Function at 0x428240
Capabilities:
Accept command line arguments
Create thread
Parse pe header
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47e121
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x18d8
call fcn.0046a6e0
mov eax, dword [0x4b4200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x184c], edi
mov eax, dword [ebx + 0xc]
lea ecx, [ebp - 0xe4]
push ecx
push eax
mov dword [ebp - 0xe4], 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, eax
mov dword [ebp - 0x18a8], esi
mov dword [ebp - 0x17f0], esi
mov dword [ebp - 4], 0
xorps xmm0, xmm0
xor eax, eax
movq qword [ebp - 0x148], xmm0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x18a4], eax
mov dword [ebp - 0x148], eax
mov byte [ebp - 0x140], 1
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xe4]
test ecx, ecx
jle 0x42837d
mov dword [ebp - 0x1854], eax
test ecx, ecx
jle 0x42837d
nop dword [eax]
push dword [esi + eax*4]
lea ecx, [ebp - 0x148]
call fcn.00405a60
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x18a4], eax
cmp eax, str._StartMonitoring
je 0x428364
test eax, eax
je 0x428538
mov ecx, str._StartMonitoring
sub eax, ecx
mov dword [ebp - 0x1860], eax
movzx eax, word [eax + ecx]
mov dword [ebp - 0x1850], ecx
mov edx, eax
test ax, ax
jne 0x4284b1
cmp word [ecx], ax
jne 0x4284b6
or dword [edi + 4], 1
mov eax, dword [ebp - 0x1854]
inc eax
mov dword [ebp - 0x1854], eax
cmp eax, dword [ebp - 0xe4]
jl 0x428310
call fcn.004097a0
test eax, eax
je 0x42838f
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebx + 8]
mov dword [edi + 0x3c0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00404a60
sub esp, 8
lea ecx, [edi + 0x9c0]
test eax, eax
je 0x428772
push 0x24
call fcn.004059c0
mov ecx, eax
mov dword [ebp - 0x188c], ecx
mov byte [ecx + 8], 0
mov eax, dword [ecx + 4]
test eax, eax
jne 0x4283eb
mov edx, dword [ecx]
test edx, edx
je 0x4283e8
cmp word [edx], ax
je 0x4283e8
nop dword [eax + eax]
inc eax
cmp word [edx + eax*2], 0
jne 0x4283e0
mov dword [ecx + 4], eax
xor ecx, ecx
nop dword [eax]
inc ecx
cmp word [ecx*2 + str.SysNative], 0
jne 0x4283f0
add eax, ecx
mov ecx, 2
mov dword [ebp - 0x1860], eax
inc eax
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
mov ecx, dword [ebp - 0x188c]
mov edx, eax
add esp, 4
mov dword [ebp - 0x1864], edx
mov eax, dword [ecx]
mov dword [ebp - 0x1868], eax
test eax, eax
je 0x42845a
movzx ecx, word [eax]
test cx, cx
je 0x428454
mov edi, eax
sub edi, edx
mov word [edx], cx
add edx, 2
movzx eax, word [edx + edi]
mov ecx, eax
test ax, ax
jne 0x428443
mov ecx, dword [ebp - 0x188c]
mov edi, str.SysNative
mov esi, 0x5c
sub edi, edx
mov word [edx], si
lea edx, [edx + 2]
movzx eax, word [edx + edi]
mov esi, eax
test ax, ax
jne 0x428466
mov edi, dword [ebp - 0x184c]
xor eax, eax
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x428497
push eax
call fcn.00469dd3
mov ecx, dword [ebp - 0x188c]
add esp, 4
mov eax, dword [ebp - 0x1864]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1860]
mov dword [ecx + 4], eax
mov byte [ecx + 8], 1
jmp 0x428779
cmp ax, word [ecx]
je 0x428524
mov dword [ebp - 0x1868], 0
cmp word [ebp - 0x1868], ax
jne 0x4284d5
mov dword [ebp - 0x1864], 0
jmp 0x4284ed
push edx
call fcn.0046e306
mov ecx, dword [ebp - 0x1850]
add esp, 4
movzx eax, ax
mov dword [ebp - 0x1864], eax
movzx eax, word [ecx]
mov dword [ebp - 0x1868], 0
mov edx, eax
cmp word [ebp - 0x1868], ax
jne 0x428509
xor eax, eax
jmp 0x42851b
push edx
call fcn.0046e306
mov ecx, dword [ebp - 0x1850]
add esp, 4
movzx eax, ax
cmp word [ebp - 0x1864], ax
jne 0x428532
mov eax, dword [ebp - 0x1860]
add ecx, 2
jmp 0x428346
mov eax, dword [ebp - 0x18a4]
cmp eax, str._NoUpdate
je 0x42856a
test eax, eax
je 0x4286b2
mov ecx, str._NoUpdate
sub eax, ecx
mov dword [ebp - 0x1860], eax
movzx eax, word [eax + ecx]
mov dword [ebp - 0x1850], ecx
mov edx, eax
test ax, ax
jne 0x428573
cmp word [ecx], ax
jne 0x428578
or dword [edi + 4], 2
jmp 0x428368
cmp ax, word [ecx]
je 0x4285e6
mov dword [ebp - 0x1868], 0
cmp word [ebp - 0x1868], ax
jne 0x428597
mov dword [ebp - 0x1864], 0
jmp 0x4285af
push edx
call fcn.0046e306
mov ecx, dword [ebp - 0x1850]
add esp, 4
movzx eax, ax
mov dword [ebp - 0x1864], eax
movzx eax, word [ecx]
mov dword [ebp - 0x1868], 0
mov edx, eax
cmp word [ebp - 0x1868], ax
jne 0x4285cb
xor eax, eax
jmp 0x4285dd
push edx
call fcn.0046e306
mov ecx, dword [ebp - 0x1850]
add esp, 4
movzx eax, ax
cmp word [ebp - 0x1864], ax
jne 0x4285f4
mov eax, dword [ebp - 0x1860]
add ecx, 2
jmp 0x428554
mov eax, dword [ebp - 0x18a4]
test eax, eax
je 0x4286b2
mov ecx, str._NoUpdate
sub eax, ecx
mov dword [ebp - 0x1860], eax
movzx eax, word [ecx + eax]
mov dword [ebp - 0x1850], ecx
mov edx, eax
test ax, ax
jne 0x42862b
cmp word [ecx], ax
je 0x42856a
jmp 0x428630
cmp ax, word [ecx]
je 0x42869e
mov dword [ebp - 0x1868], 0
cmp word [ebp - 0x1868], ax
jne 0x42864f
mov dword [ebp - 0x1864], 0
jmp 0x428667
push edx
call fcn.0046e306
mov ecx, dword [ebp - 0x1850]
add esp, 4
movzx eax, ax
mov dword [ebp - 0x1864], eax
movzx eax, word [ecx]
mov dword [ebp - 0x1868], 0
mov edx, eax
cmp word [ebp - 0x1868], ax
jne 0x428683
xor eax, eax
jmp 0x428695
push edx
call fcn.0046e306
mov ecx, dword [ebp - 0x1850]
add esp, 4
movzx eax, ax
cmp word [ebp - 0x1864], ax
jne 0x4286ac
mov eax, dword [ebp - 0x1860]
add ecx, 2
jmp 0x42860f
mov eax, dword [ebp - 0x18a4]
cmp eax, str._Uninstall
je 0x4286e4
test eax, eax
je 0x428368
mov ecx, str._Uninstall
sub eax, ecx
mov dword [ebp - 0x1860], eax
movzx eax, word [eax + ecx]
mov dword [ebp - 0x1850], ecx
mov edx, eax
test ax, ax
jne 0x4286ed
cmp word [ecx], ax
jne 0x4286f2
or dword [edi + 4], 4
jmp 0x428368
cmp ax, word [ecx]
je 0x428764
mov dword [ebp - 0x1868], 0
cmp word [ebp - 0x1868], ax
jne 0x428711
mov dword [ebp - 0x1864], 0
jmp 0x428729
push edx
call fcn.0046e306
mov ecx, dword [ebp - 0x1850]
add esp, 4
movzx eax, ax
mov dword [ebp - 0x1864], eax
movzx eax, word [ecx]
mov dword [ebp - 0x1868], 0
mov edx, eax
cmp word [ebp - 0x1868], ax
jne 0x428745
xor eax, eax
jmp 0x428757
push edx
call fcn.0046e306
mov ecx, dword [ebp - 0x1850]
add esp, 4
movzx eax, ax
cmp word [ebp - 0x1864], ax
jne 0x428368
mov eax, dword [ebp - 0x1860]
add ecx, 2
jmp 0x4286ce
push 0x25
call fcn.004059c0
lea eax, [edi + 0xd8]
lea ecx, [edi + 0x428]
test eax, eax
je 0x42879d
mov dword [ecx + 0x1c0], eax
lea ecx, [edi + 0x8d8]
mov dword [edi + 0x424], eax
jmp 0x4287b5
mov dword [ecx + 0x1c0], ecx
mov dword [edi + 0x424], eax
lea eax, [edi + 0x718]
lea ecx, [eax + 0x1c0]
mov dword [ecx], eax
mov eax, dword [edi + 0x9f0]
mov ecx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x18c4], ecx
test eax, eax
je 0x4287da
push eax
call ecx
mov dword [edi + 0x9f0], 0
or eax, 0xffffffff
push ecx
mov edx, eax
mov ecx, str.HKCUSoftwareClearDiskInfo
call fcn.00409550
mov dword [edi + 0x9f0], eax
mov ecx, dword [edi + 0x9b4]
push 0x1002
mov dword [ebp - 0x1868], ecx
mov dword [edi + 0x9b8], 0
call fcn.0046a3df
lea ecx, [edi + 0x9b4]
xor edx, edx
mov dword [ecx], eax
add esp, 4
mov word [eax + 0x1000], dx
mov eax, dword [ecx]
mov word [eax], dx
mov eax, dword [ebp - 0x1868]
test eax, eax
je 0x428842
push eax
call fcn.00469dd3
add esp, 4
lea ecx, [edi + 0x9b4]
push 0x800
push dword [ecx]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [edi + 0x9b4]
mov dword [ebp - 0xf0], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
push eax
movq qword [ebp - 0xf8], xmm0
call fcn.004054f0
push 1
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 2
call fcn.00405880
mov ecx, eax
mov dword [ebp - 0x188c], ecx
mov byte [ecx + 8], 0
mov eax, dword [ecx + 4]
test eax, eax
jne 0x4288b2
mov edx, dword [ecx]
test edx, edx
je 0x4288af
cmp word [edx], ax
je 0x4288af
inc eax
cmp word [edx + eax*2], 0
jne 0x4288a7
mov dword [ecx + 4], eax
xor ecx, ecx
inc ecx
cmp word [ecx*2 + 0x49fae4], 0
jne 0x4288b4
add eax, ecx
mov ecx, 2
mov dword [ebp - 0x1860], eax
inc eax
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
mov ecx, dword [ebp - 0x188c]
mov edx, eax
add esp, 4
mov dword [ebp - 0x1864], edx
mov eax, dword [ecx]
mov dword [ebp - 0x1868], eax
test eax, eax
je 0x428927
movzx ecx, word [eax]
test cx, cx
je 0x428921
mov esi, eax
sub esi, edx
nop word [eax + eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x428910
mov ecx, dword [ebp - 0x188c]
mov edi, 0x49fae4
mov esi, 0x43
sub edi, edx
mov word [edx], si
lea edx, [edx + 2]
movzx eax, word [edi + edx]
mov esi, eax
test ax, ax
jne 0x428933
mov esi, dword [ebp - 0x18a8]
xor eax, eax
mov edi, dword [ebp - 0x184c]
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x42896a
push eax
call fcn.00469dd3
mov ecx, dword [ebp - 0x188c]
add esp, 4
mov eax, dword [ebp - 0x1864]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1860]
mov dword [ecx + 4], eax
mov byte [ecx + 8], 1
mov eax, dword [ebp - 0xf8]
test eax, eax
jne 0x4289aa
push 2
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0xf8], eax
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xf4], ecx
push ecx
push eax
mov ecx, edi
mov byte [ebp - 0xf0], 1
call fcn.0044f950
cmp dword [edi + 4], 4
jne 0x4289ce
mov ecx, edi
call fcn.0044f2a0
mov edi, eax
jmp 0x42bccf
mov ecx, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0xe8], 0
mov eax, dword [edi + 0x9f0]
mov dword [ebp - 0x189c], ecx
mov ecx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x1884], ecx
test eax, eax
je 0x428afb
lea edx, [ebp - 0x15c]
mov dword [ebp - 0x104], 0
push edx
lea edx, [ebp - 0xe8]
mov dword [ebp - 0x15c], 4
push edx
lea edx, [ebp - 0x104]
push edx
push 0
push str.CurrentTheme
push eax
call ecx
test eax, eax
jne 0x428afb
cmp dword [ebp - 0x104], 4
jne 0x428afb
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x18a0], eax
cmp eax, 1
ja 0x428b05
mov dword [ebp - 0x1854], edi
test eax, eax
jne 0x428a7d
xor ecx, ecx
mov dword [ebp - 0x1864], 0x301020
mov edx, 0xaeaeaf
mov esi, 0xfffefc
jmp 0x428a96
mov ecx, 0xffffff
mov dword [ebp - 0x1864], 0xc0c0c0
mov edx, 0x7e7e7f
mov esi, 0x301020
mov eax, dword [ebp - 0x1854]
mov edi, dword [ebp - 0x1864]
mov dword [ebp - 0x1878], ecx
mov ecx, 0xa8
mov dword [ecx + eax], edi
mov eax, 0xac
mov edi, dword [ebp - 0x184c]
mov ecx, dword [ebp - 0x1878]
mov dword [eax + edi], esi
mov eax, 0xb0
mov dword [eax + edi], edx
mov eax, 0xb4
mov dword [eax + edi], ecx
mov eax, dword [ebp - 0x18a0]
mov dword [edi], eax
mov eax, dword [edi + 0x9f0]
test eax, eax
je 0x428b0c
push 4
push edi
push 4
push 0
push str.CurrentTheme
push eax
call dword [ebp - 0x189c]
jmp 0x428b0c
mov dword [ebp - 0xe8], 0x3e8
mov ecx, edi
call fcn.004442a0
push ecx
push 0
push 0xffffffffffffffff
push 0xcf0000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x226
push 0x2ee
push 0x49fb24
lea esi, [edi + 0x150]
push str.CLEARDISKINFO_CLASS
mov ecx, esi
call fcn.0040ecf0
push ecx
push 1
push 0xa
push ecx
mov ecx, esi
mov dword [edi + 0xc8], eax
call fcn.004102e0
push dword [edi + 0xa8]
mov ecx, esi
call fcn.00410460
push ecx
push 0xffffffffffffffff
push 0x52
push 0x190
mov dword [esi + 0x1f0], 0x1403
mov ecx, esi
mov eax, dword [edi + 0xb4]
push 2
push 2
mov dword [esi + 0x224], eax
call fcn.00415db0
mov dword [edi + 0x1c], eax
mov edx, dword [edi + 0xb0]
mov eax, edx
mov esi, dword [edi + 0xac]
shr eax, 0x10
push ecx
movzx ecx, al
mov eax, edx
or eax, 0xffffff00
and edx, 0xff00
shl eax, 0x10
or ecx, eax
mov eax, esi
or ecx, edx
shr eax, 0x10
push ecx
movzx ecx, al
mov eax, esi
or eax, 0xffffff00
and esi, 0xff00
shl eax, 0x10
or ecx, eax
or ecx, esi
push ecx
call fcn.0040a4a0
push ecx
push 0x40
push ecx
mov esi, eax
push 8
mov ecx, esi
call fcn.0040a670
push ecx
push 0x16
push ecx
push 0x32
mov ecx, esi
mov dword [ebp - 0x1868], eax
call fcn.0040a670
mov dword [ebp - 0x1860], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x1890], eax
mov eax, dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
test esi, esi
jne 0x428c1d
mov dword [ebp - 0x1870], 0
jmp 0x428c75
push 0
lea ecx, [ebp - 0x17dc]
mov dword [ebp - 0x17dc], 0
push ecx
push dword [esi + 4]
call eax
test eax, eax
je 0x428c48
mov dword [esi + 8], eax
mov dword [ebp - 0x1870], 0
jmp 0x428c70
push dword [ebp - 0x17dc]
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push dword [ebp - 0x17dc]
mov dword [ebp - 0x1870], eax
call dword [ebp - 0x1890]
mov ecx, dword [esi]
push 1
mov edx, dword [ecx]
mov ecx, esi
call edx
mov eax, dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov esi, dword [ebp - 0x1868]
test esi, esi
jne 0x428c87
mov dword [ebp - 0x1850], esi
jmp 0x428cda
push 0
lea ecx, [ebp - 0x17e0]
mov dword [ebp - 0x17e0], 0
push ecx
push dword [esi + 4]
call eax
test eax, eax
je 0x428cb2
mov dword [esi + 8], eax
mov dword [ebp - 0x1850], 0
jmp 0x428cda
push dword [ebp - 0x17e0]
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push dword [ebp - 0x17e0]
mov dword [ebp - 0x1850], eax
call dword [ebp - 0x1890]
mov ecx, dword [esi]
push 1
mov edx, dword [ecx]
mov ecx, esi
call edx
mov esi, dword [ebp - 0x1860]
test esi, esi
jne 0x428cec
mov dword [ebp - 0x17a4], esi
jmp 0x428d43
push 0
lea eax, [ebp - 0x17e4]
mov dword [ebp - 0x17e4], 0
push eax
push dword [esi + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
test eax, eax
je 0x428d1b
mov dword [esi + 8], eax
mov dword [ebp - 0x17a4], 0
jmp 0x428d43
push dword [ebp - 0x17e4]
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push dword [ebp - 0x17e4]
mov dword [ebp - 0x17a4], eax
call dword [ebp - 0x1890]
mov ecx, dword [esi]
push 1
mov edx, dword [ecx]
mov ecx, esi
call edx
mov eax, dword [edi + 0x1c]
cmp eax, 0xffffffff
jne 0x428d51
mov eax, dword [edi + 0x190]
mov edx, dword [edi + 0x18c]
test edx, edx
je 0x428d8a
cmp eax, 1
jl 0x428d8a
cmp eax, dword [edi + 0x190]
jg 0x428d8a
lea ecx, [eax + eax*8]
cmp dword [edx + ecx*8 + 0xc], 0
je 0x428d8a
mov dword [edx + ecx*8 + 0x20], 0
mov eax, dword [edi + 0x18c]
mov edx, dword [ebp - 0x1870]
mov dword [eax + ecx*8 + 0x10], edx
mov dword [edi + 0x340], 0x1400
xor esi, esi
mov dword [edi + 0x378], 0xfffffffe
mov eax, dword [edi + 0x3c0]
mov dword [ebp - 0x1868], esi
mov byte [ebp - 4], 3
test eax, eax
je 0x428dcc
push esi
push 0x40
push 0x40
push 1
push 1
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov esi, eax
mov dword [ebp - 0x1868], esi
sub esp, 8
lea ecx, [edi + 0x150]
push 0x40
push 0x40
push 8
push 8
push esi
call fcn.00415530
mov dword [ebp - 0x1868], eax
mov byte [ebp - 4], 2
test esi, esi
je 0x428dfe
push esi
call dword [sym.imp.USER32.dll_DestroyIcon]
mov eax, dword [ebp - 0x1868]
mov dword [edi + 0x24], eax
cmp eax, 0xffffffff
jne 0x428e0c
mov eax, dword [edi + 0x190]
mov edx, dword [edi + 0x18c]
test edx, edx
je 0x428e45
cmp eax, 1
jl 0x428e45
cmp eax, dword [edi + 0x190]
jg 0x428e45
lea ecx, [eax + eax*8]
cmp dword [edx + ecx*8 + 0xc], 0
je 0x428e45
mov dword [edx + ecx*8 + 0x20], 0
mov eax, dword [edi + 0x18c]
mov edx, dword [ebp - 0x1850]
mov dword [eax + ecx*8 + 0x10], edx
movsd xmm0, qword [0x4aa410]
xor eax, eax
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x320
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
nop
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x428e70
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
add esp, 0x10
lea esi, [edi + 0x150]
mov ecx, esi
call fcn.0041aa50
test al, al
jne 0x428ea9
xor eax, eax
jmp 0x428f0c
mov eax, dword [esi + 0x40]
push 0
push dword [esi + 0x11c]
inc eax
push eax
push dword [esi + 0x234]
movzx eax, byte [esi + 0x248]
push 0x1c
push 0x186
push 0xe
and eax, 1
push 0x50
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x49fb24
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x428f0c
push eax
push 0xd
mov ecx, esi
call fcn.0041a7c0
mov ecx, dword [esi + 0x3c]
movaps xmm0, xmmword [0x4aa750]
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
movsd xmm0, qword [0x4aa3f8]
mov dword [edi + 0x28], eax
xor eax, eax
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x190
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
nop dword [eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x428f40
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
add esp, 0x10
lea esi, [edi + 0x150]
mov ecx, esi
call fcn.0041aa50
test al, al
jne 0x428f79
xor eax, eax
jmp 0x428fdc
mov eax, dword [esi + 0x40]
push 0
push dword [esi + 0x11c]
inc eax
push eax
push dword [esi + 0x234]
movzx eax, byte [esi + 0x248]
push 0x12
push 0xb4
push 0x32
and eax, 1
push 0x50
shl eax, 0x11
add eax, 0x50010001
push eax
push str.Powered_by__a_Carifred.com__a_.
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x428fdc
push eax
push 0x1f
mov ecx, esi
call fcn.0041a7c0
mov ecx, dword [esi + 0x3c]
movaps xmm0, xmmword [0x4aa5f0]
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
sub esp, 8
mov dword [edi + 0x2c], eax
lea ecx, [edi + 0x150]
push str.Visit_our_website
push 0xffffffffffffffff
call fcn.00418a80
mov ecx, dword [edi + 0x2c]
cmp ecx, 0xffffffff
jne 0x429002
mov ecx, dword [edi + 0x190]
mov eax, dword [edi + 0x18c]
test eax, eax
je 0x429052
cmp ecx, 1
jl 0x429052
cmp ecx, dword [edi + 0x190]
jg 0x429052
lea edx, [ecx + ecx*8]
cmp dword [eax + edx*8 + 0xc], 0
je 0x429052
mov esi, dword [ebp - 0x17a4]
mov dword [eax + edx*8 + 0x20], 0
mov eax, dword [edi + 0x18c]
push esi
push ecx
push 0x40e600
mov dword [eax + edx*8 + 0x10], esi
mov eax, dword [edi + 0x18c]
push dword [eax + edx*8 + 4]
call dword [sym.imp.COMCTL32.dll_SetWindowSubclass]
push 0x47
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov esi, eax
sub esp, 0xc
mov edx, 1
mov dword [ebp - 0x185c], esi
mov ecx, esi
call fcn.00409e00
mov edi, eax
mov dword [ebp - 0x188c], edi
mov dword [ebp - 0x18e0], edi
sub esp, 0xc
xor edx, edx
mov ecx, esi
call fcn.00409e00
mov dword [ebp - 0x1868], eax
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x184c]
mov edx, 0x42
mov byte [ebp - 4], 5
lea esi, [ecx + 0x150]
mov ecx, dword [ecx + 0xb4]
push ecx
push ecx
push ecx
mov ecx, dword [ebp - 0x185c]
sub edx, ecx
push ecx
push ecx
push edx
push ecx
push eax
push edi
push ecx
mov ecx, esi
call fcn.00415040
mov esi, dword [ebp - 0x184c]
sub esp, 8
push str.Enable_Disable_monitoting_the_selected_disk__to_get_notifications_for_changes_on_the_attribute_values__Ctrl__M_
lea ecx, [esi + 0x150]
mov dword [esi + 0x30], eax
push 0xffffffffffffffff
call fcn.00418a80
lea ecx, [esi + 0x150]
mov dword [esi + 0x340], 0x1402
push ecx
push 0xffffffffffffffff
push 0x52
push 0x15c
push 2
push 0x190
call fcn.00415db0
mov dword [esi + 0x20], eax
cmp eax, 0xffffffff
jne 0x42911d
mov eax, dword [esi + 0x190]
mov edx, dword [esi + 0x18c]
test edx, edx
je 0x429156
cmp eax, 1
jl 0x429156
cmp eax, dword [esi + 0x190]
jg 0x429156
lea ecx, [eax + eax*8]
cmp dword [edx + ecx*8 + 0xc], 0
je 0x429156
mov dword [edx + ecx*8 + 0x20], 0
mov eax, dword [esi + 0x18c]
mov edx, dword [ebp - 0x1870]
mov dword [eax + ecx*8 + 0x10], edx
mov dword [esi + 0x340], 0x400
lea ecx, [esi + 0x150]
mov esi, dword [esi + 0xb4]
mov eax, esi
shr eax, 0x10
movzx edx, al
mov eax, esi
or eax, 0xffffff00
and esi, 0xff00
shl eax, 0x10
or edx, eax
or edx, esi
push edx
sub esp, 0x10
call fcn.004146e0
mov esi, dword [ebp - 0x184c]
mov dword [esi + 0x34], eax
lea ecx, [esi + 0x150]
mov eax, dword [esi + 0xb4]
mov edx, eax
or edx, 0xffffff00
and eax, 0xff00
shl edx, 0x10
or edx, eax
movzx eax, byte [esi + 0xb6]
or edx, eax
push edx
sub esp, 0x10
call fcn.004148e0
mov dword [esi + 0x38], eax
lea ecx, [esi + 0x150]
mov eax, dword [esi + 0xb4]
mov edx, eax
or edx, 0xffffff00
and eax, 0xff00
shl edx, 0x10
or edx, eax
movzx eax, byte [esi + 0xb6]
or edx, eax
push edx
push 0x18
push 0x18
push 8
push 0x141
call fcn.004144c0
push 0x7f89
push 0
mov dword [esi + 0x3c], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
cmp dword [esi + 0x380], 0
mov dword [ebp - 0x1854], eax
je 0x4292af
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
je 0x4292af
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0
push 0xa
push 0xffffff38
and eax, 1
push 0x1f4
shl eax, 0x11
add eax, 0x50010000
push eax
push 0x49eb08
push str.Button
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4292af
push eax
push 3
lea ecx, [esi + 0x150]
call fcn.0041a7c0
mov ecx, dword [esi + 0x18c]
movaps xmm0, xmmword [0x4aa500]
mov dword [ebp - 0x1860], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x4292b1
xor eax, eax
push 0
push 0x10800080
lea ecx, [esi + 0x150]
mov dword [esi + 0x84], eax
push ecx
push 0x8c
push 0xa
push 0x49
push str.Find__CtrlF_
call fcn.00415610
push 0xa0a0a0
lea ecx, [esi + 0x150]
mov dword [esi + 0x88], eax
push 0xffffffffffffffff
call fcn.00417120
push 0xffffff
lea ecx, [esi + 0x150]
push 0xffffffffffffffff
call fcn.00416f10
sub esp, 8
lea ecx, [esi + 0x150]
push str.Enter_a_text_string_to_search_for_in_the_list
push 0xffffffffffffffff
call fcn.00418a80
movsd xmm0, qword [0x4aa3f0]
lea ecx, [esi + 0x150]
sub esp, 0x18
movsd qword [esp + 0x10], xmm0
push 0xffffffffffffffff
call fcn.00417350
mov ecx, dword [esi + 0x18c]
mov eax, dword [esi + 0x190]
test ecx, ecx
je 0x42935a
cmp eax, 1
jl 0x42935a
lea eax, [eax + eax*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x42935a
mov eax, dword [ecx + eax*8 + 4]
jmp 0x42935c
xor eax, eax
mov dword [esi + 0xcc], eax
lea ecx, [esi + 0x150]
mov esi, dword [esi + 0xb4]
mov eax, esi
shr eax, 0x10
movzx edx, al
mov eax, esi
or eax, 0xffffff00
and esi, 0xff00
shl eax, 0x10
or edx, eax
or edx, esi
push edx
sub esp, 0x10
call fcn.00414d20
mov esi, dword [ebp - 0x184c]
mov dword [esi + 0x8c], eax
mov ecx, dword [esi + 0x18c]
mov eax, dword [esi + 0x190]
test ecx, ecx
je 0x4293c8
cmp eax, 1
jl 0x4293c8
lea eax, [eax + eax*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x4293c8
mov edx, dword [ebp - 0x1854]
mov dword [ecx + eax*8 + 0x18], edx
sub esp, 8
lea ecx, [esi + 0x150]
push str.Find_next__F3_
push 0xffffffffffffffff
call fcn.00418a80
mov dword [esi + 0x340], 0x1400
xorps xmm0, xmm0
movq qword [ebp - 0x94], xmm0
xor ecx, ecx
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x94], 0
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0
nop dword [eax]
inc ecx
cmp word [ecx*2 + str._a_v], 0
jne 0x429420
xor eax, eax
nop
inc eax
cmp word [eax*2 + 0x49fd88], 0
jne 0x429430
add ecx, eax
xor eax, eax
inc eax
cmp word [eax*2 + 0x49fd7c], 0
jne 0x429440
add ecx, eax
mov dword [ebp - 0x1860], ecx
lea eax, [ecx + 1]
mov ecx, 2
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
mov edx, dword [ebp - 0x94]
add esp, 4
mov dword [ebp - 0x1864], eax
mov ecx, eax
test edx, edx
je 0x4294a4
movzx eax, word [edx]
test ax, ax
je 0x4294a4
nop dword [eax]
movzx eax, ax
lea edx, [edx + 2]
mov word [ecx], ax
add ecx, 2
movzx eax, word [edx]
test ax, ax
jne 0x429490
mov edi, str._a_v
mov edx, 0x3c
sub edi, ecx
mov word [ecx], dx
add ecx, 2
movzx eax, word [edi + ecx]
mov edx, eax
test ax, ax
jne 0x4294b0
mov edi, dword [ebp - 0x188c]
mov eax, 0x34
mov edx, 0x49fd88
movzx eax, ax
lea edx, [edx + 2]
mov word [ecx], ax
add ecx, 2
movzx eax, word [edx]
test ax, ax
jne 0x4294d1
mov eax, 0x3c
mov edx, 0x49fd7c
nop
movzx eax, ax
lea edx, [edx + 2]
mov word [ecx], ax
lea ecx, [ecx + 2]
movzx eax, word [edx]
test ax, ax
jne 0x4294f0
xor eax, eax
mov word [ecx], ax
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x42951c
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x1864]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x1860]
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 6
lea ecx, [esi + 0x150]
mov byte [ebp - 0x8c], 1
call fcn.0041aa50
test al, al
jne 0x429552
xor eax, eax
jmp 0x4295c3
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x12
push 0x46
push 0x32
and eax, 1
push 0xa
shl eax, 0x11
add eax, 0x50010021
push eax
push dword [ebp - 0x1864]
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4295c3
push eax
push 0x1f
lea ecx, [esi + 0x150]
call fcn.0041a7c0
mov ecx, dword [esi + 0x18c]
movaps xmm0, xmmword [0x4aa590]
mov dword [ebp - 0x1860], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
sub esp, 8
mov dword [esi + 0x40], eax
lea ecx, [esi + 0x150]
push str.Click_to_check_if_a_new_version_of_Clear_Disk_Info_is_available
push 0xffffffffffffffff
call fcn.00418a80
mov eax, dword [esi + 0x18c]
mov edx, dword [esi + 0x190]
test eax, eax
je 0x42962f
cmp edx, 1
jl 0x42962f
lea ecx, [edx + edx*8]
cmp dword [eax + ecx*8 + 0xc], 0
je 0x42962f
mov edi, dword [ebp - 0x17a4]
mov dword [eax + ecx*8 + 0x20], 0
mov eax, dword [esi + 0x18c]
push edi
push edx
push 0x40e600
mov dword [eax + ecx*8 + 0x10], edi
mov eax, dword [esi + 0x18c]
push dword [eax + ecx*8 + 4]
call dword [sym.imp.COMCTL32.dll_SetWindowSubclass]
mov edi, dword [ebp - 0x188c]
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
jne 0x429642
xor eax, eax
jmp 0x4296b2
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x12
push 0x5a
push 0x32
and eax, 1
push 0x78
shl eax, 0x11
add eax, 0x50010001
push eax
push str._a_Online_help__a_
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4296b2
push eax
push 0x1f
lea ecx, [esi + 0x150]
call fcn.0041a7c0
mov ecx, dword [esi + 0x18c]
movaps xmm0, xmmword [0x4aa5d0]
mov dword [ebp - 0x1860], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
sub esp, 8
mov dword [esi + 0x44], eax
lea ecx, [esi + 0x150]
push str.Go_to_the_online_help_page_now__F1_
push 0xffffffffffffffff
call fcn.00418a80
mov eax, dword [esi + 0x18c]
mov edx, dword [esi + 0x190]
test eax, eax
je 0x42971e
cmp edx, 1
jl 0x42971e
lea ecx, [edx + edx*8]
cmp dword [eax + ecx*8 + 0xc], 0
je 0x42971e
mov edi, dword [ebp - 0x17a4]
mov dword [eax + ecx*8 + 0x20], 0
mov eax, dword [esi + 0x18c]
push edi
push edx
push 0x40e600
mov dword [eax + ecx*8 + 0x10], edi
mov eax, dword [esi + 0x18c]
push dword [eax + ecx*8 + 4]
call dword [sym.imp.COMCTL32.dll_SetWindowSubclass]
mov edi, dword [ebp - 0x188c]
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
jne 0x429731
xor eax, eax
jmp 0x4297a4
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x12
push 0x41
push 0x32
and eax, 1
push 0xeb
shl eax, 0x11
add eax, 0x50010001
push eax
push str._a_Donate__a_
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4297a4
push eax
push 0x1f
lea ecx, [esi + 0x150]
call fcn.0041a7c0
mov ecx, dword [esi + 0x18c]
movaps xmm0, xmmword [0x4aa580]
mov dword [ebp - 0x1860], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
sub esp, 8
mov dword [esi + 0x48], eax
lea ecx, [esi + 0x150]
push str.Go_to_the_donations_page_now
push 0xffffffffffffffff
call fcn.00418a80
mov eax, dword [esi + 0x18c]
mov edx, dword [esi + 0x190]
test eax, eax
je 0x429810
cmp edx, 1
jl 0x429810
lea ecx, [edx + edx*8]
cmp dword [eax + ecx*8 + 0xc], 0
je 0x429810
mov edi, dword [ebp - 0x17a4]
mov dword [eax + ecx*8 + 0x20], 0
mov eax, dword [esi + 0x18c]
push edi
push edx
push 0x40e600
mov dword [eax + ecx*8 + 0x10], edi
mov eax, dword [esi + 0x18c]
push dword [eax + ecx*8 + 4]
call dword [sym.imp.COMCTL32.dll_SetWindowSubclass]
mov edi, dword [ebp - 0x188c]
mov dword [esi + 0x340], 0x400
lea ecx, [esi + 0x150]
mov esi, dword [esi + 0xb4]
mov eax, esi
shr eax, 0x10
movzx edx, al
mov eax, esi
or eax, 0xffffff00
and esi, 0xff00
shl eax, 0x10
or edx, eax
or edx, esi
push edx
sub esp, 0x10
call fcn.00414ae0
mov esi, dword [ebp - 0x184c]
sub esp, 8
push str.Show_the_applications_menu_with_extra_options
lea ecx, [esi + 0x150]
mov dword [esi + 0x4c], eax
push 0xffffffffffffffff
call fcn.00418a80
mov ecx, dword [esi + 0x18c]
mov eax, dword [esi + 0x190]
test ecx, ecx
je 0x429892
cmp eax, 1
jl 0x429892
lea eax, [eax + eax*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x429892
mov edx, dword [ebp - 0x1854]
mov dword [ecx + eax*8 + 0x18], edx
xor eax, eax
mov dword [ebp - 0x17a0], 3
push 0x5e
push eax
mov word [ebp - 0x1790], ax
lea eax, [ebp - 0x178e]
push eax
mov dword [ebp - 0x179c], 0
mov dword [ebp - 0x1798], 0x10
mov dword [ebp - 0x1794], 0x10
call fcn.0046ba40
add esp, 0xc
xor eax, eax
mov word [ebp - 0x1730], ax
push 0x1046
push eax
lea eax, [ebp - 0x172e]
push eax
call fcn.0046ba40
mov ecx, dword [esi + 0x2c]
add esp, 0xc
mov edx, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x1898], edx
cmp ecx, 0xffffffff
jne 0x42990f
mov ecx, dword [esi + 0x190]
jmp 0x429936
mov edx, dword [esi + 0x18c]
test edx, edx
je 0x429958
cmp ecx, 1
jl 0x429958
cmp ecx, dword [esi + 0x190]
jg 0x429958
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x429958
mov edx, dword [ebp - 0x1898]
mov eax, dword [esi + 0x18c]
lea ecx, [ecx + ecx*8]
mov eax, dword [eax + ecx*8 + 4]
test eax, eax
je 0x429958
lea ecx, [ebp - 0x17a0]
push ecx
push 0
push 0x702
push eax
call edx
mov ecx, dword [esi + 0x40]
cmp ecx, 0xffffffff
jne 0x429968
mov ecx, dword [esi + 0x190]
jmp 0x429989
mov edx, dword [esi + 0x18c]
test edx, edx
je 0x4299af
cmp ecx, 1
jl 0x4299af
cmp ecx, dword [esi + 0x190]
jg 0x4299af
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x4299af
mov eax, dword [esi + 0x18c]
lea ecx, [ecx + ecx*8]
mov eax, dword [eax + ecx*8 + 4]
test eax, eax
je 0x4299af
lea ecx, [ebp - 0x17a0]
push ecx
push 0
push 0x702
push eax
call dword [ebp - 0x1898]
mov ecx, dword [esi + 0x44]
cmp ecx, 0xffffffff
jne 0x4299bf
mov ecx, dword [esi + 0x190]
jmp 0x4299e0
mov edx, dword [esi + 0x18c]
test edx, edx
je 0x429a06
cmp ecx, 1
jl 0x429a06
cmp ecx, dword [esi + 0x190]
jg 0x429a06
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x429a06
mov eax, dword [esi + 0x18c]
lea ecx, [ecx + ecx*8]
mov eax, dword [eax + ecx*8 + 4]
test eax, eax
je 0x429a06
lea ecx, [ebp - 0x17a0]
push ecx
push 0
push 0x702
push eax
call dword [ebp - 0x1898]
mov ecx, dword [esi + 0x48]
cmp ecx, 0xffffffff
jne 0x429a16
mov ecx, dword [esi + 0x190]
jmp 0x429a37
mov edx, dword [esi + 0x18c]
test edx, edx
je 0x429a5d
cmp ecx, 1
jl 0x429a5d
cmp ecx, dword [esi + 0x190]
jg 0x429a5d
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x429a5d
mov eax, dword [esi + 0x18c]
lea ecx, [ecx + ecx*8]
mov eax, dword [eax + ecx*8 + 4]
test eax, eax
je 0x429a5d
lea ecx, [ebp - 0x17a0]
push ecx
push 0
push 0x702
push eax
call dword [ebp - 0x1898]
movsd xmm0, qword [0x4aa3d8]
xor eax, eax
comisd xmm0, xmmword [esi + 0xc0]
mov dword [ebp - 0x1858], eax
jbe 0x429a8a
push 4
call dword [sym.imp.USER32.dll_GetSysColor]
or eax, 0xff000000
mov dword [ebp - 0x1858], eax
push eax
mov eax, dword [ebp - 0x185c]
push eax
push eax
push ecx
push 0x6d
push dword [esi + 0x3c0]
call fcn.0041b150
mov esi, eax
mov dword [ebp - 0x17a4], esi
mov dword [ebp - 0x17d8], 0
test esi, esi
je 0x429ad0
push 0
lea eax, [ebp - 0x17d8]
push eax
push dword [esi + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
test eax, eax
je 0x429ad0
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x184c]
mov byte [ebp - 4], 8
push dword [ebp - 0x17d8]
push str.Refresh_the_device_list_tF5
push dword [eax + 0x4c]
lea ecx, [eax + 0x150]
call fcn.00414f40
mov ecx, dword [ebp - 0x184c]
push dword [ebp - 0x1858]
mov dword [ecx + 0x7c], eax
mov eax, dword [ebp - 0x185c]
push eax
push eax
push ecx
push 0x6e
push dword [ecx + 0x3c0]
call fcn.0041b150
mov dword [ebp - 0x1850], eax
test esi, esi
je 0x429b32
mov ecx, dword [esi]
push 1
mov edx, dword [ecx]
mov ecx, esi
call edx
mov eax, dword [ebp - 0x1850]
mov dword [ebp - 0x17a4], eax
mov dword [ebp - 0x17d4], 0
test eax, eax
je 0x429b67
push 0
lea ecx, [ebp - 0x17d4]
push ecx
push dword [eax + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429b67
mov eax, dword [ebp - 0x1850]
mov dword [eax + 8], ecx
mov esi, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 9
push dword [ebp - 0x17d4]
lea ecx, [esi + 0x150]
push 0
push 0x32
push str.Export_to_text_file_tCtrlE
push dword [esi + 0x4c]
call fcn.00415940
push 0
push 0
push 8
push 0x32
push 0
mov dword [esi + 0x60], eax
lea ecx, [esi + 0x150]
push dword [esi + 0x4c]
call fcn.00415940
mov eax, dword [ebp - 0x184c]
lea ecx, [esi + 0x150]
mov esi, dword [ebp - 0x1868]
push edi
push esi
push 1
push 0
push str.Auto_refresh_every_2_min
push dword [eax + 0x4c]
call fcn.00415940
push edi
push esi
push 1
mov dword [ebp - 0x18b0], eax
mov eax, dword [ebp - 0x184c]
push 0x32
push str.Auto_updates
push dword [eax + 0x4c]
lea ecx, [eax + 0x150]
call fcn.00415940
push dword [ebp - 0x1858]
mov dword [ebp - 0x18ac], eax
mov eax, dword [ebp - 0x185c]
push eax
push eax
mov eax, dword [ebp - 0x184c]
push ecx
push 0x6f
push dword [eax + 0x3c0]
call fcn.0041b150
mov ecx, eax
mov eax, dword [ebp - 0x1850]
mov dword [ebp - 0x1870], ecx
test eax, eax
je 0x429c3f
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x1870]
mov dword [ebp - 0x17a4], ecx
mov dword [ebp - 0x17d0], 0
test ecx, ecx
je 0x429c74
push 0
lea eax, [ebp - 0x17d0]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429c74
mov eax, dword [ebp - 0x1870]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0xa
push dword [ebp - 0x17d0]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Check_for_updates_now_tCtrlU
push dword [eax + 0x4c]
call fcn.00415940
push 0
push 0
push 8
mov dword [ebp - 0x18b8], eax
mov eax, dword [ebp - 0x184c]
push 0x32
push 0
push dword [eax + 0x4c]
lea ecx, [eax + 0x150]
call fcn.00415940
push dword [ebp - 0x1858]
mov eax, dword [ebp - 0x185c]
push eax
push eax
mov eax, dword [ebp - 0x184c]
push ecx
push 0x80
push dword [eax + 0x3c0]
call fcn.0041b150
cmp dword [ebp - 0x1870], 0
mov dword [ebp - 0x187c], eax
je 0x429d0b
mov eax, dword [ebp - 0x1870]
push 1
mov ecx, dword [eax]
mov edx, dword [ecx]
mov ecx, eax
call edx
mov eax, dword [ebp - 0x187c]
mov dword [ebp - 0x17a4], eax
mov dword [ebp - 0x17cc], 0
test eax, eax
je 0x429d40
push 0
lea ecx, [ebp - 0x17cc]
push ecx
push dword [eax + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429d40
mov eax, dword [ebp - 0x187c]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0xb
push dword [ebp - 0x17cc]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Execute_self_test_tCtrlT
push dword [eax + 0x4c]
call fcn.00415940
mov ecx, dword [ebp - 0x184c]
push dword [ebp - 0x1858]
mov dword [ecx + 0x78], eax
mov eax, dword [ebp - 0x185c]
push eax
push eax
push ecx
push 0x70
push dword [ecx + 0x3c0]
call fcn.0041b150
cmp dword [ebp - 0x187c], 0
mov dword [ebp - 0x1850], eax
je 0x429db3
mov eax, dword [ebp - 0x187c]
push 1
mov ecx, dword [eax]
mov edx, dword [ecx]
mov ecx, eax
call edx
mov eax, dword [ebp - 0x1850]
mov dword [ebp - 0x17a4], eax
mov dword [ebp - 0x17c8], 0
test eax, eax
je 0x429de8
push 0
lea ecx, [ebp - 0x17c8]
push ecx
push dword [eax + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429de8
mov eax, dword [ebp - 0x1850]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0xc
push dword [ebp - 0x17c8]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Check_this_disk_for_errors_tAltC
push dword [eax + 0x4c]
call fcn.00415940
mov ecx, dword [ebp - 0x184c]
push dword [ebp - 0x1858]
mov dword [ecx + 0x64], eax
mov eax, dword [ebp - 0x185c]
push eax
push eax
push ecx
push 0x73
push dword [ecx + 0x3c0]
call fcn.0041b150
mov ecx, eax
mov eax, dword [ebp - 0x1850]
mov dword [ebp - 0x1870], ecx
test eax, eax
je 0x429e58
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x1870]
mov dword [ebp - 0x17a4], ecx
mov dword [ebp - 0x17c4], 0
test ecx, ecx
je 0x429e8d
push 0
lea eax, [ebp - 0x17c4]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429e8d
mov eax, dword [ebp - 0x1870]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0xd
push dword [ebp - 0x17c4]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Check_and_repair_this_disk_tAltR
push dword [eax + 0x4c]
call fcn.00415940
mov ecx, dword [ebp - 0x184c]
push dword [ebp - 0x1858]
mov dword [ecx + 0x68], eax
mov eax, dword [ebp - 0x185c]
push eax
push eax
push ecx
push 0x71
push dword [ecx + 0x3c0]
call fcn.0041b150
mov ecx, eax
mov eax, dword [ebp - 0x1870]
mov dword [ebp - 0x1850], ecx
test eax, eax
je 0x429efd
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x1850]
mov dword [ebp - 0x17a4], ecx
mov dword [ebp - 0x17c0], 0
test ecx, ecx
je 0x429f32
push 0
lea eax, [ebp - 0x17c0]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429f32
mov eax, dword [ebp - 0x1850]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0xe
push dword [ebp - 0x17c0]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Optimize_this_disk_tAltO
push dword [eax + 0x4c]
call fcn.00415940
mov ecx, dword [ebp - 0x184c]
push dword [ebp - 0x1858]
mov dword [ecx + 0x6c], eax
mov eax, dword [ebp - 0x185c]
push eax
push eax
push ecx
push 0x75
push dword [ecx + 0x3c0]
call fcn.0041b150
mov ecx, eax
mov eax, dword [ebp - 0x1850]
mov dword [ebp - 0x187c], ecx
test eax, eax
je 0x429fa2
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x187c]
mov dword [ebp - 0x17a4], ecx
mov dword [ebp - 0x17bc], 0
test ecx, ecx
je 0x429fd7
push 0
lea eax, [ebp - 0x17bc]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x429fd7
mov eax, dword [ebp - 0x187c]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0xf
push dword [ebp - 0x17bc]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Eject_this_disk_tAltE
push dword [eax + 0x4c]
call fcn.00415940
mov edx, dword [ebp - 0x184c]
push edi
push esi
push 1
push 0x32
push str.Dont_show_bad_status_for_this_disk
mov dword [edx + 0xa0], eax
lea ecx, [edx + 0x150]
push dword [edx + 0x7c]
call fcn.00415940
mov edx, dword [ebp - 0x184c]
push 0
push 0
push 8
push 0x32
push 0
mov dword [edx + 0x50], eax
lea ecx, [edx + 0x150]
push dword [edx + 0x4c]
call fcn.00415940
push dword [ebp - 0x1858]
mov eax, dword [ebp - 0x185c]
push eax
push eax
mov eax, dword [ebp - 0x184c]
push ecx
push 0x81
push dword [eax + 0x3c0]
call fcn.0041b150
mov ecx, eax
mov eax, dword [ebp - 0x187c]
mov dword [ebp - 0x1870], ecx
test eax, eax
je 0x42a08d
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x1870]
mov dword [ebp - 0x17a4], ecx
mov dword [ebp - 0x17b8], 0
test ecx, ecx
je 0x42a0c2
push 0
lea eax, [ebp - 0x17b8]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x42a0c2
mov eax, dword [ebp - 0x1870]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0x10
push dword [ebp - 0x17b8]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Enable_S.M.A.R.T._on_this_disk_tCtrlS
push dword [eax + 0x4c]
call fcn.00415940
mov ecx, dword [ebp - 0x184c]
push dword [ebp - 0x1858]
mov dword [ecx + 0x70], eax
mov eax, dword [ebp - 0x185c]
push eax
push eax
push ecx
push 0x82
push dword [ecx + 0x3c0]
call fcn.0041b150
cmp dword [ebp - 0x1870], 0
mov dword [ebp - 0x1850], eax
je 0x42a138
mov eax, dword [ebp - 0x1870]
push 1
mov ecx, dword [eax]
mov edx, dword [ecx]
mov ecx, eax
call edx
mov eax, dword [ebp - 0x1850]
mov dword [ebp - 0x17a4], eax
mov dword [ebp - 0x17b4], 0
test eax, eax
je 0x42a16d
push 0
lea ecx, [ebp - 0x17b4]
push ecx
push dword [eax + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x42a16d
mov eax, dword [ebp - 0x1850]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0x11
push dword [ebp - 0x17b4]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Disable_S.M.A.R.T._on_this_disk_tAltS
push dword [eax + 0x4c]
call fcn.00415940
mov edx, dword [ebp - 0x184c]
push 0
push 0
push 8
push 0x32
push 0
mov dword [edx + 0x74], eax
lea ecx, [edx + 0x150]
push dword [edx + 0x4c]
call fcn.00415940
push dword [ebp - 0x1858]
mov eax, dword [ebp - 0x185c]
push eax
push eax
mov eax, dword [ebp - 0x184c]
push ecx
push 0x74
push dword [eax + 0x3c0]
call fcn.0041b150
mov ecx, eax
mov eax, dword [ebp - 0x1850]
mov dword [ebp - 0x1870], ecx
test eax, eax
je 0x42a1fb
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x1870]
mov dword [ebp - 0x17a4], ecx
mov dword [ebp - 0x17b0], 0
test ecx, ecx
je 0x42a230
push 0
lea eax, [ebp - 0x17b0]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x42a230
mov eax, dword [ebp - 0x1870]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0x12
push dword [ebp - 0x17b0]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Launch_Windows_Disk_Manager
push dword [eax + 0x4c]
call fcn.00415940
push 0
push 0
push 8
mov dword [ebp - 0x18dc], eax
mov eax, dword [ebp - 0x184c]
push 0x32
push 0
push dword [eax + 0x4c]
lea ecx, [eax + 0x150]
call fcn.00415940
mov ecx, dword [ebp - 0x184c]
push edi
push esi
mov esi, dword [ebp - 0x184c]
push 1
push 0x32
push str.Use_Light_theme
push dword [esi + 0x4c]
lea ecx, [ecx + 0x150]
call fcn.00415940
cmp dword [esi], 0
mov dword [ebp - 0x18b4], eax
je 0x42a2bb
push 8
lea ecx, [esi + 0x150]
push eax
call fcn.00417cb0
mov eax, dword [ebp - 0x185c]
push 0
push eax
push eax
push 1
push 1
push dword [esi + 0x3c0]
call dword [sym.imp.USER32.dll_LoadImageW]
push 0
xor edx, edx
mov dword [ebp - 0x1860], eax
mov ecx, eax
call fcn.0040a890
mov edi, eax
mov dword [ebp - 0x1888], edi
mov dword [ebp - 0x18e8], edi
mov eax, dword [ebp - 0x1860]
mov byte [ebp - 4], 0x13
test eax, eax
je 0x42a309
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
push 0
push edi
push 0
push 0x32
push str.About___Activation_tAltA
push dword [esi + 0x4c]
lea ecx, [esi + 0x150]
call fcn.00415940
push dword [ebp - 0x1858]
mov dword [ebp - 0x18bc], eax
mov eax, dword [ebp - 0x185c]
push eax
push eax
push ecx
push 0x7b
push dword [esi + 0x3c0]
call fcn.0041b150
mov ecx, dword [ebp - 0x1870]
mov esi, eax
test ecx, ecx
je 0x42a359
mov eax, dword [ecx]
push 1
mov eax, dword [eax]
call eax
mov dword [ebp - 0x17a4], esi
mov dword [ebp - 0x17ac], 0
test esi, esi
je 0x42a386
push 0
lea eax, [ebp - 0x17ac]
push eax
push dword [esi + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
test eax, eax
je 0x42a386
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0x14
push dword [ebp - 0x17ac]
lea ecx, [eax + 0x150]
push 0
push 0x32
push str.Monitoring_settings_tAltM
push dword [eax + 0x4c]
call fcn.00415940
mov dword [ebp - 0x18c0], eax
mov dword [ebp - 0x187c], 0xffffffff
mov dword [ebp - 0x17a8], 0
mov ecx, dword [ebp - 0x184c]
push 0
mov byte [ebp - 4], 0x15
call fcn.0044e440
test eax, eax
je 0x42a499
push dword [ebp - 0x1858]
mov eax, dword [ebp - 0x185c]
push eax
push eax
mov eax, dword [ebp - 0x184c]
push ecx
push 0x7f
push dword [eax + 0x3c0]
call fcn.0041b150
mov ecx, eax
mov dword [ebp - 0x1850], ecx
test esi, esi
je 0x42a420
mov ecx, dword [esi]
push 1
mov edx, dword [ecx]
mov ecx, esi
call edx
mov ecx, dword [ebp - 0x1850]
mov eax, dword [ebp - 0x17a8]
mov esi, ecx
mov dword [ebp - 0x17a4], esi
test eax, eax
je 0x42a43f
push eax
call dword [ebp - 0x1890]
mov ecx, dword [ebp - 0x1850]
mov dword [ebp - 0x17a8], 0
test ecx, ecx
je 0x42a46e
push 0
lea eax, [ebp - 0x17a8]
push eax
push dword [ecx + 4]
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov ecx, eax
test ecx, ecx
je 0x42a46e
mov eax, dword [ebp - 0x1850]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x184c]
push 0
push dword [ebp - 0x17a8]
push 0
push 0x32
push str.Uninstall_Clear_Disk_Info_tCtrlU
push dword [eax + 0x4c]
lea ecx, [eax + 0x150]
call fcn.00415940
mov dword [ebp - 0x187c], eax
mov eax, dword [ebp - 0x184c]
push 0
push 0x16
push 0x16
mov ecx, dword [eax + 0x380]
mov dword [eax + 0x384], ecx
mov dword [eax + 0x344], 0
mov ecx, dword [eax + 0xa8]
mov dword [eax + 0x378], ecx
push ecx
mov dword [eax + 0x340], 0x400
push 0x66
mov dword [eax + 0x374], 0
push dword [eax + 0x3c0]
call fcn.0041b150
mov dword [ebp - 0x1870], eax
test esi, esi
je 0x42a503
mov ecx, dword [esi]
push 1
mov edx, dword [ecx]
mov ecx, esi
call edx
mov eax, dword [ebp - 0x1870]
mov esi, dword [ebp - 0x184c]
mov dword [ebp - 0x17a4], eax
lea eax, [esi + 0x270]
push eax
push dword [esi + 0x384]
call dword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
jne 0x42a52d
xor ecx, ecx
jmp 0x42a600
mov eax, dword [esi + 0x27c]
sub esp, 8
mov ecx, dword [esi + 0x278]
sub eax, 0x16
sub ecx, 0x16
push 0x16
push 0x16
push eax
push ecx
push dword [ebp - 0x1870]
lea ecx, [esi + 0x150]
call fcn.00415b50
mov ecx, eax
mov dword [ebp - 0x186c], ecx
cmp ecx, 1
jl 0x42a600
mov eax, dword [esi + 0x340]
and eax, 0xc00
or eax, 0x22
push eax
push ecx
lea ecx, [esi + 0x150]
call fcn.00417ac0
mov eax, dword [ebp - 0x186c]
push 0x7f82
push 0
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x18c]
mov dword [eax + ecx*8], 0x27
call dword [sym.imp.USER32.dll_LoadCursorW]
mov edx, dword [esi + 0x18c]
lea ecx, [esi + 0x150]
mov dword [ebp - 0x1860], eax
mov eax, dword [ebp - 0x186c]
test edx, edx
je 0x42a5f2
cmp eax, dword [ecx + 0x40]
jg 0x42a5f2
lea edi, [eax + eax*8]
cmp dword [edx + edi*8 + 0xc], 0
mov edi, dword [ebp - 0x1888]
je 0x42a5f2
mov esi, dword [ebp - 0x1860]
lea edi, [eax + eax*8]
mov dword [edx + edi*8 + 0x18], esi
mov edi, dword [ebp - 0x1888]
mov esi, dword [ebp - 0x184c]
push 0xffffffffffffffff
push eax
call fcn.00416f10
mov ecx, dword [ebp - 0x186c]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1cf
push 0x147
push 0x55
push 2
mov dword [esi + 0x58], ecx
lea ecx, [esi + 0x150]
push 0x49ed98
push str.Name_nI1_nI2_nI3
mov dword [esi + 0x340], 0x430
call fcn.004156d0
mov dword [esi + 0x94], eax
test eax, eax
jne 0x42a646
mov eax, dword [esi + 0x380]
jmp 0x42a67a
cmp eax, 0xffffffff
jne 0x42a651
mov eax, dword [esi + 0x190]
mov ecx, dword [esi + 0x18c]
test ecx, ecx
je 0x42a678
cmp eax, 1
jl 0x42a678
cmp eax, dword [esi + 0x190]
jg 0x42a678
lea eax, [eax + eax*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x42a678
mov eax, dword [ecx + eax*8 + 4]
jmp 0x42a67a
xor eax, eax
push 0
push 4
push 0x108e
push eax
mov dword [esi + 0xd0], eax
call dword [ebp - 0x1898]
movaps xmm0, xmmword [0x4aa4f0]
lea eax, [ebp - 0x1f4]
push eax
push 0
push 0x10a2
mov dword [ebp - 0x1f4], 0x28
mov dword [ebp - 0x1f0], 7
mov dword [ebp - 0x1ec], 3
movups xmmword [ebp - 0x1e8], xmm0
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 1
push dword [esi + 0xd0]
call dword [ebp - 0x1898]
push 0
push 0x14
push 0x14
push ecx
push 0x76
push dword [esi + 0x3c0]
call fcn.0041b150
mov ecx, dword [esi + 0x3d4]
mov dword [ebp - 0x1860], eax
test ecx, ecx
je 0x42a726
mov edx, dword [ecx]
push 1
mov eax, dword [edx]
call eax
mov eax, dword [ebp - 0x1860]
push 0
push 0x14
push 0x14
push ecx
push 0x6a
mov dword [esi + 0x3d4], eax
push dword [esi + 0x3c0]
call fcn.0041b150
mov ecx, dword [esi + 0x3d8]
mov dword [ebp - 0x1860], eax
test ecx, ecx
je 0x42a75e
mov edx, dword [ecx]
push 1
mov eax, dword [edx]
call eax
mov eax, dword [ebp - 0x1860]
push 0
push 0x14
push 0x14
push ecx
push 0x6c
mov dword [esi + 0x3d8], eax
push dword [esi + 0x3c0]
call fcn.0041b150
mov ecx, dword [esi + 0x3e0]
mov dword [ebp - 0x1860], eax
test ecx, ecx
je 0x42a796
mov edx, dword [ecx]
push 1
mov eax, dword [edx]
call eax
mov eax, dword [ebp - 0x1860]
push 0
push 0x14
push 0x14
push ecx
push 0x6b
mov dword [esi + 0x3e0], eax
push dword [esi + 0x3c0]
call fcn.0041b150
mov ecx, dword [esi + 0x3dc]
mov dword [ebp - 0x1860], eax
test ecx, ecx
je 0x42a7ce
mov edx, dword [ecx]
push 1
mov eax, dword [edx]
call eax
mov eax, dword [ebp - 0x1860]
push ecx
mov ecx, esi
mov dword [esi + 0x3dc], eax
call fcn.00430480
push 1
push 0xffffffffffffffff
push eax
mov ecx, esi
mov dword [esi + 0x9c], eax
call fcn.00430170
mov eax, dword [esi + 0xac]
lea ecx, [esi + 0x150]
push ecx
push 0xffffffffffffffff
push 0x17
push 0x1a2
mov dword [esi + 0x378], eax
mov eax, dword [esi + 0xb4]
push 0x20d
mov dword [esi + 0x374], eax
push 0x14a
mov dword [esi + 0x340], 0x8423
call fcn.00415db0
lea ecx, [esi + 0x150]
mov dword [esi + 0x340], 0x400
call fcn.0041aa50
test al, al
je 0x42a8b2
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x10
push 0x10
push 4
and eax, 1
push 5
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x49eb08
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x42a8b2
push eax
push 0xd
lea ecx, [esi + 0x150]
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa520]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x18c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0x60c060
lea ecx, [esi + 0x150]
push 0xffffffffffffffff
call fcn.00416f10
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
je 0x42a93d
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x12
push 0x32
push 4
and eax, 1
push 0x19
shl eax, 0x11
add eax, 0x50000100
push eax
push str._OK
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x42a93d
push eax
push 0xd
lea ecx, [esi + 0x150]
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa560]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x18c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
je 0x42a9b6
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x10
push 0x10
push 4
and eax, 1
push 0x50
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x49eb08
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x42a9b6
push eax
push 0xd
lea ecx, [esi + 0x150]
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa530]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x18c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0xe0f0
lea ecx, [esi + 0x150]
push 0xffffffffffffffff
call fcn.00416f10
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
je 0x42aa41
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x12
push 0x50
push 4
and eax, 1
push 0x64
shl eax, 0x11
add eax, 0x50000100
push eax
push str._Degraded
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x42aa41
push eax
push 0xd
lea ecx, [esi + 0x150]
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa5a0]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x18c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
je 0x42aabd
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x10
push 0x10
push 4
and eax, 1
push 0xb9
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x49eb08
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x42aabd
push eax
push 0xd
lea ecx, [esi + 0x150]
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa540]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x18c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0x30c0ff
lea ecx, [esi + 0x150]
push 0xffffffffffffffff
call fcn.00416f10
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
je 0x42ab4b
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x12
push 0x50
push 4
and eax, 1
push 0xcd
shl eax, 0x11
add eax, 0x50000100
push eax
push str._Warning
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x42ab4b
push eax
push 0xd
lea ecx, [esi + 0x150]
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa5b0]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x18c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
je 0x42abc7
mov eax, dword [esi + 0x190]
push 0
push dword [esi + 0x26c]
inc eax
push eax
push dword [esi + 0x384]
movzx eax, byte [esi + 0x398]
push 0x10
push 0x10
push 4
and eax, 1
push 0x122
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x49eb08
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x42abc7
push eax
push 0xd
lea ecx, [esi + 0x150]
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa550]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x18c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0x1010ff
lea ecx, [esi + 0x150]
push 0xffffffffffffffff
call fcn.00416f10
lea ecx, [esi + 0x150]
call fcn.0041aa50
test al, al
je 0x42ac5b
mov eax, dword [esi + 0x190]
lea ecx, [esi + 0x150]
push 0
push dword [ecx + 0x11c]
inc eax
push eax
push dword [ecx + 0x234]
movzx eax, byte [ecx + 0x248]
push 0x12
push 0x50
push 4
and eax, 1
push 0x136
shl eax, 0x11
add eax, 0x50000100
push eax
push str._Failing
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x42ac5b
push eax
push 0xd
lea ecx, [esi + 0x150]
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa5c0]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 0x18c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
xor eax, eax
mov dword [esi + 0x340], 0x402
mov dword [ebp - 0x17e8], eax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x1870], eax
je 0x42ad01
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x17ec], eax
lea eax, [ebp - 0x17ec]
push eax
push 0
push 0xe200b
push 0
push 0x16
push 0x16
mov dword [ebp - 0xc0], vtable.Gdiplus::Bitmap.0
call dword [sym.imp.gdiplus.dll_GdipCreateBitmapFromScan0]
mov ecx, dword [ebp - 0x1870]
lea edx, [ebp - 0xc0]
push 0x16
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x17ec]
push 0x16
mov dword [ebp - 0xbc], eax
call fcn.0040ac10
test al, al
mov eax, dword [ebp - 0xbc]
je 0x42acf4
push 0
lea ecx, [ebp - 0x17e8]
push ecx
push eax
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
mov eax, dword [ebp - 0xbc]
push eax
call dword [sym.imp.gdiplus.dll_GdipDisposeImage]
mov eax, dword [ebp - 0x17e8]
push ecx
push 0xffffffffffffffff
push 0x16
push 0x16
push 3
push 0x18e
push eax
lea ecx, [esi + 0x150]
call fcn.00415c30
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x17e8]
mov dword [ebp - 0x1860], eax
test ecx, ecx
je 0x42ad3c
push ecx
call dword [ebp - 0x1890]
mov eax, dword [ebp - 0x1860]
push 0x40
lea ecx, [esi + 0x150]
mov dword [esi + 0x5c], eax
push 0xffffffffffffffff
call fcn.00417cb0
lea eax, [ebp - 0x13c]
push eax
push dword [esi + 0xc8]
mov eax, dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x1860], eax
call eax
mov ecx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x130]
sub ecx, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x138]
cmp ecx, 0xffffffff
jne 0x42adb4
cmp eax, ecx
jne 0x42adb4
lea eax, [ebp - 0x1cc]
push eax
push dword [esi + 0x380]
call dword [ebp - 0x1860]
mov ecx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x1c0]
sub ecx, dword [ebp - 0x1cc]
sub eax, dword [ebp - 0x1c8]
mov dword [ebp - 0xc0], ecx
mov edx, 1
mov dword [ebp - 0xbc], eax
sub esp, 0xc
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
movups xmm0, xmmword [ebp - 0xc0]
lea ecx, [edx + 0x11]
movups xmmword [esi + 0x290], xmm0
call fcn.00409e00
mov edx, dword [esi + 0x3c4]
mov dword [ebp - 0x1894], eax
test edx, edx
je 0x42ae0f
push edx
call dword [ebp - 0x1890]
mov eax, dword [ebp - 0x1894]
xor edx, edx
mov dword [esi + 0x3c4], eax
sub esp, 0xc
lea ecx, [edx + 0x12]
call fcn.00409e00
mov ecx, dword [esi + 0x3c8]
mov dword [ebp - 0x1894], eax
test ecx, ecx
je 0x42ae3f
push ecx
call dword [ebp - 0x1890]
mov eax, dword [ebp - 0x1894]
sub esp, 8
mov dword [esi + 0x3c8], eax
mov edx, 1
push 0xff5050af
call fcn.0040a2b0
mov ecx, dword [esi + 0x3cc]
mov dword [ebp - 0x1894], eax
test ecx, ecx
je 0x42ae74
push ecx
call dword [ebp - 0x1890]
mov eax, dword [ebp - 0x1894]
sub esp, 8
mov dword [esi + 0x3cc], eax
xor edx, edx
push 0xff5050af
call fcn.0040a2b0
mov ecx, dword [esi + 0x3d0]
mov dword [ebp - 0x1894], eax
test ecx, ecx
je 0x42aea6
push ecx
call dword [ebp - 0x1890]
mov eax, dword [ebp - 0x1894]
mov dword [esi + 0x3d0], eax
add esi, 0x150
je 0x42aedd
push 0
push 0
push dword [esi + 0x230]
push 0x40e8a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x42aedd
cmp eax, 0xffffffff
je 0x42aedd
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 8
push eax
mov dword [ebp - 0x1864], eax
call esi
push 0xa
push dword [ebp - 0x1864]
mov dword [ebp - 0x185c], eax
call esi
push dword [ebp - 0x1864]
mov dword [ebp - 0x1858], eax
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov esi, dword [ebp - 0x184c]
mov dword [ebp - 0x9c], 0
mov eax, dword [esi + 0x9f0]
test eax, eax
je 0x42af8e
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x100], 0
push ecx
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x158], 4
push ecx
lea ecx, [ebp - 0x100]
push ecx
push 0
push 0x4a03c4
push eax
call dword [ebp - 0x1884]
test eax, eax
jne 0x42af8e
cmp dword [ebp - 0x100], 4
jne 0x42af8e
mov ecx, dword [ebp - 0x9c]
cmp ecx, dword [ebp - 0x185c]
ja 0x42af8e
cmp ecx, 0x2e4
jae 0x42afad
mov eax, 0x3e8
cmp eax, dword [ebp - 0x185c]
sbb ecx, ecx
and ecx, 0xd2
add ecx, 0x316
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc4], 0
mov eax, dword [esi + 0x9f0]
test eax, eax
je 0x42b029
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0xfc], 0
push ecx
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x14c], 4
push ecx
lea ecx, [ebp - 0xfc]
push ecx
push 0
push 0x4a03cc
push eax
call dword [ebp - 0x1884]
test eax, eax
jne 0x42b023
cmp dword [ebp - 0xfc], 4
jne 0x42b023
mov edx, dword [ebp - 0xc4]
cmp edx, dword [ebp - 0x1858]
ja 0x42b023
cmp edx, 0x226
jb 0x42b023
mov ecx, dword [ebp - 0x9c]
jmp 0x42b048
mov ecx, dword [ebp - 0x9c]
mov eax, 0x2bc
cmp eax, dword [ebp - 0x1858]
sbb edx, edx
and edx, 0x96
add edx, 0x226
mov dword [ebp - 0xc4], edx
shr dword [ebp - 0x185c], 1
mov eax, ecx
shr dword [ebp - 0x1858], 1
shr eax, 1
sub dword [ebp - 0x185c], eax
mov eax, edx
push 0x210
push edx
push ecx
shr eax, 1
sub dword [ebp - 0x1858], eax
push dword [ebp - 0x1858]
push dword [ebp - 0x185c]
push 0
push dword [esi + 0xc8]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov dword [ebp - 0xa0], 0
mov eax, dword [esi + 0x9f0]
test eax, eax
je 0x42b0fe
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x10c], 0
push ecx
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x150], 4
push ecx
lea ecx, [ebp - 0x10c]
push ecx
push 0
push str.AutoUpdate
push eax
call dword [ebp - 0x1884]
test eax, eax
jne 0x42b0fe
cmp dword [ebp - 0x10c], 4
jne 0x42b0fe
cmp dword [ebp - 0xa0], eax
jne 0x42b108
push 8
push dword [ebp - 0x18ac]
lea ecx, [esi + 0x150]
call fcn.00417cb0
jmp 0x42b108
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x98], 0
mov eax, dword [esi + 0x9f0]
test eax, eax
je 0x42b16a
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x108], 0
push ecx
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x154], 4
push ecx
lea ecx, [ebp - 0x108]
push ecx
push 0
push str.AutoRefresh
push eax
call dword [ebp - 0x1884]
test eax, eax
jne 0x42b16a
cmp dword [ebp - 0x108], 4
jne 0x42b16a
cmp dword [ebp - 0x98], eax
jne 0x42b187
jmp 0x42b174
mov dword [ebp - 0x98], 0
push 8
push dword [ebp - 0x18b0]
lea ecx, [esi + 0x150]
call fcn.00417cb0
mov dword [esi + 0x340], 0
mov eax, 0x70
mov word [ebp - 0x86], ax
mov edx, 0x45
mov byte [ebp - 0x88], 1
mov ecx, 0x53
movzx eax, word [esi + 0x44]
mov word [ebp - 0x84], ax
mov eax, 0x46
mov word [ebp - 0x80], ax
mov byte [ebp - 0x82], 9
movzx eax, word [esi + 0x84]
mov word [ebp - 0x7e], ax
mov eax, 0x72
mov word [ebp - 0x7a], ax
mov byte [ebp - 0x7c], 1
movzx eax, word [esi + 0x8c]
mov word [ebp - 0x78], ax
mov eax, 0x74
mov word [ebp - 0x74], ax
mov byte [ebp - 0x76], 1
movzx eax, word [esi + 0x7c]
mov word [ebp - 0x72], ax
mov byte [ebp - 0x70], 9
mov word [ebp - 0x6e], dx
movzx eax, word [esi + 0x60]
mov word [ebp - 0x6c], ax
mov eax, 0x55
mov word [ebp - 0x68], ax
mov eax, dword [ebp - 0x18b8]
mov word [ebp - 0x66], ax
mov eax, 0x54
mov word [ebp - 0x62], ax
mov byte [ebp - 0x6a], 9
mov byte [ebp - 0x64], 9
movzx eax, word [esi + 0x78]
mov word [ebp - 0x60], ax
mov word [ebp - 0x5c], cx
mov byte [ebp - 0x5e], 9
movzx eax, word [esi + 0x70]
mov word [ebp - 0x5a], ax
mov word [ebp - 0x56], cx
mov ecx, 0x4d
mov byte [ebp - 0x58], 0x11
movzx eax, word [esi + 0x74]
mov word [ebp - 0x54], ax
mov eax, 0x43
mov word [ebp - 0x50], ax
mov byte [ebp - 0x52], 0x11
movzx eax, word [esi + 0x64]
mov word [ebp - 0x4e], ax
mov eax, 0x52
mov word [ebp - 0x4a], ax
mov byte [ebp - 0x4c], 0x11
movzx eax, word [esi + 0x68]
mov word [ebp - 0x48], ax
mov eax, 0x4f
mov word [ebp - 0x44], ax
mov byte [ebp - 0x46], 0x11
movzx eax, word [esi + 0x6c]
mov word [ebp - 0x42], ax
mov byte [ebp - 0x40], 0x11
mov word [ebp - 0x3e], dx
movzx eax, word [esi + 0xa0]
mov word [ebp - 0x3c], ax
mov eax, 0x42
mov word [ebp - 0x38], ax
mov byte [ebp - 0x3a], 9
movzx eax, word [esi + 0x50]
mov word [ebp - 0x36], ax
mov byte [ebp - 0x34], 9
mov word [ebp - 0x32], cx
movzx eax, word [esi + 0x30]
mov word [ebp - 0x30], ax
mov eax, 0x41
mov word [ebp - 0x2c], ax
mov eax, dword [ebp - 0x18bc]
mov byte [ebp - 0x2e], 0x11
mov word [ebp - 0x2a], ax
mov byte [ebp - 0x28], 0x11
mov word [ebp - 0x26], cx
mov eax, dword [ebp - 0x18c0]
mov word [ebp - 0x24], ax
mov eax, 0x55
mov word [ebp - 0x20], ax
mov eax, dword [ebp - 0x187c]
mov byte [ebp - 0x22], 9
mov word [ebp - 0x1e], ax
mov eax, dword [esi + 0x394]
test eax, eax
je 0x42b32a
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
push 0x12
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
mov dword [esi + 0x394], eax
cmp eax, 0xffffffff
jne 0x42b34e
mov dword [esi + 0x394], 0
mov al, byte [esi + 4]
and al, 1
mov byte [ebp - 0x1871], al
je 0x42b376
cmp dword [esi + 0x80], 0
jle 0x42b376
mov ecx, esi
call fcn.00446de0
mov dword [ebp - 0x187c], eax
jmp 0x42bbce
push 1
lea ecx, [esi + 0x150]
push 1
call fcn.00410720
push 1
mov ecx, esi
call fcn.0043f210
test eax, eax
jne 0x42b385
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SleepEx]
cmp dword [ebp - 0xa0], 0
je 0x42b3c6
test dword [esi + 4], 2
jne 0x42b3c6
push ecx
mov ecx, esi
call fcn.00440920
cmp eax, 1
jne 0x42b3c6
push 0
mov ecx, esi
call fcn.0042d5e0
cmp dword [ebp - 0x98], 0
lea eax, [ebp - 0xe0]
push eax
setne byte [ebp - 0x187d]
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
push 0
push 0x3e8
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
call fcn.0047af30
mov ecx, eax
call fcn.0047b110
cmp byte [ebp - 0x187d], 0
mov eax, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsd qword [ebp - 0xd0], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0x1864], eax
je 0x42b44a
lea ecx, [ebp - 0xe0]
push ecx
call eax
mov edx, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xe0]
call fcn.0047b110
divsd xmm0, qword [ebp - 0xd0]
cmp byte [ebp - 0x1871], 0
movsd qword [ebp - 0xd8], xmm0
mov byte [ebp - 0x187d], 0
je 0x42b761
mov eax, dword [ebp - 0x17a8]
mov esi, dword [ebp - 0x1890]
test eax, eax
je 0x42bbe1
push eax
call esi
mov eax, dword [ebp - 0x17ac]
test eax, eax
je 0x42bbee
mov eax, dword [ebp - 0xf8]
test eax, eax
je 0x42bce2
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x18a4]
test eax, eax
je 0x42bcf5
push eax
call fcn.00469dd3
add esp, 4
test esi, esi
je 0x42bd00
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00469dc5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc