Function at 0x404b30
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x478ed1
mov eax, dword fs:[0]
push eax
sub esp, 0x704
mov eax, dword [0x49e280]
xor eax, esp
mov dword [esp + 0x700], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x49e280]
xor eax, esp
push eax
lea eax, [esp + 0x718]
mov dword fs:[0], eax
mov esi, ecx
mov edi, edx
mov ebp, dword [esp + 0x728]
mov ebx, dword [esp + 0x72c]
push ebp
call fcn.004041f0
add esp, 4
test eax, eax
jne 0x4055c8
mov eax, dword [0x4a396c]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x404ba8
xor ecx, ecx
mov dword [0x4a396c], ecx
jmp 0x404bae
mov ecx, dword [0x4a396c]
lea eax, [edi - 0xf520]
cmp eax, 0xdc
ja case.0x404bc6.62759
movzx edx, byte [eax + 0x406014]
jmp dword [edx*4 + 0x405f3c]
test esi, esi
jne 0x4055c8
lea esi, [esp + 0x24]
call fcn.00406520
push 0x57
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x404c00
xor edi, edi
mov esi, ebx
call fcn.0040ee20
call fcn.00411fd0
lea eax, [edi + 1]
jmp 0x405f14
push 0
push 0x604
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
jne 0x404c34
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x404c60
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
cmp eax, dword [0x4a396c]
jne 0x404c60
push 0
push 7
push 0x7ea
call esi
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
push 0
push 0x6ed
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
jne 0x404c94
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x404cbe
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
cmp eax, dword [0x4a396c]
jne 0x404cbe
push 1
push 0x33
call esi
mov esi, eax
call fcn.00409c30
add esp, 8
mov eax, 1
jmp 0x405f14
push 0
push 0x6f0
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
jne 0x404cf2
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x404d1c
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
cmp eax, dword [0x4a396c]
jne 0x404d1c
push 1
push 0x34
call esi
mov esi, eax
call fcn.00409c30
add esp, 8
mov eax, 1
jmp 0x405f14
push 0
push 0x6f1
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
push eax
push 0x25
push 0x7ea
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
jne 0x404d7e
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x404daa
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
cmp eax, dword [0x4a396c]
jne 0x404daa
push 0
push 0x29
push 0x7ea
call esi
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
push 0
push 0x6e3
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
jne 0x404dde
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x404e0a
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
cmp eax, dword [0x4a396c]
jne 0x404e0a
push 0
push 0x28
push 0x7ea
call esi
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
push 0
push 0x6e9
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
je 0x4055c8
call fcn.004032f0
test eax, eax
je 0x404e68
call fcn.00403320
mov esi, eax
test esi, esi
je 0x4055c8
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
je 0x404e4e
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push 0
push 0x7ec
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
call fcn.00403830
test eax, eax
je 0x404c00
xor edi, edi
mov esi, ebx
call fcn.0040ee20
mov edi, ebp
call fcn.004039d0
test eax, eax
je 0x4055c8
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 4
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
call fcn.00422bd0
test eax, eax
je 0x404f03
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x1d
push 0x11
call esi
push 0
push 0
push 0x4e
push 0x6b
call esi
push 0
push 2
push 0x4e
push 0x6b
call esi
push 0
push 2
push 0x1d
push 0x11
call esi
mov eax, 1
jmp 0x405f14
cmp dword [0x4a396c], 0
je 0x404f3d
call fcn.00403410
test eax, eax
je 0x404f3d
cmp esi, 1
jbe 0x404f1f
mov esi, 1
mov eax, dword [0x4a396c]
push esi
push 5
push 0x7ea
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
push 0
test esi, esi
jbe 0x404f59
push 1
push 0x48
push 0x26
call dword [sym.imp.USER32.dll_keybd_event]
mov eax, 1
jmp 0x405f14
push 3
push 0x48
push 0x26
call dword [sym.imp.USER32.dll_keybd_event]
mov eax, 1
jmp 0x405f14
call fcn.00422bd0
test eax, eax
je 0x404fb0
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x1d
push 0x11
call esi
push 0
push 0
push 0x4a
push 0x6d
call esi
push 0
push 2
push 0x4a
push 0x6d
call esi
push 0
push 2
push 0x1d
push 0x11
call esi
mov eax, 1
jmp 0x405f14
cmp dword [0x4a396c], 0
je 0x404feb
call fcn.00403410
test eax, eax
je 0x404feb
cmp esi, 1
jbe 0x404fcc
mov esi, 1
mov ecx, dword [0x4a396c]
push esi
push 6
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
push 0
test esi, esi
jbe 0x405007
push 1
push 0x50
push 0x28
call dword [sym.imp.USER32.dll_keybd_event]
mov eax, 1
jmp 0x405f14
push 3
push 0x50
push 0x28
call dword [sym.imp.USER32.dll_keybd_event]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
call fcn.00422bd0
test eax, eax
je 0x405059
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x30
push 0x42
call esi
push 0
push 2
push 0x30
push 0x42
call esi
mov eax, 1
jmp 0x405f14
cmp dword [0x4a396c], 0
je 0x4055c8
mov ebx, 0x32
call fcn.004037e0
lea eax, [ebx - 0x31]
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
call fcn.00422bd0
test eax, eax
je 0x4050b4
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x21
push 0x46
call esi
push 0
push 2
push 0x21
push 0x46
call esi
mov eax, 1
jmp 0x405f14
cmp dword [0x4a396c], 0
je 0x4055c8
mov ebx, 0x31
call fcn.004037e0
lea eax, [ebx - 0x30]
jmp 0x405f14
cmp esi, 1
jbe 0x405114
test ecx, ecx
je 0x405100
mov eax, 0xaaaaaaab
mul esi
shr edx, 3
lea edx, [edx + edx*2]
add edx, edx
add edx, edx
sub esi, edx
cmp esi, 1
jne 0x4055c8
lea ebx, [esi + 0x31]
call fcn.004037e0
mov dword [0x4a4728], 1
mov eax, 1
jmp 0x405f14
test esi, esi
jne 0x4055c8
cmp dword [0x4a4728], esi
je 0x40514f
test ecx, ecx
jne 0x40513b
push 0
push 0x611
push 0x404
push ebp
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [0x4a4728], 0
mov eax, 1
jmp 0x405f14
test ecx, ecx
je 0x405128
mov ebx, 0xc
call fcn.004037e0
mov dword [0x4a4728], 0
lea eax, [ebx - 0xb]
jmp 0x405f14
cmp esi, 1
jbe 0x4051b0
test ecx, ecx
je 0x40519c
mov eax, 0xaaaaaaab
mul esi
shr edx, 3
lea eax, [edx + edx*2]
add eax, eax
add eax, eax
sub esi, eax
cmp esi, 1
jne 0x4055c8
lea ebx, [esi + 0x30]
call fcn.004037e0
mov dword [0x4a472c], 1
mov eax, 1
jmp 0x405f14
test esi, esi
jne 0x4055c8
cmp dword [0x4a472c], esi
je 0x4051eb
test ecx, ecx
jne 0x4051d7
push 0
push 0x610
push 0x404
push ebp
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [0x4a472c], 0
mov eax, 1
jmp 0x405f14
test ecx, ecx
je 0x4051c4
mov ebx, 0xb
call fcn.004037e0
mov dword [0x4a472c], 0
lea eax, [ebx - 0xa]
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
je 0x4055c8
call fcn.00422bd0
test eax, eax
je 0x405247
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x1c
push 0xd
call esi
push 0
push 2
push 0x1c
push 0xd
call esi
mov eax, 1
jmp 0x405f14
cmp dword [0x4a396c], 0
je 0x405262
mov ebx, 0xe
call fcn.004037e0
lea eax, [ebx - 0xd]
jmp 0x405f14
push esi
push 0x604
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
je 0x4055c8
call fcn.00422bd0
test eax, eax
je 0x4052a9
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x1f
push 0x53
call esi
push 0
push 2
push 0x1f
push 0x53
call esi
mov eax, 1
jmp 0x405f14
cmp dword [0x4a396c], 0
je 0x4052c4
mov ebx, 0xd
call fcn.004037e0
lea eax, [ebx - 0xc]
jmp 0x405f14
push esi
push 0x602
jmp 0x4055bc
call fcn.00422bd0
test eax, eax
je 0x4052fc
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x4e
push 0x6b
call esi
push 0
push 2
push 0x4e
push 0x6b
call esi
mov eax, 1
jmp 0x405f14
push esi
push 0x501
jmp 0x4055bc
call fcn.00422bd0
test eax, eax
je 0x405b38
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x4a
push 0x6d
call esi
push 0
push 2
push 0x4a
push 0x6d
call esi
mov eax, 1
jmp 0x405f14
cmp dword [0x4a3fc8], 0
je 0x4055c8
push 0
push 0x501
jmp 0x4055bc
cmp dword [0x4a3fc8], 0
je 0x4055c8
push 0
push 0x502
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x18]
mov eax, edi
call fcn.00403b30
test eax, eax
je case.0x404bc6.62759
mov ecx, dword [esp + 0x18]
push 1
push ecx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, eax
call fcn.00409c30
xor esi, esi
add esp, 8
cmp eax, esi
jne 0x4055c8
call fcn.00403320
cmp eax, esi
je 0x4053d2
push 1
push 0x30
mov esi, eax
call fcn.00409c30
add esp, 8
mov eax, 1
jmp 0x405f14
xor edx, edx
mov dword [esp + 0xc0], vtable.NtiCdMaker.0
mov dword [esp + 0xdc], 7
mov dword [esp + 0xd8], esi
mov word [esp + 0xc8], dx
lea ecx, [esp + 0xc0]
mov dword [esp + 0x720], esi
call fcn.00420210
test eax, eax
je 0x405447
lea ecx, [esp + 0xc0]
call fcn.004203f0
lea ecx, [esp + 0xc0]
test eax, eax
je 0x405442
call fcn.00420470
lea ecx, [esp + 0xc0]
call fcn.00403260
mov eax, 1
jmp 0x405f14
call fcn.004202c0
lea ecx, [esp + 0xc0]
call fcn.00403260
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x405489
push eax
push 0xb
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x30e]
push ecx
mov dword [esp + 0x24], 0
mov word [esp + 0x310], ax
call fcn.0045acf0
add esp, 0xc
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_PathsPowerCinema.exe
lea edx, [esp + 0x308]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 0x18]
push eax
push 0x20019
push 0
lea ecx, [esp + 0x310]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4055b5
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x516]
push eax
mov word [esp + 0x518], dx
call fcn.0045acf0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x106]
push edx
mov word [esp + 0x108], cx
call fcn.0045acf0
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x100]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x28]
push edx
push 0
lea eax, [esp + 0x51c]
push eax
push ecx
mov dword [esp + 0x38], 1
mov dword [esp + 0x34], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4055a0
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x48df38
lea edx, [esp + 0x100]
push edx
call esi
push 0x48df3c
lea eax, [esp + 0x100]
push eax
call esi
push 1
push 0
lea ecx, [esp + 0x104]
push ecx
push ebp
call dword [sym.imp.ComFnUtl.dll_ComFnUtl_ExecuteCommandW]
add esp, 0x10
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 1
jmp 0x405f14
push 0
push 0x6e2
push 0x404
push ebp
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0x20
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0x21
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0x22
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0x23
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0xc
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0xd
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0xe
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0xf
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0x12
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
jne 0x405792
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x4057bc
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
cmp eax, dword [0x4a396c]
jne 0x4057bc
push 1
push 1
call esi
mov esi, eax
call fcn.00409c30
add esp, 8
mov eax, 1
jmp 0x405f14
push 0
push 0x6ef
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
jne 0x4057f0
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x40581c
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
cmp eax, dword [0x4a396c]
jne 0x40581c
push 0
push 0x14
push 0x7ea
call esi
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
push 0
push 0x6ee
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0x15
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0x16
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0x18
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x4055c8
push eax
push 0x19
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
je 0x4055c8
test ecx, ecx
jne 0x405910
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x405930
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x4a396c]
jne 0x405930
mov ebx, 0x2e
call fcn.004037e0
lea eax, [ebx - 0x2d]
jmp 0x405f14
push esi
push 0x600
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
je 0x4055c8
test ecx, ecx
jne 0x405963
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x405983
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x4a396c]
jne 0x405983
mov ebx, 0x2f
call fcn.004037e0
lea eax, [ebx - 0x2e]
jmp 0x405f14
push esi
push 0x601
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
je 0x4055c8
test ecx, ecx
jne 0x4059ba
push ecx
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x405262
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0x4a396c]
cmp eax, ecx
jne 0x405262
push 0
push 0x24
push 0x7ea
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, 1
jmp 0x405f14
test ecx, ecx
je 0x4059f9
call fcn.00403410
test eax, eax
jne 0x4055c8
push 0
test esi, esi
jbe 0x405a15
push 1
push 0x4b
push 0x25
call dword [sym.imp.USER32.dll_keybd_event]
mov eax, 1
jmp 0x405f14
push 3
push 0x4b
push 0x25
call dword [sym.imp.USER32.dll_keybd_event]
mov eax, 1
jmp 0x405f14
test ecx, ecx
je 0x405a3c
call fcn.00403410
test eax, eax
jne 0x4055c8
push 0
test esi, esi
jbe 0x405a58
push 1
push 0x4d
push 0x27
call dword [sym.imp.USER32.dll_keybd_event]
mov eax, 1
jmp 0x405f14
push 3
push 0x4d
push 0x27
call dword [sym.imp.USER32.dll_keybd_event]
mov eax, 1
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
je 0x4055c8
call fcn.00422bd0
test eax, eax
jne 0x405223
cmp dword [0x4a396c], eax
jne 0x405aab
push eax
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x405262
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x4a396c]
jne 0x405262
mov ebx, 0xe
call fcn.004037e0
lea eax, [ebx - 0xd]
jmp 0x405f14
mov eax, esi
call fcn.0040e8e0
test eax, eax
je 0x4055c8
call fcn.00422bd0
test eax, eax
jne 0x405285
cmp dword [0x4a396c], eax
jne 0x405b0c
push eax
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4a396c], eax
test eax, eax
je 0x4052c4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x4a396c]
jne 0x4052c4
mov ebx, 0xd
call fcn.004037e0
lea eax, [ebx - 0xc]
jmp 0x405f14
test ecx, ecx
jne 0x4055c8
push esi
push 0x502
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
call fcn.004034e0
test eax, eax
je 0x405bd1
cmp dword [0x4a396c], 0
je 0x405bb0
call fcn.00403ac0
test eax, eax
je 0x4055c8
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x1d
push 0x11
call esi
push 0
push 0
push 0x54
push 0x54
call esi
push 0
push 2
push 0x54
push 0x54
call esi
push 0
push 2
push 0x1d
push 0x11
call esi
xor edi, edi
mov esi, ebx
call fcn.0040ee20
lea eax, [edi + 1]
jmp 0x405f14
mov esi, ebx
mov edi, ebp
call fcn.004039d0
mov ebp, eax
test ebp, ebp
je 0x4055c8
xor edi, edi
call fcn.0040ee20
mov eax, ebp
jmp 0x405f14
push 0
push 0xf5ee
jmp 0x4055bc
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x405bb0
call fcn.00403ac0
test eax, eax
je 0x4055c8
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x1d
push 0x11
call esi
push 0
push 0
push 0x4d
push 0x4d
call esi
push 0
push 2
push 0x4d
push 0x4d
jmp 0x405b93
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x405bb0
call fcn.00403ac0
test eax, eax
je 0x4055c8
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x1d
push 0x11
call esi
push 0
push 0
push 0x45
push 0x45
call esi
push 0
push 2
push 0x45
push 0x45
jmp 0x405b93
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x405bb0
call fcn.00403ac0
test eax, eax
je 0x4055c8
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x1d
push 0x11
call esi
push 0
push 0
push 0x49
push 0x49
call esi
push 0
push 2
push 0x49
push 0x49
jmp 0x405b93
mov eax, esi
call fcn.0040e8e0
test eax, eax
jne 0x4055c8
test ecx, ecx
je 0x405bb0
call fcn.00403ac0
test eax, eax
je 0x4055c8
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x1d
push 0x11
call esi
push 0
push 0
push 0x31
push 0x4e
call esi
push 0
push 2
push 0x31
push 0x4e
jmp 0x405b93
test esi, esi
jne 0x4055c8
xor edi, edi
mov esi, ebx
call fcn.0040ee20
lea eax, [edi + 1]
jmp 0x405f14
test esi, esi
jne 0x4055c8
xor eax, eax
mov dword [esp + 0xdc], 7
mov dword [esp + 0xd8], esi
mov word [esp + 0xc8], ax
mov dword [esp + 0xc0], 0x48e4e8
lea ecx, [esp + 0xc0]
mov dword [esp + 0x720], 1
call fcn.00422440
test eax, eax
je 0x405e78
push esi
push 0x48d7e8
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x405da0
push esi
push esi
push 0x7ec
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [esp + 0xc0]
call fcn.004031d0
mov eax, 1
jmp 0x405f14
lea ecx, [esp + 0xe0]
push ecx
lea ecx, [esp + 0xc4]
call fcn.004226d0
mov byte [esp + 0x720], 2
cmp dword [esp + 0xf4], 0
jne 0x405dd1
xor edi, edi
mov esi, ebx
call fcn.0040ee20
jmp 0x405e39
mov eax, dword [esp + 0xe4]
mov esi, 8
cmp dword [esp + 0xf8], esi
jae 0x405ded
lea eax, [esp + 0xe4]
push str.Acer_Arcade_Deluxe
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x405e0b
xor edi, edi
mov esi, str.Arcade_Deluxe
call fcn.0040ee20
jmp 0x405e39
push 0
call dword [sym.imp.OSDUtl2.dll_OSDUtl_HideAll]
mov eax, dword [esp + 0xe8]
add esp, 4
cmp dword [esp + 0xf8], esi
jae 0x405e2d
lea eax, [esp + 0xe4]
push 0
push eax
call dword [sym.imp.OSDUtl2.dll_OSDUtl_ShowStringW]
add esp, 8
lea ecx, [esp + 0xc0]
call fcn.00422910
lea ecx, [esp + 0xe0]
test eax, eax
je 0x405e6b
call fcn.00401820
lea ecx, [esp + 0xc0]
call fcn.004031d0
mov eax, 1
jmp 0x405f14
mov byte [esp + 0x720], 1
call fcn.00401820
call fcn.00403830
test eax, eax
je 0x405ed2
call fcn.004032f0
test eax, eax
je 0x405eb5
call fcn.00403320
mov esi, eax
test esi, esi
je 0x405eb5
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
je 0x405ea6
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push 0
push 0x7ec
push esi
jmp 0x405d84
xor edi, edi
mov esi, str.My_Aspire
call fcn.0040ee20
mov esi, ebx
mov edi, ebp
call fcn.004039d0
test eax, eax
jne 0x405d8a
push 0x57
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x405f00
xor edi, edi
mov esi, str.eHome
call fcn.0040ee20
call fcn.00411fd0
lea ecx, [esp + 0xc0]
call fcn.004031d0
lea eax, [edi + 1]
jmp 0x405f14
push 0
push 0x604
push 0x404
push ebp
jmp 0x405d84
xor eax, eax
mov ecx, dword [esp + 0x718]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x700]
xor ecx, esp
call fcn.00457c10
add esp, 0x710
ret