Function at 0x4248c0
Capabilities:
Delete registry key
Query or enumerate registry key
Query or enumerate registry value
Set registry value

Disassembly:
sub esp, 0x1d4
mov eax, dword [0x47e378]
xor eax, esp
mov dword [esp + 0x1d0], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x1e8]
push edi
lea eax, [esp + 0x34]
mov ebx, ecx
push eax
lea ecx, [esp + 0x3c]
xor ebp, ebp
push ecx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], ebp
call fcn.00412970
mov edi, dword [esp + 0x1f0]
mov eax, 4
mov ecx, 0x104
add esp, 8
cmp edi, eax
mov dword [esp + 0x10], ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebp
mov dword [esp + 0x48], ebp
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], 1
mov dword [esp + 0x44], ecx
jne 0x424a64
lea edx, [esp + 0x10]
push edx
push 0x20019
push ebp
push str.Softwareinteldisplayigfxcui_schemes
push SysReAllocString
mov dword [esp + 0x2c], eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4249ed
mov edx, dword [esp + 0x10]
push ebp
push ebp
push ebp
push ebp
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0xf0]
push ecx
push ebp
mov ebp, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push edx
xor edi, edi
call ebp
test eax, eax
jne 0x4249e5
lea ebx, [esi + 0xa5ec]
jmp 0x424990
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
add edi, 1
add ebx, 4
call fcn.00411b10
push 0x104
lea ecx, [esp + 0xe0]
push 0
push ecx
call fcn.004541e0
mov ecx, dword [esp + 0x1c]
add esp, 0xc
push 0
push 0
push 0
push 0
lea edx, [esp + 0x4c]
push edx
lea eax, [esp + 0xf0]
push eax
push edi
push ecx
mov dword [esp + 0x5c], 0x104
call ebp
test eax, eax
je 0x424990
mov dword [esi + 0xac0c], edi
xor ebp, ebp
mov edx, dword [esp + 0x10]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edx
call edi
cmp dword [esp + 0x1e8], 7
jne 0x424a44
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x14]
push ecx
push ebp
push 0x2001f
push ebp
push ebp
push ebp
push str.Softwareinteldisplayigfxcui_schemes
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x424a44
mov edx, dword [esp + 0x10]
add esi, 0xaa04
push esi
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov eax, dword [esp + 0x10]
push eax
call edi
mov eax, 1
mov ecx, dword [esp + 0x1e0]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00454162
add esp, 0x1d4
ret 8
lea eax, [esi + 0xaa04]
cmp eax, ebp
jne 0x424a72
xor eax, eax
jmp 0x424a49
push eax
push str.Softwareinteldisplayigfxcui_schemes
lea edx, [esp + 0xe4]
push str._s_s
push edx
call fcn.00454ad1
add esp, 0x10
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x14]
push ecx
push ebp
push 0x2001f
push ebp
push ebp
push ebp
lea edx, [esp + 0xf8]
push edx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x4249ed
cmp edi, 8
jne 0x424b07
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [esp + 0x44]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0xab08]
push ecx
lea edx, [esp + 0x48]
push edx
push ebp
push str.schemeexe
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0xaa00]
push edx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.szresetonexit
push ecx
call edi
jmp 0x4249ed
cmp edi, 6
jne 0x425153
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x10]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0x104
lea edx, [esi + 0xab08]
push edx
push eax
push ebp
push str.schemeexe
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [esi + 0xaa00]
push edx
push eax
push ebp
push str.szresetonexit
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6a4]
push edx
push eax
push ebp
push str.szopmode
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x4840]
push edx
push eax
push ebp
push 0x47abfc
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x4844]
push edx
push eax
push ebp
push 0x47ac15
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x4848]
push edx
push eax
push ebp
push str.szbpp
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x483c]
push edx
push eax
push ebp
push str.szrrate
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x4838]
push edx
push eax
push ebp
push str.szrotation
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x1750]
push edx
push eax
push ebp
push str.szaspect
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x1390]
push edx
push eax
push ebp
push str.szdevice
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6fc]
push edx
push eax
push ebp
push str.szbblue
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x700]
push edx
push eax
push ebp
push str.szbgreen
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x704]
push edx
push eax
push ebp
push str.szbred
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6f0]
push edx
push eax
push ebp
push str.szcblue
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6f4]
push edx
push eax
push ebp
push str.szcgreen
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6f8]
push edx
push eax
push ebp
push str.szcred
push ecx
call edi
push 4
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
lea edx, [ebx + 0x6e8]
push edx
push eax
push ebp
push str.szgblue
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6ec]
push edx
push eax
push ebp
push str.szggreen
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6e4]
push edx
push eax
push ebp
push str.szgred
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x7d28]
push edx
push eax
push ebp
push str.szsx
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x7d2c]
push edx
push eax
push ebp
push str.szsy
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x7d30]
push edx
push eax
push ebp
push str.szsbpp
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x7d24]
push edx
push eax
push ebp
push str.szsrrate
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x7d20]
push edx
push eax
push ebp
push str.szsrotation
push ecx
call edi
push 4
lea edx, [ebx + 0x4c38]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push edx
push eax
push ebp
push str.szsaspect
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x4878]
push edx
push eax
push ebp
push str.szsdevice
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0xd58]
push edx
push eax
push ebp
push str.szsbblue
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0xd5c]
push edx
push eax
push ebp
push str.szsbgreen
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0xd60]
push edx
push eax
push ebp
push str.szsbred
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0xd4c]
push edx
push eax
push ebp
push str.szscblue
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0xd50]
push edx
push eax
push ebp
push str.szscgreen
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0xd54]
push edx
push eax
push ebp
push str.szscred
push ecx
call edi
push 4
lea edx, [ebx + 0xd44]
push edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
push ebp
push str.szsgblue
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0xd48]
push edx
push eax
push ebp
push str.szsggreen
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0xd40]
push edx
push eax
push ebp
push str.szsgred
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x484c]
push edx
push eax
push ebp
push str.szPriTvFullScreen
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x7d34]
push edx
push eax
push ebp
push str.szSecTvFullScreen
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x4850]
push edx
push eax
push ebp
push str.szPriTvStandard
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x7d38]
push edx
push eax
push ebp
push str.szSecTvStandard
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6b4]
push edx
push eax
push ebp
push str.szLeft
push ecx
call edi
mov eax, dword [esp + 0x14]
push 4
lea edx, [ebx + 0x6b8]
push edx
mov ecx, dword [esp + 0x18]
push eax
push ebp
push str.szRight
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6b0]
push edx
push eax
push ebp
push str.szTop
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6bc]
push edx
push eax
push ebp
push str.szBottom
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6c4]
push edx
push eax
push ebp
push str.szsLeft
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6c8]
push edx
push eax
push ebp
push str.szsRight
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6c0]
push edx
push eax
push ebp
push str.szsTop
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x6cc]
push edx
push eax
push ebp
push str.szsBottom
push ecx
call edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 4
lea edx, [ebx + 0x4868]
push edx
push eax
push ebp
push str.szPriTVType
push ecx
call edi
mov edx, dword [esp + 0x14]
push 4
add ebx, 0x7d50
push ebx
push edx
mov eax, dword [esp + 0x1c]
push ebp
push str.szSecTVType
push eax
call edi
cmp dword [esp + 0x38], 0xe
jne 0x4249ed
cmp dword [esp + 0x34], 0x1b
jb 0x4249ed
lea ecx, [esp + 0x1c]
push ecx
push 0x46cfe4
push 0x15
push ebp
push 0x46d0a4
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebp
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x4249ed
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x4249ed
mov edx, dword [eax]
mov edx, dword [edx + 0x1c]
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x38]
push ecx
push 1
push eax
call edx
test eax, eax
jl 0x425142
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x30]
push eax
push ecx
push ebp
push str.szOvlSaturation
push edx
call edi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x2c]
push eax
push ecx
push ebp
push str.szOvlBrightness
push edx
call edi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x34]
push eax
push ecx
push ebp
push str.szOvlContrast
push edx
call edi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x28]
push eax
push ecx
push ebp
push str.szOvlGamma
push edx
call edi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x24]
push eax
push ecx
push ebp
push str.szOvlHue
push edx
call edi
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x4249ed
cmp edi, 5
jne 0x425a7e
push 0xac18
lea edi, [ebx + 8]
push ebp
push edi
call fcn.004541e0
add esp, 0xc
push edi
mov ecx, ebx
mov dword [ebx + 0x6a8], 1
call fcn.004242e0
cmp dword [esp + 0x38], 0xe
mov eax, dword [ebx + 0x4858]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
jne 0x425203
cmp dword [esp + 0x34], 0x1b
jb 0x425203
lea ecx, [esp + 0x1c]
push ecx
push 0x46cfe4
push 0x15
push ebp
push 0x46d0a4
mov dword [esp + 0x30], ebp
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x425203
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x425203
mov edx, dword [eax]
mov edx, dword [edx + 0x1c]
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x30]
push ecx
push 1
push eax
call edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea ecx, [esp + 0x44]
push ecx
lea eax, [esi + 0xab08]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x48]
push edx
push ebp
push str.schemeexe
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
lea eax, [esi + 0xaa00]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push ebp
push str.szresetonexit
push eax
call edi
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
lea ebp, [esi + 0x69c]
push ebp
lea edx, [esp + 0x1c]
push edx
push 0
push str.szopmode
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x4838]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push 0x47abfc
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0x483c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push 0x47ac15
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x4840]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szbpp
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x4834]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szrrate
push ecx
call edi
lea edx, [esp + 0x18]
push edx
lea eax, [esi + 0x4830]
mov edx, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szrotation
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x1748]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szaspect
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
lea eax, [esi + 0x1388]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push 0
push str.szdevice
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x6f4]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szbblue
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0x6f8]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szbgreen
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x6fc]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szbred
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x6e8]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szcblue
push ecx
call edi
lea edx, [esp + 0x18]
push edx
lea eax, [esi + 0x6ec]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
mov edx, dword [esp + 0x20]
push str.szcgreen
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x6f0]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szcred
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x6e0]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szgblue
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0x6e4]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szggreen
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x6dc]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szgred
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x7d20]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szsx
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0x7d24]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szsy
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x7d28]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szsbpp
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x7d1c]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szsrrate
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0x7d18]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szsrotation
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x4c30]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szsaspect
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
lea eax, [esi + 0x4870]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push 0
push str.szsdevice
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0xd50]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szsbblue
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0xd54]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szsbgreen
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0xd58]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szsbred
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
lea edx, [esi + 0xd44]
push edx
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x1c]
push eax
push 0
push str.szscblue
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0xd48]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szscgreen
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0xd4c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szscred
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0xd3c]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szsgblue
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0xd40]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szsggreen
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0xd38]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szsgred
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x4844]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szPriTvFullScreen
push ecx
call edi
lea edx, [esp + 0x18]
push edx
lea eax, [esi + 0x7d2c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szSecTvFullScreen
mov edx, dword [esp + 0x24]
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x4848]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szPriTvStandard
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x7d30]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szSecTvStandard
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0x6ac]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szLeft
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x6b0]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szRight
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x6a8]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szTop
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0x6b4]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szBottom
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x6bc]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szsLeft
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x6c0]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szsRight
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0x6b8]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szsTop
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x6c4]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.szsBottom
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x4860]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.szPriTVType
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esi + 0x7d48]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.szSecTVType
push edx
call edi
lea ecx, [esp + 0x18]
push ecx
lea eax, [esi + 0x7d78]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push 0
push str.szOvlSaturation
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
lea eax, [esi + 0x7d68]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push 0
push str.szOvlBrightness
push eax
call edi
lea ecx, [esp + 0x18]
lea eax, [esi + 0x7d88]
push ecx
push eax
lea edx, [esp + 0x1c]
mov eax, dword [esp + 0x18]
push edx
push 0
push str.szOvlContrast
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
lea eax, [esi + 0x7d58]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push 0
push str.szOvlGamma
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
lea eax, [esi + 0x7d98]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push 0
push str.szOvlHue
push eax
call edi
mov ecx, dword [esi + 0x4870]
mov ebp, dword [ebp]
mov eax, dword [esi + 0x1388]
mov edi, 2
mov dword [esi + 0x1740], ebp
mov dword [esi + 0x4c28], ebp
mov ebp, dword [esp + 0x4c]
mov dword [esi + 0x698], ecx
mov dword [esi + 0x173c], ecx
mov dword [esi + 0x4c24], ecx
push esi
mov ecx, ebx
mov dword [esi + 0x694], eax
mov dword [esi + 0x1380], edi
mov dword [esi + 0x4868], edi
mov dword [esi + 0x1738], eax
mov dword [esi + 0x4c20], eax
mov dword [esi + 0x1780], edi
mov dword [esi + 0x4c68], edi
mov dword [esi + 0x4850], ebp
mov dword [esi + 0x7d38], ebp
call fcn.00420aa0
cmp eax, 1
jne 0x4249eb
push esi
mov ecx, ebx
mov dword [esi + 0x6c8], edi
mov dword [esi + 0xd24], edi
call fcn.004204f0
push esi
mov ecx, ebx
mov dword [esi + 0x7d50], edi
call fcn.0041e650
lea eax, [esi + 0xab08]
push eax
call fcn.00413260
add esp, 4
test eax, eax
mov dword [esp + 0x1c], eax
je 0x4249eb
cmp dword [esi + 0xaa00], 1
jne 0x425a6a
push edi
push 0xff
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
push ecx
push 1
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjectsEx]
cmp eax, 1
jne 0x4259c8
push eax
push 0
push 0
push 0
lea edx, [esp + 0xd0]
push edx
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x425958
jmp 0x425990
lea eax, [esp + 0xc0]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea ecx, [esp + 0xc0]
push ecx
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 1
push 0
push 0
push 0
lea edx, [esp + 0xd0]
push edx
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x425990
jmp 0x425958
push 0xac18
lea eax, [ebx + 8]
push eax
push esi
call fcn.00455960
add esp, 0xc
mov dword [esi + 0x1380], edi
mov dword [esi + 0x4868], edi
mov dword [0x4805d4], 1
push esi
mov ecx, ebx
mov dword [esi + 0x4850], ebp
mov dword [esi + 0x7d38], ebp
call fcn.00420aa0
push esi
mov ecx, ebx
mov dword [esi + 0x6c8], edi
mov dword [esi + 0xd24], edi
call fcn.004204f0
cmp dword [esp + 0x38], 0xe
jne 0x425a66
cmp dword [esp + 0x34], 0x1b
jb 0x425a66
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
mov dword [esi + 0x7d78], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esi + 0x7d68], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 0x7d98], ecx
push esi
mov ecx, ebx
mov dword [esi + 0x7d88], edx
mov dword [esi + 0x7d58], eax
mov dword [esi + 0x7d50], edi
call fcn.0041e650
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4249eb
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4249eb
cmp edi, 9
jne 0x425e25
lea edx, [esp + 0x1c]
push edx
push 0x46cf74
push 0x15
push ebp
push 0x46d034
mov dword [esp + 0x30], ebp
mov dword [esi + 0xac10], ebp
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x4249ed
cmp dword [esp + 0x1c], ebp
je 0x4249ed
push 0x70
lea eax, [esp + 0x54]
push ebp
push eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebp
call fcn.004541e0
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.szopmode
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x1c]
push ecx
push ebp
push 0x47abfc
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x76]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push 0x47ac15
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x7a]
push edx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.szbpp
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x78]
push eax
lea ecx, [esp + 0x1c]
push ecx
push ebp
push str.szrrate
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push str.szrotation
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x68]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [esp + 0x1c]
push ebp
push str.szdevice
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xa0]
push eax
lea ecx, [esp + 0x1c]
push ecx
push ebp
push str.szsx
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xa2]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push str.szsy
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xa6]
push edx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.szsbpp
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x1c]
push ecx
push ebp
push str.szsrrate
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push str.szsrotation
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x94]
push edx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.szsdevice
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push ebp
push str.szPriTvStandard
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x98]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push str.szSecTvStandard
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x84]
push edx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.szLeft
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x1c]
push ecx
push ebp
push str.szRight
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push str.szTop
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x90]
push edx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.szBottom
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x1c]
push ecx
push ebp
push str.szsLeft
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xb4]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push str.szsRight
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xb8]
mov ecx, dword [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.szsTop
push ecx
call edi
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0x1c]
push ecx
push ebp
push str.szsBottom
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x70]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push str.szPriTVType
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x9c]
push edx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.szSecTVType
push ecx
call edi
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
mov edx, dword [edx + 0x28]
lea ecx, [esp + 0x50]
push ecx
push 0x70
push eax
call edx
test eax, eax
jl 0x425e14
mov edi, 1
cmp dword [esp + 0xbc], edi
jne 0x425e14
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x90]
push eax
mov eax, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x68]
push edx
push eax
push ecx
mov ecx, ebx
call fcn.0041e7e0
cmp eax, edi
jne 0x425e14
mov dword [esi + 0xac10], edi
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x4249ed
cmp edi, 7
jne 0x4249ed
mov edi, str.schemeexe
mov ecx, dword [esp + 0x10]
push edi
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
add edi, 0x19
cmp edi, str.szSecTvStandard
jl 0x425e33
jmp 0x4249ed