Function at 0x422710
Capabilities:
Get common file path
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x562cc6
mov eax, dword fs:[0]
push eax
sub esp, 0x504
mov eax, dword [0x5d26e8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x4a4], edi
call fcn.00426f90
xor esi, esi
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x48a]
call fcn.004fd3d0
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
push esi
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, edi
call fcn.0049d7a6
test eax, eax
jne 0x422793
mov dword [ebp - 0x4ec], esi
mov byte [ebp - 4], al
lea ecx, [ebp - 0x48a]
call fcn.004fcd10
xor eax, eax
jmp 0x4232df
mov eax, dword [edi + 0x6c]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [edi + 0x7c]
mov dword [ebp - 0x49c], ecx
mov edx, dword [edi + 0x78]
mov dword [ebp - 0x4a8], edx
mov eax, dword [edi + 0x70]
mov dword [ebp - 0x4d0], eax
mov ecx, dword [edi + 0x74]
mov dword [ebp - 0x4bc], ecx
mov ebx, dword [edi + 0x80]
mov dword [ebp - 0x4ac], ebx
call fcn.00422260
mov dword [ebp - 0x4b0], eax
mov esi, dword [edi + 0x50]
mov byte [esi + 0x449], bl
mov byte [ebp - 0x489], 0
cmp byte [esi + 0x46a], 0
je 0x422ebc
push 1
push 0x58a919
mov ecx, esi
call fcn.0042a5b0
mov byte [esi + 0x454], 1
mov byte [esi + 0x448], 0
push 0x58a919
lea edx, [ebp - 0x50c]
push edx
mov ecx, esi
call fcn.0042c110
test al, al
je 0x422eb1
mov eax, dword [ebp - 0x504]
shr eax, 0x10
and eax, 0x7fff
mov dword [esi + 0xc], eax
push 1
push 0x58a919
mov ecx, esi
call fcn.0042ae50
test eax, eax
jne 0x422eb1
mov ecx, dword [esi]
push 1
push esi
mov edx, dword [ecx + 0x20]
call edx
test eax, eax
jne 0x422eb1
push 1
push 1
movzx eax, byte [esi + 0x449]
push eax
mov ecx, esi
call fcn.0042a8d0
cmp byte [esi + 0x450], 0
je 0x4228a5
cmp eax, 4
je 0x42288a
cmp eax, 1
jne 0x4228a5
movzx ecx, byte [esi + 0x448]
or cl, 0x30
mov byte [esi + 0x448], cl
mov edi, dword [ebp - 0x4a4]
jmp 0x42304c
lea edx, [ebp - 0x4b8]
push edx
call fcn.00422520
mov ecx, dword [eax]
mov dword [ebp - 0x4cc], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x4c8], edx
xor bl, bl
mov byte [ebp - 0x491], bl
cmp byte [esi + 0x450], bl
je 0x422973
push 1
push 0x58a919
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x422973
cmp word [esi + 0x12], 0
jne 0x422941
lea edi, [esi + 0x14]
lea eax, [ebp - 0x498]
push eax
push 0x17
push edi
call fcn.00469d00
mov cx, word [ebp - 0x498]
mov word [ebp - 0x4de], cx
lea edx, [ebp - 0x498]
push edx
push 0x18
push edi
call fcn.00469d00
mov ax, word [ebp - 0x498]
mov word [ebp - 0x4e0], ax
push 0
mov ecx, esi
call fcn.00428070
mov bl, 1
mov byte [ebp - 0x491], bl
test bl, bl
je 0x422ea1
mov eax, dword [ebp - 0x4e0]
cdq
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], edx
movzx eax, byte [esi + 0x449]
cmp eax, 3
ja case.default.0x42296c
jmp dword [eax*4 + 0x423320]
lea ecx, [ebp - 0x4f8]
push ecx
lea edx, [ebp - 0x320]
push edx
push 0x104
push str..ini
push str.TasManager
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SearchPathA]
test eax, eax
je 0x4229f2
mov dword [ebp - 0x47c], ebx
mov dword [ebp - 0x478], ebx
mov dword [ebp - 0x474], ebx
mov dword [ebp - 0x470], ebx
mov dword [ebp - 0x46c], ebx
mov dword [ebp - 0x468], ebx
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x320]
push ecx
call fcn.004a1e94
test eax, eax
je 0x4229f2
mov edi, dword [ebp - 0x47c]
mov dword [ebp - 0x4c4], edi
mov edx, dword [ebp - 0x478]
mov dword [ebp - 0x4c0], edx
jmp 0x422a03
mov edi, 0x41b43985
mov dword [ebp - 0x4c4], edi
mov dword [ebp - 0x4c0], ebx
lea eax, [ebp - 0x4a0]
push eax
push 0xf003f
push ebx
push str.SoftwareDataEnvDesSolLtdManager
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x49c], 4
cmp eax, ebx
jne 0x422bdc
lea ecx, [ebp - 0x49c]
push ecx
lea edx, [ebp - 0x480]
push edx
lea eax, [ebp - 0x4d4]
push eax
push 0
push str.LastEnv
mov ecx, dword [ebp - 0x4a0]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ebx, eax
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x4f4], eax
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x490], eax
rol eax, 0x17
mov dword [ebp - 0x490], eax
movsx ecx, byte [ebp - 0x490]
shr eax, 0x18
xor eax, ecx
mov byte [ebp - 0x48d], al
movsx eax, byte [ebp - 0x48f]
xor eax, ecx
mov byte [ebp - 0x48f], al
movsx eax, al
movsx edx, byte [ebp - 0x48e]
xor edx, eax
mov byte [ebp - 0x48e], dl
xor eax, ecx
mov byte [ebp - 0x490], al
mov ecx, dword [ebp - 0x490]
mov eax, ecx
shr eax, 0x18
mov edx, ecx
shr edx, 0x12
xor al, dl
mov edx, ecx
shr edx, 0xc
xor al, dl
mov edx, ecx
shr edx, 6
xor al, dl
and al, 0x3f
mov edx, ecx
shr edx, 0x1e
xor al, dl
mov edx, ecx
and edx, 0x3f
cmp dl, al
je 0x422af6
mov ecx, 0x7fffffc0
jmp 0x422af9
and ecx, 0xffffffc0
mov dword [ebp - 0x490], ecx
mov dword [ebp - 0x480], ecx
test ebx, ebx
je 0x422cd6
lea eax, [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x4a0]
push ecx
push 0
push 0xf003f
push 0
push str.REG_DWORD
push 0
push str.SoftwareDataEnvDesSolLtdManager
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov ebx, eax
mov dword [ebp - 0x480], edi
mov ecx, edi
mov dword [ebp - 0x500], ecx
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x488], ecx
mov eax, ecx
shr eax, 6
xor eax, ecx
shr eax, 6
xor eax, ecx
shr eax, 6
xor eax, ecx
and eax, 0xfc0
mov edx, ecx
shr edx, 0x18
xor eax, edx
shr eax, 6
and ecx, 0xffffffc0
or eax, ecx
mov dword [ebp - 0x488], eax
shr eax, 8
movsx ecx, byte [ebp - 0x488]
xor eax, ecx
mov byte [ebp - 0x488], al
movsx ecx, byte [ebp - 0x487]
movsx edx, byte [ebp - 0x486]
xor edx, ecx
mov byte [ebp - 0x486], dl
movsx eax, al
xor ecx, eax
mov byte [ebp - 0x487], cl
movsx ecx, byte [ebp - 0x485]
xor ecx, eax
mov byte [ebp - 0x485], cl
mov eax, dword [ebp - 0x488]
ror eax, 0x17
mov dword [ebp - 0x488], eax
jmp 0x422ca6
lea edx, [ebp - 0x4a8]
push edx
lea eax, [ebp - 0x4a0]
push eax
push 0
push 0xf003f
push 0
push str.REG_DWORD
push 0
push str.SoftwareDataEnvDesSolLtdManager
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov ebx, eax
mov dword [ebp - 0x480], edi
mov ecx, edi
mov dword [ebp - 0x4b8], ecx
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x484], ecx
mov eax, ecx
shr eax, 6
xor eax, ecx
shr eax, 6
xor eax, ecx
shr eax, 6
xor eax, ecx
and eax, 0xfc0
mov edx, ecx
shr edx, 0x18
xor eax, edx
shr eax, 6
and ecx, 0xffffffc0
or eax, ecx
mov dword [ebp - 0x484], eax
shr eax, 8
movsx ecx, byte [ebp - 0x484]
xor eax, ecx
mov byte [ebp - 0x484], al
movsx ecx, byte [ebp - 0x483]
movsx edx, byte [ebp - 0x482]
xor edx, ecx
mov byte [ebp - 0x482], dl
movsx eax, al
xor ecx, eax
mov byte [ebp - 0x483], cl
movsx ecx, byte [ebp - 0x481]
xor ecx, eax
mov byte [ebp - 0x481], cl
mov eax, dword [ebp - 0x484]
ror eax, 0x17
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x480], eax
mov edx, dword [ebp - 0x49c]
push edx
lea eax, [ebp - 0x480]
push eax
push 4
push 0
push str.LastEnv
mov ecx, dword [ebp - 0x4a0]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov dword [ebp - 0x480], edi
mov edx, dword [ebp - 0x4a0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x4e0], eax
test ebx, ebx
jne 0x422ea1
mov byte [ebp - 0x491], 1
jmp 0x422949
mov eax, dword [esi + 0x430]
shl eax, 0x10
cdq
mov ebx, eax
mov edi, edx
movzx eax, byte [esi + 0x440]
cdq
jmp 0x422d7b
mov eax, dword [esi + 0x438]
shl eax, 0x10
cdq
mov ebx, eax
mov edi, edx
movzx eax, byte [esi + 0x442]
cdq
jmp 0x422d7b
mov eax, dword [esi + 0x434]
shl eax, 0x10
cdq
mov ebx, eax
mov edi, edx
movzx eax, byte [esi + 0x441]
cdq
jmp 0x422d7b
mov eax, dword [esi + 0x43c]
shl eax, 0x10
cdq
mov ebx, eax
mov edi, edx
movzx eax, byte [esi + 0x443]
cdq
jmp 0x422d7b
mov edi, dword [ebp - 0x4b4]
mov ebx, dword [ebp - 0x4b8]
mov edx, dword [ebp - 0x4b4]
mov eax, dword [ebp - 0x4b8]
push 0
push 0x93a80
push edx
push eax
call fcn.004cf660
add eax, ebx
adc edx, edi
cmp dword [ebp - 0x4c8], edi
jl 0x422e87
mov edi, dword [ebp - 0x4cc]
jg 0x422da9
cmp edi, ebx
jb 0x422e87
mov ecx, dword [ebp - 0x4c8]
cmp ecx, edx
jg 0x422e87
jl 0x422dc1
cmp edi, eax
ja 0x422e87
mov eax, dword [ebp - 0x4d8]
add eax, 0xffffeae8
cdq
xor eax, edx
sub eax, edx
cdq
cmp ecx, edx
jl 0x422e87
jg 0x422de4
cmp edi, eax
jbe 0x422e87
movzx eax, byte [esi + 0x449]
cmp dword [ebp - 0x4ac], eax
jne 0x422e6c
movzx eax, byte [esi + 0x44b]
lea ecx, [eax + eax*4]
movzx edx, byte [esi + 0x44c]
lea ecx, [edx + ecx*2]
mov eax, dword [ebp - 0x4bc]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x4d0]
lea edx, [eax + edx*2]
cmp edx, ecx
jg 0x422e6c
mov eax, dword [ebp - 0x504]
shr eax, 0x10
and eax, 0x7fff
cmp eax, dword [esi + 0xc]
jne 0x422e51
mov ecx, esi
call fcn.0042acd0
cmp byte [esi + 0x44f], al
jne 0x422e51
mov dword [esi + 4], 0xffffffff
mov edi, dword [ebp - 0x4a4]
jmp 0x42304c
movzx ecx, byte [esi + 0x448]
or cl, 0x21
mov byte [esi + 0x448], cl
mov edi, dword [ebp - 0x4a4]
jmp 0x42304c
movzx edx, byte [esi + 0x448]
or dl, 0x22
mov byte [esi + 0x448], dl
mov edi, dword [ebp - 0x4a4]
jmp 0x42304c
movzx eax, byte [esi + 0x448]
or al, 0x24
mov byte [esi + 0x448], al
mov edi, dword [ebp - 0x4a4]
jmp 0x42304c
movzx ecx, byte [esi + 0x448]
or cl, 0x28
mov byte [esi + 0x448], cl
mov edi, dword [ebp - 0x4a4]
jmp 0x42304c
mov ecx, dword [esi + 0x460]
mov edx, dword [ecx]
mov eax, dword [edx + 0x40]
call eax
mov ecx, dword [esi + 0x460]
cmp byte [ecx + 0x128], 0
je 0x423020
cmp byte [ecx + 0x129], 0
jne 0x423020
test eax, eax
jne 0x423020
movzx eax, byte [esi + 0x449]
cmp eax, 3
ja case.default.0x422efd
jmp dword [eax*4 + 0x423330]
mov eax, 1
jmp 0x422f26
mov eax, 2
jmp 0x422f26
mov eax, 4
jmp 0x422f26
mov eax, 3
jmp 0x422f26
mov eax, dword [ebp - 0x4d4]
push 0
push eax
call fcn.00552af0
test eax, eax
je 0x42304c
mov ecx, dword [esi + 0x460]
call fcn.0054b840
test eax, eax
je 0x42304c
mov ecx, dword [esi + 0x460]
push 0x57c8f4
push str.VersionMajor
call fcn.0054b870
push eax
call fcn.004d1a94
add esp, 4
mov edi, eax
mov ecx, dword [esi + 0x460]
push 0x57c8f4
push str.VersionMinor1
call fcn.0054b870
push eax
call fcn.004d1a94
add esp, 4
mov dword [ebp - 0x4ac], eax
mov ecx, dword [esi + 0x460]
push 0x57c8f4
push str.VersionMinor2
call fcn.0054b870
push eax
call fcn.004d1a94
add esp, 4
mov ebx, eax
mov ecx, dword [esi + 0x460]
push 0x57c8f4
push str.VersionMinor3
call fcn.0054b870
push eax
call fcn.004d1a94
add esp, 4
lea ecx, [edi + edi*4]
mov edx, dword [ebp - 0x4ac]
lea ecx, [edx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ebx + ecx*2]
lea edx, [ecx + ecx*4]
lea ecx, [eax + edx*2]
mov eax, dword [ebp - 0x4bc]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x4d0]
lea eax, [edx + eax*2]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x4a8]
lea eax, [edx + eax*2]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x49c]
lea eax, [edx + eax*2]
mov edi, dword [ebp - 0x4a4]
cmp ecx, eax
jl 0x42304c
mov dword [esi + 4], 0xffffffff
jmp 0x42304c
cmp byte [esi + 0x468], 0
jne 0x423041
test al, 0x10
je 0x423041
mov byte [esi + 0x468], 1
mov ecx, dword [esi + 0x460]
call fcn.00420b90
jmp 0x42304c
test al, 0x40
je 0x42304c
mov byte [ebp - 0x489], 1
mov eax, 1
add dword [esi + 4], eax
mov ebx, dword [ebp - 0x4b0]
cmp dword [ebp - 0x4dc], 0
je 0x423084
cmp dword [esi + 8], eax
jne 0x42307b
push 0
push 0x6e
push 0x111
mov eax, dword [ebx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
inc dword [esi + 8]
mov eax, dword [esi + 8]
add dword [esi + 4], eax
mov eax, dword [esi + 4]
cmp eax, 2
jle 0x4230e6
cmp eax, 7
jge 0x4230e6
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4230e6
mov eax, dword [esi + 0x460]
push edx
cmp byte [eax + 0x128], dl
jne 0x4230bc
push 0x8092
push 0x111
mov edx, dword [ebx + 0x1c]
push edx
jmp 0x4230e0
cmp byte [ebp - 0x489], 0
je 0x4230d5
push 0x8094
push 0x111
mov eax, dword [ebx + 0x1c]
push eax
jmp 0x4230e0
push 0x66
push 0x111
mov ecx, dword [ebx + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [esi + 4]
cmp eax, 7
jle 0x42310d
cmp eax, 0xd
jge 0x42310d
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x42310d
push edx
push edx
push 0x10
mov edx, dword [ebx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [esi + 4]
cmp eax, 0xd
jle 0x42312d
cmp eax, 0x13
jge 0x42312d
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x42312d
push edx
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov eax, dword [esi + 4]
cmp eax, 0x13
jle 0x423153
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x423153
push edx
push 0x68
push 0x111
mov edx, dword [ebx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [esi + 0x454], 0
xor ebx, ebx
push ebx
mov ecx, esi
call fcn.00428070
cmp byte [edi + 0x8c], bl
je 0x423181
mov eax, dword [edi + 0x88]
push eax
call fcn.004ce2e1
add esp, 4
mov byte [edi + 0x8c], bl
mov ecx, dword [edi + 0x60]
cmp ecx, ebx
je 0x423190
call fcn.004f9590
mov dword [edi + 0x60], ebx
mov eax, dword [edi + 0x5c]
cmp eax, ebx
je 0x4231a2
mov ecx, dword [eax]
push eax
mov edx, dword [ecx + 8]
call edx
mov dword [edi + 0x5c], ebx
lea eax, [ebp - 0x21c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea ecx, [ebp - 0x118]
push ecx
push ebx
push 0x57c95c
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea eax, [ebp - 0x118]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4231d7
sub eax, edx
inc eax
push eax
call fcn.004cf255
add esp, 4
mov dword [edi + 0x88], eax
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x423200
sub ecx, esi
inc ecx
push ecx
lea ecx, [ebp - 0x118]
push ecx
push eax
call fcn.004cf6a0
mov byte [edi + 0x8c], 1
push 8
push 1
push 0x1b4
mov edx, dword [edi + 0x88]
push edx
call fcn.004f92f0
add esp, 0x1c
mov dword [edi + 0x60], eax
mov dword [ebp - 4], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x48a]
call fcn.004fcd10
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x4a4]
lea ecx, [ebp - 0x354]
call fcn.004264f0
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x354]
call fcn.00507220
mov dword [0x5d8794], eax
mov eax, dword [esi + 0x60]
mov dword [0x5d8790], eax
call fcn.004fa300
push eax
mov ecx, dword [esi + 0x60]
push ecx
push 4
call fcn.004fc520
add esp, 0xc
mov edi, eax
mov edx, dword [esi]
mov ecx, esi
mov eax, dword [edx + 0xb0]
call eax
mov dword [esi + 0x84], eax
mov dword [edi], eax
push 0
push edi
push str.TasDocumentVersion
mov ecx, dword [esi + 0x60]
call fcn.004f9650
mov ecx, eax
call fcn.004fc440
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x354]
call fcn.00427f70
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004cdc91
mov esp, ebp
pop ebp
ret