Function at 0x4c2fb0
Capabilities:
Get common file path
Get hostname
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x17d4
call fcn.004f23a0
mov eax, dword [0x5552b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov ebx, ecx
mov esi, edx
push edi
mov dword [ebp - 0x17c0], ebx
mov dword [ebp - 0x17bc], esi
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx edi, ax
xor eax, eax
push 0x3e
push eax
lea ecx, [ebp - 0xd6]
push ecx
mov word [ebp - 0xd8], ax
call fcn.004e8ba0
add esp, 0xc
push edi
lea eax, [ebp - 0xd8]
push str._016ld
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 1
lea edi, [ebp - 0xd8]
call fcn.004c2ef0
add esp, 4
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x118e]
push edx
mov word [ebp - 0x1190], cx
call fcn.004e8ba0
add esp, 0xc
lea eax, [ebp - 0x17d4]
push eax
lea ecx, [ebp - 0x1190]
push ecx
mov dword [ebp - 0x17d4], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xc9
lea edi, [ebp - 0x1190]
call fcn.004c2ef0
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x96e]
push eax
mov word [ebp - 0x970], dx
call fcn.004e8ba0
add esp, 0xc
lea esi, [ebp - 0x17d0]
lea ebx, [ebp - 0x970]
mov dword [ebp - 0x17d0], 0x104
call fcn.004a5b30
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c30b1
sub eax, edx
sar eax, 1
je 0x4c31d4
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x35e]
push edx
mov word [ebp - 0x360], cx
call fcn.004e8ba0
add esp, 0xc
push 0
lea esi, [ebp - 0x360]
call fcn.004b79a0
mov eax, esi
add esp, 4
add eax, 0xfffffffe
lea esp, [esp]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c3100
mov ecx, dword [str.Info_]
mov edx, dword [0x51f900]
mov dword [eax], ecx
mov ecx, dword [0x51f904]
mov dword [eax + 4], edx
lea edx, [ebp - 0x360]
push edx
mov dword [eax + 8], ecx
call fcn.004e51cd
add esp, 4
cmp eax, 0xffffffff
jne 0x4c3149
lea eax, [ebp - 0x360]
push eax
call fcn.004e519b
add esp, 4
lea eax, [ebp - 0x360]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c3152
mov ecx, dword [str.PCInfo.opt]
mov edx, dword [0x51f90c]
mov dword [eax], ecx
mov ecx, dword [0x51f910]
mov dword [eax + 4], edx
mov edx, dword [0x51f914]
mov dword [eax + 8], ecx
mov ecx, dword [0x51f918]
mov dword [eax + 0xc], edx
mov dx, word [0x51f91c]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x970]
push ecx
push str.LoginName
push str.Info
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov esi, dword [ebp - 0x17bc]
mov ebx, dword [ebp - 0x17c0]
push 0xca
lea edi, [ebp - 0x970]
call fcn.004c2ef0
jmp 0x4c3362
lea edx, [ebp - 0x17c4]
push edx
mov dword [ebp - 0x17c4], 0
call dword [0x5662e0]
mov ecx, dword [ebp - 0x17c4]
mov eax, 1
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 0x17c4]
mov dword [edx + 0x34], 0x103
mov ecx, dword [ebp - 0x17c4]
mov dword [ecx + 0x50], eax
mov edx, dword [ebp - 0x17c4]
add esp, 4
push edx
call fcn.004a4fb0
add esp, 4
test eax, eax
je 0x4c3355
mov eax, dword [ebp - 0x17c4]
cmp dword [eax + 0x18], 0
jbe 0x4c3355
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x20]
push ecx
push edx
lea eax, [ebp - 0x970]
push eax
call fcn.004ebc70
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x35e]
push edx
mov word [ebp - 0x360], cx
call fcn.004e8ba0
add esp, 0xc
push 0
lea esi, [ebp - 0x360]
call fcn.004b79a0
mov eax, esi
add esp, 4
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c3283
mov ecx, dword [str.Info_]
mov edx, dword [0x51f900]
mov dword [eax], ecx
mov ecx, dword [0x51f904]
mov dword [eax + 4], edx
lea edx, [ebp - 0x360]
push edx
mov dword [eax + 8], ecx
call fcn.004e51cd
add esp, 4
cmp eax, 0xffffffff
jne 0x4c32cc
lea eax, [ebp - 0x360]
push eax
call fcn.004e519b
add esp, 4
lea eax, [ebp - 0x360]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c32d5
mov ecx, dword [str.PCInfo.opt]
mov edx, dword [0x51f90c]
mov dword [eax], ecx
mov ecx, dword [0x51f910]
mov dword [eax + 4], edx
mov edx, dword [0x51f914]
mov dword [eax + 8], ecx
mov ecx, dword [0x51f918]
mov dword [eax + 0xc], edx
mov dx, word [0x51f91c]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x970]
push ecx
push str.LoginName
push str.Info
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov esi, dword [ebp - 0x17bc]
mov ebx, dword [ebp - 0x17c0]
push 0xca
lea edi, [ebp - 0x970]
call fcn.004c2ef0
add esp, 4
lea edx, [ebp - 0x17c4]
push edx
call dword [0x5662e4]
mov ebx, dword [ebp - 0x17c0]
mov edi, dword [ebp - 0x17bc]
add esp, 4
push ebx
mov ecx, edi
call fcn.004c40c0
add esp, 4
push ebx
mov ecx, edi
call fcn.004c47b0
add esp, 4
push ebx
call fcn.004c49c0
add esp, 4
push edi
mov ecx, ebx
call fcn.004c4fd0
add esp, 4
push ebx
mov ecx, edi
call fcn.004c51b0
add esp, 4
push ebx
mov ecx, edi
call fcn.004c59e0
add esp, 4
push ebx
mov ecx, edi
call fcn.004c5f70
add esp, 4
push ebx
mov ecx, edi
call fcn.004c6180
add esp, 4
push ebx
mov ecx, edi
call fcn.004c6440
add esp, 4
push ebx
mov ecx, edi
call fcn.004c6d70
add esp, 4
push ebx
mov ecx, edi
call fcn.004c7940
add esp, 4
push ebx
mov ecx, edi
call fcn.004c7e60
add esp, 4
push 0xdb
push edi
mov ecx, str.SCSIAdapter
mov edx, ebx
call fcn.004c80b0
push ebx
mov ecx, edi
call fcn.004c8670
add esp, 0xc
push 0xe0
push edi
mov ecx, str.MODEM
mov edx, ebx
call fcn.004c80b0
push edi
mov ecx, ebx
call fcn.004c8390
add esp, 0xc
push 0xe3
push edi
mov ecx, str.1394
mov edx, ebx
call fcn.004c80b0
push 0xe4
push edi
mov ecx, str.PCMCIA
mov edx, ebx
call fcn.004c80b0
mov edx, edi
mov ecx, ebx
call fcn.004c8990
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0xb76]
push ecx
mov word [ebp - 0xb78], ax
call fcn.004e8ba0
add esp, 0x1c
push 0x104
lea edx, [ebp - 0xb78]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov eax, dword [str..C:]
mov edx, dword [0x525f84]
mov ecx, dword [0x525f80]
mov dword [ebp - 0x14], eax
mov ax, word [0x525f88]
mov dword [ebp - 0xc], edx
xor edx, edx
push 0xfe
mov word [ebp - 8], ax
mov dword [ebp - 0x10], ecx
mov cx, word [ebp - 0xb78]
push edx
lea eax, [ebp - 0x766]
push eax
mov word [ebp - 0xc], cx
mov word [ebp - 0x768], dx
call fcn.004e8ba0
lea ecx, [ebp - 0x14]
add esp, 0xc
push ecx
lea esi, [ebp - 0x768]
call fcn.004ada00
mov eax, esi
add esp, 4
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c34f0
sub eax, edx
sar eax, 1
je 0x4c351a
mov esi, dword [ebp - 0x17bc]
push 0x109
lea edi, [ebp - 0x768]
call fcn.004c2ef0
add esp, 4
mov esi, dword [ebp - 0x17bc]
push ebx
mov ecx, esi
call fcn.004c9040
add esp, 4
push ebx
mov ecx, esi
call fcn.004cbc10
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x666]
push eax
mov word [ebp - 0x668], dx
call fcn.004e8ba0
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x668]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x668]
push 0x5c
push edx
call fcn.004e56ec
xor ecx, ecx
mov word [eax + 2], cx
lea eax, [ebp - 0x668]
add esp, 8
add eax, 0xfffffffe
jmp 0x4c3590
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c3590
mov edx, dword [str.Info_]
mov ecx, dword [0x51f900]
mov dword [eax], edx
mov edx, dword [0x51f904]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [ebp - 0x668]
push eax
call fcn.004e51cd
add esp, 4
cmp eax, 0xffffffff
jne 0x4c35d9
lea ecx, [ebp - 0x668]
push ecx
call fcn.004e519b
add esp, 4
lea eax, [ebp - 0x668]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4c35e2
mov edx, dword [str.Boot.opt]
mov ecx, dword [0x520128]
mov dword [eax], edx
mov edx, dword [0x52012c]
mov dword [eax + 4], ecx
mov ecx, dword [0x520130]
mov dword [eax + 8], edx
mov dx, word [0x520134]
mov dword [eax + 0xc], ecx
mov word [eax + 0x10], dx
xor eax, eax
push 0x3e
push eax
lea ecx, [ebp - 0x116]
push ecx
mov word [ebp - 0x118], ax
call fcn.004e8ba0
add esp, 0xc
lea edx, [ebp - 0x668]
push edx
push 0x20
lea eax, [ebp - 0x118]
push eax
push 0x51c514
push str.InstallDate
push str.Boot
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x4c3679
push 0xf1
lea edi, [ebp - 0x118]
call fcn.004c2ef0
mov ebx, dword [ebp - 0x17c0]
add esp, 4
xor ecx, ecx
push 0x3e
push ecx
lea edx, [ebp - 0x56]
push edx
mov word [ebp - 0x58], cx
call fcn.004e8ba0
add esp, 0xc
lea eax, [ebp - 0x668]
push eax
push 0x20
lea ecx, [ebp - 0x58]
push ecx
push 0x51c514
push str.AverageExecute
push str.Boot
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x4c36fa
lea edx, [ebp - 0x58]
push edx
call fcn.004e517a
add esp, 4
cmp eax, 0x15180
jle 0x4c36e4
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax + str.28800]
mov word [ebp + eax - 0x58], cx
add eax, 2
test cx, cx
jne 0x4c36d0
push 0xf2
lea edi, [ebp - 0x58]
call fcn.004c2ef0
mov ebx, dword [ebp - 0x17c0]
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0xf86]
push ecx
mov word [ebp - 0xf88], ax
call fcn.004e8ba0
add esp, 0xc
lea esi, [ebp - 0xf88]
call fcn.004c9650
mov edi, esi
mov esi, dword [ebp - 0x17bc]
push 0xf3
call fcn.004c2ef0
mov edx, dword [0x566278]
mov esi, dword [edx + 0x20]
mov eax, dword [esi + 0x14]
add eax, esi
mov dword [esi + 0x20], eax
mov eax, dword [0x566278]
mov ecx, dword [eax + 0x10]
add esp, 4
cmp ecx, dword [eax + 0x14]
jbe 0x4c37dc
lea edx, [ebp - 0x17c4]
push edx
xor edi, edi
push 0x30
push esi
mov dword [ebp - 0x17c8], edi
mov dword [ebp - 0x17c4], edi
call dword [0x566344]
mov eax, dword [ebp - 0x17c4]
add esp, 0xc
cmp eax, edi
jbe 0x4c37dc
push eax
lea eax, [ebp - 0x17c8]
push eax
call dword [0x566370]
mov ecx, dword [ebp - 0x17c8]
push ecx
push 0x30
push esi
call dword [0x566348]
mov edi, dword [ebp - 0x17c8]
mov esi, dword [ebp - 0x17bc]
mov ebx, dword [ebp - 0x17c0]
add esp, 0x14
push 0x10e
call fcn.004c2ef0
mov edx, dword [ebp - 0x17c4]
add esp, 4
push edx
lea eax, [ebp - 0x17c8]
push eax
call dword [0x566378]
add esp, 8
mov esi, dword [ebp - 0x17bc]
mov ebx, dword [ebp - 0x17c0]
push 0xf9
push esi
mov ecx, str.WCEUSBS
mov edx, ebx
call fcn.004c80b0
push ebx
mov ecx, esi
call fcn.004c9730
add esp, 0xc
xor ecx, ecx
push 0x7e
push ecx
lea edx, [ebp - 0x3de]
push edx
mov word [ebp - 0x3e0], cx
call fcn.004e8ba0
add esp, 0xc
push str.2017.12.30
push str.7.17.1230N1
lea eax, [ebp - 0x3e0]
push str._s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
push 0x10f
lea edi, [ebp - 0x3e0]
call fcn.004c2ef0
add esp, 0x14
push ebx
mov ecx, esi
call fcn.004c9b10
add esp, 4
push 0x119
push esi
mov ecx, str.SmartCardReader
mov edx, ebx
call fcn.004c80b0
push 0x800
call fcn.004e5420
add esp, 0xc
push 0x800
mov edi, eax
push 0
push edi
mov dword [ebp - 0x17c4], edi
call fcn.004e8ba0
add esp, 0xc
push edi
call fcn.004d2400
add esp, 4
test eax, eax
je 0x4c38ab
push 0x123
call fcn.004c2ef0
add esp, 4
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
push edi
call fcn.004d2e00
add esp, 4
test eax, eax
je 0x4c38e7
push 0x124
call fcn.004c2ef0
mov edi, dword [ebp - 0x17c4]
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
push edi
call fcn.004d3a30
add esp, 4
test eax, eax
je 0x4c3923
push 0x124
call fcn.004c2ef0
mov edi, dword [ebp - 0x17c4]
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
push edi
call fcn.004d4d10
add esp, 4
test eax, eax
je 0x4c395f
push 0x124
call fcn.004c2ef0
mov edi, dword [ebp - 0x17c4]
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
push edi
call fcn.004d6060
add esp, 4
test eax, eax
je 0x4c399b
push 0x124
call fcn.004c2ef0
mov edi, dword [ebp - 0x17c4]
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
call fcn.004bc0d0
test eax, eax
je 0x4c39e0
push edi
call fcn.004d7520
add esp, 4
test eax, eax
je 0x4c39e0
push 0x124
call fcn.004c2ef0
mov edi, dword [ebp - 0x17c4]
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
add esp, 4
mov eax, 0x56f388
lea edx, [eax + 2]
jmp 0x4c39f0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c39f0
sub eax, edx
sar eax, 1
jne 0x4c3aa2
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
push edi
call fcn.004d8820
add esp, 4
test eax, eax
je 0x4c3a51
push 0x124
call fcn.004c2ef0
mov eax, dword [ebp - 0x17c4]
mov edx, 0x56f388
add esp, 4
sub edx, eax
lea esp, [esp]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4c3a40
jmp 0x4c3ab4
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
call fcn.004bc0d0
test eax, eax
je 0x4c3ac6
push edi
call fcn.004d9b60
add esp, 4
test eax, eax
je 0x4c3ac6
push 0x124
call fcn.004c2ef0
mov eax, dword [ebp - 0x17c4]
mov edx, 0x56f388
add esp, 4
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4c3a91
jmp 0x4c3ab4
push 0x124
mov edi, 0x56f388
call fcn.004c2ef0
add esp, 4
mov edi, dword [ebp - 0x17c4]
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
mov eax, 0x56fb88
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c3ad0
sub eax, edx
sar eax, 1
jne 0x4c3b82
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
push edi
call fcn.004dab30
add esp, 4
test eax, eax
je 0x4c3b31
push 0x124
call fcn.004c2ef0
mov eax, dword [ebp - 0x17c4]
mov edx, 0x56fb88
add esp, 4
sub edx, eax
lea esp, [esp]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4c3b20
jmp 0x4c3b94
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
call fcn.004bc0d0
test eax, eax
je 0x4c3ba6
push edi
call fcn.004dbf70
add esp, 4
test eax, eax
je 0x4c3ba6
push 0x124
call fcn.004c2ef0
mov eax, dword [ebp - 0x17c4]
mov edx, 0x56fb88
add esp, 4
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4c3b71
jmp 0x4c3b94
push 0x124
mov edi, 0x56fb88
call fcn.004c2ef0
add esp, 4
mov edi, dword [ebp - 0x17c4]
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
call fcn.004dd630
test eax, eax
je 0x4c3bde
push 0x125
call fcn.004c2ef0
mov edi, dword [ebp - 0x17c4]
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
add esp, 4
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
mov ecx, edi
call fcn.004dd760
test eax, eax
je 0x4c3d04
push 1
push edi
call fcn.004e56ec
push 1
push edi
mov dword [ebp - 0x17cc], eax
call fcn.004e53f9
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x35e]
push edx
mov dword [ebp - 0x17c8], eax
mov word [ebp - 0x360], cx
call fcn.004e8ba0
mov eax, dword [ebp - 0x17c8]
sub eax, edi
add esp, 0x1c
sar eax, 1
push eax
lea ecx, [ebp - 0x360]
push edi
push ecx
call fcn.004e5481
add esp, 0xc
push 0x126
lea edi, [ebp - 0x360]
call fcn.004c2ef0
mov edx, dword [ebp - 0x17c8]
add esp, 4
cmp edx, dword [ebp - 0x17cc]
je 0x4c3cf2
mov esi, dword [ebp - 0x17c8]
add esi, 2
push 1
push esi
call fcn.004e53f9
mov edi, eax
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x35e]
push ecx
mov dword [ebp - 0x17c8], edi
mov word [ebp - 0x360], ax
call fcn.004e8ba0
add esp, 0x14
sub edi, esi
sar edi, 1
push edi
lea edx, [ebp - 0x360]
push esi
push edx
call fcn.004e5481
mov esi, dword [ebp - 0x17bc]
mov ebx, dword [ebp - 0x17c0]
add esp, 0xc
push 0x126
lea edi, [ebp - 0x360]
call fcn.004c2ef0
mov eax, dword [ebp - 0x17cc]
add esp, 4
cmp dword [ebp - 0x17c8], eax
jne 0x4c3c77
jmp 0x4c3cfe
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
mov edi, dword [ebp - 0x17c4]
push 0x800
push 0
push edi
call fcn.004e8ba0
add esp, 0xc
call fcn.004bc0d0
test eax, eax
je 0x4c3e37
mov ecx, edi
call fcn.004ddd00
test eax, eax
je 0x4c3e37
push 1
push edi
call fcn.004e56ec
push 1
push edi
mov dword [ebp - 0x17cc], eax
call fcn.004e53f9
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x35e]
push edx
mov dword [ebp - 0x17c8], eax
mov word [ebp - 0x360], cx
call fcn.004e8ba0
mov eax, dword [ebp - 0x17c8]
sub eax, edi
add esp, 0x1c
sar eax, 1
push eax
lea ecx, [ebp - 0x360]
push edi
push ecx
call fcn.004e5481
add esp, 0xc
push 0x126
lea edi, [ebp - 0x360]
call fcn.004c2ef0
mov edx, dword [ebp - 0x17c8]
add esp, 4
cmp edx, dword [ebp - 0x17cc]
je 0x4c3e25
mov esi, dword [ebp - 0x17c8]
add esi, 2
push 1
push esi
call fcn.004e53f9
mov edi, eax
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x35e]
push ecx
mov dword [ebp - 0x17c8], edi
mov word [ebp - 0x360], ax
call fcn.004e8ba0
add esp, 0x14
sub edi, esi
sar edi, 1
push edi
lea edx, [ebp - 0x360]
push esi
push edx
call fcn.004e5481
mov esi, dword [ebp - 0x17bc]
mov ebx, dword [ebp - 0x17c0]
add esp, 0xc
push 0x126
lea edi, [ebp - 0x360]
call fcn.004c2ef0
mov eax, dword [ebp - 0x17cc]
add esp, 4
cmp dword [ebp - 0x17c8], eax
jne 0x4c3daa
jmp 0x4c3e31
mov ebx, dword [ebp - 0x17c0]
mov esi, dword [ebp - 0x17bc]
mov edi, dword [ebp - 0x17c4]
push edi
call fcn.004e577a
add esp, 4
push ebx
mov ecx, esi
call fcn.004c9dc0
add esp, 4
xor ecx, ecx
push 0x3e
push ecx
lea edx, [ebp - 0x156]
push edx
mov word [ebp - 0x158], cx
call fcn.004e8ba0
add esp, 0xc
xor eax, eax
push 0x3e
push eax
lea ecx, [ebp - 0x96]
push ecx
mov word [ebp - 0x98], ax
call fcn.004e8ba0
lea edx, [ebp - 0x158]
add esp, 0xc
push edx
lea ecx, [ebp - 0x98]
call fcn.004c9ff0
add esp, 4
push 0x191
lea edi, [ebp - 0x158]
call fcn.004c2ef0
mov esi, dword [ebp - 0x17bc]
mov ebx, dword [ebp - 0x17c0]
add esp, 4
push 0x192
lea edi, [ebp - 0x98]
call fcn.004c2ef0
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x1396]
push ecx
mov word [ebp - 0x1398], ax
call fcn.004e8ba0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x1398]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0x193
lea edi, [ebp - 0x1398]
call fcn.004c2ef0
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x17a6]
push ecx
mov word [ebp - 0x17a8], ax
call fcn.004e8ba0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x17a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x194
lea edi, [ebp - 0x17a8]
call fcn.004c2ef0
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x159e]
push ecx
mov word [ebp - 0x15a0], ax
call fcn.004e8ba0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x15a0]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x195
lea edi, [ebp - 0x15a0]
call fcn.004c2ef0
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0xd7e]
push ecx
mov word [ebp - 0xd80], ax
call fcn.004e8ba0
add esp, 0xc
lea ecx, [ebp - 0xd80]
call fcn.004bc630
push 0x196
lea edi, [ebp - 0xd80]
call fcn.004c2ef0
add esp, 4
push 0x1f5
mov edi, str.00000000_0000_0000_0000_000000000000
call fcn.004c2ef0
mov edx, esi
add esp, 4
push edx
mov ecx, ebx
call fcn.004ca240
add esp, 4
xor eax, eax
push 0x7e
push eax
lea ecx, [ebp - 0x45e]
push ecx
mov word [ebp - 0x460], ax
call fcn.004e8ba0
xor eax, eax
mov dword [ebp - 0x17b6], eax
mov dword [ebp - 0x17b2], eax
mov dword [ebp - 0x17ae], eax
mov word [ebp - 0x17aa], ax
add esp, 0xc
lea eax, [ebp - 0x17b8]
xor edx, edx
push eax
mov word [ebp - 0x17b8], dx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x17ac]
movzx ecx, word [ebp - 0x17ae]
movzx edx, word [ebp - 0x17b0]
movzx edi, word [ebp - 0x17b2]
movzx esi, word [ebp - 0x17b6]
movzx ebx, word [ebp - 0x17b8]
push eax
push eax
push ecx
push edx
push edi
push esi
push ebx
push eax
push eax
push ecx
push edx
push edi
push esi
push ebx
lea ecx, [ebp - 0x460]
push str._04u_02u_02u_02u_02u_02u_02u_04u_02u_02u_02u_02u_02u_02u
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
mov esi, dword [ebp - 0x17bc]
mov ebx, dword [ebp - 0x17c0]
push 0x3e7
lea edi, [ebp - 0x460]
call fcn.004c2ef0
add esp, 0x44
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e4746
mov esp, ebp
pop ebp
ret