Function at 0x4275ce
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
mov eax, 0x49bc06
call fcn.0048945c
mov eax, 0x1740
call fcn.00489f60
push ebx
push esi
push edi
xor ebx, ebx
mov esi, ecx
push str.System_Info
mov dword [ebp - 0x24], ebx
call fcn.00428867
mov dword [esi + 0x3c], eax
lea eax, [ebp - 0x20]
push eax
call fcn.004137ac
pop ecx
push dword [ebp - 0x20]
mov ecx, esi
mov dword [ebp - 4], ebx
push 0x4c3d44
call fcn.00426fe7
lea eax, [ebp - 0x18]
push eax
call fcn.00480f02
pop ecx
push dword [ebp - 0x18]
mov ecx, esi
mov byte [ebp - 4], 1
push str.OS_Enum
call fcn.00426fe7
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.00401605
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00401605
call fcn.004808a3
cmp al, bl
mov eax, 0x4c3d2c
jne 0x42765c
mov eax, 0x4c3d24
push eax
push str.Bitness
mov ecx, esi
call fcn.00426fe7
mov ecx, 0x80
xor eax, eax
lea edi, [ebp - 0x2de]
mov word [ebp - 0x2e0], bx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0x100
push eax
lea eax, [ebp - 0x2e0]
push eax
call dword [0x4a5018]
lea eax, [ebp - 0x2e0]
mov ecx, esi
push eax
push str.Windows_Account
call fcn.00426fe7
lea eax, [ebp - 0x18]
push eax
call fcn.0041db7f
push dword [ebp - 0x18]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 2
push eax
call fcn.00476cae
add esp, 0xc
mov ecx, dword [ebp - 0x18]
xor eax, eax
mov byte [ebp - 4], 3
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x20]
push str.Desktop
call fcn.00428827
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.00401605
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401605
lea eax, [ebp - 0x18]
push eax
call fcn.00412e80
push dword [ebp - 0x18]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 4
push eax
call fcn.00476cae
add esp, 0xc
mov ecx, dword [ebp - 0x18]
xor eax, eax
mov byte [ebp - 4], 5
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x20]
push str.Current_Mutex
call fcn.00428827
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00401605
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401605
lea eax, [ebp - 0x78]
push eax
call fcn.00475303
pop ecx
cmp dword [ebp - 0x70], ebx
mov dword [ebp - 4], 6
setne byte [ebp - 0x19]
cmp byte [ebp - 0x19], bl
je 0x427781
mov edi, dword [ebp - 0x74]
cmp edi, ebx
jne 0x42779a
mov edi, 0x4a5d2c
jmp 0x42779a
lea eax, [ebp - 0x34]
push str.Not_Found
push eax
call fcn.00476cae
mov edi, dword [eax]
pop ecx
pop ecx
mov dword [ebp - 0x24], 1
test byte [ebp - 0x24], 1
je 0x4277ac
and dword [ebp - 0x24], 0xfffffffe
lea ecx, [ebp - 0x34]
call fcn.00401605
xor eax, eax
cmp byte [ebp - 0x19], bl
mov ecx, esi
setne al
push eax
push edi
push str.Domain_Name
call fcn.00428827
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x78]
call fcn.0042b365
lea eax, [ebp - 0x14]
push 1
push eax
call fcn.0046f51a
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 7
push eax
call fcn.0046f501
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 8
push eax
call fcn.0046f4e8
add esp, 0x10
mov edi, 0x4be468
mov byte [ebp - 4], 9
push edi
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00403cf2
push dword [ebp - 0x44]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00403c45
push edi
push eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0xb
push eax
call fcn.00403cf2
push dword [ebp - 0x18]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00403c45
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x13
call fcn.00401605
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x12
call fcn.00401605
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x11
call fcn.00401605
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x10
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00401605
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
call fcn.00401605
push dword [ebp - 0x20]
mov ecx, esi
push str.Country
call fcn.00426fe7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00401605
push 0xf
xor eax, eax
pop ecx
lea edi, [ebp - 0xd8]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xdc], 0x40
push eax
call dword [0x4a5288]
push dword [ebp - 0xcc]
lea eax, [ebp - 0x14]
push eax
call fcn.004106ef
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x14
push str.Memory
call fcn.00426fe7
or edi, 0xffffffff
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.00463032
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x15
push str.Memory_Physical_Available
call fcn.00426fe7
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.00463169
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x16
push str.Memory_Installed
call fcn.00426fe7
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.004632b1
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x17
push str.Memory_Usage
call fcn.00426fe7
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401605
push 8
xor eax, eax
pop ecx
lea edi, [ebp - 0x98]
mov dword [ebp - 0x9c], ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x9c]
push eax
call dword [0x4a528c]
push dword [ebp - 0x88]
mov ecx, esi
push str.Number_of_Processors
call fcn.0042687b
push dword [ebp - 0x9c]
lea eax, [ebp - 0x14]
push eax
call fcn.00425f99
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x18
push str.Processor_Architecture
call fcn.00426fe7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00401605
lea eax, [ebp - 0x20]
push eax
call fcn.0042618f
pop ecx
push dword [ebp - 0x20]
mov ecx, esi
mov dword [ebp - 4], 0x19
push str.Web_Browser
call fcn.00426fe7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.004754f6
pop ecx
mov ecx, dword [0x4be1a0]
mov dword [ebp - 0x18], ecx
cmp eax, ebx
mov dword [ebp - 4], 0x1a
je 0x427a40
cmp dword [ebp - 0x14], ebx
mov edi, str.enabled
jne 0x427a3c
mov edi, str.disabled
cmp edi, ebx
jmp 0x427a49
mov edi, str.Not_detected
mov eax, edi
test eax, eax
jne 0x427a4f
xor eax, eax
jmp 0x427a56
push edi
call dword [0x4a53e0]
push edi
push eax
lea ecx, [ebp - 0x18]
call fcn.0040174e
push dword [ebp - 0x18]
mov ecx, esi
push 0xc1
call fcn.00426f9a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401605
mov eax, dword [0x4be1a0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004114a2
pop ecx
pop ecx
lea eax, [ebp - 0x58]
push str._build
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00403cf2
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1d
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00403c45
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x1e
push 0x4be6b0
call fcn.00426fe7
lea ecx, [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0x1d
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call fcn.00401605
mov dword [esi + 0x40], edi
call fcn.004811cc
mov edi, eax
lea eax, [ebp - 0x14]
neg edi
sbb edi, edi
push eax
neg edi
call fcn.0041af2c
pop ecx
mov eax, dword [eax]
push edi
push eax
push str.USES_NAME_EVENT_EXIT_ALL
mov ecx, esi
mov byte [ebp - 4], 0x1f
call fcn.00428827
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call fcn.00401605
lea eax, [ebp - 0x14]
push eax
call fcn.00413644
pop ecx
push dword [eax]
mov byte [ebp - 4], 0x20
mov ecx, esi
push str.Created
call fcn.00426fe7
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call fcn.00401605
mov ecx, esi
call fcn.0042668b
mov eax, dword [0x4be1a0]
mov dword [ebp - 0x10], eax
mov edi, 0xa29
lea ecx, [ebp - 0x10]
push edi
mov byte [ebp - 4], 0x21
call fcn.00401885
test eax, eax
je 0x427b87
mov eax, dword [ebp - 0x10]
mov dword [eax - 8], edi
mov eax, dword [ebp - 0x10]
mov word [eax + 0x1452], bx
mov eax, dword [ebp - 0x10]
push 0xa28
push eax
call fcn.004174ee
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.004018ed
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00426098
lea eax, [ebp - 0x28]
push eax
call fcn.004161ab
mov dword [esp], str.FlgCrt.dll
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x22
push eax
call fcn.00403cf2
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x23
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x22
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x21
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00426098
lea eax, [ebp - 0x14]
push eax
call fcn.0041b37e
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00426098
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
call fcn.00401605
lea eax, [ebp - 0x20]
push eax
call fcn.0045f91e
pop ecx
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x25
cmp dword [eax - 8], ebx
jne 0x427c5b
push 0x4ce788
lea ecx, [ebp - 0x28]
call fcn.00401631
or dword [ebp - 0x24], 2
mov byte [ebp - 4], 0x26
jmp 0x427c72
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00415c02
or dword [ebp - 0x24], 4
pop ecx
pop ecx
mov dword [ebp - 4], 0x27
mov ecx, dword [eax]
cmp dword [ecx - 0xc], ebx
jl 0x427c88
mov dword [ebp - 0x10], ecx
add ecx, 0xfffffff4
push ecx
call dword [0x4a53dc]
jmp 0x427c9b
mov ecx, dword [0x4be1a0]
mov dword [ebp - 0x10], ecx
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00403c1e
test byte [ebp - 0x24], 4
mov dword [ebp - 4], 0x2a
je 0x427cb4
and dword [ebp - 0x24], 0xfffffffb
lea ecx, [ebp - 0x14]
call fcn.00401605
test byte [ebp - 0x24], 2
mov dword [ebp - 4], 0x29
je 0x427cc9
lea ecx, [ebp - 0x28]
call fcn.00401605
mov ecx, dword [ebp - 0x10]
xor eax, eax
cmp dword [ecx - 8], ebx
sete al
cmp eax, ebx
je 0x427cf9
mov edi, str.English__Embedded__EN
mov eax, edi
test eax, eax
je 0x427cea
push edi
call dword [0x4a53e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.0040174e
jmp 0x427d9d
lea eax, [ebp - 0x24]
push eax
call fcn.0045f430
pop ecx
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x2b
cmp dword [eax - 8], ebx
je 0x427d3f
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x30]
push 0x4be468
push eax
call fcn.00403d56
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x2c
push dword [eax - 8]
call fcn.00403dba
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2b
call fcn.00401605
lea eax, [ebp - 0x18]
push eax
call fcn.0045f8af
pop ecx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x2d
cmp dword [eax - 8], ebx
je 0x427d85
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x30]
push 0x4be468
push eax
call fcn.00403d56
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x2e
push dword [eax - 8]
call fcn.00403dba
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2d
call fcn.00401605
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x2b
call fcn.00401605
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x29
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
push str.Language_File
call fcn.00426fe7
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x25
call fcn.00401605
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1c
call fcn.00401605
push 0x4c3b34
lea ecx, [ebp - 0x4c]
call fcn.00401631
push dword [ebp - 0x4c]
mov ecx, esi
mov byte [ebp - 4], 0x2f
push str.Unicode
call fcn.00426fe7
call dword [0x4a5290]
mov ecx, dword [0x4be1a0]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
push eax
lea eax, [ebp - 0x10]
push 0x4be30c
push eax
mov byte [ebp - 4], 0x30
call fcn.00403f8f
mov ecx, 0x87
xor eax, eax
lea edi, [ebp - 0x2f8]
mov dword [ebp - 0x2fc], ebx
add esp, 0xc
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2fc]
push eax
push ebx
push dword [ebp - 0x14]
call dword [0x4a5294]
cmp eax, ebx
je 0x427ebc
lea eax, [ebp - 0x2e4]
test eax, eax
je 0x427ebc
lea eax, [ebp - 0x2e4]
lea ecx, [ebp - 0x18]
push eax
call fcn.00401631
push ebx
lea ecx, [ebp - 0x18]
push dword [ebp - 0x10]
mov byte [ebp - 4], 0x31
call fcn.00403f61
test eax, eax
jl 0x427e85
mov edi, 0x4ce788
mov eax, edi
test eax, eax
je 0x427e79
push edi
call dword [0x4a53e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.0040174e
jmp 0x427ea1
mov edi, 0x4be2c8
mov eax, edi
test eax, eax
je 0x427e97
push edi
call dword [0x4a53e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403dba
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x10]
push eax
push dword [eax - 8]
call fcn.00403dba
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x30
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
push str.Active_Code_Page
call fcn.00426fe7
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2f
call fcn.00401605
lea eax, [ebp - 0x48]
push eax
call fcn.00415f92
pop ecx
push dword [ebp - 0x48]
mov ecx, esi
mov byte [ebp - 4], 0x32
push 0x4c3af4
call fcn.00426fe7
push 1
lea eax, [ebp - 0x10]
push dword [ebp - 0x48]
push eax
call fcn.00415cd0
add esp, 0xc
push dword [ebp - 0x10]
mov ecx, esi
mov byte [ebp - 4], 0x33
push str.Folder
call fcn.00426fe7
push dword [ebp - 0x10]
call fcn.004752f2
movzx edi, al
pop ecx
push edi
push str.Read_privilegies
mov ecx, esi
call fcn.0042659a
xor edx, edx
cmp edi, ebx
setne dl
inc edx
lea ecx, [esi + 0x5c]
push edx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
call fcn.0042aacb
push dword [ebp - 0x10]
call fcn.004752e1
movzx edi, al
pop ecx
push edi
push str.Write_privilegies
mov ecx, esi
call fcn.0042659a
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x5c]
call fcn.0042aacb
push dword [ebp - 0x10]
call fcn.004753c2
movzx edi, al
pop ecx
push edi
push str.Execute_privilegies
mov ecx, esi
call fcn.0042659a
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x5c]
call fcn.0042aacb
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x32
call fcn.00401605
call fcn.00412a9c
mov ecx, dword [0x4be1a0]
mov dword [ebp - 0x10], ecx
sub eax, ebx
mov byte [ebp - 4], 0x34
je 0x427fea
dec eax
je 0x427fdd
dec eax
jne 0x428002
mov edi, str.disabled
jmp 0x427fe2
mov edi, str.enabled__HKLM_
mov eax, edi
test eax, eax
jne 0x427ff1
jmp 0x427ff8
mov edi, str.enabled__HKCU_
jmp 0x427fe2
push edi
call dword [0x4a53e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.0040174e
push dword [ebp - 0x10]
mov ecx, esi
push 0x4c3a0c
call fcn.00426fe7
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x32
call fcn.00401605
call fcn.0046fda4
mov dword [ebp - 0x10], eax
call fcn.00470d5f
test al, al
mov eax, str.enabled
jne 0x428038
mov eax, str.disabled
push eax
push str.Is_NO_Tray
mov ecx, esi
call fcn.00426fe7
mov ecx, dword [ebp - 0x10]
call fcn.0047097c
test eax, eax
mov edi, str.Disabled
mov eax, str.Enabled
jne 0x42805d
mov eax, edi
push eax
push str.Auto_Switch_Keyboard_Layout
mov ecx, esi
call fcn.00426fe7
mov ecx, dword [ebp - 0x10]
call fcn.00470d27
test eax, eax
mov eax, str.Enabled
jne 0x42807d
mov eax, edi
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401631
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x35
call fcn.00470d27
test eax, eax
je 0x4280fe
lea eax, [ebp - 0x30]
push eax
call fcn.00403928
mov edi, eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x36
mov dword [esp], 0x4be468
call fcn.00401631
push edi
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x37
push eax
call fcn.00403c45
mov eax, dword [eax]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x38
push dword [eax - 8]
call fcn.00403dba
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x37
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x36
call fcn.00401605
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x35
call fcn.00401605
mov edi, str.Disabled
push dword [ebp - 0x2c]
mov ecx, esi
push 0x4c3974
call fcn.00426fe7
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x80]
and eax, 2
cmp al, 2
jne 0x428122
mov edi, str.Enabled
push edi
push str.Save_selection
mov ecx, esi
call fcn.00426fe7
lea eax, [ebp - 0x3c]
push eax
call fcn.0045c2fa
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0045be15
add esp, 0xc
mov eax, dword [eax + 4]
mov byte [ebp - 4], 0x39
cmp eax, ebx
jne 0x42815b
mov eax, 0x4a5d2c
push eax
lea ecx, [ebp - 0x24]
call fcn.00401631
push 1
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3b
call fcn.0042b365
mov ecx, 0x513
xor eax, eax
lea edi, [ebp - 0x174a]
mov word [ebp - 0x174c], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
lea eax, [ebp - 0x174c]
push 0xa28
push eax
push ebx
push dword [ebp - 0x3c]
push ebx
push 0x1200
call dword [0x4a5330]
lea eax, [ebp - 0x174c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00476cae
mov edi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
push eax
call fcn.0047697c
add esp, 0xc
push edi
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x3d
push eax
call fcn.00403c45
mov eax, dword [eax]
lea ecx, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x3e
push dword [eax - 8]
call fcn.00403dba
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3d
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
call fcn.00401605
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3b
call fcn.00401605
push dword [ebp - 0x24]
mov ecx, esi
push str.Switch_keyboard_method
call fcn.00426fe7
cmp dword [ebp - 0x18], ebx
je 0x42822c
cmp dword [ebp - 0x18], 3
je 0x42822c
push 2
jmp 0x42822e
push 1
push ebx
push ebx
push ebx
push ebx
push 4
lea edi, [esi + 0x5c]
push ebx
push eax
mov ecx, edi
call fcn.0042aacb
lea eax, [ebp - 0x14]
push eax
call fcn.004119b2
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x3f
push str.Translation_Method
call fcn.00426fe7
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3b
call fcn.00401605
mov ecx, esi
call fcn.0042652b
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x35
call fcn.00401605
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x32
call fcn.00401605
mov ecx, dword [ebp - 0x10]
call fcn.00471554
test eax, eax
mov eax, str.Enabled
jne 0x42829d
mov eax, str.Disabled
push eax
push str.Auto_Check_For_Updates
mov ecx, esi
call fcn.00426fe7
mov ecx, dword [ebp - 0x10]
call fcn.00471558
push eax
push str.Check_For_Updates_Every_Days
mov ecx, esi
call fcn.0042687b
lea eax, [ebp - 0x14]
push eax
call fcn.0041157a
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x40
push str.Last_Check
call fcn.00426fe7
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x32
call fcn.00401605
mov ecx, esi
call fcn.00425ba4
lea eax, [ebp - 0x34]
push 0x35
push eax
call fcn.00460425
pop ecx
pop ecx
push dword [ebp - 0x34]
mov ecx, esi
mov byte [ebp - 4], 0x41
call fcn.00428867
mov dword [esi + 0x48], eax
lea eax, [ebp - 0x50]
push eax
call fcn.0040b8e8
mov byte [ebp - 4], 0x42
call fcn.0040b8fe
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00416993
push dword [ebp - 0x5c]
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x43
push eax
call fcn.00476cae
add esp, 0x14
mov eax, dword [0x4be1a0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
push 0x4be2c8
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x45
call fcn.00403cf2
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x46
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00403c45
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x47
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x46
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x45
call fcn.00401605
lea eax, [ebp - 0x20]
push 0xe6
push eax
call fcn.00460425
push dword [ebp - 0x20]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x48
push eax
call fcn.00476cae
add esp, 0x10
push eax
lea eax, [ebp - 0x14]
push 0x4be468
push eax
mov byte [ebp - 4], 0x49
call fcn.00403d56
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4a
call fcn.00403e36
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x49
call fcn.00401605
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x48
call fcn.00401605
push dword [ebp - 0x18]
mov ecx, esi
push str.Licensed_For
call fcn.00426fe7
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x45
call fcn.00401605
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x44
call fcn.00401605
mov eax, dword [0x4be1a0]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
push eax
call fcn.0040c956
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4c
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
call fcn.00401605
push dword [ebp - 0x2c]
mov ecx, esi
push str.Updates
call fcn.00426fe7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x44
call fcn.00401605
mov eax, dword [0x4be1a0]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x4d
push eax
call fcn.0040cb27
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x4e
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4d
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
push str.Left_days
call fcn.00426fe7
lea eax, [ebp - 0x14]
push eax
call fcn.00413bcf
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x4f
call fcn.004016cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4d
call fcn.00401605
push dword [ebp - 0x10]
mov ecx, esi
push str.Launched_Count_Started
call fcn.00426fe7
lea eax, [ebp - 0x40]
push eax
call fcn.00413705
push dword [ebp - 0x40]
mov byte [ebp - 4], 0x50
call fcn.004169f1
pop ecx
mov byte [ebp - 0x19], al
pop ecx
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401978
cmp byte [ebp - 0x19], bl
mov byte [ebp - 4], 0x51
jne 0x428506
push str.__not_found
lea ecx, [ebp - 0x2c]
call fcn.0040d38f
push dword [ebp - 0x2c]
mov ecx, esi
push str.License_File
call fcn.00426fe7
xor ecx, ecx
cmp byte [ebp - 0x19], bl
setne cl
inc ecx
push ecx
push eax
mov ecx, edi
call fcn.0042a3e5
lea eax, [ebp - 0x60]
push eax
call fcn.0040fa32
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x52
push str.Current_P
call fcn.00426fe7
lea ecx, [ebp - 0x60]
mov esi, eax
mov byte [ebp - 4], 0x51
call fcn.00401605
push 2
push esi
mov ecx, edi
call fcn.0042a3e5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x50
call fcn.00401605
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x4d
call fcn.00401605
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x44
call fcn.00401605
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x43
call fcn.00401605
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x42
call fcn.00401605
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x41
call fcn.00401605
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x32
call fcn.00401605
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2f
call fcn.00401605
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x1c
call fcn.00401605
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1b
call fcn.00401605
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.00401605
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret