Function at 0x427cf0
Capabilities:
Accept command line arguments
Create thread
Parse pe header
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47dbaa
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x13e8
call fcn.0046a520
mov eax, dword [0x4b41e0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1338], edi
mov eax, dword [ebx + 0xc]
lea ecx, [ebp - 0xdc]
push ecx
push eax
mov dword [ebp - 0xdc], 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, eax
mov dword [ebp - 0x1398], esi
mov dword [ebp - 0x12d8], esi
mov dword [ebp - 4], 0
xorps xmm0, xmm0
xor eax, eax
movq qword [ebp - 0x11c], xmm0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x13a0], eax
mov dword [ebp - 0x11c], eax
mov byte [ebp - 0x114], 1
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xdc]
test ecx, ecx
jle 0x427e25
mov dword [ebp - 0x1358], eax
test ecx, ecx
jle 0x427e25
nop dword [eax]
push dword [esi + eax*4]
lea ecx, [ebp - 0x11c]
call fcn.00401a20
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x13a0], eax
cmp eax, str._StartMonitoring
je 0x427e0c
test eax, eax
je 0x427ef1
mov ecx, str._StartMonitoring
sub eax, ecx
mov dword [ebp - 0x1340], eax
movzx eax, word [eax + ecx]
mov dword [ebp - 0x133c], ecx
mov edx, eax
test ax, ax
jne 0x427e6a
cmp word [ecx], ax
jne 0x427e6f
or dword [edi + 4], 1
mov eax, dword [ebp - 0x1358]
inc eax
mov dword [ebp - 0x1358], eax
cmp eax, dword [ebp - 0xdc]
jl 0x427dc0
call fcn.004056d0
test eax, eax
je 0x427e37
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebx + 8]
mov dword [edi + 0x398], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0040bbc0
sub esp, 8
lea ecx, [edi + 0x978]
test eax, eax
jne 0x42812b
push 0x25
call fcn.00401990
jmp 0x428226
cmp ax, word [ecx]
je 0x427edd
mov dword [ebp - 0x1354], 0
cmp word [ebp - 0x1354], ax
jne 0x427e8e
mov dword [ebp - 0x1348], 0
jmp 0x427ea6
push edx
call fcn.0046e0a0
mov ecx, dword [ebp - 0x133c]
add esp, 4
movzx eax, ax
mov dword [ebp - 0x1348], eax
movzx eax, word [ecx]
mov dword [ebp - 0x1354], 0
mov edx, eax
cmp word [ebp - 0x1354], ax
jne 0x427ec2
xor eax, eax
jmp 0x427ed4
push edx
call fcn.0046e0a0
mov ecx, dword [ebp - 0x133c]
add esp, 4
movzx eax, ax
cmp word [ebp - 0x1348], ax
jne 0x427eeb
mov eax, dword [ebp - 0x1340]
add ecx, 2
jmp 0x427df6
mov eax, dword [ebp - 0x13a0]
cmp eax, str._NoUpdate
je 0x427f23
test eax, eax
je 0x42806b
mov ecx, str._NoUpdate
sub eax, ecx
mov dword [ebp - 0x1340], eax
movzx eax, word [eax + ecx]
mov dword [ebp - 0x133c], ecx
mov edx, eax
test ax, ax
jne 0x427f2c
cmp word [ecx], ax
jne 0x427f31
or dword [edi + 4], 2
jmp 0x427e10
cmp ax, word [ecx]
je 0x427f9f
mov dword [ebp - 0x1354], 0
cmp word [ebp - 0x1354], ax
jne 0x427f50
mov dword [ebp - 0x1348], 0
jmp 0x427f68
push edx
call fcn.0046e0a0
mov ecx, dword [ebp - 0x133c]
add esp, 4
movzx eax, ax
mov dword [ebp - 0x1348], eax
movzx eax, word [ecx]
mov dword [ebp - 0x1354], 0
mov edx, eax
cmp word [ebp - 0x1354], ax
jne 0x427f84
xor eax, eax
jmp 0x427f96
push edx
call fcn.0046e0a0
mov ecx, dword [ebp - 0x133c]
add esp, 4
movzx eax, ax
cmp word [ebp - 0x1348], ax
jne 0x427fad
mov eax, dword [ebp - 0x1340]
add ecx, 2
jmp 0x427f0d
mov eax, dword [ebp - 0x13a0]
test eax, eax
je 0x42806b
mov ecx, str._NoUpdate
sub eax, ecx
mov dword [ebp - 0x1340], eax
movzx eax, word [ecx + eax]
mov dword [ebp - 0x133c], ecx
mov edx, eax
test ax, ax
jne 0x427fe4
cmp word [ecx], ax
je 0x427f23
jmp 0x427fe9
cmp ax, word [ecx]
je 0x428057
mov dword [ebp - 0x1354], 0
cmp word [ebp - 0x1354], ax
jne 0x428008
mov dword [ebp - 0x1348], 0
jmp 0x428020
push edx
call fcn.0046e0a0
mov ecx, dword [ebp - 0x133c]
add esp, 4
movzx eax, ax
mov dword [ebp - 0x1348], eax
movzx eax, word [ecx]
mov dword [ebp - 0x1354], 0
mov edx, eax
cmp word [ebp - 0x1354], ax
jne 0x42803c
xor eax, eax
jmp 0x42804e
push edx
call fcn.0046e0a0
mov ecx, dword [ebp - 0x133c]
add esp, 4
movzx eax, ax
cmp word [ebp - 0x1348], ax
jne 0x428065
mov eax, dword [ebp - 0x1340]
add ecx, 2
jmp 0x427fc8
mov eax, dword [ebp - 0x13a0]
cmp eax, str._Uninstall
je 0x42809d
test eax, eax
je 0x427e10
mov ecx, str._Uninstall
sub eax, ecx
mov dword [ebp - 0x1340], eax
movzx eax, word [eax + ecx]
mov dword [ebp - 0x133c], ecx
mov edx, eax
test ax, ax
jne 0x4280a6
cmp word [ecx], ax
jne 0x4280ab
or dword [edi + 4], 4
jmp 0x427e10
cmp ax, word [ecx]
je 0x42811d
mov dword [ebp - 0x1354], 0
cmp word [ebp - 0x1354], ax
jne 0x4280ca
mov dword [ebp - 0x1348], 0
jmp 0x4280e2
push edx
call fcn.0046e0a0
mov ecx, dword [ebp - 0x133c]
add esp, 4
movzx eax, ax
mov dword [ebp - 0x1348], eax
movzx eax, word [ecx]
mov dword [ebp - 0x1354], 0
mov edx, eax
cmp word [ebp - 0x1354], ax
jne 0x4280fe
xor eax, eax
jmp 0x428110
push edx
call fcn.0046e0a0
mov ecx, dword [ebp - 0x133c]
add esp, 4
movzx eax, ax
cmp word [ebp - 0x1348], ax
jne 0x427e10
mov eax, dword [ebp - 0x1340]
add ecx, 2
jmp 0x428087
push 0x24
call fcn.00401990
mov ecx, eax
mov dword [ebp - 0x136c], ecx
mov byte [ecx + 8], 0
mov eax, dword [ecx + 4]
test eax, eax
jne 0x42815b
mov edx, dword [ecx]
test edx, edx
je 0x428158
cmp word [edx], ax
je 0x428158
inc eax
cmp word [edx + eax*2], 0
jne 0x428150
mov dword [ecx + 4], eax
xor ecx, ecx
nop dword [eax]
inc ecx
cmp word [ecx*2 + str.SysNative], 0
jne 0x428160
add eax, ecx
mov edx, 2
mov dword [ebp - 0x1340], eax
xor ecx, ecx
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
mov ecx, dword [ebp - 0x136c]
mov edx, eax
add esp, 4
mov dword [ebp - 0x1348], edx
mov eax, dword [ecx]
mov dword [ebp - 0x1354], eax
test eax, eax
je 0x4281cb
movzx ecx, word [eax]
test cx, cx
je 0x4281c5
mov esi, eax
sub esi, edx
mov word [edx], cx
add edx, 2
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x4281b4
mov ecx, dword [ebp - 0x136c]
mov edi, str.SysNative
mov esi, 0x5c
sub edi, edx
nop word [eax + eax]
mov word [edx], si
lea edx, [edx + 2]
movzx eax, word [edx + edi]
mov esi, eax
test ax, ax
jne 0x4281e0
mov edi, dword [ebp - 0x1338]
xor eax, eax
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x428211
push eax
call fcn.00469e73
mov ecx, dword [ebp - 0x136c]
add esp, 4
mov eax, dword [ebp - 0x1348]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1340]
mov dword [ecx + 4], eax
mov byte [ecx + 8], 1
lea edx, [edi + 0xc0]
lea eax, [edi + 0x400]
test edx, edx
je 0x428246
mov dword [eax + 0x1c0], edx
lea ecx, [edi + 0x8a0]
mov eax, edx
jmp 0x428258
mov dword [eax + 0x1c0], eax
lea eax, [edi + 0x6e0]
lea ecx, [eax + 0x1c0]
mov dword [edi + 0x3fc], edx
mov dword [ecx], eax
lea eax, [edi + 0x9a8]
mov ecx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x136c], eax
mov eax, dword [eax]
mov dword [ebp - 0x13c4], ecx
test eax, eax
je 0x42828b
push eax
call ecx
mov dword [edi + 0x9a8], 0
push ecx
or edx, 0xffffffff
mov ecx, str.HKCUSoftwareClearDiskInfo
call fcn.00405480
mov dword [edi + 0x9a8], eax
mov eax, dword [edi + 0x96c]
push 0x1002
mov dword [ebp - 0x1354], eax
mov dword [edi + 0x970], 0
call fcn.0046a22b
lea ecx, [edi + 0x96c]
xor edx, edx
mov dword [ecx], eax
add esp, 4
mov word [eax + 0x1000], dx
mov eax, dword [ecx]
mov word [eax], dx
mov eax, dword [ebp - 0x1354]
test eax, eax
je 0x4282f1
push eax
call fcn.00469e73
add esp, 4
lea ecx, [edi + 0x96c]
push 0x800
push dword [ecx]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [edi + 0x96c]
mov dword [ebp - 0xe0], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0xe8]
push eax
movq qword [ebp - 0xe8], xmm0
call fcn.004014b0
push 1
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 2
call fcn.00401850
mov ecx, eax
mov dword [ebp - 0x1360], ecx
mov byte [ecx + 8], 0
mov eax, dword [ecx + 4]
test eax, eax
jne 0x428361
mov edx, dword [ecx]
test edx, edx
je 0x42835e
cmp word [edx], ax
je 0x42835e
inc eax
cmp word [edx + eax*2], 0
jne 0x428356
mov dword [ecx + 4], eax
xor ecx, ecx
inc ecx
cmp word [ecx*2 + 0x49fa84], 0
jne 0x428363
add eax, ecx
mov edx, 2
mov dword [ebp - 0x13a4], eax
xor ecx, ecx
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
mov ecx, dword [ebp - 0x1360]
lea esi, [edi + 0x668]
mov edx, eax
mov dword [ebp - 0x1374], esi
add esp, 4
mov dword [ebp - 0x1348], edx
mov eax, dword [ecx]
mov dword [ebp - 0x1354], eax
test eax, eax
je 0x4283fb
movzx ecx, word [eax]
mov eax, ecx
mov dword [ebp - 0x1340], eax
lea eax, [edi + 0x668]
mov dword [ebp - 0x1374], eax
test cx, cx
je 0x4283f5
mov esi, dword [ebp - 0x1354]
sub esi, edx
movzx ecx, cx
mov dword [ebp - 0x1374], eax
mov word [edx], cx
add edx, 2
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x4283e4
mov ecx, dword [ebp - 0x1360]
mov esi, 0x49fa84
mov edi, 0x43
sub esi, edx
nop word [eax + eax]
mov word [edx], di
lea edx, [edx + 2]
movzx eax, word [edx + esi]
mov edi, eax
test ax, ax
jne 0x428410
mov esi, dword [ebp - 0x1398]
xor eax, eax
mov edi, dword [ebp - 0x1338]
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x428447
push eax
call fcn.00469e73
mov ecx, dword [ebp - 0x1360]
add esp, 4
mov eax, dword [ebp - 0x1348]
mov dword [ecx], eax
mov eax, dword [ebp - 0x13a4]
mov dword [ecx + 4], eax
mov byte [ecx + 8], 1
mov eax, dword [ebp - 0xe8]
test eax, eax
jne 0x428487
push 2
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0xe8], eax
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xe4], ecx
push ecx
push eax
mov ecx, edi
mov byte [ebp - 0xe0], 1
call fcn.0044fa90
cmp dword [edi + 4], 4
jne 0x4284ab
mov ecx, edi
call fcn.0044f3e0
mov edi, eax
jmp 0x42b089
mov ecx, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0xd8], 0
mov eax, dword [edi + 0x9a8]
mov dword [ebp - 0x138c], ecx
mov ecx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x1350], ecx
test eax, eax
je 0x4285d8
lea edx, [ebp - 0x130]
mov dword [ebp - 0x100], 0
push edx
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x130], 4
push edx
lea edx, [ebp - 0x100]
push edx
push 0
push str.CurrentTheme
push eax
call ecx
test eax, eax
jne 0x4285d8
cmp dword [ebp - 0x100], 4
jne 0x4285d8
mov eax, dword [ebp - 0xd8]
mov esi, dword [ebp - 0x1374]
mov dword [ebp - 0x1344], esi
cmp eax, 1
ja 0x4285ee
lea ecx, [edi + 0x98]
mov dword [ebp - 0x1390], ecx
lea ecx, [edi + 0x9c]
mov dword [ebp - 0x13a8], ecx
lea ecx, [edi + 0xa0]
mov dword [ebp - 0x1380], ecx
test eax, eax
jne 0x428579
xor ecx, ecx
mov dword [ebp - 0x1348], 0x301020
mov edx, 0xfffefc
jmp 0x42858d
mov ecx, 0xffffff
mov dword [ebp - 0x1348], 0xc0c0c0
mov edx, 0x301020
mov esi, dword [ebp - 0x1348]
mov dword [edi + 0x98], esi
mov esi, dword [ebp - 0x1374]
mov dword [edi + 0x9c], edx
mov dword [edi + 0xa0], ecx
mov dword [edi], eax
mov eax, dword [edi + 0x9a8]
mov dword [ebp - 0x1344], esi
test eax, eax
je 0x428619
push 4
push edi
push 4
push 0
push str.CurrentTheme
push eax
call dword [ebp - 0x138c]
mov dword [ebp - 0x1344], esi
jmp 0x4285f5
mov eax, dword [ebp - 0x1374]
mov dword [ebp - 0x1344], eax
mov dword [ebp - 0xd8], 0x3e8
mov ecx, edi
call fcn.004447c0
lea eax, [edi + 0x98]
mov dword [ebp - 0x1390], eax
lea eax, [edi + 0x9c]
mov dword [ebp - 0x13a8], eax
lea eax, [edi + 0xa0]
mov dword [ebp - 0x1380], eax
push ecx
push 0
push 0xffffffffffffffff
push 0xcf0000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x226
push 0x2ee
lea esi, [edi + 0x138]
push 0x49fac4
push str.CLEARDISKINFO_CLASS
mov ecx, esi
mov dword [ebp - 0x1368], esi
call fcn.0040ea60
push ecx
push 0
push ecx
mov ecx, esi
mov dword [edi + 0xb0], eax
call fcn.0040fee0
mov eax, dword [ebp - 0x1390]
mov ecx, esi
push dword [eax]
call fcn.004103b0
mov eax, dword [ebp - 0x13a8]
push ecx
mov dword [esi + 0x1f0], 0x9403
mov ecx, esi
push 0xffffffffffffffff
mov eax, dword [eax]
mov dword [edi + 0x360], eax
mov eax, dword [ebp - 0x1380]
push 0x52
push 0x19a
push 2
mov eax, dword [eax]
push 2
mov dword [edi + 0x35c], eax
call fcn.00415cc0
mov dword [edi + 0x1c], eax
mov dword [esi + 0x1f0], 0x1000
xor esi, esi
mov eax, dword [edi + 0x398]
mov dword [ebp - 0x1354], esi
mov byte [ebp - 4], 3
test eax, eax
je 0x4286e4
push esi
push 0x40
push 0x40
push 1
push 1
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov esi, eax
mov dword [ebp - 0x1354], esi
sub esp, 8
lea ecx, [edi + 0x138]
push 0x40
push 0x40
push 8
push 8
push esi
call fcn.004152c0
mov dword [ebp - 0x1354], eax
mov byte [ebp - 4], 2
test esi, esi
je 0x428716
push esi
call dword [sym.imp.USER32.dll_DestroyIcon]
mov eax, dword [ebp - 0x1354]
movsd xmm0, qword [0x4a9c48]
lea esi, [edi + 0x138]
mov dword [edi + 0x24], eax
xor eax, eax
movsd qword [esi + 0x170], xmm0
mov dword [esi + 0x178], 0x320
mov byte [esi + 0x17c], 1
mov byte [esi + 0x1be], 0
nop dword [eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x428750
inc eax
lea ecx, [esi + 0x17e]
push eax
push str.Arial
push 0x20
push ecx
call fcn.0046d113
add esp, 0x10
mov ecx, esi
call fcn.0041a8f0
mov ecx, 0x50000100
test al, al
jne 0x428788
xor eax, eax
jmp 0x4287e8
mov eax, dword [esi + 0x40]
push 0
push dword [esi + 0x11c]
inc eax
cmp byte [esi + 0x248], 0
push eax
push dword [esi + 0x234]
mov eax, 0x50020100
push 0x1c
push 0x186
push 0xe
push 0x50
cmove eax, ecx
push eax
push 0x49fac4
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4287e8
push eax
push 0xd
mov ecx, esi
call fcn.0041a6e0
mov ecx, dword [esi + 0x3c]
movaps xmm0, xmmword [0x4a9f30]
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
movsd xmm0, qword [0x4a9c30]
mov dword [edi + 0x28], eax
xor eax, eax
movsd qword [esi + 0x170], xmm0
mov dword [esi + 0x178], 0x190
mov byte [esi + 0x17c], 1
mov byte [esi + 0x1be], 0
nop word [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x428820
inc eax
push eax
push str.Arial
lea eax, [esi + 0x17e]
push 0x20
push eax
call fcn.0046d113
mov eax, dword [ebp - 0x1390]
add esp, 0x10
mov ecx, esi
mov eax, dword [eax]
mov dword [edi + 0x35c], eax
call fcn.0041a8f0
mov ecx, 0x50010000
test al, al
jne 0x428866
xor eax, eax
jmp 0x4288c6
mov eax, dword [esi + 0x40]
push 0
push dword [esi + 0x11c]
inc eax
cmp byte [esi + 0x248], 0
push eax
push dword [esi + 0x234]
mov eax, 0x50030000
push 0x12
push 0xb4
push 0x32
push 0x50
cmove eax, ecx
push eax
push str.Powered_by__a_Carifred.com__a_.
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4288c6
push eax
push 0x1f
mov ecx, esi
call fcn.0041a6e0
mov ecx, dword [esi + 0x3c]
movaps xmm0, xmmword [0x4a9e00]
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
sub esp, 8
mov dword [edi + 0x2c], eax
mov ecx, esi
push str.Visit_our_website
push 0xffffffffffffffff
call fcn.00418970
push 0x47
call dword [sym.imp.USER32.dll_GetSystemMetrics]
sub esp, 0xc
mov dword [ebp - 0x1334], eax
mov edx, 1
mov ecx, eax
call fcn.00405d30
mov edi, eax
mov dword [ebp - 0x1384], edi
mov dword [ebp - 0x13e4], edi
mov ecx, dword [ebp - 0x1334]
sub esp, 0xc
xor edx, edx
call fcn.00405d30
mov dword [ebp - 0x1354], eax
mov dword [ebp - 0x13e8], eax
mov edx, dword [ebp - 0x1334]
push ecx
mov ecx, dword [ebp - 0x1390]
mov byte [ebp - 4], 5
push dword [ecx]
push ecx
push edx
push ecx
mov ecx, 0x42
sub ecx, edx
push ecx
push ecx
push eax
push edi
push ecx
mov ecx, esi
call fcn.00414dd0
mov esi, dword [ebp - 0x1338]
sub esp, 8
push str.Enable_Disable_monitoting_the_selected_disk__to_get_notifications_for_changes_on_the_attribute_values__Ctrl__M_
push 0xffffffffffffffff
lea ecx, [esi + 0x138]
mov dword [esi + 0x30], eax
call fcn.00418970
push ecx
push 0xffffffffffffffff
push 0x52
push 0x15c
push 2
push 0x190
lea ecx, [esi + 0x138]
mov dword [esi + 0x328], 0x9402
call fcn.00415cc0
mov dword [esi + 0x20], eax
mov eax, dword [ebp - 0x1380]
mov dword [esi + 0x328], 0x400
mov eax, dword [eax]
mov ecx, eax
or ecx, 0xffffff00
and eax, 0xff00
shl ecx, 0x10
or ecx, eax
movzx eax, byte [esi + 0xa2]
or ecx, eax
push ecx
sub esp, 0x10
lea ecx, [esi + 0x138]
call fcn.00414480
mov dword [esi + 0x34], eax
mov eax, dword [ebp - 0x1380]
mov eax, dword [eax]
mov ecx, eax
or ecx, 0xffffff00
and eax, 0xff00
shl ecx, 0x10
or ecx, eax
movzx eax, byte [esi + 0xa2]
or ecx, eax
push ecx
sub esp, 0x10
lea ecx, [esi + 0x138]
call fcn.00414680
mov dword [esi + 0x38], eax
mov eax, dword [ebp - 0x1380]
mov eax, dword [eax]
mov ecx, eax
or ecx, 0xffffff00
and eax, 0xff00
shl ecx, 0x10
or ecx, eax
movzx eax, byte [esi + 0xa2]
or ecx, eax
push ecx
push 0x18
push 0x18
push 8
push 0x141
lea ecx, [esi + 0x138]
call fcn.00414260
push 0x7f89
push 0
mov dword [esi + 0x3c], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
push ecx
push 0xffffffffffffffff
push 0
push 0xa
push 0xffffff38
push 0x1f4
push 0x49eab8
lea ecx, [esi + 0x138]
mov dword [ebp - 0x1358], eax
call fcn.004140f0
push 0
push 0x10800080
push ecx
push 0x8c
push 0xa
push 0x49
push str.Find__CtrlF_
lea ecx, [esi + 0x138]
mov dword [esi + 0x74], eax
call fcn.004153a0
push 0xa0a0a0
push 0xffffffffffffffff
lea ecx, [esi + 0x138]
mov dword [esi + 0x78], eax
call fcn.00417050
push 0xffffff
push 0xffffffffffffffff
lea ecx, [esi + 0x138]
call fcn.00416e00
sub esp, 8
lea ecx, [esi + 0x138]
push str.Enter_a_text_string_to_search_for_in_the_list
push 0xffffffffffffffff
call fcn.00418970
movsd xmm0, qword [0x4a9c28]
lea ecx, [esi + 0x138]
sub esp, 0x18
movsd qword [esp + 0x10], xmm0
push 0xffffffffffffffff
call fcn.00417270
mov ecx, dword [esi + 0x174]
mov eax, dword [esi + 0x178]
test ecx, ecx
je 0x428b19
cmp eax, 1
jl 0x428b19
lea eax, [eax + eax*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x428b19
mov eax, dword [ecx + eax*8 + 4]
jmp 0x428b1b
xor eax, eax
mov dword [esi + 0xb4], eax
mov eax, dword [ebp - 0x1380]
mov eax, dword [eax]
mov ecx, eax
or ecx, 0xffffff00
and eax, 0xff00
shl ecx, 0x10
or ecx, eax
movzx eax, byte [esi + 0xa2]
or ecx, eax
push ecx
sub esp, 0x10
lea ecx, [esi + 0x138]
call fcn.00414ab0
mov dword [esi + 0x7c], eax
mov edx, dword [esi + 0x174]
mov ecx, dword [esi + 0x178]
test edx, edx
je 0x428b7f
cmp ecx, 1
jl 0x428b7f
lea ecx, [ecx + ecx*8]
cmp dword [edx + ecx*8 + 0xc], 0
je 0x428b7f
mov edi, dword [ebp - 0x1358]
mov dword [edx + ecx*8 + 0x18], edi
sub esp, 8
lea ecx, [esi + 0x138]
push str.Find_next__F3_
push 0xffffffffffffffff
call fcn.00418970
mov dword [esi + 0x328], 0x1400
xorps xmm0, xmm0
movq qword [ebp - 0x84], xmm0
xor ecx, ecx
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x84], 0
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x80], 0
nop word [eax + eax]
inc ecx
cmp word [ecx*2 + str._a_v], 0
jne 0x428bd0
xor eax, eax
nop
inc eax
cmp word [eax*2 + 0x49fd28], 0
jne 0x428be0
add ecx, eax
xor eax, eax
inc eax
cmp word [eax*2 + 0x49fd1c], 0
jne 0x428bf0
add ecx, eax
mov edx, 2
mov dword [ebp - 0x1340], ecx
lea eax, [ecx + 1]
xor ecx, ecx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
mov edx, dword [ebp - 0x84]
add esp, 4
mov dword [ebp - 0x1348], eax
mov ecx, eax
mov eax, dword [ebp - 0x1344]
mov dword [ebp - 0x1370], eax
test edx, edx
je 0x428c71
mov dword [ebp - 0x1370], eax
movzx eax, word [edx]
test ax, ax
je 0x428c71
mov edi, dword [ebp - 0x1344]
mov dword [ebp - 0x1370], edi
nop dword [eax + eax]
mov word [ecx], ax
lea edx, [edx + 2]
movzx eax, word [edx]
add ecx, 2
test ax, ax
jne 0x428c60
mov esi, str._a_v
mov edx, 0x3c
sub esi, ecx
nop dword [eax]
mov word [ecx], dx
add ecx, 2
movzx eax, word [esi + ecx]
mov edx, eax
test ax, ax
jne 0x428c80
mov eax, 0x34
mov edi, 0x49fd28
nop dword [eax + eax]
mov word [ecx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
add ecx, 2
test ax, ax
jne 0x428ca0
mov edi, dword [ebp - 0x1384]
mov eax, 0x3c
mov esi, 0x49fd1c
mov word [ecx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
lea ecx, [ecx + 2]
test ax, ax
jne 0x428cc1
mov esi, dword [ebp - 0x1338]
xor eax, eax
mov word [ecx], ax
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x428cf0
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x1348]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x1340]
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 6
lea ecx, [esi + 0x138]
mov byte [ebp - 0x7c], 1
call fcn.0041a8f0
test al, al
jne 0x428d29
xor ecx, ecx
lea eax, [esi + 0x138]
jmp 0x428db2
mov eax, dword [esi + 0x178]
mov edx, 0x50010020
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50030020
push 0x12
push 0x46
push 0x32
push 0xa
cmove eax, edx
push eax
push dword [ebp - 0x1348]
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x428d7d
xor ecx, ecx
lea eax, [esi + 0x138]
jmp 0x428db2
push eax
push 0x1f
lea ecx, [esi + 0x138]
call fcn.0041a6e0
mov ecx, dword [esi + 0x174]
movaps xmm0, xmmword [0x4a9da0]
mov dword [ebp - 0x1340], eax
lea edx, [eax + eax*8]
lea eax, [esi + 0x138]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x1340]
sub esp, 8
mov dword [esi + 0x40], ecx
mov ecx, eax
push str.Click_to_check_if_a_new_version_of_Clear_Disk_Info_is_available
push 0xffffffffffffffff
call fcn.00418970
lea ecx, [esi + 0x138]
call fcn.0041a8f0
test al, al
jne 0x428de2
xor ecx, ecx
lea eax, [esi + 0x138]
jmp 0x428e6a
mov eax, dword [esi + 0x178]
mov ecx, 0x50010000
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50030000
push 0x12
push 0x5a
push 0x32
push 0x78
cmove eax, ecx
push eax
push str._a_Online_help__a_
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x428e35
xor ecx, ecx
lea eax, [esi + 0x138]
jmp 0x428e6a
push eax
push 0x1f
lea ecx, [esi + 0x138]
call fcn.0041a6e0
mov ecx, dword [esi + 0x174]
movaps xmm0, xmmword [0x4a9de0]
mov dword [ebp - 0x1340], eax
lea edx, [eax + eax*8]
lea eax, [esi + 0x138]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x1340]
sub esp, 8
mov dword [esi + 0x44], ecx
mov ecx, eax
push str.Go_to_the_online_help_page_now__F1_
push 0xffffffffffffffff
call fcn.00418970
lea ecx, [esi + 0x138]
call fcn.0041a8f0
test al, al
jne 0x428e9a
xor ecx, ecx
lea eax, [esi + 0x138]
jmp 0x428f25
mov eax, dword [esi + 0x178]
mov ecx, 0x50010000
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50030000
push 0x12
push 0x41
push 0x32
push 0xeb
cmove eax, ecx
push eax
push str._a_Donate__a_
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x428ef0
xor ecx, ecx
lea eax, [esi + 0x138]
jmp 0x428f25
push eax
push 0x1f
lea ecx, [esi + 0x138]
call fcn.0041a6e0
mov ecx, dword [esi + 0x174]
movaps xmm0, xmmword [0x4a9d90]
mov dword [ebp - 0x1340], eax
lea edx, [eax + eax*8]
lea eax, [esi + 0x138]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x1340]
sub esp, 8
mov dword [esi + 0x48], ecx
mov ecx, eax
push str.Go_to_the_donations_page_now
push 0xffffffffffffffff
call fcn.00418970
mov eax, dword [ebp - 0x1380]
mov dword [esi + 0x328], 0x400
mov eax, dword [eax]
mov ecx, eax
or ecx, 0xffffff00
and eax, 0xff00
shl ecx, 0x10
or ecx, eax
movzx eax, byte [esi + 0xa2]
or ecx, eax
push ecx
sub esp, 0x10
lea ecx, [esi + 0x138]
call fcn.00414880
sub esp, 8
mov dword [esi + 0x4c], eax
lea ecx, [esi + 0x138]
push str.Show_the_applications_menu_with_extra_options
push 0xffffffffffffffff
call fcn.00418970
mov eax, dword [esi + 0x174]
mov ecx, dword [esi + 0x178]
test eax, eax
je 0x428fb6
cmp ecx, 1
jl 0x428fb6
lea ecx, [ecx + ecx*8]
cmp dword [eax + ecx*8 + 0xc], 0
je 0x428fb6
mov edx, dword [ebp - 0x1358]
mov dword [eax + ecx*8 + 0x18], edx
push 0x60
lea eax, [ebp - 0x1290]
mov dword [ebp - 0x12a0], 3
push 0
push eax
mov dword [ebp - 0x129c], 0
mov dword [ebp - 0x1298], 0x10
mov dword [ebp - 0x1294], 0x10
call fcn.0046b980
add esp, 0xc
xor eax, eax
mov word [ebp - 0x1230], ax
push 0x1046
push eax
lea eax, [ebp - 0x122e]
push eax
call fcn.0046b980
mov ecx, dword [esi + 0x2c]
lea edx, [esi + 0x138]
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 0xc
mov dword [ebp - 0x1388], eax
cmp ecx, 0xffffffff
jne 0x42902d
mov ecx, dword [edx + 0x40]
jmp 0x429050
cmp dword [edx + 0x3c], 0
je 0x429074
cmp ecx, 1
jl 0x429074
cmp ecx, dword [edx + 0x40]
jg 0x429074
mov edi, dword [edx + 0x3c]
lea eax, [ecx + ecx*8]
cmp dword [edi + eax*8 + 0xc], 0
mov edi, dword [ebp - 0x1384]
je 0x429074
lea eax, [ebp - 0x12a0]
push eax
mov eax, dword [edx + 0x3c]
lea ecx, [ecx + ecx*8]
push 0
push 0x702
push dword [eax + ecx*8 + 4]
call dword [ebp - 0x1388]
lea edx, [esi + 0x138]
mov ecx, dword [esi + 0x40]
cmp ecx, 0xffffffff
jne 0x429081
mov ecx, dword [edx + 0x40]
jmp 0x4290a4
cmp dword [edx + 0x3c], 0
je 0x4290c8
cmp ecx, 1
jl 0x4290c8
cmp ecx, dword [edx + 0x40]
jg 0x4290c8
mov edi, dword [edx + 0x3c]
lea eax, [ecx + ecx*8]
cmp dword [edi + eax*8 + 0xc], 0
mov edi, dword [ebp - 0x1384]
je 0x4290c8
lea eax, [ebp - 0x12a0]
push eax
mov eax, dword [edx + 0x3c]
lea ecx, [ecx + ecx*8]
push 0
push 0x702
push dword [eax + ecx*8 + 4]
call dword [ebp - 0x1388]
lea edx, [esi + 0x138]
mov ecx, dword [esi + 0x44]
cmp ecx, 0xffffffff
jne 0x4290d5
mov ecx, dword [edx + 0x40]
jmp 0x4290f8
cmp dword [edx + 0x3c], 0
je 0x42911c
cmp ecx, 1
jl 0x42911c
cmp ecx, dword [edx + 0x40]
jg 0x42911c
mov edi, dword [edx + 0x3c]
lea eax, [ecx + ecx*8]
cmp dword [edi + eax*8 + 0xc], 0
mov edi, dword [ebp - 0x1384]
je 0x42911c
lea eax, [ebp - 0x12a0]
push eax
mov eax, dword [edx + 0x3c]
lea ecx, [ecx + ecx*8]
push 0
push 0x702
push dword [eax + ecx*8 + 4]
call dword [ebp - 0x1388]
lea edx, [esi + 0x138]
mov ecx, dword [esi + 0x48]
cmp ecx, 0xffffffff
jne 0x429129
mov ecx, dword [edx + 0x40]
jmp 0x42914c
cmp dword [edx + 0x3c], 0
je 0x42916a
cmp ecx, 1
jl 0x42916a
cmp ecx, dword [edx + 0x40]
jg 0x42916a
mov edi, dword [edx + 0x3c]
lea eax, [ecx + ecx*8]
cmp dword [edi + eax*8 + 0xc], 0
mov edi, dword [ebp - 0x1384]
je 0x42916a
lea eax, [ebp - 0x12a0]
push eax
mov eax, dword [edx + 0x3c]
lea ecx, [ecx + ecx*8]
push 0
push 0x702
push dword [eax + ecx*8 + 4]
call dword [ebp - 0x1388]
movsd xmm0, qword [0x4a9c10]
xor eax, eax
comisd xmm0, xmmword [esi + 0xa8]
mov dword [ebp - 0x135c], eax
jbe 0x429197
push 4
call dword [sym.imp.USER32.dll_GetSysColor]
or eax, 0xff000000
mov dword [ebp - 0x135c], eax
push eax
mov eax, dword [ebp - 0x1334]
push eax
push eax
push ecx
push 0x6d
push dword [esi + 0x398]
call fcn.0041afe0
mov esi, eax
mov dword [ebp - 0x12a4], esi
mov dword [ebp - 0x12c8], 0
test esi, esi
je 0x4291dd
push 0
lea eax, [ebp - 0x12c8]
push eax
push dword [esi + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
test eax, eax
je 0x4291dd
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
mov byte [ebp - 4], 8
push dword [ebp - 0x12c8]
push str.Refresh_the_device_list_tF5
push dword [eax + 0x4c]
call fcn.00414cd0
mov ecx, dword [ebp - 0x1338]
push dword [ebp - 0x135c]
mov dword [ecx + 0x6c], eax
mov eax, dword [ebp - 0x1334]
push eax
push eax
push ecx
push 0x6e
push dword [ecx + 0x398]
call fcn.0041afe0
mov dword [ebp - 0x133c], eax
test esi, esi
je 0x42923f
mov edx, dword [esi]
mov ecx, esi
push 1
mov edx, dword [edx]
call edx
mov eax, dword [ebp - 0x133c]
mov dword [ebp - 0x12a4], eax
mov dword [ebp - 0x12c4], 0
test eax, eax
je 0x429274
push 0
lea ecx, [ebp - 0x12c4]
push ecx
push dword [eax + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429274
mov eax, dword [ebp - 0x133c]
mov dword [eax + 8], ecx
mov esi, dword [ebp - 0x1338]
push 0
mov byte [ebp - 4], 9
push dword [ebp - 0x12c4]
lea ecx, [esi + 0x138]
push 0
push 0x32
push str.Export_to_text_file_tCtrlE
push dword [esi + 0x4c]
call fcn.004156e0
push 0
push 0
push 8
push 0x32
push 0
mov dword [esi + 0x5c], eax
lea ecx, [esi + 0x138]
push dword [esi + 0x4c]
call fcn.004156e0
mov esi, dword [ebp - 0x1354]
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
push edi
push esi
push 1
push 0
push str.Auto_refresh_every_2_min
push dword [eax + 0x4c]
call fcn.004156e0
mov ecx, dword [ebp - 0x1368]
push edi
push esi
push 1
mov dword [ebp - 0x13b0], eax
mov eax, dword [ebp - 0x1338]
push 0x32
push str.Auto_updates
push dword [eax + 0x4c]
call fcn.004156e0
push dword [ebp - 0x135c]
mov dword [ebp - 0x13ac], eax
mov eax, dword [ebp - 0x1334]
push eax
push eax
mov eax, dword [ebp - 0x1338]
push ecx
push 0x6f
push dword [eax + 0x398]
call fcn.0041afe0
mov ecx, eax
mov eax, dword [ebp - 0x133c]
mov dword [ebp - 0x1360], ecx
test eax, eax
je 0x42934c
mov edx, dword [eax]
mov ecx, eax
push 1
mov edx, dword [edx]
call edx
mov ecx, dword [ebp - 0x1360]
mov dword [ebp - 0x12a4], ecx
mov dword [ebp - 0x12c0], 0
test ecx, ecx
je 0x429381
push 0
lea eax, [ebp - 0x12c0]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429381
mov eax, dword [ebp - 0x1360]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
push 0
mov byte [ebp - 4], 0xa
push dword [ebp - 0x12c0]
push 0
push 0x32
push str.Check_for_updates_now_tCtrlU
push dword [eax + 0x4c]
call fcn.004156e0
mov ecx, dword [ebp - 0x1368]
push 0
push 0
push 8
mov dword [ebp - 0x13b4], eax
mov eax, dword [ebp - 0x1338]
push 0x32
push 0
push dword [eax + 0x4c]
call fcn.004156e0
push dword [ebp - 0x135c]
mov eax, dword [ebp - 0x1334]
push eax
push eax
mov eax, dword [ebp - 0x1338]
push ecx
push 0x70
push dword [eax + 0x398]
call fcn.0041afe0
mov ecx, eax
mov eax, dword [ebp - 0x1360]
mov dword [ebp - 0x133c], ecx
test eax, eax
je 0x429412
mov edx, dword [eax]
mov ecx, eax
push 1
mov edx, dword [edx]
call edx
mov ecx, dword [ebp - 0x133c]
mov dword [ebp - 0x12a4], ecx
mov dword [ebp - 0x12bc], 0
test ecx, ecx
je 0x429447
push 0
lea eax, [ebp - 0x12bc]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429447
mov eax, dword [ebp - 0x133c]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
push 0
mov byte [ebp - 4], 0xb
push dword [ebp - 0x12bc]
push 0
push 0x32
push str.Check_this_disk_for_errors_tAltC
push dword [eax + 0x4c]
call fcn.004156e0
mov ecx, dword [ebp - 0x1338]
push dword [ebp - 0x135c]
mov dword [ecx + 0x60], eax
mov eax, dword [ebp - 0x1334]
push eax
push eax
push ecx
push 0x73
push dword [ecx + 0x398]
call fcn.0041afe0
mov ecx, eax
mov eax, dword [ebp - 0x133c]
mov dword [ebp - 0x1360], ecx
test eax, eax
je 0x4294b7
mov edx, dword [eax]
mov ecx, eax
push 1
mov edx, dword [edx]
call edx
mov ecx, dword [ebp - 0x1360]
mov dword [ebp - 0x12a4], ecx
mov dword [ebp - 0x12d0], 0
test ecx, ecx
je 0x4294ec
push 0
lea eax, [ebp - 0x12d0]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x4294ec
mov eax, dword [ebp - 0x1360]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
push 0
mov byte [ebp - 4], 0xc
push dword [ebp - 0x12d0]
push 0
push 0x32
push str.Check_and_repair_this_disk_tAltR
push dword [eax + 0x4c]
call fcn.004156e0
mov ecx, dword [ebp - 0x1338]
push dword [ebp - 0x135c]
mov dword [ecx + 0x64], eax
mov eax, dword [ebp - 0x1334]
push eax
push eax
push ecx
push 0x71
push dword [ecx + 0x398]
call fcn.0041afe0
mov ecx, eax
mov eax, dword [ebp - 0x1360]
mov dword [ebp - 0x133c], ecx
test eax, eax
je 0x42955c
mov edx, dword [eax]
mov ecx, eax
push 1
mov edx, dword [edx]
call edx
mov ecx, dword [ebp - 0x133c]
mov dword [ebp - 0x12a4], ecx
mov dword [ebp - 0x12b8], 0
test ecx, ecx
je 0x429591
push 0
lea eax, [ebp - 0x12b8]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429591
mov eax, dword [ebp - 0x133c]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
push 0
mov byte [ebp - 4], 0xd
push dword [ebp - 0x12b8]
push 0
push 0x32
push str.Optimize_this_disk_tAltO
push dword [eax + 0x4c]
call fcn.004156e0
mov ecx, dword [ebp - 0x1338]
push dword [ebp - 0x135c]
mov dword [ecx + 0x68], eax
mov eax, dword [ebp - 0x1334]
push eax
push eax
push ecx
push 0x75
push dword [ecx + 0x398]
call fcn.0041afe0
mov ecx, eax
mov eax, dword [ebp - 0x133c]
mov dword [ebp - 0x1360], ecx
test eax, eax
je 0x429601
mov edx, dword [eax]
mov ecx, eax
push 1
mov edx, dword [edx]
call edx
mov ecx, dword [ebp - 0x1360]
mov dword [ebp - 0x12a4], ecx
mov dword [ebp - 0x12b4], 0
test ecx, ecx
je 0x429636
push 0
lea eax, [ebp - 0x12b4]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429636
mov eax, dword [ebp - 0x1360]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
push 0
mov byte [ebp - 4], 0xe
push dword [ebp - 0x12b4]
push 0
push 0x32
push str.Eject_this_disk_tAltE
push dword [eax + 0x4c]
call fcn.004156e0
mov ecx, dword [ebp - 0x1338]
push edi
push esi
push 1
push 0x32
mov dword [ecx + 0x90], eax
lea ecx, [ecx + 0x138]
push str.Dont_show_bad_status_for_this_disk
push dword [ecx - 0xcc]
call fcn.004156e0
mov ecx, dword [ebp - 0x1338]
push 0
push 0
push 8
push 0x32
mov dword [ecx + 0x50], eax
push 0
push dword [ecx + 0x4c]
add ecx, 0x138
call fcn.004156e0
push dword [ebp - 0x135c]
mov eax, dword [ebp - 0x1334]
push eax
push eax
mov eax, dword [ebp - 0x1338]
push ecx
push 0x74
push dword [eax + 0x398]
call fcn.0041afe0
mov ecx, eax
mov eax, dword [ebp - 0x1360]
mov dword [ebp - 0x133c], ecx
test eax, eax
je 0x4296ec
mov edx, dword [eax]
mov ecx, eax
push 1
mov edx, dword [edx]
call edx
mov ecx, dword [ebp - 0x133c]
mov dword [ebp - 0x12a4], ecx
mov dword [ebp - 0x12b0], 0
test ecx, ecx
je 0x429721
push 0
lea eax, [ebp - 0x12b0]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429721
mov eax, dword [ebp - 0x133c]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
push 0
mov byte [ebp - 4], 0xf
push dword [ebp - 0x12b0]
push 0
push 0x32
push str.Launch_Windows_Disk_Manager
push dword [eax + 0x4c]
call fcn.004156e0
mov ecx, dword [ebp - 0x1368]
push 0
push 0
push 8
mov dword [ebp - 0x13e0], eax
mov eax, dword [ebp - 0x1338]
push 0x32
push 0
push dword [eax + 0x4c]
call fcn.004156e0
push edi
push esi
mov esi, dword [ebp - 0x1338]
push 1
push 0x32
push str.Use_Light_theme
push dword [esi + 0x4c]
lea ecx, [esi + 0x138]
call fcn.004156e0
cmp dword [esi], 0
mov dword [ebp - 0x13bc], eax
je 0x4297a6
push 8
push eax
lea ecx, [esi + 0x138]
call fcn.00417b80
mov eax, dword [ebp - 0x1334]
push 0
push eax
push eax
push 1
push 1
push dword [esi + 0x398]
call dword [sym.imp.USER32.dll_LoadImageW]
push 0
xor edx, edx
mov dword [ebp - 0x1340], eax
mov ecx, eax
call fcn.00406600
mov edi, eax
mov dword [ebp - 0x137c], edi
mov dword [ebp - 0x13ec], edi
mov eax, dword [ebp - 0x1340]
mov byte [ebp - 4], 0x10
test eax, eax
je 0x4297f4
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
push 0
push edi
push 0
push 0x32
push str.About___Activation_tAltA
push dword [esi + 0x4c]
lea ecx, [esi + 0x138]
call fcn.004156e0
push dword [ebp - 0x135c]
mov dword [ebp - 0x13b8], eax
mov eax, dword [ebp - 0x1334]
push eax
push eax
push ecx
push 0x7b
push dword [esi + 0x398]
call fcn.0041afe0
mov ecx, dword [ebp - 0x133c]
mov esi, eax
test ecx, ecx
je 0x429844
mov eax, dword [ecx]
push 1
mov eax, dword [eax]
call eax
mov dword [ebp - 0x12a4], esi
mov dword [ebp - 0x12ac], 0
test esi, esi
je 0x429871
push 0
lea eax, [ebp - 0x12ac]
push eax
push dword [esi + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
test eax, eax
je 0x429871
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
push 0
mov byte [ebp - 4], 0x11
push dword [ebp - 0x12ac]
push 0
push 0x32
push str.Monitoring_settings_tAltM
push dword [eax + 0x4c]
call fcn.004156e0
mov dword [ebp - 0x13a4], eax
mov dword [ebp - 0x1360], 0xffffffff
mov dword [ebp - 0x12a8], 0
mov ecx, dword [ebp - 0x1338]
push 0
mov byte [ebp - 4], 0x12
call fcn.0044e5a0
test eax, eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x1374], eax
je 0x42998f
push dword [ebp - 0x135c]
mov eax, dword [ebp - 0x1334]
push eax
push eax
mov eax, dword [ebp - 0x1338]
push ecx
push 0x7f
push dword [eax + 0x398]
call fcn.0041afe0
mov ecx, eax
mov dword [ebp - 0x133c], ecx
test esi, esi
je 0x429916
mov edx, dword [esi]
mov ecx, esi
push 1
mov edx, dword [edx]
call edx
mov ecx, dword [ebp - 0x133c]
mov eax, dword [ebp - 0x12a8]
mov esi, ecx
mov dword [ebp - 0x12a4], esi
test eax, eax
je 0x429935
push eax
call dword [ebp - 0x1374]
mov ecx, dword [ebp - 0x133c]
mov dword [ebp - 0x12a8], 0
test ecx, ecx
je 0x429964
push 0
lea eax, [ebp - 0x12a8]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429964
mov eax, dword [ebp - 0x133c]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1338]
mov ecx, dword [ebp - 0x1368]
push 0
push dword [ebp - 0x12a8]
push 0
push 0x32
push str.Uninstall_Clear_Disk_Info_tCtrlU
push dword [eax + 0x4c]
call fcn.004156e0
mov dword [ebp - 0x1360], eax
mov eax, dword [ebp - 0x1368]
push 0
push 0x16
push 0x16
mov ecx, dword [eax + 0x230]
mov dword [eax + 0x234], ecx
mov ecx, dword [ebp - 0x1338]
mov dword [eax + 0x1f4], 0
mov eax, dword [ebp - 0x1390]
push ecx
push 0x66
mov eax, dword [eax]
mov dword [ecx + 0x35c], eax
push dword [ecx + 0x398]
call fcn.0041afe0
mov dword [ebp - 0x133c], eax
test esi, esi
je 0x4299ed
mov edx, dword [esi]
mov ecx, esi
push 1
mov edx, dword [edx]
call edx
mov eax, dword [ebp - 0x133c]
mov ecx, dword [ebp - 0x1368]
sub esp, 0xc
mov dword [ebp - 0x12a4], eax
push eax
call fcn.00415ab0
mov esi, dword [ebp - 0x1338]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1cf
push 0x147
push 0x55
push 2
push 0x49f190
mov dword [esi + 0x58], eax
lea ecx, [esi + 0x138]
push str.Name_nI1_nI2_nI3
mov dword [esi + 0x328], 0x430
call fcn.00415460
mov ecx, eax
mov dword [esi + 0x84], ecx
test ecx, ecx
jne 0x429a50
mov eax, dword [esi + 0x368]
jmp 0x429a81
lea eax, [esi + 0x138]
cmp ecx, 0xffffffff
jne 0x429a5e
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0x3c]
test edx, edx
je 0x429a7f
cmp ecx, 1
jl 0x429a7f
cmp ecx, dword [eax + 0x40]
jg 0x429a7f
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x429a7f
mov eax, dword [edx + eax*8 + 4]
jmp 0x429a81
xor eax, eax
push 0
push 4
push 0x108e
push eax
mov dword [esi + 0xb8], eax
call dword [ebp - 0x1388]
movaps xmm0, xmmword [0x4a9d20]
lea eax, [ebp - 0x1e8]
push eax
push 0
push 0x10a2
mov dword [ebp - 0x1e8], 0x28
mov dword [ebp - 0x1e4], 7
mov dword [ebp - 0x1e0], 3
movups xmmword [ebp - 0x1dc], xmm0
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c4], 1
push dword [esi + 0xb8]
call dword [ebp - 0x1388]
push 0
push 0x14
push 0x14
push ecx
push 0x76
push dword [esi + 0x398]
call fcn.0041afe0
mov ecx, dword [esi + 0x3ac]
mov dword [ebp - 0x1340], eax
test ecx, ecx
je 0x429b2d
mov eax, dword [ecx]
push 1
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x1340]
push 0
push 0x14
push 0x14
push ecx
push 0x6a
mov dword [esi + 0x3ac], eax
push dword [esi + 0x398]
call fcn.0041afe0
mov ecx, dword [esi + 0x3b0]
mov dword [ebp - 0x1340], eax
test ecx, ecx
je 0x429b65
mov eax, dword [ecx]
push 1
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x1340]
push 0
push 0x14
push 0x14
push ecx
push 0x6c
mov dword [esi + 0x3b0], eax
push dword [esi + 0x398]
call fcn.0041afe0
mov ecx, dword [esi + 0x3b8]
mov dword [ebp - 0x1340], eax
test ecx, ecx
je 0x429b9d
mov eax, dword [ecx]
push 1
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x1340]
push 0
push 0x14
push 0x14
push ecx
push 0x6b
mov dword [esi + 0x3b8], eax
push dword [esi + 0x398]
call fcn.0041afe0
mov ecx, dword [esi + 0x3b4]
mov dword [ebp - 0x1340], eax
test ecx, ecx
je 0x429bd5
mov eax, dword [ecx]
push 1
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x1340]
push ecx
mov ecx, esi
mov dword [esi + 0x3b4], eax
call fcn.0042ed60
push 1
push 0xffffffffffffffff
push eax
mov ecx, esi
mov dword [esi + 0x8c], eax
call fcn.0042eb60
push ecx
push 0xffffffffffffffff
push 0x17
push 0x1a2
push 0x20d
push 0x14a
lea ecx, [esi + 0x138]
mov dword [esi + 0x328], 0x423
call fcn.00415cc0
lea ecx, [esi + 0x138]
mov dword [esi + 0x328], 0
call fcn.0041a8f0
test al, al
je 0x429ca3
mov eax, dword [esi + 0x178]
mov ecx, 0x50000100
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50020100
push 0x10
push 0x10
push 4
push 5
cmove eax, ecx
push eax
push 0x49eab8
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x429ca3
push eax
push 0xd
lea ecx, [esi + 0x138]
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9d30]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x174]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0x60c060
push 0xffffffffffffffff
lea ecx, [esi + 0x138]
call fcn.00416e00
lea ecx, [esi + 0x138]
call fcn.0041a8f0
test al, al
je 0x429d30
mov eax, dword [esi + 0x178]
mov ecx, 0x50000100
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50020100
push 0x12
push 0x32
push 4
push 0x19
cmove eax, ecx
push eax
push str._OK
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x429d30
push eax
push 0xd
lea ecx, [esi + 0x138]
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9d70]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x174]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [esi + 0x138]
call fcn.0041a8f0
test al, al
je 0x429dab
mov eax, dword [esi + 0x178]
mov ecx, 0x50000100
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50020100
push 0x10
push 0x10
push 4
push 0x50
cmove eax, ecx
push eax
push 0x49eab8
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x429dab
push eax
push 0xd
lea ecx, [esi + 0x138]
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9d40]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x174]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0xe0f0
push 0xffffffffffffffff
lea ecx, [esi + 0x138]
call fcn.00416e00
lea ecx, [esi + 0x138]
call fcn.0041a8f0
test al, al
je 0x429e38
mov eax, dword [esi + 0x178]
mov ecx, 0x50000100
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50020100
push 0x12
push 0x50
push 4
push 0x64
cmove eax, ecx
push eax
push str._Degraded
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x429e38
push eax
push 0xd
lea ecx, [esi + 0x138]
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9db0]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x174]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [esi + 0x138]
call fcn.0041a8f0
test al, al
je 0x429eb6
mov eax, dword [esi + 0x178]
mov ecx, 0x50000100
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50020100
push 0x10
push 0x10
push 4
push 0xb9
cmove eax, ecx
push eax
push 0x49eab8
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x429eb6
push eax
push 0xd
lea ecx, [esi + 0x138]
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9d50]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x174]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0x30c0ff
push 0xffffffffffffffff
lea ecx, [esi + 0x138]
call fcn.00416e00
lea ecx, [esi + 0x138]
call fcn.0041a8f0
test al, al
je 0x429f46
mov eax, dword [esi + 0x178]
mov ecx, 0x50000100
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50020100
push 0x12
push 0x50
push 4
push 0xcd
cmove eax, ecx
push eax
push str._Warning
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x429f46
push eax
push 0xd
lea ecx, [esi + 0x138]
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9dc0]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x174]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [esi + 0x138]
call fcn.0041a8f0
test al, al
je 0x429fc4
mov eax, dword [esi + 0x178]
mov ecx, 0x50000100
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50020100
push 0x10
push 0x10
push 4
push 0x122
cmove eax, ecx
push eax
push 0x49eab8
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x429fc4
push eax
push 0xd
lea ecx, [esi + 0x138]
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9d60]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x174]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0x1010ff
push 0xffffffffffffffff
lea ecx, [esi + 0x138]
call fcn.00416e00
lea ecx, [esi + 0x138]
call fcn.0041a8f0
test al, al
je 0x42a054
mov eax, dword [esi + 0x178]
mov ecx, 0x50000100
push 0
push dword [esi + 0x254]
inc eax
cmp byte [esi + 0x380], 0
push eax
push dword [esi + 0x36c]
mov eax, 0x50020100
push 0x12
push 0x50
push 4
push 0x136
cmove eax, ecx
push eax
push str._Failing
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x42a054
push eax
push 0xd
lea ecx, [esi + 0x138]
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9dd0]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x174]
movups xmmword [eax + ecx*8 + 0x24], xmm0
xor eax, eax
mov dword [esi + 0x328], 0x8002
mov dword [ebp - 0x12cc], eax
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x133c], eax
je 0x42a0fa
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x12d4], eax
lea eax, [ebp - 0x12d4]
push eax
push 0
push 0xe200b
push 0
push 0x16
push 0x16
mov dword [ebp - 0xa8], vtable.Gdiplus::Bitmap.0
call dword [sym.imp.gdiplus.dll_GdipCreateBitmapFromScan0]
mov ecx, dword [ebp - 0x133c]
lea edx, [ebp - 0xa8]
push 0x16
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x12d4]
push 0x16
mov dword [ebp - 0xa4], eax
call fcn.00406980
test al, al
mov eax, dword [ebp - 0xa4]
je 0x42a0ed
push 0
lea ecx, [ebp - 0x12cc]
push ecx
push eax
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov eax, dword [ebp - 0xa4]
push eax
call dword [sym.imp.gdiplus.dll_GdipDisposeImage]
mov eax, dword [ebp - 0x12cc]
sub esp, 8
lea ecx, [esi + 0x138]
push 0x16
push 0x16
push 3
push 0x18e
push eax
call fcn.004159d0
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x12cc]
test eax, eax
je 0x42a129
push eax
call dword [ebp - 0x1374]
push 0x40
push 0xffffffffffffffff
lea ecx, [esi + 0x138]
call fcn.00417b80
lea eax, [ebp - 0x110]
push eax
push dword [esi + 0xb0]
mov eax, dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x1340], eax
call eax
mov ecx, dword [ebp - 0x108]
mov eax, dword [ebp - 0x104]
sub ecx, dword [ebp - 0x110]
sub eax, dword [ebp - 0x10c]
cmp ecx, 0xffffffff
jne 0x42a19e
cmp eax, ecx
jne 0x42a19e
lea eax, [ebp - 0x1c0]
push eax
push dword [esi + 0x368]
call dword [ebp - 0x1340]
mov ecx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1b4]
sub ecx, dword [ebp - 0x1c0]
sub eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xa8], ecx
mov edx, 1
mov dword [ebp - 0xa4], eax
sub esp, 0xc
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
movups xmm0, xmmword [ebp - 0xa8]
lea ecx, [edx + 0x11]
movups xmmword [esi + 0x278], xmm0
call fcn.00405d30
mov edx, dword [esi + 0x39c]
mov dword [ebp - 0x134c], eax
test edx, edx
je 0x42a1f9
push edx
call dword [ebp - 0x1374]
mov eax, dword [ebp - 0x134c]
xor edx, edx
mov dword [esi + 0x39c], eax
sub esp, 0xc
lea ecx, [edx + 0x12]
call fcn.00405d30
mov ecx, dword [esi + 0x3a0]
mov dword [ebp - 0x134c], eax
test ecx, ecx
je 0x42a229
push ecx
call dword [ebp - 0x1374]
mov eax, dword [ebp - 0x134c]
sub esp, 8
mov dword [esi + 0x3a0], eax
mov edx, 1
push 0xff5050af
call fcn.004061e0
mov ecx, dword [esi + 0x3a4]
mov dword [ebp - 0x134c], eax
test ecx, ecx
je 0x42a25e
push ecx
call dword [ebp - 0x1374]
mov eax, dword [ebp - 0x134c]
sub esp, 8
mov dword [esi + 0x3a4], eax
xor edx, edx
push 0xff5050af
call fcn.004061e0
mov ecx, dword [esi + 0x3a8]
mov dword [ebp - 0x134c], eax
test ecx, ecx
je 0x42a290
push ecx
call dword [ebp - 0x1374]
mov eax, dword [ebp - 0x134c]
mov dword [esi + 0x3a8], eax
lea eax, [esi + 0x138]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x13d8], esi
test eax, eax
je 0x42a2d1
push 0
push 0
push dword [eax + 0x230]
push 0x40e690
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x42a2d1
cmp eax, 0xffffffff
je 0x42a2d1
push eax
call esi
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 8
push eax
mov dword [ebp - 0x1348], eax
call esi
push 0xa
push dword [ebp - 0x1348]
mov dword [ebp - 0x1344], eax
call esi
push dword [ebp - 0x1348]
mov esi, eax
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x136c]
mov dword [ebp - 0x8c], 0
mov eax, dword [eax]
test eax, eax
jne 0x42a331
mov edx, dword [ebp - 0x1370]
mov dword [ebp - 0x1334], edx
jmp 0x42a3b1
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0xf4], 0
push ecx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x12c], 4
push ecx
lea ecx, [ebp - 0xf4]
push ecx
push 0
push 0x4a0294
push eax
call dword [ebp - 0x1350]
test eax, eax
jne 0x42a3a5
cmp dword [ebp - 0xf4], 4
jne 0x42a3a5
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x1370]
mov dword [ebp - 0x1334], edx
cmp ecx, dword [ebp - 0x1344]
ja 0x42a3b1
mov dword [ebp - 0x1334], edx
cmp ecx, 0x2e4
jb 0x42a3b1
mov dword [ebp - 0x1334], edx
jmp 0x42a3d0
mov eax, dword [ebp - 0x1370]
mov dword [ebp - 0x1334], eax
mov eax, 0x3e8
cmp eax, dword [ebp - 0x1344]
sbb ecx, ecx
and ecx, 0xd2
add ecx, 0x316
mov dword [ebp - 0x8c], ecx
mov eax, dword [ebp - 0x136c]
mov dword [ebp - 0x94], 0
mov eax, dword [eax]
test eax, eax
je 0x42a44a
lea ecx, [ebp - 0x128]
mov dword [ebp - 0xf0], 0
push ecx
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x128], 4
push ecx
lea ecx, [ebp - 0xf0]
push ecx
push 0
push 0x4a029c
push eax
call dword [ebp - 0x1350]
test eax, eax
jne 0x42a444
cmp dword [ebp - 0xf0], 4
jne 0x42a444
mov edx, dword [ebp - 0x94]
cmp edx, esi
ja 0x42a444
cmp edx, 0x226
jb 0x42a444
mov ecx, dword [ebp - 0x8c]
jmp 0x42a465
mov ecx, dword [ebp - 0x8c]
mov eax, 0x2bc
cmp eax, esi
sbb edx, edx
and edx, 0x96
add edx, 0x226
mov dword [ebp - 0x94], edx
shr dword [ebp - 0x1344], 1
mov eax, ecx
shr eax, 1
sub dword [ebp - 0x1344], eax
mov eax, edx
push 0x210
push edx
push ecx
shr eax, 1
shr esi, 1
sub esi, eax
push esi
push dword [ebp - 0x1344]
mov esi, dword [ebp - 0x1338]
push 0
push dword [esi + 0xb0]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov dword [ebp - 0x90], 0
mov eax, dword [esi + 0x9a8]
test eax, eax
je 0x42a52c
lea ecx, [ebp - 0x124]
mov dword [ebp - 0xf8], 0
push ecx
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x124], 4
push ecx
lea ecx, [ebp - 0xf8]
push ecx
push 0
push str.AutoUpdate
push eax
call dword [ebp - 0x1350]
test eax, eax
jne 0x42a520
cmp dword [ebp - 0xf8], 4
jne 0x42a520
cmp dword [ebp - 0x90], eax
jne 0x42a512
push 8
push dword [ebp - 0x13ac]
lea ecx, [esi + 0x138]
call fcn.00417b80
mov ecx, dword [ebp - 0x1334]
mov dword [ebp - 0x1334], ecx
jmp 0x42a536
mov eax, dword [ebp - 0x1334]
mov dword [ebp - 0x1334], eax
mov dword [ebp - 0x90], 1
lea eax, [esi + 0x9a8]
mov dword [ebp - 0x88], 0
mov eax, dword [eax]
test eax, eax
je 0x42a59a
lea ecx, [ebp - 0x120]
mov dword [ebp - 0xfc], 0
push ecx
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x120], 4
push ecx
lea ecx, [ebp - 0xfc]
push ecx
push 0
push str.AutoRefresh
push eax
call dword [ebp - 0x1350]
test eax, eax
jne 0x42a59a
cmp dword [ebp - 0xfc], 4
jne 0x42a59a
cmp dword [ebp - 0x88], eax
jne 0x42a5b7
jmp 0x42a5a4
mov dword [ebp - 0x88], 0
push 8
push dword [ebp - 0x13b0]
lea ecx, [esi + 0x138]
call fcn.00417b80
mov dword [esi + 0x328], 0
mov eax, 0x70
mov word [ebp - 0x76], ax
mov edx, 0x45
mov byte [ebp - 0x78], 1
movzx eax, word [esi + 0x44]
mov word [ebp - 0x74], ax
mov eax, 0x46
mov word [ebp - 0x70], ax
mov byte [ebp - 0x72], 9
movzx eax, word [esi + 0x74]
mov word [ebp - 0x6e], ax
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov byte [ebp - 0x6c], 1
movzx eax, word [esi + 0x7c]
mov word [ebp - 0x68], ax
mov eax, 0x74
mov word [ebp - 0x64], ax
mov byte [ebp - 0x66], 1
movzx eax, word [esi + 0x6c]
mov word [ebp - 0x62], ax
mov word [ebp - 0x5e], dx
mov byte [ebp - 0x60], 9
movzx eax, word [esi + 0x5c]
mov word [ebp - 0x5c], ax
mov eax, 0x55
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x13b4]
mov word [ebp - 0x56], ax
mov eax, 0x43
mov word [ebp - 0x52], ax
mov byte [ebp - 0x5a], 9
mov byte [ebp - 0x54], 0x11
movzx eax, word [esi + 0x60]
mov word [ebp - 0x50], ax
mov eax, 0x52
mov word [ebp - 0x4c], ax
mov byte [ebp - 0x4e], 0x11
movzx eax, word [esi + 0x64]
mov word [ebp - 0x4a], ax
mov eax, 0x4f
mov word [ebp - 0x46], ax
mov byte [ebp - 0x48], 0x11
movzx eax, word [esi + 0x68]
mov word [ebp - 0x44], ax
mov word [ebp - 0x40], dx
mov edx, 0x4d
mov byte [ebp - 0x42], 0x11
movzx eax, word [esi + 0x90]
mov word [ebp - 0x3e], ax
mov eax, 0x42
mov word [ebp - 0x3a], ax
mov byte [ebp - 0x3c], 9
movzx eax, word [esi + 0x50]
mov word [ebp - 0x38], ax
mov byte [ebp - 0x36], 9
mov word [ebp - 0x34], dx
movzx eax, word [esi + 0x30]
mov word [ebp - 0x32], ax
mov eax, 0x41
mov word [ebp - 0x2e], ax
mov eax, dword [ebp - 0x13b8]
mov word [ebp - 0x2c], ax
mov eax, dword [ebp - 0x13a4]
mov word [ebp - 0x26], ax
mov eax, 0x55
mov word [ebp - 0x22], ax
mov eax, dword [ebp - 0x1360]
mov byte [ebp - 0x30], 0x11
mov byte [ebp - 0x2a], 0x11
mov word [ebp - 0x28], dx
mov byte [ebp - 0x24], 9
mov word [ebp - 0x20], ax
mov eax, dword [esi + 0x37c]
test eax, eax
je 0x42a70e
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
push 0xf
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
mov dword [esi + 0x37c], eax
lea ecx, [esi + 0x138]
cmp eax, 0xffffffff
jne 0x42a735
mov dword [ecx + 0x244], 0
mov al, byte [esi + 4]
and al, 1
mov byte [ebp - 0x1391], al
je 0x42a75a
cmp dword [esi + 0x70], 0
jle 0x42a75a
mov ecx, esi
call fcn.00447120
mov dword [ebp - 0x136c], eax
jmp 0x42afaf
push 1
push 1
call fcn.00410690
push 1
mov ecx, esi
call fcn.0043fc50
test eax, eax
jne 0x42a763
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SleepEx]
cmp dword [ebp - 0x90], 0
je 0x42a7a4
test dword [esi + 4], 2
jne 0x42a7a4
push ecx
mov ecx, esi
call fcn.004411d0
cmp eax, 1
jne 0x42a7a4
xor eax, eax
mov dword [ebp - 0x136c], eax
jmp 0x42afaf
push 0
mov ecx, esi
call fcn.0042c270
cmp dword [ebp - 0x88], 0
lea eax, [ebp - 0xd0]
push eax
setne byte [ebp - 0x1361]
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
push 0
push 0x3e8
push dword [ebp - 0xcc]
push dword [ebp - 0xd0]
call fcn.0047aad0
mov ecx, eax
call fcn.0047ac30
cmp byte [ebp - 0x1361], 0
mov eax, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsd qword [ebp - 0xc0], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x13f8], xmm0
mov dword [ebp - 0x1348], eax
je 0x42a830
lea ecx, [ebp - 0xd0]
push ecx
call eax
mov edx, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd0]
call fcn.0047ac30
divsd xmm0, qword [ebp - 0xc0]
cmp byte [ebp - 0x1391], 0
movsd qword [ebp - 0xc8], xmm0
mov byte [ebp - 0x1361], 0
je 0x42ab75
sub esp, 8
lea eax, [esi + 0x138]
mov ecx, esi
push 0xc8
push 0x1c2
push 0
push eax
push 1
push str.Disk_monitoring_is_enabled__but_you_will_not_see_any_notifications_for_attribute_changes_until_you_activate_Clear_Disk_Info_with_a_license._r_n_r_rDo_you_want_to_purchase_a_license_now_
call fcn.00440f90
cmp eax, 1
jne 0x42ab6e
mov ecx, dword [esi + 0x990]
lea eax, [esi + 0x990]
test ecx, ecx
je 0x42a893
cmp word [ecx], 0
jne 0x42a936
xorps xmm0, xmm0
mov dword [ebp - 0xb0], 0
movq qword [ebp - 0xb8], xmm0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], 0
mov byte [ebp - 0xb0], 1
movq qword [ebp - 0xa4], xmm0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0
mov byte [ebp - 0x9c], 1
push eax
lea edx, [ebp - 0xa4]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb8]
call fcn.00422be0
mov eax, dword [ebp - 0xa4]
test eax, eax
je 0x42a919
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x42a930
push eax
call fcn.00469e73
add esp, 4
lea eax, [esi + 0x990]
cmp dword [eax], 0
jne 0x42a977
push 2
call fcn.0046a22b
mov dword [esi + 0x990], eax
add esp, 4
xor ecx, ecx
mov word [eax], cx
mov dword [esi + 0x994], ecx
mov byte [esi + 0x998], 1
mov edx, dword [esi + 0x990]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x84], ecx
mov byte [ebp - 0x7c], cl
mov dword [ebp - 0x80], ecx
jmp 0x42a998
mov byte [eax + 8], 1
mov edx, dword [eax]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x84], 0
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x80], 0
mov edi, dword [ebp - 0x1334]
mov ecx, edx
mov dword [ebp - 0x1344], eax
xor eax, eax
mov dword [ebp - 0x1370], ecx
mov dword [ebp - 0x1350], edx
nop dword [eax]
nop dword [eax + eax]
inc eax
mov dword [ebp - 0x1378], edi
cmp word [eax*2 + str.https:__www.carifred.com_cleardiskinfo_buy_license__hfp], 0
jne 0x42a9c0
mov dword [ebp - 0x135c], eax
test edx, edx
jne 0x42a9fe
mov dword [ebp - 0x1370], ecx
mov ecx, edi
mov dword [ebp - 0x1350], edx
mov edx, dword [ebp - 0x1344]
mov dword [ebp - 0x1344], edx
mov dword [ebp - 0x1334], ecx
jmp 0x42aa54
mov esi, dword [ebp - 0x1378]
xor eax, eax
mov dword [ebp - 0x1334], esi
mov esi, dword [ebp - 0x1338]
cmp word [edx], ax
je 0x42aa48
mov edi, dword [ebp - 0x1344]
mov dword [ebp - 0x1370], ecx
mov ecx, dword [ebp - 0x1378]
mov dword [ebp - 0x1350], edx
mov dword [ebp - 0x1344], edi
mov dword [ebp - 0x1334], ecx
nop dword [eax + eax]
inc eax
cmp word [edx + eax*2], 0
jne 0x42aa40
add dword [ebp - 0x135c], eax
mov eax, dword [ebp - 0x135c]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
mov ecx, eax
add esp, 4
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x134c], ecx
test eax, eax
je 0x42aaa1
movzx edx, word [eax]
test dx, dx
je 0x42aaa1
nop dword [eax + eax]
mov word [ecx], dx
lea eax, [eax + 2]
movzx edx, word [eax]
add ecx, 2
test dx, dx
jne 0x42aa90
mov edi, str.https:__www.carifred.com_cleardiskinfo_buy_license__hfp
mov edx, 0x68
sub edi, ecx
nop dword [eax]
mov word [ecx], dx
add ecx, 2
movzx eax, word [ecx + edi]
mov edx, eax
test ax, ax
jne 0x42aab0
mov eax, dword [ebp - 0x1350]
mov edi, dword [ebp - 0x137c]
test eax, eax
je 0x42aaf2
movzx eax, word [eax]
mov edx, eax
test ax, ax
je 0x42aaf2
mov eax, dword [ebp - 0x1370]
mov word [ecx], dx
lea eax, [eax + 2]
movzx edx, word [eax]
add ecx, 2
test dx, dx
jne 0x42aae1
xor eax, eax
mov word [ecx], ax
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x42ab0a
push eax
call fcn.00469e73
add esp, 4
mov ecx, dword [ebp - 0x135c]
mov eax, dword [ebp - 0x134c]
mov dword [ebp - 0x80], ecx
mov ecx, dword [ebp - 0x1344]
mov dword [ebp - 0x84], eax
mov byte [ebp - 0x7c], 1
test ecx, ecx
je 0x42ab3c
push ecx
call fcn.00469e73
mov eax, dword [ebp - 0x84]
add esp, 4
test eax, eax
jne 0x42ab5e
push 2
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0x84], eax
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x80], ecx
sub esp, 0xc
mov byte [ebp - 0x7c], 1
mov ecx, eax
call fcn.0040bb00
jmp 0x42ab75
mov ecx, esi
call fcn.0044be70
push 0
mov ecx, esi
call fcn.0043fc50
test eax, eax
je 0x42af1e
mov eax, dword [sym.imp.SETUPAPI.dll_CM_Request_Device_EjectW]
movsd xmm0, qword [0x4a9cf8]
mov dword [ebp - 0x13d0], eax
mov eax, dword [sym.imp.SETUPAPI.dll_CM_Query_And_Remove_SubTreeW]
mov dword [ebp - 0x13cc], eax
mov eax, dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [ebp - 0x13d4], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [ebp - 0x13c8], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [ebp - 0x13dc], eax
movsd qword [ebp - 0xa0], xmm0
nop dword [eax]
mov eax, dword [esi + 0xc0]
cmp eax, 0xfffffffa
je 0x42af1e
lea ecx, [esi + 0x138]
cmp dword [esi + 0xf0], ecx
jne 0x42ae73
cmp eax, 0xffffffd3
je 0x42abff
cmp eax, 0xffffffd2
jne 0x42add1
mov edx, dword [esi + 0x84]
cmp dword [esi + 0xcc], edx
jne 0x42add1
cmp edx, 0xffffffff
jne 0x42ac19
mov edx, dword [ecx + 0x40]
mov eax, dword [ecx + 0x3c]
test eax, eax
je 0x42ac55
cmp edx, 1
jl 0x42ac55
cmp edx, dword [ecx + 0x40]
jg 0x42ac55
lea edx, [edx + edx*8]
cmp dword [eax + edx*8 + 0xc], 0
je 0x42ac55
cmp dword [eax + edx*8], 0xf
jne 0x42ac55
push 2
push 0xffffffffffffffff
push 0x100c
push dword [eax + edx*8 + 4]
call dword [ebp - 0x1388]
lea ecx, [esi + 0x138]
jmp 0x42ac58
or eax, 0xffffffff
push 3
push eax
push dword [esi + 0x84]
mov dword [ebp - 0x1378], eax
call fcn.00419c90
mov ecx, eax
mov dword [ebp - 0x134c], ecx
test ecx, ecx
jne 0x42ac95
push eax
lea ecx, [ebp - 0x84]
call fcn.00401a20
mov ecx, dword [ebp - 0x84]
mov edx, dword [eax]
test edx, edx
je 0x42acc9
mov eax, dword [ebp - 0x80]
jmp 0x42acbf
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x42acae
push eax
call fcn.00469e73
mov ecx, dword [ebp - 0x134c]
add esp, 4
xor eax, eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x80], eax
mov edx, ecx
mov byte [ebp - 0x7c], 1
cmp word [edx], 0
jne 0x42ad7d
test ecx, ecx
je 0x42acd6
push ecx
call fcn.00469e73
add esp, 4
mov ecx, dword [ebp - 0x1334]
xor eax, eax
mov byte [ebp - 0x7c], 0
nop dword [eax]
nop word [eax + eax]
inc eax
mov dword [ebp - 0x1358], ecx
cmp word [eax*2 + 0x49f8e0], 0
jne 0x42acf0
mov dword [ebp - 0x80], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x1358]
xor ecx, ecx
mov dword [ebp - 0x1334], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x84], edx
test eax, eax
jle 0x42ad6a
mov eax, dword [ebp - 0x1358]
mov dword [ebp - 0x1334], eax
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x49f8e0]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x80]
mov edx, dword [ebp - 0x84]
cmp ecx, eax
jl 0x42ad50
xor ecx, ecx
mov word [edx + eax*2], cx
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x84]
mov byte [ebp - 0x7c], 1
test ecx, ecx
je 0x42adae
test eax, eax
jne 0x42ad9d
cmp word [ecx], ax
je 0x42ad98
nop word [eax + eax]
inc eax
cmp word [ecx + eax*2], 0
jne 0x42ad90
mov dword [ebp - 0x80], eax
test eax, eax
jle 0x42adae
push ecx
mov byte [ebp - 0x7c], 1
call fcn.0046dfd0
add esp, 4
jmp 0x42adb4
mov byte [ebp - 0x7c], 0
xor eax, eax
push 1
push eax
push dword [ebp - 0x1378]
mov ecx, esi
call fcn.0042ec60
push eax
mov ecx, esi
call fcn.0042eb60
jmp 0x42ae73
mov edx, dword [ebp - 0x13b0]
cmp eax, edx
jne 0x42b0dc
push 4
push edx
call fcn.00418ca0
xor ecx, ecx
mov esi, eax
test esi, esi
setne cl
lea ecx, [ecx*4 + 4]
push ecx
push dword [ebp - 0x13b0]
mov ecx, dword [ebp - 0x1368]
call fcn.00417b80
xor eax, eax
test esi, esi
sete al
mov dword [ebp - 0x88], eax
test esi, esi
jne 0x42ae48
lea eax, [ebp - 0xd0]
push eax
call dword [ebp - 0x1348]
mov edx, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd0]
call fcn.0047ac30
divsd xmm0, qword [ebp - 0xc0]
movsd qword [ebp - 0xc8], xmm0
mov eax, dword [ebp - 0x136c]
mov eax, dword [eax]
test eax, eax
je 0x42ae6d
push 4
lea ecx, [ebp - 0x88]
push ecx
push 4
push 0
push str.AutoRefresh
push eax
call dword [ebp - 0x138c]
mov esi, dword [ebp - 0x1338]
cmp dword [ebp - 0x88], 0
je 0x42af0d
movsd xmm0, qword [ebp - 0xc8]
ucomisd xmm0, qword [ebp - 0x13f8]
movsd qword [ebp - 0xb8], xmm0
lahf
test ah, 0x44
jnp 0x42af0d
lea eax, [ebp - 0xd0]
push eax
call dword [ebp - 0x1348]
mov edx, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd0]
call fcn.0047ac30
divsd xmm0, qword [ebp - 0xc0]
subsd xmm0, qword [ebp - 0xb8]
comisd xmm0, xmmword [ebp - 0xa0]
jbe 0x42af0d
push 0xffffffffffffffff
mov ecx, esi
call fcn.0042c270
lea eax, [ebp - 0xd0]
push eax
call dword [ebp - 0x1348]
mov edx, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd0]
call fcn.0047ac30
divsd xmm0, qword [ebp - 0xc0]
movsd qword [ebp - 0xc8], xmm0
push 0
mov ecx, esi
call fcn.0043fc50
test eax, eax
jne 0x42abd0
lea eax, [ebp - 0x110]
push eax
push dword [esi + 0xb0]
call dword [ebp - 0x1340]
mov eax, dword [ebp - 0x108]
sub eax, dword [ebp - 0x110]
mov esi, dword [ebp - 0x136c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x10c]
mov dword [ebp - 0x94], eax
mov eax, dword [esi]
test eax, eax
je 0x42af7a
push 4
lea ecx, [ebp - 0x8c]
push ecx
push 4
push 0
push 0x4a0294
push eax
call dword [ebp - 0x138c]
mov eax, dword [esi]
test eax, eax
je 0x42af99
push 4
lea ecx, [ebp - 0x94]
push ecx
push 4
push 0
push 0x4a029c
push eax
call dword [ebp - 0x138c]
xor ecx, ecx
mov eax, 0x4eb
cmp byte [ebp - 0x1361], cl
cmovne ecx, eax
mov dword [ebp - 0x136c], ecx
mov eax, dword [ebp - 0x12a8]
mov esi, dword [ebp - 0x1374]
test eax, eax
je 0x42afc2
push eax
call esi
mov eax, dword [ebp - 0x12ac]
test eax, eax
je 0x42afcf
push eax
call esi
test edi, edi
je 0x42afd6
push edi
call esi
mov eax, dword [ebp - 0x12b0]
test eax, eax
je 0x42afe3
push eax
call esi
mov eax, dword [ebp - 0x12b4]
test eax, eax
je 0x42aff0
push eax
call esi
mov eax, dword [ebp - 0x12b8]
test eax, eax
je 0x42affd
push eax
call esi
mov eax, dword [ebp - 0x12d0]
test eax, eax
je 0x42b00a
push eax
call esi
mov eax, dword [ebp - 0x12bc]
test eax, eax
je 0x42b017
push eax
call esi
mov eax, dword [ebp - 0x12c0]
test eax, eax
je 0x42b024
push eax
call esi
mov eax, dword [ebp - 0x12c4]
test eax, eax
je 0x42b031
push eax
call esi
mov eax, dword [ebp - 0x12c8]
test eax, eax
je 0x42b03e
push eax
call esi
mov ecx, dword [ebp - 0x133c]
test ecx, ecx
je 0x42b050
mov eax, dword [ecx]
push 1
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x42b063
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x1354]
test eax, eax
je 0x42b070
push eax
call esi
mov eax, dword [ebp - 0x1384]
test eax, eax
je 0x42b07d
push eax
call esi
mov edi, dword [ebp - 0x136c]
mov esi, dword [ebp - 0x1398]
mov eax, dword [ebp - 0xe8]
test eax, eax
je 0x42b09c
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x13a0]
test eax, eax
je 0x42b0af
mov edx, dword [ebp - 0x13bc]
cmp eax, edx
jne 0x42b1a8
push 4
push edx
call fcn.00418ca0
xor ecx, ecx
mov esi, eax
mov eax, dword [ebp - 0x13bc]
test esi, esi
setne cl
lea ecx, [ecx*4 + 4]
push ecx
mov ecx, dword [ebp - 0x1368]
push eax
call fcn.00417b80
mov eax, dword [ebp - 0x1338]
xor ecx, ecx
test esi, esi
setne cl
mov eax, dword [eax]
mov dword [ebp - 0x134c], eax
test esi, esi
jne 0x42b13c
xor eax, eax
mov edx, 0xfffefc
mov esi, 0x301020
jmp 0x42b14b
mov eax, 0xffffff
mov edx, 0x301020
mov esi, 0xc0c0c0
mov edi, dword [ebp - 0x1390]
mov dword [edi], esi
mov esi, dword [ebp - 0x13a8]
mov dword [esi], edx
mov edx, dword [ebp - 0x1380]
mov esi, dword [ebp - 0x1338]
mov dword [edx], eax
mov edi, dword [ebp - 0x137c]
mov dword [esi], ecx
mov eax, dword [esi + 0x9a8]
test eax, eax
je 0x42b18e
push 4
push esi
push 4
push 0
push str.CurrentTheme
push eax
call dword [ebp - 0x138c]
mov eax, dword [ebp - 0x134c]
cmp eax, dword [esi]
je 0x42af0d
mov byte [ebp - 0x1361], 1
jmp 0x42af1e
cmp eax, dword [esi + 0x30]
jne 0x42b265
mov eax, dword [esi + 0x84]
cmp eax, 0xffffffff
jne 0x42b1bf
mov eax, dword [ecx + 0x40]
mov edx, dword [ecx + 0x3c]
test edx, edx
je 0x42b256
cmp eax, 1
jl 0x42b256
cmp eax, dword [ecx + 0x40]
jg 0x42b256
lea eax, [eax + eax*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x42b256
cmp dword [edx + eax*8], 0xf
jne 0x42b256
push 2
push 0xffffffffffffffff
push 0x100c
push dword [edx + eax*8 + 4]
call dword [ebp - 0x1388]
mov dword [ebp - 0x1358], eax
lea ecx, [esi + 0x138]
test eax, eax
js 0x42b256
push 8
push dword [esi + 0x30]
call fcn.00418ca0
mov ecx, esi
test eax, eax
je 0x42b233
push dword [ebp - 0x1358]
call fcn.004451c0
push eax
mov ecx, esi
call fcn.00445480
jmp 0x42ae73
push 1
push dword [ebp - 0x1358]
call fcn.004451c0
push eax
mov ecx, esi
call fcn.004456b0
cmp eax, 0xffffffff
jl 0x42af1e
jmp 0x42ae73
push 0x48
push dword [esi + 0x30]
call fcn.00417b80
jmp 0x42af0d
cmp eax, dword [esi + 0x6c]
jne 0x42b278
push 0xffffffffffffffff
mov ecx, esi
call fcn.0042c270
jmp 0x42ae73
mov edx, dword [ebp - 0x13ac]
cmp eax, edx
jne 0x42b2e9
push 4
push edx
call fcn.00418ca0
xor ecx, ecx
mov dword [ebp - 0x134c], eax
test eax, eax
sete cl
mov dword [ebp - 0x90], ecx
mov ecx, dword [esi + 0x9a8]
test ecx, ecx
je 0x42b2c0
push 4
lea eax, [ebp - 0x90]
push eax
push 4
push 0
push str.AutoUpdate
push ecx
call dword [ebp - 0x138c]
xor eax, eax
lea ecx, [esi + 0x138]
cmp dword [ebp - 0x134c], eax
setne al
lea eax, [eax*4 + 4]
push eax
push dword [ebp - 0x13ac]
call fcn.00417b80
jmp 0x42ae73
cmp eax, dword [esi + 0x5c]
jne 0x42b66a
mov eax, dword [esi + 0x84]
cmp eax, 0xffffffff
jne 0x42b300
mov eax, dword [ecx + 0x40]
mov edx, dword [ecx + 0x3c]
test edx, edx
je 0x42b33c
cmp eax, 1
jl 0x42b33c
cmp eax, dword [ecx + 0x40]
jg 0x42b33c
lea eax, [eax + eax*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x42b33c
cmp dword [edx + eax*8], 0xf
jne 0x42b33c
push 2
push 0xffffffffffffffff
push 0x100c
push dword [edx + eax*8 + 4]
call dword [ebp - 0x1388]
mov dword [ebp - 0x1350], eax
jmp 0x42b346
mov dword [ebp - 0x1350], 0xffffffff
mov ecx, esi
call fcn.004450b0
test al, al
je 0x42b646
cmp dword [ebp - 0x1350], 0
jl 0x42b646
mov ecx, dword [esi + 0x94]
cmp dword [esi + 0x99c], ecx
ja 0x42b379
lea eax, [ecx + 1]
mov dword [esi + 0x99c], eax
lea ecx, [ecx + ecx*2]
shl ecx, 5
add ecx, dword [esi + 0x9a4]
mov dword [ebp - 0x134c], ecx
cmp dword [ecx + 0x3c], 0
jne 0x42b3ac
push 2
call fcn.0046a22b
mov ecx, dword [ebp - 0x134c]
add esp, 4
xor edx, edx
mov dword [ecx + 0x3c], eax
mov word [eax], dx
mov dword [ecx + 0x40], edx
mov byte [ecx + 0x44], 1
mov eax, dword [ebp - 0x84]
mov ecx, dword [ecx + 0x3c]
mov dword [ebp - 0x1358], ecx
test eax, eax
je 0x42b3d2
push eax
call fcn.00469e73
mov ecx, dword [ebp - 0x1358]
add esp, 4
xor eax, eax
mov byte [ebp - 0x7c], 0
test ecx, ecx
je 0x42b3e9
cmp word [ecx], ax
je 0x42b3e9
mov dword [ebp - 0x80], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x80]
xor ecx, ecx
mov dword [ebp - 0x84], edx
test eax, eax
jle 0x42b43c
sub esp, 8
mov ecx, esi
push 0x8c
push 0x190
push 0
push 0
push 4
push str.Please_select_a_disk_in_the_left_pan_first
call fcn.00440f90
jmp 0x42af0d
cmp eax, dword [ebp - 0x13b4]
jne 0x42b6b0
push ecx
mov ecx, esi
call fcn.004411d0
cmp eax, 1
je 0x42af1e
cmp eax, 2
jne 0x42ae73
sub esp, 8
mov ecx, esi
push 0x8c
push 0x190
push 0
push 0
push 4
push str.Clear_Disk_Info_is_up_to_date_
call fcn.00440f90
jmp 0x42ae73
cmp eax, dword [esi + 0x60]
jne 0x42b7cb
mov ecx, esi
call fcn.004450b0
test al, al
je 0x42bc00
xorps xmm0, xmm0
movups xmmword [ebp - 0x170], xmm0
movups xmmword [ebp - 0x160], xmm0
mov eax, dword [esi + 0x58]
mov ecx, dword [esi + 0x84]
mov edx, dword [esi + 0x4c]
mov dword [ebp - 0x170], 0
push ecx
push eax
push ecx
mov byte [ebp - 4], 0x16
lea eax, [esi + 0x138]
movaps xmm0, xmmword [0x4aa050]
lea ecx, [ebp - 0x170]
push edx
push eax
movups xmmword [ebp - 0x168], xmm0
mov dword [ebp - 0x158], 0xd
mov dword [ebp - 0x154], 0
call fcn.0041b290
mov ecx, dword [ebp - 0x1334]
lea eax, [esi + 0x138]
sub esp, 0x10
mov byte [ebp - 4], 0x17
push eax
push str.Checking_the_selected_disk...
call fcn.0041d090
mov ecx, dword [ebp - 0x1334]
sub esp, 8
push 0
push 0xffffffffffffffba
call fcn.0041d670
mov ecx, eax
call fcn.0041d7f0
push 1
push 5
lea ecx, [eax + 0x78]
call fcn.00410690
push 0
push dword [esi + 0x94]
mov ecx, esi
call fcn.00443e70
mov ecx, dword [ebp - 0x1334]
call fcn.0041d5d0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x154]
test ecx, ecx
je 0x42b7c0
cmp dword [ebp - 0x170], 0
je 0x42bbe3
push dword [ebp - 0x158]
lea eax, [ebp - 0x170]
push dword [ebp - 0x168]
push eax
call fcn.0040f3f0
call fcn.004038e0
mov eax, dword [ebp - 0x170]
jmp 0x42bbd6
cmp eax, dword [esi + 0x64]
jne 0x42b8e6
mov ecx, esi
call fcn.004450b0
test al, al
je 0x42bc00
xorps xmm0, xmm0
movups xmmword [ebp - 0x190], xmm0
movups xmmword [ebp - 0x180], xmm0
mov eax, dword [esi + 0x58]
mov ecx, dword [esi + 0x84]
mov edx, dword [esi + 0x4c]
mov dword [ebp - 0x190], 0
push ecx
push eax
push ecx
mov byte [ebp - 4], 0x19
lea eax, [esi + 0x138]
movaps xmm0, xmmword [0x4aa050]
lea ecx, [ebp - 0x190]
push edx
push eax
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x178], 0xd
mov dword [ebp - 0x174], 0
call fcn.0041b290
mov ecx, dword [ebp - 0x1334]
lea eax, [esi + 0x138]
sub esp, 0x10
mov byte [ebp - 4], 0x1a
push eax
push str.Checking_and_repairing_the_selected_disk...
call fcn.0041d090
mov ecx, dword [ebp - 0x1334]
sub esp, 8
push 0
push 0xffffffffffffffba
call fcn.0041d670
mov ecx, eax
call fcn.0041d7f0
push 1
push 5
lea ecx, [eax + 0x78]
call fcn.00410690
push 1
push dword [esi + 0x94]
mov ecx, esi
call fcn.00443e70
mov ecx, dword [ebp - 0x1334]
call fcn.0041d5d0
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x174]
test ecx, ecx
je 0x42b8db
cmp dword [ebp - 0x190], 0
je 0x42bbe3
push dword [ebp - 0x178]
lea eax, [ebp - 0x190]
push dword [ebp - 0x188]
push eax
call fcn.0040f3f0
call fcn.004038e0
mov eax, dword [ebp - 0x190]
jmp 0x42bbd6
cmp eax, dword [esi + 0x68]
jne 0x42b9ff
mov ecx, esi
call fcn.004450b0
test al, al
je 0x42bc00
xorps xmm0, xmm0
movups xmmword [ebp - 0x1b0], xmm0
movups xmmword [ebp - 0x1a0], xmm0
mov eax, dword [esi + 0x58]
mov ecx, dword [esi + 0x84]
mov edx, dword [esi + 0x4c]
mov dword [ebp - 0x1b0], 0
push ecx
push eax
push ecx
mov byte [ebp - 4], 0x1c
lea eax, [esi + 0x138]
movaps xmm0, xmmword [0x4aa050]
lea ecx, [ebp - 0x1b0]
push edx
push eax
movups xmmword [ebp - 0x1a8], xmm0
mov dword [ebp - 0x198], 0xd
mov dword [ebp - 0x194], 0
call fcn.0041b290
mov ecx, dword [ebp - 0x1334]
lea eax, [esi + 0x138]
sub esp, 0x10
mov byte [ebp - 4], 0x1d
push eax
push str.Optimizing_the_selected_disk...
call fcn.0041d090
mov ecx, dword [ebp - 0x1334]
sub esp, 8
push 0
push 0xffffffffffffffba
call fcn.0041d670
mov ecx, eax
call fcn.0041d7f0
push 1
push 5
lea ecx, [eax + 0x78]
call fcn.00410690
push dword [esi + 0x94]
mov ecx, esi
call fcn.00443cd0
mov ecx, dword [ebp - 0x1334]
call fcn.0041d5d0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x194]
test ecx, ecx
je 0x42b9f4
cmp dword [ebp - 0x1b0], 0
je 0x42bbe3
push dword [ebp - 0x198]
lea eax, [ebp - 0x1b0]
push dword [ebp - 0x1a8]
push eax
call fcn.0040f3f0
call fcn.004038e0
mov eax, dword [ebp - 0x1b0]
jmp 0x42bbd6
cmp eax, dword [esi + 0x90]
jne 0x42bbec
mov ecx, esi
call fcn.004450b0
test al, al
je 0x42bc00
mov eax, dword [esi + 0x94]
test eax, eax
js 0x42af0d
cmp eax, dword [esi + 0x99c]
jge 0x42af0d
xorps xmm0, xmm0
mov dword [ebp - 0xec], 0
movups xmmword [ebp - 0x150], xmm0
movups xmmword [ebp - 0x140], xmm0
mov eax, dword [esi + 0x58]
mov ecx, dword [esi + 0x84]
mov edx, dword [esi + 0x4c]
mov dword [ebp - 0x150], 0
push ecx
push eax
push ecx
mov byte [ebp - 4], 0x1f
lea eax, [esi + 0x138]
movaps xmm0, xmmword [0x4aa050]
lea ecx, [ebp - 0x150]
push edx
push eax
movups xmmword [ebp - 0x148], xmm0
mov dword [ebp - 0x138], 0xd
mov dword [ebp - 0x134], 0
call fcn.0041b290
mov ecx, dword [ebp - 0x1334]
lea eax, [esi + 0x138]
push 0
push 0xffffffffffffffba
sub esp, 0x10
mov byte [ebp - 4], 0x20
push eax
push str.Ejecting_the_selected_disk...
call fcn.0041d090
mov ecx, eax
call fcn.0041d670
push 1
push 5
lea ecx, [eax + 0x78]
call fcn.00410690
mov ecx, dword [esi + 0x94]
cmp dword [esi + 0x99c], ecx
ja 0x42baed
test eax, eax
je 0x42bbe3
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x12
jmp 0x42ae73
cmp eax, dword [esi + 0x50]
jne 0x42be1e
mov ecx, esi
call fcn.004450b0
test al, al
jne 0x42bc24
sub esp, 8
mov ecx, esi
push 0x8c
push 0x190
push 0
push 0
push 4
push str.Please_select_a_disk_in_the_left_pane_first
call fcn.00440f90
jmp 0x42af0d
mov eax, dword [esi + 0x94]
test eax, eax
js 0x42af0d
cmp eax, dword [esi + 0x99c]
jge 0x42af0d
cmp eax, dword [ebp - 0x13e0]
jne 0x42c142
cmp dword [esi + 0x978], 0
jne 0x42be4e
push 2
call fcn.0046a22b
add esp, 4
mov dword [esi + 0x978], eax
xor ecx, ecx
mov word [eax], cx
mov dword [esi + 0x97c], ecx
mov byte [esi + 0x980], 1
xor edx, edx
mov ecx, dword [esi + 0x978]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x80], 0
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x1344], ecx
mov dword [ebp - 0x135c], str.mmc.exe__diskmgmt.msc
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x1370], eax
mov dword [ebp - 0x1350], ecx
inc edx
cmp word [edx*2 + 0x49ef94], 0
jne 0x42be94
cmp eax, dword [ebp - 0x13b8]
jne 0x42c156
mov ecx, esi
call fcn.0044d160
jmp 0x42ae73
cmp eax, dword [ebp - 0x13a4]
jne 0x42c16a