Function at 0x431240
Capabilities:
Check for time delay via gettickcount
Check os version
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4c95c7
mov eax, dword fs:[0]
push eax
sub esp, 0x31c
mov eax, dword [0x54e864]
xor eax, esp
mov dword [esp + 0x318], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x54e864]
xor eax, esp
push eax
lea eax, [esp + 0x330]
mov dword fs:[0], eax
mov eax, dword [sym.imp.MSVCR100.dll___argc]
mov dword [esp + 0x24], 0x6174614e
mov dword [esp + 0x28], 0x2065696c
mov dword [esp + 0x2c], 0x74726f50
mov dword [esp + 0x30], 0x206e616d
mov dword [esp + 0x34], 0x48207349
mov dword [esp + 0x38], 0x301746f
xor ebx, ebx
cmp dword [eax], 2
mov esi, ecx
jne 0x431640
mov ecx, dword [sym.imp.MSVCR100.dll___argv]
mov edx, dword [ecx]
mov edi, dword [edx + 4]
mov edx, str._Info
mov ecx, edi
nop
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4312f0
cmp al, bl
je 0x4312ec
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4312f0
add ecx, 2
add edx, 2
cmp al, bl
jne 0x4312d0
xor eax, eax
jmp 0x4312f5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x431391
mov edx, str.Info
mov ecx, edi
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x431324
cmp al, bl
je 0x431320
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x431324
add ecx, 2
add edx, 2
cmp al, bl
jne 0x431304
xor eax, eax
jmp 0x431329
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x431391
mov edx, str._info
mov ecx, edi
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x431354
cmp al, bl
je 0x431350
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x431354
add ecx, 2
add edx, 2
cmp al, bl
jne 0x431334
xor eax, eax
jmp 0x431359
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x431391
mov ecx, 0x4dc580
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x431384
cmp dl, bl
je 0x431380
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x431384
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x431364
xor eax, eax
jmp 0x431389
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x431640
call fcn.00449b90
mov ebp, dword [sym.imp.MSVCR100.dll_sprintf]
push str.21_01_2016
push 0x4dc594
push 0x4dc5a0
push 0x4dc5a4
lea eax, [esp + 0x148]
push str.Version:__s._s_nBase_de_datos:__s_nFecha:__s_n
push eax
call ebp
lea ecx, [esp + 0x54]
push str.Calle_n
push ecx
call ebp
lea eax, [esp + 0x5c]
add esp, 0x20
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4313d4
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x4313e5
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0044a410
test al, al
je 0x43142c
lea edx, [esp + 0xd4]
push edx
call fcn.0044a510
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x44]
push str.Log_a_disco_activado.Path:__s_n
push ecx
call ebp
add esp, 0x10
jmp 0x43143b
lea edx, [esp + 0x3c]
push str.Log_a_disco_desactivado_n
push edx
call ebp
add esp, 8
lea eax, [esp + 0x3c]
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x431441
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x431452
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0044a420
test al, al
je 0x431496
call fcn.0044a3f0
movsx eax, al
dec eax
je 0x43148a
push str.Log_a_base_de_datos_local_activado_n
lea eax, [esp + 0x40]
push eax
jmp 0x4314a0
push str.Log_a_base_de_datos_central_activado_n
lea ecx, [esp + 0x40]
push ecx
jmp 0x4314a0
push str.Log_a_base_de_datos_desactivado_n
lea edx, [esp + 0x40]
push edx
call ebp
lea eax, [esp + 0x44]
add esp, 8
mov edx, eax
jmp 0x4314b0
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4314b0
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x4314c1
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0044a460
test al, al
je 0x4314ee
push str.Log_de_timers_base_de_datos_local_activado_n
lea eax, [esp + 0x40]
push eax
jmp 0x4314f8
push str.Log_de_timers_base_de_datos_local_desactivado_n
lea ecx, [esp + 0x40]
push ecx
call ebp
lea eax, [esp + 0x44]
add esp, 8
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x431503
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x431514
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0044a470
test al, al
je 0x431541
push str.Log_de_timers_base_de_datos_central_activado_n
lea edx, [esp + 0x40]
push edx
jmp 0x43154b
push str.Log_de_timers_base_de_datos_central_desactivado_n
lea eax, [esp + 0x40]
push eax
call ebp
lea eax, [esp + 0x44]
add esp, 8
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x431556
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x431567
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0044a490
test al, al
je 0x431594
push str.Log_de_timers_base_de_datos_Alesis_activado_n
lea ecx, [esp + 0x40]
push ecx
jmp 0x43159e
push str.Log_de_timers_base_de_datos_Alesis_desactivado_n
lea edx, [esp + 0x40]
push edx
call ebp
lea eax, [esp + 0x44]
add esp, 8
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4315b0
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x4315c1
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0044a480
test al, al
je 0x4315ee
push str.Log_de_rendimiento_activado_n
lea eax, [esp + 0x40]
push eax
jmp 0x4315f8
push str.Log_de_rendimiento_desactivado_n
lea ecx, [esp + 0x40]
push ecx
call ebp
lea eax, [esp + 0x44]
add esp, 8
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x431603
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x431614
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
push ebx
mov ecx, eax
push ebx
lea edx, [esp + 0x140]
and ecx, 3
push edx
rep movsb byte es:[edi], byte [esi]
call sub.mfc100.dll_Ordinal_1982
jmp 0x431bf2
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ebp, eax
lea ebx, [ebx]
call edi
sub eax, ebp
cmp eax, 0x7d0
jb 0x431650
call fcn.0042e840
test al, al
jne 0x431675
push ebx
push ebx
push str.Se_ha_detectado_otro_Bos_Integrator_en_ejecuci
call sub.mfc100.dll_Ordinal_1982
jmp 0x431bf2
test byte [0x55bb64], 1
jne 0x4316c7
or dword [0x55bb64], 1
mov eax, dword [0x5511a8]
cmp dword [eax], ebx
jne 0x43169f
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x5511a8]
mov dword [ecx], ebx
mov edx, dword [0x5511a4]
push str.CrashReport.txt
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x5511a0]
mov dword [eax], 1
mov dword [esp + 0x338], 0xffffffff
test byte [0x55bb64], 2
jne 0x4316e3
mov ecx, dword [0x5511b0]
or dword [0x55bb64], 2
mov dword [ecx], 0x434530
call fcn.00449b90
lea edx, [esp + 0x24]
push edx
lea eax, [esi + 0x1e8]
push eax
mov dword [esi + 0xa7f8], ebx
call fcn.00401fd0
lea ecx, [esp + 0x20]
push ecx
call dword [sym.imp.MSVCR100.dll__ftime32]
push ebx
call dword [sym.imp.MSVCR100.dll__time32]
movzx edx, word [esp + 0x2c]
add edx, eax
push edx
call fcn.00469460
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
lea eax, [esi + 0x128]
push 0x4dc479
push eax
mov byte [esi + 0xa754], 1
call edi
xor eax, eax
mov dword [esi + 0x151], eax
mov dword [esi + 0x155], eax
mov byte [esi + 0x159], al
mov dword [esi + 0x15a], eax
mov dword [esi + 0x15e], eax
mov byte [esi + 0x162], al
add esp, 0x1c
lea ecx, [esi + 0xa7f0]
push ecx
mov word [esi + 0x16c], bx
mov dword [esi + 0xa758], ebx
mov byte [esi + 0xa75c], 0xff
mov word [esi + 0xa768], bx
mov byte [esi + 0xa7a5], bl
mov byte [esi + 0xa7e1], bl
mov dword [esi + 0xa7e2], ebx
mov dword [esi + 0xa7e6], ebx
mov dword [esi + 0xa760], ebx
mov dword [esi + 0xa764], ebx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea edx, [esp + 0xa0]
push 0x4dc858
push edx
call edi
mov eax, dword [sym.imp.MSVCR100.dll___argc]
mov ebp, dword [eax]
add esp, 8
cmp ebp, 2
jl 0x431a40
mov ecx, dword [sym.imp.MSVCR100.dll___argv]
mov eax, dword [ecx]
mov edi, dword [eax + 4]
mov dword [esp + 0x14], eax
mov ecx, str._Shortcut
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x431806
cmp dl, bl
je 0x431802
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x431806
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x4317e6
xor eax, eax
jmp 0x43180b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x431a27
mov ecx, str.Shortcut
mov eax, edi
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x431840
cmp dl, bl
je 0x43183c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x431840
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x431820
xor eax, eax
jmp 0x431845
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x431a27
mov ecx, str._ScheduledTask
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x431874
cmp dl, bl
je 0x431870
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x431874
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x431854
xor eax, eax
jmp 0x431879
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x431a0e
mov ecx, str.ScheduledTask
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4318a8
cmp dl, bl
je 0x4318a4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4318a8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x431888
xor eax, eax
jmp 0x4318ad
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x431a0e
mov ecx, str._StatisticalGames
mov eax, edi
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4318e0
cmp dl, bl
je 0x4318dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4318e0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x4318c0
xor eax, eax
jmp 0x4318e5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4319dd
mov ecx, str.StatisticalGames
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x431914
cmp dl, bl
je 0x431910
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x431914
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x4318f4
xor eax, eax
jmp 0x431919
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4319dd
mov ecx, str._StatisticalRandom
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x431948
cmp dl, bl
je 0x431944
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x431948
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x431928
xor eax, eax
jmp 0x43194d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4319a8
mov ecx, str.StatisticalRandom
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x431978
cmp dl, bl
je 0x431974
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x431978
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x431958
xor eax, eax
jmp 0x43197d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4319a8
push edi
push ebp
push 0x4dca00
push 0x4dca04
lea edx, [esp + 0xb0]
push edx
push str.Iniciando__s_version__s._s_con_parametros_desconocidos.__d._s
push ebx
call fcn.0042a000
add esp, 0x1c
jmp 0x431a60
cmp ebp, 5
jge 0x4319be
push ebx
push ebx
push str.Missing_parameters._Bos_Integrator_StatisticalRandom_Filename_NumRandoms_Range
call sub.mfc100.dll_Ordinal_1982
jmp 0x431bf2
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 8]
push ecx
push edx
push eax
push 2
call fcn.0042d6a0
add esp, 0x10
jmp 0x431bf2
push ebx
cmp ebp, 4
jge 0x4319f3
push ebx
push str.Missing_parameters._Bos_Integrator_StatisticalGames_Filename_NumGames
call sub.mfc100.dll_Ordinal_1982
jmp 0x431bf2
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
push ecx
push edx
push 1
call fcn.0042d6a0
add esp, 0x10
jmp 0x431bf2
push 0x4dc8d4
push 0x4dc8d8
lea eax, [esp + 0xa8]
push eax
push str.Iniciando__s_version__s._s_desde_una_tarea_programada.
jmp 0x431a57
push 0x4dc874
push 0x4dc878
lea ecx, [esp + 0xa8]
push ecx
push str.Iniciando__s_version__s._s_desde_un_acceso_directo.
jmp 0x431a57
push 0x4dca4c
push 0x4dca50
lea edx, [esp + 0xa8]
push edx
push str.Iniciando__s_version__s._s
push ebx
call fcn.0042a000
add esp, 0x14
push str.Local_AppWizard_Generated_Applications
mov ecx, esi
call sub.mfc100.dll_Ordinal_12672
push 0x10474
call sub.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x338], 1
cmp eax, ebx
je 0x431a95
mov ecx, eax
call fcn.004695c0
jmp 0x431a97
xor eax, eax
or edi, 0xffffffff
push 0x4c
mov dword [esp + 0x33c], edi
mov dword [esi + 0xa668], eax
call sub.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x338], 2
cmp eax, ebx
je 0x431acd
mov ecx, eax
call fcn.00457420
jmp 0x431acf
xor eax, eax
push 0x34
mov dword [esp + 0x33c], edi
mov dword [esi + 0xa6fc], eax
call sub.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x338], 3
cmp eax, ebx
je 0x431b02
mov ecx, eax
call fcn.00458c30
jmp 0x431b04
xor eax, eax
mov dword [esp + 0x338], edi
mov dword [esi + 0xa728], eax
mov byte [esi + 0x16e], bl
call fcn.0044a7e0
test al, al
je 0x431b27
mov ecx, esi
call fcn.00430450
call fcn.00430f90
test al, al
jne 0x431b3a
call fcn.00430790
call fcn.00430650
mov dword [esi + 0x20], 0x551210
mov eax, dword [0x551230]
push eax
mov dword [0x551450], eax
call fcn.0046f040
mov eax, dword [0x551450]
push eax
call fcn.0046e170
mov ecx, dword [0x551450]
push ecx
call fcn.0046f120
mov edx, dword [0x551450]
push edx
call fcn.0046f190
mov eax, dword [0x551450]
push eax
call fcn.0046e750
mov ecx, dword [0x551450]
push ecx
call fcn.0046e3f0
mov edx, dword [0x551450]
push edx
call fcn.0046ef30
mov eax, dword [0x551450]
push eax
call fcn.0046e5b0
mov ecx, dword [0x551450]
push ecx
call fcn.0046edb0
mov edx, dword [0x551450]
push edx
call fcn.0046f310
push 4
push 4
push 4
push edi
push 4
push 4
push 4
push 4
push 2
push 0x10100
call fcn.00471c30
add esp, 0x50
test eax, eax
je 0x431be8
push ebx
push ebx
push str.Libreria_de_Compresion_no_Inicializada____
call sub.mfc100.dll_Ordinal_1982
mov ecx, 0x551210
call sub.mfc100.dll_Ordinal_3620
xor eax, eax
mov ecx, dword [esp + 0x330]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x318]
xor ecx, esp
call fcn.004c6212
add esp, 0x328
ret