Function at 0x426a49
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
mov eax, 0x498a26
call fcn.0048642c
mov eax, 0x1734
call fcn.00486f30
push ebx
push esi
push edi
xor ebx, ebx
mov esi, ecx
push str.System_Info
mov dword [ebp - 0x24], ebx
call fcn.00427be4
mov dword [esi + 0x3c], eax
lea eax, [ebp - 0x20]
push eax
call fcn.00413567
pop ecx
push dword [ebp - 0x20]
mov ecx, esi
mov dword [ebp - 4], ebx
push 0x4c0c7c
call fcn.00426462
lea eax, [ebp - 0x18]
push eax
call fcn.0047dd2a
pop ecx
push dword [ebp - 0x18]
mov ecx, esi
mov byte [ebp - 4], 1
push str.OS_Enum
call fcn.00426462
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.004015f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004015f7
call fcn.0047d6c3
cmp al, bl
mov eax, 0x4c0c64
jne 0x426ad7
mov eax, 0x4c0c5c
push eax
push str.Bitness
mov ecx, esi
call fcn.00426462
mov ecx, 0x80
xor eax, eax
lea edi, [ebp - 0x2d2]
mov word [ebp - 0x2d4], bx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x100
push eax
lea eax, [ebp - 0x2d4]
push eax
call dword [0x4a2018]
lea eax, [ebp - 0x2d4]
mov ecx, esi
push eax
push str.Windows_Account
call fcn.00426462
lea eax, [ebp - 0x10]
push eax
call fcn.0041d0c2
push dword [ebp - 0x10]
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 2
push eax
call fcn.00473d68
add esp, 0xc
mov ecx, dword [ebp - 0x10]
xor eax, eax
mov byte [ebp - 4], 3
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x18]
push str.Desktop
call fcn.00427ba4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.004015f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004015f7
lea eax, [ebp - 0x10]
push eax
call fcn.00412c92
push dword [ebp - 0x10]
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 4
push eax
call fcn.00473d68
add esp, 0xc
mov ecx, dword [ebp - 0x10]
xor eax, eax
mov byte [ebp - 4], 5
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x18]
push str.Current_Mutex
call fcn.00427ba4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.004015f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004015f7
lea eax, [ebp - 0x6c]
push eax
call fcn.004723bd
pop ecx
cmp dword [ebp - 0x64], ebx
mov dword [ebp - 4], 6
setne byte [ebp - 0x19]
cmp byte [ebp - 0x19], bl
je 0x426bfc
mov edi, dword [ebp - 0x68]
cmp edi, ebx
jne 0x426c15
mov edi, 0x4a2d2c
jmp 0x426c15
lea eax, [ebp - 0x18]
push str.Not_Found
push eax
call fcn.00473d68
mov edi, dword [eax]
pop ecx
pop ecx
mov dword [ebp - 0x24], 1
test byte [ebp - 0x24], 1
je 0x426c27
and dword [ebp - 0x24], 0xfffffffe
lea ecx, [ebp - 0x18]
call fcn.004015f7
xor eax, eax
cmp byte [ebp - 0x19], bl
mov ecx, esi
setne al
push eax
push edi
push str.Domain_Name
call fcn.00427ba4
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x6c]
call fcn.0042a4cf
lea eax, [ebp - 0x14]
push 1
push eax
call fcn.0046c839
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 7
push eax
call fcn.0046c820
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 8
push eax
call fcn.0046c807
add esp, 0x10
mov edi, 0x4bb434
mov byte [ebp - 4], 9
push edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00403c8b
push dword [ebp - 0x20]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00403bde
push edi
push eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
push eax
call fcn.00403c8b
push dword [ebp - 0x10]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00403bde
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
call fcn.004015f7
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x12
call fcn.004015f7
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.004015f7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
call fcn.004015f7
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.004015f7
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
call fcn.004015f7
push dword [ebp - 0x18]
mov ecx, esi
push str.Country
call fcn.00426462
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004015f7
push 0xf
xor eax, eax
pop ecx
lea edi, [ebp - 0xcc]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0xd0], 0x40
push eax
call dword [0x4a2288]
push dword [ebp - 0xc0]
lea eax, [ebp - 0x14]
push eax
call fcn.00410501
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x14
push str.Memory
call fcn.00426462
or edi, 0xffffffff
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.0046126a
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x15
push str.Memory_Physical_Available
call fcn.00426462
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.004613a1
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x16
push str.Memory_Installed
call fcn.00426462
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.004614e9
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x17
push str.Memory_Usage
call fcn.00426462
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.004015f7
push 8
xor eax, eax
pop ecx
lea edi, [ebp - 0x8c]
mov dword [ebp - 0x90], ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x90]
push eax
call dword [0x4a228c]
push dword [ebp - 0x7c]
mov ecx, esi
push str.Number_of_Processors
call fcn.00425cf6
push dword [ebp - 0x90]
lea eax, [ebp - 0x14]
push eax
call fcn.00425414
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x18
push str.Processor_Architecture
call fcn.00426462
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004015f7
lea eax, [ebp - 0x18]
push eax
call fcn.0042560a
pop ecx
push dword [ebp - 0x18]
mov ecx, esi
mov dword [ebp - 4], 0x19
push str.Web_Browser
call fcn.00426462
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.004725b0
pop ecx
mov ecx, dword [0x4bb1a0]
mov dword [ebp - 0x10], ecx
cmp eax, ebx
mov dword [ebp - 4], 0x1a
je 0x426eb8
cmp dword [ebp - 0x14], ebx
mov edi, str.enabled
jne 0x426eb4
mov edi, str.disabled
cmp edi, ebx
jmp 0x426ec1
mov edi, str.Not_detected
mov eax, edi
test eax, eax
jne 0x426ec7
xor eax, eax
jmp 0x426ece
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401740
push dword [ebp - 0x10]
mov ecx, esi
push 0xc1
call fcn.00426415
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004015f7
mov eax, dword [0x4bb1a0]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004112b4
pop ecx
pop ecx
lea eax, [ebp - 0x44]
push str._build
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00403c8b
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1d
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00403bde
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x1e
push 0x4bb67c
call fcn.00426462
lea ecx, [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0x1d
call fcn.004015f7
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
mov dword [esi + 0x40], edi
call fcn.0040502d
mov edi, eax
lea eax, [ebp - 0x14]
neg edi
sbb edi, edi
push eax
neg edi
call fcn.0041acc2
pop ecx
mov eax, dword [eax]
push edi
push eax
push str.USES_NAME_EVENT_EXIT_ALL
mov ecx, esi
mov byte [ebp - 4], 0x1f
call fcn.00427ba4
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.004133ff
pop ecx
push dword [eax]
mov byte [ebp - 4], 0x20
mov ecx, esi
push str.Created
call fcn.00426462
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
mov ecx, esi
call fcn.00425b06
mov eax, dword [0x4bb1a0]
mov dword [ebp - 0x10], eax
mov edi, 0xa29
lea ecx, [ebp - 0x10]
push edi
mov byte [ebp - 4], 0x21
call fcn.00401877
test eax, eax
je 0x426fff
mov eax, dword [ebp - 0x10]
mov dword [eax - 8], edi
mov eax, dword [ebp - 0x10]
mov word [eax + 0x1452], bx
mov eax, dword [ebp - 0x10]
push 0xa28
push eax
call fcn.0041728d
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.004018df
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00425513
lea eax, [ebp - 0x28]
push eax
call fcn.00415f4a
mov dword [esp], str.FlgCrt.dll
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x22
push eax
call fcn.00403c8b
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x23
call fcn.004016bd
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x22
call fcn.004015f7
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x21
call fcn.004015f7
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00425513
lea eax, [ebp - 0x14]
push eax
call fcn.0041b114
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call fcn.004016bd
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.004015f7
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00425513
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
lea eax, [ebp - 0x18]
push eax
call fcn.0045dc07
pop ecx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x25
cmp dword [eax - 8], ebx
jne 0x4270d3
push 0x4cb3a8
lea ecx, [ebp - 0x28]
call fcn.00401623
or dword [ebp - 0x24], 2
mov byte [ebp - 4], 0x26
jmp 0x4270ea
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004159a1
or dword [ebp - 0x24], 4
pop ecx
pop ecx
mov dword [ebp - 4], 0x27
mov ecx, dword [eax]
cmp dword [ecx - 0xc], ebx
jl 0x427100
mov dword [ebp - 0x10], ecx
add ecx, 0xfffffff4
push ecx
call dword [0x4a23dc]
jmp 0x427113
mov ecx, dword [0x4bb1a0]
mov dword [ebp - 0x10], ecx
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00403bb7
test byte [ebp - 0x24], 4
mov dword [ebp - 4], 0x2a
je 0x42712c
and dword [ebp - 0x24], 0xfffffffb
lea ecx, [ebp - 0x14]
call fcn.004015f7
test byte [ebp - 0x24], 2
mov dword [ebp - 4], 0x29
je 0x427141
lea ecx, [ebp - 0x28]
call fcn.004015f7
mov ecx, dword [ebp - 0x10]
xor eax, eax
cmp dword [ecx - 8], ebx
sete al
cmp eax, ebx
je 0x427171
mov edi, str.English__Embedded__EN
mov eax, edi
test eax, eax
je 0x427162
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401740
jmp 0x427215
lea eax, [ebp - 0x20]
push eax
call fcn.0045d719
pop ecx
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x2b
cmp dword [eax - 8], ebx
je 0x4271b7
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push 0x4bb434
push eax
call fcn.00403cef
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x2c
push dword [eax - 8]
call fcn.00403d53
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2b
call fcn.004015f7
lea eax, [ebp - 0x24]
push eax
call fcn.0045db98
pop ecx
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x2d
cmp dword [eax - 8], ebx
je 0x4271fd
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2c]
push 0x4bb434
push eax
call fcn.00403cef
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x2e
push dword [eax - 8]
call fcn.00403d53
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2d
call fcn.004015f7
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x2b
call fcn.004015f7
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x29
call fcn.004015f7
push dword [ebp - 0x10]
mov ecx, esi
push str.Language_File
call fcn.00426462
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x25
call fcn.004015f7
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
push 0x4c0a6c
lea ecx, [ebp - 0x4c]
call fcn.00401623
push dword [ebp - 0x4c]
mov ecx, esi
mov byte [ebp - 4], 0x2f
push str.Unicode
call fcn.00426462
call dword [0x4a2290]
mov ecx, dword [0x4bb1a0]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
push eax
lea eax, [ebp - 0x10]
push 0x4bb2d8
push eax
mov byte [ebp - 4], 0x30
call fcn.00403f28
mov ecx, 0x87
xor eax, eax
lea edi, [ebp - 0x2ec]
mov dword [ebp - 0x2f0], ebx
add esp, 0xc
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2f0]
push eax
push ebx
push dword [ebp - 0x14]
call dword [0x4a2294]
cmp eax, ebx
je 0x427334
lea eax, [ebp - 0x2d8]
test eax, eax
je 0x427334
lea eax, [ebp - 0x2d8]
lea ecx, [ebp - 0x20]
push eax
call fcn.00401623
push ebx
lea ecx, [ebp - 0x20]
push dword [ebp - 0x10]
mov byte [ebp - 4], 0x31
call fcn.00403efa
test eax, eax
jl 0x4272fd
mov edi, 0x4cb3a8
mov eax, edi
test eax, eax
je 0x4272f1
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401740
jmp 0x427319
mov edi, 0x4bb294
mov eax, edi
test eax, eax
je 0x42730f
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403d53
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x10]
push eax
push dword [eax - 8]
call fcn.00403d53
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x30
call fcn.004015f7
push dword [ebp - 0x10]
mov ecx, esi
push str.Active_Code_Page
call fcn.00426462
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2f
call fcn.004015f7
lea eax, [ebp - 0x38]
push eax
call fcn.00415d31
pop ecx
push dword [ebp - 0x38]
mov ecx, esi
mov byte [ebp - 4], 0x32
push 0x4c0a2c
call fcn.00426462
push 1
lea eax, [ebp - 0x10]
push dword [ebp - 0x38]
push eax
call fcn.00415a6f
add esp, 0xc
push dword [ebp - 0x10]
mov ecx, esi
mov byte [ebp - 4], 0x33
push str.Folder
call fcn.00426462
push dword [ebp - 0x10]
call fcn.004723ac
movzx edi, al
pop ecx
push edi
push str.Read_privilegies
mov ecx, esi
call fcn.00425a15
xor edx, edx
cmp edi, ebx
setne dl
inc edx
lea ecx, [esi + 0x58]
push edx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
call fcn.00429c2a
push dword [ebp - 0x10]
call fcn.0047239b
movzx edi, al
pop ecx
push edi
push str.Write_privilegies
mov ecx, esi
call fcn.00425a15
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x58]
call fcn.00429c2a
push dword [ebp - 0x10]
call fcn.0047247c
movzx edi, al
pop ecx
push edi
push str.Execute_privilegies
mov ecx, esi
call fcn.00425a15
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x58]
call fcn.00429c2a
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x32
call fcn.004015f7
lea eax, [ebp - 0x48]
push eax
call fcn.0040b830
mov byte [ebp - 4], 0x34
call fcn.0040b846
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.00416732
push dword [ebp - 0x50]
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x35
push eax
call fcn.00473d68
add esp, 0x14
lea eax, [ebp - 0x48]
push 0x4bb294
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x36
call fcn.00403c8b
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x37
push ecx
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00403bde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x39
call fcn.004015f7
push dword [ebp - 0x34]
mov ecx, esi
push str.License
call fcn.00426462
lea eax, [ebp - 0x28]
push eax
call fcn.0041398a
pop ecx
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x3a
call fcn.004016bd
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x39
call fcn.004015f7
push str.RC_Start
lea ecx, [ebp - 0x28]
call fcn.00401623
push dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x3b
push eax
call fcn.00426462
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x39
call fcn.004015f7
lea eax, [ebp - 0x20]
push eax
call fcn.004134c0
push dword [ebp - 0x20]
mov byte [ebp - 4], 0x3c
call fcn.00416790
pop ecx
mov byte [ebp - 0x19], al
pop ecx
mov ecx, dword [ebp - 0x20]
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0xc]
jl 0x427522
push eax
mov dword [ebp - 0x10], ecx
call dword [0x4a23dc]
jmp 0x427533
mov eax, dword [0x4bb1a0]
push ecx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
call fcn.00403bb7
cmp byte [ebp - 0x19], bl
mov byte [ebp - 4], 0x3d
jne 0x427558
mov edi, str.__not_found
mov eax, edi
test eax, eax
je 0x42754e
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403d53
push dword [ebp - 0x10]
mov ecx, esi
push str.License_File
call fcn.00426462
xor ecx, ecx
cmp byte [ebp - 0x19], bl
lea edi, [esi + 0x58]
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
mov ecx, edi
call fcn.00429c2a
lea eax, [ebp - 0x28]
push eax
call fcn.0040f893
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x3e
push str.Current_P
call fcn.00426462
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x3d
call fcn.004015f7
push 2
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
mov ecx, edi
push dword [ebp - 0x2c]
call fcn.00429c2a
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x3c
call fcn.004015f7
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x39
call fcn.004015f7
call fcn.004128ae
mov ecx, dword [0x4bb1a0]
mov dword [ebp - 0x10], ecx
sub eax, ebx
mov byte [ebp - 4], 0x3f
je 0x427609
dec eax
je 0x4275fc
dec eax
jne 0x427621
mov edi, str.disabled
jmp 0x427601
mov edi, str.enabled__HKLM_
mov eax, edi
test eax, eax
jne 0x427610
jmp 0x427617
mov edi, str.enabled__HKCU_
jmp 0x427601
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401740
push dword [ebp - 0x10]
mov ecx, esi
push 0x4c08ec
call fcn.00426462
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x39
call fcn.004015f7
call fcn.0046d0bd
mov dword [ebp - 0x10], eax
call fcn.0046e080
test al, al
mov eax, str.enabled
jne 0x427657
mov eax, str.disabled
push eax
push str.Is_NO_Tray
mov ecx, esi
call fcn.00426462
mov ecx, dword [ebp - 0x10]
call fcn.0046dca0
mov edi, str.Enabled
test eax, eax
mov eax, edi
jne 0x42767c
mov eax, str.Disabled
push eax
push str.Auto_Switch_Keyboard_Layout
mov ecx, esi
call fcn.00426462
mov ecx, dword [ebp - 0x10]
call fcn.0046e04b
test eax, eax
mov eax, edi
jne 0x42769c
mov eax, str.Disabled
push eax
lea ecx, [ebp - 0x18]
call fcn.00401623
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x40
call fcn.0046e04b
test eax, eax
je 0x42771d
lea eax, [ebp - 0x30]
push eax
call fcn.00403913
mov edi, eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x41
mov dword [esp], 0x4bb434
call fcn.00401623
push edi
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
call fcn.00403bde
mov eax, dword [eax]
lea ecx, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x43
push dword [eax - 8]
call fcn.00403d53
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x42
call fcn.004015f7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x41
call fcn.004015f7
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x40
call fcn.004015f7
mov edi, str.Enabled
push dword [ebp - 0x18]
mov ecx, esi
push 0x4c0854
call fcn.00426462
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x78]
and eax, 2
cmp al, 2
je 0x42773e
mov edi, str.Disabled
push edi
push str.Save_selection
mov ecx, esi
call fcn.00426462
lea eax, [ebp - 0x3c]
push eax
call fcn.0045a6da
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0045a1f5
add esp, 0xc
mov eax, dword [eax + 4]
mov byte [ebp - 4], 0x44
cmp eax, ebx
jne 0x427777
mov eax, 0x4a2d2c
push eax
lea ecx, [ebp - 0x24]
call fcn.00401623
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x46
call fcn.0042a4cf
mov ecx, 0x513
xor eax, eax
lea edi, [ebp - 0x173e]
mov word [ebp - 0x1740], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
lea eax, [ebp - 0x1740]
push 0xa28
push eax
push ebx
push dword [ebp - 0x3c]
push ebx
push 0x1200
call dword [0x4a2330]
lea eax, [ebp - 0x1740]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00473d68
mov edi, eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x47
push eax
call fcn.00473a36
add esp, 0xc
push edi
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x48
push eax
call fcn.00403bde
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x49
call fcn.00403dcf
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x48
call fcn.004015f7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x47
call fcn.004015f7
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x46
call fcn.004015f7
push dword [ebp - 0x24]
mov ecx, esi
push str.Switch_keyboard_method
call fcn.00426462
cmp dword [ebp - 0x20], ebx
je 0x427843
cmp dword [ebp - 0x20], 3
je 0x427843
push 2
jmp 0x427845
push 1
push eax
lea ecx, [esi + 0x58]
call fcn.0042959b
lea eax, [ebp - 0x28]
push eax
call fcn.004117c4
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x4a
push str.Translation_Method
call fcn.00426462
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x46
call fcn.004015f7
mov ecx, esi
call fcn.004259a6
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x40
call fcn.004015f7
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x39
call fcn.004015f7
mov ecx, dword [ebp - 0x10]
call fcn.0046e867
test eax, eax
mov eax, str.Enabled
jne 0x4278ab
mov eax, str.Disabled
push eax
push str.Auto_Check_For_Updates
mov ecx, esi
call fcn.00426462
mov ecx, dword [ebp - 0x10]
call fcn.0046e86b
push eax
push str.Check_For_Updates_Every_Days
mov ecx, esi
call fcn.00425cf6
lea eax, [ebp - 0x58]
push eax
call fcn.0041138c
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x4b
push str.Last_Check
call fcn.00426462
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x39
call fcn.004015f7
mov ecx, esi
call fcn.0042501f
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x36
call fcn.004015f7
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x35
call fcn.004015f7
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x34
call fcn.004015f7
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x32
call fcn.004015f7
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x2f
call fcn.004015f7
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1b
call fcn.004015f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.004015f7
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret