Function at 0x428b26
Capabilities:
Delete registry key
Inspect load icon resource

Disassembly:
inc ebx
xor esi, esi
shl esi, 7
test dword [0x444161], esi
jne 0x428051
mov ebx, 0xd04
xor ebx, esi
rol esi, 1
or esi, 0x8dc
je 0x42806b
sub esi, 0x181
shr esi, 4
mov ebx, 0x5c9
add esi, ebx
mov dword [0x4441e5], esi
mov ch, 7
push ss
ja 0x4280e1
dec esp
ror dl, 0x20
sbb edi, ecx
cmp al, 0x2a
jne 0x4280b9
stosb byte es:[edi], al
push ebp
inc ecx
pop edi
adc dword [esi + ecx*2 - 0x55accf27], eax
fdiv st(7)
sub esi, 2
push 0x5e
push 0x79
push 0x5c
push 0x6c
push 0x56
push 0x69
push 0x3a
push 0x53
push 0x11
push 0x33
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov esi, 0
inc esi
or esi, 0x20a0
jne 0x4280d4
shl esi, 8
mov ebx, 0x1380
sub esi, ebx
inc esi
mov ebx, 0x2640
or esi, ebx
mov edx, esi
sub dword [0x44415a], edx
sub eax, 0x4a
jmp 0x42808d
inc esp
add byte [ebx - 0x5d16b518], al
invalid
add eax, edi
inc edi
lea ebx, [ebx + 0x9b]
sub ebx, dword [0x4441e1]
sub ebx, 0xa75
je 0x428112
mov esi, 0x8ad
imul ebx, esi, 0x54
sub ebx, 0x1d2
add ebx, 0x8b0
push ebx
pop dword [0x444279]
add dword [0x444164], ebx
push eax
call fcn.004280eb
lea edx, [4]
cmp edi, dword [0x45a129]
inc ebx
mov ebx, 0
inc ebx
push ebx
pop dword [0x44412a]
add dword [0x444208], ebx
sub eax, 0x4e
call 0x42812b
dec edi
inc edi
or ebp, 0x22
sbb ebx, ebx
mov esi, 0xf2
sub ebx, edi
mov eax, esi
dec ebp
add edx, esi
dec edx
mov esi, edi
dec esi
cdq
add esi, edi
push ebp
mov ebp, esp
sub esp, 0x3c
push eax
mov eax, edi
mov esi, 0x12ef
imul eax, esi, 0x33
or eax, 0xc39
je 0x42818d
mov esi, 0x1d31
sub eax, esi
dec eax
ror eax, 1
push eax
dec eax
mov edx, eax
pop dword [0x44426d]
mov dword [0x4442c6], edx
mov eax, 0xbf0
add eax, dword [0x44407f]
test eax, 0x7b9
je 0x4281b4
rol eax, 7
mov dword [0x444102], eax
cmp eax, 0x326
pop eax
setne al
mov esp, ebp
pop ebp
ret 0xc
push 0xe8591713
pop eax
xor ebp, ebp
push ebp
mov dword [0x444215], 0
mov edi, dword [0x444215]
push edi
call dword [sym.imp.USER32.DLL_LoadCursorA]
mov dword [0x44429e], eax
mov eax, 0xa0f370ea
xor edi, edi
push edi
xor edi, edi
push edi
call dword [sym.imp.USER32.DLL_LoadCursorA]
mov dword [0x44423a], eax
push 0x136b4e2
pop eax
lea ebp, [eax + 0xa8]
mov eax, ebp
mov edi, 0x1888
or eax, edi
test dword [0x444054], eax
jne 0x428b8d
rol eax, 6
sub eax, 0x793
add eax, 0xd87
sub dword [0x444336], eax
xor ebp, ebp
mov ebx, 0x97f
or ebp, ebx
or ebp, dword [0x4440f0]
je 0x428baa
add ebp, 0xe68
sub dword [0x444303], ebp
mov edi, 0x24
sub edi, 0xa09a6ae9
jne 0x429735
mov dword [0x44428c], eax
mov eax, 0xf88
ror eax, 1
test eax, 0xb7f
jne 0x428be3
mov ebx, 0x284
sub eax, ebx
mov esi, 0x1ee8
imul eax, esi, 0x2f
mov ebx, 0x2246
or eax, ebx
cmp eax, 0xef3
jne 0x428bfa
mov esi, 0xffd
xor esi, eax
rol eax, 1
dec eax
test dword [0x4441cb], eax
je 0x428c0d
and eax, 0xff
and eax, 0xffff
sub dword [0x4441c8], eax
lea ebp, [eax + 0xa8]
shr ebp, 3
mov edi, ebp
mov eax, 0x25b6
or edi, eax
push edi
pop dword [0x44400a]
add dword [0x444343], edi
leave
ret
push ebp
mov ebp, esp
sub esp, 0xc
push edi
push esi
lea eax, [0x4441db]
push eax
call fcn.004287fd
sub eax, dword [0x4441fc]
or eax, dword [0x444269]
je 0x42975d
add eax, 0x120
add eax, dword [0x444226]
mov esi, eax
dec esi
push esi
pop dword [0x4441e5]
sub dword [0x444199], esi
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.DLL_CreateDCW]
push 0
call fcn.004287fd
mov dword [0x44401d], eax
mov edi, eax
shl edi, 7
test dword [0x44431c], edi
je 0x4297a3
inc edi
dec edi
mov esi, 0xdd7
or edi, esi
mov ebx, 0x1c3
xor ebx, edi
or edi, 0x16f
je 0x4297c5
add edi, 0x98e
sub edi, 0xc5e
mov eax, 0xb2b
add edi, eax
sub dword [0x4441f2], edi
push 0x6fa
pop esi
add esi, 0xafb
mov ecx, esi
mov dword [ebp - 0xc], ecx
push 0
push 0
lea eax, [0x4441e4]
push eax
push 0x67a9
call fcn.00428468
test al, al
je 0x4297fe
inc edi
lea edx, [0x26]
add ebx, esi
mov esi, 0xbb1
push esi
pop dword [0x44425f]
sub dword [0x444240], esi
push 0
push 0
push 0x80000001
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyA]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.DLL_CreateDCW]
mov esi, ebx
shl esi, 1
add esi, 0x983
jne 0x429847
add esi, 0x272
mov ebx, 0x2d4
imul esi, ebx, 0x47
push esi
or esi, 0x132a
jne 0x429864
mov edi, 0x117e
or esi, edi
add esi, dword [0x44402d]
mov eax, 0x3c6
or esi, eax
pop dword [0x444226]
sub dword [0x444259], esi
push eax
add eax, 1
or ebx, edi
lea eax, [0x44402d]
push eax
push 0
lea eax, [0x444139]
push eax
push dword [0x4440f7]
push dword [0x4440bc]
call fcn.00428683
test al, al
je 0x4298a5
add ebx, 2
dec edi
push 0xfb3
pop esi
add esi, dword [0x4442b3]
or esi, dword [0x4440f6]
je 0x4298c9
mov ebx, 0x3e5
or esi, ebx
add esi, dword [0x44425a]
shr esi, 8
sub esi, dword [0x4441e4]
push esi
pop dword [0x4440f6]
add dword [0x444098], esi
push 0
push 0
push 0x80000003
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyA]
push 0
push 0
push 0x80000002
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyA]
push dword [0x44416d]
push eax
call fcn.00428a94
or al, al
jne 0x429912
add eax, edi
add ebx, 1
push 0x44425d
call fcn.004283a6
call fcn.004282bb
mov dword [0x44408d], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.DLL_CreateDCW]
mov eax, 0
dec eax
sub eax, 0x22c
jne 0x42994c
rol eax, 8
mov esi, 0x18b7
imul eax, esi, 0x5a
add eax, 0xc4f
mov esi, eax
mov dword [0x4442cc], esi
mov esi, edi
mov edi, 0x1072
imul esi, edi, 0x41
mov ebx, esi
add dword [0x4442c9], ebx
push 0
push 0
push 0x80000003
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyA]
mov edi, 0x213e
or eax, edi
or eax, 0x108d
je 0x429995
inc eax
shl eax, 4
mov edi, 0x1909
imul eax, edi, 0x62
ror eax, 1
test eax, 0xc0a
je 0x4299b2
sub eax, 0x3df
mov edi, 0x3cc
add eax, edi
mov esi, 0x172a
xor esi, eax
add dword [0x444211], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.DLL_CreateDCW]
lea eax, [eax + eax + 0x14e4]
rol eax, 2
push eax
cmp eax, 0x3af
jne 0x4299e0
ror eax, 5
and eax, 0xffffff
mov esi, 0x15d5
or eax, esi
or dword [ebp - 0xc], eax
jne 0x4299ec
pop dword [str.Ef_E]
add dword [0x444322], eax
mov eax, 0x3d2cca
mov ebx, eax
mov dword [ebp - 0xc], 0x71443
add ebx, dword [ebp - 0xc]
push ebx
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
or eax, eax
jne 0x42803c
push 0x8dc4
call fcn.004283a6
push 0xd3c
pop eax
mov ebx, 0xf0a
imul eax, ebx, 0x50
push eax
sub eax, 0x398
je 0x429a3e
add eax, 0xdff
sub eax, 0xd6c
mov ecx, eax
pop dword [0x4440a9]
add dword [0x44430a], ecx
lea eax, [0x444146]
push eax
push 0x4441a7
push 0
push str._2TVp
push dword [str.BR_T]
push ebx
call fcn.004288ee
mov edi, 0xcec13
mov edx, edi
mov eax, 0x3754a0
add edx, eax
push edx
push 0x3e0754
pop ebx
mov dword [0x4442c5], 0x6393e
add ebx, dword [0x4442c5]
push ebx
mov dword [ebp - 8], 0xd00f9
mov edx, dword [ebp - 8]
mov eax, 0x373f43
add edx, eax
push edx
mov dword [ebp - 4], 0
mov esi, dword [ebp - 4]
push esi
call dword [sym.imp.ADVAPI32.DLL_RegReplaceKeyA]
or eax, eax
je 0x4280ed
push 0xce24
push 0x444299
mov edi, ebx
or bl, dh
push 0
push ebx
push 0x5b9f
push 0x26a2
call fcn.00428683
xor ebx, ebx
add ebx, dword [0x44410d]
test dword [ebp - 8], ebx
je 0x429af1
shr ebx, 1
mov esi, 0x2444
or ebx, esi
mov eax, ebx
mov edi, 0x2ee
add eax, edi
test eax, 0x13e7
je 0x429b11
inc eax
mov ebx, 0x2597
imul eax, ebx, 0x4b
add dword [0x444008], eax
push 0x3b
push 0
call dword [sym.imp.USER32.DLL_LoadIconA]
xor edi, edi
dec edi
mov edx, edi
test dword [0x444017], edx
jne 0x429b31
rol edx, 2
dec edx
push edx
pop dword [0x44401f]
mov dword [ebp - 8], edx
push 0
push eax
call dword [sym.imp.USER32.DLL_GetIconInfo]
mov esi, eax
inc esi
push esi
dec esi
mov edi, esi
pop dword [0x444241]
mov dword [ebp - 8], edi
lea esi, [ebx + esi + 0x683]
add esi, 0x688
push esi
mov ebx, 0x1e2b
xor ebx, esi
sub esi, 0x9b9
jne 0x429b81
mov ebx, 0x14a1
sub esi, ebx
mov ebx, 0x2e5
imul esi, ebx, 0x10
pop dword [0x4442b6]
sub dword [0x444130], esi
sub eax, 0x10eb604
xor ebx, ebx
ror ebx, 6
or ebx, 0x12d8
je 0x429bad
add ebx, 0xa4f
sub ebx, dword [0x444199]
shr ebx, 1
sub ebx, 0x3a3
cmp ebx, 0xe79
je 0x429bbc
inc ebx
sub dword [0x444188], ebx
sub eax, 0xfeaead91
mov dword [0x444100], eax
push 0x1d87a9
pop ecx
mov esi, 0x26b924
add ecx, esi
push ecx
xor edx, edx
push edx
call dword [sym.imp.ADVAPI32.DLL_RegDeleteKeyW]
lea ebx, [esi + eax*8 + 0x19a0]
shl ebx, 1
mov ecx, ebx
ror ecx, 1
push ecx
pop dword [0x444231]
mov dword [0x4441c8], ecx
mov edx, dword [0x444100]
push edx
mov edi, 3
mov ebx, edi
push ebx
call dword [sym.imp.GDI32.DLL_BeginPath]
or eax, eax
jne 0x4280ef
mov dword [ebp - 0xc], 0
mov edi, dword [ebp - 0xc]
push edi
mov eax, 0x8c
mov ebx, eax
push ebx
mov dword [ebp - 8], 0xc3
mov ecx, dword [ebp - 8]
push ecx
push 1
pop eax
push eax
call dword [sym.imp.GDI32.DLL_SetWindowOrgEx]
or eax, eax
jne 0x42808d
ret