 0x5862c5
push dword [edi + 0x38c]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x11c]
call fcn.005dc1c0
lea ecx, [ebp - 0x11c]
call fcn.005dbeb0
test al, al
je 0x5861f6
push dword [edi + 0x38c]
lea ecx, [edi + 8]
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x5862d6
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SetFocus]
push 1
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x11c]
push 0
call fcn.005dc190
mov ecx, dword [edi + 0x3d0]
mov edx, eax
call fcn.005c9cf0
mov dword [ebp - 0x20c], eax
cmp eax, 0xffffffff
jne 0x586251
push dword [edi + 0x3c8]
call dword [sym.imp.USER32.dll_SetFocus]
sub esp, 0xc
mov ecx, edi
push 4
push str.Find_reached_the_end_of_the_list.
call fcn.00580fb0
jmp 0x5862d6
push dword [edi + 0x3d0]
call dword [sym.imp.USER32.dll_SetFocus]
push 8
mov ecx, esi
call fcn.005c61a0
push dword [ebp - 0x20c]
push dword [edi + 0x2bc]
call fcn.005bb5c0
test eax, eax
js 0x58628b
mov ecx, dword [edi + 0x3d0]
sub esp, 8
mov edx, eax
call fcn.005ca960
push 0
push dword [ebp - 0x20c]
mov ecx, esi
push 0x1013
push dword [edi + 0x2bc]
call fcn.005befd0
push ecx
push dword [ebp - 0x20c]
push ecx
push dword [edi + 0x2bc]
mov ecx, esi
call fcn.005bb290
push 8
mov ecx, esi
call fcn.005c61f0
jmp 0x5862d6
cmp eax, dword [edi + 0x394]
jne 0x5862d6
push 1
push 0
call fcn.005c3f80
push 0
mov ecx, edi
call fcn.00580e20
test eax, eax
jne 0x583f70
mov ecx, edi
call fcn.0057e8a0
xor esi, esi
lea ecx, [ebp - 0x16c]
call fcn.005dc430
lea ecx, [ebp - 0x11c]
call fcn.005dc430
lea ecx, [ebp - 0x1b8]
call fcn.005c6500
lea ecx, [ebp - 0x1bc]
call fcn.005c6500
lea ecx, [ebp - 0x1c0]
call fcn.005c6500
lea ecx, [ebp - 0x1ac]
call fcn.005c6500
lea ecx, [ebp - 0x1e4]
call fcn.005c6500
lea ecx, [ebp - 0x1e0]
call fcn.005c6500
lea ecx, [ebp - 0x1c4]
call fcn.005c6500
lea ecx, [ebp - 0x1b0]
call fcn.005c6500
lea ecx, [ebp - 0x1c8]
call fcn.005c6500
lea ecx, [ebp - 0x1dc]
call fcn.005c6500
lea ecx, [ebp - 0x1cc]
call fcn.005c6500
lea ecx, [ebp - 0x1d0]
call fcn.005c6500
lea ecx, [ebp - 0x210]
call fcn.005c6500
lea ecx, [ebp - 0x1a8]
call fcn.005c6500
lea ecx, [ebp - 0x1a4]
call fcn.005c6500
lea ecx, [ebp - 0x1d4]
call fcn.005c6500
lea ecx, [ebp - 0x1d8]
call fcn.005c6500
lea ecx, [ebp - 0x1b4]
call fcn.005c6500
lea ecx, [ebp - 0x214]
call fcn.005c6500
lea ecx, [ebp - 0x218]
call fcn.005c6500
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
mov ecx, edi
call fcn.0057e8a0
push 0x1000d
push 4
push 0xa
push str.This_computer_will_reboot_in_less_than_ten_seconds
push 0
call dword [sym.imp.ADVAPI32.dll_InitiateShutdownW]
jmp 0x5862ee
mov ecx, edi
call fcn.0057e8a0
mov esi, 1
jmp 0x5862f0