Function at 0x427bae
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
mov eax, 0x49c674
call fcn.00489db4
mov eax, 0x1740
call fcn.0048a8d0
push ebx
push esi
push edi
xor ebx, ebx
mov esi, ecx
push str.System_Info
mov dword [ebp - 0x1c], ebx
call fcn.00428f1e
mov dword [esi + 0x40], eax
lea eax, [ebp - 0x24]
push eax
call fcn.00413f8b
pop ecx
push dword [ebp - 0x24]
mov ecx, esi
mov dword [ebp - 4], ebx
push 0x4c4dc0
call fcn.004275c7
lea eax, [ebp - 0x18]
push eax
call fcn.004816e3
pop ecx
push 1
mov ecx, esi
pop edi
mov byte [ebp - 4], 1
push dword [ebp - 0x18]
push str.OS_Enum
call fcn.004275c7
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.00401605
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00401605
call fcn.00481084
cmp al, bl
mov eax, 0x4c4da8
jne 0x427c3f
mov eax, 0x4c4da0
push eax
push str.Bitness
mov ecx, esi
call fcn.004275c7
lea eax, [ebp - 0x78]
push eax
call fcn.004819b1
cmp eax, ebx
pop ecx
mov dword [ebp - 0x34], eax
jne 0x427c76
push str.Failure
lea ecx, [ebp - 0x38]
call fcn.00401631
mov dword [ebp - 0x1c], edi
mov dword [ebp - 4], 2
jmp 0x427c97
push ebx
push edi
lea eax, [ebp - 0x78]
push edi
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00413d00
add esp, 0x14
mov dword [ebp - 0x1c], 2
mov dword [ebp - 4], 3
mov ecx, dword [eax]
cmp dword [ecx - 0xc], ebx
jl 0x427cad
mov dword [ebp - 0x18], ecx
add ecx, 0xfffffff4
push ecx
call dword [0x4a63dc]
jmp 0x427cc0
mov ecx, dword [0x4bf1a0]
mov dword [ebp - 0x18], ecx
push dword [eax]
lea ecx, [ebp - 0x18]
call fcn.004042b1
test byte [ebp - 0x1c], 2
mov dword [ebp - 4], 6
je 0x427cd9
and dword [ebp - 0x1c], 0xfffffffd
lea ecx, [ebp - 0x24]
call fcn.00401605
test byte [ebp - 0x1c], 1
mov dword [ebp - 4], 5
je 0x427cf2
and dword [ebp - 0x1c], 0xfffffffe
lea ecx, [ebp - 0x38]
call fcn.00401605
push dword [ebp - 0x18]
mov ecx, esi
push str.Windows_Installed
call fcn.004275c7
cmp dword [ebp - 0x34], ebx
jne 0x427d17
push edi
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x60]
call fcn.0042b1d7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401605
mov ecx, 0x80
xor eax, eax
lea edi, [ebp - 0x2de]
mov word [ebp - 0x2e0], bx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], pe_nt_image_headers32
push eax
lea eax, [ebp - 0x2e0]
push eax
call dword [0x4a6018]
lea eax, [ebp - 0x2e0]
mov ecx, esi
push eax
push str.Windows_Account
call fcn.004275c7
lea eax, [ebp - 0x18]
push eax
call fcn.0041e139
push dword [ebp - 0x18]
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 7
push eax
call fcn.004774df
add esp, 0xc
mov ecx, dword [ebp - 0x18]
xor eax, eax
mov byte [ebp - 4], 8
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x24]
push str.Desktop
call fcn.00428ede
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 7
call fcn.00401605
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401605
lea eax, [ebp - 0x18]
push eax
call fcn.0041365f
push dword [ebp - 0x18]
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 9
push eax
call fcn.004774df
add esp, 0xc
mov ecx, dword [ebp - 0x18]
xor eax, eax
mov byte [ebp - 4], 0xa
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x24]
push str.Current_Mutex
call fcn.00428ede
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401605
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401605
lea eax, [ebp - 0x78]
push eax
call fcn.00475a6f
pop ecx
cmp dword [ebp - 0x70], ebx
mov dword [ebp - 4], 0xb
setne byte [ebp - 0x1d]
cmp byte [ebp - 0x1d], bl
je 0x427e3b
mov edi, dword [ebp - 0x74]
cmp edi, ebx
jne 0x427e51
mov edi, 0x4a6d3c
jmp 0x427e51
lea eax, [ebp - 0x34]
push str.Not_Found
push eax
call fcn.004774df
or dword [ebp - 0x1c], 4
mov edi, dword [eax]
pop ecx
pop ecx
test byte [ebp - 0x1c], 4
je 0x427e63
and dword [ebp - 0x1c], 0xfffffffb
lea ecx, [ebp - 0x34]
call fcn.00401605
xor eax, eax
cmp byte [ebp - 0x1d], bl
mov ecx, esi
setne al
push eax
push edi
push str.Domain_Name
call fcn.00428ede
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x78]
call fcn.0042ba71
lea eax, [ebp - 0x14]
push 1
push eax
call fcn.0046fc84
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xc
push eax
call fcn.0046fc6b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xd
push eax
call fcn.0046fc52
add esp, 0x10
mov edi, 0x4bf468
mov byte [ebp - 4], 0xe
push edi
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00404385
push dword [ebp - 0x38]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004042d8
push edi
push eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x10
push eax
call fcn.00404385
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004042d8
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x18
call fcn.00401605
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x17
call fcn.00401605
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x16
call fcn.00401605
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x15
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
call fcn.00401605
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x14]
call fcn.00401605
push dword [ebp - 0x24]
mov ecx, esi
push str.Country
call fcn.004275c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00401605
push 0xf
xor eax, eax
pop ecx
lea edi, [ebp - 0xd8]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xdc], 0x40
push eax
call dword [0x4a6288]
push dword [ebp - 0xcc]
lea eax, [ebp - 0x14]
push eax
call fcn.00410ec9
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x19
push str.Memory
call fcn.004275c7
or edi, 0xffffffff
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.00463717
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x1a
push str.Memory_Physical_Available
call fcn.004275c7
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.0046384e
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x1b
push str.Memory_Installed
call fcn.004275c7
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.00463996
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x1c
push str.Memory_Usage
call fcn.004275c7
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401605
push 8
xor eax, eax
pop ecx
lea edi, [ebp - 0x98]
mov dword [ebp - 0x9c], ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x9c]
push eax
call dword [0x4a628c]
push dword [ebp - 0x88]
mov ecx, esi
push str.Number_of_Processors
call fcn.00426e5b
push dword [ebp - 0x9c]
lea eax, [ebp - 0x14]
push eax
call fcn.00426579
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x1d
push str.Processor_Architecture
call fcn.004275c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00401605
lea eax, [ebp - 0x24]
push eax
call fcn.0042676f
pop ecx
push dword [ebp - 0x24]
mov ecx, esi
mov dword [ebp - 4], 0x1e
push str.Web_Browser
call fcn.004275c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.00475c62
pop ecx
mov ecx, dword [0x4bf1a0]
mov dword [ebp - 0x18], ecx
cmp eax, ebx
mov dword [ebp - 4], 0x1f
je 0x4280f7
cmp dword [ebp - 0x14], ebx
mov edi, str.enabled
jne 0x4280f3
mov edi, str.disabled
cmp edi, ebx
jmp 0x428100
mov edi, str.Not_detected
mov eax, edi
test eax, eax
jne 0x428106
xor eax, eax
jmp 0x42810d
push edi
call dword [0x4a63e0]
push edi
push eax
lea ecx, [ebp - 0x18]
call fcn.0040174e
push dword [ebp - 0x18]
mov ecx, esi
push 0xc1
call fcn.0042757a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401605
mov eax, dword [0x4bf1a0]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00411c7c
pop ecx
pop ecx
lea eax, [ebp - 0x58]
push str._build
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x21
call fcn.00404385
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x22
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004042d8
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x23
push 0x4bf728
call fcn.004275c7
lea ecx, [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0x22
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x21
call fcn.00401605
mov dword [esi + 0x44], edi
call fcn.004819ad
mov edi, eax
lea eax, [ebp - 0x14]
neg edi
sbb edi, edi
push eax
neg edi
call fcn.0041b715
pop ecx
mov eax, dword [eax]
push edi
push eax
push str.USES_NAME_EVENT_EXIT_ALL
mov ecx, esi
mov byte [ebp - 4], 0x24
call fcn.00428ede
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.00413e23
pop ecx
push dword [eax]
mov byte [ebp - 4], 0x25
mov ecx, esi
push str.Created
call fcn.004275c7
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.00401605
mov ecx, esi
call fcn.00426c6b
mov eax, dword [0x4bf1a0]
mov dword [ebp - 0x10], eax
mov edi, 0xa29
lea ecx, [ebp - 0x10]
push edi
mov byte [ebp - 4], 0x26
call fcn.00401885
test eax, eax
je 0x42823e
mov eax, dword [ebp - 0x10]
mov dword [eax - 8], edi
mov eax, dword [ebp - 0x10]
mov word [eax + 0x1452], bx
mov eax, dword [ebp - 0x10]
push 0xa28
push eax
call fcn.00417ccd
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.004018ed
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00426678
lea eax, [ebp - 0x28]
push eax
call fcn.0041698a
mov dword [esp], str.FlgCrt.dll
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x27
push eax
call fcn.00404385
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x28
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x27
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x26
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00426678
lea eax, [ebp - 0x14]
push eax
call fcn.0041bb67
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x29
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x26
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00426678
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x21
call fcn.00401605
lea eax, [ebp - 0x24]
push eax
call fcn.0046004f
pop ecx
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x2a
cmp dword [eax - 8], ebx
jne 0x428312
push 0x4cf898
lea ecx, [ebp - 0x28]
call fcn.00401631
or dword [ebp - 0x1c], 8
mov byte [ebp - 4], 0x2b
jmp 0x428329
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004163e1
or dword [ebp - 0x1c], 0x10
pop ecx
pop ecx
mov dword [ebp - 4], 0x2c
mov ecx, dword [eax]
cmp dword [ecx - 0xc], ebx
jl 0x42833f
mov dword [ebp - 0x10], ecx
add ecx, 0xfffffff4
push ecx
call dword [0x4a63dc]
jmp 0x428352
mov ecx, dword [0x4bf1a0]
mov dword [ebp - 0x10], ecx
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.004042b1
test byte [ebp - 0x1c], 0x10
mov dword [ebp - 4], 0x2f
je 0x42836b
and dword [ebp - 0x1c], 0xffffffef
lea ecx, [ebp - 0x14]
call fcn.00401605
test byte [ebp - 0x1c], 8
mov dword [ebp - 4], 0x2e
je 0x428380
lea ecx, [ebp - 0x28]
call fcn.00401605
mov ecx, dword [ebp - 0x10]
xor eax, eax
cmp dword [ecx - 8], ebx
sete al
cmp eax, ebx
je 0x4283b0
mov edi, str.English__Embedded__EN
mov eax, edi
test eax, eax
je 0x4283a1
push edi
call dword [0x4a63e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.0040174e
jmp 0x428454
lea eax, [ebp - 0x1c]
push eax
call fcn.0045fb61
pop ecx
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x30
cmp dword [eax - 8], ebx
je 0x4283f6
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x30]
push 0x4bf468
push eax
call fcn.004043e9
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x31
push dword [eax - 8]
call fcn.0040444d
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x30
call fcn.00401605
lea eax, [ebp - 0x18]
push eax
call fcn.0045ffe0
pop ecx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x32
cmp dword [eax - 8], ebx
je 0x42843c
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x30]
push 0x4bf468
push eax
call fcn.004043e9
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x33
push dword [eax - 8]
call fcn.0040444d
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x32
call fcn.00401605
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x30
call fcn.00401605
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x2e
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
push str.Language_File
call fcn.004275c7
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2a
call fcn.00401605
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x21
call fcn.00401605
push 0x4c4b7c
lea ecx, [ebp - 0x4c]
call fcn.00401631
push dword [ebp - 0x4c]
mov ecx, esi
mov byte [ebp - 4], 0x34
push str.Unicode
call fcn.004275c7
call dword [0x4a6290]
mov ecx, dword [0x4bf1a0]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
push eax
lea eax, [ebp - 0x10]
push 0x4bf30c
push eax
mov byte [ebp - 4], 0x35
call fcn.00404622
mov ecx, 0x87
xor eax, eax
lea edi, [ebp - 0x2f8]
mov dword [ebp - 0x2fc], ebx
add esp, 0xc
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2fc]
push eax
push ebx
push dword [ebp - 0x14]
call dword [0x4a6294]
cmp eax, ebx
je 0x428573
lea eax, [ebp - 0x2e4]
test eax, eax
je 0x428573
lea eax, [ebp - 0x2e4]
lea ecx, [ebp - 0x18]
push eax
call fcn.00401631
push ebx
lea ecx, [ebp - 0x18]
push dword [ebp - 0x10]
mov byte [ebp - 4], 0x36
call fcn.004045f4
test eax, eax
jl 0x42853c
mov edi, 0x4cf898
mov eax, edi
test eax, eax
je 0x428530
push edi
call dword [0x4a63e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.0040174e
jmp 0x428558
mov edi, 0x4bf2c8
mov eax, edi
test eax, eax
je 0x42854e
push edi
call dword [0x4a63e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.0040444d
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x10]
push eax
push dword [eax - 8]
call fcn.0040444d
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x35
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
push str.Active_Code_Page
call fcn.004275c7
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x34
call fcn.00401605
lea eax, [ebp - 0x40]
push eax
call fcn.00416771
pop ecx
push dword [ebp - 0x40]
mov ecx, esi
mov byte [ebp - 4], 0x37
push 0x4c4b3c
call fcn.004275c7
push 1
lea eax, [ebp - 0x10]
push dword [ebp - 0x40]
push eax
call fcn.004164af
add esp, 0xc
push dword [ebp - 0x10]
mov ecx, esi
mov byte [ebp - 4], 0x38
push str.Folder
call fcn.004275c7
push dword [ebp - 0x10]
call fcn.00475a5e
movzx edi, al
pop ecx
push edi
push str.Read_privilegies
mov ecx, esi
call fcn.00426b7a
xor edx, edx
cmp edi, ebx
setne dl
inc edx
lea ecx, [esi + 0x60]
push edx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
call fcn.0042b1d7
push dword [ebp - 0x10]
call fcn.00475a4d
movzx edi, al
pop ecx
push edi
push str.Write_privilegies
mov ecx, esi
call fcn.00426b7a
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x60]
call fcn.0042b1d7
push dword [ebp - 0x10]
call fcn.00475b2e
movzx edi, al
pop ecx
push edi
push str.Execute_privilegies
mov ecx, esi
call fcn.00426b7a
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x60]
call fcn.0042b1d7
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x37
call fcn.00401605
call fcn.0041327b
mov ecx, dword [0x4bf1a0]
mov dword [ebp - 0x10], ecx
sub eax, ebx
mov byte [ebp - 4], 0x39
je 0x4286a1
dec eax
je 0x428694
dec eax
jne 0x4286b9
mov edi, str.disabled
jmp 0x428699
mov edi, str.enabled__HKLM_
mov eax, edi
test eax, eax
jne 0x4286a8
jmp 0x4286af
mov edi, str.enabled__HKCU_
jmp 0x428699
push edi
call dword [0x4a63e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.0040174e
push dword [ebp - 0x10]
mov ecx, esi
push 0x4c4a54
call fcn.004275c7
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x37
call fcn.00401605
call fcn.00470508
mov dword [ebp - 0x10], eax
call fcn.004714c7
test al, al
mov eax, str.enabled
jne 0x4286ef
mov eax, str.disabled
push eax
push str.Is_NO_Tray
mov ecx, esi
call fcn.004275c7
mov ecx, dword [ebp - 0x10]
call fcn.004710e4
mov edi, str.Enabled
test eax, eax
mov eax, edi
jne 0x428714
mov eax, str.Disabled
push eax
push str.Auto_Switch_Keyboard_Layout
mov ecx, esi
call fcn.004275c7
mov ecx, dword [ebp - 0x10]
call fcn.0047148f
test eax, eax
mov eax, edi
jne 0x428734
mov eax, str.Disabled
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401631
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x3a
call fcn.0047148f
test eax, eax
je 0x4287b5
lea eax, [ebp - 0x30]
push eax
call fcn.00403928
mov edi, eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3b
mov dword [esp], 0x4bf468
call fcn.00401631
push edi
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x3c
push eax
call fcn.004042d8
mov eax, dword [eax]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x3d
push dword [eax - 8]
call fcn.0040444d
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3c
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3b
call fcn.00401605
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3a
call fcn.00401605
mov edi, str.Enabled
push dword [ebp - 0x2c]
mov ecx, esi
push 0x4c49bc
call fcn.004275c7
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x80]
and eax, 2
cmp al, 2
je 0x4287d9
mov edi, str.Disabled
push edi
push str.Save_selection
mov ecx, esi
call fcn.004275c7
lea eax, [ebp - 0x44]
push eax
call fcn.0045ca41
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0045c55c
add esp, 0xc
mov eax, dword [eax + 4]
mov byte [ebp - 4], 0x3e
cmp eax, ebx
jne 0x428812
mov eax, 0x4a6d3c
push eax
lea ecx, [ebp - 0x1c]
call fcn.00401631
push 1
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x40
call fcn.0042ba71
mov ecx, 0x513
xor eax, eax
lea edi, [ebp - 0x174a]
mov word [ebp - 0x174c], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
lea eax, [ebp - 0x174c]
push 0xa28
push eax
push ebx
push dword [ebp - 0x44]
push ebx
push 0x1200
call dword [0x4a6330]
lea eax, [ebp - 0x174c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004774df
mov edi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x41
push eax
call fcn.004771ad
add esp, 0xc
push edi
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x42
push eax
call fcn.004042d8
mov eax, dword [eax]
lea ecx, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x43
push dword [eax - 8]
call fcn.0040444d
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x42
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
call fcn.00401605
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x40
call fcn.00401605
push dword [ebp - 0x1c]
mov ecx, esi
push str.Switch_keyboard_method
call fcn.004275c7
cmp dword [ebp - 0x18], ebx
je 0x4288e3
cmp dword [ebp - 0x18], 3
je 0x4288e3
push 2
jmp 0x4288e5
push 1
push ebx
push ebx
push ebx
push ebx
push 4
lea edi, [esi + 0x60]
push ebx
push eax
mov ecx, edi
call fcn.0042b1d7
lea eax, [ebp - 0x14]
push eax
call fcn.0041218c
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x44
push str.Translation_Method
call fcn.004275c7
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x40
call fcn.00401605
mov ecx, esi
call fcn.00426b0b
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x3a
call fcn.00401605
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x37
call fcn.00401605
mov ecx, dword [ebp - 0x10]
call fcn.00471cbc
test eax, eax
mov eax, str.Enabled
jne 0x428954
mov eax, str.Disabled
push eax
push str.Auto_Check_For_Updates
mov ecx, esi
call fcn.004275c7
mov ecx, dword [ebp - 0x10]
call fcn.00471cc0
push eax
push str.Check_For_Updates_Every_Days
mov ecx, esi
call fcn.00426e5b
lea eax, [ebp - 0x14]
push eax
call fcn.00411d54
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x45
push str.Last_Check
call fcn.004275c7
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x37
call fcn.00401605
mov ecx, esi
call fcn.00426184
lea eax, [ebp - 0x34]
push 0x35
push eax
call fcn.00460b56
pop ecx
pop ecx
push dword [ebp - 0x34]
mov ecx, esi
mov byte [ebp - 4], 0x46
call fcn.00428f1e
mov dword [esi + 0x4c], eax
lea eax, [ebp - 0x50]
push eax
call fcn.0040c0aa
mov byte [ebp - 4], 0x47
call fcn.0040c0c0
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00417172
push dword [ebp - 0x5c]
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x48
push eax
call fcn.004774df
add esp, 0x14
mov eax, dword [0x4bf1a0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
push 0x4bf2c8
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x4a
call fcn.00404385
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x4b
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004042d8
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4c
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4a
call fcn.00401605
lea eax, [ebp - 0x24]
push 0xe6
push eax
call fcn.00460b56
push dword [ebp - 0x24]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x4d
push eax
call fcn.004774df
add esp, 0x10
push eax
lea eax, [ebp - 0x14]
push 0x4bf468
push eax
mov byte [ebp - 4], 0x4e
call fcn.004043e9
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4f
call fcn.004044c9
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4e
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4d
call fcn.00401605
push dword [ebp - 0x18]
mov ecx, esi
push str.Licensed_For
call fcn.004275c7
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x4a
call fcn.00401605
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x49
call fcn.00401605
mov eax, dword [0x4bf1a0]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x50
push eax
call fcn.0040d12d
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x51
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x50
call fcn.00401605
push dword [ebp - 0x2c]
mov ecx, esi
push str.Updates
call fcn.004275c7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x49
call fcn.00401605
mov eax, dword [0x4bf1a0]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x52
push eax
call fcn.0040d2fe
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x53
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x52
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
push str.Left_days
call fcn.004275c7
lea eax, [ebp - 0x14]
push eax
call fcn.004143ae
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x54
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x52
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
push str.Launched_Count_Started
call fcn.004275c7
lea eax, [ebp - 0x48]
push eax
call fcn.00413ee4
push dword [ebp - 0x48]
mov byte [ebp - 4], 0x55
call fcn.004171d0
pop ecx
mov byte [ebp - 0x1d], al
pop ecx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401978
cmp byte [ebp - 0x1d], bl
mov byte [ebp - 4], 0x56
jne 0x428bbd
push str.__not_found
lea ecx, [ebp - 0x2c]
call fcn.0040db6e
push dword [ebp - 0x2c]
mov ecx, esi
push str.License_File
call fcn.004275c7
xor ecx, ecx
cmp byte [ebp - 0x1d], bl
setne cl
inc ecx
push ecx
push eax
mov ecx, edi
call fcn.0042aad7
lea eax, [ebp - 0x60]
push eax
call fcn.00410211
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x57
push str.Current_P
call fcn.004275c7
lea ecx, [ebp - 0x60]
mov esi, eax
mov byte [ebp - 4], 0x56
call fcn.00401605
push 2
push esi
mov ecx, edi
call fcn.0042aad7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x55
call fcn.00401605
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x52
call fcn.00401605
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x49
call fcn.00401605
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x48
call fcn.00401605
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x47
call fcn.00401605
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x46
call fcn.00401605
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x37
call fcn.00401605
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x34
call fcn.00401605
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x21
call fcn.00401605
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x20
call fcn.00401605
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.00401605
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret