Function at 0x42d830
Capabilities:
Persist via run registry key

Disassembly:
sub esp, 0x848
mov eax, dword [0x4c4004]
xor eax, esp
mov dword [esp + 0x840], eax
push ebx
push esi
push edi
xor eax, eax
mov ebx, ecx
push 0x7fe
push eax
mov word [esp + 0x50], ax
lea eax, [esp + 0x52]
push eax
call fcn.0048e770
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
lea eax, [esp + 0x54]
add esp, 0xc
mov dword [esp + 0x20], eax
lea eax, [esp + 0xc]
mov dword [esp + 0x14], 2
mov dword [esp + 0x24], 0x400
push eax
push ebx
push 0x1073
push 0x2808
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
call esi
push 0xf000
push ebx
push 0x102c
push 0x2808
push dword [0x4def88]
call edi
push eax
call esi
mov esi, eax
mov edx, 0x4ad9d4
shr esi, 0xc
mov ecx, 0x4af760
dec esi
call fcn.004773a0
mov edi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42d90f
push 7
mov edx, esi
mov ecx, ebx
call fcn.0042dc70
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x840]
xor ecx, esp
call fcn.0048d815
add esp, 0x848
ret
mov edx, 0x4ad9e4
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42d92e
push 0x18
jmp 0x42d8e6
mov edx, 0x4ada04
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42d966
push 0xf013f
push 0x4af960
push 0x80000001
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4ada1c
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42d98d
push 0xf013f
push 0x4af9c0
jmp 0x42d953
mov edx, 0x4adbe8
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42d9c8
push 0xf013f
push 0x4af960
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4adbf8
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42da03
push 0xf013f
push 0x4af9c0
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4adc08
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42da3e
push 0xf013f
push 0x4afa28
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4adc18
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42da79
push 0xf013f
push 0x4afa90
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4adc30
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42dab4
push 0xf013f
push 0x4afb00
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4af880
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42daef
push 0xf023f
push 0x4afb78
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4ae48c
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42db2a
push 0xf023f
push 0x4afbf0
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4ae440
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42db65
push 0xf023f
push 0x4afc70
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4ae450
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42dba0
push 0xf023f
push 0x4afcf0
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4ae460
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42dbdb
push 0xf023f
push 0x4afd78
push 0x80000002
mov edx, esi
mov ecx, ebx
call fcn.0042de70
add esp, 0xc
jmp 0x42d8f2
mov edx, 0x4adc40
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42dc11
push 0x4afe0c
push 0x4afe04
mov edx, esi
mov ecx, ebx
call fcn.0042e0c0
add esp, 8
jmp 0x42d8f2
mov edx, 0x4adc48
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x4c]
push eax
call edi
test eax, eax
jne 0x42dc47
push 0x4afe24
push 0x4afe18
mov edx, esi
mov ecx, ebx
call fcn.0042e0c0
add esp, 8
jmp 0x42d8f2
mov ecx, dword [esp + 0x84c]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0048d815
add esp, 0x848
ret