Function at 0x427368
Capabilities:
Delete registry value
Persist via run registry key

Disassembly:
push 0x5e8
mov eax, 0x4a132b
call fcn.00453742
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push 1
lea eax, [ebp - 0x5d9]
push eax
xor ebx, ebx
push esi
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x5f4], ebx
call fcn.004115c6
mov dword [ebp - 4], ebx
movzx eax, word [esi]
add eax, 0xffffffbf
cmp eax, 0x39
ja case.0x4273b3.71
movzx eax, byte [eax + 0x42817c]
jmp dword [eax*4 + 0x428120]
push 0x4b3af4
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4273f1
mov eax, dword [edi + 0x260]
push ebx
push ebx
push 0x4b4848
mov ecx, edi
mov byte [eax + 2], 1
call fcn.00442b58
mov eax, dword [edi + 0x260]
mov byte [eax + 2], 1
jmp 0x427581
cmp dword [edi + 0xc], 0
jne case.0x4273b3.71
mov ecx, edi
call fcn.00445ea9
test eax, eax
je 0x427445
push 1
lea eax, [ebp - 0x5d9]
push eax
push str._This_setup_was_created_with_an_EVALUATION_VERSION_of__s__which_does_not_support_extraction_of_the_internal_MSI_file._The_full_version_of_InstallShield_supports_this_functionality.
lea ecx, [ebp - 0x5a8]
call fcn.004115c6
mov byte [ebp - 4], 2
push eax
push 0x86d
push edi
call fcn.00428acc
add esp, 0xc
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x5a8]
call fcn.00401b80
jmp 0x428107
fldz
lea eax, [ebp - 0x5f0]
push eax
fstp qword [ebp - 0x5f0]
mov ecx, edi
call fcn.00445eb4
test eax, eax
je 0x42747d
fld qword [ebp - 0x5f0]
push ecx
push ecx
fstp qword [esp]
push 0x86f
push edi
call fcn.00428b13
add esp, 0x10
jmp 0x428107
push ebx
push ebx
push 0x4b49c4
mov ecx, edi
mov dword [edi + 0xc], 1
call fcn.00442b58
push esi
call dword [sym.imp.USER32.dll_CharNextW]
push 1
lea ecx, [ebp - 0x5d9]
push ecx
push eax
lea ecx, [ebp - 0x3c8]
call fcn.004115c6
mov byte [ebp - 4], 6
push ebx
lea eax, [ebp - 0x3c8]
push eax
push 0xe
mov ecx, edi
call fcn.0041c39c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x3c8]
call fcn.00401b80
jmp 0x427581
push esi
call dword [sym.imp.USER32.dll_CharNextW]
push 1
lea ecx, [ebp - 0x5d9]
push ecx
push eax
lea ecx, [ebp - 0x428]
call fcn.004115c6
mov byte [ebp - 4], 8
push ebx
lea eax, [ebp - 0x428]
push eax
push 0xc
mov ecx, edi
call fcn.0041c39c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x428]
jmp 0x4274cc
push 1
mov ecx, edi
call fcn.00447439
mov dword [edi + 0x3c], 1
jmp 0x427581
push 1
lea eax, [ebp - 0x5d9]
push eax
push str.debuglog
lea ecx, [ebp - 0x278]
call fcn.004115c6
mov byte [ebp - 4], 0xa
push dword [ebp - 0x264]
cmp dword [ebp - 0x260], 8
lea eax, [ebp - 0x274]
cmovae eax, dword [ebp - 0x274]
push ebx
push eax
lea ecx, [ebp - 0x244]
call fcn.00415c3a
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x278]
call fcn.00401b80
inc bl
je 0x427589
xor ebx, ebx
inc ebx
jmp 0x428107
push 1
push esi
call dword [sym.imp.USER32.dll_CharNextW]
push eax
push 0x4b49e0
jmp 0x4280f4
push 1
lea eax, [ebp - 0x5d9]
push eax
push str.embed
lea ecx, [ebp - 0x2d8]
call fcn.004115c6
mov byte [ebp - 4], 0xd
xor eax, eax
inc eax
mov dword [ebp - 0x5f4], eax
push dword [ebp - 0x2c4]
cmp dword [ebp - 0x2c0], 8
lea eax, [ebp - 0x2d4]
cmovae eax, dword [ebp - 0x2d4]
push ebx
push eax
lea ecx, [ebp - 0x244]
call fcn.00415c3a
test eax, eax
jne 0x427634
push 1
lea eax, [ebp - 0x5d9]
push eax
push 0x4b49f8
lea ecx, [ebp - 0x548]
call fcn.004115c6
mov dword [ebp - 4], 0xe
push 3
pop eax
mov dword [ebp - 0x5f4], eax
lea eax, [ebp - 0x548]
push eax
lea ecx, [ebp - 0x248]
call fcn.00429739
mov byte [ebp - 0x5d9], 1
test al, al
jne 0x42763a
mov byte [ebp - 0x5d9], bl
push 0xd
pop ecx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x5f4]
test al, 2
je 0x427667
and eax, 0xfffffffd
mov dword [ebp - 0x5f4], eax
mov dword [ebp - 4], ecx
lea ecx, [ebp - 0x548]
call fcn.00401b80
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 4], ebx
test al, 1
je 0x427685
and eax, 0xfffffffe
mov dword [ebp - 0x5f4], eax
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x2d8]
call fcn.00401b80
cmp byte [ebp - 0x5d9], 0
je 0x4276c1
push 0xffffffffffffffff
push 5
lea eax, [ebp - 0x5d8]
push eax
lea ecx, [ebp - 0x248]
call fcn.00417273
mov byte [ebp - 4], 0x11
push ebx
push eax
push 0x10
mov ecx, edi
call fcn.0041c39c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x5d8]
jmp 0x4274cc
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
push 0x4b49fc
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x4276ec
push esi
mov esi, 0x4ef000
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4277a1
mov dword [ebp - 0x5e8], ebx
mov dword [ebp - 0x5e4], ebx
mov dword [ebp - 0x5e0], ebx
mov byte [ebp - 4], 0x13
push 0x2001f
push str.SoftwareMicrosoftWindowsCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x5e8]
call fcn.004018f0
test eax, eax
jne 0x428075
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.004526c0
add esp, 0xc
lea eax, [ebp - 0x5ec]
push eax
lea eax, [ebp - 0x218]
push eax
push esi
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 0x5ec], 0x104
call fcn.004019e0
lea eax, [ebp - 0x218]
push eax
push 0x4ef000
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push esi
push dword [ebp - 0x5e8]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea ecx, [ebp - 0x5e8]
call fcn.004018c0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x5e8]
call fcn.004018c0
mov esi, 0x4ef000
push esi
call fcn.00450b43
mov dword [edi + 0x3c], 1
cmp dword [0x4eeef0], 8
mov eax, 0x4eeedc
cmovae eax, dword [0x4eeedc]
push eax
push esi
push 0x4ee640
call fcn.0044f76c
push 1
lea eax, [ebp - 0x5d9]
push eax
push 0x4c8c5c
lea ecx, [ebp - 0x4e8]
call fcn.00402ca0
mov byte [ebp - 4], 0x15
push 1
lea eax, [ebp - 0x5d9]
push eax
push dword [0x4b3954]
lea ecx, [ebp - 0x488]
call fcn.00402ca0
mov byte [ebp - 4], 0x16
push 1
lea eax, [ebp - 0x5d9]
push eax
push dword [0x4b3950]
lea ecx, [ebp - 0x338]
call fcn.00402ca0
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x4e8]
push eax
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x338]
push eax
push 5
mov ecx, edi
call fcn.0041c3ef
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x338]
call fcn.00401ac0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x488]
call fcn.00401ac0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4e8]
call fcn.00401ac0
push 2
mov ecx, edi
call fcn.00446fec
jmp 0x427581
push esi
call dword [sym.imp.USER32.dll_CharNextW]
movzx eax, word [eax]
sub eax, 0x31
je 0x4278e0
dec eax
je 0x4278c8
dec eax
je 0x4278a8
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_CharNextW]
call esi
push eax
push 0x4b4a6c
jmp 0x4280f4
push esi
mov esi, dword [sym.imp.USER32.dll_CharNextW]
mov byte [edi + 0x25c], 1
call esi
push eax
call esi
push eax
mov ecx, edi
call fcn.004472ef
jmp 0x427581
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_CharNextW]
call esi
push eax
call esi
push eax
push 0x4b4a64
jmp 0x4280f4
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_CharNextW]
call esi
push eax
call esi
push eax
push 0x4b47bc
mov ecx, edi
call fcn.00442b58
mov dword [edi + 0x40], 1
jmp 0x427581
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push str.hide_progress
push esi
call ebx
test eax, eax
jne 0x42791f
mov byte [edi + 0x256], 1
push str.hide_splash
push esi
call ebx
test eax, eax
jne 0x427581
mov byte [edi + 0x257], 1
jmp 0x427581
push 1
lea eax, [ebp - 0x5d9]
push eax
push str.instance
lea ecx, [ebp - 0x2a8]
call fcn.004115c6
mov byte [ebp - 4], 0x1b
push dword [ebp - 0x294]
cmp dword [ebp - 0x290], 8
lea eax, [ebp - 0x2a4]
cmovae eax, dword [ebp - 0x2a4]
push ebx
push eax
lea ecx, [ebp - 0x244]
call fcn.00415c3a
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a8]
call fcn.00401b80
inc bl
je 0x427581
push 0xfffffffffffffffd
pop esi
push 0xffffffffffffffff
push 9
lea eax, [ebp - 0x308]
add edi, 0x258
push eax
lea ecx, [ebp - 0x248]
mov dword [edi], esi
call fcn.00417273
mov byte [ebp - 4], 0x1d
push str.default
lea ecx, [ebp - 0x304]
call fcn.0041cf01
test eax, eax
jne 0x4279da
or dword [edi], 0xffffffff
jmp 0x4279ee
push 0xa
push edi
lea ecx, [ebp - 0x308]
call fcn.00429876
test al, al
jne 0x4279ee
mov dword [edi], esi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x308]
jmp 0x4274cc
cmp dword [edi + 0xc], 0
jne case.0x4273b3.71
push esi
mov dword [edi + 0xc], 3
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
push 1
lea eax, [ebp - 0x5d9]
push eax
push esi
lea ecx, [ebp - 0x368]
call fcn.004115c6
mov byte [ebp - 4], 0x20
push ebx
lea eax, [ebp - 0x368]
push eax
push 8
mov ecx, edi
call fcn.0041c39c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x368]
call fcn.00401b80
push ebx
push esi
push 0x4b4a98
jmp 0x4280f4
push edi
lea eax, [ebp - 0x5ec]
push eax
push esi
mov dword [ebp - 0x5ec], ebx
call dword [sym.imp.USER32.dll_CharNextW]
push eax
call fcn.004281b6
add esp, 0xc
test eax, eax
je case.0x4273b3.71
mov ecx, dword [edi + 0x260]
mov ax, word [ebp - 0x5ec]
mov word [ecx + 0x46], ax
jmp 0x427581
push esi
mov esi, dword [sym.imp.USER32.dll_CharNextW]
call esi
movzx ecx, word [eax]
push ebx
push eax
sub ecx, 0x31
je 0x427ac4
dec ecx
je 0x427ab7
push 0x4b4ab0
jmp 0x4280f4
call esi
push eax
push 0x4b4aa8
jmp 0x4280f4
call esi
push eax
push 0x4b4aa0
jmp 0x4280f4
push str.noscript_uninst
push esi
call fcn.00455245
pop ecx
pop ecx
test eax, eax
jne 0x427aee
push ebx
push ebx
push str._noscript_uninst
jmp 0x4280f4
push esi
call dword [sym.imp.USER32.dll_CharNextW]
push 1
lea ecx, [ebp - 0x5d9]
push ecx
push eax
lea ecx, [ebp - 0x398]
call fcn.004115c6
mov byte [ebp - 4], 0x23
push ebx
lea eax, [ebp - 0x398]
push eax
push 5
mov ecx, edi
call fcn.0041c39c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x398]
call fcn.00401b80
push 2
mov ecx, edi
call fcn.00446fec
jmp 0x42751b
push esi
call dword [sym.imp.USER32.dll_CharNextW]
push eax
push 0x4ed8a8
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x427581
mov byte [edi + 0x25d], 1
jmp 0x427581
push str.removeonly
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x427b7b
push ebx
push ebx
push str._removeonly
jmp 0x4280f4
push str.runas
push esi
call fcn.00455245
pop ecx
pop ecx
test eax, eax
je 0x427581
push str.runfromtemp
push esi
call fcn.00455245
pop ecx
pop ecx
test eax, eax
je 0x427581
push 6
push str.reboot
push esi
call fcn.0045477c
add esp, 0xc
test eax, eax
je 0x427581
push str.removeasmajorupgrade
push esi
call fcn.00455245
pop ecx
pop ecx
test eax, eax
je 0x427581
push ebx
push ebx
push 0x4b4b64
jmp 0x4280f4
push 0x4b4b6c
push esi
call fcn.00455245
pop ecx
pop ecx
test eax, eax
jne 0x427bfb
push ebx
push ebx
push str._SMS
jmp 0x4280f4
push str.show_eval_msg
push esi
call fcn.00455245
pop ecx
pop ecx
test eax, eax
jne 0x427c1b
mov eax, dword [edi + 0x260]
mov byte [eax + 0x17], 1
jmp 0x427581
push str.show_beta_msg
push esi
call fcn.00455245
pop ecx
pop ecx
test eax, eax
jne 0x427c3b
mov eax, dword [edi + 0x260]
mov byte [eax + 0x18], 1
jmp 0x427581
push str.show_reboot_msg
push esi
call fcn.00455245
pop ecx
test eax, eax
mov eax, dword [edi + 0x260]
pop ecx
jne 0x427c5b
mov byte [eax + 0x1c], 1
jmp 0x427581
push ebx
push ebx
push 0x4b4ba0
mov ecx, edi
mov byte [eax + 1], 1
call fcn.00442b58
mov eax, dword [edi + 0x260]
mov byte [eax + 1], 1
jmp 0x427581
push str.tempdisk1folder
call fcn.00453664
pop ecx
push eax
push ebx
push str.tempdisk1folder
lea ecx, [ebp - 0x244]
call fcn.00415c3a
test eax, eax
je 0x427581
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
push str._IS_T_
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x427cc7
push esi
mov ecx, edi
call fcn.004473a1
jmp 0x427d7f
mov dword [ebp - 0x5e8], ebx
mov dword [ebp - 0x5e4], ebx
mov dword [ebp - 0x5e0], ebx
mov byte [ebp - 4], 0x25
push 0x2001f
push str.SoftwareMicrosoftWindowsCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x5e8]
call fcn.004018f0
test eax, eax
jne 0x428075
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.004526c0
add esp, 0xc
lea eax, [ebp - 0x5ec]
push eax
lea eax, [ebp - 0x218]
push eax
push esi
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 0x5ec], 0x104
call fcn.004019e0
lea eax, [ebp - 0x218]
push eax
call fcn.00450b43
lea eax, [ebp - 0x218]
push eax
mov ecx, edi
call fcn.004473a1
push esi
push dword [ebp - 0x5e8]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea ecx, [ebp - 0x5e8]
call fcn.004018c0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x5e8]
call fcn.004018c0
push 3
jmp 0x427b2f
push esi
call dword [sym.imp.USER32.dll_CharNextW]
movzx eax, word [eax]
cmp eax, 0x41
je 0x427e5f
cmp eax, 0x4d
je 0x427e1b
cmp eax, 0x57
je 0x427dd7
cmp eax, 0x61
je 0x427e5f
cmp eax, 0x6d
je 0x427e1b
cmp eax, 0x77
je 0x427dd7
push str.uninst
push esi
call fcn.00455245
pop ecx
pop ecx
test eax, eax
jne 0x427581
push ebx
push ebx
push str._uninst
jmp 0x4280f4
push esi
mov esi, dword [sym.imp.USER32.dll_CharNextW]
call esi
push eax
call esi
push 1
lea ecx, [ebp - 0x5d9]
push ecx
push eax
lea ecx, [ebp - 0x3f8]
call fcn.004115c6
mov byte [ebp - 4], 0x29
push ebx
lea eax, [ebp - 0x3f8]
push eax
push 0xa
mov ecx, edi
call fcn.0041c39c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x3f8]
jmp 0x4274cc
push esi
mov esi, dword [sym.imp.USER32.dll_CharNextW]
call esi
push eax
call esi
push 1
lea ecx, [ebp - 0x5d9]
push ecx
push eax
lea ecx, [ebp - 0x458]
call fcn.004115c6
mov byte [ebp - 4], 0x2b
push ebx
lea eax, [ebp - 0x458]
push eax
push 0xb
mov ecx, edi
call fcn.0041c39c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x458]
jmp 0x4274cc
push esi
mov esi, dword [sym.imp.USER32.dll_CharNextW]
call esi
push eax
call esi
push 1
lea ecx, [ebp - 0x5d9]
push ecx
push eax
lea ecx, [ebp - 0x4b8]
call fcn.004115c6
mov byte [ebp - 4], 0x27
push ebx
lea eax, [ebp - 0x4b8]
push eax
push 9
mov ecx, edi
call fcn.0041c39c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4b8]
jmp 0x4274cc
mov dword [ebp - 0x5e8], ebx
mov dword [ebp - 0x5e4], ebx
mov dword [ebp - 0x5e0], ebx
mov byte [ebp - 4], 0x2d
push 0x2001f
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x5e8]
call fcn.004018f0
test eax, eax
jne 0x427ef3
push str.ISSetup
push dword [ebp - 0x5e8]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea ecx, [ebp - 0x5e8]
call fcn.004018c0
push 7
push str.verbose
push esi
call fcn.0045477c
add esp, 0xc
test eax, eax
je 0x42808c
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
push str._IS_V_
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x427fac
lea eax, [ebp - 0x5ec]
push eax
lea ecx, [edi + 4]
mov dword [ebp - 0x5ec], 7
call fcn.0041904e
mov dword [ebp - 0x5ec], eax
cmp dword [eax + 0x14], ebx
je 0x427f6b
push 0x4b3a78
call fcn.00453664
pop ecx
mov ecx, dword [ebp - 0x5ec]
push eax
push 0x4b3a78
add ecx, 4
call fcn.00421029
push 1
lea eax, [ebp - 0x5d9]
push eax
push esi
lea ecx, [ebp - 0x578]
call fcn.004115c6
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x5ec]
push eax
call fcn.004193b2
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x578]
call fcn.00401b80
push 1
push esi
push 0x4b40a4
jmp 0x428097
push 0x2001f
push str.SoftwareMicrosoftWindowsCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x5e8]
call fcn.004018f0
test eax, eax
jne 0x428075
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.004526c0
add esp, 0xc
lea eax, [ebp - 0x5ec]
push eax
lea eax, [ebp - 0x218]
push eax
push esi
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 0x5ec], 0x104
call fcn.004019e0
push esi
push dword [ebp - 0x5e8]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea ecx, [ebp - 0x5e8]
call fcn.004018c0
push 1
lea eax, [ebp - 0x5d9]
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x518]
call fcn.004115c6
mov byte [ebp - 4], 0x30
push ebx
lea eax, [ebp - 0x518]
push eax
push 7
mov ecx, edi
call fcn.0041c39c
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x518]
call fcn.00401b80
lea esi, [ebp - 0x218]
push 1
mov eax, esi
push eax
jmp 0x427fa2
push edi
call fcn.00428728
pop ecx
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x5e8]
call fcn.004018c0
jmp 0x428107
push 1
add esi, 0xe
push esi
push str._verbose
mov ecx, edi
call fcn.00442b58
test esi, esi
je 0x4280b5
push esi
push 0x4eb8a8
mov byte [0x4eb88c], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x5e8]
call fcn.004018c0
jmp 0x427581
mov dword [edi + 0x34], 1
jmp 0x427581
cmp dword [edi + 0xc], 0
jne case.0x4273b3.71
mov dword [edi + 0xc], 4
jmp 0x427581
push ebx
push esi
call dword [sym.imp.USER32.dll_CharNextW]
push eax
push 0x4b4c98
mov ecx, edi
call fcn.00442b58
jmp 0x427581
push edi
call fcn.00428728
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x248]
call fcn.00401b80
mov eax, ebx
call fcn.004536f1
ret