Function at 0x445210
Capabilities:
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47e768
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
mov eax, dword [0x4b4200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xc8], edi
mov esi, dword [ebx + 8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x78], 0
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x74], 0
mov dword [ebp - 4], 0
lea eax, [edi + 0x150]
movaps xmm0, xmmword [0x4aa890]
push ecx
push dword [edi + 0x58]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x60], 0xd
push dword [edi + 0x94]
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x5c], 0
push dword [edi + 0x4c]
push eax
call fcn.0041b400
mov dword [ebp - 4], 1
mov eax, dword [edi + 0x98]
test eax, eax
jne 0x4452ca
mov eax, dword [edi + 0x380]
jmp 0x4452fe
cmp eax, 0xffffffff
jne 0x4452d5
mov eax, dword [edi + 0x190]
mov edx, dword [edi + 0x18c]
test edx, edx
je 0x4452fc
cmp eax, 1
jl 0x4452fc
cmp eax, dword [edi + 0x190]
jg 0x4452fc
lea eax, [eax + eax*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x4452fc
mov eax, dword [edx + eax*8 + 4]
jmp 0x4452fe
xor eax, eax
push 0
push 0
push 0x1004
mov dword [ebp - 0xd8], eax
push eax
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0xe0], eax
call eax
mov dword [ebp - 0xdc], eax
cmp dword [edi + 0x9e4], esi
ja 0x445332
lea ecx, [esi + 1]
mov dword [edi + 0x9e4], ecx
lea esi, [esi + esi*2]
shl esi, 5
add esi, dword [edi + 0x9ec]
mov eax, dword [esi + 0x54]
test eax, eax
je 0x446ce7
cmp word [eax], 0
je 0x446ce7
mov ecx, dword [edi + 0x98]
cmp ecx, 0xffffffff
jne 0x445366
mov ecx, dword [edi + 0x190]
jmp 0x445387
mov edx, dword [edi + 0x18c]
test edx, edx
je 0x4453a8
cmp ecx, 1
jl 0x4453a8
cmp ecx, dword [edi + 0x190]
jg 0x4453a8
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x4453a8
mov eax, dword [edi + 0x18c]
lea ecx, [ecx + ecx*8]
mov eax, dword [eax + ecx*8 + 4]
test eax, eax
je 0x4453a8
push 4
push 4
push 0x1036
push eax
call dword [ebp - 0xe0]
cmp dword [esi + 0x54], 0
lea eax, [esi + 0x5c]
xorps xmm0, xmm0
mov dword [ebp - 0x100], 0
movq qword [ebp - 0x108], xmm0
mov dword [ebp - 0x34], eax
jne 0x4453eb
push 2
call fcn.0046a3df
mov dword [esi + 0x54], eax
add esp, 4
xor ecx, ecx
mov word [eax], cx
mov edx, dword [esi + 0x54]
mov eax, dword [ebp - 0x34]
mov dword [esi + 0x58], ecx
mov esi, edx
mov dword [ebp - 0x18], esi
jmp 0x4453f3
mov edx, dword [esi + 0x54]
mov esi, edx
mov dword [ebp - 0x18], edx
mov cl, 1
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x28], edx
mov edi, str.Monitoring_
mov byte [eax], cl
xor eax, eax
inc eax
cmp word [eax*2 + str.HKCUSoftwareClearDiskInfo], 0
jne 0x445404
xor ecx, ecx
inc ecx
cmp word [ecx*2 + str.Monitoring_], 0
jne 0x445412
add ecx, eax
mov dword [ebp - 0xcc], ecx
test edx, edx
jne 0x445432
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], esi
jmp 0x445452
xor eax, eax
cmp word [edx], ax
je 0x445450
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], esi
inc eax
cmp word [ecx + eax*2], 0
jne 0x445442
mov ecx, dword [ebp - 0xcc]
add ecx, eax
lea eax, [ecx + 1]
mov dword [ebp - 0xcc], ecx
mov ecx, 2
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
mov esi, str.HKCUSoftwareClearDiskInfo
mov dword [ebp - 0xe8], eax
add esp, 4
mov ecx, eax
mov edx, 0x48
sub esi, eax
nop word [eax + eax]
mov word [ecx], dx
add ecx, 2
movzx eax, word [esi + ecx]
mov edx, eax
test ax, ax
jne 0x445490
mov esi, dword [ebp - 0x18]
mov eax, 0x5c
nop dword [eax]
movzx eax, ax
lea edi, [edi + 2]
mov word [ecx], ax
add ecx, 2
movzx eax, word [edi]
test ax, ax
jne 0x4454b0
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x4454e9
movzx eax, word [eax]
mov edx, eax
test ax, ax
je 0x4454e9
movzx eax, ax
lea esi, [esi + 2]
mov word [ecx], ax
add ecx, 2
movzx eax, word [esi]
test ax, ax
jne 0x4454d5
xor eax, eax
mov word [ecx], ax
mov ecx, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0x104], eax
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x1c], 1
movq qword [ebp - 0x40], xmm0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 0x38], 1
mov byte [ebp - 4], 5
mov edx, 0xf003f
push ecx
mov byte [ebp - 0x100], 1
call fcn.00409550
mov esi, eax
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 6
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test esi, esi
je 0x4457a1
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
cmp dword [ebp - 0x30], 1
jbe 0x4457a1
xor eax, eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xdc], eax
jle 0x4457b8
mov edx, dword [ebp - 0xc8]
lea ecx, [edx + 0x150]
mov dword [ebp - 0x34], ecx
push 1
push eax
push dword [edx + 0x98]
call fcn.00419d90
mov edi, eax
mov eax, dword [ebp - 0x24]
test edi, edi
jne 0x445607
test eax, eax
je 0x4455e9
push eax
call fcn.00469dd3
add esp, 4
push 2
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.0046a3df
mov edi, eax
add esp, 4
xor eax, eax
mov word [edi], ax
jmp 0x44561b
test eax, eax
je 0x445614
push eax
call fcn.00469dd3
add esp, 4
mov dword [ebp - 0x20], 0
mov byte [ebp - 0x1c], 1
mov dword [ebp - 0x24], edi
test edi, edi
je 0x445777
cmp word [edi], 0
je 0x445777
mov eax, dword [ebp - 0x40]
mov byte [ebp - 0x1c], 1
test eax, eax
je 0x445648
push eax
call fcn.00469dd3
add esp, 4
lea eax, [ebp - 0x18]
mov dword [ebp - 0x40], 0
push eax
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x3c], 0
push eax
push 0
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push esi
mov byte [ebp - 0x38], 1
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x18], 0
call edi
test eax, eax
jne 0x44577d
mov eax, dword [ebp - 0x2c]
cmp eax, 1
je 0x44569c
cmp eax, 2
je 0x44569c
cmp eax, 7
jne 0x44577d
mov edi, dword [ebp - 0x18]
mov ecx, 2
add edi, 4
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x18], edi
shr edi, 1
lea eax, [edi + 1]
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0x40], eax
xor ecx, ecx
mov byte [ebp - 0x38], 1
mov word [eax + edi*2], cx
mov word [eax], cx
mov dword [eax + edi*2 - 4], ecx
lea ecx, [ebp - 0x18]
push ecx
push eax
push 0
push 0
push dword [ebp - 0x24]
push esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x445777
cmp dword [ebp - 0x2c], 7
mov edx, dword [ebp - 0x40]
jne 0x44572f
cmp edi, 3
jbe 0x44572f
lea ecx, [edi - 1]
mov byte [ebp - 0x38], 1
test ecx, ecx
je 0x44572f
lea esi, [eax + 0xa]
xor edi, edi
cmp di, word [edx + eax*2]
jne 0x445727
cmp word [edx + eax*2 + 2], di
je 0x445727
mov word [edx + eax*2], si
inc eax
cmp eax, ecx
jb 0x445714
mov esi, dword [ebp - 0x28]
xor eax, eax
cmp word [edx], ax
je 0x44573e
inc eax
cmp word [edx + eax*2], 0
jne 0x445736
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x445777
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xa4], 0xf000
push eax
push dword [ebp - 0xcc]
mov dword [ebp - 0xa8], 0x2000
push 0x102b
push dword [ebp - 0xd8]
call dword [ebp - 0xe0]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x34]
inc eax
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xcc], eax
cmp eax, dword [ebp - 0xdc]
jl 0x4455c5
jmp 0x4457b8
push dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xc8]
push dword [ebp - 0xd8]
call fcn.00446d50
mov dword [ebp - 0x44], 0
test esi, esi
je 0x4457e7
lea eax, [ebp - 0x34]
mov dword [ebp - 0x48], 0
push eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x34], 4
push eax
lea eax, [ebp - 0x48]
push eax
push 0
push str.Status
push esi
call edi
mov edi, dword [ebp - 0xc8]
lea eax, [ebp - 0xc4]
push eax
push dword [edi + 0x94]
lea ecx, [edi + 0x150]
call fcn.00418ce0
push 0x40
push dword [edi + 0x30]
lea ecx, [edi + 0x150]
call fcn.00417cb0
lea ecx, [edi + 0x150]
mov dword [edi + 0x340], 0x430
push ecx
push 0
push dword [ebp - 0xb8]
mov dword [edi + 0x378], 0xfffefc
push dword [ebp - 0xbc]
mov dword [edi + 0x374], 0x301020
push 0x55
push 2
call fcn.00415db0
movsd xmm0, qword [0x4aa418]
mov dword [edi + 0x340], 0x400
mov dword [ebp - 0x34], eax
xor eax, eax
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x384
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
nop dword [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445890
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
add esp, 0x10
add edi, 0x150
mov ecx, edi
call fcn.0041aa50
test al, al
jne 0x4458ce
mov dword [ebp - 0x30], 0
jmp 0x445939
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x16
push 0x133
push 0xa
and eax, 1
push 0xa
shl eax, 0x11
add eax, 0x50000101
push eax
push str.Disk_Monitoring_Setup
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x44591a
mov dword [ebp - 0x30], eax
jmp 0x445939
push eax
push 0xd
mov ecx, edi
call fcn.0041a7c0
mov ecx, dword [edi + 0x3c]
movaps xmm0, xmmword [0x4aa720]
mov dword [ebp - 0x30], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov edi, dword [ebp - 0xc8]
xor eax, eax
movsd xmm0, qword [0x4aa3f0]
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x190
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
nop dword [eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445970
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
add esp, 0x10
add edi, 0x150
mov ecx, edi
call fcn.0041aa50
test al, al
je 0x445a08
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x50
push 0x133
push 0x2d
and eax, 1
push 0xa
shl eax, 0x11
add eax, 0x50000100
push eax
push str.Select__in_the_list_to_the_right__the_attributes_you_want_to_monitor._Whenever_the_values_of_those_attributes_change__you_will_be_notified._Click_the_preset_links_below_to_help_with_the_selection.
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x445a08
push eax
push 0xd
mov ecx, edi
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa810]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 0x3c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov edi, dword [ebp - 0xc8]
xor eax, eax
movsd xmm0, qword [0x4aa408]
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x384
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
nop dword [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445a40
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
add esp, 0x10
add edi, 0x150
mov ecx, edi
call fcn.0041aa50
test al, al
je 0x445adb
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x14
push 0xc8
push 0x82
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push str.Presets:
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x445adb
push eax
push 0xd
mov ecx, edi
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa680]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 0x3c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov edi, dword [ebp - 0xc8]
xor eax, eax
movsd xmm0, qword [0x4aa3f8]
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x190
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
nop dword [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445b10
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
add esp, 0x10
add edi, 0x150
mov ecx, edi
call fcn.0041aa50
test al, al
jne 0x445b49
xor eax, eax
jmp 0x445baf
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x12
push 0x133
push 0xa0
and eax, 1
push 0xa
shl eax, 0x11
add eax, 0x50010000
push eax
push str._a_Tick_recommended_attributes__a_
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x445baf
push eax
push 0x1f
mov ecx, edi
call fcn.0041a7c0
mov ecx, dword [edi + 0x3c]
movaps xmm0, xmmword [0x4aa610]
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0xf0], eax
lea ecx, [edi + 0x150]
push ecx
push eax
call fcn.00416b90
add edi, 0x150
mov ecx, edi
call fcn.0041aa50
test al, al
jne 0x445bdd
xor eax, eax
jmp 0x445c43
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x12
push 0x133
push 0xbe
and eax, 1
push 0xa
shl eax, 0x11
add eax, 0x50010000
push eax
push str._a_Tick_all_critical_attributes__a_
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x445c43
push eax
push 0x1f
mov ecx, edi
call fcn.0041a7c0
mov ecx, dword [edi + 0x3c]
movaps xmm0, xmmword [0x4aa620]
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0xf4], eax
lea ecx, [edi + 0x150]
push ecx
push eax
call fcn.00416b90
add edi, 0x150
mov ecx, edi
call fcn.0041aa50
test al, al
jne 0x445c71
xor eax, eax
jmp 0x445cd7
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x12
push 0x133
push 0xdc
and eax, 1
push 0xa
shl eax, 0x11
add eax, 0x50010000
push eax
push str._a_Untick_all_attributes__a_
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x445cd7
push eax
push 0x1f
mov ecx, edi
call fcn.0041a7c0
mov ecx, dword [edi + 0x3c]
movaps xmm0, xmmword [0x4aa630]
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0xf8], eax
lea ecx, [edi + 0x150]
push ecx
push eax
call fcn.00416b90
movsd xmm0, qword [0x4aa408]
xor eax, eax
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x384
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
nop word [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445d20
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
add esp, 0x10
add edi, 0x150
mov ecx, edi
call fcn.0041aa50
test al, al
je 0x445dbb
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x14
push 0xc8
push 0x104
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push str.Notification_mode:
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x445dbb
push eax
push 0xd
mov ecx, edi
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa690]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 0x3c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov edi, dword [ebp - 0xc8]
xor eax, eax
movsd xmm0, qword [0x4aa3f8]
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x190
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
nop dword [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445df0
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
push 0x122
lea ecx, [edi + 0x150]
push ecx
push str.Strict___Notify_even_minor_changes
call fcn.00415d10
sub esp, 8
mov dword [ebp - 0x48], eax
lea ecx, [edi + 0x150]
push str.Notify_all_changes_to_the_selected_attributes__even_minor_ones
push 0xffffffffffffffff
call fcn.00418a80
sub esp, 0x10
lea ecx, [edi + 0x150]
push 0x140
push ecx
push str.Passive___Notify_only_major_changes
call fcn.00415d10
mov ecx, dword [ebp - 0xc8]
sub esp, 8
add ecx, 0x150
mov edi, eax
push str.Notify_only_important_changes_to_the_selected_attributes__skip_the_minor_ones
push 0xffffffffffffffff
call fcn.00418a80
cmp dword [ebp - 0x44], 1
mov ecx, 0x150
mov eax, dword [ebp - 0xc8]
jne 0x445e89
mov edi, dword [ebp - 0x48]
push 4
push edi
add ecx, eax
call fcn.00417cb0
mov edi, dword [ebp - 0xc8]
xor eax, eax
movsd xmm0, qword [0x4aa408]
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x384
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445ec3
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
add esp, 0x10
add edi, 0x150
mov ecx, edi
call fcn.0041aa50
test al, al
je 0x445f5e
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x14
push 0xc8
push 0x168
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push str.Monitoring_Setup:
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x445f5e
push eax
push 0xd
mov ecx, edi
call fcn.0041a7c0
movaps xmm0, xmmword [0x4aa6a0]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 0x3c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov edi, dword [ebp - 0xc8]
xor eax, eax
movsd xmm0, qword [0x4aa3f8]
movsd qword [edi + 0x2c0], xmm0
mov dword [edi + 0x2c8], 0x190
mov byte [edi + 0x2cc], 1
mov byte [edi + 0x30e], 0
nop
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445f90
inc eax
push eax
push str.Arial
lea eax, [edi + 0x2ce]
push 0x20
push eax
call fcn.0046d1e3
add edi, 0x150
add esp, 0x10
cmp dword [edi + 0x230], 0
je 0x44603c
mov ecx, edi
call fcn.0041aa50
test al, al
je 0x44603c
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x12
push 0x133
push 0x186
and eax, 1
push 0xa
shl eax, 0x11
add eax, 0x50010003
push eax
push str.Set_monitoring_options_after_applying
push str.Button
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x44603c
push eax
push 4
mov ecx, edi
call fcn.0041a7c0
mov ecx, dword [edi + 0x3c]
movaps xmm0, xmmword [0x4aa640]
mov dword [ebp - 0xfc], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x446046
mov dword [ebp - 0xfc], 0
mov edi, dword [ebp - 0xc8]
sub esp, 8
push str.Go_to_Monitoring_Setup_after_Saving_and_applying
lea ecx, [edi + 0x150]
push 0xffffffffffffffff
call fcn.00418a80
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
movq qword [ebp - 0x54], xmm0
call fcn.00426e10
push 0
push 1
push 1
lea ecx, [edi + 0x9b4]
mov dword [ebp - 0x54], eax
push 0
push ecx
mov byte [ebp - 0x4c], 1
call fcn.004057e0
push eax
lea ecx, [ebp - 0x54]
call fcn.00406350
mov ecx, dword [ebp - 0x54]
mov edi, eax
test ecx, ecx
je 0x4460ab
push ecx
call fcn.00469dd3
add esp, 4
test edi, edi
jg 0x4460c4
mov ecx, dword [ebp - 0xc8]
push 4
push 0xffffffffffffffff
lea ecx, [ecx + 0x150]
call fcn.00417cb0
mov edi, dword [ebp - 0xc8]
add edi, 0x150
cmp dword [edi + 0x230], 0
je 0x446152
mov ecx, edi
call fcn.0041aa50
test al, al
je 0x446152
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x1c
push 0x85
push 0x1ae
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50010000
push eax
push str.Cancel
push str.Button
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x446152
push eax
push 3
mov ecx, edi
call fcn.0041a7c0
mov ecx, dword [edi + 0x3c]
movaps xmm0, xmmword [0x4aa740]
mov dword [ebp - 0xec], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x44615c
mov dword [ebp - 0xec], 0
mov edi, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xbc]
add edi, 0x150
add eax, 0xffffff67
mov dword [ebp - 0x2c], eax
cmp dword [edi + 0x230], 0
je 0x44621b
mov ecx, edi
call fcn.0041aa50
test al, al
je 0x44621b
mov eax, dword [edi + 0x40]
push 0
push dword [edi + 0x11c]
inc eax
push eax
push dword [edi + 0x234]
movzx eax, byte [edi + 0x248]
push 0x1c
push 0x85
push 0x1ae
push dword [ebp - 0x2c]
and eax, 1
shl eax, 0x11
add eax, 0x50010000
push eax
push str.Save_and_apply
push str.Button
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x44621b
push eax
push 3
mov ecx, edi
call fcn.0041a7c0
mov ecx, eax
mov dword [ebp - 0x54], 0x1ae
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
lea edx, [ecx + ecx*8]
mov ecx, dword [edi + 0x3c]
mov dword [ebp - 0x50], 0x85
mov dword [ebp - 0x4c], 0x1c
movups xmm0, xmmword [ebp - 0x58]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x446220
xor eax, eax
mov dword [ebp - 0x18], eax
mov edi, dword [ebp - 0xc8]
push eax
lea ecx, [edi + 0x150]
call fcn.00410520
push 2
push dword [ebp - 0x34]
lea ecx, [edi + 0x150]
mov dword [ebp - 0x2c], 0xffffffff
call fcn.00417cb0
push 0
mov ecx, edi
call fcn.0043f210
test eax, eax
je 0x446847
lea ecx, [edi + 0x150]
mov dword [ebp - 0xe4], ecx
nop word [eax + eax]
mov eax, dword [edi + 0xd8]
cmp eax, 0xfffffffa
je 0x446840
cmp dword [edi + 0x108], ecx
jne 0x44681a
cmp eax, dword [ebp - 0xec]
je 0x446847
cmp eax, dword [ebp - 0xf0]
jne 0x4467a7
xor eax, eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xdc], eax
jle 0x44681a
mov esi, dword [ebp - 0x24]
nop word [eax + eax]
push eax
push dword [edi + 0x98]
call fcn.00419c70
cmp eax, 1
je 0x446770
cmp eax, 3
je 0x446770
push 0
push dword [ebp - 0xcc]
lea ecx, [edi + 0x150]
push dword [edi + 0x98]
call fcn.00419d90
mov edi, eax
test edi, edi
jne 0x446328
test esi, esi
je 0x44630a
push esi
call fcn.00469dd3
add esp, 4
push 2
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.0046a3df
mov esi, eax
add esp, 4
xor eax, eax
mov word [esi], ax
jmp 0x44633e
test esi, esi
je 0x446335
push esi
call fcn.00469dd3
add esp, 4
mov esi, edi
mov dword [ebp - 0x20], 0
mov byte [ebp - 0x1c], 1
mov dword [ebp - 0x24], esi
cmp esi, str.2.11
je 0x446374
test esi, esi
je 0x44642c
mov edi, str.2.11
mov eax, esi
sub eax, edi
mov dword [ebp - 0xd4], eax
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x4463d3
cmp word [edi], ax
jne 0x4463d8
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xa4], 0xf000
push eax
push dword [ebp - 0xcc]
mov dword [ebp - 0xa8], 0x2000
push 0x102b
push dword [ebp - 0xd8]
call dword [ebp - 0xe0]
mov edi, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xcc]
lea ecx, [edi + 0x150]
inc eax
mov dword [ebp - 0xcc], eax
cmp eax, dword [ebp - 0xdc]
jl 0x4462c0
mov esi, dword [ebp - 0x28]
jmp 0x44681a
cmp ax, word [edi]
je 0x44641e
xor edx, edx
cmp dx, ax
jne 0x4463e7
mov dword [ebp - 0xd0], edx
jmp 0x4463f9
push ecx
call fcn.0046e306
movzx eax, ax
add esp, 4
mov dword [ebp - 0xd0], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x446409
xor eax, eax
jmp 0x446415
push ecx
call fcn.0046e306
add esp, 4
movzx eax, ax
cmp word [ebp - 0xd0], ax
jne 0x44642c
mov eax, dword [ebp - 0xd4]
add edi, 2
jmp 0x446364
cmp esi, 0x4a71a8
je 0x446374
test esi, esi
je 0x4464bc
mov edi, 0x4a71a8
mov eax, esi
sub eax, edi
mov dword [ebp - 0xd4], eax
nop
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x446466
cmp word [edi], ax
je 0x446374
jmp 0x44646b
cmp ax, word [edi]
je 0x4464b1
xor edx, edx
cmp dx, ax
jne 0x44647a
mov dword [ebp - 0xd0], edx
jmp 0x44648c
push ecx
call fcn.0046e306
movzx eax, ax
add esp, 4
mov dword [ebp - 0xd0], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x44649c
xor eax, eax
jmp 0x4464a8
push ecx
call fcn.0046e306
add esp, 4
movzx eax, ax
cmp word [ebp - 0xd0], ax
jne 0x4464bc
mov eax, dword [ebp - 0xd4]
add edi, 2
jmp 0x446450
cmp esi, 0x4a71b0
je 0x446374
test esi, esi
je 0x44654c
mov edi, 0x4a71b0
mov eax, esi
sub eax, edi
mov dword [ebp - 0xd4], eax
nop
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x4464f6
cmp word [edi], ax
je 0x446374
jmp 0x4464fb
cmp ax, word [edi]
je 0x446541
xor edx, edx
cmp dx, ax
jne 0x44650a
mov dword [ebp - 0xd0], edx
jmp 0x44651c
push ecx
call fcn.0046e306
movzx eax, ax
add esp, 4
mov dword [ebp - 0xd0], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x44652c
xor eax, eax
jmp 0x446538
push ecx
call fcn.0046e306
add esp, 4
movzx eax, ax
cmp word [ebp - 0xd0], ax
jne 0x44654c
mov eax, dword [ebp - 0xd4]
add edi, 2
jmp 0x4464e0
cmp esi, 0x4a71b8
je 0x446374
test esi, esi
je 0x4465dc
mov edi, 0x4a71b8
mov eax, esi
sub eax, edi
mov dword [ebp - 0xd4], eax
nop
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x446586
cmp word [edi], ax
je 0x446374
jmp 0x44658b
cmp ax, word [edi]
je 0x4465d1
xor edx, edx
cmp dx, ax
jne 0x44659a
mov dword [ebp - 0xd0], edx
jmp 0x4465ac
push ecx
call fcn.0046e306
movzx eax, ax
add esp, 4
mov dword [ebp - 0xd0], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x4465bc
xor eax, eax
jmp 0x4465c8
push ecx
call fcn.0046e306
add esp, 4
movzx eax, ax
cmp word [ebp - 0xd0], ax
jne 0x4465dc
mov eax, dword [ebp - 0xd4]
add edi, 2
jmp 0x446570
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xe4]
push 1
push dword [ebp - 0xcc]
push dword [eax + 0x98]
call fcn.00419d90
mov edi, eax
test edi, edi
jne 0x44662c
test esi, esi
je 0x44660e
push esi
call fcn.00469dd3
add esp, 4
push 2
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.0046a3df
mov esi, eax
add esp, 4
xor eax, eax
mov word [esi], ax
jmp 0x446642
test esi, esi
je 0x446639
push esi
call fcn.00469dd3
add esp, 4
mov esi, edi
mov dword [ebp - 0x20], 0
mov byte [ebp - 0x1c], 1
mov dword [ebp - 0x24], esi
cmp esi, str.Temperature
je 0x446374
test esi, esi
je 0x4466dc
mov edi, str.Temperature
mov eax, esi
sub eax, edi
mov dword [ebp - 0xd4], eax
nop dword [eax]
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x446686
cmp word [edi], ax
je 0x446374
jmp 0x44668b
cmp ax, word [edi]
je 0x4466d1
xor edx, edx
cmp dx, ax
jne 0x44669a
mov dword [ebp - 0xd0], edx
jmp 0x4466ac
push ecx
call fcn.0046e306
movzx eax, ax
add esp, 4
mov dword [ebp - 0xd0], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x4466bc
xor eax, eax
jmp 0x4466c8
push ecx
call fcn.0046e306
add esp, 4
movzx eax, ax
cmp word [ebp - 0xd0], ax
jne 0x4466dc
mov eax, dword [ebp - 0xd4]
add edi, 2
jmp 0x446670
cmp esi, str.Failure_predicted
je 0x446374
test esi, esi
je 0x4463a6
mov edi, str.Failure_predicted
mov eax, esi
sub eax, edi
mov dword [ebp - 0xd4], eax
nop
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x446716
cmp word [edi], ax
je 0x446374
jmp 0x44671b
cmp ax, word [edi]
je 0x446765
xor edx, edx
cmp dx, ax
jne 0x44672a
mov dword [ebp - 0xd0], edx
jmp 0x44673c
push ecx
call fcn.0046e306
movzx eax, ax
add esp, 4
mov dword [ebp - 0xd0], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x44674c
xor eax, eax
jmp 0x446758
push ecx
call fcn.0046e306
add esp, 4
movzx eax, ax
cmp word [ebp - 0xd0], ax
jne 0x4463a6
mov eax, dword [ebp - 0xd4]
add edi, 2
jmp 0x446700
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xa4], 0xf000
push eax
push dword [ebp - 0xcc]
mov dword [ebp - 0xa8], 0x2000
push 0x102b
push dword [ebp - 0xd8]
call dword [ebp - 0xe0]
jmp 0x4463ac
cmp eax, dword [ebp - 0xf4]
jne 0x4467c4
push dword [ebp - 0xdc]
mov ecx, edi
push dword [ebp - 0xd8]
call fcn.00446d50
jmp 0x44681a
cmp eax, dword [ebp - 0xf8]
jne 0x446832
xor edi, edi
cmp dword [ebp - 0xdc], edi
jle 0x446814
mov esi, dword [ebp - 0xd8]
nop dword [eax]
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xa4], 0xf000
push eax
push edi
push 0x102b
push esi
mov dword [ebp - 0xa8], 0x1000
call dword [ebp - 0xe0]
inc edi
cmp edi, dword [ebp - 0xdc]
jl 0x4467e0
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0xc8]
push 0
mov ecx, edi
call fcn.0043f210
test eax, eax
je 0x446847
lea ecx, [edi + 0x150]
jmp 0x446270
cmp eax, dword [ebp - 0x18]
jne 0x44681a
mov dword [ebp - 0x2c], 1
jmp 0x446847
mov dword [ebp - 0x2c], 0xfffffffe
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 0x100], 1
test esi, esi
je 0x446862
push esi
call edi
mov dword [ebp - 0x28], 0
or eax, 0xffffffff
push ecx
mov ecx, dword [ebp - 0xe8]
mov edx, eax
call fcn.00409550
cmp dword [ebp - 0x2c], 0
mov esi, eax
mov dword [ebp - 0x28], esi
jg 0x446899
mov eax, dword [ebp - 0xc8]
push 8
push dword [eax + 0x30]
lea ecx, [eax + 0x150]
call fcn.00417cb0
jmp 0x446a76
mov byte [ebp - 0x100], 1
test esi, esi
je 0x4468ae
push esi
call edi
mov dword [ebp - 0x28], 0
or eax, 0xffffffff
push ecx
mov ecx, dword [ebp - 0xe8]
mov edx, eax
call fcn.00409550
cmp dword [ebp - 0xdc], 0
mov esi, eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0xcc], 0
jle 0x446a40
mov edx, dword [ebp - 0xc8]
mov eax, dword [edx + 0x98]
cmp eax, 0xffffffff
jne 0x4468f8
mov eax, dword [edx + 0x190]
mov ecx, dword [edx + 0x18c]
test ecx, ecx
je 0x4469be
cmp eax, 1
jl 0x4469be
cmp eax, dword [edx + 0x190]
jg 0x4469be
lea edi, [eax + eax*8]
cmp dword [ecx + edi*8 + 0xc], 0
je 0x4469be
cmp dword [ecx + edi*8], 0xf
jne 0x4469be
push 0x2000
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0xa0], eax
xor ecx, ecx
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xac], 1
mov word [eax], cx
mov word [eax + 0x1ffe], cx
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0xc8]
push dword [ebp - 0xcc]
mov dword [ebp - 0x9c], 0x1000
push 0x1073
mov eax, dword [eax + 0x18c]
push dword [eax + edi*8 + 4]
call dword [ebp - 0xe0]
mov edi, dword [ebp - 0xe4]
test edi, edi
je 0x4469be
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x4469ae
push eax
call fcn.00469dd3
add esp, 4
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], 0
mov byte [ebp - 0x1c], 1
jmp 0x4469cb
push 0
lea ecx, [ebp - 0x24]
call fcn.00405a60
mov edi, dword [ebp - 0x24]
push 0xf000
push dword [ebp - 0xcc]
push 0x102c
push dword [ebp - 0xd8]
call dword [ebp - 0xe0]
shr eax, 0xd
test al, 1
jne 0x446af3
test edi, edi
jne 0x446a0d
push 2
call fcn.0046a3df
mov edi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], eax
mov word [edi], ax
mov byte [ebp - 0x1c], 1
test esi, esi
je 0x446a21
test edi, edi
je 0x446a21
push edi
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, dword [ebp - 0xcc]
inc ecx
mov dword [ebp - 0xcc], ecx
cmp ecx, dword [ebp - 0xdc]
jl 0x4468e1
mov ecx, dword [ebp - 0xc8]
push 4
push dword [ebp - 0x48]
lea ecx, [ecx + 0x150]
call fcn.00418db0
neg eax
sbb eax, eax
add eax, 2
mov dword [ebp - 0x44], eax
test esi, esi
je 0x446a76
push 4
lea eax, [ebp - 0x44]
push eax
push 4
push 0
push str.Status
push esi
call edi
mov ecx, dword [ebp - 0xc8]
push 4
push dword [ebp - 0xfc]
lea ecx, [ecx + 0x150]
call fcn.00418db0
mov ecx, dword [ebp - 0xc8]
mov edi, eax
add ecx, 0x150
push ecx
push dword [ebp - 0x18]
push dword [ebp - 0x30]
call fcn.00416b20
mov ecx, dword [ebp - 0xc8]
push dword [ebp - 0x34]
lea ecx, [ecx + 0x150]
call fcn.00416080
mov eax, dword [ebp - 0xc8]
push 0x20
push dword [eax + 0x30]
lea ecx, [eax + 0x150]
call fcn.00417cb0
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax + 0x98]
cmp ecx, 0xffffffff
jne 0x446c47
mov ecx, dword [eax + 0x190]
jmp 0x446c6e
mov edx, dword [ebp - 0xc8]
mov eax, dword [edx + 0x98]
cmp eax, 0xffffffff
jne 0x446b0a
mov eax, dword [edx + 0x190]
mov ecx, dword [edx + 0x18c]
test ecx, ecx
je 0x446bd2
cmp eax, 1
jl 0x446bd2
cmp eax, dword [edx + 0x190]
jg 0x446bd2
lea edi, [eax + eax*8]
cmp dword [ecx + edi*8 + 0xc], 0
je 0x446bd2
cmp dword [ecx + edi*8], 0xf
jne 0x446bd2
push 0x2000
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0xa0], eax
xor ecx, ecx
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xac], 2
mov word [eax], cx
mov word [eax + 0x1ffe], cx
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0xc8]
push dword [ebp - 0xcc]
mov dword [ebp - 0x9c], 0x1000
push 0x1073
mov eax, dword [eax + 0x18c]
push dword [eax + edi*8 + 4]
call dword [ebp - 0xe0]
mov edi, dword [ebp - 0xe4]
test edi, edi
je 0x446bd2
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x446bc0
push eax
call fcn.00469dd3
add esp, 4
mov edx, edi
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], edx
mov byte [ebp - 0x38], 1
jmp 0x446bdf
push 0
lea ecx, [ebp - 0x40]
call fcn.00405a60
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x446a21
cmp word [ecx], 0
je 0x446a21
test edx, edx
je 0x446a21
cmp word [edx], 0
je 0x446a21
mov byte [ebp - 0x38], 1
mov byte [ebp - 0x1c], 1
test esi, esi
je 0x446a21
xor eax, eax
nop dword [eax + eax]
cmp word [edx + eax*2 + 2], 0
lea eax, [eax + 1]
jne 0x446c20
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea eax, [eax*2 + 2]
push eax
push edx
push 1
push 0
push ecx
push esi
call edi
jmp 0x446a27
mov edx, dword [eax + 0x18c]
test edx, edx
je 0x446c95
cmp ecx, 1
jl 0x446c95
cmp ecx, dword [eax + 0x190]
jg 0x446c95
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
mov eax, dword [ebp - 0xc8]
je 0x446c95
mov eax, dword [eax + 0x18c]
lea ecx, [ecx + ecx*8]
mov eax, dword [eax + ecx*8 + 4]
test eax, eax
je 0x446c8f
push 0
push 4
push 0x1036
push eax
call dword [ebp - 0xe0]
mov eax, dword [ebp - 0xc8]
test edi, edi
je 0x446ca4
mov ecx, eax
call fcn.0044bb30
mov edi, eax
jmp 0x446ca7
mov edi, dword [ebp - 0x2c]
test esi, esi
je 0x446cb7
cmp esi, 0xffffffff
je 0x446cb7
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x446cc7
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x446cd7
push eax
call fcn.00469dd3
add esp, 4
push dword [ebp - 0xe8]
call fcn.00469dd3
add esp, 4
jmp 0x446ce9
xor edi, edi
mov dword [ebp - 4], 8
mov ecx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x78]
test ecx, ecx
je 0x446d12
test esi, esi
je 0x446d1f
push dword [ebp - 0x60]
lea eax, [ebp - 0x78]
push dword [ebp - 0x70]
push eax
call fcn.0040f6b0
call fcn.00407990
test esi, esi
je 0x446d1f
push esi
call fcn.00469dd3
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00469dc5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8