Function at 0x4c0c40
Capabilities:
Get common file path
Get hostname
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fd4
call fcn.004f18a0
mov eax, dword [0x5322a8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov ebx, ecx
mov esi, edx
push edi
mov dword [ebp - 0x1fc4], ebx
mov dword [ebp - 0x1fc0], esi
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx edi, ax
xor eax, eax
push 0x3e
push eax
lea ecx, [ebp - 0xd6]
push ecx
mov word [ebp - 0xd8], ax
call fcn.004e7d90
add esp, 0xc
push edi
lea eax, [ebp - 0xd8]
push str._016ld
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 1
lea edi, [ebp - 0xd8]
call fcn.004c0b90
add esp, 4
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x1d9e]
push edx
mov word [ebp - 0x1da0], cx
call fcn.004e7d90
add esp, 0xc
lea eax, [ebp - 0x1fd0]
push eax
lea ecx, [ebp - 0x1da0]
push ecx
mov dword [ebp - 0x1fd0], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xc9
lea edi, [ebp - 0x1da0]
call fcn.004c0b90
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x96e]
push eax
mov word [ebp - 0x970], dx
call fcn.004e7d90
add esp, 0xc
lea esi, [ebp - 0x1fd4]
lea ebx, [ebp - 0x970]
mov dword [ebp - 0x1fd4], 0x104
call fcn.004a9de0
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c0d41
sub eax, edx
sar eax, 1
je 0x4c0e64
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x35e]
push edx
mov word [ebp - 0x360], cx
call fcn.004e7d90
add esp, 0xc
push 0
lea esi, [ebp - 0x360]
call fcn.004a5de0
mov eax, esi
add esp, 4
add eax, 0xfffffffe
lea esp, [esp]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c0d90
mov ecx, dword [str.Info_]
mov edx, dword [0x520174]
mov dword [eax], ecx
mov ecx, dword [0x520178]
mov dword [eax + 4], edx
lea edx, [ebp - 0x360]
push edx
mov dword [eax + 8], ecx
call fcn.004e447d
add esp, 4
cmp eax, 0xffffffff
jne 0x4c0dd9
lea eax, [ebp - 0x360]
push eax
call fcn.004e444b
add esp, 4
lea eax, [ebp - 0x360]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c0de2
mov ecx, dword [str.PCInfo.opt]
mov edx, dword [0x520180]
mov dword [eax], ecx
mov ecx, dword [0x520184]
mov dword [eax + 4], edx
mov edx, dword [0x520188]
mov dword [eax + 8], ecx
mov ecx, dword [0x52018c]
mov dword [eax + 0xc], edx
mov dx, word [0x520190]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x970]
push ecx
push str.LoginName
push str.Info
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov esi, dword [ebp - 0x1fc0]
mov ebx, dword [ebp - 0x1fc4]
push 0xca
lea edi, [ebp - 0x970]
call fcn.004c0b90
jmp 0x4c104f
xor esi, esi
cmp dword [esi*4 + 0x539270], 0
jne 0x4c0e7b
inc esi
cmp esi, 0x20
jl 0x4c0e66
jmp 0x4c1052
lea edx, [ebp - 0x1fbc]
push edx
mov dword [ebp - 0x1fbc], 0
call dword [0x539320]
mov eax, dword [ebp - 0x1fbc]
mov edi, 1
mov dword [eax + 0x30], edi
mov ecx, dword [ebp - 0x1fbc]
mov dword [ecx + 0x34], 0x103
mov edx, dword [ebp - 0x1fbc]
lea eax, [ebp - 0x1fbc]
add esp, 4
push eax
mov dword [edx + 0x50], edi
call dword [0x539344]
mov ecx, dword [ebp - 0x1fbc]
mov edx, dword [ecx + 0x48]
mov eax, 0x2e
mov word [edx], ax
mov ecx, dword [ebp - 0x1fbc]
mov eax, dword [ecx + 0x48]
mov edx, dword [esi*4 + 0x539270]
add esp, 4
add eax, 0x20
lea ecx, [ecx]
mov cl, byte [edx]
mov byte [eax], cl
add edx, edi
add eax, edi
test cl, cl
jne 0x4c0ef0
mov edx, dword [ebp - 0x1fbc]
push edx
call dword [0x5365f4]
add esp, 4
test eax, eax
jne 0x4c1042
mov eax, dword [ebp - 0x1fbc]
cmp dword [eax + 0x18], 0
jbe 0x4c1042
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x20]
push ecx
push edx
lea eax, [ebp - 0x970]
push eax
call fcn.004eaf30
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x35e]
push edx
mov word [ebp - 0x360], cx
call fcn.004e7d90
add esp, 0xc
push 0
lea esi, [ebp - 0x360]
call fcn.004a5de0
mov eax, esi
add esp, 4
add eax, 0xfffffffe
mov edi, edi
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c0f70
mov ecx, dword [str.Info_]
mov edx, dword [0x520174]
mov dword [eax], ecx
mov ecx, dword [0x520178]
mov dword [eax + 4], edx
lea edx, [ebp - 0x360]
push edx
mov dword [eax + 8], ecx
call fcn.004e447d
add esp, 4
cmp eax, 0xffffffff
jne 0x4c0fb9
lea eax, [ebp - 0x360]
push eax
call fcn.004e444b
add esp, 4
lea eax, [ebp - 0x360]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c0fc2
mov ecx, dword [str.PCInfo.opt]
mov edx, dword [0x520180]
mov dword [eax], ecx
mov ecx, dword [0x520184]
mov dword [eax + 4], edx
mov edx, dword [0x520188]
mov dword [eax + 8], ecx
mov ecx, dword [0x52018c]
mov dword [eax + 0xc], edx
mov dx, word [0x520190]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x970]
push ecx
push str.LoginName
push str.Info
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov esi, dword [ebp - 0x1fc0]
mov ebx, dword [ebp - 0x1fc4]
push 0xca
lea edi, [ebp - 0x970]
call fcn.004c0b90
add esp, 4
lea edx, [ebp - 0x1fbc]
push edx
call dword [0x539324]
add esp, 4
mov ebx, dword [ebp - 0x1fc4]
mov edi, dword [ebp - 0x1fc0]
push ebx
mov ecx, edi
call fcn.004c1fc0
add esp, 4
push ebx
mov ecx, edi
call fcn.004c2430
add esp, 4
push ebx
call fcn.004c2640
add esp, 4
push edi
mov ecx, ebx
call fcn.004c2c50
add esp, 4
push ebx
mov ecx, edi
call fcn.004c2e30
add esp, 4
push ebx
mov ecx, edi
call fcn.004c3660
add esp, 4
push ebx
mov ecx, edi
call fcn.004c3bf0
add esp, 4
push ebx
mov ecx, edi
call fcn.004c3e00
add esp, 4
push ebx
mov ecx, edi
call fcn.004c40c0
add esp, 4
push ebx
mov ecx, edi
call fcn.004c49f0
add esp, 4
push ebx
mov ecx, edi
call fcn.004c55c0
add esp, 4
push ebx
mov ecx, edi
call fcn.004c5ae0
add esp, 4
push 0xdb
push edi
mov ecx, str.SCSIAdapter
mov edx, ebx
call fcn.004c5d30
push ebx
mov ecx, edi
call fcn.004c62f0
add esp, 0xc
push 0xe0
push edi
mov ecx, str.MODEM
mov edx, ebx
call fcn.004c5d30
push edi
mov ecx, ebx
call fcn.004c6010
add esp, 0xc
push 0xe3
push edi
mov ecx, str.1394
mov edx, ebx
call fcn.004c5d30
push 0xe4
push edi
mov ecx, str.PCMCIA
mov edx, ebx
call fcn.004c5d30
mov edx, edi
mov ecx, ebx
call fcn.004c6610
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x1376]
push ecx
mov word [ebp - 0x1378], ax
call fcn.004e7d90
add esp, 0x1c
push 0x104
lea edx, [ebp - 0x1378]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov eax, dword [str..C:]
mov edx, dword [0x52662c]
mov ecx, dword [0x526628]
mov dword [ebp - 0x14], eax
mov ax, word [0x526630]
mov dword [ebp - 0xc], edx
xor edx, edx
push 0xfe
mov word [ebp - 8], ax
mov dword [ebp - 0x10], ecx
mov cx, word [ebp - 0x1378]
push edx
lea eax, [ebp - 0x766]
push eax
mov word [ebp - 0xc], cx
mov word [ebp - 0x768], dx
call fcn.004e7d90
lea ecx, [ebp - 0x14]
add esp, 0xc
push ecx
lea esi, [ebp - 0x768]
call fcn.004afa10
mov eax, esi
add esp, 4
lea edx, [eax + 2]
jmp 0x4c11e0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c11e0
sub eax, edx
sar eax, 1
je 0x4c120a
mov esi, dword [ebp - 0x1fc0]
push 0x109
lea edi, [ebp - 0x768]
call fcn.004c0b90
add esp, 4
mov esi, dword [ebp - 0x1fc0]
push ebx
mov ecx, esi
call fcn.004c6cd0
add esp, 4
push ebx
mov ecx, esi
call fcn.004cab80
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x666]
push eax
mov word [ebp - 0x668], dx
call fcn.004e7d90
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x668]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x668]
push 0x5c
push edx
call fcn.004e4991
xor ecx, ecx
mov word [eax + 2], cx
lea eax, [ebp - 0x668]
add esp, 8
add eax, 0xfffffffe
jmp 0x4c1280
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c1280
mov edx, dword [str.Info_]
mov ecx, dword [0x520174]
mov dword [eax], edx
mov edx, dword [0x520178]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [ebp - 0x668]
push eax
call fcn.004e447d
add esp, 4
cmp eax, 0xffffffff
jne 0x4c12c9
lea ecx, [ebp - 0x668]
push ecx
call fcn.004e444b
add esp, 4
lea eax, [ebp - 0x668]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c12d2
mov edx, dword [str.Boot.opt]
mov ecx, dword [0x520994]
mov dword [eax], edx
mov edx, dword [0x520998]
mov dword [eax + 4], ecx
mov ecx, dword [0x52099c]
mov dword [eax + 8], edx
mov dx, word [0x5209a0]
mov dword [eax + 0xc], ecx
mov word [eax + 0x10], dx
xor eax, eax
push 0x3e
push eax
lea ecx, [ebp - 0x116]
push ecx
mov word [ebp - 0x118], ax
call fcn.004e7d90
add esp, 0xc
lea edx, [ebp - 0x668]
push edx
push 0x20
lea eax, [ebp - 0x118]
push eax
push 0x51cd40
push str.InstallDate
push str.Boot
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x4c1369
push 0xf1
lea edi, [ebp - 0x118]
call fcn.004c0b90
mov ebx, dword [ebp - 0x1fc4]
add esp, 4
xor ecx, ecx
push 0x3e
push ecx
lea edx, [ebp - 0x56]
push edx
mov word [ebp - 0x58], cx
call fcn.004e7d90
add esp, 0xc
lea eax, [ebp - 0x668]
push eax
push 0x20
lea ecx, [ebp - 0x58]
push ecx
push 0x51cd40
push str.AverageExecute
push str.Boot
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x4c13f0
lea edx, [ebp - 0x58]
push edx
call fcn.004e442a
add esp, 4
cmp eax, 0x15180
jle 0x4c13d4
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax + str.28800]
mov word [ebp + eax - 0x58], cx
add eax, 2
test cx, cx
jne 0x4c13c0
mov esi, dword [ebp - 0x1fc0]
push 0xf2
lea edi, [ebp - 0x58]
call fcn.004c0b90
mov ebx, dword [ebp - 0x1fc4]
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x157e]
push ecx
mov word [ebp - 0x1580], ax
call fcn.004e7d90
add esp, 0xc
lea esi, [ebp - 0x1580]
call fcn.004c72d0
mov edi, esi
mov esi, dword [ebp - 0x1fc0]
push 0xf3
call fcn.004c0b90
mov edx, dword [0x536cb4]
mov esi, dword [edx + 0x20]
mov eax, dword [esi + 0x14]
add eax, esi
mov dword [esi + 0x20], eax
mov eax, dword [0x536cb4]
mov ecx, dword [eax + 0x10]
add esp, 4
cmp ecx, dword [eax + 0x14]
jbe 0x4c14d2
lea edx, [ebp - 0x1fc8]
push edx
xor edi, edi
push 0x30
push esi
mov dword [ebp - 0x1fbc], edi
mov dword [ebp - 0x1fc8], edi
call dword [0x539384]
mov eax, dword [ebp - 0x1fc8]
add esp, 0xc
cmp eax, edi
jbe 0x4c14d2
push eax
lea eax, [ebp - 0x1fbc]
push eax
call dword [0x5393b0]
mov ecx, dword [ebp - 0x1fbc]
push ecx
push 0x30
push esi
call dword [0x539388]
mov edi, dword [ebp - 0x1fbc]
mov esi, dword [ebp - 0x1fc0]
mov ebx, dword [ebp - 0x1fc4]
add esp, 0x14
push 0x10e
call fcn.004c0b90
mov edx, dword [ebp - 0x1fc8]
add esp, 4
push edx
lea eax, [ebp - 0x1fbc]
push eax
call dword [0x5393b8]
add esp, 8
mov esi, dword [ebp - 0x1fc0]
mov ebx, dword [ebp - 0x1fc4]
push 0xf9
push esi
mov ecx, str.WCEUSBS
mov edx, ebx
call fcn.004c5d30
push ebx
mov ecx, esi
call fcn.004c73b0
add esp, 0xc
xor ecx, ecx
push 0x7e
push ecx
lea edx, [ebp - 0x45e]
push edx
mov word [ebp - 0x460], cx
call fcn.004e7d90
add esp, 0xc
push str.2017.03.30
push str.7.17.0330N1
lea eax, [ebp - 0x460]
push str._s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
push 0x10f
lea edi, [ebp - 0x460]
call fcn.004c0b90
add esp, 0x14
push ebx
mov ecx, esi
call fcn.004c8400
add esp, 4
push 0x119
push esi
mov ecx, str.SmartCardReader
mov edx, ebx
call fcn.004c5d30
push 0x800
call fcn.004e4240
add esp, 0xc
push 0x800
mov edi, eax
push 0
push edi
mov dword [ebp - 0x1fbc], edi
call fcn.004e7d90
add esp, 0xc
push edi
call fcn.004d1bc0
add esp, 4
test eax, eax
je 0x4c15a1
push 0x123
call fcn.004c0b90
add esp, 4
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
push edi
call fcn.004d2330
add esp, 4
test eax, eax
je 0x4c15dd
push 0x124
call fcn.004c0b90
mov ebx, dword [ebp - 0x1fc4]
mov esi, dword [ebp - 0x1fc0]
mov edi, dword [ebp - 0x1fbc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
push edi
call fcn.004d2f60
add esp, 4
test eax, eax
je 0x4c1619
push 0x124
call fcn.004c0b90
mov ebx, dword [ebp - 0x1fc4]
mov esi, dword [ebp - 0x1fc0]
mov edi, dword [ebp - 0x1fbc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
push edi
call fcn.004d4250
add esp, 4
test eax, eax
je 0x4c1655
push 0x124
call fcn.004c0b90
mov ebx, dword [ebp - 0x1fc4]
mov esi, dword [ebp - 0x1fc0]
mov edi, dword [ebp - 0x1fbc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
push edi
call fcn.004d5570
add esp, 4
test eax, eax
je 0x4c1691
push 0x124
call fcn.004c0b90
mov ebx, dword [ebp - 0x1fc4]
mov esi, dword [ebp - 0x1fc0]
mov edi, dword [ebp - 0x1fbc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
call fcn.004bc7d0
test eax, eax
je 0x4c16d6
push edi
call fcn.004d6a20
add esp, 4
test eax, eax
je 0x4c16d6
push 0x124
call fcn.004c0b90
mov ebx, dword [ebp - 0x1fc4]
mov esi, dword [ebp - 0x1fc0]
mov edi, dword [ebp - 0x1fbc]
add esp, 4
mov eax, 0x53d5b0
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c16e0
sub eax, edx
sar eax, 1
jne 0x4c1792
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
push edi
call fcn.004d7d10
add esp, 4
test eax, eax
je 0x4c1741
push 0x124
call fcn.004c0b90
mov eax, dword [ebp - 0x1fbc]
mov edx, 0x53d5b0
add esp, 4
sub edx, eax
lea esp, [esp]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4c1730
jmp 0x4c17a4
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
call fcn.004bc7d0
test eax, eax
je 0x4c17b6
push edi
call fcn.004d9050
add esp, 4
test eax, eax
je 0x4c17b6
push 0x124
call fcn.004c0b90
mov eax, dword [ebp - 0x1fbc]
mov edx, 0x53d5b0
add esp, 4
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4c1781
jmp 0x4c17a4
push 0x124
mov edi, 0x53d5b0
call fcn.004c0b90
add esp, 4
mov ebx, dword [ebp - 0x1fc4]
mov esi, dword [ebp - 0x1fc0]
mov edi, dword [ebp - 0x1fbc]
mov eax, 0x53ddb0
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c17c0
sub eax, edx
sar eax, 1
jne 0x4c1872
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
push edi
call fcn.004da000
add esp, 4
test eax, eax
je 0x4c1821
push 0x124
call fcn.004c0b90
mov eax, dword [ebp - 0x1fbc]
mov edx, 0x53ddb0
add esp, 4
sub edx, eax
lea esp, [esp]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4c1810
jmp 0x4c1884
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
call fcn.004bc7d0
test eax, eax
je 0x4c1896
push edi
call fcn.004db400
add esp, 4
test eax, eax
je 0x4c1896
push 0x124
call fcn.004c0b90
mov eax, dword [ebp - 0x1fbc]
mov edx, 0x53ddb0
add esp, 4
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4c1861
jmp 0x4c1884
push 0x124
mov edi, 0x53ddb0
call fcn.004c0b90
add esp, 4
mov ebx, dword [ebp - 0x1fc4]
mov esi, dword [ebp - 0x1fc0]
mov edi, dword [ebp - 0x1fbc]
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
call fcn.004dca90
test eax, eax
je 0x4c18ce
push 0x125
call fcn.004c0b90
mov ebx, dword [ebp - 0x1fc4]
mov esi, dword [ebp - 0x1fc0]
mov edi, dword [ebp - 0x1fbc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
push edi
call fcn.004dcbc0
add esp, 4
test eax, eax
je 0x4c1af5
push 1
push edi
call fcn.004e4991
push 1
push edi
mov dword [ebp - 0x1fc8], eax
call fcn.004e46a9
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x35e]
push edx
mov dword [ebp - 0x1fbc], eax
mov word [ebp - 0x360], cx
call fcn.004e7d90
mov eax, dword [ebp - 0x1fbc]
sub eax, edi
add esp, 0x1c
sar eax, 1
push eax
lea ecx, [ebp - 0x360]
push edi
push ecx
call fcn.004e4726
add esp, 0xc
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x116e]
push eax
mov word [ebp - 0x1170], dx
call fcn.004e7d90
add esp, 0xc
lea ecx, [ebp - 0x360]
push ecx
push 0x126
lea edx, [ebp - 0x1170]
push str._03d_t_s
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x1170]
add esp, 0x10
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c1990
sub eax, edx
mov edx, dword [esi]
sar eax, 1
add eax, eax
push eax
lea ecx, [ebp - 0x1170]
push ecx
lea eax, [ebx + edx*2]
push eax
call fcn.004eaf30
lea eax, [ebp - 0x1170]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c19c0
sub eax, edx
mov edx, dword [ebp - 0x1fc8]
sar eax, 1
add dword [esi], eax
mov eax, dword [esi]
mov ecx, 1
mov word [ebx + eax*2], cx
inc dword [esi]
cmp dword [ebp - 0x1fbc], edx
je 0x4c1af5
mov eax, dword [ebp - 0x1fbc]
add eax, 2
push 1
push eax
mov dword [ebp - 0x1fcc], eax
call fcn.004e46a9
mov dword [ebp - 0x1fbc], eax
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x35e]
push ecx
mov word [ebp - 0x360], ax
call fcn.004e7d90
mov eax, dword [ebp - 0x1fcc]
mov edx, dword [ebp - 0x1fbc]
sub edx, eax
add esp, 0x14
sar edx, 1
push edx
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.004e4726
add esp, 0xc
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x116e]
push edx
mov word [ebp - 0x1170], cx
call fcn.004e7d90
add esp, 0xc
lea eax, [ebp - 0x360]
push eax
push 0x126
lea ecx, [ebp - 0x1170]
push str._03d_t_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x1170]
add esp, 0x10
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c1a94
mov ecx, dword [esi]
sub eax, edx
sar eax, 1
lea edx, [eax + eax]
push edx
lea eax, [ebp - 0x1170]
push eax
lea edx, [ebx + ecx*2]
push edx
call fcn.004eaf30
lea eax, [ebp - 0x1170]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c1ac5
sub eax, edx
mov edx, dword [ebp - 0x1fc8]
sar eax, 1
add dword [esi], eax
mov eax, dword [esi]
mov ecx, 1
mov word [ebx + eax*2], cx
inc dword [esi]
cmp dword [ebp - 0x1fbc], edx
jne 0x4c19f0
push 0x800
push 0
push edi
call fcn.004e7d90
add esp, 0xc
call fcn.004bc7d0
test eax, eax
je 0x4c1d26
push edi
call fcn.004dd040
add esp, 4
test eax, eax
je 0x4c1d26
push 1
push edi
call fcn.004e4991
push 1
push edi
mov dword [ebp - 0x1fc8], eax
call fcn.004e46a9
mov dword [ebp - 0x1fbc], eax
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x35e]
push ecx
mov word [ebp - 0x360], ax
call fcn.004e7d90
mov edx, dword [ebp - 0x1fbc]
sub edx, edi
add esp, 0x1c
sar edx, 1
push edx
lea eax, [ebp - 0x360]
push edi
push eax
call fcn.004e4726
add esp, 0xc
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x116e]
push edx
mov word [ebp - 0x1170], cx
call fcn.004e7d90
add esp, 0xc
lea eax, [ebp - 0x360]
push eax
push 0x126
lea ecx, [ebp - 0x1170]
push str._03d_t_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x1170]
add esp, 0x10
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c1bc0
mov ecx, dword [esi]
sub eax, edx
sar eax, 1
lea edx, [eax + eax]
push edx
lea eax, [ebp - 0x1170]
push eax
lea edx, [ebx + ecx*2]
push edx
call fcn.004eaf30
lea eax, [ebp - 0x1170]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c1bf1
sub eax, edx
mov edx, dword [ebp - 0x1fc8]
sar eax, 1
add dword [esi], eax
mov eax, dword [esi]
mov ecx, 1
mov word [ebx + eax*2], cx
inc dword [esi]
cmp dword [ebp - 0x1fbc], edx
je 0x4c1d26
mov eax, dword [ebp - 0x1fbc]
add eax, 2
push 1
push eax
mov dword [ebp - 0x1fcc], eax
call fcn.004e46a9
mov dword [ebp - 0x1fbc], eax
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x35e]
push ecx
mov word [ebp - 0x360], ax
call fcn.004e7d90
mov eax, dword [ebp - 0x1fcc]
mov edx, dword [ebp - 0x1fbc]
sub edx, eax
add esp, 0x14
sar edx, 1
push edx
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.004e4726
add esp, 0xc
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x116e]
push edx
mov word [ebp - 0x1170], cx
call fcn.004e7d90
add esp, 0xc
lea eax, [ebp - 0x360]
push eax
push 0x126
lea ecx, [ebp - 0x1170]
push str._03d_t_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x1170]
add esp, 0x10
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c1cc5
mov ecx, dword [esi]
sub eax, edx
sar eax, 1
lea edx, [eax + eax]
push edx
lea eax, [ebp - 0x1170]
push eax
lea edx, [ebx + ecx*2]
push edx
call fcn.004eaf30
lea eax, [ebp - 0x1170]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c1cf6
sub eax, edx
mov edx, dword [ebp - 0x1fc8]
sar eax, 1
add dword [esi], eax
mov eax, dword [esi]
mov ecx, 1
mov word [ebx + eax*2], cx
inc dword [esi]
cmp dword [ebp - 0x1fbc], edx
jne 0x4c1c21
push edi
call fcn.004e424b
add esp, 4
push ebx
mov ebx, esi
call fcn.004c86b0
add esp, 4
xor eax, eax
push 0x3e
push eax
lea ecx, [ebp - 0x156]
push ecx
mov word [ebp - 0x158], ax
call fcn.004e7d90
add esp, 0xc
xor edx, edx
push 0x3e
push edx
lea eax, [ebp - 0x96]
push eax
mov word [ebp - 0x98], dx
call fcn.004e7d90
lea ecx, [ebp - 0x158]
add esp, 0xc
push ecx
lea ecx, [ebp - 0x98]
call fcn.004c8940
mov ebx, dword [ebp - 0x1fc4]
add esp, 4
push 0x191
lea edi, [ebp - 0x158]
call fcn.004c0b90
mov esi, dword [ebp - 0x1fc0]
add esp, 4
push 0x192
lea edi, [ebp - 0x98]
call fcn.004c0b90
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x1b96]
push eax
mov word [ebp - 0x1b98], dx
call fcn.004e7d90
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x1b98]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0x193
lea edi, [ebp - 0x1b98]
call fcn.004c0b90
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x1fa6]
push eax
mov word [ebp - 0x1fa8], dx
call fcn.004e7d90
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x1fa8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x194
lea edi, [ebp - 0x1fa8]
call fcn.004c0b90
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x198e]
push eax
mov word [ebp - 0x1990], dx
call fcn.004e7d90
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x1990]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x195
lea edi, [ebp - 0x1990]
call fcn.004c0b90
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x1786]
push eax
mov word [ebp - 0x1788], dx
call fcn.004e7d90
add esp, 0xc
lea ecx, [ebp - 0x1788]
call fcn.004bcc50
push 0x196
lea edi, [ebp - 0x1788]
call fcn.004c0b90
add esp, 4
push 0x1f5
mov edi, str.00000000_0000_0000_0000_000000000000
call fcn.004c0b90
mov edi, esi
mov esi, ebx
add esp, 4
mov edx, edi
mov ecx, esi
call fcn.004c8b90
push esi
mov ecx, edi
call fcn.004c7790
add esp, 4
xor ecx, ecx
push 0x7e
push ecx
lea edx, [ebp - 0x3de]
push edx
mov word [ebp - 0x3e0], cx
call fcn.004e7d90
xor eax, eax
add esp, 0xc
lea ecx, [ebp - 0x1fb8]
push ecx
mov word [ebp - 0x1fb8], ax
mov dword [ebp - 0x1fb6], eax
mov dword [ebp - 0x1fb2], eax
mov dword [ebp - 0x1fae], eax
mov word [ebp - 0x1faa], ax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x1fac]
movzx ecx, word [ebp - 0x1fae]
movzx edx, word [ebp - 0x1fb0]
movzx edi, word [ebp - 0x1fb2]
movzx esi, word [ebp - 0x1fb6]
movzx ebx, word [ebp - 0x1fb8]
push eax
push eax
push ecx
push edx
push edi
push esi
push ebx
push eax
push eax
push ecx
push edx
push edi
push esi
push ebx
lea edx, [ebp - 0x3e0]
push str._04u_02u_02u_02u_02u_02u_02u_04u_02u_02u_02u_02u_02u_02u
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
mov esi, dword [ebp - 0x1fc0]
mov ebx, dword [ebp - 0x1fc4]
push 0x3e7
lea edi, [ebp - 0x3e0]
call fcn.004c0b90
add esp, 0x44
mov eax, 1
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e3946
mov esp, ebp
pop ebp
ret