Function at 0x423000
Capabilities:
Delete registry key
Get common file path

Disassembly:
push 0
pop eax
xor esi, esi
push esi
xor edi, edi
push edi
call dword [sym.imp.user32.dll_LoadMenuW]
mov dword [0x47d884], eax
mov dword [0x47d29b], 0
mov eax, dword [0x47d29b]
push 0
pop ebp
push ebp
xor edx, edx
push edx
call dword [sym.imp.user32.dll_LoadMenuW]
mov dword [0x47d094], eax
mov dword [0x47d4c6], 0
mov eax, dword [0x47d4c6]
xor ebx, ebx
mov eax, 0x223f
sub ebx, eax
or ebx, 0x264c
jne 0x423065
add ebx, 0x64c
inc ebx
shl ebx, 7
mov eax, 0xad9
imul ebx, eax, 0x1d
push ebx
dec ebx
test ebx, 0x1d9e
je 0x423077
pop dword [0x47d9bf]
mov dword [0x47d633], ebx
xor edi, edi
test dword [0x47d621], edi
jne 0x423096
dec edi
mov ebx, 0x3bc
imul edi, ebx, 0x5d
ror edi, 5
mov ecx, edi
mov esi, 0x16bc
xor esi, ecx
add ecx, 0x22a
jne 0x4230aa
mov dword [0x47da37], ecx
mov edi, 0x61
sub edi, 0x7fc2e86b
jne 0x424832
mov dword [0x47db96], eax
mov ebx, 0x810
rol ebx, 2
or ebx, 0x11c6
jne 0x4230dd
mov esi, 0x1e7
add ebx, esi
add dword [0x47d341], ebx
xor eax, eax
ror eax, 3
or eax, dword [0x47daf3]
je 0x423105
mov ebx, 0x1465
imul eax, ebx, 0x5b
add eax, 0xa56
mov edi, 0x568
sub eax, edi
mov esi, 0x1961
add eax, esi
cmp eax, 0x9bf
jne 0x42311a
mov edi, 0x1391
xor edi, eax
mov dword [0x47d3d7], eax
mov edi, 0xd71
add edi, 0x2f4
je 0x423133
mov esi, 0xbc
add edi, esi
mov eax, 0x95c
sub edi, eax
or edi, dword [0x47d90a]
je 0x423145
ror edi, 7
mov esi, 0x11f3
add edi, esi
push edi
pop dword [0x47d002]
sub dword [0x47db06], edi
leave
ret
add edi, 2
dec esi
mov edx, esi
rol edx, 8
push edx
pop dword [0x47da04]
mov dword [0x47da5c], edx
jmp 0xaecb4651
mov eax, edi
sub ebx, edx
mov ebx, 0xd54
mov edx, 0x175b
or ebx, edx
add ebx, 0x7e7
je 0x423eb6
ror ebx, 1
add ebx, 0xa23
or ebx, 0x1cb9
jne 0x423ece
mov edx, 0x162a
sub ebx, edx
ror ebx, 1
dec ebx
mov esi, 0x1822
add ebx, esi
mov ecx, ebx
sub dword [0x47d335], ecx
ret
add ebx, 1
push 0x3b
push 0x4f
push 0x28
push 0xb
push 0x3b
push 0x30
push 0x38
push 0x38
push 0x6d
push 0x10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov ebx, 0x24
mov edi, 0x95
add ebx, edi
mov eax, ebx
sub dword [0x47d1e2], eax
mov esi, 0xe6a
mov edi, 0x11dd
or esi, edi
cmp esi, 0x920
je 0x423f3a
add esi, 0xa49
mov dword [0x47d866], esi
push eax
call 0x423ede
sub edx, edi
add esi, edx
dec esi
inc edx
or esi, 0x51
sub edi, esi
add ebx, esi
add ebp, ebx
setbe dl
dec edx
dec esi
mov ebx, edi
inc ebx
add ebx, edx
dec edx
add edx, edi
mov ecx, esi
inc ecx
inc ebx
add edx, ecx
dec ecx
mov esi, edi
cdq
inc ecx
inc ecx
sub edx, eax
dec edx
not edx
inc ecx
add edx, ecx
push ebp
mov ebp, esp
sub esp, 0x30
mov edi, ebx
push edi
mov ebx, 0x713
add ebx, 0xe0d
or dword [ebp - 0x20], ebx
jne 0x423f96
mov ecx, 0x2501
sub ebx, ecx
sub dword [0x47d5ef], ebx
mov ebx, eax
sub ebx, 0x74d
or ebx, 0x1d38
jne 0x423fb9
mov ecx, 0x1531
add ebx, ecx
sub ebx, 0x422
ror ebx, 7
test dword [0x47d128], ebx
je 0x423fcd
sub ebx, dword [0x47d099]
shl ebx, 5
ror ebx, 1
push ebx
pop dword [0x47d52a]
mov dword [ebp - 0x20], ebx
push 0x47dbc3
pop esi
mov ecx, 0xb17
and ecx, 0xf
test dword [ebp - 4], ecx
jne 0x423ffd
mov ebx, 0x1027
imul ecx, ebx, 0x58
sub ecx, 0x19d
mov ebx, 0x25b9
imul ecx, ebx, 0x32
or dword [ebp - 0x18], ecx
jne 0x424014
rol ecx, 3
mov edx, 0x2444
or ecx, edx
sub ecx, 0x91
push ecx
pop dword [0x47d750]
sub dword [0x47d020], ecx
mov edx, 0
push edx
pop dword [0x47d9c1]
sub dword [0x47d2c9], edx
mov edx, 0x2b7
sub edx, dword [0x47d8e8]
mov ecx, edx
sub dword [0x47d995], ecx
mov ecx, 0xef7
rol ecx, 4
push ecx
sub ecx, dword [0x47d87a]
cmp ecx, 0xcb0
je 0x42406b
mov ebx, 0x12be
or ecx, ebx
inc ecx
pop dword [0x47d75f]
sub dword [0x47d3dc], ecx
push esi
xor ecx, ecx
ror ecx, 4
push ecx
pop dword [0x47daa4]
mov dword [ebp - 0x1c], ecx
xor edx, edx
mov ecx, 0x15e6
add edx, ecx
push edx
pop dword [0x47d77d]
add dword [0x47d6e0], edx
lea ecx, [edi + edx*8 + 0x198]
add ecx, 0x61f
test dword [ebp - 0xc], ecx
jne 0x4240b7
dec ecx
mov ebx, 0x228f
sub ecx, ebx
sub dword [0x47d775], ecx
mov eax, 0x7c93a785
mov edx, ebx
inc edx
or edx, dword [0x47d635]
je 0x4240db
mov ebx, 0xfb0
add edx, ebx
inc edx
and edx, 0xfffff
add edx, dword [0x47d025]
push edx
pop dword [0x47d486]
sub dword [0x47da4e], edx
lodsb al, byte [esi]
rol al, 1
mov edx, 0x1e
or ebx, 0x58
lea edx, [edi + 0x51]
add edx, esi
add ecx, ebx
mov ecx, 0xc3
add ecx, edi
xor ecx, dword [0x48e0f6]
mov ecx, esi
xor al, 0x28
xor edx, edx
lea ebx, [0xc]
lea edx, [ebx]
xchg ebx, edx
lea edx, [edi + 0xb]
add edx, edi
sub al, 0xc4
sub ecx, esi
mov dword [ebp - 0x24], eax
lea edx, [ebx + 0x20]
mov dword [ebp - 0x10], 0x2c
inc ebx
add ebx, 1
sub ecx, 2
cmp ebx, dword [0x47f9b3]
sub al, 0xb
add edx, esi
sub ecx, ebx
or ebx, 0x76
mov ebx, ecx
sub ecx, esi
add ebx, 1
or edx, 0x11
xor edx, dword [0x4b6837]
mov edx, ebx
ror al, 2
cmp bx, 0xe810
jge 0x424181
mov ecx, 0x76
mov ebx, 0xb9
mov ebx, 0xaa
add ebx, ecx
setns bl
inc edx
ror al, 1
mov cx, 0x4298
seta bl
add ecx, 1
lea ebx, [ebx + 0xf]
mov dword [ebp - 0x14], edi
rol al, 2
mov edx, 0x34
sub ebx, 1
add ebx, esi
mov dword [ebp - 0xc], edx
sub ecx, 2
lea ecx, [0]
rol al, 1
mov edx, ebx
mov ebx, 0xa9
mov dword [ebp - 0x20], 0x48
lea ecx, [edi + 4]
add ebx, esi
sub ecx, 2
or ecx, 0x6e
sub al, ah
sub ecx, 1
mov ecx, 0xa3
add ecx, edi
lea edx, [ecx + 0x61]
lea ebx, [ecx + 0x71]
add ecx, ebx
sub ebx, 1
or ecx, 5
dec ebx
add al, 0x4f
add ebx, 1
setne bl
dec edx
lea ebx, [9]
add ebx, 1
lea ebx, [0xcc]
xor ecx, ecx
or edx, 0x3a
add ecx, eax
rol ah, 1
mov ebx, edi
or ebx, dword [0x47d8ae]
je 0x424246
ror ebx, 1
sub ebx, 9
mov ecx, ebx
sub dword [0x47db37], ecx
mov edx, 0xc00
sub edx, 0x87
test dword [ebp - 0x1c], edx
je 0x42426c
ror edx, 1
sub edx, dword [0x47d07d]
sub dword [0x47d9fe], edx
stosb byte es:[edi], al
xor ecx, ecx
add ecx, dword [0x47d704]
mov ebx, ecx
add dword [0x47db3a], ebx
mov ecx, 0
add ecx, dword [0x47db12]
push ecx
mov edx, 0xcd1
or ecx, edx
test dword [0x47d299], ecx
jne 0x4242a1
rol ecx, 1
dec ecx
pop dword [0x47d772]
sub dword [0x47dabd], ecx
cmp esi, 0x47e5c8
jne 0x4240c2
mov edx, 0
or dword [ebp - 4], edx
je 0x4242d0
and edx, 0xff
mov ebx, 0x213b
xor ebx, edx
mov dword [ebp - 0x28], edx
mov ebx, 0xe33
inc ebx
sub ebx, 0x811
jne 0x4242eb
shr ebx, 8
mov ecx, 0x1300
add ebx, ecx
rol ebx, 3
or ebx, 0x1816
jne 0x4242f7
dec ebx
sub ebx, 0x816
sub ebx, 0x1a7
jne 0x42430c
mov ecx, 0x1323
xor ecx, ebx
add dword [0x47d49a], ebx
sub edi, 0xa05
mov ebx, 0
dec ebx
sub ebx, 0x19
je 0x424327
inc ebx
sub ebx, dword [0x47d7ad]
push ebx
pop dword [0x47da38]
mov dword [ebp - 0x2c], ebx
mov ecx, 0x8d
inc ecx
sub ecx, 0x5ec
jne 0x42434f
shl ecx, 2
mov ebx, 0x243c
or ecx, ebx
and ecx, 0xfffffff
or ecx, dword [0x47d0d2]
je 0x424360
ror ecx, 3
mov dword [0x47d2a4], ecx
pop esi
xor edx, edx
add edx, 0x99
je 0x42437e
mov ecx, 0x123d
sub edx, ecx
and edx, 0xfff
shr edx, 8
or edx, 0x1400
je 0x424398
ror edx, 1
mov ebx, 0x1caf
or edx, ebx
sub edx, 0x4d6
mov dword [ebp - 0x20], edx
pop edi
mov esp, ebp
pop ebp
xor ebx, eax
bswap ecx
ret 0xc
push ebp
mov ebp, esp
sub esp, 0x54
push edi
push esi
mov ebx, edi
sub ebx, dword [0x47dad6]
or ebx, 0x12f0
je 0x42485a
sub ebx, 0xf79
mov esi, 0x1631
or ebx, esi
rol ebx, 2
mov edi, 0x107d
sub ebx, edi
push ebx
mov esi, 0x18d5
imul ebx, esi, 0x47
mov eax, ebx
pop dword [0x47d60a]
mov dword [ebp - 0x20], eax
push 0
push 0
push 0x80000000
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyA]
lea ebx, [esi + ebx*2 + 0x24ad]
add ebx, 0x24d
je 0x42489b
shl ebx, 1
and ebx, 0xffffff
add dword [0x47d703], ebx
push 0x1755
push 0x2101
push 0
call fcn.00423181
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.DLL_CreateDCA]
push dword [0x47d33a]
push 0
push dword [0x47d42a]
lea eax, [0x47d526]
push eax
push 0
call fcn.00423c8c
or al, al
je 0x4248e6
lea ecx, [0x79]
xor esi, esi
mov edi, 0xd78
sub esi, edi
or dword [ebp - 0x14], esi
jne 0x424903
add esi, dword [0x47d9f3]
mov eax, 0xcd
add esi, eax
shl esi, 1
add dword [0x47d441], esi
push 0
push 0
push 0x80000002
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyA]
sub eax, 0xd37
or eax, 0x3c0
jne 0x42492d
shl eax, 1
add eax, dword [0x47d392]
mov dword [0x47d3d9], eax
push 0x47d559
push dword [0x47d35d]
sub edi, 2
sub eax, esi
dec esi
push dword [str.APY_]
call fcn.00423181
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.DLL_CreateDCA]
push 0
call fcn.0042321c
mov edi, 0xe6a
add edi, 0xcba
mov esi, edi
mov edi, 0x12af
add esi, edi
test dword [0x47db36], esi
je 0x424989
mov ebx, 0x1818
or esi, ebx
mov eax, 0x638
imul esi, eax, 9
or dword [ebp - 0x4c], esi
jne 0x424996
add dword [0x47d2ee], esi
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.DLL_CreateDCA]
lea ebx, [eax + eax*4 + 0x17d3]
sub ebx, 0x2ec
or ebx, 0x15b2
je 0x4249cc
add ebx, 0x26d
mov esi, 0x9fc
add ebx, esi
sub ebx, 0x764
add ebx, 0xb49
jne 0x4249dc
ror ebx, 1
mov esi, 0x1c1a
xor esi, ebx
or ebx, dword [0x47d36f]
jne 0x4249f1
sub ebx, 0x651
mov dword [ebp - 0x34], ebx
push dword [0x47d3f1]
lea eax, [0x47d096]
push eax
lea eax, [0x47d1c1]
push eax
call fcn.00423b02
lea ebx, [edi + edi + 0xd43]
sub ebx, dword [0x47d528]
mov edi, ebx
shl edi, 4
or dword [ebp - 0x30], edi
je 0x424a26
shr edi, 1
add dword [0x47d3ea], edi
call fcn.00423356
push 0
push 0
push 0x80000002
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyA]
xor edi, edi
ror edi, 1
or dword [ebp - 0x18], edi
jne 0x424a5c
sub edi, 0xb66
mov ebx, 0x264d
add edi, ebx
sub edi, 0xdb2
mov esi, 0x97f
or edi, esi
mov ebx, edi
mov edi, 0x2112
xor edi, ebx
or ebx, 0x14fc
jne 0x424a7e
mov esi, 0x1129
add ebx, esi
shr ebx, 2
add dword [0x47d130], ebx
push esi
push 0
lea eax, [0x47d461]
push eax
push 0
push dword [0x47db75]
push 0x47d17d
call fcn.00423c15
test al, al
je 0x424aac
dec ebx
lea eax, [ebx + 0xc]
dec edi
rol eax, 1
push eax
add eax, 0x284
jne 0x424abe
mov esi, 0x1b24
sub eax, esi
inc eax
sub eax, dword [0x47db28]
test dword [0x47d266], eax
je 0x424ae2
mov edi, 0x212a
imul eax, edi, 0x1b
mov esi, 0x1c3f
or eax, esi
mov ebx, 0x227
sub eax, ebx
pop dword [0x47d376]
add dword [0x47d40d], eax
push esi
push 0x47d6b2
push 0x47d8f0
call fcn.004232a4
push 0x766
pop eax
mov edi, 0x3ba
or eax, edi
test eax, 0x39e
jne 0x424b1e
and eax, 0xffffff
mov edi, 0x80b
xor edi, eax
sub eax, 0x167
push eax
pop dword [0x47d2fa]
mov dword [0x47d18d], eax
push 0xd066
call fcn.0042321c
lea edi, [ebp + 0xbd]
and edi, 0xffffff
test dword [ebp - 0x48], edi
jne 0x424b4c
inc edi
sub dword [0x47d956], edi
push dword [0x47d66a]
push edi
push dword [0x47db3f]
call fcn.00423686
or al, al
je 0x424b71
sub edi, eax
add ebx, 2
inc edi
push 0xe63
pop eax
mov edi, 0xbc8
xor edi, eax
push eax
inc eax
or dword [ebp - 0x54], eax
jne 0x424b8c
mov ebx, 0x1096
add eax, ebx
pop dword [0x47d5fd]
add dword [0x47d6e4], eax
call fcn.004238a1
mov esi, 0x244a
imul eax, esi, 0x41
push eax
mov edi, 0x24be
add eax, edi
mov esi, eax
sub esi, dword [0x47d5f1]
or esi, 0x19b2
jne 0x424bd1
mov ebx, 0x1906
xor ebx, esi
mov edi, 0x1566
sub esi, edi
sub esi, dword [0x47d809]
pop dword [0x47d26c]
mov dword [0x47db7d], esi
sub edi, 2
push 0x8024
push esi
push ebx
push dword [0x47dab9]
mov dword [ebp - 0xc], esi
sbb edi, ebx
push 0
call fcn.00423a4c
mov eax, 0
rol eax, 1
mov esi, eax
ror esi, 8
push esi
pop dword [0x47d63a]
add dword [0x47d2fe], esi
push dword [0x47d2f0]
push 0x47d1c2
push dword [0x47d6fb]
call fcn.004232a4
push 0xb2
pop ebx
sub ebx, 0xdde
or dword [ebp - 4], ebx
je 0x424c43
mov esi, 0x2672
add ebx, esi
mov dword [0x47d20a], ebx
push eax
call fcn.00423994
mov ebx, 0x85cb3
mov edx, 0x3f7a87
add ebx, edx
push ebx
xor eax, eax
push eax
call dword [sym.imp.ADVAPI32.DLL_RegDeleteKeyW]
or eax, eax
je 0x423e6b
push 0x47d48e
push 0xe821
push 0x696e
lea eax, [0x47d32d]
push eax
sub edi, 1
inc ebx
push 0x47d8be
call fcn.0042375a
mov dword [0x47d87a], eax
xor ebx, ebx
add ebx, dword [0x47d4f7]
push ebx
pop dword [0x47d249]
sub dword [0x47d08b], ebx
not ebx
add eax, edi
push 0x6768
push 0
call fcn.00423d7d
mov eax, 6
push eax
push 0
pop esi
push esi
mov dword [ebp - 0x24], 0
mov esi, dword [ebp - 0x24]
push esi
mov dword [ebp - 0x2c], 5
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.GDI32.DLL_EnumFontsW]
or eax, eax
jne 0x423e9c
lea edi, [0x2b]
add edi, ebx
inc ebx
dec ebx
push 0xf26e
push 0x3459
call fcn.00423d7d
mov edi, eax
ror edi, 8
mov esi, edi
add esi, 0x7a5
test dword [ebp - 0x44], esi
je 0x424d20
add esi, dword [0x47d695]
mov dword [0x47d705], esi
lea eax, [0x47d73b]
push eax
push dword [0x47d0f6]
lea ecx, [7]
inc esi
push 0x47d3d8
push esi
push dword [0x47d817]
call fcn.00423c8c
sub eax, 0x9af
or eax, dword [0x47db7c]
je 0x424d5f
sub eax, 0x5fd
mov dword [ebp - 0x10], eax
push 0x4df5
push ebx
lea esi, [0x4b]
dec eax
inc esi
or edi, dword [0x47ea4a]
inc eax
push 0xf825
lea eax, [0x47d4a1]
push eax
push 0x234d
call fcn.0042361b
or al, al
je 0x424d97
mov edi, 0x78
dec eax
lea eax, [esi + ebx + 0xa95]
mov ebx, 0x24a5
imul eax, ebx, 0x53
cmp eax, 0xb1e
jne 0x424dad
shl eax, 3
mov esi, eax
sub dword [0x47d578], esi
call fcn.004238a1
lea ebx, [eax + 0x98]
mov ecx, ebx
dec ecx
or dword [ebp - 0x4c], ecx
jne 0x424dd3
mov esi, 0x11e0
imul ecx, esi, 0x59
inc ecx
cmp ecx, 0xa81
jne 0x424de3
mov ebx, 0xfa2
sub ecx, ebx
add dword [0x47d2a3], ecx
push 0x47d827
push 0x47d816
push dword [0x47d48f]
mov ebx, 0x1ebe79
add ebx, 0x23856c
call ebx
or eax, eax
je 0x423e9e
mov ebx, eax
push 0x12
pop eax
push eax
push 0x8a
pop ecx
push ecx
mov dword [ebp - 0x1c], 0x14d
mov ecx, dword [ebp - 0x1c]
push ecx
mov esi, 3
push esi
call dword [sym.imp.user32.dll_DefDlgProcA]
mov dword [0x47d7da], eax
call fcn.00423356
mov dword [ebp - 0x2c], 0x40b079
mov eax, dword [ebp - 0x2c]
add eax, 0x72361
push eax
mov eax, 0x3479cb
add eax, 0x135aaf
push eax
mov eax, 0x64eca70e
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSaveKeyW]
push 0
push edi
push dword [0x47d69d]
push 0
or ax, bp
neg edi
mov edi, ebx
sub esi, edi
add eax, edi
push dword [0x47d844]
call fcn.00423a4c
test al, al
je 0x424e92
add esi, 1
inc eax
xor eax, eax
push eax
mov dword [0x47d6aa], 0
mov edi, dword [0x47d6aa]
push edi
xor edx, edx
push edx
call dword [sym.imp.KERNEL32.DLL_OpenMutexW]
or eax, eax
jne 0x423e65
mov dword [ebp - 0x48], 0x79
mov edi, dword [ebp - 0x48]
push edi
mov edx, 0xcd
mov edi, edx
push edi
mov dword [ebp - 0x48], 7
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.GDI32.DLL_OffsetRgn]
or eax, eax
jne 0x423e9e
lea eax, [esi + 0x86]
inc eax
test dword [ebp - 0x4c], eax
jne 0x424ef9
shl eax, 1
dec eax
mov edi, 0x25e4
xor edi, eax
sub eax, 0x6d2
cmp eax, 0x4e6
jne 0x424f10
inc eax
mov esi, 0x1fc8
add eax, esi
shr eax, 1
add dword [0x47d29c], eax
mov edi, 0x104
push edi
mov dword [ebp - 0x2c], 0x410ca2
mov edx, dword [ebp - 0x2c]
mov dword [0x47d785], 0x6c876
add edx, dword [0x47d785]
push edx
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryW]
or eax, eax
je 0x423ede
shr eax, 3
test dword [0x47d358], eax
jne 0x424f50
mov edi, 0x927
or eax, edi
add eax, 0xaa9
jne 0x424f6e
mov edi, 0x6b8
sub eax, edi
add eax, 0xd14
rol eax, 4
add dword [0x47d845], eax
mov dword [ebp - 4], 0x6c
mov esi, dword [ebp - 4]
push esi
mov eax, 0x10
push eax
mov dword [0x47d3a8], 0
mov edi, dword [0x47d3a8]
push edi
mov ecx, 0
push ecx
mov dword [ebp - 0x40], 5
mov ecx, dword [ebp - 0x40]
push ecx
call dword [sym.imp.GDI32.DLL_EnumFontFamiliesExW]
or eax, eax
jne 0x423e9e
push esi
push 0x47d5c4
push 0x47d8af
call fcn.00423181
mov edi, eax
mov esi, 0x562
xor esi, edi
test dword [ebp - 0x24], edi
je 0x424fd6
rol edi, 6
add dword [0x47d7c9], edi
call fcn.00423356
mov esi, 0x12b6
or eax, esi
or eax, 0x1c8d
je 0x424ff6
mov esi, 0x2397
sub eax, esi
sub eax, 0xb38
jne 0x42500b
shr eax, 1
sub eax, 0x4f7
add eax, 0x1b1
shr eax, 1
test eax, 0x1b65
jne 0x425014
mov dword [str.MYDA], eax
push 0x637e
push 0xcbc8
push 0x65f8
call fcn.004232a4
mov dword [ebp - 0x48], eax
push 0x47d4e0
lea eax, [0x47d1f3]
push eax
push 0x47d875
push dword [0x47d900]
test edi, ebx
jne 0x42504f
bswap edi
add esi, ebx
lea eax, [0x47d20b]
push eax
call fcn.00423a4c
dec eax
test dword [ebp - 0x18], eax
je 0x425068
mov edi, 0x1f1c
xor edi, eax
sub dword [0x47dab6], eax
lea eax, [0x47d724]
push eax
push esi
push eax
call fcn.00423b02
mov dword [ebp - 0x18], eax
mov eax, 0x36f64f
mov esi, eax
mov dword [0x47d4d9], 0x10dbb4
add esi, dword [0x47d4d9]
push esi
mov dword [ebp - 0x54], 0
mov edi, dword [ebp - 0x54]
push edi
call dword [sym.imp.KERNEL32.DLL_lstrcmpi]
mov dword [0x47d77f], eax
push dword [0x47dac0]
mov dword [ebp - 0x20], eax
sub eax, esi
push 0
push 0x47d830
mov eax, 0xe2f7563d
sub eax, 0xe2b516c7
call eax
push esi
push edi
call fcn.004238a1
mov dword [0x47d38f], eax
mov esi, eax
mov edi, esi
add dword [0x47d557], edi
sub esi, 1
inc esi
lea ebx, [0xf8]
cwde
push dword [0x47d9a7]
push dword [0x47d466]
push 0x47d576
call fcn.00423181
mov dword [0x47d84a], eax
push 0
lea eax, [0x47d153]
push eax
push 0xd6ef
add ebx, edi
add esi, edi
inc ebx
push 0x47d773
push 0x47d880
push 0
call fcn.00423c15
or al, al
jne 0x42513c
mov dword [ebp - 0x40], 0x55
add eax, ebx
push 0xdb1
pop eax
shr eax, 1
mov ebx, eax
cmp ebx, 0x751
jne 0x425151
rol ebx, 4
mov eax, 0xf40
xor eax, ebx
push ebx
pop dword [0x47d040]
sub dword [0x47d3f1], ebx
lea eax, [0x47d7ec]
push eax
push dword [0x47d5f5]
push 0x85ec
call fcn.00423686
mov ebx, edi
add ebx, 0x200
or ebx, dword [0x47d98d]
je 0x42518e
shr ebx, 1
sub dword [0x47d718], ebx
push 0x2d3d
push 0
push 0x47d905
call fcn.00423181
mov ebx, 0
shr ebx, 1
or ebx, 0x100e
jne 0x4251bb
mov edi, 0x230c
xor edi, ebx
rol ebx, 1
mov eax, ebx
add dword [0x47d227], eax
push dword [0x47db06]
push 0
push eax
call fcn.00423425
or al, al
jne 0x4251de
or edi, 0x3b
or esi, 0x6e
dec edi
ret